[Pkg-openssl-devel] openssl_3.3.1-1_source.changes ACCEPTED into experimental

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 04 Jun 2024 18:37:30 +0200
Source: openssl
Architecture: source
Version: 3.3.1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian OpenSSL Team <pkg-openssl-devel at alioth-lists.debian.net>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Closes: 1071972 1072113
Changes:
 openssl (3.3.1-1) experimental; urgency=medium
 .
   * Import 3.3.1.
     - CVE-2024-4603 (Excessive time spent checking DSA keys and parameters)
       (Closes: #1071972).
     - CVE-2024-4741 (Use After Free with SSL_free_buffers)
       (Closes: #1072113).
Checksums-Sha1:
 3373c0c376ab6cdd00957f517c0e94aea83f3313 2482 openssl_3.3.1-1.dsc
 7376042523b6a229bc697b8099c2af369d1a84c6 18055752 openssl_3.3.1.orig.tar.gz
 3a5ba76bd10fbd28be1d3a90d153feed837f11b7 833 openssl_3.3.1.orig.tar.gz.asc
 bb08c5356d2b664dbf2a94f747fc2c81c81b6db5 66708 openssl_3.3.1-1.debian.tar.xz
Checksums-Sha256:
 8ddb11a01ec2bebddb3bd26bab9180c2ace9fdd3c0bd14e85bc1802dc602adb3 2482 openssl_3.3.1-1.dsc
 777cd596284c883375a2a7a11bf5d2786fc5413255efab20c50d6ffe6d020b7e 18055752 openssl_3.3.1.orig.tar.gz
 a1ca1547057b75e1750717d69a35a5373544cb42f671a1a7f672c4237aab1248 833 openssl_3.3.1.orig.tar.gz.asc
 ab48fdf6065a775d204ebd99440c005fbed06602da6a08d5f920881bb1f89c2c 66708 openssl_3.3.1-1.debian.tar.xz
Files:
 20ae9857d6e014b10a364e659ff6de43 2482 utils optional openssl_3.3.1-1.dsc
 8a4342b399c18f870ca6186299195984 18055752 utils optional openssl_3.3.1.orig.tar.gz
 7fe8722b795a91cf0f9f09511e9c9aed 833 utils optional openssl_3.3.1.orig.tar.gz.asc
 b064d4c1e573ca96e40b9dcf902c60b9 66708 utils optional openssl_3.3.1-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAmZfgjwACgkQBWQfF1cS
+luubwv9EMjB6P5Gj4+XKdwg2Fswrb23ZVATmJMK4O0tjGI/7fGGqlBqsoK+FSRT
AWjbXmQZFamALvjpJyWteJvsIY6ckgKa00zB4qmI0cRmT2jpbN4JFJlT3kciZ3X1
uEVKayKgxs+xIJ+IvUuMKZmHyDRCDT0ShRTmWNy8q+am6y9SzniJNT6/zju1z0q2
OhaNulE0XbBTBHseOuvDIIhzPpGGw8M7vVZ7CYvP7gvJGHXCzFfCoqRAI1HhUuY8
GVeLlFVALLanoItGjYqHp8j8fQjcbPiwBd/xWif6oL5CzKsB9PJsmZvqpR/PYPZg
vkVYEf4YlE+5KW2C2YSnWckDwmHNhQQZrI5e3Mf7Q/wFNYeufZ9tT7/tSXA8ESoc
4pigiUdSI4WxjTGbr8uikeEd+ItPKlg5bTB5a4RvwuZiebn8QzFElHvgeh0ZybIc
v+OCAnVM2Wv3dXRGSXBUg2y6LXkRWV9x3PglqbGAOxRjwbn3QxOZjfxfnPJ1afdJ
PWtRTFGU
=OdUQ
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openssl-devel/attachments/20240604/15e6c065/attachment.sig>