openssl 0.9.8g-10.1ubuntu2.4 source package in Ubuntu

Changelog

openssl (0.9.8g-10.1ubuntu2.4) intrepid-security; urgency=low

  * SECURITY UPDATE: denial of service via memory consumption from large
    number of future epoch DTLS records.
    - crypto/pqueue.*: add new pqueue_size counter function.
    - ssl/d1_pkt.c: use pqueue_size to limit size of queue to 100.
    - http://cvs.openssl.org/chngview?cn=18187
    - CVE-2009-1377
  * SECURITY UPDATE: denial of service via memory consumption from
    duplicate or invalid sequence numbers in DTLS records.
    - ssl/d1_both.c: discard message if it's a duplicate or too far in the
      future.
    - http://marc.info/?l=openssl-dev&m=124263491424212&w=2
    - CVE-2009-1378
  * SECURITY UPDATE: denial of service or other impact via use-after-free
    in dtls1_retrieve_buffered_fragment.
    - ssl/d1_both.c: use temp frag_len instead of freed frag.
    - http://rt.openssl.org/Ticket/Display.html?id=1923
    - CVE-2009-1379
  * SECURITY UPDATE: denial of service via DTLS ChangeCipherSpec packet
    that occurs before ClientHello.
    - ssl/s3_pkt.c: abort if s->session is NULL.
    - ssl/{ssl.h,ssl_err.c}: add new error codes.
    - http://cvs.openssl.org/chngview?cn=17369
    - CVE-2009-1386
  * SECURITY UPDATE: denial of service via an out-of-sequence DTLS
    handshake message.
    - ssl/d1_both.c: don't buffer fragments with no data.
    - http://cvs.openssl.org/chngview?cn=17958
    - CVE-2009-1387

 -- Marc Deslauriers <email address hidden>   Thu, 11 Jun 2009 10:25:28 -0400

Upload details

Uploaded by:
Marc Deslauriers on 2009-06-11
Uploaded to:
Intrepid
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
utils
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openssl_0.9.8g.orig.tar.gz 3.2 MiB 0e26886845de95716c9f1b9b75c0e06e9d4075d2bdc9e11504eaa5f7ee901cf0
openssl_0.9.8g-10.1ubuntu2.4.diff.gz 56.9 KiB d425fa1a7c9c3429c1dbb0cb5cad541064e8f8a66551471c3f42e660af28ab47
openssl_0.9.8g-10.1ubuntu2.4.dsc 1.3 KiB 881501c1a1858acb19b138de0eaee3f39ba123d54914964ec10c10d3c92d0c4d

View changes file

Binary packages built by this source

libcrypto0.9.8-udeb: No summary available for libcrypto0.9.8-udeb in ubuntu intrepid.

No description available for libcrypto0.9.8-udeb in ubuntu intrepid.

libssl-dev: No summary available for libssl-dev in ubuntu intrepid.

No description available for libssl-dev in ubuntu intrepid.

libssl0.9.8: No summary available for libssl0.9.8 in ubuntu intrepid.

No description available for libssl0.9.8 in ubuntu intrepid.

libssl0.9.8-dbg: No summary available for libssl0.9.8-dbg in ubuntu intrepid.

No description available for libssl0.9.8-dbg in ubuntu intrepid.

openssl: No summary available for openssl in ubuntu intrepid.

No description available for openssl in ubuntu intrepid.

openssl-doc: No summary available for openssl-doc in ubuntu intrepid.

No description available for openssl-doc in ubuntu intrepid.