[Pkg-openssl-devel] openssl_3.0.17-1~deb12u3_source.changes ACCEPTED into oldstable-proposed-updates->oldstable-new

[Debian FTP Masters]

Thank you for your contribution to Debian.

Mapping oldstable-security to oldstable-proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 26 Sep 2025 20:59:22 +0200
Source: openssl
Architecture: source
Version: 3.0.17-1~deb12u3
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian OpenSSL Team <pkg-openssl-devel at alioth-lists.debian.net>
Changed-By: Sebastian Andrzej Siewior <sebastian at breakpoint.cc>
Changes:
 openssl (3.0.17-1~deb12u3) bookworm-security; urgency=medium
 .
   * CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap)
   * CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling)
Checksums-Sha1:
 65e729ab9f8fcd5ce11947c26735b9ba74fa895c 2501 openssl_3.0.17-1~deb12u3.dsc
 2e2718ff608eca5c8c56b9343816b6e2fd33fbec 15344831 openssl_3.0.17.orig.tar.gz
 5ea9aa904dcc37418759e305b56f6ffaa4e91283 833 openssl_3.0.17.orig.tar.gz.asc
 26f783772fa5e1a19a6d58e148e8e83d3dda59c4 55920 openssl_3.0.17-1~deb12u3.debian.tar.xz
Checksums-Sha256:
 c154f89cb343b8ecda8a3cc09b8626171282266211b23bc9fef2c6276aab672a 2501 openssl_3.0.17-1~deb12u3.dsc
 dfdd77e4ea1b57ff3a6dbde6b0bdc3f31db5ac99e7fdd4eaf9e1fbb6ec2db8ce 15344831 openssl_3.0.17.orig.tar.gz
 1f2f2c258e4a05affbc8a888accd4a2331a1e6867db6f0178e8bda85aecff62a 833 openssl_3.0.17.orig.tar.gz.asc
 93bdec098a8c7c357b88b0b6608a66b16dcb9b02523f6764c6ee03a85a4352a2 55920 openssl_3.0.17-1~deb12u3.debian.tar.xz
Files:
 d3aff0ca53c3e424c095d874354a083d 2501 utils optional openssl_3.0.17-1~deb12u3.dsc
 29da5f1858afbce0077ba54f20aa9b7d 15344831 utils optional openssl_3.0.17.orig.tar.gz
 afdc7fd9d56de353ce8f6c5a96a89144 833 utils optional openssl_3.0.17.orig.tar.gz.asc
 7e08eb810f7375e8839b2f88bf02120e 55920 utils optional openssl_3.0.17-1~deb12u3.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=XD57
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openssl-devel/attachments/20251001/23e56e5c/attachment.sig>