Subject: Re: bug#31831: CVE-2018-0495 Key Extraction Side Channel in Multiple Crypto Libraries

From: Leo Famulari <[email-masked]>
Date: Thu, 14 Jun 2018 16:06:08 -0400

> 2018-06-14 21:50 GMT+02:00 Leo Famulari <[email-masked]>:
> > I'll try OpenSSL next.

They committed a fix but haven't released an update yet:

https://github.com/openssl/openssl/commit/a3e9d5aa980f238805970f420adf5e903d35bf09

There is also an unrelated security advisory for a DoS bug from 2 days
ago:

https://www.openssl.org/news/secadv/20180612.txt

I'll try grafting these patches.