~ubuntu-branches/ubuntu/lucid/openssl/lucid-security

• Changes
• Files

~ubuntu-branches/ubuntu/lucid/openssl/lucid-security » Changes from revision 61

From Revision 51 to 32

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
51		* SECURITY UPDATE: incomplete fix for CVE-2012-2110 * SECURITY UPDATE: incomplete fix for CVE-2012-2110   - debian/patches/CVE-2012-2131.patch: also verify 'len' in BUF_MEM_grow     and BUF_MEM_grow_clean is non-negative   - CVE-2012-2131 * debian/patches/CVE-2012-2110b.patch: Use correct error code in   BUF_MEM_grow_clean()	Jamie Strandboge	0.9.8k-7ubuntu8.11	12 years ago
50		* SECURITY UPDATE: NULL pointer dereference in S/MIME messag... * SECURITY UPDATE: NULL pointer dereference in S/MIME messages with broken   headers   - debian/patches/CVE-2006-7250+2012-1165.patch: adjust mime_hdr_cmp()     and mime_param_cmp() to not dereference the compared strings if either     is NULL   - CVE-2006-7250   - CVE-2012-1165 * SECURITY UPDATE: fix various overflows   - debian/patches/CVE-2012-2110.patch: adjust crypto/a_d2i_fp.c,     crypto/buffer.c and crypto/mem.c to verify size of lengths   - CVE-2012-2110	Jamie Strandboge	0.9.8k-7ubuntu8.10	12 years ago
49		* SECURITY UPDATE: ECDSA private key timing attack * SECURITY UPDATE: ECDSA private key timing attack   - debian/patches/CVE-2011-1945.patch: compute with fixed scalar     length   - CVE-2011-1945 * SECURITY UPDATE: ECDH ciphersuite denial of service   - debian/patches/CVE-2011-3210.patch: fix memory usage for thread     safety   - CVE-2011-3210 * SECURITY UPDATE: DTLS plaintext recovery attack   - debian/patches/CVE-2011-4108.patch: perform all computations     before discarding messages   - CVE-2011-4108 * SECURITY UPDATE: policy check double free vulnerability   - debian/patches/CVE-2011-4019.patch: only free domain policyin     one location   - CVE-2011-4019 * SECURITY UPDATE: SSL 3.0 block padding exposure   - debian/patches/CVE-2011-4576.patch: clear bytes used for block     padding of SSL 3.0 records.   - CVE-2011-4576 * SECURITY UPDATE: malformed RFC 3779 data denial of service attack   - debian/patches/CVE-2011-4577.patch: prevent malformed RFC3779     data from triggering an assertion failure   - CVE-2011-4577 * SECURITY UPDATE: Server Gated Cryptography (SGC) denial of service   - debian/patches/CVE-2011-4619.patch: Only allow one SGC handshake     restart for SSL/TLS.   - CVE-2011-4619 * SECURITY UPDATE: fix for CVE-2011-4108 denial of service attack   - debian/patches/CVE-2012-0050.patch: improve handling of DTLS MAC   - CVE-2012-0050 * debian/patches/openssl-fix_ECDSA_tests.patch: fix ECDSA tests * debian/libssl0.9.8.postinst: Only issue the reboot notification for   servers by testing that the X server is not running (LP: #244250)	Steve Beattie	0.9.8k-7ubuntu8.8	12 years ago
48		* SECURITY UPDATE: OCSP stapling vulnerability * SECURITY UPDATE: OCSP stapling vulnerability   - debian/patched/openssl-CVE-2011-0014-secadv_20110208.patch:     stricter parsing of ClientHello message in ssl/t1_lib.c   - CVE-2011-0014 * Forward TLS version interop patch   - debian/patches/openssl-forward-interop.patch   - Handle TLS versions 2.0 and later properly and correctly use     the highest version of TLS/SSL supported. Although TLS >=     2.0 is some way off ancient servers have a habit of sticking     around for a while...     [Steve Henson]	Steve Beattie	0.9.8k-7ubuntu8.6	13 years ago
47		* SECURITY UPDATE: ciphersuite downgrade vulnerability * SECURITY UPDATE: ciphersuite downgrade vulnerability   - openssl-CVE-2010-4180-secadv_20101202-0.9.8.patch:     disable workaround for Netscape cipher suite bug in ssl/s3_clnt.c     and ssl/s3_srvr.c   - CVE-2010-4180	Steve Beattie	0.9.8k-7ubuntu8.5	14 years ago
46		* SECURITY UPDATE: TLS race condition leading to a buffer ov... * SECURITY UPDATE: TLS race condition leading to a buffer overflow and   possible code execution. (LP: #676243)   - patches/debian/openssl-CVE-2010-3864-secadv_20101116-0.9.8.patch:     stricter NULL/not-NULL checking in ssl/t1_lib.c   - CVE-2010-3864	Steve Beattie	0.9.8k-7ubuntu8.4	14 years ago
45		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   crafted private key with an invalid prime.   - debian/patches/CVE-2010-2939.patch: set bn_ctx to NULL after freeing     it in ssl/s3_clnt.c.   - CVE-2010-2939	Marc Deslauriers	0.9.8k-7ubuntu8.3	14 years ago
44		* SECURITY UPDATE: TLS renegotiation flaw (LP: #616759) * SECURITY UPDATE: TLS renegotiation flaw (LP: #616759)   - debian/patches/CVE-2009-3555-RFC5746.patch: backport rfc5746 support     from openssl 0.9.8m.   - CVE-2009-3555	Marc Deslauriers	0.9.8k-7ubuntu8.1	14 years ago
