Summary
As a security improvement, OpenSSL will now
return deterministic random bytes instead of an error
when detecting wrong padding in PKCS#1 v1.5 RSA
to prevent its use in possible Bleichenbacher timing attacks.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | openssl | 1.1.1f-1ubuntu2.22 |
| Ubuntu · 22.04 LTS 22.04:LTS | openssl | 3.0.2-0ubuntu1.15 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm5 |
References
-
report
https://launchpad.net/bugs/2054090