lp:ubuntu/+source/openssl

Author: Ubuntu Git Importer
Author Date: 2020-03-19 04:44:10 UTC

DSC file for 1.1.1e-1

Author: Sebastian Andrzej Siewior
Author Date: 2020-03-18 20:59:39 UTC

Import patches-unapplied version 1.1.1e-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 71d0fa322bbed6293121ea58e356a2e086728947

New changelog entries:
  * Use dh-compat level 12.
  * New upstream version
    - CVE-2019-1551 (Overflow in the x64_64 Montgomery squaring procedure),
    (Closes: #947949).
  * Update symbol list.
  * Update Standards-Version to 4.5.0. No changes required.
  * Add musl configurations (Closes: #941765).

Author: Sebastian Andrzej Siewior
Author Date: 2020-03-18 20:59:39 UTC

Import patches-applied version 1.1.1e-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 381f7dde68753870776d030c02e8f56d8fe746a4
Unapplied parent: 0d7d2a10e66d0db427e99ecbfbaeb8ad03768b0b

New changelog entries:
  * Use dh-compat level 12.
  * New upstream version
    - CVE-2019-1551 (Overflow in the x64_64 Montgomery squaring procedure),
    (Closes: #947949).
  * Update symbol list.
  * Update Standards-Version to 4.5.0. No changes required.
  * Add musl configurations (Closes: #941765).

Author: Ubuntu Git Importer
Author Date: 2020-03-06 06:33:44 UTC

DSC file for 1.1.1d-2ubuntu6

Author: Dimitri John Ledkov
Author Date: 2020-03-06 04:08:51 UTC

Import patches-unapplied version 1.1.1d-2ubuntu6 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 1917c7d31f5d1eb35abf45c77688091c015466ca

New changelog entries:
  * Revert version number change to 1.1.1e-dev.

Author: Dimitri John Ledkov
Author Date: 2020-03-06 04:08:51 UTC

Import patches-applied version 1.1.1d-2ubuntu6 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: a6ec3da4a0d6fea6674e43f40dcf0fb425a693ee
Unapplied parent: 579887fa9e76cbb562cac36216fb38b63bbf5b8c

New changelog entries:
  * Revert version number change to 1.1.1e-dev.

Author: Dimitri John Ledkov
Author Date: 2020-03-06 04:08:51 UTC

Import patches-applied version 1.1.1d-2ubuntu6 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: a6ec3da4a0d6fea6674e43f40dcf0fb425a693ee
Unapplied parent: 579887fa9e76cbb562cac36216fb38b63bbf5b8c

New changelog entries:
  * Revert version number change to 1.1.1e-dev.

Author: Dimitri John Ledkov
Author Date: 2020-03-06 04:08:51 UTC

Import patches-applied version 1.1.1d-2ubuntu6 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: a6ec3da4a0d6fea6674e43f40dcf0fb425a693ee
Unapplied parent: 579887fa9e76cbb562cac36216fb38b63bbf5b8c

New changelog entries:
  * Revert version number change to 1.1.1e-dev.

Author: Dimitri John Ledkov
Author Date: 2020-03-06 04:08:51 UTC

Import patches-unapplied version 1.1.1d-2ubuntu6 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 1917c7d31f5d1eb35abf45c77688091c015466ca

New changelog entries:
  * Revert version number change to 1.1.1e-dev.

Author: Dimitri John Ledkov
Author Date: 2020-03-06 04:08:51 UTC

Import patches-unapplied version 1.1.1d-2ubuntu6 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 1917c7d31f5d1eb35abf45c77688091c015466ca

New changelog entries:
  * Revert version number change to 1.1.1e-dev.

Author: Dimitri John Ledkov
Author Date: 2020-03-06 04:08:51 UTC

Import patches-unapplied version 1.1.1d-2ubuntu6 to ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: 1917c7d31f5d1eb35abf45c77688091c015466ca

New changelog entries:
  * Revert version number change to 1.1.1e-dev.

Author: Dimitri John Ledkov
Author Date: 2020-03-06 04:08:51 UTC

Import patches-applied version 1.1.1d-2ubuntu6 to applied/ubuntu/focal-proposed

Imported using git-ubuntu import.

Changelog parent: a6ec3da4a0d6fea6674e43f40dcf0fb425a693ee
Unapplied parent: 579887fa9e76cbb562cac36216fb38b63bbf5b8c

New changelog entries:
  * Revert version number change to 1.1.1e-dev.

Author: Sebastian Andrzej Siewior
Author Date: 2019-09-27 21:46:29 UTC

Import patches-unapplied version 1.1.0l-1~deb9u1 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: c0da64bfd0bd0845ed780320199ad5121730ce4b

New changelog entries:
  * Import 1.1.0l
    - CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP
      construction).
    - CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and
      CMS_decrypt_set1_pkey).

Author: Sebastian Andrzej Siewior
Author Date: 2019-09-27 21:46:29 UTC

Import patches-applied version 1.1.0l-1~deb9u1 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 74e52a5da7064df9429093f794ae212fa9e57b23
Unapplied parent: 421e42f8a1f53dfb8d4de07e7e73dafe3cf94544

New changelog entries:
  * Import 1.1.0l
    - CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP
      construction).
    - CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and
      CMS_decrypt_set1_pkey).

Author: Marc Deslauriers
Author Date: 2019-11-12 16:58:35 UTC

Import patches-applied version 1.1.1-1ubuntu2.1~18.04.5 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 6b877064e456468399befafbc5a18a209d02d58c
Unapplied parent: c1dae7f8d974efccefbbb04720e1a77f72fba620

New changelog entries:
  * debian/patches/OPENSSL_malloc_init_hang.patch: make
    OPENSSL_malloc_init() a no-op to remove a potential infinite loop that
    can occur in some situations, such as with MySQL 5.7 on s390x.

Author: Marc Deslauriers
Author Date: 2019-11-12 16:58:35 UTC

Import patches-applied version 1.1.1-1ubuntu2.1~18.04.5 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 6b877064e456468399befafbc5a18a209d02d58c
Unapplied parent: c1dae7f8d974efccefbbb04720e1a77f72fba620

New changelog entries:
  * debian/patches/OPENSSL_malloc_init_hang.patch: make
    OPENSSL_malloc_init() a no-op to remove a potential infinite loop that
    can occur in some situations, such as with MySQL 5.7 on s390x.

Author: Marc Deslauriers
Author Date: 2019-11-12 16:58:35 UTC

Import patches-unapplied version 1.1.1-1ubuntu2.1~18.04.5 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 24e5836d660d3f31ce0bef9ef5996b9747d15e5a

New changelog entries:
  * debian/patches/OPENSSL_malloc_init_hang.patch: make
    OPENSSL_malloc_init() a no-op to remove a potential infinite loop that
    can occur in some situations, such as with MySQL 5.7 on s390x.

