Astra Linux – vulnerability in OpenSSL

Issue summary: When using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths, inputs whose length is not a multiple of 16 bytes may leave the final partial block unencrypted and unauthenticated.Impact summary: The last 1–15 bytes of a message may be exposed in...