CVE-2016-7056

A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.

These are all security issues fixed in the libopenssl-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-6.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334)
• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)
• CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085, CVE-2017-3731)
• Degrade the 3DES cipher to MEDIUM in SSLv2 (bsc#1001912)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• fix ca-bundle path (bsc#1022271)

This update for openssl1 fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334)
• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085)
• Degrade the 3DES cipher to MEDIUM in SSLv2 (bsc#1001912)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• call c_rehash in %post (bsc#1001707)
• ship static libraries in the devel package (bsc#1022644)

This update for openssl fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334)
• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• don't attempt session resumption if no ticket is present and session ID length is zero (bsc#984663)

This update for compat-openssl098 fixes the following issues contained in the OpenSSL Security Advisory [26 Jan 2017] (bsc#1021641)

Security issues fixed:

• CVE-2016-7056: A local ECSDA P-256 timing attack that might have allowed key recovery was fixed (bsc#1019334)
• CVE-2016-8610: A remote denial of service in SSL alert handling was fixed (bsc#1005878)
• degrade 3DES to MEDIUM in SSL2 (bsc#1001912)
• CVE-2016-2108: Added a missing commit for CVE-2016-2108, fixing the negative zero handling in the ASN.1 decoder (bsc#1004499)

Bugs fixed:

• fix crash in openssl speed (bsc#1000677)
• don't attempt session resumption if no ticket is present and session ID length is zero (bsc#984663)

The SUSE Linux Enterprise Server 12 SP1 container image has been updated to include security and stability fixes.

The following issues related to building of the container images have been fixed:

• Included krb5 package to avoid the inclusion of krb5-mini which gets selected as a dependency by the Build Service solver. (bsc#1056193)
• Do not install recommended packages when building container images. (bsc#975726)

A number of security issues that have been already fixed by updates released for SUSE Linux Enterprise Server 12 SP1 are now included in the base image. A package/CVE cross-reference is available below.

pam:

• CVE-2015-3238

libtasn1:

• CVE-2015-3622
• CVE-2016-4008

expat:

expat:

• CVE-2012-6702
• CVE-2015-1283
• CVE-2016-0718
• CVE-2016-5300
• CVE-2016-9063
• CVE-2017-9233

libidn:

• CVE-2015-2059
• CVE-2015-8948
• CVE-2016-6261
• CVE-2016-6262
• CVE-2016-6263

zlib:

• CVE-2016-9840
• CVE-2016-9841
• CVE-2016-9842
• CVE-2016-9843

curl:

• CVE-2016-5419
• CVE-2016-5420
• CVE-2016-5421
• CVE-2016-7141
• CVE-2016-7167
• CVE-2016-8615
• CVE-2016-8616
• CVE-2016-8617
• CVE-2016-8618
• CVE-2016-8619
• CVE-2016-8620
• CVE-2016-8621
• CVE-2016-8622
• CVE-2016-8623
• CVE-2016-8624
• CVE-2016-9586
• CVE-2017-1000100
• CVE-2017-1000101
• CVE-2017-7407

openssl:

• CVE-2016-2105
• CVE-2016-2106
• CVE-2016-2107
• CVE-2016-2108
• CVE-2016-2109
• CVE-2016-2177
• CVE-2016-2178
• CVE-2016-2179
• CVE-2016-2180
• CVE-2016-2181
• CVE-2016-2182
• CVE-2016-2183
• CVE-2016-6302
• CVE-2016-6303
• CVE-2016-6304
• CVE-2016-6306
• CVE-2016-7056
• CVE-2016-8610
• CVE-2017-3731

cracklib:

• CVE-2016-6318

pcre:

• CVE-2014-8964
• CVE-2015-2325
• CVE-2015-2327
• CVE-2015-2328
• CVE-2015-3210
• CVE-2015-3217
• CVE-2015-5073
• CVE-2015-8380
• CVE-2015-8381
• CVE-2015-8382
• CVE-2015-8383
• CVE-2015-8384
• CVE-2015-8385
• CVE-2015-8386
• CVE-2015-8387
• CVE-2015-8388
• CVE-2015-8389
• CVE-2015-8390
• CVE-2015-8391
• CVE-2015-8392
• CVE-2015-8393
• CVE-2015-8394
• CVE-2015-8395
• CVE-2016-1283
• CVE-2016-3191

appamor:

• CVE-2017-6507

bash:

• CVE-2014-6277
• CVE-2014-6278
• CVE-2016-0634
• CVE-2016-7543

cpio:

• CVE-2016-2037

glibc:

