Format: 1.8 Date: Mon, 07 Apr 2014 15:37:53 -0400 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: amd64 amd64_translations Version: 1.0.1f-1ubuntu2 Distribution: trusty-proposed Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl-doc - Secure Sockets Layer toolkit - development documentation libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.0.1f-1ubuntu2) trusty; urgency=medium . * SECURITY UPDATE: side-channel attack on Montgomery ladder implementation - debian/patches/CVE-2014-0076.patch: add and use constant time swap in crypto/bn/bn.h, crypto/bn/bn_lib.c, crypto/ec/ec2_mult.c, util/libeay.num. - CVE-2014-0076 * SECURITY UPDATE: memory disclosure in TLS heartbeat extension - debian/patches/CVE-2014-0160.patch: use correct lengths in ssl/d1_both.c, ssl/t1_lib.c. - CVE-2014-0160 Checksums-Sha1: 9c520d33edb1f4a438ad77cbc69f7eac2844a019 488794 openssl_1.0.1f-1ubuntu2_amd64.deb a563c62657fa3ba4d7466fef8c872a3d2f919aec 825446 libssl1.0.0_1.0.1f-1ubuntu2_amd64.deb c96db2350a2f9bfaef51320fa165d44d79093b48 615032 libcrypto1.0.0-udeb_1.0.1f-1ubuntu2_amd64.udeb 3926eed278583582f8c626a4bc71fa51f11fe704 122862 libssl1.0.0-udeb_1.0.1f-1ubuntu2_amd64.udeb e337538bed6e5765a0a85c4ca2af1d0deefd6ce0 1066212 libssl-dev_1.0.1f-1ubuntu2_amd64.deb 679070563d0e5e0bb256fe4825ce191642f0fcc1 2653822 libssl1.0.0-dbg_1.0.1f-1ubuntu2_amd64.deb 2864cd332035eab29d07f04fa614be06e69e8c19 20402 openssl_1.0.1f-1ubuntu2_amd64_translations.tar.gz Checksums-Sha256: 648eaa5aa2a5cf4a66b55ff25a05c3bcb4433a984a1bf99e2830fb055fa40b6e 488794 openssl_1.0.1f-1ubuntu2_amd64.deb 000043f7e6da7992c5a78160e3c49bf6a811774086dbe2f5a6063ef5a093ff0d 825446 libssl1.0.0_1.0.1f-1ubuntu2_amd64.deb 7beff21862d04c90ac14b0dbc6757f2b2ce3d31d43c9af85d6c65a469dcffbdf 615032 libcrypto1.0.0-udeb_1.0.1f-1ubuntu2_amd64.udeb e38c63b235df61bc607a157ca0fd1e9e40ea5c478b0150d0e773f1b201b38912 122862 libssl1.0.0-udeb_1.0.1f-1ubuntu2_amd64.udeb ed199dc9131923fa3c911202f165402b1310f50dcdfab987f6f5c2669fc698cc 1066212 libssl-dev_1.0.1f-1ubuntu2_amd64.deb e44e168a5f4af508f8bbae7bc697449ed1a003fae7706dba6198dc662b55f3a7 2653822 libssl1.0.0-dbg_1.0.1f-1ubuntu2_amd64.deb 3eec35957f542d2aa26806950f18bda40fb683f52b1e03e02d8138fb9f6cfb15 20402 openssl_1.0.1f-1ubuntu2_amd64_translations.tar.gz Files: 1b5db436c766395ad3294a77b6e55eeb 488794 utils optional openssl_1.0.1f-1ubuntu2_amd64.deb 6ebb5e5836f652cf200544e492e49d1e 825446 libs important libssl1.0.0_1.0.1f-1ubuntu2_amd64.deb bfb1b66d1cafc234fc4818f13a5fbfb8 615032 debian-installer optional libcrypto1.0.0-udeb_1.0.1f-1ubuntu2_amd64.udeb 58b4ac83eaa692b339d189ffc63f2e3c 122862 debian-installer optional libssl1.0.0-udeb_1.0.1f-1ubuntu2_amd64.udeb 321724885048f9a78d0e93887a7eb296 1066212 libdevel optional libssl-dev_1.0.1f-1ubuntu2_amd64.deb b30dfbe2ac2a3f626e4c359d05f5b30c 2653822 debug extra libssl1.0.0-dbg_1.0.1f-1ubuntu2_amd64.deb b0cb64be51324e862302fba1aea9d457 20402 raw-translations - openssl_1.0.1f-1ubuntu2_amd64_translations.tar.gz Original-Maintainer: Debian OpenSSL Team Package-Type: udeb