CVE-2026-78123: Expired Pointer Dereference

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

CVE-2026-78124: Missing Release of Memory after Effective Lifetime

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

Fedora 45 : openssl (2026-3d5ab046c4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3d5ab046c4 advisory. Rebase to OpenSSL 4.0.2 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

RHEL 6 : openssl (RHSA-2026:66524)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66524 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

CVE-2008-0166-BTC-satoshi-mining-wallets

GhostRNG — 漏洞分析：Bitcoin 2009-2012 中的 OpenSSL 0.9.8c CVE-2008-0166 作者： 基于 bitcoin-code-r252 0.1.5 / 0.2.0 / 0.3.24 以及 原始 make-OpenSSL-0-9-8c-vulnerable-again.diff THC 的分析 日期： 2026-09-10 1. 引言 Bitcoin 0.1.5（2009 年 1 月）仅在 Windows 上运行，使用 OpenSSL 0.9.8c 进行 EC 密钥生成（ECKEYgeneratekey）。2008 年，...

io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

openssl openssl-4.1.0-alpha1

Welcome to the OpenSSL Project !openssl logowww.openssl.org !github actions ci badgegithub actions ci OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security TLS, formerly SSL, Datagram TLS DTLS, and QUIC protocols. The protocol implementations ar...

io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration

A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...

SUSE-SU-2026:3835-1 Security update for openssl, openssl-3

This update for openssl, openssl-3 fixes the following issues: OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support Security issues fixed: CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling bsc1266347 CVE-2026-34182...

SUSE CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

SUSE CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

[SECURITY] Fedora 43 Update: openssl-3.5.8-1.fc43

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

Fedora 43 : openssl (2026-00b3d3d018)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-00b3d3d018 advisory. Rebase to OpenSSL 3.5.8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

[SECURITY] Fedora 44 Update: openvpn-2.7.7-1.fc44

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

List of Security Fixes and Improvements in Veeam Plug-in for HPE Morpheus VM Essentials

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for HPE Morpheus VM Essentials. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between...

List of Security Fixes and Improvements in Veeam Plug-in for Proxmox VE

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Proxmox VE. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...

List of Security Fixes and Improvements in Veeam Plug-in for oVirt KVM

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for oVirt KVM. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...

List of Security Fixes and Improvements in Veeam Plug-in for KubeVirt

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for KubeVirt. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...