27928 matches found
CVE-2026-63073 vulnerabilities
Vulnerabilities for packages: openssl, eco-python-openssl...
GHSA-VR27-9W4V-HJW2 vulnerabilities
Vulnerabilities for packages: openssl, eco-python-openssl...
CVE-2026-75803 vulnerabilities
Vulnerabilities for packages: openssl, eco-python-openssl...
CLSA-2026-1788860468 openssl: Fix of CVE-2026-28388
CVE-2026-28388: check that a delta CRL carries a CRL Number extension before dereferencing it in checkdeltabase; prevents a NULL pointer dereference and denial of service when a malformed delta CRL is processed...
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...
CLSA-2026-1788856499 Fix CVE(s): CVE-2026-54874, CVE-2026-63072
SECURITY UPDATE: Unbounded memory retention in the DTLS record layer. dtls1bufferrecord adopted the entire live read buffer for every queued record and allocated a fresh one, so a peer could pin roughly 16.7 KB of heap per queued record regardless of how small the record actually was, up to the...
K000163238: OpenSSL vulnerability CVE-2026-54876
Security Advisory Description Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per T...
Security update for curl
This update for curl fixes the following issues: CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. CVE-2026-80230: OpenSSL pinning bypass can allow unauthenticated...
SUSE-SU-2026:4071-1 Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. - CVE-2026-80230: OpenSSL pinning bypass can allow...
K000163232: libssh vulnerability CVE-2026-59847
Security Advisory Description A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection. CVE-2026-59847 Impact There is no impact...
Security update for aws-nitro-enclaves-cli (important)
openSUSE security update: security update for aws-nitro-enclaves-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21782-1 Rating: important References: bsc1257933 bsc1270202 bsc1274300 Cross-References: CVE-2026-25541 CVE-2026-25727 CVE-2026-4167...
EulerOS 2.0 SP12 : openssl (EulerOS-SA-2026-3363)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...
EulerOS 2.0 SP12 : openssl (EulerOS-SA-2026-3288)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...
RHEL 10 : edk2 (RHSA-2026:65132)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:65132 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU...
EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3386)
According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary...
NewStart CGSL MAIN 7.02 : openssl Multiple Vulnerabilities (NS-SA-2026-0112)
The remote NewStart CGSL host, running version MAIN 7.02, has openssl packages installed that are affected by multiple vulnerabilities: - Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may...
[SECURITY] [DSA 6487-1] strongswan security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 06, 2026 https://www.debian.org/security/faq -...
Security update for curl
This update for curl fixes the following issues: CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. CVE-2026-80230: OpenSSL pinning bypass can allow unauthenticated...
SUSE-SU-2026:4048-1 Security update for curl
This update for curl fixes the following issues: - CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause an authentication bypass bsc1277476. - CVE-2026-80229: premature free can lead to OpenSSL provider use-after-free bsc1277479. - CVE-2026-80230: OpenSSL pinning bypass can allow...
Security update for curl
This update for curl fixes the following issues: CVE-2026-5773: wrong reuse of SMB connection bsc1262633. CVE-2026-7168: cross-proxy Digest auth state leak bsc1263440. CVE-2026-8926: password leak with netrc and user in URL bsc1268412. CVE-2026-13608: flow in OpenLDAP SASL negotiation can cause a...