[openssl security] Off-by-one error in the DTLS implementation (CVE-2007-4995)

[Matti Lindell]

Binary package hint: openssl

Off-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f and 0.9.7 allow remote attackers to execute arbitrary code via unspecified vectors. http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-4995.

I couldn't find changelog entry describing CVE-2007-4995 as fixed, so it probably isn't yet.
Gutsy,Feisty,(Edgy) and Dapper are affected.

[Kees Cook (kees)]

Thanks for the report! From what we've been able to tell, nothing is actually using the DTLS implementation yet, which makes this a less critical issue. But we will be releasing updates. :)

[Scott Kitterman (kitterman)]

0.9.7 has been removed from Gutsy, so that's one less to worry about.

[Jason Levine (v-launchpad-net-site-masshole-us)]

Is there a plan to release a fix for 6.06 (Dapper)? I've been frustrated by the slowness of security fixes like this making their way to the LTS version of Ubuntu, so I figure I should explicitly ask before naively waiting for a fix to appear...

[Kees Cook (kees)]

Yes, all releases will get the update. I expect it will be published on Monday.

[Johan Kiviniemi (ion)]

This still seems to affect hardy.

[Kees Cook (kees)]

For clarification, hardy is safe now (openssl 0.9.8g)

[Kees Cook (kees)]

The code in Dapper is very different. At present, there is not intention to fix this for 0.9.7 in Dapper.