OpenSSL Vulnerability — Ubuntu Security Update (USN-8625-1)
This is a security release for Ubuntu 20.04, Ubuntu 22.04. The fix ships in the current release line (referenced builds: 26.04, 24.04, 22.04). Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
Fix-Befehle
Debian/Ubuntu
sudo apt update && sudo apt upgradeWas das unter einer SharedLicense-Lizenz bedeutet
Your SharedLicense license itself is not affected — this is a change in Ubuntu 20.04, Ubuntu 22.04 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
-
USN-8625-1
Publication date
30 July 2026
Overview
OpenSSL could be made to crash if it received specially crafted network
traffic.
Releases
Packages
- openssl – Secure Socket Layer (SSL) cryptographic library and tools
Details
It was discovered that OpenSSL incorrectly allocated memory buffers in the
SSL/TLS state machine when receiving handshake data. A remote attacker
could possibly use this issue to cause OpenSSL to consume excessive memory,
leading to a denial of service. This issue is known as the “HollowByte”
denial of service.
It was discovered that OpenSSL incorrectly allocated memory buffers in the
SSL/TLS state machine when receiving handshake data. A remote attacker
could possibly use this issue to cause OpenSSL to consume excessive memory,
leading to a denial of service. This issue is known as the “HollowByte”
denial of service.
Update instructions
After a standard system update you need to reboot your computer to make all
the necessary changes.
Learn more about how to get the fixes.
The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 26.04 LTS resolute | libssl3t64 – 3.5.5-1ubuntu3.3 | ||
| openssl – 3.5.5-1ubuntu3.3 | |||
| 24.04 LTS noble | libssl3t64 – 3.0.13-0ubuntu3.12 | ||
| openssl – 3.0.13-0ubuntu3.12 | |||
| 22.04 LTS jammy | libssl3 – 3.0.2-0ubuntu1.26 | ||
| openssl – 3.0.2-0ubuntu1.26 | |||
References
Referenzen
System auf Schwachstellen prüfen
Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.
System prüfen