openssl-libs-3.5.0-1.fc43 RPM for x86_64

From Fedora Rawhide for x86_64 / o

OpenSSL is a toolkit for supporting cryptography. The openssl-libs
package contains the libraries that are used by various applications which
support cryptographic algorithms and protocols.

Provides

• openssl-libs
• config(openssl-libs)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcrypto.so.3(OPENSSL_3.0.1)(64bit)
• libcrypto.so.3(OPENSSL_3.0.3)(64bit)
• libcrypto.so.3(OPENSSL_3.0.8)(64bit)
• libcrypto.so.3(OPENSSL_3.0.9)(64bit)
• libcrypto.so.3(OPENSSL_3.1.0)(64bit)
• libcrypto.so.3(OPENSSL_3.2.0)(64bit)
• libcrypto.so.3(OPENSSL_3.3.0)(64bit)
• libcrypto.so.3(OPENSSL_3.4.0)(64bit)
• libcrypto.so.3(OPENSSL_3.5.0)(64bit)
• libssl.so.3()(64bit)
• libssl.so.3(OPENSSL_3.0.0)(64bit)
• libssl.so.3(OPENSSL_3.2.0)(64bit)
• libssl.so.3(OPENSSL_3.3.0)(64bit)
• libssl.so.3(OPENSSL_3.4.0)(64bit)
• libssl.so.3(OPENSSL_3.5.0)(64bit)
• openssl-libs(x86-64)

Requires

• ca-certificates >= 2008-5
• config(openssl-libs) = 1:3.5.0-1.fc43
• crypto-policies >= 20180730
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.12)(64bit)
• libc.so.6(GLIBC_2.14)(64bit)
• libc.so.6(GLIBC_2.16)(64bit)
• libc.so.6(GLIBC_2.17)(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.25)(64bit)
• libc.so.6(GLIBC_2.3)(64bit)
• libc.so.6(GLIBC_2.3.2)(64bit)
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.33)(64bit)
• libc.so.6(GLIBC_2.34)(64bit)
• libc.so.6(GLIBC_2.38)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_ABI_DT_RELR)(64bit)
• libcrypto.so.3()(64bit)
• libcrypto.so.3(OPENSSL_3.0.0)(64bit)
• libcrypto.so.3(OPENSSL_3.0.1)(64bit)
• libcrypto.so.3(OPENSSL_3.0.3)(64bit)
• libcrypto.so.3(OPENSSL_3.2.0)(64bit)
• libcrypto.so.3(OPENSSL_3.3.0)(64bit)
• libcrypto.so.3(OPENSSL_3.4.0)(64bit)
• libz.so.1()(64bit)
• rpmlib(CompressedFileNames) <= 3.0.4-1
• rpmlib(FileDigests) <= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) <= 4.0-1
• rpmlib(PayloadIsZstd) <= 5.4.18-1
• rtld(GNU_HASH)

