RHEA-2024:2400 - Product Enhancement Advisory

标题

An update for crypto-policies is now available for Red Hat Enterprise Linux 9.

描述

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.

解决方案

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

受影响的产品

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux for IBM z Systems 9 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
• Red Hat Enterprise Linux for Power, little endian 9 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
• Red Hat Enterprise Linux for ARM 64 9 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
• Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
• Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

修复

• RHEL-3227 - Be more thorough in `fips-mode-setup --disable`, be explicit that disabling FIPS on Red Hat Enterprise Linux is unsupported
• RHEL-10730 - FIPS:SHA1:NO-ENFORCE-EMS leads to misplacing of `Options = RHNoEnforceEMS`
• RHEL-11346 - Migrate license to SPDX
• RHEL-11349 - ECDSAP256SHA256 is disabled twice in bind config
• RHEL-5344 - Build crypto-policies with Java 17
• RHEL-11350 - make fips-mode-setup more chroot-friendly
• RHEL-15925 - [RFE] Ability to disable non-etm MACs
• RHEL-18435 - java-11-openjdk allows chacha20_poly1305 in FIPS mode
• RHEL-23494 - ostree based filesystem is not detected properly in chroot environments

CVE

(none)

参考

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index