Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 506
Alerts This Week
Warning Icon 1 506

Slackware 10.2 2005-286-01 Critical: OpenSSL Man-In-The-Middle Threat

slackware
Calendar Grey October 14, 2005
Scroller Slackware
Updated OpenSSL versions for Slackware have been released to mitigate a critical man-in-the-middle vulnerability affecting the SSL 2.0 protocol.
New OpenSSL packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue

Summary

Here are the details from the Slackware 10.2 ChangeLog: patches/packages/openssl-0.9.7g-i486-2.tgz: Patched. Fixed a vulnerability that could, in rare circumstances, allow an attacker acting as a "man in the middle" to force a client and a server to negotiate the SSL 2.0 protocol (which is known to be weak) even if these parties both support SSL 3.0 or TLS 1.0. For more details, see: https://www.cve.org/CVERecord?id=CVE-2005-2969 (* Security fix *) patches/packages/openssl-solibs-0.9.7g-i486-2.tgz: Patched. (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical slackware man-in-the-middle openssl ssl protocol fix

Where Find New Packages

Updated packages for Slackware 8.1:
Updated packages for Slackware 9.0:
Updated packages for Slackware 9.1:
Updated packages for Slackware 10.0:
Updated packages for Slackware 10.1:
Updated packages for Slackware 10.2:
Updated packages for Slackware -current:

MD5 Signatures

Slackware 8.1 packages: 233579e9b0f6acccb2a4de2328283bca openssl-0.9.6m-i386-2.tgz 47a01aeb5b8a8626759ed7679cab7994 openssl-solibs-0.9.6m-i386-2.tgz
Slackware 9.0 packages: dc48ea28db265ac7d962f579b3af16e0 openssl-0.9.7d-i386-2.tgz 7fa49277ec5c2876d093f0946bc5a018 openssl-solibs-0.9.7d-i386-2.tgz
Slackware 9.1 packages: e6f519e5e556e6a59cbe653a4306764e openssl-0.9.7d-i486-2.tgz e316aa71fe6711e05fe5bca27155ab11 openssl-solibs-0.9.7d-i486-2.tgz
Slackware 10.0 packages: 3a0d650e1d6c78def45b807b16842d4f openssl-0.9.7d-i486-2.tgz 9c8576aaf5f30a5a443535220936d5bc openssl-solibs-0.9.7d-i486-2.tgz
Slackware 10.1 packages: 31ac4c1e3bfea98c5ebc16561cf4b79d openssl-0.9.7e-i486-4.tgz 9627ae6903a776c2ec47e99414153c9d openssl-solibs-0.9.7e-i486-4.tgz
Slackware 10.2 packages: 1453988b55ae1e7befd325b139d37ea3 openssl-0.9.7g-i486-2.tgz bb7713fcf4b0942210fd78c6d2a23196 openssl-solibs-0.9.7g-i486-2.tgz
Slackware -current packages: 1453988b55ae1e7befd325b139d37ea3 openssl-0.9.7g-i486-2.tgz bb7713fcf4b0942210fd78c6d2a23196 openssl-solibs-0.9.7g-i486-2.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical slackware man-in-the-middle openssl ssl protocol fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the packages as root: # upgradepkg openssl-solibs-0.9.7g-i486-2.tgz openssl-0.9.7g-i486-2.tgz