openssl 3.5.5-ok9 source package in openKylin

Changelog

openssl (3.5.5-ok9) huanghe; urgency=medium

  * CVE-2026-35189, Excessive Memory Allocation in Relative CRLDP Processing
  * CVE-2026-35191, QUIC Unvalidated Amplification Credit may be Over Accounted
  * CVE-2026-54872, Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
  * CVE-2026-72897, Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
  * CVE-2026-75804, QUIC Connection-Level Flow Control is Not Enforced for Streams
  * CVE-2026-75805, NULL Pointer Dereference in CMP Client Revocation Response Handling
  * CVE-2026-75806, Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
  * CVE-2026-77696, Timing Side-Channel in SM2 Signature Generation
  * CVE-2026-84782, DTLS Retransmits Handshake Messages From a Stale Buffer Offset
  * CVE-2026-84784, QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
  * CVE-2026-42772, Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
  * CVE-2026-54873, QUIC STREAM Fragment Metadata DoS

 -- songjuntao <email address hidden>  Fri, 23 Oct 2026 15:16:55 +0800

Upload details

Uploaded by:
songjuntao
Sponsored by:
Cibot
Uploaded to:
Huanghe V3.0
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
utils
Urgency:
Medium Urgency

Publishing See full publishing history

Series Pocket Published Component Section
Huanghe V3.0 proposed main utils

Downloads

File Size SHA-256 Checksum
openssl_3.5.5.orig.tar.gz 50.6 MiB b28c91532a8b65a1f983b4c28b7488174e4a01008e29ce8e69bd789f28bc2a89
openssl_3.5.5.orig.tar.gz.asc 833 bytes eaef5b1054b84b8d1e6c61c9fc8867828be5ce686d0221580faf8bdc16489da9
openssl_3.5.5-ok9.debian.tar.xz 127.7 KiB 6061597e37ccbaa4b611dea4b45322cf6ae2b2fbb3a065a8f1b0e5a1c39b9b38
openssl_3.5.5-ok9.dsc 2.6 KiB fd03b4169b50201c590c2d9e3fa0c6a618aea51733580eb737a68ce1ebf4f7a9

Available diffs

View changes file

Binary packages built by this source

libcrypto3-udeb: Secure Sockets Layer toolkit - libcrypto udeb

 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It contains a version of the libcrypto shared library for use with the
 Debian Installer. Do not install it on a normal system.

libssl-dev: Secure Sockets Layer toolkit - development files

 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It contains development libraries, header files, and manpages for libssl
 and libcrypto.

libssl-doc: Secure Sockets Layer toolkit - development documentation

 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It contains manpages and demo files for libssl and libcrypto.

libssl3-udeb: ssl shared library - udeb

 libssl shared library.
 .
 Do not install it on a normal system.

libssl3t64: Secure Sockets Layer toolkit - shared libraries

 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.

libssl3t64-dbgsym: debug symbols for libssl3t64
openssl: Secure Sockets Layer toolkit - cryptographic utility

 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It contains the general-purpose command line binary /usr/bin/openssl,
 useful for cryptographic operations such as:
  * creating RSA, DH, and DSA key parameters;
  * creating X.509 certificates, CSRs, and CRLs;
  * calculating message digests;
  * encrypting and decrypting with ciphers;
  * testing SSL/TLS clients and servers;
  * handling S/MIME signed or encrypted mail.

openssl-dbgsym: debug symbols for openssl
openssl-provider-legacy: Secure Sockets Layer toolkit - cryptographic utility

 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 This package contains the legacy provider. The OpenSSL legacy provider
 supplies OpenSSL implementations of algorithms that have been deemed legacy.
 Such algorithms have commonly fallen out of use, have been deemed insecure by
 the cryptography community, or something similar.
 For details see OSSL_PROVIDER-legacy man page.

openssl-provider-legacy-dbgsym: debug symbols for openssl-provider-legacy