Summary
[1.0.2k-16.0.1.el7_6.1]
- Bump release for rebuild.
[1.0.2k-16.1]
- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 - EC signature local timing side-channel key extraction
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | openssl | 1:1.0.2k-16.0.1.el7_6.1 |
| Oracle Linux · 7 | openssl-devel | 1:1.0.2k-16.0.1.el7_6.1 |
| Oracle Linux · 7 | openssl-libs | 1:1.0.2k-16.0.1.el7_6.1 |
| Oracle Linux · 7 | openssl-perl | 1:1.0.2k-16.0.1.el7_6.1 |
| Oracle Linux · 7 | openssl-static | 1:1.0.2k-16.0.1.el7_6.1 |
Vulnerabilities 1
-
Unscored —CVE-2018-5407 Public exploit
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…