Summary
[1.0.2k-26.0.1_fips]
- Change Epoch from 1 to 10
- Fix DH self-test to add shared secret comparison [Orabug: 32467026]
- Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059]
- Add TLS KDF self-test [Orabug: 32467193]
- Add EC keys pairwise consistency test [Orabug: 32467059]
[1:1.0.2k-26.0.1]
- Fixes CVE-2025-9230 Fix incorrect check of unwrapped key size [Orabug: 38916245]
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssl | 10:1.0.2k-26.0.1.el7_9_fips |
| Oracle Linux · 7 | openssl-devel | 10:1.0.2k-26.0.1.el7_9_fips |
| Oracle Linux · 7 | openssl-libs | 10:1.0.2k-26.0.1.el7_9_fips |
| Oracle Linux · 7 | openssl-perl | 10:1.0.2k-26.0.1.el7_9_fips |
| Oracle Linux · 7 | openssl-static | 10:1.0.2k-26.0.1.el7_9_fips |
Vulnerabilities 1
-
Critical 9.8
Out-of-bounds read & write in RFC 3211 KEK Unwrap
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application…