In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recover a CMS/PKCS7 transported encryption key or decrypt any RSA encrypted message that was encrypted with the public RSA key, using a Bleichenbacher padding oracle attack. Applications are not affected if they use a certificate together with the private RSA key to the CMSdecrypt or PKCS7decrypt functions to select the correct recipient info to decrypt. Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c). Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k). Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s).
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libcrypto1.0.0-udeb" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libcrypto1.0.0-udeb-dbgsym" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libssl-dev" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libssl-dev-dbgsym" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libssl-doc" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libssl1.0.0" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libssl1.0.0-dbg" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libssl1.0.0-dbgsym" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libssl1.0.0-udeb" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "libssl1.0.0-udeb-dbgsym" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "openssl" }, { "binary_version": "1.0.1f-1ubuntu2.27+esm1", "binary_name": "openssl-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libcrypto1.0.0-udeb" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libcrypto1.0.0-udeb-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libssl-dev" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libssl-dev-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libssl-doc" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libssl1.0.0" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libssl1.0.0-dbg" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libssl1.0.0-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libssl1.0.0-udeb" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "libssl1.0.0-udeb-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "openssl" }, { "binary_version": "1.0.2g-1ubuntu4.16", "binary_name": "openssl-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libcrypto1.0.0-udeb" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libcrypto1.0.0-udeb-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl-dev" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl-dev-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl-doc" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl1.0.0" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl1.0.0-dbg" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl1.0.0-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl1.0.0-hmac" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl1.0.0-hmac-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl1.0.0-udeb" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "libssl1.0.0-udeb-dbgsym" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "openssl" }, { "binary_version": "1.0.2g-1ubuntu4.fips.4.16.1", "binary_name": "openssl-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.1.1-1ubuntu2.1~18.04.6", "binary_name": "libcrypto1.1-udeb" }, { "binary_version": "1.1.1-1ubuntu2.1~18.04.6", "binary_name": "libssl-dev" }, { "binary_version": "1.1.1-1ubuntu2.1~18.04.6", "binary_name": "libssl-doc" }, { "binary_version": "1.1.1-1ubuntu2.1~18.04.6", "binary_name": "libssl1.1" }, { "binary_version": "1.1.1-1ubuntu2.1~18.04.6", "binary_name": "libssl1.1-dbgsym" }, { "binary_version": "1.1.1-1ubuntu2.1~18.04.6", "binary_name": "libssl1.1-udeb" }, { "binary_version": "1.1.1-1ubuntu2.1~18.04.6", "binary_name": "openssl" }, { "binary_version": "1.1.1-1ubuntu2.1~18.04.6", "binary_name": "openssl-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.0.2n-1ubuntu5.4", "binary_name": "libcrypto1.0.0-udeb" }, { "binary_version": "1.0.2n-1ubuntu5.4", "binary_name": "libssl1.0-dev" }, { "binary_version": "1.0.2n-1ubuntu5.4", "binary_name": "libssl1.0.0" }, { "binary_version": "1.0.2n-1ubuntu5.4", "binary_name": "libssl1.0.0-dbgsym" }, { "binary_version": "1.0.2n-1ubuntu5.4", "binary_name": "libssl1.0.0-udeb" }, { "binary_version": "1.0.2n-1ubuntu5.4", "binary_name": "openssl1.0" }, { "binary_version": "1.0.2n-1ubuntu5.4", "binary_name": "openssl1.0-dbgsym" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "libcrypto1.1-udeb" }, { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "libssl-dev" }, { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "libssl-doc" }, { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "libssl1.1" }, { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "libssl1.1-dbgsym" }, { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "libssl1.1-hmac" }, { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "libssl1.1-udeb" }, { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "openssl" }, { "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.6.1", "binary_name": "openssl-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0~20191122.bd85bf54-2", "binary_name": "ovmf" }, { "binary_version": "0~20191122.bd85bf54-2", "binary_name": "qemu-efi" }, { "binary_version": "0~20191122.bd85bf54-2", "binary_name": "qemu-efi-aarch64" }, { "binary_version": "0~20191122.bd85bf54-2", "binary_name": "qemu-efi-arm" } ] }