-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 17 Mar 2015 19:11:55 +0100 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: source all amd64 Version: 1.0.1e-2+deb7u15 Distribution: wheezy-security Urgency: medium Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> Changed-By: Kurt Roeckx <kurt@roeckx.be> Description: libcrypto1.0.0-udeb - crypto shared library - udeb (udeb) libssl-dev - SSL development libraries, header files and documentation libssl-doc - SSL development documentation documentation libssl1.0.0 - SSL shared libraries libssl1.0.0-dbg - Symbol tables for libssl and libcrypto openssl - Secure Socket Layer (SSL) binary and related cryptographic tools Closes: 775502 Changes: openssl (1.0.1e-2+deb7u15) wheezy-security; urgency=medium . * Fix CVE-2015-0286 * Fix CVE-2015-0287 * Fix CVE-2015-0289 * Fix CVE-2015-0292 * Fix CVE-2015-0293 (not affected, SSLv2 disabled) * Fix CVE-2015-0209 * Fix CVE-2015-0288 * Remove export ciphers from DEFAULT. * Make DTLS always act as if read_ahead is set. This fixes a regression introduce by the fix for CVE-2014-3571. (Closes: #775502) * Fix error codes. Checksums-Sha1: 08692406f24adbcb528dd142adfa9879305fad6e 2218 openssl_1.0.1e-2+deb7u15.dsc b38aceb6f5ff6a18e6b31a446b51229c81243141 161956 openssl_1.0.1e-2+deb7u15.debian.tar.gz 2dc4b309e475d19a1d961d0c7c725cce52ef9b0e 1198322 libssl-doc_1.0.1e-2+deb7u15_all.deb be1518c83973745a53759be058b64346b0516eb4 701048 openssl_1.0.1e-2+deb7u15_amd64.deb 60d8d20bc95efdb96c6bcce9fdf676d7164d2e30 1260560 libssl1.0.0_1.0.1e-2+deb7u15_amd64.deb a09fe14056279135ae0324cfe1891ff6deaa5649 634844 libcrypto1.0.0-udeb_1.0.1e-2+deb7u15_amd64.udeb e49366f5ff9492cca8dba585d23af8e1c891c8ce 1756148 libssl-dev_1.0.1e-2+deb7u15_amd64.deb 7b1b54874c6e70f695a477607a3b2ab554485e32 3083056 libssl1.0.0-dbg_1.0.1e-2+deb7u15_amd64.deb Checksums-Sha256: cd5f089c2e8527631ab1e750a674b1639025fa00f6d17fbe7bff7b2d03c478ba 2218 openssl_1.0.1e-2+deb7u15.dsc fa9688f3972c8fa48676965426ae23846b152348b169fcb1824550f83bdf4f94 161956 openssl_1.0.1e-2+deb7u15.debian.tar.gz ac6f11f71bd8fd8100c43757db1f553a6421689e3f505c930dfbfec80cea2508 1198322 libssl-doc_1.0.1e-2+deb7u15_all.deb 047efc76d99ec3f739aa92cc3584012f28568e9a51d171919cf768f0e0d0d553 701048 openssl_1.0.1e-2+deb7u15_amd64.deb 9671de5281c5c855f3c5b863ec014bb9628265f77c433d00113bb87f0d56c678 1260560 libssl1.0.0_1.0.1e-2+deb7u15_amd64.deb 9bcdeaac992822731a2d6e0815a8fb9711c44704820cf855e1f68382bac522fe 634844 libcrypto1.0.0-udeb_1.0.1e-2+deb7u15_amd64.udeb a1712d67ab4493455c5f70ac718e0af0f71eaabf0f993e57d4d3ed75e427bd96 1756148 libssl-dev_1.0.1e-2+deb7u15_amd64.deb d604b17658dbdb89d5adb4e691eb773e99f823c08c0470b384f8314a3cb05140 3083056 libssl1.0.0-dbg_1.0.1e-2+deb7u15_amd64.deb Files: aa690f4b6ee6f17ee12cbd4c182f4461 2218 utils optional openssl_1.0.1e-2+deb7u15.dsc dce120b041cd780cd5f88e483743c4cc 161956 utils optional openssl_1.0.1e-2+deb7u15.debian.tar.gz 5888fb0861e5862eed15a26aed664c17 1198322 doc optional libssl-doc_1.0.1e-2+deb7u15_all.deb 8eee98eab262675d99527a80b8d1c83e 701048 utils optional openssl_1.0.1e-2+deb7u15_amd64.deb 55e4a097ccda0a570b61a8432abf364c 1260560 libs important libssl1.0.0_1.0.1e-2+deb7u15_amd64.deb d0da81f1c4ed8a4864ffd26a5d170ca3 634844 debian-installer optional libcrypto1.0.0-udeb_1.0.1e-2+deb7u15_amd64.udeb 08e8532f5ee8fa9a77ce7daea3fbf59f 1756148 libdevel optional libssl-dev_1.0.1e-2+deb7u15_amd64.deb 5cce53a9526b39869fdb13bf591f8011 3083056 debug extra libssl1.0.0-dbg_1.0.1e-2+deb7u15_amd64.deb Package-Type: udeb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVCd0KAAoJEOPE3c0eTBJEQh8P/3ChUZ9ZBtSG4dsloTfBaDjk KJNKeQturFPollbc36eimTOOb94iAN7mrVMAhNqdH9Vzz4NxO1ITYzGqXy0yRVeA NN9WxlED8uov5eEVGvgnfVp1B/NSMa967upde88ifCFIkpvc/QWjSEqIa4HOV1Gs YUgUrPic4Foz5TBBLJheZkjpLr4LVYnJQoeLzF5pRfSOYUoQ/SnSQENeEmOt+GPu /ifKySyIMOKaOmkxRz9OO+m3eVjhl/0sFvA7mBWqZeHIMMngdQ/MC630YYkk94E7 CsJ01IAx5KtX1gReVsVek7tZ5cDn2Y6ZkM4TLoUnCQQ99bWBQGFVZWTiC69T/kpG C9TVEO+4LuJ+hmVW0psIWUFlZB4vv/OVg1BE1jnK2qhZXU2Otaf+ybaIB7Ik28OL ItHgRAAulTw4bLeknZBlVOAZDrMaWekAqXOAb+see6PCceV8FK04BdCvWdTFWymU L2y1Gn8eqD7h+P9AScgy8vuO92Ce6YS0GFESIs12g9hRxb/BGZ8x3PWgd2W3N8RW CKJEK09Jcs6ensSojs+4pBpzfu5MAmvogWyqwiG6y0VPe2BCGGmslPYP63NI2U6w 1kFQYEUBAKb5qKTYYZlMcHWxk5EatMZyprZNdnjlUW08RvdPMamIuKQq9UuAuwCU v5JpjbmCbVsa6TTMCwVp =zF5S -----END PGP SIGNATURE-----