-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: amd64
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 4d6ae506b71df776ab2a1a582f1743044d6f6ea6 2020268 libcrypto3-udeb_3.5.7-1~deb13u3_amd64.udeb
 b3644f55a9ffb54b5bbaadcbddacdac77a95446d 2968412 libssl-dev_3.5.7-1~deb13u3_amd64.deb
 c690153a8b21d79d55317c3655354e0c5463838d 375788 libssl3-udeb_3.5.7-1~deb13u3_amd64.udeb
 f9585335c3048d41128ad7e57d6bfd64e7e97e3e 6244776 libssl3t64-dbgsym_3.5.7-1~deb13u3_amd64.deb
 037457764b8a864be9be883a989f95b6b2a13c11 2458176 libssl3t64_3.5.7-1~deb13u3_amd64.deb
 3a485dc0af47598e55ad1973993a94803541e7cb 750336 openssl-dbgsym_3.5.7-1~deb13u3_amd64.deb
 1ff36ff57ddd9856d3b48e2cf8cc9f33f3ec21d6 1830700 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_amd64.deb
 ea0b05a3aaa8a5ac96c901444d66e653ea6206b4 1109000 openssl-provider-fips_3.5.7-1~deb13u3_amd64.deb
 4e248a55f593e79fbceddf36890baddb4b93b78f 97824 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_amd64.deb
 9db06300efefb40f80b65d7cae64543c3428d24c 316452 openssl-provider-legacy_3.5.7-1~deb13u3_amd64.deb
 b780f7a78945137b88c0ef14af239f51ce9cd893 8961 openssl_3.5.7-1~deb13u3_amd64-buildd.buildinfo
 3543ac94c6886f288a387c583f5ee8977b1cf94d 1508068 openssl_3.5.7-1~deb13u3_amd64.deb
Checksums-Sha256:
 88135dfc0c089df4cb5d2a13a4de1344e276208c9da32848f67652520ab12f4f 2020268 libcrypto3-udeb_3.5.7-1~deb13u3_amd64.udeb
 c5f5f0383cac45209fefe85b3c3308e5ef6743663597d89bedcb96aaa06b8342 2968412 libssl-dev_3.5.7-1~deb13u3_amd64.deb
 9e28d3242577a9ae7e9f3ffdb00c02bc92414d0f8579b7ec73c6dbfc1cb23dd3 375788 libssl3-udeb_3.5.7-1~deb13u3_amd64.udeb
 2d14899e8af9856f7b8515a9a3a0a6a3b3dfbf0df67e174895a9f7f811cc4de6 6244776 libssl3t64-dbgsym_3.5.7-1~deb13u3_amd64.deb
 ff16bc048bcd7d1b256094450b79c77947d8e76fe2a24bd99b91021d591fa074 2458176 libssl3t64_3.5.7-1~deb13u3_amd64.deb
 a20ab574ccefd218ae251da875954d2b531c2afabf983456947be8722a3d0de9 750336 openssl-dbgsym_3.5.7-1~deb13u3_amd64.deb
 f7d390ead1d4a6536f7916d4d50728b32c841a9a35f47a9123f5c92f9bed292e 1830700 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_amd64.deb
 f463bcdc090d38d187e73ec212a807ceee0c649c9dc5e15aa5052e9ea2702894 1109000 openssl-provider-fips_3.5.7-1~deb13u3_amd64.deb
 a51933af89300a759f92d6269b8b473fb3f2feefcc41fa754c213919a8aa147c 97824 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_amd64.deb
 c12e0266c4780749a4702b8959ac979689f4182e18eed85a8a5eb90ed0e16eab 316452 openssl-provider-legacy_3.5.7-1~deb13u3_amd64.deb
 e6a05af3a7f6d2766435e5916d163db8cd5b004032ba0f17d96dfc2879abdc1d 8961 openssl_3.5.7-1~deb13u3_amd64-buildd.buildinfo
 43a9cbcf2a8a0e1f0a1c3f5a33ee1f56b269690e7a2129f2b2d0582e789589d7 1508068 openssl_3.5.7-1~deb13u3_amd64.deb
Files:
 21732321ae7030fa71f4d9e27ff50b60 2020268 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u3_amd64.udeb
 65cbb45b56da20740a3f28b209937981 2968412 libdevel optional libssl-dev_3.5.7-1~deb13u3_amd64.deb
 258be7025eee3a44d7cccdc9ec603939 375788 debian-installer optional libssl3-udeb_3.5.7-1~deb13u3_amd64.udeb
 6f3bdbe7dd681f690a4f6eff3b8e0834 6244776 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u3_amd64.deb
 481c84065dae405192d7df06153e0879 2458176 libs optional libssl3t64_3.5.7-1~deb13u3_amd64.deb
 4c25358c4e2bf6b7db8ae15835539918 750336 debug optional openssl-dbgsym_3.5.7-1~deb13u3_amd64.deb
 b7230b7686fb296e16e91b1ec561790f 1830700 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_amd64.deb
 bcfc11e67e7c86255d6793101859300d 1109000 utils optional openssl-provider-fips_3.5.7-1~deb13u3_amd64.deb
 601fe02104325081f4e49a9339b2e9ce 97824 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_amd64.deb
 3b5982a858f9b09a3ccf8692b2853f4b 316452 utils optional openssl-provider-legacy_3.5.7-1~deb13u3_amd64.deb
 88fa8a55acf1f39a570bacb394757f87 8961 utils optional openssl_3.5.7-1~deb13u3_amd64-buildd.buildinfo
 4699bcb7869d661e62c4db34109ba212 1508068 utils optional openssl_3.5.7-1~deb13u3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=DYnB
-----END PGP SIGNATURE-----