-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Sep 2025 20:59:22 +0200 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: armhf Version: 3.0.17-1~deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.0.17-1~deb12u3) bookworm-security; urgency=medium . * CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap) * CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling) Checksums-Sha1: 610334a40695f7a6d41ff2a9f20426e36f484412 1213008 libcrypto3-udeb_3.0.17-1~deb12u3_armhf.udeb e759615a71e4a51c6a8dcc5204d7ebc9f11ed2df 2145108 libssl-dev_3.0.17-1~deb12u3_armhf.deb fe857a732ceae192cd8ed938843825e45e8b7822 4475052 libssl3-dbgsym_3.0.17-1~deb12u3_armhf.deb 652e66d79233f0cd0665e751479d564b4b6ec3d7 186528 libssl3-udeb_3.0.17-1~deb12u3_armhf.udeb 85fdc352f09f6e08b9664f6a63ffb91fa842153c 1672440 libssl3_3.0.17-1~deb12u3_armhf.deb 43ea138d21c2cddb6f9e28ed37c2bac6923e5e00 661364 openssl-dbgsym_3.0.17-1~deb12u3_armhf.deb 9d4e7b96027bd95457eede5689707be460dde381 7657 openssl_3.0.17-1~deb12u3_armhf-buildd.buildinfo 74f4f52fab889b728cd11f9af922546a1462babf 1400140 openssl_3.0.17-1~deb12u3_armhf.deb Checksums-Sha256: 53c0299c202a1394cfead1cd18741352549dab5822cb03f43165aa5cb1a46be4 1213008 libcrypto3-udeb_3.0.17-1~deb12u3_armhf.udeb 9336ede3c7783e9f2bb2806497a3e179a84f94f3ab1eb8ca4d1e3769a8f95075 2145108 libssl-dev_3.0.17-1~deb12u3_armhf.deb dc25bcade6eb23b486a5f20895cdfa6f5d796723ba2bed2d782f969341f9e723 4475052 libssl3-dbgsym_3.0.17-1~deb12u3_armhf.deb 860a1c17703104fd40e4db7fa00b6e7449ff7aef6ca96739f65b2af52312fc1d 186528 libssl3-udeb_3.0.17-1~deb12u3_armhf.udeb 28972af379740a92a8bd4947e0c69e1d34a35a6045e7c89135fe3f941351ee54 1672440 libssl3_3.0.17-1~deb12u3_armhf.deb 22ba54038348a6dd098c48148c222869f06d967cfc9bb61959d9460a5b9a2d2b 661364 openssl-dbgsym_3.0.17-1~deb12u3_armhf.deb 06a729399acec68a1c4a00e01d21f3f0621be55d0c80d24c3775343a246f8ff1 7657 openssl_3.0.17-1~deb12u3_armhf-buildd.buildinfo acc4e9de8a98aebdcad8e23abd82f7bc4717997ba1774bdbaa46ddd23255c38e 1400140 openssl_3.0.17-1~deb12u3_armhf.deb Files: 107f622f1ac5f654fa2b0e95949754de 1213008 debian-installer optional libcrypto3-udeb_3.0.17-1~deb12u3_armhf.udeb 47297717c95848fb14ec8971b972462b 2145108 libdevel optional libssl-dev_3.0.17-1~deb12u3_armhf.deb ceaf1561ee7ec0f58d8355721d5ffbb8 4475052 debug optional libssl3-dbgsym_3.0.17-1~deb12u3_armhf.deb 344a31e23faa6ebbdb80a4d20af99e2e 186528 debian-installer optional libssl3-udeb_3.0.17-1~deb12u3_armhf.udeb edd5894295dd716ac462dd2761406c8a 1672440 libs optional libssl3_3.0.17-1~deb12u3_armhf.deb 2413ee6fb890dc09d6ccf9a73be7e3c1 661364 debug optional openssl-dbgsym_3.0.17-1~deb12u3_armhf.deb b3c97f9a8484ab1cf235f686b57418f8 7657 utils optional openssl_3.0.17-1~deb12u3_armhf-buildd.buildinfo 426844ad14b9993b41760b11930e4d88 1400140 utils optional openssl_3.0.17-1~deb12u3_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmjW+6oACgkQScpU3dYu lLhF+w/8DmY1bsmtfjlXhrB+cTCziP9AciK8pXuaFlFUyzcOU6rIOILV1RBFqVQB 8aekt1FugU+XQDa2Y57fkRY0nVoXHg6kBfqzf66sUICNbHssjsL+44Scy/eK7VMc HxB2lWkb0eOfaG7iaWGjwFQ9MEClLB6BXfavCvnYMXkkCMRVeWCA/guhfexVnXgi EfnV9NkJ5Gf/ZK4YbtZkkq2iwkJ1RtINZQIvA0/RZnX7uT2k3yju0Nwv8R+AMyRe xRgvldiiukx40GzuFuRSSHE4BYCK3e3m0R2hvTM6WHnZ95Y5y0km63dgbYi+bqCt McgBaUiFp9nVzxdDuZv5sQSn33GLfKTJ28wS8B6vKw8ekvBn9VoHlIh45nbk1SWR C0/8H5JlUHozvealqqsywewBIIff7mwhwNnUuEl/5LC+ZYXV/A/3RvgecIiKRaDk cT2MtvszSyHvSebngqGLcgs5ec3NL2iEANvmbWDRHYQ9Cm2J7uzBtZNmnOCt2P1v mSAsMuwCGV+12JVXDUSIV3TEFO0uoiKoCg9PU4gjWIvyjWxc8uxlF2llPo7VQuVv Pbb1UrbkyCv5M4X0b7DH8aKu212DwisPb7ScxdD2gueOCrzBN5WKx0ctW5wg3xiZ Zt7V3gRTSLvgOT0n7L6qhpCkN3ieVZsEVBgEd81FyD7Ryj7ZEaY= =Dftd -----END PGP SIGNATURE-----