Format: 1.8 Date: Wed, 08 Jan 2014 14:47:29 -0500 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: all i386_translations i386 Version: 1.0.1e-3ubuntu1.1 Distribution: saucy Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - crypto shared library - udeb (udeb) libssl-dev - SSL development libraries, header files and documentation libssl-doc - SSL development documentation documentation libssl1.0.0 - SSL shared libraries libssl1.0.0-dbg - Symbol tables for libssl and libcrypto libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Socket Layer (SSL) binary and related cryptographic tools Changes: openssl (1.0.1e-3ubuntu1.1) saucy-security; urgency=low . * SECURITY UPDATE: denial of service via invalid TLS handshake - debian/patches/CVE-2013-4353.patch: handle no new cipher setup in ssl/s3_both.c. - CVE-2013-4353 * SECURITY UPDATE: denial of service via incorrect data structure - debian/patches/CVE-2013-6449.patch: check for handshake digests in ssl/s3_both.c,ssl/s3_pkt.c,ssl/t1_enc.c, use proper version in ssl/s3_lib.c. - CVE-2013-6449 * SECURITY UPDATE: denial of service via DTLS retransmission - debian/patches/CVE-2013-6450.patch: fix DTLS retransmission in crypto/evp/digest.c,ssl/d1_both.c,ssl/s3_pkt.c,ssl/s3_srvr.c, ssl/ssl_locl.h,ssl/t1_enc.c. - CVE-2013-6450 * debian/patches/no_default_rdrand.patch: Don't use rdrand engine as default unless explicitly requested. Checksums-Sha1: ea37830f56685f42d94e5adb428e641972414dea 1035020 libssl-doc_1.0.1e-3ubuntu1.1_all.deb 4f3d070cfdd533aa4b167fd1251084a96b9f45bb 20354 openssl_1.0.1e-3ubuntu1.1_i386_translations.tar.gz ff24285d77ceb5a53aa33bd87f30bd5e2a0a1191 515864 openssl_1.0.1e-3ubuntu1.1_i386.deb 3391a54facab9755dbdf8a5021f886bd048666c7 989950 libssl1.0.0_1.0.1e-3ubuntu1.1_i386.deb 5268921f52c442ad5cbac3d53352c21aab0d809c 570654 libcrypto1.0.0-udeb_1.0.1e-3ubuntu1.1_i386.udeb 2e4cff120b1ce7f45640d5e99adf0584d898698e 121228 libssl1.0.0-udeb_1.0.1e-3ubuntu1.1_i386.udeb 059338ef7f24b8c75097352a2fbaeed9c1a28a41 1409372 libssl-dev_1.0.1e-3ubuntu1.1_i386.deb 98ca0e259d36f81d27f2b90f76be28c5cbff726c 2419334 libssl1.0.0-dbg_1.0.1e-3ubuntu1.1_i386.deb Checksums-Sha256: 0e2ba3114eb26637630250a3e59cdbbf87d6dc14b6a6fd5ab89bc089ca3af2b3 1035020 libssl-doc_1.0.1e-3ubuntu1.1_all.deb d3fc67842c0a769cb06478309bdbcf72105312341c175e98aa769fbd3770d13e 20354 openssl_1.0.1e-3ubuntu1.1_i386_translations.tar.gz ea5ac655c8fce76f5c8c925ab47ef480965d0deb79d94d32ca8b50d978d86820 515864 openssl_1.0.1e-3ubuntu1.1_i386.deb 1a8791138864352b6990407ce732cc108a77cbc6633f79486f21edece7d6a210 989950 libssl1.0.0_1.0.1e-3ubuntu1.1_i386.deb 6c70186ebf00fc66aaa51827de7685550d585892356291c2faed78a8b3f314bd 570654 libcrypto1.0.0-udeb_1.0.1e-3ubuntu1.1_i386.udeb dbbb54b63ebc9606485d696a15198e2db676d53c85fd4e905e60e3a03a5c30c5 121228 libssl1.0.0-udeb_1.0.1e-3ubuntu1.1_i386.udeb a21fb86b2168d4c4a29643099538a68ee69bc3f496ffa427a8f6f87e6f3a5ad5 1409372 libssl-dev_1.0.1e-3ubuntu1.1_i386.deb d2f70da89a08a4cdfed5b202c73ccd1d0bf650e347c51b62caa3ccd536a6acad 2419334 libssl1.0.0-dbg_1.0.1e-3ubuntu1.1_i386.deb Files: 7b87c33c417c0d48308981e68a3434c6 1035020 doc optional libssl-doc_1.0.1e-3ubuntu1.1_all.deb 6c7b7ef6a64ff805202befb1bd07c3c0 20354 raw-translations - openssl_1.0.1e-3ubuntu1.1_i386_translations.tar.gz 1dcafa543cd72144c23246346a86dfbc 515864 utils optional openssl_1.0.1e-3ubuntu1.1_i386.deb d96a4ce0a3d2ddd7196307fcaacea97b 989950 libs important libssl1.0.0_1.0.1e-3ubuntu1.1_i386.deb 9a1896abdaf88a33d14f23e318e72c24 570654 debian-installer optional libcrypto1.0.0-udeb_1.0.1e-3ubuntu1.1_i386.udeb 7238a55eea470a1301e926cee583a7b2 121228 debian-installer optional libssl1.0.0-udeb_1.0.1e-3ubuntu1.1_i386.udeb e998ad06354cb70a9c95f2cf780b1545 1409372 libdevel optional libssl-dev_1.0.1e-3ubuntu1.1_i386.deb bb48858a147ff6f4916b84c3d7208bff 2419334 debug extra libssl1.0.0-dbg_1.0.1e-3ubuntu1.1_i386.deb Original-Maintainer: Debian OpenSSL Team Package-Type: udeb