Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 3.1 | openssl096 | 0.9.6m-1sarge2 |
Vulnerabilities 1
-
Critical 9.1
Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.5…