OpenSSL Security Update Patches 9 Denial-of-Service Flaws

OpenSSL released a security update (Aug 25, 2026) addressing nine flaws across QUIC, DTLS, CMS, CMP and AEAD handling; two are Moderate (a QUIC double-free and a CMS heap overflow) and the rest are Low severity, mostly causing denial-of-service. No exploitation in the wild or public proofs-of-concept have been reported; administrators are advised to update to the fixed releases for their branch or limit exposure of QUIC, DTLS, and CMP endpoints until patched.