Affected: Homebrew: monkeysphere

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.

Affected: openEuler:20.03-LTS-SP4: perl-Crypt-OpenSSL-RSA, openEuler:22.03-LTS-SP3: perl-Crypt-OpenSSL-RSA, openEuler:22.03-LTS-SP4: perl-Crypt-OpenSSL-RSA, openEuler:24.03-LTS: perl-Crypt-OpenSSL-RSA, openEuler:24.03-LTS-SP1: perl-Crypt-OpenSSL-RSA

encoding and decoding according to using the openSSL libraries Security Fix(es):

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.(CVE-2024-2467)

perl-Crypt-OpenSSL-RSA-0.350.0-1.1 on GA media

Security update for perl-Crypt-OpenSSL-RSA

Affected: Ubuntu:14.04:LTS: libcrypt-openssl-rsa-perl, Ubuntu:16.04:LTS: libcrypt-openssl-rsa-perl, Ubuntu:18.04:LTS: libcrypt-openssl-rsa-perl, Ubuntu:20.04:LTS: libcrypt-openssl-rsa-perl, Ubuntu:22.04:LTS: libcrypt-openssl-rsa-perl, Ubuntu:24.04:LTS: libcrypt-openssl-rsa-perl, Ubuntu:25.10: libcrypt-openssl-rsa-perl, Ubuntu:26.04:LTS: libcrypt-openssl-rsa-perl

A timing-based side-channel flaw exists in the perl-Crypt-OpenSSL-RSA package, which could be sufficient to recover plaintext across a network in a Bleichenbacher-style attack. To achieve successful decryption, an attacker would have to be able to send a large number of trial messages. The vulnerability affects the legacy PKCS#1v1.5 RSA encryption padding mode.