Format: 1.8 Date: Mon, 07 Apr 2014 15:37:53 -0400 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: all i386_translations i386 Version: 1.0.1f-1ubuntu2 Distribution: trusty-proposed Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl-doc - Secure Sockets Layer toolkit - development documentation libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.0.1f-1ubuntu2) trusty; urgency=medium . * SECURITY UPDATE: side-channel attack on Montgomery ladder implementation - debian/patches/CVE-2014-0076.patch: add and use constant time swap in crypto/bn/bn.h, crypto/bn/bn_lib.c, crypto/ec/ec2_mult.c, util/libeay.num. - CVE-2014-0076 * SECURITY UPDATE: memory disclosure in TLS heartbeat extension - debian/patches/CVE-2014-0160.patch: use correct lengths in ssl/d1_both.c, ssl/t1_lib.c. - CVE-2014-0160 Checksums-Sha1: f8d666394ee1d042121127c23475667f8ff812cf 964874 libssl-doc_1.0.1f-1ubuntu2_all.deb 984189398275430dc06dadb3e2197d83bcfca704 20369 openssl_1.0.1f-1ubuntu2_i386_translations.tar.gz 8cd6d8cbce96484973f25a5cce4152691a40a1b7 479328 openssl_1.0.1f-1ubuntu2_i386.deb 73cce424dbfc06a8d049204363defb46fb4661c7 778274 libssl1.0.0_1.0.1f-1ubuntu2_i386.deb a33dc5fe1a563fcf544062bbaa0348475551f2df 569020 libcrypto1.0.0-udeb_1.0.1f-1ubuntu2_i386.udeb 65a5a4b7db98f239c66a1c33b5d73f4ad0d9d63e 121248 libssl1.0.0-udeb_1.0.1f-1ubuntu2_i386.udeb 4163ea7e2962d0a642f4468868aee85c3eda5ec2 989748 libssl-dev_1.0.1f-1ubuntu2_i386.deb ffe4538aabf4d618f82176745a364a2bacd06d61 2344296 libssl1.0.0-dbg_1.0.1f-1ubuntu2_i386.deb Checksums-Sha256: b70b3da96d92b7891c74dc02f4b2c681d7f87f9617c2dae4b88e11140b59b865 964874 libssl-doc_1.0.1f-1ubuntu2_all.deb 6aa8e2d3e91ebd1ab859f236a5b6e3a33e84c7402e01313041906777b13aaa75 20369 openssl_1.0.1f-1ubuntu2_i386_translations.tar.gz 424044abb944f001fcc0da7288036e503f414f56315e95422364357dc1f63b28 479328 openssl_1.0.1f-1ubuntu2_i386.deb 0b55823b000f7a886a4d1faf2bb178f7864f505297adaa45724fe4e017df8385 778274 libssl1.0.0_1.0.1f-1ubuntu2_i386.deb 01cccb0b15996481b4b1acb19bd82bd0ab0784110baf5c3726c17ac8ca494961 569020 libcrypto1.0.0-udeb_1.0.1f-1ubuntu2_i386.udeb 72b57e85b8df5ad3acbbe3e040ad1ae88c245149780cb7686b670b06122792c1 121248 libssl1.0.0-udeb_1.0.1f-1ubuntu2_i386.udeb cd063e3f53c426815ff312f69172f20c88eb9eac71790900969ace288b11d532 989748 libssl-dev_1.0.1f-1ubuntu2_i386.deb b9c6f4702dd3168b2bd98cff1dff36bee6d503cc6a3fef353ac7188e445a2970 2344296 libssl1.0.0-dbg_1.0.1f-1ubuntu2_i386.deb Files: 1d9007496cedf8f597176779cede4ca8 964874 doc optional libssl-doc_1.0.1f-1ubuntu2_all.deb 20dd1235054e8ad4d90782372128dcb2 20369 raw-translations - openssl_1.0.1f-1ubuntu2_i386_translations.tar.gz f099f1b2658701f0a8d3369e96c5458d 479328 utils optional openssl_1.0.1f-1ubuntu2_i386.deb 3b33ed521d06686dffa6d4dd6078e336 778274 libs important libssl1.0.0_1.0.1f-1ubuntu2_i386.deb 530788977fe453d987f900ededb3a158 569020 debian-installer optional libcrypto1.0.0-udeb_1.0.1f-1ubuntu2_i386.udeb ae7bdee5031dab53f2f54607d0d2299a 121248 debian-installer optional libssl1.0.0-udeb_1.0.1f-1ubuntu2_i386.udeb 32036270208c8940ba49915450195f4b 989748 libdevel optional libssl-dev_1.0.1f-1ubuntu2_i386.deb d5f28f1cf7279d9abcaf13a676e76b25 2344296 debug extra libssl1.0.0-dbg_1.0.1f-1ubuntu2_i386.deb Original-Maintainer: Debian OpenSSL Team Package-Type: udeb