USN-2624-1
openssl update
No scoreFix available
As a security improvement, this update removes the export cipher suites from the default cipher list to prevent their use in possible downgrade attacks.
What each source reports
OSV No score
openssl update
As a security improvement, this update removes the export cipher suites from the default cipher list to prevent their use in possible downgrade attacks.
- Record
USN-2624-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslUbuntu:14.04:LTS |
before 1.0.1f-1ubuntu2.12, plus listed versions 1.0.1e-3ubuntu11.0.1e-4ubuntu11.0.1e-4ubuntu21.0.1e-4ubuntu31.0.1e-4ubuntu4 Show 10 moreShow less1.0.1f-1ubuntu11.0.1f-1ubuntu21.0.1f-1ubuntu2.11.0.1f-1ubuntu2.21.0.1f-1ubuntu2.31.0.1f-1ubuntu2.41.0.1f-1ubuntu2.51.0.1f-1ubuntu2.71.0.1f-1ubuntu2.81.0.1f-1ubuntu2.11 |
1.0.1f-1ubuntu2.12 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-2624-1 is a vulnerability with no CVSS score yet in openssl, published June 1, 2015. No source lists public exploit code. Fixed in openssl 1.0.1f-1ubuntu2.12.