CLEANSTART-2026-RV52446 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X

CVE-2026-35189 affects multiple packages. Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X. See references for individual vulnerability details...

CLEANSTART-2026-QG73880 Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires

CVE-2026-54874 affects multiple packages. Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. See references for individual vulnerability details...

CLEANSTART-2026-SP65833 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a...

CVE-2026-35191 affects multiple packages. Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection...

CLEANSTART-2026-IL62740 Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without...

CVE-2026-14456 affects multiple packages. Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. See references for individual...

CLSA-2026-1778071148 openssl: Fix of 5 CVEs

CVE-2026-28387: fix use of OPENSSLfree instead of X509free on dane-mcert in danematch X509 reference-count bypass / UAF - CVE-2026-28388: fix NULL deref in checkdeltabase when a delta CRL carries the Delta CRL Indicator extension but lacks a CRL Number - CVE-2026-28389: fix NULL deref in...

Oracle MySQL Cluster 8.4.x < 8.4.13 (October 2026 CPU)

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

Oracle MySQL Server 8.4.x < 8.4.13 (October 2026 CPU)

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

SUSE SLES11 Security Update : openssl-certs (SUSE-SU-2026:4820-1)

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4820-1 advisory. This update for openssl-certs fixes the following issue: Updated to 2.92 state bsc1286261 CVE-2026-114406 bsc1287180 Removed: - emSign ECC Root CA - C3...

OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of OpenSSL. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Distinguished Names within CMP messages. The issue results from the lack...

OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value Vulnerability

This vulnerability allows network-adjacent attackers to tamper with CMS AuthEnvelopedData messages on affected installations of OpenSSL. An attacker must first obtain the ability to modify CMS AuthEnvelopedData messages in order to exploit this vulnerability. The specific flaw exists within the...

Oracle MySQL Cluster 9.x.x < 9.7.4 (October 2026 CPU)

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

Oracle MySQL Server 9.x.x < 9.7.4 (October 2026 CPU)

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

Oracle MySQL Server 26.x.x < 26.10.0 (October 2026 CPU)

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

Oracle MySQL Cluster 8.0.x < 8.0.50 (October 2026 CPU)

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

Oracle MySQL Cluster 26.x.x < 26.10.0 (October 2026 CPU)

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Compiling OpenSSL. Supported versions that are affected...

SUSE SLES12: libopenssl-1_0_0-devel / libopenssl-1_0_0-devel-32bit / etc (SUSE-SU-2026:4762-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4762-1 advisory. - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. Changes for openssl-100: - Security fixes in...

Oracle Database Server (October 2026 CPU)

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the RDBMS OpenSSL component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and...

curl: --cert-status with OpenSSL accepts a stapled OCSP response of any age when it lacks nextUpdate (revoked certificate keeps passing)

Summary: curl built with OpenSSL accepts a stapled OCSP "good" response of any age under CURLOPTSSLVERIFYSTATUS --cert-status when the response omits nextUpdate, so a response signed before a certificate was revoked keeps passing the check for as long as the certificate itself is valid. The GnuTL...

Security update for openssl-certs

This update for openssl-certs fixes the following issue: Updated to 2.92 state bsc1286261 Removed: emSign ECC Root CA - C3 emSign ECC Root CA - G3 emSign Root CA - C1 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

CLEANSTART-2026-IV73686 OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack

Security vulnerability affects the nodejs-24 package. The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack...