openssl security, bug fix, and enhancement update

An update is available for openssl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...

RockyLinux 10 : openssl (RLSA-2026:67154)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67154 advisory. openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUIC server may trigger double free when...

Important: Red Hat Security Advisory: openssl security, bug fix, and enhancement update

An update for openssl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: openssl security, bug fix, and enhancement update

An update for openssl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RHEL 9 : openssl (RHSA-2026:67165)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67165 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

ALSA-2026:67154 Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUI...

SUSE-SU-2026:4040-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

SUSE-SU-2026:4038-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

SUSE-SU-2026:4032-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. - CVE-2026-63074: CMP indefinite cache growth of...

SUSE-SU-2026:23473-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-75803: AEAD forgeries with empty ciphertext when using EVPCipher bsc1275837. - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overfl...

SUSE-SU-2026:23538-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

SUSE-SU-2026:3866-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release . - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. - CVE-2026-63074: unbounded growth of extraCerts...

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

...

openssl: invalid pointer dereference in CMP server via crafted protectionAlg

A flaw was found in OpenSSL. A crafted CMP Certificate Management Protocol message can cause an invalid pointer dereference due to a missing type check in the password-based protection verification. A remote, unauthenticated attacker can crash applications acting as a CMP server or client,...

CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

UBUNTU-CVE-2026-63076

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...

OpenSSL -- Multiple vulnerabilities

The OpenSSL poject reports: Heap Buffer Overflow in CMS Key Unwrapping CVE-2026-63072 Moderate Invalid Pointer Dereference in CMP Server via Crafted protectionAlg CVE-2026-63076 Moderate RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate CVE-2026-14457 Low Excessive...

Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid...