-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Sep 2025 21:18:35 +0200 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3-udeb libssl3t64 libssl3t64-dbgsym openssl openssl-dbgsym openssl-provider-fips openssl-provider-fips-dbgsym openssl-provider-legacy openssl-provider-legacy-dbgsym Architecture: i386 Version: 3.5.1-1+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3-udeb - ssl shared library - udeb (udeb) libssl3t64 - Secure Sockets Layer toolkit - shared libraries openssl - Secure Sockets Layer toolkit - cryptographic utility openssl-provider-fips - Secure Sockets Layer toolkit - cryptographic utility openssl-provider-legacy - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.5.1-1+deb13u1) trixie-security; urgency=medium . * CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap) * CVE-2025-9231 (Timing side-channel in SM2 algorithm on 64 bit ARM) * CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling) Checksums-Sha1: 6c90da09678652e2211d2166cd4080c5545c6328 1940496 libcrypto3-udeb_3.5.1-1+deb13u1_i386.udeb 34b99cd3b050de373229b2295fcbb31bf0d5b5bd 3000812 libssl-dev_3.5.1-1+deb13u1_i386.deb 33247dbad3f1d8f18840bd3c772e6d7e8b3aa733 417572 libssl3-udeb_3.5.1-1+deb13u1_i386.udeb efd7e23bd9f4fe1dd9fab8703fca75bcdd7edd3f 4861164 libssl3t64-dbgsym_3.5.1-1+deb13u1_i386.deb 2feefbd982ee2a1627d9f6342a5c867cacca452f 2421220 libssl3t64_3.5.1-1+deb13u1_i386.deb 1d3c451a4215bd2fc07547321310592ac7034ab8 647880 openssl-dbgsym_3.5.1-1+deb13u1_i386.deb 399a06525079787d2a1f81c99ea0bb414cabbf88 1302168 openssl-provider-fips-dbgsym_3.5.1-1+deb13u1_i386.deb 0dd992e2875bcb786c01133d373abd1faf8336c7 996128 openssl-provider-fips_3.5.1-1+deb13u1_i386.deb 99e511389649aedf7d327b2f9aaa74f212faf318 69356 openssl-provider-legacy-dbgsym_3.5.1-1+deb13u1_i386.deb 875e621790961bfa58211a5eac252162d52b8929 303336 openssl-provider-legacy_3.5.1-1+deb13u1_i386.deb 7f8323eecdeb7c52924d40b801b1df38f487a229 8607 openssl_3.5.1-1+deb13u1_i386-buildd.buildinfo ad73c4a26ba8c8e47dec8c270b05572588de8552 1498924 openssl_3.5.1-1+deb13u1_i386.deb Checksums-Sha256: 4034937bb1768d01763ebd40003a87580b324da063c53b1c4a8a6c75cc5b9116 1940496 libcrypto3-udeb_3.5.1-1+deb13u1_i386.udeb f03f5cc34f750dc75a9c83baac14314d747fc7404fab7ae329a334f93b261856 3000812 libssl-dev_3.5.1-1+deb13u1_i386.deb 530852ff835d9d55e95871667f3ed5bcf075a6772efc16a88b2e897a2e64eee4 417572 libssl3-udeb_3.5.1-1+deb13u1_i386.udeb 0fb8a53910007721f1703a01cf7f75c852d91c020d661d0d782998b86f9c8898 4861164 libssl3t64-dbgsym_3.5.1-1+deb13u1_i386.deb a5ba9274949bbb66ee8b0d1eff9a430a4559edf0ab72fb5d413d60b695c1b352 2421220 libssl3t64_3.5.1-1+deb13u1_i386.deb cd0b8c338aab603db9ff0e88c830ad6da01a866ebb21502249413c231d01c751 647880 openssl-dbgsym_3.5.1-1+deb13u1_i386.deb