Open ssl 3.2.3 and later support plan is?

az1minami · February 21, 2025, 8:55am

Rocky linux support this Issues , will Rocky 9.5 or later ?
9.4 will release ? this case update repository ?

[Vulnerability] OpenSSL 3.2.0 < 3.2.3 Vulnerability #66858

tjdoyle · February 21, 2025, 9:07am

Hi,

The fix has been backported:-

rpm -q --changelog openssl |grep CVE-2024-5535

Regards Tom.

az1minami · February 21, 2025, 9:37am

Thanks We found these RPM message .
rpm -q --changelog openssl |grep CVE-2024-5535

regards!

jlehtone · February 21, 2025, 10:05am

Whenever your “scanner” thinks it sees a vulnerability, do:

Remember what Red Hat says about backporting and scanners: What is backporting and how does it affect Red Hat Enterprise Linux? - Red Hat Customer Portal
What affects RHEL, affects Rocky Linux
Check what Red Hat says about the CVE. For example: cve-details
Do dnf upand then check what the rpm -q --changelog for a package on your system does reveal