License

Apache-2.0

Changelog

* Fri Mar 21 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
  - Early rebasing to OpenSSL 3.5-alpha
* Thu Mar 13 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.4-3
  - Proper providing of default cipher string file on compilation
    Build with no-atexit similar to CentOS/RHEL
* Tue Feb 25 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.4-2
  - Deprecating a proper subpackage
    Related: rhbz#2276420
* Wed Feb 12 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.4-1
  - Rebase to 3.2.4
    Resolves: CVE-2024-12797
* Wed Jan 29 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-14
  - Fixup for loading default cipher string
    Resolves: rhbz#2342801
* Mon Jan 27 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-13
  - Locally configured providers should not interfere with openssl build-time tests
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.
* Fri Jan 17 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.2.2-12
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Jan 08 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-11
  - Ensure that the checksum of the fips provider is calculated correctly
    Resolves: rhbz#2335414
* Thu Jan 02 2025 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-10
  - Fix provider no_cache behaviour
* Wed Sep 25 2024 Lokesh Mandvekar <lsm5@fedoraproject.org> - 1:3.2.2-9
  - Add PQ container test via TMT
* Thu Sep 12 2024 Sahana Prasad <sahana@redhat.com> - 1:3.2.2-8
  - Synchorize patches in CentOS10 and Fedora with the following changes
  - Fix CVE-2024-5535: SSL_select_next_proto buffer overread
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
  - Support key encapsulation/decapsulation in openssl pkeyutl command
  - Fix typo in the patch numeration
  - Enable KTLS, temporary disable KTLS tests
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
  - Resolve SAST package scan results
  - An interface to create PKCS #12 files in FIPS compliant way
* Fri Sep 06 2024 Sahana Prasad <sahana@redhat.com> - 1:3.2.2-7
  - Patch for CVE-2024-6119
* Tue Sep 03 2024 Yaakov Selkowitz <yselkowi@redhat.com> - 1:3.2.2-6
  - Define OPENSSL_NO_ENGINE if openssl-devel-engine is not installed
* Thu Jul 18 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.2.2-5
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Tue Jul 09 2024 Sahana Prasad  <sahana@redhat.com> - 1:3.2.2-4
  - Assign IANA numbers for hybrid PQ KEX
  - Porting the fix in https://github.com/openssl/openssl/pull/22803
* Mon Jul 01 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-3
  - Moving engine-related files to a separate subpackage to be deprecated in future
    Resolves: rhbz#2276420
* Thu Jun 27 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-2
  - As upstream disables TLS 1.0/1.1 on any SECLEVEL > 0, there is no point
    keeping the SHA1 permission at SECLEVEL=1 anymore.
* Thu Jun 06 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
  - Rebase to 3.2.2
* Wed Jun 05 2024 Yaakov Selkowitz <yselkowi@redhat.com> - 1:3.2.1-10
  - Do not require openssl-fips-provider on ELN
* Mon Jun 03 2024 Sahana Prasad <sahana@redhat.com> - 1:3.2.1-9
  - Synchronize patches from CentOS 9 that had additional fixes required
    for rebase to 3.2.1
* Tue May 28 2024 Alexander Sosedkin <asosedkin@redhat.com> - 1:3.2.1-8
  - Instrument with USDT probes related to SHA-1 deprecation
* Tue May 14 2024 David Abdurachmanov <davidlt@rivosinc.com> - 1:3.2.1-7
  - Add --libdir=lib64 for riscv64 (uses linux-generic64)
* Thu Apr 04 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.1-6
  - Restoring missing part of 0044-
  - Backporting CMS FIPS defaults from CentOS 9
* Mon Mar 25 2024 Sahana Prasad <sahana@redhat.com> - 1:3.2.1-5
  - Add no-engine support. The previous commit was a mistake.
* Mon Mar 25 2024 Sahana Prasad <sahana@redhat.com> - 1:3.2.1-4
  - Build OpenSSL with no-engine support
* Thu Mar 07 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.1-3
  - Minimize skipping tests
  - Allow ignoring unknown signature algorithms and groups (upstream #23050)
  - Allow specifying provider algorithms in SignatureAlgorithms (upstream #22779)
* Fri Feb 09 2024 Sahana Prasad <sahana@redhat.com> - 1:3.2.1-2
  - Fix version aliasing issue
  - https://github.com/openssl/openssl/issues/23534
* Tue Feb 06 2024 Sahana Prasad <sahana@redhat.com> - 1:3.2.1-1
  - Rebase to upstream version 3.2.1
* Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.1.4-4
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Sun Jan 21 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.1.4-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Wed Jan 10 2024 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.1.4-2
  - We don't want to ship openssl-pkcs11 in RHEL10/Centos 10
* Thu Oct 26 2023 Sahana Prasad <sahana@redhat.com> - 1:3.1.4-1
  - Rebase to upstream version 3.1.4
* Thu Oct 19 2023 Sahana Prasad <sahana@redhat.com> - 1:3.1.3-1
  - Rebase to upstream version 3.1.3
* Thu Aug 31 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.1.1-4
  - Drop duplicated patch and do some contamination
* Tue Aug 22 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.1.1-3
  - Integrate FIPS patches from CentOS
* Fri Aug 04 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.1.1-2
  - migrated to SPDX license
* Thu Jul 27 2023 Sahana Prasad <sahana@redhat.com> - 1:3.1.1-1
  - Rebase to upstream version 3.1.1
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650
* Thu Jul 27 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.8-4
  - Forbid custom EC more completely
    Resolves: rhbz#2223953
* Thu Jul 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 1:3.0.8-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Files

/etc/pki/tls
/etc/pki/tls/certs
/etc/pki/tls/ct_log_list.cnf
/etc/pki/tls/fips_local.cnf
/etc/pki/tls/misc
/etc/pki/tls/openssl.cnf
/etc/pki/tls/openssl.d
/etc/pki/tls/private
/usr/lib/.build-id
/usr/lib/.build-id/13
/usr/lib/.build-id/13/6046bbbffdd700a99a1dd475cf7613a150566c
/usr/lib/.build-id/30
/usr/lib/.build-id/30/de0f2047c35f98676e6b797a2eb8365a818797
/usr/lib/.build-id/40
/usr/lib/.build-id/40/2ea266317cd354ff290b8da3d47f5b34fb4b9b
/usr/lib/.build-id/64
/usr/lib/.build-id/64/dbf9b97a3f928bae2875b4d3b104220b7ed2b0
/usr/lib/.build-id/6d
/usr/lib/.build-id/6d/85f672091a041af2bfe8f63fe212d2a749b20c
/usr/lib/.build-id/92
/usr/lib/.build-id/92/34a0bbb6e386a715d6bc0a56eadde34e6b9131
/usr/lib/.build-id/9e
/usr/lib/.build-id/9e/b577de466f7429f476cc9068a5d351bb62d395
/usr/lib/.build-id/d3
/usr/lib/.build-id/d3/8530d6b4166ac47f2b39c7ee9aebf9a6319d27
/usr/lib64/engines-3
/usr/lib64/engines-3/afalg.so
/usr/lib64/engines-3/capi.so
/usr/lib64/engines-3/loader_attic.so
/usr/lib64/engines-3/padlock.so
/usr/lib64/libcrypto.so.3
/usr/lib64/libcrypto.so.3.5.0
/usr/lib64/libssl.so.3
/usr/lib64/libssl.so.3.5.0
/usr/lib64/ossl-modules
/usr/lib64/ossl-modules/fips.so
/usr/lib64/ossl-modules/legacy.so
/usr/share/licenses/openssl-libs
/usr/share/licenses/openssl-libs/LICENSE.txt

Generated by rpm2html 1.8.1

Fabrice Bellet, Tue Mar 25 23:33:29 2025