Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for security update by Openssl

    GCVE-1988-2026-0540

    Vulnerability from gna-1988 – Published: 2026-11-02 10:03 – Updated: 2026-11-02 10:03
    VLAI
    Title
    [Bugtraq] [SECURITY] [DSA 6531-1] openssl security update
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6531-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso September 30, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : openssl CVE ID : CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782 CVE-2026-84784 Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which could result in denial of service, information disclosure or potentially recovery of private keys. Additional details can be found in the upstream advisories: https://openssl-library.org/news/secadv/20260929.txt For the stable distribution (trixie), these problems have been fixed in version 3.5.7-1~deb13u3. We recommend that you upgrade your openssl packages. For the detailed security status of openssl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/openssl Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmq8pmxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0R1Hg//av61un8iGouMa0xpTCL+lxgx5QQScEvZ+PJileOLB3gwANP9LVDmGNSV 0x7nzd/WHsrIpswEuYzhlJxRC5f41y4fbM/98IKl+lBXoqZHatMvin0tII+SrfFI Oimt8I1V8swT9aFZG5voZTiEbkhxLYH5MwF+CDF1VTBksHwaKU0SR1lp+MhEGlYA kOhU5g47PzMHQ7tBO57/M/HjXp/9YJY6e2M8V+c+cT7LLcO5Tk06czx6XqU/dJHL zeBNfiJ8L8OzTBoqFjZe3h4ee1X5zdDX4XDVs00yHnh8FmLpaQ1XDJeBrEYpq5TY 4sqFC1LXjK+gW+DoJ7CtWzya3nrPZA9TriPBKb51qIyevPAmIureKStwM+RTB80S N00xCDYIWljw41ijLhtWCn5WKCZehwknOipWSJMZox428DnqJgiawsmoUOvXZhtd rVM7RoR9pJIMXQIarmRTy5CZU6Ajo6ON7gxRZOa/qZBaBtQaeGreDlPjMkX6GPfu Tx005K6R+bepTKy4myT06UwES1k8JYVXz6AJyEzXGIHs41B+Wo9+82ACyb1viJit pVu+nALQ/Qgx1K6wHx23LQ5yyAEbzSfRPEqGYlJ6pY5PsT1hg10t/54vv6ss/5lg LQUupWBf2JQwpRzJTnMN0xVDnJSL+CArB/uumd4sNCYv1dTup+Y= =7/5m -----END PGP SIGNATURE-----
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Openssl security update Affected: unknown
    		Create a notification for this product.
    Credits
    Salvatore Bonaccorso
    Relationships
    reference GCVE-1988-2026-0540 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "security update",
          "vendor": "Openssl",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Salvatore Bonaccorso"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6531-1                   security@debian.org\nhttps://www.debian.org/security/                     Salvatore Bonaccorso\nSeptember 30, 2026                    https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage        : openssl\nCVE ID         : CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872\nCVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804\nCVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782\nCVE-2026-84784\nMultiple vulnerabilities have been discovered in OpenSSL, a Secure\nSockets Layer toolkit, which could result in denial of service,\ninformation disclosure or potentially recovery of private keys.\nAdditional details can be found in the upstream advisories:\nhttps://openssl-library.org/news/secadv/20260929.txt\nFor the stable distribution (trixie), these problems have been fixed in\nversion 3.5.7-1~deb13u3.\nWe recommend that you upgrade your openssl packages.\nFor the detailed security status of openssl please refer to its security\ntracker page at:\nhttps://security-tracker.debian.org/tracker/openssl\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----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\nLQUupWBf2JQwpRzJTnMN0xVDnJSL+CArB/uumd4sNCYv1dTup+Y=\n=7/5m\n-----END PGP SIGNATURE-----"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T10:03:01Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/item/01a9ee1ffbf14934dbe51fdad43c8d6576563e4bbad6651ba0d380538bd7c266"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/VBF6OGQJZYX76I55ZYFJSRDFQX2BZCZ6/"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260929.txt"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/openssl"
        },
        {
          "url": "https://www.debian.org/security/"
        },
        {
          "url": "https://www.debian.org/security/faq"
