~ubuntu-branches/ubuntu/lucid/openssl/lucid-security

• Changes
• Files

~ubuntu-branches/ubuntu/lucid/openssl/lucid-security » Changes from revision 61

From Revision 57 to 38

expand all

collapse all

Rev		Summary	Authors	Tags	Date	Diff	Files
57		* SECURITY UPDATE: double free when processing DTLS packets * SECURITY UPDATE: double free when processing DTLS packets   - debian/patches/CVE-2014-3505.patch: fix double free in ssl/d1_both.c.   - CVE-2014-3505 * SECURITY UPDATE: DTLS memory exhaustion   - debian/patches/CVE-2014-3506.patch: fix DTLS handshake message size     checks in ssl/d1_both.c.   - CVE-2014-3506 * SECURITY UPDATE: information leak in pretty printing functions   - debian/patches/CVE-2014-3508.patch: fix OID handling in     crypto/asn1/a_object.c, crypto/objects/obj_dat.c, crypto/asn1/asn1.h,     crypto/asn1/asn1_err.c.   - CVE-2014-3508 * SECURITY UPDATE: DTLS anonymous EC(DH) denial of service   - debian/patches/CVE-2014-3510.patch: check for server certs in     ssl/d1_clnt.c, ssl/s3_clnt.c.   - CVE-2014-3510 * SECURITY UPDATE: TLS protocol downgrade attack   - debian/patches/CVE-2014-3511.patch: properly handle fragments in     ssl/s23_srvr.c.   - CVE-2014-3511	Marc Deslauriers	0.9.8k-7ubuntu8.20	10 years ago
56		* SECURITY UPDATE: regression with certain renegotiations (L... * SECURITY UPDATE: regression with certain renegotiations (LP: #1332643)   - debian/patches/CVE-2014-0224-regression2.patch: accept CCS after     sending finished ssl/s3_clnt.c.	Marc Deslauriers	0.9.8k-7ubuntu8.19	10 years ago
55		* SECURITY UPDATE: MITM via change cipher spec * SECURITY UPDATE: MITM via change cipher spec   - debian/patches/CVE-2014-0224-1.patch: only accept change cipher spec     when it is expected in ssl/s3_clnt.c, ssl/s3_pkt.c, ssl/s3_srvr.c,     ssl/ssl3.h.   - debian/patches/CVE-2014-0224-2.patch: don't accept zero length master     secrets in ssl/s3_pkt.c.   - debian/patches/CVE-2014-0224-3.patch: allow CCS after resumption in     ssl/s3_clnt.c.   - debian/patches/fix_renegotiation.patch: add upstream commit to fix     renegotiation in ssl/s3_clnt.c, ssl/t1_lib.c.   - CVE-2014-0224 * SECURITY UPDATE: denial of service via DTLS recursion flaw   - debian/patches/CVE-2014-0221.patch: handle DTLS hello request without     recursion in ssl/d1_both.c.   - CVE-2014-0221	Marc Deslauriers	0.9.8k-7ubuntu8.18	10 years ago
54		* SECURITY UPDATE: Disable compression to avoid CRIME system... * SECURITY UPDATE: Disable compression to avoid CRIME systemwide   (LP: #1187195)   - CVE-2012-4929   - debian/patches/openssl-1.0.1e-env-zlib.patch: disable default use of     zlib to compress SSL/TLS unless the environment variable     OPENSSL_DEFAULT_ZLIB is set in the environment during library     initialization.   - Introduced to assist with programs not yet updated to provide their own     controls on compression, such as Postfix   - http://pkgs.fedoraproject.org/cgit/openssl.git/plain/openssl-1.0.1e-env-zlib.patch	Seth Arnold	0.9.8k-7ubuntu8.15	11 years ago
53		* SECURITY UPDATE: denial of service via invalid OCSP key * SECURITY UPDATE: denial of service via invalid OCSP key   - debian/patches/CVE-2013-0166.patch: properly handle NULL key in     crypto/asn1/a_verify.c, crypto/ocsp/ocsp_vfy.c.   - CVE-2013-0166 * SECURITY UPDATE: "Lucky Thirteen" timing side-channel TLS attack   - debian/patches/CVE-2013-0169.patch: massive code changes   - CVE-2013-0169	Marc Deslauriers	0.9.8k-7ubuntu8.14	11 years ago
