[ubuntu/natty] openssl 0.9.8o-3ubuntu1 (Accepted)

Steve Beattie sbeattie at ubuntu.com
Tue Nov 30 04:45:29 GMT 2010


openssl (0.9.8o-3ubuntu1) natty; urgency=low

  * Merge from debian unstable (LP: #677756).  Remaining changes:
    - debian/patches/Bsymbolic-functions.patch: Link using
      -Bsymbolic-functions (refreshed)
    - Use a different priority for libssl0.9.8/restart-services
      depending on whether a desktop, or server dist-upgrade is being
      performed.
    - Display a system restart required notification bubble on libssl0.9.8
      upgrade.
    - Don't build for processors no longer supported: i486, i586
      (on i386), v8 (on sparc).
    - Create libssl0.9.8-udeb, for the benefit of wget-udeb (no
      wget-udeb package in Debian)
    - Replace duplicate files in the doc directory with symlinks.
    - Move runtime libraries to /lib, for the benefit of wpasupplicant
    - Ship documentation in openssl-doc, suggested by the package.
      (Debian bug 470594)
    - Use host compiler when cross-building (patch from Neil Williams in
      Debian bug 465248).
    - Don't run 'make test' when cross-building.
    - debian/patches/aesni.patch: Backport Intel AES-NI support from
      http://rt.openssl.org/Ticket/Display.html?id=2067 (refreshed)
    - debian/patches/perlpath-quilt.patch: Don't change perl #! paths
      under .pc.
    - debian/patches/no-sslv2.patch: disable SSLv2 to match NSS
      and GnuTLS. The protocol is unsafe and extremely deprecated.
      (Debian bug 589706)
  * Dropped patches, now upstream:
    - debian/patches/CVE-2010-2939.patch (Debian patch is identically
      named)

openssl (0.9.8o-3) unstable; urgency=high

  * Fix TLS extension parsing race condition (CVE-2010-3864) (Closes: #603709)
  * Re-add the engines.  They were missing since 0.9.8m-1.
    Patch by Joerg Schneider. (Closes: #603693)
  * Not all architectures were build using -g (Closes: #570702)
  * Add powerpcspe support (Closes: #579805)
  * Add armhf support (Closes: #596881)
  * Update translations:
    - Brazilian Portuguese (Closes: #592154)
    - Danish (Closes: #599459)
    - Vietnamese (Closes: #601536)
    - Arabic (Closes: #596166)
  * Generate the proper stamp file so that everything doesn't get build twice.

openssl (0.9.8o-2) unstable; urgency=high

  * Fix CVE-2010-2939: Double free using ECDH. (Closes: #594415)

Date: Thu, 18 Nov 2010 12:54:37 -0800
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Luke Yelavich <luke.yelavich at canonical.com>
https://launchpad.net/ubuntu/natty/+source/openssl/0.9.8o-3ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 18 Nov 2010 12:54:37 -0800
Source: openssl
Binary: openssl openssl-doc libssl0.9.8 libcrypto0.9.8-udeb libssl0.9.8-udeb libssl-dev libssl0.9.8-dbg
Architecture: source
Version: 0.9.8o-3ubuntu1
Distribution: natty
Urgency: high
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Description: 
 libcrypto0.9.8-udeb - crypto shared library - udeb (udeb)
 libssl-dev - SSL development libraries, header files and documentation
 libssl0.9.8 - SSL shared libraries
 libssl0.9.8-dbg - Symbol tables for libssl and libcrypto
 libssl0.9.8-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Socket Layer (SSL) binary and related cryptographic tools
 openssl-doc - Secure Socket Layer (SSL) documentation
Closes: 570702 579805 592154 594415 596166 596881 599459 601536 603693 603709
Launchpad-Bugs-Fixed: 677756
Changes: 
 openssl (0.9.8o-3ubuntu1) natty; urgency=low
 .
   * Merge from debian unstable (LP: #677756).  Remaining changes:
     - debian/patches/Bsymbolic-functions.patch: Link using
       -Bsymbolic-functions (refreshed)
     - Use a different priority for libssl0.9.8/restart-services
       depending on whether a desktop, or server dist-upgrade is being
       performed.
     - Display a system restart required notification bubble on libssl0.9.8
       upgrade.
     - Don't build for processors no longer supported: i486, i586
       (on i386), v8 (on sparc).
     - Create libssl0.9.8-udeb, for the benefit of wget-udeb (no
       wget-udeb package in Debian)
     - Replace duplicate files in the doc directory with symlinks.
     - Move runtime libraries to /lib, for the benefit of wpasupplicant
     - Ship documentation in openssl-doc, suggested by the package.
       (Debian bug 470594)
     - Use host compiler when cross-building (patch from Neil Williams in
       Debian bug 465248).
     - Don't run 'make test' when cross-building.
     - debian/patches/aesni.patch: Backport Intel AES-NI support from
       http://rt.openssl.org/Ticket/Display.html?id=2067 (refreshed)
     - debian/patches/perlpath-quilt.patch: Don't change perl #! paths
       under .pc.
     - debian/patches/no-sslv2.patch: disable SSLv2 to match NSS
       and GnuTLS. The protocol is unsafe and extremely deprecated.
       (Debian bug 589706)
   * Dropped patches, now upstream:
     - debian/patches/CVE-2010-2939.patch (Debian patch is identically
       named)
 .
 openssl (0.9.8o-3) unstable; urgency=high
 .
   * Fix TLS extension parsing race condition (CVE-2010-3864) (Closes: #603709)
   * Re-add the engines.  They were missing since 0.9.8m-1.
     Patch by Joerg Schneider. (Closes: #603693)
   * Not all architectures were build using -g (Closes: #570702)
   * Add powerpcspe support (Closes: #579805)
   * Add armhf support (Closes: #596881)
   * Update translations:
     - Brazilian Portuguese (Closes: #592154)
     - Danish (Closes: #599459)
     - Vietnamese (Closes: #601536)
     - Arabic (Closes: #596166)
   * Generate the proper stamp file so that everything doesn't get build twice.
 .
 openssl (0.9.8o-2) unstable; urgency=high
 .
   * Fix CVE-2010-2939: Double free using ECDH. (Closes: #594415)
Checksums-Sha1: 
 0593466b3c0d2baa00d71cfcf5c1ce0806242e97 1470 openssl_0.9.8o-3ubuntu1.dsc
 1eeefcff41702ee92deef617f37981a407c16b8d 91598 openssl_0.9.8o-3ubuntu1.debian.tar.gz
Checksums-Sha256: 
 d0805fcdbcdd459c326aa73724e32e8c186958e8967a624458dc96141f77b652 1470 openssl_0.9.8o-3ubuntu1.dsc
 ff4cf03a487a98e3471dd2ec3bc4714cd6f9d3ccabcd8de4db96ee0d5becf9f8 91598 openssl_0.9.8o-3ubuntu1.debian.tar.gz
Files: 
 7e282ba260f916a51986992b33c32702 1470 utils optional openssl_0.9.8o-3ubuntu1.dsc
 64e35b37e0c79b4fee574a501288376a 91598 utils optional openssl_0.9.8o-3ubuntu1.debian.tar.gz
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkz0fucACgkQjVefwtBjIM5IKgCfRWtFofksm/CE2fQi5TjN3DBT
hWoAmgOHVoeYbrV/Gl9Bx16NZyjkgplw
=YC9w
-----END PGP SIGNATURE-----


More information about the Natty-changes mailing list