-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 29 Mar 2018 13:10:14 +0200 Source: openssl1.0 Binary: libssl1.0.2 libssl1.0-dev libcrypto1.0.2-udeb libssl1.0.2-udeb Architecture: source Version: 1.0.2l-2+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org> Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc> Description: libcrypto1.0.2-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl1.0-dev - Secure Sockets Layer toolkit - development files libssl1.0.2 - Secure Sockets Layer toolkit - shared libraries libssl1.0.2-udeb - ssl shared library - udeb (udeb) Changes: openssl1.0 (1.0.2l-2+deb9u3) stretch-security; urgency=high . * CVE-2018-0739 (Constructed ASN.1 types with a recursive definition could exceed the stack) Checksums-Sha1: 2362fc25c0df63c997f9969515f44fd30b947a78 2334 openssl1.0_1.0.2l-2+deb9u3.dsc 43847a8f1fbed73e824ca954dc1c1661edcc0fce 82444 openssl1.0_1.0.2l-2+deb9u3.debian.tar.xz c5328f38156b2639955538c8a9708f3995dc8b0d 5888 openssl1.0_1.0.2l-2+deb9u3_source.buildinfo Checksums-Sha256: 4ce97a52d5bc823460b8ff141892cb2992023b78b241222edc972f9f1b68a034 2334 openssl1.0_1.0.2l-2+deb9u3.dsc ad0dc072f5a9c7b05f143894b6592a328ce0789c0e4fb2debd1eef52182409e5 82444 openssl1.0_1.0.2l-2+deb9u3.debian.tar.xz 1829850f8780ac3b284922cef42eddcedd5c848b81c65155882f8e41fd292c3f 5888 openssl1.0_1.0.2l-2+deb9u3_source.buildinfo Files: 792feac683d89d6c637b5a6245efa7a4 2334 utils optional openssl1.0_1.0.2l-2+deb9u3.dsc f242bc79b7c604369cf260729dd49b27 82444 utils optional openssl1.0_1.0.2l-2+deb9u3.debian.tar.xz b7988e6f57ff38e8e62eb8e618320f57 5888 utils optional openssl1.0_1.0.2l-2+deb9u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJMBAEBCgA2FiEErHvQgQWZUb1RregAT+XjJihy5MwFAlq8+xkYHHNlYmFzdGlh bkBicmVha3BvaW50LmNjAAoJEE/l4yYocuTMuOYP/0Mezf5W8NQjdeB/pIpXUXL1 MBAAbLEDLWSFU3umGT0UOEpSq9MFkhAOsbQP0F0PknIaN6XcF3tl7FGSfB62itYX De92Fgb0lcxPg7rqatkB2spv3DNW18mTp0QFsPE4rXaxNOn224c2rLCfdcoP95GA A5hIcao2T9PizRc/G/lQHgzI3qJHjKDVZQWhIpf+3y2Bzjf86cVeyZCssDgUYCtd 4skUzGIoX2MESLp+UlNgpcxgbjvui0ULfckfE8ZXqjaySwM9zMyfPu84TEfCn3YF RLctzekRrhbCEVe8SL/LVVYeFYs06WO3CuQelLkrbM+UUl0N4HGeDuL7vXCqSLeo TgEdBg9voSBvO9WxlB4Of+0Dwi3vyWgkPeKYbltp2Lsjhx42HizKCA5guufZcNv/ ky4h0PfoyLu5uOiAzoJ+hpCPhpdh318FdmLEEPoyi1Ip3VJJY5/RXQwNbKxEngLr sRC2e7U0kWYxofhG51VdSVSHHo1OKfzdpTfAqwa9JVKeT62Han4HFL1bsvH7DtDN i+HAkMxag91PCj4dbsIEbdbfZFLphHWMlaYYhg/2lT6KFVL5Q9Na4xDVfLgaIJcq 6YxEVbINsEQ77RUL3Ag7WjRdioaTPhxjhS9Wj0nQnWpOKVu9ouA2nO6mJhRFQXEA Ve7yZmsVJ22W6iFijTN4 =qKgR -----END PGP SIGNATURE-----