Author: Marc Deslauriers
Author Date: 2019-11-12 16:58:35 UTC

Import patches-applied version 1.1.1-1ubuntu2.1~18.04.5 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 6b877064e456468399befafbc5a18a209d02d58c
Unapplied parent: c1dae7f8d974efccefbbb04720e1a77f72fba620

New changelog entries:
  * debian/patches/OPENSSL_malloc_init_hang.patch: make
    OPENSSL_malloc_init() a no-op to remove a potential infinite loop that
    can occur in some situations, such as with MySQL 5.7 on s390x.

Author: Marc Deslauriers
Author Date: 2019-11-12 16:58:35 UTC

Import patches-unapplied version 1.1.1-1ubuntu2.1~18.04.5 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 24e5836d660d3f31ce0bef9ef5996b9747d15e5a

New changelog entries:
  * debian/patches/OPENSSL_malloc_init_hang.patch: make
    OPENSSL_malloc_init() a no-op to remove a potential infinite loop that
    can occur in some situations, such as with MySQL 5.7 on s390x.

Author: Marc Deslauriers
Author Date: 2019-11-12 16:58:35 UTC

Import patches-unapplied version 1.1.1-1ubuntu2.1~18.04.5 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 24e5836d660d3f31ce0bef9ef5996b9747d15e5a

New changelog entries:
  * debian/patches/OPENSSL_malloc_init_hang.patch: make
    OPENSSL_malloc_init() a no-op to remove a potential infinite loop that
    can occur in some situations, such as with MySQL 5.7 on s390x.

Author: Sebastian Andrzej Siewior
Author Date: 2019-10-12 19:56:43 UTC

Import patches-applied version 1.1.1d-0+deb10u2 to applied/debian/buster

Imported using git-ubuntu import.

Changelog parent: 0f6fcf5eaf85f1a66d54311c2af859cdd1361b2d
Unapplied parent: a78ab7eb40babab55025a7df2043c570f58aeb77

New changelog entries:
  * Reenable AES-CBC-HMAC-SHA ciphers (Closes: #941987).
  * New upstream version
   - CVE-2019-1549 (Fixed a fork protection issue).
   - CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP
     construction).
   - CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and
     CMS_decrypt_set1_pkey).
  * Update symbol list

Author: Sebastian Andrzej Siewior
Author Date: 2019-10-12 19:56:43 UTC

Import patches-unapplied version 1.1.1d-0+deb10u2 to debian/buster

Imported using git-ubuntu import.

Changelog parent: 72f4d2053867846bc386ac80004bbf70b6414669

New changelog entries:
  * Reenable AES-CBC-HMAC-SHA ciphers (Closes: #941987).
  * New upstream version
   - CVE-2019-1549 (Fixed a fork protection issue).
   - CVE-2019-1547 (Compute ECC cofactors if not provided during EC_GROUP
     construction).
   - CVE-2019-1563 (Fixed a padding oracle in PKCS7_dataDecode and
     CMS_decrypt_set1_pkey).
  * Update symbol list

Author: Dimitri John Ledkov
Author Date: 2019-08-20 11:46:33 UTC

Import patches-applied version 1.1.1c-1ubuntu4 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: c77065505dd7e7f7fd90640f8adaa892d46aaa6e
Unapplied parent: b56a99a39a220c9d1e748ca1c09c972b1f08818e

New changelog entries:
  * Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20
    from master. LP: #1736705 LP: #1736704

Author: Dimitri John Ledkov
Author Date: 2019-08-20 11:46:33 UTC

Import patches-applied version 1.1.1c-1ubuntu4 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: c77065505dd7e7f7fd90640f8adaa892d46aaa6e
Unapplied parent: b56a99a39a220c9d1e748ca1c09c972b1f08818e

New changelog entries:
  * Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20
    from master. LP: #1736705 LP: #1736704

Author: Dimitri John Ledkov
Author Date: 2019-08-20 11:46:33 UTC

Import patches-applied version 1.1.1c-1ubuntu4 to applied/ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: c77065505dd7e7f7fd90640f8adaa892d46aaa6e
Unapplied parent: b56a99a39a220c9d1e748ca1c09c972b1f08818e

New changelog entries:
  * Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20
    from master. LP: #1736705 LP: #1736704

Author: Dimitri John Ledkov
Author Date: 2019-08-20 11:46:33 UTC

Import patches-unapplied version 1.1.1c-1ubuntu4 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: d7e1fce32eb2e3ba5c3fd308ad9f174fb7525c09

New changelog entries:
  * Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20
    from master. LP: #1736705 LP: #1736704

Author: Dimitri John Ledkov
Author Date: 2019-08-20 11:46:33 UTC

Import patches-unapplied version 1.1.1c-1ubuntu4 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: d7e1fce32eb2e3ba5c3fd308ad9f174fb7525c09

New changelog entries:
  * Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20
    from master. LP: #1736705 LP: #1736704

Author: Dimitri John Ledkov
Author Date: 2019-08-20 11:46:33 UTC

Import patches-unapplied version 1.1.1c-1ubuntu4 to ubuntu/eoan-proposed

Imported using git-ubuntu import.

Changelog parent: d7e1fce32eb2e3ba5c3fd308ad9f174fb7525c09

New changelog entries:
  * Cherrypick s390x SIMD acceleration patches for poly1305 and chacha20
    from master. LP: #1736705 LP: #1736704

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:34:53 UTC

Import patches-unapplied version 1.1.1-1ubuntu2.5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: b5e5389a58f367262527bc18f50dc98efa55548a

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:34:53 UTC

Import patches-applied version 1.1.1-1ubuntu2.5 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 592e7eb30622bb9ebdafd16274c3d70d5d717ee8
Unapplied parent: 6922cfab68927decea3576be9b4360481372bbe5

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:31:25 UTC

Import patches-unapplied version 1.1.1b-1ubuntu2.4 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 3aee437d4e8c9eed0921abdb6022924a80a0c1bd

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:34:53 UTC

Import patches-unapplied version 1.1.1-1ubuntu2.5 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: b5e5389a58f367262527bc18f50dc98efa55548a

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:34:53 UTC

Import patches-applied version 1.1.1-1ubuntu2.5 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 592e7eb30622bb9ebdafd16274c3d70d5d717ee8
Unapplied parent: 6922cfab68927decea3576be9b4360481372bbe5

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:31:25 UTC

Import patches-applied version 1.1.1b-1ubuntu2.4 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: a4bade3a1a32961d384e341998e33fcb0e3518ec
Unapplied parent: f53345347523702f5969dde5ccc20d1135620c7d

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:31:25 UTC

Import patches-applied version 1.1.1b-1ubuntu2.4 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: a4bade3a1a32961d384e341998e33fcb0e3518ec
Unapplied parent: f53345347523702f5969dde5ccc20d1135620c7d

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:31:25 UTC

Import patches-applied version 1.1.1b-1ubuntu2.4 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: a4bade3a1a32961d384e341998e33fcb0e3518ec
Unapplied parent: f53345347523702f5969dde5ccc20d1135620c7d

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:31:25 UTC

Import patches-unapplied version 1.1.1b-1ubuntu2.4 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 3aee437d4e8c9eed0921abdb6022924a80a0c1bd

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:31:25 UTC

Import patches-unapplied version 1.1.1b-1ubuntu2.4 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 3aee437d4e8c9eed0921abdb6022924a80a0c1bd

