~ubuntu-branches/ubuntu/lucid/openssl/lucid-security

• Changes
• Files

~ubuntu-branches/ubuntu/lucid/openssl/lucid-security » Changes from revision 61

From Revision 24 to 5

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
24		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - Use a different priority for libssl0.9.8/restart-services depending on whether     a desktop, or server dist-upgrade is being performed.   - Display a system restart required notification bubble on libssl0.9.8 upgrade.   - Ship documentation in new openssl-doc package.   - Configure: Add support for lpia.   - Replace duplicate files in the doc directory with symlinks.   - Link using -Bsymbolic-functions.   - Update maintainer as per spec.	Luke Yelavich	0.9.8g-10.1ubuntu1	16 years ago
23		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - Use a different priority for libssl0.9.8/restart-services depending on whether     a desktop, or server dist-upgrade is being performed.   - Display a system restart required notification bubble on libssl0.9.8 upgrade.   - Ship documentation in new openssl-doc package.   - Configure: Add support for lpia.   - Replace duplicate files in the doc directory with symlinks.   - Link using -Bsymbolic-functions.   - Update maintainer as per spec.	Luke Yelavich	0.9.8g-10ubuntu1	16 years ago
22		* Merge from debian unstable, remaining changes: * Merge from debian unstable, remaining changes:   - Use a different priority for libssl0.9.8/restart-services depending on whether     a desktop, or server dist-upgrade is being performed.   - Display a system restart required notification bubble on libssl0.9.8 upgrade.   - Ship documentation in new openssl-doc package.   - Configure: Add support for lpia.   - Replace duplicate files in the doc directory with symlinks.   - Link using -Bsymbolic-functions.   - Update maintainer as per spec.	Luke Yelavich	0.9.8g-8ubuntu1	16 years ago
21		* Use a different priority for libssl0.9.8/restart-services ... * Use a different priority for libssl0.9.8/restart-services depending on whether   a desktop, or server dist-upgrade is being performed. (LP: #91814) * Display a system restart required notification bubble on libssl0.9.8 upgrade.	Luke Yelavich	0.9.8g-4ubuntu3	16 years ago
20		Ship documentation in new openssl-doc package, since it is v... Ship documentation in new openssl-doc package, since it is very large and not terribly useful for the casual desktop user.	Martin Pitt	0.9.8g-4ubuntu2	16 years ago
19		* Merge from unstable; remaining changes: * Merge from unstable; remaining changes:   - Configure: Add support for lpia.   - Replace duplicate files in the doc directory with symlinks.   - Link using -Bsymbolic-functions.	Matthias Klose	0.9.8g-4ubuntu1	16 years ago
18		* Merge with Debian; remaining changes: * Merge with Debian; remaining changes:   - Configure: Add support for lpia.   - Replace duplicate files in the doc directory with symlinks.	Matthias Klose	0.9.8g-3ubuntu1	17 years ago
17		Replace duplicate files in the doc directory with symlinks. Replace duplicate files in the doc directory with symlinks.	Matthias Klose	0.9.8e-5ubuntu3	17 years ago
16		[ Jamie Strandboge ] [ Jamie Strandboge ] * SECURITY UPDATE: off-by-one error in SSL_get_shared_ciphers() results in   buffer overflow * ssl/ssl_lib.c: applied upstream patch from openssl CVS thanks to   Stephan Hermann * References:   CVE-2007-5135   http://www.securityfocus.com/archive/1/archive/1/480855/100/0/threaded   Fixes LP: #146269 * Modify Maintainer value to match the DebianMaintainerField   specification. [ Kees Cook ] * SECURITY UPDATE: side-channel attacks via BN_from_montgomery function. * crypto/bn/bn_mont.c: upstream patch from openssl CVS thanks to Debian. * References   CVE-2007-3108	Kees Cook	0.9.8e-5ubuntu2	17 years ago
15		* Configure: Add support for lpia. * Configure: Add support for lpia. * Explicitely build using gcc-4.1 (PR other/31359).	Matthias Klose	0.9.8e-5ubuntu1	17 years ago
