-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Jan 2014 18:17:13 +0100 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: source all amd64 Version: 1.0.1e-2+deb7u2 Distribution: stable-security Urgency: medium Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> Changed-By: Kurt Roeckx <kurt@roeckx.be> Description: libcrypto1.0.0-udeb - crypto shared library - udeb (udeb) libssl-dev - SSL development libraries, header files and documentation libssl-doc - SSL development documentation documentation libssl1.0.0 - SSL shared libraries libssl1.0.0-dbg - Symbol tables for libssl and libcrypto openssl - Secure Socket Layer (SSL) binary and related cryptographic tools Changes: openssl (1.0.1e-2+deb7u2) stable-security; urgency=medium . * The patch we applied for CVE-2013-6450 was causing segfaults, also apply the previous commit checking for NULL in EVP_MD_CTX_destroy() * Fix for TLS record tampering bug CVE-2013-4353 Checksums-Sha1: c9aa63e119c82311b670b6822a1519448a553faf 2228 openssl_1.0.1e-2+deb7u2.dsc 5a030272024626d5cc1cb5dadde206992ec56a99 95773 openssl_1.0.1e-2+deb7u2.debian.tar.gz 67735c40c3614e5a9b2d2a59866c2a875abda614 1197338 libssl-doc_1.0.1e-2+deb7u2_all.deb b9292a00b5df011d7f26c25a3775f8766be27458 699474 openssl_1.0.1e-2+deb7u2_amd64.deb d84b42cc32c2f9db7bdaa0d1972828538cd1be24 1224472 libssl1.0.0_1.0.1e-2+deb7u2_amd64.deb 12d4c4dbdeab7ac01e44c45253bf176a98266917 605500 libcrypto1.0.0-udeb_1.0.1e-2+deb7u2_amd64.udeb 248b0a2ca2a116f4a58281cc3f45283f18d1cb7c 1706830 libssl-dev_1.0.1e-2+deb7u2_amd64.deb c1cb6d09df6a6f778352299412617f959f0ea2fd 3016574 libssl1.0.0-dbg_1.0.1e-2+deb7u2_amd64.deb Checksums-Sha256: 52a3e854b241e5665dfea33a3af00f656b8a676cc1be5921cc56a42d29d0bcc7 2228 openssl_1.0.1e-2+deb7u2.dsc d86db3e7a6e1eeec1204f124dd4042048c80d939445fa71b5a631b397da9512c 95773 openssl_1.0.1e-2+deb7u2.debian.tar.gz dcb9947b44ae30e129e3412101368cb563099ad8f900de52e3bcfda3b5736ae4 1197338 libssl-doc_1.0.1e-2+deb7u2_all.deb fbe043557c3afd89c32db880daf5cfde980588d7c3a4777e48ef0e336b86ec47 699474 openssl_1.0.1e-2+deb7u2_amd64.deb 37df8a0eac2fa23b91fd5343497a48450b9296ee6709428c71de89298c93c66f 1224472 libssl1.0.0_1.0.1e-2+deb7u2_amd64.deb 3dfefe7b7ab45134a5c35d2cd7901db2822ae0a69ca61d4e5a842bc2d4650a8b 605500 libcrypto1.0.0-udeb_1.0.1e-2+deb7u2_amd64.udeb a3cd2496888ed9a4c1194225dd9c298ed359a351581076210a1f51230f4a7a9b 1706830 libssl-dev_1.0.1e-2+deb7u2_amd64.deb 5cc9b37d398c00fa3c2cf408e9328ac4017c82726b3fa3c1650d76d2c5474ca2 3016574 libssl1.0.0-dbg_1.0.1e-2+deb7u2_amd64.deb Files: 7150815a6d982c77ada40be7a83264f4 2228 utils optional openssl_1.0.1e-2+deb7u2.dsc c3cd0f58bf2053ee550264810160d283 95773 utils optional openssl_1.0.1e-2+deb7u2.debian.tar.gz 2d6625696460d882a27cf50aa9e4e27c 1197338 doc optional libssl-doc_1.0.1e-2+deb7u2_all.deb 764d9c42656208ac6289a106fb6bddfe 699474 utils optional openssl_1.0.1e-2+deb7u2_amd64.deb 8714e64c21cc99ca517f190389a75778 1224472 libs important libssl1.0.0_1.0.1e-2+deb7u2_amd64.deb 0aa98ddd768eab12ab063819c1e9660c 605500 debian-installer optional libcrypto1.0.0-udeb_1.0.1e-2+deb7u2_amd64.udeb a09463509c32fd8f8834bfbbe41650cd 1706830 libdevel optional libssl-dev_1.0.1e-2+deb7u2_amd64.deb 9360cde5739742fe4a47ffdf64642281 3016574 debug extra libssl1.0.0-dbg_1.0.1e-2+deb7u2_amd64.deb Package-Type: udeb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQIcBAEBCgAGBQJSyu17AAoJEKGfLDAaVSLdKLEQAJybo/Xc8uVATkCVW9WCZn7A yjdKbRb7my6hG5iUpIElWFx3ph1KtioCneSiE61WhNF00B82ybf8buL1WLM8LrrH VV8/pIjxVypWzJeKxy1X/aBnKT+yI69XaFOWKBflvKk3Y6h+VaNew15I2w2KcCrq VUTsnwZFP9sGy0BjXSxpCZoYNZx7gbG0GVyn8ouB0wGJfvWgW7tDAiywTqULDhpI uf0j63l1fJFHmV8T42lpoujnOcDqpIpvCkhVt7qmm7VNFC7Yre5IAzuQ7dUYIK5F s1c5c2MZZpnPaME3BhWt4psAzNun5urPwhfxCfrAQ16ElMwfcR0rHYF9wJ/HYSP/ yVYl8wChuLcw3OSGxHITq14GCK+tZz2M2oFnwz89D8OhdJufcnCGovpy29zyPZA6 5jm+o6QY37/sLxa0Lw/NqqFsjZ1tmd/kgBi3qMT9NzQ47YCOZG3nq5fIbT+qF89l cmg2ANnrm7Y1qlrH9DAXw/n4mwp9BOLhI3NUwsjYQ8ifa6GS197RuwoK2FHOHyEQ DOGsgLxuxXUCt35He7UJ0abnOkVrX/MuiyIHIu0luJmYy1EZuWouGpRfIti47mYf qzUMczX40IyPbq/enGNt9re43UpkKwp+eVk2mCUKeYMSao8alAgsbTVLX8xnrWjd 7eRwwNP0cLB7svBQq+OM =ZF6t -----END PGP SIGNATURE-----