-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Aug 2024 23:51:02 +0200 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: armhf Version: 3.0.14-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-ubc-05) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Closes: 1068658 1071972 1072113 Changes: openssl (3.0.14-1~deb12u1) bookworm; urgency=medium . * Import 3.0.14 - CVE-2024-2511 (Unbounded memory growth with session handling in TLSv1.3) (Closes: #1068658). - CVE-2024-4603 (Excessive time spent checking DSA keys and parameters) (Closes: #1071972). - CVE-2024-4741 (Use After Free with SSL_free_buffers) (Closes: #1072113). Checksums-Sha1: bf1294b60a6fb023b5bc1d846957bcc5a87b240a 1209528 libcrypto3-udeb_3.0.14-1~deb12u1_armhf.udeb 19aa71db7d497af755baf3eeb6b2662f9f9d3287 2141516 libssl-dev_3.0.14-1~deb12u1_armhf.deb 91c78b5dfd3c61c29c5d425ce44dc7d431530111 4466792 libssl3-dbgsym_3.0.14-1~deb12u1_armhf.deb b816add29b139f6a9a56bfe2f7360fbada7a511f 186020 libssl3-udeb_3.0.14-1~deb12u1_armhf.udeb aa3f70f5edcd9c107b85334a599f2ad34bd29fb6 1670420 libssl3_3.0.14-1~deb12u1_armhf.deb e9f19aed1c39e8166863b11e074fd219cc200a68 661012 openssl-dbgsym_3.0.14-1~deb12u1_armhf.deb 4bfee9c065343668b52550827f7d35c052237778 7519 openssl_3.0.14-1~deb12u1_armhf-buildd.buildinfo dc2403cde606590868e1e15117fd704657ddf416 1389124 openssl_3.0.14-1~deb12u1_armhf.deb Checksums-Sha256: a23239779c557d499d344634cf1e0fc46e68e70b2a5a4fecb3bbb5435dce409a 1209528 libcrypto3-udeb_3.0.14-1~deb12u1_armhf.udeb aa3228caa16bb803f2ecdf8faa352f73872c7f4e0ab7fb53e11b887f51864895 2141516 libssl-dev_3.0.14-1~deb12u1_armhf.deb 91cc148e407ae8021a4905165fb69914e535276d11e31e7b72ac86803d7b30dc 4466792 libssl3-dbgsym_3.0.14-1~deb12u1_armhf.deb 238868f964093d96eaa30ddd701fd7628c33ecd64eb994f28261fef30c749ac8 186020 libssl3-udeb_3.0.14-1~deb12u1_armhf.udeb fec947d5428e3c15ecad4a38361b6538ac0ad2aa7332e323f35d75e113be11fd 1670420 libssl3_3.0.14-1~deb12u1_armhf.deb 70d14d5b6b7b10fc0576918cebfb91ec8132cd3ce79838dfcb88b3325cfe3904 661012 openssl-dbgsym_3.0.14-1~deb12u1_armhf.deb 3df5ed849583da9eb74e247781e594941466b1d50edfdb8362754c36b774fd0a 7519 openssl_3.0.14-1~deb12u1_armhf-buildd.buildinfo 7ed3afdcde1d1704c04ed30d2ca3a84402d10ea61093e317071b0a70cdd5322e 1389124 openssl_3.0.14-1~deb12u1_armhf.deb Files: 4da35b6d6cf81555c34015084ced0c5f 1209528 debian-installer optional libcrypto3-udeb_3.0.14-1~deb12u1_armhf.udeb a1eac94e0bf3f767563537a077b81c24 2141516 libdevel optional libssl-dev_3.0.14-1~deb12u1_armhf.deb 51b03559fcc9281abf884c38d3a40aaa 4466792 debug optional libssl3-dbgsym_3.0.14-1~deb12u1_armhf.deb 9484b388d372a5d27aec290f2add847d 186020 debian-installer optional libssl3-udeb_3.0.14-1~deb12u1_armhf.udeb 5acd7b0cf71e2be8713aa0ba4de2542e 1670420 libs optional libssl3_3.0.14-1~deb12u1_armhf.deb a967330d474ff8a46230d66b90938823 661012 debug optional openssl-dbgsym_3.0.14-1~deb12u1_armhf.deb b07144766bdbe30f384e1448e6a853c5 7519 utils optional openssl_3.0.14-1~deb12u1_armhf-buildd.buildinfo 0d42273fd5a7242ae831bcf01c8438b1 1389124 utils optional openssl_3.0.14-1~deb12u1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmbvtGd+QaAE2Bi5fsFgOvjtRcdMFAmbHeFUACgkQsFgOvjtR cdMmwRAAisZBDG0ieRx8w70wFh4cje8eJkLszSXvgEg0tkE8OhR6EfHIAjWDZbd9 td+IFJc7S9gEIEQTFAuSqbF+FJpGh+W7ry5HWpRy2SyBRHiJvF1oUhRVPwtILLj9 XcGMB8Phe8bxavp0vttl/lFX+j5EXaB8lyZEv7wLz7ZPLwwPIJ9pqDZc9bika5kx SUqeUwqNHjkA8quedc08I8qggnf3Xz1qE9AQ1J2egdnGhB0TKyHMpnjnyYyIMGV7 EcB5K8+FWrjXqJ9zQ9BZx26DH7zRHGKQMA02XPNHKIML0+1XYNXI1X7lInvhLwy2 iTgxEmOCqKQRCFL1TmKn+7n/CbEmQ0pbNTgkEX4UiZVTte0sKaAaFKm4f3cIxq2i AwIwhsOST+RCRnfoGgM9FHaaKoRxmKwQAAD4Iz2/eUWv9/7FrA6GGoUfXwUEnAw1 jsKwufffM8KnxYm3+5PMIrH47c5ZJwNENhyrL+CuCqdrI5zDqMtS2Vj0acv/RphX Ai2Jq+nv7E01uxlJL3Hp5WUkkihtHbWUlJ7Ezv7zoE+xAdIKGaqFkN/jSoHf0O+2 zcVz6ImkFuXN2xPtRB436TQdQeB/0qQo9WWUIYJu/k+csXBEFkowPYuCu5VsJzRC 1PLvbYJOAV3TWUS3S1jhbjpxaWA0ZMwgeTkvD1e4TKOMf8lgO3E= =G7aw -----END PGP SIGNATURE-----