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:36:28 UTC

Import patches-unapplied version 1.1.1-1ubuntu2.1~18.04.4 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 13142118e9e4c2c67389b0bc29ffe4c7f74dd3d7

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-06-20 17:36:28 UTC

Import patches-applied version 1.1.1-1ubuntu2.1~18.04.4 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: e689135f4512b9fbff4d12a1d32ffb69be4e0fce
Unapplied parent: d8dcb4f2c8bf8e6adff6ec3dd427bb60a0763ecf

New changelog entries:
  * Import libraries/restart-without-asking as used in postinst, to
    prevent failure to configure the package without debconf database.
    LP: #1832919

Author: Dimitri John Ledkov
Author Date: 2019-04-03 19:37:01 UTC

Import patches-applied version 1.1.1-1ubuntu2.2 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: ec5c7077b40519b0a8e89c139dfd4b8528b41deb
Unapplied parent: 894bf563460c7623e5f1f03e833b0e661e3a1fa9

New changelog entries:
  * debian/rules: Ship openssl.cnf in libssl1.1-udeb, as required to use
    OpenSSL by other udebs, e.g. wget-udeb. LP: #1822898
  * Drop debian/patches/UBUNTU-lower-tls-security-level-for-compat.patch
    to revert TLS_SECURITY_LEVEL back to 1. LP: #1822984

Author: Dimitri John Ledkov
Author Date: 2019-04-03 19:37:01 UTC

Import patches-unapplied version 1.1.1-1ubuntu2.2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: e4e0ca1bb18e57540c09dd74fc390d483ac61cc1

New changelog entries:
  * debian/rules: Ship openssl.cnf in libssl1.1-udeb, as required to use
    OpenSSL by other udebs, e.g. wget-udeb. LP: #1822898
  * Drop debian/patches/UBUNTU-lower-tls-security-level-for-compat.patch
    to revert TLS_SECURITY_LEVEL back to 1. LP: #1822984

Author: Dimitri John Ledkov
Author Date: 2019-04-03 10:50:23 UTC

Import patches-unapplied version 1.1.1b-1ubuntu2 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 797f7efc3a472687971ac8d279efa8ee540bb91c

New changelog entries:
  * debian/rules: Ship openssl.cnf in libssl1.1-udeb, as required to use
    OpenSSL by other udebs, e.g. wget-udeb. LP: #1822898
  * Drop debian/patches/UBUNTU-lower-tls-security-level-for-compat.patch
    to revert TLS_SECURITY_LEVEL back to 1. LP: #1822984

Author: Dimitri John Ledkov
Author Date: 2019-04-03 10:50:23 UTC

Import patches-applied version 1.1.1b-1ubuntu2 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 696abd501c998f1fb791991ea16c07f073813a27
Unapplied parent: 74ff814d1f44e36313c3fa51d2745f0bd77e4b46

New changelog entries:
  * debian/rules: Ship openssl.cnf in libssl1.1-udeb, as required to use
    OpenSSL by other udebs, e.g. wget-udeb. LP: #1822898
  * Drop debian/patches/UBUNTU-lower-tls-security-level-for-compat.patch
    to revert TLS_SECURITY_LEVEL back to 1. LP: #1822984

Author: Marc Deslauriers
Author Date: 2019-02-26 18:16:01 UTC

Import patches-applied version 1.0.2g-1ubuntu4.15 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f8d4644787fa2bfec9f72439c849ab23411bd94f
Unapplied parent: 20bf9ca55c2a12a9e99b96e5e1864736fdd9fce6

New changelog entries:
  * SECURITY UPDATE: 0-byte record padding oracle
    - debian/patches/CVE-2019-1559.patch: go into the error state if a
      fatal alert is sent or received in ssl/d1_pkt.c, ssl/s3_pkt.c.
    - CVE-2019-1559

Author: Marc Deslauriers
Author Date: 2019-02-26 18:16:01 UTC

Import patches-applied version 1.0.2g-1ubuntu4.15 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f8d4644787fa2bfec9f72439c849ab23411bd94f
Unapplied parent: 20bf9ca55c2a12a9e99b96e5e1864736fdd9fce6

New changelog entries:
  * SECURITY UPDATE: 0-byte record padding oracle
    - debian/patches/CVE-2019-1559.patch: go into the error state if a
      fatal alert is sent or received in ssl/d1_pkt.c, ssl/s3_pkt.c.
    - CVE-2019-1559

Author: Marc Deslauriers
Author Date: 2019-02-26 18:16:01 UTC

Import patches-unapplied version 1.0.2g-1ubuntu4.15 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 4f5ecf626e184aa5cef3ec4e57ed838129d1f2cd

New changelog entries:
  * SECURITY UPDATE: 0-byte record padding oracle
    - debian/patches/CVE-2019-1559.patch: go into the error state if a
      fatal alert is sent or received in ssl/d1_pkt.c, ssl/s3_pkt.c.
    - CVE-2019-1559

Author: Marc Deslauriers
Author Date: 2019-02-26 18:16:01 UTC

Import patches-unapplied version 1.0.2g-1ubuntu4.15 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 4f5ecf626e184aa5cef3ec4e57ed838129d1f2cd

New changelog entries:
  * SECURITY UPDATE: 0-byte record padding oracle
    - debian/patches/CVE-2019-1559.patch: go into the error state if a
      fatal alert is sent or received in ssl/d1_pkt.c, ssl/s3_pkt.c.
    - CVE-2019-1559

Author: Marc Deslauriers
Author Date: 2019-02-26 18:16:01 UTC

Import patches-applied version 1.0.2g-1ubuntu4.15 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: f8d4644787fa2bfec9f72439c849ab23411bd94f
Unapplied parent: 20bf9ca55c2a12a9e99b96e5e1864736fdd9fce6

New changelog entries:
  * SECURITY UPDATE: 0-byte record padding oracle
    - debian/patches/CVE-2019-1559.patch: go into the error state if a
      fatal alert is sent or received in ssl/d1_pkt.c, ssl/s3_pkt.c.
    - CVE-2019-1559

Author: Marc Deslauriers
Author Date: 2019-02-26 18:16:01 UTC

Import patches-unapplied version 1.0.2g-1ubuntu4.15 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 4f5ecf626e184aa5cef3ec4e57ed838129d1f2cd

New changelog entries:
  * SECURITY UPDATE: 0-byte record padding oracle
    - debian/patches/CVE-2019-1559.patch: go into the error state if a
      fatal alert is sent or received in ssl/d1_pkt.c, ssl/s3_pkt.c.
    - CVE-2019-1559

Author: Marc Deslauriers
Author Date: 2018-12-04 13:15:09 UTC

Import patches-unapplied version 1.1.1-1ubuntu2.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 5c27691e1b200dee6ee3530b9b2d499d0cc8092c

New changelog entries:
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-1.patch: fix mod inverse in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-2.patch: fix timing vulnerability in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
      crypto/dsa/dsa_ossl.c.
    - CVE-2018-0734
  * SECURITY UPDATE: timing side channel attack in ECDSA
    - debian/patches/CVE-2018-0735.patch: fix timing vulberability in
      crypto/ec/ec_mult.c.
    - CVE-2018-0735

