-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Sep 2025 20:59:22 +0200 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: arm64 Version: 3.0.17-1~deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.0.17-1~deb12u3) bookworm-security; urgency=medium . * CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap) * CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling) Checksums-Sha1: da4d9020c46919160183fdbc281982a70ca8ef81 1339816 libcrypto3-udeb_3.0.17-1~deb12u3_arm64.udeb 33526fdbbe42cc321ffc55f45b08923fc3a4b87c 2310628 libssl-dev_3.0.17-1~deb12u3_arm64.deb 683f4f5b4c6d965e2306a6ba6f92997e1a42adf5 4510640 libssl3-dbgsym_3.0.17-1~deb12u3_arm64.deb 20d951dd1ce2df6e6a177e256b4342c02d8a116b 202052 libssl3-udeb_3.0.17-1~deb12u3_arm64.udeb 293e0c5f4b83bf7e782012c20e5970d79da53528 1816632 libssl3_3.0.17-1~deb12u3_arm64.deb 98fd731cb31c8886c0aef883e720fc27091c8eac 685708 openssl-dbgsym_3.0.17-1~deb12u3_arm64.deb b908468100883e96e0aa8cb4b9a10e13321ed494 7813 openssl_3.0.17-1~deb12u3_arm64-buildd.buildinfo 68fe5b3288ac0d6c666daffb28f0bc1a9960267b 1399940 openssl_3.0.17-1~deb12u3_arm64.deb Checksums-Sha256: d464cab64de427fd91b21469a3af11bbc88d762a8165d262359181c8a2fc7a77 1339816 libcrypto3-udeb_3.0.17-1~deb12u3_arm64.udeb d9102f287ea27f363cfa8d3225ef39f9b1154a2cac2a6787198315012fd88dc9 2310628 libssl-dev_3.0.17-1~deb12u3_arm64.deb 7d6ed841baead2e60c8cab954b6860c386f8fc7207987dab48cef098bde327d8 4510640 libssl3-dbgsym_3.0.17-1~deb12u3_arm64.deb e0035662ca23c08b49162a882b8aca607e7d7caee598c6425d04f7ec0c05114e 202052 libssl3-udeb_3.0.17-1~deb12u3_arm64.udeb 35db1cc7b00b71689fd323eb37420a8fef3d2000e82d65ff959564fc27a5d2fc 1816632 libssl3_3.0.17-1~deb12u3_arm64.deb 7eb339d8a97226d92cc5f20929187b47343021c2e7e89e8f37bd5edb40207e14 685708 openssl-dbgsym_3.0.17-1~deb12u3_arm64.deb ffe7165e4615789e09b96309b06a2f8eab79a744713f34f5234aa470f55439ae 7813 openssl_3.0.17-1~deb12u3_arm64-buildd.buildinfo 50026b5be10f609e9c607aa94465bbb8753a12e4a20f5b2b7e90450893df6490 1399940 openssl_3.0.17-1~deb12u3_arm64.deb Files: 66a66e836ba67618d23591cebfcc7632 1339816 debian-installer optional libcrypto3-udeb_3.0.17-1~deb12u3_arm64.udeb 6e3ca4edc3903707af6636b9db0d5c2c 2310628 libdevel optional libssl-dev_3.0.17-1~deb12u3_arm64.deb cd55777e149d6e17f1ebf8bbeefdcc53 4510640 debug optional libssl3-dbgsym_3.0.17-1~deb12u3_arm64.deb 4c4e7e902346603df0d108eb7d7cf2ec 202052 debian-installer optional libssl3-udeb_3.0.17-1~deb12u3_arm64.udeb e93d4e7dff5dbc29ea635f49f2b3d578 1816632 libs optional libssl3_3.0.17-1~deb12u3_arm64.deb 6d6f6af074a0731a160f777a11701dbb 685708 debug optional openssl-dbgsym_3.0.17-1~deb12u3_arm64.deb a512664c470579c391eae39d9bfd2eb0 7813 utils optional openssl_3.0.17-1~deb12u3_arm64-buildd.buildinfo 5b4f391da5b7dc12f817b33e801c2ba8 1399940 utils optional openssl_3.0.17-1~deb12u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVM4SKBZumztS8zr3lST9Us03ywsFAmjW+wYACgkQlST9Us03 ywvtOg//SdhYaRYtBPe2r1Ruh3Pe6DBLbFajUGQEfPwCeXDZRGqHRMwBGfVC3x7y VFUFaX9CPupDg7VKzYkqmBgUeR6itfED59kXqmEHAodZIoM/+rH7qCUfrUdKD765 TDM8lPXIfs+LIqqojygyyPF5qp9tA0+8hJgcZeKx7lArv8DabtJx84/amoT/Di0e 9Cq8nVDluAPyvpxeJFTpM7V0j/6ReS/Uzyw0sdfvONP0D6DutPVPqC9pR8yGG2oF BZxAY90mi8ocpRCQQxmonvTCleurbxVWCKD34q+gB9FTsVAzY5tymWZlIA3MQ5Cw Z2OK6Y15cn053bpIcd7TAYuydwPf9/95CX4937nRMcH4sVe3GTHf695rwd3R08Ex KF0i6etwo8pMDi+K6zqeB6q5pRyVxfSiSTX237Pid1/HlVLirS8PYti54jWGl87b qGfvrYbohDE8X9+Bt2t27o9VujmWUj1w/JVO4tawNhGNZ0qUr7ElVBtW59D/7XTx T6jz01FnCY8MrEtNnOju0/EE/CWQIADdV6ivcjaPf1Nq9RucpsTLatVIV0kgl/1f Vxc4dQIbY8lfgCwFdSzETIzG0ZaJ8X2MMNX5bpUBZpd8ociafYt+V0Z9FVvzBhcG LsdgxLK1p/sL3Y0CYDcXSPrJbI1tkowU4VdarAiZp1maLs8Iit0= =cTsa -----END PGP SIGNATURE-----