Package "openssl"

openssl (3.0.13-0ubuntu3.16) noble-security; urgency=medium

  * SECURITY UPDATE: Excessive Memory Allocation in Relative CRLDP Processing
    - debian/patches/CVE-2026-35189.patch: Defer computation of relative CRLDP
      names in crypto/x509/v3_crld.c, crypto/x509/v3_purp.c,
      crypto/x509/x509_vfy.c, include/crypto/x509.h.
    - CVE-2026-35189
  * SECURITY UPDATE: Timing Side-Channel in Scalar Multiplication for Non-NIST
    EC Curves
    - debian/patches/CVE-2026-54872-pre1.patch: add value_barrier_bn() to
      include/internal/constant_time.h.
    - debian/patches/CVE-2026-54872.patch: ec: make ossl_ec_scalar_mul_ladder()
      scalar padding constant time in crypto/bn/bn_intern.c,
      crypto/ec/ec_mult.c, include/crypto/bn.h.
    - CVE-2026-54872
  * SECURITY UPDATE: NULL Pointer Dereference in CMP Client Revocation Response
    Handling
    - debian/patches/CVE-2026-75805-1.patch: Guard comparison when values are
      NULL in crypto/cmp/cmp_client.c.
    - debian/patches/CVE-2026-75805-2.patch: Add test for CVE-2026-75805 in
      test/cmp_client_test.c.
    - CVE-2026-75805
  * SECURITY UPDATE: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes
    DoS
    - debian/patches/CVE-2026-75806.patch: TLS: Reject undersized TLS 1.2 AEAD
      records before AEAD processing in ssl/record/record.h,
      ssl/record/ssl3_record.c, ssl/t1_enc.c, test/recordlentest.c.
    - CVE-2026-75806
  * SECURITY UPDATE: Timing Side-Channel in SM2 Signature Generation
    - debian/patches/CVE-2026-77696.patch: sm2: make sm2_sig_gen() constant time
      in crypto/ec/ec_mult.c, crypto/sm2/sm2_sign.c.
    - CVE-2026-77696
  * SECURITY UPDATE: DTLS Retransmits Handshake Messages From a Stale Buffer
    Offset
    - debian/patches/CVE-2026-84782.patch: dtls: reset init_off before
      retransmitting a message in ssl/d1_lib.c, ssl/statem/statem_dtls.c,
      test/dtlstest.c.
    - CVE-2026-84782

