[ol10_u0_baseos_base] openssl-1:3.2.2-16.0.1.el10.aarch64

The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.

Changelog (Show File list) (Show related packages)

• Mon Mar 10 2025 EL Errata <el-errata_ww@oracle.com> - 3.2.2-16.0.1

  - Replace upstream references [Orabug: 34340177]
  - Update FIPS provider name [Orabug: 35824276]

• Wed Jan 29 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16

  - Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
    Resolves: RHEL-70879
  - Load system default cipher string from crypto-policies configuration file
    should ignore errors.
    Related: RHEL-71132
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76754
  - Fix segfault on printing the temp key from s_client when connection is not established
    Resolves: RHEL-79045

• Thu Jan 02 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15

  - Fix providers no_cache behavior
    Resolves: RHEL-71903
  - Fix pkcs12 command line segfault
    Resolves: RHEL-70878
  - Print key exchange group for hybrid PQC
    Resolves: RHEL-66163
  - Ensure correct fips.so checksum calculation
    Resolves: RHEL-73170
  - Locally configured providers should not interfere with openssl build-time tests
    Resolves: RHEL-76182
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
    Resolves: RHEL-71132

• Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1:3.2.2-14

  - Bump release for October 2024 mass rebuild:
    Resolves: RHEL-64018

• Thu Oct 17 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-13

  - Ship dummy(empty) openssl/engine.h
    Resolves: RHEL-58178

• Wed Sep 04 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-12

  - Fix CVE-2024-6119: Possible denial of service in X.509 name checks
    Resolves: RHEL-55303

• Wed Aug 21 2024 Clemens Lang <cllang@redhat.com> - 1:3.2.2-11

  - Fix CVE-2024-5535: SSL_select_next_proto buffer overread
    Resolves: RHEL-45692

• Wed Aug 14 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10

  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
    Related: RHEL-36659
  - Support key encapsulation/decapsulation in openssl pkeyutl command
    Resolves: RHEL-54156
  - Fix typo in the patch numeration
    Related: RHEL-41261
  - Enable KTLS, temporary disable KTLS tests
    Related: RHEL-47335
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
    Resolves: RHEL-54232
  - Resolve SAST package scan results
    Resolves: RHEL-37561

• Fri Aug 09 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-9

  - An interface to create PKCS #12 files in FIPS compliant way
    Related: RHEL-36659

• Wed Aug 07 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-8

  - An interface to create PKCS #12 files in FIPS compliant way
    Resolves: RHEL-36659