CVE-2026-42769 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-34183 vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-28390 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-H2CC-WX97-XP8V vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-Q457-VX59-3FQG vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-GXHG-7JX8-M22J vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-5PG7-F6XV-J6M4 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-5M8F-M8JV-3RP3 vulnerabilities

Vulnerabilities for packages: openssl...

GHSA-VGXX-5XJ5-Q97X vulnerabilities

Vulnerabilities for packages: openssl...

CVE-2026-28386 vulnerabilities

Vulnerabilities for packages: openssl...

openssl: AES-OCB IV Ignored on EVP_Cipher() Path

A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface EVPCipher will have their provided Initialization Vector IV silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the...

openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

A flaw was found in the Certificate Management Protocol CMP implementation within OpenSSL. An attacker with existing Registration Authority RA level credentials could exploit an error in the certificate verification process during a Root Certificate Authority CA key update. This vulnerability...

openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol CMP server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format CRMF CertRepMessage with a specific malformed EncryptedValue...

GHSA-3C8F-QQ7H-7QV6 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-VC8W-W49C-4JGJ vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-V446-XWFM-X7MR vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-RPJ2-P5PJ-R33V vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-F5VX-F6JP-89J6 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-45446 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42770 vulnerabilities

Vulnerabilities for packages: openssl-provider-fips-3.6.0, openssl-provider-fips-3.1.2, libcrypto3-2.34, openssl, openssl-provider-fips...