[USN-884-1] OpenSSL vulnerability

Kees Cook kees at ubuntu.com
Thu Jan 14 01:57:21 UTC 2010


===========================================================
Ubuntu Security Notice USN-884-1           January 14, 2010
openssl vulnerability
CVE-2009-4355
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 8.10
Ubuntu 9.04
Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libssl0.9.8                     0.9.8a-7ubuntu0.11

Ubuntu 8.04 LTS:
  libssl0.9.8                     0.9.8g-4ubuntu3.9

Ubuntu 8.10:
  libssl0.9.8                     0.9.8g-10.1ubuntu2.6

Ubuntu 9.04:
  libssl0.9.8                     0.9.8g-15ubuntu3.4

Ubuntu 9.10:
  libssl0.9.8                     0.9.8g-16ubuntu3.1

After a standard system upgrade you need to restart any applications
using OpenSSL, especially Apache, to effect the necessary changes.

Details follow:

It was discovered that OpenSSL did not correctly free unused memory in
certain situations.  A remote attacker could trigger this flaw in services
that used SSL, causing the service to use all available system memory,
leading to a denial of service.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.11.diff.gz
      Size/MD5:    53583 078fd4b21d4cbe9cc56c6472efd2f82e
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.11.dsc
      Size/MD5:      863 1377338a9886d11c1c694b61fbef8c57
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a.orig.tar.gz
      Size/MD5:  3271435 1d16c727c10185e4d694f87f5e424ee1

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.11_amd64.udeb
      Size/MD5:   572058 fcca42eafc9db726ae0fed5446722d2a
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.11_amd64.deb
      Size/MD5:  2168230 838b7fdb5d3511b13cfddeff3b4cc012
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.11_amd64.deb
      Size/MD5:  1683044 224538a2aab035f0dca5d084dbf11f18
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.11_amd64.deb
      Size/MD5:   876766 fbf13b1530240b7f973c766c5d3f472f
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.11_amd64.deb
      Size/MD5:   985572 86b5869ce64db3de5c8bfa940784e66e

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.11_i386.udeb
      Size/MD5:   509642 9de0f0a418975f96c1d34e9e768602a7
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.11_i386.deb
      Size/MD5:  2025304 a0fd927eb2c5d1c7c1fa1d05fdb70844
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.11_i386.deb
      Size/MD5:  5054086 6c7609da189fe87af592d9aee5810f8d
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.11_i386.deb
      Size/MD5:  2597912 2fa091d1d98a5619a87c82680fd41a63
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.11_i386.deb
      Size/MD5:   977384 2cb20009b29d555fa6a54bc9e0e840e3

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.11_powerpc.udeb
      Size/MD5:   557996 fc36889114e018166aea4a83c5326876
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.11_powerpc.deb
      Size/MD5:  2182878 23f4223f5b33dc2610249168c4e3ac8f
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.11_powerpc.deb
      Size/MD5:  1728330 867d6abf0e1823facd5983c7e8663fe1
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.11_powerpc.deb
      Size/MD5:   862962 569703c074b5675fa75f47e377d77f4f
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.11_powerpc.deb
      Size/MD5:   981478 d7e25315631c93459e87bf32ed1a80a7

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.11_sparc.udeb
      Size/MD5:   531120 c3c0edd3faeeefd715f1f7445de7bd75
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.11_sparc.deb
      Size/MD5:  2094062 0462ca729344b506ca47e7ee6a072a2a
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.11_sparc.deb
      Size/MD5:  3943146 4c63bdac42f197d7ba87ba08e41ce833
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.11_sparc.deb
      Size/MD5:  2093194 476064416774ebdffecb39bd14190904
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.11_sparc.deb
      Size/MD5:   989766 519bc05f4350bc73c1b797ce992b774b

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.9.diff.gz
      Size/MD5:    57624 3ce2a25565b28125fea2063d699fe4c2
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.9.dsc
      Size/MD5:      959 9fdd11a0ede708d6f6eb46789d18a332
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-4ubuntu3.9_all.deb
      Size/MD5:   629818 fd45ce5337737db58f5bd4b6f4d49c34