acd505520399b9383ca8dd42cd91a0257ba9553f58d211154a129c040e871ba6 1302168 openssl-provider-fips-dbgsym_3.5.1-1+deb13u1_i386.deb 9f17583dc6182af60c9737dce21f6e8fc311b02fe6e92eef6dd90833021ff531 996128 openssl-provider-fips_3.5.1-1+deb13u1_i386.deb 7a5dd67cc66bd13dee172133adeb3f6c0b0f3382372671a285908ae8f408837b 69356 openssl-provider-legacy-dbgsym_3.5.1-1+deb13u1_i386.deb e4c555397d56951ceec7508702db61d9ceae01d86077999ba6796b8c3b69b4f3 303336 openssl-provider-legacy_3.5.1-1+deb13u1_i386.deb 99c9c5ce4f7cee5171053e6faaac010ca22dd10231a03225377a389aaa981f58 8607 openssl_3.5.1-1+deb13u1_i386-buildd.buildinfo f28f8823a7a459c55829a022e4ee6c77539ab727fcc61171887fa7c8acf87b3b 1498924 openssl_3.5.1-1+deb13u1_i386.deb Files: 6ca1a3d9c0863bea714f58e832a437e9 1940496 debian-installer optional libcrypto3-udeb_3.5.1-1+deb13u1_i386.udeb 4f29e94789665f76a946245276ce66eb 3000812 libdevel optional libssl-dev_3.5.1-1+deb13u1_i386.deb 552ee54928d52196b19f8ca59cc3fc1d 417572 debian-installer optional libssl3-udeb_3.5.1-1+deb13u1_i386.udeb 18744afc01f943beabb32b7d30ba97be 4861164 debug optional libssl3t64-dbgsym_3.5.1-1+deb13u1_i386.deb 10c453e1d346e858a2051f6d459062d6 2421220 libs optional libssl3t64_3.5.1-1+deb13u1_i386.deb 3fd87c11efc5ac7dc76803b205dac5e1 647880 debug optional openssl-dbgsym_3.5.1-1+deb13u1_i386.deb 5bb51e9e9694223229053551796c9cba 1302168 debug optional openssl-provider-fips-dbgsym_3.5.1-1+deb13u1_i386.deb ee8734e638e03df332f268937e50a12e 996128 utils optional openssl-provider-fips_3.5.1-1+deb13u1_i386.deb 70df1ede44fa1850ec9f7ccb3cd1c292 69356 debug optional openssl-provider-legacy-dbgsym_3.5.1-1+deb13u1_i386.deb e4b4ce6298f76847ee43422e335da4f4 303336 utils optional openssl-provider-legacy_3.5.1-1+deb13u1_i386.deb 14e3c0781056e5a8160be96266ef197c 8607 utils optional openssl_3.5.1-1+deb13u1_i386-buildd.buildinfo 45dc03ecb9cd234c4495dab8ee6ceb41 1498924 utils optional openssl_3.5.1-1+deb13u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEv2qEY4xQXyY/2dWIvGw9w6VrLCcFAmjW/TMACgkQvGw9w6Vr LCcadA//QHUWB3J4LtWo8CsXM3Vb94zowlRLydg45GMp5cV//sJYWAwrn2B8jeJ/ Ofc3gvy3yuvefBK3PEKaDf0yjaH83J3rmNLJUjQAxVNwibfM0Kd/3qwQtA6IBr3v 4l15Do9O9O+EGb2ZM4dRYBm3TBAFL8ENucN0giZC0mWvbnpTubusbSaQxK035cg2 skiZzbDBpQVlqboxJk6wOgFbT1ffCKf85hk6t94IsCk6nf3BWmT3ykzlWPOi9pAf pEeBqq2/Ms1dPeYx1v5Ub7u1f6P50uNAlQhzIrSm7nCECwRTduNAZUAxxbqFesbF kvvL0l3Vdb4BUAQvVAPyP74k9iS+bAGQavJWjbhOHweS6h6EJbkRGOi+bUBiWlAe HCtOiOslTUQ5UfV8cR1I61zt+WV7lco6FR5FEr1UFIe1ee4VZqIdL2kYbXBzJiqU s2PtlqwouILLrZ5165dJ53gt634OU3fG/53uOn3JAmuXTHpTAgmBkGMcRHoie8aW jj+HOOEWZAtQuhl69kMR6ov3mV+mOykiN4ZjhekR6gnN6B2xmkUcMPcNpI6Cs0/3 ou6CadYvYOo57y/g+DhL6FoR9IQPalbetHlNWnTxfvGwphcoKxisrhANC9pMLpvb x0g0afyceqwL6KVKRlaIElLJ8RhzSwK6fbVPyR7yz+hzdCiFXrk= =1aRO -----END PGP SIGNATURE-----