Publishing details

Removed from disk on 2018-01-23.
Removal requested on 2016-11-12.
Superseded on 2016-11-11 by openssl - 1.0.2g-1ubuntu10
Published on 2016-10-18
Copied from ubuntu yakkety in Primary Archive for Ubuntu

Changelog

openssl (1.0.2g-1ubuntu9) yakkety; urgency=medium

  * SECURITY UPDATE: Pointer arithmetic undefined behaviour
    - debian/patches/CVE-2016-2177.patch: avoid undefined pointer
      arithmetic in ssl/s3_srvr.c, ssl/ssl_sess.c, ssl/t1_lib.c.
    - CVE-2016-2177
  * SECURITY UPDATE: Constant time flag not preserved in DSA signing
    - debian/patches/CVE-2016-2178-*.patch: preserve BN_FLG_CONSTTIME in
      crypto/dsa/dsa_ossl.c.
    - CVE-2016-2178
  * SECURITY UPDATE: DTLS buffered message DoS
    - debian/patches/CVE-2016-2179.patch: fix queue handling in
      ssl/d1_both.c, ssl/d1_clnt.c, ssl/d1_lib.c, ssl/d1_srvr.c,
      ssl/ssl_locl.h.
    - CVE-2016-2179
  * SECURITY UPDATE: OOB read in TS_OBJ_print_bio()
    - debian/patches/CVE-2016-2180.patch: fix text handling in
      crypto/ts/ts_lib.c.
    - CVE-2016-2180
  * SECURITY UPDATE: DTLS replay protection DoS
    - debian/patches/CVE-2016-2181-1.patch: properly handle unprocessed
      records in ssl/d1_pkt.c.
    - debian/patches/CVE-2016-2181-2.patch: protect against replay attacks
      in ssl/d1_pkt.c, ssl/ssl.h, ssl/ssl_err.c.
    - debian/patches/CVE-2016-2181-3.patch: update error code in ssl/ssl.h.
    - CVE-2016-2181
  * SECURITY UPDATE: OOB write in BN_bn2dec()
    - debian/patches/CVE-2016-2182.patch: don't overflow buffer in
      crypto/bn/bn_print.c.
    - debian/patches/CVE-2016-2182-2.patch: fix off-by-one in overflow
      check in crypto/bn/bn_print.c.
    - CVE-2016-2182
  * SECURITY UPDATE: SWEET32 Mitigation
    - debian/patches/CVE-2016-2183.patch: move DES ciphersuites from HIGH
      to MEDIUM in ssl/s3_lib.c.
    - CVE-2016-2183
  * SECURITY UPDATE: Malformed SHA512 ticket DoS
    - debian/patches/CVE-2016-6302.patch: sanity check ticket length in
      ssl/t1_lib.c.
    - CVE-2016-6302
  * SECURITY UPDATE: OOB write in MDC2_Update()
    - debian/patches/CVE-2016-6303.patch: avoid overflow in
      crypto/mdc2/mdc2dgst.c.
    - CVE-2016-6303
  * SECURITY UPDATE: OCSP Status Request extension unbounded memory growth
    - debian/patches/CVE-2016-6304.patch: remove OCSP_RESPIDs from previous
      handshake in ssl/t1_lib.c.
    - CVE-2016-6304
  * SECURITY UPDATE: Certificate message OOB reads
    - debian/patches/CVE-2016-6306-1.patch: check lengths in ssl/s3_clnt.c,
      ssl/s3_srvr.c.
    - debian/patches/CVE-2016-6306-2.patch: make message buffer slightly
      larger in ssl/d1_both.c, ssl/s3_both.c.
    - CVE-2016-6306

 -- Marc Deslauriers <email address hidden>  Fri, 23 Sep 2016 11:00:22 -0400

Available diffs

diff from 1.0.2g-1ubuntu8 to 1.0.2g-1ubuntu9 (15.1 KiB)

