Debian/openssl: medium 5.3
Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary
Action: Upgrade openssl to 3.6.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.5-1 | - |
Fixed versions
| 3.6.5-1 |
Sources
- osv: DEBIAN-CVE-2026-75804#Debian:14/openssl
- https://security-tracker.debian.org/tracker/CVE-2026-75804
published · modified · JSON