USN-8830-1: phpseclib vulnerabilities
Ubuntu fixes three phpseclib flaws covering AES timing leaks, SSH MAC comparison, and ASN.1 denial of service.
2 stories, newest first · one card per story
Ubuntu fixes three phpseclib flaws covering AES timing leaks, SSH MAC comparison, and ASN.1 denial of service.
Ubuntu patches phpseclib non-constant-time padding validation enabling remote padding oracle timing attacks against AES-CBC.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views