openssl 0.9.8g-10.1ubuntu1 source package in Ubuntu

Changelog

openssl (0.9.8g-10.1ubuntu1) intrepid; urgency=low

  * Merge from debian unstable, remaining changes:
    - Use a different priority for libssl0.9.8/restart-services depending on whether
      a desktop, or server dist-upgrade is being performed.
    - Display a system restart required notification bubble on libssl0.9.8 upgrade.
    - Ship documentation in new openssl-doc package.
    - Configure: Add support for lpia.
    - Replace duplicate files in the doc directory with symlinks.
    - Link using -Bsymbolic-functions.
    - Update maintainer as per spec.

openssl (0.9.8g-10.1) unstable; urgency=high

  * Non-maintainer upload by the Security team.
  * Fix denial of service if the 'Server Key exchange message'
    is omitted from a TLS handshake which could lead to a client
    crash (CVE-2008-1672; Closes: #483379).
    This only works if openssl is compiled with enable-tlsext which is
    done in Debian.
  * Fix double free in TLS server name extension which leads to a remote
    denial of service (CVE-2008-0891; Closes: #483379).

 -- Luke Yelavich <email address hidden>   Tue, 10 Jun 2008 11:50:07 +1000