OpenSSL 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption Vulnerability

Bugtraq ID:	42306
Class:	Design Error
CVE:	CVE-2010-2939
Remote:	Yes
Local:	No
Published:	Aug 07 2010 12:00AM
Updated:	Apr 20 2011 04:54PM
Credit:	Georgi Guninski
Vulnerable:	VMWare ESXi Server 4.1 VMWare ESXi Server 4.0 VMWare ESXi Server 3.5 VMWare ESX Server 3.0.3 VMWare ESX Server 4.1 VMWare ESX Server 4.0 VMWare ESX Server 3.5 Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise 11 SP1 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE openSUSE 11.3 Slackware Linux x86_64 -current Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 Pardus Linux 2009 0 OpenSSL Project OpenSSL 1.0.0a NetBSD NetBSD 5.0.2 NetBSD NetBSD 5.0.1 NetBSD NetBSD 4.0.2 NetBSD NetBSD 4.0.1 NetBSD NetBSD 5.0 NetBSD NetBSD 4.0 MandrakeSoft Linux Mandrake 2010.1 x86_64 MandrakeSoft Linux Mandrake 2010.1 HP System Management Homepage 6.0 .96 HP System Management Homepage 6.2.0-12 HP System Management Homepage 6.2 HP System Management Homepage 6.2 HP System Management Homepage 6.1.0.103 HP System Management Homepage 6.1.0.102 HP System Management Homepage 6.1.0-103 HP System Management Homepage 6.1 HP System Management Homepage 6.0.0.95 HP System Management Homepage 6.0.0-95 HP System Management Homepage 6.0 FreeBSD FreeBSD 7.0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	VMWare ESXi Server 4.1 ESXi410-20110120 VMWare ESX Server 4.1 ESX410-201101201 HP System Management Homepage 6.3

OpenSSL 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption Vulnerability

OpenSSL is prone to a remote memory-corruption vulnerability.

Successfully exploiting this issue may allow an attacker to execute arbitrary code in the context of the application using the vulnerable library. Failed exploit attempts will result in a denial-of-service condition.

The issue affects OpenSSL 1.0.0a; other versions may also be affected.

OpenSSL 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption Vulnerability

The following proof-of-concept is available.

• /data/vulnerabilities/exploits/42306.zip

OpenSSL 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu openssl-doc_0.9.8g-16ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-16ubuntu3.3_all.deb


• Ubuntu libssl0.9.8_0.9.8g-16ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubunt u3.3_sparc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16u buntu3.3_sparc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_sparc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -16ubuntu3.3_sparc.udeb


• Ubuntu libssl-dev_0.9.8g-16ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu 3.3_sparc.deb


• Ubuntu openssl_0.9.8g-16ubuntu3.3_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3 _sparc.deb

Slackware Linux 12.0

• Slackware openssl-0.9.8p-i486-1_slack12.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ openssl-0.9.8p-i486-1_slack12.0.tgz


• Slackware openssl-solibs-0.9.8p-i486-1_slack12.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ openssl-solibs-0.9.8p-i486-1_slack12.0.tgz

Debian Linux 5.0 ia-64

• Debian openssl_0.9.8g-15+lenny8_ia64.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_ia64.deb


• Debian libssl-dev_0.9.8g-15+lenny8_ia64.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_ia64.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_ia64.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_ia64.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_ia64.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_ia64.udeb


• Debian libssl0.9.8_0.9.8g-15+lenny8_ia64.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_ia64.deb

Slackware Linux -current

• Slackware openssl-solibs-0.9.8p-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/a/op enssl-solibs-0.9.8p-i486-1.txz


• Slackware openssl-0.9.8p-i486-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/op enssl-0.9.8p-i486-1.txz

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu openssl-doc_0.9.8g-4ubuntu3.11_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-4ubuntu3.11_all.deb


• Ubuntu openssl_0.9.8g-4ubuntu3.11_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11 _powerpc.deb


• Ubuntu libssl0.9.8_0.9.8g-4ubuntu3.11_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu 3.11_powerpc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ub untu3.11_powerpc.deb


• Ubuntu libssl-dev_0.9.8g-4ubuntu3.11_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3 .11_powerpc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_powerpc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -4ubuntu3.11_powerpc.udeb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu libssl-dev_0.9.8g-4ubuntu3.11_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3 .11_sparc.deb


• Ubuntu openssl_0.9.8g-4ubuntu3.11_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11 _sparc.deb


• Ubuntu libssl0.9.8_0.9.8g-4ubuntu3.11_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu 3.11_sparc.deb


• Ubuntu openssl-doc_0.9.8g-4ubuntu3.11_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-4ubuntu3.11_all.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ub untu3.11_sparc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_sparc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -4ubuntu3.11_sparc.udeb

Slackware Linux 12.2

• Slackware openssl-0.9.8p-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ openssl-0.9.8p-i486-1_slack12.2.tgz


• Slackware openssl-solibs-0.9.8p-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ openssl-solibs-0.9.8p-i486-1_slack12.2.tgz

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu libssl-dev_0.9.8g-16ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu 3.3_powerpc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16u buntu3.3_powerpc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_powerpc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -16ubuntu3.3_powerpc.udeb


• Ubuntu libssl0.9.8_0.9.8g-16ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubunt u3.3_powerpc.deb


• Ubuntu openssl-doc_0.9.8g-16ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-16ubuntu3.3_all.deb


• Ubuntu openssl_0.9.8g-16ubuntu3.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3 _powerpc.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu openssl_0.9.8a-7ubuntu0.13_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7 ubuntu0.13_sparc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.13_sparc.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8a-7ubuntu0.13_sparc.udeb


• Ubuntu libssl0.9.8_0.9.8a-7ubuntu0.13_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8a-7ubuntu0.13_sparc.deb


• Ubuntu libssl-dev_0.9.8a-7ubuntu0.13_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 a-7ubuntu0.13_sparc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8a-7ubuntu0.13_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8a-7ubuntu0.13_sparc.deb

Debian Linux 5.0 alpha

• Debian openssl_0.9.8g-15+lenny8_alpha.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_alpha.deb


• Debian libssl0.9.8_0.9.8g-15+lenny8_alpha.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_alpha.deb


• Debian libssl-dev_0.9.8g-15+lenny8_alpha.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_alpha.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_alpha.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_alpha.udeb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_alpha.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_alpha.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu libssl-dev_0.9.8g-4ubuntu3.11_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-4ubuntu3.11_amd64.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-4ubuntu3.11_amd64.udeb


• Ubuntu libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-4ubuntu3.11_amd64.deb


• Ubuntu libssl0.9.8_0.9.8g-4ubuntu3.11_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-4ubuntu3.11_amd64.deb


• Ubuntu openssl_0.9.8g-4ubuntu3.11_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4 ubuntu3.11_amd64.deb


• Ubuntu openssl-doc_0.9.8g-4ubuntu3.11_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-4ubuntu3.11_all.deb

Slackware Linux 13.1 x86_64

• Slackware openssl-solibs-0.9.8p-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/openssl-solibs-0.9.8p-x86_64-1_slack13.1.txz


• Slackware openssl-0.9.8p-x86_64-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/openssl-0.9.8p-x86_64-1_slack13.1.txz

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu libssl0.9.8_0.9.8g-16ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-16ubunt u3.3_lpia.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-16u buntu3.3_lpia.deb


• Ubuntu openssl_0.9.8g-16ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-16ubuntu3.3 _lpia.deb


• Ubuntu libssl-dev_0.9.8g-16ubuntu3.3_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-16ubuntu 3.3_lpia.deb


• Ubuntu openssl-doc_0.9.8g-16ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-16ubuntu3.3_all.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_lpia.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -16ubuntu3.3_lpia.udeb

MandrakeSoft Linux Mandrake 2010.1 x86_64

• Mandriva lib64openssl1.0.0-1.0.0a-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openssl-1.0.0a-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva openssl-engines-1.0.0a-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64openssl1.0.0-devel-1.0.0a-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64openssl1.0.0-static-devel-1.0.0a-1.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 mipsel

• Debian libssl0.9.8_0.9.8g-15+lenny8_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_mipsel.deb


• Debian openssl_0.9.8g-15+lenny8_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_mipsel.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_mipsel.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_mipsel.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_mipsel.udeb


• Debian libssl-dev_0.9.8g-15+lenny8_mipsel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_mipsel.deb

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu libssl0.9.8_0.9.8g-15ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubunt u3.6_sparc.deb


• Ubuntu openssl-doc_0.9.8g-15ubuntu3.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-15ubuntu3.6_all.deb


• Ubuntu libssl-dev_0.9.8g-15ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu 3.6_sparc.deb


• Ubuntu openssl_0.9.8g-15ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6 _sparc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_sparc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15u buntu3.6_sparc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_sparc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -15ubuntu3.6_sparc.udeb

