-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: amd64
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 fdca590a75f6db11587559cbfc2dc2eabfcd999e 2017772 libcrypto3-udeb_3.5.7-1~deb13u2_amd64.udeb
 a65d99c4a03eeac87e01bb916bbd254bf7848dcf 2964784 libssl-dev_3.5.7-1~deb13u2_amd64.deb
 e2e6ca3d009ad9dbfbe4794f50e01f711875b376 372884 libssl3-udeb_3.5.7-1~deb13u2_amd64.udeb
 6682b0ee41decccce51f20e99a3742d28fec30a2 6223444 libssl3t64-dbgsym_3.5.7-1~deb13u2_amd64.deb
 8a2c262e9de449cc7b5f444865b52e6f3e202290 2453872 libssl3t64_3.5.7-1~deb13u2_amd64.deb
 415f9595e4b886b9558682b7315224bad756c236 750356 openssl-dbgsym_3.5.7-1~deb13u2_amd64.deb
 e4f8ee807e2df8139937bbf45c55063305ebac02 1830280 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_amd64.deb
 4174e90b032cb241a5d445c1e26093bef2a2284e 1109196 openssl-provider-fips_3.5.7-1~deb13u2_amd64.deb
 031e3976fb1d5e2bac521475698fdfd15c1711d0 97840 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_amd64.deb
 cc8a26ecd8266f59453e37c8b912933e91993839 316132 openssl-provider-legacy_3.5.7-1~deb13u2_amd64.deb
 4e4fe0ff05260fe02ebde27c9729eb7ce2935684 8906 openssl_3.5.7-1~deb13u2_amd64-buildd.buildinfo
 6d4bae935f8e24b3cc0f65b9161150239a8a40ca 1507300 openssl_3.5.7-1~deb13u2_amd64.deb
Checksums-Sha256:
 37ec696b3c141393a6fd8a509c51754588fc412c7ab3d316f32acbd74a88a1dc 2017772 libcrypto3-udeb_3.5.7-1~deb13u2_amd64.udeb
 f245b646a4fe5beb31d6a387da9db3399e3b14a904efef1a23227ff5465a1d11 2964784 libssl-dev_3.5.7-1~deb13u2_amd64.deb
 a9e026053cad3110e530fd9703bd50984e173fd8cb8b08325e75a32511c7f120 372884 libssl3-udeb_3.5.7-1~deb13u2_amd64.udeb
 7ce5d2b4649d8176fa539f1c477efc9c5ae6ca926b1629b5b80998ea0701b479 6223444 libssl3t64-dbgsym_3.5.7-1~deb13u2_amd64.deb
 916f7f40b34a06e6ebfaefcdab331bff458328411da672598f126a760472467d 2453872 libssl3t64_3.5.7-1~deb13u2_amd64.deb
 521b54a85176e72e9412617c2a231a243347586794197d9cf576d4648cdcb7e0 750356 openssl-dbgsym_3.5.7-1~deb13u2_amd64.deb
 aa15dad13dee47745e5f90fae900ba795c627db233858fc60a72a66ef7d0ca3d 1830280 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_amd64.deb
 6b70c81976ff89c4be4e8dfbc01e1dfd03d7b696022f000e8c6f1ad1ecfcc5e7 1109196 openssl-provider-fips_3.5.7-1~deb13u2_amd64.deb
 d03b046a247af306bb98589edb5c12415110553f09d9db7656d9965a96bb426a 97840 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_amd64.deb
 f155c8191ae6d41da73d792f4182680aeafeb85c3dd223934ee9fdd115c4f1fa 316132 openssl-provider-legacy_3.5.7-1~deb13u2_amd64.deb
 02ea5d7654641388cdaa923a6cc5d2ae17d9261655f6bbe9901a6c9c6bf564ae 8906 openssl_3.5.7-1~deb13u2_amd64-buildd.buildinfo
 4ff006f431d8c2e69fa736885a3b6e779f2448535f69dbde821d9f0ff87ad8ea 1507300 openssl_3.5.7-1~deb13u2_amd64.deb
Files:
 5e0313b23cfbf1eb19d3ac4794c194fe 2017772 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u2_amd64.udeb
 66a8e276da9e0a7c946800f26a179f69 2964784 libdevel optional libssl-dev_3.5.7-1~deb13u2_amd64.deb
 1c54c8c2147bb63f6bfc6ffdffdb862c 372884 debian-installer optional libssl3-udeb_3.5.7-1~deb13u2_amd64.udeb
 552cf22f077b97d62c4b8ac6229736df 6223444 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u2_amd64.deb
 4477e2a5e52680f53fde3b97cab1847e 2453872 libs optional libssl3t64_3.5.7-1~deb13u2_amd64.deb
 b47d0dcf66a54cf6c96d3b358c7f9401 750356 debug optional openssl-dbgsym_3.5.7-1~deb13u2_amd64.deb
 0bd5c322b6cdc7e8c96588fcdd27b109 1830280 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_amd64.deb
 e3115f50e8ccff316cde2c5c39ac2c9f 1109196 utils optional openssl-provider-fips_3.5.7-1~deb13u2_amd64.deb
 dfc4f7639575a34334db05ef1da1fd03 97840 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_amd64.deb
 f8f48c1c31c8c7aea0365ebd519e568f 316132 utils optional openssl-provider-legacy_3.5.7-1~deb13u2_amd64.deb
 7f02714c6f704122c61e5ed7a573e676 8906 utils optional openssl_3.5.7-1~deb13u2_amd64-buildd.buildinfo
 05f22d3b92498fee94a7432828d030e3 1507300 utils optional openssl_3.5.7-1~deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=0qbr
-----END PGP SIGNATURE-----