-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: armel
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 9f59d5dbf9f20c066e1ca3cef4cbaa90908407f2 1510988 libcrypto3-udeb_3.5.7-1~deb13u2_armel.udeb
 68fc0d13a9c5556f7ccecea7cbe9f88b11d768e9 2548008 libssl-dev_3.5.7-1~deb13u2_armel.deb
 338b155ba1806ae7bf2044e4a9c2fd2aa4338ab4 317924 libssl3-udeb_3.5.7-1~deb13u2_armel.udeb
 b46010cf4717899cfd880b879838df40c7e61ae5 5792332 libssl3t64-dbgsym_3.5.7-1~deb13u2_armel.deb
 0cfb267e2324de8db8356bf2054a2fa47d9dfa27 1961348 libssl3t64_3.5.7-1~deb13u2_armel.deb
 d7741d4c0bb9994905b9b1bd3ad7519e3643e181 734152 openssl-dbgsym_3.5.7-1~deb13u2_armel.deb
 25f518751209315a803ef9433b318da3c7031c0f 1541448 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_armel.deb
 8ee75978e366ee086425abd419c92264face0316 864776 openssl-provider-fips_3.5.7-1~deb13u2_armel.deb
 08a1d0271454ff95e278390c2cc0a2e90a507ac6 93024 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_armel.deb
 e9d6e223774a23a3f05a2f6d9736b21b1aefb53a 307124 openssl-provider-legacy_3.5.7-1~deb13u2_armel.deb
 63948cc7f25481a386ca705550484df9d1ce14c9 8755 openssl_3.5.7-1~deb13u2_armel-buildd.buildinfo
 97a8d2be33744141a9ec35ed09cd19cc653357e0 1467292 openssl_3.5.7-1~deb13u2_armel.deb
Checksums-Sha256:
 7924d6cb603b8cccedaed41cf43ff4b1b58633057d4d694e9b50cbbeeea6f60c 1510988 libcrypto3-udeb_3.5.7-1~deb13u2_armel.udeb
 a2ee3c26df062efaf8f4c23860f764488b7a191d536684bb45afe9acd28838dc 2548008 libssl-dev_3.5.7-1~deb13u2_armel.deb
 18cee1bc98350fd24a195bf8be4be764820eef6306a180828b2aa2c7218454e1 317924 libssl3-udeb_3.5.7-1~deb13u2_armel.udeb
 b424fbfcdb719c7ff7309eb9a902375a30bb50536aab3a963cf5053b2f6f70c2 5792332 libssl3t64-dbgsym_3.5.7-1~deb13u2_armel.deb
 28391d782016f8ac30042cd43bfcd39bfbb46cc0c8b7845ffb7414ef916c6b23 1961348 libssl3t64_3.5.7-1~deb13u2_armel.deb
 b867ab270718c05b87b457d2d0d6fdb76ed20e30f482d51695f04b3ec1fa234e 734152 openssl-dbgsym_3.5.7-1~deb13u2_armel.deb
 48f3a994f6623d79ae673442d7f50238422781ea671688d180ea5eece68ee2a7 1541448 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_armel.deb
 c376cae4cffa93f18722698048dec3ce9eac9ac412c73843496ff5606175eb49 864776 openssl-provider-fips_3.5.7-1~deb13u2_armel.deb
 14f5cb3dace70a1c28f795ade1348db46f141c3e706ad97cdd9c1d935c1ea9cc 93024 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_armel.deb
 de52fdae39225b656cc3467f50a5bd4025343cccc0a5cd168f92ca0f1bd354c9 307124 openssl-provider-legacy_3.5.7-1~deb13u2_armel.deb
 242f1d6cbe9e0123c3865b236b7c520d34de1a94f8127c98dbf5a9f055ba9b8e 8755 openssl_3.5.7-1~deb13u2_armel-buildd.buildinfo
 67ffea6d3c9d0bd7f707d49ad757c5bd4cdaa9c665205f208268d7a75b3ed45f 1467292 openssl_3.5.7-1~deb13u2_armel.deb
Files:
 8c5bb825d8ca332d207858327ab36c94 1510988 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u2_armel.udeb
 25ac1a65aa1ee3f54771476ad8c631c6 2548008 libdevel optional libssl-dev_3.5.7-1~deb13u2_armel.deb
 274a7287489826385067d64732185ae0 317924 debian-installer optional libssl3-udeb_3.5.7-1~deb13u2_armel.udeb
 f46a414a007157d02167c3bcc74a7dbd 5792332 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u2_armel.deb
 969928c4dda0faae9c5b659cadfb9a75 1961348 libs optional libssl3t64_3.5.7-1~deb13u2_armel.deb
 2f3e3980dacb7cab621ab37913e3b20a 734152 debug optional openssl-dbgsym_3.5.7-1~deb13u2_armel.deb
 8014092e2f497dd61ce1f9ee0da126f5 1541448 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_armel.deb
 821ac6ef1795687697ecbce05780a609 864776 utils optional openssl-provider-fips_3.5.7-1~deb13u2_armel.deb
 2d3ea31dd6a6d16387e71bd793606e5d 93024 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_armel.deb
 ad7536373ddcffd626fa3f1e8908a848 307124 utils optional openssl-provider-legacy_3.5.7-1~deb13u2_armel.deb
 07687fde775282af475c9bcea5859b8f 8755 utils optional openssl_3.5.7-1~deb13u2_armel-buildd.buildinfo
 10d8ab4e87d174aef629b57df4917322 1467292 utils optional openssl_3.5.7-1~deb13u2_armel.deb

-----BEGIN PGP SIGNATURE-----
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=NNJV
-----END PGP SIGNATURE-----