Stay Secure with the Latest Linux Advisories

security advisorysoftware updateUbuntu

Ubuntu 12.04 LTS USN-2606-1: OpenSSL TLSv1.2 Client Support Update

OpenSSL TLSv1.2 client support has been enabled in Ubuntu 12.04 LTS.. =========================================================================Ubuntu Security Notice USN-2606-1 May 12, 2015 openssl update ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: OpenSSL TLSv1.2 client support has been enabled in Ubuntu 12.04 LTS. Software Description: - openssl: Secure Socket Layer (SSL) cryptographic library and tools Details: For compatibility reasons, Ubuntu 12.04 LTS shipped OpenSSL with TLSv1.2 disabled when being used as a client. This update re-enables TLSv1.2 by default now that the majority of problematic sites have been updated to fix compatibility issues. For problematic environments, TLSv1.2 can be disabled again by setting the OPENSSL_NO_CLIENT_TLS1_2 environment variable before library initialization. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: libssl1.0.0 1.0.1-4ubuntu5.27 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2606-1 https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1442970 Package Information: https://launchpad.net/ubuntu/+source/openssl/1.0.1-4ubuntu5.27 . Support for TLSv1.2 clients has been restored in Ubuntu 12.04 LTS following this OpenSSL upgrade to address compatibility challenges.. Ubuntu Security Notice, OpenSSL Update, Client Support. . Severity: Important. LinuxSecurity.com Team

May 12, 2015 •Important Ubuntu