[ol9_appstream] openssl-perl-1:3.0.1-43.0.1.el9_0.x86_64

OpenSSL is a toolkit for supporting cryptography. The openssl-perl
package provides Perl scripts for converting certificates and keys
from other formats to the formats used by the OpenSSL toolkit.

Changelog (Show File list) (Show related packages)

• Tue Nov 01 2022 EL Errata <el-errata_ww@oracle.com> - 3.0.1-43.0.1

  - Replace upstream references [Orabug: 34340177]

• Wed Oct 26 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43

  - CVE-2022-3602: X.509 Email Address Buffer Overflow - running tests
    Resolves: CVE-2022-3602

• Wed Oct 26 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-42

  - CVE-2022-3602: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602

• Thu Aug 11 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-41

  - Zeroize public keys as required by FIPS 140-3
    Resolves: rhbz#2115861
  - Add FIPS indicator for HKDF
    Resolves: rhbz#2118388

• Fri Aug 05 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40

  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115856
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115857
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2115858
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2115859
  - Zeroization according to FIPS-140-3 requirements
    Related: rhbz#2115861

• Mon Aug 01 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-39

  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2112978

• Thu Jul 14 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-38

  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2107530
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2103044
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2103044

• Tue Jul 05 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-37

  - CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097

• Thu Jun 16 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36

  - Ciphersuites with RSAPSK KX should be filterd in FIPS mode
  - Related: rhbz#2091994
  - FIPS provider should block RSA encryption for key transport.
  - Other RSA encryption options should still be available if key length is enough
  - Related: rhbz#2091977
  - Improve diagnostics when passing unsupported groups in TLS
  - Related: rhbz#2086554
  - Fix PPC64 Montgomery multiplication bug
  - Related: rhbz#2101346
  - Strict certificates validation shouldn't allow explicit EC parameters
  - Related: rhbz#2085521
  - CVE-2022-2068: the c_rehash script allows command injection
  - Related: rhbz#2098276

• Wed Jun 08 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-35

  - Add explicit indicators for signatures in FIPS mode and mark signature
    primitives as unapproved.
    Resolves: rhbz#2087234