~ubuntu-branches/ubuntu/gutsy/openssl/gutsy-security : changes

~ubuntu-branches/ubuntu/gutsy/openssl/gutsy-security » Changes from revision 21

From Revision 13

Rev	Summary	Authors	Tags	Date
13	openssl should depend on libssl0.9.8 0.9.8e-1 since it openssl should depend on libssl0.9.8 0.9.8e-1 since it uses some of the defines that changed to functions. Other things build against libssl or libcrypto shouldn't have this problem since they use the old headers. (Closes: #414283)	Kurt Roeckx	0.9.8e-4	17 years ago
12	Rebuild for changes in the amd64 toolchain. Rebuild for changes in the amd64 toolchain.	Matthias Klose	0.9.8c-4build1	17 years ago
11	* Add German debconf translation. Thanks to * Add German debconf translation. Thanks to Johannes Starosta <feedback-an-johannes@arcor.de> (Closes: #388108) * Make c_rehash look for both .pem and .crt files. Also make it support files in DER format. Patch by "Yauheni Kaliuta" <y.kaliuta@gmail.com> (Closes: #387089) * Use & instead of && to check a flag in the X509 policy checking. Patch from upstream cvs. (Closes: #397151) * Also restart slapd for security updates (Closes: #400221) * Add Romanian debconf translation. Thanks to stan ioan-eugen <stan.ieugen@gmail.com> (Closes: #393507)	Kurt Roeckx	0.9.8c-4	17 years ago
10	Fix patch for CVE-2006-2940, it left ctx unintiliased. Fix patch for CVE-2006-2940, it left ctx unintiliased.	Kurt Roeckx	0.9.8c-3	17 years ago
9	* SECURITY UPDATE: Remote arbitrary code execution, remote D... * SECURITY UPDATE: Remote arbitrary code execution, remote DoS. * crypto/asn1/tasn_dec.c, asn1_d2i_ex_primitive(): Initialize 'ret' to avoid an infinite loop in some circumstances. [CVE-2006-2937] * ssl/ssl_lib.c, SSL_get_shared_ciphers(): Fix len comparison to correctly handle invalid long cipher list strings. [CVE-2006-3738] * ssl/s2_clnt.c, get_server_hello(): Check for NULL session certificate to avoid client crash with malicious server responses. [CVE-2006-4343] * Certain types of public key could take disproportionate amounts of time to process. Apply patch from Bodo Moeller to impose limits to public key type values (similar to Mozilla's libnss). Fixes CPU usage/memory DoS. [CVE-2006-2940] * Updated patch in previous package version to fix a few corner-case regressions. (This reverts the changes to rsa_eay.c/rsa.h/rsa_err.c, which were determined to not be necessary).	Martin Pitt	0.9.8b-2ubuntu2	17 years ago
8	* SECURITY UPDATE: signature forgery in some cases. * SECURITY UPDATE: signature forgery in some cases. * Apply http://www.openssl.org/news/patch-CVE-2006-4339.txt: - Check excessive data in padding of PKCS #1 v1.5 signatures to prevent applications from incorrectly verifying the certificate. * References: CVE-2006-4339 http://www.openssl.org/news/secadv_20060905.txt	Martin Pitt	0.9.8b-2ubuntu1	17 years ago
7	Rebuild with current zlib1g-dev to fix udeb shlibdeps. Rebuild with current zlib1g-dev to fix udeb shlibdeps.	Colin Watson	0.9.8b-2build1	17 years ago
6	* Don't call gcc with -mcpu on i386, we already use -march, ... * Don't call gcc with -mcpu on i386, we already use -march, so no need for -mtune either. * Always make all directories when building something: - The engines directory didn't get build for the static directory, so where missing in libcrypo.a - The apps directory didn't always get build, so we didn't have an openssl and a small part of the regression tests failed. * Make the package fail to build if the regression tests fail.	Kurt Roeckx	0.9.8b-2	18 years ago
5	Fake sync from Debian to resolve a problem with establishing... Fake sync from Debian to resolve a problem with establishing TCP connections over the BIO API, add a new debconf translation, and resolve a build failure with libio-socket-ssl-perl.	Adam Conrad	0.9.8a-7build1	18 years ago
4	Stop ssh from crashing randomly on sparc (Closes: #335912) Stop ssh from crashing randomly on sparc (Closes: #335912) Patch from upstream cvs.	Kurt Roeckx	0.9.8a-5	18 years ago
3	* really fix der_chop. The fix from -1 was not really includ... * really fix der_chop. The fix from -1 was not really included (closes: #281212) * still fixes security problem CAN-2004-0975 etc. - tempfile raise condition in der_chop - Avoid a race condition when CRLs are checked in a multi threaded environment.	Christoph Martin	0.9.7e-3	19 years ago
2	rename -pic.a libraries to _pic.a (closes: #250016) rename -pic.a libraries to _pic.a (closes: #250016)	Christoph Martin	0.9.7d-3	20 years ago
1	Import upstream version 0.9.7d Import upstream version 0.9.7d	Christoph Martin	upstream-0.9.7d	20 years ago