USN-6663-2
openssl update
USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for Ubuntu 16.04 LTS.
Original advisory details:
As a security improvement, this update prevents OpenSSL from returning an error when detecting wrong padding in PKCS#1 v1.5 RSA, to prevent its use in possible Bleichenbacher timing attacks.
What each source reports
OSV No score
openssl update
USN-6663-1 provided a security update for OpenSSL. This update provides the corresponding update for Ubuntu 16.04 LTS.
Original advisory details:
As a security improvement, this update prevents OpenSSL from returning an error when detecting wrong padding in PKCS#1 v1.5 RSA, to prevent its use in possible Bleichenbacher timing attacks.
- Record
USN-6663-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslUbuntu:Pro:16.04:LTS |
before 1.0.2g-1ubuntu4.20+esm12, plus listed versions 1.0.2d-0ubuntu11.0.2d-0ubuntu21.0.2e-1ubuntu11.0.2f-2ubuntu11.0.2g-1ubuntu2 Show 30 moreShow less1.0.2g-1ubuntu31.0.2g-1ubuntu41.0.2g-1ubuntu4.11.0.2g-1ubuntu4.21.0.2g-1ubuntu4.41.0.2g-1ubuntu4.51.0.2g-1ubuntu4.61.0.2g-1ubuntu4.81.0.2g-1ubuntu4.91.0.2g-1ubuntu4.101.0.2g-1ubuntu4.111.0.2g-1ubuntu4.121.0.2g-1ubuntu4.131.0.2g-1ubuntu4.141.0.2g-1ubuntu4.151.0.2g-1ubuntu4.161.0.2g-1ubuntu4.171.0.2g-1ubuntu4.181.0.2g-1ubuntu4.191.0.2g-1ubuntu4.201.0.2g-1ubuntu4.20+esm11.0.2g-1ubuntu4.20+esm21.0.2g-1ubuntu4.20+esm31.0.2g-1ubuntu4.20+esm41.0.2g-1ubuntu4.20+esm51.0.2g-1ubuntu4.20+esm61.0.2g-1ubuntu4.20+esm71.0.2g-1ubuntu4.20+esm91.0.2g-1ubuntu4.20+esm101.0.2g-1ubuntu4.20+esm11 |
1.0.2g-1ubuntu4.20+esm12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-6663-2 is a vulnerability with no CVSS score yet in openssl, published March 13, 2024. No source lists public exploit code. Fixed in openssl 1.0.2g-1ubuntu4.20+esm12.