-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 25 Sep 2020 17:14:36 -0400 Source: openssl1.0 Binary: libssl1.0.2 libssl1.0-dev libcrypto1.0.2-udeb libssl1.0.2-udeb Architecture: source Version: 1.0.2u-1~deb9u2 Distribution: stretch-security Urgency: high Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> Changed-By: Roberto C. Sanchez <roberto@debian.org> Description: libcrypto1.0.2-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl1.0-dev - Secure Sockets Layer toolkit - development files libssl1.0.2 - Secure Sockets Layer toolkit - shared libraries libssl1.0.2-udeb - ssl shared library - udeb (udeb) Changes: openssl1.0 (1.0.2u-1~deb9u2) stretch-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2020-1968: disable ciphers that reuse the DH secret across multiple TLS connections in ssl/s3_lib.c. Patch by Marc Deslauriers. Checksums-Sha1: cd565abe5aab3c9a9bed9dac7eb656307fc944a7 2301 openssl1.0_1.0.2u-1~deb9u2.dsc 424cb3e5f1e52d142b2aec28f537c3d37a8d27a2 95328 openssl1.0_1.0.2u-1~deb9u2.debian.tar.xz 9a37005224eb9d47db19f86e91aac2110c4838c0 7190 openssl1.0_1.0.2u-1~deb9u2_amd64.buildinfo Checksums-Sha256: dc6e3ba0885c093e1dc6f018c9ed3a78f274e8995a21e12e2c50659c1c085b9c 2301 openssl1.0_1.0.2u-1~deb9u2.dsc b2fa5e1cfc97c1b32d18fc90844e2dceccb198b757d193a01394a71ce7c876bf 95328 openssl1.0_1.0.2u-1~deb9u2.debian.tar.xz e4923ac65f0bed573f6b368cc309744ac93861a95275a785c7cb812158acef01 7190 openssl1.0_1.0.2u-1~deb9u2_amd64.buildinfo Files: c6010c401334e5020b70b3d3426d6099 2301 utils optional openssl1.0_1.0.2u-1~deb9u2.dsc 2a9e4d7f26112c0c391e57894ed4e707 95328 utils optional openssl1.0_1.0.2u-1~deb9u2.debian.tar.xz e873e07142f1273491e5ea350962c83d 7190 utils optional openssl1.0_1.0.2u-1~deb9u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEz9ERzDttUsU/BH8iLNd4Xt2nsg8FAl9uYHAACgkQLNd4Xt2n sg9R1g//VCQRXvgCijhzAAcqzXZLg/XJ8nQUoGYFNEXgrUCevRB0IOhy70dZ2Yv5 1+0LxU4VV5vs6pHqyMxh1z+BBsxAxfOkeNlf8+yg88k62ESDUk8hfCwgY8qQOzTf qG/7fLumCGSyml/qddNkWA5n1A/j/qMBI+MhY32vdB0hQiyMBsb4DRrE6sEevx28 kjGn5to9ZFeBcGZSZQV670WpRjLg5m0nSNHLi8ID4CeAhFF8jtvg1+gqFEpf3DqQ dmJFb9VqRjmIwhOIbaW8Gh1kyDuITVbBgxwqTWURc8EO5kHGdPBdZu7qYKZSDcB5 XemT/ERPj7fCQpRsp1HKu8aksE5bxYaAC/9Dw7MdEL3lcaWOlSF3gknBJIHJrWZx X9SCJAxf2GtC1rVdTf6KjROD+huIyVy9eXCT5ku1lUaHyLmuBQpud2LdPwdFLPCk V7MGL3Y0J/ipGNKDZQ0osUIhH/IlaDX4ktPj4/hi/Xw92/Pic0ldYLhLgY1/JYGn xpRftxp2X8yVOlk2+o6qKDYbOXTIEfIfwZpfN47ecejViou3VBKDxxvCMe0lMh8t v2usKCm3JKdrRlBH+2nivqYqHmh09G1SIR00B/TTfU3qAcBJkDGN9jM1FEth8miM DCp/Wqz+MAEOk5K4di0Gz5qHmar0EhpENzXfnlpkl4WNki0idRc= =vctp -----END PGP SIGNATURE-----
