openssl 1.0.2g-1ubuntu11 source package in Ubuntu
Changelog
openssl (1.0.2g-1ubuntu11) zesty; urgency=medium
* SECURITY UPDATE: Montgomery multiplication may produce incorrect
results
- debian/patches/CVE-2016-7055.patch: fix logic in
crypto/bn/asm/x86_64-mont.pl.
- CVE-2016-7055
* SECURITY UPDATE: DoS via warning alerts
- debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
ssl/ssl_locl.h.
- debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
type is received in ssl/s3_pkt.c.
- CVE-2016-8610
* SECURITY UPDATE: Truncated packet could crash via OOB read
- debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
crypto/evp/e_rc4_hmac_md5.c.
- CVE-2017-3731
* SECURITY UPDATE: BN_mod_exp may produce incorrect results on x86_64
- debian/patches/CVE-2017-3732.patch: fix carry bug in
bn_sqr8x_internal in crypto/bn/asm/x86_64-mont5.pl.
- CVE-2017-3732
-- Marc Deslauriers <email address hidden> Mon, 30 Jan 2017 09:00:43 -0500
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Zesty
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- utils
- Urgency:
- Medium Urgency
See full publishing history Publishing
| Series | Published | Component | Section |
|---|
Downloads
| File | Size | SHA-256 Checksum |
|---|---|---|
| openssl_1.0.2g.orig.tar.gz | 5.0 MiB | b784b1b3907ce39abf4098702dade6365522a253ad1552e267a9a0e89594aa33 |
| openssl_1.0.2g-1ubuntu11.debian.tar.xz | 107.1 KiB | 0dac44ec3526dd1f62b67f9e0e6504628e0e58c9bca640d558b119ba80a71a24 |
| openssl_1.0.2g-1ubuntu11.dsc | 2.4 KiB | 4fee937cdba364881eab56ba1f428c94a462af7d7a61cafb4189cef9a3fd8461 |
Available diffs
Binary packages built by this source
- libcrypto1.0.0-udeb: No summary available for libcrypto1.0.0-udeb in ubuntu zesty.
No description available for libcrypto1.0.0-udeb in ubuntu zesty.
- libcrypto1.0.0-udeb-dbgsym: No summary available for libcrypto1.0.0-udeb-dbgsym in ubuntu artful.
No description available for libcrypto1.
0.0-udeb- dbgsym in ubuntu artful.
- libssl-dev: No summary available for libssl-dev in ubuntu zesty.
No description available for libssl-dev in ubuntu zesty.
- libssl-dev-dbgsym: No summary available for libssl-dev-dbgsym in ubuntu artful.
No description available for libssl-dev-dbgsym in ubuntu artful.
- libssl-doc: No summary available for libssl-doc in ubuntu zesty.
No description available for libssl-doc in ubuntu zesty.
- libssl1.0-dev: No summary available for libssl1.0-dev in ubuntu artful.
No description available for libssl1.0-dev in ubuntu artful.
- libssl1.0-dev-dbgsym: No summary available for libssl1.0-dev-dbgsym in ubuntu zesty.
No description available for libssl1.
0-dev-dbgsym in ubuntu zesty.
- libssl1.0.0: No summary available for libssl1.0.0 in ubuntu zesty.
No description available for libssl1.0.0 in ubuntu zesty.
- libssl1.0.0-dbg: No summary available for libssl1.0.0-dbg in ubuntu zesty.
No description available for libssl1.0.0-dbg in ubuntu zesty.
- libssl1.0.0-dbgsym: No summary available for libssl1.0.0-dbgsym in ubuntu artful.
No description available for libssl1.0.0-dbgsym in ubuntu artful.
- libssl1.0.0-udeb: No summary available for libssl1.0.0-udeb in ubuntu artful.
No description available for libssl1.0.0-udeb in ubuntu artful.
- libssl1.0.0-udeb-dbgsym: No summary available for libssl1.0.0-udeb-dbgsym in ubuntu artful.
No description available for libssl1.
0.0-udeb- dbgsym in ubuntu artful.
- openssl: No summary available for openssl in ubuntu zesty.
No description available for openssl in ubuntu zesty.
- openssl-dbgsym: No summary available for openssl-dbgsym in ubuntu zesty.
No description available for openssl-dbgsym in ubuntu zesty.
