-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Sep 2019 21:49:56 +0200
Source: openssl1.0
Architecture: source
Version: 1.0.2t-1~deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Changes:
openssl1.0 (1.0.2t-1~deb9u1) stretch-security; urgency=medium
.
* Import 1.0.2t
- CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP
construction).
- CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and
CMS_decrypt_set1_pkey).
Checksums-Sha1:
7f8983908801736010d5d791d2681a13bc9620dd 2383 openssl1.0_1.0.2t-1~deb9u1.dsc
8ac3fd379cf8c8ef570abb51ec52a88fd526f88a 5355422 openssl1.0_1.0.2t.orig.tar.gz
05b7feed3b62fc394690205f184e39cfcb171a8b 488 openssl1.0_1.0.2t.orig.tar.gz.asc
4408ece060071f167981d7c6f606869e78713b6b 94732 openssl1.0_1.0.2t-1~deb9u1.debian.tar.xz
Checksums-Sha256:
dfa5f8434bf6ca3c681077e8106d95e890df6ef124ffafe4d3e40d2e2785fde1 2383 openssl1.0_1.0.2t-1~deb9u1.dsc
14cb464efe7ac6b54799b34456bd69558a749a4931ecfd9cf9f71d7881cac7bc 5355422 openssl1.0_1.0.2t.orig.tar.gz
b202f0bf9c3114e1977becdb17263265cf40a6d37b263cb70f3d81d5b0512b1d 488 openssl1.0_1.0.2t.orig.tar.gz.asc
d2806222974f4b7ea2e84a65db619b4f1e6f3f76731e76789f17e1f62cdd71e2 94732 openssl1.0_1.0.2t-1~deb9u1.debian.tar.xz
Files:
82750805bda2cce69b3fde0005911b6f 2383 utils optional openssl1.0_1.0.2t-1~deb9u1.dsc
ef66581b80f06eae42f5268bc0b50c6d 5355422 utils optional openssl1.0_1.0.2t.orig.tar.gz
6c1853948ff116d74290bc9c20a9c22c 488 utils optional openssl1.0_1.0.2t.orig.tar.gz.asc
849559a16a39d6ff95e46ac088ea8604 94732 utils optional openssl1.0_1.0.2t-1~deb9u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAl2OdaUACgkQBWQfF1cS
+lsojQv8DHf8XN6KqpB3vpRW8EGLrCev89Q2k0mZAEwDMaCGQfHdyc/4Y5fLMSu9
guSp0pojlNZb/DqD8bzJRQqnd7xTo0rt51wt6SLiGspE+eUaSOI75v1MrtwloRWM
7RgCHRqmo5WyGaNKOzSlYwKgx30UTiv4U3KzHTm4kIzOGVqz7VLFojZFc5fYmUOj
LelWNFycM6inPM1DdAlpZaSaj9IQXCS3x6nNpQ4LPCmQmnB4lVMdgbsqw+hDd6Wb
SGEwMUdF2Jdv5HBiFDbEBSKujdhpq8PYaNJ0X3TfmU4NciV0h2sJnaA9jV6VRTOq
+EFeU32cXQBLLJ6y9uyrKb9cyc846vxuCmlOe2s0W2uAtlBwgY1BwlZxpSu+pBb3
bxQtpTOjEjzCW6siBGC88TAYAIDVOOh7cbSP6DhZhrGkl+76Q0/5jy3xDD1AvH0S
lxvsLj0gUkTa/PV6kwLunm0z/u4c6ez5bERuABT0LMAT5Jd05MKwGhKTG1YkByY6
Mw9Cn/qb
=CRxI
-----END PGP SIGNATURE-----
