Home / mailings

PDF

[USN-2913-3] OpenSSL update

Posted on 24 February 2016
Ubuntu Security

==========================
==========================
========================
Ubuntu Security Notice USN-2913-3
February 24, 2016

openssl update
==========================
==========================
========================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS

Summary:

Updated OpenSSL packages are required for the USN-2913-1 update.

Software Description:
- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

USN-2913-1 removed 1024-bit RSA CA certificates from the ca-certificates
package. This update adds support for alternate certificate chains to the=

OpenSSL package to properly handle the removal.

Original advisory details:

The ca-certificates package contained outdated CA certificates. This upd=
ate
refreshes the included certificates to those contained in the 20160104
package, including the removal of the SPI CA and CA certificates with
1024-bit RSA keys.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
libssl1.0.0 1.0.1f-1ubuntu2.17

Ubuntu 12.04 LTS:
libssl1.0.0 1.0.1-4ubuntu5.34

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2913-3
http://www.ubuntu.com/usn/usn-2913-1
https://launchpad.net/bugs/1528645

Package Information:
https://launchpad.net/ubuntu/+source/openssl/1.0.1f-1ubuntu2.17
https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.34

 

TOP