CVE-2018-0737

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).

• fix CVE-2021-3712 - handling ASN.1 string as NULL terminated leads to read buffer overrun
• Port patches from oracle6els branch, original changelog entry:
• Oracle bug 28730228: backport CVE-2018-0732
• Oracle bug 28758493: backport CVE-2018-0737
• Merge upstream patch to fix CVE-2018-0739
• Avoid out-of-bounds read. Fixes CVE 2017-3735. By Rich Salz
• sha256 is used for the RSA pairwise consistency test instead of sha1

• fix CVE-2021-3712 - handling ASN.1 string as NULL terminated leads to read buffer overrun
• Port patches from oracle6els branch, original changelog entry:
• Oracle bug 28730228: backport CVE-2018-0732
• Oracle bug 28758493: backport CVE-2018-0737
• Merge upstream patch to fix CVE-2018-0739
• Avoid out-of-bounds read. Fixes CVE 2017-3735. By Rich Salz
• sha256 is used for the RSA pairwise consistency test instead of sha1

Updated openssl packages fix security vulnerabilities:

During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack (CVE-2018-0732).

The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key (CVE-2018-0737).

This update for openssl-1_1 fixes the following issues:

Security issues fixed:

• The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951)
• Fix FIPS RSA generator (bsc#1118913)

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-6.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

This feature update for venv-salt-minion provides the following changes:

• Introduce venv-salt-minion.
• Mention fixed issues provided with the bundle.

This update for openssl fixes the following security issue:

• CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039)

This update for openssl fixes the following security issue:

• CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039).

This update for openssl1 fixes the following security issues:

• CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039)
• CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack (bsc#1097158)
• Blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)

This update for compat-openssl098 fixes the following security issues:

• CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack (bsc#1097158)
• Blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
• CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039)
• CVE-2018-0739: Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could have resulted in DoS (bsc#1087102).

This update for openssl fixes the following issues:

These security issues were fixed:

• Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information (bsc#1104789)
• CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039)

These non-security issues were fixed:

• Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)
• Fixed path to the engines which are under /lib64 on SLE-12 (bsc#1101246, bsc#997043)

This update for openssl fixes the following issues:

These security issues were fixed:

• Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information (bsc#1104789)
• CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039)

These non-security issues were fixed:

• Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)
• Fixed path to the engines which are under /lib64 on SLE-12 (bsc#1101246, bsc#997043)

This update for openssl-1_0_0 to 1.0.2p fixes the following issues:

These security issues were fixed:

• Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information (bsc#1104789)
• CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039)
• CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack (bsc#1097158)
• Make problematic ECDSA sign addition length-invariant
• Add blinding to ECDSA and DSA signatures to protect against side channel attacks

This non-security issue was fixed:

• Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

Non-security issues fixed:

• Added openssl(cli) so that the packages that required the openssl binary can require this instead of the new openssl meta package (bsc#1101470).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

Non-security issues fixed:

• Added openssl(cli) so that the packages that required the openssl binary can require this instead of the new openssl meta package (bsc#1101470).

This update for openssl-1_1 fixes the following issues:

Security issues fixed:

• The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951)
• Fix FIPS RSA generator (bsc#1118913)

This update for openssl fixes the following issues:

• CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158)
• CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652)
• CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039)
• CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes 'PortSmash') (bsc#1113534)
• CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)
• Fix One&Done side-channel attack on RSA (bsc#1104789)
• Reject invalid EC point coordinates (bsc#1131291)
• The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951)
• Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)
• blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)

Non security fixes:

• correct the error detection in the fips patch (bsc#1106197)
• Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)

Alejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Tapia discovered that OpenSSL incorrectly handled RSA key generation. An attacker could possibly use this issue to perform a cache-timing attack and recover private RSA keys.

Keegan Ryan discovered that OpenSSL incorrectly handled ECDSA key generation. An attacker could possibly use this issue to perform a cache-timing attack and recover private ECDSA keys. (CVE-2018-0495)

Guido Vranken discovered that OpenSSL incorrectly handled very large prime values during a key agreement. A remote attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2018-0732)

Alejandro Cabrera Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Tapia discovered that OpenSSL incorrectly handled RSA key generation. An attacker could possibly use this issue to perform a cache-timing attack and recover private RSA keys. (CVE-2018-0737)