Resent-Date: Fri, 12 Jun 2015 11:18:47 +0200
Resent-Message-Id: <201506120918.t5C9Ij8D025140@h1439878.stratoserver.net>
Received-SPF: none
	client-ip=213.139.130.196;
	helo="exchange2010.proteosys";
	envelope-from="rainer.schoepf@proteosys.com";
	receiver=smtpin.rzone.de;
	identity=mailfrom;
Resent-From: <rainer.schoepf@proteosys.com>
To: <root@wwwintern.proteosys>
Subject: 2 Ubuntu package update(s) for wwwintern.proteosys 
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Message-ID: <20150612091826.9AF1D4B87E@wwwintern.proteosys>
Date: Fri, 12 Jun 2015 11:18:26 +0200
From: wwwintern root <root@wwwintern.proteosys>
Status: R

apticron report [Fri, 12 Jun 2015 11:18:24 +0200]
========================================================================

apticron has detected that some packages need upgrading on:

	wwwintern.proteosys  
	[ 10.0.0.48 ]

The following packages are currently pending an upgrade:

	libssl1.0.0 1.0.1-4ubuntu5.31
	openssl 1.0.1-4ubuntu5.31

========================================================================

Package Details:

Reading changelogs...
--- Changes for openssl (libssl1.0.0 openssl) ---
openssl (1.0.1-4ubuntu5.31) precise-security; urgency=medium

  * SECURITY IMPROVEMENT: reject dh keys smaller than 768 bits
    - debian/patches/reject_small_dh.patch: reject small dh keys in
      ssl/s3_clnt.c, ssl/ssl.h, ssl/ssl_err.c, update documentation in
      doc/ssl/SSL_CTX_set_tmp_dh_callback.pod, make s_server use 2048-bit
      dh in apps/s_server.c, clarify docs in doc/apps/dhparam.pod,
      switch defaut dh to 2048-bit in apps/dhparam.c, apps/gendh.c.
  * SECURITY UPDATE: denial of service and possible code execution via
    invalid free in DTLS
    - debian/patches/CVE-2014-8176.patch: fix invalid free in ssl/d1_lib.c.
    - CVE-2014-8176
  * SECURITY UPDATE: denial of service via malformed ECParameters
    - debian/patches/CVE-2015-1788.patch: improve logic in
      crypto/bn/bn_gf2m.c.
    - CVE-2015-1788
  * SECURITY UPDATE: denial of service via out-of-bounds read in
    X509_cmp_time
    - debian/patches/CVE-2015-1789.patch: properly parse time format in
      crypto/x509/x509_vfy.c.
    - CVE-2015-1789
  * SECURITY UPDATE: denial of service via missing EnvelopedContent
    - debian/patches/CVE-2015-1790.patch: handle NULL data_body in
      crypto/pkcs7/pk7_doit.c.
    - CVE-2015-1790
  * SECURITY UPDATE: race condition in NewSessionTicket
    - debian/patches/CVE-2015-1791.patch: create a new session in
      ssl/s3_clnt.c, ssl/ssl.h, ssl/ssl_err.c, ssl/ssl_locl.h,
      ssl/ssl_sess.c.
    - debian/patches/CVE-2015-1791-2.patch: fix kerberos issue in
      ssl/ssl_sess.c.
    - debian/patches/CVE-2015-1791-3.patch: more ssl_session_dup fixes in
      ssl/ssl_sess.c.
    - CVE-2015-1791
  * SECURITY UPDATE: CMS verify infinite loop with unknown hash function
    - debian/patches/CVE-2015-1792.patch: fix infinite loop in
      crypto/cms/cms_smime.c.
    - CVE-2015-1792

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 11 Jun 2015 07:35:48 -0400

========================================================================

You can perform the upgrade by issuing the command:

	apt-get dist-upgrade

as root on wwwintern.proteosys 

--
apticron