OpenSSL security advisory (AV26-846)
Canada's Cyber Centre relayed an OpenSSL advisory (AV26-846) covering vulnerabilities fixed across seven branches, urging users to update to patched releases.
Canadian Centre for Cyber Security bulletin AV26-846 states that OpenSSL is affected by vulnerabilities fixed in 1.0.2zr, 1.1.1zi, 3.0.22, 3.4.7, 3.5.8, 3.6.4, and 4.0.2. Given OpenSSL's ubiquity in TLS stacks, administrators should review the OpenSSL advisories and apply updates. The bulletin includes no exploitation details or CVE identifiers.
- Affected branches span 1.0.2, 1.1.1, 3.0, 3.4, 3.5, 3.6, and 4.0
- Patched versions: 1.0.2zr, 1.1.1zi, 3.0.22, 3.4.7, 3.5.8, 3.6.4, 4.0.2
- No exploit details or CVEs listed in the bulletin
- Vendors
- OpenSSL
- Products
- OpenSSL
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
From the original article
Serial Number: AV26-846 Date: August 25, 2026 As of August 25, 2026, OpenSSL is affected by vulnerabilities in the following product: OpenSSL Prior to 1. 0. 2zr Prior to 1.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.