Announcement: OpenSSL version 0.9.8h

The OpenSSL project team is pleased to announce the release of version 0.9.8h of our open source toolkit for SSL/TLS. This new OpenSSL version is a security and bugfix release. For a complete list of changes, please see http://www.openssl.org/source/exp/CHANGES.

This release fixes two moderate security vulnerabilities which could result in a remote denial of service, CVE-2008-0891 and CVE-2008-1672. Please see http://www.openssl.org/news/secadv_20080528.txt

We consider OpenSSL 0.9.8h to be the best version of OpenSSL available and we strongly recommend that users of older versions upgrade as soon as possible. OpenSSL 0.9.8h is available for download via HTTP and FTP from the following master locations (you can find the various FTP mirrors under http://www.openssl.org/source/mirror.html):

• http://www.openssl.org/source/
• ftp://ftp.openssl.org/source/

The distribution file name is:

• openssl-0.9.8h.tar.gz
  Size: 3439981
  MD5 checksum: 7d3d41dafc76cf2fcb5559963b5783b3
  SHA1 checksum: ced4f2da24a202e01ea22bef30ebc8aee274de86
  

The checksums were calculated using the following commands:

    openssl md5 openssl-0.9.*.tar.gz
    openssl sha1 openssl-0.9.*.tar.gz

Yours,
The OpenSSL Project Team...

    Mark J. Cox             Nils Larsch         Ulf Möller
    Ralf S. Engelschall     Ben Laurie          Andy Polyakov
    Dr. Stephen Henson      Richard Levitte     Geoff Thorpe
    Lutz Jänicke            Bodo Möller