Packages / Debian 12 (Bookworm) / utils / openssl

Package: openssl (3.0.20-1~deb12u2)

Toolkit Secure Sockets Layer - utilità crittografica

Other Packages Related to openssl:

dep: [libc6] (>= 2.34)
GNU C Library: Shared libraries
dep: [libssl3] (>= 3.0.9)
toolkit Secure Sockets Layer - librerie condivise

sug: [ca-certificates]
Common CA certificates

Download openssl

Architecture	Package size	Installed size	Files	Package
amd64	1.4 MiB	2.3 MiB	list of files	Download
arm64	1.3 MiB	2.3 MiB	list of files	Download

Percorsi file del pacchetto (301)

Showing the first 250 sorted package-associated paths. Use file search to locate a specific path.

/etc/ssl/openssl.cnf
/usr/bin/c_rehash
/usr/bin/openssl
/usr/lib/ssl/cert.pem
/usr/lib/ssl/certs
/usr/lib/ssl/misc/CA.pl
/usr/lib/ssl/misc/tsget
/usr/lib/ssl/misc/tsget.pl
/usr/lib/ssl/openssl.cnf
/usr/lib/ssl/private
/usr/share/doc/openssl/changelog.Debian.gz
/usr/share/doc/openssl/changelog.gz
/usr/share/doc/openssl/copyright
/usr/share/doc/openssl/fingerprints.txt
/usr/share/doc/openssl/HOWTO/certificates.txt.gz
/usr/share/doc/openssl/HOWTO/keys.txt
/usr/share/doc/openssl/NEWS.Debian.gz
/usr/share/doc/openssl/NEWS.md.gz
/usr/share/doc/openssl/README.Debian
/usr/share/doc/openssl/README-ENGINES.md.gz
/usr/share/doc/openssl/README.md.gz
/usr/share/doc/openssl/README.optimization
/usr/share/lintian/overrides/openssl
/usr/share/man/man1/asn1parse.1ssl.gz
/usr/share/man/man1/ca.1ssl.gz
/usr/share/man/man1/CA.pl.1ssl.gz
/usr/share/man/man1/ciphers.1ssl.gz
/usr/share/man/man1/cmp.1ssl.gz
/usr/share/man/man1/cms.1ssl.gz
/usr/share/man/man1/c_rehash.1ssl.gz
/usr/share/man/man1/crl.1ssl.gz
/usr/share/man/man1/crl2pkcs7.1ssl.gz
/usr/share/man/man1/dgst.1ssl.gz
/usr/share/man/man1/dhparam.1ssl.gz
/usr/share/man/man1/dsa.1ssl.gz
/usr/share/man/man1/dsaparam.1ssl.gz
/usr/share/man/man1/ec.1ssl.gz
/usr/share/man/man1/ecparam.1ssl.gz
/usr/share/man/man1/enc.1ssl.gz
/usr/share/man/man1/engine.1ssl.gz
/usr/share/man/man1/errstr.1ssl.gz
/usr/share/man/man1/gendsa.1ssl.gz
/usr/share/man/man1/genpkey.1ssl.gz
/usr/share/man/man1/genrsa.1ssl.gz
/usr/share/man/man1/info.1ssl.gz
/usr/share/man/man1/kdf.1ssl.gz
/usr/share/man/man1/mac.1ssl.gz
/usr/share/man/man1/nseq.1ssl.gz
/usr/share/man/man1/ocsp.1ssl.gz
/usr/share/man/man1/openssl.1ssl.gz
/usr/share/man/man1/openssl-asn1parse.1ssl.gz
/usr/share/man/man1/openssl-ca.1ssl.gz
/usr/share/man/man1/openssl-ciphers.1ssl.gz
/usr/share/man/man1/openssl-cmds.1ssl.gz
/usr/share/man/man1/openssl-cmp.1ssl.gz
/usr/share/man/man1/openssl-cms.1ssl.gz
/usr/share/man/man1/openssl-crl.1ssl.gz
/usr/share/man/man1/openssl-crl2pkcs7.1ssl.gz
/usr/share/man/man1/openssl-dgst.1ssl.gz
/usr/share/man/man1/openssl-dhparam.1ssl.gz
/usr/share/man/man1/openssl-dsa.1ssl.gz
/usr/share/man/man1/openssl-dsaparam.1ssl.gz
