RHBA-2023:6627 - Bug Fix Advisory

Topic

An update for openssl is now available for Red Hat Enterprise Linux 9.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to

https://access.redhat.com/articles/11258

For the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

• BZ - 2069336 - Cull the list of NIST curves in our build
• BZ - 2153471 - Backport implicit rejection for RSA PKCS#1 v1.5 encryption [rhel-9]
• BZ - 2157951 - Support requiring EMS in TLS 1.2, default to it when in FIPS mode
• BZ - 2160733 - In FIPS mode, openssl KDFs should only allow selected hash algorithms
• BZ - 2160797 - openssl smime and cms commands default to 3DES and PKCS#1v1.5 encryption in FIPS mode
• BZ - 2164763 - In FIPS mode, openssl should reject short KDF input or output keys or provide an indicator
• BZ - 2168289 - In FIPS mode, openssl should provide an indicator for AES-GCM to query whether the IV was generated internally or provided externally
• BZ - 2168324 - In FIPS mode, openssl should not use the legacy ECDSA_do_sign(), RSA_public_encrypt(), RSA_private_decrypt() functions for pairwise consistency tests
• BZ - 2168665 - In FIPS mode, openssl should not support RSA encryption or decryption without padding (outside of RSASVE) or provide an indicator
• BZ - 2169314 - openssl FIPS mode self-test should zeroize `out` in `verify_integrity` in providers/fips/self_test.c
• BZ - 2169757 - In FIPS mode, openssl should reject EVP_PKEY_fromdata() for short DHX keys, or provide an indicator
• BZ - 2170456 - In FIPS mode, openssl should enter error state when DH PCT fails
• BZ - 2174871 - Significant performance drop for getrandom system call when FIPS is enabled (compared to RHEL 8) [rhel-9.3.0]
• BZ - 2175145 - In FIPS mode, openssl should always run the PBKDF2 lower bounds checks or provide an indicator when the pkcs5 parameter is set to 1
• BZ - 2179331 - In FIPS mode, openssl should indicate that RSA encryption and RSASVE are unapproved
• BZ - 2186819 - OpenSSL rsa_verify_recover doesn't use the same key checks as rsa_verify in FIPS mode
• BZ - 2188180 - Enable support for brainpool curves in ECC in RHEL

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index