RHEA-2016:2004 - Product Enhancement Advisory

Topic

Updated perl-Net-SSLeay packages that add one enhancement are now available for Red Hat Enterprise Linux 6.

Description

The perl-Net-SSLeay packages offer high-level convenience functions for accessing web pages on SSL servers, an sslcat() function for writing custom clients, and provides access to the SSL API of the OpenSSL library, which enables users to write custom servers or clients for more complicated applications.

This update adds the following enhancement:

• The Perl Net:SSLeay module has been updated to support explicit specification of the TLS protocol version, which can be used for improving security. To restrict TLS version to 1.1 or 1.2, set the "Net::SSLeay::ssl_version" variable to '11' or '12' respectively. (BZ#1375183)

Users of perl-Net-SSLeay are advised to upgrade to these updated packages, which add this enhancement.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 1375183 - Backport patches to allow Net::SSLeay to support TLSv1.1, TLSv1.2

CVEs

(none)

References

(none)