CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-63073 vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

CVE-2026-63073

creationtimestamp| type| source ---|---|--- 2026-08-26 01:09:35+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mtx5jnfojs24 2026-08-26 12:35:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtvyhrf2r 2026-09-01 00:02:16+00:00| seen|...

DEBIAN-CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...