openssl 0.9.8g-4ubuntu3.3 source package in Ubuntu
Changelog
openssl (0.9.8g-4ubuntu3.3) hardy-security; urgency=low
* SECURITY UPDATE: fix denial of service when 'Server Key exchange message'
is omitted from a TLS handshake
* ssl/s3_clnt.c: make sure s->session->sess_cert is not NULL
* SECURITY UPDATE: fix denial of service when using tlsext. Note that
this version of openssl does not use tlsext by default.
* ssl/t1_lib.c: make sure s->session->tlsext_hostname is set to NULL to
prevent double free.
* References
CVE-2008-1672
CVE-2008-0891
LP: #235913
-- Jamie Strandboge <email address hidden> Thu, 19 Jun 2008 14:35:20 -0400
Upload details
- Uploaded by:
- Jamie Strandboge
- Uploaded to:
- Hardy
- Original maintainer:
- Ubuntu Development Team
- Architectures:
- any
- Section:
- utils
- Urgency:
- Low Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| openssl_0.9.8g.orig.tar.gz | 3.2 MiB | 0e26886845de95716c9f1b9b75c0e06e9d4075d2bdc9e11504eaa5f7ee901cf0 |
| openssl_0.9.8g-4ubuntu3.3.diff.gz | 51.8 KiB | 95efdda9707b3f263a75db9a0c279a3b3725d70e45214ee02e6598a8dda610a7 |
| openssl_0.9.8g-4ubuntu3.3.dsc | 912 bytes | c6f4feffd122016d0a4c369b5e605cb6b217fe97965af44f16194a1aa820a0ce |
Available diffs
- diff from 0.9.8g-4ubuntu3.1 to 0.9.8g-4ubuntu3.3 (859 bytes)
Binary packages built by this source
- libcrypto0.9.8-udeb: No summary available for libcrypto0.9.8-udeb in ubuntu hardy.
No description available for libcrypto0.9.8-udeb in ubuntu hardy.
- libssl-dev: No summary available for libssl-dev in ubuntu hardy.
No description available for libssl-dev in ubuntu hardy.
- libssl0.9.8: No summary available for libssl0.9.8 in ubuntu hardy.
No description available for libssl0.9.8 in ubuntu hardy.
- libssl0.9.8-dbg: No summary available for libssl0.9.8-dbg in ubuntu hardy.
No description available for libssl0.9.8-dbg in ubuntu hardy.
- openssl: No summary available for openssl in ubuntu hardy.
No description available for openssl in ubuntu hardy.
- openssl-doc: No summary available for openssl-doc in ubuntu hardy.
No description available for openssl-doc in ubuntu hardy.