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.9_amd64.udeb
      Size/MD5:   604116 5e5a065259450d657bbd731c2a5c4cf7
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.9_amd64.deb
      Size/MD5:  2065026 477ee0c685fda01af69f3e2498879d1a
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.9_amd64.deb
      Size/MD5:  1605842 39246a5e5e44805ac41ff1c83f4303a2
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.9_amd64.deb
      Size/MD5:   932704 8ae7ff1f67de0352ca5e893a2b7cc478
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.9_amd64.deb
      Size/MD5:   390608 199fe49d3b7760a93c0b761b98243f9c

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.9_i386.udeb
      Size/MD5:   564900 9a7233abd4c8ac802a59a27593f09157
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.9_i386.deb
      Size/MD5:  1942036 cde5d59342272592a73cbb510b26099d
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.9_i386.deb
      Size/MD5:  5343388 22664b439f9343bfba1a50b99b183506
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.9_i386.deb
      Size/MD5:  2830730 6ef48a0ee7f2aa250d83f7c8967fdffa
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.9_i386.deb
      Size/MD5:   385414 617966792c3dd9b1413d8bccad81b007

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.9_lpia.udeb
      Size/MD5:   535576 4561b9d21de36010f2c1cc7174939ddb
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.9_lpia.deb
      Size/MD5:  1922840 8526a8c26a0756e5d4c07150c060153a
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.9_lpia.deb
      Size/MD5:  1513848 2da4b2c36123a473383c961d35aaea66
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.9_lpia.deb
      Size/MD5:   844172 608523703aa6afd0ca17bffac3bac2c0
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.9_lpia.deb
      Size/MD5:   390036 07f80e60472c4d8f5b35737df7ff11d1

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.9_powerpc.udeb
      Size/MD5:   610448 5aa07b6da99bd426e590921ec95a6d7d
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.9_powerpc.deb
      Size/MD5:  2078316 1a363e766a017670bad1a9ef55d0da96
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.9_powerpc.deb
      Size/MD5:  1640942 35709bb218c55ef3dd84673249b28df6
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.9_powerpc.deb
      Size/MD5:   946004 435032eb95cae3cc024bfb0435ac7e2b
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.9_powerpc.deb
      Size/MD5:   399190 3b92e622203b4afb56a4a0f39f36c76a

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.9_sparc.udeb
      Size/MD5:   559830 91f9f930a688eb8074f674008bdcbc4b
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.9_sparc.deb
      Size/MD5:  1985116 25b894ef012cc97033ea2b22b325f8bf
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.9_sparc.deb
      Size/MD5:  3875276 8a4cc3d59260de6d0abc0c04ec4694e7
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.9_sparc.deb
      Size/MD5:  2243138 dc45192a9eb556a4068f4bcd358495f1
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.9_sparc.deb
      Size/MD5:   397834 25447db31c0698eefd384f59c629ed9e

Updated packages for Ubuntu 8.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.6.diff.gz
      Size/MD5:    59597 4cf453be12cd9a37ce9adcd59b736c12
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.6.dsc
      Size/MD5:     1373 2eeed217c3f62603366134442a772de5
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-10.1ubuntu2.6_all.deb
      Size/MD5:   629518 f4737a13eb762e407f5a85bcdea9ea2b

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.6_amd64.udeb
      Size/MD5:   622272 829fb113bf48efa8e5889f353ada7d86
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.6_amd64.deb
      Size/MD5:  2109964 e3d56926f75fd157aa7911becbab2d3d
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.6_amd64.deb
      Size/MD5:  1685630 c7d7cce672ee8750529545161425cfbb
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.6_amd64.deb
      Size/MD5:   959000 b5a02710c552181bcf4414c9994b5d07
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.6_amd64.deb
      Size/MD5:   404002 fdf80c8f9e3937fc946ebc293a7af0dc

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.6_i386.udeb
      Size/MD5:   578804 7e6fd857da61a516147ca14312eebbc4
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.6_i386.deb
      Size/MD5:  1980760 433b2b612143a13dd6bc9eaa5bc57dd8
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.6_i386.deb
      Size/MD5:  5606470 bf696a0d7d95317126cf60ca89c8699f
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.6_i386.deb
      Size/MD5:  2921362 6f5c84d1bb8ff9828866b88590049c64
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.6_i386.deb
      Size/MD5:   398634 a861e5f9152c4b8b073af7e3cea32bfa