        }
      ],
      "source": {
        "defect": [
          "E1xBnVs-00000000ll9-1gGZ%40seger.debian.org"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[Bugtraq] [SECURITY] [DSA 6531-1] openssl security update",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-35189",
              "type": "related"
            },
            {
              "destId": "CVE-2026-35191",
              "type": "related"
            },
            {
              "destId": "CVE-2026-42772",
              "type": "related"
            },
            {
              "destId": "CVE-2026-54872",
              "type": "related"
            },
            {
              "destId": "CVE-2026-54873",
              "type": "related"
            },
            {
              "destId": "CVE-2026-54875",
              "type": "related"
            },
            {
              "destId": "CVE-2026-72897",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75804",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75805",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75806",
              "type": "related"
            },
            {
              "destId": "CVE-2026-77696",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84782",
              "type": "related"
            },
            {
              "destId": "CVE-2026-84784",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0540",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/item/01a9ee1ffbf14934dbe51fdad43c8d6576563e4bbad6651ba0d380538bd7c266",
            "automated": true,
            "contentSha256": "01a9ee1ffbf14934dbe51fdad43c8d6576563e4bbad6651ba0d380538bd7c266",
            "evidenceScore": 6,
            "messageId": "E1xBnVs-00000000ll9-1gGZ%40seger.debian.org",
            "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/VBF6OGQJZYX76I55ZYFJSRDFQX2BZCZ6/",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-02T10:03:01Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0540"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T10:03:01Z",
    "dateUpdated": "2026-11-02T10:03:01Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0540"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    GCVE-1988-2026-0536

    Vulnerability from gna-1988 – Published: 2026-11-02 10:02 – Updated: 2026-11-02 10:02
    VLAI
    Title
    [Bugtraq] [SECURITY] [DSA 6465-1] openssl security update
    Summary
    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6465-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 25, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : openssl CVE ID : CVE-2026-14456 CVE-2026-14457 CVE-2026-18798 CVE-2026-54874 CVE-2026-63072 CVE-2026-63073 CVE-2026-63074 CVE-2026-63075 CVE-2026-63076 CVE-2026-75803 Debian Bug : 1144615 1145172 Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service. Additional details can be found in the upstream advisories: https://openssl-library.org/news/secadv/20260813.txt https://openssl-library.org/news/secadv/20260825.txt For the stable distribution (trixie), these problems have been fixed in version 3.5.7-1~deb13u2. We recommend that you upgrade your openssl packages. For the detailed security status of openssl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/openssl Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmqN5alfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QBqRAAlXIilJWwjS0VS1pgroaCFUNGhL1HrTsBIIrnnrWTUOeD19fFLvvcVK5B j1UaT/jurxSp6Bkre7NrQFzLlXk6xvRWTR2dxv9K1q29lYgPwpVjfO25kdQ2LWeg 0n0qA4Kb394Evtf9lmb3KMNrrRJHc9DmuXZDQWAjsNRwVxBEaJ+yN9Im92CcQQQb CUgVYzlx+mvBfPTGgStTFJjMXT/pTaVz+WDHbfEc5WM8tRe3YYb+e+/vOdA4jrEv UKdH1M+fNg1gB7+cCr8QyTQiTMvz2BxwBuI7jlK67FFZL322SqON4chQRXleWp86 imyBANOP4dRdMV1aYGT38VZYjoURwuvLR77ZhyLe1c927YcIkXe11K0HMwq9DeXv o+TQQTf1qJN8Zd0sQuz88/d6T9jtzRgFvNkZpiXXy3nQrKnE0FAfZuGCyniiie9b VipvzWLxfpeEH9TW9hotwCVyv395RRaWM6m8UuQI4J+3yVTUY4S+nO4aHo5Wi5HN WeYxaFZSKYTUlsjAGMgYGm5aH4TtAFoHxzTTzsvvArKPDpFukZH4Ux+t9adydwTZ KRxmHmEWcLYKchZksLymvOCKrG57LTAqJi+CVi+oJAc23RqYyZy1tEdB8hSQ6s2S sTk0pcwjB5xk4BZXdDr/8nmqivlfJA3eFDO0K9P/l9CFK280MQw= =IuuF -----END PGP SIGNATURE-----
    Severity
    No CVSS data available.
