TURNKEYGNU / LINUX
English

Forum archive

Turnkey 12.1 LAMP CRIME vulnerability - How to disable SSL Compression

Supportapachessl2.2.16crimecompression

Has anyone succesfully dealt with patching this vulnerability ona TKL build?

Replies (1)

My reading of the bug report is that it has been fixed

Reply 1
Last message in the bug report thread (dated 30 Nov 2012):
version: apache2/2.2.16-6+squeeze10

fixed in squeeze in DSA 2579-1

The latest version of Apache in TKL v12.1 (Squeeze based) is 2.2.16-6+squeeze11 (from the Debian Security repo - which should auto install within 24 hours if you don't choose to install updates on first boot).