[ol8_baseos_latest] openssl-1:1.1.1k-14.el8_10.x86_64

Name:	openssl
Epoch:	1
Version:	1.1.1k
Release:	14.el8_10
Architecture:	x86_64
Group:	Unspecified
Size:	1185632
License:	OpenSSL and ASL 2.0
RPM:	openssl-1.1.1k-14.el8_10.x86_64.rpm
Source RPM:	openssl-1.1.1k-14.el8_10.src.rpm
Build Date:	Thu Jan 08 2026
Build Host:	build-ol8-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.openssl.org/
Summary:	Utilities from the general purpose cryptography library with TLS implementation
Description:	The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols.

Changelog (Show File list) (Show related packages)

Mon Dec 08 2025 Nikita Sanjay Patwa <npatwa@redhat.com> - 1:1.1.1k-14

- Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap
  Fix CVE-2025-9230
  Resolves: RHEL-128613
- Fix bug for ticket_lifetime_hint exceed issue
  Resolves: RHEL-119891

Mon Sep 16 2024 Maurizio Barbaro <mbarbaro@redhat.com> - 1:1.1.1k-13

- Backport fix SSL_select_next proto from OpenSSL 3.2  
  Fix CVE-2024-5535 
  Resolves: RHEL-45654

Thu Nov 30 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-12

- Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
  (a proper fix for CVE-2020-25659)
  Resolves: RHEL-17696

Wed Nov 15 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-11

- Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
  excessively long X9.42 DH keys or parameters may be very slow
  Resolves: RHEL-16538

Thu Oct 19 2023 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-10

- Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
  Resolves: RHEL-14245
- Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
  Resolves: RHEL-14239

Wed Feb 08 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9

- Fixed Timing Oracle in RSA Decryption
  Resolves: CVE-2022-4304
- Fixed Double free after calling PEM_read_bio_ex
  Resolves: CVE-2022-4450
- Fixed Use-after-free following BIO_new_NDEF
  Resolves: CVE-2023-0215
- Fixed X.400 address type confusion in X.509 GeneralName
  Resolves: CVE-2023-0286

Thu Jul 21 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-8
```
- Fix no-ec build
  Resolves: rhbz#2071020
```

Tue Jul 05 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7

- Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097
- Update expired certificates used in the testsuite
  Resolves: rhbz#2092462
- Fix CVE-2022-1292: openssl: c_rehash script allows command injection
  Resolves: rhbz#2090372
- Fix CVE-2022-2068: the c_rehash script allows command injection
  Resolves: rhbz#2098279

Wed Mar 23 2022 Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6

- Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Resolves: rhbz#2067146

Tue Nov 16 2021 Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5

- Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#2005402