Format: 1.8
Date: Wed, 17 Feb 2021 07:32:55 -0500
Source: openssl
Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-udeb openssl
Architecture: armhf armhf_translations
Version: 1.1.1f-1ubuntu4.2
Distribution: groovy
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-025.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl1.1  - Secure Sockets Layer toolkit - shared libraries
 libssl1.1-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (1.1.1f-1ubuntu4.2) groovy-security; urgency=medium
 .
   * SECURITY UPDATE: Integer overflow in CipherUpdate
     - debian/patches/CVE-2021-23840.patch: don't overflow the output length
       in EVP_CipherUpdate calls in crypto/err/openssl.txt,
       crypto/evp/evp_enc.c, crypto/evp/evp_err.c, include/openssl/evperr.h.
     - CVE-2021-23840
   * SECURITY UPDATE: Null pointer deref in X509_issuer_and_serial_hash()
     - debian/patches/CVE-2021-23841.patch: fix Null pointer deref in
       crypto/x509/x509_cmp.c.
     - CVE-2021-23841
Checksums-Sha1:
 35f39300a3075fe766f3c142c8eb691bc52ca8b7 884704 libcrypto1.1-udeb_1.1.1f-1ubuntu4.2_armhf.udeb
 19d497ae060807f03eb5195219f1669d254add59 1376952 libssl-dev_1.1.1f-1ubuntu4.2_armhf.deb
 8ebd1d56810fad0f6ca99c7b3188ee5522ec93e7 2852720 libssl1.1-dbgsym_1.1.1f-1ubuntu4.2_armhf.ddeb
 35963e0fc74da78fb25aa5d0dca8ca60bf8be856 157256 libssl1.1-udeb_1.1.1f-1ubuntu4.2_armhf.udeb
 5c0ab093b4261bc9161c0ef6a9067801526291da 1078776 libssl1.1_1.1.1f-1ubuntu4.2_armhf.deb
 3d7cbfe9890934a2ee2360415c64d8ea55cd5a13 523996 openssl-dbgsym_1.1.1f-1ubuntu4.2_armhf.ddeb
 387d3b47618e65259335613883b9aa09ea7180ae 7496 openssl_1.1.1f-1ubuntu4.2_armhf.buildinfo
 b9014333edb9e043d738e7dbf58c74648987e260 597392 openssl_1.1.1f-1ubuntu4.2_armhf.deb
 2a674f6978085f4e02fbd1ba8619e78d4af754d1 27516 openssl_1.1.1f-1ubuntu4.2_armhf_translations.tar.gz
Checksums-Sha256:
 d0ca71fc5d1d96b3c61c18f6a89e8ea0daeaaea9a9fdb1da4f1597fbb30ad6c6 884704 libcrypto1.1-udeb_1.1.1f-1ubuntu4.2_armhf.udeb
 04add17968f2315da9aa688dd4c23a61d8fb6718ea975e3917975b84fcf2b348 1376952 libssl-dev_1.1.1f-1ubuntu4.2_armhf.deb
 1eccfd1efdecd46d8d5de154f65a89165d81bd4831c9b0952097e98330c51517 2852720 libssl1.1-dbgsym_1.1.1f-1ubuntu4.2_armhf.ddeb
 d563a04212792ec0f778cfbc218b922418a34fa65efc969e538a617d06e18cbf 157256 libssl1.1-udeb_1.1.1f-1ubuntu4.2_armhf.udeb
 6683dd45ba54e539ff2b73e2185ffd02c25103c3b519ddde353f0f5dd418bb95 1078776 libssl1.1_1.1.1f-1ubuntu4.2_armhf.deb
 f245883db1b0fcfed809d9f64ab97344cdf3c6fc4bc3695694d7549332609601 523996 openssl-dbgsym_1.1.1f-1ubuntu4.2_armhf.ddeb
 ec2d4a9301f4999a653fff5bbe620c330605ffcceaea5cf249e4b85a270317e6 7496 openssl_1.1.1f-1ubuntu4.2_armhf.buildinfo
 de1580f4b283a20fe2f57a6102dbaccf81472230f30cd66e7b7f94d1bb64f7b7 597392 openssl_1.1.1f-1ubuntu4.2_armhf.deb
 385a11a0a297162edc172cd84cd4f10814762a8741e9d58249a24c99301efc90 27516 openssl_1.1.1f-1ubuntu4.2_armhf_translations.tar.gz
Files:
 c92cc329945ded6bad661fb75a5109b9 884704 debian-installer optional libcrypto1.1-udeb_1.1.1f-1ubuntu4.2_armhf.udeb
 ca97dee191089efd69b95ec1191a4196 1376952 libdevel optional libssl-dev_1.1.1f-1ubuntu4.2_armhf.deb
 9e0109b7fc5fd6ae69e36b76bef0f877 2852720 debug optional libssl1.1-dbgsym_1.1.1f-1ubuntu4.2_armhf.ddeb
 3347b6cefb7c999ee8b53a6a34319262 157256 debian-installer optional libssl1.1-udeb_1.1.1f-1ubuntu4.2_armhf.udeb
 dfe9249580863b4b08d0dd6b4e3cc1b0 1078776 libs optional libssl1.1_1.1.1f-1ubuntu4.2_armhf.deb
 736525081c21a577e9ab97e4e4fb980e 523996 debug optional openssl-dbgsym_1.1.1f-1ubuntu4.2_armhf.ddeb
 b023e664dbc1564e8e2f64c4bc4516d8 7496 utils optional openssl_1.1.1f-1ubuntu4.2_armhf.buildinfo
 9340acb8f2bd0651074e526590251836 597392 utils optional openssl_1.1.1f-1ubuntu4.2_armhf.deb
 a0efe7865922b1138d95bd915d496633 27516 raw-translations - openssl_1.1.1f-1ubuntu4.2_armhf_translations.tar.gz
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>