Slackware Linux 13.1

• Slackware openssl-0.9.8p-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ openssl-0.9.8p-i486-1_slack13.1.txz


• Slackware openssl-solibs-0.9.8p-i486-1_slack13.1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ openssl-solibs-0.9.8p-i486-1_slack13.1.txz

Ubuntu Ubuntu Linux 9.04 powerpc

• Ubuntu libssl-dev_0.9.8g-15ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu 3.6_powerpc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_powerpc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -15ubuntu3.6_powerpc.udeb


• Ubuntu libssl0.9.8_0.9.8g-15ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubunt u3.6_powerpc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15u buntu3.6_powerpc.deb


• Ubuntu openssl_0.9.8g-15ubuntu3.6_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6 _powerpc.deb


• Ubuntu openssl-doc_0.9.8g-15ubuntu3.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-15ubuntu3.6_all.deb

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu libcrypto0.9.8-udeb_0.9.8o-1ubuntu4.1_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8o-1ubuntu4.1_amd64.udeb


• Ubuntu libssl-dev_0.9.8o-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 o-1ubuntu4.1_amd64.deb


• Ubuntu openssl_0.9.8o-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8o-1 ubuntu4.1_amd64.deb


• Ubuntu libssl0.9.8-udeb_0.9.8o-1ubuntu4.1_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-udeb _0.9.8o-1ubuntu4.1_amd64.udeb


• Ubuntu openssl-doc_0.9.8o-1ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8o-1ubuntu4.1_all.deb


• Ubuntu libssl0.9.8_0.9.8o-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8o-1ubuntu4.1_amd64.deb


• Ubuntu libssl0.9.8-dbg_0.9.8o-1ubuntu4.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8o-1ubuntu4.1_amd64.deb

Slackware Linux 12.1

• Slackware openssl-0.9.8p-i486-1_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ openssl-0.9.8p-i486-1_slack12.1.tgz


• Slackware openssl-solibs-0.9.8p-i486-1_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ openssl-solibs-0.9.8p-i486-1_slack12.1.tgz

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu libssl0.9.8_0.9.8k-7ubuntu8.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8k-7ubuntu 8.3_powerpc.deb


• Ubuntu openssl-doc_0.9.8k-7ubuntu8.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8k-7ubuntu8.3_all.deb


• Ubuntu libssl-dev_0.9.8k-7ubuntu8.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8k-7ubuntu8 .3_powerpc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8k-7ubuntu8.3_powerpc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8k -7ubuntu8.3_powerpc.udeb


• Ubuntu libssl0.9.8-dbg_0.9.8k-7ubuntu8.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8k-7ub untu8.3_powerpc.deb


• Ubuntu openssl_0.9.8k-7ubuntu8.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8k-7ubuntu8.3_ powerpc.deb


• Ubuntu libssl0.9.8-udeb_0.9.8k-7ubuntu8.3_powerpc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8k-7u buntu8.3_powerpc.udeb

Ubuntu Ubuntu Linux 9.04 i386

• Ubuntu openssl_0.9.8g-15ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-1 5ubuntu3.6_i386.deb


• Ubuntu libssl-dev_0.9.8g-15ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-15ubuntu3.6_i386.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-15ubuntu3.6_i386.udeb


• Ubuntu openssl-doc_0.9.8g-15ubuntu3.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-15ubuntu3.6_all.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-15ubuntu3.6_i386.deb


• Ubuntu libssl0.9.8_0.9.8g-15ubuntu3.6_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-15ubuntu3.6_i386.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu openssl_0.9.8g-15ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-15ubuntu3.6 _lpia.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_lpia.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -15ubuntu3.6_lpia.udeb


• Ubuntu libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-15u buntu3.6_lpia.deb


• Ubuntu libssl-dev_0.9.8g-15ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-15ubuntu 3.6_lpia.deb


• Ubuntu openssl-doc_0.9.8g-15ubuntu3.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-15ubuntu3.6_all.deb


• Ubuntu libssl0.9.8_0.9.8g-15ubuntu3.6_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-15ubunt u3.6_lpia.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-16ubuntu3.3_i386.udeb


• Ubuntu libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-16ubuntu3.3_i386.deb


• Ubuntu openssl_0.9.8g-16ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-1 6ubuntu3.3_i386.deb


• Ubuntu libssl0.9.8_0.9.8g-16ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-16ubuntu3.3_i386.deb


