- Issued:
- 2012-02-20
- Updated:
- 2012-02-20
RHBA-2012:0229 - Bug Fix Advisory
Synopsis
openssl bug fix and enhancement update
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated openssl packages that fix a bug and add various enhancements are now
available for Red Hat Enterprise Linux 5.
Description
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and
Transport Layer Security (TLS) protocols, as well as a full-strength
general-purpose cryptography library.
This update fixes the following bug:
- Prior to this update, the openssl configuration file variables with "yes" or
"no" values were parsed incorrectly. The value of "yes" was interpreted as "no".
With this update, the "yes" or "no" values in the configuration file are now
parsed correctly. (BZ#726593)
In addition, this update provides the following enhancements:
- Documentation of possible error states related to the FIPS mode is now
included in the README.FIPS file. (BZ#628976)
- DigiCert Certification Authority certificates were added to the
/etc/pki/tls/certs/ca-bundle.crt file that contains the certificates of trusted
certification authorities. (BZ#735819)
- Known answer self-tests for the SHA2 algorithms (SHA256 and SHA512) were added
to the FIPS mode start up self tests. (BZ#740866)
- The makefile for generating keys and certificates was updated to generate the
private keys with a length of 2048 bits by default as the previous length of
1024 bits is now considered too weak. (BZ#745410)
All users of OpenSSL should upgrade to these updated packages, which fix this
bug and add these enhancements.
Solution
Before applying this update, make sure all previously-released errata
relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259
Affected Products
- Red Hat Enterprise Linux Server 5 x86_64
- Red Hat Enterprise Linux Server 5 ia64
- Red Hat Enterprise Linux Server 5 i386
- Red Hat Enterprise Linux Workstation 5 x86_64
- Red Hat Enterprise Linux Workstation 5 i386
- Red Hat Enterprise Linux Desktop 5 x86_64
- Red Hat Enterprise Linux Desktop 5 i386
- Red Hat Enterprise Linux for IBM z Systems 5 s390x
- Red Hat Enterprise Linux for Power, big endian 5 ppc
- Red Hat Enterprise Linux Server from RHUI 5 x86_64
- Red Hat Enterprise Linux Server from RHUI 5 i386
Fixes
- BZ - 628976 - Update README.FIPS for error state clarification
- BZ - 745410 - Makefile for generating keys and certificates specifies less than the recommended number of bits
CVEs
(none)
References
(none)
Red Hat Enterprise Linux Server 5
SRPM | |
---|---|
openssl-0.9.8e-22.el5.src.rpm | SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5 |
x86_64 | |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-0.9.8e-22.el5.x86_64.rpm | SHA-256: 4eca1043c61d8bde9702ea95ce5ba555bf73877662ddd8d363d6c425581f62e9 |
openssl-devel-0.9.8e-22.el5.i386.rpm | SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307 |
openssl-devel-0.9.8e-22.el5.x86_64.rpm | SHA-256: 9ee1d6386662ffcccc699e268c142c06a1bc6b30a51dcfc75aebece2389d5de2 |
openssl-perl-0.9.8e-22.el5.x86_64.rpm | SHA-256: 2ac70639a877f7beaac0019eeb9f9c52e1a9e1866ef6abc669e3de55ae015714 |
ia64 | |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-0.9.8e-22.el5.ia64.rpm | SHA-256: b8b18472ceb841f1e1588541ddb195f8f0590c50c426dedd179d190aae6f21f7 |
openssl-devel-0.9.8e-22.el5.ia64.rpm | SHA-256: aca4bd949bc7b34a535bb7a0a13960ad181acefa48ce1a2f0b2ae42764c8fc0c |
openssl-perl-0.9.8e-22.el5.ia64.rpm | SHA-256: ee17e6bef7dfa1ad842f8d7f0bd2a3d7cb9f4c8cebc449003130b89734b11201 |
i386 | |
openssl-0.9.8e-22.el5.i386.rpm | SHA-256: 1c7a648be9d38a494bfa9d2285f2a2816f1a27832c6630f14480a158c8de38f2 |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-devel-0.9.8e-22.el5.i386.rpm | SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307 |
openssl-perl-0.9.8e-22.el5.i386.rpm | SHA-256: daaeb75519e70b360c30d18e8feb760c59b7c005f95c97fee0412e6812df1313 |
Red Hat Enterprise Linux Workstation 5
SRPM | |
---|---|
openssl-0.9.8e-22.el5.src.rpm | SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5 |
