USN-4891-1: OpenSSL vulnerability

Releases

• Ubuntu 20.10
• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

It was discovered that OpenSSL incorrectly handled certain renegotiation
ClientHello messages. A remote attacker could use this issue to cause
OpenSSL to crash, resulting in a denial of service.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.10

• libssl1.1 - 1.1.1f-1ubuntu4.3

Ubuntu 20.04

• libssl1.1 - 1.1.1f-1ubuntu2.3

Ubuntu 18.04

• libssl1.1 - 1.1.1-1ubuntu2.1~18.04.9

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2021-3449

Related notices

• USN-5038-1: libpq-dev, postgresql-plperl-12, postgresql-server-dev-13, libpgtypes3, libecpg-dev, postgresql-doc-10, postgresql-12, postgresql-doc-13, postgresql-pltcl-13, libecpg-compat3, libpq5, postgresql-server-dev-12, postgresql-plperl-13, postgresql-plpython3-10, postgresql-plpython3-13, postgresql-plpython3-12, postgresql-pltcl-12, postgresql-client-13, postgresql-client-12, libecpg6, postgresql-plperl-10, postgresql-doc-12, postgresql-server-dev-10, postgresql-13, postgresql-pltcl-10, postgresql-plpython-10, postgresql-10, postgresql-client-10