Format: 1.8
Date: Wed, 08 Feb 2012 16:06:24 -0800
Source: openssl
Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg
Architecture: all i386_translations i386
Version: 1.0.0e-2ubuntu4.2
Distribution: oneiric
Urgency: low
Maintainer: Ubuntu/i386 Build Daemon <buildd@zirconium.buildd>
Changed-By: Steve Beattie <sbeattie@ubuntu.com>
Description: 
 libcrypto1.0.0-udeb - crypto shared library - udeb (udeb)
 libssl-dev - SSL development libraries, header files and documentation
 libssl-doc - SSL development documentation documentation
 libssl1.0.0 - SSL shared libraries
 libssl1.0.0-dbg - Symbol tables for libssl and libcrypto
 libssl1.0.0-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Socket Layer (SSL) binary and related cryptographic tools
Changes: 
 openssl (1.0.0e-2ubuntu4.2) oneiric-security; urgency=low
 .
   * SECURITY UPDATE: DTLS plaintext recovery attack
     - debian/patches/CVE-2011-4108.patch: perform all computations
       before discarding messages
     - CVE-2011-4108
   * SECURITY UPDATE: SSL 3.0 block padding exposure
     - debian/patches/CVE-2011-4576.patch: clear bytes used for block
       padding of SSL 3.0 records.
     - CVE-2011-4576
   * SECURITY UPDATE: malformed RFC 3779 data denial of service attack
     - debian/patches/CVE-2011-4577.patch: prevent malformed RFC3779
       data from triggering an assertion failure
     - CVE-2011-4577
   * SECURITY UPDATE: Server Gated Cryptography (SGC) denial of service
     - debian/patches/CVE-2011-4619.patch: Only allow one SGC handshake
       restart for SSL/TLS.
     - CVE-2011-4619
   * SECURITY UPDATE: GOST block cipher denial of service
     - debian/patches/CVE-2012-0027.patch: check GOST parameters are
       not NULL
     - CVE-2012-0027
   * SECURITY UPDATE: fix for CVE-2011-4108 denial of service attack
     - debian/patches/CVE-2012-0050.patch: improve handling of DTLS MAC
     - CVE-2012-0050
Checksums-Sha1: 
 c14e703be531ee72881b305c6e9815d0ab387d2c 1032630 libssl-doc_1.0.0e-2ubuntu4.2_all.deb
 9233926ab222cff5b56d275cbf47bbabf10d02d5 19165 openssl_1.0.0e-2ubuntu4.2_i386_translations.tar.gz
 1a192c31061f2c651c0fb66b41c14f1cf1e4f0ce 509818 openssl_1.0.0e-2ubuntu4.2_i386.deb
 b0143a3502f1188d4503b7e93f7d614dad7139cb 974052 libssl1.0.0_1.0.0e-2ubuntu4.2_i386.deb
 03efad0af66c3ad95294d6c04524d5cf449e3635 709508 libcrypto1.0.0-udeb_1.0.0e-2ubuntu4.2_i386.udeb
 ec2f01e42c51116c1ff6821bbbc082558691db87 134744 libssl1.0.0-udeb_1.0.0e-2ubuntu4.2_i386.udeb
 605b24034362f82d42175d6dd0efd17867c07713 1398748 libssl-dev_1.0.0e-2ubuntu4.2_i386.deb
 bc919b8979de9632a8482f9a0c35e7d0ddf6e8b0 1953858 libssl1.0.0-dbg_1.0.0e-2ubuntu4.2_i386.deb
Checksums-Sha256: 
 86dec4368c28eb24c75e2a45725c0e6984199d4e13edc8e9b6214b705a5a71d0 1032630 libssl-doc_1.0.0e-2ubuntu4.2_all.deb
 dc8f038e02fa12dcc11984fe28d40a08af7ef28cf456765e1e30ef7e61bcb9eb 19165 openssl_1.0.0e-2ubuntu4.2_i386_translations.tar.gz
 1a91e4f8a50eba5198711f112c5600e5b8152c9b64392bda68e14e52c3ddfac3 509818 openssl_1.0.0e-2ubuntu4.2_i386.deb
 92ffd4bd34950336333ad91c5d3d6832e76a41c8cc319dd805dcddeb7fa3e3f9 974052 libssl1.0.0_1.0.0e-2ubuntu4.2_i386.deb
 312a2b8daee43a7f420561a4ed1289ad17e963572cbda893ca90f5660a4dbac3 709508 libcrypto1.0.0-udeb_1.0.0e-2ubuntu4.2_i386.udeb
 b051938644c91a248cc6a8fc2cba08aa27cc30d10d97d62ea711afadabd9cd82 134744 libssl1.0.0-udeb_1.0.0e-2ubuntu4.2_i386.udeb
 88e3d7a7fd57d62e84b857536d7df8986be130a1f5b992fb521c0e79d899a09d 1398748 libssl-dev_1.0.0e-2ubuntu4.2_i386.deb
 2b0614d87d23a5c0b48c4bf8fa3f33f4df267577e6c7524a931f144d4f8335ac 1953858 libssl1.0.0-dbg_1.0.0e-2ubuntu4.2_i386.deb
Files: 
 0ed86cf6e1e8b4ba271bad34c146c510 1032630 doc optional libssl-doc_1.0.0e-2ubuntu4.2_all.deb
 1204343c22d3fe775ede836f6ea53d26 19165 raw-translations - openssl_1.0.0e-2ubuntu4.2_i386_translations.tar.gz
 5df9195e4de101c34598947f46a6b084 509818 utils optional openssl_1.0.0e-2ubuntu4.2_i386.deb
 5edd67dfc294846a23d1537f083f75aa 974052 libs important libssl1.0.0_1.0.0e-2ubuntu4.2_i386.deb
 c6f9ee3ee1335b3e9ce5699f09890483 709508 debian-installer optional libcrypto1.0.0-udeb_1.0.0e-2ubuntu4.2_i386.udeb
 36037c66203418cf197727ba327ed8be 134744 debian-installer optional libssl1.0.0-udeb_1.0.0e-2ubuntu4.2_i386.udeb
 bc32c41c1b07ab42d8e571b44b1f0f01 1398748 libdevel optional libssl-dev_1.0.0e-2ubuntu4.2_i386.deb
 b25accabaca7310e9cffdce0b76c37b7 1953858 debug extra libssl1.0.0-dbg_1.0.0e-2ubuntu4.2_i386.deb
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Package-Type: udeb