-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 03 Mar 2024 10:47:43 +0100 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: ppc64el Version: 3.0.13-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Closes: 1055473 1060347 1060858 1061582 Changes: openssl (3.0.13-1~deb12u1) bookworm; urgency=medium . * Import 3.0.13 - CVE-2023-5678 (Fix excessive time spent in DH check / generation with large Q parameter value) (Closes: #1055473). - CVE-2023-6129 (POLY1305 MAC implementation corrupts vector registers on PowerPC) (Closes: #1060347). - CVE-2023-6237 (Excessive time spent checking invalid RSA public keys) (Closes: #1060858) - CVE-2024-0727 (PKCS12 Decoding crashes) (Closes: #1061582). Checksums-Sha1: 4040bf26605907a03d50dd43cb137b288c751ad5 1526880 libcrypto3-udeb_3.0.13-1~deb12u1_ppc64el.udeb c24ba58921d186afa719610665e8b0613e398bc4 2526552 libssl-dev_3.0.13-1~deb12u1_ppc64el.deb e35047b5b7b1623c653b28a514d4f0653a9f3bfe 4624464 libssl3-dbgsym_3.0.13-1~deb12u1_ppc64el.deb 8a7fee953742e42b182945e51078643a897b798b 240000 libssl3-udeb_3.0.13-1~deb12u1_ppc64el.udeb 2a2ef1f749a11bb542c1ac21d059f4f5d0e9c6c0 2034832 libssl3_3.0.13-1~deb12u1_ppc64el.deb ca9b34eba8947e4e52115545ac4d02b39195eb75 695956 openssl-dbgsym_3.0.13-1~deb12u1_ppc64el.deb 3b2a0ac9442de6be9300daf603624da6ddea8fb6 7617 openssl_3.0.13-1~deb12u1_ppc64el-buildd.buildinfo 8001552175a051ea291bc142ed2b07e7cd1e6409 1415304 openssl_3.0.13-1~deb12u1_ppc64el.deb Checksums-Sha256: f1dc50d90dcb112de6885dace37dc799d9c5ccfcabd27622fc20b42440dcb34b 1526880 libcrypto3-udeb_3.0.13-1~deb12u1_ppc64el.udeb 8c6192bbd55505dff0a91ef39158e7b5e0bad054f9c6dc8936813d5a7ae74a96 2526552 libssl-dev_3.0.13-1~deb12u1_ppc64el.deb a3287eecc3c25f5bf86cc76588a7764ca582bae5924fc6b646326f076a254d53 4624464 libssl3-dbgsym_3.0.13-1~deb12u1_ppc64el.deb 1693abc39aff36b0d1eadaac26953038f8daf7087f5878118b2790b80f19fbc3 240000 libssl3-udeb_3.0.13-1~deb12u1_ppc64el.udeb 9bdcb57976f750908e03d06bc07eded462625467dab301160efed8a7c3eb65d3 2034832 libssl3_3.0.13-1~deb12u1_ppc64el.deb 1c766668018415a8255335be3a321bf1f6489651f7ace61dab103d325815c154 695956 openssl-dbgsym_3.0.13-1~deb12u1_ppc64el.deb 4d989427df7afc6c0e23f3607ed5c98ff751a8d340ef132c8ac2b1ff53f311cf 7617 openssl_3.0.13-1~deb12u1_ppc64el-buildd.buildinfo 18e8942cf0eb42f8bb08d276eefe740b27710a96b193691fd91962932807968b 1415304 openssl_3.0.13-1~deb12u1_ppc64el.deb Files: cdd794e25316bf57c1a322524894c6b1 1526880 debian-installer optional libcrypto3-udeb_3.0.13-1~deb12u1_ppc64el.udeb 869781d0807e561a296a0a9e8c8a4305 2526552 libdevel optional libssl-dev_3.0.13-1~deb12u1_ppc64el.deb 8b7790e9f8770ca5f7ed8e63e502ef7f 4624464 debug optional libssl3-dbgsym_3.0.13-1~deb12u1_ppc64el.deb 251494e30917bda3f66ef1a1ee78cc57 240000 debian-installer optional libssl3-udeb_3.0.13-1~deb12u1_ppc64el.udeb 238646910647cd5e680257ab061062cc 2034832 libs optional libssl3_3.0.13-1~deb12u1_ppc64el.deb dafe15665b96e63483ddf43b7c70a296 695956 debug optional openssl-dbgsym_3.0.13-1~deb12u1_ppc64el.deb 2ab6c3c1ee19227a2ca0e201401cfc62 7617 utils optional openssl_3.0.13-1~deb12u1_ppc64el-buildd.buildinfo d2138d098eaeeb1060f5b4eb7f4bb391 1415304 utils optional openssl_3.0.13-1~deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5hbnFkJlczvLwwS0Y7DdE4sWZ/UFAmYA71EACgkQY7DdE4sW Z/XLOA//Xg3WD8RsmMn7j43etbCAj6TMv/eXsiIlRxZRfeUzEOlzxXiaB98Rwhq7 FZ4BgmvLZLvHlPTVSTjwWMKJd4XM6BBaDwfe5+xYXeh3QjxxZAvN2s56xNhalEMa jZR9JWImIT1MO4rhZRRPa6OWqgZHbEc1a7kV/TFaM0tuzqEyA1QKGqJSzMvgdJJg pJ8VV1ibevAMY22pEfqv9b48h+4S8Ujf050z7L4FNt9OLEEFIJMzSe/7HbJwDCbS qkPdt+nHQCFS/BkbGFbSBwzIbMs0KOsH2m6xp+I1vVGtZBlDf+NGLf4TIM+ehFm9 9TkRhYIEPtdoKu7CuldbZ9DC8I95irnm0eAfwAsZ2+vt91Cl4NVRdgAQd3wi6Dpk LsRIWh+y7JGzeCe4QHdho3VxbFr4ZPjtltBs124dBNurKS+s1uE/lveKl4iehVI8 5OUm/GBoozQdIAdPhAZDDlYLNuhBpXxMXGX12urZAbNJe2nXgHWzO9xYP7WhfHvR d1s8e3AWyK+GKj3SgY3aBrhZ/qfG6oOftRF5hBPm7ktyhVTlNEzD8nZ01ROe3DHN kr0wkVkqaz7RwUqBPp7dQpr3VhEd5YfhEM2PM2AHWaZ8TVxma7kxmLYa5cfnHymT I1FQIMs/8oOrty8F9ATRmk5HQ0BaN75pUpjWEsa6Hq/G1Sj3crg= =S8vU -----END PGP SIGNATURE-----