GHSA-G78J-46J5-97CR vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-RHX3-FG8P-F9M4 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2026-22795 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-V2VR-926Q-29FR vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-W9RV-XC8M-CMQP vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-W42R-PH9F-9X66 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-11187 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-X77R-97GW-WH89 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-66199 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-15468 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69420 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69418 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-5888-36J9-C92P vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-69421 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

GHSA-3VQQ-45QG-2XF6 vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

EUVD-2025-206450

Discourse is an open source discussion platform. Versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0 have a content-security-policy-mitigated cross-site scriptinv vulnerability on the Discourse Math plugin when using its KaTeX variant. This issue is patched in versions 3.5.4, 2025.11.2,...

openssl security update

3.5.1-7.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.1-7 - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-22795 CVE-2026-227...

CVE-2025-22234

The fix applied in CVE-2025-22228 inadvertently broke the timing attack mitigation implemented in DaoAuthenticationProvider. This can allow attackers to infer valid usernames or other authentication behavior via response-time differences under certain configurations. Mitigation Mitigation for thi...

AZL-78552 CVE-2026-22795 affecting package openssl-fips-provider 3.1.2-1

Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS12 file. Impact summary: An application processing a malformed PKCS12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type...

AZL-78546 CVE-2025-69418 affecting package openssl-fips-provider 3.1.2-1

Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs whose length is not a multipleof 16 bytes can leave the final partial block unencrypted and unauthenticated.Impact summary: The trailing 1-15 bytes of a message may be exposed...