GHSA-RHX3-FG8P-F9M4 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-V2VR-926Q-29FR vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-W42R-PH9F-9X66 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-W9RV-XC8M-CMQP vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-15468 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69420 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-3VQQ-45QG-2XF6 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-5888-36J9-C92P vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-X77R-97GW-WH89 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-66199 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69421 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69418 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

RHSA-2026:0794 Red Hat Security Advisory: openssl and openssl-fips-provider security update

Bulletin has no description...

openssl:provider: Heap-buffer-overflow in aes_xts_init

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5367200136626176 Project: openssl Fuzzing Engine: afl Fuzz Target: provider Job Type: aflasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x763d9d30c250 Crash Stat...

CVE-2024-4741 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34, openssl-provider-fips...

GHSA-6VGQ-8QJQ-H578 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34, openssl-provider-fips...

AZL-78564 CVE-2024-4741 affecting package openssl-fips-provider 3.1.2-2

Issue summary: Calling the OpenSSL API function SSLfreebuffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code...

openssl:provider: Null-dereference READ in do_evp_kdf

Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5068142433861632 Project: openssl Fuzzing Engine: afl Fuzz Target: provider Job Type: aflasanopenssl Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State:...

AZL-78543 CVE-2024-2511 affecting package openssl-fips-provider 3.1.2-2

Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...

wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in use

A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the traffic sent from Wildfly and downgrade the connection to a weaker version of TLS, potentially breaking the encryption...