Format: 1.8 Date: Wed, 27 May 2020 15:17:49 -0400 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: amd64 all amd64_translations Version: 1.0.2g-1ubuntu4.16 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl-doc - Secure Sockets Layer toolkit - development documentation libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.0.2g-1ubuntu4.16) xenial-security; urgency=medium . * SECURITY UPDATE: ECDSA remote timing attack - debian/patches/CVE-2019-1547.patch: for ECC parameters with NULL or zero cofactor, compute it in crypto/ec/ec.h, crypto/ec/ec_err.c, crypto/ec/ec_lib.c. - CVE-2019-1547 * SECURITY UPDATE: rsaz_512_sqr overflow bug on x86_64 - debian/patches/CVE-2019-1551.patch: fix an overflow bug in rsaz_512_sqr in crypto/bn/asm/rsaz-x86_64.pl. - CVE-2019-1551 * SECURITY UPDATE: Padding Oracle issue - debian/patches/CVE-2019-1563.patch: fix a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey in crypto/cms/cms_env.c, crypto/cms/cms_lcl.h, crypto/cms/cms_smime.c, crypto/pkcs7/pk7_doit.c. - CVE-2019-1563 Checksums-Sha1: 0735e95a61c0ec55a1d165f62d4b357a11df2db7 936 libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 07ab31164394267f854819cfd86098bf6842993d 854654 libcrypto1.0.0-udeb_1.0.2g-1ubuntu4.16_amd64.udeb 1fdb6db37200bf62844e7d6bbde3b5b5b9b75118 926 libssl-dev-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 43b815741aee58c769ceb48e825df27959e62cee 1344428 libssl-dev_1.0.2g-1ubuntu4.16_amd64.deb beb63f5ee5b7a6747287dff4a8b964d5383e7adc 1077676 libssl-doc_1.0.2g-1ubuntu4.16_all.deb 07cb889b803cde4ebbae886877524c7f570431e0 2763564 libssl1.0.0-dbg_1.0.2g-1ubuntu4.16_amd64.deb 2dd9391007be78e22d4fa9a0c2d6a47bb2c9816d 902 libssl1.0.0-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 1fd20384037747f24e20e6b47ceb1aa4a07299c1 822 libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb debea5f57443d797f9985521838a42465434ea50 140106 libssl1.0.0-udeb_1.0.2g-1ubuntu4.16_amd64.udeb d4267219ac973a010950fc47caae684a2f37984e 1083694 libssl1.0.0_1.0.2g-1ubuntu4.16_amd64.deb fa545e8430bfcfa197f69fefa3364fcfb7693d4d 1062 openssl-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb d8d90bcb331e9513404a33aef647adc92dfc950f 491968 openssl_1.0.2g-1ubuntu4.16_amd64.deb 8e54925f42c34e82c0372f3c8c556ce1349e1807 20475 openssl_1.0.2g-1ubuntu4.16_amd64_translations.tar.gz Checksums-Sha256: 6578a27bafc38a553bb8135d39919263ded77f36289595f94c58da3c9c517f50 936 libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 5d6163ffa64db1e3fa06496dd8baaa5b4e315963462113da4b95f0b6a647d2d8 854654 libcrypto1.0.0-udeb_1.0.2g-1ubuntu4.16_amd64.udeb 556c3d1271f1ce43a5436d880dccab4770d6e3d8f8a8f39add391d6b1fe3c99a 926 libssl-dev-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb d6062d23213bb660435651d2f6abe3311b463b2385d13a466ae917d25297bd3d 1344428 libssl-dev_1.0.2g-1ubuntu4.16_amd64.deb df02f2f3ba4572c93fd000d2e5c092af8a3bc11bf91a806a437f2af12d1c2c6b 1077676 libssl-doc_1.0.2g-1ubuntu4.16_all.deb 7e344c130d691ef657704360cb1aa51ff5c239cc1182bab4799222ce7ed74781 2763564 libssl1.0.0-dbg_1.0.2g-1ubuntu4.16_amd64.deb faea0d7d3ee4d423418f80c3be266f221e72962f8c2f468dead755db749ffeab 902 libssl1.0.0-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 0d6a32453c29172fa99f220474aa623ab355a76755c6fce0b1ccddd11eec1da9 822 libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 7395ed03b2918a49c352859067b61636c766404a8a83f0c4794758013a1f9df5 140106 libssl1.0.0-udeb_1.0.2g-1ubuntu4.16_amd64.udeb 991a0acdb4e144eac5a4dacf1ba1ae8bae5c130bb5778eee5538320e47b585bf 1083694 libssl1.0.0_1.0.2g-1ubuntu4.16_amd64.deb ac855031ee02973300fe5aa214563511863780666db16ca40659bef455eeea21 1062 openssl-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 6e120fda0d35b65d85f746f20aa56bd10ba85380dc2be1e364400e6e3ec2a7c4 491968 openssl_1.0.2g-1ubuntu4.16_amd64.deb 4c6f4eb3e8a39ef87a1987f55ea05b49cf7106f6650b36d9b028a9ce075576cc 20475 openssl_1.0.2g-1ubuntu4.16_amd64_translations.tar.gz Files: 5973c46fb0d61ca8b5cf4a1741b0c960 936 debian-installer extra libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb f919a9b5c5da5aad2c9eb12eb74c4ab8 854654 debian-installer optional libcrypto1.0.0-udeb_1.0.2g-1ubuntu4.16_amd64.udeb 496e9d33568c71dcaaf696cdc0ddb195 926 libdevel extra libssl-dev-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 3852f769e70f3a2534e2f1b207ccd3fd 1344428 libdevel optional libssl-dev_1.0.2g-1ubuntu4.16_amd64.deb 6627bc67825bb8e7780915d999069f9a 1077676 doc optional libssl-doc_1.0.2g-1ubuntu4.16_all.deb c880d1cd16976d7d8b8c8fb8168e778b 2763564 debug extra libssl1.0.0-dbg_1.0.2g-1ubuntu4.16_amd64.deb a6c972bc17eb628b3ed9dcab54a00d19 902 libs extra libssl1.0.0-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 02274e85993d07a6cf9633eda5847503 822 debian-installer extra libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb 0ef6df1ba2fb2474ce80bf51905d48d6 140106 debian-installer optional libssl1.0.0-udeb_1.0.2g-1ubuntu4.16_amd64.udeb 80cbff26a4bde8a0857303ea8e615e83 1083694 libs important libssl1.0.0_1.0.2g-1ubuntu4.16_amd64.deb 121430444096e72397176c98f5fb1ebc 1062 utils extra openssl-dbgsym_1.0.2g-1ubuntu4.16_amd64.ddeb e8adf4c397497244275f59f625c26ab9 491968 utils optional openssl_1.0.2g-1ubuntu4.16_amd64.deb 2d99546c9feb8ace887027651c5b8e21 20475 raw-translations - openssl_1.0.2g-1ubuntu4.16_amd64_translations.tar.gz Original-Maintainer: Debian OpenSSL Team Package-Type: udeb