Format: 1.8 Date: Mon, 22 Mar 2021 07:33:17 -0400 Source: openssl Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-udeb openssl Architecture: s390x s390x_translations Version: 1.1.1f-1ubuntu4.3 Distribution: groovy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl1.1 - Secure Sockets Layer toolkit - shared libraries libssl1.1-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.1.1f-1ubuntu4.3) groovy-security; urgency=medium . * SECURITY UPDATE: NULL pointer deref in signature_algorithms processing - debian/patches/CVE-2021-3449-1.patch: fix NULL pointer dereference in ssl/statem/extensions.c. - debian/patches/CVE-2021-3449-2.patch: teach TLSProxy how to encrypt <= TLSv1.2 ETM records in util/perl/TLSProxy/Message.pm. - debian/patches/CVE-2021-3449-3.patch: add a test to test/recipes/70-test_renegotiation.t. - debian/patches/CVE-2021-3449-4.patch: ensure buffer/length pairs are always in sync in ssl/s3_lib.c, ssl/ssl_lib.c, ssl/statem/extensions.c, ssl/statem/extensions_clnt.c, ssl/statem/statem_clnt.c, ssl/statem/statem_srvr.c. - CVE-2021-3449 Checksums-Sha1: 5a6fc0e863532444a6126137f150657ba4617817 830112 libcrypto1.1-udeb_1.1.1f-1ubuntu4.3_s390x.udeb 267792e5bf99980bd3b8b1e5cd1d776e1f3ff77c 1311756 libssl-dev_1.1.1f-1ubuntu4.3_s390x.deb 8b56d24512cc7d50430a7b67af30a17f0fb80813 3286700 libssl1.1-dbgsym_1.1.1f-1ubuntu4.3_s390x.ddeb 49402896496f001b384390cb85e35509c781f899 176644 libssl1.1-udeb_1.1.1f-1ubuntu4.3_s390x.udeb ca264a6e40f9106fac343929a0a283c28fdeb8f8 1044592 libssl1.1_1.1.1f-1ubuntu4.3_s390x.deb d7d8b955879383ffc8e9ba665963d4b6afd09760 594280 openssl-dbgsym_1.1.1f-1ubuntu4.3_s390x.ddeb cd34ae5d3304a8659229e270a8095946ba4a0a34 7527 openssl_1.1.1f-1ubuntu4.3_s390x.buildinfo 4674de2e1cf7806ac5003c7a1732522def9740aa 614524 openssl_1.1.1f-1ubuntu4.3_s390x.deb 2582cd36bef2b53efab1a144777b0920dd0052f3 27296 openssl_1.1.1f-1ubuntu4.3_s390x_translations.tar.gz Checksums-Sha256: 3a6a9b9301a49ed5729cc48daf18fd3cb7ccdb686e1642990d20b4a9fad538bd 830112 libcrypto1.1-udeb_1.1.1f-1ubuntu4.3_s390x.udeb 7645cf01e4569e6ea987eb567bac9c7be00a6640ec169c0d4e63f3031512c3cd 1311756 libssl-dev_1.1.1f-1ubuntu4.3_s390x.deb fbb5f2d433be783cbed54a707f9ac9eebadffe1616fc92ec6688f4e2e35ef2a8 3286700 libssl1.1-dbgsym_1.1.1f-1ubuntu4.3_s390x.ddeb 67b7dbbdb3f846d478a2421f2d5739600432e66fb97907fbbb6e30b6139650f5 176644 libssl1.1-udeb_1.1.1f-1ubuntu4.3_s390x.udeb 3cfb829d7c8d39072d409e28df844ab13c7581bf25b195853fd1345fd787e17e 1044592 libssl1.1_1.1.1f-1ubuntu4.3_s390x.deb cdf819161c8d091dc4706611e11b3fc09ea9a5e9918297ff80f0070703a17654 594280 openssl-dbgsym_1.1.1f-1ubuntu4.3_s390x.ddeb 76c19a8fe54a49f0a729f3aeb1f3fe3c59eb506eb1795304666657020c93bbf1 7527 openssl_1.1.1f-1ubuntu4.3_s390x.buildinfo b092364e88fa6027f3c16257dcbb3392bb6b50876c55d10a110aef023dae3520 614524 openssl_1.1.1f-1ubuntu4.3_s390x.deb 8e6c8efd52a76a77d88f7ce2aa9a53db1a1c1e1b7593a2310a1657f0760d4aca 27296 openssl_1.1.1f-1ubuntu4.3_s390x_translations.tar.gz Files: d1bd068d805a2bf28c3cc71d784c3bb1 830112 debian-installer optional libcrypto1.1-udeb_1.1.1f-1ubuntu4.3_s390x.udeb 86aa9b35712ea07bce63591f321b1aea 1311756 libdevel optional libssl-dev_1.1.1f-1ubuntu4.3_s390x.deb 6b4edb8f80af4db79d918b5a57d13c2b 3286700 debug optional libssl1.1-dbgsym_1.1.1f-1ubuntu4.3_s390x.ddeb 83aba408dbee004b68713a2c231899fa 176644 debian-installer optional libssl1.1-udeb_1.1.1f-1ubuntu4.3_s390x.udeb 604de834cc16d34cb8ec4abccb7566cc 1044592 libs optional libssl1.1_1.1.1f-1ubuntu4.3_s390x.deb 8d3f82ddd4760ec65e660c966f380a12 594280 debug optional openssl-dbgsym_1.1.1f-1ubuntu4.3_s390x.ddeb 06516feb49b9c62591fab27e9e48c5ad 7527 utils optional openssl_1.1.1f-1ubuntu4.3_s390x.buildinfo 192716722da84ee5e5a4e0a0dde591c9 614524 utils optional openssl_1.1.1f-1ubuntu4.3_s390x.deb 01d1dcde6aeba1483a1f7b29bc1997ee 27296 raw-translations - openssl_1.1.1f-1ubuntu4.3_s390x_translations.tar.gz Original-Maintainer: Debian OpenSSL Team