-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 11 Oct 2026 18:45:46 +0200
Source: wolfssl
Architecture: source
Version: 5.9.2-1.1
Distribution: unstable
Urgency: medium
Maintainer: Jacob Barthelmeh <[email protected]>
Changed-By: Bastian Germann <[email protected]>
Changes:
 wolfssl (5.9.2-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-93302: require trusted peer certificates to match byte for
     byte.
   * CVE-2026-93304: reject ChangeCipherSpec before ClientKeyExchange is
     sent.
   * CVE-2026-15442: fix use-after-free in TLS shutdown/ReceiveData
     sequences.
   * CVE-2026-94417: check the CRL when a certificate names no OCSP
     responder.
   * CVE-2026-89133: fix X.509 certificate validation logic
   * CVE-2026-89134: apply Subject CN name constraints unless a dNSName
     SAN is present.
   * CVE-2026-89102: only admit CAs to the status_request_v2 pending
     signer pool.
   * CVE-2026-89136: reject unoffered server certificate types with RPK.
Checksums-Sha1:
 9f41c9caf32ccf87e739836bbf01c40ee0703620 2002 wolfssl_5.9.2-1.1.dsc
 b43f95c55b45359abe00ce6ea34177e91fcb1e8f 42068 wolfssl_5.9.2-1.1.debian.tar.xz
 cd053c67c1c0feb43d97678387a4626a980f6878 5758 
wolfssl_5.9.2-1.1_source.buildinfo
Checksums-Sha256:
 4f05930352a2c832575d30fe8dfff3d7dad2ebb24d0bbb0d2822220a5b3ab4e7 2002 
wolfssl_5.9.2-1.1.dsc
 aceeea679b55820c968f6b840baf604e2ae134e4936bb21d2cb23ce7827071cb 42068 
wolfssl_5.9.2-1.1.debian.tar.xz
 c36dce89f8f00b68ef47d76f64397ccfe3f53878b4789a8b35a623b85952b4f6 5758 
wolfssl_5.9.2-1.1_source.buildinfo
Files:
 fd3f1ee49716ebcbe6e3ce13f0f951f7 2002 libs optional wolfssl_5.9.2-1.1.dsc
 76afafbfefd0d061dc9eecf8e658f794 42068 libs optional 
wolfssl_5.9.2-1.1.debian.tar.xz
 ba9b539ddbbe7a3b4c10b84834c77068 5758 libs optional 
wolfssl_5.9.2-1.1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=JKbT
-----END PGP SIGNATURE-----

Attachment: pgps_XxQ5dgFd.pgp
Description: PGP signature

Reply via email to