USN-8861-1

It was discovered that OpenSSL had an inefficient algorithm in its QUIC stream reassembly implementation. A remote attacker could possibly use this issue to cause OpenSSL to use excessive CPU resources, leading to a denial of service. (CVE-2026-42772) It was discovered that OpenSSL did not properly limit memory allocated for QUIC packet buffers. A remote attacker could possibly use this issue to cause OpenSSL to use excessive memory resources, leading to a denial of service. (CVE-2026-54873) Update Instructions: Run `sudo pro fix USN-8861-1` to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: libssl3t64 - 3.5.5-1ubuntu3.7 openssl - 3.5.5-1ubuntu3.7 openssl-provider-legacy - 3.5.5-1ubuntu3.7 No subscription required