Summary
[1.0.2k-25_fips]
- Change Epoch from 1 to 10
- Fix DH self-test to add shared secret comparison [Orabug: 32467026]
- Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059]
- Add TLS KDF self-test [Orabug: 32467193]
- Add EC keys pairwise consistency test [Orabug: 32467059]
[1:1.0.2k-25]
- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssl | 10:1.0.2k-25.el7_9_fips |
| Oracle Linux · 7 | openssl-devel | 10:1.0.2k-25.el7_9_fips |
| Oracle Linux · 7 | openssl-libs | 10:1.0.2k-25.el7_9_fips |
| Oracle Linux · 7 | openssl-perl | 10:1.0.2k-25.el7_9_fips |
| Oracle Linux · 7 | openssl-static | 10:1.0.2k-25.el7_9_fips |
Vulnerabilities 1
-
High 7.5
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…