Format: 1.8
Date: Fri, 09 Jan 2015 09:47:17 -0500
Source: openssl
Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg
Architecture: powerpc powerpc_translations
Version: 1.0.1f-1ubuntu9.1
Distribution: utopic
Urgency: medium
Maintainer: Ubuntu/powerpc Build Daemon <buildd@sagari.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl-doc - Secure Sockets Layer toolkit - development documentation
 libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries
 libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information
 libssl1.0.0-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (1.0.1f-1ubuntu9.1) utopic-security; urgency=medium
 .
   * SECURITY UPDATE: denial of service via unexpected handshake when
     no-ssl3 build option is used (not the default)
     - debian/patches/CVE-2014-3569.patch: keep the old method for now in
       ssl/s23_srvr.c.
     - CVE-2014-3569
   * SECURITY UPDATE: bignum squaring may produce incorrect results
     - debian/patches/CVE-2014-3570.patch: fix bignum logic in
       crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c,
       crypto/bn/bn_asm.c, removed crypto/bn/asm/mips3.s, added test to
       crypto/bn/bntest.c.
     - CVE-2014-3570
   * SECURITY UPDATE: DTLS segmentation fault in dtls1_get_record
     - debian/patches/CVE-2014-3571-1.patch: fix crash in ssl/d1_pkt.c,
       ssl/s3_pkt.c.
     - debian/patches/CVE-2014-3571-2.patch: make code more obvious in
       ssl/d1_pkt.c.
     - CVE-2014-3571
   * SECURITY UPDATE: ECDHE silently downgrades to ECDH [Client]
     - debian/patches/CVE-2014-3572.patch: don't skip server key exchange in
       ssl/s3_clnt.c.
     - CVE-2014-3572
   * SECURITY UPDATE: certificate fingerprints can be modified
     - debian/patches/CVE-2014-8275.patch: fix various fingerprint issues in
       crypto/asn1/a_bitstr.c, crypto/asn1/a_type.c, crypto/asn1/a_verify.c,
       crypto/asn1/asn1.h, crypto/asn1/asn1_err.c, crypto/asn1/x_algor.c,
       crypto/dsa/dsa_asn1.c, crypto/ecdsa/ecs_vrf.c, crypto/x509/x509.h,
       crypto/x509/x_all.c.
     - CVE-2014-8275
   * SECURITY UPDATE: RSA silently downgrades to EXPORT_RSA [Client]
     - debian/patches/CVE-2015-0204.patch: only allow ephemeral RSA keys in
       export ciphersuites in ssl/d1_srvr.c, ssl/s3_clnt.c, ssl/s3_srvr.c,
       ssl/ssl.h, adjust documentation in doc/ssl/SSL_CTX_set_options.pod,
       doc/ssl/SSL_CTX_set_tmp_rsa_callback.pod.
     - CVE-2015-0204
   * SECURITY UPDATE: DH client certificates accepted without verification
     - debian/patches/CVE-2015-0205.patch: prevent use of DH client
       certificates without sending certificate verify message in
       ssl/s3_srvr.c.
     - CVE-2015-0205
   * SECURITY UPDATE: DTLS memory leak in dtls1_buffer_record
     - debian/patches/CVE-2015-0206.patch: properly handle failures in
       ssl/d1_pkt.c.
     - CVE-2015-0206
Checksums-Sha1:
 7bf934c4a2d9bb91c91b1c9856adf72e0165d2e3 466560 openssl_1.0.1f-1ubuntu9.1_powerpc.deb
 a67131a28947d5b49484131a9ddfcb84e55d30f8 696120 libssl1.0.0_1.0.1f-1ubuntu9.1_powerpc.deb
 edfe67978ad0269e9e006649b806e9bbada08b25 506962 libcrypto1.0.0-udeb_1.0.1f-1ubuntu9.1_powerpc.udeb
 0f58e1f78a2f01dfc7555786dd53352d9778e0ee 106526 libssl1.0.0-udeb_1.0.1f-1ubuntu9.1_powerpc.udeb
 aef584b136c0e3258a4f983b0af1a35bdb93a5b7 946670 libssl-dev_1.0.1f-1ubuntu9.1_powerpc.deb
 86bdbbcfe902fa8e719cee2432ec12988bd1cbf0 2712124 libssl1.0.0-dbg_1.0.1f-1ubuntu9.1_powerpc.deb
 d581c7bb1e105e671362549844b02b8ea1fd51fe 20675 openssl_1.0.1f-1ubuntu9.1_powerpc_translations.tar.gz
Checksums-Sha256:
 d66ddb375bd0c4329c438ad403a99798f948afb7ffe2b3e072608be7667971a8 466560 openssl_1.0.1f-1ubuntu9.1_powerpc.deb
 4299f8194cc4d6feb34767247297704ef2f63871b7b08387d2b9f6a2cc4e03da 696120 libssl1.0.0_1.0.1f-1ubuntu9.1_powerpc.deb
 97360edddf7d0d457e468801289b790f5b143abc9ead0e230a5b5f6b89516b6e 506962 libcrypto1.0.0-udeb_1.0.1f-1ubuntu9.1_powerpc.udeb
 a82ea3ef0073853b4f7989dfae013987a14c3293f241d5582cb632b83d10d308 106526 libssl1.0.0-udeb_1.0.1f-1ubuntu9.1_powerpc.udeb
 964ea46a1773da4558f2330dc6ad4f093140880e4fa135a8509ea963a7298a6e 946670 libssl-dev_1.0.1f-1ubuntu9.1_powerpc.deb
 999a5c608aecc5a24304cdc7f6b610b7c37efb5aeb7afdfc7c5087ac6280c17e 2712124 libssl1.0.0-dbg_1.0.1f-1ubuntu9.1_powerpc.deb
 a5f81dfd431659fbd8fe6336878d37f98e0862be59fb01c6e868e71364a2bf24 20675 openssl_1.0.1f-1ubuntu9.1_powerpc_translations.tar.gz
Files:
 27ae59462cec71bdcf5d32a4ed0977ad 466560 utils optional openssl_1.0.1f-1ubuntu9.1_powerpc.deb
 797f060757c1a194385a773df12fe343 696120 libs important libssl1.0.0_1.0.1f-1ubuntu9.1_powerpc.deb
 6d3380474620d8bedc11b30eca4b54dc 506962 debian-installer optional libcrypto1.0.0-udeb_1.0.1f-1ubuntu9.1_powerpc.udeb
 f54daf2ecd4dbf7382177ff0ea3a2e87 106526 debian-installer optional libssl1.0.0-udeb_1.0.1f-1ubuntu9.1_powerpc.udeb
 beafba5d6879015957af0ff8ab0f95cd 946670 libdevel optional libssl-dev_1.0.1f-1ubuntu9.1_powerpc.deb
 87279ab36d422cbfbe3f40f583dab200 2712124 debug extra libssl1.0.0-dbg_1.0.1f-1ubuntu9.1_powerpc.deb
 587d461637268a2906cbc753d3ace204 20675 raw-translations - openssl_1.0.1f-1ubuntu9.1_powerpc_translations.tar.gz
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Package-Type: udeb