USN-2624-1: OpenSSL update

1 June 2015

openssl update

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 15.04
  • Ubuntu 14.10
  • Ubuntu 14.04 LTS
  • Ubuntu 12.04 LTS

Summary

The export cipher suites have been disabled in OpenSSL.

Software Description

  • openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

As a security improvement, this update removes the export cipher suites from the default cipher list to prevent their use in possible downgrade attacks.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 15.04
libssl1.0.0 - 1.0.1f-1ubuntu11.1
Ubuntu 14.10
libssl1.0.0 - 1.0.1f-1ubuntu9.5
Ubuntu 14.04 LTS
libssl1.0.0 - 1.0.1f-1ubuntu2.12
Ubuntu 12.04 LTS
libssl1.0.0 - 1.0.1-4ubuntu5.28

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make all the necessary changes.

References