Format: 1.8 Date: Mon, 07 Apr 2014 15:44:36 -0400 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: all i386_translations i386 Version: 1.0.1c-3ubuntu2.7 Distribution: quantal Urgency: medium Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - crypto shared library - udeb (udeb) libssl-dev - SSL development libraries, header files and documentation libssl-doc - SSL development documentation documentation libssl1.0.0 - SSL shared libraries libssl1.0.0-dbg - Symbol tables for libssl and libcrypto libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Socket Layer (SSL) binary and related cryptographic tools Changes: openssl (1.0.1c-3ubuntu2.7) quantal-security; urgency=medium . * SECURITY UPDATE: side-channel attack on Montgomery ladder implementation - debian/patches/CVE-2014-0076.patch: add and use constant time swap in crypto/bn/bn.h, crypto/bn/bn_lib.c, crypto/ec/ec2_mult.c, util/libeay.num. - CVE-2014-0076 * SECURITY UPDATE: memory disclosure in TLS heartbeat extension - debian/patches/CVE-2014-0160.patch: use correct lengths in ssl/d1_both.c, ssl/t1_lib.c. - CVE-2014-0160 Checksums-Sha1: 8b4ce8b5bc2e4ce3375de07d5a55f7f45f641cb0 1038942 libssl-doc_1.0.1c-3ubuntu2.7_all.deb 1c78faf4508885dbfe3be2ec3f61ff7b5841d87e 18940 openssl_1.0.1c-3ubuntu2.7_i386_translations.tar.gz 2279d90fcb02cc193e02984f04b0e0e07f63a5cc 520098 openssl_1.0.1c-3ubuntu2.7_i386.deb e8dd76728325f57b95de0db6f8d1b29087e83e0b 1008152 libssl1.0.0_1.0.1c-3ubuntu2.7_i386.deb 11e997afe33061601f823728769aaa83dcee4d06 578574 libcrypto1.0.0-udeb_1.0.1c-3ubuntu2.7_i386.udeb 37f3635b6f2c86c3f6085d62e2eefd76a72f5636 122778 libssl1.0.0-udeb_1.0.1c-3ubuntu2.7_i386.udeb d9a207ec83491b64a6adf57dfc7cf288fa00b99c 1420108 libssl-dev_1.0.1c-3ubuntu2.7_i386.deb d12523c9ab15edb08bc3537a5fc720a0d40db2eb 2611684 libssl1.0.0-dbg_1.0.1c-3ubuntu2.7_i386.deb Checksums-Sha256: e86c55321c9e9b601c2b358d575c30f0620343d19ca6b5a952699e656cbe7aa7 1038942 libssl-doc_1.0.1c-3ubuntu2.7_all.deb fc963bf144b1fb7d94cd641103e5f1a0e5765cdfe97805f811d191f20563db40 18940 openssl_1.0.1c-3ubuntu2.7_i386_translations.tar.gz 7c142399bf184b335dd07ad3763a2c7e939bd852127c697b756ad77f408bd7d6 520098 openssl_1.0.1c-3ubuntu2.7_i386.deb f7242b14a70fc244403a5049b7291cac9fb81e6561620fb5ece1b77ad44bc41c 1008152 libssl1.0.0_1.0.1c-3ubuntu2.7_i386.deb 28e3a62a32c9f560b8e730ccd0213aa4be086618b134ae9a6942c80eb9f3cdd5 578574 libcrypto1.0.0-udeb_1.0.1c-3ubuntu2.7_i386.udeb 71fbbf4b33c9062a487a82356e3ae3e21879201eeed04a9e7fe3a82ed1301175 122778 libssl1.0.0-udeb_1.0.1c-3ubuntu2.7_i386.udeb 684b7ae5d3f2e66dffd9a694828306cd60dc23ba8a6c7f61d4e12e82e402400f 1420108 libssl-dev_1.0.1c-3ubuntu2.7_i386.deb bcc3b861e4849868b66f7dd7b36c6210887594d173d5d9e4b06b4cb1324b2cee 2611684 libssl1.0.0-dbg_1.0.1c-3ubuntu2.7_i386.deb Files: 0ee155ac2c2e514688355e5ed9d6df0c 1038942 doc optional libssl-doc_1.0.1c-3ubuntu2.7_all.deb 97a0bb5f4062d055238c5273279e0212 18940 raw-translations - openssl_1.0.1c-3ubuntu2.7_i386_translations.tar.gz c6db51def8b9961c86c62b9c6f374911 520098 utils optional openssl_1.0.1c-3ubuntu2.7_i386.deb f112ceae3f9aa1f7923450af8e5e0871 1008152 libs important libssl1.0.0_1.0.1c-3ubuntu2.7_i386.deb cbae44411d798d58d63d37f8606c3c48 578574 debian-installer optional libcrypto1.0.0-udeb_1.0.1c-3ubuntu2.7_i386.udeb d89ea5d6c5cb057dc5122d54fa912090 122778 debian-installer optional libssl1.0.0-udeb_1.0.1c-3ubuntu2.7_i386.udeb 2d3714e1a21f1c905e4cd53aac8797a5 1420108 libdevel optional libssl-dev_1.0.1c-3ubuntu2.7_i386.deb 575b649d2b2a375e86d03b148a5b7e0b 2611684 debug extra libssl1.0.0-dbg_1.0.1c-3ubuntu2.7_i386.deb Original-Maintainer: Debian OpenSSL Team Package-Type: udeb