Ubuntu alert USN-3899-1 (openssl, openssl1.0)
| From: | Marc Deslauriers <marc.deslauriers@canonical.com> | |
| To: | "ubuntu-security-announce@lists.ubuntu.com" <ubuntu-security-announce@lists.ubuntu.com> | |
| Subject: | [USN-3899-1] OpenSSL vulnerability | |
| Date: | Wed, 27 Feb 2019 13:10:42 -0500 | |
| Message-ID: | <a0185a28-7bfe-58d4-197b-ea8a2a411df1@canonical.com> |
========================================================================== Ubuntu Security Notice USN-3899-1 February 27, 2019 openssl, openssl1.0 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: OpenSSL could be made to expose sensitive information over the network. Software Description: - openssl1.0: Secure Socket Layer (SSL) cryptographic library and tools - openssl: Secure Socket Layer (SSL) cryptographic library and tools Details: Juraj Somorovsky, Robert Merget, and Nimrod Aviram discovered that certain applications incorrectly used OpenSSL and could be exposed to a padding oracle attack. A remote attacker could possibly use this issue to decrypt data. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: libssl1.0.0 1.0.2n-1ubuntu6.2 Ubuntu 18.04 LTS: libssl1.0.0 1.0.2n-1ubuntu5.3 Ubuntu 16.04 LTS: libssl1.0.0 1.0.2g-1ubuntu4.15 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://usn.ubuntu.com/usn/usn-3899-1 CVE-2019-1559 Package Information: https://launchpad.net/ubuntu/+source/openssl1.0/1.0.2n-1u... https://launchpad.net/ubuntu/+source/openssl1.0/1.0.2n-1u... https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubun... -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...