Apply Debian 12 patches for Sep. OpenSSL 3.0 CVEs by Sharpie · Pull Request #322 · OpenVoxProject/puppet-runtime

Sharpie · 2026-10-28T13:57:35Z

OpenSSL 3.0 reached end of life at the beginning of September 2026. The OpenSSL releases on September 29th contained the usual round of CVE fixes.

Debian 12, Bookworm, also ships OpenSSL 3.0. This commit applies their backported patchset from:

These patches address the following CVEs in OpenSSL 3.0:

I have:

read the CONTRIBUTING.md document
read and accepted the Developer Certificate of Origin document and added a Signed-off-by annotation to each of my commits
read and accepted the AI Policy document and added Generated-by or Assisted-by annotations to each of my commits created with the help of an AI agent
tested this code
included documentation (including possible behaviour changes)
documented the code
added or modified regression test(s)
added or modified unit test(s)

OpenSSL 3.0 reached end of life at the beginning of September 2026. The OpenSSL releases on September 29th contained the usual round of CVE fixes. Debian 12, Bookworm, also ships OpenSSL 3.0. This commit applies their backported patchset from: https://salsa.debian.org/debian/openssl/-/tree/debian/bookworm/debian/patches These patches address the following CVEs in OpenSSL 3.0: - CVE-2026-35189 - CVE-2026-75805 - CVE-2026-75806 - CVE-2026-54872 - CVE-2026-77696 - CVE-2026-84782 Signed-off-by: Charlie Sharpsteen <[email protected]>

Sharpie added the security Related to a security issue label Oct 28, 2026

Sharpie force-pushed the openssl-30-sep-cves branch from c2b3068 to 0162730 Compare October 28, 2026 14:00

Sharpie force-pushed the openssl-30-sep-cves branch from 0162730 to 36ccf7c Compare October 28, 2026 14:05

nmburgan approved these changes Oct 28, 2026

View reviewed changes

Sharpie merged commit 15cd0c9 into OpenVoxProject:main Oct 28, 2026
209 of 211 checks passed

Navigation Menu