-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 17:26:22 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: s390x
Version: 3.5.7-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Closes: 1144615 1145172
Changes:
 openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing
     INITIAL Packet")
   * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping")
   * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted
     protectionAlg")
   * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference
     a Missing Certificate")
   * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future
     Epoch")
   * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response
     Validation")
   * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts")
   * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory
     Exhaustion")
   * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using
     EVP_Cipher()") (Closes: #1145172)
   * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel
     Queue") (Closes: #1144615)
Checksums-Sha1:
 be454689e7a47aae5e70691b86bf1c35f1dad339 1605260 libcrypto3-udeb_3.5.7-1~deb13u2_s390x.udeb
 5a025b4314d59f490c118989c480008547c3adb1 2571388 libssl-dev_3.5.7-1~deb13u2_s390x.deb
 a8199689ab57d6a97f77c6e2f703c2c5426d331b 348516 libssl3-udeb_3.5.7-1~deb13u2_s390x.udeb
 5259e908a1687c2648098b4ed386cab2881adc94 5927396 libssl3t64-dbgsym_3.5.7-1~deb13u2_s390x.deb
 2656bdbcb810802f655912cd1f025ef02ffd846b 2041780 libssl3t64_3.5.7-1~deb13u2_s390x.deb
 e12d74e86e0f41c4f4ccf845a64338a08f90a045 756100 openssl-dbgsym_3.5.7-1~deb13u2_s390x.deb
 02ecd1432a3a4736ec025b1e411305df6d0b4ba5 1596980 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_s390x.deb
 5a69004aa3d14fbd79f91bd7bcd4f746af3cb808 790236 openssl-provider-fips_3.5.7-1~deb13u2_s390x.deb
 dab5fb5a9f394b6933a23fe18e4ffec0a1e2cfed 96640 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_s390x.deb
 b54bc026c144bdd6a95d6b76751dee6e686c2833 313676 openssl-provider-legacy_3.5.7-1~deb13u2_s390x.deb
 2380174535b8873ad7f44a53932d674b72764dd2 8765 openssl_3.5.7-1~deb13u2_s390x-buildd.buildinfo
 f49c1ec26ba6a00a9c5df771216220d75fbc720a 1497520 openssl_3.5.7-1~deb13u2_s390x.deb
Checksums-Sha256:
 1a25c4f20a4a228eb10c6a7417b8b9d89314b42d5a92fcab810659244a7aab48 1605260 libcrypto3-udeb_3.5.7-1~deb13u2_s390x.udeb
 baf588fa994dc6daf5fdf5e44f48eda9ab662d52c2c318a2645c72ee2bdf4bd7 2571388 libssl-dev_3.5.7-1~deb13u2_s390x.deb
 4e9f423d6422bbb9df28f97e16a743e83351731f34633a4ebedadd854214debb 348516 libssl3-udeb_3.5.7-1~deb13u2_s390x.udeb
 6567ab40a1b6ec1b5d2ca44083f3c1221ff3fcd4039c3f9bc4ed10fe77b4ce15 5927396 libssl3t64-dbgsym_3.5.7-1~deb13u2_s390x.deb
 6aea275156fa95400d533fe783c1de61592806fe4cdd85581ccf9f28230cea70 2041780 libssl3t64_3.5.7-1~deb13u2_s390x.deb
 4e310ad99ee6659f39fe7b6b8c2a9973817f42dd597ba11eb912d9045662fbe9 756100 openssl-dbgsym_3.5.7-1~deb13u2_s390x.deb
 93511fa6deb436cfb4b444c6dd971b7305cf840699b5136bf3ddcb433ad74013 1596980 openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_s390x.deb
 f8a5f1897a48ea392eb3b5bff06717250bb19decc18cd2e095e1fb6a17dcf912 790236 openssl-provider-fips_3.5.7-1~deb13u2_s390x.deb
 8074fb7fbfbd2c846b0394b68485620bc65473fd09babcdb585dd87e29020544 96640 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_s390x.deb
 abbb83a0221c80f4631855ba5cdfa15c7cf7fc77ac19f90806b42afba8d10631 313676 openssl-provider-legacy_3.5.7-1~deb13u2_s390x.deb
 d99b8f3ef9fd456653f288fa6439ee013c42df8950213eca9d5b6b2deaefb338 8765 openssl_3.5.7-1~deb13u2_s390x-buildd.buildinfo
 0068e19461363b8332a446306643ba835094d287282fda556de35b150071084b 1497520 openssl_3.5.7-1~deb13u2_s390x.deb
Files:
 bd1574ac8d73604d3208e7a274bab4d0 1605260 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u2_s390x.udeb
 208d25b5a3c5cb2aa942488b25251e7a 2571388 libdevel optional libssl-dev_3.5.7-1~deb13u2_s390x.deb
 f92692293a6b1c5d7e1196f84261fac8 348516 debian-installer optional libssl3-udeb_3.5.7-1~deb13u2_s390x.udeb
 0e0c8417735a2e5bbbb527926b442510 5927396 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u2_s390x.deb
 28c0ef07cb563d24f77a5dcdc488c3af 2041780 libs optional libssl3t64_3.5.7-1~deb13u2_s390x.deb
 cfb1fbcf62c56c1d8b3dbeec191957d6 756100 debug optional openssl-dbgsym_3.5.7-1~deb13u2_s390x.deb
 2e768f7eb0b8393a383c6209b2d500fe 1596980 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u2_s390x.deb
 bd8bc6cf23064600df77c57930d1af98 790236 utils optional openssl-provider-fips_3.5.7-1~deb13u2_s390x.deb
 5f6f62c3fc0195eb1c49d837700767af 96640 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u2_s390x.deb
 7b9b6df93a943d6cc2f228b2ebdcb667 313676 utils optional openssl-provider-legacy_3.5.7-1~deb13u2_s390x.deb
 992c1e197512b5ccdba84da36688965e 8765 utils optional openssl_3.5.7-1~deb13u2_s390x-buildd.buildinfo
 1349c12897aa4fe9c76e188d35ad91a7 1497520 utils optional openssl_3.5.7-1~deb13u2_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=zu6G
-----END PGP SIGNATURE-----