52		* SECURITY UPDATE: denial of service attack in DTLS implemen... * SECURITY UPDATE: denial of service attack in DTLS implementation   - debian/patches/CVE_2012-2333.patch: guard for integer overflow     before skipping explicit IV   - CVE-2012-2333 * SECURITY UPDATE: million message attack (MMA) in CMS and PKCS #7   - debian/patches/CVE-2012-0884.patch: use a random key if RSA     decryption fails to avoid leaking timing information   - CVE-2012-0884 * debian/patches/CVE-2012-0884-extra.patch: detect symmetric crypto   errors in PKCS7_decrypt and initialize tkeylen properly when   encrypting CMS messages.	Steve Beattie	0.9.8k-7ubuntu8.13	12 years ago
51		* SECURITY UPDATE: incomplete fix for CVE-2012-2110 * SECURITY UPDATE: incomplete fix for CVE-2012-2110   - debian/patches/CVE-2012-2131.patch: also verify 'len' in BUF_MEM_grow     and BUF_MEM_grow_clean is non-negative   - CVE-2012-2131 * debian/patches/CVE-2012-2110b.patch: Use correct error code in   BUF_MEM_grow_clean()	Jamie Strandboge	0.9.8k-7ubuntu8.11	12 years ago
50		* SECURITY UPDATE: NULL pointer dereference in S/MIME messag... * SECURITY UPDATE: NULL pointer dereference in S/MIME messages with broken   headers   - debian/patches/CVE-2006-7250+2012-1165.patch: adjust mime_hdr_cmp()     and mime_param_cmp() to not dereference the compared strings if either     is NULL   - CVE-2006-7250   - CVE-2012-1165 * SECURITY UPDATE: fix various overflows   - debian/patches/CVE-2012-2110.patch: adjust crypto/a_d2i_fp.c,     crypto/buffer.c and crypto/mem.c to verify size of lengths   - CVE-2012-2110	Jamie Strandboge	0.9.8k-7ubuntu8.10	12 years ago
49		* SECURITY UPDATE: ECDSA private key timing attack * SECURITY UPDATE: ECDSA private key timing attack   - debian/patches/CVE-2011-1945.patch: compute with fixed scalar     length   - CVE-2011-1945 * SECURITY UPDATE: ECDH ciphersuite denial of service   - debian/patches/CVE-2011-3210.patch: fix memory usage for thread     safety   - CVE-2011-3210 * SECURITY UPDATE: DTLS plaintext recovery attack   - debian/patches/CVE-2011-4108.patch: perform all computations     before discarding messages   - CVE-2011-4108 * SECURITY UPDATE: policy check double free vulnerability   - debian/patches/CVE-2011-4019.patch: only free domain policyin     one location   - CVE-2011-4019 * SECURITY UPDATE: SSL 3.0 block padding exposure   - debian/patches/CVE-2011-4576.patch: clear bytes used for block     padding of SSL 3.0 records.   - CVE-2011-4576 * SECURITY UPDATE: malformed RFC 3779 data denial of service attack   - debian/patches/CVE-2011-4577.patch: prevent malformed RFC3779     data from triggering an assertion failure   - CVE-2011-4577 * SECURITY UPDATE: Server Gated Cryptography (SGC) denial of service   - debian/patches/CVE-2011-4619.patch: Only allow one SGC handshake     restart for SSL/TLS.   - CVE-2011-4619 * SECURITY UPDATE: fix for CVE-2011-4108 denial of service attack   - debian/patches/CVE-2012-0050.patch: improve handling of DTLS MAC   - CVE-2012-0050 * debian/patches/openssl-fix_ECDSA_tests.patch: fix ECDSA tests * debian/libssl0.9.8.postinst: Only issue the reboot notification for   servers by testing that the X server is not running (LP: #244250)	Steve Beattie	0.9.8k-7ubuntu8.8	12 years ago
