27921 matches found
Updated openssl packages fix a security vulnerability
Out-of-bounds read & write in RFC 3211 KEK Unwrap. CVE-2025-9230...
SUSE-SU-2025:20896-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues: - CVE-2025-9230: Fix out-of-bounds read & write in RFC 3211 KEK unwrap bsc1250232 - Disable LTO for userspace livepatching jscPED-13245...
Security update for openssl-3
This update for openssl-3 fixes the following issues: Security issues: CVE-2025-9230: Fix out-of-bounds read & write in RFC 3211 KEK unwrap bsc1250232 Disable LTO for userspace livepatching jscPED-13245 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in cryptography-44.0.0-cp37-abi3-macosx_10_9_universal2.whl
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in cryptography-44.0.0-cp37-abi3-macosx109universal2.whl Vulnerability Details CVEID:CVE-2024-12797 DESCRIPTION: Issue summary: Clients using RFC7250 Raw Public Keys RPKs to authenticate a server may fa...
CVE-2025-41721
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
CVE-2025-41721 Sauter: Command Injection
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
CVE-2025-41721
CVE-2025-41721 describes a command-injection-like issue where a high-privilege remote attacker can influence parameters passed to the openssl command when adding a password-protected self-signed certificate, caused by improper neutralization of special elements. The vulnerability is documented ac...
CVE-2025-41721 Sauter: Command Injection
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
EUVD-2025-35329
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
openssl:x509: Heap-buffer-overflow in ossl_x509_check_cert_time
Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5880369384849408 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 14 Crash Address: 0x7b72ac1e049d...
openssl:x509: Heap-buffer-overflow in ossl_x509_check_cert_time
Project: https://github.com/openssl/openssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5818603716018176 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: x509 Job Type: libfuzzerasanopenssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 14 Crash Address: 0x76120f7e5f1d...
PT-2025-43027
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
CVE-2025-41721: Improper Neutralization of Special Elements used in a Command
A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate...
Sauter modu680-AS command injection vulnerability
Sauter modu680-AS is a modular automation station cum web server from Sauter, Switzerland. A command injection vulnerability exists in Sauter modu680-AS that stems from improper neutralization of special elements when adding password-protected self-signed certificates, which could allow an elevat...
CVE-2025-9230 affecting package openssl for versions less than 3.3.5-1
CVE-2025-9230 affecting package openssl for versions less than 3.3.5-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-9232 affecting package openssl for versions less than 3.3.5-1
CVE-2025-9232 affecting package openssl for versions less than 3.3.5-1. An upgraded version of the package is available that resolves this issue...
SUSE SLES11: libopenssl1-devel / libopenssl1_0_0 / libopenssl1_0_0-32bit / etc (SUSE-SU-2025:03630-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03630-1 advisory. - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK unwrap bsc1250232. Tenable has extracted the preceding description block directly fr...
SUSE SLED15: libopenssl-1_1-devel / libopenssl1_1 / libopenssl1_1-32bit / etc (SUSE-SU-2025:03635-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03635-1 advisory. - CVE-2025-9230: fixed out of bounds read and write in RFC 3211 KEK unwrap bsc1250232 Tenable has extracted the...
SUSE SLES15 Security Update : openssl-1_1-livepatches (SUSE-SU-2025:03632-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03632-1 advisory. - Add livepatch for CVE-2025-9230 bsc1250410. - Use strong externalization for ssl3setupreadbuffer and ssl3releasereadbuffer - Use strong...
