[ubuntu/natty] openssl 0.9.8o-3ubuntu1 (Accepted)
Steve Beattie
sbeattie at ubuntu.com
Tue Nov 30 04:45:29 GMT 2010
openssl (0.9.8o-3ubuntu1) natty; urgency=low
* Merge from debian unstable (LP: #677756). Remaining changes:
- debian/patches/Bsymbolic-functions.patch: Link using
-Bsymbolic-functions (refreshed)
- Use a different priority for libssl0.9.8/restart-services
depending on whether a desktop, or server dist-upgrade is being
performed.
- Display a system restart required notification bubble on libssl0.9.8
upgrade.
- Don't build for processors no longer supported: i486, i586
(on i386), v8 (on sparc).
- Create libssl0.9.8-udeb, for the benefit of wget-udeb (no
wget-udeb package in Debian)
- Replace duplicate files in the doc directory with symlinks.
- Move runtime libraries to /lib, for the benefit of wpasupplicant
- Ship documentation in openssl-doc, suggested by the package.
(Debian bug 470594)
- Use host compiler when cross-building (patch from Neil Williams in
Debian bug 465248).
- Don't run 'make test' when cross-building.
- debian/patches/aesni.patch: Backport Intel AES-NI support from
http://rt.openssl.org/Ticket/Display.html?id=2067 (refreshed)
- debian/patches/perlpath-quilt.patch: Don't change perl #! paths
under .pc.
- debian/patches/no-sslv2.patch: disable SSLv2 to match NSS
and GnuTLS. The protocol is unsafe and extremely deprecated.
(Debian bug 589706)
* Dropped patches, now upstream:
- debian/patches/CVE-2010-2939.patch (Debian patch is identically
named)
openssl (0.9.8o-3) unstable; urgency=high
* Fix TLS extension parsing race condition (CVE-2010-3864) (Closes: #603709)
* Re-add the engines. They were missing since 0.9.8m-1.
Patch by Joerg Schneider. (Closes: #603693)
* Not all architectures were build using -g (Closes: #570702)
* Add powerpcspe support (Closes: #579805)
* Add armhf support (Closes: #596881)
* Update translations:
- Brazilian Portuguese (Closes: #592154)
- Danish (Closes: #599459)
- Vietnamese (Closes: #601536)
- Arabic (Closes: #596166)
* Generate the proper stamp file so that everything doesn't get build twice.
openssl (0.9.8o-2) unstable; urgency=high
* Fix CVE-2010-2939: Double free using ECDH. (Closes: #594415)
Date: Thu, 18 Nov 2010 12:54:37 -0800
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Luke Yelavich <luke.yelavich at canonical.com>
https://launchpad.net/ubuntu/natty/+source/openssl/0.9.8o-3ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 18 Nov 2010 12:54:37 -0800
Source: openssl
Binary: openssl openssl-doc libssl0.9.8 libcrypto0.9.8-udeb libssl0.9.8-udeb libssl-dev libssl0.9.8-dbg
Architecture: source
Version: 0.9.8o-3ubuntu1
Distribution: natty
Urgency: high
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Steve Beattie <sbeattie at ubuntu.com>
Description:
libcrypto0.9.8-udeb - crypto shared library - udeb (udeb)
libssl-dev - SSL development libraries, header files and documentation
libssl0.9.8 - SSL shared libraries
libssl0.9.8-dbg - Symbol tables for libssl and libcrypto
libssl0.9.8-udeb - ssl shared library - udeb (udeb)
openssl - Secure Socket Layer (SSL) binary and related cryptographic tools
openssl-doc - Secure Socket Layer (SSL) documentation
Closes: 570702 579805 592154 594415 596166 596881 599459 601536 603693 603709
Launchpad-Bugs-Fixed: 677756
Changes:
openssl (0.9.8o-3ubuntu1) natty; urgency=low
.
* Merge from debian unstable (LP: #677756). Remaining changes:
- debian/patches/Bsymbolic-functions.patch: Link using
-Bsymbolic-functions (refreshed)
- Use a different priority for libssl0.9.8/restart-services
depending on whether a desktop, or server dist-upgrade is being
performed.
- Display a system restart required notification bubble on libssl0.9.8
upgrade.
- Don't build for processors no longer supported: i486, i586
(on i386), v8 (on sparc).
- Create libssl0.9.8-udeb, for the benefit of wget-udeb (no
wget-udeb package in Debian)
- Replace duplicate files in the doc directory with symlinks.
- Move runtime libraries to /lib, for the benefit of wpasupplicant
- Ship documentation in openssl-doc, suggested by the package.
(Debian bug 470594)
- Use host compiler when cross-building (patch from Neil Williams in
Debian bug 465248).
- Don't run 'make test' when cross-building.
- debian/patches/aesni.patch: Backport Intel AES-NI support from
http://rt.openssl.org/Ticket/Display.html?id=2067 (refreshed)
- debian/patches/perlpath-quilt.patch: Don't change perl #! paths
under .pc.
- debian/patches/no-sslv2.patch: disable SSLv2 to match NSS
and GnuTLS. The protocol is unsafe and extremely deprecated.
(Debian bug 589706)
* Dropped patches, now upstream:
- debian/patches/CVE-2010-2939.patch (Debian patch is identically
named)
.
openssl (0.9.8o-3) unstable; urgency=high
.
* Fix TLS extension parsing race condition (CVE-2010-3864) (Closes: #603709)
* Re-add the engines. They were missing since 0.9.8m-1.
Patch by Joerg Schneider. (Closes: #603693)
* Not all architectures were build using -g (Closes: #570702)
* Add powerpcspe support (Closes: #579805)
* Add armhf support (Closes: #596881)
* Update translations:
- Brazilian Portuguese (Closes: #592154)
- Danish (Closes: #599459)
- Vietnamese (Closes: #601536)
- Arabic (Closes: #596166)
* Generate the proper stamp file so that everything doesn't get build twice.
.
openssl (0.9.8o-2) unstable; urgency=high
.
* Fix CVE-2010-2939: Double free using ECDH. (Closes: #594415)
Checksums-Sha1:
0593466b3c0d2baa00d71cfcf5c1ce0806242e97 1470 openssl_0.9.8o-3ubuntu1.dsc
1eeefcff41702ee92deef617f37981a407c16b8d 91598 openssl_0.9.8o-3ubuntu1.debian.tar.gz
Checksums-Sha256:
d0805fcdbcdd459c326aa73724e32e8c186958e8967a624458dc96141f77b652 1470 openssl_0.9.8o-3ubuntu1.dsc
ff4cf03a487a98e3471dd2ec3bc4714cd6f9d3ccabcd8de4db96ee0d5becf9f8 91598 openssl_0.9.8o-3ubuntu1.debian.tar.gz
Files:
7e282ba260f916a51986992b33c32702 1470 utils optional openssl_0.9.8o-3ubuntu1.dsc
64e35b37e0c79b4fee574a501288376a 91598 utils optional openssl_0.9.8o-3ubuntu1.debian.tar.gz
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkz0fucACgkQjVefwtBjIM5IKgCfRWtFofksm/CE2fQi5TjN3DBT
hWoAmgOHVoeYbrV/Gl9Bx16NZyjkgplw
=YC9w
-----END PGP SIGNATURE-----
More information about the Natty-changes
mailing list