Format: 1.8 Date: Wed, 15 Jun 2022 10:26:20 -0400 Source: openssl Binary: libssl-dev libssl3 openssl Built-For-Profiles: noudeb Architecture: i386 i386_translations Version: 3.0.2-0ubuntu1.5 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.0.2-0ubuntu1.5) jammy-security; urgency=medium . * SECURITY UPDATE: c_rehash script allows command injection - debian/patches/CVE-2022-1292.patch: switch to upstream patch, and apply it before c_rehash-compat.patch. - debian/patches/CVE-2022-2068-1.patch: fix file operations in tools/c_rehash.in. - debian/patches/CVE-2022-2068-2.patch: drop the issuer_name_hash= prefix from the CRL hash in tools/c_rehash.in. - debian/patches/c_rehash-compat.patch: updated patch to apply after the security updates. - CVE-2022-2068 Checksums-Sha1: 867ac8d30e53f5b05f8967cde13e6a93d3647587 2440490 libssl-dev_3.0.2-0ubuntu1.5_i386.deb ef46f3681773fdba16cfcf1a1ad6958b937b2bed 3701162 libssl3-dbgsym_3.0.2-0ubuntu1.5_i386.ddeb fc5329dd3d905cc4dcd921a2fc7361bae750abeb 1940780 libssl3_3.0.2-0ubuntu1.5_i386.deb 8d553cb8b8a409155c7e209ba6c2da2afd371770 608058 openssl-dbgsym_3.0.2-0ubuntu1.5_i386.ddeb a0bae22152fdfc232fbbe72bf412b80222d3d9e3 7059 openssl_3.0.2-0ubuntu1.5_i386.buildinfo 8baa7bbf1df3a4a6e3d59056eae088def4931aa1 1190666 openssl_3.0.2-0ubuntu1.5_i386.deb 1f185bd318587e57919b4f81456c85a1d3bb2164 27869 openssl_3.0.2-0ubuntu1.5_i386_translations.tar.gz Checksums-Sha256: c62e5a3b3cc99d1ee2d66ddab870bb730dea0390b4ae9992448cf52bf6240228 2440490 libssl-dev_3.0.2-0ubuntu1.5_i386.deb a9a9551ed4418e4e8b0d5b2c8bdc342e073e67d5a8dc13a0abe23d77d376239f 3701162 libssl3-dbgsym_3.0.2-0ubuntu1.5_i386.ddeb 02778c77a446cc569fe86683820e391e1a2e07013217237b592037148a761ffd 1940780 libssl3_3.0.2-0ubuntu1.5_i386.deb 76947a9d794f7c2dfd90fd2d08812c66b6e6dc609807e0a428079e9f636a7f55 608058 openssl-dbgsym_3.0.2-0ubuntu1.5_i386.ddeb d5138beb04d0c141f3681579e6ad994c0abf59f6b13c34ed480aa4636284bafd 7059 openssl_3.0.2-0ubuntu1.5_i386.buildinfo 0a6daf91517d678664f028033854d4d5c7d7a4f27efee6885ae37c4152d6baa5 1190666 openssl_3.0.2-0ubuntu1.5_i386.deb 564c8a6fb9f4d3352ec255ea61e160e84813004665e348e69aaed59835b347a9 27869 openssl_3.0.2-0ubuntu1.5_i386_translations.tar.gz Files: 1b5034706fbca9087c5e132de0decde4 2440490 libdevel optional libssl-dev_3.0.2-0ubuntu1.5_i386.deb e06aa317c972f383e3ec07a1e01ce9f2 3701162 debug optional libssl3-dbgsym_3.0.2-0ubuntu1.5_i386.ddeb 219cd064e9b08839678277a9469c31da 1940780 libs optional libssl3_3.0.2-0ubuntu1.5_i386.deb 43336a48825f451042431fc23fe0fbfa 608058 debug optional openssl-dbgsym_3.0.2-0ubuntu1.5_i386.ddeb 5d3eb83b10fe2fbb1890748c42f088a4 7059 utils optional openssl_3.0.2-0ubuntu1.5_i386.buildinfo 1f2f1d66c4f138882d3c792bea59ad03 1190666 utils optional openssl_3.0.2-0ubuntu1.5_i386.deb 96bb8579916a217fca8fbee994b3f134 27869 raw-translations - openssl_3.0.2-0ubuntu1.5_i386_translations.tar.gz Original-Maintainer: Debian OpenSSL Team