SECURITY

USN-2913-1: ca-certificates update Ubuntu Security Notice USN-2913-1 24th February, 2016 ca-certificates update A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary ca-certificates was updated to the 20160104 package. Software description ca-certificates – Common CA certificates Details The ca-certificates package contained outdated CA certificates. This updaterefreshes the included certificates to those contained in the 20160104package, including the removal of the SPI CA and CA certificates with1024-bit RSA keys. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 15.10: ca-certificates 20160104ubuntu0.15.10.1 Ubuntu 14.04 LTS: ca-certificates 20160104ubuntu0.14.04.1 Ubuntu 12.04 LTS: ca-certificates 20160104ubuntu0.12.04.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References LP: 1528645 Source: USN-2913-1: ca-certificates update

USN-2913-3: OpenSSL update Ubuntu Security Notice USN-2913-3 24th February, 2016 openssl update A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary Updated OpenSSL packages are required for the USN-2913-1 update. Software description openssl – Secure Socket Layer (SSL) cryptographic library and tools Details USN-2913-1 removed 1024-bit RSA CA certificates from the ca-certificatespackage. This update adds support for alternate certificate chains to theOpenSSL package to properly handle the removal. Original advisory details: The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20160104 package, including the removal of the SPI CA and CA certificates with 1024-bit RSA keys. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 14.04 LTS: libssl1.0.0 1.0.1f-1ubuntu2.17 Ubuntu 12.04 LTS: libssl1.0.0 1.0.1-4ubuntu5.34 [ more… ]

USN-2913-2: glib-networking update Ubuntu Security Notice USN-2913-2 24th February, 2016 glib-networking update A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary Updated glib-networking packages are required for the USN-2913-1 update. Software description glib-networking – network-related giomodules for GLib Details USN-2913-1 removed 1024-bit RSA CA certificates from the ca-certificatespackage. This update adds support for alternate certificate chains to theglib-networking package to properly handle the removal. Original advisory details: The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 20160104 package, including the removal of the SPI CA and CA certificates with 1024-bit RSA keys. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 15.10: glib-networking 2.46.0-1ubuntu0.1 Ubuntu 14.04 LTS: glib-networking 2.40.0-1ubuntu0.1 Ubuntu 12.04 LTS: [ more… ]