openssl 0.9.8g-15ubuntu3.2 source package in Ubuntu
Changelog
openssl (0.9.8g-15ubuntu3.2) jaunty-security; urgency=low * SECURITY UPDATE: denial of service via memory consumption from large number of future epoch DTLS records. - crypto/pqueue.*: add new pqueue_size counter function. - ssl/d1_pkt.c: use pqueue_size to limit size of queue to 100. - http://cvs.openssl.org/chngview?cn=18187 - CVE-2009-1377 * SECURITY UPDATE: denial of service via memory consumption from duplicate or invalid sequence numbers in DTLS records. - ssl/d1_both.c: discard message if it's a duplicate or too far in the future. - http://marc.info/?l=openssl-dev&m=124263491424212&w=2 - CVE-2009-1378 * SECURITY UPDATE: denial of service or other impact via use-after-free in dtls1_retrieve_buffered_fragment. - ssl/d1_both.c: use temp frag_len instead of freed frag. - http://rt.openssl.org/Ticket/Display.html?id=1923 - CVE-2009-1379 * SECURITY UPDATE: denial of service via DTLS ChangeCipherSpec packet that occurs before ClientHello. - ssl/s3_pkt.c: abort if s->session is NULL. - ssl/{ssl.h,ssl_err.c}: add new error codes. - http://cvs.openssl.org/chngview?cn=17369 - CVE-2009-1386 * SECURITY UPDATE: denial of service via an out-of-sequence DTLS handshake message. - ssl/d1_both.c: don't buffer fragments with no data. - http://cvs.openssl.org/chngview?cn=17958 - CVE-2009-1387 -- Marc Deslauriers <email address hidden> Thu, 11 Jun 2009 10:13:11 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Jaunty
- Original maintainer:
- Ubuntu Development Team
- Architectures:
- any
- Section:
- utils
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openssl_0.9.8g.orig.tar.gz | 3.2 MiB | 0e26886845de95716c9f1b9b75c0e06e9d4075d2bdc9e11504eaa5f7ee901cf0 |
openssl_0.9.8g-15ubuntu3.2.diff.gz | 59.3 KiB | 5aa8c7f67c41f2387d6601f51a3cb63fcb1868a5d16f3d87ec95425ecde774ef |
openssl_0.9.8g-15ubuntu3.2.dsc | 1.4 KiB | 92a0c58e1e83ccd76834ff0581dfc1809079c462cf0522b8cc3be9cf3229c1bf |
Available diffs
Binary packages built by this source
- libcrypto0.9.8-udeb: No summary available for libcrypto0.9.8-udeb in ubuntu jaunty.
No description available for libcrypto0.9.8-udeb in ubuntu jaunty.
- libssl-dev: No summary available for libssl-dev in ubuntu jaunty.
No description available for libssl-dev in ubuntu jaunty.
- libssl0.9.8: No summary available for libssl0.9.8 in ubuntu jaunty.
No description available for libssl0.9.8 in ubuntu jaunty.
- libssl0.9.8-dbg: No summary available for libssl0.9.8-dbg in ubuntu jaunty.
No description available for libssl0.9.8-dbg in ubuntu jaunty.
- openssl: No summary available for openssl in ubuntu jaunty.
No description available for openssl in ubuntu jaunty.
- openssl-doc: No summary available for openssl-doc in ubuntu jaunty.
No description available for openssl-doc in ubuntu jaunty.