-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 09 May 2017 09:42:21 +0100 Source: polarssl Binary: libpolarssl-dev libpolarssl-runtime libpolarssl7 Architecture: source Version: 1.3.9-2.1+deb8u2 Distribution: jessie Urgency: high Maintainer: Roland Stigge <stigge@antcom.de> Changed-By: James Cowgill <jcowgill@debian.org> Description: libpolarssl-dev - lightweight crypto and SSL/TLS library libpolarssl-runtime - lightweight crypto and SSL/TLS library libpolarssl7 - lightweight crypto and SSL/TLS library Closes: 857561 Changes: polarssl (1.3.9-2.1+deb8u2) jessie; urgency=high . * Fix CVE-2017-2784: Freeing of memory allocated on stack when validating a public key with a secp224k1 curve. (Closes: #857561) Checksums-Sha1: 917394c6dc4bc3b6d52631e4966bf3dc36890852 1898 polarssl_1.3.9-2.1+deb8u2.dsc dbdf2ef546952e9c1c163266074b3d9a579d7b8b 9600 polarssl_1.3.9-2.1+deb8u2.debian.tar.xz affd95436ea21972e41ec193401f01591ef44f3c 5575 polarssl_1.3.9-2.1+deb8u2_source.buildinfo Checksums-Sha256: 924b06b5bb03ab5cd9981b57fca713ff156df04b43ceb06587d6559d8265125a 1898 polarssl_1.3.9-2.1+deb8u2.dsc 3a445eb6efb0207b1d949019ee4e2ddadde6807a9d96eac724a3ba2762d2483f 9600 polarssl_1.3.9-2.1+deb8u2.debian.tar.xz 73d80573ddc8658e3d513698ee1f220667a3675f186f40827f54f4fa4dd0cc11 5575 polarssl_1.3.9-2.1+deb8u2_source.buildinfo Files: 96673751fcb0634f400a83f587f1437d 1898 libs optional polarssl_1.3.9-2.1+deb8u2.dsc e07fff4c09d47586fc62b4f62135dc67 9600 libs optional polarssl_1.3.9-2.1+deb8u2.debian.tar.xz e31f53055633f37f134231a6895a84c5 5575 libs optional polarssl_1.3.9-2.1+deb8u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+Ixt5DaZ6POztUwQx/FnbeotAe8FAlkSz2wACgkQx/Fnbeot Ae8EtxAArVdlR0G+bLtKcV41HP8SPziJCWRS8JzsnWsrtJzonnVx0/bp1uBO55uQ gsmUXgHToTfEOxNgAVJw8Z5wclUkII+NPBA16RbNe6/xpyyqlZS9tZ69lRLOFRtb so0vsd4BUgfz/4KQITN70n/rAEvbpawJPmp2XUNhmpzTvnwQiDMzuliEApyXknkh NpBlX+rc1gHRiJZRrQ6s8Rrj/MPMx6Cn0BUFovTRLZhi4mYWVK/qnSV0Xx4/dM2R OhuTAs1A3/X0BFNP0p3zTdLVrJBTqqolYcN9Kl5oB/EhtTBOygoV8s5TeSnaoEbr UjBGgOcanPYPD9DPpPYJ/JTOZJGzosqbmSTJMItntTRh7Kj4FLLtySWyJTbZRWWD z7fI0F0A3+qc/04OigIB0ggW8T9Ew4/ECn+lrrL4h1MHZIHIu8jnCtgO5Qc9Fq2R raI9aHvBMMn7HNDmXfGsyBkc+qFm2jtnLcMyShmWU0h8X6B4iVXgL1aYZsjRyKLm 7vy/2B0wB9BLk3ZueZW9HnYeqgBFpgiMkOiAFIZE6IBFBOIqI3TBiHKOQBzo/aKB vS7C0q3H+NPzcFJN1xvaqlYA3ykaSIHEEB72l0l2T8i3SKeHEzO57AfuQClKjZ/a pddjgOT8ZG/TMmx2q07CZzRMidEG+nY6PO9iW02OiZochCkaP4M= =H9Fc -----END PGP SIGNATURE-----