Summary
[1.1.1c-2]
- do not try to use EC groups disallowed in FIPS mode
in TLS
- fix Valgrind regression with constant-time code
[1.1.1c-1]
- update to the 1.1.1c release
[1.1.1b-6]
- adjust the default cert pbe algorithm for pkcs12 -export
in the FIPS mode
[1.1.1b-5]
- Fix small regressions related to the rebase
[1.1.1b-3]
- FIPS compliance fixes
[1.1.1b-1]
- update to the 1.1.1b release
- EVP_KDF API backport from master
- SSH KDF implementation for EVP_KDF API backport from master
- add S390x chacha20-poly1305 assembler support from master branch
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | openssl | 1:1.1.1c-2.el8 |
| Oracle Linux · 8 | openssl-devel | 1:1.1.1c-2.el8 |
| Oracle Linux · 8 | openssl-libs | 1:1.1.1c-2.el8 |
| Oracle Linux · 8 | openssl-perl | 1:1.1.1c-2.el8 |
Vulnerabilities 3
-
Unscored —CVE-2018-0734 EPSS 12%
Timing attack against DSA
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affec…
-
Unscored —
Timing attack against ECDSA signature generation
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.…
-
Unscored —
ChaCha20-Poly1305 with long nonces
ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value (IV) should be 96 bits (12 bytes). OpenSSL allows a variable nonce length and front pads the nonce with 0 bytes if i…