-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 03 Apr 2026 12:05:32 +0200
Source: openssl
Binary: libssl-doc
Architecture: all
Version: 3.5.5-1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
Description:
 libssl-doc - Secure Sockets Layer toolkit - development documentation
Closes: 1130650
Changes:
 openssl (3.5.5-1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2026-2673 ("OpenSSL TLS 1.3 server may choose unexpected key agreement
     group") (Closes: #1130650).
   * CVE-2026-28387 ("Potential use-after-free in DANE client code")
   * CVE-2026-28389 ("Possible NULL dereference when processing CMS
     KeyAgreeRecipientInfo")
   * CVE-2026-28390 ("Possible NULL dereference when processing CMS
     KeyTransportRecipient Info")
   * CVE-2026-31789 ("Heap buffer overflow in hexadecimal conversion")
   * CVE-2026-31790 ("Incorrect failure handling in RSA KEM RSASVE
     encapsulation")
Checksums-Sha1:
 c38c06e887feae9969a23379b94a7d9fdf6d3511 2246292 libssl-doc_3.5.5-1~deb13u2_all.deb
 9ac9af92dd6e307b04fde92c3625ed7ac8feab42 5605 openssl_3.5.5-1~deb13u2_all-buildd.buildinfo
Checksums-Sha256:
 971a11a4dae2e6abb15067aeffa79f55c63319f989bd0c23922feaf71de255f3 2246292 libssl-doc_3.5.5-1~deb13u2_all.deb
 35bfb9d29ac2dc83df1b1274f13e00eaa0727cd794fa09eec9982a4d475b94dc 5605 openssl_3.5.5-1~deb13u2_all-buildd.buildinfo
Files:
 86102ab5fe7ead1b3bbd41013dd092b8 2246292 doc optional libssl-doc_3.5.5-1~deb13u2_all.deb
 02ca6ee88dd02c60ef4f5b9324bdc373 5605 utils optional openssl_3.5.5-1~deb13u2_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=A/Mz
-----END PGP SIGNATURE-----