Bug 29768

Summary:	openssl new security issue CVE-2021-4044
Product:	Mageia	Reporter:	David Walser <luigiwalser>
Component:	Security	Assignee:	Guillaume Rousse <guillomovitch>
Status:	RESOLVED FIXED	QA Contact:	Sec team <security>
Severity:	major
Priority:	Normal	CC:	nicolas.salguero
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:	openssl-3.0.0-2.mga9.src.rpm	CVE:
Status comment:	Fixed upstream in 3.0.1
Bug Depends on:	30174
Bug Blocks:

Description David Walser 2021-12-14 22:24:21 CET

OpenSSL has issued an advisory today (December 14):
https://www.openssl.org/news/secadv/20211214.txt

The issue is fixed upstream in 3.0.1.

For some reason, Cauldron still also has openssl-1.1.1l-1.mga9.src.rpm which needs to be removed.

Mageia 8 is not affected (1.1.1m is only a bugfix release).

David Walser 2021-12-14 22:24:31 CET

Status comment: (none) => Fixed upstream in 3.0.1

David Walser 2022-03-15 18:19:18 CET

Depends on: (none) => 30174

Comment 1 Nicolas Salguero 2022-03-16 11:05:18 CET

Hi,

openssl-3.0.2-1.mga9 solves that issue.

Best regards,

Nico.

CC: (none) => nicolas.salguero

Comment 2 David Walser 2022-03-16 14:18:26 CET

Thanks.

Resolution: (none) => FIXED
Status: NEW => RESOLVED