USN-2883-1: OpenSSL vulnerability

Ubuntu Security Notice USN-2883-1

28th January, 2016

openssl vulnerability

A security issue affects these releases of Ubuntu and its

  • Ubuntu 15.10


OpenSSL could be made to expose sensitive information over the network.

Software description

  • openssl
    – Secure Socket Layer (SSL) cryptographic library and tools


Antonio Sanso discovered that OpenSSL reused the same private DH exponent
for the life of a server process when configured with a X9.42 style
parameter file. This could allow a remote attacker to possibly discover the
server's private DH exponent when being used with non-safe primes.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 15.10:


To update your system, please follow these instructions:

After a standard system update you need to reboot your computer to make
all the necessary changes.



Source: ubuntu-usn

About KENNETH 13261 Articles

Be the first to comment

Leave a Reply

Your email address will not be published.


이 사이트는 스팸을 줄이는 아키스밋을 사용합니다. 댓글이 어떻게 처리되는지 알아보십시오.