{"id":"USN-6663-3","aliases":[],"status":"published","title":"openssl update","description":"USN-6663-1 provided a security update for OpenSSL.\nThis update provides the corresponding update for\nUbuntu 24.04 LTS.\n\nOriginal advisory details:\n\n As a security improvement, OpenSSL will now\n return deterministic random bytes instead of an error\n when detecting wrong padding in PKCS#1 v1.5 RSA\n to prevent its use in possible Bleichenbacher timing attacks.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2024-05-23T09:27:17Z","modified":"2026-04-22T10:45:02Z","fixes":[{"ecosystem":"Ubuntu:24.04:LTS","package":"openssl","fixed_in":["3.0.13-0ubuntu3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.13-0ubuntu3.1"}]}],"versions":["3.0.10-1ubuntu2","3.0.10-1ubuntu2.1","3.0.10-1ubuntu3","3.0.10-1ubuntu4","3.0.13-0ubuntu2","3.0.13-0ubuntu3"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-6663-3","tags":["advisory"]},{"url":"https://launchpad.net/bugs/2054090","tags":["report"]}],"sources":{"osv":[{"id":"USN-6663-3","title":"openssl update","description":"USN-6663-1 provided a security update for OpenSSL.\nThis update provides the corresponding update for\nUbuntu 24.04 LTS.\n\nOriginal advisory details:\n\n As a security improvement, OpenSSL will now\n return deterministic random bytes instead of an error\n when detecting wrong padding in PKCS#1 v1.5 RSA\n to prevent its use in possible Bleichenbacher timing attacks.\n","status":"published","published":"2024-05-23T09:27:17Z","modified":"2026-04-22T10:45:02.249235Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}