Publishing details
-
Removed from disk
.
-
Removal requested
.
-
Superseded
by openssl - 1.0.1e-3ubuntu1.3
-
Published
-
Copied from
ubuntu saucy in
Private PPA for Ubuntu Security Team
by Ubuntu Archive Robot
Changelog
openssl (1.0.1e-3ubuntu1.2) saucy-security; urgency=medium
* SECURITY UPDATE: side-channel attack on Montgomery ladder implementation
- debian/patches/CVE-2014-0076.patch: add and use constant time swap in
crypto/bn/bn.h, crypto/bn/bn_lib.c, crypto/ec/ec2_mult.c,
util/libeay.num.
- CVE-2014-0076
* SECURITY UPDATE: memory disclosure in TLS heartbeat extension
- debian/patches/CVE-2014-0160.patch: use correct lengths in
ssl/d1_both.c, ssl/t1_lib.c.
- CVE-2014-0160
-- Marc Deslauriers <email address hidden> Mon, 07 Apr 2014 15:43:47 -0400
Builds
Package files