Ubuntu 22.10 USN-6046-1 Moderate: OpenSSL-ibmca Sensitive Data Exposure

ubuntu

April 28, 2023

OpenSSL-ibmca could be made to expose sensitive information.

Summary

OpenSSL-ibmca could be made to expose sensitive information.

Software Description:

- openssl-ibmca: libica based hardware acceleration engine for OpenSSL

Details:

It was discovered that OpenSSL-ibmca incorrectly handled certain RSA decryption.

An attacker could possibly use this issue to expose sensitive information.

Topics Covered

security advisory Ubuntu moderate severity sensitive information data leak RSA decryption openssl-ibmca

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
  openssl-ibmca                   2.3.0-0ubuntu1.1

Ubuntu 22.04 LTS:
  openssl-ibmca                   2.2.3-0ubuntu1.1

Ubuntu 20.04 LTS:
  openssl-ibmca                   2.1.0-0ubuntu1.20.04.2

Ubuntu 18.04 LTS:
  openssl-ibmca                   1.4.1-0ubuntu1.2

Ubuntu 16.04 ESM:
  openssl-ibmca                   1.3.0-0ubuntu2.16.04.3

In general, a standard system update will make all the necessary changes.