Summary
[1.0.2k-26_fips]
- Change Epoch from 1 to 10
- Fix DH self-test to add shared secret comparison [Orabug: 32467026]
- Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059]
- Add TLS KDF self-test [Orabug: 32467193]
- Add EC keys pairwise consistency test [Orabug: 32467059]
[1:1.0.2k-26]
- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssl | 10:1.0.2k-26.el7_9_fips |
| Oracle Linux · 7 | openssl-devel | 10:1.0.2k-26.el7_9_fips |
| Oracle Linux · 7 | openssl-libs | 10:1.0.2k-26.el7_9_fips |
| Oracle Linux · 7 | openssl-perl | 10:1.0.2k-26.el7_9_fips |
| Oracle Linux · 7 | openssl-static | 10:1.0.2k-26.el7_9_fips |
Vulnerabilities 1
-
High 7.4
X.400 address type confusion in X.509 GeneralName
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…