Issued:

2011-06-15

Updated:

2011-06-15

RHEA-2011:0868 - openssl enhancement update

Synopsis

openssl enhancement update

Type/Severity

Product Enhancement Advisory

Topic

Updated openssl packages that adds several enhancements are now available for Red Hat Enterprise Linux 6.

Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

This update adds the following enhancements:

• With this update, the openssl API for the DSA algorithm has been enhanced to allow for presetting the prime (P) and the subprime (Q) parameters when generating the base (G) parameter. This is necessary for the algorithm correctness validation according to the FIPS-186-3 standard. (BZ#709020)

• With this update, the implementation of the AES encryption algorithm with the support for AES-NI processor instructions is now enabled also in the FIPS mode. (BZ#711336)

Users of openssl are advised to upgrade to these updated packages, which add these enhancements.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.https://access.redhat.com/kb/docs/DOC-11259

Affected Products

Updated Packages

• openssl-static-1.0.0-10.el6_1.4.i686.rpm
• openssl-debuginfo-1.0.0-10.el6_1.4.ppc.rpm
• openssl-static-1.0.0-10.el6_1.4.ppc64.rpm
• openssl-static-1.0.0-10.el6_1.4.x86_64.rpm
• openssl-1.0.0-10.el6_1.4.s390.rpm
• openssl-perl-1.0.0-10.el6_1.4.x86_64.rpm
• openssl-debuginfo-1.0.0-10.el6_1.4.s390x.rpm
• openssl-devel-1.0.0-10.el6_1.4.ppc.rpm
• openssl-debuginfo-1.0.0-10.el6_1.4.ppc64.rpm
• openssl-perl-1.0.0-10.el6_1.4.ppc64.rpm
• openssl-debuginfo-1.0.0-10.el6_1.4.x86_64.rpm
• openssl-1.0.0-10.el6_1.4.src.rpm
• openssl-debuginfo-1.0.0-10.el6_1.4.s390.rpm
• openssl-debuginfo-1.0.0-10.el6_1.4.i686.rpm
• openssl-1.0.0-10.el6_1.4.i686.rpm
• openssl-1.0.0-10.el6_1.4.x86_64.rpm
• openssl-devel-1.0.0-10.el6_1.4.ppc64.rpm
• openssl-1.0.0-10.el6_1.4.s390x.rpm
• openssl-devel-1.0.0-10.el6_1.4.s390x.rpm
• openssl-perl-1.0.0-10.el6_1.4.s390x.rpm
• openssl-devel-1.0.0-10.el6_1.4.s390.rpm
• openssl-1.0.0-10.el6_1.4.ppc.rpm
• openssl-perl-1.0.0-10.el6_1.4.i686.rpm
• openssl-1.0.0-10.el6_1.4.ppc64.rpm
• openssl-devel-1.0.0-10.el6_1.4.x86_64.rpm
• openssl-static-1.0.0-10.el6_1.4.s390x.rpm
• openssl-devel-1.0.0-10.el6_1.4.i686.rpm

Fixes

• This content is not included.BZ - 709020
• This content is not included.BZ - 711336

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.