/usr/share/man/man1/openssl-ec.1ssl.gz
/usr/share/man/man1/openssl-ecparam.1ssl.gz
/usr/share/man/man1/openssl-enc.1ssl.gz
/usr/share/man/man1/openssl-engine.1ssl.gz
/usr/share/man/man1/openssl-errstr.1ssl.gz
/usr/share/man/man1/openssl-fipsinstall.1ssl.gz
/usr/share/man/man1/openssl-format-options.1ssl.gz
/usr/share/man/man1/openssl-gendsa.1ssl.gz
/usr/share/man/man1/openssl-genpkey.1ssl.gz
/usr/share/man/man1/openssl-genrsa.1ssl.gz
/usr/share/man/man1/openssl-info.1ssl.gz
/usr/share/man/man1/openssl-kdf.1ssl.gz
/usr/share/man/man1/openssl-list.1ssl.gz
/usr/share/man/man1/openssl-mac.1ssl.gz
/usr/share/man/man1/openssl-namedisplay-options.1ssl.gz
/usr/share/man/man1/openssl-nseq.1ssl.gz
/usr/share/man/man1/openssl-ocsp.1ssl.gz
/usr/share/man/man1/openssl-passphrase-options.1ssl.gz
/usr/share/man/man1/openssl-passwd.1ssl.gz
/usr/share/man/man1/openssl-pkcs12.1ssl.gz
/usr/share/man/man1/openssl-pkcs7.1ssl.gz
/usr/share/man/man1/openssl-pkcs8.1ssl.gz
/usr/share/man/man1/openssl-pkey.1ssl.gz
/usr/share/man/man1/openssl-pkeyparam.1ssl.gz
/usr/share/man/man1/openssl-pkeyutl.1ssl.gz
/usr/share/man/man1/openssl-prime.1ssl.gz
/usr/share/man/man1/openssl-rand.1ssl.gz
/usr/share/man/man1/openssl-rehash.1ssl.gz
/usr/share/man/man1/openssl-req.1ssl.gz
/usr/share/man/man1/openssl-rsa.1ssl.gz
/usr/share/man/man1/openssl-rsautl.1ssl.gz
/usr/share/man/man1/openssl-s_client.1ssl.gz
/usr/share/man/man1/openssl-sess_id.1ssl.gz
/usr/share/man/man1/openssl-smime.1ssl.gz
/usr/share/man/man1/openssl-speed.1ssl.gz
/usr/share/man/man1/openssl-spkac.1ssl.gz
/usr/share/man/man1/openssl-srp.1ssl.gz
/usr/share/man/man1/openssl-s_server.1ssl.gz
/usr/share/man/man1/openssl-s_time.1ssl.gz
/usr/share/man/man1/openssl-storeutl.1ssl.gz
/usr/share/man/man1/openssl-ts.1ssl.gz
/usr/share/man/man1/openssl-verification-options.1ssl.gz
/usr/share/man/man1/openssl-verify.1ssl.gz
/usr/share/man/man1/openssl-version.1ssl.gz
/usr/share/man/man1/openssl-x509.1ssl.gz
/usr/share/man/man1/passwd.1ssl.gz
/usr/share/man/man1/pkcs12.1ssl.gz
/usr/share/man/man1/pkcs7.1ssl.gz
/usr/share/man/man1/pkcs8.1ssl.gz
/usr/share/man/man1/pkey.1ssl.gz
/usr/share/man/man1/pkeyparam.1ssl.gz
/usr/share/man/man1/pkeyutl.1ssl.gz
/usr/share/man/man1/prime.1ssl.gz
/usr/share/man/man1/rand.1ssl.gz
/usr/share/man/man1/rehash.1ssl.gz
/usr/share/man/man1/req.1ssl.gz
/usr/share/man/man1/rsa.1ssl.gz
/usr/share/man/man1/rsautl.1ssl.gz
/usr/share/man/man1/s_client.1ssl.gz
/usr/share/man/man1/sess_id.1ssl.gz
/usr/share/man/man1/smime.1ssl.gz
/usr/share/man/man1/speed.1ssl.gz
/usr/share/man/man1/spkac.1ssl.gz
/usr/share/man/man1/srp.1ssl.gz
/usr/share/man/man1/s_server.1ssl.gz
/usr/share/man/man1/s_time.1ssl.gz
/usr/share/man/man1/storeutl.1ssl.gz
/usr/share/man/man1/ts.1ssl.gz
/usr/share/man/man1/tsget.1ssl.gz
