-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 03 Mar 2024 10:47:43 +0100
Source: openssl
Architecture: source
Version: 3.0.13-1~deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@alioth-lists.debian.net>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Closes: 1055473 1060347 1060858 1061582
Changes:
 openssl (3.0.13-1~deb12u1) bookworm; urgency=medium
 .
   * Import 3.0.13
    - CVE-2023-5678 (Fix excessive time spent in DH check / generation with
      large Q parameter value) (Closes: #1055473).
    - CVE-2023-6129 (POLY1305 MAC implementation corrupts vector registers on
      PowerPC) (Closes: #1060347).
    - CVE-2023-6237 (Excessive time spent checking invalid RSA public keys)
      (Closes: #1060858)
    - CVE-2024-0727 (PKCS12 Decoding crashes) (Closes: #1061582).
Checksums-Sha1:
 407def1c38e50e1824be2ab7ad0dcd5717a2178a 2501 openssl_3.0.13-1~deb12u1.dsc
 18b985dcd3fc0bab54cc4bfc10fa9a80ce9e345d 15294843 openssl_3.0.13.orig.tar.gz
 87c21896766d59f4fdf6cf234fb8ed0ba9b656c0 833 openssl_3.0.13.orig.tar.gz.asc
 d88598924a581a34da15d04b9d015159489f2ede 69208 openssl_3.0.13-1~deb12u1.debian.tar.xz
Checksums-Sha256:
 a0d0583621b6650a7b0972b5857f0feeb98abb60272fc975c51a70ffeca3f0f0 2501 openssl_3.0.13-1~deb12u1.dsc
 88525753f79d3bec27d2fa7c66aa0b92b3aa9498dafd93d7cfa4b3780cdae313 15294843 openssl_3.0.13.orig.tar.gz
 ab7d7aecc132ea07c56c5315a2b2d3ff2d02daf0eab0e1464f6245309391130a 833 openssl_3.0.13.orig.tar.gz.asc
 36cdd056f863a01560d760df4a2ead07b3f93104355aefb3a25704a271e0fa6e 69208 openssl_3.0.13-1~deb12u1.debian.tar.xz
Files:
 8468a93c0fbb8f1699ef20aeeebdee06 2501 utils optional openssl_3.0.13-1~deb12u1.dsc
 c15e53a62711002901d3515ac8b30b86 15294843 utils optional openssl_3.0.13.orig.tar.gz
 45dccc24f083d6b857b1b3328611444a 833 utils optional openssl_3.0.13.orig.tar.gz.asc
 1e0c6abccaa5118a1cf94804c1bec599 69208 utils optional openssl_3.0.13-1~deb12u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=4fSs
-----END PGP SIGNATURE-----