USN-6663-1: OpenSSL update | Ubuntu security notices

Packages

openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

As a security improvement, OpenSSL will now
return deterministic random bytes instead of an error
when detecting wrong padding in PKCS#1 v1.5 RSA
to prevent its use in possible Bleichenbacher timing attacks.

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
23.10 mantic	libssl-doc – 3.0.10-1ubuntu2.3
	libssl3 – 3.0.10-1ubuntu2.3
	openssl – 3.0.10-1ubuntu2.3
22.04 jammy	libssl-doc – 3.0.2-0ubuntu1.15
	libssl3 – 3.0.2-0ubuntu1.15
	openssl – 3.0.2-0ubuntu1.15
20.04 focal	libssl-doc – 1.1.1f-1ubuntu2.22
	libssl1.1 – 1.1.1f-1ubuntu2.22
	openssl – 1.1.1f-1ubuntu2.22
18.04 bionic	libssl-doc – 1.1.1-1ubuntu2.1~18.04.23+esm5
	libssl1.1 – 1.1.1-1ubuntu2.1~18.04.23+esm5
	openssl – 1.1.1-1ubuntu2.1~18.04.23+esm5

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

https://launchpad.net/bugs/2054090