[USN-6595-1] PyCryptodome vulnerability

-----BEGIN PGP SIGNATURE-----
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=zUsI
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6595-1
January 23, 2024

pycryptodome vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS

Summary:

PyCryptodome could be made to expose sensitive information.

Software Description:
- pycryptodome: Cryptographic Python library

Details:

It was discovered that PyCryptodome had a timing side-channel when
performing OAEP decryption. A remote attacker could possibly use this issue
to recover sensitive information.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
python3-pycryptodome 3.11.0+dfsg1-3ubuntu0.1

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-6595-1
CVE-2023-52323

Package Information:
https://launchpad.net/ubuntu/+source/pycryptodome/3.11.0+dfsg1-3ubuntu0.1