Format: 1.8 Date: Wed, 31 Jan 2024 15:45:27 -0500 Source: openssl Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-udeb openssl Architecture: riscv64 riscv64_translations Version: 1.1.1f-1ubuntu2.21 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl1.1 - Secure Sockets Layer toolkit - shared libraries libssl1.1-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.1.1f-1ubuntu2.21) focal-security; urgency=medium . * SECURITY UPDATE: Excessive time spent in DH check / generation with large Q parameter value - debian/patches/CVE-2023-5678.patch: make DH_check_pub_key() and DH_generate_key() safer yet in crypto/dh/dh_check.c, crypto/dh/dh_err.c, crypto/dh/dh_key.c, crypto/err/openssl.txt, include/openssl/dh.h, include/openssl/dherr.h. - CVE-2023-5678 * SECURITY UPDATE: PKCS12 Decoding crashes - debian/patches/CVE-2024-0727.patch: add NULL checks where ContentInfo data can be NULL in crypto/pkcs12/p12_add.c, crypto/pkcs12/p12_mutl.c, crypto/pkcs12/p12_npas.c, crypto/pkcs7/pk7_mime.c. - CVE-2024-0727 Checksums-Sha1: 883135611a42a71913768a39b44fc1e22598924e 774428 libcrypto1.1-udeb_1.1.1f-1ubuntu2.21_riscv64.udeb 9301f5a24c84134d7287afd8310c059a48f2bb6c 2524716 libssl-dev_1.1.1f-1ubuntu2.21_riscv64.deb 137b37d83f70d221e61eca7f983b1255a55f9b74 2783608 libssl1.1-dbgsym_1.1.1f-1ubuntu2.21_riscv64.ddeb 818f0b99f70dfd4d8d7ec4c101d58d7fff393295 160904 libssl1.1-udeb_1.1.1f-1ubuntu2.21_riscv64.udeb e4e414b4e9f651e65fd1b6fbfb829bbeb3a3369d 969592 libssl1.1_1.1.1f-1ubuntu2.21_riscv64.deb 9414f400ba7253cd41807be6dd89c240d94a086a 523656 openssl-dbgsym_1.1.1f-1ubuntu2.21_riscv64.ddeb a56c4de50cb0e1a107e19401f2a5ed54df0f4660 7261 openssl_1.1.1f-1ubuntu2.21_riscv64.buildinfo d9111fa511a8647309101bea5bc21f51fd7fe098 595268 openssl_1.1.1f-1ubuntu2.21_riscv64.deb 77bb859ff7942a63fb9ccacd8f455c96a05c4924 27188 openssl_1.1.1f-1ubuntu2.21_riscv64_translations.tar.gz Checksums-Sha256: 5bfccc0911b344048c8daf15b260d64dbcbf4385005974c30f0502b79e73ec79 774428 libcrypto1.1-udeb_1.1.1f-1ubuntu2.21_riscv64.udeb 6b35f7662bfea8a3ddf97375885f4f0dfb81dc5e31a350993ec7d67a4758368b 2524716 libssl-dev_1.1.1f-1ubuntu2.21_riscv64.deb 7a053ab1ac040819414348e44f197403e3734fc6ade1e8ec4a192f9bdbb911fc 2783608 libssl1.1-dbgsym_1.1.1f-1ubuntu2.21_riscv64.ddeb c7283b6937da4ff08213c6a46d8ea2de70f3aa8b72e787103b2d23eb1c742d77 160904 libssl1.1-udeb_1.1.1f-1ubuntu2.21_riscv64.udeb 4365d4f2a61f0df8356026995275e8322d2785aa7ba1520013897103dcd93e51 969592 libssl1.1_1.1.1f-1ubuntu2.21_riscv64.deb ca4691bc31abacd40671e463b54e869637a4b59d16cb9993892fcd63205a45cc 523656 openssl-dbgsym_1.1.1f-1ubuntu2.21_riscv64.ddeb 88c72237f39f6ad2046a0281ab124d93086f1565aeef4deead9c4e689622afab 7261 openssl_1.1.1f-1ubuntu2.21_riscv64.buildinfo 43bb475282c00fc08fdb0a42a6fc696a442527317e1dea1ac8b008c7de299f67 595268 openssl_1.1.1f-1ubuntu2.21_riscv64.deb d7c51b41283fec17f0397bf29089f4172ea97fbc23b465a015407227dab28660 27188 openssl_1.1.1f-1ubuntu2.21_riscv64_translations.tar.gz Files: 3c2f2144221be4fd678bc2337244f4ac 774428 debian-installer optional libcrypto1.1-udeb_1.1.1f-1ubuntu2.21_riscv64.udeb c3e9e41a748b1d80577d0ee78d38464b 2524716 libdevel optional libssl-dev_1.1.1f-1ubuntu2.21_riscv64.deb 13283f1d71aa51b9846e99e06335f386 2783608 debug optional libssl1.1-dbgsym_1.1.1f-1ubuntu2.21_riscv64.ddeb 8710ad791863b75fe7f781f389b798b9 160904 debian-installer optional libssl1.1-udeb_1.1.1f-1ubuntu2.21_riscv64.udeb d2da07c9243475407a389bfc722edb88 969592 libs optional libssl1.1_1.1.1f-1ubuntu2.21_riscv64.deb 5024e1fff1372c1acd91c995179eeb5d 523656 debug optional openssl-dbgsym_1.1.1f-1ubuntu2.21_riscv64.ddeb 72837a8077db808f25ed4c5a386bee1a 7261 utils optional openssl_1.1.1f-1ubuntu2.21_riscv64.buildinfo 6e85a63498f8ac025a9bb1101998bf59 595268 utils optional openssl_1.1.1f-1ubuntu2.21_riscv64.deb 3d26559df0444178a2a72ba39d73aa83 27188 raw-translations - openssl_1.1.1f-1ubuntu2.21_riscv64_translations.tar.gz Original-Maintainer: Debian OpenSSL Team