-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libssl-doc
Architecture: all
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libssl-doc - Secure Sockets Layer toolkit - development documentation
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 4bb325f6a46f631b6accbfba0921e4b4c6b50faf 2254728 libssl-doc_3.5.7-1~deb13u3_all.deb
 ec9f7191d26a72fbdeb8a1b54f5e70b9142b6947 5774 openssl_3.5.7-1~deb13u3_all-buildd.buildinfo
Checksums-Sha256:
 6af0410c2e9c74f4830c4eddf16d0e08cdfa0528458d47f35e7cfbbde2dbf77c 2254728 libssl-doc_3.5.7-1~deb13u3_all.deb
 78de531f9947dc183cf4d275116723e1f13b233e4f7a19f4e0708412ea5b6c40 5774 openssl_3.5.7-1~deb13u3_all-buildd.buildinfo
Files:
 1fde4cace274e742f2d395ee86eb10cc 2254728 doc optional libssl-doc_3.5.7-1~deb13u3_all.deb
 929929124caca5172534b52887c81d17 5774 utils optional openssl_3.5.7-1~deb13u3_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmq8JIEACgkQaBVi67oX
tfl3gQ//WcwEYF2elZMO+/s69oQ2k448BvfHEwbs7mIccQTRMA6rf4Ifro+cqUIC
RRwJrz3cJ1iCiT/7oaVmhC2mFk4OwlPmkrRS8OlsJVo65at7119LEjip67YFVIq7
CeiWLk6UBfVMfsodm39ebgMvuAMw29terhpWomdvXAoAiDuRdvECw0rxMfK9tdia
8+FjHwD78YfSOh7pVZTfaSQKrtBq4fep0X0KdrCalJRxlj5mL1mBh4l6bvEW1yqG
VZXGMA+1a6oATYNVcprn61ThjSI5+6z8JxTcdAVVnLS/K+l2ZGYqRvb/2U3XxN1C
DSQyTDJyYYK78tg4nF5unvkTVC4D/j5bWLns53A0jeknuCOxeqnRxVDsfEsUGXRS
ADWbaFmOUmu1MtYWT95Y7GebsZRTOAb0/y0WOASxdMfWnkF0hTmoTe5wF0/Lf49j
GhAVe8sAAAvjJbkYvV4OX5CTkmmlQQnMswah3LAAslVdbCwUO+3Tf67pZ+Dh7plf
rrJv323PUbKmrvPu1KHuD2TK6yED2CBbcvW4hflkTje1AfA8L36S45tyj4Hqgj+M
rPVvO4Rvob6cgmuClrlzxeboPycCSXJgVZ5svk91+S3eDonLa66PwW8bupQ3u7s4
JS9Ry3BkLbXMAMC+SGMmarPHi2S6hMHTNeXEivpgu/HKzKMp1gg=
=66Ki
-----END PGP SIGNATURE-----