Format: 1.8 Date: Wed, 24 May 2023 13:12:55 -0400 Source: openssl Binary: libssl-dev libssl3 openssl Built-For-Profiles: noudeb Architecture: i386 i386_translations Version: 3.0.2-0ubuntu1.10 Distribution: jammy Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.0.2-0ubuntu1.10) jammy-security; urgency=medium . * SECURITY UPDATE: DoS in AES-XTS cipher decryption - debian/patches/CVE-2023-1255.patch: avoid buffer overrread in crypto/aes/asm/aesv8-armx.pl. - CVE-2023-1255 * SECURITY UPDATE: Possible DoS translating ASN.1 object identifiers - debian/patches/CVE-2023-2650.patch: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt will translate in crypto/objects/obj_dat.c. - CVE-2023-2650 * Replace CVE-2022-4304 fix with improved version - debian/patches/CVE-2022-4304.patch: use alternative fix in crypto/bn/bn_asm.c, crypto/bn/bn_blind.c, crypto/bn/bn_lib.c, crypto/bn/bn_local.h, crypto/rsa/rsa_ossl.c. Checksums-Sha1: fe67add7683ccea04aed95e6c678eebdf7e6ffd5 2441716 libssl-dev_3.0.2-0ubuntu1.10_i386.deb 55cd5df1cb863817807ce6b3195f8b475a4c6205 3705426 libssl3-dbgsym_3.0.2-0ubuntu1.10_i386.ddeb fbdfd94a756668f92f162029799aa43cd253f1e9 1941792 libssl3_3.0.2-0ubuntu1.10_i386.deb 0c009d88cbe194624d20c3081e89b0fd5f1d4d12 608092 openssl-dbgsym_3.0.2-0ubuntu1.10_i386.ddeb a6032db112aaba08008ef538941535cff00010c2 7258 openssl_3.0.2-0ubuntu1.10_i386.buildinfo 1c8bd8337358a5ded6d41f11f93d16c72914ee1f 1189386 openssl_3.0.2-0ubuntu1.10_i386.deb 66bfe12ce5e1863031f8e7066de6773ba24d2880 27748 openssl_3.0.2-0ubuntu1.10_i386_translations.tar.gz Checksums-Sha256: 6e2879dcc061e63b745287d57a2cb5f9f50925354534fa88a1eb99f6b6541ef6 2441716 libssl-dev_3.0.2-0ubuntu1.10_i386.deb 75ad07b7f36b2c7698c5a36073373f9b171c3deb0ff7de45511bda286835f6df 3705426 libssl3-dbgsym_3.0.2-0ubuntu1.10_i386.ddeb 8253823330620a270ca2bbbd5b5f472ec24d6a16da2d03b0d6a2ed179b30a24b 1941792 libssl3_3.0.2-0ubuntu1.10_i386.deb e4edcf861b1148c02ba4b1a752f58d61e77cb1577deb3c3322c00da4ce54a791 608092 openssl-dbgsym_3.0.2-0ubuntu1.10_i386.ddeb 81be8dbea8afbdc452ecc09bfe8d3757bee4201c912bfb7eab02f0cc7f9b8b04 7258 openssl_3.0.2-0ubuntu1.10_i386.buildinfo 4e6352f2b3307615decd1839c9f160ea11c4b673f0f6fd973c166204bd4e34eb 1189386 openssl_3.0.2-0ubuntu1.10_i386.deb 7590266fcbfd2ae9a08b19122bf6903ff0f446d7c47dc8be3eda9ab3e438252f 27748 openssl_3.0.2-0ubuntu1.10_i386_translations.tar.gz Files: 309c10bec7abc5b329b804a0deaae704 2441716 libdevel optional libssl-dev_3.0.2-0ubuntu1.10_i386.deb 2d9c434b6315c92ca1996d293c372546 3705426 debug optional libssl3-dbgsym_3.0.2-0ubuntu1.10_i386.ddeb 12d642aa3933fd98f0b782c84ce79c32 1941792 libs optional libssl3_3.0.2-0ubuntu1.10_i386.deb 0ac70849edfcc7353c4b9c6af9031720 608092 debug optional openssl-dbgsym_3.0.2-0ubuntu1.10_i386.ddeb b04ec63b79f2289f9c7a4e3acd0879c7 7258 utils optional openssl_3.0.2-0ubuntu1.10_i386.buildinfo 02aba83395b8f8f04995e5da52618eeb 1189386 utils optional openssl_3.0.2-0ubuntu1.10_i386.deb f4b67b1f72a0c07c9abdcb37156ef803 27748 raw-translations - openssl_3.0.2-0ubuntu1.10_i386_translations.tar.gz Original-Maintainer: Debian OpenSSL Team