openssl 1.0.2g-1ubuntu11 source package in Ubuntu

Changelog

openssl (1.0.2g-1ubuntu11) zesty; urgency=medium

  * SECURITY UPDATE: Montgomery multiplication may produce incorrect
    results
    - debian/patches/CVE-2016-7055.patch: fix logic in
      crypto/bn/asm/x86_64-mont.pl.
    - CVE-2016-7055
  * SECURITY UPDATE: DoS via warning alerts
    - debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
      warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
      ssl/ssl_locl.h.
    - debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
      type is received in ssl/s3_pkt.c.
    - CVE-2016-8610
  * SECURITY UPDATE: Truncated packet could crash via OOB read
    - debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
      crypto/evp/e_rc4_hmac_md5.c.
    - CVE-2017-3731
  * SECURITY UPDATE: BN_mod_exp may produce incorrect results on x86_64
    - debian/patches/CVE-2017-3732.patch: fix carry bug in
      bn_sqr8x_internal in crypto/bn/asm/x86_64-mont5.pl.
    - CVE-2017-3732

 -- Marc Deslauriers <email address hidden>  Mon, 30 Jan 2017 09:00:43 -0500

Upload details

Uploaded by:
Marc Deslauriers on 2017-01-30
Uploaded to:
Zesty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openssl_1.0.2g.orig.tar.gz 5.0 MiB b784b1b3907ce39abf4098702dade6365522a253ad1552e267a9a0e89594aa33
openssl_1.0.2g-1ubuntu11.debian.tar.xz 107.1 KiB 0dac44ec3526dd1f62b67f9e0e6504628e0e58c9bca640d558b119ba80a71a24
openssl_1.0.2g-1ubuntu11.dsc 2.4 KiB 4fee937cdba364881eab56ba1f428c94a462af7d7a61cafb4189cef9a3fd8461

View changes file

Binary packages built by this source

libcrypto1.0.0-udeb: No summary available for libcrypto1.0.0-udeb in ubuntu zesty.

No description available for libcrypto1.0.0-udeb in ubuntu zesty.

libcrypto1.0.0-udeb-dbgsym: No summary available for libcrypto1.0.0-udeb-dbgsym in ubuntu zesty.

No description available for libcrypto1.0.0-udeb-dbgsym in ubuntu zesty.

libssl-dev: No summary available for libssl-dev in ubuntu zesty.

No description available for libssl-dev in ubuntu zesty.

libssl-dev-dbgsym: No summary available for libssl-dev-dbgsym in ubuntu artful.

No description available for libssl-dev-dbgsym in ubuntu artful.

libssl-doc: No summary available for libssl-doc in ubuntu zesty.

No description available for libssl-doc in ubuntu zesty.

libssl1.0-dev: No summary available for libssl1.0-dev in ubuntu zesty.

No description available for libssl1.0-dev in ubuntu zesty.

libssl1.0-dev-dbgsym: No summary available for libssl1.0-dev-dbgsym in ubuntu artful.

No description available for libssl1.0-dev-dbgsym in ubuntu artful.

libssl1.0.0: Secure Sockets Layer toolkit - shared libraries

 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.

libssl1.0.0-dbg: No summary available for libssl1.0.0-dbg in ubuntu zesty.

No description available for libssl1.0.0-dbg in ubuntu zesty.

libssl1.0.0-dbgsym: No summary available for libssl1.0.0-dbgsym in ubuntu zesty.

No description available for libssl1.0.0-dbgsym in ubuntu zesty.

libssl1.0.0-udeb: No summary available for libssl1.0.0-udeb in ubuntu zesty.

No description available for libssl1.0.0-udeb in ubuntu zesty.

libssl1.0.0-udeb-dbgsym: No summary available for libssl1.0.0-udeb-dbgsym in ubuntu zesty.

No description available for libssl1.0.0-udeb-dbgsym in ubuntu zesty.

openssl: Secure Sockets Layer toolkit - cryptographic utility

 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It contains the general-purpose command line binary /usr/bin/openssl,
 useful for cryptographic operations such as:
  * creating RSA, DH, and DSA key parameters;
  * creating X.509 certificates, CSRs, and CRLs;
  * calculating message digests;
  * encrypting and decrypting with ciphers;
  * testing SSL/TLS clients and servers;
  * handling S/MIME signed or encrypted mail.

openssl-dbgsym: No summary available for openssl-dbgsym in ubuntu zesty.

No description available for openssl-dbgsym in ubuntu zesty.