Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Slackware 12.1: 2011-041-04 Critical: OpenSSL OCSP Stapling Fix

slackware
Calendar Grey February 11, 2011
Scroller Slackware
Recent updates for OpenSSL have been released for several Slackware editions to mitigate a significant vulnerability related to OCSP stapling.
New openssl packages are available for 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue

Summary

Here are the details from the Slackware 13.1 ChangeLog: patches/packages/openssl-0.9.8r-i486-1_slack13.1.txz: Upgraded. This OpenSSL update fixes an "OCSP stapling vulnerability". For more information, see the included CHANGES and NEWS files, and: https://www.cve.org/CVERecord?id=CVE-2011-0014 (* Security fix *) Patched certwatch to work with recent versions of "file". Thanks to Ulrich Sch?fer and Jan Rafaj. patches/packages/openssl-solibs-0.9.8r-i486-1_slack13.1.txz: Upgraded. (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical vulnerability package upgrade Slackware openssl OCSP stapling

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 11.0:
Updated package for Slackware 12.0:
Updated package for Slackware 12.1:
Updated package for Slackware 12.2:
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 11.0 package: b3abce841bf210964001e70e3ef706c9 openssl-0.9.8r-i486-1_slack11.0.tgz e38bb473ca8b03aff78a35ed33eb7f0c openssl-solibs-0.9.8r-i486-1_slack11.0.tgz
Slackware 12.0 package: 8ec5c3e420435859ea659bb79d55dab9 openssl-0.9.8r-i486-1_slack12.0.tgz d207663a6770b35407f05a4bc744bacb openssl-solibs-0.9.8r-i486-1_slack12.0.tgz
Slackware 12.1 package: c6f2412c75c7b8184fe05b6103822eb9 openssl-0.9.8r-i486-1_slack12.1.tgz 19109dff689a7b59f55483f7ab428857 openssl-solibs-0.9.8r-i486-1_slack12.1.tgz
Slackware 12.2 package: 3f2fd08644a9ffbedc2251cd7a8daf0b openssl-0.9.8r-i486-1_slack12.2.tgz 5e26d773efe85c999e8822e5cc587339 openssl-solibs-0.9.8r-i486-1_slack12.2.tgz
Slackware 13.0 package: 146d21feada84931bd1f49b7597d2052 openssl-0.9.8r-i486-1_slack13.0.txz a777d033361ae0da2bed2c9fd9e25adb openssl-solibs-0.9.8r-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: 94f6df00aa94034aea43000260b8ec39 openssl-0.9.8r-x86_64-1_slack13.0.txz b6550d36dd62790409286fed86da0ebc openssl-solibs-0.9.8r-x86_64-1_slack13.0.txz
Slackware 13.1 package: a59c87176ce35a3a0a596de422e2e359 openssl-0.9.8r-i486-1_slack13.1.txz 1294e76b56b97f9ef46336c6aecd3ae0 openssl-solibs-0.9.8r-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: 98ebe1d54dc365211d329982134f14b4 openssl-0.9.8r-x86_64-1_slack13.1.txz 631c6b3285a80d46d63a98f0e4c9155f openssl-solibs-0.9.8r-x86_64-1_slack13.1.txz
Slackware -current package: e2f32ab3d21fc5be05b0ee97d32c84fd a/openssl-solibs-0.9.8r-i486-1.txz f000dcb77656b9210441d295bc47294f n/openssl-0.9.8r-i486-1.txz
Slackware x86_64 -current package: e21d4d58a3e383e5bfa4c50155b1e8ad a/openssl-solibs-0.9.8r-x86_64-1.txz 9bb8c0832b6b06c807e5feacca8e1ae1 n/openssl-0.9.8r-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical vulnerability package upgrade Slackware openssl OCSP stapling

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the packages as root: # upgradepkg openssl-solibs-0.9.8r-i486-1_slack13.1.txz openssl-0.9.8r-i486-1_slack13.1.txz