CVE-2026-59847 Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

CVE-2026-59847 Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to incorrect AES-GCM finalization checks in builds using the OpenSSL backend. An attacker can alter transmitted plaintext data without detection by exploiting the lack of proper...

Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270542. CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrapkey bsc1270705. CVE-2026-41681:...

SUSE-SU-2026:3152-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length bsc1270542. - CVE-2026-41678: openssl: OOB write due to incorrect bounds assertion in aes::unwrapkey bsc1270705. -...

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues Update to version go1.25.12 bsc1244485. CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. CVE-2026-27139: os: FileInfo can escape from a Root bsc1259268. CVE-2026-27142: html/template: URLs in meta content...

SUSE-SU-2026:3151-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 bsc1244485. - CVE-2026-25679: net/url: reject IPv6 literal not at start of host bsc1259264. - CVE-2026-27139: os: FileInfo can escape from a Root bsc1259268. - CVE-2026-27142: html/template: URLs in meta conte...

Security update for libkrun (important)

openSUSE Security Update: Security update for libkrun Announcement ID: openSUSE-SU-2026:0255-1 Rating: important References: 1270198 1270429 1270470 1270582 1270683 1270721 1270831 1270877 Cross-References: CVE-2025-24898 CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898...

edk2 security update

20251114-5.0.1.el102.2 - Replace upstream references Orabug:36569119 20251114-5.el102.2 - edk2-Revert-OvmfPkg-X86QemuLoadImageLib-flip-default-for-.patch RHEL-182421 - edk2-Bumped-to-OpenSSL-3.5.5-3.patch RHEL-165699 - Resolves: RHEL-182421 edk2/x64: re-enable legacy kernel loader rhel-10.2.z -...

EulerOS Virtualization 2.10.1 : openssl (EulerOS-SA-2026-2832)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen...

PT-2026-61939

Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can remove integrity protection. This allows an in-path attacker to modify plaintext during transmission without...

Updated php8.4 and php8.5 packages fix security vulnerabilities

The updated php8.4 and php8.5 packages fix several security issues, e.g. Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD. CVE-2026-14355...

MGASA-2026-0274 Updated php packages fix a security vulnerability

The updated php packages fix a security issue: Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD. CVE-2026-14355...

MGASA-2026-0285 Updated php8.4 and php8.5 packages fix security vulnerabilities

The updated php8.4 and php8.5 packages fix several security issues, e.g. Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD. CVE-2026-14355...

Updated php packages fix a security vulnerability

The updated php packages fix a security issue: Memory corruption zendmmheap corrupted in opensslencrypt with AES-WRAP-PAD. CVE-2026-14355...

[R3] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1

R3 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2 and 6.8.0: SC202607.1 Arnie Cabral Mon, 07/20/2026 - 13:01 Security Center leverages third-party software to help provide underlying functionality. Several of the third-party components apache, OpenSSL,...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in OpenSSL

Summary Multiple vulnerabilities in OpenSSL that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-22796 DESCRIPTION: Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS7 data where an ASN1TYPE union...

USN-8564-1 php8.1, php8.3, php8.5 vulnerabilities

It was discovered that PHP incorrectly handled certain TLS setup failures, resulting in a NULL pointer dereference. An attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. CVE-2026-12184 It was discovered that P...

SUSE-SU-2026:22801-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270208. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-...