PT-2023-2766

🗓️ 07 Feb 2023 00:00:00Reported by Positive TechnologiesType

Cipher.update into could mutate immutable buffers since version 1.8; it now raises an exception.

Reporter	Title	Published	Views	Family All 874
ALT Linux	Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1t-alt1	20 Feb 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1t-alt1	10 Feb 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities	7 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in cryptography affects IBM Cloud Pak for Data System 2.0 (CPDS 2.0) [CVE-2023-0286]	19 Jun 202508:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple OpenSSl denial of service vulnerabilities.	5 Jul 202320:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management	28 Feb 202421:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js and packaged modules affect IBM Business Automation Workflow Configuration Editor	1 Mar 202309:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Access Appliance has multiple security vulnerabilities	14 Oct 202305:03	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by vulnerabilities in the Apache Kafka (kafka-clients) and cryptography packages	9 Mar 202314:08	–	ibm

Source	Link
advisories	www.advisories.mageia.org/MGASA-2023-0071.html
errata	www.errata.almalinux.org/8/ALSA-2023-7096.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/C3DPI3KSRJPJPLUQ4XIGK6Z3PKN2RS4Q
linux	www.linux.oracle.com/errata/ELSA-2023-7096.html
suse	www.suse.com/security/cve/CVE-2022-3602
osv	www.osv.dev/vulnerability/DLA-3331-1
bugzilla	www.bugzilla.redhat.com/2158559
osv	www.osv.dev/vulnerability/SUSE-SU-2023:1767-1
suse	www.suse.com/support/update/announcement/2023/suse-su-20230737-1
ubuntu	www.ubuntu.com/security/CVE-2026-69249

06 Oct 2026 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 46.9

CVSS 3.14.8 - 7.4

EPSS0.71239

SSVC