-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: armel
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 8cb0106dc659cd9a500ce90754bfaf7b16632d7d 1510724 libcrypto3-udeb_3.5.7-1~deb13u3_armel.udeb
 a22072f2f685963823420b89767c6afd462d11b1 2552952 libssl-dev_3.5.7-1~deb13u3_armel.deb
 2965daa08bb776dc9702fe88fd4d40a2e3679544 320084 libssl3-udeb_3.5.7-1~deb13u3_armel.udeb
 05e9e66c7656be093b2a5474e78c9c29c47029b0 5812432 libssl3t64-dbgsym_3.5.7-1~deb13u3_armel.deb
 db8d576b10076a7f44291f276090643403af394a 1962664 libssl3t64_3.5.7-1~deb13u3_armel.deb
 dff632b58118c6ab128aa44714730996040fd774 734128 openssl-dbgsym_3.5.7-1~deb13u3_armel.deb
 b381857bdc7e82161e1ba387741fa9fc7c64e1ad 1541980 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_armel.deb
 e6fc984992920b0801f16a5dd1ae6e0a7356bdf3 865356 openssl-provider-fips_3.5.7-1~deb13u3_armel.deb
 984c3060d33966976d4b6cddaf6c35f29f045ee6 93004 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_armel.deb
 a6f77152f7e51e35fa933404c341aab84785f996 307476 openssl-provider-legacy_3.5.7-1~deb13u3_armel.deb
 9271ec961f337ca1f8479df47b5e68dc63e35a1c 8810 openssl_3.5.7-1~deb13u3_armel-buildd.buildinfo
 bc970d959ed65c645073f33255122ec8988c40e0 1466596 openssl_3.5.7-1~deb13u3_armel.deb
Checksums-Sha256:
 152a6f2dc2d5b829f256355a417e5b3e102519e7cd4ccecaad0a740dbc0da997 1510724 libcrypto3-udeb_3.5.7-1~deb13u3_armel.udeb
 d288f50804d5c66c6b86bd67fb65c110839fff46aa904711e0a18c2128771691 2552952 libssl-dev_3.5.7-1~deb13u3_armel.deb
 32508ee4d1e9835219fc8ad2bb652639cf53afd8ab98c314693b951145bc120c 320084 libssl3-udeb_3.5.7-1~deb13u3_armel.udeb
 6a7551f70420fbb78605cb0a4a04142f1f5bd62fcb746fa3f084a7057d8375fe 5812432 libssl3t64-dbgsym_3.5.7-1~deb13u3_armel.deb
 53cd7009815b15d77f2092a37e7fac135af3dbb303a05577c847e909218dec15 1962664 libssl3t64_3.5.7-1~deb13u3_armel.deb
 233d0f28c4464c1bf97433a98aea7591a5479b20ed75dae727ad750f3289544b 734128 openssl-dbgsym_3.5.7-1~deb13u3_armel.deb
 20cf2df0c7e1500bc5f6e17bb1959665cb28e2c3edd49df23fb59c3996e00d50 1541980 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_armel.deb
 b0679a0e34697881c706efdbee839212d57ba76bb2abdb2ddef047b22cdd222f 865356 openssl-provider-fips_3.5.7-1~deb13u3_armel.deb
 0b5b1e3e2d49f77051e012dd4b90eb49d1d37505eadd83c78b7ef7f47eef8848 93004 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_armel.deb
 e949053a67a0b746ea244ce63c17e342a4ad0fdd0cc82600c8a0d4da55c866f4 307476 openssl-provider-legacy_3.5.7-1~deb13u3_armel.deb
 732229780239f836c01038e0d21b0faed2f9c3546b9a95af8596620383abcff4 8810 openssl_3.5.7-1~deb13u3_armel-buildd.buildinfo
 4ed885dbb6315d1875977a133515f437e264c73f6c8bfe220e9f642249076118 1466596 openssl_3.5.7-1~deb13u3_armel.deb
Files:
 354d516eb77147eeaa0768ba874e4dde 1510724 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u3_armel.udeb
 8de197a0e169935eddd632117602a321 2552952 libdevel optional libssl-dev_3.5.7-1~deb13u3_armel.deb
 c563127239f189632a4eb545ccc7efa4 320084 debian-installer optional libssl3-udeb_3.5.7-1~deb13u3_armel.udeb
 9f2795fcd170e3b76eec58dbffc8b789 5812432 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u3_armel.deb
 f6ec913ea0184a82899fb1d31a59d2f5 1962664 libs optional libssl3t64_3.5.7-1~deb13u3_armel.deb
 635a4c83cc0e9cf264bb611a2a0deafc 734128 debug optional openssl-dbgsym_3.5.7-1~deb13u3_armel.deb
 2807880bb1c37ff6efffbfe6ab103b1b 1541980 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_armel.deb
 0a48707b59ebf9fedf318dee5c7a1636 865356 utils optional openssl-provider-fips_3.5.7-1~deb13u3_armel.deb
 76500583e9b4d65e1d9916e2bfab660f 93004 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_armel.deb
 d26ae5e0f244295a6cd161ad6990254a 307476 utils optional openssl-provider-legacy_3.5.7-1~deb13u3_armel.deb
 68d4f7474c36848396757c33c821ae4e 8810 utils optional openssl_3.5.7-1~deb13u3_armel-buildd.buildinfo
 ca0e59e34add9c751dfe08f58a3133fc 1466596 utils optional openssl_3.5.7-1~deb13u3_armel.deb

-----BEGIN PGP SIGNATURE-----
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=oTHC
-----END PGP SIGNATURE-----