CVE-2026-22795 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-G78J-46J5-97CR vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-R9HF-RXJM-GV2F vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-RHX3-FG8P-F9M4 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-V2VR-926Q-29FR vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-W42R-PH9F-9X66 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-W9RV-XC8M-CMQP vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69418 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-66199 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69420 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-3VQQ-45QG-2XF6 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-5888-36J9-C92P vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-15468 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69421 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-X77R-97GW-WH89 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

Important: Red Hat Security Advisory: openssl security update

An update for openssl is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector IV when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: CVE-2026-22795: Missing ASN1TYPE validation in PKCS12 parsing bsc1256839. CVE-2025-69420: Missing ASN1TYPE validation in TSRESPverifyresponse function bsc1256837. CVE-2025-69421: NULL Pointer Dereference in PKCS12itemdecryptd2iex function...

SUSE-SU-2026:0331-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2026-22795: Missing ASN1TYPE validation in PKCS12 parsing bsc1256839. - CVE-2025-69420: Missing ASN1TYPE validation in TSRESPverifyresponse function bsc1256837. - CVE-2025-69421: NULL Pointer Dereference in PKCS12itemdecryptd2iex functi...