-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 03 Mar 2024 10:47:43 +0100
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym
Architecture: amd64
Version: 3.0.13-1~deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3    - Secure Sockets Layer toolkit - shared libraries
 libssl3-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1055473 1060347 1060858 1061582
Changes:
 openssl (3.0.13-1~deb12u1) bookworm; urgency=medium
 .
   * Import 3.0.13
    - CVE-2023-5678 (Fix excessive time spent in DH check / generation with
      large Q parameter value) (Closes: #1055473).
    - CVE-2023-6129 (POLY1305 MAC implementation corrupts vector registers on
      PowerPC) (Closes: #1060347).
    - CVE-2023-6237 (Excessive time spent checking invalid RSA public keys)
      (Closes: #1060858)
    - CVE-2024-0727 (PKCS12 Decoding crashes) (Closes: #1061582).
Checksums-Sha1:
 3ed53c5454e6f4a28fb5f14f0def7b78986c55f2 1524144 libcrypto3-udeb_3.0.13-1~deb12u1_amd64.udeb
 59d23233f7ba05c1f1600a4ccc77b13d5f23baa3 2435376 libssl-dev_3.0.13-1~deb12u1_amd64.deb
 56970796dcb4e4a130fb6d5415f4aa639828c108 4768840 libssl3-dbgsym_3.0.13-1~deb12u1_amd64.deb
 ddfa20330957e9dc2de494773f287983cd42f454 221396 libssl3-udeb_3.0.13-1~deb12u1_amd64.udeb
 0ab5846e61d8d6869ce3ad60fa9699a2e000bab3 2021692 libssl3_3.0.13-1~deb12u1_amd64.deb
 d6c1aed6fa63b994d66c75343c676fd8b7a98952 689504 openssl-dbgsym_3.0.13-1~deb12u1_amd64.deb
 5fd1e6c9017f2d9a8f530c06e87ad50fd5fe013e 7594 openssl_3.0.13-1~deb12u1_amd64-buildd.buildinfo
 006e11a01809729c1586b0a6026a35c2de30e93f 1418092 openssl_3.0.13-1~deb12u1_amd64.deb
Checksums-Sha256:
 5226c9cde74bf01b7acb034bfcdf1a98641fa86246611df934171dd99f9a5100 1524144 libcrypto3-udeb_3.0.13-1~deb12u1_amd64.udeb
 d5946ce2f99efaab3a94cc341899c8d7d310ecd2d7a6a0b59c1fae5ee3faa6f4 2435376 libssl-dev_3.0.13-1~deb12u1_amd64.deb
 fe7f02ba0aafeff32361cd978a1836a5b27b0f7fd559ec02b8c084743b55ee4f 4768840 libssl3-dbgsym_3.0.13-1~deb12u1_amd64.deb
 113e1acbc50198e90d2d12205cae47a96b6ccd50fbc6e914415fedf71881f4fc 221396 libssl3-udeb_3.0.13-1~deb12u1_amd64.udeb
 8e88b98b3fc634721d0899f498d4cf2e62405faaab6582123c7923b1ec8129e1 2021692 libssl3_3.0.13-1~deb12u1_amd64.deb
 3cd888aac6d3c97ff496b8f823940acc5460d3b13dd397c203a882e50857861a 689504 openssl-dbgsym_3.0.13-1~deb12u1_amd64.deb
 101c6393832e6bb5ffcbb744d268e040d0d1ce31ea664491d297e40b8b9e84f2 7594 openssl_3.0.13-1~deb12u1_amd64-buildd.buildinfo
 262faebdc38b64e9e0553388e8608b0b6ae1b56871e7a8b09737ab0f2df11f8c 1418092 openssl_3.0.13-1~deb12u1_amd64.deb
Files:
 49ddd31537ca4b63f9b53c0aee54297d 1524144 debian-installer optional libcrypto3-udeb_3.0.13-1~deb12u1_amd64.udeb
 8aeba5a12343e9cbcc2648f67a8abcbf 2435376 libdevel optional libssl-dev_3.0.13-1~deb12u1_amd64.deb
 ec88c059518c5882c4b86d03e16a3962 4768840 debug optional libssl3-dbgsym_3.0.13-1~deb12u1_amd64.deb
 ff544a91e17a15160632139b0c6c5626 221396 debian-installer optional libssl3-udeb_3.0.13-1~deb12u1_amd64.udeb
 2e82f301e29b3cbffd7c1c44e49033e7 2021692 libs optional libssl3_3.0.13-1~deb12u1_amd64.deb
 dfdc1d2694d5dfe5c3d2323c2e06a918 689504 debug optional openssl-dbgsym_3.0.13-1~deb12u1_amd64.deb
 d3d3fdb377d025fe6162d91cc614480d 7594 utils optional openssl_3.0.13-1~deb12u1_amd64-buildd.buildinfo
 d1fc3991831912ec9ded2ba2eda861c1 1418092 utils optional openssl_3.0.13-1~deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=JDna
-----END PGP SIGNATURE-----