USN-5488-2: OpenSSL vulnerability

Published Jul 6, 2022

Updated

USN-5488-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Chancen and Daniel Fiala discovered that OpenSSL incorrectly handled the crehash script. A local attacker could possibly use this issue to execute arbitrary commands when crehash is run.

Affected Software

1 affected component

OpenSSL OpenSSL

Event History

May 10, 2025

Advisory Published

via Ubuntu·04:05 AM

Data Sourced

via Ubuntu·04:05 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-2068

Frequently Asked Questions

What is the vulnerability ID of this OpenSSL vulnerability?

The vulnerability ID of this OpenSSL vulnerability is CVE-2022-2068.

What is the severity of CVE-2022-2068?

The severity of CVE-2022-2068 is not mentioned in the provided information.

What is the affected software?

The affected software is Ubuntu 16.04 ESM with OpenSSL version 1.0.2g-1ubuntu4.20+esm5.

How can I fix this OpenSSL vulnerability?

You can fix this OpenSSL vulnerability by updating your Ubuntu 16.04 ESM system with the corresponding updates provided by Ubuntu.

Where can I find more information about this OpenSSL vulnerability?

You can find more information about this OpenSSL vulnerability on the Ubuntu website.