full-disclosure - [USN-1003-1] OpenSSL vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <1286466126.3035.121.camel@mdlinux>
Date: Thu, 07 Oct 2010 11:42:06 -0400
From: Marc Deslauriers <marc.deslauriers@...onical.com>
To: ubuntu-security-announce@...ts.ubuntu.com
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: [USN-1003-1] OpenSSL vulnerabilities

===========================================================
Ubuntu Security Notice USN-1003-1           October 07, 2010
openssl vulnerabilities
CVE-2009-3245, CVE-2010-2939
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS
Ubuntu 10.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  libssl0.9.8                     0.9.8a-7ubuntu0.13

Ubuntu 8.04 LTS:
  libssl0.9.8                     0.9.8g-4ubuntu3.11

Ubuntu 9.04:
  libssl0.9.8                     0.9.8g-15ubuntu3.6

Ubuntu 9.10:
  libssl0.9.8                     0.9.8g-16ubuntu3.3

Ubuntu 10.04 LTS:
  libssl0.9.8                     0.9.8k-7ubuntu8.3

Ubuntu 10.10:
  libssl0.9.8                     0.9.8o-1ubuntu4.1

After a standard system update you need to reboot your computer to make all
the necessary changes.

Details follow:

It was discovered that OpenSSL incorrectly handled return codes from the
bn_wexpand function calls. A remote attacker could trigger this flaw in
services that used SSL to cause a denial of service or possibly execute
arbitrary code with application privileges. This issue only affected Ubuntu
6.06 LTS, 8.04 LTS, 9.04 and 9.10. (CVE-2009-3245)

It was discovered that OpenSSL incorrectly handled certain private keys
with an invalid prime. A remote attacker could trigger this flaw in
services that used SSL to cause a denial of service or possibly execute
arbitrary code with application privileges. The default compiler options
for affected releases should reduce the vulnerability to a denial of
service. (CVE-2010-2939)


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.13.diff.gz
      Size/MD5:    68027 2ff284e0b0ec7eb599b79abafe900961
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.13.dsc
      Size/MD5:     1465 7b2460515cb03fa7122e6973a472d802
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a.orig.tar.gz
      Size/MD5:  3271435 1d16c727c10185e4d694f87f5e424ee1

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.13_amd64.udeb
      Size/MD5:   572016 b92dd62de96f08401478f9c5204738d6
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.13_amd64.deb
      Size/MD5:  2181568 4b21583f714cdc82515c54a545b0deb4
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.13_amd64.deb
      Size/MD5:  1696516 130cdef55a1afb02647ea08f7d655903
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.13_amd64.deb
      Size/MD5:   880182 0b9dc85f2dc1bcfa02cd09c7c4b5eed7
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.13_amd64.deb
      Size/MD5:   998354 b485f4bfaac16faf2a553add0c5638de

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.13_i386.udeb
      Size/MD5:   509640 888c37f7cc3ac622cd178f201b8a5ba2
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.13_i386.deb
      Size/MD5:  2037066 6774e94d928da6c8c692b6cfcb198924
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.13_i386.deb
      Size/MD5:  5193182 e433673d391c7071aef4b30a4cb5cf0c
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.13_i386.deb
      Size/MD5:  2662124 45da91cc1a491b75e4d3d13dfc313486
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.13_i386.deb
      Size/MD5:   988924 9bcd7c6ca5340d48bd37ef5b1ec0373b

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.13_powerpc.udeb
      Size/MD5:   558016 03e205e102615c8834c0086df295c3a8
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.13_powerpc.deb
      Size/MD5:  2188938 bacdcdd0132fde57359e17a1a28857f4
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.13_powerpc.deb
      Size/MD5:  1740442 0000699238b2f5c496696b540f4de519
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.13_powerpc.deb
      Size/MD5:   865688 1bc24d78f4e412c9a4d4110c658c4aba
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.13_powerpc.deb
      Size/MD5:   984232 93c7b729cdba22c685d6fb394d864646

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.13_sparc.udeb
      Size/MD5:   531118 ce22a4d92ac7be09734244466511c67a
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8a-7ubuntu0.13_sparc.deb
      Size/MD5:  2099624 a928295bf4753bde7ab4ca2a6379c0e4
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8a-7ubuntu0.13_sparc.deb
      Size/MD5:  3977470 9a2ac5cbd4dde9dabd7f89c0d3fa7029
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8a-7ubuntu0.13_sparc.deb
      Size/MD5:  2101396 5479fc8c44bf497ead106561dce67ff4
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7ubuntu0.13_sparc.deb
      Size/MD5:   992136 92c5f4fdff811ea051aa42992765f040

Updated packages for Ubuntu 8.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11.diff.gz
      Size/MD5:    73561 ae0451a4b1df18e95c03fd85b05d7db3
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11.dsc
      Size/MD5:     1563 e38c8afd9ab71e750a970278388de5ef
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-4ubuntu3.11_all.deb
      Size/MD5:   631524 28df32cb371b4e7099319686057c3aca

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_amd64.udeb
      Size/MD5:   604218 790599d49e9f90a68823ea1531bf472b
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.11_amd64.deb
      Size/MD5:  2077346 c0da98a9f5e7b7fd052b7f90d54204ee
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_amd64.deb
      Size/MD5:  1625072 fb39b2b5c7016ad1e2d0a271558e3bdb
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.11_amd64.deb
      Size/MD5:   941046 60de6153ae24c9274ec1462336fea0ce
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11_amd64.deb
      Size/MD5:   392886 edaf8c571d616ac95c62a28fc592c60d

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_i386.udeb
      Size/MD5:   564976 d60700956f56e1188c63264518daa418
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.11_i386.deb
      Size/MD5:  1951640 5987b817415b31ab8e6740b085208d88
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_i386.deb
      Size/MD5:  5414734 191e5198a60a3fd1ba28449f728c9927
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.11_i386.deb
      Size/MD5:  2859968 723c23edb024fabc7844e10155716c83
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11_i386.deb
      Size/MD5:   387832 67340d2bc297cc3c79070c2ea6526f2a

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_lpia.udeb
      Size/MD5:   535616 d1d8138f01b67ff25a66e2f69ba52bba
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.11_lpia.deb
      Size/MD5:  1931966 c666740c21c8b346e2634cc09e01d8c8
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_lpia.deb
      Size/MD5:  1532770 77dda984f1788868e5fd7d8aa3bf9af0
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.11_lpia.deb
      Size/MD5:   852314 5ff574056df2afc59642a8c2861229c0
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11_lpia.deb
      Size/MD5:   392124 7cf95fab1e450b8e0d415e596411ecff

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_powerpc.udeb
      Size/MD5:   610442 bec91c75491bc73f6e821b60fe748336
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.11_powerpc.deb
      Size/MD5:  2091360 5f4736e85d516b3788d39d778735e2d2
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_powerpc.deb
      Size/MD5:  1658616 cbab1203b903fd0b67b8602e7d9dc11d
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.11_powerpc.deb
      Size/MD5:   953574 7eefded6e582d8c8e9ee9c45bc7fe5d3
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11_powerpc.deb
      Size/MD5:   401090 7f53a7768c1986cd9f04386bc40526e1

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_sparc.udeb
      Size/MD5:   559790 2b93eda963a584ce67c64b0927d3aaf5
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3.11_sparc.deb
      Size/MD5:  1995726 4a66e62cef852676c6a9d2d2c35cec4b
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_sparc.deb
      Size/MD5:  3926416 5954a586d5306afd145853b77141495b
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu3.11_sparc.deb
      Size/MD5:  2264338 5baa2b6c90e1d646dcde3a7891297e7e
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11_sparc.deb
      Size/MD5:   400292 0ee3491b7f4ac4013c0dba826f034e30

Updated packages for Ubuntu 9.04:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6.diff.gz
      Size/MD5:    76313 12c93b7e67d3d8aef92bb8d5cd915da0
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6.dsc
      Size/MD5:     2078 d5ac54d686002282a7b5ebe088f4d426
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-15ubuntu3.6_all.deb
      Size/MD5:   642110 7466f79ec13ed1d56e705a469fbd8c65

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_amd64.udeb
      Size/MD5:   622116 d8d15208c05a545daab7232f4637bc12
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.6_amd64.deb
      Size/MD5:  2113850 4e19d7821be40d44a2fd4d980aa4a55d
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_amd64.deb
      Size/MD5:  1689312 284c5f1831b57d522937f2c2d8f7f95c
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.6_amd64.deb
      Size/MD5:   962010 fc4bc3291c4a66d2b7531bfe79dc6d42
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6_amd64.deb
      Size/MD5:   403890 8ac32d1ede695bec8fac54f0a1da3244

