Loading...

Linking RHIVOS CVEs to...

Migration: Automation ...

Sync from "Extern...

XML

Word

Printable

Type: Bug
Resolution: Unresolved
Priority: Normal
Fix Version/s: rhel-9.7
Affects Version/s: rhel-9.7
Component/s: openssl
Labels:
- Accepted
- CY25Q2

Fixed in Build:
openssl-3.5.0-2.el9
Regression:
Yes
Severity:
Moderate
Epic Link:
CRYPTO-15944
sprint_count:
1

AssignedTeam:
rhel-security-crypto
Sub-System Group:

ssg_security

Dev Target Milestone:
19
Internal Target Milestone:
20
Story Points:
0.5
ACKs Check:

QE ack, Dev ack
Blocked:
False
Ready:
False
Blocked Reason:

Hide

None

Show
None
Product Documentation Required:
No
Sprint:
Crypto25Q2

Acceptance Criteria:

Hide

AC1) When "rh-allow-sha1-signatures = yes" is set in the configuration then sha1 should be allowed

Show
AC1) When "rh-allow-sha1-signatures = yes" is set in the configuration then sha1 should be allowed
Preliminary Testing:
Pass
Errata Link:
https://errata.engineering.redhat.com/advisory/148294
Gating Tests:

Not Needed
Test Coverage:

Automated

Release Note Type:
Release Note Not Required
ProdDocsReview-CCS:
Unspecified
ProdDocsReview-Dev:
Unspecified
ProdDocsReview-QE:
Unspecified

Experience:
Architecture:

All

PX Impact Score:
SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Planning:
None

OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9 after rebase to 3.5.0. This should be fixed in both RHEL-9 and RHEL-10.

links to

RHBA-2025:148294 openssl bug fix and enhancement update

Assignee:: Dmitry Belyavskiy

Reporter:: George Pantelakis

Developer:: Dmitry Belyavskiy

QA Contact:: George Pantelakis

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2025/04/29 4:39 PM

Updated:: 2025/06/24 3:27 PM

Dev Target end:: 2025/07/07

Target end:: 2025/07/14

Next Planned Release Date:: 2025/11/11