[Secure-testing-team] Bug#791975: openssl: CVE-2015-1793

[Christoph Anton Mitterer]

Package: openssl
Version: 1.0.2c-1
Severity: critical
Tags: security
Justification: root security hole
Control: found -1 1.0.2c-1+b2

CVE-2015-1793 got public, highest criticality.

https://openssl.org/news/secadv_20150709.txt


Cheers,
Chris.

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.0.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages openssl depends on:
ii  libc6        2.19-18
ii  libssl1.0.0  1.0.2c-1

openssl recommends no packages.

Versions of packages openssl suggests:
ii  ca-certificates  20150426

-- no debconf information