Last commit made on 2018-12-06
Get this branch:
git clone -b applied/ubuntu/trusty-devel https://git.launchpad.net/ubuntu/+source/openssl
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information


Recent commits

3626cad... by Marc Deslauriers on 2018-12-04

Import patches-applied version 1.0.1f-1ubuntu2.27 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 6f563ffcfd83c602a16a401741934740be9a39dc
Unapplied parent: b9c89eac81157687b4f7f3121b7c59f705f328c3

New changelog entries:
  * SECURITY UPDATE: PortSmash side channel attack
    - debian/patches/CVE-2018-5407.patch: fix timing vulnerability in
      crypto/bn/bn_lib.c, crypto/ec/ec_mult.c.
    - CVE-2018-5407
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-pre1.patch: address a timing side
      channel in crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-1.patch: fix timing vulnerability in
    - debian/patches/CVE-2018-0734-2.patch: fix mod inverse in
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
    - CVE-2018-0734

b9c89ea... by Marc Deslauriers on 2018-12-04

[PATCH] CVE-2018-5407 fix: ECC ladder

Gbp-Pq: CVE-2018-5407.patch.

6b9454f... by Marc Deslauriers on 2018-12-04

[PATCH] Add a constant time flag to one of the bignums to avoid a

Gbp-Pq: CVE-2018-0734-3.patch.

136308e... by Marc Deslauriers on 2018-12-04

[PATCH] Merge to 1.0.2: DSA mod inverse fix.

Gbp-Pq: CVE-2018-0734-2.patch.

0ffbd0b... by Marc Deslauriers on 2018-12-04

[PATCH] Merge DSA reallocation timing fix CVE-2018-0734.

Gbp-Pq: CVE-2018-0734-1.patch.

9ff70eb... by Marc Deslauriers on 2018-12-04

[PATCH] Address a timing side channel whereby it is possible to

Gbp-Pq: CVE-2018-0734-pre1.patch.

b9d5514... by Marc Deslauriers on 2018-12-04

[PATCH] RSA key generation: ensure BN_mod_inverse and BN_mod_exp_mont

Gbp-Pq: CVE-2018-0737-4.patch.

94e8237... by Marc Deslauriers on 2018-12-04

[PATCH] consttime flag changed

Gbp-Pq: CVE-2018-0737-3.patch.

a4ae469... by Marc Deslauriers on 2018-12-04

[PATCH] used ERR set/pop mark

Gbp-Pq: CVE-2018-0737-2.patch.

f94e3d2... by Marc Deslauriers on 2018-12-04

[PATCH] Replaced variable-time GCD with consttime inversion to avoid

Gbp-Pq: CVE-2018-0737-1.patch.