[ol9_baseos_latest] openssl-1:3.0.1-20.el9_0.x86_64

The OpenSSL toolkit provides support for secure communications between
machines. OpenSSL includes a certificate management tool and shared
libraries which provide various cryptographic algorithms and
protocols.

Changelog (Show File list) (Show related packages)

• Fri Mar 18 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-20

  - Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when
    no OpenSSL library context is set
  - Resolves: rhbz#2063306

• Fri Mar 18 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-19

  - Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
  - Resolves: rhbz#2063306

• Wed Mar 16 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-18

  - CVE-2022-0778 fix
  - Resolves: rhbz#2062314

• Thu Mar 10 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-15.1

  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Resolves: rhbz#2061607

• Tue Mar 01 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-14.1

  - Allow SHA1 in SECLEVEL 2 if rh-allow-sha1-signatures = yes
  - Resolves: rhbz#2031742

• Fri Feb 25 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-14

  - Prevent use of SHA1 with ECDSA
  - Resolves: rhbz#2031742

• Fri Feb 25 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13

  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867

• Thu Feb 24 2022 Peter Robinson <pbrobinson@fedoraproject.org> - 1:3.0.1-12

  - Support KBKDF (NIST SP800-108) with an R value of 8bits
  - Resolves: rhbz#2027261

• Wed Feb 23 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-11

  - Allow SHA1 usage in MGF1 for RSASSA-PSS signatures
  - Resolves: rhbz#2031742

• Wed Feb 23 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-10

  - rebuilt