[Bug 2141933] Re: OpenSSL in Noble containers panics on FIPS-enabled hosts due to missing openssl-fips-module

[Launchpad Bug Tracker]

This bug was fixed in the package openssl - 3.5.5-1ubuntu3

---------------
openssl (3.5.5-1ubuntu3) resolute; urgency=medium

  * SECURITY UPDATE: OpenSSL TLS 1.3 server may choose unexpected key
    agreement group
    - debian/patches/CVE-2026-2673.patch: fix group tuple handling in
      DEFAULT expansion in doc/man3/SSL_CTX_set1_curves.pod,
      ssl/t1_lib.c, test/tls13groupselection_test.c.
    - CVE-2026-2673
  * SECURITY UPDATE: NULL pointer dereference when processing an OCSP
    response
    - debian/patches/CVE-2026-28387.patch: dane_match_cert() should
      X509_free() on ->mcert instead of OPENSSL_free() in
      crypto/x509/x509_vfy.c.
    - CVE-2026-28387
  * SECURITY UPDATE: NULL Pointer Dereference When Processing a Delta CRL
    - debian/patches/CVE-2026-28388-1.patch: fix NULL Dereference When
      Delta CRL Lacks CRL Number Extension in crypto/x509/x509_vfy.c.
    - debian/patches/CVE-2026-28388-2.patch: Added test in test/*.
    - CVE-2026-28388
  * SECURITY UPDATE: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo
    - debian/patches/CVE-2026-28389.patch: Fix NULL deref in
      [ec]dh_cms_set_shared_info in crypto/cms/cms_dh.c,
      crypto/cms/cms_ec.c.
    - CVE-2026-28389
  * SECURITY UPDATE: Possible NULL Dereference When Processing CMS
    KeyTransportRecipientInfo
    - debian/patches/CVE-2026-28390.patch: Fix NULL deref in
      rsa_cms_decrypt in crypto/cms/cms_rsa.c.
    - CVE-2026-28390
  * SECURITY UPDATE: Heap buffer overflow in hexadecimal conversion
    - debian/patches/CVE-2026-31789.patch: avoid possible buffer overflow
      in buf2hex conversion in crypto/o_str.c.
    - CVE-2026-31789
  * SECURITY UPDATE: Incorrect failure handling in RSA KEM RSASVE
    encapsulation
    - debian/patches/CVE-2026-31790-1.patch: validate RSA_public_encrypt()
      result in RSASVE in providers/implementations/kem/rsa_kem.c.
    - debian/patches/CVE-2026-31790-2.patch: test RSA_public_encrypt()
      result in RSASVE in test/evp_extra_test.c.
    - CVE-2026-31790

 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>  Tue, 07 Apr 2026
08:05:56 -0400

** Changed in: openssl (Ubuntu)
       Status: New => Fix Released

** CVE added: https://cve.org/CVERecord?id=CVE-2026-2673

** CVE added: https://cve.org/CVERecord?id=CVE-2026-28387

** CVE added: https://cve.org/CVERecord?id=CVE-2026-28388

** CVE added: https://cve.org/CVERecord?id=CVE-2026-28389

** CVE added: https://cve.org/CVERecord?id=CVE-2026-28390

** CVE added: https://cve.org/CVERecord?id=CVE-2026-31789

** CVE added: https://cve.org/CVERecord?id=CVE-2026-31790

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/2141933

Title:
  OpenSSL in Noble containers panics on FIPS-enabled hosts due to
  missing openssl-fips-module

Status in openssl package in Ubuntu:
  Fix Released
Status in openssl source package in Noble:
  New

Bug description:
  [Description]
  On systems running a FIPS-enabled Kernel (/proc/sys/crypto/fips_enabled = 1), OpenSSL 3.0 (on Ubuntu Noble) fails to initialize crypto algorithms within environments that do not have the FIPS provider module installed, such as standard container images.

  When running openssl commands inside a container on a FIPS-enabled
  host, the following error occurs:

  # openssl s_client -connect canonical.com:443
  4007C30091790000:error:12800067:DSO support routines:dlfcn_load:could not load the shared library:../crypto/dso/dso_dlfcn.c:118:filename(/usr/lib/x86_64-linux-gnu/ossl-modules/fips.so): /usr/lib/x86_64-linux-gnu/ossl-modules/fips.so: cannot open shared object file: No such file or directory
  4007C30091790000:error:12800067:DSO support routines:DSO_load:could not load the shared library:../crypto/dso/dso_lib.c:152:
  4007C30091790000:error:07880025:common libcrypto routines:provider_init:reason(524325):../crypto/provider_core.c:912:name=fips
  Root Cause Analysis:
  OpenSSL on Ubuntu Noble (24.04) detects the FIPS flag enabled in the host kernel and automatically attempts to load the FIPS provider module (fips.so).

  While a host system with pro enable fips-update will automatically
  have the openssl-fips-module package installed, standard container
  images (e.g., ubuntu:24.04) do not include this package by default.
  Consequently, the container inherits the FIPS enforcement from the
  kernel but lacks the userspace libraries required to support it,
  leading to the crash.

  [Reproducer]
  Provision a VM with Ubuntu Noble (24.04).

  Enable FIPS mode (ensure /proc/sys/crypto/fips_enabled is 1).

  Install Docker.

  Run a standard Ubuntu container and attempt to use OpenSSL:

  $ docker run --rm -it ubuntu:24.04 /bin/bash
  # apt update && apt install openssl -y
  # openssl s_client -connect canonical.com:443

  [Workaround]
  The issue can be mitigated by explicitly disabling FIPS mode enforcement for the OpenSSL application via an environment variable:

  export OPENSSL_FORCE_FIPS_MODE=0

  [Additional Information]
  This behavior appears to be a regression or a strictness change in OpenSSL 3.0 on Noble. The same workflow on Ubuntu Jammy does not exhibit this failure, suggesting that previous versions handled the missing FIPS module more gracefully or did not enforce the kernel flag as strictly in userspace.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2141933/+subscriptions