Author: Marc Deslauriers
Author Date: 2018-12-04 15:36:19 UTC

Import patches-unapplied version 1.0.1f-1ubuntu2.27 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 1cfd5a9fd7b0f6d0ddfea3750bd709efab8c19e2

New changelog entries:
  * SECURITY UPDATE: PortSmash side channel attack
    - debian/patches/CVE-2018-5407.patch: fix timing vulnerability in
      crypto/bn/bn_lib.c, crypto/ec/ec_mult.c.
    - CVE-2018-5407
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-pre1.patch: address a timing side
      channel in crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-1.patch: fix timing vulnerability in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-2.patch: fix mod inverse in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
      crypto/dsa/dsa_ossl.c.
    - CVE-2018-0734

Author: Marc Deslauriers
Author Date: 2018-12-04 15:36:19 UTC

Import patches-applied version 1.0.1f-1ubuntu2.27 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 6f563ffcfd83c602a16a401741934740be9a39dc
Unapplied parent: b9c89eac81157687b4f7f3121b7c59f705f328c3

New changelog entries:
  * SECURITY UPDATE: PortSmash side channel attack
    - debian/patches/CVE-2018-5407.patch: fix timing vulnerability in
      crypto/bn/bn_lib.c, crypto/ec/ec_mult.c.
    - CVE-2018-5407
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-pre1.patch: address a timing side
      channel in crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-1.patch: fix timing vulnerability in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-2.patch: fix mod inverse in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
      crypto/dsa/dsa_ossl.c.
    - CVE-2018-0734

Author: Marc Deslauriers
Author Date: 2018-12-04 15:36:19 UTC

Import patches-applied version 1.0.1f-1ubuntu2.27 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 6f563ffcfd83c602a16a401741934740be9a39dc
Unapplied parent: b9c89eac81157687b4f7f3121b7c59f705f328c3

New changelog entries:
  * SECURITY UPDATE: PortSmash side channel attack
    - debian/patches/CVE-2018-5407.patch: fix timing vulnerability in
      crypto/bn/bn_lib.c, crypto/ec/ec_mult.c.
    - CVE-2018-5407
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-pre1.patch: address a timing side
      channel in crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-1.patch: fix timing vulnerability in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-2.patch: fix mod inverse in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
      crypto/dsa/dsa_ossl.c.
    - CVE-2018-0734

Author: Marc Deslauriers
Author Date: 2018-12-04 13:15:09 UTC

Import patches-applied version 1.1.1-1ubuntu2.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 83d90aeeb6e6693e1fbbf4c61893166864d87508
Unapplied parent: 9a439f27f3ec44f7623039601c034ee5bd388c19

New changelog entries:
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-1.patch: fix mod inverse in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-2.patch: fix timing vulnerability in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
      crypto/dsa/dsa_ossl.c.
    - CVE-2018-0734
  * SECURITY UPDATE: timing side channel attack in ECDSA
    - debian/patches/CVE-2018-0735.patch: fix timing vulberability in
      crypto/ec/ec_mult.c.
    - CVE-2018-0735

Author: Marc Deslauriers
Author Date: 2018-12-04 15:36:19 UTC

Import patches-unapplied version 1.0.1f-1ubuntu2.27 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 1cfd5a9fd7b0f6d0ddfea3750bd709efab8c19e2

New changelog entries:
  * SECURITY UPDATE: PortSmash side channel attack
    - debian/patches/CVE-2018-5407.patch: fix timing vulnerability in
      crypto/bn/bn_lib.c, crypto/ec/ec_mult.c.
    - CVE-2018-5407
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-pre1.patch: address a timing side
      channel in crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-1.patch: fix timing vulnerability in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-2.patch: fix mod inverse in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
      crypto/dsa/dsa_ossl.c.
    - CVE-2018-0734

Author: Marc Deslauriers
Author Date: 2018-12-04 15:36:19 UTC

Import patches-applied version 1.0.1f-1ubuntu2.27 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 6f563ffcfd83c602a16a401741934740be9a39dc
Unapplied parent: b9c89eac81157687b4f7f3121b7c59f705f328c3

New changelog entries:
  * SECURITY UPDATE: PortSmash side channel attack
    - debian/patches/CVE-2018-5407.patch: fix timing vulnerability in
      crypto/bn/bn_lib.c, crypto/ec/ec_mult.c.
    - CVE-2018-5407
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-pre1.patch: address a timing side
      channel in crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-1.patch: fix timing vulnerability in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-2.patch: fix mod inverse in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
      crypto/dsa/dsa_ossl.c.
    - CVE-2018-0734

Author: Marc Deslauriers
Author Date: 2018-12-04 15:36:19 UTC

Import patches-unapplied version 1.0.1f-1ubuntu2.27 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 1cfd5a9fd7b0f6d0ddfea3750bd709efab8c19e2

New changelog entries:
  * SECURITY UPDATE: PortSmash side channel attack
    - debian/patches/CVE-2018-5407.patch: fix timing vulnerability in
      crypto/bn/bn_lib.c, crypto/ec/ec_mult.c.
    - CVE-2018-5407
  * SECURITY UPDATE: timing side channel attack in DSA
    - debian/patches/CVE-2018-0734-pre1.patch: address a timing side
      channel in crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-1.patch: fix timing vulnerability in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-2.patch: fix mod inverse in
      crypto/dsa/dsa_ossl.c.
    - debian/patches/CVE-2018-0734-3.patch: add a constant time flag in
      crypto/dsa/dsa_ossl.c.
    - CVE-2018-0734

Author: Dimitri John Ledkov
Author Date: 2018-09-25 14:41:07 UTC

Import patches-unapplied version 1.1.1-1ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: c95f92275d7e52006b9b2f41c5cb7071184ab2ff

New changelog entries:
  * Fixup typpos in the autopkgtest binary name.

Author: Dimitri John Ledkov
Author Date: 2018-09-25 14:41:07 UTC

Import patches-applied version 1.1.1-1ubuntu2 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 4bc7121524aed57ac07254d3becdf6f1a676098e
Unapplied parent: dfc8aa0d6496b46baa3c3bb4502d3e2d178d3702

New changelog entries:
  * Fixup typpos in the autopkgtest binary name.

Author: Sebastian Andrzej Siewior
Author Date: 2018-07-04 22:21:00 UTC

Import patches-applied version 1.1.1~~pre8-1 to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: b658261a15849ae28634538f74e1d525aa915b8c
Unapplied parent: 4c6c98947cbbed95b49bdda8971253d7b28b9387

New changelog entries:
  * New upstream version.

Author: Sebastian Andrzej Siewior
Author Date: 2018-07-04 22:21:00 UTC

Import patches-unapplied version 1.1.1~~pre8-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: b3efc01a93c549b7cc7b1035edff837315784473

New changelog entries:
  * New upstream version.

