USN-2624-1: OpenSSL update
1 June 2015
openssl update
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.04
- Ubuntu 14.10
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS
Summary
The export cipher suites have been disabled in OpenSSL.
Software Description
- openssl - Secure Socket Layer (SSL) cryptographic library and tools
Details
As a security improvement, this update removes the export cipher suites from the default cipher list to prevent their use in possible downgrade attacks.
Update instructions
The problem can be corrected by updating your system to the following package versions:
- Ubuntu 15.04
- libssl1.0.0 - 1.0.1f-1ubuntu11.1
- Ubuntu 14.10
- libssl1.0.0 - 1.0.1f-1ubuntu9.5
- Ubuntu 14.04 LTS
- libssl1.0.0 - 1.0.1f-1ubuntu2.12
- Ubuntu 12.04 LTS
- libssl1.0.0 - 1.0.1-4ubuntu5.28
To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.
After a standard system update you need to reboot your computer to make all the necessary changes.