Builds

Package files

libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_amd64.ddeb (932 bytes)
libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_arm64.ddeb (930 bytes)
libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_armhf.ddeb (930 bytes)
libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_i386.ddeb (930 bytes)
libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_powerpc.ddeb (932 bytes)
libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_ppc64el.ddeb (932 bytes)
libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_s390x.ddeb (932 bytes)
libcrypto1.0.0-udeb_1.0.2g-1ubuntu9_amd64.udeb (832.8 KiB)
libcrypto1.0.0-udeb_1.0.2g-1ubuntu9_arm64.udeb (496.3 KiB)
libcrypto1.0.0-udeb_1.0.2g-1ubuntu9_armhf.udeb (501.3 KiB)
libcrypto1.0.0-udeb_1.0.2g-1ubuntu9_i386.udeb (649.4 KiB)
libcrypto1.0.0-udeb_1.0.2g-1ubuntu9_powerpc.udeb (508.7 KiB)
libcrypto1.0.0-udeb_1.0.2g-1ubuntu9_ppc64el.udeb (590.5 KiB)
libcrypto1.0.0-udeb_1.0.2g-1ubuntu9_s390x.udeb (552.9 KiB)
libssl-dev-dbgsym_1.0.2g-1ubuntu9_amd64.ddeb (920 bytes)
libssl-dev-dbgsym_1.0.2g-1ubuntu9_arm64.ddeb (920 bytes)
libssl-dev-dbgsym_1.0.2g-1ubuntu9_armhf.ddeb (920 bytes)
libssl-dev-dbgsym_1.0.2g-1ubuntu9_i386.ddeb (920 bytes)
libssl-dev-dbgsym_1.0.2g-1ubuntu9_powerpc.ddeb (920 bytes)
libssl-dev-dbgsym_1.0.2g-1ubuntu9_ppc64el.ddeb (920 bytes)
libssl-dev-dbgsym_1.0.2g-1ubuntu9_s390x.ddeb (922 bytes)
libssl-dev_1.0.2g-1ubuntu9_amd64.deb (1.3 MiB)
libssl-dev_1.0.2g-1ubuntu9_arm64.deb (976.2 KiB)
libssl-dev_1.0.2g-1ubuntu9_armhf.deb (956.5 KiB)
libssl-dev_1.0.2g-1ubuntu9_i386.deb (1.1 MiB)
libssl-dev_1.0.2g-1ubuntu9_powerpc.deb (956.9 KiB)
libssl-dev_1.0.2g-1ubuntu9_ppc64el.deb (1.1 MiB)
libssl-dev_1.0.2g-1ubuntu9_s390x.deb (1.0 MiB)
libssl-doc_1.0.2g-1ubuntu9_all.deb (1.0 MiB)
libssl1.0.0-dbg_1.0.2g-1ubuntu9_amd64.deb (2.9 MiB)
libssl1.0.0-dbg_1.0.2g-1ubuntu9_arm64.deb (2.9 MiB)
libssl1.0.0-dbg_1.0.2g-1ubuntu9_armhf.deb (2.8 MiB)
libssl1.0.0-dbg_1.0.2g-1ubuntu9_i386.deb (2.4 MiB)
libssl1.0.0-dbg_1.0.2g-1ubuntu9_powerpc.deb (2.9 MiB)
libssl1.0.0-dbg_1.0.2g-1ubuntu9_ppc64el.deb (3.1 MiB)
libssl1.0.0-dbg_1.0.2g-1ubuntu9_s390x.deb (2.9 MiB)
libssl1.0.0-dbgsym_1.0.2g-1ubuntu9_amd64.ddeb (896 bytes)
libssl1.0.0-dbgsym_1.0.2g-1ubuntu9_arm64.ddeb (896 bytes)
libssl1.0.0-dbgsym_1.0.2g-1ubuntu9_armhf.ddeb (896 bytes)
