Accepted openssl 3.0.22-1~deb12u1 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 23 Sep 2026 10:52:17 +0700
Source: openssl
Architecture: source
Version: 3.0.22-1~deb12u1
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@alioth-lists.debian.net>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Changes:
 openssl (3.0.22-1~deb12u1) bookworm-security; urgency=medium
 .
   * Non-maintainer upload by the LTS Team
   * Import 3.0.22
   * CVE-2026-42767 ("Fix potential NULL dereference in
     OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert()")
   * CVE-2026-54874 ("Fixed excessive memory use buffering DTLS records for a
     future epoch")
   * CVE-2026-63072 ("Fixed heap buffer overflow in CMS key unwrapping")
   * CVE-2026-63074 ("Fixed CMP indefinite cache growth of extraCerts")
   * CVE-2026-63076 ("Fixed invalid pointer dereference in CMP server via
     crafted protectionAlg")
   * CVE-2026-75803 ("Fixed possibility of AEAD forgeries with empty ciphertext
     when using EVP_Cipher()")
   * Fixed checking of authentication tags for empty ciphertexts for AEAD ciphers
     in CCM cipher mode
Checksums-Sha1:
 5efe5bc7a8ce18afcdcf6f1e7e554a89249b8f4e 2742 openssl_3.0.22-1~deb12u1.dsc
 35825835dccec008fa886601c3b4d1e52a32544b 15330396 openssl_3.0.22.orig.tar.gz
 51e4e8ce6452a32a2a800cc933befafcec6e7199 931 openssl_3.0.22.orig.tar.gz.asc
 f884f096035976115beaea7d3c52d1a9d88cb03d 56848 openssl_3.0.22-1~deb12u1.debian.tar.xz
 ca023d0a7d081b76819fa92f0fad11c4a09edf8f 6042 openssl_3.0.22-1~deb12u1_source.buildinfo
Checksums-Sha256:
 9eb196075ff65fed9512c743d5ccf918b77c3c637f6d518e4be550cf9065c655 2742 openssl_3.0.22-1~deb12u1.dsc
 67ebca7e50d17383028045486653492195b83db95f8558709701bb47b5c1ef81 15330396 openssl_3.0.22.orig.tar.gz
 b0cc4a379a7731c3a74c349f6756d85253d83099fd63352cf12407bce4395d19 931 openssl_3.0.22.orig.tar.gz.asc
 08ee68527218d6d9a0fa4741ec8ffef47646cdcad0ed0822b84bf11677c66108 56848 openssl_3.0.22-1~deb12u1.debian.tar.xz
 eccdd484675910eb62831ec9d0898ea1c0b2e04fd23324c99f8e4d436c933b35 6042 openssl_3.0.22-1~deb12u1_source.buildinfo
Files:
 0c45d7410e7cc52cf550e70edd89b64c 2742 utils optional openssl_3.0.22-1~deb12u1.dsc
 237d4aba7b09da006441f7de92a057d7 15330396 utils optional openssl_3.0.22.orig.tar.gz
 7195ce232f41b846fc3d9ab0b49fc3f1 931 utils optional openssl_3.0.22.orig.tar.gz.asc
 02709b12fac94a6e7d6e4b3d91401b22 56848 utils optional openssl_3.0.22-1~deb12u1.debian.tar.xz
 c5a3d9026d105e5730a2e7fa5a715ef2 6042 utils optional openssl_3.0.22-1~deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=TTq5
-----END PGP SIGNATURE-----