Red Hat Hybrid Cloud Console ▾
🌳 Default ▾
🔍
Ask Red Hat
CVE-2024-6345 is a high-severity vulnerability in OpenSSL 3.0.x affecting RHEL 8 and RHEL 9. The patched version is openssl-3.0.7-27.el9 for RHEL 9 and openssl-3.0.7-27.el8 for RHEL 8. Apply the erratum RHSA-2024:6345 to remediate. 📄 KB#7045231

Affected packages: openssl, openssl-libs, openssl-devel. Systems with custom kernel modules may require dependency resolution before patching. 📄 KB#7045298
Advisories
⚠
RHSA-2024:6345 — OpenSSL security update
Critical OpenSSL update for RHEL 8 and RHEL 9 — fixes CVE-2024-6345. Errata issued Oct 2024.
Critical
⚠
RHSA-2024:6290 — Related OpenSSL advisory
Important OpenSSL errata for RHEL 9.2 EUS — superseded by RHSA-2024:6345.
Important
Knowledge Base
📘
How to apply OpenSSL security patches on RHEL 9
Step-by-step guide for applying openssl-3.0.7-27 errata. Includes dependency resolution for custom kernel modules.
📘
CVE-2024-6345 impact assessment for RHEL
Vulnerability details, CVSS score, affected configurations, and mitigation guidance.
Services
⬇
Downloads — RHEL 9 patched packages
Download the patched OpenSSL RPM, Boot ISO, or minimal ISO for your entitled RHEL products.
Service
🛡
Vulnerability — View in Insights
See affected systems and remediation status for CVE-2024-6345 across your fleet.
Service
View all results for "CVE-2024-6345" → 6 results across 3 categories
PS
← Back to main screen

Hi, Priya

Welcome to your Hybrid Cloud Console.

Red Hat Enterprise Linux

Proactively assess, secure, and stabilize business-critical services.

Red Hat OpenShift

Build, run, and scale container-based applications.

Ansible Automation

Create, share, and manage automations across teams.

Recently Visited

Quick access to your recent services.

Vision Screen 1 of 5 — Masthead AI Search · Beat 1: Search that answers