USN-6663-3: OpenSSL update
USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory details: As a security improvement, OpenSSL will now return deterministic random bytes instead of an error when detecting wrong padding in PKCS#1 v1.5 RSA to prevent its use in possible Bleichenbacher timing attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6663-3?
The severity of USN-6663-3 is classified as a moderate security issue.
How do I fix USN-6663-3?
To fix USN-6663-3, update the affected packages to version 3.0.13-0ubuntu3.1 through your package manager.
What packages are affected by USN-6663-3?
USN-6663-3 affects the libssl-doc, libssl3t64, and openssl packages in Ubuntu 24.04.
What does USN-6663-3 address in OpenSSL?
USN-6663-3 addresses improvements in OpenSSL related to returning deterministic random bytes for padding errors.
Is USN-6663-3 applicable to all versions of Ubuntu?
USN-6663-3 is specifically applicable to Ubuntu 24.04 LTS.