Three CVE&#x27;s listed as currently vulnerable here: <a href="https:&#x2F;&#x2F;security-tracker.debian.org&#x2F;tracker&#x2F;source-package&#x2F;openssl" rel="nofollow">https:&#x2F;&#x2F;security-tracker.debian.org&#x2F;tracker&#x2F;source-package&#x2F;o...</a><p>With links to git commits:<p>CVE-2016-0705: <a href="https:&#x2F;&#x2F;git.openssl.org&#x2F;?p=openssl.git;a=commit;h=ab4a81f69ec88d06c9d8de15326b9296d7f498ed" rel="nofollow">https:&#x2F;&#x2F;git.openssl.org&#x2F;?p=openssl.git;a=commit;h=ab4a81f69e...</a><p>CVE-2016-0798: <a href="https:&#x2F;&#x2F;git.openssl.org&#x2F;?p=openssl.git;a=commit;h=59a908f1e8380412a81392c468b83bf6071beb2a" rel="nofollow">https:&#x2F;&#x2F;git.openssl.org&#x2F;?p=openssl.git;a=commit;h=59a908f1e8...</a><p>CVE-2016-0799: <a href="https:&#x2F;&#x2F;git.openssl.org&#x2F;?p=openssl.git;a=commit;h=a801bf263849a2ef773e5bc0c86438cbba720835" rel="nofollow">https:&#x2F;&#x2F;git.openssl.org&#x2F;?p=openssl.git;a=commit;h=a801bf2638...</a>