Format: 1.8 Date: Tue, 04 Dec 2018 10:36:19 -0500 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: amd64 amd64_translations Version: 1.0.1f-1ubuntu2.27 Distribution: trusty Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl-doc - Secure Sockets Layer toolkit - development documentation libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.0.1f-1ubuntu2.27) trusty-security; urgency=medium . * SECURITY UPDATE: PortSmash side channel attack - debian/patches/CVE-2018-5407.patch: fix timing vulnerability in crypto/bn/bn_lib.c, crypto/ec/ec_mult.c. - CVE-2018-5407 * SECURITY UPDATE: timing side channel attack in DSA - debian/patches/CVE-2018-0734-pre1.patch: address a timing side channel in crypto/dsa/dsa_ossl.c. - debian/patches/CVE-2018-0734-1.patch: fix timing vulnerability in crypto/dsa/dsa_ossl.c. - debian/patches/CVE-2018-0734-2.patch: fix mod inverse in crypto/dsa/dsa_ossl.c. - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in crypto/dsa/dsa_ossl.c. - CVE-2018-0734 Checksums-Sha1: 445a9f8b57dd321e5bece86d4001c2563bc3b9f6 489188 openssl_1.0.1f-1ubuntu2.27_amd64.deb 8a446b70ba1d8497daeb5f5ac1319331eb5a975f 830964 libssl1.0.0_1.0.1f-1ubuntu2.27_amd64.deb 075c1d121468dfa32f1074764d646dfd63a6ca6b 618800 libcrypto1.0.0-udeb_1.0.1f-1ubuntu2.27_amd64.udeb eb8fea63aef01f951105285f333028c48e18c396 125320 libssl1.0.0-udeb_1.0.1f-1ubuntu2.27_amd64.udeb c0437292f1d1b5ef27296c33fa54ee71bbc7f6c3 1075718 libssl-dev_1.0.1f-1ubuntu2.27_amd64.deb 37dd77342157eccf03b223a2efc5775c3059dd8e 2665402 libssl1.0.0-dbg_1.0.1f-1ubuntu2.27_amd64.deb 52dec2583594535d3a3a209d9d4f51ed5c6f1dbd 1060 openssl-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb bf5d2c825659d0f091e6ee4d8a5b0cbcfb9591a9 900 libssl1.0.0-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 7e3dee217e2ed67db7a3c0d14af76cc0a6823121 934 libcrypto1.0.0-udeb-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb ca9e08c94053c1bb144ca88f388aeaa9cd1aa2a3 820 libssl1.0.0-udeb-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 9edf3c60bfac65eee4850647da3dec4feecf2b33 922 libssl-dev-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 94d5371b52e29c12fd5e8da1b6007cfb96b1c827 20681 openssl_1.0.1f-1ubuntu2.27_amd64_translations.tar.gz Checksums-Sha256: 6e800d8d751ba1081a0320bb95a8b143ed880c880b5a5e124fa092dd09394a30 489188 openssl_1.0.1f-1ubuntu2.27_amd64.deb b0cf66bff817d2275779b1038b4d12a1119dc773f60d9e030feb06c42be03fc4 830964 libssl1.0.0_1.0.1f-1ubuntu2.27_amd64.deb 12426a428ab6034a3b4c2043a1aa2fedbc5eded015338c20c36b6d4b5352fc20 618800 libcrypto1.0.0-udeb_1.0.1f-1ubuntu2.27_amd64.udeb 6a9e32d3dcc096d1c98049f4fd29749164b0ef0ec2fab9e7744d903a41ab90c0 125320 libssl1.0.0-udeb_1.0.1f-1ubuntu2.27_amd64.udeb 62d46229437c91f19798bfc43a475eb158b0345564389d0894a03f11aef105ca 1075718 libssl-dev_1.0.1f-1ubuntu2.27_amd64.deb 1b21dd3d46d829a67c2774f126bd69003b5e8c736918a11e78e700d009d0c6b9 2665402 libssl1.0.0-dbg_1.0.1f-1ubuntu2.27_amd64.deb 44b684780f8227fadbb5b30916e45f199fea5e5369f73a50e6ac910ea63e93ca 1060 openssl-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 31fde49159c107bbde710e7b8acd4a07f7fb80853af503a782ac0972656f6549 900 libssl1.0.0-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 2abbe339ae6b284b9ee5c717b275c617f0fb659ac15dbdc7428b6d5ffd91df22 934 libcrypto1.0.0-udeb-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 57317677eb1528f6e5929ff00b0666bcbdda90d5535f82da1be0f0be29f6ce54 820 libssl1.0.0-udeb-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb eae687cc43ede2bc66774467167b33f9e0e6a67b4a2735a763326327cae42431 922 libssl-dev-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 32a1d07f9cb070d288f6b46f1ff8dc86d0bde2810a0d19727bba9068f2fa4856 20681 openssl_1.0.1f-1ubuntu2.27_amd64_translations.tar.gz Files: 0fb9a812a84b9224876b56b52752e364 489188 utils optional openssl_1.0.1f-1ubuntu2.27_amd64.deb dd930740a1675df5201a08921cc6b1f1 830964 libs important libssl1.0.0_1.0.1f-1ubuntu2.27_amd64.deb d304aad0aa5ab6b471b37a81607d247a 618800 debian-installer optional libcrypto1.0.0-udeb_1.0.1f-1ubuntu2.27_amd64.udeb 0c74cb79676eb9e8e545bacd522bc732 125320 debian-installer optional libssl1.0.0-udeb_1.0.1f-1ubuntu2.27_amd64.udeb 121465b5ed75b2574a9b5fe37915ce69 1075718 libdevel optional libssl-dev_1.0.1f-1ubuntu2.27_amd64.deb 1b852a07aafeaeace3ecac94a8014a46 2665402 debug extra libssl1.0.0-dbg_1.0.1f-1ubuntu2.27_amd64.deb 4f2d5a80aad5db35500b8dbd952e29be 1060 utils extra openssl-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 89df5a053479ca55bb79ea786070b0de 900 libs extra libssl1.0.0-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb b54857956402392ac1c52f22d8442d0f 934 debian-installer extra libcrypto1.0.0-udeb-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb 1e5ad595f72cb815cfe9d9235f35f2f4 820 debian-installer extra libssl1.0.0-udeb-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb ea86c22c7e6c383c771b0914667dc100 922 libdevel extra libssl-dev-dbgsym_1.0.1f-1ubuntu2.27_amd64.ddeb e2c6d9240b104836f49169afafb3d6f5 20681 raw-translations - openssl_1.0.1f-1ubuntu2.27_amd64_translations.tar.gz Original-Maintainer: Debian OpenSSL Team Package-Type: udeb