-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: ppc64el
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 30df227d77ebafd875f5b59e9260fe7bfdd71366 2059552 libcrypto3-udeb_3.5.7-1~deb13u3_ppc64el.udeb
 0d44e72bd9ff77d292e896ca552316fd6c812170 3135504 libssl-dev_3.5.7-1~deb13u3_ppc64el.deb
 203c0ff117bf9356f83082d32ede7f59aed2337d 405512 libssl3-udeb_3.5.7-1~deb13u3_ppc64el.udeb
 a1050e10dc53fcf7f79fdcdc5d6197a96c7caf89 6282720 libssl3t64-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 98a61906e1bf83d40ed35f50396c1e4ae91d2b42 2517260 libssl3t64_3.5.7-1~deb13u3_ppc64el.deb
 4506eef7b2a465fea84073181d694e127eb304a0 785008 openssl-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 2f795b96171889c92abb9d95a45028363e76f8f6 1781540 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 e0324be6379c0684bbeaaa4e47d4eeffdc6912ac 1084852 openssl-provider-fips_3.5.7-1~deb13u3_ppc64el.deb
 56ec5f1edf4d716982114560a8bd126085f19e66 98716 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 2266853fb90eb22469caa16d3638313e8151f9ae 317148 openssl-provider-legacy_3.5.7-1~deb13u3_ppc64el.deb
 86e9e1688a13fa6375d197f7bc7d66dc4a4c0429 9014 openssl_3.5.7-1~deb13u3_ppc64el-buildd.buildinfo
 a6f76a4bebb96ecd48bdff41d91252f92b42e605 1505180 openssl_3.5.7-1~deb13u3_ppc64el.deb
Checksums-Sha256:
 16186708b385880af9f5450b6d28772652f1d32ffa9099d661eb7b867909e42c 2059552 libcrypto3-udeb_3.5.7-1~deb13u3_ppc64el.udeb
 10ebe82c5adaf095d636cf476904597a8a62d29169151d0bcdcc5080fdf2ad58 3135504 libssl-dev_3.5.7-1~deb13u3_ppc64el.deb
 4138433977137cbff9d39f631c3ebb5fde821319d110dab6f37d5f12950495ed 405512 libssl3-udeb_3.5.7-1~deb13u3_ppc64el.udeb
 fe64683772982d9e38215ebecbde1fe10a55acd9028447ddb964f38d62c304f8 6282720 libssl3t64-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 9c691538282566cc36266baf9e735434405c361a7dc30fef94c7a1796ef3c203 2517260 libssl3t64_3.5.7-1~deb13u3_ppc64el.deb
 6f966c025f791300d79ec6d22abca1dd26dba53e4ca943f5fa1ce7edda1dd8db 785008 openssl-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 0fded555d6d7f331fc8670bb159a347a2527b5b0024879fcd0ba6cf9fc5a47bf 1781540 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 4832b9a2c64d94e147726a52bd3705e33d75d01f0af59228b386e77d0b644159 1084852 openssl-provider-fips_3.5.7-1~deb13u3_ppc64el.deb
 abc9f73d11e9deb4bbe53e4710ace9afa4811c6b556122977739003c3c447f4c 98716 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 b90241a5092dc9b28f3c2a99909d262485007fe2757f957c1750ce36d02e1255 317148 openssl-provider-legacy_3.5.7-1~deb13u3_ppc64el.deb
 ac93099f2ee852bffe36b16161d76ffb42f3687b2ce0d2614f38884017a8aa37 9014 openssl_3.5.7-1~deb13u3_ppc64el-buildd.buildinfo
 ae96cdd950f2c2d0251db37f8a7665d7aa80253d623dd870e34dd917cd25a2ed 1505180 openssl_3.5.7-1~deb13u3_ppc64el.deb
Files:
 3a64112e521851482ce295e3719beedd 2059552 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u3_ppc64el.udeb
 8ddbd2afb2692f71bff334e0509dddf5 3135504 libdevel optional libssl-dev_3.5.7-1~deb13u3_ppc64el.deb
 66d1535364d7864545d0e3bfe868834d 405512 debian-installer optional libssl3-udeb_3.5.7-1~deb13u3_ppc64el.udeb
 50d9209e4546295a40aa47a7628b3541 6282720 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 e6361a4ddd51262a2613b0f7527ffd53 2517260 libs optional libssl3t64_3.5.7-1~deb13u3_ppc64el.deb
 01bf49449cc439d72c5b3ef4edb0783a 785008 debug optional openssl-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 2f7b988fe4035d64e01b57d9d80ccc18 1781540 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 9e2e99cf6f76de6d05295633a125e5e6 1084852 utils optional openssl-provider-fips_3.5.7-1~deb13u3_ppc64el.deb
 7993d6c7a5cf7f9f19f728873c5ab03e 98716 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_ppc64el.deb
 af3ae362f653ba27bf0c513e0f9d4391 317148 utils optional openssl-provider-legacy_3.5.7-1~deb13u3_ppc64el.deb
 d938dc9ec2391a9e9f146aa5d997f85a 9014 utils optional openssl_3.5.7-1~deb13u3_ppc64el-buildd.buildinfo
 982a299990c08700325f1da96641d29d 1505180 utils optional openssl_3.5.7-1~deb13u3_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=P6SQ
-----END PGP SIGNATURE-----