Format: 1.8 Date: Wed, 06 Oct 2010 17:38:20 -0400 Source: openssl Binary: openssl openssl-doc libssl0.9.8 libcrypto0.9.8-udeb libssl-dev libssl0.9.8-dbg Architecture: armel armel_translations Version: 0.9.8g-16ubuntu3.3 Distribution: karmic Urgency: low Maintainer: Ubuntu Build Daemon Changed-By: Marc Deslauriers Description: libcrypto0.9.8-udeb - crypto shared library - udeb (udeb) libssl-dev - SSL development libraries, header files and documentation libssl0.9.8 - SSL shared libraries libssl0.9.8-dbg - Symbol tables for libssl and libcrypto openssl - Secure Socket Layer (SSL) binary and related cryptographic tools openssl-doc - Secure Socket Layer (SSL) documentation Changes: openssl (0.9.8g-16ubuntu3.3) karmic-security; urgency=low . * SECURITY UPDATE: denial of service and possible code execution via unchecked bn_wexpand return values. (LP: #655884) - crypto/bn/{bn_mul,bn_div,bn_gf2m}.c, crypto/ec/ec2_smpl.c, engines/e_ubsec.c: check return values. - http://cvs.openssl.org/chngview?cn=18936 - http://cvs.openssl.org/chngview?cn=19309 - CVE-2009-3245 * SECURITY UPDATE: denial of service and possible code execution via crafted private key with an invalid prime. - ssl/s3_clnt.c: set bn_ctx to NULL after freeing it. - http://www.mail-archive.com/openssl-dev@openssl.org/msg28049.html - CVE-2010-2939 Checksums-Sha1: 1b0f1850e1dc0aa5afbdb3f0ae9f172e060311a9 393380 openssl_0.9.8g-16ubuntu3.3_armel.deb 5ed12b5f9d20266be26fb310670add9deb3b984f 856136 libssl0.9.8_0.9.8g-16ubuntu3.3_armel.deb cf692a962bc9f2fcd586977a2ad499cca6c6a313 541450 libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_armel.udeb 145d9d0b06cb24ae38f2a0fe63a842aa5b2b58aa 1962284 libssl-dev_0.9.8g-16ubuntu3.3_armel.deb 8f60ca345fe1731c5309ebe1e5bb88bad63aa14a 1539620 libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_armel.deb 9d7a34d15b3fa22cd2559a26b1c68fe35a6ec2f3 18384 openssl_0.9.8g-16ubuntu3.3_armel_translations.tar.gz Checksums-Sha256: 277df1717433af5d2cd6c3e448c21d475cf24e568b7b043da7ee7abd1a305014 393380 openssl_0.9.8g-16ubuntu3.3_armel.deb ee277cdb208cd67c205b60b46e3070078e714e849ec17457289b5ff4c94dc855 856136 libssl0.9.8_0.9.8g-16ubuntu3.3_armel.deb e36c924f47de16b4047465c6dc09717c43128d611292299e53c676db77890730 541450 libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_armel.udeb dbbb522ad42ccf88502a83ab78a08606d72047c2de23a9d59ed701f05372eb86 1962284 libssl-dev_0.9.8g-16ubuntu3.3_armel.deb 3e29256d020810537877f25bc245058fed7cee71962d411fff9a09c79818952c 1539620 libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_armel.deb 16dadcc297405ee003d48a4eb2ae57bf142ce8d49ec31f9d6b64beff7e9a2601 18384 openssl_0.9.8g-16ubuntu3.3_armel_translations.tar.gz Files: c53ae39f9e80a421ba4f1c0775f8f571 393380 utils optional openssl_0.9.8g-16ubuntu3.3_armel.deb 77c6290fd6efb6a2b641fc7f30ee5d4d 856136 libs important libssl0.9.8_0.9.8g-16ubuntu3.3_armel.deb 2a3df1ed42a5b9c42e82f950baf133ae 541450 debian-installer optional libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_armel.udeb 887cc14feef00e673aa64ce26de93d86 1962284 libdevel optional libssl-dev_0.9.8g-16ubuntu3.3_armel.deb f10ca72a217eb67072049dfaa2d06ce4 1539620 libdevel extra libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_armel.deb b60f3e6ae482451d8c9f4640d20c6d00 18384 raw-translations - openssl_0.9.8g-16ubuntu3.3_armel_translations.tar.gz Launchpad-Bugs-Fixed: 655884 Original-Maintainer: Debian OpenSSL Team Package-Type: udeb