-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Sep 2025 20:59:22 +0200 Source: openssl Binary: libcrypto3-udeb libssl-dev libssl3 libssl3-dbgsym libssl3-udeb openssl openssl-dbgsym Architecture: i386 Version: 3.0.17-1~deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Sebastian Andrzej Siewior Description: libcrypto3-udeb - Secure Sockets Layer toolkit - libcrypto udeb (udeb) libssl-dev - Secure Sockets Layer toolkit - development files libssl3 - Secure Sockets Layer toolkit - shared libraries libssl3-udeb - ssl shared library - udeb (udeb) openssl - Secure Sockets Layer toolkit - cryptographic utility Changes: openssl (3.0.17-1~deb12u3) bookworm-security; urgency=medium . * CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap) * CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling) Checksums-Sha1: 8f4a8bf11cea3f888bcfb38738221f02269fa23d 1515516 libcrypto3-udeb_3.0.17-1~deb12u3_i386.udeb 57e9c667a7813bfa58e8fa1b0cd899f6689d715a 2502248 libssl-dev_3.0.17-1~deb12u3_i386.deb 5b1d569d279e6b0b2ed14f60774adcf531172071 3678464 libssl3-dbgsym_3.0.17-1~deb12u3_i386.deb 4725a94d825eecf9cf361e50ece208c29ae47981 239188 libssl3-udeb_3.0.17-1~deb12u3_i386.udeb 7a40b98f3dbbab7ab1789f5c4ca2b73f5ba20a59 2032440 libssl3_3.0.17-1~deb12u3_i386.deb 72d23c485660ac9e9d793eb0f0a50b2da5948441 599260 openssl-dbgsym_3.0.17-1~deb12u3_i386.deb 1ba4a6fa63d1cc78a57dc2abf2807c196c770dbf 7723 openssl_3.0.17-1~deb12u3_i386-buildd.buildinfo 97e18ba26f95d4fc13ccd8e7aba28c7b7f39dca3 1438284 openssl_3.0.17-1~deb12u3_i386.deb Checksums-Sha256: 2a5d2564ed3218384e5debddd0ff44a5e761dbeb36428f99d2972da73a8a87af 1515516 libcrypto3-udeb_3.0.17-1~deb12u3_i386.udeb 8278adbcf59bfcbdb6e6220a46a30621c7468cf4b508eb1445409b9d8e6e21b8 2502248 libssl-dev_3.0.17-1~deb12u3_i386.deb 19aba7d2c097e1fbcc0ecdd8caaffcbe86211100e879383b710c6d5501ec8fd0 3678464 libssl3-dbgsym_3.0.17-1~deb12u3_i386.deb 4bc2e695aae7c1fe55cb22ebfb3ac2e4964d0976aaef2fd0eed914a0a66d47de 239188 libssl3-udeb_3.0.17-1~deb12u3_i386.udeb 2aacaa900ed6df88a4f5ef50646cabc9b7fd74bec8ea8a0d01f8980c25a9ca99 2032440 libssl3_3.0.17-1~deb12u3_i386.deb 8e8f44868e2c5a9dbf6bb735f236b4c14e08f4d572c2a07b62f06d3aad8aeb15 599260 openssl-dbgsym_3.0.17-1~deb12u3_i386.deb 2b1a846788a2cbb602a9f8a0d665847627a7cd607aebacc30b003e281b99efbc 7723 openssl_3.0.17-1~deb12u3_i386-buildd.buildinfo 0cfbfb03fdbd424b63779c2ebfe50a945e40ae148fd9c0de9fead27626efa3e9 1438284 openssl_3.0.17-1~deb12u3_i386.deb Files: 111ae0e194085fbc143881565282d6ef 1515516 debian-installer optional libcrypto3-udeb_3.0.17-1~deb12u3_i386.udeb c07288978713e0590e658ccae73363d5 2502248 libdevel optional libssl-dev_3.0.17-1~deb12u3_i386.deb e98cac648246fe187ba1505058b56f9d 3678464 debug optional libssl3-dbgsym_3.0.17-1~deb12u3_i386.deb 17446dff421c7d91cbcb6faa701c7992 239188 debian-installer optional libssl3-udeb_3.0.17-1~deb12u3_i386.udeb e10bcad63ab53c2ea28b23348360a3a7 2032440 libs optional libssl3_3.0.17-1~deb12u3_i386.deb 66531abd6a7386b3c13215b53ea3fa9f 599260 debug optional openssl-dbgsym_3.0.17-1~deb12u3_i386.deb 3bf2164fa62e0a38d56c248d892cdfd4 7723 utils optional openssl_3.0.17-1~deb12u3_i386-buildd.buildinfo e7bb6213d6072203318c4a8bac2f6182 1438284 utils optional openssl_3.0.17-1~deb12u3_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmjW/WMACgkQIy3Pg040 HrD1dxAApKJV5KwDOyX/wj1PhHSlBs0YjRxrWbe6D565zGebUmZ3RUnRwb1lCKzy Gr1EoQyb5BQJd/axEjixa9hYPX6TbHtK9nz2w+3SU7BAnl6vtiK0GyPEGat6YwCW D3ky8ihTgfSy/r8wmZ4Oh3ap3LO7AWehFcPZ73YZuSk1LXkXuVDj+aNcl3OwRM27 50MaSLP7PS8/r+X82sk+gQswJAlW3cIs2thrFb2N0eNv6je+/F2cfam7RMxM9E5/ tb2wfkCXB0vsJDp7LvyWDPSdabQ3l4hgE/JejJwqLl0Fugwj13taKsAi1/DomZ7k GHxilhUDWS4a0Hk/s+J585vi341LxZ0Y2KaIQ0qvNW67CFAurmowAikWgaoyDLer eJrpndhYLXPpr0EbQIBYEe1tXJCZ2NN2vrRh2ZRrBbeo8VKhj23TR+Ax9L070Ods i6EBL1KRnR6OXZmwU7aJ+ahBUhBFrfgzbdeCM8I7cd9gSaC52jhnP5TAWf6lnSYE PuUE9EEbKm5N9W/2HSJBbZbYBZjrdpJTe0tMjCOgrwKOqcq+n5pdJ1Dgg87Yj6fg 0zLNoHlWYYAJN+W4yHoMzhKHr3V12ChjAUNkxSf+pdcgkSJGeyXYVf9llvpmXJ5m /c3pLV6Dpkm4erD2y0tvD726Yab2o6AP0MKsyJwyDZjtz/TEBPY= =ahup -----END PGP SIGNATURE-----