Format: 1.8 Date: Wed, 02 Dec 2020 09:43:55 -0500 Source: openssl Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-udeb openssl Architecture: arm64 arm64_translations Version: 1.1.1f-1ubuntu4.1 Distribution: groovy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl1.1 - Secure Sockets Layer toolkit - shared libraries libssl1.1-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.1.1f-1ubuntu4.1) groovy-security; urgency=medium . * SECURITY UPDATE: EDIPARTYNAME NULL pointer de-ref - debian/patches/CVE-2020-1971-1.patch: use explicit tagging for DirectoryString in crypto/x509v3/v3_genn.c. - debian/patches/CVE-2020-1971-2.patch: correctly compare EdiPartyName in crypto/x509v3/v3_genn.c. - debian/patches/CVE-2020-1971-3.patch: check that multi-strings/CHOICE types don't use implicit tagging in crypto/asn1/asn1_err.c, crypto/asn1/tasn_dec.c, crypto/err/openssl.txt, include/openssl/asn1err.h. - debian/patches/CVE-2020-1971-4.patch: complain if we are attempting to encode with an invalid ASN.1 template in crypto/asn1/asn1_err.c, crypto/asn1/tasn_enc.c, crypto/err/openssl.txt, include/openssl/asn1err.h. - debian/patches/CVE-2020-1971-5.patch: add a test for GENERAL_NAME_cmp in test/v3nametest.c. - debian/patches/CVE-2020-1971-6.patch: add a test for encoding/decoding using an invalid ASN.1 Template in test/asn1_decode_test.c, test/asn1_encode_test.c. - CVE-2020-1971 Checksums-Sha1: c2ea24f192a1ac9731cbefac68c8d68e51c33fb7 946484 libcrypto1.1-udeb_1.1.1f-1ubuntu4.1_arm64.udeb 539427658c0987665c9034945ff904852037b2b7 1459584 libssl-dev_1.1.1f-1ubuntu4.1_arm64.deb 9fdb38ad81f4c2e81a2aa40b114d9ffb38f0bda6 2895064 libssl1.1-dbgsym_1.1.1f-1ubuntu4.1_arm64.ddeb f73cfb488198304aca05bf459f5e8f2571e83903 173724 libssl1.1-udeb_1.1.1f-1ubuntu4.1_arm64.udeb c6ca6d3844ab5c57d405ebb7d0d6c95ecd16979c 1156580 libssl1.1_1.1.1f-1ubuntu4.1_arm64.deb 313d0a09bd6c5db05fb66189066a8d90eccecbba 554020 openssl-dbgsym_1.1.1f-1ubuntu4.1_arm64.ddeb f5dea41b01f981b0e280ac2cd7bdde2db3dc1861 7558 openssl_1.1.1f-1ubuntu4.1_arm64.buildinfo 976bd01b2438117813b71fa5e6fd8b3d06b5fb3f 598904 openssl_1.1.1f-1ubuntu4.1_arm64.deb 160a014ba7dc77eb7cf9b2b4d8a478691451f928 27343 openssl_1.1.1f-1ubuntu4.1_arm64_translations.tar.gz Checksums-Sha256: db7229f03b605eef4a4a8f858c2440d250ebe042e1c3912d1683bdffdd5ed217 946484 libcrypto1.1-udeb_1.1.1f-1ubuntu4.1_arm64.udeb b444140b651466cdb5b5ce0a37bc1fb95b9b70cb4b3841b648810dd1affa0e61 1459584 libssl-dev_1.1.1f-1ubuntu4.1_arm64.deb f92c155406ea646df9c24e1dc8f494eede919a71721e62d1b21cbd8991b78ff4 2895064 libssl1.1-dbgsym_1.1.1f-1ubuntu4.1_arm64.ddeb f91f9ce82a7a26782be66e01be3b6cb01ddf4b0dc2e998dfea7107f3e8e216cd 173724 libssl1.1-udeb_1.1.1f-1ubuntu4.1_arm64.udeb c11e835c8e0d6ec0c32a577252000dd167bc2bd712aa25e7c75e41ac89a2ae6f 1156580 libssl1.1_1.1.1f-1ubuntu4.1_arm64.deb 45bddc4e5dbb6d1544e0cc907812d6e31280ab236379bf2152c5245107f1ef13 554020 openssl-dbgsym_1.1.1f-1ubuntu4.1_arm64.ddeb 63559ff0147153babc527a9776e189aba857430dad51c1be3d7be9ff327e6510 7558 openssl_1.1.1f-1ubuntu4.1_arm64.buildinfo bd920eafe987d0f5d1398dadc180b9150bdaaa4730d81f9f099c5709804e54ca 598904 openssl_1.1.1f-1ubuntu4.1_arm64.deb 1444e2fe9058dae8e71d2b2cb5065281f51df087521e1ee33cc8539bb8a8b69f 27343 openssl_1.1.1f-1ubuntu4.1_arm64_translations.tar.gz Files: beb31772e3c488774b4fb4f98e9bcbcc 946484 debian-installer optional libcrypto1.1-udeb_1.1.1f-1ubuntu4.1_arm64.udeb 249ad0dedaf32d713bf4eea0d401f3cf 1459584 libdevel optional libssl-dev_1.1.1f-1ubuntu4.1_arm64.deb 45179e7a2291773a7e5d45f088cb5b43 2895064 debug optional libssl1.1-dbgsym_1.1.1f-1ubuntu4.1_arm64.ddeb ef5b239640ba33e83f1c0ca63c94381e 173724 debian-installer optional libssl1.1-udeb_1.1.1f-1ubuntu4.1_arm64.udeb dec4bb190d9de3743be5a47bef518624 1156580 libs optional libssl1.1_1.1.1f-1ubuntu4.1_arm64.deb 9e386d6864198a7036b65ba93e7d4af6 554020 debug optional openssl-dbgsym_1.1.1f-1ubuntu4.1_arm64.ddeb 1712478176a3993b700774e8cb749219 7558 utils optional openssl_1.1.1f-1ubuntu4.1_arm64.buildinfo 70b63930fd5ecae09d8a8806ca638996 598904 utils optional openssl_1.1.1f-1ubuntu4.1_arm64.deb f61e98fab3478f1ead01a06d1db33a55 27343 raw-translations - openssl_1.1.1f-1ubuntu4.1_arm64_translations.tar.gz Original-Maintainer: Debian OpenSSL Team