OpenSSL September advisory fixes DTLS retransmission: check bundled libraries too
OpenSSL's 29 September security advisory includes a DTLS handshake retransmission issue that may leak memory or crash applications under certain conditions. Businesses should check the libraries actually loaded by applications and appliances, not just system package names.
Source Facts
OpenSSL issued a security advisory on 29 September, rating CVE-2026-84782 as high severity. The issue involves retransmission handling while writes of DTLS handshake messages are paused, potentially sending content beyond the original message buffer or disrupting subsequent write state.
The advisory describes impacts including disclosure of heap memory to a communications peer, crashes and denial of service. It lists multiple affected version series. Applicability depends on the versions and features used; not all TLS services face the same circumstances.
Cryptographic libraries are often bundled separately by multiple products. After updating the operating system, confirm whether applications load the fixed version and whether restarts are needed.
Original sources
OpenSSL Security Advisory [29th September 2026]
Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationAmazon Linux updates its Docker security advisory: check container hosts and archive handling
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
Illustration