OpenSSL developers have released a security update fixing 9  security vulnerabilities (CVE-2026-18798, CVE-2026-63072, CVE-2026-63076, CVE-2026-14457, CVE-2026-54874, CVE-2026-63073, CVE-2026-63074, CVE-2026-63075, CVE-2026-75803). An attacker can exploit these vulnerabilities to trigger security restrictions bypass and “denial of service” condition on the target system.

The vulnerabilities were fixed in OpenSSL versions 4.0.2, 3.6.4, 3.5.8, 3.4.7, 3.0.22, 1.1.1zi and 1.0.2zr.

Users are advised to read the OpenSSL update notice and install the necessary updates - openssl-library.org.