Read the docs
Red Hat Security Advisory

RHSA-2019:3700

openssl security, bug fix, and enhancement update

Released 2019-11-05 · Red Hat rating Low · View on Red Hat →

Fixed in

Fixes 3 records

TI-2018-00682 CVE-2018-0734 · GHSA-93g8-hm6f-hrw3

Timing attack against DSA

Priority MEDIUM 46

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.12154 Published 2018-10-30 Partial fix CWE-327
TI-2019-01185 CVE-2019-1543 · GHSA-qpgr-gj53-5m6w

ChaCha20-Poly1305 with long nonces

Priority MEDIUM 41

ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation.

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.05701 Published 2019-03-06 Fixed CWE-327
TI-2018-00683 CVE-2018-0735 · GHSA-4fhm-44hf-3465

Timing attack against ECDSA signature generation

Priority MEDIUM 40

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.04724 Published 2018-10-29 Partial fix CWE-327