Debian alert DSA-6531-1 (openssl)

From:
             
 
Salvatore Bonaccorso <carnil@debian.org>
To:
             
 
debian-security-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DSA 6531-1] openssl security update
Date:
             
 
Wed, 30 Sep 2026 06:09:56 +0000
Message-ID:
             
 
<E1xBnVs-00000000ll9-1gGZ@seger.debian.org>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6531-1                   security@debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
September 30, 2026                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : openssl
CVE ID         : CVE-2026-35189 CVE-2026-35191 CVE-2026-42772 CVE-2026-54872
                 CVE-2026-54873 CVE-2026-54875 CVE-2026-72897 CVE-2026-75804
                 CVE-2026-75805 CVE-2026-75806 CVE-2026-77696 CVE-2026-84782
                 CVE-2026-84784

Multiple vulnerabilities have been discovered in OpenSSL, a Secure
Sockets Layer toolkit, which could result in denial of service,
information disclosure or potentially recovery of private keys.

Additional details can be found in the upstream advisories:
https://openssl-library.org/news/secadv/20260929.txt

For the stable distribution (trixie), these problems have been fixed in
version 3.5.7-1~deb13u3.

We recommend that you upgrade your openssl packages.

For the detailed security status of openssl please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/openssl

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmq8pmxfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0R1Hg//av61un8iGouMa0xpTCL+lxgx5QQScEvZ+PJileOLB3gwANP9LVDmGNSV
0x7nzd/WHsrIpswEuYzhlJxRC5f41y4fbM/98IKl+lBXoqZHatMvin0tII+SrfFI
Oimt8I1V8swT9aFZG5voZTiEbkhxLYH5MwF+CDF1VTBksHwaKU0SR1lp+MhEGlYA
kOhU5g47PzMHQ7tBO57/M/HjXp/9YJY6e2M8V+c+cT7LLcO5Tk06czx6XqU/dJHL
zeBNfiJ8L8OzTBoqFjZe3h4ee1X5zdDX4XDVs00yHnh8FmLpaQ1XDJeBrEYpq5TY
4sqFC1LXjK+gW+DoJ7CtWzya3nrPZA9TriPBKb51qIyevPAmIureKStwM+RTB80S
N00xCDYIWljw41ijLhtWCn5WKCZehwknOipWSJMZox428DnqJgiawsmoUOvXZhtd
rVM7RoR9pJIMXQIarmRTy5CZU6Ajo6ON7gxRZOa/qZBaBtQaeGreDlPjMkX6GPfu
Tx005K6R+bepTKy4myT06UwES1k8JYVXz6AJyEzXGIHs41B+Wo9+82ACyb1viJit
pVu+nALQ/Qgx1K6wHx23LQ5yyAEbzSfRPEqGYlJ6pY5PsT1hg10t/54vv6ss/5lg
LQUupWBf2JQwpRzJTnMN0xVDnJSL+CArB/uumd4sNCYv1dTup+Y=
=7/5m
-----END PGP SIGNATURE-----