-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Aug 2026 17:26:22 +0200 Source: openssl Architecture: source Version: 3.5.7-1~deb13u2 Distribution: trixie-security Urgency: medium Maintainer: Debian OpenSSL Team <[email protected]> Changed-By: Sebastian Andrzej Siewior <[email protected]> Closes: 1144615 1145172 Changes: openssl (3.5.7-1~deb13u2) trixie-security; urgency=medium . * CVE-2026-18798 ("QUIC Server May Trigger Double Free When Processing INITIAL Packet") * CVE-2026-63072 ("Heap Buffer Overflow in CMS Key Unwrapping") * CVE-2026-63076 ("Invalid Pointer Dereference in CMP Server via Crafted protectionAlg") * CVE-2026-14457 ("RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate") * CVE-2026-54874 ("Excessive Memory Use Buffering DTLS Records for a Future Epoch") * CVE-2026-63073 ("Untrusted Sender DN Used as Format String in CMP Response Validation") * CVE-2026-63074 ("CMP Indefinite Cache Growth of ExtraCerts") * CVE-2026-63075 ("QUIC ACK-only Packet Retention Can Cause Memory Exhaustion") * CVE-2026-75803 ("AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()") (Closes: #1145172) * CVE-2026-14456 ("Unbounded Memory Growth in QUIC Server Incoming Channel Queue") (Closes: #1144615) Checksums-Sha1: 3ca57150dc1772933fd41379d021de9a77b83de9 2707 openssl_3.5.7-1~deb13u2.dsc 53d331880fbde8e6fe25870d5325a61201f6264d 53153930 openssl_3.5.7.orig.tar.gz 9408998095f984b36591732286ef1df1ba7ce492 833 openssl_3.5.7.orig.tar.gz.asc 6d1177d59ef985cff4b6baef95ae748ec724af12 74836 openssl_3.5.7-1~deb13u2.debian.tar.xz Checksums-Sha256: 25904642004d30c5c3da4642a72a7d09f8d9eb6e5ce62dab53c0371114faf8f2 2707 openssl_3.5.7-1~deb13u2.dsc a8c0d28a529ca480f9f36cf5792e2cd21984552a3c8e4aa11a24aa31aeac98e8 53153930 openssl_3.5.7.orig.tar.gz d3d082bee3f658c31db53af625eceecf29d777c7010394bed5787ebcc98abdf2 833 openssl_3.5.7.orig.tar.gz.asc 593a47654ead460a3b609503733f80bef552ff0802799d3b47784faacc50809f 74836 openssl_3.5.7-1~deb13u2.debian.tar.xz Files: 81887cbcbcfffb723ad8f7dcfdcaef70 2707 utils optional openssl_3.5.7-1~deb13u2.dsc 36608cd5445f708d0c2200aea9682c35 53153930 utils optional openssl_3.5.7.orig.tar.gz 1550a37dc3382ec617b5fd7d4140b92c 833 utils optional openssl_3.5.7.orig.tar.gz.asc 1345084467bf31d9c7caf40647744577 74836 utils optional openssl_3.5.7-1~deb13u2.debian.tar.xz
-----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAmqLE+4ACgkQBWQfF1cS +ls/WgwAmzlbjcsP6qMq6l4IPgT2VHHG69FRWTJbnELXQ2dnrnknBJR9P/qjq00M qV302bCH0ryaCYZAfWfYIiYwvTU+pP43iqjpTRKjENh0UDSgx5FiSWn+6i2Jcbl6 QCvx1oJY+1GsGxDoblIoG/hOXwyX8h2T2o3aA+F+rc3A5gJlEm3+GrauE3oM5KRP UiJCK9yX194VyweZdV3gJmAUzhQ/DhZz2z+a6dMZuaJsTf0ZKtPGL2DLKT7DVHtt EscEOLKZO96i/6QU4OQDjkLN+RVZ7rsA/uqXqvbnfKqFcEYqOD7WfM/T8ItKi26/ ZvBv23SlhiKbgvRmyJhz5j6F1V9qCrId1dGoGRS2H4cPuxobyFHat1ohbFXJxBxf RTAc7uFGhgZMebvfFNJj0sc55U1dIqwXQb5ZoyLZPRdUIQYUcYtydoEgA1q6OvnX qqtDwqjvhSW6P7uvlX9/fFi9k3mE1ihKtBu4rkk3wOUVaOFsBSWIrKjysM0LWqiE EdZMkxL9 =eCc/ -----END PGP SIGNATURE-----
pgpa1tGBx0WFd.pgp
Description: PGP signature
