[Pkg-openssl-devel] openssl_3.2.1-1_source.changes ACCEPTED into experimental

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 03 Feb 2024 17:23:00 +0100
Source: openssl
Architecture: source
Version: 3.2.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian OpenSSL Team <pkg-openssl-devel at alioth-lists.debian.net>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Closes: 1060347 1060858 1061582
Changes:
 openssl (3.2.1-1) experimental; urgency=medium
 .
   * Import 3.2.1
    - CVE-2024-0727 (PKCS12 Decoding crashes). (Closes: #1061582).
    - CVE-2023-6237 (Excessive time spent checking invalid RSA public keys)
      (Closes: #1060858).
    - CVE-2023-6129 (POLY1305 MAC implementation corrupts vector registers on
      PowerPC) (Closes: #1060347).
Checksums-Sha1:
 9c01be6f17b9d117f9692cf1bc7b7aff842404d7 2479 openssl_3.2.1-1.dsc
 9668723d65d21a9d13e985203ce8c27ac5ecf3ae 17733249 openssl_3.2.1.orig.tar.gz
 8b9dce0adc7650a309b0096f7e45dbfb53d543fe 833 openssl_3.2.1.orig.tar.gz.asc
 0b817f0da477560033c3a9039c618b734fb0a7c5 66384 openssl_3.2.1-1.debian.tar.xz
Checksums-Sha256:
 ce953fde497eade012a27af290bf78529435f64e8a15a9925fa98563dda5a42a 2479 openssl_3.2.1-1.dsc
 83c7329fe52c850677d75e5d0b0ca245309b97e8ecbcfdc1dfdc4ab9fac35b39 17733249 openssl_3.2.1.orig.tar.gz
 a394b4f5242feb8b828b398cbea809e07bb73e699ae0b84413efb8c5916361c1 833 openssl_3.2.1.orig.tar.gz.asc
 dd9f6961113b34d835f4ca6e2ae8efdd9fd2c221081426b9df5e8b428ab8b7fc 66384 openssl_3.2.1-1.debian.tar.xz
Files:
 eb99c92168f433842c349fa577e9ebcc 2479 utils optional openssl_3.2.1-1.dsc
 c239213887804ba00654884918b37441 17733249 utils optional openssl_3.2.1.orig.tar.gz
 a3d1585772f9bde6d87e38d7475d2729 833 utils optional openssl_3.2.1.orig.tar.gz.asc
 b841348d4cb1a2b37a29321b6a38870d 66384 utils optional openssl_3.2.1-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=VYFw
-----END PGP SIGNATURE-----