Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Ubuntu 12.04 LTS USN-2863-1 Critical OpenSSL Information Exposure

ubuntu
Calendar Grey January 7, 2016
Scroller Ubuntu
Utilize OpenSSL to reveal confidential data on Ubuntu 12.04 LTS. Revised guidelines supplied for urgent security remedial action.
OpenSSL could be made to expose sensitive information over the network.

Summary

OpenSSL could be made to expose sensitive information over the network.

Software Description:

- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

Karthikeyan Bhargavan and Gaetan Leurent discovered that OpenSSL

incorrectly allowed MD5 to be used for TLS 1.2 connections. If a remote

attacker were able to perform a man-in-the-middle attack, this flaw could

be exploited to view sensitive information.

Topics%20covered

Topics Covered

security advisory critical information exposure ubuntu man-in-the-middle openssl network threat

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  libssl1.0.0                     1.0.1-4ubuntu5.33

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2863-1

CVE-2015-7575

Severity
critical
Lowest
Low
Medium
High
Critical

January 07, 2016

Topics%20covered

Topics Covered

security advisory critical information exposure ubuntu man-in-the-middle openssl network threat

Package Information

https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.33

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.