/usr/share/man/man1/verify.1ssl.gz
/usr/share/man/man1/version.1ssl.gz
/usr/share/man/man1/x509.1ssl.gz
/usr/share/man/man5/config.5ssl.gz
/usr/share/man/man5/fips_config.5ssl.gz
/usr/share/man/man5/x509v3_config.5ssl.gz
/usr/share/man/man7/bio.7ssl.gz
/usr/share/man/man7/crypto.7ssl.gz
/usr/share/man/man7/ct.7ssl.gz
/usr/share/man/man7/des_modes.7ssl.gz
/usr/share/man/man7/Ed25519.7ssl.gz
/usr/share/man/man7/Ed448.7ssl.gz
/usr/share/man/man7/evp.7ssl.gz
/usr/share/man/man7/EVP_ASYM_CIPHER-RSA.7ssl.gz
/usr/share/man/man7/EVP_ASYM_CIPHER-SM2.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-AES.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-ARIA.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-BLOWFISH.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-CAMELLIA.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-CAST.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-CHACHA.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-DES.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-IDEA.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-NULL.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-RC2.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-RC4.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-RC5.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-SEED.7ssl.gz
/usr/share/man/man7/EVP_CIPHER-SM4.7ssl.gz
/usr/share/man/man7/EVP_KDF-HKDF.7ssl.gz
/usr/share/man/man7/EVP_KDF-KB.7ssl.gz
/usr/share/man/man7/EVP_KDF-KRB5KDF.7ssl.gz
/usr/share/man/man7/EVP_KDF-PBKDF1.7ssl.gz
/usr/share/man/man7/EVP_KDF-PBKDF2.7ssl.gz
/usr/share/man/man7/EVP_KDF-PKCS12KDF.7ssl.gz
/usr/share/man/man7/EVP_KDF-SCRYPT.7ssl.gz
/usr/share/man/man7/EVP_KDF-SS.7ssl.gz
/usr/share/man/man7/EVP_KDF-SSHKDF.7ssl.gz
/usr/share/man/man7/EVP_KDF-TLS13_KDF.7ssl.gz
/usr/share/man/man7/EVP_KDF-TLS1_PRF.7ssl.gz
/usr/share/man/man7/EVP_KDF-X942-ASN1.7ssl.gz
/usr/share/man/man7/EVP_KDF-X942-CONCAT.7ssl.gz
/usr/share/man/man7/EVP_KDF-X963.7ssl.gz
/usr/share/man/man7/EVP_KEM-RSA.7ssl.gz
/usr/share/man/man7/EVP_KEYEXCH-DH.7ssl.gz
/usr/share/man/man7/EVP_KEYEXCH-ECDH.7ssl.gz
/usr/share/man/man7/EVP_KEYEXCH-X25519.7ssl.gz
/usr/share/man/man7/EVP_KEYEXCH-X448.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-CMAC.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-DH.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-DHX.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-DSA.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-EC.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-ED25519.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-ED448.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-HMAC.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-Poly1305.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-RSA.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-Siphash.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-SM2.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-X25519.7ssl.gz
