RHBA-2015:0478 - Bug Fix Advisory

Topic

Updated openssl packages that fix two bugs and add various enhancements are now
available for Red Hat Enterprise Linux 7.

Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and
Transport Layer Security (TLS) protocols, as well as a full-strength
general-purpose cryptography library.

This update fixes the following bugs:

• In Transport Layer Security (TLS) client applications that use Secure Sockets

Layer version 2 (SSLv2) ClientHello requests, the support
for Elliptic Curve Cryptography (ECC) based cipher suites was previously
advertised, but the TLS extension giving the list of supported elliptic curves
could not be sent. This caused a TLS connection to a server which used an
elliptic curve not supported by the OpenSSL client to abort. With this update,
the ECC-based cipher suites are not sent in the SSLv2 ClientHello request, and
TLS connections are no longer aborted in the aforementioned scenario.
(BZ#1090955)

• Previously, the Transport Layer Security (TLS) extensions that were sent in

the Datagram TLS (DTLS) ClientHello requests did not contain the list of the
supported elliptic curves. As a consequence, the DTLS connections to servers
using elliptic curves not supported by the OpenSSL client were aborted. With
this update, the elliptic curve list extension is properly sent in the DTLS
ClientHello requests, and DTLS connections are no longer aborted in the above
circumstances. (BZ#1119803)

In addition, this update adds the following enhancements:

• In order to enhance performance of various cryptographic algorithms in the

OpenSSL library, the IBM Power Systems assembly language code in OpenSSL has
been updated. Now, on current IBM Power processors, the performance of OpenSSL
has significantly improved. (BZ#913657)

• The updated openssl packages contain various changes to allow for FIPS mode

140-2 validation of the Red Hat Enterprise Linux OpenSSL FIPS module.
(BZ#1073914)

• In the previous openssl packages, the curve that Transport Layer Security

(TLS) server supports had to be selected before the TLS connection was accepted.
With this update, the server can now automatically choose a curve from the list
of curves supported by the client. However, this needs to be enabled by an API
call in the relevant TLS server implementation. (BZ#1080128)

• The Advanced Encryption Standard (AES) Key Wrap support according to RFC 5649

has been added to the high level encryption EVP API. (BZ#1119738)

Users of openssl are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements. For the update to take effect, all
services linked to the OpenSSL library must be restarted, or the system
rebooted.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64

Fixes

• BZ - 1072439 - BIO_f_cipher does not test for EVP_CipherUpdate failures
• BZ - 1080128 - Backport automatic selection of curves for ECDHE
• BZ - 1081163 - Server Name Identification is done in case-sensitively
• BZ - 1090955 - Do not send ECC ciphersuites in SSLv2 client hello
• BZ - 1106409 - Fix for CVE-2014-0224 breaks EAP-FAST/wpa_supplicant TLS session resumption.
• BZ - 1108026 - ciphers(1) man page lacks description of ECC and TLSv1.2 suites
• BZ - 1119738 - [RFE] Support RFC 5649: Advanced Encryption Standard (AES) Key Wrap with Padding Algorithm
• BZ - 1119803 - ECC supported curves list extension is missing in DTLS1 client hello
• BZ - 1128849 - Properly detect HMAC integrity check failure if the .hmac file is empty [rhel-7]
• BZ - 1150033 - OpenSSL selects weak digest for (EC)DH kex signing in TLSv1.2

CVEs

(none)

References

(none)