CVE-2018-15836: Improper Verification of Cryptographic Signature (CWE-347)
value: In verify_signed_hash() in lib/liboswkeys/signatures.c in Openswan before 2.6.50.1, the RSA implementation does not verify the value of padding string during PKCS#1 v1.5 signature verification. Consequently, a remote attacker can forge signatures when small public exponents are being used. IKEv2 signature verification is affected when RAW RSA keys are used.
CWE description: The product does not verify, or incorrectly verifies, the cryptographic signature for data.
CVSS v3 base score: 7.5
Published: 2018-09-26T21:29Z
Repository: https://github.com/xelerance/Openswan
Language: Other
Files changed: CHANGES, Makefile.ver, debian/NEWS, debian/changelog, packaging/centos5/openswan.spec, packaging/fedora/openswan.spec, packaging/rhel7/openswan.spec, packaging/suse/openswan.spec
Commit date: 2018-08-24 12:18:42 -0400
Commit message: Update VERSION to 2.6.50.1

Diff: diff --git a/CHANGES b/CHANGES
index bbb1b9fd1..b90c96487 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2,10 +2,23 @@
 Note that listings are in chronological order of release times, not in order
 of version numbers, so you will find 2.5.x and 2.6.x releases intersperced.
 
 See also docs/KNOWN_BUGS.txt and https://github.com/xelerance/Openswan/issues
 
+v2.6.50.1 (August 24, 2018)
+
+This release fixes CVE-2018-15836 (a Bleichenbacher-style signature
+forgery which involves RSA padding attack)
+
+* wo#7449 . test case for Bleichenbacher-style signature forgery [Bart Trojanowski]
+* wo#7449 . verify padding contents for IKEv2 RSA sig check [Bart Trojanowski]
+* wo#7449 . added lo06-verifybadsigs test case [Bart Trojanowski]
+* b01-install test case will no longer spam with the environment
+  variables [Bart Trojanowski]
+* lp28-addrinfoserialize: IP address for moon changed to
+  192.139.46.82 [Bart Trojanowski]
+
 v2.6.50 (August 3, 2017)
 
 Bug fixes for RSA key size and other issues
 
 * IKEv1 proposal from self=%any should use localaddr in proposal [MCR]
diff --git a/Makefile.ver b/Makefile.ver
index 6e423ecc5..c694ba5d1 100644
--- a/Makefile.ver
+++ b/Makefile.ver
@@ -1 +1 @@
-IPSECBASEVERSION=2.6.50
+IPSECBASEVERSION=2.6.50.1
diff --git a/debian/NEWS b/debian/NEWS
index e42a1740c..fa681378f 100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,8 +1,8 @@
-openswan (1:2.6.50-0xelerance1) trusty; urgency=low
+openswan (1:2.6.50.1-0xelerance1) trusty; urgency=low
 
-  * Update to 2.6.50
+  * Update to 2.6.50.1
 
   The real changelog is in /usr/share/doc/openswan/changelog.gz
 
   This package is NOT an official Debian/Ubuntu package. Please do
   not file any Debian/Ubuntu bug reports for this package but contact
diff --git a/debian/changelog b/debian/changelog
index e42a1740c..fa681378f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,8 @@
-openswan (1:2.6.50-0xelerance1) trusty; urgency=low
+openswan (1:2.6.50.1-0xelerance1) trusty; urgency=low
 
-  * Update to 2.6.50
+  * Update to 2.6.50.1
 
   The real changelog is in /usr/share/doc/openswan/changelog.gz
 
   This package is NOT an official Debian/Ubuntu package. Please do
   not file any Debian/Ubuntu bug reports for this package but contact
diff --git a/packaging/centos5/openswan.spec b/packaging/centos5/openswan.spec
index b7d6f3ba5..e57d49759 100644
--- a/packaging/centos5/openswan.spec
+++ b/packaging/centos5/openswan.spec
@@ -1,8 +1,8 @@
 Summary: Openswan IPsec implementation
 Name: openswan
-Version: 2.6.50
+Version: 2.6.50.1
 %{!?buildklips: %{expand: %%define buildklips 0}}
 %{!?buildxen: %{expand: %%define buildxen 0}}
 
