lp://staging/ubuntu/warty-security/openssl
Created by
James Westby
and last modified
- Get this branch:
- bzr branch lp://staging/ubuntu/warty-security/openssl
Members of
Ubuntu branches
can upload to this branch. Log in for directions.
Branch merges
Propose for merging
No branches
dependent on this one.
Branch information
Recent revisions
- 3. By Martin Pitt
-
* SECURITY UPDATE: Fix cryptographic weakness.
* ssl/s23_srvr.c:
- When using SSL_OP_MSIE_SSLV2_ RSA_PADDING, do not disable the
protocol-version rollback check, so that a man-in-the-middle cannot
force a client and server to fall back to the insecure SSL 2.0 protocol.
- Problem discovered by Yutaka Oiwa.
* References:
CAN-2005-2969
http://www.openssl. org/news/ secadv_ 20051011. txt
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp://staging/ubuntu/lucid/openssl