Packages / Debian 12 (Bookworm) / Source / libs / openssl

Source Package: openssl (3.0.20-1~deb12u2)

Secure Sockets Layer toolkit - shared libraries

The following binary packages are built from this source package:

libssl3
Secure Sockets Layer toolkit - shared libraries
libssl-dev
Secure Sockets Layer toolkit - development files
libssl-doc
Secure Sockets Layer toolkit - development documentation

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-35189] Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ce	High(8.2)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-54872] Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret n	High(8.2)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-75805] Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response.	High(8.2)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-75806] Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV	High(8.2)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-77696] Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn info	High(8.2)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-63074] Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a se	High(7.5)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-63076] Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted m	Critical(9.1)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-54874] Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a s	Critical(9.1)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-63072] Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that quer	Critical(9.1)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-84782] Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and t	High(8.2)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-75803] OpenSSL vulnerabilities	Critical(9.1)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` usn · openssl · debian · bookworm; usn · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` usn · openssl · debian · bookworm; usn · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` usn · openssl · debian · bookworm; usn · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` usn · openssl · debian · bookworm; usn · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` usn · openssl · debian · bookworm; usn · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` usn · openssl · debian · bookworm; usn · openssl · debian · 12
[CVE-2026-9076] Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in	High(7.5)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-7383] Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may	High(8.1)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-45447] Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes,	High(8.8)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-45446] Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext allowing a forgery of s	Medium(5.3)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-45445] Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Impact summ	Critical(9.1)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-42770] Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents	Medium(5.9)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-42767] Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference cau	Medium(6.5)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.22-1~deb12u1` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-42766] Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application c	Medium(5.9)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12
[CVE-2026-34182] Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various pote	Critical(9.1)	Interessata Dettagli (6) `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · amd64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · arm64 · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12 `3.0.17-1~deb12u2` · all · bookworm-updates Interessata · Corretta: `3.0.20-1~deb12u2` nvd · openssl · debian · bookworm; nvd · openssl · debian · 12

[Altri risultati]

Ultima sincronizzazione: Oct 24, 2026, 1:15:03 AM UTC

[Catalogo CVE]

Fonti

Debian 12 (Bookworm) main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-amd64:9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Observed SHA-256
9e0b5aabb2465b3d2e7a7fe27f9913846277833f7a2826e7767acccff5b588c5
Result
match verified
Debian 12 (Bookworm) main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-main-arm64:2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm/InRelease
Signed-object SHA-256
77737fa4b34f2693e982cc9ee35736816c35a7778fc2d326cc1bbf5b301fe1aa
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Observed SHA-256
2ddb1737692e8c45c53e8d57c0ce4cd21c78c5703b830c3226b1423566a06c00
Result
match verified
Debian 12 (Bookworm) security main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-amd64:f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Observed SHA-256
f6c2fe702b8cabb044e7bb46c5eaf3962abb6cfed5fcac896ffeb271b9d15104
Result
match verified
Debian 12 (Bookworm) security main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-security-main-arm64:f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Repository-signature verification record
Signed object
https://security.debian.org/debian-security/dists/bookworm-security/InRelease
Signed-object SHA-256
6d12b591dde8841119e7e66de94b2af438681faebffabe08ea364290f7aaee1c
Signer fingerprint
ED541312A33F1128F10B1C6C54404762BBB6E853
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Observed SHA-256
f9b8756324afddf50b1c19d6d46164158c0361909fddc40b48777ad665dfdb14
Result
match verified
Debian 12 (Bookworm) updates main amd64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-updates-main-amd64:87e7e94047fb7fb6f4ceecc7022d4bee55b66031cc2a7666d3196f3e0aabb846
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-updates/InRelease
Signed-object SHA-256
61180a5dcc765a1b6e51ad876fc67f6b747880423f0a8b399b311878b470ad49
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-amd64/Packages.xz
Expected SHA-256
87e7e94047fb7fb6f4ceecc7022d4bee55b66031cc2a7666d3196f3e0aabb846
Observed SHA-256
87e7e94047fb7fb6f4ceecc7022d4bee55b66031cc2a7666d3196f3e0aabb846
Result
match verified
Debian 12 (Bookworm) updates main arm64Sep 1, 2026
Authoritative source; repository metadata signature verified
Prova della firma
bookworm-updates-main-arm64:5dfd52317071685ad6e58c4ef0720128b7db68624079f83be02bdf55f07ac070
Repository-signature verification record
Signed object
https://deb.debian.org/debian/dists/bookworm-updates/InRelease
Signed-object SHA-256
61180a5dcc765a1b6e51ad876fc67f6b747880423f0a8b399b311878b470ad49
Signer fingerprint
4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision
debian-archive-keyring.gpg
SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Repository metadata hash linkage
Path
main/binary-arm64/Packages.xz
Expected SHA-256
5dfd52317071685ad6e58c4ef0720128b7db68624079f83be02bdf55f07ac070
Observed SHA-256
5dfd52317071685ad6e58c4ef0720128b7db68624079f83be02bdf55f07ac070
Result
match verified