An update for openssl is now available for openEuler-24.03-LTS-SP2 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2025-2326 Final 1.0 1.0 2025-09-26 Initial 2025-09-26 2025-09-26 openEuler SA Tool V1.0 2025-09-26 openssl security update An update for openssl is now available for openEuler-24.03-LTS-SP2 The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL tookit and its related documentation. Security Fix(es): Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key.(CVE-2024-41996) An update for openssl is now available for openEuler-24.03-LTS-SP2. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High openssl https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2326 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-41996 https://nvd.nist.gov/vuln/detail/CVE-2024-41996 openEuler-24.03-LTS-SP2 openssl-3.0.12-22.oe2403sp2.aarch64.rpm openssl-debuginfo-3.0.12-22.oe2403sp2.aarch64.rpm openssl-debugsource-3.0.12-22.oe2403sp2.aarch64.rpm openssl-devel-3.0.12-22.oe2403sp2.aarch64.rpm openssl-libs-3.0.12-22.oe2403sp2.aarch64.rpm openssl-perl-3.0.12-22.oe2403sp2.aarch64.rpm openssl-3.0.12-22.oe2403sp2.src.rpm openssl-3.0.12-22.oe2403sp2.x86_64.rpm openssl-debuginfo-3.0.12-22.oe2403sp2.x86_64.rpm openssl-debugsource-3.0.12-22.oe2403sp2.x86_64.rpm openssl-devel-3.0.12-22.oe2403sp2.x86_64.rpm openssl-libs-3.0.12-22.oe2403sp2.x86_64.rpm openssl-perl-3.0.12-22.oe2403sp2.x86_64.rpm openssl-help-3.0.12-22.oe2403sp2.noarch.rpm Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key. 2025-09-26 CVE-2024-41996 openEuler-24.03-LTS-SP2 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H openssl security update 2025-09-26 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2326