-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: riscv64
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-01) <buildd_riscv64-rv-osuosl-01@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 528380bf59c30d9da252325b58b21be4f18cd3a8 1814068 libcrypto3-udeb_3.5.7-1~deb13u2_riscv64.udeb
 596f738ffc856762a6e5b79f02c8f1e24892263a 5818208 libssl-dev_3.5.7-1~deb13u2_riscv64.deb
 b4f8427eb615b832e020037ce1a690553229667a 380020 libssl3-udeb_3.5.7-1~deb13u2_riscv64.udeb
 4b55393316f41f9dece58afde7bf5ed9cf937e67 5792844 libssl3t64-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 362177eb5e569c82c0d07846298fb55830ddd14b 2235764 libssl3t64_3.5.7-1~deb13u2_riscv64.deb
 078fb40a6b0220d0297b3b0f1992610ed8b7ceea 737432 openssl-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 1303336446625864aee3b1a917075524c9447c44 1660260 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 52bdd0c9473d1ca60a905081f8d4e404ffeaa205 892248 openssl-provider-fips_3.5.7-1~deb13u2_riscv64.deb
 406c40d9f947c7e8460fe3a95c40bc56ddd6212d 92480 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 f840986a52bdaea920275a10f4d3021ecf5035d2 317056 openssl-provider-legacy_3.5.7-1~deb13u2_riscv64.deb
 eb393a928a8b9fff7518b75ce4dbf65000160826 8901 openssl_3.5.7-1~deb13u2_riscv64-buildd.buildinfo
 87b79966070d66cac73c0c68360b1fcf9a769d90 1488056 openssl_3.5.7-1~deb13u2_riscv64.deb
Checksums-Sha256:
 f76789aca27fa1c25bb02b367d2a6599d5617173f97f9e4675c24b1f77c6f28c 1814068 libcrypto3-udeb_3.5.7-1~deb13u2_riscv64.udeb
 d13f10f091a69718196b93627097bdb44638c4c197254ffd90fa105d6515fd9c 5818208 libssl-dev_3.5.7-1~deb13u2_riscv64.deb
 fee1abd18fa15b07172acb96734e92b4307666405c903d14088d79a04f12c196 380020 libssl3-udeb_3.5.7-1~deb13u2_riscv64.udeb
 4889c087ac33c906f8b006989237151b1a7ec52ee21be499405d283c301bae24 5792844 libssl3t64-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 af87d01b79d4ff71e7d46a53341cbb480a4a72b58679d50bc8dff392ceaef154 2235764 libssl3t64_3.5.7-1~deb13u2_riscv64.deb
 51c72cb6070dd6fc2e122d1db79e79cd0a79d8288efde9b73da1fdcc14c51ab6 737432 openssl-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 534d1e65d17be784c8f2ca6b0777e76c6248f19a8d89e7c741040632bbf46a1d 1660260 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 8c018a19d33eb33466a7cd967d713471ca382a4eee8e239a394e7d470fb02a50 892248 openssl-provider-fips_3.5.7-1~deb13u2_riscv64.deb
 b94125432eeda6f742c7cf22cd5057a7df8d3fc136554f03e0fd2ec757b5666c 92480 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 66420982a650137a3793a47be4b7ddf9a9f2bf6482c2ea7a194fd80511f62139 317056 openssl-provider-legacy_3.5.7-1~deb13u2_riscv64.deb
 7309203b7cb3d7ec84f23ceccef77c5a8b368fb794952328cffedc3d62fbebdf 8901 openssl_3.5.7-1~deb13u2_riscv64-buildd.buildinfo
 9e2e1bcfcc33584c73438a1d37575d1a34ca82648d7a78bd118b51ca4999078e 1488056 openssl_3.5.7-1~deb13u2_riscv64.deb
Files:
 cac9b3b8fbb1988a970d2ed9f9a2d5c6 1814068 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u2_riscv64.udeb
 da2a9f293db2e44f718bde824dab9f87 5818208 libdevel optional libssl-dev_3.5.7-1~deb13u2_riscv64.deb
 7d6fb162237770651081da855f659faa 380020 debian-installer optional libssl3-udeb_3.5.7-1~deb13u2_riscv64.udeb
 6c1f49d32d9135de4c4bf05b6704b8a4 5792844 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 d7046afb67eb4c8f323c9c79d3cf159e 2235764 libs optional libssl3t64_3.5.7-1~deb13u2_riscv64.deb
 02f82d053b0ec6f9ccf99a97921dcac6 737432 debug optional openssl-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 90474cea9b31e48fbec4d5d568e2d906 1660260 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 2b1f40d93729b706ff67a21e704786df 892248 utils optional openssl-provider-fips_3.5.7-1~deb13u2_riscv64.deb
 9df1f60f36dc2619517777240f3bcb28 92480 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_riscv64.deb
 119eb053b994b97b2a29c87cd1ba4c09 317056 utils optional openssl-provider-legacy_3.5.7-1~deb13u2_riscv64.deb
 01da1003202aa327274c09ab53ac119a 8901 utils optional openssl_3.5.7-1~deb13u2_riscv64-buildd.buildinfo
 50643ff333a9c01cdfa46a55403afca0 1488056 utils optional openssl_3.5.7-1~deb13u2_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=xu/f
-----END PGP SIGNATURE-----