Описание
ELSA-2026-50345: openssl security fix update (MODERATE)
[3.5.5-3.0.1]
- Replace upstream references in fips man pages [Orabug: 35824276]
- Update additional upstream references
- Add FIPS package change: add fips suffix to Release and set Epoch to 10 [Orabug: 35824276]
- Update FIPS module name [Orabug: 35824276]
- Enable openssl-fips-provider dependency [Orabug: 36504822]
- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
- Replace upstream references [Orabug: 34340177]
[1:3.5.5-3]
- Fix CVE-2026-28390 Resolves: RHEL-165870
[1:3.5.5-2]
- Fix CVE-2026-31790 Resolves: RHEL-161586
[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
openssl
3.5.5-3.0.1.el9_8_fips
openssl-devel
3.5.5-3.0.1.el9_8_fips
openssl-libs
3.5.5-3.0.1.el9_8_fips
openssl-perl
3.5.5-3.0.1.el9_8_fips
Oracle Linux x86_64
openssl
3.5.5-3.0.1.el9_8_fips
openssl-devel
3.5.5-3.0.1.el9_8_fips
openssl-libs
3.5.5-3.0.1.el9_8_fips
openssl-perl
3.5.5-3.0.1.el9_8_fips
Связанные CVE
Связанные уязвимости
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryp...
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.
Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo
Issue summary: During processing of a crafted CMS EnvelopedData messag ...