Format: 1.8
Date: Wed, 17 Feb 2021 07:32:55 -0500
Source: openssl
Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-udeb openssl
Architecture: i386 i386_translations
Version: 1.1.1f-1ubuntu4.2
Distribution: groovy
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-003.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl1.1  - Secure Sockets Layer toolkit - shared libraries
 libssl1.1-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (1.1.1f-1ubuntu4.2) groovy-security; urgency=medium
 .
   * SECURITY UPDATE: Integer overflow in CipherUpdate
     - debian/patches/CVE-2021-23840.patch: don't overflow the output length
       in EVP_CipherUpdate calls in crypto/err/openssl.txt,
       crypto/evp/evp_enc.c, crypto/evp/evp_err.c, include/openssl/evperr.h.
     - CVE-2021-23840
   * SECURITY UPDATE: Null pointer deref in X509_issuer_and_serial_hash()
     - debian/patches/CVE-2021-23841.patch: fix Null pointer deref in
       crypto/x509/x509_cmp.c.
     - CVE-2021-23841
Checksums-Sha1:
 e880e2575683952516be3591168f6082deacb53d 1073620 libcrypto1.1-udeb_1.1.1f-1ubuntu4.2_i386.udeb
 7c02ffc4c11dc2630272363b928267ff50d4a577 1614272 libssl-dev_1.1.1f-1ubuntu4.2_i386.deb
 9c92310e5ef9ebbcc14e46c87e40b71d269ce1b8 2366100 libssl1.1-dbgsym_1.1.1f-1ubuntu4.2_i386.ddeb
 1b01f588f853e5cf316bb33e5993cc01d5aa8f8e 207460 libssl1.1-udeb_1.1.1f-1ubuntu4.2_i386.udeb
 0efe2df107f80bc7727907ec9eaa328af9f1f277 1320540 libssl1.1_1.1.1f-1ubuntu4.2_i386.deb
 3bea8ac1bc4b7d6b6f0c987782637e67336cd3bb 480636 openssl-dbgsym_1.1.1f-1ubuntu4.2_i386.ddeb
 54eeacc7c8081189f9473e66e91c3ea36634dc07 7535 openssl_1.1.1f-1ubuntu4.2_i386.buildinfo
 31e782002a7504f91320efe5e1621931be4b6374 630828 openssl_1.1.1f-1ubuntu4.2_i386.deb
 34410af3102b50abbb641e0432ded9b9782879d4 27694 openssl_1.1.1f-1ubuntu4.2_i386_translations.tar.gz
Checksums-Sha256:
 ae023f08c3a9dc303f89a24e102897d2f6e92df3f7175369883f530cafa4933e 1073620 libcrypto1.1-udeb_1.1.1f-1ubuntu4.2_i386.udeb
 d19cca5feb282087d008e093cf7060bcb74d6aa760cbf4d69549347f9510bc8c 1614272 libssl-dev_1.1.1f-1ubuntu4.2_i386.deb
 a4ce8bcfe54df983df732d2762f90e793e89c42bf6e095ae12a92cbf43d13bb9 2366100 libssl1.1-dbgsym_1.1.1f-1ubuntu4.2_i386.ddeb
 d225b96eb294efd3d2ed36af0b8484e37c0753e76acf34ddb9d00154a0ce64a9 207460 libssl1.1-udeb_1.1.1f-1ubuntu4.2_i386.udeb
 91a3639f1f60fec2b532789c184f3da9eeea76d15f576083567797cae3aba50c 1320540 libssl1.1_1.1.1f-1ubuntu4.2_i386.deb
 6effeda95a2c03a5f5a3bc2af2691b7d6dba1ebdb47b407f6b0cdd176ed6d4dd 480636 openssl-dbgsym_1.1.1f-1ubuntu4.2_i386.ddeb
 f9dbff0f2908fd2e032783c829ac028dcf1dfc78a72fd6080c3ed6723edf2d16 7535 openssl_1.1.1f-1ubuntu4.2_i386.buildinfo
 c167beb3f4d95163e289b0d9384a38b79dffb0182be86a93151f207ef32f5e10 630828 openssl_1.1.1f-1ubuntu4.2_i386.deb
 2b4ba7036c75f9f58172322753e8014f583566e7dc43c97ad371b6fb5af4d960 27694 openssl_1.1.1f-1ubuntu4.2_i386_translations.tar.gz
Files:
 b4f01e176b8e4f7038c439d146be2c18 1073620 debian-installer optional libcrypto1.1-udeb_1.1.1f-1ubuntu4.2_i386.udeb
 ef367faa55e6304a5706d10e0e490bff 1614272 libdevel optional libssl-dev_1.1.1f-1ubuntu4.2_i386.deb
 83097a17e10e9891c9a9629da15cad4e 2366100 debug optional libssl1.1-dbgsym_1.1.1f-1ubuntu4.2_i386.ddeb
 8a9c66280134ce2943db180f100a07c0 207460 debian-installer optional libssl1.1-udeb_1.1.1f-1ubuntu4.2_i386.udeb
 541c175a3d184d1a20a89050206a4f74 1320540 libs optional libssl1.1_1.1.1f-1ubuntu4.2_i386.deb
 fb3fda5073a1103a4fd50f4754226d3a 480636 debug optional openssl-dbgsym_1.1.1f-1ubuntu4.2_i386.ddeb
 378ea7a340e011551fc84c3bdc445982 7535 utils optional openssl_1.1.1f-1ubuntu4.2_i386.buildinfo
 ecba154ab8990b425132ecdf2d15af59 630828 utils optional openssl_1.1.1f-1ubuntu4.2_i386.deb
 fbd0c6d2a89370c24a13233b9eb9b657 27694 raw-translations - openssl_1.1.1f-1ubuntu4.2_i386_translations.tar.gz
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>