From 88d55b81408a681f2d9507a86bc274e91f963ad8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Manuel=20P=C3=A9gouri=C3=A9-Gonnard?= Date: Mon, 8 Jun 2026 11:25:14 +0200 Subject: [PATCH] Add ChangeLog for the latest RSA padding issues MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Manuel Pégourié-Gonnard --- ChangeLog.d/rsa-padding.txt | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 ChangeLog.d/rsa-padding.txt diff --git a/ChangeLog.d/rsa-padding.txt b/ChangeLog.d/rsa-padding.txt new file mode 100644 index 0000000000..3580a2bcf2 --- /dev/null +++ b/ChangeLog.d/rsa-padding.txt @@ -0,0 +1,8 @@ +Security + * Fix a side channel in RSA PKCS#1 v1.5 decryption: error handling in the + library would reveal through timing the difference between success, + invalid padding, or output too large for buffer, giving rise to a + Bleichenbacher attack. Note that while the library now handles sensitive + errors in constant-time, RSA PKCS#1 v1.5 decryption remains inherently + dangerous, should be avoided when possible, and otherwise requires great + care in application code. Found by zhengg. CVE-2026-50587