OpenSSL Vulnerability — Ubuntu Security Update (USN-8625-1)
This is a security release for Ubuntu 20.04, Ubuntu 22.04. The fix ships in the current release line (referenced builds: 26.04, 24.04, 22.04). Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
Düzeltme Komutları
Debian/Ubuntu
sudo apt update && sudo apt upgrade
SharedLicense lisansı altında bunun anlamı
Your SharedLicense license itself is not affected — this is a change in Ubuntu 20.04, Ubuntu 22.04 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
-
USN-8625-1
Publication date
30 July 2026
Overview
OpenSSL could be made to crash if it received specially crafted network
traffic.
Releases
Open side navigation
Packages
- openssl – Secure Socket Layer (SSL) cryptographic library and tools
Details
It was discovered that OpenSSL incorrectly allocated memory buffers in the
SSL/TLS state machine when receiving handshake data. A remote attacker
could possibly use this issue to cause OpenSSL to consume excessive memory,
leading to a denial of service. This issue is known as the “HollowByte”
denial of service.
It was discovered that OpenSSL incorrectly allocated memory buffers in the
SSL/TLS state machine when receiving handshake data. A remote attacker
could possibly use this issue to cause OpenSSL to consume excessive memory,
leading to a denial of service. This issue is known as the “HollowByte”
denial of service.
Update instructions
After a standard system update you need to reboot your computer to make all
the necessary changes.
Learn more about how to get the fixes.
The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
|
26.04
LTS resolute |
libssl3t64 – | ||
| openssl – | |||
|
24.04
LTS noble |
libssl3t64 – | ||
| openssl – | |||
|
22.04
LTS jammy |
libssl3 – | ||
| openssl – | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
References
Referanslar
Güvenlik Danışarlıkları
İlgili Danışarlıklar
Sisteminizi güvenlik açıkları açısından kontrol edin
Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.
Sisteminizi Kontrol Edin