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_i386.udeb
      Size/MD5:   578884 724ddf4f9ba61893c682d2b3e84b3c38
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.6_i386.deb
      Size/MD5:  1982568 f18fbf2d9ee38f56beccb1f338eb6e8e
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_i386.deb
      Size/MD5:  5632902 ab75b956b3cea17f8312ac0076de5be7
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.6_i386.deb
      Size/MD5:  2932186 04e3189ec964bab8eba2c651377c37ab
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6_i386.deb
      Size/MD5:   397794 85aca63b95221bf8a0814cf3b64e5aec

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_lpia.udeb
      Size/MD5:   547348 d94a16432c8924ca78c4b77197977f06
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.6_lpia.deb
      Size/MD5:  1954142 1921e356dc1b166b5adfc761f5c8dd94
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_lpia.deb
      Size/MD5:  1587728 ed59896ca23223fde2e31da3dfce6745
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.6_lpia.deb
      Size/MD5:   868748 da744945601e6ac5779266c7ea9fc944
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6_lpia.deb
      Size/MD5:   399482 e38877ad3ea2d8082b7326df73cced46

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_powerpc.udeb
      Size/MD5:   623306 7e7d5ae2422c7e4103d34feadce2610c
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.6_powerpc.deb
      Size/MD5:  2117772 85618e7c92f3a05ae6c75d5cc3e2b454
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_powerpc.deb
      Size/MD5:  1712884 83d17ead82d42d2fd30ab3c81ec542e5
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.6_powerpc.deb
      Size/MD5:   970060 d016830c3b625779ec26959c2cddbb02
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6_powerpc.deb
      Size/MD5:   401544 48e981a53f387a61ae2b1e5cb72eec0a

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_sparc.udeb
      Size/MD5:   567556 a187708946f2e6d663d60813f9cc7f37
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu3.6_sparc.deb
      Size/MD5:  2010890 bd7eb4a4e52fc764f37102832c47a9d5
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_sparc.deb
      Size/MD5:  4060736 40054e3f357bc07dd020231fac63f1d3
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubuntu3.6_sparc.deb
      Size/MD5:  2295172 44e2bcabf329b1e9c254c1df5b890e6a
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6_sparc.deb
      Size/MD5:   405780 ef87d015ca2da07ce1339df4a9e5255b

Updated packages for Ubuntu 9.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3.diff.gz
      Size/MD5:    76466 d0c364cf8057acb34f1d00072f695507
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3.dsc
      Size/MD5:     2078 80e5d4dc5237d6b27a5a9fa8ee2c7599
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
      Size/MD5:  3354792 acf70a16359bf3658bdfb74bda1c4419

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8g-16ubuntu3.3_all.deb
      Size/MD5:   632242 ff64041876ffd28b984fd2fc3ff06ba2

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_amd64.udeb
      Size/MD5:   628186 2ffb815a49742bd6e8ff09d6e4769886
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.3_amd64.deb
      Size/MD5:  2126092 141595688b6e8803a5cf9d47498bea16
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_amd64.deb
      Size/MD5:  1639280 e185b057d73d519d0c221e16fe62021c
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.3_amd64.deb
      Size/MD5:   966546 2e4502e3035570f845f9299a810ca5f5
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3_amd64.deb
      Size/MD5:   403898 c4dcb479c14345fe001d7048f61c2c1a

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_i386.udeb
      Size/MD5:   571492 2087f12aca01430f88a0661b359c14ea
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.3_i386.deb
      Size/MD5:  1974780 8c4fa3efd98a3f0878444df33017e9ed
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_i386.deb
      Size/MD5:  5631492 3bc84132150bce2e1779630f4d1c9461
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.3_i386.deb
      Size/MD5:  2923206 969c0ef378c3297235973f074a6b7c6d
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3_i386.deb
      Size/MD5:   397862 ec75c20ceccb9dc03389b16749cb5a94

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_lpia.udeb
      Size/MD5:   547512 b2ad4d960ef135ddfe3ec07942c8a3ee
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.3_lpia.deb
      Size/MD5:  1957270 09180416cc9724fc2e621b6664155ea3
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_lpia.deb
      Size/MD5:  1590282 34c356f7b74b90ef66e86f74c99663b4
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.3_lpia.deb
      Size/MD5:   868498 98e6068caf5bdc2816e86411861b028f
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3_lpia.deb
      Size/MD5:   399898 e5ee1c54b644cd2dc98fbebef54c5a46

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_powerpc.udeb
      Size/MD5:   619102 da1caa61a869d4ea782af7d40eeee513
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.3_powerpc.deb
      Size/MD5:  2115856 3bf89ccbddf966acbab1b1805ca6ce42
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_powerpc.deb
      Size/MD5:  1697522 c976244b9efb316dd159f2393e5270c9
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.3_powerpc.deb
      Size/MD5:   950990 33286766d8b7afc6a69ec6e1155aff38
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3_powerpc.deb
      Size/MD5:   399376 d0655b0d82b06cf1c764c997b43f59ab

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_sparc.udeb
      Size/MD5:   563628 f10f720c3e955c7d0d8665f2f5d20f78
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu3.3_sparc.deb
      Size/MD5:  2008192 781008350ad19bde57290bba1cfb572f
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_sparc.deb
      Size/MD5:  3995246 6dbff38a537bc4972cc0aab73b106c03
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubuntu3.3_sparc.deb
      Size/MD5:  2283522 2a2bc6275397e6a3eb53d1d3344e9f70
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3_sparc.deb
      Size/MD5:   409300 f9fd71209aea876754e31c82b67590cf

Updated packages for Ubuntu 10.04 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8k-7ubuntu8.3.diff.gz
      Size/MD5:   110269 c4f3879fd7476f5f7248be9bbbaa3728
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8k-7ubuntu8.3.dsc
      Size/MD5:     2102 1ca4fe91716b44545e7d95a6866ae831
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8k.orig.tar.gz
      Size/MD5:  3852259 e555c6d58d276aec7fdc53363e338ab3

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8k-7ubuntu8.3_all.deb
      Size/MD5:   649096 a5004d9b245fbb1c025eb4d9d9f30322

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8k-7ubuntu8.3_amd64.udeb
      Size/MD5:   630238 5c5387482874609667a05a77e516a493
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8k-7ubuntu8.3_amd64.deb
      Size/MD5:  2150202 5f384c19f55d4136bf567348a7efc0d3
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8k-7ubuntu8.3_amd64.deb
      Size/MD5:  1647010 85e010c894d790e9ee51d511a52c6b71
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8k-7ubuntu8.3_amd64.udeb
      Size/MD5:   136226 0bb9f5887521bd8157297946f648c77a
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8k-7ubuntu8.3_amd64.deb
      Size/MD5:   978920 7f4e4fbfc7d8fc12625c03744c2a4678
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8k-7ubuntu8.3_amd64.deb
      Size/MD5:   407428 886d17b9404218d400a57dd2c49907dd

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8k-7ubuntu8.3_i386.udeb
      Size/MD5:   582640 1d4dc6e120aa9e6b978760c6455202da
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8k-7ubuntu8.3_i386.deb
      Size/MD5:  2011256 469a601f361724b61f4e367dd89bf13d
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8k-7ubuntu8.3_i386.deb
      Size/MD5:  5808214 7bee670d14118543b0e0d670d16c9d3f
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8k-7ubuntu8.3_i386.udeb
      Size/MD5:   129716 64cd25005bd1efad672bcd7c639a01e5
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8k-7ubuntu8.3_i386.deb
      Size/MD5:  3012850 20132f83e0c1f3b6e508cdf746f6f579
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8k-7ubuntu8.3_i386.deb
      Size/MD5:   400354 08fd9e2b3492fd7368262e59e39f3115

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8k-7ubuntu8.3_powerpc.udeb
      Size/MD5:   627050 2c09ae4e58197a737c50a00b972c007c
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8k-7ubuntu8.3_powerpc.deb
      Size/MD5:  2147488 14fa6353b14fe8d8d337c49e40aacb96
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8k-7ubuntu8.3_powerpc.deb
      Size/MD5:  1718692 0f37da4102724b6c5f88685a1694f9a7
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8k-7ubuntu8.3_powerpc.udeb
      Size/MD5:   135574 86b95ddb69db004567eed7ecdfe24659
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8k-7ubuntu8.3_powerpc.deb
      Size/MD5:   969376 0942b457dfdf3edbd0929e6ec26fcf37
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8k-7ubuntu8.3_powerpc.deb
      Size/MD5:   402864 2916045e14205634ba73dafc31071ea2

