--- title: 'Topic: openssl' canonical_url: https://portal.chinng-lab-srv.dev/topics/openssl.md content_kind: topic updated_at: '2026-07-21T06:56:19Z' --- # Topic: openssl > Stable topic monitoring page generated from normalized published metadata. - Canonical: https://portal.chinng-lab-srv.dev/topics/openssl.md - Last updated: 2026-07-21T06:56:19Z - Search: https://portal.chinng-lab-srv.dev/api/search?q=openssl - MCP: portal_search(q="openssl") ## Related categories - security/os ## Related entities - Security Enhancement ## Latest articles - [DEBIAN-CVE-2026-9076 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-f52085.md): Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in… - [DEBIAN-CVE-2026-7383 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-b82594.md): Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may… - [DEBIAN-CVE-2026-45446 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-62db13.md): Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext allowing a forgery of… - [DEBIAN-CVE-2026-45447 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-03d023.md): Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes,… - [DEBIAN-CVE-2026-45445 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-f5242e.md): Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Impact summ… - [DEBIAN-CVE-2026-42768 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-72b7f7.md): Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe the error code and/… - [DEBIAN-CVE-2026-42769 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-6d07d4.md): Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certificate validation inef… - [DEBIAN-CVE-2026-42770 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-56c620.md): Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents… - [DEBIAN-CVE-2026-42767 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-44724c.md): Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference cau… - [DEBIAN-CVE-2026-42765 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-8ecc35.md): Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a… - [DEBIAN-CVE-2026-42766 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-83dabe.md): Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application c… - [DEBIAN-CVE-2026-42764 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-02bf21.md): Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer d… - [DEBIAN-CVE-2026-35188 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-ee8746.md): Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the client's certificate verificatio… - [DEBIAN-CVE-2026-34183 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-53fc82.md): Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbo… - [DEBIAN-CVE-2026-34180 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-f80dcc.md): Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platfo… - [DEBIAN-CVE-2026-34181 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-bae3e0.md): Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certifi… - [DEBIAN-CVE-2026-34182 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-496239.md): Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various pot… - [DEBIAN-CVE-2026-31790 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-a6be1d.md): Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitiali… - [DEBIAN-CVE-2026-31789 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-80643a.md): Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a cra… - [DEBIAN-CVE-2026-28390 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-7d7a65.md): Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-contro… - [DEBIAN-CVE-2026-28389 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-556164.md): Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled… - [DEBIAN-CVE-2026-28388 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-f31bc6.md): Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A N… - [DEBIAN-CVE-2026-28387 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-4d7684.md): Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-… - [DEBIAN-CVE-2026-28386 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-0d61a0.md): Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher block… - [DEBIAN-CVE-2026-2673 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-116816.md): Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT' keyword.… - [DEBIAN-CVE-2026-22796 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-d43447.md): Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an inva… - [DEBIAN-CVE-2026-22795 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-8d9acc.md): Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be cause… - [DEBIAN-CVE-2025-69420 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-1065f4.md): Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or N… - [DEBIAN-CVE-2025-69421 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-101bd9.md): Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash… - [DEBIAN-CVE-2025-69419 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-0a28e2.md): Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte wr… - [DEBIAN-CVE-2025-69418 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-f8b6b2.md): Issue summary: When using the low-level OCB API directly with AES-NI or
other hardware-accelerated code paths, inputs whose length is not a multiple
of 16 bytes can leave the final partial bloc… - [DEBIAN-CVE-2025-68160 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-6a9dbd.md): Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary:… - [DEBIAN-CVE-2025-66199 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-2dcafc.md): Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact… - [DEBIAN-CVE-2025-15467 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-f03696.md): Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to… - [DEBIAN-CVE-2025-15469 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-e94123.md): Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signin… - [DEBIAN-CVE-2025-11187 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-d6eb7a.md): Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact s… - [DEBIAN-CVE-2025-15468 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-2e4ad0.md): Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A… - [DSA-6113-1: openssl - security update](https://portal.chinng-lab-srv.dev/security/os/security-20260705-c1f19b.md): openssl - security update - [DSA-6015-1: openssl - security update](https://portal.chinng-lab-srv.dev/security/os/security-20260705-0efe08.md): openssl - security update - [DEBIAN-CVE-2025-9230 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-bd7b52.md): Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger… - [DEBIAN-CVE-2025-9231 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-435fbb.md): Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side… - [DEBIAN-CVE-2025-9232 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-2f778b.md): Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority compone… - [DEBIAN-CVE-2025-27587 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-40b216.md): OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable to a Minerva attack, exploitable by measuring the time of signing of random messages using the EVP_DigestSign API, and then using… - [DEBIAN-CVE-2025-4575 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-8bb6e3.md): Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate. Impact summary: If a user intends to make a trusted certifica… - [DEBIAN-CVE-2024-12797 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-326c1b.md): Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to notice that the server was not authenticated, because handshakes don't abort as expected when the SSL_… - [DEBIAN-CVE-2024-13176 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-b48d77.md): Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature compu… - [DEBIAN-CVE-2024-4741 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-0abcd1.md): Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of pote… - [DEBIAN-CVE-2024-9143 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-953bfc.md): Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can lead to out-of-bounds memory reads or writes. Impact summary: Out of bound… - [DEBIAN-CVE-2024-6119 — openssl](https://portal.chinng-lab-srv.dev/security/os/security-20260705-d48d7e.md): Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid memory address resulting in abnormal termination of the… - [DSA-5764-1: openssl - security update](https://portal.chinng-lab-srv.dev/security/os/security-20260705-138f0e.md): openssl - security update