-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 14:29:32 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym
Architecture: i386
Version: 3.0.19-1~deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3    - Secure Sockets Layer toolkit - shared libraries
 libssl3-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.0.19-1~deb12u2) bookworm-security; urgency=medium
 .
   * CVE-2026-28387 ("Potential use-after-free in DANE client code")
   * CVE-2026-28389 ("Possible NULL dereference when processing CMS
     KeyAgreeRecipientInfo")
   * CVE-2026-28390 ("Possible NULL dereference when processing CMS
     KeyTransportRecipient Info")
   * CVE-2026-31789 ("Heap buffer overflow in hexadecimal conversion")
   * CVE-2026-31790 ("Incorrect failure handling in RSA KEM RSASVE
     encapsulation")
Checksums-Sha1:
 b53fb53fe0beb5f842898c0da0f5a6df6358f361 1514156 libcrypto3-udeb_3.0.19-1~deb12u2_i386.udeb
 72612223ef39196519b6b1e011be9305f895cebe 2499684 libssl-dev_3.0.19-1~deb12u2_i386.deb
 6a0fa3fa78fb21e959de926bee7fae652fc689c3 3676304 libssl3-dbgsym_3.0.19-1~deb12u2_i386.deb
 22f4386a730e4a4b1be6b4773758697099df820a 238628 libssl3-udeb_3.0.19-1~deb12u2_i386.udeb
 4aca5082bcabe28fdca73d43b519bd6d77487acb 2038240 libssl3_3.0.19-1~deb12u2_i386.deb
 e93f9608bcb8439dbe53827ceeb5af7645c53bf2 597512 openssl-dbgsym_3.0.19-1~deb12u2_i386.deb
 1c9ea838a45632220c49e1349efdd5850d7b0586 7743 openssl_3.0.19-1~deb12u2_i386-buildd.buildinfo
 8c7f7da90faa419c3a30711f772cbb02271a1d51 1439272 openssl_3.0.19-1~deb12u2_i386.deb
Checksums-Sha256:
 ebcce132c67fbd3ce176981f34f570079fca5dbac6342a2b10f36bfa07721c70 1514156 libcrypto3-udeb_3.0.19-1~deb12u2_i386.udeb
 69646195a6a1d0d2701ae53e73e1180d6bad7fed832511aec58d27041df487e3 2499684 libssl-dev_3.0.19-1~deb12u2_i386.deb
 9b4c5bd19b0b4115211e591a60fe8c6f5b61e36ea54038b023eeb93530f30d78 3676304 libssl3-dbgsym_3.0.19-1~deb12u2_i386.deb
 4859623d823e628c7d7a75a98361a05efb8ea45a941906e63dd57b413a339dbc 238628 libssl3-udeb_3.0.19-1~deb12u2_i386.udeb
 cf5e81f3e8c2a1bd4ed4ee376c9065325179227e75a076149fc2ad7eaed75f92 2038240 libssl3_3.0.19-1~deb12u2_i386.deb
 975bdd9931de368cf8b761933220a13427d6ee6dbe5ee9a3c76534a4cb96563c 597512 openssl-dbgsym_3.0.19-1~deb12u2_i386.deb
 815cd9a00d9cfcb9936dc699b847a1dd001616280f47c00c203ac9f1c3324fd3 7743 openssl_3.0.19-1~deb12u2_i386-buildd.buildinfo
 ec05862f60e608e7bd21a4240cad9cdfe6df138b74d58c5d5cc8766d466c15a4 1439272 openssl_3.0.19-1~deb12u2_i386.deb
Files:
 ce8a8afbb39e0f953efcdaf0dedba306 1514156 debian-installer optional libcrypto3-udeb_3.0.19-1~deb12u2_i386.udeb
 64d3779b298c8ab5dcc3d9eeb3115c0b 2499684 libdevel optional libssl-dev_3.0.19-1~deb12u2_i386.deb
 1faa021372f9d82b10dc7d534492b115 3676304 debug optional libssl3-dbgsym_3.0.19-1~deb12u2_i386.deb
 62cba68650827d8e308145166bc9bc8f 238628 debian-installer optional libssl3-udeb_3.0.19-1~deb12u2_i386.udeb
 0c03cf13b8f78105ede70a9088fcb03c 2038240 libs optional libssl3_3.0.19-1~deb12u2_i386.deb
 defda2913776e3bb27401dce4ab48070 597512 debug optional openssl-dbgsym_3.0.19-1~deb12u2_i386.deb
 a8cc67f6a009b8c79737d1457337e75e 7743 utils optional openssl_3.0.19-1~deb12u2_i386-buildd.buildinfo
 780b61c1c758bde573928e05067ab387 1439272 utils optional openssl_3.0.19-1~deb12u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=mny7
-----END PGP SIGNATURE-----