Vulnerability Bulletins

DSA-4540 openssl1.0 - security update

   
Affected software Debian
 
Two security issues were discovered in OpenSSL: A timing attack againstECDSA and a padding oracle in PKCS7_dataDecode() andCMS_decrypt_set1_pkey().

More info:

https://www.debian.org/security/2019/dsa-4540