USN-5328-2

Source
https://ubuntu.com/security/notices/USN-5328-2
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/USN-5328-2.json
Related
Published
2022-03-15T18:12:12.982260Z
Modified
2022-03-15T18:12:12.982260Z
Summary
openssl vulnerability
Details

USN-5328-1 fixed a vulnerability in OpenSSL. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.

Original advisory details:

Tavis Ormandy discovered that OpenSSL incorrectly parsed certain certificates. A remote attacker could possibly use this issue to cause OpenSSH to stop responding, resulting in a denial of service.

References

Affected packages

Ubuntu:Pro:14.04:LTS / openssl

Package

Name
openssl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.0.1f-1ubuntu2.27+esm5

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "libssl-dev": "1.0.1f-1ubuntu2.27+esm5",
            "openssl": "1.0.1f-1ubuntu2.27+esm5",
            "libssl-doc": "1.0.1f-1ubuntu2.27+esm5",
            "libssl1.0.0": "1.0.1f-1ubuntu2.27+esm5"
        }
    ]
}

Ubuntu:Pro:16.04:LTS / openssl

Package

Name
openssl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
1.0.2g-1ubuntu4.20+esm2

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "libssl-dev": "1.0.2g-1ubuntu4.20+esm2",
            "openssl": "1.0.2g-1ubuntu4.20+esm2",
            "libssl-doc": "1.0.2g-1ubuntu4.20+esm2",
            "libssl1.0.0": "1.0.2g-1ubuntu4.20+esm2"
        }
    ]
}