-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: arm64
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 6cd77ea5c38b6eab67f27e7cccea0ccde097c9f2 2341676 libcrypto3-udeb_3.5.7-1~deb13u2_arm64.udeb
 4d1820a9b7637c9dfbc204e4df0bd31448197806 3393972 libssl-dev_3.5.7-1~deb13u2_arm64.deb
 5248058cbaf6d0550376ff848728d7c1ff6413f6 340568 libssl3-udeb_3.5.7-1~deb13u2_arm64.udeb
 68e2e252e732fce00d6cdbecb9924b00df410e51 6009348 libssl3t64-dbgsym_3.5.7-1~deb13u2_arm64.deb
 0fe8373a670506d7e7633d3ddfc9a4f3f58bfe49 2766020 libssl3t64_3.5.7-1~deb13u2_arm64.deb
 6661e2b8705d858f8a28feacdca522a63d8a54eb 766796 openssl-dbgsym_3.5.7-1~deb13u2_arm64.deb
 747c8d67a94344b7f2a548fe022f1fbed0bf6853 1710128 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_arm64.deb
 f7a16cd5fc9072de39aee2e293b8e77d5ca3015e 1000016 openssl-provider-fips_3.5.7-1~deb13u2_arm64.deb
 51364e3ebaa5ade6a29ce2ca67a4d9c8bddd58f3 91732 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_arm64.deb
 5021d31580f38a45481420628c1884dfdbf1f8b3 313492 openssl-provider-legacy_3.5.7-1~deb13u2_arm64.deb
 d31e28c709c795716b2b7d643716bdc450a57e20 8890 openssl_3.5.7-1~deb13u2_arm64-buildd.buildinfo
 48255d561e232412f617f022dc3f7998095e4925 1472236 openssl_3.5.7-1~deb13u2_arm64.deb
Checksums-Sha256:
 50b62b1e550b71b49f56e6188777b95ff0e09b87f80b754529c0d92b7265467e 2341676 libcrypto3-udeb_3.5.7-1~deb13u2_arm64.udeb
 b81910e8728fab596158c8384d6aa101c8249c1769eb2d33c73643b2be7a0bcf 3393972 libssl-dev_3.5.7-1~deb13u2_arm64.deb
 8a7bbec292ed8c77488f1beb0c0b71a60b6a36c384181ee3939747e3ffdd55ee 340568 libssl3-udeb_3.5.7-1~deb13u2_arm64.udeb
 4ad7037208a748817db39706e4dc7f078e55f1fdb626ed37386802138a464eb7 6009348 libssl3t64-dbgsym_3.5.7-1~deb13u2_arm64.deb
 ec131326aa9fa9ec934eca386bc7991f328fe383eaefd3e43bd8901a9199c5ae 2766020 libssl3t64_3.5.7-1~deb13u2_arm64.deb
 a3a06505471711aeb75f9d26ba95a49a6ec42d6aea060840681efd2bc90cb05c 766796 openssl-dbgsym_3.5.7-1~deb13u2_arm64.deb
 b61312104292b24e161689d898f24b365e54e0bc1883ab046a760b0fde727822 1710128 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_arm64.deb
 093b2a294682fc9d8038d87baf6fd81aa67143df3ff97cb84275669939cd69ba 1000016 openssl-provider-fips_3.5.7-1~deb13u2_arm64.deb
 0bd831123dbf652b3bfd21870ba2049adf81e9b87caae4f67a0444565b6f81b2 91732 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_arm64.deb
 7628954796eb651fc499ad98d4e51435691c2ccce0b5fbae6b198cbece742db4 313492 openssl-provider-legacy_3.5.7-1~deb13u2_arm64.deb
 11360221bbdda6c8e46450e77900d521b4f2eb08da87c79bc2b097ecea6b7ab1 8890 openssl_3.5.7-1~deb13u2_arm64-buildd.buildinfo
 ff38f9e4fdbfef72d9cb31088e5e42f58c83c2fb1d1bbb4e4b4c9adc53c17100 1472236 openssl_3.5.7-1~deb13u2_arm64.deb
Files:
 a16f6ecf47001ee096f7c1567d6767b8 2341676 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u2_arm64.udeb
 7e0c0235e2e7cd710b0c52c7f9d79107 3393972 libdevel optional libssl-dev_3.5.7-1~deb13u2_arm64.deb
 87c1d1a14edfb791b8889029877b6b5a 340568 debian-installer optional libssl3-udeb_3.5.7-1~deb13u2_arm64.udeb
 b014e7e0b4b66ba6f5da8e9627158835 6009348 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u2_arm64.deb
 33e8004cdc906e053ae3940a32cfc65d 2766020 libs optional libssl3t64_3.5.7-1~deb13u2_arm64.deb
 05993b6dd4073d14d653786e4cbfdc1c 766796 debug optional openssl-dbgsym_3.5.7-1~deb13u2_arm64.deb
 c8400f1232ad879fbc5770ccc5eabc6c 1710128 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_arm64.deb
 14878cc1f6de4f140c378088bb71a49c 1000016 utils optional openssl-provider-fips_3.5.7-1~deb13u2_arm64.deb
 102d909883d1a9ff413ba3cfaa5a3a36 91732 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_arm64.deb
 7c238d25398d31bf0fa6d1504d2a1dc6 313492 utils optional openssl-provider-legacy_3.5.7-1~deb13u2_arm64.deb
 cd88b386e1e93603725a93f38c835e4b 8890 utils optional openssl_3.5.7-1~deb13u2_arm64-buildd.buildinfo
 61c64a8b14eb1abd1127ba6d2346d895 1472236 utils optional openssl_3.5.7-1~deb13u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=80Mc
-----END PGP SIGNATURE-----