-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 04 Jun 2024 18:37:30 +0200 Source: openssl Architecture: source Version: 3.3.1-1 Distribution: experimental Urgency: medium Maintainer: Debian OpenSSL Team <pkg-openssl-devel@alioth-lists.debian.net> Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Closes: 1071972 1072113 Changes: openssl (3.3.1-1) experimental; urgency=medium . * Import 3.3.1. - CVE-2024-4603 (Excessive time spent checking DSA keys and parameters) (Closes: #1071972). - CVE-2024-4741 (Use After Free with SSL_free_buffers) (Closes: #1072113). Checksums-Sha1: 3373c0c376ab6cdd00957f517c0e94aea83f3313 2482 openssl_3.3.1-1.dsc 7376042523b6a229bc697b8099c2af369d1a84c6 18055752 openssl_3.3.1.orig.tar.gz 3a5ba76bd10fbd28be1d3a90d153feed837f11b7 833 openssl_3.3.1.orig.tar.gz.asc bb08c5356d2b664dbf2a94f747fc2c81c81b6db5 66708 openssl_3.3.1-1.debian.tar.xz Checksums-Sha256: 8ddb11a01ec2bebddb3bd26bab9180c2ace9fdd3c0bd14e85bc1802dc602adb3 2482 openssl_3.3.1-1.dsc 777cd596284c883375a2a7a11bf5d2786fc5413255efab20c50d6ffe6d020b7e 18055752 openssl_3.3.1.orig.tar.gz a1ca1547057b75e1750717d69a35a5373544cb42f671a1a7f672c4237aab1248 833 openssl_3.3.1.orig.tar.gz.asc ab48fdf6065a775d204ebd99440c005fbed06602da6a08d5f920881bb1f89c2c 66708 openssl_3.3.1-1.debian.tar.xz Files: 20ae9857d6e014b10a364e659ff6de43 2482 utils optional openssl_3.3.1-1.dsc 8a4342b399c18f870ca6186299195984 18055752 utils optional openssl_3.3.1.orig.tar.gz 7fe8722b795a91cf0f9f09511e9c9aed 833 utils optional openssl_3.3.1.orig.tar.gz.asc b064d4c1e573ca96e40b9dcf902c60b9 66708 utils optional openssl_3.3.1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAmZfgjwACgkQBWQfF1cS +luubwv9EMjB6P5Gj4+XKdwg2Fswrb23ZVATmJMK4O0tjGI/7fGGqlBqsoK+FSRT AWjbXmQZFamALvjpJyWteJvsIY6ckgKa00zB4qmI0cRmT2jpbN4JFJlT3kciZ3X1 uEVKayKgxs+xIJ+IvUuMKZmHyDRCDT0ShRTmWNy8q+am6y9SzniJNT6/zju1z0q2 OhaNulE0XbBTBHseOuvDIIhzPpGGw8M7vVZ7CYvP7gvJGHXCzFfCoqRAI1HhUuY8 GVeLlFVALLanoItGjYqHp8j8fQjcbPiwBd/xWif6oL5CzKsB9PJsmZvqpR/PYPZg vkVYEf4YlE+5KW2C2YSnWckDwmHNhQQZrI5e3Mf7Q/wFNYeufZ9tT7/tSXA8ESoc 4pigiUdSI4WxjTGbr8uikeEd+ItPKlg5bTB5a4RvwuZiebn8QzFElHvgeh0ZybIc v+OCAnVM2Wv3dXRGSXBUg2y6LXkRWV9x3PglqbGAOxRjwbn3QxOZjfxfnPJ1afdJ PWtRTFGU =OdUQ -----END PGP SIGNATURE-----