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.6_lpia.udeb
      Size/MD5:   547482 bea50d80146eab69f07707234187d07c
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.6_lpia.deb
      Size/MD5:  1958290 5bbfb95cbe98cf27779dddabedcbdbff
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.6_lpia.deb
      Size/MD5:  1580416 5dcc62eeb3e2e25bd60931dbbfb5cb35
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.6_lpia.deb
      Size/MD5:   863696 54b56d16a90677bee6100a60f4eb7a64
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.6_lpia.deb
      Size/MD5:   400630 eefe5c10cc2a040fb18e0f31fb9134b0

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.6_powerpc.udeb
      Size/MD5:   623250 f51af07c00285e307baa1042d5d2e36d
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.6_powerpc.deb
      Size/MD5:  2120464 4e799bffd24bb693c13f47567f81aa1e
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.6_powerpc.deb
      Size/MD5:  1705308 a2a097971182affc1df807242e2d55d5
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.6_powerpc.deb
      Size/MD5:   965578 70be3d9f39fb85968890b50ed568961d
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.6_powerpc.deb
      Size/MD5:   402652 69edb8efb8324ddd4769cb04c1faf7ab

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-10.1ubuntu2.6_sparc.udeb
      Size/MD5:   567678 27d5beebddabe79f9ee586490fa39628
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-10.1ubuntu2.6_sparc.deb
      Size/MD5:  2013850 bad8c224bc9326c320f3c6a70ae961a7
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-10.1ubuntu2.6_sparc.deb
      Size/MD5:  4038778 2e767a15210f3a158c3a6111ff85af51
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-10.1ubuntu2.6_sparc.deb
      Size/MD5:  2285930 c92a8f07fbabcd218e74186063d525d3
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-10.1ubuntu2.6_sparc.deb
      Size/MD5:   406758 b72a20b0ff8524f18ec55933ae3d2723

Updated packages for Ubuntu 9.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.4.diff.gz
      Size/MD5:    61966 b202f11e66751a6d74cd9cbd2c423026
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.4.dsc
      Size/MD5:     1476 ea957c9f96643444437a3f96de6ba250
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-15ubuntu3.4_all.deb
      Size/MD5:   630404 f57619daf5fe28633018bb990289a2a4

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.4_amd64.udeb
      Size/MD5:   622016 4968392acf782b84df90c925058b4556
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.4_amd64.deb
      Size/MD5:  2101208 0f4a4eefebeefda26cc41d9fd0cb77d2
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.4_amd64.deb
      Size/MD5:  1686434 d22aafbe4532db12a73c5cdf0082aa5b
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.4_amd64.deb
      Size/MD5:   960980 4f2126304d9539258f5466e840939c17
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.4_amd64.deb
      Size/MD5:   402132 a5c27b0c214664e666d0b9e87f5e11bb

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.4_i386.udeb
      Size/MD5:   578858 ae7901891441e9387531f212fd181feb
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.4_i386.deb
      Size/MD5:  1972796 4b5befbd3a4f387ec10b9b02d145692e
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.4_i386.deb
      Size/MD5:  5606770 bdb9a9ba35db89361caec17b0295234b
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.4_i386.deb
      Size/MD5:  2924250 9f59e0af697ad603f0b5523a358bd2ee
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.4_i386.deb
      Size/MD5:   397830 be6e595954d6e958e5647749a4508b65

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.4_lpia.udeb
      Size/MD5:   547460 4a85bfb1089fdf9029aefcdd887cfdaf
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.4_lpia.deb
      Size/MD5:  1949972 b17b67b6f3384b6cd813939703fa294f
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.4_lpia.deb
      Size/MD5:  1581388 667d2f135f810a1c7957b0646f2597c9
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.4_lpia.deb
      Size/MD5:   865782 a68d7c72469682913d960fdca329cf3e
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.4_lpia.deb
      Size/MD5:   399370 81cb0bcd6040bccf98204cd4951e80c2