/usr/share/man/man7/EVP_KEYMGMT-X448.7ssl.gz
/usr/share/man/man7/EVP_MAC-BLAKE2.7ssl.gz
/usr/share/man/man7/EVP_MAC-BLAKE2BMAC.7ssl.gz
/usr/share/man/man7/EVP_MAC-BLAKE2SMAC.7ssl.gz
/usr/share/man/man7/EVP_MAC-CMAC.7ssl.gz
/usr/share/man/man7/EVP_MAC-GMAC.7ssl.gz
/usr/share/man/man7/EVP_MAC-HMAC.7ssl.gz
/usr/share/man/man7/EVP_MAC-KMAC128.7ssl.gz
/usr/share/man/man7/EVP_MAC-KMAC256.7ssl.gz
/usr/share/man/man7/EVP_MAC-KMAC.7ssl.gz
/usr/share/man/man7/EVP_MAC-Poly1305.7ssl.gz
/usr/share/man/man7/EVP_MAC-Siphash.7ssl.gz
/usr/share/man/man7/EVP_MD-BLAKE2.7ssl.gz
/usr/share/man/man7/EVP_MD-common.7ssl.gz
/usr/share/man/man7/EVP_MD-KECCAK-KMAC.7ssl.gz
/usr/share/man/man7/EVP_MD-MD2.7ssl.gz
/usr/share/man/man7/EVP_MD-MD4.7ssl.gz
/usr/share/man/man7/EVP_MD-MD5.7ssl.gz
/usr/share/man/man7/EVP_MD-MD5-SHA1.7ssl.gz
/usr/share/man/man7/EVP_MD-MDC2.7ssl.gz
/usr/share/man/man7/EVP_MD-NULL.7ssl.gz
/usr/share/man/man7/EVP_MD-RIPEMD160.7ssl.gz
/usr/share/man/man7/EVP_MD-SHA1.7ssl.gz
/usr/share/man/man7/EVP_MD-SHA2.7ssl.gz
/usr/share/man/man7/EVP_MD-SHA3.7ssl.gz
/usr/share/man/man7/EVP_MD-SHAKE.7ssl.gz
/usr/share/man/man7/EVP_MD-SM3.7ssl.gz
/usr/share/man/man7/EVP_MD-WHIRLPOOL.7ssl.gz
/usr/share/man/man7/EVP_PKEY-CMAC.7ssl.gz
/usr/share/man/man7/EVP_PKEY-DH.7ssl.gz
/usr/share/man/man7/EVP_PKEY-DHX.7ssl.gz
/usr/share/man/man7/EVP_PKEY-DSA.7ssl.gz
/usr/share/man/man7/EVP_PKEY-EC.7ssl.gz
/usr/share/man/man7/EVP_PKEY-ED25519.7ssl.gz
/usr/share/man/man7/EVP_PKEY-ED448.7ssl.gz
/usr/share/man/man7/EVP_PKEY-FFC.7ssl.gz
/usr/share/man/man7/EVP_PKEY-HMAC.7ssl.gz
/usr/share/man/man7/EVP_PKEY-Poly1305.7ssl.gz
/usr/share/man/man7/EVP_PKEY-RSA.7ssl.gz
/usr/share/man/man7/EVP_PKEY-Siphash.7ssl.gz
/usr/share/man/man7/EVP_PKEY-SM2.7ssl.gz
/usr/share/man/man7/EVP_PKEY-X25519.7ssl.gz
/usr/share/man/man7/EVP_PKEY-X448.7ssl.gz
/usr/share/man/man7/EVP_RAND.7ssl.gz
/usr/share/man/man7/EVP_RAND-CTR-DRBG.7ssl.gz
/usr/share/man/man7/EVP_RAND-HASH-DRBG.7ssl.gz
/usr/share/man/man7/EVP_RAND-HMAC-DRBG.7ssl.gz
/usr/share/man/man7/EVP_RAND-SEED-SRC.7ssl.gz
/usr/share/man/man7/EVP_RAND-TEST-RAND.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-CMAC.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-DSA.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-ECDSA.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-ED25519.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-ED448.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-HMAC.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-Poly1305.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-RSA.7ssl.gz
/usr/share/man/man7/EVP_SIGNATURE-Siphash.7ssl.gz

