CLSA-2026-1786972455 openssl11: Fix of 2 CVEs

CVE-2026-34180: avoid truncating a long ASN.1 content length to int in asn1exc2i, which caused a heap buffer over-read for primitive elements larger than 2GB - CVE-2026-42766: reject a CMS PasswordRecipientInfo whose keyDerivationAlgorithm is absent instead of dereferencing NULL...

CLSA-2026-1787059408 openssl: Fix of 2 CVEs

CVE-2026-34180: widen asn1exc2i length to long and reject truncating lengths to avoid an ASN1STRING heap buffer over-read - CVE-2026-42766: guard against a missing CMS PasswordRecipientInfo KeyDerivationAlgorithm to prevent a NULL pointer dereference...

CLSA-2026-1786545312 openssl11: Fix of 2 CVEs

CVE-2026-34180: avoid truncating a long ASN.1 content length to int in asn1exc2i, which caused a heap buffer over-read for primitive elements larger than 2GB - CVE-2026-42766: reject a CMS PasswordRecipientInfo whose keyDerivationAlgorithm is absent instead of dereferencing NULL...

CLSA-2026-1786544972 openssl11: Fix of 2 CVEs

CVE-2026-34180: avoid truncating a long ASN.1 content length to int in asn1exc2i, which caused a heap buffer over-read for primitive elements larger than 2GB - CVE-2026-42766: reject a CMS PasswordRecipientInfo whose keyDerivationAlgorithm is absent instead of dereferencing NULL...

openssl: Fix of 5 CVEs

CVE-2026-7383: fix signed integer overflow when sizing Unicode output in ASN1mbstringncopy - CVE-2026-9076: fix heap out-of-bounds read in kekunwrapkey check-byte validation - CVE-2026-28388: fix NULL pointer dereference when delta CRL lacks the CRL Number extension - CVE-2026-34180: avoid length...

CLSA-2026-1785335298 openssl: Fix of 5 CVEs

CVE-2026-34180: fix heap buffer over-read in ASN.1 content parsing caused by truncating a long content length to int - CVE-2026-7383: fix heap buffer overflow in ASN1mbstringncopy caused by signed integer overflow when computing the output length - CVE-2026-42766: fix NULL pointer dereference...

CLSA-2026-1785335008 openssl: Fix of 5 CVEs

CVE-2026-34180: fix heap buffer over-read in ASN.1 content parsing caused by truncating a long content length to int - CVE-2026-7383: fix heap buffer overflow in ASN1mbstringncopy caused by signed integer overflow when computing the output length - CVE-2026-42766: fix NULL pointer dereference...

CLSA-2026-1781258528 Fix of 5 CVEs

SECURITY UPDATE: Heap buffer overflow in ASN1mbstringncopy where the destination length for BMPSTRING and UNIVERSALSTRING output is computed by a signed left shift that can overflow int, producing an undersized allocation followed by out-of-bounds writes for oversized attacker-controlled inputs...