CVE-Katalog
CVE-2026-2673
OpenSSL vulnerabilities
- Schweregrad
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.51% · Oct 22, 2026
Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT' keyword. Impact summary: A less preferred key exchange may be used even when a more preferred group is supported by both client and server, if the group was not included among the client's initial predicated keyshares. This will sometimes be the case with the new hybrid post-quantum groups, if the client chooses to defer their use until specifically requested by the server. If an OpenSSL TLS 1.3 server's configuration uses the 'DEFAULT' keyword to interpolate the built-in default group list into its own configuration, perhaps adding or removing specific elements, then an implementation defect causes the 'DEFAULT' list to lose its 'tuple' structure, and all server-supported groups were treated as a single sufficiently secure 'tuple', with the server not sending a Hello Retry Request (HRR) even when a group in a more preferred tuple was mutually supported. As a result, the client and server might fail to negotiate a mutually supported post-quantum key agreement group, such as 'X25519MLKEM768', if the client's configuration results in only 'classical' groups (such as 'X25519' being the only ones in the client's initial keyshare prediction). OpenSSL 3.5 and later support a new syntax for selecting the most preferred TLS 1.3 key agreement group on TLS servers. The old syntax had a single 'flat' list of groups, and treated all the supported groups as sufficiently secure. If any of the keyshares predicted by the client were supported by the server the most preferred among these was selected, even if other groups supported by the client, but not included in the list of predicted keyshares would have been more preferred, if included. The new syntax partitions the groups into distinct 'tuples' of roughly equivalent security. Within each tuple the most preferred group included among the client's predicted keyshares is chosen, but if the client supports a group from a more preferred tuple, but did not predict any corresponding keyshares, the server will ask the client to retry the ClientHello (by issuing a Hello Retry Request or HRR) with the most preferred mutually supported group. The above works as expected when the server's configuration uses the built-in default group list, or explicitly defines its own list by directly defining the various desired groups and group 'tuples'. No OpenSSL FIPS modules are affected by this issue, the code in question lies outside the FIPS boundary. OpenSSL 3.6 and 3.5 are vulnerable to this issue. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.2 once it is released. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.6 once it is released. OpenSSL 3.4, 3.3, 3.0, 1.0.2 and 1.1.1 are not affected by this issue.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | not affected |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u1 | not affected |
| Ubuntu | openssl | noble | 3.0.13-0ubuntu3.9 | fixed |
| Ubuntu | libssl-dev | noble | 3.0.13-0ubuntu3.9 | fixed |
| Ubuntu | libssl-doc | noble | 3.0.13-0ubuntu3.9 | fixed |
| Ubuntu | libssl3t64 | noble | 3.0.13-0ubuntu3.9 | fixed |
| Ubuntu | openssl | noble | Not reported | not affected |
| Alpine | openssl | 3.22 | 3.5.6-r0 | fixed |
| Alpine | openssl | 3.23 | 3.5.6-r0 | fixed |
| Alpine | openssl | 3.24 | 3.5.6-r0 | fixed |
| Suse | openssl-3 | linux enterprise server 16.0 | 3.5.0-160000.8.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 16.0 | 3.5.0-160000.8.1 | fixed |
| Opensuse | openssl-3 | leap 16.0 | 3.5.0-160000.8.1 | fixed |
| Suse | openssl-3 | linux micro 6.2 | 3.5.0-160000.8.1 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.9 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.10 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.12 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.13 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.14 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.15 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.16 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.17 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.18 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.19 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.20 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.21 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.23 | fixed |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.5 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.6 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.7 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.9 | fixed |
| Ubuntu | openssl | 25.10 | 3.4.1-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.0-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.2-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu3.3 | fixed |
| Opensuse | openssl-3 | leap 16.0 | 3.5.0-160000.7.1 | fixed |
| Suse | openssl-3 | linux enterprise server 16.0 | 3.5.0-160000.7.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 16.0 | 3.5.0-160000.7.1 | fixed |
| Suse | openssl-3 | linux micro 6.2 | 3.5.0-160000.7.1 | fixed |
