-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: armhf
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: armhf Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 8037cf9b6697ebf93de9dc784a9145717192eeab 1554736 libcrypto3-udeb_3.5.7-1~deb13u3_armhf.udeb
 ab72cdee7d9ba11854e2ace378e0110d0e842611 2579280 libssl-dev_3.5.7-1~deb13u3_armhf.deb
 cd84feb5cf947677f5f9084d907d4f3e4961b0fc 321020 libssl3-udeb_3.5.7-1~deb13u3_armhf.udeb
 1cad71d5de6f90b916f1d9370ea301b3dc55ead1 5903484 libssl3t64-dbgsym_3.5.7-1~deb13u3_armhf.deb
 445a78ad4ff98c0694c0cd16258a94edd10db18e 2002024 libssl3t64_3.5.7-1~deb13u3_armhf.deb
 5916fbb27e76cd6a872510e2334e5be7b8d6c5c5 747488 openssl-dbgsym_3.5.7-1~deb13u3_armhf.deb
 7e15fad33bdcd250772c50b5f4b7050323f7eea9 1575884 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_armhf.deb
 b3b22224c27d4872f9d3279a1aae4ce51e006619 883816 openssl-provider-fips_3.5.7-1~deb13u3_armhf.deb
 dbec8e83e434109a379381173c2bf47be2c61a36 94840 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_armhf.deb
 90b1df9508596e5da8e2084cf8c4e5e5cdf4dfef 307732 openssl-provider-legacy_3.5.7-1~deb13u3_armhf.deb
 09e09abdf5a39733f4dfb77caf471c75d7f19458 8824 openssl_3.5.7-1~deb13u3_armhf-buildd.buildinfo
 6b4dad1710a134023ed910fb180a193de8ed44d6 1474768 openssl_3.5.7-1~deb13u3_armhf.deb
Checksums-Sha256:
 0e7c634f099f6ddac0da43dbe04cb43ba857d5133b31bc00ff4484764ca4f732 1554736 libcrypto3-udeb_3.5.7-1~deb13u3_armhf.udeb
 42cc93d87edbf3b2fdb8e476bfee73e1811c27726bf4b99a2f57ed6d491173b0 2579280 libssl-dev_3.5.7-1~deb13u3_armhf.deb
 490765c0710e03e3e0ea24e3d5d607c52c2cf7efc5d8ac45c60e148a90bca424 321020 libssl3-udeb_3.5.7-1~deb13u3_armhf.udeb
 2fbf952879f4248934beb4ad470cd51d28d6050a14a4cff153394803beca0d9d 5903484 libssl3t64-dbgsym_3.5.7-1~deb13u3_armhf.deb
 be99a741119db2fcec44ac2cead4e9f6143ffa1a37e0c667cec99b425641f223 2002024 libssl3t64_3.5.7-1~deb13u3_armhf.deb
 ed292f2a13cc08e1874433f862d2ffd3574405a027e8425258a2a0f45c063949 747488 openssl-dbgsym_3.5.7-1~deb13u3_armhf.deb
 2176daf4ec1236c9f1af45afd3517b6155b26c4c90fb4621d1cfe76d8546084a 1575884 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_armhf.deb
 c2094a2ec58e6886d03668d82c0ef5630be2cb40e24048df4cb1420b87a3fc97 883816 openssl-provider-fips_3.5.7-1~deb13u3_armhf.deb
 5a471204e34937d8f3ce7e41ebbeabf5cac0989f983745e42cd52036e7d91174 94840 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_armhf.deb
 4dfd45ef1125d9aad8a78a23b9ab73ec8ba1ee103ef55c9c56befe3bca39787e 307732 openssl-provider-legacy_3.5.7-1~deb13u3_armhf.deb
 725e59932b622a9c1745fba5ac1fe2d18b798bfe1e70d2a568e0b44b38939e5b 8824 openssl_3.5.7-1~deb13u3_armhf-buildd.buildinfo
 211949dab0389fc5c373a1736095d373f3bac850828a18589ce8fe915c7048ca 1474768 openssl_3.5.7-1~deb13u3_armhf.deb
Files:
 2baef2aea12a4099dbdeebe726c0b0c9 1554736 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u3_armhf.udeb
 2457afd9540a811fc287cabc35d6b3af 2579280 libdevel optional libssl-dev_3.5.7-1~deb13u3_armhf.deb
 6f1000943b32e212e36ec9535bd56058 321020 debian-installer optional libssl3-udeb_3.5.7-1~deb13u3_armhf.udeb
 84e8d2923dce4ab2a40b26d51964732b 5903484 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u3_armhf.deb
 14ce2e68cac519f828dfba179f981e52 2002024 libs optional libssl3t64_3.5.7-1~deb13u3_armhf.deb
 4a02679269b487634e65d58f0d9db099 747488 debug optional openssl-dbgsym_3.5.7-1~deb13u3_armhf.deb
 856df825860a68d59b8ae58bc3d63163 1575884 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_armhf.deb
 fcb881ecdf00b2655733ea0d4115105c 883816 utils optional openssl-provider-fips_3.5.7-1~deb13u3_armhf.deb
 ef11782277b62f99852d57eb9b9775c2 94840 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_armhf.deb
 8c7a26942813feff416de17effc75533 307732 utils optional openssl-provider-legacy_3.5.7-1~deb13u3_armhf.deb
 0fb26ff28474a6fe6f25aee5ed5ee4ad 8824 utils optional openssl_3.5.7-1~deb13u3_armhf-buildd.buildinfo
 910080e4491d4ffa5d2f24064c1a7b3a 1474768 utils optional openssl_3.5.7-1~deb13u3_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=vlFM
-----END PGP SIGNATURE-----