[ol10_baseos_latest] openssl-1:3.2.2-16.0.1.el10_0.4.aarch64

Name:	openssl
Epoch:	1
Version:	3.2.2
Release:	16.0.1.el10_0.4
Architecture:	aarch64
Group:	Unspecified
Size:	1708765
License:	Apache-2.0
RPM:	openssl-3.2.2-16.0.1.el10_0.4.aarch64.rpm
Source RPM:	openssl-3.2.2-16.0.1.el10_0.4.src.rpm
Build Date:	Tue Sep 30 2025
Build Host:	build-ol10-aarch64.oracle.com
Vendor:	Oracle America
URL:	http://www.openssl.org/
Summary:	Utilities from the general purpose cryptography library with TLS implementation
Description:	The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols.

Changelog (Show File list) (Show related packages)

Mon Sep 29 2025 EL Errata <el-errata_ww@oracle.com> - 3.2.2-16.0.1.4

- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]

Mon Sep 29 2025 Kevin Lyons <kevin.x.lyons@oracle.com> - 1:3.2.2-16.4

- openssl 3.2.2 has 3_4_0 version in the symbol table (JIRA:RHEL-105518)

Wed Jan 29 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-16

- Fix timing side-channel in ECDSA signature computation (CVE-2024-13176)
  Resolves: RHEL-70879
- Load system default cipher string from crypto-policies configuration file
  should ignore errors.
  Related: RHEL-71132
- RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
  Resolves: RHEL-76754
- Fix segfault on printing the temp key from s_client when connection is not established
  Resolves: RHEL-79045

Thu Jan 02 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-15

- Fix providers no_cache behavior
  Resolves: RHEL-71903
- Fix pkcs12 command line segfault
  Resolves: RHEL-70878
- Print key exchange group for hybrid PQC
  Resolves: RHEL-66163
- Ensure correct fips.so checksum calculation
  Resolves: RHEL-73170
- Locally configured providers should not interfere with openssl build-time tests
  Resolves: RHEL-76182
- Load system default cipher string from crypto-policies configuration file
  include /etc/crypto-policies/back-ends/opensslcnf.config and remove
  /etc/crypto-policies/back-ends/openssl.config.
  Resolves: RHEL-71132

Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 1:3.2.2-14

- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Thu Oct 17 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-13
```
- Ship dummy(empty) openssl/engine.h
  Resolves: RHEL-58178
```

Wed Sep 04 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-12

- Fix CVE-2024-6119: Possible denial of service in X.509 name checks
  Resolves: RHEL-55303

Wed Aug 21 2024 Clemens Lang <cllang@redhat.com> - 1:3.2.2-11

- Fix CVE-2024-5535: SSL_select_next_proto buffer overread
  Resolves: RHEL-45692

Wed Aug 14 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10

- Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
  Related: RHEL-36659
- Support key encapsulation/decapsulation in openssl pkeyutl command
  Resolves: RHEL-54156
- Fix typo in the patch numeration
  Related: RHEL-41261
- Enable KTLS, temporary disable KTLS tests
  Related: RHEL-47335
- Speedup SSL_add_{file,dir}_cert_subjects_to_stack
  Resolves: RHEL-54232
- Resolve SAST package scan results
  Resolves: RHEL-37561

Fri Aug 09 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-9

- An interface to create PKCS #12 files in FIPS compliant way
  Related: RHEL-36659