Ubuntu
openssl package

openssl 1.1.1f-1ubuntu4.1 source package in Ubuntu

Changelog

openssl (1.1.1f-1ubuntu4.1) groovy-security; urgency=medium

  * SECURITY UPDATE: EDIPARTYNAME NULL pointer de-ref
    - debian/patches/CVE-2020-1971-1.patch: use explicit tagging for
      DirectoryString in crypto/x509v3/v3_genn.c.
    - debian/patches/CVE-2020-1971-2.patch: correctly compare EdiPartyName
      in crypto/x509v3/v3_genn.c.
    - debian/patches/CVE-2020-1971-3.patch: check that multi-strings/CHOICE
      types don't use implicit tagging in crypto/asn1/asn1_err.c,
      crypto/asn1/tasn_dec.c, crypto/err/openssl.txt,
      include/openssl/asn1err.h.
    - debian/patches/CVE-2020-1971-4.patch: complain if we are attempting
      to encode with an invalid ASN.1 template in crypto/asn1/asn1_err.c,
      crypto/asn1/tasn_enc.c, crypto/err/openssl.txt,
      include/openssl/asn1err.h.
    - debian/patches/CVE-2020-1971-5.patch: add a test for GENERAL_NAME_cmp
      in test/v3nametest.c.
    - debian/patches/CVE-2020-1971-6.patch: add a test for
      encoding/decoding using an invalid ASN.1 Template in
      test/asn1_decode_test.c, test/asn1_encode_test.c.
    - CVE-2020-1971

 -- Marc Deslauriers <email address hidden>  Wed, 02 Dec 2020 09:43:55 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Groovy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
openssl_1.1.1f.orig.tar.gz 9.3 MiB 186c6bfe6ecfba7a5b48c47f8a1673d0f3b0e5ba2e25602dd23b629975da3f35
openssl_1.1.1f.orig.tar.gz.asc 488 bytes e9c68097b05be8873e41bd33a9269378ca58e515fbaa30a512c315b602d41dda
openssl_1.1.1f-1ubuntu4.1.debian.tar.xz 150.8 KiB 6739055b24727e63395f6e557f431ca9c8a2b7b0c44687fd05a734aa2bbdf646
openssl_1.1.1f-1ubuntu4.1.dsc 2.6 KiB 6d59a519d28533012d82d871b716ac9a19e1a00e31b4ac52b729bbf8a02974d2

View changes file

Binary packages built by this source

libcrypto1.1-udeb: No summary available for libcrypto1.1-udeb in ubuntu groovy.

No description available for libcrypto1.1-udeb in ubuntu groovy.

libssl-dev: No summary available for libssl-dev in ubuntu groovy.

No description available for libssl-dev in ubuntu groovy.

libssl-doc: No summary available for libssl-doc in ubuntu groovy.

No description available for libssl-doc in ubuntu groovy.

libssl1.1: No summary available for libssl1.1 in ubuntu groovy.

No description available for libssl1.1 in ubuntu groovy.

libssl1.1-dbgsym: No summary available for libssl1.1-dbgsym in ubuntu groovy.

No description available for libssl1.1-dbgsym in ubuntu groovy.

libssl1.1-udeb: No summary available for libssl1.1-udeb in ubuntu groovy.

No description available for libssl1.1-udeb in ubuntu groovy.

openssl: No summary available for openssl in ubuntu groovy.

No description available for openssl in ubuntu groovy.

openssl-dbgsym: No summary available for openssl-dbgsym in ubuntu groovy.

No description available for openssl-dbgsym in ubuntu groovy.