-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-98d17e2730 2025-02-02 01:39:58.427952+00:00 -------------------------------------------------------------------------------- Name : crypto-policies Product : Fedora 41 Version : 20250124 Release : 1.git4d262e7.fc41 URL : https://gitlab.com/redhat-crypto/fedora-crypto-policies Summary : System-wide crypto policies Description : This package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries. -------------------------------------------------------------------------------- Update Information: Sync up to rawhide aa54bb5 / 20250124-1.git4d262e7 (now that f41 has openssh 9.9 and gnutls 3.8.8) openssl: stricter enabling of Ciphersuites openssl: make use of -CBC and -AESGCM keywords openssl, BSI: add TLS 1.3 Brainpool identifiers openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256 update-crypto-policies: don't output FIPS warning in fips mode gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768 nss: add mlkem768x25519 openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768 Silence harmless error messages from %%pre scriptlet openssh, TEST-PQ: rename MLKEM key-exchange to MLKEM768 openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256 TEST-PQ: enable sntrup761x25519-sha512 and mlkem768x25519-sha256 for openssh -------------------------------------------------------------------------------- ChangeLog: * Fri Jan 24 2025 Alexander Sosedkin <asosedkin@xxxxxxxxxx> - 20250124-1.git4d262e7 - openssl: stricter enabling of Ciphersuites - openssl: make use of -CBC and -AESGCM keywords - openssl, BSI: add TLS 1.3 Brainpool identifiers - openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256 - update-crypto-policies: don't output FIPS warning in fips mode - gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768 - nss: add mlkem768x25519 - openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768 - Silence harmless error messages from %pre scriptlet - openssh, TEST-PQ: rename MLKEM key-exchange to MLKEM768 - openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256 - TEST-PQ: enable sntrup761x25519-sha512 and mlkem768x25519-sha256 for openssh -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-98d17e2730' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-announce-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
