OpenSSL Vulnerability — Ubuntu Security Update (USN-8625-1)

This is a security release for Ubuntu 20.04, Ubuntu 22.04. The fix ships in the current release line (referenced builds: 26.04, 24.04, 22.04). Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.

High 2026-07-30

Ubuntu 20.04 Ubuntu 22.04

Fix-Befehle

Debian/Ubuntu

sudo apt update && sudo apt upgrade

Was das unter einer SharedLicense-Lizenz bedeutet

Your SharedLicense license itself is not affected — this is a change in Ubuntu 20.04, Ubuntu 22.04 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.

Ubuntu Security Notices
USN-8625-1

Publication date

30 July 2026

Overview

OpenSSL could be made to crash if it received specially crafted network
traffic.

Releases

26.04 LTS

24.04 LTS

22.04 LTS

Open side navigation

Packages

openssl – Secure Socket Layer (SSL) cryptographic library and tools

Details

It was discovered that OpenSSL incorrectly allocated memory buffers in the
SSL/TLS state machine when receiving handshake data. A remote attacker
could possibly use this issue to cause OpenSSL to consume excessive memory,
leading to a denial of service. This issue is known as the “HollowByte”
denial of service.