Secunia Logo
Netsikker nu! 2008
 
Ubuntu update for openssl
Secunia Advisory: SA30868
Release Date: 2008-06-27
Popularity: 2,067 views

Critical:
Moderately critical
Impact: DoS
Where: From remote
Solution Status: Vendor Patch

OS:Ubuntu Linux 8.04

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2008-0891
CVE-2008-1672


Description:
Ubuntu has issued an update for openssl. This fixes some vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service).

For more information:
SA30405

Solution:
Apply updated packages.

-- Ubuntu 8.04 LTS --

Source archives:

http://security.ubuntu.com/ubuntu/poo...ssl/openssl_0.9.8g-4ubuntu3.3.diff.gz
Size/MD5: 52995 b1cea7b7db0cb4522acd795c3928f6d6
http://security.ubuntu.com/ubuntu/poo...openssl/openssl_0.9.8g-4ubuntu3.3.dsc
Size/MD5: 912 ac4c66a0442648d7b1a1afd326609c54
http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g.orig.tar.gz
Size/MD5: 3354792 acf70a16359bf3658bdfb74bda1c4419

Architecture independent packages:

http://security.ubuntu.com/ubuntu/poo...openssl-doc_0.9.8g-4ubuntu3.3_all.deb
Size/MD5: 628742 36c2d25fdf6427526076a8d6b5da2e96

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/poo...9.8-udeb_0.9.8g-4ubuntu3.3_amd64.udeb
Size/MD5: 603880 84269c06376fba49d325c730777068c6
http://security.ubuntu.com/ubuntu/poo...ibssl-dev_0.9.8g-4ubuntu3.3_amd64.deb
Size/MD5: 2064718 33f436e01452fc2731b30700d3e0cb25
http://security.ubuntu.com/ubuntu/poo...0.9.8-dbg_0.9.8g-4ubuntu3.3_amd64.deb
Size/MD5: 1604058 c07455422c05690cab6b54026279f9e3
http://security.ubuntu.com/ubuntu/poo...bssl0.9.8_0.9.8g-4ubuntu3.3_amd64.deb
Size/MD5: 931362 43218bfe72915fb66bdf8c081f847fcb
http://security.ubuntu.com/ubuntu/poo...l/openssl_0.9.8g-4ubuntu3.3_amd64.deb
Size/MD5: 390580 1c33397eeeaf9c43dbadbc952effca25

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/poo....9.8-udeb_0.9.8g-4ubuntu3.3_i386.udeb
Size/MD5: 564676 2afdf22196bfa295f2847798c28ebc56
http://security.ubuntu.com/ubuntu/poo...libssl-dev_0.9.8g-4ubuntu3.3_i386.deb
Size/MD5: 1941746 9e1601920ffb4579750c62e3bafcc788
http://security.ubuntu.com/ubuntu/poo...l0.9.8-dbg_0.9.8g-4ubuntu3.3_i386.deb
Size/MD5: 5341160 b92bf74a2f51c864239b7266dc902fd6
http://security.ubuntu.com/ubuntu/poo...ibssl0.9.8_0.9.8g-4ubuntu3.3_i386.deb
Size/MD5: 2828380 bdfaf989e6b72ba194845ac03d5c27b4
http://security.ubuntu.com/ubuntu/poo...sl/openssl_0.9.8g-4ubuntu3.3_i386.deb
Size/MD5: 385396 a91bd87423e0063ab2bb18ecf44ae995

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/o/o....9.8-udeb_0.9.8g-4ubuntu3.3_lpia.udeb
Size/MD5: 535446 5841b6cc1e0fae3393afabc957037822
http://ports.ubuntu.com/pool/main/o/o...libssl-dev_0.9.8g-4ubuntu3.3_lpia.deb
Size/MD5: 1922442 32dcdad159f05decabf11549ff204f37
http://ports.ubuntu.com/pool/main/o/o...l0.9.8-dbg_0.9.8g-4ubuntu3.3_lpia.deb
Size/MD5: 1512426 4fb1d4039493d3f2d08dcfb27de4dc31
http://ports.ubuntu.com/pool/main/o/o...ibssl0.9.8_0.9.8g-4ubuntu3.3_lpia.deb
Size/MD5: 842914 7924b29683950fdde4467c65e0e1d337
http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.3_lpia.deb
Size/MD5: 390020 7a31e11f913264848caf9970c8b55859

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/o/o...8-udeb_0.9.8g-4ubuntu3.3_powerpc.udeb
Size/MD5: 610278 7d857eca164bdfff475280cf334fd968
http://ports.ubuntu.com/pool/main/o/o...ssl-dev_0.9.8g-4ubuntu3.3_powerpc.deb
Size/MD5: 2077858 49b892b43342c57136963936314cd850
http://ports.ubuntu.com/pool/main/o/o...9.8-dbg_0.9.8g-4ubuntu3.3_powerpc.deb
Size/MD5: 1639382 34a79f78df92067f4be10eacbb72463d
http://ports.ubuntu.com/pool/main/o/o...sl0.9.8_0.9.8g-4ubuntu3.3_powerpc.deb
Size/MD5: 944698 1c4cae202d0012cd143bd81239b36c71
http://ports.ubuntu.com/pool/main/o/o...openssl_0.9.8g-4ubuntu3.3_powerpc.deb
Size/MD5: 399184 b4a0cd49967333a6e617f7ddf6be1427

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/o/o...9.8-udeb_0.9.8g-4ubuntu3.3_sparc.udeb
Size/MD5: 559658 d065856a7822c4d5f5382b1ad1a652fe
http://ports.ubuntu.com/pool/main/o/o...ibssl-dev_0.9.8g-4ubuntu3.3_sparc.deb
Size/MD5: 1984612 c82132370120b65e6e278df0755eb1a6
http://ports.ubuntu.com/pool/main/o/o...0.9.8-dbg_0.9.8g-4ubuntu3.3_sparc.deb
Size/MD5: 3873772 dfcf08c38728d64842da3f378639b191
http://ports.ubuntu.com/pool/main/o/o...bssl0.9.8_0.9.8g-4ubuntu3.3_sparc.deb
Size/MD5: 2241472 37861360b67b2ce0b038e49ea4a6ae67
http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.3_sparc.deb
Size/MD5: 397828 ffe5e48d1e71e27bd8adf064f4adcc64

Original Advisory:
https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-June/000722.html

Other References:
SA30405:
http://secunia.com/advisories/30405/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

7th Oct, 2008
New advisories: 19
New vulnerabilities: 68
Updated advisories: 62

Moderately // 352 views
Debian update for php5
Moderately // 281 views
Atarone CMS Multiple Vulnerabilities
Moderately // 308 views
Debian update for squid
Less // 308 views
SUSE update for mercurial
Moderately // 357 views
SUSE update for openssh
Less // 288 views
Fedora update for mediawiki

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Zeroboard Multiple Vulnerabilities // 44 views
2. phpBB BBcode "url" Script Insertion Vulnerability // 41 views
3. phpBB "url" bbcode Script Insertion Vulnerability // 38 views
4. Zeroboard Two Vulnerabilities // 35 views
5. Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability // 35 views
6. HP-UX NFS/ONCplus Denial of Service Vulnerability // 29 views
7. D-Bus "_dbus_validate_signature_with_reason()" Denial of Service // 24 views
8. SUSE update for openssh // 20 views
9. CMME Information Disclosure Security Issues // 19 views
10. Debian update for php5 // 19 views