[USN-792-1] OpenSSL vulnerabilities

Marc Deslauriers marc.deslauriers at canonical.com
Thu Jun 25 18:25:55 UTC 2009 

===========================================================
Ubuntu Security Notice USN-792-1              June 25, 2009
openssl vulnerabilities
CVE-2009-1377, CVE-2009-1378, CVE-2009-1379, CVE-2009-1386,
CVE-2009-1387
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libssl0.9.8                     0.9.8a-7ubuntu0.9

Ubuntu 8.04 LTS:
  libssl0.9.8                     0.9.8g-4ubuntu3.7

Ubuntu 8.10:
  libssl0.9.8                     0.9.8g-10.1ubuntu2.4

Ubuntu 9.04:
  libssl0.9.8                     0.9.8g-15ubuntu3.2

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

Details follow:

It was discovered that OpenSSL did not limit the number of DTLS records it
would buffer when they arrived with a future epoch. A remote attacker could
cause a denial of service via memory resource consumption by sending a
large number of crafted requests. (CVE-2009-1377)

It was discovered that OpenSSL did not properly free memory when processing
DTLS fragments. A remote attacker could cause a denial of service via
memory resource consumption by sending a large number of crafted requests.
(CVE-2009-1378)

It was discovered that OpenSSL did not properly handle certain server
certificates when processing DTLS packets. A remote DTLS server could cause
a denial of service by sending a message containing a specially crafted
server certificate. (CVE-2009-1379)

It was discovered that OpenSSL did not properly handle a DTLS
ChangeCipherSpec packet when it occured before ClientHello. A remote
attacker could cause a denial of service by sending a specially crafted
request. (CVE-2009-1386)

It was discovered that OpenSSL did not properly handle out of sequence
DTLS handshake messages. A remote attacker could cause a denial of service
by sending a specially crafted request. (CVE-2009-1387)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.9.diff.gz
      Size/MD5:    53253 87f974c237cf2465f1ba69786a70d116
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.9.dsc
      Size/MD5:      822 c615f88992051bbaac37e6420a2221f7
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a.orig.tar.gz
      Size/MD5:  3271435 1d16c727c10185e4d694f87f5e424ee1

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.9_amd64.udeb
      Size/MD5:   572012 12834f1177ca23dc8eed3d3190f3f9dd
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.9_amd64.deb
      Size/MD5:  2168210 62602f8a3a89a70d9691b88fe76042b5
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.9_amd64.deb
      Size/MD5:  1683076 a9f24ae2f1c832d3adb5301eb6e59067
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.9_amd64.deb
      Size/MD5:   876572 8302dcca676df67f0c0847b4b3f9e342
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.9_amd64.deb
      Size/MD5:   985316 44d71c03b9b412e82902052f4fbf1472

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.9_i386.udeb
      Size/MD5:   509672 87341336a6d7dc978b569dd2c5852728
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.9_i386.deb
      Size/MD5:  2024876 0e05eaef6381362f8bc743f8ee36d352
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.9_i386.deb
      Size/MD5:  5054892 c0aeee67870b227ba23acec739d1b454
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.9_i386.deb
      Size/MD5:  2597752 d30e9ced45a123bff540701ba75bef42
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.9_i386.deb
      Size/MD5:   977078 25973096685717fab8bcdbe7cb4cb9b4

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.9_powerpc.udeb
      Size/MD5:   557990 4f9698929a22f31299b568d60ff08e8e
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.9_powerpc.deb
      Size/MD5:  2182748 2dce0ab311595a8a0e6d199438f501a9
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.9_powerpc.deb
      Size/MD5:  1728390 eb7be7cf86f4bdb465aa2ab024f13eba
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.9_powerpc.deb
      Size/MD5:   862766 e77d5ef7654dfb6709159d294f6d55a6
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.9_powerpc.deb
      Size/MD5:   981264 022eb8d31af292f5687ae4c64e7aa91b

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.9_sparc.udeb
      Size/MD5:   531120 186546bedff49ed2fcc04f763bf38392
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.9_sparc.deb
      Size/MD5:  2093936 f5735293aedc793db71104115f419f10
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.9_sparc.deb
      Size/MD5:  3943820 3451bab80db0761c0761da51aa821d6f
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.9_sparc.deb
      Size/MD5:  2093082 a1fcf0ce22f95ba5bf79ca12f9b73df0
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.9_sparc.deb
      Size/MD5:   989480 1a00b8291337bb2c28dac6c9485ca48f

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.7.diff.gz
      Size/MD5:    56958 cff78d7149ed0b5299b6dbcebe172449
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.7.dsc
      Size/MD5:      920 5d1a9093f06b84fcff699f1cf3edc607
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-4ubuntu3.7_all.deb
      Size/MD5:   629534 b019bfd2b45105f87f8efc0e0e2c57ba

