LinuxSecurity.com
Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
 
Advisories
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: September 2nd, 2014
Linux Advisory Watch: August 29th, 2014
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

  
Slackware: 2011-041-04: openssl: Security Update Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Slackware New openssl packages are available for 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, and -current to fix a security issue. [More Info...]
[slackware-security]  openssl (SSA:2011-041-04)

New openssl packages are available for 11.0, 12.0, 12.1, 12.2, 13.0, 13.1,
and -current to fix a security issue.


Here are the details from the Slackware 13.1 ChangeLog:
+--------------------------+
patches/packages/openssl-0.9.8r-i486-1_slack13.1.txz:  Upgraded.
  This OpenSSL update fixes an "OCSP stapling vulnerability".
  For more information, see the included CHANGES and NEWS files, and:
    http://www.openssl.org/news/secadv_20110208.txt
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014
  (* Security fix *)
  Patched certwatch to work with recent versions of "file".
  Thanks to Ulrich Sch?fer and Jan Rafaj.
patches/packages/openssl-solibs-0.9.8r-i486-1_slack13.1.txz:  Upgraded.
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

HINT:  Getting slow download speeds from ftp.slackware.com?
Give slackware.osuosl.org a try.  This is another primary FTP site
for Slackware that can be considerably faster than downloading
directly from ftp.slackware.com.

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating additional FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 11.0:
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/openssl-0.9.8r-i486-1_slack11.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/openssl-solibs-0.9.8r-i486-1_slack11.0.tgz

Updated package for Slackware 12.0:
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/openssl-0.9.8r-i486-1_slack12.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/openssl-solibs-0.9.8r-i486-1_slack12.0.tgz

Updated package for Slackware 12.1:
ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/openssl-0.9.8r-i486-1_slack12.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/openssl-solibs-0.9.8r-i486-1_slack12.1.tgz

Updated package for Slackware 12.2:
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/openssl-0.9.8r-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/openssl-solibs-0.9.8r-i486-1_slack12.2.tgz

Updated package for Slackware 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/openssl-0.9.8r-i486-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/openssl-solibs-0.9.8r-i486-1_slack13.0.txz

Updated package for Slackware x86_64 13.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/openssl-0.9.8r-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/packages/openssl-solibs-0.9.8r-x86_64-1_slack13.0.txz

Updated package for Slackware 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/openssl-0.9.8r-i486-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/openssl-solibs-0.9.8r-i486-1_slack13.1.txz

Updated package for Slackware x86_64 13.1:
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/openssl-0.9.8r-x86_64-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/packages/openssl-solibs-0.9.8r-x86_64-1_slack13.1.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/openssl-solibs-0.9.8r-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/openssl-0.9.8r-i486-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/a/openssl-solibs-0.9.8r-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/openssl-0.9.8r-x86_64-1.txz


MD5 signatures:
+-------------+

Slackware 11.0 package:
b3abce841bf210964001e70e3ef706c9  openssl-0.9.8r-i486-1_slack11.0.tgz
e38bb473ca8b03aff78a35ed33eb7f0c  openssl-solibs-0.9.8r-i486-1_slack11.0.tgz

Slackware 12.0 package:
8ec5c3e420435859ea659bb79d55dab9  openssl-0.9.8r-i486-1_slack12.0.tgz
d207663a6770b35407f05a4bc744bacb  openssl-solibs-0.9.8r-i486-1_slack12.0.tgz

Slackware 12.1 package:
c6f2412c75c7b8184fe05b6103822eb9  openssl-0.9.8r-i486-1_slack12.1.tgz
19109dff689a7b59f55483f7ab428857  openssl-solibs-0.9.8r-i486-1_slack12.1.tgz

Slackware 12.2 package:
3f2fd08644a9ffbedc2251cd7a8daf0b  openssl-0.9.8r-i486-1_slack12.2.tgz
5e26d773efe85c999e8822e5cc587339  openssl-solibs-0.9.8r-i486-1_slack12.2.tgz

Slackware 13.0 package:
146d21feada84931bd1f49b7597d2052  openssl-0.9.8r-i486-1_slack13.0.txz
a777d033361ae0da2bed2c9fd9e25adb  openssl-solibs-0.9.8r-i486-1_slack13.0.txz

Slackware x86_64 13.0 package:
94f6df00aa94034aea43000260b8ec39  openssl-0.9.8r-x86_64-1_slack13.0.txz
b6550d36dd62790409286fed86da0ebc  openssl-solibs-0.9.8r-x86_64-1_slack13.0.txz

Slackware 13.1 package:
a59c87176ce35a3a0a596de422e2e359  openssl-0.9.8r-i486-1_slack13.1.txz
1294e76b56b97f9ef46336c6aecd3ae0  openssl-solibs-0.9.8r-i486-1_slack13.1.txz

Slackware x86_64 13.1 package:
98ebe1d54dc365211d329982134f14b4  openssl-0.9.8r-x86_64-1_slack13.1.txz
631c6b3285a80d46d63a98f0e4c9155f  openssl-solibs-0.9.8r-x86_64-1_slack13.1.txz

Slackware -current package:
e2f32ab3d21fc5be05b0ee97d32c84fd  a/openssl-solibs-0.9.8r-i486-1.txz
f000dcb77656b9210441d295bc47294f  n/openssl-0.9.8r-i486-1.txz

Slackware x86_64 -current package:
e21d4d58a3e383e5bfa4c50155b1e8ad  a/openssl-solibs-0.9.8r-x86_64-1.txz
9bb8c0832b6b06c807e5feacca8e1ae1  n/openssl-0.9.8r-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the packages as root:
# upgradepkg openssl-solibs-0.9.8r-i486-1_slack13.1.txz openssl-0.9.8r-i486-1_slack13.1.txz


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com
 
< Prev   Next >
    
Partner

 

Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2014 Guardian Digital, Inc. All rights reserved.