It was discovered that incorrect memory handling in OpenSSL's do_ssl3_write() function could result in denial of service. The oldstable distribution (squeeze) is not affected.

For the stable distribution (wheezy), this problem has been fixed in version 1.0.1e-2+deb7u9. For the testing distribution (jessie), this problem has been fixed in version 1.0.1g-4. For the unstable distribution (sid), this problem has been fixed in version 1.0.1g-4. We recommend that you upgrade your openssl packages.

This package contains the openssl binary and related tools.

openssl on Debian Linux

This check tests the installed software version using the apt package manager.

• http://www.debian.org/security/2014/dsa-2931.html

---

Updated on 2015-03-25