Bug 1978567

Summary:	FIPS mode AES CBC CryptBlocks incorrectly re-initializes IV in file crypto/internal/boring/aes.go [rhel-8.4.0.z]
Product:	Red Hat Enterprise Linux 8	Reporter:	RHEL Program Management Team <pgm-rhel-tools>
Component:	golang	Assignee:	Alejandro Sáez Morollón <asm>
Status:	CLOSED ERRATA	QA Contact:	Edjunior Barbosa Machado <emachado>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	8.4	CC:	asm, dbenoit, deparker, emachado, tschelle, tstellar
Target Milestone:	beta	Keywords:	Bugfix, Triaged, ZStream
Target Release:	---
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:	go-toolset:rhel8:8040020210705151404:5081a262	Doc Type:	Bug Fix
Doc Text:	Cause: FIPS mode AES CBC CryptBlocks incorrectly re-initializes IV Consequence: Incorrect encryption when calling CryptoBlocks multiple times over the same input stream Fix: Do not reinitialize IV in aes-cbc Result: Correct encryption when using CryptBlocks multiple times over input stream.	Story Points:	---
Clone Of:	1972825	Environment:
Last Closed:	2021-08-10 13:58:19 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1972825
Bug Blocks:

Comment 9 errata-xmlrpc 2021-08-10 13:58:19 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: go-toolset:rhel8 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:3076