Red Hat Security Advisory 2024-0500-03 - An update for openssl is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
79ea5b662faf0d46f123482b6437eccc01739ac46cb2ae34fb71fc9700d2edbd
Red Hat Security Advisory 2024-0310-03 - An update for openssl is now available for Red Hat Enterprise Linux 9.
d0396378dbfbc86737348e88da6a5be9ca8812adb6f269f14e35deccf3f3cee5
Debian Linux Security Advisory 5532-1 - Tony Battersby reported that incorrect cipher key and IV length processing in OpenSSL, a Secure Sockets Layer toolkit, may result in loss of confidentiality for some symmetric cipher modes.
0805665325be039bebf1106b9e5ef924fa2a8fe8807bc8c416268fe331d060a2
Ubuntu Security Notice 6450-1 - Tony Battersby discovered that OpenSSL incorrectly handled key and initialization vector lengths. This could lead to truncation issues and result in loss of confidentiality for some symmetric cipher modes. Juerg Wullschleger discovered that OpenSSL incorrectly handled the AES-SIV cipher. This could lead to empty data entries being ignored, resulting in certain applications being misled. This issue only affected Ubuntu 22.04 LTS and Ubuntu 23.04.
2d9459c9594f7dcc383dafcaff6092d57b63e811ab043a65d9d9516541186813
OpenSSL Security Advisory 20231024 - A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead to potential truncation or overruns during the initialisation of some symmetric ciphers.
f4d3485a23985abf9c4d8cc118c959af0f23c7e3e3cd388642bad93425715bd6