Ubuntu
openssl package

openssl 1.1.1f-1ubuntu5 source package in Ubuntu

Changelog

openssl (1.1.1f-1ubuntu5) hirsute; urgency=medium

  * SECURITY UPDATE: EDIPARTYNAME NULL pointer de-ref
    - debian/patches/CVE-2020-1971-1.patch: use explicit tagging for
      DirectoryString in crypto/x509v3/v3_genn.c.
    - debian/patches/CVE-2020-1971-2.patch: correctly compare EdiPartyName
      in crypto/x509v3/v3_genn.c.
    - debian/patches/CVE-2020-1971-3.patch: check that multi-strings/CHOICE
      types don't use implicit tagging in crypto/asn1/asn1_err.c,
      crypto/asn1/tasn_dec.c, crypto/err/openssl.txt,
      include/openssl/asn1err.h.
    - debian/patches/CVE-2020-1971-4.patch: complain if we are attempting
      to encode with an invalid ASN.1 template in crypto/asn1/asn1_err.c,
      crypto/asn1/tasn_enc.c, crypto/err/openssl.txt,
      include/openssl/asn1err.h.
    - debian/patches/CVE-2020-1971-5.patch: add a test for GENERAL_NAME_cmp
      in test/v3nametest.c.
    - debian/patches/CVE-2020-1971-6.patch: add a test for
      encoding/decoding using an invalid ASN.1 Template in
      test/asn1_decode_test.c, test/asn1_encode_test.c.
    - CVE-2020-1971

 -- Marc Deslauriers <email address hidden>  Tue, 08 Dec 2020 12:33:52 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Hirsute
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openssl_1.1.1f.orig.tar.gz 9.3 MiB 186c6bfe6ecfba7a5b48c47f8a1673d0f3b0e5ba2e25602dd23b629975da3f35
openssl_1.1.1f.orig.tar.gz.asc 488 bytes e9c68097b05be8873e41bd33a9269378ca58e515fbaa30a512c315b602d41dda
openssl_1.1.1f-1ubuntu5.debian.tar.xz 150.8 KiB 2da57fd436f4dbf5872a6d9c18d854b19b41432058c39a04765c4c1443597cf1
openssl_1.1.1f-1ubuntu5.dsc 2.6 KiB 2752e81496955d87837de3f92befd4095f96c6de2a1830711ad25aeb89476b93

View changes file

Binary packages built by this source

libcrypto1.1-udeb: No summary available for libcrypto1.1-udeb in ubuntu hirsute.

No description available for libcrypto1.1-udeb in ubuntu hirsute.

libssl-dev: No summary available for libssl-dev in ubuntu hirsute.

No description available for libssl-dev in ubuntu hirsute.

libssl-doc: No summary available for libssl-doc in ubuntu hirsute.

No description available for libssl-doc in ubuntu hirsute.

libssl1.1: No summary available for libssl1.1 in ubuntu hirsute.

No description available for libssl1.1 in ubuntu hirsute.

libssl1.1-dbgsym: No summary available for libssl1.1-dbgsym in ubuntu hirsute.

No description available for libssl1.1-dbgsym in ubuntu hirsute.

libssl1.1-udeb: No summary available for libssl1.1-udeb in ubuntu hirsute.

No description available for libssl1.1-udeb in ubuntu hirsute.

openssl: No summary available for openssl in ubuntu hirsute.

No description available for openssl in ubuntu hirsute.

openssl-dbgsym: No summary available for openssl-dbgsym in ubuntu hirsute.

No description available for openssl-dbgsym in ubuntu hirsute.