CVE-2025-11187

CVE-2025-11187 Stack buffer overflow in PKCS12 PBMAC1 PBKDF2 keylength OpenSSL 3.X Found this stack buffer overflow like a year ago, turned out to be a duplicate CVE-2025-11187 issue occurs in libcrypto's PKCS PBMAC1 handling when PBKDF2's keylength is attacker-controlled, It causes a write past ...

SymCrypt-OpenSSL

SCOSSL - The SymCrypt engine and provider for OpenSSL The SymCrypt engine and provider for OpenSSL SCOSSL allow the use of OpenSSL with SymCrypt as the provider for core cryptographic operations. The primary motivation for this is to support FIPS certification, as vanilla OpenSSL 1.1.1 does not...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4418-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4418-1 advisory. This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset...

SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:4412-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4412-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

SUSE-SU-2026:4419-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issue: CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1280587. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2026:4418-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issue: - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset bsc1280587...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

SUSE-SU-2026:4412-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4040-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4040-1 advisory. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap...

SUSE SLES15 Security Update : openssl-3-livepatches (SUSE-SU-2026:4038-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4038-1 advisory. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap...

SUSE-SU-2026:23788-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712. - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate bsc1274792. - CVE-2026-63072: Heap Buffer Overflow in CMS Key...

SUSE-SU-2026:23794-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - "HollowByte" DoS via attacker-controlled memory allocation bsc1271712. - CVE-2026-14457: RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate bsc1274792. - CVE-2026-63072: Heap Buffer Overflow in CMS Key...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

SUSE-SU-2026:4040-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc1274791. CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1274792. CVE-2026-18798: QUIC serv...

SUSE-SU-2026:4039-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-14456: unbounded memory growth in QUIC server incoming channel queue bsc1274791. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1274792. - CVE-2026-18798: QUI...