Errata des produits Red Hat RHSA-2023:1405 - Security Advisory
Publié :
2023-03-22
Mis à jour :
2023-03-22

RHSA-2023:1405 - Security Advisory

Synopsis

Important: openssl security update

Type / Sévérité

Security Advisory: Important

Analyse des correctifs dans Red Hat Insights

Identifiez et remédiez aux systèmes concernés par cette alerte.

Voir les systèmes concernés

Sujet

An update for openssl is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

  • openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286)
  • openssl: timing attack in RSA Decryption implementation (CVE-2022-4304)
  • openssl: double free after calling PEM_read_bio_ex (CVE-2022-4450)
  • openssl: use-after-free following BIO_new_NDEF (CVE-2023-0215)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.

Produits concernés

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64

Correctifs

  • BZ - 2164440 - CVE-2023-0286 openssl: X.400 address type confusion in X.509 GeneralName
  • BZ - 2164487 - CVE-2022-4304 openssl: timing attack in RSA Decryption implementation
  • BZ - 2164492 - CVE-2023-0215 openssl: use-after-free following BIO_new_NDEF
  • BZ - 2164494 - CVE-2022-4450 openssl: double free after calling PEM_read_bio_ex

Red Hat Enterprise Linux for x86_64 8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
x86_64
openssl-1.1.1k-9.el8_7.x86_64.rpm SHA-256: ef476eb36d94df6a2625364169ae48c85cd040b473a4d6c8bc10455a45535b2c
openssl-debuginfo-1.1.1k-9.el8_7.i686.rpm SHA-256: 1a144f60a936d54db04217b5a0227791107f4659fd7e8b63ea1871fc3c229b9d
openssl-debuginfo-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 704661ad29e6018e5e88d04d870a37f3968bd7b377535c62f6e4e8a664bd937a
openssl-debugsource-1.1.1k-9.el8_7.i686.rpm SHA-256: d60c7fab8cf12b7959d1f98b1735daa997372f0eee5d113892056fb82cbd6bd6
openssl-debugsource-1.1.1k-9.el8_7.x86_64.rpm SHA-256: e57b24493df9aae8af2518ff79241b5c8e961c36ab4d7c36017fa861d1237777
openssl-devel-1.1.1k-9.el8_7.i686.rpm SHA-256: 5aaeadf179b270b0eadc3dc9c1e107aa5a9b0f205ca81a0807b23e7c62c1c812
openssl-devel-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 00ade765ab49f06ee61929bf94ab8636b7f5007e9438a1e920d68db964715a59
openssl-libs-1.1.1k-9.el8_7.i686.rpm SHA-256: 28dc2c167f1d417ef843e57dffd5e2f6921a8599847f98805cecff45b12c2890
openssl-libs-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 91fc219ef2fabee25069ebb5d119463d510f9794fd42e94fe5f2af43cfa9c95c
openssl-libs-debuginfo-1.1.1k-9.el8_7.i686.rpm SHA-256: 9733ea840d91c3f2956f3f36088fa7a8c3d9d155dbc1fe01d4084d0cf26d6630
openssl-libs-debuginfo-1.1.1k-9.el8_7.x86_64.rpm SHA-256: c87662af7a7d059707844047cdb7429adc0e7973e707d2caebed9b50512b8fee
openssl-perl-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 0ff606b23a716cf95770adc5e25f73ed80a775f8d9a1e52cb94d952cae4f075e

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
x86_64
openssl-1.1.1k-9.el8_7.x86_64.rpm SHA-256: ef476eb36d94df6a2625364169ae48c85cd040b473a4d6c8bc10455a45535b2c
openssl-debuginfo-1.1.1k-9.el8_7.i686.rpm SHA-256: 1a144f60a936d54db04217b5a0227791107f4659fd7e8b63ea1871fc3c229b9d
openssl-debuginfo-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 704661ad29e6018e5e88d04d870a37f3968bd7b377535c62f6e4e8a664bd937a
openssl-debugsource-1.1.1k-9.el8_7.i686.rpm SHA-256: d60c7fab8cf12b7959d1f98b1735daa997372f0eee5d113892056fb82cbd6bd6
openssl-debugsource-1.1.1k-9.el8_7.x86_64.rpm SHA-256: e57b24493df9aae8af2518ff79241b5c8e961c36ab4d7c36017fa861d1237777
openssl-devel-1.1.1k-9.el8_7.i686.rpm SHA-256: 5aaeadf179b270b0eadc3dc9c1e107aa5a9b0f205ca81a0807b23e7c62c1c812
openssl-devel-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 00ade765ab49f06ee61929bf94ab8636b7f5007e9438a1e920d68db964715a59
openssl-libs-1.1.1k-9.el8_7.i686.rpm SHA-256: 28dc2c167f1d417ef843e57dffd5e2f6921a8599847f98805cecff45b12c2890
openssl-libs-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 91fc219ef2fabee25069ebb5d119463d510f9794fd42e94fe5f2af43cfa9c95c
openssl-libs-debuginfo-1.1.1k-9.el8_7.i686.rpm SHA-256: 9733ea840d91c3f2956f3f36088fa7a8c3d9d155dbc1fe01d4084d0cf26d6630
openssl-libs-debuginfo-1.1.1k-9.el8_7.x86_64.rpm SHA-256: c87662af7a7d059707844047cdb7429adc0e7973e707d2caebed9b50512b8fee
openssl-perl-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 0ff606b23a716cf95770adc5e25f73ed80a775f8d9a1e52cb94d952cae4f075e

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
s390x
openssl-1.1.1k-9.el8_7.s390x.rpm SHA-256: c1211d9cae2265f83db206ee40d6d5f8d83bf473b03425202dd4ded0b09de13d
openssl-debuginfo-1.1.1k-9.el8_7.s390x.rpm SHA-256: 28cc7693ea5358001ca046e9f0a3649f648a8fc1cbcb3e60a2f5b29fe29e285c
openssl-debugsource-1.1.1k-9.el8_7.s390x.rpm SHA-256: e860de279990d6d51c470d40993a95c414a9606a0f583c6e91c74f54052292b2
openssl-devel-1.1.1k-9.el8_7.s390x.rpm SHA-256: 94f7ef613936ce0888e6c5984dd601320d364092354dcc5d9d033643eedc6b70
openssl-libs-1.1.1k-9.el8_7.s390x.rpm SHA-256: 355d5282ffd41cb7637e5df39fd8ba0df8d1be64784fa3d9cd74f5fff551ecf3
openssl-libs-debuginfo-1.1.1k-9.el8_7.s390x.rpm SHA-256: 787f4420db37b2bac29613c3bc7883c8d194e37fad55ced4db9669061e540c41
openssl-perl-1.1.1k-9.el8_7.s390x.rpm SHA-256: c34203ae776a09256bf8d9845aa8d49a67c7e0b7436af49a77c2330dd4790da2

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
s390x
openssl-1.1.1k-9.el8_7.s390x.rpm SHA-256: c1211d9cae2265f83db206ee40d6d5f8d83bf473b03425202dd4ded0b09de13d
openssl-debuginfo-1.1.1k-9.el8_7.s390x.rpm SHA-256: 28cc7693ea5358001ca046e9f0a3649f648a8fc1cbcb3e60a2f5b29fe29e285c
openssl-debugsource-1.1.1k-9.el8_7.s390x.rpm SHA-256: e860de279990d6d51c470d40993a95c414a9606a0f583c6e91c74f54052292b2
openssl-devel-1.1.1k-9.el8_7.s390x.rpm SHA-256: 94f7ef613936ce0888e6c5984dd601320d364092354dcc5d9d033643eedc6b70
openssl-libs-1.1.1k-9.el8_7.s390x.rpm SHA-256: 355d5282ffd41cb7637e5df39fd8ba0df8d1be64784fa3d9cd74f5fff551ecf3
openssl-libs-debuginfo-1.1.1k-9.el8_7.s390x.rpm SHA-256: 787f4420db37b2bac29613c3bc7883c8d194e37fad55ced4db9669061e540c41
openssl-perl-1.1.1k-9.el8_7.s390x.rpm SHA-256: c34203ae776a09256bf8d9845aa8d49a67c7e0b7436af49a77c2330dd4790da2

Red Hat Enterprise Linux for Power, little endian 8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
ppc64le
openssl-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 96bd91b7dd0cbddf9778259c4c31fbc4c6c6a645d77d4277d39195efaa6dea42
openssl-debuginfo-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 9c9daf1d5c7619fb0afa1b5302a82023cc81cddcdf63ca65b5bbf73d93f6a1d5
openssl-debugsource-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: fbb53536b471140fb1411875aec2d904c75edb8a7a6da8dd6613b59ccbc95f6f
openssl-devel-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 168a0a95d70b93afc9956b72f97b9a31dcaf01db0533fd77df01efbaf1abfc1f
openssl-libs-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 3c6ed4ea3a5529fcd4b39d2065f1cae9e73c483ebdc11fadbb0e2a6d87c0f742
openssl-libs-debuginfo-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: a0a37794b09d0a32a73a020aedc54373c7aecaad53bb283f06c94685a341faed
openssl-perl-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: b07a7e7ee6f1000c43f2b771284a55287c87828be9c7d7b9db06ab3534815aef

