[ubuntu/maverick-security] openssl_0.9.8o-1ubuntu4.1_i386_translations.tar.gz, openssl_0.9.8o-1ubuntu4.1_armel_translations.tar.gz, openssl, openssl_0.9.8o-1ubuntu4.1_amd64_translations.tar.gz, openssl_0.9.8o-1ubuntu4.1_powerpc_translations.tar.gz (delayed) 0.9.8o-1ubuntu4.1 (Accepted)

Ubuntu Installer archive at ubuntu.com
Thu Oct 7 15:24:00 BST 2010


openssl (0.9.8o-1ubuntu4.1) maverick-security; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via
    crafted private key with an invalid prime.
    - debian/patches/CVE-2010-2939.patch: set bn_ctx to NULL after freeing
      it in ssl/s3_clnt.c.
    - CVE-2010-2939

Date: Wed, 06 Oct 2010 16:46:36 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/openssl/0.9.8o-1ubuntu4.1
-------------- next part --------------
Format: 1.8
Date: Wed, 06 Oct 2010 16:46:36 -0400
Source: openssl
Binary: openssl openssl-doc libssl0.9.8 libcrypto0.9.8-udeb libssl0.9.8-udeb libssl-dev libssl0.9.8-dbg
Architecture: source
Version: 0.9.8o-1ubuntu4.1
Distribution: maverick-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libcrypto0.9.8-udeb - crypto shared library - udeb (udeb)
 libssl-dev - SSL development libraries, header files and documentation
 libssl0.9.8 - SSL shared libraries
 libssl0.9.8-dbg - Symbol tables for libssl and libcrypto
 libssl0.9.8-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Socket Layer (SSL) binary and related cryptographic tools
 openssl-doc - Secure Socket Layer (SSL) documentation
Changes: 
 openssl (0.9.8o-1ubuntu4.1) maverick-security; urgency=low
 .
   * SECURITY UPDATE: denial of service and possible code execution via
     crafted private key with an invalid prime.
     - debian/patches/CVE-2010-2939.patch: set bn_ctx to NULL after freeing
       it in ssl/s3_clnt.c.
     - CVE-2010-2939
Checksums-Sha1: 
 0e429c3242cc0c11fb8c958526178b8d1621e11e 2118 openssl_0.9.8o-1ubuntu4.1.dsc
 be8702e8638feaebce51562e1631f359a16f8758 89963 openssl_0.9.8o-1ubuntu4.1.debian.tar.gz
Checksums-Sha256: 
 5bb445575dc07e562107c9c0d36da50561d07ee120953c2ba3d1fd0c628db1f6 2118 openssl_0.9.8o-1ubuntu4.1.dsc
 94a9ace88d92353dbe3966a8685e999107490f355c74e1f3776ec029fff27c3c 89963 openssl_0.9.8o-1ubuntu4.1.debian.tar.gz
Files: 
 b554cbdf744531089791d6a2f442e4a7 2118 utils optional openssl_0.9.8o-1ubuntu4.1.dsc
 1e7fb9727df92d5a4d5b2b69ef7d6fdb 89963 utils optional openssl_0.9.8o-1ubuntu4.1.debian.tar.gz
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel at lists.alioth.debian.org>


More information about the Maverick-changes mailing list