-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 22 Jul 2023 10:08:27 -0600 Source: wolfssl Architecture: source Version: 4.6.0+p1-0+deb11u2 Distribution: bullseye Urgency: medium Maintainer: Felix Lechner <felix.lechner@lease-up.com> Changed-By: Jacob Barthelmeh <sirkilamole@msn.com> Changes: wolfssl (4.6.0+p1-0+deb11u2) bullseye; urgency=medium . * Stable update for the following vulnerabilities. The patches were provided by upstream. - PR 5498: CVE-2022-42961 (Rowhammer ECDSA key disclosure) - PR 5588: CVE-2022-39173 (buffer overflow during TLS 1.3 handshake) - PR 5682: CVE-2022-42905 (buffer over-read on heap with WOLFSSL_CALLBACKS) - PR 6412: CVE-2023-3724 (predictable buffer in input keying material) Checksums-Sha1: 4346447fbe993a740e64a63f7e614fec4bda6ae8 2160 wolfssl_4.6.0+p1-0+deb11u2.dsc 81ebec4ae67afea2f41e78e6e23823160215e108 37276 wolfssl_4.6.0+p1-0+deb11u2.debian.tar.xz 90587a6470ff1904940c75c921e445ea8d6995e3 5818 wolfssl_4.6.0+p1-0+deb11u2_source.buildinfo Checksums-Sha256: 5ab4d6d339eaee7d3e3416a13c5432768d10dafc6bd780e648eb030155c2d5ee 2160 wolfssl_4.6.0+p1-0+deb11u2.dsc 7869b432a2078a8ee3867a44df3c6a416a2cb2f1d3f602a2ea2df8eca11415d8 37276 wolfssl_4.6.0+p1-0+deb11u2.debian.tar.xz 5657cbb2f2780c659e992bc77897305970cd5d886028ed4c4f7e72162a49681f 5818 wolfssl_4.6.0+p1-0+deb11u2_source.buildinfo Files: 727a96bb7faae6ff53ee104f1b0ce53e 2160 libs optional wolfssl_4.6.0+p1-0+deb11u2.dsc c2898fe3bc673779bfb9f0be3d9d3950 37276 libs optional wolfssl_4.6.0+p1-0+deb11u2.debian.tar.xz 5bf1b8e6472e94a7296b200bfe7b96eb 5818 libs optional wolfssl_4.6.0+p1-0+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQHEBAEBCgAuFiEEQGIgyLhVKAI3jM5BH1x6i0VWQxQFAmWE0aIQHGJhZ2VAZGVi aWFuLm9yZwAKCRAfXHqLRVZDFKyuC/48B9CQ5nP5E9NiOEizmwqWjFPMzJzCxHto E4eRmyT1JY+1h5xEzr2r9tPkHZTQpKzFCgI/pk42JGsBXffTUhsDDQkh5LMVHA2H smrIblU0RoyCogila/mKqOMHA8ey25VoOtj1QecCJdZZuRJPJPqPjhoaBPhK1w7T E+e5xSqKI/23hWgQ4McVYpHhl3wzc/fBiROECS83y6+qIiM5Fa2MqEKwgqvMcF3e EFyG9ZWpY9RBp/6UAPeRqVUqeb8jyxTZJ2AdBJGU0BfhflU1vgiQktn+lCN7xc6N 0JBx5ICOHvaHdEiZLrI87NKnF9U3wIvdn30w6AQiMR73IWyfyPZBtBNJtd1dV3bG YnsLCJGhuIS1yJIPoO9Z0AdJgx7ZQ1eatl7hBs+MWw/nd139eMubWqckMDaDVnDA CevjUUYWrNA9lwLRGwFvKXjFlBSEG+ogMj/ux1UC/cLnkb8tUC8Fs0cI55sviocn zkrWXZBxQTmHJo6+osnWZm7Gg2ZPV1Y= =DaF/ -----END PGP SIGNATURE-----