Publishing details

• Published on 2026-09-01

Changelog

openssl (3.5.5-ok8) huanghe; urgency=medium

  * CVE-2026-14457, Handle signature_algorithms_cert extension in key-only context.
  * CVE-2026-18798, QUIC Server May Trigger Double Free When Processing INITIAL Packet
  * CVE-2026-54874，Excessive Memory Use Buffering DTLS Records for a Future Epoch
  * CVE-2026-63072, Heap Buffer Overflow in CMS Key Unwrapping
  * CVE-2026-63073，Untrusted Sender DN Used as Format String in CMP Response Validation
  * CVE-2026-63074, CMP Indefinite Cache Growth of ExtraCerts
  * CVE-2026-63075，QUIC ACK-only Packet Retention Can Cause Memory Exhaustion
  * CVE-2026-63076，Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

 -- songjuntao <email address hidden>  Mon, 31 Aug 2026 10:35:48 +0800

Builds

• amd64
• arm64
• i386
• loong64
• riscv64
• rv64g

Built packages

• libcrypto3-udeb Secure Sockets Layer toolkit - libcrypto udeb

• libssl-dev Secure Sockets Layer toolkit - development files

• libssl-doc Secure Sockets Layer toolkit - development documentation

• libssl3-udeb ssl shared library - udeb

• libssl3t64 Secure Sockets Layer toolkit - shared libraries

• libssl3t64-dbgsym debug symbols for libssl3t64

• openssl Secure Sockets Layer toolkit - cryptographic utility

• openssl-dbgsym debug symbols for openssl

• openssl-provider-legacy Secure Sockets Layer toolkit - cryptographic utility

• openssl-provider-legacy-dbgsym debug symbols for openssl-provider-legacy

Package files

• libcrypto3-udeb_3.5.5-ok8_amd64.udeb (1.6 MiB)
• libcrypto3-udeb_3.5.5-ok8_arm64.udeb (1.9 MiB)
• libcrypto3-udeb_3.5.5-ok8_i386.udeb (1.4 MiB)
• libcrypto3-udeb_3.5.5-ok8_loong64.udeb (1.2 MiB)
• libcrypto3-udeb_3.5.5-ok8_riscv64.udeb (1.3 MiB)
• libssl-dev_3.5.5-ok8_amd64.deb (2.6 MiB)
• libssl-dev_3.5.5-ok8_arm64.deb (3.1 MiB)
• libssl-dev_3.5.5-ok8_i386.deb (2.5 MiB)
• libssl-dev_3.5.5-ok8_loong64.deb (3.8 MiB)
• libssl-dev_3.5.5-ok8_riscv64.deb (3.9 MiB)
• libssl-doc_3.5.5-ok8_all.deb (2.4 MiB)
• libssl3-udeb_3.5.5-ok8_amd64.udeb (344.0 KiB)
• libssl3-udeb_3.5.5-ok8_arm64.udeb (298.1 KiB)
• libssl3-udeb_3.5.5-ok8_i386.udeb (339.2 KiB)
• libssl3-udeb_3.5.5-ok8_loong64.udeb (318.4 KiB)
• libssl3-udeb_3.5.5-ok8_riscv64.udeb (338.3 KiB)
• libssl3t64-dbgsym_3.5.5-ok8_amd64.ddeb (281.1 KiB)
• libssl3t64-dbgsym_3.5.5-ok8_arm64.ddeb (288.0 KiB)
• libssl3t64-dbgsym_3.5.5-ok8_i386.ddeb (292.8 KiB)
• libssl3t64-dbgsym_3.5.5-ok8_loong64.ddeb (270.6 KiB)
• libssl3t64-dbgsym_3.5.5-ok8_riscv64.ddeb (282.1 KiB)
• libssl3t64_3.5.5-ok8_amd64.deb (2.1 MiB)
• libssl3t64_3.5.5-ok8_arm64.deb (2.4 MiB)
• libssl3t64_3.5.5-ok8_i386.deb (1.9 MiB)
• libssl3t64_3.5.5-ok8_loong64.deb (2.1 MiB)
• libssl3t64_3.5.5-ok8_riscv64.deb (1.9 MiB)
• openssl-dbgsym_3.5.5-ok8_amd64.ddeb (35.8 KiB)
• openssl-dbgsym_3.5.5-ok8_arm64.ddeb (35.8 KiB)
• openssl-dbgsym_3.5.5-ok8_i386.ddeb (34.3 KiB)
• openssl-dbgsym_3.5.5-ok8_loong64.ddeb (36.9 KiB)
• openssl-dbgsym_3.5.5-ok8_riscv64.ddeb (35.8 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok8_amd64.ddeb (8.1 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok8_arm64.ddeb (9.1 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok8_i386.ddeb (8.3 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok8_loong64.ddeb (8.2 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok8_riscv64.ddeb (8.8 KiB)
• openssl-provider-legacy_3.5.5-ok8_amd64.deb (36.4 KiB)
• openssl-provider-legacy_3.5.5-ok8_arm64.deb (32.0 KiB)
• openssl-provider-legacy_3.5.5-ok8_i386.deb (31.1 KiB)
• openssl-provider-legacy_3.5.5-ok8_loong64.deb (296.7 KiB)
• openssl-provider-legacy_3.5.5-ok8_riscv64.deb (34.8 KiB)
• openssl_3.5.5-ok8.debian.tar.xz (76.2 KiB)
• openssl_3.5.5-ok8.dsc (2.6 KiB)
• openssl_3.5.5-ok8_amd64.deb (1.4 MiB)
• openssl_3.5.5-ok8_arm64.deb (1.3 MiB)
• openssl_3.5.5-ok8_i386.deb (1.3 MiB)
• openssl_3.5.5-ok8_loong64.deb (1.6 MiB)
• openssl_3.5.5-ok8_riscv64.deb (1.4 MiB)
• openssl_3.5.5.orig.tar.gz (50.6 MiB)
• openssl_3.5.5.orig.tar.gz.asc (833 bytes)