Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Ubuntu 14.04 ESM USN-5051-4 Moderate: OpenSSL Denial Of Service

ubuntu
Calendar Grey September 1, 2021
Dist Ubuntu Esm H88
Crucial patch implemented to resolve OpenSSL shortcomings in Ubuntu 14.04 ESM targeting potential disruption risks.
USN-5051-2 introduced a regression in OpenSSL.

Summary

USN-5051-2 introduced a regression in OpenSSL.

Software Description:

- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

USN-5051-2 introduced a regression in OpenSSL that affected only Ubuntu 14.04 ESM.

This update fix the regression.

Original advisory details:

Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1

strings. A remote attacker could use this issue to cause OpenSSL to crash,

resulting in a denial of service, or possibly obtain sensitive information.

(CVE-2021-3712)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu OpenSSL regression

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  libssl1.0.0                     1.0.1f-1ubuntu2.27+esm4

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5051-4

https://ubuntu.com/security/notices/USN-5051-1

https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1942357

Severity
important
Lowest
Low
Medium
High
Critical

September 01, 2021

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu OpenSSL regression

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.