openssl: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470

Debian Bug report logs - #750665
openssl: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jeff Ballard <ballard@engr.wisc.edu>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: openssl: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470

Date: Thu, 05 Jun 2014 08:54:18 -0500

Package: openssl
Version: 1.0.1e-2+deb7u7
Severity: grave
Tags: security upstream
Justification: user security hole

Plese see

https://www.openssl.org/news/secadv_20140605.txt

for more information.

-Jeff



-- System Information:
Debian Release: 7.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.13-0.bpo.1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openssl depends on:
ii  libc6        2.18-4
ii  libssl1.0.0  1.0.1e-2+deb7u7
ii  zlib1g       1:1.2.8.dfsg-1

openssl recommends no packages.

Versions of packages openssl suggests:
ii  ca-certificates  20130119

-- no debconf information

Message #10 received at 750665@bugs.debian.org (full text, mbox, reply):

From: Cyril Brulebois <kibi@debian.org>

To: Jeff Ballard <ballard@engr.wisc.edu>, 750665@bugs.debian.org

Subject: Re: Bug#750665: openssl: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298, CVE-2014-3470

Date: Thu, 5 Jun 2014 16:10:50 +0200

[Message part 1 (text/plain, inline)]

Jeff Ballard <ballard@engr.wisc.edu> (2014-06-05):
> Package: openssl
> Version: 1.0.1e-2+deb7u7
> Severity: grave
> Tags: security upstream
> Justification: user security hole
> 
> Plese see
> 
> https://www.openssl.org/news/secadv_20140605.txt
> 
> for more information.

Somebody wants to subscribe to debian-security-announce:
  https://lists.debian.org/debian-security-announce/2014/msg00129.html

Mraw,
KiBi.

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.