-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 31 Oct 2024 12:02:42 +0800
Source: openssl
Architecture: source
Version: 1.1.1n-0+deb11u6
Distribution: bullseye-security
Urgency: high
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Changed-By: Sean Whitton <spwhitton@spwhitton.name>
Closes: 1055473 1061582 1068658 1072113 1074487 1085378
Changes:
openssl (1.1.1n-0+deb11u6) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS Security Team.
* Backport upstream fixes for
- CVE-2023-5678 (denial of service w/ excessively long X9.42 DH keys)
(Closes: #1055473)
- CVE-2024-0727 (denial of service on null field in PKCS12 file)
(Closes: #1061582)
- CVE-2024-2511 (denial of service when SSL_OP_NO_TICKET with TLSv1.3)
(Closes: #1068658)
- CVE-2024-4741 (use after free with SSL_free_buffers)
(Closes: #1072113)
- CVE-2024-5535 (crash or buffer overread in SSL_select_next_proto)
(Closes: #1074487)
- CVE-2024-9143 (out-of-bounds access w/ certain elliptic curve APIs)
(Closes: #1085378).
Checksums-Sha1:
027ea400876e0332c657c614d5b13b62fc7152ab 2692 openssl_1.1.1n-0+deb11u6.dsc
209638cca789de0122e9cb37f37d25589967d165 157932 openssl_1.1.1n-0+deb11u6.debian.tar.xz
38141170ceb51bbe743058e1fe1a0cea770ce23c 6229 openssl_1.1.1n-0+deb11u6_source.buildinfo
Checksums-Sha256:
ef3289a356939f761cc21bf6ad529034c5c00375dc8180631c5f05aa05160602 2692 openssl_1.1.1n-0+deb11u6.dsc
0551645c5479454e6e8866c1a904b2ec528a586c8768702a3f1b2939fb7ca7a2 157932 openssl_1.1.1n-0+deb11u6.debian.tar.xz
2b61c3d6831ebb24ce006ef0bfbb3f02b121c6848535bb95ae2da7224e7aa3bf 6229 openssl_1.1.1n-0+deb11u6_source.buildinfo
Files:
a75aa9612ae324be7783b1aa1208aed7 2692 utils optional openssl_1.1.1n-0+deb11u6.dsc
1b4a6be9a2e6b50d969606b98dd8905a 157932 utils optional openssl_1.1.1n-0+deb11u6.debian.tar.xz
146226b29badfe06b83e4cff09825280 6229 utils optional openssl_1.1.1n-0+deb11u6_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=GN7T
-----END PGP SIGNATURE-----
Attachment:
pgpGYzfU2yjFH.pgp
Description: PGP signature