-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: s390x
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 e1248551c7c3f8c28b275f92d92b24666b91928b 1603388 libcrypto3-udeb_3.5.7-1~deb13u3_s390x.udeb
 da1ab468b466dd440c10d4fa989eee022a458712 2576384 libssl-dev_3.5.7-1~deb13u3_s390x.deb
 eb295008e365155bf69b228e3b067974ebcdcda8 350624 libssl3-udeb_3.5.7-1~deb13u3_s390x.udeb
 a41adcb74721ab9707d9eb8a9b4d4fc723f3770c 5952276 libssl3t64-dbgsym_3.5.7-1~deb13u3_s390x.deb
 81a5fe0ffa43b53d4f152c1117b6d611beff14f3 2043420 libssl3t64_3.5.7-1~deb13u3_s390x.deb
 7970e83be722285f1a375b045b8d0cd3cd671c97 756148 openssl-dbgsym_3.5.7-1~deb13u3_s390x.deb
 1c26d5407771cc9122c167f339ebc651b315638c 1596972 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_s390x.deb
 fc0c84a2e693cdf0122255d1e7c84cde2e489d48 791800 openssl-provider-fips_3.5.7-1~deb13u3_s390x.deb
 8b5c9c9777116e65c43239fb24de9b78bb3bee4d 96640 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_s390x.deb
 eb5cf8a51fe26c19ae950dbe6306a00e9cfe7316 314116 openssl-provider-legacy_3.5.7-1~deb13u3_s390x.deb
 0dbd8aa1fbdab7d2c80278623fe7900240d8d117 8820 openssl_3.5.7-1~deb13u3_s390x-buildd.buildinfo
 03a0bd0d358a0b30ae8f7b1a804454bda3b1e2d3 1497156 openssl_3.5.7-1~deb13u3_s390x.deb
Checksums-Sha256:
 69ac05f8304e9052b6c570da57cc3859f5156c3779019d879a176ec5fb3e3727 1603388 libcrypto3-udeb_3.5.7-1~deb13u3_s390x.udeb
 035f58900c5a9c9ec7de13a39c0a9975f0a63b7bfe1bd3f75f4af4b62e631ce5 2576384 libssl-dev_3.5.7-1~deb13u3_s390x.deb
 94dc45ff5613e77407f668ccfb073603939097060716ad5555004e774169311e 350624 libssl3-udeb_3.5.7-1~deb13u3_s390x.udeb
 725b4bc78f924533f7e2cfe4552cc1f89b1a8b7fa614b10db0e161cb555c9f0f 5952276 libssl3t64-dbgsym_3.5.7-1~deb13u3_s390x.deb
 3998f5b2870b67dbc6cd453beef8a9cb1c633535f8e60a7a96753bdb389c193b 2043420 libssl3t64_3.5.7-1~deb13u3_s390x.deb
 3048728d6b97394c234bbc1e6444f928e54416a6a8e64a82e49a7dd7245583e1 756148 openssl-dbgsym_3.5.7-1~deb13u3_s390x.deb
 e89f13dc4f704e0ef06406c549fa6318dd91d21b0233c60b57dc1adb0939831e 1596972 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_s390x.deb
 db0d44acfd9430888802b453d2b146a29a3ec67c12a167e1c29c6b222143dc99 791800 openssl-provider-fips_3.5.7-1~deb13u3_s390x.deb
 4b764f66266aabe56c307a64ec1917bcf58fa6b9414cd77dd13c78cc63345bdc 96640 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_s390x.deb
 ea4bb842aa29fddef9f1eb7173be81f9e51c090dafa6bb8b86977a63fbf871aa 314116 openssl-provider-legacy_3.5.7-1~deb13u3_s390x.deb
 28409bc5b3e243ecbaab8607f0075d12f9e9ed8deac171000af431f98a050bc3 8820 openssl_3.5.7-1~deb13u3_s390x-buildd.buildinfo
 03a9afad6c6a91e2bcda64cdb864587ca1d683de9a5042acce0f5e1cb894f093 1497156 openssl_3.5.7-1~deb13u3_s390x.deb
Files:
 94a9bac2fdd28d547b000d7a2dceecf7 1603388 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u3_s390x.udeb
 a54d209feb81b77ff9053eac8fd136ec 2576384 libdevel optional libssl-dev_3.5.7-1~deb13u3_s390x.deb
 7db46cbc3fc29ce7fec3a6d541c01f7f 350624 debian-installer optional libssl3-udeb_3.5.7-1~deb13u3_s390x.udeb
 93db41bf38c35af28a0d9db703cc56e1 5952276 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u3_s390x.deb
 61a9117a51adbd02587c410df0eec716 2043420 libs optional libssl3t64_3.5.7-1~deb13u3_s390x.deb
 ac188afb7d99d56d9c69950f4c6f2e17 756148 debug optional openssl-dbgsym_3.5.7-1~deb13u3_s390x.deb
 b3d5f1f10532785b95cfe44dcfc88090 1596972 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_s390x.deb
 fd7bf68b99121abe5aa4f604aa8f02ae 791800 utils optional openssl-provider-fips_3.5.7-1~deb13u3_s390x.deb
 ad5e74936b46977e6d92a60cce4d85ab 96640 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_s390x.deb
 abfd0452cea90ed3f1fcc39cb40aba1f 314116 utils optional openssl-provider-legacy_3.5.7-1~deb13u3_s390x.deb
 b6e10c1a9dda8a667730101f5a0ecd3d 8820 utils optional openssl_3.5.7-1~deb13u3_s390x-buildd.buildinfo
 a12f98b5ba342ff5f06225df84103d1c 1497156 utils optional openssl_3.5.7-1~deb13u3_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=GW+6
-----END PGP SIGNATURE-----