openSUSE Leap 15.0: 2018:3015-1 Critical: RSA Fixes Detected

This update for openssl-1_0_0 to 1.0.2p fixes the following issues:

These security issues were fixed:

- Prevent One&Done side-channel attack on RSA that allowed physically near

attackers to use EM emanations to recover information (bsc#1104789)

- CVE-2018-0737: The RSA Key generation algorithm has been shown to be

vulnerable to a cache timing side channel attack. An attacker with

sufficient access to mount cache timing attacks during the RSA key

generation process could have recovered the private key (bsc#1089039)

- CVE-2018-0732: During key agreement in a TLS handshake using a DH(E)

based ciphersuite a malicious server could have sent a very large prime

value to the client. This caused the client to spend an unreasonably

long period of time generating a key for this prime resulting in a hang

until the client has finished. This could be exploited in a Denial Of

Service attack (bsc#1097158)

- Make problematic ECDSA sign...