Red Hat Product Errata RHEA-2023:5065 - Product Enhancement Advisory
Issued:
2023-09-12
Updated:
2023-09-12

RHEA-2023:5065 - Product Enhancement Advisory

Synopsis

crypto-policies enhancement update

Type/Severity

Product Enhancement Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for crypto-policies is now available for Red Hat Enterprise Linux 9.

Description

crypto-policies is a system component that configures the core cryptographic subsystems, covering the TLS, IPSec, SSH, DNSSec, and Kerberos protocols. It provides a small set of policies, which the administrator can select.

Bug Fix(es) and Enhancement(s):

  • crypto-policies should offer a subpolicy for the FIPS policy to disable EMS enforcement in TLS 1.2 (BZ#2228483)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.2 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x

Fixes

(none)

CVEs

(none)

References

(none)

Red Hat Enterprise Linux for x86_64 9

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
x86_64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
x86_64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
x86_64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
x86_64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux Server - AUS 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
x86_64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
s390x
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
s390x
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
s390x
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for Power, little endian 9

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
ppc64le
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
ppc64le
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
ppc64le
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for ARM 64 9

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
aarch64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
aarch64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
aarch64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
ppc64le
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
ppc64le
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
x86_64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
x86_64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
aarch64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
aarch64
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
s390x
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2

SRPM
crypto-policies-20221215-1.git9a18988.el9_2.1.src.rpm SHA-256: e84cc72feb6bfaf6a46a89b0b4afe3db0c7899b67dc5014a9bb5ccdf9197c5b3
s390x
crypto-policies-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: 9ec0e8fa94604b0010316f36a5c7fecc53ade2553199ae70130b17fc5c0bf0a2
crypto-policies-scripts-20221215-1.git9a18988.el9_2.1.noarch.rpm SHA-256: a190af1d2481c3d1e16aa8957adfa876f7c8cd9f706c151ddc14661e9f4c4b35

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.