-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Sep 2025 20:59:22 +0200 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: armel Version: 3.0.17-1~deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.0.17-1~deb12u3) bookworm-security; urgency=medium . * CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap) * CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling) Checksums-Sha1: e9a7fb9e9edbac322920258242e52b2df742198e 1181288 libcrypto3-udeb_3.0.17-1~deb12u3_armel.udeb 9d563bbccd89cecf6a621d31e30ccf463993c9d2 2116524 libssl-dev_3.0.17-1~deb12u3_armel.deb 69a361a583e7112b75ddf9976677344c24367137 4378720 libssl3-dbgsym_3.0.17-1~deb12u3_armel.deb ee6c1869f7b289afa79ada87088b5ac47d5ed70e 186836 libssl3-udeb_3.0.17-1~deb12u3_armel.udeb 1a3e4500242e980a618c04f120e73c720370514f 1636632 libssl3_3.0.17-1~deb12u3_armel.deb c0ddf54bd7ae22ab50442bed03304fd9dbd480d1 650072 openssl-dbgsym_3.0.17-1~deb12u3_armel.deb f45f08868ba9139068abdb6fd901831d86871ddf 7655 openssl_3.0.17-1~deb12u3_armel-buildd.buildinfo 4e8c4a1609fb1baf52a69c57919c045556a78c49 1394160 openssl_3.0.17-1~deb12u3_armel.deb Checksums-Sha256: d1e543aac0e2120de33e54a595824804be19b68a231359bc0d38e86e90c3ad52 1181288 libcrypto3-udeb_3.0.17-1~deb12u3_armel.udeb 5ce8f777195cbc49cd2c014a275124aba843af0f40f0cade421160ad6ed6b553 2116524 libssl-dev_3.0.17-1~deb12u3_armel.deb 9e641af3c81be48138c41aeb5a6c7336b13b5b7baedc02a928850e52830ddaee 4378720 libssl3-dbgsym_3.0.17-1~deb12u3_armel.deb 26c99e3995d57633b4bc9ccae62f9f8d913381f18da43a86b053e1d7a08dd4db 186836 libssl3-udeb_3.0.17-1~deb12u3_armel.udeb 3c38517a8e30a1360a17bc842d76bebd64fedeeff452c97bba138ac12df97592 1636632 libssl3_3.0.17-1~deb12u3_armel.deb 3e09c589dcf2d5bba2a37866cb6802a1545ad5dd630f5c85443ca094a5fadf7f 650072 openssl-dbgsym_3.0.17-1~deb12u3_armel.deb 889c89f9d72cb8541de76e4bf1dc5e78d8e9b7eae59e1a778e6dd93ce233acac 7655 openssl_3.0.17-1~deb12u3_armel-buildd.buildinfo 21150a79c16b5e3f4a010d399d35404efbc15609c430bc3d24ddc1237f8400d5 1394160 openssl_3.0.17-1~deb12u3_armel.deb Files: 590ecbfdccfe824fc9df68ec02d1ae0e 1181288 debian-installer optional libcrypto3-udeb_3.0.17-1~deb12u3_armel.udeb 8191d81e4b6c33444b6aa044f2f1e5c5 2116524 libdevel optional libssl-dev_3.0.17-1~deb12u3_armel.deb 76b089096c39726cc90ba6b42a27e915 4378720 debug optional libssl3-dbgsym_3.0.17-1~deb12u3_armel.deb a2d7d7e59f317e3496539e9976b57b9a 186836 debian-installer optional libssl3-udeb_3.0.17-1~deb12u3_armel.udeb 13da151a0b609f443937e8297ea4afc2 1636632 libs optional libssl3_3.0.17-1~deb12u3_armel.deb fe16d18dd7eb77b49c8f2b65e33a8099 650072 debug optional openssl-dbgsym_3.0.17-1~deb12u3_armel.deb 965beaf94ce5d1526b28c7f49978f762 7655 utils optional openssl_3.0.17-1~deb12u3_armel-buildd.buildinfo a44375e6235ede6fd8577677446a4c2a 1394160 utils optional openssl_3.0.17-1~deb12u3_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmjXCWgACgkQVLd4YzMS DKEiew//WGaDnzlpEe6dcVkFwc4dSpqS+Oef54qbJQ/hP68GNE35ZaNoLXwDQYcH tJ9UNIg9MUA9cn2W5vqVj4UI4POycA9K546EEA9JzYKzy/9/PtCr8Xi1ZhIhUVZ5 SwSM/i8I6DyyrlPRbuvuQXE/Fl5Dm5H2fD5UiX9tBWUKkblXJHfjQ6UNrTUpIU5V yltrKiYUiimtMSrPcs953/SBrVkb47+iyFojRpUSIXcAXszPS4oF+w2zwqDcTkDP BDp5MriDZmag9GOm2CrdpdptIbrcSB81ZM0pWCVLPHQP7G8z7ZthFocUmeAvk47b lAcX1/EOXzl8Xf7/wOWwlgOd8PUAWF1sKzKcHTe8HTtsBjMuuw6eAJFsWjE0cjLj ypsuamwelcWJN2vG4pJG+s+ei4ri8LvffVoNS5gFlqlZLr28b6uNjC54tYbowJ7u Gb56K67uvDOtflXTLO7nQJn5isTyPZJ08Jj1YXmbHNUUVYTCzniqM+kjV/PmPvza R+nnjtLmyHQwyWZCo9uiegRgG7cQ53oj4VUv6ARM1msOeGsTTV+POWvTk6vwB677 9EBZnHqGLhA4fJsld2J0kSM57r25475Tip2QzBPA0tY36HYMxGRCkhknTZ+hcfSS Fn1iOwFIkRJ0/c2zJ74WuObYlHbWTvKqI4q7aaSgs4jTRFmd28Q= =wr67 -----END PGP SIGNATURE-----