• Ubuntu openssl-doc_0.9.8g-16ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-16ubuntu3.3_all.deb


• Ubuntu libssl-dev_0.9.8g-16ubuntu3.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-16ubuntu3.3_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu libcrypto0.9.8-udeb_0.9.8k-7ubuntu8.3_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8k-7ubuntu8.3_amd64.udeb


• Ubuntu libssl0.9.8-udeb_0.9.8k-7ubuntu8.3_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-udeb _0.9.8k-7ubuntu8.3_amd64.udeb


• Ubuntu libssl0.9.8_0.9.8k-7ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8k-7ubuntu8.3_amd64.deb


• Ubuntu openssl_0.9.8k-7ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8k-7 ubuntu8.3_amd64.deb


• Ubuntu libssl0.9.8-dbg_0.9.8k-7ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8k-7ubuntu8.3_amd64.deb


• Ubuntu openssl-doc_0.9.8k-7ubuntu8.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8k-7ubuntu8.3_all.deb


• Ubuntu libssl-dev_0.9.8k-7ubuntu8.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 k-7ubuntu8.3_amd64.deb

Debian Linux 5.0 armel

• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_armel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_armel.deb


• Debian libssl-dev_0.9.8g-15+lenny8_armel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_armel.deb


• Debian libssl0.9.8_0.9.8g-15+lenny8_armel.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_armel.deb


• Debian openssl_0.9.8g-15+lenny8_armel.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_armel.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_armel.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_armel.udeb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu openssl-doc_0.9.8g-16ubuntu3.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-16ubuntu3.3_all.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-16ubuntu3.3_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-16ubuntu3.3_amd64.udeb


• Ubuntu libssl-dev_0.9.8g-16ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-16ubuntu3.3_amd64.deb


• Ubuntu libssl0.9.8_0.9.8g-16ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-16ubuntu3.3_amd64.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-16ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-16ubuntu3.3_amd64.deb


• Ubuntu openssl_0.9.8g-16ubuntu3.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-1 6ubuntu3.3_amd64.deb

Debian Linux 5.0 mips

• Debian libssl0.9.8_0.9.8g-15+lenny8_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_mips.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_mips.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_mips.udeb


• Debian openssl_0.9.8g-15+lenny8_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_mips.deb


• Debian libssl-dev_0.9.8g-15+lenny8_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_mips.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_mips.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_mips.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu libcrypto0.9.8-udeb_0.9.8g-15ubuntu3.6_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-15ubuntu3.6_amd64.udeb


• Ubuntu libssl0.9.8_0.9.8g-15ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-15ubuntu3.6_amd64.deb


• Ubuntu openssl-doc_0.9.8g-15ubuntu3.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-15ubuntu3.6_all.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-15ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-15ubuntu3.6_amd64.deb


• Ubuntu openssl_0.9.8g-15ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-1 5ubuntu3.6_amd64.deb


• Ubuntu libssl-dev_0.9.8g-15ubuntu3.6_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-15ubuntu3.6_amd64.deb

Debian Linux 5.0 sparc

• Debian libssl0.9.8_0.9.8g-15+lenny8_sparc.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_sparc.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_sparc.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_sparc.deb


• Debian libssl-dev_0.9.8g-15+lenny8_sparc.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_sparc.deb


• Debian openssl_0.9.8g-15+lenny8_sparc.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_sparc.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_sparc.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_sparc.udeb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu libcrypto0.9.8-udeb_0.9.8k-7ubuntu8.3_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8k-7ubuntu8.3_i386.udeb


• Ubuntu libssl-dev_0.9.8k-7ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 k-7ubuntu8.3_i386.deb


• Ubuntu libssl0.9.8-udeb_0.9.8k-7ubuntu8.3_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-udeb _0.9.8k-7ubuntu8.3_i386.udeb


• Ubuntu openssl_0.9.8k-7ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8k-7 ubuntu8.3_i386.deb


• Ubuntu libssl0.9.8_0.9.8k-7ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8k-7ubuntu8.3_i386.deb


• Ubuntu libssl0.9.8-dbg_0.9.8k-7ubuntu8.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8k-7ubuntu8.3_i386.deb


• Ubuntu openssl-doc_0.9.8k-7ubuntu8.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8k-7ubuntu8.3_all.deb

Slackware Linux x86_64 -current

• Slackware openssl-0.9.8p-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ n/openssl-0.9.8p-x86_64-1.txz


• Slackware openssl-solibs-0.9.8p-x86_64-1.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ a/openssl-solibs-0.9.8p-x86_64-1.txz

Debian Linux 5.0 ia-32

• Debian openssl_0.9.8g-15+lenny8_i386.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_i386.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_i386.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_i386.udeb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_i386.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_i386.deb


• Debian libssl-dev_0.9.8g-15+lenny8_i386.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_i386.deb


• Debian libssl0.9.8_0.9.8g-15+lenny8_i386.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_i386.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu libssl0.9.8_0.9.8a-7ubuntu0.13_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8a-7ubuntu0.13_powerpc.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.13_powerpc.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8a-7ubuntu0.13_powerpc.udeb


• Ubuntu openssl_0.9.8a-7ubuntu0.13_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7 ubuntu0.13_powerpc.deb


• Ubuntu libssl-dev_0.9.8a-7ubuntu0.13_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 a-7ubuntu0.13_powerpc.deb


• Ubuntu libssl0.9.8-dbg_0.9.8a-7ubuntu0.13_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8a-7ubuntu0.13_powerpc.deb

Debian Linux 5.0 s/390

• Debian libssl0.9.8_0.9.8g-15+lenny8_s390.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_s390.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_s390.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_s390.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_s390.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_s390.udeb


• Debian libssl-dev_0.9.8g-15+lenny8_s390.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_s390.deb


• Debian openssl_0.9.8g-15+lenny8_s390.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu openssl-doc_0.9.8g-4ubuntu3.11_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-4ubuntu3.11_all.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_lpia.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8g -4ubuntu3.11_lpia.udeb


• Ubuntu libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8g-4ub untu3.11_lpia.deb


• Ubuntu openssl_0.9.8g-4ubuntu3.11_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8g-4ubuntu3.11 _lpia.deb


• Ubuntu libssl-dev_0.9.8g-4ubuntu3.11_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8g-4ubuntu3 .11_lpia.deb


• Ubuntu libssl0.9.8_0.9.8g-4ubuntu3.11_lpia.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8g-4ubuntu 3.11_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu libssl-dev_0.9.8a-7ubuntu0.13_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 a-7ubuntu0.13_i386.deb


• Ubuntu libssl0.9.8_0.9.8a-7ubuntu0.13_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8a-7ubuntu0.13_i386.deb


• Ubuntu libssl0.9.8-dbg_0.9.8a-7ubuntu0.13_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8a-7ubuntu0.13_i386.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.13_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8a-7ubuntu0.13_i386.udeb


• Ubuntu openssl_0.9.8a-7ubuntu0.13_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7 ubuntu0.13_i386.deb

Slackware Linux 13.0 x86_64

• Slackware openssl-solibs-0.9.8p-x86_64-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/openssl-solibs-0.9.8p-x86_64-1_slack13.0.txz


• Slackware openssl-0.9.8p-x86_64-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/openssl-0.9.8p-x86_64-1_slack13.0.txz

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu libssl-dev_0.9.8a-7ubuntu0.13_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 a-7ubuntu0.13_amd64.deb


• Ubuntu openssl_0.9.8a-7ubuntu0.13_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8a-7 ubuntu0.13_amd64.deb


• Ubuntu libssl0.9.8-dbg_0.9.8a-7ubuntu0.13_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8a-7ubuntu0.13_amd64.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8a-7ubuntu0.13_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8a-7ubuntu0.13_amd64.udeb


• Ubuntu libssl0.9.8_0.9.8a-7ubuntu0.13_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8a-7ubuntu0.13_amd64.deb

Debian Linux 5.0 hppa

• Debian openssl_0.9.8g-15+lenny8_hppa.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_hppa.deb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_hppa.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_hppa.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_hppa.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_hppa.udeb


• Debian libssl-dev_0.9.8g-15+lenny8_hppa.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_hppa.deb


• Debian libssl0.9.8_0.9.8g-15+lenny8_hppa.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_hppa.deb

MandrakeSoft Linux Mandrake 2010.1

• Mandriva openssl-engines-1.0.0a-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libopenssl1.0.0-1.0.0a-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva openssl-1.0.0a-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libopenssl1.0.0-devel-1.0.0a-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libopenssl1.0.0-static-devel-1.0.0a-1.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 arm

• Debian openssl_0.9.8g-15+lenny8_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_arm.deb


• Debian libssl-dev_0.9.8g-15+lenny8_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_arm.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_arm.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_arm.udeb


• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_arm.deb


• Debian libssl0.9.8_0.9.8g-15+lenny8_arm.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_arm.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu libcrypto0.9.8-udeb_0.9.8o-1ubuntu4.1_powerpc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libcrypto0.9.8-udeb_0.9.8o -1ubuntu4.1_powerpc.udeb


• Ubuntu libssl0.9.8-dbg_0.9.8o-1ubuntu4.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-dbg_0.9.8o-1ub untu4.1_powerpc.deb


• Ubuntu libssl0.9.8-udeb_0.9.8o-1ubuntu4.1_powerpc.udeb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8-udeb_0.9.8o-1u buntu4.1_powerpc.udeb


• Ubuntu libssl-dev_0.9.8o-1ubuntu4.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl-dev_0.9.8o-1ubuntu4 .1_powerpc.deb


• Ubuntu openssl-doc_0.9.8o-1ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8o-1ubuntu4.1_all.deb


• Ubuntu libssl0.9.8_0.9.8o-1ubuntu4.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/libssl0.9.8_0.9.8o-1ubuntu 4.1_powerpc.deb


• Ubuntu openssl_0.9.8o-1ubuntu4.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/o/openssl/openssl_0.9.8o-1ubuntu4.1_ powerpc.deb

Slackware Linux 13.0

• Slackware openssl-0.9.8p-i486-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ openssl-0.9.8p-i486-1_slack13.0.txz


• Slackware openssl-solibs-0.9.8p-i486-1_slack13.0.txz
  ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ openssl-solibs-0.9.8p-i486-1_slack13.0.txz

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu openssl_0.9.8g-4ubuntu3.11_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8g-4 ubuntu3.11_i386.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8g-4ubuntu3.11_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8g-4ubuntu3.11_i386.udeb


• Ubuntu openssl-doc_0.9.8g-4ubuntu3.11_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8g-4ubuntu3.11_all.deb


• Ubuntu libssl0.9.8-dbg_0.9.8g-4ubuntu3.11_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8g-4ubuntu3.11_i386.deb


• Ubuntu libssl-dev_0.9.8g-4ubuntu3.11_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 g-4ubuntu3.11_i386.deb


• Ubuntu libssl0.9.8_0.9.8g-4ubuntu3.11_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8g-4ubuntu3.11_i386.deb

Debian Linux 5.0 amd64

• Debian libssl0.9.8-dbg_0.9.8g-15+lenny8_amd64.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8-dbg _0.9.8g-15+lenny8_amd64.deb


• Debian libcrypto0.9.8-udeb_0.9.8g-15+lenny8_amd64.udeb
  http://security.debian.org/pool/updates/main/o/openssl/libcrypto0.9.8- udeb_0.9.8g-15+lenny8_amd64.udeb


• Debian libssl0.9.8_0.9.8g-15+lenny8_amd64.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.8_0.9 .8g-15+lenny8_amd64.deb


• Debian libssl-dev_0.9.8g-15+lenny8_amd64.deb
  http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9. 8g-15+lenny8_amd64.deb


• Debian openssl_0.9.8g-15+lenny8_amd64.deb
  http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.8g- 15+lenny8_amd64.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu libssl0.9.8_0.9.8o-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8_0.9. 8o-1ubuntu4.1_i386.deb


• Ubuntu libcrypto0.9.8-udeb_0.9.8o-1ubuntu4.1_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libcrypto0.9.8-u deb_0.9.8o-1ubuntu4.1_i386.udeb


• Ubuntu openssl-doc_0.9.8o-1ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-doc_0.9. 8o-1ubuntu4.1_all.deb


• Ubuntu libssl0.9.8-dbg_0.9.8o-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-dbg_ 0.9.8o-1ubuntu4.1_i386.deb


• Ubuntu openssl_0.9.8o-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_0.9.8o-1 ubuntu4.1_i386.deb


• Ubuntu libssl0.9.8-udeb_0.9.8o-1ubuntu4.1_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl0.9.8-udeb _0.9.8o-1ubuntu4.1_i386.udeb


• Ubuntu libssl-dev_0.9.8o-1ubuntu4.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl-dev_0.9.8 o-1ubuntu4.1_i386.deb

OpenSSL 'ssl3_get_key_exchange()' Use-After-Free Memory Corruption Vulnerability

References:

• NetBSD Security Advisory 2010-011 (NetBSD)
  
• OpenSSL Project (OpenSSL Project)
  
• openssl-1.0.0a (Georgi Guninski)