Format: 1.8 Date: Fri, 16 Feb 2024 16:41:31 +0100 Source: openssl Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-udeb openssl Architecture: i386 i386_translations Version: 1.1.1f-1ubuntu2.22 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: David Fernandez Gonzalez Description: libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl1.1 - Secure Sockets Layer toolkit - shared libraries libssl1.1-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Launchpad-Bugs-Fixed: 2054090 Changes: openssl (1.1.1f-1ubuntu2.22) focal-security; urgency=medium . * SECURITY UPDATE: Implicit rejection for RSA PKCS#1 (LP: #2054090) - debian/patches/openssl-1.1.1-pkcs1-implicit-rejection.patch: Return deterministic random output instead of an error in case there is a padding error in crypto/cms/cms_env.c, crypto/pkcs7/pk7_doit.c, crypto/rsa/rsa_local.h, crypto/rsa/rsa_ossl.c, crypto/rsa/rsa_pk1.c, crypto/rsa/rsa_pmeth.c, doc/man1/pkeyutl.pod, doc/man1/rsautl.pod, doc/man3/EVP_PKEY_CTX_ctrl.pod, doc/man3/EVP_PKEY_decrypt.pod, doc/man3/RSA_padding_add_PKCS1_type_1.pod, doc/man3/RSA_public_encrypt.pod, include/openssl/rsa.h and test/recipes/30-test_evp_data/evppkey.txt. Checksums-Sha1: efbab1f4521146a63ff87f732c89050bd57cf9ec 1072972 libcrypto1.1-udeb_1.1.1f-1ubuntu2.22_i386.udeb f380a8107a8a75305240b456b8e376878551d37e 1616472 libssl-dev_1.1.1f-1ubuntu2.22_i386.deb 593dc853360ceb9648748691c680da6d070b9564 2382960 libssl1.1-dbgsym_1.1.1f-1ubuntu2.22_i386.ddeb e77f251b0dded1dac4ab4734535075ddbdba6a9d 206796 libssl1.1-udeb_1.1.1f-1ubuntu2.22_i386.udeb fa7c164b5665e89adb7ba939a878948dc789a501 1321608 libssl1.1_1.1.1f-1ubuntu2.22_i386.deb 51006a1c054b09be3ab2fe5f7f8e26a383f54569 492648 openssl-dbgsym_1.1.1f-1ubuntu2.22_i386.ddeb 785b9fe49777514c286ca38936a3a5efed27ff3f 7380 openssl_1.1.1f-1ubuntu2.22_i386.buildinfo ce90f40035a26c9232266b775e13e410c9060773 632312 openssl_1.1.1f-1ubuntu2.22_i386.deb 66667315afd50b0fbb10c1f4c9455154ec396c36 27306 openssl_1.1.1f-1ubuntu2.22_i386_translations.tar.gz Checksums-Sha256: 3f8d9bcd12fa829ae998bdea9f30e5ef4f6878c23ea19c87d3d76f68d2e9a9a9 1072972 libcrypto1.1-udeb_1.1.1f-1ubuntu2.22_i386.udeb f2dc150aec92b3623be2d4cc17b854a3ba36ab81aae31ffcc5e0ea1c2e99a0fc 1616472 libssl-dev_1.1.1f-1ubuntu2.22_i386.deb 296f0ed38686a6124db6bae0c4061c600606ae4f32edc65b8eab6955b979fcae 2382960 libssl1.1-dbgsym_1.1.1f-1ubuntu2.22_i386.ddeb e64a05f70cedab905b0ea41dfd5581736268395dda17d89ae32ac072278a575b 206796 libssl1.1-udeb_1.1.1f-1ubuntu2.22_i386.udeb e11bdc73a5c34d51209588acc426dc3928d7acd8f74f67bdeef2eb4710564ec7 1321608 libssl1.1_1.1.1f-1ubuntu2.22_i386.deb 680aac85f453739cc8e3c35053a65ad0413700c14be50b9177ee2f3685dcfca1 492648 openssl-dbgsym_1.1.1f-1ubuntu2.22_i386.ddeb bac68cc5ddbd2145803519faef1e4e07589d823613f92c5e2ba1f15fe6e1c107 7380 openssl_1.1.1f-1ubuntu2.22_i386.buildinfo 33a475d860f9a9179dc2259d817cfffd53247774fcfb47ff0606776a7c665796 632312 openssl_1.1.1f-1ubuntu2.22_i386.deb 9f6aabc4d6a4aadd6f644a1c820f9ad97826a4d6d9db21ee4125c37a5f2b5fea 27306 openssl_1.1.1f-1ubuntu2.22_i386_translations.tar.gz Files: 71fe2f63fb28044861c5e7aca229fccf 1072972 debian-installer optional libcrypto1.1-udeb_1.1.1f-1ubuntu2.22_i386.udeb 93c4a48f77ff489fb22964c9538580cf 1616472 libdevel optional libssl-dev_1.1.1f-1ubuntu2.22_i386.deb 6db27c6dd38e69f8df60caa306e8279f 2382960 debug optional libssl1.1-dbgsym_1.1.1f-1ubuntu2.22_i386.ddeb 5eaa1bb0c9cd8b4703e7f91de40a1c0d 206796 debian-installer optional libssl1.1-udeb_1.1.1f-1ubuntu2.22_i386.udeb 820d43dd48b3148bfa61bfcad220ea48 1321608 libs optional libssl1.1_1.1.1f-1ubuntu2.22_i386.deb 69da71f87f8d483f364541c806f2a924 492648 debug optional openssl-dbgsym_1.1.1f-1ubuntu2.22_i386.ddeb ec3a96f761ddc1f923e9a35da22d4c27 7380 utils optional openssl_1.1.1f-1ubuntu2.22_i386.buildinfo 72ddae572a099521c788afa3f37c15fc 632312 utils optional openssl_1.1.1f-1ubuntu2.22_i386.deb d49db46979a195fedd9998e5fbe252d2 27306 raw-translations - openssl_1.1.1f-1ubuntu2.22_i386_translations.tar.gz Original-Maintainer: Debian OpenSSL Team