Update for openssl available

Feedback Feature Request
1

Can we quickly get the update for openssl ? (For those of us on Stable branch.) I read about some High Severity vulnerabilities that have been fixed recently.

openssl-library.org

2

On testing I have:

pacman -Q openssl
openssl 3.6.1-1

It says:

Affected

from 3.6.0 before 3.6.1

So not affected. (If you are on stable, I imagine it’s days .. hours away? :grinning_face: )

3

Hope so, I feel kind of vulnerable right now. :face_with_peeking_eye:

4

You could of course always switch to the Testing branch… :wink:

:backhand_index_pointing_down:

sudo pacman-mirrors -a -B testing && sudo pacman-mirrors -f && sudo pacman -Syyu
1 Like
5

Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity.
– Vulnerabilities | OpenSSL Library

It is unlikely you would be affected :slight_smile:

# mbn command is provided by manjaro-check-repos package
 $ mbn info openssl -q
Branch         : archlinux
Name           : openssl
Version        : 3.6.1-1
Repository     : core
Build Date     : Tue 27 Jan 2026 16:32:58 
Packager       : Pierre Schmitz <pierre@archlinux.org>
Branch         : unstable
Name           : openssl
Version        : 3.6.1-1
Repository     : core
Build Date     : Tue 27 Jan 2026 16:32:58 
Packager       : Pierre Schmitz <pierre@archlinux.org>
Branch         : testing
Name           : openssl
Version        : 3.6.1-1
Repository     : core
Build Date     : Tue 27 Jan 2026 16:32:58 
Packager       : Pierre Schmitz <pierre@archlinux.org>
Branch         : stable
Name           : openssl
Version        : 3.6.0-1
Repository     : core
Build Date     : Sat 04 Oct 2025 13:25:29 
Packager       : Pierre Schmitz <pierre@archlinux.org>

As of 2026-02-01T10:15:00Z

 $ mbn info openssl -q
Branch         : archlinux
Name           : openssl
Version        : 3.6.1-1
Repository     : core
Build Date     : Tue 27 Jan 2026 16:32:58 
Packager       : Pierre Schmitz <pierre@archlinux.org>
Branch         : unstable
Name           : openssl
Version        : 3.6.1-1
Repository     : core
Build Date     : Tue 27 Jan 2026 16:32:58 
Packager       : Pierre Schmitz <pierre@archlinux.org>
Branch         : testing
Name           : openssl
Version        : 3.6.1-1
Repository     : core
Build Date     : Tue 27 Jan 2026 16:32:58 
Packager       : Pierre Schmitz <pierre@archlinux.org>
Branch         : stable
Name           : openssl
Version        : 3.6.1-1
Repository     : core
Build Date     : Tue 27 Jan 2026 16:32:58 
Packager       : Pierre Schmitz <pierre@archlinux.org>
2 Likes
6

Thank you very much for the easy to use code. :slightly_smiling_face: In the distant past I did use Testing branch. Maybe I will try it again some day.

2 Likes
7

Today’s new Stable Update contains the updated openssl package. :wink: :backhand_index_pointing_down:

1 Like