Security update for libssh

This update for libssh fixes the following issues: CVE-2025-5372: sshkdf returns a success code on certain failures bsc1245314 CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend bsc1245317 CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions...

PT-2025-39425

Name of the Vulnerable Software and Affected Versions glib-networking affected versions not specified Description The OpenSSL backend in glib-networking does not correctly validate the return value from the BIO write function call, which can lead to an out-of-bounds read. Recommendations At the...

curl: Use-after-free in TLS session handling when using OpenSSL TLS backend

A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly,...

curl: Use-after-free in TLS session handling when using OpenSSL TLS backend

A use-after-free flaw was found in the way curl handled TLS session data. The curl versions using the OpenSSL library as their TLS backend could use freed memory after TLS session renegotiation was performed by the OpenSSL library. A malicious TLS server could use this flaw to crash or, possibly,...

Haxx curl Resource management error vulnerability

HAXX Haxx curl is a set of file transfer tools from the Swedish company Haxx HAXX that work at the command line using URL syntax. The tool supports file uploads and downloads and includes a libcurl client-side URL transfer library for program development. A resource management error vulnerability...

curl: Inferior OCSP verification

Libcurl offers "OCSP stapling" via the CURLOPTSSLVERIFYSTATUS option. When set, libcurl verifies the OCSP response that a server responds with as part of the TLS handshake. It then aborts the TLS negotiation if something is wrong with the response. The same feature can be enabled with --cert-stat...

MGASA-2015-0460 Updated python-cryptography packages fix security vulnerability

The OpenSSL backend prior to 1.0.2 made extensive use of assertions to check response codes where our tests could not trigger a failure. However, when Python is run with -O these asserts are optimized away. If a user ran Python with this flag and got an invalid response code this could result in...

PT-2015-7943

Name of the Vulnerable Software and Affected Versions OpenSSL backend versions prior to 1.0.2 python-cryptography versions prior to 1.0.2 python-cryptography-vectors versions prior to 1.0.2 python-pyasn1 versions prior to 0.1.8 Description The issue arises from the use of assertions in the OpenSS...

Security fix for the ALT Linux 5 package strongswan version 4.3.7-alt1.M51.1

April 30, 2013 Michael Shigorin 4.3.7-alt1.M51.1 - applied the upstream provided patch to fix CVE-2013-2944 ECDSA signature vulnerability if openssl backend is loaded...

Security fix for the ALT Linux 6 package strongswan version 4.6.4-alt1.M60T.1

April 30, 2013 Michael Shigorin 4.6.4-alt1.M60T.1 - applied the upstream provided patch to fix CVE-2013-2944 ECDSA signature vulnerability if openssl backend is loaded...