OpenSSL security note

CVE-2006-4339 — Check if you run it

OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote atta

Fixed in 0.9.8b-3 · 3 other ranges on the advisory

CVE-2026-91767 — Check if you run it

php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal c

Fixed in 8.2.34-1~deb12u1 · 2 other ranges on the advisory

ALSA-2026:19066 — Open the advisory

Moderate: openssl security update

Fixed in 1:3.5.5-2.el10_2.alma.1

CVE-2026-84782 — Check if you run it

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.

Fixed in 3.0.22-1~deb12u2 · 2 other ranges on the advisory

CVE-2026-75805 — Check if you run it

Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted rev

Fixed in 3.0.22-1~deb12u2 · 2 other ranges on the advisory

CVE-2026-75806 — Check if you run it

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the ma

Fixed in 3.0.22-1~deb12u2 · 2 other ranges on the advisory

CVE-2026-54872 — Check if you run it

Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks informatio

Fixed in 3.0.22-1~deb12u2 · 2 other ranges on the advisory

CVE-2026-77696 — Check if you run it

Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel.

Fixed in 3.0.22-1~deb12u2 · 2 other ranges on the advisory

CVE-2024-9355 — Check if you run it

A vulnerability was found in Golang FIPS OpenSSL.

No version range is stored, so an installed version cannot be checked.

CVE-2026-8507 — Check if you run it

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws.

No version range is stored, so an installed version cannot be checked.