RHBA-2013:0443 - Bug Fix Advisory

Topic

Updated openssl packages that fix four bugs are now available for Red Hat
Enterprise Linux 6.

Description

The openssl packages provide a toolkit that implements the Secure Sockets Layer
(SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength
general-purpose cryptography library.

This update fixes the following bugs:

• Prior to this update, the pkgconfig configuration files of OpenSSL libraries

contained an invalid libdir value. This update update modifies the underlying
code to use the correct libdir value. (BZ#770872)

• Prior to this update, the openssl function "BIO_new_accept()" failed to listen

on IPv4 addresses when this function was invoked with the "*:port" parameter. As
a consequence, users failed to connect via IPv4 to a server that used this
function call with the "*:port" parameter. This update modifies this function to
listen on IPv4 address with this parameter as expected. (BZ#800088)

• Prior to this update, encrypted private key files that were saved in FIPS mode

were corrupted because the PEM encryption uses hash algorithms that are not
available in FIPS mode. This update uses the PKCS#8 encrypted format to write
private keys to files in FIPS mode. This file format uses only algorithms that
are available in FIPS mode. (BZ#841645)

• The manual page for "rand", the pseudo-random number generator, is named

"sslrand" to avoid conflict with the manual page for the C library "rand()"
function. This update provides the "openssl" manual page update to reflect this.
(BZ#841645)

All users of openssl are advised to upgrade to these updated packages, which fix
these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 770872 - openssl.pc contains invalid libdir
• BZ - 812348 - Unable to change ssh key password while in FIPS mode (fips=1)
• BZ - 841645 - RHEL6 is missing "rand" man page

CVEs

(none)

References

(none)