-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 11 Feb 2025 21:30:30 +0100 Source: openssl Architecture: source Version: 3.4.1-1 Distribution: unstable Urgency: medium Maintainer: Debian OpenSSL Team <pkg-openssl-devel@alioth-lists.debian.net> Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Closes: 1092307 1094027 1095765 Changes: openssl (3.4.1-1) unstable; urgency=medium . * Import 3.4.1 - CVE-2024-12797 (RFC7250 handshakes with unauthenticated servers don't abort as expected) (Closes: #1095765). - CVE-2024-13176 (Timing side-channel in ECDSA signature computation) (Closes: #1094027). - Compile on LoongArch again (Closes: #1092307). Checksums-Sha1: 66acc877eea89a76ace764d4f9f0cac9c01e9a13 2808 openssl_3.4.1-1.dsc d3469baf41823a28ad71aae12b2fbb9fe3b19a0d 18346056 openssl_3.4.1.orig.tar.gz 3fc7c15a0580dc691ee7024602d0d065a2c40b32 833 openssl_3.4.1.orig.tar.gz.asc 2446d6fb7bf0e7d97be2b2d2125e27593b6c4e5f 50548 openssl_3.4.1-1.debian.tar.xz Checksums-Sha256: 850f658197e44d13882b13929b04008c18e2f643ca2781eda180b5f288cb5699 2808 openssl_3.4.1-1.dsc 002a2d6b30b58bf4bea46c43bdd96365aaf8daa6c428782aa4feee06da197df3 18346056 openssl_3.4.1.orig.tar.gz 488c2d4051d5d27b1c0f9d21fd717630e0a2e1b82216875b2fb0fceeb0e8ea5a 833 openssl_3.4.1.orig.tar.gz.asc ffd963c2e742809bedb03a9416e64426c585ec987fd6e3b5c3a1eed4d9fc882d 50548 openssl_3.4.1-1.debian.tar.xz Files: c2587af22b08b668becf4c6952fc4e60 2808 utils optional openssl_3.4.1-1.dsc fb7a747ac6793a7ad7118eaba45db379 18346056 utils optional openssl_3.4.1.orig.tar.gz 543c69bafc1e9c48736fed6f19f4d1c9 833 utils optional openssl_3.4.1.orig.tar.gz.asc 106b7c608964edeca6ce6b5e3daa8320 50548 utils optional openssl_3.4.1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZCVGlf/wqkRmzBnme5boFiqM9dEFAmervBMACgkQe5boFiqM 9dFuNRAApTctlB6ETYzamDTvETocHHxO6ePs6g85/I0AkwbVKfw/FvEdYEqseF/y TfTR1ASvOR8vlzu50YF1fYe9+Nf+gR7LJQ3lpbFLW4jBMuRkIpK6fdX+9nubqf2j O43LHtUHV+RCZ7pFRYSXV8KytXHYVqEnrdHWiLkMF65IZO2oDysip9ohxhNU9/+C mi+XTWDXmqonnm0DOUIw21AtaTaX371HS2AHL4wNLBXKXxdbXvXEkEsYy2kWU8Ql 3bbfhVr3KoYNTMCXKCgpZ1aGgglyY1e+a2KeORVI+inDF/YKM6f+ZKOEgMxbyUTE ddwj4Y/rMvJNO8VmZurwq0MxVMI36yoSHNQD7yAY0nmdFj3d7Cu8YR9H2knyR6Tg 1GyAsr4YDE8FPlASUycOsiWz11DRDDz+xwHaMkVaVl/IhRZy+/p+tTo7c9yRvuSB YDJqBOFwomrL+KolCZq4qVUKuG5wN6TVuYd4acVo619wZsb1Uy80RKn5kgPk2JNo F1UOQjHDBjV+llBLtYUMR/+VzLFGncCTPWvrTwdQl3UhWap6svAdV/BsmEtavs8V Z+NjKBGmnu8l2MURzXw+QaWhejXigrtmSEnG+kukYG/n+LvJkLCU/fplxYNvlyDx QwspnARelSY/BmPj1+bKN70hDfRYK9bz3fdXPfxeE0ME0fuqYaM= =OeAb -----END PGP SIGNATURE-----