libssl1.0.0-dbgsym_1.0.2g-1ubuntu9_i386.ddeb (896 bytes)
libssl1.0.0-dbgsym_1.0.2g-1ubuntu9_powerpc.ddeb (896 bytes)
libssl1.0.0-dbgsym_1.0.2g-1ubuntu9_ppc64el.ddeb (896 bytes)
libssl1.0.0-dbgsym_1.0.2g-1ubuntu9_s390x.ddeb (896 bytes)
libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_amd64.ddeb (818 bytes)
libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_arm64.ddeb (818 bytes)
libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_armhf.ddeb (816 bytes)
libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_i386.ddeb (816 bytes)
libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_powerpc.ddeb (818 bytes)
libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_ppc64el.ddeb (818 bytes)
libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu9_s390x.ddeb (818 bytes)
libssl1.0.0-udeb_1.0.2g-1ubuntu9_amd64.udeb (136.8 KiB)
libssl1.0.0-udeb_1.0.2g-1ubuntu9_arm64.udeb (110.7 KiB)
libssl1.0.0-udeb_1.0.2g-1ubuntu9_armhf.udeb (111.5 KiB)
libssl1.0.0-udeb_1.0.2g-1ubuntu9_i386.udeb (149.0 KiB)
libssl1.0.0-udeb_1.0.2g-1ubuntu9_powerpc.udeb (114.3 KiB)
libssl1.0.0-udeb_1.0.2g-1ubuntu9_ppc64el.udeb (127.1 KiB)
libssl1.0.0-udeb_1.0.2g-1ubuntu9_s390x.udeb (123.1 KiB)
libssl1.0.0_1.0.2g-1ubuntu9_amd64.deb (1.0 MiB)
libssl1.0.0_1.0.2g-1ubuntu9_arm64.deb (686.1 KiB)
libssl1.0.0_1.0.2g-1ubuntu9_armhf.deb (695.4 KiB)
libssl1.0.0_1.0.2g-1ubuntu9_i386.deb (889.6 KiB)
libssl1.0.0_1.0.2g-1ubuntu9_powerpc.deb (701.3 KiB)
libssl1.0.0_1.0.2g-1ubuntu9_ppc64el.deb (804.6 KiB)
libssl1.0.0_1.0.2g-1ubuntu9_s390x.deb (758.4 KiB)
openssl-dbgsym_1.0.2g-1ubuntu9_amd64.ddeb (1.0 KiB)
openssl-dbgsym_1.0.2g-1ubuntu9_arm64.ddeb (1.0 KiB)
openssl-dbgsym_1.0.2g-1ubuntu9_armhf.ddeb (1.0 KiB)
openssl-dbgsym_1.0.2g-1ubuntu9_i386.ddeb (1.0 KiB)
openssl-dbgsym_1.0.2g-1ubuntu9_powerpc.ddeb (1.0 KiB)
openssl-dbgsym_1.0.2g-1ubuntu9_ppc64el.ddeb (1.0 KiB)
openssl-dbgsym_1.0.2g-1ubuntu9_s390x.ddeb (1.0 KiB)
openssl_1.0.2g-1ubuntu9.debian.tar.xz (104.4 KiB)
openssl_1.0.2g-1ubuntu9.dsc (2.4 KiB)
openssl_1.0.2g-1ubuntu9_amd64.deb (480.4 KiB)
openssl_1.0.2g-1ubuntu9_arm64.deb (459.7 KiB)
openssl_1.0.2g-1ubuntu9_armhf.deb (473.9 KiB)
openssl_1.0.2g-1ubuntu9_i386.deb (494.7 KiB)
openssl_1.0.2g-1ubuntu9_powerpc.deb (454.0 KiB)
openssl_1.0.2g-1ubuntu9_ppc64el.deb (472.8 KiB)
openssl_1.0.2g-1ubuntu9_s390x.deb (466.7 KiB)
openssl_1.0.2g.orig.tar.gz (5.0 MiB)