** Changed in: openssl
Status: Unknown => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1018998
Title:
SSL_OP_ALL incorrectly disables TLS 1.1
To manage notifications about
** Branch linked: lp:~ubuntu-branches/ubuntu/precise/openssl/precise-
security
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1018998
Title:
SSL_OP_ALL incorrectly disables TLS 1.1
To manage
This bug was fixed in the package openssl - 1.0.1-4ubuntu5.3
---
openssl (1.0.1-4ubuntu5.3) precise-security; urgency=low
* SECURITY UPDATE: SSL_OP_ALL incorrectly disables TLS 1.1 (LP: #1018998)
- debian/patches/lp1018998.patch: change SSL_OP_NO_TLSv1_1 from
0x0400L
How to test:
1- Install apache from the precise release pocket (not from -proposed, or
-updates)
2- See if you can connect using tls v1.1: openssl s_client -tls1_1 -connect
$HOST:$PORT
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to
SRU team:
This is a security update that has been copied to -proposed to get more
testing. This needs to be released by the security team.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1018998
** Changed in: openssl (Ubuntu Quantal)
Status: Confirmed = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1018998
Title:
SSL_OP_ALL incorrectly disables TLS 1.1
To manage
http://cvs.openssl.org/chngview?cn=22503
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1018998
Title:
SSL_OP_ALL incorrectly disables TLS 1.1
To manage notifications about this bug go to:
** Bug watch added: OpenSSL RT #2802
http://rt.openssl.org/Ticket/Display.html?id=2802
** Also affects: openssl via
http://rt.openssl.org/Ticket/Display.html?id=2802
Importance: Unknown
Status: Unknown
--
You received this bug notification because you are a member of Ubuntu
apache2 in the precise release pocket is affected by this, since it was
built before precise gained openssl 1.0.1. The apache2 in precise-
proposed is not affected.
** Changed in: openssl (Ubuntu Precise)
Assignee: (unassigned) = Marc Deslauriers (mdeslaur)
--
You received this bug
13:59 infinity mdeslaur: Well, it seems to me that option #2 is the only
sane way forward.
13:59 @mdeslaur infinity: yes, I agree
13:59 @mdeslaur writing it down cleared that up
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: openssl (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1018998
Title:
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: openssl (Ubuntu Precise)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1018998
12 matches
Mail list logo
