Ubuntu 990-1: OpenSSL vulnerability
September 21, 2010
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols
Summary
Update Instructions
References
Severity
openssl vulnerability
Package Information
==========================================================Ubuntu Security Notice USN-990-1 September 21, 2010
openssl vulnerability
CVE-2009-3555
==========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS
Ubuntu 8.04 LTS
Ubuntu 9.04
Ubuntu 9.10
Ubuntu 10.04 LTS
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.06 LTS:
libssl0.9.8 0.9.8a-7ubuntu0.12
Ubuntu 8.04 LTS:
libssl0.9.8 0.9.8g-4ubuntu3.10
Ubuntu 9.04:
libssl0.9.8 0.9.8g-15ubuntu3.5
Ubuntu 9.10:
libssl0.9.8 0.9.8g-16ubuntu3.2
Ubuntu 10.04 LTS:
libssl0.9.8 0.9.8k-7ubuntu8.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
Details follow:
Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3
protocols. If an attacker could perform a man in the middle attack at the
start of a TLS connection, the attacker could inject arbitrary content at
the beginning of the user's session. This update adds backported support
for the new RFC5746 renegotiation extension and will use it when both the
client and the server support it.
ATTENTION: After applying this update, a patched server will allow both
patched and unpatched clients to connect, but unpatched clients will not be
able to renegotiate. For more information, please refer to the following:
Updated packages for Ubuntu 6.06 LTS:
Source archives:
Size/MD5: 66934 1132f45aa4e4141369f9751c56f6475d
Size/MD5: 825 837b74a80e20496d3ddf6bec5b2e76db
Size/MD5: 3271435 1d16c727c10185e4d694f87f5e424ee1
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
Size/MD5: 572062 062641f71400ff46cb7c37419d9866ac
Size/MD5: 2173194 058f91405b12a9b69b499dd270edf742
Size/MD5: 1696632 ded9278a299832ae48b7dc83dca964da
Size/MD5: 879810 5bc284a8abbbf7b9d05783723d983a95
Size/MD5: 987600 792651bfe1943f0042b003ee090c89ed
i386 architecture (x86 compatible Intel/AMD):
Size/MD5: 509654 aa5a243c225a450f3ba918ba80cdeb52
Size/MD5: 2030666 af691b177f509c681e882f8d835cd295
Size/MD5: 5195072 33d1049331641108e15305662bd6d8f9
Size/MD5: 2660238 36ba5dbd7468fa791f110ed9de35dc60
Size/MD5: 979138 e7c67f04954dc479d37a211531b4e593
powerpc architecture (Apple Macintosh G3/G4/G5):
Size/MD5: 558000 749e87f5677a93e671f2eea687b52603
Size/MD5: 2188612 5e29e3065e37ccb81719e35d62b803ce
Size/MD5: 1740258 6e60349b83b60335da2b1901bc5e65c2
Size/MD5: 865480 b3218155d568668a8aaafbae1efb2192
Size/MD5: 984028 447fb7619450db4f1a4bdefbfc51ec96
sparc architecture (Sun SPARC/UltraSPARC):
Size/MD5: 531118 92f4fcc90459fdb705697ab8632d8c46
Size/MD5: 2099508 6842e2e6116f193fee425ffa67aed275
Size/MD5: 3977526 38db3229d21fdcde029d1bc45cc2f71e
Size/MD5: 2101136 a2fc4f9152ab9ccd1a5030e88fde115b
Size/MD5: 991944 13e3f505f1e9679a8ff9f352f4e5820d
Updated packages for Ubuntu 8.04 LTS:
Source archives:
Size/MD5: 72363 9f2a204fc6931dd83ed642ded9ba1fd2
Size/MD5: 923 31716352407b8fe8e3bf3240e52744fd
Size/MD5: 3354792 acf70a16359bf3658bdfb74bda1c4419
Architecture independent packages:
Size/MD5: 631312 888b5b98dd1b1aa04076d3fd2b58d377
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
Size/MD5: 604120 15c0595cea58c6e76b336536961efa6b
Size/MD5: 2077306 830a89f8f3e8125af76585c2294c2670
Size/MD5: 1624616 3ea8b4bd0ead15dc58dcaf245eb4a19d
