-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 May 2023 23:30:44 +0200 Source: openssl Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-dbgsym libssl1.1-udeb openssl openssl-dbgsym Architecture: ppc64el Version: 1.1.1n-0+deb11u5 Distribution: bullseye-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Sebastian Andrzej Siewior Description: libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl1.1 - Secure Sockets Layer toolkit - shared libraries libssl1.1-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Closes: 1034720 Changes: openssl (1.1.1n-0+deb11u5) bullseye-security; urgency=medium . * CVE-2023-0464 (Excessive Resource Usage Verifying X.509 Policy Constraints) (Closes: #1034720). * CVE-2023-0465 (Invalid certificate policies in leaf certificates are silently ignored). * CVE-2023-0466 (Certificate policy check not enabled). * Alternative fix for CVE-2022-4304 (Timing Oracle in RSA Decryption). * CVE-2023-2650 (Possible DoS translating ASN.1 object identifiers). Checksums-Sha1: 161d84edb1c7dd7e3a0600c84034ed91bd10eb21 1085060 libcrypto1.1-udeb_1.1.1n-0+deb11u5_ppc64el.udeb ec05a124155b8f635bf2df11adfef6b2011128d2 1846148 libssl-dev_1.1.1n-0+deb11u5_ppc64el.deb e85bba3137f34e750c0c381ea88fb7b9351c2461 2978380 libssl1.1-dbgsym_1.1.1n-0+deb11u5_ppc64el.deb 7a3eb6eac006580579ecabe791ff94fed97d2dfc 204056 libssl1.1-udeb_1.1.1n-0+deb11u5_ppc64el.udeb 31ac4ecc40b0f2f1d08ac48f25476cc4a29b834b 1545812 libssl1.1_1.1.1n-0+deb11u5_ppc64el.deb 4b980077e229914f20145f5629a8d3b9d9bb7788 553616 openssl-dbgsym_1.1.1n-0+deb11u5_ppc64el.deb dffb00aa3dd2d31f86440826afaa7718cfd46891 7744 openssl_1.1.1n-0+deb11u5_ppc64el-buildd.buildinfo 16684061c70c9656763992a754b61a77032e258d 852564 openssl_1.1.1n-0+deb11u5_ppc64el.deb Checksums-Sha256: 01c7b488462884f74bf1ccc06af87673a47497ef0f916fd6513f5f0012cfed22 1085060 libcrypto1.1-udeb_1.1.1n-0+deb11u5_ppc64el.udeb add12ace86ba95e3c22429145d6bf52c162680bd545dfb38b3f58c406531fef3 1846148 libssl-dev_1.1.1n-0+deb11u5_ppc64el.deb 9c34312f4123b0f4ca664045fe94e0c2e8ae05ada86304040f3d856257dc2d46 2978380 libssl1.1-dbgsym_1.1.1n-0+deb11u5_ppc64el.deb 4bf5432e233d4be62658a49f8a9ef8b27a8f50d4089b7fbb6e95dca1402572bd 204056 libssl1.1-udeb_1.1.1n-0+deb11u5_ppc64el.udeb a9a5440404aab89f1bd84445413f94cee4fc70ba186c032ca025cccb3b440d88 1545812 libssl1.1_1.1.1n-0+deb11u5_ppc64el.deb a4619f21974d06246df86528defd7da9d5daa4c2e4790f79dff8beda4b800f34 553616 openssl-dbgsym_1.1.1n-0+deb11u5_ppc64el.deb 62e70b59542c6621e6aa84c8ba2d70aaf9a49a4b52715640bc8925845939a775 7744 openssl_1.1.1n-0+deb11u5_ppc64el-buildd.buildinfo b265216f73fa69285e5d17e125dccaccb0736dfc9ff9c29de736ec17a73dd4bb 852564 openssl_1.1.1n-0+deb11u5_ppc64el.deb Files: 146aa567ae41c0d7385ec952e1b289ac 1085060 debian-installer optional libcrypto1.1-udeb_1.1.1n-0+deb11u5_ppc64el.udeb f175dde12cdef22fce1dcb4cd252b4be 1846148 libdevel optional libssl-dev_1.1.1n-0+deb11u5_ppc64el.deb dabf72f83e28df6093e211b88429e4fa 2978380 debug optional libssl1.1-dbgsym_1.1.1n-0+deb11u5_ppc64el.deb b4a1b50210aef6ab5db27a55c3403c31 204056 debian-installer optional libssl1.1-udeb_1.1.1n-0+deb11u5_ppc64el.udeb 28c987ab4cbf899a026d03dbd57e0ce9 1545812 libs optional libssl1.1_1.1.1n-0+deb11u5_ppc64el.deb 13bff667bed89a037134f998c2c2f613 553616 debug optional openssl-dbgsym_1.1.1n-0+deb11u5_ppc64el.deb 849d1f89ce3ab13b473b1f215afb001a 7744 utils optional openssl_1.1.1n-0+deb11u5_ppc64el-buildd.buildinfo e680f522de8bf1bff44dbb1d29843386 852564 utils optional openssl_1.1.1n-0+deb11u5_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEG6HwUrz8cgTg6xaPZnETzaamDSwFAmR0ijMACgkQZnETzaam DSzS8hAAsD9cPU4F0cDd8hFTtQgKqq7cgW47d2TE1c2PjJw2BW07ZQ5BqMZy4Mh0 LbBSxueN5DwErIFrKLSNn2fKH4bXFtjsEIkWfW0sYw5eVYm2gB+r5+FcOzhB2Mzn uUQIiMRN13KhhLSXrMUVDmgHK+LTCmQ0iRlJfzYKzR1d/9NqJEqlmXAczIEe8zll Ng+UxaEmSVrro1Tw6K9rNlyJwwWiLgfVi05Ye6XS/EdZtXP9f2OFK81VWrqap12r VK5Ib9XXj0qAL0coppwaLpkA3fTL3SbuFZYixm2VCuVj8rH8511fWPiLhDrAmydk Owr1HWUI4P5qI/N1IuXKKXA7YMXtresGhJUnV/OWcXYDHYNe2VC7hPLOZNJdhh68 wY5f6AksJ6IikFCEF8JiH7kElJyTv1KEWdWvmsI9FMxzdu/3svrBf2LtTWrxN/cJ NP/aBF/MwQ817G+5fuX01rxxtywHLQE1Il1+O6LwCfeT+WedLG3oiSdpTSDUEx9x H3Ms6YADC0hfkj+bFb8ox1pIV7ZEvYuvQHCj1mYS1uGxdlDCAAkzdQrrT4f1TYie a1lEm7UgFFx6Kwpddh4i2w2GTNL5SJwC6zqrU/a0tUj3c2eJYi3AUMnqLqX+bGGY qoMcAlOZdM4mO8bgEAKiYIGmCYykJBKUQ5K88KVRv/1YRt3vRHU= =WJNB -----END PGP SIGNATURE-----