[ubuntu/oneiric-updates] openssl 1.0.0e-2ubuntu4.7 (Accepted)

[Ubuntu Archive Robot]

openssl (1.0.0e-2ubuntu4.7) oneiric-security; urgency=low

  * SECURITY UPDATE: denial of service via invalid OCSP key
    - debian/patches/CVE-2013-0166.patch: properly handle NULL key in
      crypto/asn1/a_verify.c, crypto/ocsp/ocsp_vfy.c.
    - CVE-2013-0166
  * SECURITY UPDATE: "Lucky Thirteen" timing side-channel TLS attack
    - debian/patches/CVE-2013-0169.patch: massive code changes
    - CVE-2013-0169

Date: 2013-02-18 21:30:11.559000+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/oneiric/+source/openssl/1.0.0e-2ubuntu4.7
-------------- next part --------------
Sorry, changesfile not available.