USN-6663-2: OpenSSL update

Releases

• Ubuntu 16.04 ESM

Packages

• openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

USN-6663-1 provided a security update for OpenSSL.
This update provides the corresponding update for
Ubuntu 16.04 LTS.

Original advisory details:

As a security improvement, this update prevents OpenSSL
from returning an error when detecting wrong padding
in PKCS#1 v1.5 RSA, to prevent its use in possible
Bleichenbacher timing attacks.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.04

• libssl-doc - 1.0.2g-1ubuntu4.20+esm12
  Available with Ubuntu Pro
• libssl1.0.0 - 1.0.2g-1ubuntu4.20+esm12
  Available with Ubuntu Pro
• openssl - 1.0.2g-1ubuntu4.20+esm12
  Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• https://launchpad.net/bugs/2054090