-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 15 Aug 2024 23:51:02 +0200 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: armel Version: 3.0.14-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Closes: 1068658 1071972 1072113 Changes: openssl (3.0.14-1~deb12u1) bookworm; urgency=medium . * Import 3.0.14 - CVE-2024-2511 (Unbounded memory growth with session handling in TLSv1.3) (Closes: #1068658). - CVE-2024-4603 (Excessive time spent checking DSA keys and parameters) (Closes: #1071972). - CVE-2024-4741 (Use After Free with SSL_free_buffers) (Closes: #1072113). Checksums-Sha1: 5d37856caa75b8bf4e22de9690d95c7c2a027a49 1177268 libcrypto3-udeb_3.0.14-1~deb12u1_armel.udeb f174343da4104145358e84ecd7dcb042083b3e86 2113700 libssl-dev_3.0.14-1~deb12u1_armel.deb 2096c0f718e68759b1142b5ab74b72d96d5e94c5 4369060 libssl3-dbgsym_3.0.14-1~deb12u1_armel.deb e489db229d9e5f5c37f9a3af39bd553c4b423534 186500 libssl3-udeb_3.0.14-1~deb12u1_armel.udeb 1ba272a6f620b2b6f03f454586062193d7e69ce0 1636076 libssl3_3.0.14-1~deb12u1_armel.deb 43921a9000503a411bb1a22f41bfc26470f32ee8 649220 openssl-dbgsym_3.0.14-1~deb12u1_armel.deb 35ecafeda798209556630f6478eae626b2da725b 7517 openssl_3.0.14-1~deb12u1_armel-buildd.buildinfo 66e83630450193b7f8201d53c5c7698300a77b1e 1383604 openssl_3.0.14-1~deb12u1_armel.deb Checksums-Sha256: aefcb8e265fe90783c7199175aee680f7844ccd4db533b8dfcef85b39c924ce9 1177268 libcrypto3-udeb_3.0.14-1~deb12u1_armel.udeb 969ce0469df2187fb94f6cbd55c90f39b16c6ef9e08507e9cdeb5b37a0e09c05 2113700 libssl-dev_3.0.14-1~deb12u1_armel.deb 54b9e7825b864b0cffef55071424f3e148d0d87fc5cc46106325302584b5ce78 4369060 libssl3-dbgsym_3.0.14-1~deb12u1_armel.deb 2f7ee99b8c92947efc44f23d9fe0e4429947daebcb959b3d4b240b8fd9f5f9f6 186500 libssl3-udeb_3.0.14-1~deb12u1_armel.udeb ed23f036265f82923972b1c3ed62fe05c717f3ac2e1b25f84af3dd6fb7f800bc 1636076 libssl3_3.0.14-1~deb12u1_armel.deb bb8bfa84171b4d3b5dfcdee67a43fe25a15a552cf479c5e5eaff8c9c7d323e83 649220 openssl-dbgsym_3.0.14-1~deb12u1_armel.deb 875302497054ffca390711a8344e804eb3570a78b3164440cbf106fe592ffcdb 7517 openssl_3.0.14-1~deb12u1_armel-buildd.buildinfo a2d4603818589464fde106a84921dd5c289eb69d6c5c7702c391c1841ff3cab6 1383604 openssl_3.0.14-1~deb12u1_armel.deb Files: c9bb9c46a9160fafdbad1f6eb291ce9e 1177268 debian-installer optional libcrypto3-udeb_3.0.14-1~deb12u1_armel.udeb 0f8954263451ba09559889fe6e29062b 2113700 libdevel optional libssl-dev_3.0.14-1~deb12u1_armel.deb 9a1219e53179d47c4ae229063e70b15b 4369060 debug optional libssl3-dbgsym_3.0.14-1~deb12u1_armel.deb c02214af95b2099d21281c5252148485 186500 debian-installer optional libssl3-udeb_3.0.14-1~deb12u1_armel.udeb 7a478ab134cc60006c89f0702d8615dd 1636076 libs optional libssl3_3.0.14-1~deb12u1_armel.deb df7a30bc32f2168aed4857e2754e2e63 649220 debug optional openssl-dbgsym_3.0.14-1~deb12u1_armel.deb 036c8f27be3558ecc1fa14a6ec76b67b 7517 utils optional openssl_3.0.14-1~deb12u1_armel-buildd.buildinfo 8b21d39cde8a2dc6e124afa470d15ca2 1383604 utils optional openssl_3.0.14-1~deb12u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEw2TRpv7HYIvK+TsIbEMdCP/rlD8FAmbHc/EACgkQbEMdCP/r lD+7JxAAtsFe0ZIIR21fEx6TMwqv9xI59aOIzUdht1LMoo54NMXOjYR+1mUEylaI FRxihZE2hDYv+yT4OeFGuO4puj2YdcKrm8l0utZM9a+GYONCAGIwuWl3/l0y5e2Y rZcbSVXDcGpsNyiHJcHR7bdgIRWb/XPMDOfygxVfvM49giO38CuMnqZJQBHzIZvR JMxYxH8DUpfUeF4/ZlAd7ZQT1JjFg6dVdlJFFPsClvBc7Mf+7WqwI7f/xr8Nebc3 PfqlWPf7BeOz950zjWFRGr1vFKOf+xfBRrIA1RFlOy2pmgIVVWVzomc6Q2TQUQN7 TxjRMcfs/XQIGfx5FESEL4l04MBsPGmnUedHfbbaKEakiDmi2p/TSmhak0ImU5O+ d7eofZ9hJxZFuBHil5ur4OHhwFvUIdxuvZ7IxW78A4cb2xcHE2bieqxxyr/ULuvW w30cLnTmbmGMO06FZpHDvIzGggD9dd3m72Cvl+23gdSfHTrkj6rVYd/mhKHLpc1e crPHSM0NsUqP3fynWHv7IYoaTi7Oqagm4Ia2t459pCTGwOqXHBHmi23LA+5UbYj9 o20ryzc3ENTJ0am1NSgnTdyuvSVMaGPOcTOn9OfPCCaoSg+4fiDv/ImGG3paftNF CjjsKJNXBFXYgPjePO9HW1ne31IJVu0Odmai0RKL2fP/SdNm234= =G6Bq -----END PGP SIGNATURE-----