Author: Marc Deslauriers
Author Date: 2018-06-20 11:32:59 UTC

Import patches-applied version 1.0.2g-1ubuntu13.6 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 90f108af4cf2dd0d51f65b8d99091341ba518507
Unapplied parent: f2e01974a0e4c0e2de8d333d329bfbcb29d1a477

New changelog entries:
  * SECURITY UPDATE: ECDSA key extraction side channel
    - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA
      signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c.
    - CVE-2018-0495
  * SECURITY UPDATE: denial of service via long prime values
    - debian/patches/CVE-2018-0732.patch: reject excessively large primes
      in DH key generation in crypto/dh/dh_key.c.
    - CVE-2018-0732
  * SECURITY UPDATE: RSA cache timing side channel attack
    (previous update was incomplete)
    - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and
      BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in
      crypto/rsa/rsa_gen.c.
    - CVE-2018-0737

Author: Marc Deslauriers
Author Date: 2018-06-20 11:32:59 UTC

Import patches-applied version 1.0.2g-1ubuntu13.6 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 90f108af4cf2dd0d51f65b8d99091341ba518507
Unapplied parent: f2e01974a0e4c0e2de8d333d329bfbcb29d1a477

New changelog entries:
  * SECURITY UPDATE: ECDSA key extraction side channel
    - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA
      signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c.
    - CVE-2018-0495
  * SECURITY UPDATE: denial of service via long prime values
    - debian/patches/CVE-2018-0732.patch: reject excessively large primes
      in DH key generation in crypto/dh/dh_key.c.
    - CVE-2018-0732
  * SECURITY UPDATE: RSA cache timing side channel attack
    (previous update was incomplete)
    - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and
      BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in
      crypto/rsa/rsa_gen.c.
    - CVE-2018-0737

Author: Marc Deslauriers
Author Date: 2018-06-20 11:32:59 UTC

Import patches-unapplied version 1.0.2g-1ubuntu13.6 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 17429a963fcb9125abced148e2998be19f25555c

New changelog entries:
  * SECURITY UPDATE: ECDSA key extraction side channel
    - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA
      signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c.
    - CVE-2018-0495
  * SECURITY UPDATE: denial of service via long prime values
    - debian/patches/CVE-2018-0732.patch: reject excessively large primes
      in DH key generation in crypto/dh/dh_key.c.
    - CVE-2018-0732
  * SECURITY UPDATE: RSA cache timing side channel attack
    (previous update was incomplete)
    - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and
      BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in
      crypto/rsa/rsa_gen.c.
    - CVE-2018-0737

Author: Marc Deslauriers
Author Date: 2018-06-20 11:32:59 UTC

Import patches-applied version 1.0.2g-1ubuntu13.6 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 90f108af4cf2dd0d51f65b8d99091341ba518507
Unapplied parent: f2e01974a0e4c0e2de8d333d329bfbcb29d1a477

New changelog entries:
  * SECURITY UPDATE: ECDSA key extraction side channel
    - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA
      signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c.
    - CVE-2018-0495
  * SECURITY UPDATE: denial of service via long prime values
    - debian/patches/CVE-2018-0732.patch: reject excessively large primes
      in DH key generation in crypto/dh/dh_key.c.
    - CVE-2018-0732
  * SECURITY UPDATE: RSA cache timing side channel attack
    (previous update was incomplete)
    - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and
      BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in
      crypto/rsa/rsa_gen.c.
    - CVE-2018-0737

Author: Marc Deslauriers
Author Date: 2018-06-20 11:32:59 UTC

Import patches-unapplied version 1.0.2g-1ubuntu13.6 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 17429a963fcb9125abced148e2998be19f25555c

New changelog entries:
  * SECURITY UPDATE: ECDSA key extraction side channel
    - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA
      signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c.
    - CVE-2018-0495
  * SECURITY UPDATE: denial of service via long prime values
    - debian/patches/CVE-2018-0732.patch: reject excessively large primes
      in DH key generation in crypto/dh/dh_key.c.
    - CVE-2018-0732
  * SECURITY UPDATE: RSA cache timing side channel attack
    (previous update was incomplete)
    - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and
      BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in
      crypto/rsa/rsa_gen.c.
    - CVE-2018-0737

Author: Marc Deslauriers
Author Date: 2018-06-20 11:32:59 UTC

Import patches-unapplied version 1.0.2g-1ubuntu13.6 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 17429a963fcb9125abced148e2998be19f25555c

New changelog entries:
  * SECURITY UPDATE: ECDSA key extraction side channel
    - debian/patches/CVE-2018-0495.patch: add blinding to an ECDSA
      signature in crypto/ecdsa/ecdsatest.c, crypto/ecdsa/ecs_ossl.c.
    - CVE-2018-0495
  * SECURITY UPDATE: denial of service via long prime values
    - debian/patches/CVE-2018-0732.patch: reject excessively large primes
      in DH key generation in crypto/dh/dh_key.c.
    - CVE-2018-0732
  * SECURITY UPDATE: RSA cache timing side channel attack
    (previous update was incomplete)
    - debian/patches/CVE-2018-0737-1.patch: replaced variable-time GCD in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-2.patch: used ERR set/pop mark in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-3.patch: consttime flag changed in
      crypto/rsa/rsa_gen.c.
    - debian/patches/CVE-2018-0737-4.patch: ensure BN_mod_inverse and
      BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in
      crypto/rsa/rsa_gen.c.
    - CVE-2018-0737

Author: Sebastian Andrzej Siewior
Author Date: 2018-03-29 11:18:00 UTC

Import patches-unapplied version 1.0.1t-1+deb8u8 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 6a1844812bbe4e4de9650e6aee9c238fb9713912

New changelog entries:
  * CVE-2018-0739 (Constructed ASN.1 types with a recursive definition could
    exceed the stack)

Author: Sebastian Andrzej Siewior
Author Date: 2018-03-29 11:18:00 UTC

Import patches-applied version 1.0.1t-1+deb8u8 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: 2dfea1dc250270027df59ea0594ce7af50fc0f8e
Unapplied parent: b9b707bd919a247b99c42ce9b0fb36d9f3624df3

New changelog entries:
  * CVE-2018-0739 (Constructed ASN.1 types with a recursive definition could
    exceed the stack)

Author: Brian Murray
Author Date: 2018-04-25 17:03:48 UTC

Import patches-applied version 1.1.0g-2ubuntu4 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 28485d1564cc2551ada6b9fa8b74a0ba0394e2bd
Unapplied parent: a445331d708e4c0217c216894f699ee5a57f0e03

New changelog entries:
  * debian/patches/rehash-pass-on-dupes.patch: Don't return 1 when a duplicate
    certificate is found. (LP: #1764848)

Author: Brian Murray
Author Date: 2018-04-25 17:03:48 UTC

Import patches-unapplied version 1.1.0g-2ubuntu4 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: db72499dd1f84296ae63ac044d87d2848c45a946

New changelog entries:
  * debian/patches/rehash-pass-on-dupes.patch: Don't return 1 when a duplicate
    certificate is found. (LP: #1764848)

Author: Ubuntu Git Importer
Author Date: 2018-04-06 01:17:33 UTC

pristine-tar data for openssl_1.1.1~~pre4.orig.tar.gz

Author: Ubuntu Git Importer
Author Date: 2018-03-09 14:42:15 UTC

pristine-tar data for openssl_1.1.0g.orig.tar.gz

Author: Marc Deslauriers
Author Date: 2017-12-07 18:16:57 UTC

Import patches-unapplied version 1.0.2g-1ubuntu11.4 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: b031da8065b904a5d0c73e3b81597c7cfc392e0a

New changelog entries:
  * SECURITY UPDATE: Read/write after SSL object in error state
    - debian/patches/CVE-2017-3737-pre.patch: add test/ssltestlib.*,
      add to test/Makefile.
    - debian/patches/CVE-2017-3737-1.patch: don't allow read/write after
      fatal error in ssl/ssl.h.
    - debian/patches/CVE-2017-3737-2.patch: add test to ssl/Makefile,
      ssl/fatalerrtest.c, test/Makefile.
    - CVE-2017-3737
  * SECURITY UPDATE: rsaz_1024_mul_avx2 overflow bug on x86_64
    - debian/patches/CVE-2017-3738.patch: fix digit correction bug in
      crypto/bn/asm/rsaz-avx2.pl.
    - CVE-2017-3738

Author: Marc Deslauriers
Author Date: 2017-12-07 18:16:57 UTC

Import patches-applied version 1.0.2g-1ubuntu11.4 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: cb19a38dca54f5678288c3fbbfebde45c9ea723c
Unapplied parent: 6de8b0ba0f530e92a56b9fbf650b28a214c6b299

New changelog entries:
  * SECURITY UPDATE: Read/write after SSL object in error state
    - debian/patches/CVE-2017-3737-pre.patch: add test/ssltestlib.*,
      add to test/Makefile.
    - debian/patches/CVE-2017-3737-1.patch: don't allow read/write after
      fatal error in ssl/ssl.h.
    - debian/patches/CVE-2017-3737-2.patch: add test to ssl/Makefile,
      ssl/fatalerrtest.c, test/Makefile.
    - CVE-2017-3737
  * SECURITY UPDATE: rsaz_1024_mul_avx2 overflow bug on x86_64
    - debian/patches/CVE-2017-3738.patch: fix digit correction bug in
      crypto/bn/asm/rsaz-avx2.pl.
    - CVE-2017-3738

Author: Marc Deslauriers
Author Date: 2017-12-07 18:16:57 UTC

Import patches-applied version 1.0.2g-1ubuntu11.4 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: cb19a38dca54f5678288c3fbbfebde45c9ea723c
Unapplied parent: 6de8b0ba0f530e92a56b9fbf650b28a214c6b299

New changelog entries:
  * SECURITY UPDATE: Read/write after SSL object in error state
    - debian/patches/CVE-2017-3737-pre.patch: add test/ssltestlib.*,
      add to test/Makefile.
    - debian/patches/CVE-2017-3737-1.patch: don't allow read/write after
      fatal error in ssl/ssl.h.
    - debian/patches/CVE-2017-3737-2.patch: add test to ssl/Makefile,
      ssl/fatalerrtest.c, test/Makefile.
    - CVE-2017-3737
  * SECURITY UPDATE: rsaz_1024_mul_avx2 overflow bug on x86_64
    - debian/patches/CVE-2017-3738.patch: fix digit correction bug in
      crypto/bn/asm/rsaz-avx2.pl.
    - CVE-2017-3738

Author: Marc Deslauriers
Author Date: 2017-12-07 18:16:57 UTC

Import patches-unapplied version 1.0.2g-1ubuntu11.4 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: b031da8065b904a5d0c73e3b81597c7cfc392e0a

New changelog entries:
  * SECURITY UPDATE: Read/write after SSL object in error state
    - debian/patches/CVE-2017-3737-pre.patch: add test/ssltestlib.*,
      add to test/Makefile.
    - debian/patches/CVE-2017-3737-1.patch: don't allow read/write after
      fatal error in ssl/ssl.h.
    - debian/patches/CVE-2017-3737-2.patch: add test to ssl/Makefile,
      ssl/fatalerrtest.c, test/Makefile.
    - CVE-2017-3737
  * SECURITY UPDATE: rsaz_1024_mul_avx2 overflow bug on x86_64
    - debian/patches/CVE-2017-3738.patch: fix digit correction bug in
      crypto/bn/asm/rsaz-avx2.pl.
    - CVE-2017-3738

Author: Marc Deslauriers
Author Date: 2017-12-07 18:16:57 UTC

Import patches-applied version 1.0.2g-1ubuntu11.4 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: cb19a38dca54f5678288c3fbbfebde45c9ea723c
Unapplied parent: 6de8b0ba0f530e92a56b9fbf650b28a214c6b299

New changelog entries:
  * SECURITY UPDATE: Read/write after SSL object in error state
    - debian/patches/CVE-2017-3737-pre.patch: add test/ssltestlib.*,
      add to test/Makefile.
    - debian/patches/CVE-2017-3737-1.patch: don't allow read/write after
      fatal error in ssl/ssl.h.
    - debian/patches/CVE-2017-3737-2.patch: add test to ssl/Makefile,
      ssl/fatalerrtest.c, test/Makefile.
    - CVE-2017-3737
  * SECURITY UPDATE: rsaz_1024_mul_avx2 overflow bug on x86_64
    - debian/patches/CVE-2017-3738.patch: fix digit correction bug in
      crypto/bn/asm/rsaz-avx2.pl.
    - CVE-2017-3738

Author: Marc Deslauriers
Author Date: 2017-12-07 18:16:57 UTC

Import patches-unapplied version 1.0.2g-1ubuntu11.4 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: b031da8065b904a5d0c73e3b81597c7cfc392e0a

New changelog entries:
  * SECURITY UPDATE: Read/write after SSL object in error state
    - debian/patches/CVE-2017-3737-pre.patch: add test/ssltestlib.*,
      add to test/Makefile.
    - debian/patches/CVE-2017-3737-1.patch: don't allow read/write after
      fatal error in ssl/ssl.h.
    - debian/patches/CVE-2017-3737-2.patch: add test to ssl/Makefile,
      ssl/fatalerrtest.c, test/Makefile.
    - CVE-2017-3737
  * SECURITY UPDATE: rsaz_1024_mul_avx2 overflow bug on x86_64
    - debian/patches/CVE-2017-3738.patch: fix digit correction bug in
      crypto/bn/asm/rsaz-avx2.pl.
    - CVE-2017-3738

Author: William Grant
Author Date: 2017-05-19 08:27:58 UTC

Import patches-applied version 1.0.2g-1ubuntu4.8 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: b15e3fbcd9ef597fe9892f5d46f4e756938e0fdd
Unapplied parent: 9bc63c72afef18bc97db1170810066a70f1524b2

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:27:58 UTC

Import patches-unapplied version 1.0.2g-1ubuntu4.8 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 2a85a4b041f42290f2106ca9a4f25c833a1f9c1b

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:25:11 UTC

Import patches-applied version 1.0.2g-1ubuntu9.3 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: eabdcfa8288f5feabd381b6f1fda574fa2aa3d46
Unapplied parent: bac528099278f1cef0f597dabb6a4e895c3ba2c1

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:25:11 UTC

Import patches-applied version 1.0.2g-1ubuntu9.3 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: eabdcfa8288f5feabd381b6f1fda574fa2aa3d46
Unapplied parent: bac528099278f1cef0f597dabb6a4e895c3ba2c1

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:25:11 UTC

Import patches-applied version 1.0.2g-1ubuntu9.3 to applied/ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: eabdcfa8288f5feabd381b6f1fda574fa2aa3d46
Unapplied parent: bac528099278f1cef0f597dabb6a4e895c3ba2c1

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:25:11 UTC

Import patches-unapplied version 1.0.2g-1ubuntu9.3 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: a48015ebc5685a891ad42de09f80637625a3f16f

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:25:11 UTC

Import patches-unapplied version 1.0.2g-1ubuntu9.3 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: a48015ebc5685a891ad42de09f80637625a3f16f

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:25:11 UTC

Import patches-unapplied version 1.0.2g-1ubuntu9.3 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: a48015ebc5685a891ad42de09f80637625a3f16f

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:29:44 UTC

Import patches-unapplied version 1.0.2g-1ubuntu11.2 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 2e5180b49c69fd353e3c225dc6b9b70fb99c4081

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:29:44 UTC

Import patches-applied version 1.0.2g-1ubuntu11.2 to applied/ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: f3879503d49e9adcbe140175f755f4298578c62a
Unapplied parent: a84e691d688f45a22c43d6e59f6a6c529165fbbd

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:31:50 UTC

Import patches-unapplied version 1.0.2g-1ubuntu13 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: f3cdd9f5d72668fda74a2dcb46884ffc8a376251

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:31:50 UTC

Import patches-unapplied version 1.0.2g-1ubuntu13 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: f3cdd9f5d72668fda74a2dcb46884ffc8a376251

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:31:50 UTC

Import patches-applied version 1.0.2g-1ubuntu13 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 63e0192e22ace22d7f2b786aa039f3bde0bf4ced
Unapplied parent: cbb693c4127fe392e13a9bdd3db7761d66e19a7a

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: William Grant
Author Date: 2017-05-19 08:31:50 UTC

Import patches-applied version 1.0.2g-1ubuntu13 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 63e0192e22ace22d7f2b786aa039f3bde0bf4ced
Unapplied parent: cbb693c4127fe392e13a9bdd3db7761d66e19a7a

New changelog entries:
  * aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.
    (LP: #1674399)

Author: Marc Deslauriers
Author Date: 2017-01-30 19:30:36 UTC

Import patches-unapplied version 1.0.1-4ubuntu5.39 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 82a89004c586499a6eea19659cf0054de87c5b57

New changelog entries:
  * SECURITY UPDATE: Pointer arithmetic undefined behaviour
    - debian/patches/CVE-2016-2177-pre.patch: check for ClientHello message
      overruns in ssl/s3_srvr.c.
    - debian/patches/CVE-2016-2177-pre2.patch: validate ClientHello
      extension field length in ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177-pre3.patch: pass in a limit rather than
      calculate it in ssl/s3_srvr.c, ssl/ssl_locl.h, ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177.patch: avoid undefined pointer
      arithmetic in ssl/s3_srvr.c, ssl/t1_lib.c,
    - CVE-2016-2177
  * SECURITY UPDATE: ECDSA P-256 timing attack key recovery
    - debian/patches/CVE-2016-7056.patch: use BN_mod_exp_mont_consttime in
      crypto/ec/ec.h, crypto/ec/ec_lcl.h, crypto/ec/ec_lib.c,
      crypto/ecdsa/ecs_ossl.c.
    - CVE-2016-7056
  * SECURITY UPDATE: DoS via warning alerts
    - debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
      warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
      ssl/ssl_locl.h.
    - debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
      type is received in ssl/s3_pkt.c.
    - CVE-2016-8610
  * SECURITY UPDATE: Truncated packet could crash via OOB read
    - debian/patches/CVE-2017-3731-pre.patch: sanity check
      EVP_CTRL_AEAD_TLS_AAD in crypto/evp/e_aes.c,
      crypto/evp/e_aes_cbc_hmac_sha1.c, crypto/evp/e_rc4_hmac_md5.c,
      crypto/evp/evp.h, ssl/t1_enc.c.
    - debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
      crypto/evp/e_rc4_hmac_md5.c.
    - CVE-2017-3731

Author: Marc Deslauriers
Author Date: 2017-01-30 19:30:36 UTC

Import patches-unapplied version 1.0.1-4ubuntu5.39 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 82a89004c586499a6eea19659cf0054de87c5b57

New changelog entries:
  * SECURITY UPDATE: Pointer arithmetic undefined behaviour
    - debian/patches/CVE-2016-2177-pre.patch: check for ClientHello message
      overruns in ssl/s3_srvr.c.
    - debian/patches/CVE-2016-2177-pre2.patch: validate ClientHello
      extension field length in ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177-pre3.patch: pass in a limit rather than
      calculate it in ssl/s3_srvr.c, ssl/ssl_locl.h, ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177.patch: avoid undefined pointer
      arithmetic in ssl/s3_srvr.c, ssl/t1_lib.c,
    - CVE-2016-2177
  * SECURITY UPDATE: ECDSA P-256 timing attack key recovery
    - debian/patches/CVE-2016-7056.patch: use BN_mod_exp_mont_consttime in
      crypto/ec/ec.h, crypto/ec/ec_lcl.h, crypto/ec/ec_lib.c,
      crypto/ecdsa/ecs_ossl.c.
    - CVE-2016-7056
  * SECURITY UPDATE: DoS via warning alerts
    - debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
      warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
      ssl/ssl_locl.h.
    - debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
      type is received in ssl/s3_pkt.c.
    - CVE-2016-8610
  * SECURITY UPDATE: Truncated packet could crash via OOB read
    - debian/patches/CVE-2017-3731-pre.patch: sanity check
      EVP_CTRL_AEAD_TLS_AAD in crypto/evp/e_aes.c,
      crypto/evp/e_aes_cbc_hmac_sha1.c, crypto/evp/e_rc4_hmac_md5.c,
      crypto/evp/evp.h, ssl/t1_enc.c.
    - debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
      crypto/evp/e_rc4_hmac_md5.c.
    - CVE-2017-3731

Author: Marc Deslauriers
Author Date: 2017-01-30 14:55:10 UTC

Import patches-unapplied version 1.0.2g-1ubuntu9.1 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 1c6db8d529e71e4f589f503db2dc5977e31cbf6a

New changelog entries:
  * SECURITY UPDATE: Montgomery multiplication may produce incorrect
    results
    - debian/patches/CVE-2016-7055.patch: fix logic in
      crypto/bn/asm/x86_64-mont.pl.
    - CVE-2016-7055
  * SECURITY UPDATE: DoS via warning alerts
    - debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
      warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
      ssl/ssl_locl.h.
    - debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
      type is received in ssl/s3_pkt.c.
    - CVE-2016-8610
  * SECURITY UPDATE: Truncated packet could crash via OOB read
    - debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
      crypto/evp/e_rc4_hmac_md5.c.
    - CVE-2017-3731
  * SECURITY UPDATE: BN_mod_exp may produce incorrect results on x86_64
    - debian/patches/CVE-2017-3732.patch: fix carry bug in
      bn_sqr8x_internal in crypto/bn/asm/x86_64-mont5.pl.
    - CVE-2017-3732

Author: Marc Deslauriers
Author Date: 2017-01-30 19:30:36 UTC

Import patches-applied version 1.0.1-4ubuntu5.39 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 12d1e853c5b11fc4cda49470581f216e95dbd2a8
Unapplied parent: 5f929762255950fc32fc232ed526c344e884ab68

New changelog entries:
  * SECURITY UPDATE: Pointer arithmetic undefined behaviour
    - debian/patches/CVE-2016-2177-pre.patch: check for ClientHello message
      overruns in ssl/s3_srvr.c.
    - debian/patches/CVE-2016-2177-pre2.patch: validate ClientHello
      extension field length in ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177-pre3.patch: pass in a limit rather than
      calculate it in ssl/s3_srvr.c, ssl/ssl_locl.h, ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177.patch: avoid undefined pointer
      arithmetic in ssl/s3_srvr.c, ssl/t1_lib.c,
    - CVE-2016-2177
  * SECURITY UPDATE: ECDSA P-256 timing attack key recovery
    - debian/patches/CVE-2016-7056.patch: use BN_mod_exp_mont_consttime in
      crypto/ec/ec.h, crypto/ec/ec_lcl.h, crypto/ec/ec_lib.c,
      crypto/ecdsa/ecs_ossl.c.
    - CVE-2016-7056
  * SECURITY UPDATE: DoS via warning alerts
    - debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
      warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
      ssl/ssl_locl.h.
    - debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
      type is received in ssl/s3_pkt.c.
    - CVE-2016-8610
  * SECURITY UPDATE: Truncated packet could crash via OOB read
    - debian/patches/CVE-2017-3731-pre.patch: sanity check
      EVP_CTRL_AEAD_TLS_AAD in crypto/evp/e_aes.c,
      crypto/evp/e_aes_cbc_hmac_sha1.c, crypto/evp/e_rc4_hmac_md5.c,
      crypto/evp/evp.h, ssl/t1_enc.c.
    - debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
      crypto/evp/e_rc4_hmac_md5.c.
    - CVE-2017-3731

Author: Marc Deslauriers
Author Date: 2017-01-30 19:30:36 UTC

Import patches-applied version 1.0.1-4ubuntu5.39 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 12d1e853c5b11fc4cda49470581f216e95dbd2a8
Unapplied parent: 5f929762255950fc32fc232ed526c344e884ab68

New changelog entries:
  * SECURITY UPDATE: Pointer arithmetic undefined behaviour
    - debian/patches/CVE-2016-2177-pre.patch: check for ClientHello message
      overruns in ssl/s3_srvr.c.
    - debian/patches/CVE-2016-2177-pre2.patch: validate ClientHello
      extension field length in ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177-pre3.patch: pass in a limit rather than
      calculate it in ssl/s3_srvr.c, ssl/ssl_locl.h, ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177.patch: avoid undefined pointer
      arithmetic in ssl/s3_srvr.c, ssl/t1_lib.c,
    - CVE-2016-2177
  * SECURITY UPDATE: ECDSA P-256 timing attack key recovery
    - debian/patches/CVE-2016-7056.patch: use BN_mod_exp_mont_consttime in
      crypto/ec/ec.h, crypto/ec/ec_lcl.h, crypto/ec/ec_lib.c,
      crypto/ecdsa/ecs_ossl.c.
    - CVE-2016-7056
  * SECURITY UPDATE: DoS via warning alerts
    - debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
      warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
      ssl/ssl_locl.h.
    - debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
      type is received in ssl/s3_pkt.c.
    - CVE-2016-8610
  * SECURITY UPDATE: Truncated packet could crash via OOB read
    - debian/patches/CVE-2017-3731-pre.patch: sanity check
      EVP_CTRL_AEAD_TLS_AAD in crypto/evp/e_aes.c,
      crypto/evp/e_aes_cbc_hmac_sha1.c, crypto/evp/e_rc4_hmac_md5.c,
      crypto/evp/evp.h, ssl/t1_enc.c.
    - debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
      crypto/evp/e_rc4_hmac_md5.c.
    - CVE-2017-3731

Author: Marc Deslauriers
Author Date: 2017-01-30 19:30:36 UTC

Import patches-applied version 1.0.1-4ubuntu5.39 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: 12d1e853c5b11fc4cda49470581f216e95dbd2a8
Unapplied parent: 5f929762255950fc32fc232ed526c344e884ab68

New changelog entries:
  * SECURITY UPDATE: Pointer arithmetic undefined behaviour
    - debian/patches/CVE-2016-2177-pre.patch: check for ClientHello message
      overruns in ssl/s3_srvr.c.
    - debian/patches/CVE-2016-2177-pre2.patch: validate ClientHello
      extension field length in ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177-pre3.patch: pass in a limit rather than
      calculate it in ssl/s3_srvr.c, ssl/ssl_locl.h, ssl/t1_lib.c.
    - debian/patches/CVE-2016-2177.patch: avoid undefined pointer
      arithmetic in ssl/s3_srvr.c, ssl/t1_lib.c,
    - CVE-2016-2177
  * SECURITY UPDATE: ECDSA P-256 timing attack key recovery
    - debian/patches/CVE-2016-7056.patch: use BN_mod_exp_mont_consttime in
      crypto/ec/ec.h, crypto/ec/ec_lcl.h, crypto/ec/ec_lib.c,
      crypto/ecdsa/ecs_ossl.c.
    - CVE-2016-7056
  * SECURITY UPDATE: DoS via warning alerts
    - debian/patches/CVE-2016-8610.patch: don't allow too many consecutive
      warning alerts in ssl/d1_pkt.c, ssl/s3_pkt.c, ssl/ssl.h,
      ssl/ssl_locl.h.
    - debian/patches/CVE-2016-8610-2.patch: fail if an unrecognised record
      type is received in ssl/s3_pkt.c.
    - CVE-2016-8610
  * SECURITY UPDATE: Truncated packet could crash via OOB read
    - debian/patches/CVE-2017-3731-pre.patch: sanity check
      EVP_CTRL_AEAD_TLS_AAD in crypto/evp/e_aes.c,
      crypto/evp/e_aes_cbc_hmac_sha1.c, crypto/evp/e_rc4_hmac_md5.c,
      crypto/evp/evp.h, ssl/t1_enc.c.
    - debian/patches/CVE-2017-3731.patch: harden RC4_MD5 cipher in
      crypto/evp/e_rc4_hmac_md5.c.
    - CVE-2017-3731