-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 29 Sep 2026 22:10:28 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym
Architecture: arm64
Version: 3.5.7-1~deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3-udeb - ssl shared library - udeb (udeb)
 libssl3t64 - Secure Sockets Layer toolkit - shared libraries
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility
 openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.5.7-1~deb13u3) trixie-security; urgency=medium
 .
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-35191 ("QUIC Unvalidated Amplification Credit may be Over
     Accounted")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-54875 ("Non-Constant-Time SM2 Scalar Multiplication on ARM64 and
     RISC-V")
   * CVE-2026-72897 ("Out-of-Bounds Access After SSL_set_SSL_CTX() During a
     Handshake")
   * CVE-2026-75804 ("QUIC Connection-Level Flow Control is Not Enforced for
     Streams")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
   * CVE-2026-84784 ("QUIC: Unbounded RETIRE_CONNECTION_ID Backlog")
   * CVE-2026-42772 and CVE-2026-54873 ("improved QUIC
     stream reassembly implementation")
Checksums-Sha1:
 d2611dda4b1438af5440df06c3201fe215967075 2342996 libcrypto3-udeb_3.5.7-1~deb13u3_arm64.udeb
 3f243f3b10d09884aa2ec5d9e14f34434e98db1f 3398620 libssl-dev_3.5.7-1~deb13u3_arm64.deb
 d9aa9127f8bde9cf5429ef60e9d08b621d5a2e3f 343236 libssl3-udeb_3.5.7-1~deb13u3_arm64.udeb
 4032daa51f04838edc701c328e0eeaeb39791128 6033232 libssl3t64-dbgsym_3.5.7-1~deb13u3_arm64.deb
 f628814853d833ba3eeb68f3c6566c77d58ec630 2770200 libssl3t64_3.5.7-1~deb13u3_arm64.deb
 ed00ad69d6d59b173dabd694536367629de8b179 766804 openssl-dbgsym_3.5.7-1~deb13u3_arm64.deb
 2d80cb5ae433b10baf19545786b1145b574d3949 1710384 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_arm64.deb
 f00b2b01157bcc4617542e3d9a68496c9c7d97c3 999596 openssl-provider-fips_3.5.7-1~deb13u3_arm64.deb
 aee87e2a631c0951dd987b8536f55d8f6a98cf07 91736 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_arm64.deb
 64bd0ce8b8cd2f42ec66340efb31346b85f65e13 313896 openssl-provider-legacy_3.5.7-1~deb13u3_arm64.deb
 16527fc89a4e8bc00a6ebfd1af81f395561606e9 8942 openssl_3.5.7-1~deb13u3_arm64-buildd.buildinfo
 7ae78b5e08b0223a4cb60c506cc4cff4e3a640de 1472692 openssl_3.5.7-1~deb13u3_arm64.deb
Checksums-Sha256:
 b9c323e9af6d5fee6601d30517848e3199514c24c87b3957ba6ca33b17854baf 2342996 libcrypto3-udeb_3.5.7-1~deb13u3_arm64.udeb
 ee3ce1214925d3905a8ad54ea1250b016438322f73a9719474fcd0ece6243a8e 3398620 libssl-dev_3.5.7-1~deb13u3_arm64.deb
 f7ca63bffda26c4e315bb604640b4074a63b55635a1b63ebae306a0ceb322c94 343236 libssl3-udeb_3.5.7-1~deb13u3_arm64.udeb
 89d55734eb392a7d7fef2936fa9fb38687ce3bfc9862b164a654bbea09377920 6033232 libssl3t64-dbgsym_3.5.7-1~deb13u3_arm64.deb
 d0681293a160392186c6ef85a165e40603d1628a099936137d24d391bd591f97 2770200 libssl3t64_3.5.7-1~deb13u3_arm64.deb
 5b3561ba6f2f726ebcad361f1407559179f2d8f2976e43f4d59ea59ccfa6b2a3 766804 openssl-dbgsym_3.5.7-1~deb13u3_arm64.deb
 bce9a7c984535087dc7dd4a4af30281214efcbbc033c4792a7089abebc9ed7f8 1710384 openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_arm64.deb
 97d4976a7376d5b62d6fea34caa8306b89d826d76cc4586dc6fe90a229bc93d5 999596 openssl-provider-fips_3.5.7-1~deb13u3_arm64.deb
 96909b150ee4545cd85c69990f2b8eeecf52e0e9f8e6c51fed6b500f57c51c2b 91736 openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_arm64.deb
 dae4ab96be3a1fc8fd490bbeb3938ecd102d360555d4af8ee2728b42ce9f1059 313896 openssl-provider-legacy_3.5.7-1~deb13u3_arm64.deb
 2f96a456972141ea245b6966c3c5406d905b715738906cbf5dc7031aa88ac0e7 8942 openssl_3.5.7-1~deb13u3_arm64-buildd.buildinfo
 68f226057a7a1c1f23e2ffde0075ea16e27e646d829c8d3c63414c49b839c258 1472692 openssl_3.5.7-1~deb13u3_arm64.deb
Files:
 6fe7002f8d4a89d65876f188d4760d36 2342996 debian-installer optional libcrypto3-udeb_3.5.7-1~deb13u3_arm64.udeb
 5d4c7fd052ae718ffd8f6e13278e8e44 3398620 libdevel optional libssl-dev_3.5.7-1~deb13u3_arm64.deb
 1e9f7a2ded111f4afbc8ae803dfe3101 343236 debian-installer optional libssl3-udeb_3.5.7-1~deb13u3_arm64.udeb
 5a016eaf6d3d7b3461bb630996116fec 6033232 debug optional libssl3t64-dbgsym_3.5.7-1~deb13u3_arm64.deb
 cc1ef11c8ea2d60d58dcadcce72900fe 2770200 libs optional libssl3t64_3.5.7-1~deb13u3_arm64.deb
 aa802421789d0df6d7d91e176f5080b5 766804 debug optional openssl-dbgsym_3.5.7-1~deb13u3_arm64.deb
 ad81608cbad00401e863f44a0f46da38 1710384 debug optional openssl-provider-fips-dbgsym_3.5.7-1~deb13u3_arm64.deb
 8c6f0eee9cc73834fb09729a681788ee 999596 utils optional openssl-provider-fips_3.5.7-1~deb13u3_arm64.deb
 c6b4ca7c0c4efea1d06084ababec8587 91736 debug optional openssl-provider-legacy-dbgsym_3.5.7-1~deb13u3_arm64.deb
 127be438a95314cb750f6026dff91efb 313896 utils optional openssl-provider-legacy_3.5.7-1~deb13u3_arm64.deb
 c4f14d4a2a0488dad6fd58ce1ed20175 8942 utils optional openssl_3.5.7-1~deb13u3_arm64-buildd.buildinfo
 02826f3b0e53d21529849827112e998e 1472692 utils optional openssl_3.5.7-1~deb13u3_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=F9VE
-----END PGP SIGNATURE-----