-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 27 Jan 2026 21:09:55 +0100 Source: openssl Architecture: source Version: 3.5.5-1 Distribution: unstable Urgency: medium Maintainer: Debian OpenSSL Team <[email protected]> Changed-By: Sebastian Andrzej Siewior <[email protected]> Changes: openssl (3.5.5-1) unstable; urgency=medium . * Import 3.5.5 - CVE-2025-11187 (Improper validation of PBMAC1 parameters in PKCS#12 MAC verification) - CVE-2025-15467 (Stack buffer overflow in CMS AuthEnvelopedData parsing) - CVE-2025-15468 (NULL dereference in SSL_CIPHER_find() function on unknown cipher ID) - CVE-2025-15469 ("openssl dgst" one-shot codepath silently truncates inputs >16MB) - CVE-2025-66199 (TLS 1.3 CompressedCertificate excessive memory allocation) - CVE-2025-68160 (Heap out-of-bounds write in BIO_f_linebuffer on short writes) - CVE-2025-69418 (Unauthenticated/unencrypted trailing bytes with low-level OCB function calls) - CVE-2025-69419 (Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion) - CVE-2025-69420 (Missing ASN1_TYPE validation in TS_RESP_verify_response() function) - CVE-2025-69421 (NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function) - CVE-2026-22795 (Missing ASN1_TYPE validation in PKCS#12 parsing) - CVE-2026-22796 (ASN1_TYPE Type Confusion in the - PKCS7_digest_from_attributes() function) Checksums-Sha1: b9f06b61a84a58aac68f1f1bb013975eb2035e57 2675 openssl_3.5.5-1.dsc 72a5ebbdd30bc28a66f069e2d50c66a007c324d2 53104821 openssl_3.5.5.orig.tar.gz ff7a37d551ce7f25695266d29fb1439ba3f6b43f 833 openssl_3.5.5.orig.tar.gz.asc 7c695896cbd0c9de1eb99104ad485e2b46ac43fe 49624 openssl_3.5.5-1.debian.tar.xz Checksums-Sha256: d69a00b6ccd85feb5f2a8561a6d72bfa7254aca36532c67c34ef64ccf03ca882 2675 openssl_3.5.5-1.dsc b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89 53104821 openssl_3.5.5.orig.tar.gz eaef5b1054b84b8d1e6c61c9fc8867828be5ce686d0221580faf8bdc16489da9 833 openssl_3.5.5.orig.tar.gz.asc 67b458af9dcae77751e1ce20866cd2fb3ff4b446c192e8491b04a6ef8a9ed490 49624 openssl_3.5.5-1.debian.tar.xz Files: 32ede53eca4f7213c465166f9787f0eb 2675 utils optional openssl_3.5.5-1.dsc 9c86d929c3d1067e2c88239d7d1ce81b 53104821 utils optional openssl_3.5.5.orig.tar.gz 7e827079c420b263e8dadfe6fafcdf40 833 utils optional openssl_3.5.5.orig.tar.gz.asc 63902973cb64553fee78b9fee6bd3922 49624 utils optional openssl_3.5.5-1.debian.tar.xz
-----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEV4kucFIzBRM39v3RBWQfF1cS+lsFAml5LKMACgkQBWQfF1cS +luQ0Av9HY2Pt2S+GHhgKPQVHeGc5FPp2L27vNBixLzAHLy3rBiyN86fQsDAs9CR J+P2FFnHldG6EIMSdC8fQQgA5y9USBs0gIlJwep9g478te9YR4R412i6RabhEx8F CfAj44LVaB19nfwN77G7pxADJDf3/ZaOZ+Qtx4hC1r/6h903KG3ylHPwraG9qdW3 74USPbbh50vpa2si40XtwCQ5ISbdfjdrm7GA/XZaY0XEzs7rw/mhvrZrno8lT4Q5 6P+7F5Jl6oHJROWI+FUfnWf0RVDXquNOoU6Rh2+m2VnSx6QnpLwu3GtXfE8Mu5yD nky5/jK7Nyt3BNsiimZGSxKQhwDGgzXTli+N9/q5pMNSeXv1wKZRkclJST+bkZUg HbmHhvb+or/zeE12amLzS1rBTlBtNg8gGQUfX+gEKAMV2//djwkjl0/0JXV5PseR nRGGprlV9A4tPaFJAR9FV5c34Qi6GyeH8O66iw1zpbdF8ZcDEY78yW5yd1rhGrmn POj8gmlD =38PH -----END PGP SIGNATURE-----
pgps_smXSEwTQ.pgp
Description: PGP signature
