CVE catalog

CVE-2026-22795

OpenSSL vulnerabilities

Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.

Severity: Medium · CVSS 6.2CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published: Apr 9, 2024, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.18% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence

Original provider fields

{
  "package_releases": [
    {
      "name": "openssl",
      "status": "fixed",
      "release": "sid",
      "version": "3.6.5-1"
    },
    {
      "name": "openssl",
      "status": "fixed",
      "release": "forky",
      "version": "3.6.5-1"
    },
    {
      "name": "openssl",
      "status": "fixed",
      "release": "trixie",
      "version": "3.5.7-1~deb13u2"
    },
    {
      "name": "openssl",
      "status": "fixed",
      "release": "trixie-security",
      "version": "3.5.7-1~deb13u3"
    },
    {
      "name": "openssl",
      "status": "fixed",
      "release": "bookworm",
      "version": "3.0.20-1~deb12u2"
    },
    {
      "name": "openssl",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "3.0.22-1~deb12u2"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "openssl",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "3.5.5-1"
    },
    {
      "bug": null,
      "name": "openssl",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "3.5.5-1"
    },
    {
      "bug": null,
      "name": "openssl",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "3.5.4-1~deb13u2"
    },
    {
      "bug": null,
      "name": "openssl",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "3.0.18-1~deb12u2"
    }
  ],
  "distribution_packages": [
    {
      "name": "openssl",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.0.18-1~deb12u2"
    },
    {
      "name": "openssl",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.0.13-0ubuntu3.7"
    },
    {
      "name": "libssl-dev",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.0.13-0ubuntu3.7"
    },
    {
      "name": "libssl-doc",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.0.13-0ubuntu3.7"
    },
    {
      "name": "libssl3t64",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.0.13-0ubuntu3.7"
    },
    {
      "name": "openssl",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.1.1"
            },
            {
              "fixed": "3.0.19-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.0.19-r0",
      "provider_record_id": "ALPINE-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.1.1"
            },
            {
              "fixed": "3.3.6-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.3.6-r0",
      "provider_record_id": "ALPINE-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.1.1"
            },
            {
              "fixed": "3.3.6-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.3.6-r0",
      "provider_record_id": "ALPINE-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.1.1"
            },
            {
              "fixed": "3.5.5-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.5.5-r0",
      "provider_record_id": "ALPINE-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.1.1"
            },
            {
              "fixed": "3.5.5-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.5.5-r0",
      "provider_record_id": "ALPINE-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "1.1.1"
            },
            {
              "fixed": "3.5.5-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.5.5-r0",
      "provider_record_id": "ALPINE-CVE-2026-22795"
    },
    {
      "name": "nodejs",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "12.22.5~dfsg-5ubuntu1",
        "12.22.7~dfsg-2ubuntu1",
        "12.22.7~dfsg-2ubuntu3",
        "12.22.9~dfsg-1ubuntu2",
        "12.22.9~dfsg-1ubuntu3",
        "12.22.9~dfsg-1ubuntu3.1",
        "12.22.9~dfsg-1ubuntu3.2",
        "12.22.9~dfsg-1ubuntu3.3",
        "12.22.9~dfsg-1ubuntu3.4",
        "12.22.9~dfsg-1ubuntu3.5",
        "12.22.9~dfsg-1ubuntu3.6",
        "12.22.9~dfsg-1ubuntu3.6+esm2"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.2-0ubuntu1.21+Fips1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.0.2-0ubuntu1.10+Fips1",
        "3.0.2-0ubuntu1.12+Fips1",
        "3.0.2-0ubuntu1.14+Fips1",
        "3.0.2-0ubuntu1.15+Fips1",
        "3.0.2-0ubuntu1.16+Fips1",
        "3.0.2-0ubuntu1.17+Fips1",
        "3.0.2-0ubuntu1.18+Fips1",
        "3.0.2-0ubuntu1.19+Fips1",
        "3.0.2-0ubuntu1.20+Fips1"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.0.2-0ubuntu1.21+Fips1",
      "provider_record_id": "UBUNTU-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.2-0ubuntu1.21"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1.1.1l-1ubuntu1",
        "3.0.0-1ubuntu1",
