Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Ubuntu 12.04 LTS USN-2367-1 Critical OpenSSL TLSv1.2 Update

ubuntu
Calendar Grey October 2, 2014
Scroller Ubuntu
Ubuntu 12.04 LTS has upgraded its OpenSSL library for better TLSv1.2 functionality, boosting security measures and interoperability. Discover more!
OpenSSL TLSv1.2 support has been improved.

Summary

OpenSSL TLSv1.2 support has been improved.

Software Description:

- openssl: Secure Socket Layer (SSL) cryptographic library and tools

Details:

For compatibility reasons, OpenSSL in Ubuntu 12.04 LTS disables TLSv1.2

by default when being used as a client. When forcing the use of TLSv1.2,

another compatibility feature (OPENSSL_MAX_TLS1_2_CIPHER_LENGTH) was used

that would truncate the cipher list. This would prevent certain ciphers

from being selected, and would prevent secure renegotiations. This update

removes the cipher list truncation workaround when forcing the use of

TLSv1.2.

Topics%20covered

Topics Covered

security advisory update critical Ubuntu openssl TLS

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  libssl1.0.0                     1.0.1-4ubuntu5.18

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2367-1

https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1376447

Severity
critical
Lowest
Low
Medium
High
Critical

October 02, 2014

Topics%20covered

Topics Covered

security advisory update critical Ubuntu openssl TLS

Package Information

https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.18

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.