• CVE-2016-1234
• CVE-2016-3075
• CVE-2016-3706
• CVE-2016-4429
• CVE-2017-1000366

perl:

• CVE-2015-8853
• CVE-2016-1238
• CVE-2016-2381
• CVE-2016-6185

libssh2_org:

• CVE-2016-0787

util-linux:

• CVE-2016-5011
• CVE-2017-2616

ncurses:

• CVE-2017-10684
• CVE-2017-10685
• CVE-2017-11112
• CVE-2017-11113

libksba:

• CVE-2016-4574
• CVE-2016-4579

libxml2:

• CVE-2014-0191
• CVE-2015-8806
• CVE-2016-1762
• CVE-2016-1833
• CVE-2016-1834
• CVE-2016-1835
• CVE-2016-1837
• CVE-2016-1838
• CVE-2016-1839
• CVE-2016-1840
• CVE-2016-2073
• CVE-2016-3627
• CVE-2016-3705
• CVE-2016-4447
• CVE-2016-4448
• CVE-2016-4449
• CVE-2016-4483
• CVE-2016-4658
• CVE-2016-9318
• CVE-2016-9597
• CVE-2017-9047
• CVE-2017-9048
• CVE-2017-9049
• CVE-2017-9050

libgcrypt:

• CVE-2015-7511
• CVE-2016-6313
• CVE-2017-7526

update-alternatives:

• CVE-2015-0860

systemd:

• CVE-2014-9770
• CVE-2015-8842
• CVE-2016-7796

dbus-1:

• CVE-2014-7824
• CVE-2015-0245

Finally, the following packages received non-security fixes:

• augeas
• bzip2
• ca-certificates-mozilla
• coreutils
• cryptsetup
• cyrus-sasl
• dirmngr
• e2fsprogs
• findutils
• gpg2
• insserv-compat
• kmod
• libcap
• libsolv
• libzypp
• lua51
• lvm2
• netcfg
• p11-kit
• permissions
• procps
• rpm
• sed
• sg3_utils
• shadow
• zypper

This update for openssl fixes the following issues:

Security issues fixed:

• CVE-2016-7056: ECSDA P-256 timing attack key recovery (bsc#1019334)
• CVE-2017-3731: Truncated packet could crash via OOB read (bsc#1022085)
• CVE-2016-8610: remote denial of service in SSL alert handling (bsc#1005878)
• CVE-2017-3735: Malformed X.509 IPAdressFamily could cause OOB read (bsc#1056058)

Bug fixes:

• support alternate root ca chains (bsc#1032261)
• X509_get_default_cert_file() returns an incorrect path (bsc#1022271)
• Segmentation fault in 'openssl speed' when engine library file cannot be found (bsc#1000677)
• adjust DEFAULT_SUSE to meet 1.0.2 and current state (bsc#1027908)
• Missing important ciphers in openssl 1.0.1i-47.1 on SLES12 SP1 (bsc#990592)
• out of bounds read+crash in DES_fcrypt (bsc#1065363)
• tracker bug for January 26th 2017 release (bsc#1021641)
• patch for CVE-2016-2108 fails negative zero exploit (bsc#1001502)
• Birthday attacks on 64-bit block ciphers aka triple-des (SWEET32) (bsc#1001912)
• Include additional patch for CVE-2016-2108 (bsc#1004499)
• openssl DEFAULT_SUSE cipher list is missing ECDHE-ECDSA ciphers (bsc#1055825)

Guido Vranken discovered that OpenSSL used undefined behaviour when performing pointer arithmetic. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS as other releases were fixed in a previous security update. (CVE-2016-2177)

It was discovered that OpenSSL did not properly handle Montgomery multiplication, resulting in incorrect results leading to transient failures. This issue only applied to Ubuntu 16.04 LTS, and Ubuntu 16.10. (CVE-2016-7055)

It was discovered that OpenSSL did not properly use constant-time operations when performing ECDSA P-256 signing. A remote attacker could possibly use this issue to perform a timing attack and recover private ECDSA keys. This issue only applied to Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2016-7056)

Shi Lei discovered that OpenSSL incorrectly handled certain warning alerts. A remote attacker could possibly use this issue to cause OpenSSL to stop responding, resulting in a denial of service. (CVE-2016-8610)

Robert Święcki discovered that OpenSSL incorrectly handled certain truncated packets. A remote attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2017-3731)

It was discovered that OpenSSL incorrectly performed the x86_64 Montgomery squaring procedure. While unlikely, a remote attacker could possibly use this issue to recover private keys. This issue only applied to Ubuntu 16.04 LTS, and Ubuntu 16.10. (CVE-2017-3732)