Ubuntu
openssl package

  1. Bug #1187195
  2. Comment #5

Comment 5 for bug 1187195

Revision history for this message
Theodotos Andreou (theodotos) wrote :

Guys I have also failed the PCI test on my SSL enabled postfix and dovecot.

I run TestSSLServer and it says:

CRIME status: vulnerable

I am using Ubuntu 12.04.2 LTS (precise) 64 bit and my openssl version is 1.0.1-4ubuntu5.9.

Is this backported to precise? What is the easiest way to be protected against it? Does the OPENSSL_DEFAULT_ZLIB env variable works on my version?