-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 25 Mar 2021 21:49:34 +0100 Source: openssl Architecture: source Version: 1.1.1k-1 Distribution: unstable Urgency: medium Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Changes: openssl (1.1.1k-1) unstable; urgency=medium . * New upstream version. - CVE-2021-3450 (CA certificate check bypass with X509_V_FLAG_X509_STRICT). - CVE-2021-3449 (NULL pointer deref in signature_algorithms processing). Checksums-Sha1: 8ff64b50776eb1cc9dbc9dbaa895c7860feab00b 2446 openssl_1.1.1k-1.dsc bad9dc4ae6dcc1855085463099b5dacb0ec6130b 9823400 openssl_1.1.1k.orig.tar.gz 60ec762123a6eeee4136942d50f67369de960a9d 488 openssl_1.1.1k.orig.tar.gz.asc 3c507bf8b31cc0f11b24d06238f50ed70bfc8f39 84616 openssl_1.1.1k-1.debian.tar.xz Checksums-Sha256: b070d0422d0d666eaef5ca86b69b59e15eee8287de8183b2375ca28e038adbf1 2446 openssl_1.1.1k-1.dsc 892a0875b9872acd04a9fde79b1f943075d5ea162415de3047c327df33fbaee5 9823400 openssl_1.1.1k.orig.tar.gz addeaa197444a62c6063d7f819512c2c22b42141dec9d8ec3bff7e4518e1d1c9 488 openssl_1.1.1k.orig.tar.gz.asc 7563beb68e87bae24369dfd7569ded77ee1bc22d0d890b94c85581dc86714fa1 84616 openssl_1.1.1k-1.debian.tar.xz Files: 65c27f0078c11f0ead71646d46baebcc 2446 utils optional openssl_1.1.1k-1.dsc c4e7d95f782b08116afa27b30393dd27 9823400 utils optional openssl_1.1.1k.orig.tar.gz 8119ccb30bf6a12176a320041d225406 488 utils optional openssl_1.1.1k.orig.tar.gz.asc a34fd15770eaf0194d2ffa7f51b0cf75 84616 utils optional openssl_1.1.1k-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAmBc94AACgkQBWQfF1cS +luLEQv+LoBT+3xwExPmOJPom8jFYoZdZqf4pC/1xeF/fZjym/GkIVkj0CV0+cis JLxdtc0QeTR0YjN5KU6a5T5ZBIHCCGlSx+coIVCmnV+l05NDPU9njoltWB3BrDm5 8OJj7BhJXEBEtiAF2Z6CcaP/MVZ/HBGPjqAcwnhBGmGTf5nXYCJNYMNPW3l0UPl1 Wjvj6afpPo46hCyrkM850m4HyBSCQGugVMchjWqBSNpDIihdmgUxILjZbNM5gs1x 9mW07W+QOwPw9yhy/7JxcfAHolZ2MHwvK7mxwNmIK+zqumu1oZ/Fw8Ogo7GoQzHU Pg/RCzawEn2NcY9hqflPjbhSeZiblAtnp3oG5p7fmuZmjZzp7LBgaf0lYAD478jy PUyB6hnw8RrC9KoBUI5uz+l77iHBgpzw+DrbNnwikzmDoSJozAEoBDa1EKidpXS6 RhE4mdBfA3hBo/a1FsDaqjQ9njTepsij7oZlbdx46RHcrcTtXP5J5t2vZrdBApFc YAEgDIfr =L24Y -----END PGP SIGNATURE-----