Format: 1.8
Date: Wed, 24 Apr 2024 11:46:50 -0300
Source: cryptojs
Binary: libjs-cryptojs
Architecture: all
Version: 3.1.2+dfsg-2ubuntu0.20.04.1
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy02-amd64-115.buildd>
Changed-By: Federico Quattrin <federico.quattrin@canonical.com>
Description:
 libjs-cryptojs - collection of cryptographic algorithms implemented in JavaScript
Changes:
 cryptojs (3.1.2+dfsg-2ubuntu0.20.04.1) focal-security; urgency=medium
 .
   * SECURITY UPDATE: weak hash algorithm (SHA1) and iterations (1) in PBKDF2.
     - debian/build: include SHA256 as dependency instead of SHA1.
     - debian/patches/CVE-2023-46233.patch: modify default PBKDF2 configurations
       to use SHA256 and 250k iterations.
     - CVE-2023-46233.
Checksums-Sha1:
 d175b5db1ba4736b82b589910fc097c307b9c070 6894 cryptojs_3.1.2+dfsg-2ubuntu0.20.04.1_amd64.buildinfo
 7b34b405ab181c826c77efd57f2d49aac50eadd9 51804 libjs-cryptojs_3.1.2+dfsg-2ubuntu0.20.04.1_all.deb
Checksums-Sha256:
 7acbbb62f589274b810704eea7bcd33dd976153652aa072e78ac94451c03b2d2 6894 cryptojs_3.1.2+dfsg-2ubuntu0.20.04.1_amd64.buildinfo
 b0efc5ed4153887fb58fd2bf397380623253671ba233dcd829891b3c4ad56adb 51804 libjs-cryptojs_3.1.2+dfsg-2ubuntu0.20.04.1_all.deb
Files:
 acd70e932f6230b3a69d2680f1c168ca 6894 web extra cryptojs_3.1.2+dfsg-2ubuntu0.20.04.1_amd64.buildinfo
 74aac83a93926bf3ef1fed6e684f2dab 51804 web extra libjs-cryptojs_3.1.2+dfsg-2ubuntu0.20.04.1_all.deb
Original-Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>