~ubuntu-branches/ubuntu/lucid/openssl/lucid-security

  • Committer: Package Import Robot
  • Author(s): Seth Arnold
  • Date: 2013-06-03 20:37:34 UTC
  • Revision ID: package-import@ubuntu.com-20130603203734-3iuzxphjomgrg1gi
Tags: 0.9.8k-7ubuntu8.15
* SECURITY UPDATE: Disable compression to avoid CRIME systemwide
  (LP: #1187195)
  - CVE-2012-4929
  - debian/patches/openssl-1.0.1e-env-zlib.patch: disable default use of
    zlib to compress SSL/TLS unless the environment variable
    OPENSSL_DEFAULT_ZLIB is set in the environment during library
    initialization.
  - Introduced to assist with programs not yet updated to provide their own
    controls on compression, such as Postfix
  - http://pkgs.fedoraproject.org/cgit/openssl.git/plain/openssl-1.0.1e-env-zlib.patch
Filename Latest Rev Last Changed Committer Comment Size
..
alpha.c 1 20 years ago Bazaar Package Importer Import upstream version 0.9.7d 3.7 KB Diff Download File
dggccbug.c 1 20 years ago Bazaar Package Importer Import upstream version 0.9.7d 926 bytes Diff Download File
MS 1 20 years ago Bazaar Package Importer Import upstream version 0.9.7d 166 bytes Diff Download File
sgiccbug.c 1 20 years ago Bazaar Package Importer Import upstream version 0.9.7d 1.2 KB Diff Download File
sslref.dif 1 20 years ago Bazaar Package Importer Import upstream version 0.9.7d 1 KB Diff Download File
SSLv3 1 20 years ago Bazaar Package Importer Import upstream version 0.9.7d 2.3 KB Diff Download File
stream.c 1 20 years ago Bazaar Package Importer Import upstream version 0.9.7d 4.4 KB Diff Download File
ultrixcc.c 1 20 years ago Bazaar Package Importer Import upstream version 0.9.7d 584 bytes Diff Download File