-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: riscv64
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-03) <buildd_riscv64-rv-osuosl-03@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 97b1164be4acc7f813a968cee818234ece048089 1812204 libcrypto3-udeb_3.5.7-1~deb13u3_riscv64.udeb
 95036e0239435d6a69b9c702e80252b428e45f52 5823940 libssl-dev_3.5.7-1~deb13u3_riscv64.deb
 a87aa89a9891daaa530f8d33004c692c6713040e 382724 libssl3-udeb_3.5.7-1~deb13u3_riscv64.udeb
 0b270d81e781d7220538d75f110a17c1b8154d7c 5811912 libssl3t64-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 87cb07a3a7d69d01b8c05ad2625148f3f056f923 2238728 libssl3t64_3.5.7-1~deb13u3_riscv64.deb
 eb47587fd1cd9ff38932ea02f8ebc677993bd7cf 737404 openssl-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 e765c6e09980ad0de25e71ca8da576945a31dbfc 1660764 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 6703f4b78799430ef6c970a86adc312521ff0021 892480 openssl-provider-fips_3.5.7-1~deb13u3_riscv64.deb
 3027815e8614e63ad3f8a1e6f2176b74a3eca541 92476 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 27d3381c284d7e1f54c7591ff9d49cb78126ce56 317480 openssl-provider-legacy_3.5.7-1~deb13u3_riscv64.deb
 a9ca26adb1c8df997f6f4de4230c3af1f1a3671c 8956 openssl_3.5.7-1~deb13u3_riscv64-buildd.buildinfo
 ea0186b5ae80e2d86a64b72b56ea5a7890a54462 1488812 openssl_3.5.7-1~deb13u3_riscv64.deb
Checksums-Sha256:
 c6c3e7a6e6fceb2c5c1502456abb7eff7ce7b112940c9696fc2862ca925a5848 1812204 libcrypto3-udeb_3.5.7-1~deb13u3_riscv64.udeb
 7be73ffe077654eb7b7264fbe882190cfdfeafc9469bf6e2ae26a708e44caa02 5823940 libssl-dev_3.5.7-1~deb13u3_riscv64.deb
 3195be5d982b739a53a7681f7d8bd1035cf8679a77c06bd3b69765711ae45c00 382724 libssl3-udeb_3.5.7-1~deb13u3_riscv64.udeb
 c9728584721781c8d5dcae3b7de78e43122cf1997250cd9d8777a8008ab10110 5811912 libssl3t64-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 3d8ce2dd4796949484aaff65bdfb6ecdadbe0f1eaf0877d5fd400e1c2c1e6e33 2238728 libssl3t64_3.5.7-1~deb13u3_riscv64.deb
 0e1233d2039eabb543925faca17bd46893adf88019d7ed3ed08e212e8fe8db98 737404 openssl-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 3fc9c520e4b45ef3898aa2455b14bb20b1348537d954f7223fe5d6b5fdf6c478 1660764 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 a74b53306edfaccab38e92276bd72f645a0503066c4cb4772eed90a599a54dcf 892480 openssl-provider-fips_3.5.7-1~deb13u3_riscv64.deb
 9dc2492d6a7eaa5db324ffbc18b15874eb82e973ca20fa5151e1395116dae234 92476 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 96cb6a761ff846312fab4748011166a63c53c17c837ad02a4485ed156f93d878 317480 openssl-provider-legacy_3.5.7-1~deb13u3_riscv64.deb
 bed85f65b5efe27d587915dbbb43929c52664ec3e5914086bfa23117961bbea2 8956 openssl_3.5.7-1~deb13u3_riscv64-buildd.buildinfo
 8a0272ed7ef0daa3b8087524162dfc29772012d33c4e3d176c4a3b38ab6e49ca 1488812 openssl_3.5.7-1~deb13u3_riscv64.deb
Files:
 c0ab1e180de97960c2ab03963ce977b9 1812204 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u3_riscv64.udeb
 ad9c79a180567a8a56128c21f05c4e58 5823940 libdevel optional libssl-dev_3.5.7-1~deb13u3_riscv64.deb
 5a96855bfe0fc1f695eec7c0fb9d2820 382724 debian-installer optional libssl3-udeb_3.5.7-1~deb13u3_riscv64.udeb
 a1429cd042c632fd710070580f3b4225 5811912 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 984af4623dd728693d7e3c0362124dd0 2238728 libs optional libssl3t64_3.5.7-1~deb13u3_riscv64.deb
 81e313b75cda0649ea70a030542c953f 737404 debug optional openssl-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 b281655f3ee8255ce4ffca021b44e607 1660764 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 2319e3cf5c1acf27c3cd1c87344ec827 892480 utils optional openssl-provider-fips_3.5.7-1~deb13u3_riscv64.deb
 1e91300e2370620eefb71a114e7f7ad8 92476 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_riscv64.deb
 96e8f1fd968c70f8fb18ee8db2936e4c 317480 utils optional openssl-provider-legacy_3.5.7-1~deb13u3_riscv64.deb
 693779a6363d968a0549538928fe508d 8956 utils optional openssl_3.5.7-1~deb13u3_riscv64-buildd.buildinfo
 f4a99b47ddfbf579a16b0d909c8b2d7f 1488812 utils optional openssl_3.5.7-1~deb13u3_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=CM0g
-----END PGP SIGNATURE-----