CESA-2021:3798 -- centos 7 opensslID: oval:org.secpod.oval:def:205899 | Date: (C)2021-11-23 (M)2023-12-20 |
Class: PATCH | Family: unix |
OpenSSL is a toolkit that implements the Secure Sockets Layer and Transport Layer Security protocols, as well as a full-strength general-purpose cryptography library. Security Fix: * openssl: integer overflow in CipherUpdate * openssl: NULL pointer dereference in X509_issuer_and_serial_hash For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section.