CVE-2018-0734

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).

• CVE-2018-0734: fix timing side channel attack in DSA signature algorithm

• CVE-2018-0734: fix timing side channel attack in DSA signature algorithm

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p). (CVE-2018-0734)

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'. (CVE-2018-5407

This update for virtualbox to version 5.2.24 fixes the following issues:

Multiple security issues fixed:

CVE-2019-2500, CVE-2019-2524, CVE-2019-2552, CVE-2018-3309, CVE-2019-2520 CVE-2019-2521, CVE-2019-2522, CVE-2019-2523, CVE-2019-2526, CVE-2019-2548 CVE-2018-11763, CVE-2019-2511, CVE-2019-2508, CVE-2019-2509, CVE-2019-2527 CVE-2019-2450, CVE-2019-2451, CVE-2019-2555, CVE-2019-2554, CVE-2019-2556 CVE-2018-11784, CVE-2018-0734, CVE-2019-2525, CVE-2019-2446, CVE-2019-2448 CVE-2019-2501, CVE-2019-2504, CVE-2019-2505, CVE-2019-2506, and CVE-2019-2553 (bsc#1122212).

Other issues fixed:

• Linux Additions: fix for building vboxvideo on EL 7.6 standard kernel, contributed by Robert Conde
• USB: fixed a problem causing failures attaching SuperSpeed devices which report USB version 3.1 (rather than 3.0) on Windows hosts
• Audio: added support for surround speaker setups used by Windows 10 Build 1809
• Linux hosts: fixed conflict between Debian and Oracle build desktop files
• Linux guests: fixed building drivers on SLES 12.4
• Linux guests: fixed building shared folder driver with older kernels

This update for virtualbox to version 6.0.10 fixes the following issues:

Security issues fixed:

• CVE-2019-2859 CVE-2019-2867 CVE-2019-2866 CVE-2019-2864 CVE-2019-2865 CVE-2019-1543 CVE-2019-2863 CVE-2019-2848 CVE-2019-2877 CVE-2019-2873 CVE-2019-2874 CVE-2019-2875 CVE-2019-2876 CVE-2019-2850 (boo#1141801)

These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-6.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

This feature update for venv-salt-minion provides the following changes:

• Introduce venv-salt-minion.
• Mention fixed issues provided with the bundle.

This update for openssl-1_1 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-0735: Fixed timing vulnerability in ECDSA signature generation (bsc#1113651).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

Non-security issues fixed:

• Added openssl(cli) so that the packages that required the openssl binary can require this instead of the new openssl meta package (bsc#1101470).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

Non-security issues fixed:

• Added openssl(cli) so that the packages that required the openssl binary can require this instead of the new openssl meta package (bsc#1101470).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).

Non-security issues fixed:

• Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209).

This update for openssl-1_1 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-0735: Fixed timing vulnerability in ECDSA signature generation (bsc#1113651).

Non-security issues fixed:

• Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209).

This update for openssl1 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for openssl-1_0_0 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).

Non-security issues fixed:

• Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209).
• Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078).

This update for openssl-1_0_0 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Added elliptic curve scalar multiplication timing attack defenses that fixes 'PortSmash' (bsc#1113534).

Non-security issues fixed:

• Added missing timing side channel patch for DSA signature generation (bsc#1113742).
• Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078).
• Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209)

This update for compat-openssl098 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for nodejs4 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652)
• CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka 'PortSmash') (bsc#1113534)
• CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625)
• CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626)
• CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627)
• CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630)
• CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)

This update for nodejs6 to version 6.16.0 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652)
• CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka 'PortSmash') (bsc#1113534)
• CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625)
• CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626)
• CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627)
• CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630)
• CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)

This update for openssl fixes the following issues:

• CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158)
• CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652)
• CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039)
• CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes 'PortSmash') (bsc#1113534)
• CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)
• Fix One&Done side-channel attack on RSA (bsc#1104789)
• Reject invalid EC point coordinates (bsc#1131291)
• The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951)
• Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)
• blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)

Non security fixes:

• correct the error detection in the fips patch (bsc#1106197)
• Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)

Samuel Weiser discovered that OpenSSL incorrectly handled DSA signing. An attacker could possibly use this issue to perform a timing side-channel attack and recover private DSA keys. (CVE-2018-0734)

Samuel Weiser discovered that OpenSSL incorrectly handled ECDSA signing. An attacker could possibly use this issue to perform a timing side-channel attack and recover private ECDSA keys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-0735)

Billy Bob Brumley, Cesar Pereida Garcia, Sohaib ul Hassan, Nicola Tuveri, and Alejandro Cabrera Aldaya discovered that Simultaneous Multithreading (SMT) architectures are vulnerable to side-channel leakage. This issue is known as "PortSmash". An attacker could possibly use this issue to perform a timing side-channel attack and recover private keys. (CVE-2018-5407)