From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 100112 invoked by alias); 27 Aug 2018 19:01:38 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 100022 invoked by uid 89); 27 Aug 2018 19:01:37 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-1.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00,KAM_ASCII_DIVIDERS,KAM_NUMSUBJECT autolearn=no version=3.3.2 spammy=HAuthentication-Results:auth, H*UA:Internet, HX-HELO:sk:localho X-HELO: localhost.localdomain Received: from localhost (HELO localhost.localdomain) (127.0.0.1) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Mon, 27 Aug 2018 19:01:36 +0000 Reply-To: cygwin@cygwin.com Return-Path: Authentication-Results: sourceware.org; auth=none Date: Tue, 28 Aug 2018 03:14:00 -0000 From: Corinna Vinschen To: cygwin@cygwin.com Subject: [ANNOUNCEMENT] Updated: openssl-1.0.2p-1 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline User-Agent: Mutt/1.9.2 (2017-12-15) Content-Transfer-Encoding: quoted-printable Sender: qmail alias X-SW-Source: 2018-08/txt/msg00347.txt.bz2 Hi folks, I've updated the version of OpenSSL to 1.0.2p-1. This is a security bugfix release. ------------------------------------------------------------------------ Changes between 1.0.2o and 1.0.2p [14 Aug 2018] *) Client DoS due to large DH parameter During key agreement in a TLS handshake using a DH(E) based ciphersuit= e a malicious server can send a very large prime value to the client. This= will cause the client to spend an unreasonably long period of time generati= ng a key for this prime resulting in a hang until the client has finished. = This could be exploited in a Denial Of Service attack. This issue was reported to OpenSSL on 5th June 2018 by Guido Vranken (CVE-2018-0732) [Guido Vranken] *) Cache timing vulnerability in RSA Key Generation The OpenSSL RSA Key generation algorithm has been shown to be vulnerab= le to a cache timing side channel attack. An attacker with sufficient access= to mount cache timing attacks during the RSA key generation process could recover the private key. This issue was reported to OpenSSL on 4th April 2018 by Alejandro Cabr= era Aldaya, Billy Brumley, Cesar Pereida Garcia and Luis Manuel Alvarez Ta= pia. (CVE-2018-0737) [Billy Brumley] *) Make EVP_PKEY_asn1_new() a bit stricter about its input. A NULL pem_s= tr parameter is no longer accepted, as it leads to a corrupt table. NULL pem_str is reserved for alias entries only. [Richard Levitte] *) Revert blinding in ECDSA sign and instead make problematic addition length-invariant. Switch even to fixed-length Montgomery multiplicatio= n. [Andy Polyakov] *) Change generating and checking of primes so that the error rate of not being prime depends on the intended use based on the size of the input. For larger primes this will result in more rounds of Miller-Rabin. The maximal error rate for primes with more than 1080 bits is lowered to 2^-128. [Kurt Roeckx, Annie Yousar] *) Increase the number of Miller-Rabin rounds for DSA key generating to 6= 4. [Kurt Roeckx] *) Add blinding to ECDSA and DSA signatures to protect against side chann= el attacks discovered by Keegan Ryan (NCC Group). [Matt Caswell] *) When unlocking a pass phrase protected PEM file or PKCS#8 container, we now allow empty (zero character) pass phrases. [Richard Levitte] *) Certificate time validation (X509_cmp_time) enforces stricter compliance with RFC 5280. Fractional seconds and timezone offsets are no longer allowed. [Emilia K=C3=A4sper] ------------------------------------------------------------------------ Have fun, Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple