Accepted wolfssl 4.6.0+p1-0+deb11u2 (source) into oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 22 Jul 2023 10:08:27 -0600
Source: wolfssl
Architecture: source
Version: 4.6.0+p1-0+deb11u2
Distribution: bullseye
Urgency: medium
Maintainer: Felix Lechner <felix.lechner@lease-up.com>
Changed-By: Jacob Barthelmeh <sirkilamole@msn.com>
Changes:
wolfssl (4.6.0+p1-0+deb11u2) bullseye; urgency=medium
.
* Stable update for the following vulnerabilities. The patches were
provided by upstream.
- PR 5498: CVE-2022-42961 (Rowhammer ECDSA key disclosure)
- PR 5588: CVE-2022-39173 (buffer overflow during TLS 1.3 handshake)
- PR 5682: CVE-2022-42905 (buffer over-read on heap with WOLFSSL_CALLBACKS)
- PR 6412: CVE-2023-3724 (predictable buffer in input keying material)
Checksums-Sha1:
4346447fbe993a740e64a63f7e614fec4bda6ae8 2160 wolfssl_4.6.0+p1-0+deb11u2.dsc
81ebec4ae67afea2f41e78e6e23823160215e108 37276 wolfssl_4.6.0+p1-0+deb11u2.debian.tar.xz
90587a6470ff1904940c75c921e445ea8d6995e3 5818 wolfssl_4.6.0+p1-0+deb11u2_source.buildinfo
Checksums-Sha256:
5ab4d6d339eaee7d3e3416a13c5432768d10dafc6bd780e648eb030155c2d5ee 2160 wolfssl_4.6.0+p1-0+deb11u2.dsc
7869b432a2078a8ee3867a44df3c6a416a2cb2f1d3f602a2ea2df8eca11415d8 37276 wolfssl_4.6.0+p1-0+deb11u2.debian.tar.xz
5657cbb2f2780c659e992bc77897305970cd5d886028ed4c4f7e72162a49681f 5818 wolfssl_4.6.0+p1-0+deb11u2_source.buildinfo
Files:
727a96bb7faae6ff53ee104f1b0ce53e 2160 libs optional wolfssl_4.6.0+p1-0+deb11u2.dsc
c2898fe3bc673779bfb9f0be3d9d3950 37276 libs optional wolfssl_4.6.0+p1-0+deb11u2.debian.tar.xz
5bf1b8e6472e94a7296b200bfe7b96eb 5818 libs optional wolfssl_4.6.0+p1-0+deb11u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=DaF/
-----END PGP SIGNATURE-----
Reply to: