Ubuntu 15.04 USN-2624-1 Critical: OpenSSL Export Cipher Disable

ubuntu

June 1, 2015

The export cipher suites have been disabled in OpenSSL.

Summary

The export cipher suites have been disabled in OpenSSL.

Software Description:

- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

As a security improvement, this update removes the export cipher suites

from the default cipher list to prevent their use in possible downgrade

attacks.

Topics Covered

security advisory Ubuntu OpenSSL downgrade attack export cipher cipher update

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.04:
  libssl1.0.0                     1.0.1f-1ubuntu11.1

Ubuntu 14.10:
  libssl1.0.0                     1.0.1f-1ubuntu9.5

Ubuntu 14.04 LTS:
  libssl1.0.0                     1.0.1f-1ubuntu2.12

Ubuntu 12.04 LTS:
  libssl1.0.0                     1.0.1-4ubuntu5.28

After a standard system update you need to reboot your computer to make
all the necessary changes.