Copied from
openkylin huanghe in
Primary Archive for openKylin
by 李文俊
(sponsored by 李文俊)
Changelog
openssl (3.5.5-ok8) huanghe; urgency=medium
* CVE-2026-14457, Handle signature_algorithms_cert extension in key-only context.
* CVE-2026-18798, QUIC Server May Trigger Double Free When Processing INITIAL Packet
* CVE-2026-54874,Excessive Memory Use Buffering DTLS Records for a Future Epoch
* CVE-2026-63072, Heap Buffer Overflow in CMS Key Unwrapping
* CVE-2026-63073,Untrusted Sender DN Used as Format String in CMP Response Validation
* CVE-2026-63074, CMP Indefinite Cache Growth of ExtraCerts
* CVE-2026-63075,QUIC ACK-only Packet Retention Can Cause Memory Exhaustion
* CVE-2026-63076,Invalid Pointer Dereference in CMP Server via Crafted protectionAlg
-- songjuntao <email address hidden> Mon, 31 Aug 2026 10:35:48 +0800