openssl (0.9.8g-15ubuntu3) jaunty; urgency=low
* SECURITY UPDATE: crash via invalid memory access when printing BMPString
or UniversalString with invalid length
- crypto/asn1/tasn_dec.c, crypto/asn1/asn1_err.c and crypto/asn1/asn1.h:
return error if invalid length
- CVE-2009-0590
- http://www.openssl.org/news/secadv_20090325.txt
- patch from upstream CVS:
crypto/asn1/asn1.h:1.128.2.11->1.128.2.12
crypto/asn1/asn1_err.c:1.54.2.4->1.54.2.5
crypto/asn1/tasn_dec.c:1.26.2.10->1.26.2.11
Date: Fri, 27 Mar 2009 08:23:35 -0500
Changed-By: Jamie Strandboge <[email protected]>
Maintainer: Ubuntu Core Developers <[email protected]>
https://launchpad.net/ubuntu/jaunty/+source/openssl/0.9.8g-15ubuntu3
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 27 Mar 2009 08:23:35 -0500
Source: openssl
Binary: openssl openssl-doc libssl0.9.8 libcrypto0.9.8-udeb libssl-dev
libssl0.9.8-dbg
Architecture: source
Version: 0.9.8g-15ubuntu3
Distribution: jaunty
Urgency: low
Maintainer: Ubuntu Core Developers <[email protected]>
Changed-By: Jamie Strandboge <[email protected]>
Description:
libcrypto0.9.8-udeb - crypto shared library - udeb (udeb)
libssl-dev - SSL development libraries, header files and documentation
libssl0.9.8 - SSL shared libraries
libssl0.9.8-dbg - Symbol tables for libssl and libcrypto
openssl - Secure Socket Layer (SSL) binary and related cryptographic tools
openssl-doc - Secure Socket Layer (SSL) documentation
Changes:
openssl (0.9.8g-15ubuntu3) jaunty; urgency=low
.
* SECURITY UPDATE: crash via invalid memory access when printing BMPString
or UniversalString with invalid length
- crypto/asn1/tasn_dec.c, crypto/asn1/asn1_err.c and crypto/asn1/asn1.h:
return error if invalid length
- CVE-2009-0590
- http://www.openssl.org/news/secadv_20090325.txt
- patch from upstream CVS:
crypto/asn1/asn1.h:1.128.2.11->1.128.2.12
crypto/asn1/asn1_err.c:1.54.2.4->1.54.2.5
crypto/asn1/tasn_dec.c:1.26.2.10->1.26.2.11
Checksums-Sha1:
5df39e3f99d1e1433c75c443fa0e0c2942911ebc 1429 openssl_0.9.8g-15ubuntu3.dsc
f2d6f0eafba0a1248e070802b7042eded34dbd0a 58650 openssl_0.9.8g-15ubuntu3.diff.gz
Checksums-Sha256:
bc5a312fbe6ebeeeb2e48a907996e6d264949525d4aef5f3e8c2e60bbe639009 1429
openssl_0.9.8g-15ubuntu3.dsc
b25ee227383462b986615d7cd306cf508e3f57bcfc78752899af0410b844b4da 58650
openssl_0.9.8g-15ubuntu3.diff.gz
Files:
7adb0ed5cee698161e45644c8718536c 1429 utils optional
openssl_0.9.8g-15ubuntu3.dsc
ee4b005c57a9813aabe9b1c0b7488635 58650 utils optional
openssl_0.9.8g-15ubuntu3.diff.gz
Original-Maintainer: Debian OpenSSL Team
<[email protected]>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEUEARECAAYFAknM0/AACgkQW0JvuRdL8BoungCgoYttaAbiMglVicCZns2ozqJS
sWIAl1cpY3QYpcf7cCRFCsvvrkhIuhU=
=j3Rk
-----END PGP SIGNATURE-----
--
Jaunty-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/jaunty-changes
