Format: 1.8 Date: Mon, 29 Feb 2016 08:01:48 -0500 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: powerpc powerpc_translations Version: 1.0.1-4ubuntu5.35 Distribution: precise Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libcrypto1.0.0-udeb - crypto shared library - udeb (udeb) libssl-dev - SSL development libraries, header files and documentation libssl-doc - SSL development documentation documentation libssl1.0.0 - SSL shared libraries libssl1.0.0-dbg - Symbol tables for libssl and libcrypto libssl1.0.0-udeb - ssl shared library - udeb (udeb) openssl - Secure Socket Layer (SSL) binary and related cryptographic tools Launchpad-Bugs-Fixed: 1550643 Changes: openssl (1.0.1-4ubuntu5.35) precise-security; urgency=medium . * SECURITY UPDATE: side channel attack on modular exponentiation - debian/patches/CVE-2016-0702.patch: use constant-time calculations in crypto/bn/asm/x86_64-mont5.pl, crypto/bn/bn_exp.c, crypto/perlasm/x86_64-xlate.pl, crypto/constant_time_locl.h. - CVE-2016-0702 * SECURITY UPDATE: double-free in DSA code - debian/patches/CVE-2016-0705.patch: fix double-free in crypto/dsa/dsa_ameth.c. - CVE-2016-0705 * SECURITY UPDATE: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption - debian/patches/CVE-2016-0797.patch: prevent overflow in crypto/bn/bn_print.c, crypto/bn/bn.h. - CVE-2016-0797 * SECURITY UPDATE: memory leak in SRP database lookups - debian/patches/CVE-2016-0798.patch: disable SRP fake user seed and introduce new SRP_VBASE_get1_by_user function that handled seed properly in apps/s_server.c, crypto/srp/srp.h, crypto/srp/srp_vfy.c, util/libeay.num, openssl.ld. - CVE-2016-0798 * SECURITY UPDATE: memory issues in BIO_*printf functions - debian/patches/CVE-2016-0799.patch: prevent overflow in crypto/bio/b_print.c. - CVE-2016-0799 * debian/patches/preserve_digests_for_sni.patch: preserve negotiated digests for SNI when SSL_set_SSL_CTX is called in ssl/ssl_lib.c. (LP: #1550643) Checksums-Sha1: d97173ffd718038f30f1b66d0604dc0dddf641da 522090 openssl_1.0.1-4ubuntu5.35_powerpc.deb 33de0bf1511954e9ea8129cdb571ab953756313d 961420 libssl1.0.0_1.0.1-4ubuntu5.35_powerpc.deb ed8b5bec1a8b14a2fa26b7716ebe6ef22db61cf4 700226 libcrypto1.0.0-udeb_1.0.1-4ubuntu5.35_powerpc.udeb 9b35976aa737f4012c160e362dc7569e6ad3e28f 144954 libssl1.0.0-udeb_1.0.1-4ubuntu5.35_powerpc.udeb f78e7316231c67006fbb6ef8c157b569dba49ef2 1457320 libssl-dev_1.0.1-4ubuntu5.35_powerpc.deb c618e0f7d03e2386b1c55aab16edd77257593dd7 2216258 libssl1.0.0-dbg_1.0.1-4ubuntu5.35_powerpc.deb 3223412014e51bd1e6f2492f82f3989f5414b660 259012 openssl-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb d84e77db821314a2a56fac2aa4c1d475db5a68e7 1300136 libssl1.0.0-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb 35e99bec744527febe43bcc66549d49918131474 985462 libcrypto1.0.0-udeb-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb 4f12cc8c18a70ec5c9fd78a3f1eafce29e56bf5c 209540 libssl1.0.0-udeb-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb b32ea7f6ed37e4cb5f7b279109d4d3734792bf70 19014 openssl_1.0.1-4ubuntu5.35_powerpc_translations.tar.gz Checksums-Sha256: b3b8fde540ed83b37c6f23b846c4ca8332c06d6f406110505d40ce800de7bcab 522090 openssl_1.0.1-4ubuntu5.35_powerpc.deb 6621f5d370c752b4eb787a4904ab7de9d0a74dc4ce3d7c12b8a66d461de5fa40 961420 libssl1.0.0_1.0.1-4ubuntu5.35_powerpc.deb 1d22efda477474f1fd9bae3b246f158233a35aa6d83d2c1ffe4b5ea6d4cad99d 700226 libcrypto1.0.0-udeb_1.0.1-4ubuntu5.35_powerpc.udeb c201db3d618b0609f10194476fb5fc23022c4980415779c04274ea6ae9339c25 144954 libssl1.0.0-udeb_1.0.1-4ubuntu5.35_powerpc.udeb 17ac695a4da2ecf078a0432683c4b39fe293cbce2e4e5af79537ddb2bdb4a9a5 1457320 libssl-dev_1.0.1-4ubuntu5.35_powerpc.deb 97b99f8c6cb7caa9d476975de2db2a4b40473916d8f18ceb6ba256ff25639472 2216258 libssl1.0.0-dbg_1.0.1-4ubuntu5.35_powerpc.deb d1ed15ff261d753b851d3ae7c5573c23c37ded0124e94de6915edd4d432f4eff 259012 openssl-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb 9a343adf63330be08004b9544d271a4cd8ffe0d68d50da89ba9aa81a32d2eb72 1300136 libssl1.0.0-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb 6ff9802fb3a185ef1332f8ffd5e24a0081a12b6b346c1bec0d07ab9ce4ce4e91 985462 libcrypto1.0.0-udeb-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb 87f6c89fb147833bfb534d75f53906bfb174276b3c82db25d69e2775964ca8d5 209540 libssl1.0.0-udeb-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb b45184ea8d2b1a5a61154a8b7552b4782449f4939fa656abac36cc7e69604783 19014 openssl_1.0.1-4ubuntu5.35_powerpc_translations.tar.gz Files: 51422e0f91b707db43655dc46249d0a4 522090 utils optional openssl_1.0.1-4ubuntu5.35_powerpc.deb f34ac7947b96e1901d38c4f1be3b7138 961420 libs important libssl1.0.0_1.0.1-4ubuntu5.35_powerpc.deb b9af272c4f01edefd458134f6a582f46 700226 debian-installer optional libcrypto1.0.0-udeb_1.0.1-4ubuntu5.35_powerpc.udeb 07631855feec02f3362ca5419988ad2b 144954 debian-installer optional libssl1.0.0-udeb_1.0.1-4ubuntu5.35_powerpc.udeb c6c65e3733fea0c6e104613d59f97b80 1457320 libdevel optional libssl-dev_1.0.1-4ubuntu5.35_powerpc.deb 8042baa9556a0266a2ab58aa831a6202 2216258 debug extra libssl1.0.0-dbg_1.0.1-4ubuntu5.35_powerpc.deb 0fa97bd21464efff8b4f07130124ba23 259012 utils extra openssl-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb c479538f08daf675b514c5e45d9c6f58 1300136 libs extra libssl1.0.0-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb 54bfced9676ef1a25567c881ba64a0be 985462 debian-installer extra libcrypto1.0.0-udeb-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb 7d418bd31333dae25e1a51fa3c44501d 209540 debian-installer extra libssl1.0.0-udeb-dbgsym_1.0.1-4ubuntu5.35_powerpc.ddeb f9eaa313d2326f53c8863e6708bfbc0e 19014 raw-translations - openssl_1.0.1-4ubuntu5.35_powerpc_translations.tar.gz Original-Maintainer: Debian OpenSSL Team Package-Type: udeb