-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Apr 2026 14:29:32 +0200 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: mips64el Version: 3.0.19-1~deb12u2 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.0.19-1~deb12u2) bookworm-security; urgency=medium . * CVE-2026-28387 ("Potential use-after-free in DANE client code") * CVE-2026-28389 ("Possible NULL dereference when processing CMS KeyAgreeRecipientInfo") * CVE-2026-28390 ("Possible NULL dereference when processing CMS KeyTransportRecipient Info") * CVE-2026-31789 ("Heap buffer overflow in hexadecimal conversion") * CVE-2026-31790 ("Incorrect failure handling in RSA KEM RSASVE encapsulation") Checksums-Sha1: f38e8424ef0911833c0615592db7cf5ce702da77 1035948 libcrypto3-udeb_3.0.19-1~deb12u2_mips64el.udeb 5decb483108049e1388a0ca3aa8496fedfce0e15 2315848 libssl-dev_3.0.19-1~deb12u2_mips64el.deb 257686b355f195d2d970932b6fff3c54fb9998b8 4716388 libssl3-dbgsym_3.0.19-1~deb12u2_mips64el.deb 9494364f25a750d11d74206b62471fa7d4a1b5e8 184420 libssl3-udeb_3.0.19-1~deb12u2_mips64el.udeb b75ae1dba95c60c14af16ac3cea218da897f36dc 1499996 libssl3_3.0.19-1~deb12u2_mips64el.deb 90897ebf29106df20f6b9a181e1fe4fb40e89cd4 709604 openssl-dbgsym_3.0.19-1~deb12u2_mips64el.deb 8584b9aab3350aa39d19c66afeb4a3c67bd10c42 7667 openssl_3.0.19-1~deb12u2_mips64el-buildd.buildinfo c1085b38d130e0b0a1214db95dc63da987f3bdb3 1387764 openssl_3.0.19-1~deb12u2_mips64el.deb Checksums-Sha256: 994a5fabc0236dc51694dbfc3a84e5372fecbc6ec2d402b89df44602761303cb 1035948 libcrypto3-udeb_3.0.19-1~deb12u2_mips64el.udeb 6c4013b9aac8a4e944df28365c27912900efb388d2ad17004b7ca32f048f81cc 2315848 libssl-dev_3.0.19-1~deb12u2_mips64el.deb 010c9f84ee044b12ffc4da1b9b5bd383931895df96b16959e8456df085b533cc 4716388 libssl3-dbgsym_3.0.19-1~deb12u2_mips64el.deb e54200564d729e358243969ff85b2951e588c8df368784ffdc3915862a835711 184420 libssl3-udeb_3.0.19-1~deb12u2_mips64el.udeb 3a6d30ae63ae96557a67666f8ca4a3e882c011b95bb4eaa90f8bb9952570e380 1499996 libssl3_3.0.19-1~deb12u2_mips64el.deb 4f43d5da99fb19e411d48a38050e522b04c842c5fadea2ef0f1b5c46b539117e 709604 openssl-dbgsym_3.0.19-1~deb12u2_mips64el.deb 157c35215c4081a8993319a7969dd3291373bc6d44e2d58c1f1784ac92d0706a 7667 openssl_3.0.19-1~deb12u2_mips64el-buildd.buildinfo 1d370d6a564e6a2d6018c3d63c6d0e66bf685c606ee4fac28310c27914bb6497 1387764 openssl_3.0.19-1~deb12u2_mips64el.deb Files: c5eb78b0de46236291c365c9020fe992 1035948 debian-installer optional libcrypto3-udeb_3.0.19-1~deb12u2_mips64el.udeb 3b80f031b0257d6c237ced4253eea7eb 2315848 libdevel optional libssl-dev_3.0.19-1~deb12u2_mips64el.deb 1c47af39c0b2c0d80ba1494ef68e0909 4716388 debug optional libssl3-dbgsym_3.0.19-1~deb12u2_mips64el.deb cb7d57050793ed3a43c55f6afe367ccd 184420 debian-installer optional libssl3-udeb_3.0.19-1~deb12u2_mips64el.udeb 0b1cfe3817eea9afad65c26206abd381 1499996 libs optional libssl3_3.0.19-1~deb12u2_mips64el.deb c1363f62c23310ebea5e51f15d7fcff9 709604 debug optional openssl-dbgsym_3.0.19-1~deb12u2_mips64el.deb eaf234936c6c2ec8bd5d0a7ed706e435 7667 utils optional openssl_3.0.19-1~deb12u2_mips64el-buildd.buildinfo a78878e52d74c7ab7db957272809eea8 1387764 utils optional openssl_3.0.19-1~deb12u2_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmnP9ogACgkQHrk2gTKe Wgig3A//Xk3FJawEEEXX8pIUfwq7i8o7JQgsXgB8iOMAVc9XnVLOXS55kgEUibdT UYnEVlB5bNVM4TidhoXEwJrYmwyVf5mZa0T3LrJWQgPu0AlMTSrQb7qdMX3P6kUT DIOyNpWNIZelUbCExRLSie6e0/4LjB/k4FHwLn0YwESyPY83sbIId776bVWh7NHl o3lBKsCkc7Du4gVlMWH2q5CwR/FvQT2WDqZ8IFhtzkAmV7eAyO2599uMpDVhyXTY mCBDEaTQhfA12Ps8XQDa2RTBf67lr7ydFyA8vneoSA88G1JzH85+aG1StCgkX+6z icvbHqQhKtaje8etxxsJyXC59eJDdfRE/UekUDJd6UJBgrYcOW3VHkZ/nzwP+Fai Ykwj0sHYsbYWgLHR1Hnr2MswstBZP+IZ2wCX9rC9zxBE99gZbYKXVjOS+7hHEXvS GH/SqrFSH2dki3iidfsravrYpmyOhnb+NlFv24AmXkvwMM/p78rJFbt+hiHjDHJ5 NPQiHBrGRkb5pcqfXBRUcqFHB7/tcj6NVbhfNq6tm7EEIasKffNV1WnvFisLnwZ2 m1U38HEJO6q8LKZJm7/VbK80oWElkjdU6NMkXgKpmDPBj9d7A6K93iRortI5V4VI EeL2euud/cuyK/dFmLRg6jFakevGaQXITQkxm0NBD7+zDA+Zc+M= =go+Z -----END PGP SIGNATURE-----