DSA-6465-1 openssl - security update
Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service. Additional details can be found in the upstream advisories: https://openssl-library.org/news/secadv/20260813.txt https://openssl-library.org/news/secadv/20260825.txt https://security-tracker.debian.org/tracker/DSA-6465-1
CSIRTS triage
- What
- OpenSSL contains multiple vulnerabilities resulting in denial of service conditions.
- Who is affected
- All OpenSSL deployments using affected versions across all systems.
- Urgency
- High; multiple DoS vulnerabilities can disrupt TLS/SSL services, though exploitation details are limited in the advisory.
- Action
- Update OpenSSL to the patched version referenced in DSA-6465-1 for Debian systems and check upstream advisories for other distributions.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch OpenSSL
Get an email when a new OpenSSL advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://lists.debian.org/debian-security-announce/2026/msg00376.html
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-144560.61% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 47% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-14456 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-14457 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-18798 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-54874 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-63072 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-63073 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-63074 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-63075 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-63076 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-75803 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- unknownUSN-8678-1: OpenSSL vulnerabilitiesubuntu
- unknownCVE-2026-75803: Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report su…nvd
- highCVE-2026-63076: Issue summary: OpenSSL CMP password based protection verification only checks whether the prot…nvd
- highCVE-2026-63075: Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-elici…nvd
- mediumCVE-2026-63074: Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificate…nvd
- unknownCVE-2026-63073: Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguis…nvd
- highCVE-2026-63072: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the…nvd
- highCVE-2026-54874: Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress cau…nvd
- highCVE-2026-18798: Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel crea…nvd
- highCVE-2026-14457: Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled…nvd
- medium[NEW] [medium] OpenSSL: Vulnerability enables denial of servicecert-bund
- unknownVulnerability in OpenSSL (August 14, 2026)cert-fr-avis
More from Debian Security Advisories
- unknownDSA-6466-1 linux - security update2026-08-25
- unknownDSA-6464-1 erlang - security update2026-08-25
- unknownDSA-6463-1 webkit2gtk - security update2026-08-24
- unknownDSA-6462-1 zfs-linux - security update2026-08-24
- unknownDSA-6460-1 openjdk-25 - security update2026-08-23