RHBA-2023:3464 - Bug Fix Advisory

Topic

An update for openssl is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.

Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Bug Fix(es):

• In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator [rhel-9.0.0.z] (BZ#2170421)
• In FIPS mode, openssl KDFs should only allow selected hash algorithms [rhel-9.0.0.z] (BZ#2175862)
• In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator [rhel-9.0.0.z] (BZ#2175866)
• In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally [rhel-9.0.0.z] (BZ#2175870)
• openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c [rhel-9.0.0.z] (BZ#2175875)
• In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator [rhel-9.0.0.z] (BZ#2178032)
• In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests [rhel-9.0.0.z] (BZ#2178036)
• In FIPS mode, openssl should enter error state when DH PCT fails [rhel-9.0.0.z] (BZ#2178041)
• OpenSSL - Significant performance drop for getrandom system call when FIPS is enabled (compared to RHEL 8) [rhel-9.0.0.z] (BZ#2178054)
• In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1 [rhel-9.0.0.z] (BZ#2178139)
• HMAC free issue on openssl-3.0.1-43.el9_0.x86_64 on RHEL 9.1 [rhel-9.0.0.z] (BZ#2179053)
• In FIPS mode, openssl should indicate that RSA encryption and RSASVE are unapproved [rhel-9.0.0.z] (BZ#2179381)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.0 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.0 s390x
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.0 ppc64le
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.0 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x

Fixes

• BZ - 2170421 - In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator [rhel-9.0.0.z]
• BZ - 2175862 - In FIPS mode, openssl KDFs should only allow selected hash algorithms [rhel-9.0.0.z]
• BZ - 2175866 - In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator [rhel-9.0.0.z]
• BZ - 2175870 - In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally [rhel-9.0.0.z]
• BZ - 2175875 - openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c [rhel-9.0.0.z]
• BZ - 2178032 - In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator [rhel-9.0.0.z]
• BZ - 2178036 - In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests [rhel-9.0.0.z]
• BZ - 2178041 - In FIPS mode, openssl should enter error state when DH PCT fails [rhel-9.0.0.z]
• BZ - 2178054 - OpenSSL - Significant performance drop for getrandom system call when FIPS is enabled (compared to RHEL 8) [rhel-9.0.0.z]
• BZ - 2178139 - In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1 [rhel-9.0.0.z]
• BZ - 2179381 - In FIPS mode, openssl should indicate that RSA encryption and RSASVE are unapproved [rhel-9.0.0.z]

CVEs

(none)

References

(none)