-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: armhf
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 f2b1d7951dd4c74aaaef3e03f061e50b09b436aa 1555260 libcrypto3-udeb_3.5.7-1~deb13u2_armhf.udeb
 503ad18fc4f58cb2d35227bcfc824af6cd705892 2574340 libssl-dev_3.5.7-1~deb13u2_armhf.deb
 c494cd0a269c201fef2a6bc713c8f93960131a2a 318716 libssl3-udeb_3.5.7-1~deb13u2_armhf.udeb
 25c7e649bbbb002fa78f15c34e420723f14d4c46 5879052 libssl3t64-dbgsym_3.5.7-1~deb13u2_armhf.deb
 ed7e76612224273685258d4d672a2c4541076f0a 1999964 libssl3t64_3.5.7-1~deb13u2_armhf.deb
 2141a74d1d849b09b8a8a225a1d2727c19a995ee 747512 openssl-dbgsym_3.5.7-1~deb13u2_armhf.deb
 26a4a9e96412a946a54c1fba3e7604984f23b1cb 1575916 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_armhf.deb
 a98bceb7a2d8c3f3d646790482d47e43b9384e48 883448 openssl-provider-fips_3.5.7-1~deb13u2_armhf.deb
 4adacee7798196633836a1e9612347bab74121ac 94824 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_armhf.deb
 4d547584908353d15ac6435565d605ae1106eaea 307436 openssl-provider-legacy_3.5.7-1~deb13u2_armhf.deb
 b50a95eef657488498913e00deb1b0fb64f33fc3 8769 openssl_3.5.7-1~deb13u2_armhf-buildd.buildinfo
 c2e227dee02a496b7324248206e9f06fe637a523 1474556 openssl_3.5.7-1~deb13u2_armhf.deb
Checksums-Sha256:
 2c6b41f9c1ae0812e22605a23c81541a7c722864a173b3a0bf66fd607b1faad6 1555260 libcrypto3-udeb_3.5.7-1~deb13u2_armhf.udeb
 6740adc1ff6c9eec7f9e2d574073a205eae5d88350c8dddceac017ac0d3f747b 2574340 libssl-dev_3.5.7-1~deb13u2_armhf.deb
 6f46e7d7e7bdcfaf0f72b7b96aa6a73f2007f987206b562595a030491435dd6b 318716 libssl3-udeb_3.5.7-1~deb13u2_armhf.udeb
 f3917b3c486dbc0184eeb4955b0be3697a50b0ec51f4778767058d6b9325f6fb 5879052 libssl3t64-dbgsym_3.5.7-1~deb13u2_armhf.deb
 94538529b1471c2055476df47fbc29a67a734c7c9d7f1fb44fd54c97e43c40c5 1999964 libssl3t64_3.5.7-1~deb13u2_armhf.deb
 b202e9eab4764551b2294cd01f443ba030b7949648886a65c7e656c8f30e1781 747512 openssl-dbgsym_3.5.7-1~deb13u2_armhf.deb
 4dcfb18060962e39f903989064ab1a57b5d7f2522fc53be9bfa17a8b459d9b0a 1575916 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_armhf.deb
 2569ec26f9b761be33b795ded94e3d36cd2809112a5d747ad5e463414442000d 883448 openssl-provider-fips_3.5.7-1~deb13u2_armhf.deb
 d5977d2aacbf3c39393346229cfac520dd08ebb0f0119c7a872e96695987aa90 94824 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_armhf.deb
 eefa69b451e991b52daeef669114dd23956c2d14d3bd4e5a1b4cc0c5ca62111d 307436 openssl-provider-legacy_3.5.7-1~deb13u2_armhf.deb
 dd49bfc2390c213f8ecc3534e0bda4f05a7dbc984fb906fd6dc1daeb235b2df6 8769 openssl_3.5.7-1~deb13u2_armhf-buildd.buildinfo
 94afc1c0bf72552b729dfe73eba3439e914ab8ec0c36b5564247dc286ed46bb1 1474556 openssl_3.5.7-1~deb13u2_armhf.deb
Files:
 60d84c8bbe5cbcd785b9a046f9214f1d 1555260 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u2_armhf.udeb
 a22f0220849935a99746ddf70a90c51a 2574340 libdevel optional libssl-dev_3.5.7-1~deb13u2_armhf.deb
 6a0112502edc24931ed364ee0c2c80e6 318716 debian-installer optional libssl3-udeb_3.5.7-1~deb13u2_armhf.udeb
 8739218349ab003bf333fe3323034de1 5879052 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u2_armhf.deb
 476a880ca442995a6dcb9c6eb9002cf2 1999964 libs optional libssl3t64_3.5.7-1~deb13u2_armhf.deb
 2dba201283d7170fe7d13b6ab2fb747c 747512 debug optional openssl-dbgsym_3.5.7-1~deb13u2_armhf.deb
 e982d46e88fefda4b307cf7d0f0cc679 1575916 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_armhf.deb
 7450e34358dc88eb54e166331e3b1961 883448 utils optional openssl-provider-fips_3.5.7-1~deb13u2_armhf.deb
 6c64b1716f68decd4111b8f65c345487 94824 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_armhf.deb
 22946256d387a4bc2d3f51689d9bc9fb 307436 utils optional openssl-provider-legacy_3.5.7-1~deb13u2_armhf.deb
 7cb6fcf13a235a675a52d0eadc58dea4 8769 utils optional openssl_3.5.7-1~deb13u2_armhf-buildd.buildinfo
 f7090a5d922cbc7e9c3c1bc15c7f0b6d 1474556 utils optional openssl_3.5.7-1~deb13u2_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=suvd
-----END PGP SIGNATURE-----