========================================================================== Ubuntu Security Notice USN-6663-3 May 23, 2024
openssl update ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS Summary: Add implicit rejection in PKCS#1 v1.5 in OpenSSL. Software Description: - openssl: Secure Socket Layer (SSL) cryptographic library and tools Details: USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: As a security improvement, OpenSSL will now return deterministic random bytes instead of an error when detecting wrong padding in PKCS#1 v1.5 RSA to prevent its use in possible Bleichenbacher timing attacks. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS libssl-doc 3.0.13-0ubuntu3.1 libssl3t64 3.0.13-0ubuntu3.1 openssl 3.0.13-0ubuntu3.1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6663-3 https://ubuntu.com/security/notices/USN-6663-1 https://launchpad.net/bugs/2054090 Package Information: https://launchpad.net/ubuntu/+source/openssl/3.0.13-0ubuntu3.1
OpenPGP_0x96F770C739BC5ACE.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
