DY30239: ENABLE TLS 1.3 SUPPORT AND SECURITY FIXES FOR OPENSSL ON Z/VSE

APAR status

• Closed as new function.

Error description

• 1.) Enable TLS 1.3 support for OpenSSL on z/VSE.
  2.) Security fixes for OpenSSL on z/VSE:
  CVE-2020-1967
  CVE-2020-1971
  CVE-2021-23840
  CVE-2021-23841
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of OpenSSL on z/VSE.               *
  ****************************************************************
  * PROBLEM DESCRIPTION: 1.) Enable TLS 1.3 support for OpenSSL  *
  *                      on z/VSE.                               *
  *                      2.) Security fixes for OpenSSL on       *
  *                      on z/VSE:                               *
  *                      CVE-2020-1967                           *
  *                      CVE-2020-1971                           *
  *                      CVE-2021-23840                          *
  *                      CVE-2021-23841                          *
  ****************************************************************
  * RECOMMENDATION: Install this PTF.                            *
  *                 Also install PTF UI72645 for APAR PH31756    *
  *                 and PTF UI73342 for APAR PH28252.            *
  ****************************************************************
  1.) Enable TLS 1.3 support for OpenSSL on z/VSE.
  2.) Security fixes for OpenSSL on z/VSE:
  CVE-2020-1967
  CVE-2020-1971
  CVE-2021-23840
  CVE-2021-23841
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UD54385

Modules/Macros

• IJBGSKOS IJBSSLLE IJBSSLM
  

Fix information

• Fixed component name

  Z/VSE CRYPTOSER

• Fixed component ID

  5686VS617

Applicable component levels

• R62S PSY UD54385

     UP21/02/23 I 1000