Format: 1.8 Date: Wed, 27 May 2020 15:17:49 -0400 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: armhf armhf_translations Version: 1.0.2g-1ubuntu4.16 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl-doc - Secure Sockets Layer toolkit - development documentation libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.0.2g-1ubuntu4.16) xenial-security; urgency=medium . * SECURITY UPDATE: ECDSA remote timing attack - debian/patches/CVE-2019-1547.patch: for ECC parameters with NULL or zero cofactor, compute it in crypto/ec/ec.h, crypto/ec/ec_err.c, crypto/ec/ec_lib.c. - CVE-2019-1547 * SECURITY UPDATE: rsaz_512_sqr overflow bug on x86_64 - debian/patches/CVE-2019-1551.patch: fix an overflow bug in rsaz_512_sqr in crypto/bn/asm/rsaz-x86_64.pl. - CVE-2019-1551 * SECURITY UPDATE: Padding Oracle issue - debian/patches/CVE-2019-1563.patch: fix a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey in crypto/cms/cms_env.c, crypto/cms/cms_lcl.h, crypto/cms/cms_smime.c, crypto/pkcs7/pk7_doit.c. - CVE-2019-1563 Checksums-Sha1: ec59cf534b20558ebabd5b453aab81dba46a850c 938 libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb c59ba6544b50bc618813f5d618f7bd938538399f 514782 libcrypto1.0.0-udeb_1.0.2g-1ubuntu4.16_armhf.udeb 32a1dae15937105ce893065db6c1256d258576ac 926 libssl-dev-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb e468642f9dc9b0e3290e72b03c9856cf2a468475 984382 libssl-dev_1.0.2g-1ubuntu4.16_armhf.deb 8880a72c6e20b349b0cda367f51749ee6318f050 2588336 libssl1.0.0-dbg_1.0.2g-1ubuntu4.16_armhf.deb 7ca3d3b22b68dc98ce0a71151788e65cb66be246 904 libssl1.0.0-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb f8d1948e3ed68f208e163ee04da6a60cfd86bf98 822 libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb 05dbe52652aa95dc4eec8b041f0213680dbc3037 113882 libssl1.0.0-udeb_1.0.2g-1ubuntu4.16_armhf.udeb 0148094a21931a2366089d42eff0e35b7bc7efd0 711802 libssl1.0.0_1.0.2g-1ubuntu4.16_armhf.deb 866299cdc2007af57be6382fade71066f5ca37d7 1064 openssl-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb 128b19d05aaffa8838ac8d9a46d4db1c98ab0aec 485854 openssl_1.0.2g-1ubuntu4.16_armhf.deb 40160b6acdfe4fa7ecc0829329fc5b275be9cccf 20189 openssl_1.0.2g-1ubuntu4.16_armhf_translations.tar.gz Checksums-Sha256: 657b754e14050924ced90e08e9e540ba0c7e2dc46bc0e436bd2963ff22af4579 938 libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb 6e2acc89aaabacf409fa5fd64399efdf34b5323163a66d23648a0ead0ef8bac6 514782 libcrypto1.0.0-udeb_1.0.2g-1ubuntu4.16_armhf.udeb ad07c20c1460947ff5a987d3b0119d7b4f8b6d47301921c597cc9888c253f7b0 926 libssl-dev-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb 17a32d49b58cd58b5559c480759c6942b590528376f79aa22faaf0f907b10dd2 984382 libssl-dev_1.0.2g-1ubuntu4.16_armhf.deb 19676f2e065b97f6854b8c19162affa9bafdeac710d11526b89c0ae6a1591e2f 2588336 libssl1.0.0-dbg_1.0.2g-1ubuntu4.16_armhf.deb 1be57d767b7ff2ef989c992da4f076064ce1439c0f43f0907a71a83a3492601d 904 libssl1.0.0-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb 9ef3e2dc749c8c009f2ccee40cb26325f59e78d4defcfe9431754981f32cc0bf 822 libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb c64ae3dc4d9c60b3b941b53983595e87eb8949515633199713fbd722d13ebf7a 113882 libssl1.0.0-udeb_1.0.2g-1ubuntu4.16_armhf.udeb eb8e536bc1be63ed76e05842561baac05da53ac8a7bd08e45bf717dcdd8df52e 711802 libssl1.0.0_1.0.2g-1ubuntu4.16_armhf.deb 35844a2639ba9f1234b3e56b362f8c7b741d208eede9cde3d73f192f54d50106 1064 openssl-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb da0b1fc144255d57dae6c91f3d3169d625130f0dd0f0e5df85f52b78b154185e 485854 openssl_1.0.2g-1ubuntu4.16_armhf.deb ee2712a2ff5e5e32be8dcfc411de4518ebe2043c6808fcf27877ef217a74e09e 20189 openssl_1.0.2g-1ubuntu4.16_armhf_translations.tar.gz Files: 25293dfd235a75375a688ea0d21ee5b4 938 debian-installer extra libcrypto1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb dfb05c30a2d2c99bcda6e4007daa7f35 514782 debian-installer optional libcrypto1.0.0-udeb_1.0.2g-1ubuntu4.16_armhf.udeb 9fd732ac7099f23ceeb9d49bb6654798 926 libdevel extra libssl-dev-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb c00e1a0ec41d5ad7862363e25b9f47b4 984382 libdevel optional libssl-dev_1.0.2g-1ubuntu4.16_armhf.deb 654ab2403bcc47da4514745848b44249 2588336 debug extra libssl1.0.0-dbg_1.0.2g-1ubuntu4.16_armhf.deb 7ade42c2cd1f61f809d822a04b525bdf 904 libs extra libssl1.0.0-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb 4c80939dd9c82b7f56992c3fb7cf0c3c 822 debian-installer extra libssl1.0.0-udeb-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb b9dee31efd4abbfa52fc7d41c951839e 113882 debian-installer optional libssl1.0.0-udeb_1.0.2g-1ubuntu4.16_armhf.udeb 8d1279a538db8e1e4b17f2cf8b922d36 711802 libs important libssl1.0.0_1.0.2g-1ubuntu4.16_armhf.deb e44316e6f2657f1065c0c0c3280cd021 1064 utils extra openssl-dbgsym_1.0.2g-1ubuntu4.16_armhf.ddeb 094a55b76f764983bdd75844fa4adfe9 485854 utils optional openssl_1.0.2g-1ubuntu4.16_armhf.deb 7be7703779b613a90390769f36c8e6a5 20189 raw-translations - openssl_1.0.2g-1ubuntu4.16_armhf_translations.tar.gz Original-Maintainer: Debian OpenSSL Team Package-Type: udeb