--===============2838493123027154061==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature";
 boundary="EeQfGwPcQSOJBaQU"
Content-Disposition: inline


--EeQfGwPcQSOJBaQU
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

==========================================================================
Ubuntu Security Notice USN-5051-4
September 01, 2021

openssl regression
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 ESM

Summary:

USN-5051-2 introduced a regression in  OpenSSL.

Software Description:
- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

USN-5051-2 introduced a regression in OpenSSL that affected only Ubuntu 14.04
 ESM.
This update fix the regression.

Original advisory details:

 Ingo Schwarze discovered that OpenSSL incorrectly handled certain ASN.1
 strings. A remote attacker could use this issue to cause OpenSSL to crash,
 resulting in a denial of service, or possibly obtain sensitive information.
 (CVE-2021-3712)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  libssl1.0.0                     1.0.1f-1ubuntu2.27+esm4

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-5051-4
  https://ubuntu.com/security/notices/USN-5051-1
  https://launchpad.net/bugs/1942357

--EeQfGwPcQSOJBaQU
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=L0au
-----END PGP SIGNATURE-----

--EeQfGwPcQSOJBaQU--


--===============2838493123027154061==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce