Accepted openssl 1.0.1t-1+deb8u10 (source all amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 21 Nov 2018 19:33:02 +0100
Source: openssl
Binary: openssl libssl1.0.0 libcrypto1.0.0-udeb libssl-dev libssl-doc libssl1.0.0-dbg
Architecture: source all amd64
Version: 1.0.1t-1+deb8u10
Distribution: jessie-security
Urgency: high
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libcrypto1.0.0-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
libssl-dev - Secure Sockets Layer toolkit - development files
libssl-doc - Secure Sockets Layer toolkit - development documentation
libssl1.0.0 - Secure Sockets Layer toolkit - shared libraries
libssl1.0.0-dbg - Secure Sockets Layer toolkit - debug information
openssl - Secure Sockets Layer toolkit - cryptographic utility
Changes:
openssl (1.0.1t-1+deb8u10) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* CVE-2018-0735
Samuel Weiser reported a timing vulnerability in the OpenSSL ECDSA
signature generation, which might leak information to recover the
private key.
* CVE-2018-5407
Alejandro Cabrera Aldaya, Billy Brumley, Sohaib ul Hassan, Cesar
Pereida Garcia and Nicola Tuveri reported a vulnerability to a
timing side channel attack, which might be used to recover the
private key.
Checksums-Sha1:
16242846b6500000f21a69b582dcc5b1d8a35f13 2435 openssl_1.0.1t-1+deb8u10.dsc
a684ba59d6721a90f354b1953e19611646be7e7d 4556447 openssl_1.0.1t.orig.tar.gz
c4d65053263814981bc20ea0e27b8b395b1e2c75 114312 openssl_1.0.1t-1+deb8u10.debian.tar.xz
1120c52213ea8b7233590b5a4cedf170e2ac6330 1167862 libssl-doc_1.0.1t-1+deb8u10_all.deb
c66bffbddf9ce8ebe81c0670bf69561f5300ee45 664426 openssl_1.0.1t-1+deb8u10_amd64.deb
6ea0898c24be3a32a93dc83db39c8730c7803a35 1048342 libssl1.0.0_1.0.1t-1+deb8u10_amd64.deb
55cc97942934047193f5c12455c56e4864746305 643282 libcrypto1.0.0-udeb_1.0.1t-1+deb8u10_amd64.udeb
dd3a692182e9e6997d261ae0e0d90ff63a8c25b6 1281776 libssl-dev_1.0.1t-1+deb8u10_amd64.deb
ee8977b953073a8304b0bda21b97e6cd8cc20c93 2818772 libssl1.0.0-dbg_1.0.1t-1+deb8u10_amd64.deb
Checksums-Sha256:
97749e587e4b1efebb8d1175fc954d47a2b648e9a01f2a71e74717a98dafe035 2435 openssl_1.0.1t-1+deb8u10.dsc
4a6ee491a2fdb22e519c76fdc2a628bb3cec12762cd456861d207996c8a07088 4556447 openssl_1.0.1t.orig.tar.gz
0a15e679a90df37152df559ce331f843a26178d4d5550d7306851d28b4fd2d13 114312 openssl_1.0.1t-1+deb8u10.debian.tar.xz
e1246f35af03b8249d515ccd57d373f40d905e9d9ed648569aac31cc1dec841a 1167862 libssl-doc_1.0.1t-1+deb8u10_all.deb
e0647df734ec51282fcfde4a82197c67fd92bcf402b80629daa976d5bfacc199 664426 openssl_1.0.1t-1+deb8u10_amd64.deb
432915b27f76debbb811cce1cf098ebf665c7a559caa92857d8934449ab04a6c 1048342 libssl1.0.0_1.0.1t-1+deb8u10_amd64.deb
271836ca79ff60681f847a15294a3a30e894f456abbd52574acd2ebd5133171b 643282 libcrypto1.0.0-udeb_1.0.1t-1+deb8u10_amd64.udeb
def3c9388560139a44f697b1b627aef91c6f40edf80f72bb885280df4cd78bad 1281776 libssl-dev_1.0.1t-1+deb8u10_amd64.deb
31e03d858827d6205863a080c214e2f915f3053cecc0179a147494fc1f9feeb3 2818772 libssl1.0.0-dbg_1.0.1t-1+deb8u10_amd64.deb
Files:
2a49e9e18b00555f7dfb1b2c14bae71e 2435 utils optional openssl_1.0.1t-1+deb8u10.dsc
9837746fcf8a6727d46d22ca35953da1 4556447 utils optional openssl_1.0.1t.orig.tar.gz
b9fd0af0d583815962f4b778a1c15424 114312 utils optional openssl_1.0.1t-1+deb8u10.debian.tar.xz
7cfb46a10025fe56692ca1107df40135 1167862 doc optional libssl-doc_1.0.1t-1+deb8u10_all.deb
48bf5b17ad213a8f40477b185d083d02 664426 utils optional openssl_1.0.1t-1+deb8u10_amd64.deb
a8dc6e2a870541827131ffe8e7a9a73f 1048342 libs important libssl1.0.0_1.0.1t-1+deb8u10_amd64.deb
29b09df60bd73f112b4466841191c502 643282 debian-installer optional libcrypto1.0.0-udeb_1.0.1t-1+deb8u10_amd64.udeb
49ee801afec8687933f0d936ad26646a 1281776 libdevel optional libssl-dev_1.0.1t-1+deb8u10_amd64.deb
ddaa5d383d8eebf9e4b8b04b82bb245c 2818772 debug extra libssl1.0.0-dbg_1.0.1t-1+deb8u10_amd64.deb
Package-Type: udeb
-----BEGIN PGP SIGNATURE-----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=HTib
-----END PGP SIGNATURE-----