Size/MD5: 940720 369a94dee2e554922329d779b10bce0a
Size/MD5: 392854 dec470c9ec27d8a73fc5e65d5f3e6795
i386 architecture (x86 compatible Intel/AMD):
Size/MD5: 564908 5e7fb7ac754007b8f2a487c607d32aa7
Size/MD5: 1951392 0a48c69f807dfd6191f2747299a4a290
Size/MD5: 5413862 37303e5f019281d9a9cbc27c72d213a7
Size/MD5: 2859580 9f6b431db5ccf5029af0dc2710880d41
Size/MD5: 387812 f260ccdaa904116edbc105463e791405
lpia architecture (Low Power Intel Architecture):
Size/MD5: 535572 2ac50f7c91afc4c53ef9dd4ab8744c48
Size/MD5: 1932042 ad31b9b3f3ee803af079b6c9129fc5a9
Size/MD5: 1532542 9b8dca48eecf5170a07310e76ab264a5
Size/MD5: 852056 dd996132c98f40e1269be1f430ac3914
Size/MD5: 392110 7a5495c068ca5489c31fbaf9458840d1
powerpc architecture (Apple Macintosh G3/G4/G5):
Size/MD5: 610454 88ea31cefdef4b4ce42acaeb29a47ae2
Size/MD5: 2091268 a68f2931f16f19cc40ce868228f2fdf2
Size/MD5: 1658312 04b2ed3f6967c91d8b4583e1e86e2048
Size/MD5: 953376 61edab4f5517facabfcbe8960a52a3c7
Size/MD5: 401052 066d55575409822bb5e92d4e754b875d
sparc architecture (Sun SPARC/UltraSPARC):
Size/MD5: 559822 025f35fc0472d61c075d610cc97a0444
Size/MD5: 1995716 84f4f620d068dfc5ca323f65aa7bfc89
Size/MD5: 3925912 46380b672ac4027bd865cec6ed0dec55
Size/MD5: 2264170 602217260eae7a86cc0c306d7da6bd69
Size/MD5: 400294 5f31e0dfd2a9afe4717551ac99fbf6b2
Updated packages for Ubuntu 9.04:
Source archives:
Size/MD5: 75192 731d506de68d30cc78d85b6843d9abed
Size/MD5: 1438 05d5a0242f41f74c6cbc5e88a06d30d8
Size/MD5: 3354792 acf70a16359bf3658bdfb74bda1c4419
Architecture independent packages:
Size/MD5: 631842 2e70ba7ef9e956d58ad437fc29cd2655
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
Size/MD5: 622012 c0a83c55e74636fdd8f1ee4e7847e3e8
Size/MD5: 2107472 171efc30a5c7eb9f4a324826e5f17130
Size/MD5: 1692502 3c07c55b0d5489abde74a1927a11e66c
Size/MD5: 963682 fceea604b75a3d9ead3fc9b8aafb5bef
Size/MD5: 402400 ddcee92292a5fa5618e29739fcf0c626
i386 architecture (x86 compatible Intel/AMD):
Size/MD5: 578868 8535c9473c6c087a3dd888195555cb73
Size/MD5: 1977046 38c2797664d35c47504f4f4b6743bad7
Size/MD5: 5630304 8d890a0b9ab8cb961c4bf55b9fb2ed40
Size/MD5: 2931268 f62b93e5ca038a55b65956664afc241e
Size/MD5: 397984 c87c6b5ca964602717abacc152f40991
lpia architecture (Low Power Intel Architecture):
Size/MD5: 547460 cbdbef37c3cc1701563671a0c8053ef2
Size/MD5: 1954160 1e68d2e80ab1abbaeb784529b401e58c
Size/MD5: 1587488 9935dbb9a8950dd748373b5875fe01d8
Size/MD5: 868480 b7f1e26209f99b623507b1c9f8f307d1
Size/MD5: 399510 609a37fe02a9f0c4ec70e55e77a8ae5e
powerpc architecture (Apple Macintosh G3/G4/G5):
Size/MD5: 623270 4df7aa0c6d59f55301ae11543b6a13b8
Size/MD5: 2117748 fb86312ebc2aaa802013ca4f94537ef8
Size/MD5: 1712770 babed53d8aaa332093e02915cf199da4
Size/MD5: 969928 22aa23a1fe60940da3236dacac8bdcfc
Size/MD5: 401542 cd15445a0e280e03cccb5b4d7ea3563a
sparc architecture (Sun SPARC/UltraSPARC):
Size/MD5: 567620 167a44fe40bb00030da1fb79f2ba49fb
Size/MD5: 2010832 9438dc1101d24893290dd9d45fdc7051
Size/MD5: 4060390 0e943b18c162a8c59f97d2773978d6ea
Size/MD5: 2295062 e267471069f584c261994132ed85e69c
Size/MD5: 405784 0f71f1893fad004a8226fb7262423bae
Updated packages for Ubuntu 9.10:
Source archives:
Size/MD5: 75342 88bcadb26b7e21211c2af6ab808e6847
Size/MD5: 1438 7c58ef0b0d6792c28d258c6af86332f4
Size/MD5: 3354792 acf70a16359bf3658bdfb74bda1c4419
