Summary
[1.0.2k-23.0.1]
- Change Epoch from 1 to 10
- Fix DH self-test to add shared secret comparison [Orabug: 32467026]
- Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059]
- Add TLS KDF self-test [Orabug: 32467193]
- Add EC keys pairwise consistency test [Orabug: 32467059]
[1.0.2k-23]
- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssl | 10:1.0.2k-23.0.1.el7_9_fips |
| Oracle Linux · 7 | openssl-devel | 10:1.0.2k-23.0.1.el7_9_fips |
| Oracle Linux · 7 | openssl-libs | 10:1.0.2k-23.0.1.el7_9_fips |
| Oracle Linux · 7 | openssl-perl | 10:1.0.2k-23.0.1.el7_9_fips |
| Oracle Linux · 7 | openssl-static | 10:1.0.2k-23.0.1.el7_9_fips |
Vulnerabilities 1
-
High 7.4
Read buffer overruns processing ASN.1 strings
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings which are repesented as a buffer for the string dat…