Bug 31853 - openssl new security issue CVE-2023-1255, only for v3.x on Arm
Summary: openssl new security issue CVE-2023-1255, only for v3.x on Arm
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: aarch64 Linux
Priority: Normal minor
Target Milestone: ---
Assignee: Nicolas Salguero
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-05-01 16:38 CEST by David Walser
Modified: 2023-05-02 01:35 CEST (History)
0 users

See Also:
Source RPM: openssl-3.0.8-3.mga9.src.rpm
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description David Walser 2023-05-01 16:38:28 CEST 
OpenSSL has issued an advisory on April 20:
https://www.openssl.org/news/secadv/20230420.txt

Only 3.x is affected (Cauldron) and only on ARM.

The next OpenSSL version will contain the fix.
Comment 1 Lewis Smith 2023-05-01 20:37:23 CEST 
ns80 is the main committer of openssl, so assigning this to you.
Is it worth waiting?

Summary: openssl new security issue CVE-2023-1255 => openssl new security issue CVE-2023-1255, only for v3.x on Arm
Assignee: bugsquad => nicolas.salguero

Comment 2 Nicolas Salguero 2023-05-01 22:47:31 CEST 
Hi,

openssl-3.0.8-3.mga9 already contains the fix for that CVE.

Best regards,

Nico.
Comment 3 David Walser 2023-05-02 01:35:59 CEST 
Thanks.

Status: NEW => RESOLVED
Resolution: (none) => FIXED
Note You need to log in before you can comment on or make changes to this bug.