[SECURITY] [DLA 4795-1] openssl security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4795-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Arnaud Rebillout
September 25, 2026 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------
Package : openssl
Version : 3.0.22-1~deb12u1
CVE ID : CVE-2026-42767 CVE-2026-54874 CVE-2026-63072 CVE-2026-63074
CVE-2026-63076 CVE-2026-75803
Debian Bug : 1139674 1145172
Several vulnerabilities have been discovered in OpenSSL, a Secure Socket
Layer toolkit providing the SSL and TLS cryptographic protocols for secure
communication over the Internet.
CVE-2026-42767
An attacker-controlled CMP (Certificate Management Protocol) server
could trigger a NULL pointer dereference in a CMP client application.
CVE-2026-54874
Receiving a DTLS record for a future epoch while a handshake is in
progress causes OpenSSL to buffer far more memory than the record
itself requires.
CVE-2026-63072
OpenSSL CMS decryption sizes the key-unwrap output buffer based on
querying the unwrapped key size, but the AES-WRAP-PAD unwrap
primitive can write and cleanse more bytes than that query reports,
causing an 8-byte out-of-bounds heap write.
CVE-2026-63074
The OpenSSL Certificate Management Protocol (CMP) caches additional
certificates (extraCerts) sent in a CMP message, but never expunges
them (for instance if they are invalid). If a server reuses an
OSSL_CMP_CTX frequently, this cache of extraCerts may grow
unboundedly, and a malicious client may flood a CMP server with
requests driving this growth.
CVE-2026-63076
OpenSSL CMP password based protection verification only checks
whether the protectionAlg parameter was not NULL and not its ASN.1
type, before treating it as a PBMParameter. A crafted message can
contain a parameter of a different type, which is then dereferenced
as an invalid pointer.
CVE-2026-75803
ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can
report success without verifying the supplied authentication tag when
the operation is finalized by calling the EVP_Cipher() function.
For Debian 12 bookworm, these problems have been fixed in version
3.0.22-1~deb12u1.
We recommend that you upgrade your openssl packages.
For the detailed security status of openssl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/openssl
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=LmXH
-----END PGP SIGNATURE-----
Reply to: