Golang FIPS OpenSSL CVE-2024-9355 Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-9355 2. Vulnerability Description: A vulnerability was discovered in Golang FIPS OpenSSL, allowing malicious users to return zeroed buffers in FIPS mode. This could lead to incorrect matching between asymmetric hashes and may have subsequent impacts in the Go TLS stack. 3. Affected Versions: golang-1.21.13-3.el9_4 and golang-1.21.13-2.module+el8.10.0+22329+6cd5c9c6 4. Fix Status: Patches RHBA-2024:7521 and RHSA-2024:7502 have been released. 5. Report Date: September 30, 2024 6. Fix Date: October 2, 2024 7. Reporter: OSIDB Bzimport 8. Affected Component: vulnerability 9. Priority: medium 10. Severity: medium 11. Affected Platform: Linux 12. Affected Version: unspecified 13. Affected Hardware: All 14. Affected Operating System: Linux 15. Affected Priority: medium 16. Affected Severity: medium 17. Affected Milestone: --- 18. Affected Team: Product Security DevOps Team 19. Affected Documentation Contact: Product Security DevOps Team 20. Affected URL: Not provided 21. Affected Whiteboard: Not provided 22. Affected Dependencies: Not provided 23. Affected Blocks: Not provided 24. Affected Environment: Not provided 25. Affected Last Closed Date: Not provided 26. Affected Release Date: Not provided 27. Affected Release Date: Not provided 28. Affected Release Date: Not provided 29. Affected Release Date: Not provided 30. Affected Release Date: Not provided 31. Affected Release Date: Not provided 32. Affected Release Date: Not provided 33. Affected Release Date: Not provided 34. Affected Release Date: Not provided 35. Affected Release Date: Not provided 36. Affected Release Date: Not provided 37. Affected Release Date: Not provided 38. Affected Release Date: Not provided 39. Affected Release Date: Not provided 40. Affected Release Date: Not provided 41. Affected Release Date: Not provided 42. Affected Release Date: Not provided 43. Affected Release Date: Not provided 44. Affected Release Date: Not provided 45. Affected Release Date: Not provided 46. Affected Release Date: Not provided 47. Affected Release Date: Not provided 48. Affected Release Date: Not provided 49. Affected Release Date: Not provided 50. Affected Release Date: Not provided 51. Affected Release Date: Not provided 52. Affected Release Date: Not provided 53. Affected Release Date: Not provided 54. Affected Release Date: Not provided 55. Affected Release Date: Not provided 56. Affected Release Date: Not provided 57. Affected Release Date: Not provided 58. Affected Release Date: Not provided 59. Affected Release Date: Not provided 60. Affected Release Date: Not provided 61. Affected Release Date: Not provided 62. Affected Release Date: Not provided 63. Affected Release Date: Not provided 64. Affected Release Date: Not provided 65. Affected Release Date: Not provided 66. Affected Release Date: Not provided 67. Affected Release Date: Not provided 68. Affected Release Date: Not provided 69. Affected Release Date: Not provided 70. Affected Release Date: Not provided 71. Affected Release Date: Not provided 72. Affected Release Date: Not provided 73. Affected Release Date: Not provided 74. Affected Release Date: Not provided 75. Affected Release Date: Not provided 76. Affected Release Date: Not provided 77. Affected Release Date: Not provided 78. Affected Release Date: Not provided 79. Affected Release Date: Not provided 80. Affected Release Date: Not provided 81. Affected Release Date: Not provided 82. Affected Release Date: Not provided 83. Affected Release Date: Not provided 84. Affected Release Date: Not provided 85. Affected Release Date: Not provided 86. Affected Release Date: Not provided 87. Affected Release Date: Not provided 88. Affected Release Date: Not provided 89. Affected Release Date: Not provided 90. Affected Release Date: Not provided 91. Affected Release Date: Not provided 92. Affected Release Date: Not provided 93. Affected Release Date: Not provided 94. Affected Release Date: Not provided 95. Affected Release Date: Not provided 96. Affected Release Date: Not provided 97. Affected Release Date: Not provided 98. Affected Release Date: Not provided 99. Affected Release Date: Not provided 100. Affected Release Date: Not provided 101. Affected Release Date: Not provided 102. Affected Release Date: Not provided 103. Affected Release Date: Not provided 104. Affected Release Date: Not provided 105. Affected Release Date: Not provided 106. Affected Release Date: Not provided 107. Affected Release Date: Not provided 108. Affected Release Date: Not provided 109. Affected Release Date: Not provided 110. Affected Release Date: Not provided 111. Affected Release Date: Not provided 112. Affected Release Date: Not provided 113. Affected Release Date: Not provided 114. Affected Release Date: Not provided 115. Affected Release Date: Not provided 116. Affected Release Date: Not provided 117. Affected Release Date: Not provided 11

Goal Reached Thanks to every supporter — we hit 100%!

Golang FIPS OpenSSL CVE-2024-9355 Vulnerability Advisory