Packages / Debian 13 (Trixie) / doc / libssl-doc

[Source: openssl]

Package: libssl-doc (3.5.6-1~deb13u2)

Secure Sockets Layer-Toolkit – Entwicklerdokumentation

Download libssl-doc

ArchitecturePackage sizeInstalled sizeFilesPackage
all2.2 MiB8.0 MiBlist of filesDownload

Paketdateipfade (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) main amd64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Debian 13 (Trixie) im Browser testenImage mit libssl-doc bauen

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
3.5.6-1~deb13u2trixie / mainallDebian 13 · main · amd642.1 MiB8.0 MiBpool/main/o/openssl/libssl-doc_3.5.6-1~deb13u2_all.deb
3.5.6-1~deb13u2trixie / mainallDebian 13 · main · arm642.1 MiB8.0 MiBpool/main/o/openssl/libssl-doc_3.5.6-1~deb13u2_all.deb
3.5.7-1~deb13u3trixie-security / mainallDebian 13 security · main · amd642.2 MiB8.0 MiBpool/updates/main/o/openssl/libssl-doc_3.5.7-1~deb13u3_all.deb
3.5.7-1~deb13u2trixie-security / mainallDebian 13 security · main · arm642.1 MiB8.0 MiBpool/updates/main/o/openssl/libssl-doc_3.5.7-1~deb13u2_all.deb
3.5.7-1~deb13u2 (withdrawn)trixie-security / mainallDebian 13 security · main · amd642.1 MiB8.0 MiBpool/updates/main/o/openssl/libssl-doc_3.5.7-1~deb13u2_all.deb
3.5.6-1~deb13u2 (withdrawn)trixie-security / mainallDebian 13 security · main · amd642.1 MiB8.0 MiBpool/updates/main/o/openssl/libssl-doc_3.5.6-1~deb13u2_all.deb

Field source: Debian 13 (Trixie) main amd64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-54873]

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted pac

High(7.5)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-42772]

Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of

Medium(5.3)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-35191]

Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a vi

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-54875]

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to me

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-72897]

Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replace

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-75804]

Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summar

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-84784]

Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary:

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-35189]

Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ce

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-54872]

Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret n

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-75805]

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response.

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-75806]

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-77696]

Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn info

High(8.2)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u3

    nvd · openssl · debian · 13

[CVE-2026-14457]

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference

High(7.5)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

[CVE-2026-18798]

Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically resu

High(7.5)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

[CVE-2026-63073]

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Impact summary: A malicious or intercepted

Critical(9.8)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

[CVE-2026-63074]

Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a se

High(7.5)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

[CVE-2026-63075]

Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadat

High(7.5)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

[CVE-2026-63076]

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted m

Critical(9.1)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

[CVE-2026-54874]

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a s

Critical(9.1)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

[CVE-2026-63072]

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that quer

Critical(9.1)Betroffen
Details (6)

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.6-1~deb13u2 · all · trixie-security · Historical version

    Betroffen · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u2 · all · trixie-security · Historical version

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

  • 3.5.7-1~deb13u3 · all · trixie-security

    Behoben · Behoben: 3.5.7-1~deb13u2

    nvd · openssl · debian · 13

[Weitere Ergebnisse]

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.5.6-1~deb13u2 / allBeobachtet Sep 1, 2026sha256 05a46b1f39b8…31ac0f7dPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 05a46b1f39b8a6d2f97e0d44a5bf875e8cb0060e08d5a1a9c0b030e831ac0f7d

Download prüfen

printf '%s %s\n' '05a46b1f39b8a6d2f97e0d44a5bf875e8cb0060e08d5a1a9c0b030e831ac0f7d' 'libssl-doc_3.5.6-1~deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

3.5.6-1~deb13u2 / allBeobachtet Sep 1, 2026sha256 05a46b1f39b8…31ac0f7dPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 05a46b1f39b8a6d2f97e0d44a5bf875e8cb0060e08d5a1a9c0b030e831ac0f7d

Download prüfen

printf '%s %s\n' '05a46b1f39b8a6d2f97e0d44a5bf875e8cb0060e08d5a1a9c0b030e831ac0f7d' 'libssl-doc_3.5.6-1~deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