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
ppc64le
openssl-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 96bd91b7dd0cbddf9778259c4c31fbc4c6c6a645d77d4277d39195efaa6dea42
openssl-debuginfo-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 9c9daf1d5c7619fb0afa1b5302a82023cc81cddcdf63ca65b5bbf73d93f6a1d5
openssl-debugsource-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: fbb53536b471140fb1411875aec2d904c75edb8a7a6da8dd6613b59ccbc95f6f
openssl-devel-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 168a0a95d70b93afc9956b72f97b9a31dcaf01db0533fd77df01efbaf1abfc1f
openssl-libs-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 3c6ed4ea3a5529fcd4b39d2065f1cae9e73c483ebdc11fadbb0e2a6d87c0f742
openssl-libs-debuginfo-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: a0a37794b09d0a32a73a020aedc54373c7aecaad53bb283f06c94685a341faed
openssl-perl-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: b07a7e7ee6f1000c43f2b771284a55287c87828be9c7d7b9db06ab3534815aef

Red Hat Enterprise Linux Server - TUS 8.8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
x86_64
openssl-1.1.1k-9.el8_7.x86_64.rpm SHA-256: ef476eb36d94df6a2625364169ae48c85cd040b473a4d6c8bc10455a45535b2c
openssl-debuginfo-1.1.1k-9.el8_7.i686.rpm SHA-256: 1a144f60a936d54db04217b5a0227791107f4659fd7e8b63ea1871fc3c229b9d
openssl-debuginfo-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 704661ad29e6018e5e88d04d870a37f3968bd7b377535c62f6e4e8a664bd937a
openssl-debugsource-1.1.1k-9.el8_7.i686.rpm SHA-256: d60c7fab8cf12b7959d1f98b1735daa997372f0eee5d113892056fb82cbd6bd6
openssl-debugsource-1.1.1k-9.el8_7.x86_64.rpm SHA-256: e57b24493df9aae8af2518ff79241b5c8e961c36ab4d7c36017fa861d1237777
openssl-devel-1.1.1k-9.el8_7.i686.rpm SHA-256: 5aaeadf179b270b0eadc3dc9c1e107aa5a9b0f205ca81a0807b23e7c62c1c812
openssl-devel-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 00ade765ab49f06ee61929bf94ab8636b7f5007e9438a1e920d68db964715a59
openssl-libs-1.1.1k-9.el8_7.i686.rpm SHA-256: 28dc2c167f1d417ef843e57dffd5e2f6921a8599847f98805cecff45b12c2890
openssl-libs-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 91fc219ef2fabee25069ebb5d119463d510f9794fd42e94fe5f2af43cfa9c95c
openssl-libs-debuginfo-1.1.1k-9.el8_7.i686.rpm SHA-256: 9733ea840d91c3f2956f3f36088fa7a8c3d9d155dbc1fe01d4084d0cf26d6630
openssl-libs-debuginfo-1.1.1k-9.el8_7.x86_64.rpm SHA-256: c87662af7a7d059707844047cdb7429adc0e7973e707d2caebed9b50512b8fee
openssl-perl-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 0ff606b23a716cf95770adc5e25f73ed80a775f8d9a1e52cb94d952cae4f075e

Red Hat Enterprise Linux for ARM 64 8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
aarch64
openssl-1.1.1k-9.el8_7.aarch64.rpm SHA-256: 80544f816ba10eaecd89d4769bff26f4676c7b75bda403e69dc23985f5632780
openssl-debuginfo-1.1.1k-9.el8_7.aarch64.rpm SHA-256: cd597b3de7caa820b7f63467aa59ee92336cadaa491c8d0e67173ed40d3cf448
openssl-debugsource-1.1.1k-9.el8_7.aarch64.rpm SHA-256: b9f696505c0ecda1fc7b93e050f83fee0a79f918b9e9e4f431da3337ab1109c2
openssl-devel-1.1.1k-9.el8_7.aarch64.rpm SHA-256: c8aad004ad9906d8a8dc3ff0701f170d4053a6ed56f545827bf35a46f10fbeb3
openssl-libs-1.1.1k-9.el8_7.aarch64.rpm SHA-256: d32f03f7c14789e7f4fd88e59eacd2fa73ee4141d74ef5e3e3d453effdab4d17
openssl-libs-debuginfo-1.1.1k-9.el8_7.aarch64.rpm SHA-256: 8de090b494bd29e9fe6523c1ef85d1f981d019b4eb96bb2be0319e252d8897ba
openssl-perl-1.1.1k-9.el8_7.aarch64.rpm SHA-256: bc4768e05e12c74153444cfc5f712e3287d505efb1bac7dc18725ae4b8abc6fd

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
aarch64
openssl-1.1.1k-9.el8_7.aarch64.rpm SHA-256: 80544f816ba10eaecd89d4769bff26f4676c7b75bda403e69dc23985f5632780
openssl-debuginfo-1.1.1k-9.el8_7.aarch64.rpm SHA-256: cd597b3de7caa820b7f63467aa59ee92336cadaa491c8d0e67173ed40d3cf448
openssl-debugsource-1.1.1k-9.el8_7.aarch64.rpm SHA-256: b9f696505c0ecda1fc7b93e050f83fee0a79f918b9e9e4f431da3337ab1109c2
openssl-devel-1.1.1k-9.el8_7.aarch64.rpm SHA-256: c8aad004ad9906d8a8dc3ff0701f170d4053a6ed56f545827bf35a46f10fbeb3
openssl-libs-1.1.1k-9.el8_7.aarch64.rpm SHA-256: d32f03f7c14789e7f4fd88e59eacd2fa73ee4141d74ef5e3e3d453effdab4d17
openssl-libs-debuginfo-1.1.1k-9.el8_7.aarch64.rpm SHA-256: 8de090b494bd29e9fe6523c1ef85d1f981d019b4eb96bb2be0319e252d8897ba
openssl-perl-1.1.1k-9.el8_7.aarch64.rpm SHA-256: bc4768e05e12c74153444cfc5f712e3287d505efb1bac7dc18725ae4b8abc6fd

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
ppc64le
openssl-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 96bd91b7dd0cbddf9778259c4c31fbc4c6c6a645d77d4277d39195efaa6dea42
openssl-debuginfo-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 9c9daf1d5c7619fb0afa1b5302a82023cc81cddcdf63ca65b5bbf73d93f6a1d5
openssl-debugsource-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: fbb53536b471140fb1411875aec2d904c75edb8a7a6da8dd6613b59ccbc95f6f
openssl-devel-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 168a0a95d70b93afc9956b72f97b9a31dcaf01db0533fd77df01efbaf1abfc1f
openssl-libs-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: 3c6ed4ea3a5529fcd4b39d2065f1cae9e73c483ebdc11fadbb0e2a6d87c0f742
openssl-libs-debuginfo-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: a0a37794b09d0a32a73a020aedc54373c7aecaad53bb283f06c94685a341faed
openssl-perl-1.1.1k-9.el8_7.ppc64le.rpm SHA-256: b07a7e7ee6f1000c43f2b771284a55287c87828be9c7d7b9db06ab3534815aef

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8

SRPM
openssl-1.1.1k-9.el8_7.src.rpm SHA-256: ec64b1757cf79bc53c5870b31cd899e88c27a168a8f9506b16bc8badb1d58cac
x86_64
openssl-1.1.1k-9.el8_7.x86_64.rpm SHA-256: ef476eb36d94df6a2625364169ae48c85cd040b473a4d6c8bc10455a45535b2c
openssl-debuginfo-1.1.1k-9.el8_7.i686.rpm SHA-256: 1a144f60a936d54db04217b5a0227791107f4659fd7e8b63ea1871fc3c229b9d
openssl-debuginfo-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 704661ad29e6018e5e88d04d870a37f3968bd7b377535c62f6e4e8a664bd937a
openssl-debugsource-1.1.1k-9.el8_7.i686.rpm SHA-256: d60c7fab8cf12b7959d1f98b1735daa997372f0eee5d113892056fb82cbd6bd6
openssl-debugsource-1.1.1k-9.el8_7.x86_64.rpm SHA-256: e57b24493df9aae8af2518ff79241b5c8e961c36ab4d7c36017fa861d1237777
openssl-devel-1.1.1k-9.el8_7.i686.rpm SHA-256: 5aaeadf179b270b0eadc3dc9c1e107aa5a9b0f205ca81a0807b23e7c62c1c812
openssl-devel-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 00ade765ab49f06ee61929bf94ab8636b7f5007e9438a1e920d68db964715a59
openssl-libs-1.1.1k-9.el8_7.i686.rpm SHA-256: 28dc2c167f1d417ef843e57dffd5e2f6921a8599847f98805cecff45b12c2890
openssl-libs-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 91fc219ef2fabee25069ebb5d119463d510f9794fd42e94fe5f2af43cfa9c95c
openssl-libs-debuginfo-1.1.1k-9.el8_7.i686.rpm SHA-256: 9733ea840d91c3f2956f3f36088fa7a8c3d9d155dbc1fe01d4084d0cf26d6630
openssl-libs-debuginfo-1.1.1k-9.el8_7.x86_64.rpm SHA-256: c87662af7a7d059707844047cdb7429adc0e7973e707d2caebed9b50512b8fee
openssl-perl-1.1.1k-9.el8_7.x86_64.rpm SHA-256: 0ff606b23a716cf95770adc5e25f73ed80a775f8d9a1e52cb94d952cae4f075e

Le contact Red Hat Security est secalert@redhat.com. Plus d'infos contact à https://access.redhat.com/security/team/contact/.