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.4_powerpc.udeb
      Size/MD5:   623270 29cd5febf24a3d3b7d6e194ab03d30a3
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.4_powerpc.deb
      Size/MD5:  2112392 fe35372e842403f73fface06cb6b81cf
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.4_powerpc.deb
      Size/MD5:  1706036 3c60700323017d99f040f2c08cafab36
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.4_powerpc.deb
      Size/MD5:   967820 4a1eeaabf310d820930b017eeed0967c
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.4_powerpc.deb
      Size/MD5:   401218 0c274b4836ce6b2f184877c333349c31

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.4_sparc.udeb
      Size/MD5:   567626 409bf151f19abc289cb87a32c8330623
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.4_sparc.deb
      Size/MD5:  2005764 83932c4fe5e3e6067e53987612a58fab
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.4_sparc.deb
      Size/MD5:  4039666 f57b1708821b81b0386f5bb94dc5bbd2
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.4_sparc.deb
      Size/MD5:  2287248 cdec5a2b105083e3c112051735e17dd1
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.4_sparc.deb
      Size/MD5:   405470 f43afd307821ae2023841ed0df9d48d1

Updated packages for Ubuntu 9.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.1.diff.gz
      Size/MD5:    62124 0ccaf31bb466d39abcc0c0b0a3f233e8
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.1.dsc
      Size/MD5:     1476 1e2262fb468c9efb42a036e3f8a3c890
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-16ubuntu3.1_all.deb
      Size/MD5:   630550 5da8184611f9bddbce67d843f48757b7

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.1_amd64.udeb
      Size/MD5:   628102 dbfce0d70116d0d736281044444d4bf8
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.1_amd64.deb
      Size/MD5:  2114152 bd9df215c27087b00bfcf5fc0a5951e5
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.1_amd64.deb
      Size/MD5:  1635946 110e0bc281c87b58ac3179485b3ce80b
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.1_amd64.deb
      Size/MD5:   964948 d42feb0d19b2aaee451de7ae7d11f7dc
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.1_amd64.deb
      Size/MD5:   402344 14d636c618b04f6e3f3aeba1858e881a

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.1_i386.udeb
      Size/MD5:   571400 0189ac36af72febca731b8b520ca44d0
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.1_i386.deb
      Size/MD5:  1970330 ab13b28f7ab9ac4ce3e1d16568b43e50
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.1_i386.deb
      Size/MD5:  5607170 14233856cc77c65214afbf4b8a425516
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.1_i386.deb
      Size/MD5:  2913846 ca6d1efb2712b0e207493491897beab1
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.1_i386.deb
      Size/MD5:   397684 23dddcc16d016187d17e9fc0bb2ac5bc

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.1_lpia.udeb
      Size/MD5:   547622 9193d051f48255733a877126dbb872c8
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.1_lpia.deb
      Size/MD5:  1953268 8d1b60d97c819ceebde1b5aa581c8233
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.1_lpia.deb
      Size/MD5:  1583562 d82c42deadff8280be469cb60e1a277e
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.1_lpia.deb
      Size/MD5:   866380 1978474a522dcfe1a00b0572a0264c07
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.1_lpia.deb
      Size/MD5:   399642 6fae9c8dcacaa9cfec6b12002af73e6b

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.1_powerpc.udeb
      Size/MD5:   619002 c7cb046505e97c4749c84d80bc208240
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.1_powerpc.deb
      Size/MD5:  2111024 bf512750a558622c0939d3e673f2958b
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.1_powerpc.deb
      Size/MD5:  1690978 723981c075fecc6793af54b7fab95697
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.1_powerpc.deb
      Size/MD5:   948616 ba268888547761cae6dbb1d29819821c
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.1_powerpc.deb
      Size/MD5:   399236 a6ee992fd63e9f5ae45c8361b6d0377b

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.1_sparc.udeb
      Size/MD5:   563678 8352657d40a0d8928da76c9b9a2179f9
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.1_sparc.deb
      Size/MD5:  2004048 d7aaac9224f49d0c53622a13c808ce08
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.1_sparc.deb
      Size/MD5:  3974302 fe60a67af133c8001cc89fe803de0271
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.1_sparc.deb
      Size/MD5:  2275584 a8c6b6253b311c44a7ab51810be70683
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.1_sparc.deb
      Size/MD5:   409140 a7714f98616706bc91d15234f54a73cb

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 236 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20100113/d134627c/attachment.sig>


More information about the ubuntu-security-announce mailing list