Field source: Debian 12 (Bookworm) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 12 (Bookworm) nel browser Crea un'immagine che include openssl

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
3.0.20-1~deb12u2	bookworm / main	amd64	Debian 12 · main · amd64	1.4 MiB	2.3 MiB	pool/main/o/openssl/openssl_3.0.20-1~deb12u2_amd64.deb
3.0.20-1~deb12u2	bookworm / main	arm64	Debian 12 · main · arm64	1.3 MiB	2.3 MiB	pool/main/o/openssl/openssl_3.0.20-1~deb12u2_arm64.deb

Field source: Debian 12 (Bookworm) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-35189] Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ce	High(8.2)	Interessata Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-54872] Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret n	High(8.2)	Interessata Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-75805] Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response.	High(8.2)	Interessata Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-75806] Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV	High(8.2)	Interessata Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-77696] Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn info	High(8.2)	Interessata Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-84783] Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remo	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:36:36 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Non interessata nvd · openssl · debian · bookworm `3.0.20-1~deb12u2` · arm64 · bookworm Non interessata nvd · openssl · debian · bookworm
[CVE-2026-14457] Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Non interessata nvd · openssl · debian · bookworm `3.0.20-1~deb12u2` · arm64 · bookworm Non interessata nvd · openssl · debian · bookworm
[CVE-2026-18798] Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically resu	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Non interessata nvd · openssl · debian · bookworm `3.0.20-1~deb12u2` · arm64 · bookworm Non interessata nvd · openssl · debian · bookworm
[CVE-2026-63073] Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Impact summary: A malicious or intercepted	Critical(9.8)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Non interessata nvd · openssl · debian · bookworm `3.0.20-1~deb12u2` · arm64 · bookworm Non interessata nvd · openssl · debian · bookworm
[CVE-2026-63074] Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a se	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-63075] Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadat	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Non interessata nvd · openssl · debian · bookworm `3.0.20-1~deb12u2` · arm64 · bookworm Non interessata nvd · openssl · debian · bookworm
[CVE-2026-63076] Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted m	Critical(9.1)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-54874] Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a s	Critical(9.1)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:03 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-63072] Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that quer	Critical(9.1)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:03 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-84782] Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and t	High(8.2)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:39:10 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-14456] Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without en	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:42:00 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Non interessata nvd · openssl · debian · bookworm `3.0.20-1~deb12u2` · arm64 · bookworm Non interessata nvd · openssl · debian · bookworm
[CVE-2026-54876] Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summ	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:43:37 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Non interessata nvd · openssl · debian · bookworm `3.0.20-1~deb12u2` · arm64 · bookworm Non interessata nvd · openssl · debian · bookworm
[CVE-2026-75803] OpenSSL vulnerabilities	Critical(9.1)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:43:37 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` usn · openssl · debian · bookworm; usn · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Interessata · Corretta: `3.0.22-1~deb12u1` usn · openssl · debian · bookworm; usn · openssl · debian · 12
[CVE-2026-9076] Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:46:27 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Corretta · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Corretta · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-7383] Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may	High(8.1)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:46:27 PM UTC Dettagli (2) `3.0.20-1~deb12u2` · amd64 · bookworm Corretta · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.20-1~deb12u2` · arm64 · bookworm Corretta · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

[Altri risultati]

Ultima sincronizzazione: Oct 24, 2026, 3:29:50 AM UTC

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.0.20-1~deb12u2 / amd64Osservato Sep 1, 2026sha256 4d218561dc83…e6071bf9Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): 4d218561dc838de081de97f54584c4a29e77e26c7ed9fe3440d776d8e6071bf9

Verifica download

printf '%s  %s\n' '4d218561dc838de081de97f54584c4a29e77e26c7ed9fe3440d776d8e6071bf9' 'openssl_3.0.20-1~deb12u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main amd64

3.0.20-1~deb12u2 / arm64Osservato Sep 1, 2026sha256 e7ba824de1e6…9e936e00Impronta della fonte

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Impronta della fonte (sha256): e7ba824de1e659c12e81f885bc0757a50c4d7a9f71de02687ad63d5a9e936e00

Verifica download

printf '%s  %s\n' 'e7ba824de1e659c12e81f885bc0757a50c4d7a9f71de02687ad63d5a9e936e00' 'openssl_3.0.20-1~deb12u2_arm64.deb' | sha256sum --check --strict -

Field source: Debian 12 (Bookworm) main arm64

Fonti

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified
Debian 12 (Bookworm) security main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Observed SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Result
match verified
Debian 12 (Bookworm) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Observed SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Result
match verified
Debian 12 (Bookworm) updates main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-updates-main-amd64:87e7e94047fb7fb6f4ceecc7022d4bee55b66031cc2a7666d3196f3e0aabb846
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-updates/InRelease
Signed-object SHA-256
61180a5dcc765a1b6e51ad876fc67f6b747880423f0a8b399b311878b470ad49
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
87e7e94047fb7fb6f4ceecc7022d4bee55b66031cc2a7666d3196f3e0aabb846
Observed SHA-256
87e7e94047fb7fb6f4ceecc7022d4bee55b66031cc2a7666d3196f3e0aabb846
Result
match verified
Debian 12 (Bookworm) updates main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-updates-main-arm64:5dfd52317071685ad6e58c4ef0720128b7db68624079f83be02bdf55f07ac070
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-updates/InRelease
Signed-object SHA-256
61180a5dcc765a1b6e51ad876fc67f6b747880423f0a8b399b311878b470ad49
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
5dfd52317071685ad6e58c4ef0720128b7db68624079f83be02bdf55f07ac070
Observed SHA-256
5dfd52317071685ad6e58c4ef0720128b7db68624079f83be02bdf55f07ac070
Result
match verified