-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: ppc64el
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-conova-01) <buildd_ppc64el-ppc64el-conova-01@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 7f2bc7b9f35d8a0b85c24619392fc92a2efb63a1 2059120 libcrypto3-udeb_3.5.7-1~deb13u2_ppc64el.udeb
 71320038ed9c3c433a26a82f16eff756463c3eb7 3129440 libssl-dev_3.5.7-1~deb13u2_ppc64el.deb
 26a95b1609430d5ffbe8c7880fd95fd68ce90d07 404296 libssl3-udeb_3.5.7-1~deb13u2_ppc64el.udeb
 e79056969b2f7065b0117f83e8a5252602e041f8 6260424 libssl3t64-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 dfc4225f477fedee46c4d981ed5bdcb600ed39e5 2516900 libssl3t64_3.5.7-1~deb13u2_ppc64el.deb
 e16c082ad1cfa7ff50c09743c5d07a6474b05804 785048 openssl-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 898eb045f0b974654ee1c83545683a8a055396c8 1781240 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 b21726bc6c9d0fce8957ef5a1e77ac0ed272c97c 1084448 openssl-provider-fips_3.5.7-1~deb13u2_ppc64el.deb
 8214923b0a19e414237840d67820e4de6e1a758d 98744 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 c715e474cc4fc322f3fe7eab0868e7ee1e035245 316792 openssl-provider-legacy_3.5.7-1~deb13u2_ppc64el.deb
 f77070ef81ca35462657298d391f9d34e16e3d3f 8959 openssl_3.5.7-1~deb13u2_ppc64el-buildd.buildinfo
 a7ceb5073ea35146ae8bf9f074e411d2a1ffaa06 1505752 openssl_3.5.7-1~deb13u2_ppc64el.deb
Checksums-Sha256:
 acb0d8ab65da3837bea086b0c35a41e629f4a28fee728adfe0cb0ace4d2502f9 2059120 libcrypto3-udeb_3.5.7-1~deb13u2_ppc64el.udeb
 33b56b5300eadb014acccf95f73629848b476869d2f6feeb2f5c71f581a45228 3129440 libssl-dev_3.5.7-1~deb13u2_ppc64el.deb
 dce34dbd5b86e0d9c4eb9fc5464bb33d499eafe6d638e63daf6d98b2f8ea1af9 404296 libssl3-udeb_3.5.7-1~deb13u2_ppc64el.udeb
 8e65871569e56bf5f4d105e9ca99937d03fd6bd8c57ab19cf60e4816a267fcd9 6260424 libssl3t64-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 71528fcfd38807b513d6afa0790affaa67e40cb48dce46a9faab52008016b56e 2516900 libssl3t64_3.5.7-1~deb13u2_ppc64el.deb
 a4e6adb270c6d2c5024d1c46387215a0148f3710171be208a5872279193b86fb 785048 openssl-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 9e875208fdc5814f729e498223dbe2283e6b3a941509002b63e69f58c16e6cfb 1781240 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 91f4b5361d23dc1535e2e15727b23faf31b6bd64ae5ced2375f1eb4197c5ce7b 1084448 openssl-provider-fips_3.5.7-1~deb13u2_ppc64el.deb
 f4c9fd68b1467c4b2cb780897a6770cbca39a74c25dccb534767e8a904444611 98744 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 68fe891cd9bbbd1b4b00da1a80db3e07e5168e2d09921a15963f8246b2da6e68 316792 openssl-provider-legacy_3.5.7-1~deb13u2_ppc64el.deb
 b87e0844953341143f3138922d41d0da741ebc091909f96fbf45c3983a2e2d39 8959 openssl_3.5.7-1~deb13u2_ppc64el-buildd.buildinfo
 c8ea7b5a491622c187dd2d026ed45084fc3c94398f92b2bec0594c0ad6c315a5 1505752 openssl_3.5.7-1~deb13u2_ppc64el.deb
Files:
 6df14a683f81151a1cded816a0bdb67f 2059120 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u2_ppc64el.udeb
 89bad18e068a54442e733ee027b8026a 3129440 libdevel optional libssl-dev_3.5.7-1~deb13u2_ppc64el.deb
 d4d744a8f4adce2ab8b22af454883b41 404296 debian-installer optional libssl3-udeb_3.5.7-1~deb13u2_ppc64el.udeb
 b7b42f9586fcd89c65b5d321aa2e8600 6260424 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 b7dc859bf285b58a6ac5f2a418d5642a 2516900 libs optional libssl3t64_3.5.7-1~deb13u2_ppc64el.deb
 ad87f93f96a65b0f9ee8c92d4f9b8837 785048 debug optional openssl-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 eb36c70b9e4a2d3e9e1e4354e8f4f8f2 1781240 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 d2bdae522fd35656edfc151c26f061b1 1084448 utils optional openssl-provider-fips_3.5.7-1~deb13u2_ppc64el.deb
 7318ec028097629c9be76c473e73d50e 98744 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_ppc64el.deb
 8ccf04289411903cd937788a2bb1e054 316792 utils optional openssl-provider-legacy_3.5.7-1~deb13u2_ppc64el.deb
 d6c60a07889a0acd6be04f5d6cd34921 8959 utils optional openssl_3.5.7-1~deb13u2_ppc64el-buildd.buildinfo
 7c492541747fc91dc9fbd475917da4f0 1505752 utils optional openssl_3.5.7-1~deb13u2_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=cIVB
-----END PGP SIGNATURE-----