OESA-2026-2782 openssl security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause...

OESA-2026-2772 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful...

OESA-2026-2773 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful...

OESA-2026-2750 shim security update

Initial UEFI bootloader that handles chaining to a trusted full \ bootloader under secure boot environments. Security Fixes: Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bi...

OESA-2026-2748 compat-openssl11 security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause...

OESA-2026-2749 compat-openssl11 security update

OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause...

Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issues CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7verify bsc1266357. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can ru...

SUSE-SU-2026:2621-1 Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issues - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7verify bsc1266357...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7verify bsc1266357. CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption bsc1266349. CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption bsc1266341...

SUSE-SU-2026:2614-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7verify bsc1266357. - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption bsc1266349. - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption bsc1266341....

Moderate: Red Hat Security Advisory: openssl-fips-provider security update

An update for openssl-fips-provider is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, and Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a...

openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without prope...

CVE-2026-42768 affecting package openssl for versions less than 3.3.7-3

CVE-2026-42768 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-7383 affecting package openssl for versions less than 3.3.7-3

CVE-2026-7383 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3

CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-42766 affecting package openssl for versions less than 3.3.7-3

CVE-2026-42766 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-42767 affecting package openssl for versions less than 3.3.7-3

CVE-2026-42767 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-45445 affecting package openssl for versions less than 3.3.7-3

CVE-2026-45445 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-45446 affecting package openssl for versions less than 3.3.7-3

CVE-2026-45446 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-34183 affecting package openssl for versions less than 3.3.7-3

CVE-2026-34183 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...