UbuntuUpdates.org

Bugs fixes in "openssl"

Origin Bug number Title Date fixed
CVE CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap 2025-09-30
CVE CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap 2025-09-30
CVE CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling 2025-09-30
CVE CVE-2025-9231 Timing side-channel in SM2 algorithm on 64 bit ARM 2025-09-30
CVE CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap 2025-09-30
CVE CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap 2025-09-30
CVE CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap 2025-09-30
CVE CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling 2025-09-30
CVE CVE-2025-9231 Timing side-channel in SM2 algorithm on 64 bit ARM 2025-09-30
CVE CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap 2025-09-30
CVE CVE-2024-13176 Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summ 2025-02-21
CVE CVE-2024-9143 Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds mem 2025-02-21
CVE CVE-2024-13176 Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summ 2025-02-21
CVE CVE-2024-9143 Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds mem 2025-02-21
CVE CVE-2024-13176 Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summ 2025-02-21
CVE CVE-2024-9143 Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds mem 2025-02-21
CVE CVE-2024-13176 Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summ 2025-02-20
CVE CVE-2024-9143 Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds mem 2025-02-20
CVE CVE-2024-13176 Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summ 2025-02-20
CVE CVE-2024-9143 Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds mem 2025-02-20



About   -   Send Feedback to @ubuntu_updates