openssl 0.9.8o-5ubuntu1.2 source package in Ubuntu
Changelog
openssl (0.9.8o-5ubuntu1.2) natty-security; urgency=low * SECURITY UPDATE: ECDSA private key timing attack - debian/patches/CVE-2011-1945.patch: compute with fixed scalar length - CVE-2011-1945 * SECURITY UPDATE: ECDH ciphersuite denial of service - debian/patches/CVE-2011-3210.patch: fix memory usage for thread safety - CVE-2011-3210 * SECURITY UPDATE: DTLS plaintext recovery attack - debian/patches/CVE-2011-4108.patch: perform all computations before discarding messages - CVE-2011-4108 * SECURITY UPDATE: policy check double free vulnerability - debian/patches/CVE-2011-4019.patch: only free domain policyin one location - CVE-2011-4019 * SECURITY UPDATE: SSL 3.0 block padding exposure - debian/patches/CVE-2011-4576.patch: clear bytes used for block padding of SSL 3.0 records. - CVE-2011-4576 * SECURITY UPDATE: malformed RFC 3779 data denial of service attack - debian/patches/CVE-2011-4577.patch: prevent malformed RFC3779 data from triggering an assertion failure - CVE-2011-4577 * SECURITY UPDATE: Server Gated Cryptography (SGC) denial of service - debian/patches/CVE-2011-4619.patch: Only allow one SGC handshake restart for SSL/TLS. - CVE-2011-4619 * SECURITY UPDATE: fix for CVE-2011-4108 denial of service attack - debian/patches/CVE-2012-0050.patch: improve handling of DTLS MAC - CVE-2012-0050 * debian/libssl0.9.8.postinst: Only issue the reboot notification for servers by testing that the X server is not running (LP: #244250) -- Steve Beattie <email address hidden> Tue, 31 Jan 2012 01:27:53 -0800
Upload details
- Uploaded by:
- Steve Beattie
- Uploaded to:
- Natty
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- utils
- Urgency:
- Low Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openssl_0.9.8o.orig.tar.gz | 3.6 MiB | befada1ac3819b1d317df8197b5e82ec768b39d250fcbef81e2b1cb7f165d448 |
openssl_0.9.8o-5ubuntu1.2.debian.tar.gz | 97.9 KiB | 66fe97728e1b52aa5d7ca9b4644cc66a7ab009b14885609d2720fd35912dcf5c |
openssl_0.9.8o-5ubuntu1.2.dsc | 2.1 KiB | f0c805fee86649f49cc234ca9201253b37e63d400f30cac14483f82643c4726b |
Available diffs
- diff from 0.9.8o-5ubuntu1.1 to 0.9.8o-5ubuntu1.2 (686 bytes)
Binary packages built by this source
- libcrypto0.9.8-udeb: No summary available for libcrypto0.9.8-udeb in ubuntu natty.
No description available for libcrypto0.9.8-udeb in ubuntu natty.
- libssl-dev: No summary available for libssl-dev in ubuntu natty.
No description available for libssl-dev in ubuntu natty.
- libssl0.9.8: No summary available for libssl0.9.8 in ubuntu natty.
No description available for libssl0.9.8 in ubuntu natty.
- libssl0.9.8-dbg: No summary available for libssl0.9.8-dbg in ubuntu natty.
No description available for libssl0.9.8-dbg in ubuntu natty.
- libssl0.9.8-udeb: No summary available for libssl0.9.8-udeb in ubuntu natty.
No description available for libssl0.9.8-udeb in ubuntu natty.
- openssl: No summary available for openssl in ubuntu natty.
No description available for openssl in ubuntu natty.
- openssl-doc: No summary available for openssl-doc in ubuntu natty.
No description available for openssl-doc in ubuntu natty.