From c3144e102571517df6c15ccc049fa3660ab3cb0a Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Wed, 15 Jan 2025 18:29:52 +0100 Subject: [PATCH] Add CHANGES.md and NEWS.md updates for CVE-2024-13176 Reviewed-by: Tim Hudson Reviewed-by: Neil Horman Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/26429) --- CHANGES.md | 14 ++++++++++++++ NEWS.md | 14 +++++++++++--- 2 files changed, 25 insertions(+), 3 deletions(-) diff --git a/CHANGES.md b/CHANGES.md index 741dbcb5ec8ee..1369f5d826a11 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -127,6 +127,19 @@ OpenSSL 3.4 ### Changes between 3.4.0 and 3.4.1 [xx XXX xxxx] + * Fixed timing side-channel in ECDSA signature computation. + + There is a timing signal of around 300 nanoseconds when the top word of + the inverted ECDSA nonce value is zero. This can happen with significant + probability only for some of the supported elliptic curves. In particular + the NIST P-521 curve is affected. To be able to measure this leak, the + attacker process must either be located in the same physical computer or + must have a very fast network connection with low latency. + + ([CVE-2024-13176]) + + *Tomáš Mráz* + * Reverted the behavior change of CMS_get1_certs() and CMS_get1_crls() that happened in the 3.4.0 release. These functions now return NULL again if there are no certs or crls in the CMS object. @@ -20986,6 +20999,7 @@ ndif +[CVE-2024-13176]: https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176 [CVE-2024-9143]: https://www.openssl.org/news/vulnerabilities.html#CVE-2024-9143 [CVE-2024-6119]: https://www.openssl.org/news/vulnerabilities.html#CVE-2024-6119 [CVE-2024-5535]: https://www.openssl.org/news/vulnerabilities.html#CVE-2024-5535 diff --git a/NEWS.md b/NEWS.md index fb36cc3e8a7af..2808e335a6763 100644 --- a/NEWS.md +++ b/NEWS.md @@ -49,13 +49,20 @@ This release adds the following new features: OpenSSL 3.4 ----------- -### Major changes between OpenSSL 3.3 and OpenSSL 3.4 [under development] +### Major changes between OpenSSL 3.4.0 and OpenSSL 3.4.1 [under development] + +This release is in development. + +This release incorporates the following bug fixes and mitigations: + + * Fixed timing side-channel in ECDSA signature computation. + ([CVE-2024-13176]) + +### Major changes between OpenSSL 3.3 and OpenSSL 3.4.0 [22 Oct 2024] OpenSSL 3.4.0 is a feature release adding significant new functionality to OpenSSL. -This release is in development. - This release incorporates the following potentially significant or incompatible changes: @@ -1848,6 +1855,7 @@ OpenSSL 0.9.x +[CVE-2024-13176]: https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176 [CVE-2024-9143]: https://www.openssl.org/news/vulnerabilities.html#CVE-2024-9143 [CVE-2024-6119]: https://www.openssl.org/news/vulnerabilities.html#CVE-2024-6119 [CVE-2024-5535]: https://www.openssl.org/news/vulnerabilities.html#CVE-2024-5535