-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 14:29:32 +0200
Source: openssl
Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym
Architecture: mipsel
Version: 3.0.19-1~deb12u2
Distribution: bookworm-security
Urgency: medium
Maintainer: mipsel Build Daemon (mipsel-osuosl-04) <buildd_mips64el-mipsel-osuosl-04@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb)
 libssl-dev - Secure Sockets Layer toolkit - development files
 libssl3    - Secure Sockets Layer toolkit - shared libraries
 libssl3-udeb - ssl shared library - udeb (udeb)
 openssl    - Secure Sockets Layer toolkit - cryptographic utility
Changes:
 openssl (3.0.19-1~deb12u2) bookworm-security; urgency=medium
 .
   * CVE-2026-28387 ("Potential use-after-free in DANE client code")
   * CVE-2026-28389 ("Possible NULL dereference when processing CMS
     KeyAgreeRecipientInfo")
   * CVE-2026-28390 ("Possible NULL dereference when processing CMS
     KeyTransportRecipient Info")
   * CVE-2026-31789 ("Heap buffer overflow in hexadecimal conversion")
   * CVE-2026-31790 ("Incorrect failure handling in RSA KEM RSASVE
     encapsulation")
Checksums-Sha1:
 c9820d4d42031842f836d53b60f2343782ecac9a 1074228 libcrypto3-udeb_3.0.19-1~deb12u2_mipsel.udeb
 87fee5ec798e795fedde75494c7d81f13f6ed440 2282192 libssl-dev_3.0.19-1~deb12u2_mipsel.deb
 078bc579b0ea5fe63cc765d1ed4ab915b768c336 4618856 libssl3-dbgsym_3.0.19-1~deb12u2_mipsel.deb
 fee7fd68dbd6444cc1839435ceec370e80e606bb 184420 libssl3-udeb_3.0.19-1~deb12u2_mipsel.udeb
 4f60623a51ea1cb4fa540c1ad1adea68e54a47d1 1538600 libssl3_3.0.19-1~deb12u2_mipsel.deb
 01a81fc03801361eb1c06808aab54b730df8440e 692468 openssl-dbgsym_3.0.19-1~deb12u2_mipsel.deb
 2918c6782d6285907da92c0cb285f86409b11c35 7614 openssl_3.0.19-1~deb12u2_mipsel-buildd.buildinfo
 01d4d34b62b802e9e6bc569692bab913ea5feaa6 1389656 openssl_3.0.19-1~deb12u2_mipsel.deb
Checksums-Sha256:
 c361f3c95ebbf9bbb2e8f8e92e9b53382f6effd6a93440e87d11bf51fd8a3956 1074228 libcrypto3-udeb_3.0.19-1~deb12u2_mipsel.udeb
 2bd749f7421714ef46c51a7d0fd443e0564ea8261113267d5c6809050057be54 2282192 libssl-dev_3.0.19-1~deb12u2_mipsel.deb
 a619c1a623e602b479426af35ee0e0d83a7b6ed93efa9db29e0dafbf74e22dda 4618856 libssl3-dbgsym_3.0.19-1~deb12u2_mipsel.deb
 59d39884e4cdf2253f9da4002568369b41c788e16d42afd89f2b719154571269 184420 libssl3-udeb_3.0.19-1~deb12u2_mipsel.udeb
 536ef9064668f827fe1c7e303607e5850a7bba1dd4fb0f1273e4c4a8493501df 1538600 libssl3_3.0.19-1~deb12u2_mipsel.deb
 9b90c28258062d3763e4c394ef9daddc71d4383c7d13d59ee7e5f9faba7d4f22 692468 openssl-dbgsym_3.0.19-1~deb12u2_mipsel.deb
 a0a7cc959cdb2854b99049665b8d78e118e006dca11e8fb7f02d3ccba4a7f5af 7614 openssl_3.0.19-1~deb12u2_mipsel-buildd.buildinfo
 818e7e2849c8c13c9d902dc31c907efb9453ccbbe43c840c4e197b6853ad35b6 1389656 openssl_3.0.19-1~deb12u2_mipsel.deb
Files:
 f29ebf290f386e5af49522ea342f6d92 1074228 debian-installer optional libcrypto3-udeb_3.0.19-1~deb12u2_mipsel.udeb
 b3ddba034ed12e3c928552b4fddc18d5 2282192 libdevel optional libssl-dev_3.0.19-1~deb12u2_mipsel.deb
 d4fca341018370498deb28145fbc73b6 4618856 debug optional libssl3-dbgsym_3.0.19-1~deb12u2_mipsel.deb
 66ae68227aee91335fde1c1efb2b7a9e 184420 debian-installer optional libssl3-udeb_3.0.19-1~deb12u2_mipsel.udeb
 23b3fd9fb0e831b71298a36826883712 1538600 libs optional libssl3_3.0.19-1~deb12u2_mipsel.deb
 b67b8e3e1ffaa1df69af7297867951f6 692468 debug optional openssl-dbgsym_3.0.19-1~deb12u2_mipsel.deb
 c4a7affec4aaf6f4cad290b335aaa829 7614 utils optional openssl_3.0.19-1~deb12u2_mipsel-buildd.buildinfo
 0ad8dee0c38e93320bd11e682d00f46f 1389656 utils optional openssl_3.0.19-1~deb12u2_mipsel.deb

-----BEGIN PGP SIGNATURE-----
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=ZQr9
-----END PGP SIGNATURE-----