openssl 1.0.2g-1ubuntu11 source package in Ubuntu

Changelog

openssl (1.0.2g-1ubuntu11) zesty; urgency=medium

  * SECURITY UPDATE: Montgomery multiplication may produce incorrect
    results
    - debian/patches/CVE-2016-7055.patch: fix logic in
      crypto/bn/asm/x86_64-mont.pl.
    - CVE-2016-7055
  * SECURITY UPDATE: DoS via warning alerts
    - debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
      warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
      ssl/ssl_locl.h.
    - debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
      type is received in ssl/s3_pkt.c.
    - CVE-2016-8610
  * SECURITY UPDATE: Truncated packet could crash via OOB read
    - debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
      crypto/evp/e_rc4_hmac_md5.c.
    - CVE-2017-3731
  * SECURITY UPDATE: BN_mod_exp may produce incorrect results on x86_64
    - debian/patches/CVE-2017-3732.patch: fix carry bug in
      bn_sqr8x_internal in crypto/bn/asm/x86_64-mont5.pl.
    - CVE-2017-3732

 -- Marc Deslauriers <email address hidden>  Mon, 30 Jan 2017 09:00:43 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Zesty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openssl_1.0.2g.orig.tar.gz 5.0 MiB b784b1b3907ce39abf4098702dade6365522a253ad1552e267a9a0e89594aa33
openssl_1.0.2g-1ubuntu11.debian.tar.xz 107.1 KiB 0dac44ec3526dd1f62b67f9e0e6504628e0e58c9bca640d558b119ba80a71a24
openssl_1.0.2g-1ubuntu11.dsc 2.4 KiB 4fee937cdba364881eab56ba1f428c94a462af7d7a61cafb4189cef9a3fd8461

View changes file

Binary packages built by this source

libcrypto1.0.0-udeb: No summary available for libcrypto1.0.0-udeb in ubuntu zesty.

No description available for libcrypto1.0.0-udeb in ubuntu zesty.

libcrypto1.0.0-udeb-dbgsym: No summary available for libcrypto1.0.0-udeb-dbgsym in ubuntu artful.

No description available for libcrypto1.0.0-udeb-dbgsym in ubuntu artful.

libssl-dev: No summary available for libssl-dev in ubuntu zesty.

No description available for libssl-dev in ubuntu zesty.

libssl-dev-dbgsym: No summary available for libssl-dev-dbgsym in ubuntu artful.

No description available for libssl-dev-dbgsym in ubuntu artful.

libssl-doc: No summary available for libssl-doc in ubuntu zesty.

No description available for libssl-doc in ubuntu zesty.

libssl1.0-dev: No summary available for libssl1.0-dev in ubuntu artful.

No description available for libssl1.0-dev in ubuntu artful.

libssl1.0-dev-dbgsym: No summary available for libssl1.0-dev-dbgsym in ubuntu zesty.

No description available for libssl1.0-dev-dbgsym in ubuntu zesty.

libssl1.0.0: No summary available for libssl1.0.0 in ubuntu zesty.

No description available for libssl1.0.0 in ubuntu zesty.

libssl1.0.0-dbg: No summary available for libssl1.0.0-dbg in ubuntu zesty.

No description available for libssl1.0.0-dbg in ubuntu zesty.

libssl1.0.0-dbgsym: No summary available for libssl1.0.0-dbgsym in ubuntu artful.

No description available for libssl1.0.0-dbgsym in ubuntu artful.

libssl1.0.0-udeb: No summary available for libssl1.0.0-udeb in ubuntu artful.

No description available for libssl1.0.0-udeb in ubuntu artful.

libssl1.0.0-udeb-dbgsym: No summary available for libssl1.0.0-udeb-dbgsym in ubuntu artful.

No description available for libssl1.0.0-udeb-dbgsym in ubuntu artful.

openssl: No summary available for openssl in ubuntu zesty.

No description available for openssl in ubuntu zesty.

openssl-dbgsym: No summary available for openssl-dbgsym in ubuntu zesty.

No description available for openssl-dbgsym in ubuntu zesty.