48		* SECURITY UPDATE: OCSP stapling vulnerability * SECURITY UPDATE: OCSP stapling vulnerability   - debian/patched/openssl-CVE-2011-0014-secadv_20110208.patch:     stricter parsing of ClientHello message in ssl/t1_lib.c   - CVE-2011-0014 * Forward TLS version interop patch   - debian/patches/openssl-forward-interop.patch   - Handle TLS versions 2.0 and later properly and correctly use     the highest version of TLS/SSL supported. Although TLS >=     2.0 is some way off ancient servers have a habit of sticking     around for a while...     [Steve Henson]	Steve Beattie	0.9.8k-7ubuntu8.6	13 years ago
47		* SECURITY UPDATE: ciphersuite downgrade vulnerability * SECURITY UPDATE: ciphersuite downgrade vulnerability   - openssl-CVE-2010-4180-secadv_20101202-0.9.8.patch:     disable workaround for Netscape cipher suite bug in ssl/s3_clnt.c     and ssl/s3_srvr.c   - CVE-2010-4180	Steve Beattie	0.9.8k-7ubuntu8.5	14 years ago
46		* SECURITY UPDATE: TLS race condition leading to a buffer ov... * SECURITY UPDATE: TLS race condition leading to a buffer overflow and   possible code execution. (LP: #676243)   - patches/debian/openssl-CVE-2010-3864-secadv_20101116-0.9.8.patch:     stricter NULL/not-NULL checking in ssl/t1_lib.c   - CVE-2010-3864	Steve Beattie	0.9.8k-7ubuntu8.4	14 years ago
45		* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via   crafted private key with an invalid prime.   - debian/patches/CVE-2010-2939.patch: set bn_ctx to NULL after freeing     it in ssl/s3_clnt.c.   - CVE-2010-2939	Marc Deslauriers	0.9.8k-7ubuntu8.3	14 years ago
44		* SECURITY UPDATE: TLS renegotiation flaw (LP: #616759) * SECURITY UPDATE: TLS renegotiation flaw (LP: #616759)   - debian/patches/CVE-2009-3555-RFC5746.patch: backport rfc5746 support     from openssl 0.9.8m.   - CVE-2009-3555	Marc Deslauriers	0.9.8k-7ubuntu8.1	14 years ago
43		* SECURITY UPDATE: denial of service and possible arbitrary ... * SECURITY UPDATE: denial of service and possible arbitrary code   execution via unchecked return values   - debian/patches/CVE-2009-3245.patch: check bn_wexpand return value in     crypto/bn/{bn_div.c,bn_gf2m.c,bn_mul.c}, crypto/ec/ec2_smpl.c,     engines/e_ubsec.c.   - CVE-2009-3245 * SECURITY UPDATE: denial of service via "record of death"   - debian/patches/CVE-2010-0740.patch: only send back minor version     number in ssl/s3_pkt.c.   - CVE-2010-0740	Marc Deslauriers	0.9.8k-7ubuntu8	14 years ago
42		debian/patches/dtls-compatibility.patch: backport dtls compa... debian/patches/dtls-compatibility.patch: backport dtls compatibility code from 0.9.8m to fix interopability. (LP: #516318)	Marc Deslauriers	0.9.8k-7ubuntu7	14 years ago
41		* Backport Intel AES-NI support from * Backport Intel AES-NI support from   http://rt.openssl.org/Ticket/Display.html?id=2067 (LP: #485518). * Don't change perl #! paths under .pc.	Colin Watson	0.9.8k-7ubuntu6	14 years ago
40		* SECURITY UPDATE: memory leak possible during state clean-u... * SECURITY UPDATE: memory leak possible during state clean-up.   - Add CVE-2009-4355.patch, upstream fixes thanks to Debian.	Kees Cook	0.9.8k-7ubuntu5	14 years ago
39		releasing version 0.9.8k-7ubuntu4 releasing version 0.9.8k-7ubuntu4	Colin Watson	0.9.8k-7ubuntu4	14 years ago
38		Create libssl0.9.8-udeb, for the benefit of wget-udeb (LP: #... Create libssl0.9.8-udeb, for the benefit of wget-udeb (LP: #503339).	Colin Watson		14 years ago

• Older »

Loggerhead is a web-based interface for Breezy
Version: 2.0.1