openssl 0.9.8k-7ubuntu8 source package in Ubuntu

Changelog

openssl (0.9.8k-7ubuntu8) lucid; urgency=low

  * SECURITY UPDATE: denial of service and possible arbitrary code
    execution via unchecked return values
    - debian/patches/CVE-2009-3245.patch: check bn_wexpand return value in
      crypto/bn/{bn_div.c,bn_gf2m.c,bn_mul.c}, crypto/ec/ec2_smpl.c,
      engines/e_ubsec.c.
    - CVE-2009-3245
  * SECURITY UPDATE: denial of service via "record of death"
    - debian/patches/CVE-2010-0740.patch: only send back minor version
      number in ssl/s3_pkt.c.
    - CVE-2010-0740
 -- Marc Deslauriers <email address hidden>   Tue, 30 Mar 2010 08:57:51 -0400