-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 30 Apr 2015 23:37:27 +0200 Source: openssl Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg Architecture: source all amd64 Version: 1.0.2a-1 Distribution: unstable Urgency: medium Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> Changed-By: Kurt Roeckx <kurt@roeckx.be> Description: libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl-doc - Secure Sockets Layer toolkit - development documentation libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (1.0.2a-1) unstable; urgency=medium . * New upstrema version - Fix CVE-2015-0286 - Fix CVE-2015-0287 - Fix CVE-2015-0289 - Fix CVE-2015-0293 (not affected, SSLv2 disabled) - Fix CVE-2015-0209 - Fix CVE-2015-0288 - Fix CVE-2015-0291 - Fix CVE-2015-0290 - Fix CVE-2015-0207 - Fix CVE-2015-0208 - Fix CVE-2015-1787 - Fix CVE-2015-0285 * Temporary enable SSLv3 methods again, but they will go away. * Don't set TERMIO anymore, use the default TERMIOS instead. Checksums-Sha1: 692c423c6a2d4e3c19e4fac3d147c9d870b3c5ba 2227 openssl_1.0.2a-1.dsc 46ecd325b8e587fa491f6bb02ad4a9fb9f382f5f 5262089 openssl_1.0.2a.orig.tar.gz 1b0f0320656dac844d7a9675b0f80c7fd727928e 75776 openssl_1.0.2a-1.debian.tar.xz 37b7c0fbc7cb0c69bb093f2b46ea33b73bbf538b 1241336 libssl-doc_1.0.2a-1_all.deb cccba703e1f6bbc9a36df223a4845cda6a76b3cc 692642 openssl_1.0.2a-1_amd64.deb a693b7ac6b4bf85a11dfda0f4639bb8c2dc8944c 1274096 libssl1.0.0_1.0.2a-1_amd64.deb ec5b8de43491096752e12acd38f524f05987fda6 862674 libcrypto1.0.0-udeb_1.0.2a-1_amd64.udeb b6208e32b75878d7e61682f8c8d60328425cbf9b 1525132 libssl-dev_1.0.2a-1_amd64.deb 72f310a873ae68464fff998095863afaf5d61ef5 2948814 libssl1.0.0-dbg_1.0.2a-1_amd64.deb Checksums-Sha256: 66158ed595287da86b3310268b267e2b3b6dc7c4bf85a3914efd2d5ecd105420 2227 openssl_1.0.2a-1.dsc 15b6393c20030aab02c8e2fe0243cb1d1d18062f6c095d67bca91871dc7f324a 5262089 openssl_1.0.2a.orig.tar.gz d6fa38c2d8135340aade374ad9b717b54edabee94e6c49b7209c3a89825559ef 75776 openssl_1.0.2a-1.debian.tar.xz 25b84740b197513163dfa36da7866ddf5b7a979be25f206ab8e14cdc52d88d42 1241336 libssl-doc_1.0.2a-1_all.deb 64276ff3422225a647d9ffd42887c4fa66e66ed40fd672839b8d84f17f2aab1f 692642 openssl_1.0.2a-1_amd64.deb 6be6d2d62943f33e0fb1cef881596ea2162b427b561b17ea25690bae13dafbfc 1274096 libssl1.0.0_1.0.2a-1_amd64.deb b6057d9d9bc4ec49d6dbbd9a13dcdd697bad8f1c84613067059e8af7935909b8 862674 libcrypto1.0.0-udeb_1.0.2a-1_amd64.udeb 4ba95d997ddda62f398476264732c568ed06d24e0a98064a73009c918b05a38c 1525132 libssl-dev_1.0.2a-1_amd64.deb e143faa956f665d84786c0987df66f957d9a31f9f6370e18bbfafac299a7fbcc 2948814 libssl1.0.0-dbg_1.0.2a-1_amd64.deb Files: 2edae9587ff34b7956c72c95243686a6 2227 utils optional openssl_1.0.2a-1.dsc a06c547dac9044161a477211049f60ef 5262089 utils optional openssl_1.0.2a.orig.tar.gz 0f67fe258c8b61ae978cb64dbac9d1b5 75776 utils optional openssl_1.0.2a-1.debian.tar.xz c6d5ab639a7dc5d2fe4b151fbbbe78ff 1241336 doc optional libssl-doc_1.0.2a-1_all.deb f5cdecef1a970701267b0ed6fd6cdd65 692642 utils optional openssl_1.0.2a-1_amd64.deb 724963b8c90720163bc00b049f888e96 1274096 libs important libssl1.0.0_1.0.2a-1_amd64.deb 4c4bb65aeda1f141a03a66c733399d5a 862674 debian-installer optional libcrypto1.0.0-udeb_1.0.2a-1_amd64.udeb b98695871f19d14ff163b6b6a32cdfc3 1525132 libdevel optional libssl-dev_1.0.2a-1_amd64.deb a8f824f986c41fd7ed8c8562516afaf3 2948814 debug extra libssl1.0.0-dbg_1.0.2a-1_amd64.deb Package-Type: udeb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJVQqKzAAoJEOPE3c0eTBJEM64P/2+Xrk1GkKH/VffR3HAh7zRR kdPEHNvFER2oPePEED1eAtJKnOa1yaD+gnyv7sExCFDDAbBoL4yhbfvc+Wp3+a/G WvNfg9ew8b3gl6/d30fjun0tSQpdxGhJhn77zQFJMS7SpCm6PjwZSOWGwXOjq1OA dHasTVCtkoenoZgK4odmHfzfvZPX3Phi4fcxUeRJTIUri4WLijhYWz5jARoVgIeb zwOULAnk4hqXif2CS8qeVjy/fuFbg6faYXIoryH7mgLoFvBTGxxymqZA6iK/kvOe mwB4cptjPbCSrCb2iceDfb36+mLPBj6CiSDQ471B9tlGfcwMP7W6xfyGRio41uxo LgieLouXqKK+dy+LzTp1UAId9n2jQvvj4gmtmrLBFn1gywZGPi+wh6EcxMzyQlmN EaFRLt6kpLBJj5CZVd0AQmDls3RIZHyEaF0cipU7J3hNJ+rTHM7WeXPa9CKWt95/ YyFdZ9qV68YN+e96xy8w9BsPiHZbWqK1L5+nv2NK2tJwLE5cgpKTPUWwWwOMTrDO f3I8jOf5DOrLiBTKnKrb5495c0bkg2IV/Q+YjYvfnG1mpX5vjKYeyoB3/iTzy4Z8 YMYH2Nt1s3Gg3eZQ7uY2p5GTbFb7/ObkAfF3sdrpbc++LPfjtH9rHriTiLItjQ3r kD2K90HVfCROhwT5RADR =SizQ -----END PGP SIGNATURE-----