Ubuntu
openssl package

openssl 0.9.8e-5ubuntu3.4 source package in Ubuntu

Changelog

openssl (0.9.8e-5ubuntu3.4) gutsy-security; urgency=low

  * SECURITY UPDATE: crash via invalid memory access when printing BMPString
    or UniversalString with invalid length
    - crypto/asn1/tasn_dec.c, crypto/asn1/asn1_err.c and crypto/asn1/asn1.h:
      return error if invalid length
    - CVE-2009-0590
    - http://www.openssl.org/news/secadv_20090325.txt
    - patch from upstream CVS:
      crypto/asn1/asn1.h:1.128.2.11->1.128.2.12
      crypto/asn1/asn1_err.c:1.54.2.4->1.54.2.5
      crypto/asn1/tasn_dec.c:1.26.2.10->1.26.2.11

 -- Jamie Strandboge <email address hidden>   Thu, 26 Mar 2009 14:13:35 -0500

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Gutsy
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
utils
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openssl_0.9.8e.orig.tar.gz 3.2 MiB 414e8428b95fbc51707965fda31390497d058290356426bfe084b49464a60340
openssl_0.9.8e-5ubuntu3.4.diff.gz 58.7 KiB 7c158fc81459f45d6921a6435ed69a2b95168a2cb903225ceb1a6a2f10dbeb03
openssl_0.9.8e-5ubuntu3.4.dsc 958 bytes f65dfe71097a465070cae163b41650ed110cf341d3350be0039151e242cb1ffe

View changes file

Binary packages built by this source

libcrypto0.9.8-udeb: No summary available for libcrypto0.9.8-udeb in ubuntu gutsy.

No description available for libcrypto0.9.8-udeb in ubuntu gutsy.

libssl-dev: No summary available for libssl-dev in ubuntu gutsy.

No description available for libssl-dev in ubuntu gutsy.

libssl0.9.8: No summary available for libssl0.9.8 in ubuntu gutsy.

No description available for libssl0.9.8 in ubuntu gutsy.

libssl0.9.8-dbg: No summary available for libssl0.9.8-dbg in ubuntu gutsy.

No description available for libssl0.9.8-dbg in ubuntu gutsy.

openssl: No summary available for openssl in ubuntu gutsy.

No description available for openssl in ubuntu gutsy.