14		[ Christian Perrier ] [ Christian Perrier ] * Debconf templates proofread and slightly rewritten by   the debian-l10n-english team as part of the Smith Review Project.   Closes: #418584 * Debconf templates translations:   - Arabic. Closes: #418669   - Russian. Closes: #418670   - Galician. Closes: #418671   - Swedish. Closes: #418679   - Korean. Closes: #418755   - Czech. Closes: #418768   - Basque. Closes: #418784   - German. Closes: #418785   - Traditional Chinese. Closes: #419915   - Brazilian Portuguese. Closes: #419959   - French. Closes: #420429   - Italian. Closes: #420461   - Japanese. Closes: #420482   - Catalan. Closes: #420833   - Dutch. Closes: #420925   - Malayalam. Closes: #420986   - Portuguese. Closes: #421032   - Romanian. Closes: #421708 [ Kurt Roeckx ] * Remove the Provides for the udeb. Patch from Frans Pop. (Closes: #419608) * Updated Spanish debconf template.  (Closes: #421336) * Do the header changes, changing those defines into real functions,   and bump the shlibs to match. * Update Japanese debconf translation.  (Closes: #422270)	Kurt Roeckx	0.9.8e-5	17 years ago
13		openssl should depend on libssl0.9.8 0.9.8e-1 since it openssl should depend on libssl0.9.8 0.9.8e-1 since it  uses some of the defines that changed to functions. Other things build against libssl or libcrypto shouldn't  have this problem since they use the old headers. (Closes: #414283)	Kurt Roeckx	0.9.8e-4	17 years ago
12		Rebuild for changes in the amd64 toolchain. Rebuild for changes in the amd64 toolchain.	Matthias Klose	0.9.8c-4build1	17 years ago
11		* Add German debconf translation. Thanks to * Add German debconf translation.  Thanks to   Johannes Starosta <feedback-an-johannes@arcor.de> (Closes: #388108) * Make c_rehash look for both .pem and .crt files.  Also make it support   files in DER format.  Patch by "Yauheni Kaliuta" <y.kaliuta@gmail.com>   (Closes: #387089) * Use & instead of && to check a flag in the X509 policy checking.   Patch from upstream cvs.  (Closes: #397151) * Also restart slapd for security updates (Closes: #400221) * Add Romanian debconf translation.  Thanks to   stan ioan-eugen <stan.ieugen@gmail.com> (Closes: #393507)	Kurt Roeckx	0.9.8c-4	18 years ago
10		Fix patch for CVE-2006-2940, it left ctx unintiliased. Fix patch for CVE-2006-2940, it left ctx unintiliased.	Kurt Roeckx	0.9.8c-3	18 years ago
9		* SECURITY UPDATE: Remote arbitrary code execution, remote D... * SECURITY UPDATE: Remote arbitrary code execution, remote DoS. * crypto/asn1/tasn_dec.c, asn1_d2i_ex_primitive(): Initialize 'ret' to avoid   an infinite loop in some circumstances. [CVE-2006-2937] * ssl/ssl_lib.c, SSL_get_shared_ciphers(): Fix len comparison to correctly   handle invalid long cipher list strings. [CVE-2006-3738] * ssl/s2_clnt.c, get_server_hello(): Check for NULL session certificate to   avoid client crash with malicious server responses. [CVE-2006-4343] * Certain types of public key could take disproportionate amounts of time to   process. Apply patch from Bodo Moeller to impose limits to public key type   values (similar to Mozilla's libnss). Fixes CPU usage/memory DoS. [CVE-2006-2940] * Updated patch in previous package version to fix a few corner-case   regressions. (This reverts the changes to rsa_eay.c/rsa.h/rsa_err.c, which   were determined to not be necessary).	Martin Pitt	0.9.8b-2ubuntu2	18 years ago
8		* SECURITY UPDATE: signature forgery in some cases. * SECURITY UPDATE: signature forgery in some cases. * Apply http://www.openssl.org/news/patch-CVE-2006-4339.txt:   - Check excessive data in padding of PKCS #1 v1.5 signatures to prevent     applications from incorrectly verifying the certificate. * References:   CVE-2006-4339   http://www.openssl.org/news/secadv_20060905.txt	Martin Pitt	0.9.8b-2ubuntu1	18 years ago
7		Rebuild with current zlib1g-dev to fix udeb shlibdeps. Rebuild with current zlib1g-dev to fix udeb shlibdeps.	Colin Watson	0.9.8b-2build1	18 years ago
6		* Don't call gcc with -mcpu on i386, we already use -march, ... * Don't call gcc with -mcpu on i386, we already use -march, so no need for   -mtune either. * Always make all directories when building something:   - The engines directory didn't get build for the static directory, so     where missing in libcrypo.a   - The apps directory didn't always get build, so we didn't have an openssl     and a small part of the regression tests failed. * Make the package fail to build if the regression tests fail.	Kurt Roeckx	0.9.8b-2	18 years ago
5		Fake sync from Debian to resolve a problem with establishing... Fake sync from Debian to resolve a problem with establishing TCP connections over the BIO API, add a new debconf translation, and resolve a build failure with libio-socket-ssl-perl.	Adam Conrad	0.9.8a-7build1	18 years ago

• « Newer
• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1