Accepted openssl 3.0.22-1~deb12u2 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 21 Oct 2026 16:54:24 +0700
Source: openssl
Architecture: source
Version: 3.0.22-1~deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@alioth-lists.debian.net>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Changes:
 openssl (3.0.22-1~deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-84782 ("DTLS Retransmits Handshake Messages From a Stale Buffer
     Offset")
   * CVE-2026-35189 ("Memory Allocation in Relative CRLDP Processing")
   * CVE-2026-54872 ("Timing Side-Channel in Scalar Multiplication for Non-NIST
     EC Curves")
   * CVE-2026-75805 ("NULL Pointer Dereference in CMP Client Revocation
     Response Handling")
   * CVE-2026-75806 ("Unauthenticated and Undersized DTLS 1.2 AEAD Record
     Causes DoS")
   * CVE-2026-77696 ("Timing Side-Channel in SM2 Signature Generation")
Checksums-Sha1:
 eb6d0239f546f68a2f309e70f791c93205412ef0 2742 openssl_3.0.22-1~deb12u2.dsc
 35825835dccec008fa886601c3b4d1e52a32544b 15330396 openssl_3.0.22.orig.tar.gz
 51e4e8ce6452a32a2a800cc933befafcec6e7199 931 openssl_3.0.22.orig.tar.gz.asc
 8c2ffdb13c2e8e9e1ac6f740d66def6cba2549e7 72104 openssl_3.0.22-1~deb12u2.debian.tar.xz
 7f68d4ddbdf0a4a7d63799bf1665f122476a7e75 6329 openssl_3.0.22-1~deb12u2_source.buildinfo
Checksums-Sha256:
 7c45299a4363febec120676393d4314841c7c50da244a6e6a256f072d632d337 2742 openssl_3.0.22-1~deb12u2.dsc
 67ebca7e50d17383028045486653492195b83db95f8558709701bb47b5c1ef81 15330396 openssl_3.0.22.orig.tar.gz
 b0cc4a379a7731c3a74c349f6756d85253d83099fd63352cf12407bce4395d19 931 openssl_3.0.22.orig.tar.gz.asc
 48971306c5df8124daea7f2bd0de2be7d711e18f2f53711c11327293732e42aa 72104 openssl_3.0.22-1~deb12u2.debian.tar.xz
 88f33cef5e3ef82d71fcdb288c8f56200c24b5e9958a866b1649f6efdc43e839 6329 openssl_3.0.22-1~deb12u2_source.buildinfo
Files:
 ff3caef5e4f108951e35f7e58932429f 2742 utils optional openssl_3.0.22-1~deb12u2.dsc
 237d4aba7b09da006441f7de92a057d7 15330396 utils optional openssl_3.0.22.orig.tar.gz
 7195ce232f41b846fc3d9ab0b49fc3f1 931 utils optional openssl_3.0.22.orig.tar.gz.asc
 2636dc6539f17a3f589c267f9843cec8 72104 utils optional openssl_3.0.22-1~deb12u2.debian.tar.xz
 c3a41c4ac834e038560812295c0ea70c 6329 utils optional openssl_3.0.22-1~deb12u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=8KL2
-----END PGP SIGNATURE-----