Publishing details

• Published on 2026-06-17

Changelog

openssl (3.5.5-ok6) huanghe; urgency=medium

  * CVE-2026-34180, Heap Buffer Over-read in ASN.1 Content Parsing
  * CVE-2026-34181, PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
  * CVE-2026-34182, CMS AuthEnvelopedData Processing May Accept Forged Messages
  * CVE-2026-34183, Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
  * CVE-2026-42764, NULL pointer dereference in QUIC server initial packet handling
  * CVE-2026-42766, Possible NULL Dereference in Password-Based CMS Decryption
  * CVE-2026-42767, NULL Pointer Dereference in CRMF EncryptedValue Decryption
  * CVE-2026-42768, Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
  * CVE-2026-42769, Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
  * CVE-2026-42770, FFC-DH Peer Validation Uses Attacker-Supplied q
  * CVE-2026-45445, AES-OCB IV Ignored on EVP_Cipher() Path
  * CVE-2026-45446, Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
  * CVE-2026-45447, Heap Use-After-Free in OpenSSL PKCS7_verify()
  * CVE-2026-7383, Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
  * CVE-2026-9076, Out-of-Bounds Read in CMS Password-Based Decryption

 -- songjuntao <email address hidden>  Wed, 17 Jun 2026 13:28:16 +0800

Builds

• amd64
• arm64
• i386
• loong64
• riscv64
• rv64g

Built packages

• libcrypto3-udeb Secure Sockets Layer toolkit - libcrypto udeb

• libssl-dev Secure Sockets Layer toolkit - development files

• libssl-doc Secure Sockets Layer toolkit - development documentation

• libssl3-udeb ssl shared library - udeb

• libssl3t64 Secure Sockets Layer toolkit - shared libraries

• libssl3t64-dbgsym debug symbols for libssl3t64

• openssl Secure Sockets Layer toolkit - cryptographic utility

• openssl-dbgsym debug symbols for openssl

• openssl-provider-legacy Secure Sockets Layer toolkit - cryptographic utility

• openssl-provider-legacy-dbgsym debug symbols for openssl-provider-legacy

Package files

• libcrypto3-udeb_3.5.5-ok6_amd64.udeb (1.6 MiB)
• libcrypto3-udeb_3.5.5-ok6_arm64.udeb (1.9 MiB)
• libcrypto3-udeb_3.5.5-ok6_i386.udeb (1.4 MiB)
• libcrypto3-udeb_3.5.5-ok6_loong64.udeb (1.2 MiB)
• libcrypto3-udeb_3.5.5-ok6_riscv64.udeb (1.3 MiB)
• libssl-dev_3.5.5-ok6_amd64.deb (2.6 MiB)
• libssl-dev_3.5.5-ok6_arm64.deb (3.1 MiB)
• libssl-dev_3.5.5-ok6_i386.deb (2.5 MiB)
• libssl-dev_3.5.5-ok6_loong64.deb (3.8 MiB)
• libssl-dev_3.5.5-ok6_riscv64.deb (3.9 MiB)
• libssl-doc_3.5.5-ok6_all.deb (2.4 MiB)
• libssl3-udeb_3.5.5-ok6_amd64.udeb (344.1 KiB)
• libssl3-udeb_3.5.5-ok6_arm64.udeb (297.9 KiB)
• libssl3-udeb_3.5.5-ok6_i386.udeb (339.9 KiB)
• libssl3-udeb_3.5.5-ok6_loong64.udeb (319.1 KiB)
• libssl3-udeb_3.5.5-ok6_riscv64.udeb (338.5 KiB)
• libssl3t64-dbgsym_3.5.5-ok6_amd64.ddeb (283.7 KiB)
• libssl3t64-dbgsym_3.5.5-ok6_arm64.ddeb (287.8 KiB)
• libssl3t64-dbgsym_3.5.5-ok6_i386.ddeb (292.5 KiB)
• libssl3t64-dbgsym_3.5.5-ok6_loong64.ddeb (271.0 KiB)
• libssl3t64-dbgsym_3.5.5-ok6_riscv64.ddeb (282.1 KiB)
• libssl3t64_3.5.5-ok6_amd64.deb (2.1 MiB)
• libssl3t64_3.5.5-ok6_arm64.deb (2.4 MiB)
• libssl3t64_3.5.5-ok6_i386.deb (1.9 MiB)
• libssl3t64_3.5.5-ok6_loong64.deb (2.1 MiB)
• libssl3t64_3.5.5-ok6_riscv64.deb (1.9 MiB)
• openssl-dbgsym_3.5.5-ok6_amd64.ddeb (35.8 KiB)
• openssl-dbgsym_3.5.5-ok6_arm64.ddeb (36.0 KiB)
• openssl-dbgsym_3.5.5-ok6_i386.ddeb (34.3 KiB)
• openssl-dbgsym_3.5.5-ok6_loong64.ddeb (37.0 KiB)
• openssl-dbgsym_3.5.5-ok6_riscv64.ddeb (35.8 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok6_amd64.ddeb (8.1 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok6_arm64.ddeb (9.1 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok6_i386.ddeb (8.3 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok6_loong64.ddeb (8.2 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok6_riscv64.ddeb (8.8 KiB)
• openssl-provider-legacy_3.5.5-ok6_amd64.deb (36.4 KiB)
• openssl-provider-legacy_3.5.5-ok6_arm64.deb (32.0 KiB)
• openssl-provider-legacy_3.5.5-ok6_i386.deb (31.1 KiB)
• openssl-provider-legacy_3.5.5-ok6_loong64.deb (296.4 KiB)
• openssl-provider-legacy_3.5.5-ok6_riscv64.deb (34.8 KiB)
• openssl_3.5.5-ok6.debian.tar.xz (60.2 KiB)
• openssl_3.5.5-ok6.dsc (2.6 KiB)
• openssl_3.5.5-ok6_amd64.deb (1.4 MiB)
• openssl_3.5.5-ok6_arm64.deb (1.3 MiB)
• openssl_3.5.5-ok6_i386.deb (1.3 MiB)
• openssl_3.5.5-ok6_loong64.deb (1.6 MiB)
• openssl_3.5.5-ok6_riscv64.deb (1.4 MiB)
• openssl_3.5.5.orig.tar.gz (50.6 MiB)
• openssl_3.5.5.orig.tar.gz.asc (833 bytes)