UbuntuUpdates.org

Bugs fixes in "openssl"

Origin Bug number Title Date fixed
CVE CVE-2026-54873 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit th 2026-10-01
CVE CVE-2026-42772 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a 2026-10-01
CVE CVE-2026-54873 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit th 2026-10-01
CVE CVE-2026-42772 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a 2026-10-01
CVE CVE-2026-84782 DTLS Retransmits Handshake Messages From a Stale Buffer Offset 2026-09-29
CVE CVE-2026-77696 Timing Side-Channel in SM2 Signature Generation 2026-09-29
CVE CVE-2026-75806 Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 2026-09-29
CVE CVE-2026-75805 NULL Pointer Dereference in CMP Client Revocation Response Handling 2026-09-29
CVE CVE-2026-54872 Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 2026-09-29
CVE CVE-2026-35189 Excessive Memory Allocation in Relative CRLDP Processing 2026-09-29
CVE CVE-2026-84782 DTLS Retransmits Handshake Messages From a Stale Buffer Offset 2026-09-29
CVE CVE-2026-77696 Timing Side-Channel in SM2 Signature Generation 2026-09-29
CVE CVE-2026-75806 Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 2026-09-29
CVE CVE-2026-75805 NULL Pointer Dereference in CMP Client Revocation Response Handling 2026-09-29
CVE CVE-2026-54872 Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves 2026-09-29
CVE CVE-2026-35189 Excessive Memory Allocation in Relative CRLDP Processing 2026-09-29
CVE CVE-2026-84784 QUIC: Unbounded RETIRE_CONNECTION_ID Backlog 2026-09-29
CVE CVE-2026-84782 DTLS Retransmits Handshake Messages From a Stale Buffer Offset 2026-09-29
CVE CVE-2026-77696 Timing Side-Channel in SM2 Signature Generation 2026-09-29
CVE CVE-2026-75806 Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS 2026-09-29



About   -   Send Feedback to @ubuntu_updates