-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Jan 2026 16:01:59 +0100 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: mips64el Version: 3.0.18-1~deb12u2 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.0.18-1~deb12u2) bookworm-security; urgency=medium . * CVE-2025-15467 (Stack buffer overflow in CMS AuthEnvelopedData parsing) * CVE-2025-68160 (Heap out-of-bounds write in BIO_f_linebuffer on short writes) * CVE-2025-69418 (Unauthenticated/unencrypted trailing bytes with low-level OCB function calls) * CVE-2025-69419 (Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion) * CVE-2025-69420 (Missing ASN1_TYPE validation in TS_RESP_verify_response() function) * CVE-2025-69421 (NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function) * CVE-2026-22795 (Missing ASN1_TYPE validation in PKCS#12 parsing) * CVE-2026-22796 (ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function) Checksums-Sha1: b2944b73995c1d4142ca0faffe8dcfa587fe3d5d 1037368 libcrypto3-udeb_3.0.18-1~deb12u2_mips64el.udeb 029751054ab4d0ba42e818e71ce6ba2af5a481a3 2320176 libssl-dev_3.0.18-1~deb12u2_mips64el.deb 88069c0576a6c9c693d33a309ec10e2ceac2a8dc 4718296 libssl3-dbgsym_3.0.18-1~deb12u2_mips64el.deb c60e0a509afa2bbb47e082b463aa5a0ff56de7ed 184740 libssl3-udeb_3.0.18-1~deb12u2_mips64el.udeb 3ddece05c1c3d14fd7f224430a8a590adb26334c 1496912 libssl3_3.0.18-1~deb12u2_mips64el.deb d3c11bdfe2c227e0e6d28d4511113eb5c8db84ac 711420 openssl-dbgsym_3.0.18-1~deb12u2_mips64el.deb a8904ce856e669a09428600f41beeec58a5e9df0 7667 openssl_3.0.18-1~deb12u2_mips64el-buildd.buildinfo 5396bb05e2ad53d7e133d6c05e43a8139f323041 1385424 openssl_3.0.18-1~deb12u2_mips64el.deb Checksums-Sha256: 7485349e933ee4e1d1e07be3da4f9df8ded98fb160f5d9f6f037f1a04b2333f0 1037368 libcrypto3-udeb_3.0.18-1~deb12u2_mips64el.udeb 0e009a729d70c1ccac2b4c59bed0fd969d6b435644b323f1b82edeea926ed116 2320176 libssl-dev_3.0.18-1~deb12u2_mips64el.deb 4792c65fccbf96399a6f6a8c8251bdfa192a4952feed3fe561e189a63474597e 4718296 libssl3-dbgsym_3.0.18-1~deb12u2_mips64el.deb 82c133c08820c80d32ce3ab19992a62c5027f353d63d9372db6f48243dee7e1c 184740 libssl3-udeb_3.0.18-1~deb12u2_mips64el.udeb d621a40926dab6747fcc44b7fddfba408b80b30537ed60a495bf2a8821023c03 1496912 libssl3_3.0.18-1~deb12u2_mips64el.deb 1cb06626949b812626ebe6588651108a1642e00a78593d0b8a57c9a11172d6bc 711420 openssl-dbgsym_3.0.18-1~deb12u2_mips64el.deb 81b1730f1cd9878560e1b54ab64d8a5b7b99ec977feed8748f2bc355680c0e40 7667 openssl_3.0.18-1~deb12u2_mips64el-buildd.buildinfo 84902cab76fc2a52be3f31114b7e2a1f3afcc2ffa73033aa1a66bf84fde177c8 1385424 openssl_3.0.18-1~deb12u2_mips64el.deb Files: 967b5adf4e9d10468f7f5be088f734ce 1037368 debian-installer optional libcrypto3-udeb_3.0.18-1~deb12u2_mips64el.udeb 955caa561dd2bf757254143acefd8cf2 2320176 libdevel optional libssl-dev_3.0.18-1~deb12u2_mips64el.deb b4857bb47d88fcc6f2bafecd8576de9e 4718296 debug optional libssl3-dbgsym_3.0.18-1~deb12u2_mips64el.deb cf5ee62ae23c5ae37cf78a5a79a56081 184740 debian-installer optional libssl3-udeb_3.0.18-1~deb12u2_mips64el.udeb 7514f0fe1e0b9614d37bf3688a979c68 1496912 libs optional libssl3_3.0.18-1~deb12u2_mips64el.deb 2180cfd70856e0b848c8991afbc80502 711420 debug optional openssl-dbgsym_3.0.18-1~deb12u2_mips64el.deb 6223b6333918fc3c2c5d3f46af17022b 7667 utils optional openssl_3.0.18-1~deb12u2_mips64el-buildd.buildinfo 3128ae9c631c321233c1d822b7b9c3b4 1385424 utils optional openssl_3.0.18-1~deb12u2_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYLhEzFkGpb3yYRVHmlVdU6AM9BUFAml0/aMACgkQmlVdU6AM 9BWb5w/+LPcuq3G7AaUAO4u3/q3EWSNPF2aZ6ubD5hUZmlcE5k9/6txrJrXbYuO4 0uS28cckIMotfkrNngEjloDCVsEGuNG0Wk+X1VBp/cVExfTEQjHvc6FHRTgnzhGG QYpzmYOjWoguDOb38j1sPgRhS75SZjVD84pjjX/PLYmDQyrdNad38XRZFm7C6Jf8 oe6F1dyV490AVwZZ8XMceReVoGD03I/71Q6NSlV8zbaPPRs3B8RFAjBlM5X/KtlT e1FM72xoVoN71bC4NkErAWUjVjGCukuz8Fx8JzohIqQdiU8qB/P/OdM2AGy26ujl bIJv7S7X7t6z7prQXvTVm3KpsP3pWSrb+DY9XmPKlx+DMDx1ZMyPcVYbU68UDVZd KLPkqgv4CZPRbRBGkgPe5+BopuZJwfCW8iudk+hzp8DjtgmtjlfmqmBBosqjGa+g BFe9IbnLiFjrDs5Zu/mkEt/niZ3LBLmwICshIC/W1WrVn8hxfdIqD08e+vJx01SL Tv73zZcz3GlLn4h5zjeMmes+3upWTrF43nXTnHSGT9+N7GuxYUJu0bIUEFzBFjrf Wc3C+DueK5I6PqwQ/7mzKYQdmh2GuCYfquaeRDXTy7yly46Wi2SVvmXcReCLVePw efUNqjha8iJiXroOfmkb68FgIrmf7auX/JsKyO1NBN8bG/QKqkw= =ys4r -----END PGP SIGNATURE-----