-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 11 Oct 2026 18:45:46 +0200 Source: wolfssl Architecture: source Version: 5.9.2-1.1 Distribution: unstable Urgency: medium Maintainer: Jacob Barthelmeh <[email protected]> Changed-By: Bastian Germann <[email protected]> Changes: wolfssl (5.9.2-1.1) unstable; urgency=medium . * Non-maintainer upload. * CVE-2026-93302: require trusted peer certificates to match byte for byte. * CVE-2026-93304: reject ChangeCipherSpec before ClientKeyExchange is sent. * CVE-2026-15442: fix use-after-free in TLS shutdown/ReceiveData sequences. * CVE-2026-94417: check the CRL when a certificate names no OCSP responder. * CVE-2026-89133: fix X.509 certificate validation logic * CVE-2026-89134: apply Subject CN name constraints unless a dNSName SAN is present. * CVE-2026-89102: only admit CAs to the status_request_v2 pending signer pool. * CVE-2026-89136: reject unoffered server certificate types with RPK. Checksums-Sha1: 9f41c9caf32ccf87e739836bbf01c40ee0703620 2002 wolfssl_5.9.2-1.1.dsc b43f95c55b45359abe00ce6ea34177e91fcb1e8f 42068 wolfssl_5.9.2-1.1.debian.tar.xz cd053c67c1c0feb43d97678387a4626a980f6878 5758 wolfssl_5.9.2-1.1_source.buildinfo Checksums-Sha256: 4f05930352a2c832575d30fe8dfff3d7dad2ebb24d0bbb0d2822220a5b3ab4e7 2002 wolfssl_5.9.2-1.1.dsc aceeea679b55820c968f6b840baf604e2ae134e4936bb21d2cb23ce7827071cb 42068 wolfssl_5.9.2-1.1.debian.tar.xz c36dce89f8f00b68ef47d76f64397ccfe3f53878b4789a8b35a623b85952b4f6 5758 wolfssl_5.9.2-1.1_source.buildinfo Files: fd3f1ee49716ebcbe6e3ce13f0f951f7 2002 libs optional wolfssl_5.9.2-1.1.dsc 76afafbfefd0d061dc9eecf8e658f794 42068 libs optional wolfssl_5.9.2-1.1.debian.tar.xz ba9b539ddbbe7a3b4c10b84834c77068 5758 libs optional wolfssl_5.9.2-1.1_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQHEBAEBCgAuFiEEQGIgyLhVKAI3jM5BH1x6i0VWQxQFAmrLvioQHGJhZ2VAZGVi aWFuLm9yZwAKCRAfXHqLRVZDFOQmC/9iUpnxU9ktM8QNTPZ+hSbtjO+ybERqByBL TwVjQ4I0gUUrtyWmJlXqkFA6oY7uGeEvwYT1qZ5niyUkw7HWkdkeMMHuRj2TFuor Y+Viwem28Rm+rssdFSPiLRvDrTYUNxJH+2Qf/Hz+6oX9lZ5zMrZ8JcyRGqwBwZNm S7VH8Pjo9ZcoDmApMlA3wGnNSAPDIKZdqpb/kPh5HT5OC8Ei8JYUlfrXWNeiTKLQ 1pW1xPNpEP7QdYjI4M1EZYKas5V3+eAxjaRsrl605Qf7lhllNmxXkHupYwGhU6oD QffKZM8ai9svr64zJZ1MnbkNwUvHWZvxoTWS74H53fOpkzTggNE7xpsZCnt42SsK cfu4RFBUiL3+f8hVAMClaEMXIgwJNKKyOEw1ulvMDEemIM9CHzsVMyrqkFxIzM2R V2PZGghjOE0x/lGbtxjUl7dX7a1XJXSBmZPjw9ZTCIQCXSLqbX8qhU5JZb28Uuuh 8vknZqiABSn0eDOjwh1vMtG9BxcenYs= =JKbT -----END PGP SIGNATURE-----
pgps_XxQ5dgFd.pgp
Description: PGP signature

