-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 26 Jun 2019 18:59:20 +0200
Source: openssl
Architecture: source
Version: 1.1.0k-1~deb9u1
Distribution: stretch-security
Urgency: medium
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Changes:
 openssl (1.1.0k-1~deb9u1) stretch-security; urgency=medium
 .
   * Import 1.1.0k
     - CVE-2019-1543 (Prevent over long nonces in ChaCha20-Poly1305)
Checksums-Sha1:
 38ae2a63da2b785feed0d3a1ae14cbd193ce8fe4 2437 openssl_1.1.0k-1~deb9u1.dsc
 aaa2ddad0285575da7c9fa8021c26e5c8433ab15 5287321 openssl_1.1.0k.orig.tar.gz
 6b312549060856dd893b94320ff6b32d470126b7 833 openssl_1.1.0k.orig.tar.gz.asc
 bdc6813a1b0d96f764f3bd5bd5d8bee5d16a5f90 71996 openssl_1.1.0k-1~deb9u1.debian.tar.xz
 6921de9e85b6094468e47a194a743a83e123e626 5095 openssl_1.1.0k-1~deb9u1_source.buildinfo
Checksums-Sha256:
 81d1127296775e23080740d8bd0f8b8696f0edd6a8cd5c87d95f2dea23d128d9 2437 openssl_1.1.0k-1~deb9u1.dsc
 efa4965f4f773574d6cbda1cf874dbbe455ab1c0d4f906115f867d30444470b1 5287321 openssl_1.1.0k.orig.tar.gz
 82b4338a150147d3c67a0bc0aa1ae4b209b8dc985af2bf523d72097bdf12a743 833 openssl_1.1.0k.orig.tar.gz.asc
 782054f0183e65469f97402cecff23c0d9fc00a026f263afbca3ba77415ffa27 71996 openssl_1.1.0k-1~deb9u1.debian.tar.xz
 9baaf9b24a63579b7a0b984ec872456ce7912f10ac57cb386a4706e8c653fe19 5095 openssl_1.1.0k-1~deb9u1_source.buildinfo
Files:
 040951000ea43f7726be1af71632c870 2437 utils optional openssl_1.1.0k-1~deb9u1.dsc
 fd4b2fe03c101bc8fd6895eeef11c5dd 5287321 utils optional openssl_1.1.0k.orig.tar.gz
 b51ed82494c9a30f8190dbe0415ed5e5 833 utils optional openssl_1.1.0k.orig.tar.gz.asc
 93f7d5d8400aa80098cfe20d2199132b 71996 utils optional openssl_1.1.0k-1~deb9u1.debian.tar.xz
 8c7ee90e2d71e5961cbd228470908f58 5095 utils optional openssl_1.1.0k-1~deb9u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=VqLQ
-----END PGP SIGNATURE-----