Packages / Debian 13 (Trixie) / utils / openssl-provider-fips

Package: openssl-provider-fips (3.5.6-1~deb13u2)

Toolkit Secure Sockets Layer - utilità crittografica

Other Packages Related to openssl-provider-fips:

dep: [libc6] (>= 2.34)
GNU C Library: Shared libraries

Download openssl-provider-fips

Architecture	Package size	Installed size	Files	Package
amd64	1.1 MiB	3.1 MiB	list of files	Download
arm64	977 KiB	2.2 MiB	list of files	Download

Percorsi file del pacchetto (5)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/lib/aarch64-linux-gnu/ossl-modules/fips.so
/usr/lib/x86_64-linux-gnu/ossl-modules/fips.so
/usr/share/doc/openssl-provider-fips/changelog.Debian.gz
/usr/share/doc/openssl-provider-fips/changelog.gz
/usr/share/doc/openssl-provider-fips/copyright

Field source: Debian 13 (Trixie) main amd64

Usa questo pacchetto

OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.

Prova Debian 13 (Trixie) nel browser Crea un'immagine che include openssl-provider-fips

Versioni, suite e repository

Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
3.5.6-1~deb13u2	trixie / main	amd64	Debian 13 · main · amd64	1.1 MiB	3.0 MiB	pool/main/o/openssl/openssl-provider-fips_3.5.6-1~deb13u2_amd64.deb
3.5.6-1~deb13u2	trixie / main	arm64	Debian 13 · main · arm64	972 KiB	2.2 MiB	pool/main/o/openssl/openssl-provider-fips_3.5.6-1~deb13u2_arm64.deb
3.5.7-1~deb13u3	trixie-security / main	amd64	Debian 13 security · main · amd64	1.1 MiB	3.1 MiB	pool/updates/main/o/openssl/openssl-provider-fips_3.5.7-1~deb13u3_amd64.deb
3.5.7-1~deb13u2	trixie-security / main	arm64	Debian 13 security · main · arm64	977 KiB	2.2 MiB	pool/updates/main/o/openssl/openssl-provider-fips_3.5.7-1~deb13u2_arm64.deb
3.5.7-1~deb13u2 (withdrawn)	trixie-security / main	amd64	Debian 13 security · main · amd64	1.1 MiB	3.1 MiB	pool/updates/main/o/openssl/openssl-provider-fips_3.5.7-1~deb13u2_amd64.deb
3.5.6-1~deb13u2 (withdrawn)	trixie-security / main	amd64	Debian 13 security · main · amd64	1.1 MiB	3.0 MiB	pool/updates/main/o/openssl/openssl-provider-fips_3.5.6-1~deb13u2_amd64.deb

Field source: Debian 13 (Trixie) main amd64

Vulnerabilità note

L’associazione dei pacchetti è in corso.

CVE	Gravità	Impatto per versione
[CVE-2026-54873] Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted pac	High(7.5)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-42772] Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of	Medium(5.3)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-35191] Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a vi	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-54875] Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to me	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-72897] Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replace	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-75804] Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summar	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-84784] Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary:	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-35189] Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted ce	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-54872] Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret n	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-75805] Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response.	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-75806] Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-77696] Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn info	High(8.2)	Interessata Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Interessata · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u3` nvd · openssl · debian · 13
[CVE-2026-14457] Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13
[CVE-2026-18798] Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically resu	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13
[CVE-2026-63073] Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Impact summary: A malicious or intercepted	Critical(9.8)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13
[CVE-2026-63074] Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a se	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13
[CVE-2026-63075] Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadat	High(7.5)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13
[CVE-2026-63076] Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted m	Critical(9.1)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:02 PM UTC Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13
[CVE-2026-54874] Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a s	Critical(9.1)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:03 PM UTC Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13
[CVE-2026-63072] Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that quer	Critical(9.1)	Sconosciuto L’associazione dei pacchetti è in corso. Osservato: Oct 23, 2026, 9:37:03 PM UTC Dettagli (6) `3.5.6-1~deb13u2` · amd64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · arm64 · trixie Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.6-1~deb13u2` · amd64 · trixie-security · Historical version Interessata · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · amd64 · trixie-security · Historical version Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u2` · arm64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13 `3.5.7-1~deb13u3` · amd64 · trixie-security Corretta · Corretta: `3.5.7-1~deb13u2` nvd · openssl · debian · 13

[Altri risultati]

Ultima sincronizzazione: Oct 24, 2026, 3:29:50 AM UTC

[Catalogo CVE]

Checksum

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

3.5.6-1~deb13u2 / amd64Osservato Sep 1, 2026sha256 01a0513ec5c1…d8233581Impronta della fonte