[ubuntu/jammy-security] openssl 3.0.2-0ubuntu1.5 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Tue Jun 21 14:32:30 UTC 2022
openssl (3.0.2-0ubuntu1.5) jammy-security; urgency=medium
* SECURITY UPDATE: c_rehash script allows command injection
- debian/patches/CVE-2022-1292.patch: switch to upstream patch, and
apply it before c_rehash-compat.patch.
- debian/patches/CVE-2022-2068-1.patch: fix file operations in
tools/c_rehash.in.
- debian/patches/CVE-2022-2068-2.patch: drop the issuer_name_hash=
prefix from the CRL hash in tools/c_rehash.in.
- debian/patches/c_rehash-compat.patch: updated patch to apply after
the security updates.
- CVE-2022-2068
openssl (3.0.2-0ubuntu1.4) jammy; urgency=medium
* d/p/lp1978093/*: renew some expiring test certificates (LP: #1978093)
openssl (3.0.2-0ubuntu1.3) jammy; urgency=medium
* d/p/lp1974037/*: cherry-pick another patchset to fix regressions with the
previous lp1974037 one (LP: #1974037)
* d/p/Set-systemwide-default-settings-for-libssl-users: partially apply it on
Ubuntu to make it easier for user to change security level (LP: #1972056)
* d/p/lp1947588.patch: Cherry-picked as our patches make it very easy to
trigger the underlying bug (LP: #1947588)
openssl (3.0.2-0ubuntu1.2) jammy; urgency=medium
* d/p/lp1968997/*: cherry-pick a patchset to fix issues with the Turkish
locale (LP: #1968997)
Date: 2022-06-20 11:53:13.261836+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/openssl/3.0.2-0ubuntu1.5
-------------- next part --------------
Sorry, changesfile not available.
More information about the jammy-changes
mailing list