3.5.7-1~deb13u3 / allBeobachtet Sep 30, 2026 – Oct 24, 2026sha256 6af0410c2e9c…e2dbf77cPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 6af0410c2e9c74f4830c4eddf16d0e08cdfa0528458d47f35e7cfbbde2dbf77c

Download prüfen

printf '%s %s\n' '6af0410c2e9c74f4830c4eddf16d0e08cdfa0528458d47f35e7cfbbde2dbf77c' 'libssl-doc_3.5.7-1~deb13u3_all.deb' | sha256sum --check --strict -

Field source: Debian Security

3.5.7-1~deb13u2 / allBeobachtet Sep 1, 2026sha256 853c6da8ee6a…bca9734aPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 853c6da8ee6acd8524f2edf108f6cabeb61e78ba517a8a3e0020be7bbca9734a

Download prüfen

printf '%s %s\n' '853c6da8ee6acd8524f2edf108f6cabeb61e78ba517a8a3e0020be7bbca9734a' 'libssl-doc_3.5.7-1~deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) security main arm64

3.5.7-1~deb13u2 / allBeobachtet Aug 25, 2026 – Sep 29, 2026sha256 853c6da8ee6a…bca9734aPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 853c6da8ee6acd8524f2edf108f6cabeb61e78ba517a8a3e0020be7bbca9734a

Download prüfen

printf '%s %s\n' '853c6da8ee6acd8524f2edf108f6cabeb61e78ba517a8a3e0020be7bbca9734a' 'libssl-doc_3.5.7-1~deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian Security

3.5.6-1~deb13u2 / allBeobachtet Aug 10, 2026 – Aug 25, 2026sha256 05a46b1f39b8…31ac0f7dPrüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (sha256): 05a46b1f39b8a6d2f97e0d44a5bf875e8cb0060e08d5a1a9c0b030e831ac0f7d

Download prüfen

printf '%s %s\n' '05a46b1f39b8a6d2f97e0d44a5bf875e8cb0060e08d5a1a9c0b030e831ac0f7d' 'libssl-doc_3.5.6-1~deb13u2_all.deb' | sha256sum --check --strict -

Field source: Debian Security

Quellen

  • Debian 13 (Trixie) main amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Debian 13 (Trixie) main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian 13 (Trixie) security main arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-arm64:a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8

    Repository-signature verification record
    Signed-object SHA-256
    fb4f5284b755510aafc1d8a39ef966c7ef714aaab3ecc24baae0a67c38518ab5
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Observed SHA-256
    a1606cb4e67822be93a6484199cd3ca52e27a8be038314abcac98bbd484c43d8
    Result
    match verified
  • Debian SecurityAug 25, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-amd64:4cce5bce78a03e105750bbfb74f7fa911a1b5191f79abf9f691d74e29fb08193

    Repository-signature verification record
    Signed-object SHA-256
    efe86b60210d36b1303d469da23b8a0daa27e5655ce6692a5c7a85c45ff45b05
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Aug 25, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    4cce5bce78a03e105750bbfb74f7fa911a1b5191f79abf9f691d74e29fb08193
    Observed SHA-256
    4cce5bce78a03e105750bbfb74f7fa911a1b5191f79abf9f691d74e29fb08193
    Result
    match verified
  • Debian SecurityOct 24, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-amd64:80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0

    Repository-signature verification record
    Signed-object SHA-256
    2dc86861c04386d3c511340d4f011a37acfd1cccdf3dbd3e054d6fe8e4118ebc
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 24, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Observed SHA-256
    80abc7ace801ccb58732fe448148850e3078f925942b034fe532c371f804c2a0
    Result
    match verified
  • Debian SecuritySep 29, 2026

    Authoritative source; repository metadata signature verified

    Signaturnachweis

    trixie-security-main-amd64:965b0c4120a72213275a58f1540d3929b326d5e8556875f7f898340442a2a2e4

    Repository-signature verification record
    Signed-object SHA-256
    22d295b91cbdcd5bca0056b5c11203ddef9ad1cdd8fc5f0093ef5b3e2c875172
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 30, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    965b0c4120a72213275a58f1540d3929b326d5e8556875f7f898340442a2a2e4
    Observed SHA-256
    965b0c4120a72213275a58f1540d3929b326d5e8556875f7f898340442a2a2e4
    Result
    match verified