-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 May 2023 23:30:44 +0200 Source: openssl Binary: libcrypto1.1-udeb libssl-dev libssl1.1 libssl1.1-dbgsym libssl1.1-udeb openssl openssl-dbgsym Architecture: s390x Version: 1.1.1n-0+deb11u5 Distribution: bullseye-security Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Sebastian Andrzej Siewior Description: libcrypto1.1-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl1.1 - Secure Sockets Layer toolkit - shared libraries libssl1.1-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Closes: 1034720 Changes: openssl (1.1.1n-0+deb11u5) bullseye-security; urgency=medium . * CVE-2023-0464 (Excessive Resource Usage Verifying X.509 Policy Constraints) (Closes: #1034720). * CVE-2023-0465 (Invalid certificate policies in leaf certificates are silently ignored). * CVE-2023-0466 (Certificate policy check not enabled). * Alternative fix for CVE-2022-4304 (Timing Oracle in RSA Decryption). * CVE-2023-2650 (Possible DoS translating ASN.1 object identifiers). Checksums-Sha1: 089780a38ec0389a1800657632cbf0f559ff2de4 788348 libcrypto1.1-udeb_1.1.1n-0+deb11u5_s390x.udeb 1e7e344450f378064ee980e868c030579fb9a890 1479544 libssl-dev_1.1.1n-0+deb11u5_s390x.deb 41f3545a45b284178b73b9516b4c8acd7f00b710 2956848 libssl1.1-dbgsym_1.1.1n-0+deb11u5_s390x.deb e8b4f880ce987adcb1777ccfe0a068830459b864 170264 libssl1.1-udeb_1.1.1n-0+deb11u5_s390x.udeb c4766a6a1158611bdc029a30f004985a138d5343 1215152 libssl1.1_1.1.1n-0+deb11u5_s390x.deb 7cdc1d5460907e899f32eba67f937c8f43fb73dd 555848 openssl-dbgsym_1.1.1n-0+deb11u5_s390x.deb dc070a2fefd8f0ce8fb4de204b017448463253ad 7629 openssl_1.1.1n-0+deb11u5_s390x-buildd.buildinfo 2f2d0ab53ec9ddc42102fb68129636469931810e 839324 openssl_1.1.1n-0+deb11u5_s390x.deb Checksums-Sha256: 4142b2a6f514653da72fbcd13e8185e58bff790ac6012c18f4948933e2cbbd6c 788348 libcrypto1.1-udeb_1.1.1n-0+deb11u5_s390x.udeb 192d1f88a00bba5f506dbd60c9acfdd46713c328d6cdc993b226307a933e47ad 1479544 libssl-dev_1.1.1n-0+deb11u5_s390x.deb 9ab3f59b42100ee1eab815810873df60a133f80566627442a2939fb154154330 2956848 libssl1.1-dbgsym_1.1.1n-0+deb11u5_s390x.deb cded0a59d4c9e88d11fda44db32447f423f04691e228b73e9043fbaa5c267808 170264 libssl1.1-udeb_1.1.1n-0+deb11u5_s390x.udeb 72f145395f87d734240b907047997e2d0f80e6b8313ee4399d6efb5a694769d8 1215152 libssl1.1_1.1.1n-0+deb11u5_s390x.deb 9e931d3ea3581918de27e7e97e32f96c69e0de625192a182c74a421d1cc76798 555848 openssl-dbgsym_1.1.1n-0+deb11u5_s390x.deb ea04f67d7578c1a2926d65a51786426e3872585216cf4525c494b96bcbb50453 7629 openssl_1.1.1n-0+deb11u5_s390x-buildd.buildinfo 9adefe210a0c41cacbdfbc67613182474b390244881358e14bf9dafe0af581df 839324 openssl_1.1.1n-0+deb11u5_s390x.deb Files: 3ddfcf44b3485eb4cba011b1ea41f8f8 788348 debian-installer optional libcrypto1.1-udeb_1.1.1n-0+deb11u5_s390x.udeb bb6558a4176d3b1115ce93967c813d02 1479544 libdevel optional libssl-dev_1.1.1n-0+deb11u5_s390x.deb 66849ae1b522e2f1a37e82a4709ae3cb 2956848 debug optional libssl1.1-dbgsym_1.1.1n-0+deb11u5_s390x.deb f5d22c4643e957fa32d657a9781d6a23 170264 debian-installer optional libssl1.1-udeb_1.1.1n-0+deb11u5_s390x.udeb bbd63015e19aec95779dd7f1d4936b78 1215152 libs optional libssl1.1_1.1.1n-0+deb11u5_s390x.deb 1848d3b0504bc742826d3711317e21c0 555848 debug optional openssl-dbgsym_1.1.1n-0+deb11u5_s390x.deb 8a38c652c0897a23aefa7c2ec3aea633 7629 utils optional openssl_1.1.1n-0+deb11u5_s390x-buildd.buildinfo ff11f0abb0aaa0046cf215e73d15faa7 839324 utils optional openssl_1.1.1n-0+deb11u5_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEKrZTN06npYMYIgrtXmwDt3BKCdIFAmR0iXQACgkQXmwDt3BK CdKxFg//Wn2Yy+bmIqvQObhvGwVq5xEJLLStAy4IMpW6cIk9MjoMCk28bVSbP+QC w/6mdKT88L5R9X8eBuCPKQ9fz27PXbK4GcprbTS+zLyFyuu0cTjjnaq9MxlNt5an APW+NXpQ2BcK45vTaQpuBGcKBctKL2JZVcIgXZdcmjd+hdhSyF6+kQccK8+ASgsw K5S/CgBLfI9LMgfB8zANkT0aCxZ2t1pUdc7xvF1k2+qfUd7lPDos7ySfu4KH3hy3 HXwG7as4KsVx2RvwocOxOPUvV9n646d42bov6WfEDmrUqBavXrNsA2rSKv+vxqmC QNwBwhPX5Pg7YBn9xmY4FotrIjPBIwEibnF4IgzCMAf+gt8KwCStg9yqepLVFA8I 6AvLGRiTO4OrwnA4S503oj15uluv2jAVrxvKqz+iHOi0pvcTXtx8L/8/wWe8EFhl Q4K9Xg9thZBHpTIdzfGyjlApmdkLrbwfs+X5Gacu9mDe/zidv55UZ4IXv/H88wEL eKHi/z0YNj1ExmgaKUCNongT18MN9VS91TUi8sV85ZpQXRolHgRbCcm+P0p/XRDR tVPChHKjyFMPWwz4MbhCX71fQ9lIrslG0K9VHOGGk+XeCJ46TGClx7ygdtpW3eo5 cycyAdaFqTEDRVSzuhye7/mmpfBAeFO2hrUfVD2RpxH2iN7I1Rc= =8nAz -----END PGP SIGNATURE-----