USN-6663-1
openssl update
No scoreFix available
As a security improvement, OpenSSL will now return deterministic random bytes instead of an error when detecting wrong padding in PKCS#1 v1.5 RSA to prevent its use in possible Bleichenbacher timing attacks.
What each source reports
OSVNo score
openssl update
As a security improvement, OpenSSL will now return deterministic random bytes instead of an error when detecting wrong padding in PKCS#1 v1.5 RSA to prevent its use in possible Bleichenbacher timing attacks.
- Record
USN-6663-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslUbuntu:Pro:18.04:LTS | before 1.1.1-1ubuntu2.1~18.04.23+esm5, plus listed versions 1.0.2g-1ubuntu131.0.2g-1ubuntu141.0.2n-1ubuntu11.1.0g-2ubuntu11.1.0g-2ubuntu2 Show 26 moreShow less1.1.0g-2ubuntu31.1.0g-2ubuntu41.1.0g-2ubuntu4.11.1.0g-2ubuntu4.31.1.1-1ubuntu2.1~18.04.11.1.1-1ubuntu2.1~18.04.21.1.1-1ubuntu2.1~18.04.31.1.1-1ubuntu2.1~18.04.41.1.1-1ubuntu2.1~18.04.51.1.1-1ubuntu2.1~18.04.61.1.1-1ubuntu2.1~18.04.71.1.1-1ubuntu2.1~18.04.81.1.1-1ubuntu2.1~18.04.91.1.1-1ubuntu2.1~18.04.101.1.1-1ubuntu2.1~18.04.131.1.1-1ubuntu2.1~18.04.141.1.1-1ubuntu2.1~18.04.151.1.1-1ubuntu2.1~18.04.171.1.1-1ubuntu2.1~18.04.191.1.1-1ubuntu2.1~18.04.201.1.1-1ubuntu2.1~18.04.211.1.1-1ubuntu2.1~18.04.221.1.1-1ubuntu2.1~18.04.231.1.1-1ubuntu2.1~18.04.23+esm11.1.1-1ubuntu2.1~18.04.23+esm31.1.1-1ubuntu2.1~18.04.23+esm4 | 1.1.1-1ubuntu2.1~18.04.23+esm5 |
opensslUbuntu:20.04:LTS | before 1.1.1f-1ubuntu2.22, plus listed versions 1.1.1c-1ubuntu41.1.1d-2ubuntu31.1.1d-2ubuntu61.1.1f-1ubuntu11.1.1f-1ubuntu2 Show 18 moreShow less1.1.1f-1ubuntu2.11.1.1f-1ubuntu2.21.1.1f-1ubuntu2.31.1.1f-1ubuntu2.41.1.1f-1ubuntu2.51.1.1f-1ubuntu2.81.1.1f-1ubuntu2.91.1.1f-1ubuntu2.101.1.1f-1ubuntu2.111.1.1f-1ubuntu2.121.1.1f-1ubuntu2.131.1.1f-1ubuntu2.151.1.1f-1ubuntu2.161.1.1f-1ubuntu2.171.1.1f-1ubuntu2.181.1.1f-1ubuntu2.191.1.1f-1ubuntu2.201.1.1f-1ubuntu2.21 | 1.1.1f-1ubuntu2.22 |
opensslUbuntu:22.04:LTS | before 3.0.2-0ubuntu1.15, plus listed versions 1.1.1l-1ubuntu13.0.0-1ubuntu13.0.1-0ubuntu13.0.2-0ubuntu13.0.2-0ubuntu1.1 Show 11 moreShow less3.0.2-0ubuntu1.23.0.2-0ubuntu1.43.0.2-0ubuntu1.53.0.2-0ubuntu1.63.0.2-0ubuntu1.73.0.2-0ubuntu1.83.0.2-0ubuntu1.93.0.2-0ubuntu1.103.0.2-0ubuntu1.123.0.2-0ubuntu1.133.0.2-0ubuntu1.14 | 3.0.2-0ubuntu1.15 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-6663-1 is a vulnerability with no CVSS score yet in openssl, published February 27, 2024. No source lists public exploit code. Fixed in openssl 1.1.1-1ubuntu2.1~18.04.23+esm5.