Login
Newsletter
Werbung

Sicherheit: Fehlende TLSv1.2-Unterstützung in OpenSSL
Aktuelle Meldungen Distributionen
Name: Fehlende TLSv1.2-Unterstützung in OpenSSL
ID: USN-2606-1
Distribution: Ubuntu
Plattformen: Ubuntu 12.04 LTS
Datum: Di, 12. Mai 2015, 14:43
Referenzen: Keine Angabe
Applikationen: OpenSSL

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============8299359800130210743==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="MRKuiO0rei14QlHaC5v4nfH6x3pPEkip0"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--MRKuiO0rei14QlHaC5v4nfH6x3pPEkip0
Content-Type: text/plain; charset=utf-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-2606-1
May 12, 2015

openssl update
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

OpenSSL TLSv1.2 client support has been enabled in Ubuntu 12.04 LTS.

Software Description:
- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

For compatibility reasons, Ubuntu 12.04 LTS shipped OpenSSL with TLSv1.2
disabled when being used as a client.

This update re-enables TLSv1.2 by default now that the majority of
problematic sites have been updated to fix compatibility issues.

For problematic environments, TLSv1.2 can be disabled again by setting the
OPENSSL_NO_CLIENT_TLS1_2 environment variable before library
initialization.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
libssl1.0.0 1.0.1-4ubuntu5.27

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2606-1
https://launchpad.net/bugs/1442970

Package Information:
https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.27



--MRKuiO0rei14QlHaC5v4nfH6x3pPEkip0
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Sj3/
-----END PGP SIGNATURE-----

--MRKuiO0rei14QlHaC5v4nfH6x3pPEkip0--


--===============8299359800130210743==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============8299359800130210743==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung