Improper Check for Unusual or Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions via the RSASVE encapsulation process. An attacker can obtain sensitive information by supplying an invalid RSA public key and triggering the use of uninitialized memory contents as...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the hexadecimal conversion process of excessively large OCTET STRING values in X.509 certificate extensions such as Subject Key Identifier or Authority Key Identifier. An attacker can cause a crash, execute...

CVE-2026-28389 affecting package openssl for versions less than 3.3.5-5

CVE-2026-28389 affecting package openssl for versions less than 3.3.5-5. A patched version of the package is available...

CVE-2026-31789 affecting package openssl for versions less than 3.3.5-5

CVE-2026-31789 affecting package openssl for versions less than 3.3.5-5. A patched version of the package is available...

CVE-2026-28390 affecting package openssl for versions less than 3.3.5-5

CVE-2026-28390 affecting package openssl for versions less than 3.3.5-5. A patched version of the package is available...

CVE-2026-31790 affecting package openssl for versions less than 3.3.5-5

CVE-2026-31790 affecting package openssl for versions less than 3.3.5-5. A patched version of the package is available...

CVE-2026-28388 affecting package openssl for versions less than 3.3.5-5

CVE-2026-28388 affecting package openssl for versions less than 3.3.5-5. A patched version of the package is available...

AZL-82106 CVE-2026-28390 affecting package openssl-fips-provider 3.1.2-2

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denia...

AZL-82097 CVE-2026-28389 affecting package openssl-fips-provider 3.1.2-2

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of...

AZL-82067 CVE-2026-28389 affecting package openssl for versions less than 3.3.5-5

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of...

AZL-82070 CVE-2026-28390 affecting package openssl for versions less than 3.3.5-5

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denia...

AZL-81944 CVE-2026-31789 affecting package openssl for versions less than 3.3.5-5

Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior. If an attacker c...

AZL-81950 CVE-2026-31790 affecting package openssl for versions less than 3.3.5-5

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

DEBIAN-CVE-2026-31789

Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior. If an attacker c...

DEBIAN-CVE-2026-31790

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

AZL-82103 CVE-2026-28387 affecting package openssl-fips-provider 3.1.2-2

Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of potential consequenc...

AZL-81947 CVE-2026-28387 affecting package openssl for versions less than 3.3.7-2

Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of potential consequenc...

AZL-81953 CVE-2026-28388 affecting package openssl for versions less than 3.3.5-5

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...

AZL-82100 CVE-2026-28388 affecting package openssl-fips-provider 3.1.2-2

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...

DEBIAN-CVE-2026-28386

Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service fo...