openssl 1.0.1f-1ubuntu2.5 source package in Ubuntu
Changelog
openssl (1.0.1f-1ubuntu2.5) trusty-security; urgency=medium * SECURITY UPDATE: double free when processing DTLS packets - debian/patches/CVE-2014-3505.patch: fix double free in ssl/d1_both.c. - CVE-2014-3505 * SECURITY UPDATE: DTLS memory exhaustion - debian/patches/CVE-2014-3506.patch: fix DTLS handshake message size checks in ssl/d1_both.c. - CVE-2014-3506 * SECURITY UPDATE: DTLS memory leak from zero-length fragments - debian/patches/CVE-2014-3507.patch: fix memory leak and return codes in ssl/d1_both.c. - CVE-2014-3507 * SECURITY UPDATE: information leak in pretty printing functions - debian/patches/CVE-2014-3508.patch: fix OID handling in crypto/asn1/a_object.c, crypto/objects/obj_dat.c. - CVE-2014-3508 * SECURITY UPDATE: race condition in ssl_parse_serverhello_tlsext - debian/patches/CVE-2014-3509.patch: fix race in ssl/t1_lib.c. - CVE-2014-3509 * SECURITY UPDATE: DTLS anonymous EC(DH) denial of service - debian/patches/CVE-2014-3510.patch: check for server certs in ssl/d1_clnt.c, ssl/s3_clnt.c. - CVE-2014-3510 * SECURITY UPDATE: TLS protocol downgrade attack - debian/patches/CVE-2014-3511.patch: properly handle fragments in ssl/s23_srvr.c. - CVE-2014-3511 * SECURITY UPDATE: SRP buffer overrun - debian/patches/CVE-2014-3512.patch: check parameters in crypto/srp/srp_lib.c. - CVE-2014-3512 * SECURITY UPDATE: crash with SRP ciphersuite in Server Hello message - debian/patches/CVE-2014-5139.patch: fix SRP authentication and make sure ciphersuite is set up correctly in ssl/s3_clnt.c, ssl/ssl_lib.c, ssl/s3_lib.c, ssl/ssl.h, ssl/ssl_ciph.c, ssl/ssl_locl.h. - CVE-2014-5139 -- Marc Deslauriers <email address hidden> Thu, 07 Aug 2014 08:03:21 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Trusty
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- utils
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openssl_1.0.1f.orig.tar.gz | 4.3 MiB | 6cc2a80b17d64de6b7bac985745fdaba971d54ffd7d38d3556f998d7c0c9cb5a |
openssl_1.0.1f-1ubuntu2.5.debian.tar.gz | 124.2 KiB | b6f8000e5cea0dfc708740fbbc20bc4838b89accd5f6d59ec76447991fe7327c |
openssl_1.0.1f-1ubuntu2.5.dsc | 2.3 KiB | 072f92d3f13db13051006a3813136a28841e0185f289bedd4faa558c0a86d6ff |
Available diffs
Binary packages built by this source
- libcrypto1.0.0-udeb: Secure Sockets Layer toolkit - libcrypto udeb
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It contains a version of the libcrypto shared library for use with the
Debian Installer. Do not install it on a normal system.
- libssl-dev: Secure Sockets Layer toolkit - development files
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It contains development libraries, header files, and manpages for libssl
and libcrypto.
- libssl-doc: Secure Sockets Layer toolkit - development documentation
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It contains manpages and demo files for libssl and libcrypto.
- libssl1.0.0: Secure Sockets Layer toolkit - shared libraries
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It provides the libssl and libcrypto shared libraries.
- libssl1.0.0-dbg: Secure Sockets Layer toolkit - debug information
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It contains debugging symbols for libssl and libcrypto.
- libssl1.0.0-udeb: ssl shared library - udeb
libssl shared library.
.
Do not install it on a normal system.
- openssl: Secure Sockets Layer toolkit - cryptographic utility
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It contains the general-purpose command line binary /usr/bin/openssl,
useful for cryptographic operations such as:
* creating RSA, DH, and DSA key parameters;
* creating X.509 certificates, CSRs, and CRLs;
* calculating message digests;
* encrypting and decrypting with ciphers;
* testing SSL/TLS clients and servers;
* handling S/MIME signed or encrypted mail.