GHSA-G78J-46J5-97CR vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-R9HF-RXJM-GV2F vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-V2VR-926Q-29FR vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-X77R-97GW-WH89 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2025-15468 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2025-15469 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2025-69418 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2025-69419 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2025-69420 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-22796 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-3VQQ-45QG-2XF6 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-78QR-24V5-7Q73 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-HPC7-GCQM-58FV vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-RHX3-FG8P-F9M4 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-W42R-PH9F-9X66 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-W9RV-XC8M-CMQP vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-WVHQ-3H88-RF6G vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

EUVD-2025-206450

Discourse is an open source discussion platform. Versions prior to 3.5.4, 2025.11.2, 2025.12.1, and 2026.1.0 have a content-security-policy-mitigated cross-site scriptinv vulnerability on the Discourse Math plugin when using its KaTeX variant. This issue is patched in versions 3.5.4, 2025.11.2,...

openssl security update

3.5.1-7.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.1-7 - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-22795 CVE-2026-227...

CVE-2025-22234

The fix applied in CVE-2025-22228 inadvertently broke the timing attack mitigation implemented in DaoAuthenticationProvider. This can allow attackers to infer valid usernames or other authentication behavior via response-time differences under certain configurations. Mitigation Mitigation for thi...