-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Fri, 19 Oct 2007 09:59:38 -0700 Source: openssl Binary: libssl-dev openssl libssl0.9.8-dbg libcrypto0.9.8-udeb libssl0.9.8 Architecture: i386_translations i386 Version: 0.9.8a-7ubuntu0.5 Distribution: dapper-security Urgency: low Maintainer: Ubuntu/i386 Build Daemon Changed-By: Kees Cook Description: libcrypto0.9.8-udeb - crypto shared library - udeb (udeb) libssl-dev - SSL development libraries, header files and documentation libssl0.9.8 - SSL shared libraries libssl0.9.8-dbg - Symbol tables for libssl and libcrypt openssl - Secure Socket Layer (SSL) binary and related cryptographic tools Changes: openssl (0.9.8a-7ubuntu0.5) dapper-security; urgency=low . * SECURITY UPDATE: DTLS implementation can lead to remote code execution. * ssl/{ssl_err,d1_both}.c, ssl/{dtls1,ssl}.h: patched inline with upstream fixes backported thanks to Ludwig Nussel. * References http://www.openssl.org/news/secadv_20071012.txt CVE-2007-4995 Files: 7ec5182170b5a15f430c6fbc40383e79 976196 utils optional openssl_0.9.8a-7ubuntu0.5_i386.deb 7f6b47b4a53fd7f4f105ecefeb1ceb79 2595296 libs important libssl0.9.8_0.9.8a-7ubuntu0.5_i386.deb 706f4c8b7691490e1746610f960b6c4c 509502 debian-installer optional libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.5_i386.udeb 146ab65f0cf4b67494f22d249b122a2a 2023838 libdevel optional libssl-dev_0.9.8a-7ubuntu0.5_i386.deb 4ff62d786ddac83ddb9b9ab8e48c257e 5052630 libdevel extra libssl0.9.8-dbg_0.9.8a-7ubuntu0.5_i386.deb ec673355b9bd2c1b7fb04b7705b1af2c 7772 raw-translations - openssl_0.9.8a-7ubuntu0.5_i386_translations.tar.gz Package-Type: udeb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFHHCvQ0N0xjzyQZEIRAhUOAJ9UJ/ZMLvToSX0m8na7Xc/x1nrwjgCdEAJY snwWwThfqFV7WjhYicLkcZk= =rWIt -----END PGP SIGNATURE-----