openssl 0.9.8o-1ubuntu4.6 source package in Ubuntu

Changelog

openssl (0.9.8o-1ubuntu4.6) maverick-security; urgency=low

  * SECURITY UPDATE: ECDSA private key timing attack
    - debian/patches/CVE-2011-1945.patch: compute with fixed scalar
      length
    - CVE-2011-1945
  * SECURITY UPDATE: ECDH ciphersuite denial of service
    - debian/patches/CVE-2011-3210.patch: fix memory usage for thread
      safety
    - CVE-2011-3210
  * SECURITY UPDATE: DTLS plaintext recovery attack
    - debian/patches/CVE-2011-4108.patch: perform all computations
      before discarding messages
    - CVE-2011-4108
  * SECURITY UPDATE: policy check double free vulnerability
    - debian/patches/CVE-2011-4019.patch: only free domain policyin
      one location
    - CVE-2011-4019
  * SECURITY UPDATE: SSL 3.0 block padding exposure
    - debian/patches/CVE-2011-4576.patch: clear bytes used for block
      padding of SSL 3.0 records.
    - CVE-2011-4576
  * SECURITY UPDATE: malformed RFC 3779 data denial of service attack
    - debian/patches/CVE-2011-4577.patch: prevent malformed RFC3779
      data from triggering an assertion failure
    - CVE-2011-4577
  * SECURITY UPDATE: Server Gated Cryptography (SGC) denial of service
    - debian/patches/CVE-2011-4619.patch: Only allow one SGC handshake
      restart for SSL/TLS.
    - CVE-2011-4619
  * SECURITY UPDATE: fix for CVE-2011-4108 denial of service attack
    - debian/patches/CVE-2012-0050.patch: improve handling of DTLS MAC
    - CVE-2012-0050
  * debian/patches/openssl-fix_ECDSA_tests.patch: fix ECDSA tests
  * debian/libssl0.9.8.postinst: Only issue the reboot notification for
    servers by testing that the X server is not running (LP: #244250)
 -- Steve Beattie <email address hidden>   Tue, 31 Jan 2012 01:37:33 -0800

Upload details

Uploaded by:
Steve Beattie on 2012-01-31
Uploaded to:
Maverick
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
utils
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openssl_0.9.8o.orig.tar.gz 3.6 MiB befada1ac3819b1d317df8197b5e82ec768b39d250fcbef81e2b1cb7f165d448
openssl_0.9.8o-1ubuntu4.6.debian.tar.gz 99.2 KiB 784d2e84fd60d3e353fb091520335a2c5eae110fbff013b15426b40a40807991
openssl_0.9.8o-1ubuntu4.6.dsc 2.1 KiB 7737d287cdfb436c3ee572aa24ed66eb2e1c796225c628984e5d6cfe04034892

View changes file

Binary packages built by this source

libcrypto0.9.8-udeb: No summary available for libcrypto0.9.8-udeb in ubuntu maverick.

No description available for libcrypto0.9.8-udeb in ubuntu maverick.

libssl-dev: No summary available for libssl-dev in ubuntu maverick.

No description available for libssl-dev in ubuntu maverick.

libssl0.9.8: No summary available for libssl0.9.8 in ubuntu maverick.

No description available for libssl0.9.8 in ubuntu maverick.

libssl0.9.8-dbg: No summary available for libssl0.9.8-dbg in ubuntu maverick.

No description available for libssl0.9.8-dbg in ubuntu maverick.

libssl0.9.8-udeb: No summary available for libssl0.9.8-udeb in ubuntu maverick.

No description available for libssl0.9.8-udeb in ubuntu maverick.

openssl: No summary available for openssl in ubuntu maverick.

No description available for openssl in ubuntu maverick.

openssl-doc: No summary available for openssl-doc in ubuntu maverick.

No description available for openssl-doc in ubuntu maverick.