ELSA-2019-0483

Опубликовано: 13 мар. 2019

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2019-0483: openssl security and bug fix update (MODERATE)

[1.0.2k-16.0.1.el7_6.1]

Bump release for rebuild.

[1.0.2k-16.1]

use SHA-256 in FIPS RSA pairwise key check
fix CVE-2018-5407 - EC signature local timing side-channel key extraction

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

openssl

1.0.2k-16.0.1.el7_6.1

openssl-devel

1.0.2k-16.0.1.el7_6.1

openssl-libs

1.0.2k-16.0.1.el7_6.1

openssl-perl

1.0.2k-16.0.1.el7_6.1

openssl-static

1.0.2k-16.0.1.el7_6.1

Oracle Linux x86_64

openssl

1.0.2k-16.0.1.el7_6.1

openssl-devel

1.0.2k-16.0.1.el7_6.1

openssl-libs

1.0.2k-16.0.1.el7_6.1

openssl-perl

1.0.2k-16.0.1.el7_6.1

openssl-static

1.0.2k-16.0.1.el7_6.1

Связанные CVE

CVE-2018-5407

Ссылки на источники

Связанные уязвимости

CVE-2018-5407

CVSS3: 4.7

ubuntu

больше 6 лет назад

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

CVE-2018-5407

CVSS3: 4.8

redhat

больше 6 лет назад

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

CVE-2018-5407

CVSS3: 4.7

nvd

больше 6 лет назад

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.

CVE-2018-5407

CVSS3: 4.7

debian

больше 6 лет назад

Simultaneous Multi-threading (SMT) in processors can enable local user ...

GHSA-3rjg-j575-7f6p

CVSS3: 4.7

github

около 3 лет назад

Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.