Ubuntu
openssl package

openssl 0.9.8g-4ubuntu3.5 source package in Ubuntu

Changelog

openssl (0.9.8g-4ubuntu3.5) hardy-security; urgency=low

  * SECURITY UPDATE: crash via invalid memory access when printing BMPString
    or UniversalString with invalid length
    - crypto/asn1/tasn_dec.c, crypto/asn1/asn1_err.c and crypto/asn1/asn1.h:
      return error if invalid length
    - CVE-2009-0590
    - http://www.openssl.org/news/secadv_20090325.txt
    - patch from upstream CVS:
      crypto/asn1/asn1.h:1.128.2.11->1.128.2.12
      crypto/asn1/asn1_err.c:1.54.2.4->1.54.2.5
      crypto/asn1/tasn_dec.c:1.26.2.10->1.26.2.11

 -- Jamie Strandboge <email address hidden>   Thu, 26 Mar 2009 14:12:48 -0500

Upload details

Uploaded by:
Jamie Strandboge
Uploaded to:
Hardy
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
utils
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openssl_0.9.8g.orig.tar.gz 3.2 MiB 0e26886845de95716c9f1b9b75c0e06e9d4075d2bdc9e11504eaa5f7ee901cf0
openssl_0.9.8g-4ubuntu3.5.diff.gz 54.2 KiB 8aaccd0611da81ed24b5448e37549d6e4a7ee6d596a649cee489807617737a21
openssl_0.9.8g-4ubuntu3.5.dsc 920 bytes abb82eabb684ab1780930233ec49e7a9c6b8d09807f12eb04078777f3ba42d96

View changes file

Binary packages built by this source

libcrypto0.9.8-udeb: No summary available for libcrypto0.9.8-udeb in ubuntu hardy.

No description available for libcrypto0.9.8-udeb in ubuntu hardy.

libssl-dev: No summary available for libssl-dev in ubuntu hardy.

No description available for libssl-dev in ubuntu hardy.

libssl0.9.8: No summary available for libssl0.9.8 in ubuntu hardy.

No description available for libssl0.9.8 in ubuntu hardy.

libssl0.9.8-dbg: No summary available for libssl0.9.8-dbg in ubuntu hardy.

No description available for libssl0.9.8-dbg in ubuntu hardy.

openssl: No summary available for openssl in ubuntu hardy.

No description available for openssl in ubuntu hardy.

openssl-doc: No summary available for openssl-doc in ubuntu hardy.

No description available for openssl-doc in ubuntu hardy.