AZL-97671 CVE-2026-75803 affecting package openssl-fips-provider 3.1.2-2

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

AZL-97668 CVE-2026-54874 affecting package openssl-fips-provider 3.1.2-2

Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...

openssl security update

3.5.5-5.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.5-5 - Patch asn1d2ireadbio to read headers without blocking Resolves: RHEL-169991 1:3.5.5-4 - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183,...

openssl security update

3.5.5-5.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.5-5 - Patch asn1d2ireadbio to read headers without blocking Resolves: RHEL-169991 1:3.5.5-4 - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183,...

Oracle Linux 9 : openssl (ELSA-2026-50379)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50379 advisory. 3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: ad...

openssl security update

3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 - Enable openssl-fips-provider dependency...

RHSA-2026:28832 Red Hat Security Advisory: openssl-fips-provider security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: openssl-fips-provider security update

An update for openssl-fips-provider is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, and Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a...

RHEL 9 : openssl-fips-provider (RHSA-2026:28832)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28832 advisory. This package provides a custom build of the OpenSSL FIPS module that has been submitted to NIST for certification. Security Fixes: openssl: openssl:...

RHSA-2026:27745 Red Hat Security Advisory: openssl-fips-provider security update

Bulletin has no description...

RHSA-2026:27746 Red Hat Security Advisory: openssl-fips-provider security update

Bulletin has no description...

RHSA-2026:27744 Red Hat Security Advisory: openssl-fips-provider security update

Bulletin has no description...

Moderate: Red Hat Security Advisory: openssl-fips-provider security update

An update for openssl-fips-provider is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: openssl-fips-provider security update

An update for openssl-fips-provider is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Moderate: Red Hat Security Advisory: openssl-fips-provider security update

An update for openssl-fips-provider is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

AZL-89799 CVE-2026-7383 affecting package openssl-fips-provider 3.1.2-2

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

AZL-89790 CVE-2026-9076 affecting package openssl-fips-provider 3.1.2-2

Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kekunwrapkey. Impact summary: A heap buffer over-read may trigger a crash which leads to Denial of...

AZL-89808 CVE-2026-45446 affecting package openssl-fips-provider 3.1.2-2

Issue summary: The implementations of AES-SIV RFC 5297 and AES-GCM-SIV RFC 8452 mishandle the authentication of AAD Additional Authenticated Data with an empty ciphertext allowing a forgery of such messages. Impact summary: An attacker can forge empty messages with arbitrary AAD to the victim's...

AZL-89787 CVE-2026-42767 affecting package openssl-fips-provider 3.1.2-2

Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Service. An attacker controlling a CMP server or acti...

AZL-89805 CVE-2026-42766 affecting package openssl-fips-provider 3.1.2-2

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...