[SECURITY] [DSA 6531-1] openssl security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-6531-1 security@debian.org
https://www.debian.org/security/ Salvatore Bonaccorso
September 30, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : openssl
CVE ID : CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872
CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804
CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782
CVE-2026-84784
Multiple vulnerabilities have been discovered in OpenSSL, a Secure
Sockets Layer toolkit, which could result in denial of service,
information disclosure or potentially recovery of private keys.
Additional details can be found in the upstream advisories:
https://openssl-library.org/news/secadv/20260929.txt
For the stable distribution (trixie), these problems have been fixed in
version 3.5.7-1~deb13u3.
We recommend that you upgrade your openssl packages.
For the detailed security status of openssl please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/openssl
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----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=7/5m
-----END PGP SIGNATURE-----
Reply to: