Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 9 MGASA-2025-0025 critical: openssl timing side-channel issue

mageia
Calendar Grey January 26, 2025
Dist Mageia Esm H88
Newly released openssl versions address the timing side-channel vulnerability found in ECDSA signature calculation for Mageia users.
Timing side-channel in ECDSA signature computation

Summary

Timing side-channel in ECDSA signature computation. (CVE-2024-13176)

References

- https://bugs.mageia.org/show_bug.cgi?id=33942

- https://openssl-library.org/news/secadv/20250120.txt

- https://www.cve.org/CVERecord?id=CVE-2024-13176

Topics%20covered

Topics Covered

security advisory security fix openssl ECDSA Mageia timing side-channel CVE-2024-13176

Resolution

SRPMS

- 9/core/openssl-3.0.15-1.2.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 26 Jan 2025
URL: https://advisories.mageia.org/MGASA-2025-0025.html
Type: security
CVE: CVE-2024-13176

Topics%20covered

Topics Covered

security advisory security fix openssl ECDSA Mageia timing side-channel CVE-2024-13176

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here