From owner-freebsd-bugs@FreeBSD.ORG Mon Jan 9 09:40:16 2012 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2662F1065675 for ; Mon, 9 Jan 2012 09:40:16 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id DDE538FC17 for ; Mon, 9 Jan 2012 09:40:15 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q099eFO1058107 for ; Mon, 9 Jan 2012 09:40:15 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q099eF0i058106; Mon, 9 Jan 2012 09:40:15 GMT (envelope-from gnats) Resent-Date: Mon, 9 Jan 2012 09:40:15 GMT Resent-Message-Id: <201201090940.q099eF0i058106@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Volodymyr Kostyrko Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 56CB0106564A for ; Mon, 9 Jan 2012 09:36:35 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22]) by mx1.freebsd.org (Postfix) with ESMTP id 45D368FC19 for ; Mon, 9 Jan 2012 09:36:35 +0000 (UTC) Received: from red.freebsd.org (localhost [127.0.0.1]) by red.freebsd.org (8.14.4/8.14.4) with ESMTP id q099aZT8093649 for ; Mon, 9 Jan 2012 09:36:35 GMT (envelope-from nobody@red.freebsd.org) Received: (from nobody@localhost) by red.freebsd.org (8.14.4/8.14.4/Submit) id q099aYmQ093648; Mon, 9 Jan 2012 09:36:34 GMT (envelope-from nobody) Message-Id: <201201090936.q099aYmQ093648@red.freebsd.org> Date: Mon, 9 Jan 2012 09:36:34 GMT From: Volodymyr Kostyrko To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: bin/163951: bundled openssl seems to miss fix for a CVE-2011-1945 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Jan 2012 09:40:16 -0000 >Number: 163951 >Category: bin >Synopsis: bundled openssl seems to miss fix for a CVE-2011-1945 >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Mon Jan 09 09:40:15 UTC 2012 >Closed-Date: >Last-Modified: >Originator: Volodymyr Kostyrko >Release: RELENG_9 >Organization: >Environment: FreeBSD green.tandem.local 9.0-STABLE FreeBSD 9.0-STABLE #0 r229848: Mon Jan 9 10:58:48 EET 2012 arcade@green.tandem.local:/usr/obj/usr/src/sys/MINIMAL_4BSD amd64 >Description: Recently I started to recheck usability of ssh keys and found that ECDSA keys are already available. I've tried to make one and it points me about key bit length. Reading about this on http://en.wikipedia.org/wiki/Elliptic_Curve_DSA I also noticed that a timing attack is possible against OpenSSL. Quick checking the code shows that we haven't integrated the fix yet as current revision of http://svnweb.freebsd.org/base/stable/9/crypto/openssl/crypto/ecdsa/ecs_ossl.c?revision=225736&view=markup http://svnweb.freebsd.org/base/head/crypto/openssl/crypto/ecdsa/ecs_ossl.c?revision=225736&view=markup misses the fix from: http://cvs.openssl.org/chngview?cn=20892 And after latest OpenSSH import by des: http://svnweb.freebsd.org/base?view=revision&revision=221420 we are automatically creating (and using?) private ECDSA key: http://svnweb.freebsd.org/base/stable/9/etc/rc.d/sshd?r1=221419&r2=221420& >How-To-Repeat: >Fix: Import fix from http://cvs.openssl.org/chngview?cn=20892 >Release-Note: >Audit-Trail: >Unformatted: