Ubuntu Security Notice USN-2624-1
1st June, 2015
openssl update
A security issue affects these releases of Ubuntu and its
derivatives:
- Ubuntu 15.04
- Ubuntu 14.10
- Ubuntu 14.04 LTS
- Ubuntu 12.04 LTS
Summary
The export cipher suites have been disabled in OpenSSL.
Software description
- openssl
– Secure Socket Layer (SSL) cryptographic library and tools
Details
As a security improvement, this update removes the export cipher suites
from the default cipher list to prevent their use in possible downgrade
attacks.
Update instructions
The problem can be corrected by updating your system to the following
package version:
- Ubuntu 15.04:
-
libssl1.0.0
1.0.1f-1ubuntu11.1
- Ubuntu 14.10:
-
libssl1.0.0
1.0.1f-1ubuntu9.5
- Ubuntu 14.04 LTS:
-
libssl1.0.0
1.0.1f-1ubuntu2.12
- Ubuntu 12.04 LTS:
-
libssl1.0.0
1.0.1-4ubuntu5.28
To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.
After a standard system update you need to reboot your computer to make
all the necessary changes.