    Assigner
    VULNARCHIVE GNA GNA-1988
    GNA scorecard E 38/100 over 552 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Openssl security update Affected: unknown
    		Create a notification for this product.
    Credits
    Salvatore Bonaccorso
    Relationships
    reference GCVE-1988-2026-0536 (this record)
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "security update",
          "vendor": "Openssl",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Salvatore Bonaccorso"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6465-1                   security@debian.org\nhttps://www.debian.org/security/                     Salvatore Bonaccorso\nAugust 25, 2026                       https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage        : openssl\nCVE ID         : CVE-2026-14456 CVE-2026-14457 CVE-2026-18798 CVE-2026-54874\nCVE-2026-63072 CVE-2026-63073 CVE-2026-63074 CVE-2026-63075\nCVE-2026-63076 CVE-2026-75803\nDebian Bug     : 1144615 1145172\nMultiple vulnerabilities have been discovered in OpenSSL, a Secure\nSockets Layer toolkit, which may result in denial of service.\nAdditional details can be found in the upstream advisories:\nhttps://openssl-library.org/news/secadv/20260813.txt\nhttps://openssl-library.org/news/secadv/20260825.txt\nFor the stable distribution (trixie), these problems have been fixed in\nversion 3.5.7-1~deb13u2.\nWe recommend that you upgrade your openssl packages.\nFor the detailed security status of openssl please refer to its security\ntracker page at:\nhttps://security-tracker.debian.org/tracker/openssl\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----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\nsTk0pcwjB5xk4BZXdDr/8nmqivlfJA3eFDO0K9P/l9CFK280MQw=\n=IuuF\n-----END PGP SIGNATURE-----"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T10:02:57Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/item/90780217511ba9473775d7daca7f41ec65f1b70f96cb131ad057bb14544f2f64"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/F67TVJDJLUTSXDZPLED7P57UK4ORENKV/"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260813.txt"
        },
        {
          "url": "https://openssl-library.org/news/secadv/20260825.txt"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/openssl"
        },
        {
          "url": "https://www.debian.org/security/"
        },
        {
          "url": "https://www.debian.org/security/faq"
        }
      ],
      "source": {
        "defect": [
          "E1wywMA-00000005YZP-0RlG%40seger.debian.org"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[Bugtraq] [SECURITY] [DSA 6465-1] openssl security update",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-14456",
              "type": "related"
            },
            {
              "destId": "CVE-2026-14457",
              "type": "related"
            },
            {
              "destId": "CVE-2026-18798",
              "type": "related"
            },
            {
              "destId": "CVE-2026-54874",
              "type": "related"
            },
            {
              "destId": "CVE-2026-63072",
              "type": "related"
            },
            {
              "destId": "CVE-2026-63073",
              "type": "related"
            },
            {
              "destId": "CVE-2026-63074",
              "type": "related"
            },
            {
              "destId": "CVE-2026-63075",
              "type": "related"
            },
            {
              "destId": "CVE-2026-63076",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75803",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0536",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/item/90780217511ba9473775d7daca7f41ec65f1b70f96cb131ad057bb14544f2f64",
            "automated": true,
            "contentSha256": "90780217511ba9473775d7daca7f41ec65f1b70f96cb131ad057bb14544f2f64",
            "evidenceScore": 6,
            "messageId": "E1wywMA-00000005YZP-0RlG%40seger.debian.org",
            "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/F67TVJDJLUTSXDZPLED7P57UK4ORENKV/",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-02T10:02:57Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0536"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T10:02:57Z",
    "dateUpdated": "2026-11-02T10:02:57Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0536"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}