1. Ubuntu Security Notices
  2. USN-8414-1

USN-8414-1: OpenSSL vulnerabilities

Publication date

9 June 2026

Overview

Several security issues were fixed in OpenSSL.

Releases

Packages

  • openssl - Secure Socket Layer (SSL) cryptographic library and tools

Details

Frank Buss discovered that OpenSSL had a heap buffer over-read in ASN.1
content parsing. An attacker could possibly use this issue to cause OpenSSL
to crash, resulting in a denial of service, or obtain sensitive
information. (CVE-2026-34180)

Pavol Zacik and Alex Gaynor discovered that OpenSSL incorrectly accepted
PKCS#12 files with short HMAC keys when using PBMAC1. An attacker could
possibly use this issue to bypass integrity checks. This issue only
affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-34181)

Asim Viladi Oglu Manizada and Alex Gaynor discovered that OpenSSL could
accept forged CMS AuthEnvelopedData messages. An attacker could possibly
use this issue to bypass message authentication checks. (CVE-2026-34182)

Abhinav Agarwal discovered that OpenSSL had unbounded memory growth in the
QUIC...

Frank Buss discovered that OpenSSL had a heap buffer over-read in ASN.1
content parsing. An attacker could possibly use this issue to cause OpenSSL
to crash, resulting in a denial of service, or obtain sensitive
information. (CVE-2026-34180)

Pavol Zacik and Alex Gaynor discovered that OpenSSL incorrectly accepted
PKCS#12 files with short HMAC keys when using PBMAC1. An attacker could
possibly use this issue to bypass integrity checks. This issue only
affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-34181)

Asim Viladi Oglu Manizada and Alex Gaynor discovered that OpenSSL could
accept forged CMS AuthEnvelopedData messages. An attacker could possibly
use this issue to bypass message authentication checks. (CVE-2026-34182)

Abhinav Agarwal discovered that OpenSSL had unbounded memory growth in the
QUIC PATH_CHALLENGE handler. A remote attacker could possibly use this
issue to cause OpenSSL to use excessive resources, leading to a denial of
service. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS.
(CVE-2026-34183)

Sunwoo Lee, Hyuk Lim, and Seunghyun Yoon discovered that OpenSSL had a NULL
pointer dereference in QUIC server initial packet handling. A remote
attacker could possibly use this issue to cause OpenSSL to crash, resulting
in a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu
26.04 LTS. (CVE-2026-42764)

Mayank Jangid, Kushal Khemka, Hari Priandana, Bhabani Sankar Das, and Qifan
Zhang discovered that OpenSSL had a possible NULL dereference in password-
based CMS decryption. An attacker could possibly use this issue to cause
OpenSSL to crash, resulting in a denial of service. (CVE-2026-42766)

Zhanpeng Liu, Guannan Wang, and Guancheng Li discovered that OpenSSL had a
NULL pointer dereference in CRMF EncryptedValue decryption. An attacker
could possibly use this issue to cause OpenSSL to crash, resulting in a
denial of service. (CVE-2026-42767)

Alex Gaynor discovered that OpenSSL had a Bleichenbacher oracle in
CMS_decrypt() and PKCS7_decrypt() with multiple RecipientInfo values. An
attacker could possibly use this issue to obtain sensitive information.
This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS.
(CVE-2026-42768)

Alex Gaynor discovered that OpenSSL had a trust-anchor substitution issue
in CMP rootCaKeyUpdate processing. An attacker could possibly use this
issue to bypass certificate trust validation. This issue only affected
Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-42769)

Alex Gaynor discovered that OpenSSL used attacker-supplied parameters when
validating FFC-DH peers. An attacker could possibly use this issue to
weaken key validation and compromise security guarantees. (CVE-2026-42770)

Alex Gaynor discovered that OpenSSL could ignore the IV in AES-OCB mode on
the EVP_Cipher() path. An attacker could possibly use this issue to bypass
cryptographic protections and obtain sensitive information.
(CVE-2026-45445)

Alex Gaynor discovered that OpenSSL had incorrect tag processing for empty
messages in AES-GCM-SIV and AES-SIV modes. An attacker could possibly use
this issue to bypass cryptographic integrity checks. (CVE-2026-45446)

Thai Duong discovered that OpenSSL had a heap use-after-free in
PKCS7_verify(). An attacker could possibly use this issue to cause OpenSSL
to crash, resulting in a denial of service, or execute arbitrary code.
(CVE-2026-45447)

Zehua Qiao and Jinwen He discovered that OpenSSL had a possible heap buffer
overflow in ASN.1 multibyte string conversion. An attacker could possibly
use this issue to cause OpenSSL to crash, resulting in a denial of service,
or execute arbitrary code. (CVE-2026-7383)

Bhabani Sankar Das discovered that OpenSSL had an out-of-bounds read in CMS
password-based decryption. An attacker could possibly use this issue to
cause OpenSSL to crash, resulting in a denial of service. (CVE-2026-9076)

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
26.04 LTS resolute libssl3t64 –  3.5.5-1ubuntu3.2
openssl –  3.5.5-1ubuntu3.2
25.10 questing libssl3t64 –  3.5.3-1ubuntu3.4
openssl –  3.5.3-1ubuntu3.4
24.04 LTS noble libssl3t64 –  3.0.13-0ubuntu3.11
openssl –  3.0.13-0ubuntu3.11
22.04 LTS jammy libssl3 –  3.0.2-0ubuntu1.25
openssl –  3.0.2-0ubuntu1.25

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›