 -- Marc Deslauriers Wed, 16 Sep 2026 14:47:02 -0400

  openssl (3.0.13-0ubuntu3.11) noble-security; urgency=medium

  * SECURITY UPDATE: Heap Buffer Over-read in ASN.1 Content Parsing
    - debian/patches/CVE-2026-34180.patch: Avoid length truncation in
      ASN1_STRING_set in crypto/asn1/tasn_dec.c.
    - CVE-2026-34180
  * SECURITY UPDATE: CMS AuthEnvelopedData Processing May Accept Forged Messages
    - debian/patches/CVE-2026-34182-1.patch: CMS: Produce error when AEAD
      algorithms are used in enveloped data in crypto/cms/cms_enc.c,
      crypto/cms/cms_env.c, crypto/cms/cms_err.c, crypto/cms/cms_local.h,
      crypto/err/openssl.txt, include/openssl/cmserr.h, test/cms-msg/enveloped-
      content-type-for-aes-gcm.pem, test/cmsapitest.c,
      test/recipes/80-test_cms.t.
    - debian/patches/CVE-2026-34182-2.patch: Reject potentially forged encrypted
      CMS AuthEnvelopedData messages in crypto/cms/cms_enc.c.
    - debian/patches/CVE-2026-34182-3.patch: Add tests for CVE-2026-34182 in
      test/cmsapitest.c.
    - CVE-2026-34182
  * SECURITY UPDATE: Possible NULL Dereference in Password-Based CMS Decryption
    - debian/patches/CVE-2026-42766.patch: Fix potential NULL dereference
      processing CMS PasswordRecipientInfo in crypto/cms/cms_pwri.c.
    - CVE-2026-42766
  * SECURITY UPDATE: NULL Pointer Dereference in CRMF EncryptedValue Decryption
    - debian/patches/CVE-2026-42767.patch: Fix potential NULL dereference in
      OSSL_CRMF_ENCRYPTEDVALUE_decrypt() in crypto/crmf/crmf_lib.c.
    - CVE-2026-42767
  * SECURITY UPDATE: FFC-DH Peer Validation Uses Attacker-Supplied q
    - debian/patches/CVE-2026-42770.patch: Match the local q DHX parameter
      against the peer's q in providers/implementations/exchange/dh_exch.c.
    - CVE-2026-42770
  * SECURITY UPDATE: AES-OCB IV Ignored on EVP_Cipher() Path
    - debian/patches/CVE-2026-45445.patch: Apply the buffered IV on the AES-OCB
      EVP_Cipher() path in providers/implementations/ciphers/cipher_aes_ocb.c,
      test/evp_extra_test.c.
    - CVE-2026-45445
  * SECURITY UPDATE: Incorrect Tag Processing for Empty Messages in
    AES-GCM-SIV and AES-SIV modes
    - debian/patches/CVE-2026-45446.patch: Fix handling of empty-ciphertext
      messages in AES-SIV in providers/implementations/ciphers/cipher_aes_siv.c,
      test/evp_extra_test.c.
    - CVE-2026-45446
  * SECURITY UPDATE: Heap Use-After-Free in OpenSSL PKCS7_verify()
    - debian/patches/CVE-2026-45447-pre1.patch: Revert unnecessary
      PKCS7_verify() performance optimization in crypto/pkcs7/pk7_smime.c.
    - debian/patches/CVE-2026-45447-1.patch: Fix possible use-after-free in
      OpenSSL PKCS7_verify() in crypto/pkcs7/pk7_smime.c.
    - debian/patches/CVE-2026-45447-2.patch: Test for CVE-2026-45447 (UAF in
      PKCS7_verify) in test/recipes/80-test_cms.t, test/smime-eml/pkcs7-empty-
      digest-set.eml.
    - CVE-2026-45447
  * SECURITY UPDATE: Possible Heap Buffer Overflow in ASN.1 Multibyte String
    Conversion
    - debian/patches/CVE-2026-7383.patch: Reject oversized inputs in
      ASN1_mbstring_ncopy() in crypto/asn1/a_mbstr.c.
    - CVE-2026-7383
  * SECURITY UPDATE: Out-of-Bounds Read in CMS Password-Based Decryption
    - debian/patches/CVE-2026-9076.patch: cms: kek_unwrap_key: Fix out-of-bounds
      read in check-byte validation in crypto/cms/cms_pwri.c.
    - CVE-2026-9076

 -- Marc Deslauriers <email address hidden> Tue, 02 Jun 2026 15:33:25 -0400

  openssl (3.0.13-0ubuntu3.9) noble-security; urgency=medium

  * SECURITY UPDATE: NULL pointer dereference when processing an OCSP
    response
    - debian/patches/CVE-2026-28387.patch: dane_match_cert() should
      X509_free() on ->mcert instead of OPENSSL_free() in
      crypto/x509/x509_vfy.c.
    - CVE-2026-28387
  * SECURITY UPDATE: NULL Pointer Dereference When Processing a Delta CRL
    - debian/patches/CVE-2026-28388-1.patch: fix NULL Dereference When
      Delta CRL Lacks CRL Number Extension in crypto/x509/x509_vfy.c.
    - debian/patches/CVE-2026-28388-2.patch: Added test in test/*.
    - CVE-2026-28388
  * SECURITY UPDATE: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo
    - debian/patches/CVE-2026-28389.patch: Fix NULL deref in
      [ec]dh_cms_set_shared_info in crypto/cms/cms_dh.c,
      crypto/cms/cms_ec.c.
    - CVE-2026-28389
  * SECURITY UPDATE: Possible NULL Dereference When Processing CMS
    KeyTransportRecipientInfo
    - debian/patches/CVE-2026-28390.patch: Fix NULL deref in
      rsa_cms_decrypt in crypto/cms/cms_rsa.c.
    - CVE-2026-28390
  * SECURITY UPDATE: Heap buffer overflow in hexadecimal conversion
    - debian/patches/CVE-2026-31789.patch: avoid possible buffer overflow
      in buf2hex conversion in crypto/o_str.c.
    - CVE-2026-31789
  * SECURITY UPDATE: Incorrect failure handling in RSA KEM RSASVE
    encapsulation
    - debian/patches/CVE-2026-31790-1.patch: validate RSA_public_encrypt()
      result in RSASVE in providers/implementations/kem/rsa_kem.c.
    - debian/patches/CVE-2026-31790-2.patch: test RSA_public_encrypt()
      result in RSASVE in test/evp_extra_test.c.
    - CVE-2026-31790

 -- Marc Deslauriers <email address hidden> Tue, 07 Apr 2026 08:05:56 -0400