[ol7_optional_latest] openssl-static-1:1.0.2k-24.el7_9.aarch64

Name:	openssl-static
Epoch:	1
Version:	1.0.2k
Release:	24.el7_9
Architecture:	aarch64
Group:	Development/Libraries
Size:	5174802
License:	OpenSSL
RPM:	openssl-static-1.0.2k-24.el7_9.aarch64.rpm
Source RPM:	openssl-1.0.2k-24.el7_9.src.rpm
Build Date:	Tue Jan 18 2022
Build Host:	build-ol7-aarch64.oracle.com
Vendor:	Oracle America
URL:	http://www.openssl.org/
Summary:	Libraries for static linking of applications which will use OpenSSL
Description:	OpenSSL is a toolkit for supporting cryptography. The openssl-static package contains static libraries needed for static linking of applications which support various cryptographic algorithms and protocols.

Changelog (Show File list) (Show related packages)

Thu Jan 13 2022 Sahana Prasad <sahana@redhat.com> 1.0.2k-24

- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993

Sat Nov 20 2021 Sahana Prasad <sahana@redhat.com> 1.0.2k-23

- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054

Wed Sep 01 2021 Sahana Prasad <sahana@redhat.com> 1.0.2k-22

- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126

Fri Dec 04 2020 Sahana Prasad <sahana@redhat.com> 1.0.2k-21

- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch

Fri Dec 04 2020 Sahana Prasad <sahana@redhat.com> 1.0.2k-20

- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference

Tue Apr 09 2019 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-19

- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)

Fri Apr 05 2019 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18

- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One & done EM side channel (#1619558)

Wed Feb 06 2019 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-17

- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction

Tue Aug 14 2018 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16

- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)

Tue Jun 19 2018 Tomáš Mráz <tmraz@redhat.com> 1.0.2k-14
```
- ppc64le is not multilib architecture (#1585004)
```