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8k-7ubuntu8.3_sparc.udeb
      Size/MD5:   597974 1e0380dcec74d620f0cac962ef75422f
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8k-7ubuntu8.3_sparc.deb
      Size/MD5:  2065618 a9041d131446368553dbffa19e07d802
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8k-7ubuntu8.3_sparc.deb
      Size/MD5:  4094674 5606ca7d1788e764b67e18bea3fc0ce7
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8k-7ubuntu8.3_sparc.udeb
      Size/MD5:   125904 4a4179b79718ad5852a50c23981c57c0
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8k-7ubuntu8.3_sparc.deb
      Size/MD5:  2353820 815b598929b82ac55fb686d9c97aea6d
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8k-7ubuntu8.3_sparc.deb
      Size/MD5:   419342 9cc2ba9f9e46fdf2f68db990e64a9e08

Updated packages for Ubuntu 10.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8o-1ubuntu4.1.debian.tar.gz
      Size/MD5:    89963 1e7fb9727df92d5a4d5b2b69ef7d6fdb
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8o-1ubuntu4.1.dsc
      Size/MD5:     2118 b554cbdf744531089791d6a2f442e4a7
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8o.orig.tar.gz
      Size/MD5:  3772542 63ddc5116488985e820075e65fbe6aa4

  Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9.8o-1ubuntu4.1_all.deb
      Size/MD5:   645588 925ddf518bf43ffe38fbe1e0f90fcf36

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8o-1ubuntu4.1_amd64.udeb
      Size/MD5:   620320 e3c51a235539c01f9fe58240c2fef662
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8o-1ubuntu4.1_amd64.deb
      Size/MD5:  2160008 ac4aece8ae231b20e1b76edb508ed974
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8o-1ubuntu4.1_amd64.deb
      Size/MD5:  1550350 32732d2c2cf481c719bcbb7388793955
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8o-1ubuntu4.1_amd64.udeb
      Size/MD5:   137456 145f2a50b36afa3477fb4b3000df9eff
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8o-1ubuntu4.1_amd64.deb
      Size/MD5:   923228 36c1256d299126cf20ef542517bb3357
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8o-1ubuntu4.1_amd64.deb
      Size/MD5:   406982 ebd219a25c34587a69d5de4716d9f520

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8o-1ubuntu4.1_i386.udeb
      Size/MD5:   570732 809138433782d5c011be09568cb92350
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8o-1ubuntu4.1_i386.deb
      Size/MD5:  2012466 a28a059a98cd6c82e5c7a7a8fba783a0
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8o-1ubuntu4.1_i386.deb
      Size/MD5:  1553396 70456997589e94bcf55f8948096dd907
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8o-1ubuntu4.1_i386.udeb
      Size/MD5:   130480 44c8aa14de04b34ea9a6170fc1ac701a
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9.8o-1ubuntu4.1_i386.deb
      Size/MD5:   866162 279b6670c0d80fa63fe826df1a681c5a
    http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8o-1ubuntu4.1_i386.deb
      Size/MD5:   400078 7d14f02ab14f9f791bb95eecf9296262

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8o-1ubuntu4.1_powerpc.udeb
      Size/MD5:   616140 7d22ae769cfd5d6970ca8d37b1e8918b
    http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8o-1ubuntu4.1_powerpc.deb
      Size/MD5:  2154640 03e5ef125e70e49d1382a33455baa8d2
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8o-1ubuntu4.1_powerpc.deb
      Size/MD5:  1618548 ad04c30afc56cc1407c32279f4dfc6f0
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8o-1ubuntu4.1_powerpc.udeb
      Size/MD5:   136116 7bdb91faebd30223ffd59aa75488701c
    http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8o-1ubuntu4.1_powerpc.deb
      Size/MD5:   917440 107219a773ede27ee35b39838dfc8b92
    http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8o-1ubuntu4.1_powerpc.deb
      Size/MD5:   402014 07d462468866a9e125c4541695e1e7dd




Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/