Packages / Debian 12 (Bookworm) / Source / libs / openssl
Secure Sockets Layer toolkit - shared libraries
Secure Sockets Layer toolkit - development files
Secure Sockets Layer toolkit - development documentation
L’associazione dei pacchetti è in corso.
| CVE | Gravità | Impatto per versione |
|---|---|---|
| [CVE-2026-35189] Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ce | High(8.2) | InteressataDettagli (6)
|
| [CVE-2026-54872] Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret n | High(8.2) | InteressataDettagli (6)
|
| [CVE-2026-75805] Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. | High(8.2) | InteressataDettagli (6)
|
| [CVE-2026-75806] Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV | High(8.2) | InteressataDettagli (6)
|
| [CVE-2026-77696] Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn info | High(8.2) | InteressataDettagli (6)
|
| [CVE-2026-63074] Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a se | High(7.5) | InteressataDettagli (6)
|
| [CVE-2026-63076] Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted m | Critical(9.1) | InteressataDettagli (6)
|
| [CVE-2026-54874] Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a s | Critical(9.1) | InteressataDettagli (6)
|
| [CVE-2026-63072] Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that quer | Critical(9.1) | InteressataDettagli (6)
|
| [CVE-2026-84782] Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and t | High(8.2) | InteressataDettagli (6)
|
| [CVE-2026-75803] OpenSSL vulnerabilities | Critical(9.1) | InteressataDettagli (6)
|
| [CVE-2026-42767] Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference cau | Medium(6.5) | InteressataDettagli (6)
|
| CVE | Gravità | Impatto per versione |
|---|---|---|
| [CVE-2026-54873] Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted pac | High(7.5) | Non interessataDettagli (6)
|
| [CVE-2026-42772] Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of | Medium(5.3) | Non interessataDettagli (6)
|
| [CVE-2026-35191] Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a vi | High(8.2) | Non interessataDettagli (6)
|
| [CVE-2026-54875] Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to me | High(8.2) | Non interessataDettagli (6)
|
| [CVE-2026-72897] Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replace | High(8.2) | Non interessataDettagli (6)
|
| [CVE-2026-75804] Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summar | High(8.2) | Non interessataDettagli (6)
|
| [CVE-2026-84784] Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: | High(8.2) | Non interessataDettagli (6)
|
| [CVE-2026-84783] Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remo | High(7.5) | Non interessataDettagli (6)
|
Ultima sincronizzazione:
Authoritative source; repository metadata signature verified
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Authoritative source; repository metadata signature verified
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Authoritative source; repository metadata signature verified
bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Authoritative source; repository metadata signature verified
bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Authoritative source; repository metadata signature verified
bookworm-updates-main-amd64:87e7e94047fb7fb6f4ceecc7022d4bee55b66031cc2a7666d3196f3e0aabb846
Authoritative source; repository metadata signature verified
bookworm-updates-main-arm64:5dfd52317071685ad6e58c4ef0720128b7db68624079f83be02bdf55f07ac070