Publishing details

• Removed from disk on 2018-06-26.
• Removal requested on 2018-06-26.
• Deleted on 2018-06-26 by Marc Deslauriers
• Published on 2018-06-20

Changelog

openssl (1.0.2g-1ubuntu13.6) artful-security; urgency=medium

  * SECURITY UPDATE: ECDSA key extraction side channel
    - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA
      signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c.
    - CVE-2018-0495
  * SECURITY UPDATE: denial of service via long prime values
    - debian/patches/CVE-2018-0732.patch: reject excessively large primes
      in DH key generation in crypto/dh/dh_key.c.
    - CVE-2018-0732
  * SECURITY UPDATE: RSA cache timing side channel attack
    (previous update was incomplete)
    - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and
      BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in
      crypto/rsa/rsa_gen.c.
    - CVE-2018-0737

 -- Marc Deslauriers <email address hidden>  Wed, 20 Jun 2018 07:32:59 -0400

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Package files

• libcrypto1.0.0-udeb_1.0.2g-1ubuntu13.6_amd64.udeb (837.2 KiB)
• libcrypto1.0.0-udeb_1.0.2g-1ubuntu13.6_arm64.udeb (513.6 KiB)
• libcrypto1.0.0-udeb_1.0.2g-1ubuntu13.6_armhf.udeb (502.1 KiB)
• libcrypto1.0.0-udeb_1.0.2g-1ubuntu13.6_i386.udeb (651.3 KiB)
• libcrypto1.0.0-udeb_1.0.2g-1ubuntu13.6_ppc64el.udeb (645.6 KiB)
• libcrypto1.0.0-udeb_1.0.2g-1ubuntu13.6_s390x.udeb (552.8 KiB)
• libssl-dev_1.0.2g-1ubuntu13.6_amd64.deb (1.3 MiB)
• libssl-dev_1.0.2g-1ubuntu13.6_arm64.deb (1003.0 KiB)
• libssl-dev_1.0.2g-1ubuntu13.6_armhf.deb (987.2 KiB)
• libssl-dev_1.0.2g-1ubuntu13.6_i386.deb (1.1 MiB)
• libssl-dev_1.0.2g-1ubuntu13.6_ppc64el.deb (1.2 MiB)
• libssl-dev_1.0.2g-1ubuntu13.6_s390x.deb (1023.8 KiB)
• libssl-doc_1.0.2g-1ubuntu13.6_all.deb (1.0 MiB)
• libssl1.0-dev_1.0.2g-1ubuntu13.6_amd64.deb (3.2 KiB)
• libssl1.0-dev_1.0.2g-1ubuntu13.6_arm64.deb (3.2 KiB)
• libssl1.0-dev_1.0.2g-1ubuntu13.6_armhf.deb (3.2 KiB)
• libssl1.0-dev_1.0.2g-1ubuntu13.6_i386.deb (3.2 KiB)
• libssl1.0-dev_1.0.2g-1ubuntu13.6_ppc64el.deb (3.2 KiB)
• libssl1.0-dev_1.0.2g-1ubuntu13.6_s390x.deb (3.2 KiB)
• libssl1.0.0-dbg_1.0.2g-1ubuntu13.6_amd64.deb (2.9 MiB)
• libssl1.0.0-dbg_1.0.2g-1ubuntu13.6_arm64.deb (3.0 MiB)
• libssl1.0.0-dbg_1.0.2g-1ubuntu13.6_armhf.deb (2.8 MiB)
• libssl1.0.0-dbg_1.0.2g-1ubuntu13.6_i386.deb (2.4 MiB)
• libssl1.0.0-dbg_1.0.2g-1ubuntu13.6_ppc64el.deb (3.2 MiB)
• libssl1.0.0-dbg_1.0.2g-1ubuntu13.6_s390x.deb (3.0 MiB)
• libssl1.0.0-udeb_1.0.2g-1ubuntu13.6_amd64.udeb (137.2 KiB)
• libssl1.0.0-udeb_1.0.2g-1ubuntu13.6_arm64.udeb (113.5 KiB)
• libssl1.0.0-udeb_1.0.2g-1ubuntu13.6_armhf.udeb (111.7 KiB)
• libssl1.0.0-udeb_1.0.2g-1ubuntu13.6_i386.udeb (148.7 KiB)
• libssl1.0.0-udeb_1.0.2g-1ubuntu13.6_ppc64el.udeb (134.8 KiB)
• libssl1.0.0-udeb_1.0.2g-1ubuntu13.6_s390x.udeb (123.4 KiB)
• libssl1.0.0_1.0.2g-1ubuntu13.6_amd64.deb (1.0 MiB)
• libssl1.0.0_1.0.2g-1ubuntu13.6_arm64.deb (705.5 KiB)
• libssl1.0.0_1.0.2g-1ubuntu13.6_armhf.deb (694.9 KiB)
• libssl1.0.0_1.0.2g-1ubuntu13.6_i386.deb (891.3 KiB)
• libssl1.0.0_1.0.2g-1ubuntu13.6_ppc64el.deb (868.8 KiB)
• libssl1.0.0_1.0.2g-1ubuntu13.6_s390x.deb (757.9 KiB)
• openssl-dbgsym_1.0.2g-1ubuntu13.6_amd64.ddeb (580.6 KiB)
• openssl-dbgsym_1.0.2g-1ubuntu13.6_arm64.ddeb (592.4 KiB)
• openssl-dbgsym_1.0.2g-1ubuntu13.6_armhf.ddeb (527.1 KiB)
• openssl-dbgsym_1.0.2g-1ubuntu13.6_i386.ddeb (493.4 KiB)
• openssl-dbgsym_1.0.2g-1ubuntu13.6_ppc64el.ddeb (598.2 KiB)
• openssl-dbgsym_1.0.2g-1ubuntu13.6_s390x.ddeb (575.8 KiB)
• openssl_1.0.2g-1ubuntu13.6.debian.tar.xz (122.7 KiB)
• openssl_1.0.2g-1ubuntu13.6.dsc (2.5 KiB)
• openssl_1.0.2g-1ubuntu13.6_amd64.deb (483.8 KiB)
• openssl_1.0.2g-1ubuntu13.6_arm64.deb (454.9 KiB)
• openssl_1.0.2g-1ubuntu13.6_armhf.deb (466.9 KiB)
• openssl_1.0.2g-1ubuntu13.6_i386.deb (495.8 KiB)
• openssl_1.0.2g-1ubuntu13.6_ppc64el.deb (508.2 KiB)
• openssl_1.0.2g-1ubuntu13.6_s390x.deb (465.8 KiB)
• openssl_1.0.2g.orig.tar.gz (5.0 MiB)