openssl 3.5.5-ok9 source package in openKylin
Changelog
openssl (3.5.5-ok9) huanghe; urgency=medium * CVE-2026-35189, Excessive Memory Allocation in Relative CRLDP Processing * CVE-2026-35191, QUIC Unvalidated Amplification Credit may be Over Accounted * CVE-2026-54872, Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves * CVE-2026-72897, Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake * CVE-2026-75804, QUIC Connection-Level Flow Control is Not Enforced for Streams * CVE-2026-75805, NULL Pointer Dereference in CMP Client Revocation Response Handling * CVE-2026-75806, Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS * CVE-2026-77696, Timing Side-Channel in SM2 Signature Generation * CVE-2026-84782, DTLS Retransmits Handshake Messages From a Stale Buffer Offset * CVE-2026-84784, QUIC: Unbounded RETIRE_CONNECTION_ID Backlog * CVE-2026-42772, Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC * CVE-2026-54873, QUIC STREAM Fragment Metadata DoS -- songjuntao <email address hidden> Fri, 23 Oct 2026 15:16:55 +0800