-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: i386
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 8b3c2bb8ae0bba7fec0d0b013475c376abc0f01d 1953236 libcrypto3-udeb_3.5.7-1~deb13u3_i386.udeb
 e5bbb87e293163a3c56fd5c8f4c84416b50d1a3f 3018096 libssl-dev_3.5.7-1~deb13u3_i386.deb
 cafa999dd29bbed04d187566a37dd4b73fd9daec 423400 libssl3-udeb_3.5.7-1~deb13u3_i386.udeb
 e437a6ab4813f28f4ba7bc89b698502ea4c73526 4891408 libssl3t64-dbgsym_3.5.7-1~deb13u3_i386.deb
 9caf1edfa23491fc4a297df80fd9633945bb612b 2441452 libssl3t64_3.5.7-1~deb13u3_i386.deb
 c1495bae3a2215dd31ee7e1225f83ed6da7d4ca2 652844 openssl-dbgsym_3.5.7-1~deb13u3_i386.deb
 c700098a2836f35ad15126d5fbd44ebcd32e38ce 1305216 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_i386.deb
 1c6b805077f5d83680f00b7fa334108ee23d1f6b 1009648 openssl-provider-fips_3.5.7-1~deb13u3_i386.deb
 a3ba9ac43cea53f6aca1b9a7a5272dcaf1d40d4b 69652 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_i386.deb
 282fa8ecfd9169c6990be07f5cfa09d053461419 312364 openssl-provider-legacy_3.5.7-1~deb13u3_i386.deb
 0adc839a7abb8b8747fb3ef859b3d67ce522b90c 8835 openssl_3.5.7-1~deb13u3_i386-buildd.buildinfo
 e756e2cce4c0f2be615fda6b2bb021ee1892c88f 1512948 openssl_3.5.7-1~deb13u3_i386.deb
Checksums-Sha256:
 3f6d139c94e90e1014e1c98818943c19e519e0611d3a717ff4cd6467b4a97f67 1953236 libcrypto3-udeb_3.5.7-1~deb13u3_i386.udeb
 a78cd670a342b73ef4015361c1343f6b82da046c287057d7f0ddbf7ba996ca1b 3018096 libssl-dev_3.5.7-1~deb13u3_i386.deb
 be63312806c59678680f63fe3d8a71baf30f1cfb7deea574f803062769257746 423400 libssl3-udeb_3.5.7-1~deb13u3_i386.udeb
 636ec9c65df79b0da7df5dc31b419bc2a4a025004cf3066cd13c339b196f30d3 4891408 libssl3t64-dbgsym_3.5.7-1~deb13u3_i386.deb
 c6988eab4110e14aa7306a9b32356bc9b699f7f657acdc0211a458f6d91819b5 2441452 libssl3t64_3.5.7-1~deb13u3_i386.deb
 b2716d6303ab8500faa6af5e12ec47cbbc2ef34693adb0e072d3eb3c23a1918f 652844 openssl-dbgsym_3.5.7-1~deb13u3_i386.deb
 77aa95078ceb4a42c4ea868be7b96565fa60402e26c55226aec3b408247f94ec 1305216 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_i386.deb
 43d75977c64e767ebebe8c6d08b4af5a5f8897eb04775ad24389d000008d92a4 1009648 openssl-provider-fips_3.5.7-1~deb13u3_i386.deb
 3a51c3f945bf900371f6dadb337e2e139edd21b185c12c77e8c8f8edfc0a2e04 69652 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_i386.deb
 7dac484c67af83be8f86977aeeed2210606b1e26740a3342a64f79c3287aaa4d 312364 openssl-provider-legacy_3.5.7-1~deb13u3_i386.deb
 a94273fa01e1a1076024cdf351afc657c04381d0519700fa9a8899433b958d17 8835 openssl_3.5.7-1~deb13u3_i386-buildd.buildinfo
 6c10009e522e0fafde99b5e06dd8d81a353a74ea5a439ee8b42d85565cda9b32 1512948 openssl_3.5.7-1~deb13u3_i386.deb
Files:
 00fec11a79251eec86ff9d6f8c112681 1953236 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u3_i386.udeb
 4a9039921e568a8dde62c3750f5f1a9b 3018096 libdevel optional libssl-dev_3.5.7-1~deb13u3_i386.deb
 3b41b43a0ec670375d938afea409a0aa 423400 debian-installer optional libssl3-udeb_3.5.7-1~deb13u3_i386.udeb
 a9d821113de87cdaf91a4cc72b6dc69f 4891408 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u3_i386.deb
 ec9512afd4c958125ce2a129da1964b1 2441452 libs optional libssl3t64_3.5.7-1~deb13u3_i386.deb
 fe117e4e82e6ef45ef4212e116e96769 652844 debug optional openssl-dbgsym_3.5.7-1~deb13u3_i386.deb
 1f11412080966af5e1b844d81e47b0da 1305216 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_i386.deb
 4a8b84991f4b3bba4346c1a5ac69bf34 1009648 utils optional openssl-provider-fips_3.5.7-1~deb13u3_i386.deb
 06f8a2f59cfd051677d82bedca4bff9e 69652 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_i386.deb
 02315e6c69f730efabb74cb1f23ced7f 312364 utils optional openssl-provider-legacy_3.5.7-1~deb13u3_i386.deb
 a71c7633866a49ffa6c0efa5a2291657 8835 utils optional openssl_3.5.7-1~deb13u3_i386-buildd.buildinfo
 0765bec42095ef4e267db6ff8f28d73a 1512948 utils optional openssl_3.5.7-1~deb13u3_i386.deb

-----BEGIN PGP SIGNATURE-----
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=ScPM
-----END PGP SIGNATURE-----