Skip to content
OpenAdvisories
Unscored USN-6663-3 0 CVEs

openssl update

Published May 23, 2024 · Updated Apr 22, 2026

Summary

USN-6663-1 provided a security update for OpenSSL.
This update provides the corresponding update for
Ubuntu 24.04 LTS.

Original advisory details:

As a security improvement, OpenSSL will now
return deterministic random bytes instead of an error
when detecting wrong padding in PKCS#1 v1.5 RSA
to prevent its use in possible Bleichenbacher timing attacks.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS openssl 3.0.13-0ubuntu3.1

References

  • report
    https://launchpad.net/bugs/2054090