openssl 3.0.13-0ubuntu3.2 source package in Ubuntu
Changelog
openssl (3.0.13-0ubuntu3.2) noble-security; urgency=medium * SECURITY UPDATE: unbounded mem growth when processing TLSv1.3 sessions - debian/patches/CVE-2024-2511.patch: fix unconstrained session cache growth in TLSv1.3 in ssl/ssl_lib.c, ssl/ssl_sess.c, ssl/statem/statem_srvr.c. - CVE-2024-2511 * SECURITY UPDATE: checking excessively long DSA keys or params very slow - debian/patches/CVE-2024-4603.patch: check DSA parameters for excessive sizes before validating in crypto/dsa/dsa_check.c, test/recipes/15-test_dsaparam_data/invalid/p10240_q256_too_big.pem. - CVE-2024-4603 * SECURITY UPDATE: use after free with SSL_free_buffers - debian/patches/CVE-2024-4741.patch: only free the read buffers if we're not using them in ssl/record/rec_layer_s3.c, ssl/record/record.h, ssl/ssl_lib.c. - CVE-2024-4741 * SECURITY UPDATE: crash or memory disclosure via SSL_select_next_proto - debian/patches/CVE-2024-5535.patch: validate provided client list in ssl/ssl_lib.c. - CVE-2024-5535 -- Marc Deslauriers <email address hidden> Tue, 30 Jul 2024 11:03:13 -0400
Upload details
- Uploaded by:
- Marc Deslauriers
- Uploaded to:
- Noble
- Original maintainer:
- Ubuntu Developers
- Architectures:
- any all
- Section:
- utils
- Urgency:
- Medium Urgency
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
openssl_3.0.13.orig.tar.gz | 14.6 MiB | 88525753f79d3bec27d2fa7c66aa0b92b3aa9498dafd93d7cfa4b3780cdae313 |
openssl_3.0.13-0ubuntu3.2.debian.tar.xz | 158.0 KiB | 3ea867423f3b9139577f8a240c747518dde8ac7312378e50aa373e35fc43ad63 |
openssl_3.0.13-0ubuntu3.2.dsc | 2.5 KiB | e147429650623e5548eb76f6c8b17bfbff5ac78eb6020eba2952e07bf4e8f759 |
Available diffs
Binary packages built by this source
- libssl-dev: Secure Sockets Layer toolkit - development files
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It contains development libraries, header files, and manpages for libssl
and libcrypto.
- libssl-doc: Secure Sockets Layer toolkit - development documentation
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It contains manpages and demo files for libssl and libcrypto.
- libssl3t64: Secure Sockets Layer toolkit - shared libraries
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It provides the libssl and libcrypto shared libraries.
- libssl3t64-dbgsym: debug symbols for libssl3t64
- openssl: Secure Sockets Layer toolkit - cryptographic utility
This package is part of the OpenSSL project's implementation of the SSL
and TLS cryptographic protocols for secure communication over the
Internet.
.
It contains the general-purpose command line binary /usr/bin/openssl,
useful for cryptographic operations such as:
* creating RSA, DH, and DSA key parameters;
* creating X.509 certificates, CSRs, and CRLs;
* calculating message digests;
* encrypting and decrypting with ciphers;
* testing SSL/TLS clients and servers;
* handling S/MIME signed or encrypted mail.
- openssl-dbgsym: debug symbols for openssl