CVE-2026-63074

creationtimestamp| type| source ---|---|--- 2026-08-26 01:09:35+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3mtx5jnfojs24 2026-08-26 12:35:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mtydtvyhrf2r...

DEBIAN-CVE-2026-63074

Issue summary: The OpenSSL Certificate Management Protocol CMP caches additional certificates extraCerts sent in a CMP message, but never expunges them for instance if they are invalid. If a server reuses an OSSLCMPCTX frequently, this cache of extraCerts may grow unboundedly, and a malicious...