Summary
[1.1.1g-11]
- Further changes for SP 800-56A rev3 requirements
[1.1.1g-9]
- Rewire FIPS_drbg API to use the RAND_DRBG
- Use the well known DH groups in TLS even for 2048 and 1024 bit parameters
[1.1.1g-7]
- Disallow dropping Extended Master Secret extension
on renegotiation
- Return alert from s_server if ALPN protocol does not match
- SHA1 is allowed in @SECLEVEL=2 only if allowed by
TLS SigAlgs configuration
[1.1.1g-6]
- Add FIPS selftest for PBKDF2 and KBKDF
[1.1.1g-5]
- Allow only well known DH groups in the FIPS mode
[1.1.1g-1]
- update to the 1.1.1g release
- FIPS module installed state definition is modified
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | openssl | 1:1.1.1g-11.el8 |
| Oracle Linux · 8 | openssl-devel | 1:1.1.1g-11.el8 |
| Oracle Linux · 8 | openssl-libs | 1:1.1.1g-11.el8 |
| Oracle Linux · 8 | openssl-perl | 1:1.1.1g-11.el8 |
Vulnerabilities 1
-
Unscored —CVE-2019-1551 EPSS 14%
rsaz_512_sqr overflow bug on x86_64
There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536, and DSA1024 as a result of this defect wou…