Format: 1.8 Date: Wed, 15 Oct 2014 12:56:03 -0400 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: powerpc powerpc_translations Version: 1.0.1f-1ubuntu2.7 Distribution: trusty Urgency: medium Maintainer: Ubuntu Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl-doc - Secure Sockets Layer toolkit - development documentation libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.0.1f-1ubuntu2.7) trusty-security; urgency=medium . * SECURITY UPDATE: denial of service via DTLS SRTP memory leak - debian/patches/CVE-2014-3513.patch: fix logic in ssl/d1_srtp.c, ssl/srtp.h, ssl/t1_lib.c, util/mk1mf.pl, util/mkdef.pl, util/ssleay.num. - CVE-2014-3513 * SECURITY UPDATE: denial of service via session ticket integrity check memory leak - debian/patches/CVE-2014-3567.patch: perform cleanup in ssl/t1_lib.c. - CVE-2014-3567 * SECURITY UPDATE: fix the no-ssl3 build option - debian/patches/CVE-2014-3568.patch: fix conditional code in ssl/s23_clnt.c, ssl/s23_srvr.c. - CVE-2014-3568 * SECURITY IMPROVEMENT: Added TLS_FALLBACK_SCSV support to mitigate a protocol downgrade attack to SSLv3 that exposes the POODLE attack. - debian/patches/tls_fallback_scsv_support.patch: added support for TLS_FALLBACK_SCSV in apps/s_client.c, crypto/err/openssl.ec, ssl/d1_lib.c, ssl/dtls1.h, ssl/s23_clnt.c, ssl/s23_srvr.c, ssl/s2_lib.c, ssl/s3_enc.c, ssl/s3_lib.c, ssl/ssl.h, ssl/ssl3.h, ssl/ssl_err.c, ssl/ssl_lib.c, ssl/t1_enc.c, ssl/tls1.h, doc/apps/s_client.pod, doc/ssl/SSL_CTX_set_mode.pod. Checksums-Sha1: 3f7e9994d0092584a0188cc8d1a43da93162cb4d 465620 openssl_1.0.1f-1ubuntu2.7_powerpc.deb 915bf3f7d33383636faa36de90976f5e75ddc8c6 688116 libssl1.0.0_1.0.1f-1ubuntu2.7_powerpc.deb 27288ab2361128d45f250131d072a68408251c0c 504612 libcrypto1.0.0-udeb_1.0.1f-1ubuntu2.7_powerpc.udeb 1bf34f3c969d5802e6a2db889cbe58e130140f22 105484 libssl1.0.0-udeb_1.0.1f-1ubuntu2.7_powerpc.udeb f1485292dfd1da61db96d67124307bd0db3e4683 942520 libssl-dev_1.0.1f-1ubuntu2.7_powerpc.deb c8d4bf3c1c12c87d5f7bc0bf14ac4767386fdbd0 2690342 libssl1.0.0-dbg_1.0.1f-1ubuntu2.7_powerpc.deb dff96c5d418d538bc01c71683a845a9716b5f74a 20613 openssl_1.0.1f-1ubuntu2.7_powerpc_translations.tar.gz Checksums-Sha256: cd9b15b0289c95b8ec8a4ef1fcd5e0cd710fb638cc2dc31a38cce37e12d67200 465620 openssl_1.0.1f-1ubuntu2.7_powerpc.deb 046c7b8dc02c4251d42ece2e1fa54e052cc97c93a558e4a786dd378c6ceea683 688116 libssl1.0.0_1.0.1f-1ubuntu2.7_powerpc.deb 8229f3644d592564e8ad641926230e92d1d6bde5c1c95fc1b903491ce712f01a 504612 libcrypto1.0.0-udeb_1.0.1f-1ubuntu2.7_powerpc.udeb 64f3566c6753b3e3b69e5c1cd00f6b7092f2ec83ccc3ecd61674ff4793d5cfc6 105484 libssl1.0.0-udeb_1.0.1f-1ubuntu2.7_powerpc.udeb b49d7c813746351cc06baab9401a66e5768541d0809cdbe1d7b57e7e695d0a19 942520 libssl-dev_1.0.1f-1ubuntu2.7_powerpc.deb e1764628dd65d24d882694ee338340a59675edb7aa1f1df3f6bb871393d3ef15 2690342 libssl1.0.0-dbg_1.0.1f-1ubuntu2.7_powerpc.deb febb3eb275f60054d0d2be836980ca30dbea05fa787436afe6333ea17b2ef22d 20613 openssl_1.0.1f-1ubuntu2.7_powerpc_translations.tar.gz Files: 05f12e427490d1134763ef7583fa3292 465620 utils optional openssl_1.0.1f-1ubuntu2.7_powerpc.deb 80fb5e4dbd2c9a9ddaed5d0a0d58874a 688116 libs important libssl1.0.0_1.0.1f-1ubuntu2.7_powerpc.deb 291f1e0c7f58f09aef19320515268ed3 504612 debian-installer optional libcrypto1.0.0-udeb_1.0.1f-1ubuntu2.7_powerpc.udeb 4802ce723dfc6a1dd04f2630bd873884 105484 debian-installer optional libssl1.0.0-udeb_1.0.1f-1ubuntu2.7_powerpc.udeb bd8925b8bb4149bd724d597d5c8c5c1d 942520 libdevel optional libssl-dev_1.0.1f-1ubuntu2.7_powerpc.deb 0d69579cc1f331ca45146292c5f0f108 2690342 debug extra libssl1.0.0-dbg_1.0.1f-1ubuntu2.7_powerpc.deb ba0fb9bfe137f23eae2d1552184a7102 20613 raw-translations - openssl_1.0.1f-1ubuntu2.7_powerpc_translations.tar.gz Original-Maintainer: Debian OpenSSL Team Package-Type: udeb