RHBA-2014:1525 - Bug Fix Advisory

Topic

Updated openssl packages that fix several bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.

Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL), Transport
Layer Security (TLS), and Datagram Transport Layer Security (DTLS) protocols, as
well as a full-strength, general purpose cryptography library.

This update fixes the following bugs:

• Previously, cipher suites based on the single-DES and RC2 algorithms were on

the default list of cipher suites used by the SSL or TLS client and by the
server in the OpenSSL library. This allowed for suboptimal cipher suites to be
negotiated between the OpenSSL client or server and a third party client or
server. In addition, a higher amount of supported cipher suites in the TLS
ClientHello request impaired the inter-operability of the OpenSSL TLS client.
This update removes single-DES-based and RC2-based cipher suites from the
default list of cipher suites, improving the security and compatibility of the
OpenSSL TLS client. (BZ#1057520)

• Cipher suites based on the Triple DES (3DES) algorithm had their bit strengths

erroneously set to 168 bits when running under the SSL or TLS protocols. As a
consequence, they were incorrectly sorted before cipher suites based on the
AES-128 algorithm. This update sets the bit strength of 3DES-based cipher suites
to 128 bits, and they will now be sorted after AES-128-based cipher suites as
expected. (BZ#1056608)

• In TLS client applications that use the SSLv2 protocol, the TLS extension

giving the list of supported Elliptic Curve Cryptography (ECC)-based cipher
suites could not be sent. This caused a TLS connection to a server which used an
ECC-based cipher suite not supported by the OpenSSL client to abort. With this
update, the ECC-based cipher suites are not sent in the SSLv2 ClientHello
request, and TLS connections are no longer aborted in the above circumstances.
(BZ#1090952)

• The TLS extensions that were sent in the Datagram TLS (DTLS) ClientHello

requests did not previously contain the list of the supported ECC-based cipher
suites. As a consequence, the DTLS connections to servers using ECC cipher
suites not supported by the OpenSSL client were aborted. With this update, the
ECC-based cipher suite list is properly sent in the DTLS ClientHello requests,
and DTLS connections are no longer aborted in the above circumstances.
(BZ#1119800)

In addition, this update adds the following enhancements:

• The openssl packages have been enhanced to allow for FIPS-140-2 validation of

the OpenSSL library as a FIPS cryptographic module. (BZ#1002926, BZ#1039105,
BZ#1002930, BZ#1015056)

• When connecting to a server using ECDHE-based or DHE-based cipher suites, the

s_client utility now reports the size of ECDHE and DHE parameters selected by
the server. This allows for easy verification whether the used configuration set
is secure. (BZ#1057715)

Users of openssl are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements. For the update to take effect, all
services linked to the OpenSSL library must be restarted, or the system
rebooted.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 1015056 - openssl speed reports errors during execution in fips mode
• BZ - 1039105 - Disable RSA and DSA key generation for keys <2048 bits in the FIPS mode
• BZ - 1057715 - s_client utility doesn't report the size of used DHE and ECDHE parameters selected by server
• BZ - 1065328 - openssl reports generation of 2048 bit key while it generates 1024 bit key [rhel-6]
• BZ - 1090952 - Do not send ECC ciphersuites in SSLv2 client hello
• BZ - 1100819 - BIO_f_cipher does not test for EVP_CipherUpdate failures
• BZ - 1105567 - Properly detect HMAC integrity check failure if the .hmac file is empty [rhel-6]
• BZ - 1106407 - Fix for CVE-2014-0224 breaks EAP-FAST/wpa_supplicant TLS session resumption.
• BZ - 1119800 - ECC supported curves list extension is missing in DTLS1 client hello

CVEs

(none)

References

(none)