| Opensuse | openssl-3 | tumbleweed | 3.5.3-4.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.6.2-1 | not yet assigned | Not reported | [1130650] |
| Debian | openssl | source | forky | 3.6.2-1 | not yet assigned | Not reported | [1130650] |
| Debian | openssl | source | trixie | 3.5.5-1~deb13u2 | not yet assigned | Not reported | [1130650] |
| Debian | openssl | source | bookworm | Not affected | unimportant | Not reported | [1130650] |
| Ubuntu | openssl | deb | noble | 3.0.13-0ubuntu3.9 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-dev | deb | noble | 3.0.13-0ubuntu3.9 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-doc | deb | noble | 3.0.13-0ubuntu3.9 | Not reported | Not reported | Not reported |
| Ubuntu | libssl3t64 | deb | noble | 3.0.13-0ubuntu3.9 | Not reported | Not reported | Not reported |
| Alpine | openssl | apk | 3.22 | 3.5.6-r0 | Not reported | ALPINE-CVE-2026-2673 | Not reported |
| Alpine | openssl | apk | 3.23 | 3.5.6-r0 | Not reported | ALPINE-CVE-2026-2673 | Not reported |
| Alpine | openssl | apk | 3.24 | 3.5.6-r0 | Not reported | ALPINE-CVE-2026-2673 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 16.0 | 3.5.0-160000.8.1 | Not reported | SUSE-SU-2026:22315-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 16.0 | 3.5.0-160000.8.1 | Not reported | SUSE-SU-2026:22315-1 | Not reported |
| Opensuse | openssl-3 | rpm | leap 16.0 | 3.5.0-160000.8.1 | Not reported | OPENSUSE-SU-2026:21005-1 | Not reported |
| Suse | openssl-3 | rpm | linux micro 6.2 | 3.5.0-160000.8.1 | Not reported | SUSE-SU-2026:22251-1 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.23 | Not reported | USN-8155-1 | Not reported |
| Ubuntu | openssl | deb | 24.04 | 3.0.13-0ubuntu3.9 | Not reported | USN-8155-1 | Not reported |
| Ubuntu | openssl | deb | 25.10 | 3.5.3-1ubuntu3.3 | Not reported | USN-8155-1 | Not reported |
| Opensuse | openssl-3 | rpm | leap 16.0 | 3.5.0-160000.7.1 | Not reported | OPENSUSE-SU-2026:20525-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 16.0 | 3.5.0-160000.7.1 | Not reported | SUSE-SU-2026:21186-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 16.0 | 3.5.0-160000.7.1 | Not reported | SUSE-SU-2026:21186-1 | Not reported |
| Suse | openssl-3 | rpm | linux micro 6.2 | 3.5.0-160000.7.1 | Not reported | SUSE-SU-2026:21107-1 | Not reported |
| Opensuse | openssl-3 | rpm | tumbleweed | 3.5.3-4.1 | Not reported | OPENSUSE-SU-2026:10533-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [libopenssl3]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl3-32bit]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-devel]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-devel-32bit]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider-32bit]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider-x86-64-v3]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl3-x86-64-v3]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [openssl-3-doc]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· noarch · tumbleweedUnbekannt · Behoben:
3.5.3-4.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [openssl-3]Behoben
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedBehoben · Behoben:
3.5.3-4.1usn · openssl-3 · opensuse · tumbleweed
[Debian 12 (Bookworm)]
- [libssl3]Nicht betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
- [libssl-dev]Nicht betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
- [libssl-doc]Nicht betroffen
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
- [openssl]Nicht betroffen
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
[Debian 13 (Trixie)]
- [libssl3t64]Behoben
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
- [libssl-dev]Behoben
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
- [libssl-doc]Behoben
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· all · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· all · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· all · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· all · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
- [openssl]Behoben
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
- [openssl-provider-fips]Behoben
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
- [openssl-provider-legacy]Behoben
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.5-1~deb13u2usn · openssl · debian · 13
Beobachtet:
Referenzen
- [https://access.redhat.com/errata/RHSA-2026:19066]
- [https://cert-portal.siemens.com/productcert/csaf/ssa-032379.json]
- [https://ftp.suse.com/pub/projects/security/]
- [https://osv.dev/vulnerability/ALPINE-CVE-2026-2673]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-2673]
- [https://osv.dev/vulnerability/SUSE-SU-2026:21107-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:21186-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22251-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22315-1]
- [https://osv.dev/vulnerability/USN-8155-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10533-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:20525-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21005-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-2673]
- [https://ubuntu.com/security/notices/USN-8155-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0729.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]