openssl 1.0.2g-1ubuntu9 source package in Ubuntu
Changelog
openssl (1.0.2g-1ubuntu9) yakkety; urgency=medium * SECURITY UPDATE: Pointer arithmetic undefined behaviour - debian/patches/CVE-2016-2177.patch: avoid undefined pointer arithmetic in ssl/s3_srvr.c, ssl/ssl_sess.c, ssl/t1_lib.c. - CVE-2016-2177 * SECURITY UPDATE: Constant time flag not preserved in DSA signing - debian/patches/CVE-2016-2178-*.patch: preserve BN_FLG_CONSTTIME in crypto/dsa/dsa_ossl.c. - CVE-2016-2178 * SECURITY UPDATE: DTLS buffered message DoS - debian/patches/CVE-2016-2179.patch: fix queue handling in ssl/d1_both.c, ssl/d1_clnt.c, ssl/d1_lib.c, ssl/d1_srvr.c, ssl/ssl_locl.h. - CVE-2016-2179 * SECURITY UPDATE: OOB read in TS_OBJ_print_bio() - debian/patches/CVE-2016-2180.patch: fix text handling in crypto/ts/ts_lib.c. - CVE-2016-2180 * SECURITY UPDATE: DTLS replay protection DoS - debian/patches/CVE-2016-2181-1.patch: properly handle unprocessed records in ssl/d1_pkt.c. - debian/patches/CVE-2016-2181-2.patch: protect against replay attacks in ssl/d1_pkt.c, ssl/ssl.h, ssl/ssl_err.c. - debian/patches/CVE-2016-2181-3.patch: update error code in ssl/ssl.h. - CVE-2016-2181 * SECURITY UPDATE: OOB write in BN_bn2dec() - debian/patches/CVE-2016-2182.patch: don't overflow buffer in crypto/bn/bn_print.c. - debian/patches/CVE-2016-2182-2.patch: fix off-by-one in overflow check in crypto/bn/bn_print.c. - CVE-2016-2182 * SECURITY UPDATE: SWEET32 Mitigation - debian/patches/CVE-2016-2183.patch: move DES ciphersuites from HIGH to MEDIUM in ssl/s3_lib.c. - CVE-2016-2183 * SECURITY UPDATE: Malformed SHA512 ticket DoS - debian/patches/CVE-2016-6302.patch: sanity check ticket length in ssl/t1_lib.c. - CVE-2016-6302 * SECURITY UPDATE: OOB write in MDC2_Update() - debian/patches/CVE-2016-6303.patch: avoid overflow in crypto/mdc2/mdc2dgst.c. - CVE-2016-6303 * SECURITY UPDATE: OCSP Status Request extension unbounded memory growth - debian/patches/CVE-2016-6304.patch: remove OCSP_RESPIDs from previous handshake in ssl/t1_lib.c. - CVE-2016-6304 * SECURITY UPDATE: Certificate message OOB reads - debian/patches/CVE-2016-6306-1.patch: check lengths in ssl/s3_clnt.c, ssl/s3_srvr.c. - debian/patches/CVE-2016-6306-2.patch: make message buffer slightly larger in ssl/d1_both.c, ssl/s3_both.c. - CVE-2016-6306 -- Marc Deslauriers <email address hidden> Fri, 23 Sep 2016 11:00:22 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Yakkety
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- utils
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openssl_1.0.2g.orig.tar.gz | 5.0 MiB | b784b1b3907ce39abf4098702dade6365522a253ad1552e267a9a0e89594aa33 |
openssl_1.0.2g-1ubuntu9.debian.tar.xz | 104.4 KiB | 977f232bc2da0697edbda18a60db6c0550b7b975356428e6e0f9c039f9a08140 |
openssl_1.0.2g-1ubuntu9.dsc | 2.4 KiB | 3954a2abb3f9fb9853a9dcce6440a4aec0a9eb062cc213330b32380094f90111 |
Available diffs
- diff from 1.0.2g-1ubuntu8 to 1.0.2g-1ubuntu9 (15.1 KiB)
Binary packages built by this source
- libcrypto1.0.0-udeb: No summary available for libcrypto1.0.0-udeb in ubuntu zesty.
No description available for libcrypto1.0.0-udeb in ubuntu zesty.
- libcrypto1.0.0-udeb-dbgsym: No summary available for libcrypto1.0.0-udeb-dbgsym in ubuntu zesty.
No description available for libcrypto1.
0.0-udeb- dbgsym in ubuntu zesty.
- libssl-dev: No summary available for libssl-dev in ubuntu yakkety.
No description available for libssl-dev in ubuntu yakkety.
- libssl-dev-dbgsym: No summary available for libssl-dev-dbgsym in ubuntu yakkety.
No description available for libssl-dev-dbgsym in ubuntu yakkety.
- libssl-doc: No summary available for libssl-doc in ubuntu zesty.
No description available for libssl-doc in ubuntu zesty.
- libssl1.0.0: No summary available for libssl1.0.0 in ubuntu zesty.
No description available for libssl1.0.0 in ubuntu zesty.
- libssl1.0.0-dbg: No summary available for libssl1.0.0-dbg in ubuntu zesty.
No description available for libssl1.0.0-dbg in ubuntu zesty.
- libssl1.0.0-dbgsym: No summary available for libssl1.0.0-dbgsym in ubuntu zesty.
No description available for libssl1.0.0-dbgsym in ubuntu zesty.
- libssl1.0.0-udeb: No summary available for libssl1.0.0-udeb in ubuntu zesty.
No description available for libssl1.0.0-udeb in ubuntu zesty.
- libssl1.0.0-udeb-dbgsym: No summary available for libssl1.0.0-udeb-dbgsym in ubuntu yakkety.
No description available for libssl1.
0.0-udeb- dbgsym in ubuntu yakkety.
- openssl: No summary available for openssl in ubuntu yakkety.
No description available for openssl in ubuntu yakkety.
- openssl-dbgsym: No summary available for openssl-dbgsym in ubuntu yakkety.
No description available for openssl-dbgsym in ubuntu yakkety.