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.7_amd64.udeb
      Size/MD5:   603930 47c316642dbd05991b44d2a96d817e28
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.7_amd64.deb
      Size/MD5:  2065162 04330fc9ba3cfa6db8b9075629b72322
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.7_amd64.deb
      Size/MD5:  1605794 98232ff640f761cd87740e1eb1f02d4f
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.7_amd64.deb
      Size/MD5:   932342 29590cb43838f3f8f81d88ed8154a0ee
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.7_amd64.deb
      Size/MD5:   390630 fc3bbf71bb5976c03c94e19ddd82af88

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.7_i386.udeb
      Size/MD5:   564892 376330d1955bf835417462a33841a133
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.7_i386.deb
      Size/MD5:  1942186 d9e6b58917e62ad633777d72384bc9b0
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.7_i386.deb
      Size/MD5:  5343766 ef17488c59d6228e28d88f080f74a237
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.7_i386.deb
      Size/MD5:  2830542 0152babd0468e95fe2af057f9ec48eac
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.7_i386.deb
      Size/MD5:   385440 51e3a3d01d81160b78da8b8573a4884b

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.7_lpia.udeb
      Size/MD5:   535648 cd75f1e3449222ac477bb0b83ac935fb
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.7_lpia.deb
      Size/MD5:  1922920 70ad8e9d094d81eb687819dbbb551419
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.7_lpia.deb
      Size/MD5:  1513740 f0a3e598e9f39f830e0162166f044c05
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.7_lpia.deb
      Size/MD5:   844004 bedf8086e132ba66c829dee413aab91e
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.7_lpia.deb
      Size/MD5:   390002 837048bf21a26366a2fcad9e583b7db9

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.7_powerpc.udeb
      Size/MD5:   610436 915d7b1a18534489a2e27301ee671eb4
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.7_powerpc.deb
      Size/MD5:  2078284 bccac062565de5774571a2b76216c74b
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.7_powerpc.deb
      Size/MD5:  1640882 54825577a2ecdf2d771893f65d9a7c8d
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.7_powerpc.deb
      Size/MD5:   945786 48d706a0ca031a9d33e928bd51247934
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.7_powerpc.deb
      Size/MD5:   399188 8331639d9850f7c065aa78837324fb13

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.7_sparc.udeb
      Size/MD5:   559848 a522bad57cee02558a86694c0691b464
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.7_sparc.deb
      Size/MD5:  1985110 d0009538a805c85df0f63dcbb0bde87d
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.7_sparc.deb
      Size/MD5:  3875618 841db8858f14b3254059e239d82a7f8d
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.7_sparc.deb
      Size/MD5:  2243292 253fba99206214eb43b8b7fad9698134
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.7_sparc.deb
      Size/MD5:   397832 0604c656a8d83aa48c18356b57b8eb76

Updated packages for Ubuntu 8.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.4.diff.gz
      Size/MD5:    58295 27131b02a14b8eec1231c265a1a9b23d
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.4.dsc
      Size/MD5:     1334 33677990cb932f428aab435020080ab2
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-10.1ubuntu2.4_all.deb
      Size/MD5:   629288 4f61130ede1f692d1028c53e1e3d93ea

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.4_amd64.udeb
      Size/MD5:   622232 2f1f1e33efde682cc4f9d3af0396e4c5
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.4_amd64.deb
      Size/MD5:  2109986 58ad8b6d599b4a4d6305e2723827efda
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.4_amd64.deb
      Size/MD5:  1685564 ea2b52f89149f522c8a30b31b11c0945
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.4_amd64.deb
      Size/MD5:   958772 7df1fa64d643a4d2a0e16cc1e0157764
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.4_amd64.deb
      Size/MD5:   403994 48219634a14ccd5e350ae38ae0d29d60

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.4_i386.udeb
      Size/MD5:   578878 9c4094653b90cc9ec2a804f797747169
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.4_i386.deb
      Size/MD5:  1980958 ca5de9716191a25f21c87c8a29f9f9f7
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.4_i386.deb
      Size/MD5:  5606896 133fdaae145613d9a52b3223d6b70149
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.4_i386.deb
      Size/MD5:  2921540 c93d55358156e9bf8e61a5765fa378a8
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.4_i386.deb
      Size/MD5:   398662 912335262d25fd7c9a0b4f1541dae478

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.4_lpia.udeb
      Size/MD5:   547516 2a5d21745c16ed646090fd4d8c7d5d02
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.4_lpia.deb
      Size/MD5:  1958290 b5cd365dae859ff6569bf88f4e1519f2
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.4_lpia.deb
      Size/MD5:  1580346 900aa241ac8ffeb6100441b5682043c1
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.4_lpia.deb
      Size/MD5:   863532 1dd86f6f458e506713043d147e46eb53
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.4_lpia.deb
      Size/MD5:   400634 191127c00f20afb7080cee7adf99f727

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.4_powerpc.udeb
      Size/MD5:   623294 865ea56a70d492233dbd591fb7525182
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.4_powerpc.deb
      Size/MD5:  2120492 beff836138f8458b577a34915096f98a
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.4_powerpc.deb
      Size/MD5:  1705386 0f50063f18599c75cbd8fcbbdf19c8ab
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.4_powerpc.deb
      Size/MD5:   965398 690867a976c25fe72f5787a3a35fed5b
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.4_powerpc.deb
      Size/MD5:   402640 1aac2523a49bb4277e7d360473ad7f7c

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.4_sparc.udeb
      Size/MD5:   567678 9185ca765789f0fa399ef054d78b3d47
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.4_sparc.deb
      Size/MD5:  2013830 893e17790fe4318a2ed2c70b60d1b064
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.4_sparc.deb
      Size/MD5:  4039030 641f686d1fa3ed9f6e80da208584f0cf
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.4_sparc.deb
      Size/MD5:  2285898 fe9b3a7286b2b8dde33fdcbad62884f6
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.4_sparc.deb
      Size/MD5:   406762 218f033e0df04f50a1f99feb92ccc232

Updated packages for Ubuntu 9.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.2.diff.gz
      Size/MD5:    60766 4a4112e240bb7e4ec9762bfd0542fa6b
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.2.dsc
      Size/MD5:     1437 1bdb5dcd678616fbefdb7fe8c288b9bb
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-15ubuntu3.2_all.deb
      Size/MD5:   630184 38dd4e9ab9238bdd66bd42fe8f53f938

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.2_amd64.udeb
      Size/MD5:   621994 4e8ef6db1fb4b7335330ebb2e3ac0188
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.2_amd64.deb
      Size/MD5:  2101196 28b775219933b295eeb254ff74a08364
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.2_amd64.deb
      Size/MD5:  1686326 6bfdd430777e07b06e102e3c120fa79a
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.2_amd64.deb
      Size/MD5:   960768 933222cce7b6220071a897fa3cbecbb1
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.2_amd64.deb
      Size/MD5:   402120 a18cb8e948b197ec7f2757060474eabb

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.2_i386.udeb
      Size/MD5:   578828 ede0d1d92421a60cacc90f271319d8c8
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.2_i386.deb
      Size/MD5:  1972610 e7cf0dc15c50431a11ae685fcad51569
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.2_i386.deb
      Size/MD5:  5607400 162ab1a368e19489d9185e52312ae3cb
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.2_i386.deb
      Size/MD5:  2924196 19cdb15ddb11a0c426e6adb6bd41e1be
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.2_i386.deb
      Size/MD5:   397830 6e3079a7deb46074a5db1da74a3ad770

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.2_lpia.udeb
      Size/MD5:   547496 e82a380d4daf21b12fdb88b0aa83baba
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.2_lpia.deb
      Size/MD5:  1949974 38a5f651601bb6726dcc96f995e70329
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.2_lpia.deb
      Size/MD5:  1581322 a419a424594c8a209ca9c04f8a081810
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.2_lpia.deb
      Size/MD5:   865676 043b426830aa51ed89d525dc8f3594c8
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.2_lpia.deb
      Size/MD5:   399378 ca77d344e78396a2d5ba31a18e137cf6

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.2_powerpc.udeb
      Size/MD5:   623342 7eabc3ccc743238e5e48334e74f9cbe9
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.2_powerpc.deb
      Size/MD5:  2112364 0bd2596ab49828f2aa9b535b295e3c27
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.2_powerpc.deb
      Size/MD5:  1705934 b4cc9cf85194651182a2d96a8c8106c7
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.2_powerpc.deb
      Size/MD5:   967676 5f23e50cb072b76bfb08a4deb78c08e7
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.2_powerpc.deb
      Size/MD5:   401230 6ae9727fce5cdb47e363e68bc4608d0a

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.2_sparc.udeb
      Size/MD5:   567512 1038e736dcfdaa92a0e5bc0c29fdf83b
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.2_sparc.deb
      Size/MD5:  2005738 69f79763b804e4fdafb9886d5b08d9db
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.2_sparc.deb
      Size/MD5:  4040040 5949736947b083d4f63e42839aced06d
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.2_sparc.deb
      Size/MD5:  2287072 31f18265ec47c64bd49f992a17025786
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.2_sparc.deb
      Size/MD5:   405468 aaafb95a49fc00f5a8a1b5fb3f54c8a6


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20090625/db22a9bb/attachment.sig>

More information about the ubuntu-security-announce mailing list