Format: 1.8 Date: Wed, 31 Jan 2024 15:45:27 -0500 Source: openssl Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-udeb openssl Architecture: s390x s390x_translations Version: 1.1.1f-1ubuntu2.21 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl1.1 - Secure Sockets Layer toolkit - shared libraries libssl1.1-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.1.1f-1ubuntu2.21) focal-security; urgency=medium . * SECURITY UPDATE: Excessive time spent in DH check / generation with large Q parameter value - debian/patches/CVE-2023-5678.patch: make DH_check_pub_key() and DH_generate_key() safer yet in crypto/dh/dh_check.c, crypto/dh/dh_err.c, crypto/dh/dh_key.c, crypto/err/openssl.txt, include/openssl/dh.h, include/openssl/dherr.h. - CVE-2023-5678 * SECURITY UPDATE: PKCS12 Decoding crashes - debian/patches/CVE-2024-0727.patch: add NULL checks where ContentInfo data can be NULL in crypto/pkcs12/p12_add.c, crypto/pkcs12/p12_mutl.c, crypto/pkcs12/p12_npas.c, crypto/pkcs7/pk7_mime.c. - CVE-2024-0727 Checksums-Sha1: 72582ffa9decd3e6b1175689daa17962d724b4da 777520 libcrypto1.1-udeb_1.1.1f-1ubuntu2.21_s390x.udeb ccc8662f39635dfa127902d031e19ba6f9776d1b 1256880 libssl-dev_1.1.1f-1ubuntu2.21_s390x.deb c39723ff5ef715f987290d351dfd53cb1139accb 2960944 libssl1.1-dbgsym_1.1.1f-1ubuntu2.21_s390x.ddeb 38917aad8e9ea0cdb0fc02bc3d2bc2e991b3865c 170084 libssl1.1-udeb_1.1.1f-1ubuntu2.21_s390x.udeb 5430c162f85640e14f75dfba0ab6838f6919da20 984536 libssl1.1_1.1.1f-1ubuntu2.21_s390x.deb b97a46d9328a4e03e229b676ba57f1319427289d 545136 openssl-dbgsym_1.1.1f-1ubuntu2.21_s390x.ddeb 0eb88db721bfbba6ffc703a98798ea816932f9d1 7360 openssl_1.1.1f-1ubuntu2.21_s390x.buildinfo c9b465fc928de1963a734a2d731d2a10642b9f80 609208 openssl_1.1.1f-1ubuntu2.21_s390x.deb 29570b5110e7a3a6cc2f2034904ddc6bfaa6274e 27946 openssl_1.1.1f-1ubuntu2.21_s390x_translations.tar.gz Checksums-Sha256: 7572ce4b4289e0ed9d9f90ba490a8952729bfc8d6b35f3dbadf37b826d16fe0f 777520 libcrypto1.1-udeb_1.1.1f-1ubuntu2.21_s390x.udeb a396cf3b3c3c765fd97cda1f4fd7126bab9a3c0d5f20072b23f851af1d937752 1256880 libssl-dev_1.1.1f-1ubuntu2.21_s390x.deb 6075e48d32f6f650a5d1b9b5b7fc32e3f0be47f1e41e85d0f60f44c43c930c66 2960944 libssl1.1-dbgsym_1.1.1f-1ubuntu2.21_s390x.ddeb e4b33d9bfa05c4f8efda62bf148b8367f1737fc6ab4b6d7d43965596d5c0162e 170084 libssl1.1-udeb_1.1.1f-1ubuntu2.21_s390x.udeb eb3f7547e501ffb2992400cd7c6c974eef20f71c3f4d39539879d04ff022ff32 984536 libssl1.1_1.1.1f-1ubuntu2.21_s390x.deb 6735fcbcda9a3f9e9bd308adee64acd7ef971d3ecf23e4faf69e7bc28c69d040 545136 openssl-dbgsym_1.1.1f-1ubuntu2.21_s390x.ddeb 188c9a4cb97ddf8518eb62b1d22526bb8b6d436e83dacabec98f61f1a60d54be 7360 openssl_1.1.1f-1ubuntu2.21_s390x.buildinfo e0c183533fd05db6866d2f2e68e18b9980dfe4472ec91bfb56abedb2c0dde3f1 609208 openssl_1.1.1f-1ubuntu2.21_s390x.deb 28910bba3a45b01b5462953c302a873b7259f8e808a40a6e13a14cd4b839489b 27946 openssl_1.1.1f-1ubuntu2.21_s390x_translations.tar.gz Files: 13fe6530fd0fca3081f511652e37dc3e 777520 debian-installer optional libcrypto1.1-udeb_1.1.1f-1ubuntu2.21_s390x.udeb 635a585d76c78403a42cbd6cf5111fb5 1256880 libdevel optional libssl-dev_1.1.1f-1ubuntu2.21_s390x.deb dce6382642d270a2b07059f09c48b252 2960944 debug optional libssl1.1-dbgsym_1.1.1f-1ubuntu2.21_s390x.ddeb e00038d15d6c4a4ed1d7450023bde1fa 170084 debian-installer optional libssl1.1-udeb_1.1.1f-1ubuntu2.21_s390x.udeb a0fc7ec049285ddcb025e855e1e240ab 984536 libs optional libssl1.1_1.1.1f-1ubuntu2.21_s390x.deb 88b4b509217f06a249faa7f85bc27a57 545136 debug optional openssl-dbgsym_1.1.1f-1ubuntu2.21_s390x.ddeb ffd0e91fcbf8aa292b0f51c7b32539f5 7360 utils optional openssl_1.1.1f-1ubuntu2.21_s390x.buildinfo 213d31e499374189c4840e0ffe7ddee9 609208 utils optional openssl_1.1.1f-1ubuntu2.21_s390x.deb 53658bf20e5d8ed26f895019de72c0dc 27946 raw-translations - openssl_1.1.1f-1ubuntu2.21_s390x_translations.tar.gz Original-Maintainer: Debian OpenSSL Team