-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 27 Sep 2019 21:46:29 +0200 Source: openssl Architecture: source Version: 1.1.0l-1~deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Changes: openssl (1.1.0l-1~deb9u1) stretch-security; urgency=medium . * Import 1.1.0l - CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP construction). - CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey). Checksums-Sha1: 53f08b7db5d52f0be509f843187bdad2c439b2f5 2437 openssl_1.1.0l-1~deb9u1.dsc 6e3507b29e2630f56023887d1f7d7ba1f584819b 5294857 openssl_1.1.0l.orig.tar.gz 88423fabe5282f7c854b0b7b1f095f620489df44 488 openssl_1.1.0l.orig.tar.gz.asc fa6ac79e0d9cc8a5ca97313b027acfec5b13e007 72100 openssl_1.1.0l-1~deb9u1.debian.tar.xz Checksums-Sha256: 9ae8fb3e89110ad3c75ba6a52b8f40cc5419b56f31c5c8b6f6aca0949cd90ea7 2437 openssl_1.1.0l-1~deb9u1.dsc 74a2f756c64fd7386a29184dc0344f4831192d61dc2481a93a4c5dd727f41148 5294857 openssl_1.1.0l.orig.tar.gz afc83de9f9f1ef5f79ab8a31bbdeb26f9ac9a07cfdab7628a773267d31f85e42 488 openssl_1.1.0l.orig.tar.gz.asc 78290d8a50219fe9c1c5676084a5567b23aff12f701bcd975e4c0d32264d5116 72100 openssl_1.1.0l-1~deb9u1.debian.tar.xz Files: dcae1d67b91a35a76e6ab4a25cd0177a 2437 utils optional openssl_1.1.0l-1~deb9u1.dsc 48278a48ec9bedb84565f7e741612fb4 5294857 utils optional openssl_1.1.0l.orig.tar.gz 179b104e0c1998557fa8433e1c10258c 488 utils optional openssl_1.1.0l.orig.tar.gz.asc 0b14140e764c86796a7f3b4efc84b0ff 72100 utils optional openssl_1.1.0l-1~deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAl2OdZ4ACgkQBWQfF1cS +lsoSgv/Whpt9P/mKic5AaC8cMd3qu9iM0PreTQgASCe8PZB50FKX8swEATz/rCY H2fThnqdYLAUunnqGZIJXd2SK5VBRZ/4lc81qIkQCj60YBoaJA1zOVBoqQlvHJ8I QdBgHp3LVao1uKyEDsyz60UF2oJjfDV27RDjhxEj8Y5EwuCi0FzVC4dwLGi5k4Gi /0GLfDukpYqNL/lP63Nqb73IgO0MaEa5ZjOehzLBvr44U30e3ZlUok9LLVnPA8tx WCcG7lqQ0EiuC/aQOh7XK/hMMNdZpgEmTHQABMMxY9tRIx3u3RitgAIEFxB4xgh7 rbZwgcBUQQmU47nsdmjgqzOdmgYX9c7w4KMiG0Flb6HxZrqOCvrmj1yPKo+R1jQB 9gK5XqJHsoJnRHMNr6/kUdwQKQJpZoj1KFU0vewF0ZnA7X3SwYDVP5bOGYgyOSw0 Omie3N5ef27pZHDRFeDWv43vNiojLPj00IZadVHBA7TaW4RdEXlmm05qvENHAQKS fGjMkoXb =m/Fv -----END PGP SIGNATURE-----