OpenSSL Vulnerability — Ubuntu Security Update (USN-8625-1)
This is a security release for Ubuntu 20.04, Ubuntu 22.04. The fix ships in the current release line (referenced builds: 26.04, 24.04, 22.04). Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
Comandos de corrección
Debian/Ubuntu
sudo apt update && sudo apt upgradeLo que esto significa bajo una licencia de SharedLicense
Your SharedLicense license itself is not affected — this is a change in Ubuntu 20.04, Ubuntu 22.04 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
-
USN-8625-1
Publication date
30 July 2026
Overview
OpenSSL could be made to crash if it received specially crafted network
traffic.
Releases
Open side navigation
Packages
- openssl – Secure Socket Layer (SSL) cryptographic library and tools
Details
It was discovered that OpenSSL incorrectly allocated memory buffers in the
SSL/TLS state machine when receiving handshake data. A remote attacker
could possibly use this issue to cause OpenSSL to consume excessive memory,
leading to a denial of service. This issue is known as the “HollowByte”
denial of service.
It was discovered that OpenSSL incorrectly allocated memory buffers in the
SSL/TLS state machine when receiving handshake data. A remote attacker
could possibly use this issue to cause OpenSSL to consume excessive memory,
leading to a denial of service. This issue is known as the “HollowByte”
denial of service.
Update instructions
After a standard system update you need to reboot your computer to make all
the necessary changes.
Learn more about how to get the fixes.
The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
|
26.04
LTS resolute |
libssl3t64 – | ||
| openssl – | |||
|
24.04
LTS noble |
libssl3t64 – | ||
| openssl – | |||
|
22.04
LTS jammy |
libssl3 – | ||
| openssl – | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
References
Referencias
Comprueba tu sistema en busca de vulnerabilidades
Selecciona tu producto y sistema operativo para ver los comandos de corrección exactos que se aplican a ti.
Comprueba tu sistema