 # nss build
 %{!?buildnss: %{expand: %%define buildnss 0}}
diff --git a/packaging/fedora/openswan.spec b/packaging/fedora/openswan.spec
index b22fb0193..ddfb6de65 100644
--- a/packaging/fedora/openswan.spec
+++ b/packaging/fedora/openswan.spec
@@ -1,8 +1,8 @@
 Summary: Openswan IPsec implementation
 Name: openswan
-Version: 2.6.50
+Version: 2.6.50.1
 # Build KLIPS kernel module?
 %{!?buildklips: %{expand: %%define buildklips 0}}
 %{!?buildxen: %{expand: %%define buildxen 0}}
 %{!?buildefence: %{expand: %%define buildefence 0}}
 %{!?development: %{expand: %%define development 0}}
diff --git a/packaging/rhel7/openswan.spec b/packaging/rhel7/openswan.spec
index 8b2938764..bf20c1d46 100644
--- a/packaging/rhel7/openswan.spec
+++ b/packaging/rhel7/openswan.spec
@@ -1,8 +1,8 @@
 Summary: Openswan IPsec implementation
 Name: openswanX
-Version: 2.6.50
+Version: 2.6.50.1
 
 # Openswan -pre/-rc nomenclature has to co-exist with hyphen paranoia
 %define srcpkgver %(echo %{version} | tr -s '_' '-')
 %define ourrelease 2
 Release: %{ourrelease}
diff --git a/packaging/suse/openswan.spec b/packaging/suse/openswan.spec
index 7186bce29..eb7517ad3 100644
--- a/packaging/suse/openswan.spec
+++ b/packaging/suse/openswan.spec
@@ -3,11 +3,11 @@
 # for sles11+ and opensuse 11.4
 # for sles10, use sles10.spec
 
 Summary: Openswan IPSEC implementation
 Name: openswan
-Version: 2.6.50
+Version: 2.6.50.1
 # Build KLIPS kernel module?
 %{!?buildklips: %{expand: %%define buildklips 0}}
 
 # Openswan -pre/-rc nomenclature has to co-exist with hyphen paranoia
 %define srcpkgver %(echo %{version} | tr -s '_' '-')

Vulnerable code: IPSECBASEVERSION=2.6.50
openswan (1:2.6.50-0xelerance1) trusty; urgency=low
  * Update to 2.6.50
openswan (1:2.6.50-0xelerance1) trusty; urgency=low
  * Update to 2.6.50
Version: 2.6.50
Version: 2.6.50
Version: 2.6.50
Version: 2.6.50
Fixed code: v2.6.50.1 (August 24, 2018)

This release fixes CVE-2018-15836 (a Bleichenbacher-style signature
forgery which involves RSA padding attack)

* wo#7449 . test case for Bleichenbacher-style signature forgery [Bart Trojanowski]
* wo#7449 . verify padding contents for IKEv2 RSA sig check [Bart Trojanowski]
* wo#7449 . added lo06-verifybadsigs test case [Bart Trojanowski]
* b01-install test case will no longer spam with the environment
  variables [Bart Trojanowski]
* lp28-addrinfoserialize: IP address for moon changed to
  192.139.46.82 [Bart Trojanowski]

IPSECBASEVERSION=2.6.50.1
openswan (1:2.6.50.1-0xelerance1) trusty; urgency=low
  * Update to 2.6.50.1
openswan (1:2.6.50.1-0xelerance1) trusty; urgency=low
  * Update to 2.6.50.1
Version: 2.6.50.1
Version: 2.6.50.1
Version: 2.6.50.1
Version: 2.6.50.1