-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: i386
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 b2ea2dcb00943e4186dff8c81184b0ce24419eac 1949848 libcrypto3-udeb_3.5.7-1~deb13u2_i386.udeb
 c56b286ba35f6a165ea9fd4c3ab275b1f4d53877 3013044 libssl-dev_3.5.7-1~deb13u2_i386.deb
 d6d7c423d391aaedf942b5500b9178b04eb0535a 419024 libssl3-udeb_3.5.7-1~deb13u2_i386.udeb
 16b3ab5c3b61f94bd97dcac27b998c9216159a0c 4869276 libssl3t64-dbgsym_3.5.7-1~deb13u2_i386.deb
 707ad16252e8892d15787d0edaa5930c97f527ea 2437464 libssl3t64_3.5.7-1~deb13u2_i386.deb
 aa39c07ece9294e4405624d819b1393e3bbc140b 652868 openssl-dbgsym_3.5.7-1~deb13u2_i386.deb
 b79e1632f1166b1ef02303805b491d886b115c21 1304776 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_i386.deb
 7088d0830e547fca51de3193ddb781832018be46 1009060 openssl-provider-fips_3.5.7-1~deb13u2_i386.deb
 0465b61984131952db0f318a4867952e5a4815ac 69668 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_i386.deb
 6fd0a0ae2f9fd9d22566f12e687d862f44d8d6ce 311956 openssl-provider-legacy_3.5.7-1~deb13u2_i386.deb
 2b2eb09879a9994ec23930b272adeafa0d83b5db 8780 openssl_3.5.7-1~deb13u2_i386-buildd.buildinfo
 94dde42fc8375fc7307c144cacaeadc2a185a70f 1512448 openssl_3.5.7-1~deb13u2_i386.deb
Checksums-Sha256:
 247262070ab3000c29b8d3b00ef188b852f38a40528020618f85c6c71a8b2e47 1949848 libcrypto3-udeb_3.5.7-1~deb13u2_i386.udeb
 e3355534827b5b88eae7d4f3a69fd7242ca5b849cd96f39748eee1a599ef077d 3013044 libssl-dev_3.5.7-1~deb13u2_i386.deb
 558b15c4734153a7157bb43ebf50b7d24f5ebb20418284f199f5325cbbb1007b 419024 libssl3-udeb_3.5.7-1~deb13u2_i386.udeb
 949ab3b9b8079bc7fadbfe1dbc014fe24155072ccf68f74d55f840c87e3efd43 4869276 libssl3t64-dbgsym_3.5.7-1~deb13u2_i386.deb
 30cd19b3f34b9d688d3a373082ccc8907bff1e52efb7f344266eceed100bcd18 2437464 libssl3t64_3.5.7-1~deb13u2_i386.deb
 665ee03362303fbdff530fe7abe0dd7cd015ceb85211e1bbed314e04c33931a4 652868 openssl-dbgsym_3.5.7-1~deb13u2_i386.deb
 74e962bfaf7bd3818be046552f2eafc418aa99353bc644a5cd954912a77a7764 1304776 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_i386.deb
 1581f0cf0cc416069d945e907488a29ecce88ceab19beb387ad3567e3ed4c2eb 1009060 openssl-provider-fips_3.5.7-1~deb13u2_i386.deb
 10253ed742b480e0477cefa6b9781df15af011c3acbea48cad32d3b60b7353df 69668 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_i386.deb
 8ec8d6aa3b4a7307601d973d3c11a75026a2a953367f6b12a68e389ec7a49ee2 311956 openssl-provider-legacy_3.5.7-1~deb13u2_i386.deb
 17b2c894ce91235d5baa9816300468dca2f8205cc0289ca76c11f7c81d36c9aa 8780 openssl_3.5.7-1~deb13u2_i386-buildd.buildinfo
 65c608302fd2e0a405aa67289b815119249cccd761ca998dfbdac386c2b880e5 1512448 openssl_3.5.7-1~deb13u2_i386.deb
Files:
 d9d7d593e931ea57c5a97860070379a0 1949848 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u2_i386.udeb
 cb75542f5f5eb291c31924d5b38dbcd9 3013044 libdevel optional libssl-dev_3.5.7-1~deb13u2_i386.deb
 1078381528b8e5357bb4b4dd4146ba8a 419024 debian-installer optional libssl3-udeb_3.5.7-1~deb13u2_i386.udeb
 47c2bc7d30113e03e860b8326e707123 4869276 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u2_i386.deb
 1889c7e014cd8cb001400956e92857d4 2437464 libs optional libssl3t64_3.5.7-1~deb13u2_i386.deb
 a9fb5e58851f700785d0fb7e97504d5f 652868 debug optional openssl-dbgsym_3.5.7-1~deb13u2_i386.deb
 53896857a13b3dfb5841372f84de1e6f 1304776 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_i386.deb
 24128703f47d01201ffe1f20c4c8b492 1009060 utils optional openssl-provider-fips_3.5.7-1~deb13u2_i386.deb
 c7fd7667deb7d70445501f809fe1ee79 69668 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_i386.deb
 4159b55fa5fc32eedd887874349a50ea 311956 utils optional openssl-provider-legacy_3.5.7-1~deb13u2_i386.deb
 94437fddfff8467df7f5eadeb71812a5 8780 utils optional openssl_3.5.7-1~deb13u2_i386-buildd.buildinfo
 15bcaa583a0680324701e7b1f6b04dc2 1512448 utils optional openssl_3.5.7-1~deb13u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=8Obg
-----END PGP SIGNATURE-----