x86_64 | |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-0.9.8e-22.el5.x86_64.rpm | SHA-256: 4eca1043c61d8bde9702ea95ce5ba555bf73877662ddd8d363d6c425581f62e9 |
openssl-devel-0.9.8e-22.el5.i386.rpm | SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307 |
openssl-devel-0.9.8e-22.el5.x86_64.rpm | SHA-256: 9ee1d6386662ffcccc699e268c142c06a1bc6b30a51dcfc75aebece2389d5de2 |
openssl-perl-0.9.8e-22.el5.x86_64.rpm | SHA-256: 2ac70639a877f7beaac0019eeb9f9c52e1a9e1866ef6abc669e3de55ae015714 |
i386 | |
openssl-0.9.8e-22.el5.i386.rpm | SHA-256: 1c7a648be9d38a494bfa9d2285f2a2816f1a27832c6630f14480a158c8de38f2 |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-devel-0.9.8e-22.el5.i386.rpm | SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307 |
openssl-perl-0.9.8e-22.el5.i386.rpm | SHA-256: daaeb75519e70b360c30d18e8feb760c59b7c005f95c97fee0412e6812df1313 |
Red Hat Enterprise Linux Desktop 5
SRPM | |
---|---|
openssl-0.9.8e-22.el5.src.rpm | SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5 |
x86_64 | |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-0.9.8e-22.el5.x86_64.rpm | SHA-256: 4eca1043c61d8bde9702ea95ce5ba555bf73877662ddd8d363d6c425581f62e9 |
openssl-perl-0.9.8e-22.el5.x86_64.rpm | SHA-256: 2ac70639a877f7beaac0019eeb9f9c52e1a9e1866ef6abc669e3de55ae015714 |
i386 | |
openssl-0.9.8e-22.el5.i386.rpm | SHA-256: 1c7a648be9d38a494bfa9d2285f2a2816f1a27832c6630f14480a158c8de38f2 |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-perl-0.9.8e-22.el5.i386.rpm | SHA-256: daaeb75519e70b360c30d18e8feb760c59b7c005f95c97fee0412e6812df1313 |
Red Hat Enterprise Linux for IBM z Systems 5
SRPM | |
---|---|
openssl-0.9.8e-22.el5.src.rpm | SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5 |
s390x | |
openssl-0.9.8e-22.el5.s390.rpm | SHA-256: 60a07aa5cce4997d836c3b8836a717b2e8485f798a9c51cc6222804fea397874 |
openssl-0.9.8e-22.el5.s390x.rpm | SHA-256: 5e9af3b655dc04ad2bcc844fe3f7d43fcb22560577cbfd589ad70ce441800791 |
openssl-devel-0.9.8e-22.el5.s390.rpm | SHA-256: 2ad78bbeb2ae7040460987498fed26ef099cbba77c2d824cf3d36cb8c57149aa |
openssl-devel-0.9.8e-22.el5.s390x.rpm | SHA-256: 04798dad3bcf971b8a05d8d9c99013c02244d2150da740de1d3543abeaf93613 |
openssl-perl-0.9.8e-22.el5.s390x.rpm | SHA-256: 2fc089e89a68920cb709621122c80d148c5077e7f9783b6e65abee85dfdf0510 |
Red Hat Enterprise Linux for Power, big endian 5
SRPM | |
---|---|
openssl-0.9.8e-22.el5.src.rpm | SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5 |
ppc | |
openssl-0.9.8e-22.el5.ppc.rpm | SHA-256: dc04e2e01c2873c2824b7dfd4965d3ad331c2951ed05e6ab9319580ac74e2ccb |
openssl-0.9.8e-22.el5.ppc64.rpm | SHA-256: 391026a2ed9ab1fd5a2bb4084762a293c7ee22265ee949156866fd4c272974af |
openssl-devel-0.9.8e-22.el5.ppc.rpm | SHA-256: 0e43bc1ae415d40b7a31dbec079dd56a6c5a0a3d9774a11d882962528c80a474 |
openssl-devel-0.9.8e-22.el5.ppc64.rpm | SHA-256: 9b752e785b971be22c35086ba5bf2ac5dae9c1cb867f7596c2410ff8dfeaa20e |
openssl-perl-0.9.8e-22.el5.ppc.rpm | SHA-256: b2eb78ae003776bdbbfee6785c2bd91d692d8158259f0e5251486b60c69d4e74 |
Red Hat Enterprise Linux Server from RHUI 5
SRPM | |
---|---|
openssl-0.9.8e-22.el5.src.rpm | SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5 |
x86_64 | |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-0.9.8e-22.el5.x86_64.rpm | SHA-256: 4eca1043c61d8bde9702ea95ce5ba555bf73877662ddd8d363d6c425581f62e9 |
openssl-devel-0.9.8e-22.el5.i386.rpm | SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307 |
openssl-devel-0.9.8e-22.el5.x86_64.rpm | SHA-256: 9ee1d6386662ffcccc699e268c142c06a1bc6b30a51dcfc75aebece2389d5de2 |
openssl-perl-0.9.8e-22.el5.x86_64.rpm | SHA-256: 2ac70639a877f7beaac0019eeb9f9c52e1a9e1866ef6abc669e3de55ae015714 |
i386 | |
openssl-0.9.8e-22.el5.i386.rpm | SHA-256: 1c7a648be9d38a494bfa9d2285f2a2816f1a27832c6630f14480a158c8de38f2 |
openssl-0.9.8e-22.el5.i686.rpm | SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258 |
openssl-devel-0.9.8e-22.el5.i386.rpm | SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307 |
openssl-perl-0.9.8e-22.el5.i386.rpm | SHA-256: daaeb75519e70b360c30d18e8feb760c59b7c005f95c97fee0412e6812df1313 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.