43		* SECURITY UPDATE: denial of service and possible arbitrary ... * SECURITY UPDATE: denial of service and possible arbitrary code   execution via unchecked return values   - debian/patches/CVE-2009-3245.patch: check bn_wexpand return value in     crypto/bn/{bn_div.c,bn_gf2m.c,bn_mul.c}, crypto/ec/ec2_smpl.c,     engines/e_ubsec.c.   - CVE-2009-3245 * SECURITY UPDATE: denial of service via "record of death"   - debian/patches/CVE-2010-0740.patch: only send back minor version     number in ssl/s3_pkt.c.   - CVE-2010-0740	Marc Deslauriers	0.9.8k-7ubuntu8	14 years ago
42		debian/patches/dtls-compatibility.patch: backport dtls compa... debian/patches/dtls-compatibility.patch: backport dtls compatibility code from 0.9.8m to fix interopability. (LP: #516318)	Marc Deslauriers	0.9.8k-7ubuntu7	14 years ago
41		* Backport Intel AES-NI support from * Backport Intel AES-NI support from   http://rt.openssl.org/Ticket/Display.html?id=2067 (LP: #485518). * Don't change perl #! paths under .pc.	Colin Watson	0.9.8k-7ubuntu6	14 years ago
40		* SECURITY UPDATE: memory leak possible during state clean-u... * SECURITY UPDATE: memory leak possible during state clean-up.   - Add CVE-2009-4355.patch, upstream fixes thanks to Debian.	Kees Cook	0.9.8k-7ubuntu5	14 years ago
39		releasing version 0.9.8k-7ubuntu4 releasing version 0.9.8k-7ubuntu4	Colin Watson	0.9.8k-7ubuntu4	14 years ago
38		Create libssl0.9.8-udeb, for the benefit of wget-udeb (LP: #... Create libssl0.9.8-udeb, for the benefit of wget-udeb (LP: #503339).	Colin Watson		14 years ago
37		* Use host compiler when cross-building (patch from Neil Wil... * Use host compiler when cross-building (patch from Neil Williams in   Debian #465248). * Don't run 'make test' when cross-building.	Colin Watson		14 years ago
36		debian/patches/disable-sslv2.patch: remove and apply inline ... debian/patches/disable-sslv2.patch: remove and apply inline to fix FTBFS when patch won't revert during the build process.	Marc Deslauriers	0.9.8k-7ubuntu3	15 years ago
35		debian/patches/{disable-sslv2,Bsymbolic-functions}.patch: ap... debian/patches/{disable-sslv2,Bsymbolic-functions}.patch: apply Makefile sections inline as once the package is configured during the build process, the patches wouldn't revert anymore, causing a FTBFS on anything other than amd64.	Marc Deslauriers	0.9.8k-7ubuntu2	15 years ago
34		* Merge from debian unstable, remaining changes (LP: #493392... * Merge from debian unstable, remaining changes (LP: #493392):   - Link using -Bsymbolic-functions   - Add support for lpia   - Disable SSLv2 during compile   - Ship documentation in openssl-doc, suggested by the package.   - Use a different priority for libssl0.9.8/restart-services     depending on whether a desktop, or server dist-upgrade is being     performed.   - Display a system restart required notification bubble on libssl0.9.8     upgrade.   - Replace duplicate files in the doc directory with symlinks.   - Move runtime libraries to /lib, for the benefit of wpasupplicant * Strip the patches out of the source into quilt patches * Disable CVE-2009-3555.patch	Nicolas Valcárcel Sc...	0.9.8k-7ubuntu1	15 years ago
33		* SECURITY UPDATE: certificate spoofing via hash collisions ... * SECURITY UPDATE: certificate spoofing via hash collisions from MD2   design flaws.   - crypto/evp/c_alld.c, ssl/ssl_algs.c: disable MD2 digest.   - crypto/x509/x509_vfy.c: skip signature check for self signed     certificates   - http://marc.info/?l=openssl-cvs&m=124508133203041&w=2   - http://marc.info/?l=openssl-cvs&m=124704528713852&w=2   - CVE-2009-2409	Marc Deslauriers	0.9.8g-16ubuntu3	15 years ago
32		* Patches forward ported from http://www.ubuntu.com/usn/USN-... * Patches forward ported from http://www.ubuntu.com/usn/USN-792-1 (by   Marc Deslauriers) * SECURITY UPDATE: denial of service via memory consumption from large   number of future epoch DTLS records.   - crypto/pqueue.*: add new pqueue_size counter function.   - ssl/d1_pkt.c: use pqueue_size to limit size of queue to 100.   - http://cvs.openssl.org/chngview?cn=18187   - CVE-2009-1377 * SECURITY UPDATE: denial of service via memory consumption from   duplicate or invalid sequence numbers in DTLS records.   - ssl/d1_both.c: discard message if it's a duplicate or too far in the     future.   - http://marc.info/?l=openssl-dev&m=124263491424212&w=2   - CVE-2009-1378 * SECURITY UPDATE: denial of service or other impact via use-after-free   in dtls1_retrieve_buffered_fragment.   - ssl/d1_both.c: use temp frag_len instead of freed frag.   - http://rt.openssl.org/Ticket/Display.html?id=1923&user=guest&pass=guest   - CVE-2009-1379 * SECURITY UPDATE: denial of service via DTLS ChangeCipherSpec packet   that occurs before ClientHello.   - ssl/s3_pkt.c: abort if s->session is NULL.   - ssl/{ssl.h,ssl_err.c}: add new error codes.   - http://cvs.openssl.org/chngview?cn=17369   - CVE-2009-1386 * SECURITY UPDATE: denial of service via an out-of-sequence DTLS   handshake message.   - ssl/d1_both.c: don't buffer fragments with no data.   - http://cvs.openssl.org/chngview?cn=17958   - CVE-2009-1387	Jamie Strandboge	0.9.8g-16ubuntu2	15 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1