contained libssl needs updating for CVE-2008-0166

[Martin Pitt]

Binary package hint: ia32-libs

ia32-libs still contains a bad copy of libssl and needs to be updated in all releases.

[Martin Pitt (pitti)]

Intrepid is in too much flux ATM; I'll copy over hardy-security to intrepid once the former hits the archive.

[Martin Pitt (pitti)]

hardy-security update uploaded, awaiting processing from security team. Note that the package is in universe, so strictly speaking it does not require an USN.

[Martin Pitt (pitti)]

gutsy update uploaded, awaiting processing.

[Martin Pitt (pitti)]

Dapper's and Feisty's ia32-libs do not contain libssl. Fortunately this coincides nicely with the main->universe demotion in Gutsy. :-)

[Scott Ritchie (scottritchie)]

I claim credit for this, by the way ;)

The scope of this should be fairly minor, as the only app that I know of that uses 32 bit libssl under amd64 is Wine, and then only if the user is running an application that requires it (like, say, Windows Firefox or Putty).

[Launchpad Janitor (janitor)]

This bug was fixed in the package ia32-libs - 2.2ubuntu11

---------------
ia32-libs (2.2ubuntu11) hardy-security; urgency=low

  * sources.list.deb: Add hardy-updates and -security apt sources.
  * Refresh packages. In particular this picks up the hardy-security libssl,
    which fixes the PRNG vulnerability. [CVE-2008-0166] (LP: #231300)

 -- Martin Pitt <email address hidden> Sat, 17 May 2008 07:47:26 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package ia32-libs - 2.1ubuntu4

---------------
ia32-libs (2.1ubuntu4) gutsy-security; urgency=low

  * sources.list.deb: Add hardy-updates and -security apt sources.
  * Refresh packages. In particular this picks up the gutsy-security libssl,
    which fixes the PRNG vulnerability. [CVE-2008-0166] (LP: #231300)

 -- Martin Pitt <email address hidden> Sat, 17 May 2008 08:12:04 +0000

[Martin Pitt (pitti)]

Copied hardy-security to intrepid.