Architecture independent packages:
Size/MD5: 632002 f12e4adbf883606bc6c78ac90985c888
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
Size/MD5: 628106 22b36a9636ae8d59bdddf91fe3a35686
Size/MD5: 2119362 258f9e13e0b9249ba8ed00eed3232e87
Size/MD5: 1642060 9557745bb65da003cadcb1895c4d28e5
Size/MD5: 967210 2b1dd283f037a7efcffde78c610c3ee2
Size/MD5: 402562 6f476e455529a4f07cd8bde8f91aa0ca
i386 architecture (x86 compatible Intel/AMD):
Size/MD5: 571406 b2e145d150d99385ccd2ee9056f7eb88
Size/MD5: 1974602 1d463b0b360e317cdb9f6164657433bb
Size/MD5: 5630786 725d97591a22a9c5eed9c9dce68d3de3
Size/MD5: 2923058 9ce1a922121cfece5d7a2480a1958fd9
Size/MD5: 397860 1904c0d275f60b051d4093d7a35b45ed
lpia architecture (Low Power Intel Architecture):
Size/MD5: 547626 20e388f8f5bd22395e1b5150aedf4612
Size/MD5: 1957372 037b52434fe5975bd0951ac44557960c
Size/MD5: 1590056 2cc1fd7109008345bfbe73585d61d2a3
Size/MD5: 868410 456231efe4a36e7ab296d1bcf7bde657
Size/MD5: 399902 6add08930a0c7cac4dbd40006e63af4e
powerpc architecture (Apple Macintosh G3/G4/G5):
Size/MD5: 619010 6952fb081230065f0603cd61329870e0
Size/MD5: 2115764 38170921cb58e4abb34a2afcec78d375
Size/MD5: 1697418 2222fabc73077afce0f229309a4f2083
Size/MD5: 950710 b8af91ab0aa1c85778ac8f64846aca7d
Size/MD5: 399396 b29d2aeb7c03f554883ae22f852bb168
sparc architecture (Sun SPARC/UltraSPARC):
Size/MD5: 563676 1264e3d7d7979744e908b37a8a4d67fc
Size/MD5: 2008272 3ad66be90be9e953f01c7b5cccc3c7a3
Size/MD5: 3994218 fc761f70b7e43f4fa3da87a321614849
Size/MD5: 2283476 a207ff0a7f28e5d38fed57380cdff1f5
Size/MD5: 409312 2b2cde43f33600d6e4a10fd03251c3a3
Updated packages for Ubuntu 10.04:
Source archives:
Size/MD5: 109592 47e64eebc704137c992248ac8c43cf50
Size/MD5: 1462 1508d7bded01d8c6bc2953101efa387e
Size/MD5: 3852259 e555c6d58d276aec7fdc53363e338ab3
Architecture independent packages:
Size/MD5: 640176 649bc5cdc6dbf387d3a0b31498325e40
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
Size/MD5: 630288 cd6bf0a13d4c6bd23418af0c0ce3c93b
Size/MD5: 2143716 5e805ded6ddf6af167d2231e2f7eeabd
Size/MD5: 1650398 afa17ae4c4a47cd3ef2d41074366043e
Size/MD5: 136210 e9bcb5e415afb705edadfb3ff23bb465
Size/MD5: 979356 d4b95c455500cedc44c2d830cf9b8985
Size/MD5: 406390 57b7aca77ada10b2229111018afcdf67
i386 architecture (x86 compatible Intel/AMD):
Size/MD5: 582666 f09f2d9fa98c268b29f87fced67d6a3d
Size/MD5: 2006486 565590df8a97324150e7963363735807
Size/MD5: 5805766 3101f0217edfc413409df4ed8876ee92
Size/MD5: 129704 4dddd83cd1cc37301dcda6e521127fd0
Size/MD5: 3014608 ec5a13840af9fce7a84889fbb7d5f77c
Size/MD5: 400402 3d3f28d652f1269c0b7f3d60501af78a
powerpc architecture (Apple Macintosh G3/G4/G5):
Size/MD5: 627054 e6d4e3d2e38b18db7ff0daab89ae34e5
Size/MD5: 2147460 03b8ac2d7b0a6dd3dd9a0dc815e6324f
Size/MD5: 1718552 bdcbfc2c3288b9ed395770ecdef507a8
Size/MD5: 135586 128a9346bb803cf3603a98da2a80d0dd
Size/MD5: 969226 48c27852363e53d9b494fc1437444336
Size/MD5: 402884 102104e6846c0569db92f14ee3a065c4
sparc architecture (Sun SPARC/UltraSPARC):
Size/MD5: 597954 19a0db0a44162792d17d840b0b45585d
Size/MD5: 2065616 08c1d20c36a2590c3bdf1433f1889278
Size/MD5: 4094722 62d3b57a42364a299ff5bee598de7756
Size/MD5: 125902 56dfd5599e85b5b68712b93324326c71
Size/MD5: 2353498 177d1f8107599737a5178bf277514cbc
Size/MD5: 419324 3db73e4dd96c6b03dcf6eec2513e6508
