SUSE-SU-2026:3486-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

Security update for openssl-1_1

This update for openssl-11 fixes the following issue: HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypp...

SUSE-SU-2026:3457-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

USN-8625-1: OpenSSL vulnerability

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This issue is known as the "HollowByte"...

USN-8625-1 openssl vulnerability

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This issue is known as the "HollowByte"...

PT-2026-76549

It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This issue is known as the "HollowByte"...

SUSE SLES16: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:22947-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:22947-1 advisory. This update for openssl-3 fixes the following issue: - HollowByte DoS via attacker-controlled memory allocation bsc1271712. Tenable has...

openSUSE 16: libopenssl-3-devel / libopenssl-3-fips-provider / etc (openSUSE-SU-2026:21443-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21443-1 advisory. This update for openssl-3 fixes the following issue: - HollowByte DoS via attacker-controlled memory allocation bsc1271712. Tenable has extracted the...

SUSE-SU-2026:22947-1 Security update for openssl-3

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

SUSE-SU-2026:22939-1 Security update for openssl-3

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

SUSE-SU-2026:22955-1 Security update for openssl-3

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

OPENSUSE-SU-2026:21443-1 Security update for openssl-3

This update for openssl-3 fixes the following issue: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712...

PT-2026-61698

you don't need to overthink this 💡 an 11-byte TLS request can freeze server memory. that's the OpenSSL HollowByte vulnerability. here's what happened: a high-severity flaw CVE-2025-35588 discovered in OpenSSL versions 3.4.0, 3.3.0 to 3.3.3, 3.2.0… https://t.co/yXNb1p6oxS...

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that never arrives. On the glibc systems Okta tested, that memory is gone until the process restarts. OpenSSL shipped the HollowByte fix in June with no CVE, no advisory, and no changelog entry...