Accepted openssl 1.1.0l-1~deb9u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Sep 2019 21:46:29 +0200
Source: openssl
Architecture: source
Version: 1.1.0l-1~deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Changes:
openssl (1.1.0l-1~deb9u1) stretch-security; urgency=medium
.
* Import 1.1.0l
- CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP
construction).
- CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and
CMS_decrypt_set1_pkey).
Checksums-Sha1:
53f08b7db5d52f0be509f843187bdad2c439b2f5 2437 openssl_1.1.0l-1~deb9u1.dsc
6e3507b29e2630f56023887d1f7d7ba1f584819b 5294857 openssl_1.1.0l.orig.tar.gz
88423fabe5282f7c854b0b7b1f095f620489df44 488 openssl_1.1.0l.orig.tar.gz.asc
fa6ac79e0d9cc8a5ca97313b027acfec5b13e007 72100 openssl_1.1.0l-1~deb9u1.debian.tar.xz
Checksums-Sha256:
9ae8fb3e89110ad3c75ba6a52b8f40cc5419b56f31c5c8b6f6aca0949cd90ea7 2437 openssl_1.1.0l-1~deb9u1.dsc
74a2f756c64fd7386a29184dc0344f4831192d61dc2481a93a4c5dd727f41148 5294857 openssl_1.1.0l.orig.tar.gz
afc83de9f9f1ef5f79ab8a31bbdeb26f9ac9a07cfdab7628a773267d31f85e42 488 openssl_1.1.0l.orig.tar.gz.asc
78290d8a50219fe9c1c5676084a5567b23aff12f701bcd975e4c0d32264d5116 72100 openssl_1.1.0l-1~deb9u1.debian.tar.xz
Files:
dcae1d67b91a35a76e6ab4a25cd0177a 2437 utils optional openssl_1.1.0l-1~deb9u1.dsc
48278a48ec9bedb84565f7e741612fb4 5294857 utils optional openssl_1.1.0l.orig.tar.gz
179b104e0c1998557fa8433e1c10258c 488 utils optional openssl_1.1.0l.orig.tar.gz.asc
0b14140e764c86796a7f3b4efc84b0ff 72100 utils optional openssl_1.1.0l-1~deb9u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAl2OdZ4ACgkQBWQfF1cS
+lsoSgv/Whpt9P/mKic5AaC8cMd3qu9iM0PreTQgASCe8PZB50FKX8swEATz/rCY
H2fThnqdYLAUunnqGZIJXd2SK5VBRZ/4lc81qIkQCj60YBoaJA1zOVBoqQlvHJ8I
QdBgHp3LVao1uKyEDsyz60UF2oJjfDV27RDjhxEj8Y5EwuCi0FzVC4dwLGi5k4Gi
/0GLfDukpYqNL/lP63Nqb73IgO0MaEa5ZjOehzLBvr44U30e3ZlUok9LLVnPA8tx
WCcG7lqQ0EiuC/aQOh7XK/hMMNdZpgEmTHQABMMxY9tRIx3u3RitgAIEFxB4xgh7
rbZwgcBUQQmU47nsdmjgqzOdmgYX9c7w4KMiG0Flb6HxZrqOCvrmj1yPKo+R1jQB
9gK5XqJHsoJnRHMNr6/kUdwQKQJpZoj1KFU0vewF0ZnA7X3SwYDVP5bOGYgyOSw0
Omie3N5ef27pZHDRFeDWv43vNiojLPj00IZadVHBA7TaW4RdEXlmm05qvENHAQKS
fGjMkoXb
=m/Fv
-----END PGP SIGNATURE-----
Reply to: