[ubuntu/oracular-proposed] openssl 3.2.2-1ubuntu2 (Accepted)

[Marc Deslauriers]

openssl (3.2.2-1ubuntu2) oracular; urgency=medium

  * SECURITY UPDATE: crash or memory disclosure via SSL_select_next_proto
    - debian/patches/CVE-2024-5535.patch: validate provided client list in
      ssl/ssl_lib.c.
    - CVE-2024-5535

Date: Wed, 31 Jul 2024 13:16:18 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/openssl/3.2.2-1ubuntu2
-------------- next part --------------
Format: 1.8
Date: Wed, 31 Jul 2024 13:16:18 -0400
Source: openssl
Built-For-Profiles: noudeb
Architecture: source
Version: 3.2.2-1ubuntu2
Distribution: oracular
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 openssl (3.2.2-1ubuntu2) oracular; urgency=medium
 .
   * SECURITY UPDATE: crash or memory disclosure via SSL_select_next_proto
     - debian/patches/CVE-2024-5535.patch: validate provided client list in
       ssl/ssl_lib.c.
     - CVE-2024-5535
Checksums-Sha1:
 b8436c3871e41fafc57270ba0b0d5142ac15da7c 2763 openssl_3.2.2-1ubuntu2.dsc
 8e2803c3796eef28f4dd460e1e67a70250bb8a7c 82284 openssl_3.2.2-1ubuntu2.debian.tar.xz
 bc081514930cbd1eebcf9915c27181999af99de7 6369 openssl_3.2.2-1ubuntu2_source.buildinfo
Checksums-Sha256:
 b9d2c2a5d0fd23ce7c4a374a9649e3c6d6bb640901392331197bcd79f4412e9b 2763 openssl_3.2.2-1ubuntu2.dsc
 a933f24fe39087c73a3690ae99b21e596bd5695f32bbcda80dd8824c20d3d848 82284 openssl_3.2.2-1ubuntu2.debian.tar.xz
 f063289f6428c52451c34e0e87e16a4c45c294a0e6c081ed8c98faa76c6aa28b 6369 openssl_3.2.2-1ubuntu2_source.buildinfo
Files:
 f40a1078365b3c4b9951392c991f96b1 2763 utils optional openssl_3.2.2-1ubuntu2.dsc
 4a76c44ef722bea13bf09568a43d260f 82284 utils optional openssl_3.2.2-1ubuntu2.debian.tar.xz
 8761e1426e3868d7c73eabc81bbf2e79 6369 utils optional openssl_3.2.2-1ubuntu2_source.buildinfo
Original-Maintainer: Debian OpenSSL Team <pkg-openssl-devel at alioth-lists.debian.net>