Publishing details

• Published on 2026-10-26

Changelog

openssl (3.5.5-ok9) huanghe; urgency=medium

  * CVE-2026-35189, Excessive Memory Allocation in Relative CRLDP Processing
  * CVE-2026-35191, QUIC Unvalidated Amplification Credit may be Over Accounted
  * CVE-2026-54872, Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
  * CVE-2026-54875, Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
  * CVE-2026-72897, Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
  * CVE-2026-75804, QUIC Connection-Level Flow Control is Not Enforced for Streams
  * CVE-2026-75805, NULL Pointer Dereference in CMP Client Revocation Response Handling
  * CVE-2026-75806, Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
  * CVE-2026-77696, Timing Side-Channel in SM2 Signature Generation
  * CVE-2026-84782, DTLS Retransmits Handshake Messages From a Stale Buffer Offset
  * CVE-2026-84784, QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
  * CVE-2026-42772, Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
  * CVE-2026-54873, QUIC STREAM Fragment Metadata DoS

 -- songjuntao <email address hidden>  Fri, 23 Oct 2026 15:16:55 +0800

Builds

• amd64
• arm64
• i386
• loong64
• riscv64
• rv64g

Built packages

• libcrypto3-udeb Secure Sockets Layer toolkit - libcrypto udeb

• libssl-dev Secure Sockets Layer toolkit - development files

• libssl-doc Secure Sockets Layer toolkit - development documentation

• libssl3-udeb ssl shared library - udeb

• libssl3t64 Secure Sockets Layer toolkit - shared libraries

• libssl3t64-dbgsym debug symbols for libssl3t64

• openssl Secure Sockets Layer toolkit - cryptographic utility

• openssl-dbgsym debug symbols for openssl

• openssl-provider-legacy Secure Sockets Layer toolkit - cryptographic utility

• openssl-provider-legacy-dbgsym debug symbols for openssl-provider-legacy

Package files

• libcrypto3-udeb_3.5.5-ok9_amd64.udeb (1.6 MiB)
• libcrypto3-udeb_3.5.5-ok9_arm64.udeb (1.9 MiB)
• libcrypto3-udeb_3.5.5-ok9_loong64.udeb (1.2 MiB)
• libcrypto3-udeb_3.5.5-ok9_riscv64.udeb (1.3 MiB)
• libssl-dev_3.5.5-ok9_amd64.deb (2.6 MiB)
• libssl-dev_3.5.5-ok9_arm64.deb (3.1 MiB)
• libssl-dev_3.5.5-ok9_loong64.deb (3.8 MiB)
• libssl-dev_3.5.5-ok9_riscv64.deb (3.9 MiB)
• libssl-doc_3.5.5-ok9_all.deb (2.4 MiB)
• libssl3-udeb_3.5.5-ok9_amd64.udeb (348.1 KiB)
• libssl3-udeb_3.5.5-ok9_arm64.udeb (300.5 KiB)
• libssl3-udeb_3.5.5-ok9_loong64.udeb (322.7 KiB)
• libssl3-udeb_3.5.5-ok9_riscv64.udeb (341.4 KiB)
• libssl3t64-dbgsym_3.5.5-ok9_riscv64.ddeb (285.3 KiB)
• libssl3t64_3.5.5-ok9_amd64.deb (2.1 MiB)
• libssl3t64_3.5.5-ok9_arm64.deb (2.4 MiB)
• libssl3t64_3.5.5-ok9_loong64.deb (2.1 MiB)
• libssl3t64_3.5.5-ok9_riscv64.deb (1.9 MiB)
• openssl-dbgsym_3.5.5-ok9_riscv64.ddeb (35.8 KiB)
• openssl-provider-legacy-dbgsym_3.5.5-ok9_riscv64.ddeb (8.8 KiB)
• openssl-provider-legacy_3.5.5-ok9_amd64.deb (36.4 KiB)
• openssl-provider-legacy_3.5.5-ok9_arm64.deb (32.0 KiB)
• openssl-provider-legacy_3.5.5-ok9_loong64.deb (297.2 KiB)
• openssl-provider-legacy_3.5.5-ok9_riscv64.deb (34.8 KiB)
• openssl_3.5.5-ok9.debian.tar.xz (126.6 KiB)
• openssl_3.5.5-ok9.dsc (2.6 KiB)
• openssl_3.5.5-ok9_amd64.deb (1.4 MiB)
• openssl_3.5.5-ok9_arm64.deb (1.3 MiB)
• openssl_3.5.5-ok9_loong64.deb (1.6 MiB)
• openssl_3.5.5-ok9_riscv64.deb (1.4 MiB)
• openssl_3.5.5.orig.tar.gz (50.6 MiB)
• openssl_3.5.5.orig.tar.gz.asc (833 bytes)