CVE-2018-5407

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p). (CVE-2018-0734)

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'. (CVE-2018-5407

These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-6.2 package on the GA media of openSUSE Tumbleweed.

This feature update for venv-salt-minion provides the following changes:

• Introduce venv-salt-minion.
• Mention fixed issues provided with the bundle.

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

Non-security issues fixed:

• Added openssl(cli) so that the packages that required the openssl binary can require this instead of the new openssl meta package (bsc#1101470).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2018-0737: Corrected the current error detection of the current fix (bsc#1106197).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

Non-security issues fixed:

• Added openssl(cli) so that the packages that required the openssl binary can require this instead of the new openssl meta package (bsc#1101470).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).

Non-security issues fixed:

• Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209).

This update for openssl1 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for openssl-1_0_0 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• Add missing timing side channel patch for DSA signature generation (bsc#1113742).

Non-security issues fixed:

• Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209).
• Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078).

This update for openssl-1_0_0 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Added elliptic curve scalar multiplication timing attack defenses that fixes 'PortSmash' (bsc#1113534).

Non-security issues fixed:

• Added missing timing side channel patch for DSA signature generation (bsc#1113742).
• Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078).
• Fixed infinite loop in DSA generation with incorrect parameters (bsc#1112209)

This update for compat-openssl098 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed timing vulnerability in DSA signature generation (bsc#1113652).
• CVE-2018-5407: Fixed elliptic curve scalar multiplication timing attack defenses (bsc#1113534).
• CVE-2016-8610: Adjusted current fix and add missing error string (bsc#1110018).
• Fixed the 'One and Done' side-channel attack on RSA (bsc#1104789).

This update for nodejs4 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652)
• CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka 'PortSmash') (bsc#1113534)
• CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625)
• CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626)
• CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627)
• CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630)
• CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)

This update for nodejs6 to version 6.16.0 fixes the following issues:

Security issues fixed:

• CVE-2018-0734: Fixed a timing vulnerability in the DSA signature generation (bsc#1113652)
• CVE-2018-5407: Fixed a hyperthread port content side channel attack (aka 'PortSmash') (bsc#1113534)
• CVE-2018-12120: Fixed that the debugger listens on any interface by default (bsc#1117625)
• CVE-2018-12121: Fixed a denial of Service with large HTTP headers (bsc#1117626)
• CVE-2018-12122: Fixed the 'Slowloris' HTTP Denial of Service (bsc#1117627)
• CVE-2018-12116: Fixed HTTP request splitting (bsc#1117630)
• CVE-2018-12123: Fixed hostname spoofing in URL parser for javascript protocol (bsc#1117629)

This update for openssl fixes the following issues:

• CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158)
• CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652)
• CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039)
• CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes 'PortSmash') (bsc#1113534)
• CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)
• Fix One&Done side-channel attack on RSA (bsc#1104789)
• Reject invalid EC point coordinates (bsc#1131291)
• The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations (bsc#1117951)
• Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)
• blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)

Non security fixes:

• correct the error detection in the fips patch (bsc#1106197)
• Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470)

Samuel Weiser discovered that OpenSSL incorrectly handled DSA signing. An attacker could possibly use this issue to perform a timing side-channel attack and recover private DSA keys. (CVE-2018-0734)

Samuel Weiser discovered that OpenSSL incorrectly handled ECDSA signing. An attacker could possibly use this issue to perform a timing side-channel attack and recover private ECDSA keys. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-0735)

Billy Bob Brumley, Cesar Pereida Garcia, Sohaib ul Hassan, Nicola Tuveri, and Alejandro Cabrera Aldaya discovered that Simultaneous Multithreading (SMT) architectures are vulnerable to side-channel leakage. This issue is known as "PortSmash". An attacker could possibly use this issue to perform a timing side-channel attack and recover private keys. (CVE-2018-5407)