-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libssl-doc
Architecture: all
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libssl-doc - Secure Sockets Layer toolkit - development documentation
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 03e3ef52059aa110f1525f582c7fbff2d1792508 2254316 libssl-doc_3.5.7-1~deb13u2_all.deb
 97a5e5ed813128c2f0dd1349b5cfd14a47050f10 5719 openssl_3.5.7-1~deb13u2_all-buildd.buildinfo
Checksums-Sha256:
 853c6da8ee6acd8524f2edf108f6cabeb61e78ba517a8a3e0020be7bbca9734a 2254316 libssl-doc_3.5.7-1~deb13u2_all.deb
 81a8f1ae3917b440d868751243837ce54e67d170850d982956a73073b11abe4b 5719 openssl_3.5.7-1~deb13u2_all-buildd.buildinfo
Files:
 12e94d1ac4601add185a9f59d8cdf6d8 2254316 doc optional libssl-doc_3.5.7-1~deb13u2_all.deb
 75f080fac72df83e0ff8e1c08215384a 5719 utils optional openssl_3.5.7-1~deb13u2_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=2TV5
-----END PGP SIGNATURE-----