        "3.0.1-0ubuntu1",
        "3.0.2-0ubuntu1",
        "3.0.2-0ubuntu1.1",
        "3.0.2-0ubuntu1.2",
        "3.0.2-0ubuntu1.4",
        "3.0.2-0ubuntu1.5",
        "3.0.2-0ubuntu1.6",
        "3.0.2-0ubuntu1.7",
        "3.0.2-0ubuntu1.8",
        "3.0.2-0ubuntu1.9",
        "3.0.2-0ubuntu1.10",
        "3.0.2-0ubuntu1.12",
        "3.0.2-0ubuntu1.13",
        "3.0.2-0ubuntu1.14",
        "3.0.2-0ubuntu1.15",
        "3.0.2-0ubuntu1.16",
        "3.0.2-0ubuntu1.17",
        "3.0.2-0ubuntu1.18",
        "3.0.2-0ubuntu1.19",
        "3.0.2-0ubuntu1.20"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.0.2-0ubuntu1.21",
      "provider_record_id": "UBUNTU-CVE-2026-22795"
    },
    {
      "name": "openssl-fips",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.13-0ubuntu3.12+Fips1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.0.13-0ubuntu3+Fips1",
        "3.0.13-0ubuntu3.6+Fips1"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.0.13-0ubuntu3.12+Fips1",
      "provider_record_id": "UBUNTU-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.13-0ubuntu3.7"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "3.0.10-1ubuntu2",
        "3.0.10-1ubuntu2.1",
        "3.0.10-1ubuntu3",
        "3.0.10-1ubuntu4",
        "3.0.13-0ubuntu2",
        "3.0.13-0ubuntu3",
        "3.0.13-0ubuntu3.1",
        "3.0.13-0ubuntu3.2",
        "3.0.13-0ubuntu3.3",
        "3.0.13-0ubuntu3.4",
        "3.0.13-0ubuntu3.5",
        "3.0.13-0ubuntu3.6"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.0.13-0ubuntu3.7",
      "provider_record_id": "UBUNTU-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.5.3-1ubuntu3"
            }
          ]
        }
      ],
      "release": "25.10",
      "versions": [
        "3.4.1-1ubuntu3",
        "3.5.0-2ubuntu1",
        "3.5.2-1ubuntu1",
        "3.5.3-1ubuntu2"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.5.3-1ubuntu3",
      "provider_record_id": "UBUNTU-CVE-2026-22795"
    },
    {
      "name": "openssl",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.5.5-1ubuntu1"
            }
          ]
        }
      ],
      "release": "26.04",
      "versions": [
        "3.5.3-1ubuntu2"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.5.5-1ubuntu1",
      "provider_record_id": "UBUNTU-CVE-2026-22795"
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libssl3]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Affected · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Affected · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
[libssl-dev]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Affected · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Affected · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
[libssl-doc]Unknown
Source package: [openssl]
Details (6)
- 3.0.20-1~deb12u2 · all · bookworm
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm-security
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · all · bookworm-security
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Affected · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.17-1~deb12u2 · all · bookworm-updates
  Affected · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
[openssl]Unknown
Details (6)
- 3.0.20-1~deb12u2 · amd64 · bookworm
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.20-1~deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.17-1~deb12u2 · amd64 · bookworm-updates
  Affected · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12
- 3.0.17-1~deb12u2 · arm64 · bookworm-updates
  Affected · Fixed: 3.0.18-1~deb12u2
  usn · openssl · debian · bookworm; usn · openssl · debian · 12

[Debian 13 (Trixie)]

[libssl3t64]Unknown
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
[libssl-dev]Unknown
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
[libssl-doc]Unknown
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · all · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · all · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · all · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · all · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
[openssl]Unknown
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
[openssl-provider-fips]Unknown
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
[openssl-provider-legacy]Unknown
Source package: [openssl]
Details (6)
- 3.5.6-1~deb13u2 · amd64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · arm64 · trixie
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u2 · arm64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13
- 3.5.7-1~deb13u3 · amd64 · trixie-security
  Fixed · Fixed: 3.5.4-1~deb13u2
  usn · openssl · debian · 13

Observed: Oct 28, 2026, 5:35:28 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]