[ol9_u1_baseos_base] openssl-libs-1:3.0.1-43.0.1.el9_0.x86_64

Name:	openssl-libs
Epoch:	1
Version:	3.0.1
Release:	43.0.1.el9_0
Architecture:	x86_64
Group:	Unspecified
Size:	6736530
License:	ASL 2.0
RPM:	openssl-libs-3.0.1-43.0.1.el9_0.x86_64.rpm
Source RPM:	openssl-3.0.1-43.0.1.el9_0.src.rpm
Build Date:	Tue Nov 01 2022
Build Host:	build-ol9-x86_64.oracle.com
Vendor:	Oracle America
URL:	http://www.openssl.org/
Summary:	A general purpose cryptography library with TLS implementation
Description:	OpenSSL is a toolkit for supporting cryptography. The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols.

Changelog (Show File list) (Show related packages)

Tue Nov 01 2022 EL Errata <el-errata_ww@oracle.com> - 3.0.1-43.0.1
```
- Replace upstream references [Orabug: 34340177]
```

Wed Oct 26 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43

- CVE-2022-3602: X.509 Email Address Buffer Overflow - running tests
  Resolves: CVE-2022-3602

Wed Oct 26 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-42

- CVE-2022-3602: X.509 Email Address Buffer Overflow
  Resolves: CVE-2022-3602

Thu Aug 11 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-41

- Zeroize public keys as required by FIPS 140-3
  Resolves: rhbz#2115861
- Add FIPS indicator for HKDF
  Resolves: rhbz#2118388

Fri Aug 05 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40

- Deal with DH keys in FIPS mode according FIPS-140-3 requirements
  Related: rhbz#2115856
- Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
  Related: rhbz#2115857
- Use signature for RSA pairwise test according FIPS-140-3 requirements
  Related: rhbz#2115858
- Reseed all the parent DRBGs in chain on reseeding a DRBG
  Related: rhbz#2115859
- Zeroization according to FIPS-140-3 requirements
  Related: rhbz#2115861

Mon Aug 01 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-39

- Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
- Use Use digest_sign & digest_verify in FIPS signature self test
- Use FFDHE2048 in Diffie-Hellman FIPS self-test
  Resolves: rhbz#2112978

Thu Jul 14 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-38

- Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
  initialized.
  Resolves: rhbz#2107530
- Improve AES-GCM performance on Power9 and Power10 ppc64le
  Resolves: rhbz#2103044
- Improve ChaCha20 performance on Power10 ppc64le
  Resolves: rhbz#2103044

Tue Jul 05 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-37

- CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
  Resolves: CVE-2022-2097

Thu Jun 16 2022 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36

- Ciphersuites with RSAPSK KX should be filterd in FIPS mode
- Related: rhbz#2091994
- FIPS provider should block RSA encryption for key transport.
- Other RSA encryption options should still be available if key length is enough
- Related: rhbz#2091977
- Improve diagnostics when passing unsupported groups in TLS
- Related: rhbz#2086554
- Fix PPC64 Montgomery multiplication bug
- Related: rhbz#2101346
- Strict certificates validation shouldn't allow explicit EC parameters
- Related: rhbz#2085521
- CVE-2022-2068: the c_rehash script allows command injection
- Related: rhbz#2098276

Wed Jun 08 2022 Clemens Lang <cllang@redhat.com> - 1:3.0.1-35

- Add explicit indicators for signatures in FIPS mode and mark signature
  primitives as unapproved.
  Resolves: rhbz#2087234