openssl1.0 1.0.2n-1ubuntu6 source package in Ubuntu
Changelog
openssl1.0 (1.0.2n-1ubuntu6) cosmic; urgency=medium * SECURITY UPDATE: ECDSA key extraction side channel - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c. - CVE-2018-0495 * SECURITY UPDATE: denial of service via long prime values - debian/patches/CVE-2018-0732.patch: reject excessively large primes in DH key generation in crypto/dh/dh_key.c. - CVE-2018-0732 * SECURITY UPDATE: RSA cache timing side channel attack - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in crypto/rsa/rsa_gen.c. - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in crypto/rsa/rsa_gen.c. - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in crypto/rsa/rsa_gen.c. - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in crypto/rsa/rsa_gen.c. - CVE-2018-0737 -- Marc Deslauriers <email address hidden> Wed, 20 Jun 2018 07:59:27 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Cosmic
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any
- Section:
- utils
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openssl1.0_1.0.2n.orig.tar.gz | 5.1 MiB | 370babb75f278c39e0c50e8c4e7493bc0f18db6867478341a832a982fd15a8fe |
openssl1.0_1.0.2n.orig.tar.gz.asc | 455 bytes | 70ef16ae7776de3e69b28b47754d0a1fbed262e2a028c1fc866ad22201449c0a |
openssl1.0_1.0.2n-1ubuntu6.debian.tar.xz | 102.8 KiB | ecaa899293072cd52268e71aaa833a2c1b05dde50d42ab6efc901c743ba6f6f5 |
openssl1.0_1.0.2n-1ubuntu6.dsc | 2.6 KiB | adaa7d4eb2d664b7bae9c0bdf9a06c218c59266167891391a166c22147ce53a3 |
Available diffs
Binary packages built by this source
- libcrypto1.0.0-udeb: No summary available for libcrypto1.0.0-udeb in ubuntu disco.
No description available for libcrypto1.0.0-udeb in ubuntu disco.
- libssl1.0-dev: No summary available for libssl1.0-dev in ubuntu cosmic.
No description available for libssl1.0-dev in ubuntu cosmic.
- libssl1.0.0: No summary available for libssl1.0.0 in ubuntu disco.
No description available for libssl1.0.0 in ubuntu disco.
- libssl1.0.0-dbgsym: No summary available for libssl1.0.0-dbgsym in ubuntu disco.
No description available for libssl1.0.0-dbgsym in ubuntu disco.
- libssl1.0.0-udeb: No summary available for libssl1.0.0-udeb in ubuntu cosmic.
No description available for libssl1.0.0-udeb in ubuntu cosmic.
- openssl1.0: No summary available for openssl1.0 in ubuntu disco.
No description available for openssl1.0 in ubuntu disco.
- openssl1.0-dbgsym: No summary available for openssl1.0-dbgsym in ubuntu cosmic.
No description available for openssl1.0-dbgsym in ubuntu cosmic.