Tuesday, May 12, 2015

[USN-2606-1] OpenSSL update

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Sj3/
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2606-1
May 12, 2015

openssl update
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

OpenSSL TLSv1.2 client support has been enabled in Ubuntu 12.04 LTS.

Software Description:
- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

For compatibility reasons, Ubuntu 12.04 LTS shipped OpenSSL with TLSv1.2
disabled when being used as a client.

This update re-enables TLSv1.2 by default now that the majority of
problematic sites have been updated to fix compatibility issues.

For problematic environments, TLSv1.2 can be disabled again by setting the
OPENSSL_NO_CLIENT_TLS1_2 environment variable before library
initialization.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
libssl1.0.0 1.0.1-4ubuntu5.27

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2606-1
https://launchpad.net/bugs/1442970

Package Information:
https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.27

No comments:

Post a Comment