[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
Mauro Matteo Cascella <mcascell(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Comment|0 |updated
--- Comment #0 has been edited ---
The BN_mod_sqrt() function, which computes a modular square root, contains
a bug that can cause it to loop forever for non-prime moduli.
Internally this function is used when parsing certificates that contain
elliptic curve public keys in compressed form or explicit elliptic curve
parameters with a base point encoded in compressed form.
It is possible to trigger the infinite loop by crafting a certificate that
has invalid explicit curve parameters.
Since certificate parsing happens prior to verification of the certificate
signature, any process that parses an externally supplied certificate may thus
be subject to a denial of service attack. The infinite loop can also be
reached when parsing crafted private keys as they can contain explicit
elliptic curve parameters.
Thus vulnerable situations include:
TLS clients consuming server certificates
TLS servers consuming client certificates
Hosting providers taking certificates or private keys from customers
Certificate authorities parsing certification requests from subscribers
Anything else which parses ASN.1 elliptic curve parameters
Also any other applications that use the BN_mod_sqrt() where the attacker
can control the parameter values are vulnerable to this DoS issue.
On the OpenSSL 1.0.2 version the public key is not parsed during initial
parsing of the certificate which makes it slightly harder to trigger
the infinite loop. However any operation which requires the public key
from the certificate will trigger the infinite loop. In particular the
attacker can use a self-signed certificate to trigger the loop during
verification of the certificate signature.
This issue affects OpenSSL versions 1.0.2, 1.1.1 and 3.0. It was
addressed in the releases of 1.1.1n and 3.0.2 on the 15th March 2022.
OpenSSL 1.0.2 users should upgrade to 1.0.2zd
OpenSSL 1.1.1 users should upgrade to 1.1.1n
OpenSSL 3.0 users should upgrade to 3.0.2
This issue was reported to OpenSSL on the 24th February 2022 by Tavis Ormandy
from Google. The fix was developed by David Benjamin from Google and Tomáš Mráz
from OpenSSL.
Upstream patch:
https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=3118eb649344...
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
2 years, 2 months
[Bug 2062202] CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
Nick Tait <ntait(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
Deadline|2022-03-15 |
Summary|EMBARGOED CVE-2022-0778 |CVE-2022-0778 openssl:
|openssl: Infinite loop in |Infinite loop in
|BN_mod_sqrt() reachable |BN_mod_sqrt() reachable
|when parsing certificates |when parsing certificates
CC| |aos-bugs(a)redhat.com,
| |bootloader-eng-team@redhat.
| |com, cfergeau(a)redhat.com,
| |crobinso(a)redhat.com,
| |crypto-team(a)lists.fedorapro
| |ject.org,
| |dhalasz(a)redhat.com,
| |dueno(a)redhat.com,
| |elima(a)redhat.com,
| |epel-packagers-sig(a)lists.fe
| |doraproject.org,
| |erik-fedora(a)vanpienbroek.nl
| |, f4bug(a)amsat.org,
| |fmartine(a)redhat.com,
| |ktietz(a)redhat.com,
| |marcandre.lureau(a)redhat.com
| |, michel(a)michel-slm.name,
| |mjg59(a)srcf.ucam.org,
| |mosmerov(a)redhat.com,
| |mspacek(a)redhat.com,
| |pjones(a)redhat.com,
| |redhat-bugzilla(a)linuxnetz.d
| |e, rharwood(a)redhat.com,
| |rh-spice-bugs(a)redhat.com,
| |rjones(a)redhat.com,
| |tm(a)t8m.info,
| |virt-maint(a)lists.fedoraproj
| |ect.org,
| |virt-maint(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2062202
2 years, 2 months
[Bug 2063092] New: F37FailsToInstall: mingw32-tesseract-tools, tesseract-tools, mingw64-tesseract-tools
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2063092
Bug ID: 2063092
Summary: F37FailsToInstall: mingw32-tesseract-tools,
tesseract-tools, mingw64-tesseract-tools
Product: Fedora
Version: rawhide
Status: NEW
Component: tesseract
Assignee: karlikt(a)gmail.com
Reporter: mhroncok(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: epel-packagers-sig(a)lists.fedoraproject.org,
karlikt(a)gmail.com, manisandro(a)gmail.com
Blocks: 2045109 (F37FailsToInstall,RAWHIDEFailsToInstall)
Target Milestone: ---
Classification: Fedora
Hello,
Please note that this comment was generated automatically. If you feel that
this output has mistakes, please contact me via email (mhroncok(a)redhat.com).
Your package (tesseract) Fails To Install in Fedora 37:
can't install mingw32-tesseract-tools:
- nothing provides mingw32(libcommon_training.dll) needed by
mingw32-tesseract-tools-5.1.0-1.fc37.noarch
- nothing provides mingw32(libpango_training.dll) needed by
mingw32-tesseract-tools-5.1.0-1.fc37.noarch
- nothing provides mingw32(libunicharset_training.dll) needed by
mingw32-tesseract-tools-5.1.0-1.fc37.noarch
can't install tesseract-tools:
- nothing provides libcommon_training.so()(64bit) needed by
tesseract-tools-5.1.0-1.fc37.x86_64
- nothing provides libpango_training.so()(64bit) needed by
tesseract-tools-5.1.0-1.fc37.x86_64
- nothing provides libunicharset_training.so()(64bit) needed by
tesseract-tools-5.1.0-1.fc37.x86_64
can't install mingw64-tesseract-tools:
- nothing provides mingw64(libcommon_training.dll) needed by
mingw64-tesseract-tools-5.1.0-1.fc37.noarch
- nothing provides mingw64(libpango_training.dll) needed by
mingw64-tesseract-tools-5.1.0-1.fc37.noarch
- nothing provides mingw64(libunicharset_training.dll) needed by
mingw64-tesseract-tools-5.1.0-1.fc37.noarch
If you know about this problem and are planning on fixing it, please
acknowledge so by setting the bug status to ASSIGNED. If you don't have time to
maintain this package, consider orphaning it, so maintainers of dependent
packages realize the problem.
If you don't react accordingly to the policy for FTBFS/FTI bugs
(https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai...),
your package may be orphaned in 8+ weeks.
P.S. The data was generated solely from koji buildroot, so it might be newer
than the latest compose or the content on mirrors. To reproduce, use the
koji/local repo only, e.g. in mock:
$ mock -r fedora-37-x86_64 --disablerepo='*' --enablerepo=local install
mingw32-tesseract-tools tesseract-tools mingw64-tesseract-tools
P.P.S. If this bug has been reported in the middle of upgrading multiple
dependent packages, please consider using side tags:
https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter...
Thanks!
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2045109
[Bug 2045109] Fedora 37 Fails To install Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2063092
2 years, 2 months
[Bug 2060917] New: ipython-8.1.1 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2060917
Bug ID: 2060917
Summary: ipython-8.1.1 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: ipython
Keywords: FutureFeature, Triaged
Assignee: lbalhar(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: dcantrell(a)redhat.com,
epel-packagers-sig(a)lists.fedoraproject.org,
lbalhar(a)redhat.com, mhroncok(a)redhat.com,
michel(a)michel-slm.name, mrunge(a)redhat.com,
orion(a)nwra.com, python-sig(a)lists.fedoraproject.org,
tomspur(a)fedoraproject.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 8.1.1
Current version/release in rawhide: 8.1.0-1.fc37
URL: https://ipython.org/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/1399/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2060917
2 years, 2 months