openssl 1.0.1-4ubuntu5.14 source package in Ubuntu
Changelog
openssl (1.0.1-4ubuntu5.14) precise-security; urgency=medium * SECURITY UPDATE: arbitrary code execution via DTLS invalid fragment - debian/patches/CVE-2014-0195.patch: add consistency check for DTLS fragments in ssl/d1_both.c. - CVE-2014-0195 * SECURITY UPDATE: denial of service via DTLS recursion flaw - debian/patches/CVE-2014-0221.patch: handle DTLS hello request without recursion in ssl/d1_both.c. - CVE-2014-0221 * SECURITY UPDATE: MITM via change cipher spec - debian/patches/CVE-2014-0224-1.patch: only accept change cipher spec when it is expected in ssl/s3_clnt.c, ssl/s3_pkt.c, ssl/s3_srvr.c, ssl/ssl3.h. - debian/patches/CVE-2014-0224-2.patch: don't accept zero length master secrets in ssl/s3_pkt.c. - debian/patches/CVE-2014-0224-3.patch: allow CCS after resumption in ssl/s3_clnt.c. - CVE-2014-0224 * SECURITY UPDATE: denial of service via ECDH null session cert - debian/patches/CVE-2014-3470.patch: check session_cert is not NULL before dereferencing it in ssl/s3_clnt.c. - CVE-2014-3470 -- Marc Deslauriers <email address hidden> Mon, 02 Jun 2014 14:05:34 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Precise
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- utils
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openssl_1.0.1.orig.tar.gz | 4.2 MiB | 4d9f0a594a9a89b28e1a04a9504c04104f6508ee27ad1e0efdd17a7a6dbbeeee |
openssl_1.0.1-4ubuntu5.14.debian.tar.gz | 136.3 KiB | 74c5f860ce1e446b6a25fac8a10fa69b3689c83641f59c114443325a61a77b92 |
openssl_1.0.1-4ubuntu5.14.dsc | 2.3 KiB | 359331aa70de970d0253c8486f43dce0ab1df5d958d97dd3bc1c6e0a733e330d |
Available diffs
Binary packages built by this source
- libcrypto1.0.0-udeb: crypto shared library - udeb
libcrypto shared library.
.
Do not install it on a normal system.
- libssl-dev: SSL development libraries, header files and documentation
libssl and libcrypto development libraries, header files and manpages.
.
It is part of the OpenSSL implementation of SSL.
- libssl-doc: SSL development documentation documentation
libssl and libcrypto manpages and demo files.
.
It is part of the OpenSSL implementation of SSL.
- libssl1.0.0: SSL shared libraries
libssl and libcrypto shared libraries needed by programs like
apache-ssl, telnet-ssl and openssh.
.
It is part of the OpenSSL implementation of SSL.
- libssl1.0.0-dbg: Symbol tables for libssl and libcrypto
This package is part of the OpenSSL implementation of SSL.
- libssl1.0.0-udeb: ssl shared library - udeb
libssl shared library.
.
Do not install it on a normal system.
- openssl: Secure Socket Layer (SSL) binary and related cryptographic tools
This package contains the openssl binary and related tools.
.
It is part of the OpenSSL implementation of SSL.
.
You need it to perform certain cryptographic actions like:
- Creation of RSA, DH and DSA key parameters;
- Creation of X.509 certificates, CSRs and CRLs;
- Calculation of message digests;
- Encryption and decryption with ciphers;
- SSL/TLS client and server tests;
- Handling of S/MIME signed or encrypted mail.