Accepted openssl 0.9.8c-3 (source)

Ubuntu Installer archive at ubuntu.com
Tue Nov 14 23:51:54 GMT 2006


Accepted:
 OK: openssl_0.9.8c-3.diff.gz
 OK: openssl_0.9.8c.orig.tar.gz
 OK: openssl_0.9.8c-3.dsc
     -> Component: main Section: utils

Origin: Debian/unstable
Format: 1.7
Date: Tue,  14 Nov 2006 23:10:40 +0000
Source: openssl
Binary: libssl-dev, openssl, libssl0.9.8-dbg, libssl0.9.8, libcrypto0.9.8-udeb
Architecture: source
Version: 0.9.8c-3
Distribution: feisty
Urgency: high
Maintainer: Debian OpenSSL Team <pkg-openssl-devel at lists.alioth.debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 openssl    - Secure Socket Layer (SSL) binary and related cryptographic tools
Closes: 215618 374364 378689 386365 386400 386513
Changes: 
 openssl (0.9.8c-3) unstable; urgency=low
 .
   * Fix patch for CVE-2006-2940, it left ctx unintiliased.
 .
 openssl (0.9.8c-2) unstable; urgency=high
 .
   * Fix security vulnerabilities (CVE-2006-2937, CVE-2006-2940,
     CVE-2006-3738, CVE-2006-4343).  Urgency set to high.
 .
 openssl (0.9.8c-1) unstable; urgency=low
 .
   * New upstream release
     - block padding bug with compression now fixed upstream, using
       their patch.
     - Includes the RSA Signature Forgery (CVE-2006-4339) patch.
     - New functions AES_bi_ige_encrypt and AES_ige_encrypt:
       bumping shlibs to require 0.9.8c-1.
   * Change the postinst script to check that ntp is installed instead
     of ntp-refclock and ntp-simple.  The binary is now in the ntp
     package.
   * Move the modified rand/md_rand.c file to the right place,
     really fixing #363516.
   * Add partimage-server conserver-server and tor to the list of service
     to check for restart.  Add workaround for openssh-server so it finds
     the init script.  (Closes: #386365, #386400, #386513)
   * Add manpage for c_rehash.
     Thanks to James Westby <jw+debian at jameswestby.net> (Closes: #215618)
   * Add Lithuanian debconf translation.
     Thanks to Gintautas Miliauskas <gintas at akl.lt>  (Closes: #374364)
   * Add m32r support.
     Thanks to Kazuhiro Inaoka <inaoka.kazuhiro at renesas.com>
     (Closes: #378689)
 .
 openssl (0.9.8b-3) unstable; urgency=high
 .
   * Fix RSA Signature Forgery (CVE-2006-4339) using patch provided
     by upstream.
   * Restart services using a smaller version that 0.9.8b-3, so
     they get the fixed version.
   * Change the postinst to check for postfix instead of postfix-tls.
Files: 
 b07e1d623745f24e8b4b330ef69ff77f 41920 utils optional openssl_0.9.8c-3.diff.gz
 78454bec556bcb4c45129428a766c886 3313857 utils optional openssl_0.9.8c.orig.tar.gz
 e5de2efd966e4ca8099a5b52c637d81a 797 utils optional openssl_0.9.8c-3.dsc





More information about the feisty-changes mailing list