-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 14:29:32 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym
Architecture: ppc64el
Version: 3.0.19-1~deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) <buildd_ppc64el-ppc64el-osuosl-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3    - Secure Sockets Layer toolkit - shared libraries
 libssl3-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.0.19-1~deb12u2) bookworm-security; urgency=medium
 .
   * CVE-2026-28387 ("Potential use-after-free in DANE client code")
   * CVE-2026-28389 ("Possible NULL dereference when processing CMS
     KeyAgreeRecipientInfo")
   * CVE-2026-28390 ("Possible NULL dereference when processing CMS
     KeyTransportRecipient Info")
   * CVE-2026-31789 ("Heap buffer overflow in hexadecimal conversion")
   * CVE-2026-31790 ("Incorrect failure handling in RSA KEM RSASVE
     encapsulation")
Checksums-Sha1:
 e2e7633f7a37c23dfd185291bb685ae8b9561c73 1535700 libcrypto3-udeb_3.0.19-1~deb12u2_ppc64el.udeb
 5fee859019de3d6fcd735a9fddc705af14755b80 2532388 libssl-dev_3.0.19-1~deb12u2_ppc64el.deb
 42d4e012a156f085ef076f138febf85dd1cce365 4638464 libssl3-dbgsym_3.0.19-1~deb12u2_ppc64el.deb
 450c72730fa894acda3719b85c56cf070434ffa8 239648 libssl3-udeb_3.0.19-1~deb12u2_ppc64el.udeb
 eca6468750f5d63ca714670c0880e79b2430b01c 2047244 libssl3_3.0.19-1~deb12u2_ppc64el.deb
 d5ac62068b2a151d7e8861b04a2134b07dcddf4a 695784 openssl-dbgsym_3.0.19-1~deb12u2_ppc64el.deb
 323857b064f14e5e47a049c72b4051889a387b34 7860 openssl_3.0.19-1~deb12u2_ppc64el-buildd.buildinfo
 2077dbf7cd5f68541ff48ed51d055540ad4d8ddb 1431536 openssl_3.0.19-1~deb12u2_ppc64el.deb
Checksums-Sha256:
 769e19525f3ce8fe21a12d34f3bcd8f8ece9df183f6131e60d2e710f10bdaab4 1535700 libcrypto3-udeb_3.0.19-1~deb12u2_ppc64el.udeb
 1fdacd47273f4702723deca5aad836c5e164a57edeb5f1c2b0aea99d14cb8c12 2532388 libssl-dev_3.0.19-1~deb12u2_ppc64el.deb
 ff9c7dbd9d3609b1408fd85b029d487bc55f7facd4bca2f8d6a0352b9c522dc3 4638464 libssl3-dbgsym_3.0.19-1~deb12u2_ppc64el.deb
 2f385ed161c3685bd85eb7403e2ca62881b27950a60e323bba3731708549418e 239648 libssl3-udeb_3.0.19-1~deb12u2_ppc64el.udeb
 0fe0171168879aaceb555ae9272eb52bd1448d70450a83ab31d5953c89cb6a3c 2047244 libssl3_3.0.19-1~deb12u2_ppc64el.deb
 a9c23d1918be4d544f8311709483116f967a827eff6a3e24b1daa7f548f75099 695784 openssl-dbgsym_3.0.19-1~deb12u2_ppc64el.deb
 e2f0d887c5835b2b1aa7023e6149db746b06ba2302e2c263c6d5ab9c4950120a 7860 openssl_3.0.19-1~deb12u2_ppc64el-buildd.buildinfo
 23f3f98d34362770b5bb27c4d17fa4bd2a2a8a0586db08ae6d218515e9f28003 1431536 openssl_3.0.19-1~deb12u2_ppc64el.deb
Files:
 083a97bea4050dd0e4cb59da3be82f88 1535700 debian-installer optional libcrypto3-udeb_3.0.19-1~deb12u2_ppc64el.udeb
 f34b8a4f1739d708adf30078c1a967d2 2532388 libdevel optional libssl-dev_3.0.19-1~deb12u2_ppc64el.deb
 a5e71d05efe5e43fb7b2bb38a3eacc17 4638464 debug optional libssl3-dbgsym_3.0.19-1~deb12u2_ppc64el.deb
 58b7a14c8d8080956c306dde5bd6ef68 239648 debian-installer optional libssl3-udeb_3.0.19-1~deb12u2_ppc64el.udeb
 f893b890ae32337f2de6387f4b0f80f3 2047244 libs optional libssl3_3.0.19-1~deb12u2_ppc64el.deb
 ab226de895b45cdc57f0ebf644420409 695784 debug optional openssl-dbgsym_3.0.19-1~deb12u2_ppc64el.deb
 0f893255e05828c3b5c7f55b0520a404 7860 utils optional openssl_3.0.19-1~deb12u2_ppc64el-buildd.buildinfo
 6c51f15a5fed2224d6f2dfd922f31b65 1431536 utils optional openssl_3.0.19-1~deb12u2_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=sgeU
-----END PGP SIGNATURE-----