Medium · published October 30, 2018
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
| Product | Versions | Fixed in |
|---|---|---|
| openssl/openssl | ≥ 1.0.2, ≤ 1.0.2p | — |
| openssl/openssl | ≥ 1.1.0, ≤ 1.1.0i | — |
| openssl/openssl | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| canonical/ubuntu_linux | all versions | — |
| debian/debian_linux | all versions | — |
| nodejs/node.js | ≥ 6.0.0, ≤ 6.8.1 | — |
| nodejs/node.js | ≥ 6.9.0, < 6.15.0 | 6.15.0 |
| nodejs/node.js | ≥ 8.0.0, ≤ 8.8.1 | — |
| nodejs/node.js | ≥ 8.9.0, < 8.14.0 | 8.14.0 |
| nodejs/node.js | ≥ 10.0.0, ≤ 10.12.0 | — |
| nodejs/node.js | ≥ 11.0.0, < 11.3.0 | 11.3.0 |
| nodejs/node.js | all versions | — |
| netapp/cn1610_firmware | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/oncommand_unified_manager | all versions | — |
| netapp/santricity_smi-s_provider | all versions | — |
| netapp/snapcenter | all versions | — |
| netapp/steelstore | all versions | — |
| netapp/storage_automation_store | all versions | — |
| oracle/api_gateway | all versions | — |
| oracle/e-business_suite_technology_stack | all versions | — |
| oracle/e-business_suite_technology_stack | all versions | — |
| oracle/e-business_suite_technology_stack | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/enterprise_manager_ops_center | all versions | — |
| oracle/mysql_enterprise_backup | ≥ 3.0, ≤ 3.12.3 | — |
| oracle/mysql_enterprise_backup | ≥ 4.0, ≤ 4.1.2 | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/peoplesoft_enterprise_peopletools | all versions | — |
| oracle/primavera_p6_professional_project_management | ≥ 17.7, ≤ 17.12 | — |
| oracle/primavera_p6_professional_project_management | all versions | — |
| oracle/primavera_p6_professional_project_management | all versions | — |
| oracle/primavera_p6_professional_project_management | all versions | — |
| oracle/primavera_p6_professional_project_management | all versions | — |
| oracle/primavera_p6_professional_project_management | all versions | — |
| oracle/primavera_p6_professional_project_management | all versions | — |
| oracle/tuxedo | all versions | — |