Remediating 18 OpenSSL CVEs at Scale with Puppet (opens in new tab)

Written by Paul Reed. The June 2026 OpenSSL advisory is a big one. 18 vulnerabilities, one rated high severity with remote code execution potential, and a disclosure credited in part to Anthropic's Mythos model working alongside researcher Alex Gaynor. Six of those CVEs trace back to that collaboration. If you manage infrastructure at scale, here is how to scope your exposure and get patched cleanly. The Vulnerability: What CVE-2026-45447 Actually Does CVE-2026-45447 is a heap use-after-free ...