27916 matches found
SUSE-SU-2026:24245-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted bsc1280590. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for...
K000163708: rust-openssl vulnerability CVE-2026-45784
Security Advisory Description rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.50 until 0.10.80, CipherCtxRef::cipherupdateinplace in openssl/src/cipherctx.rs incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers...
Rocky Linux 8 [CIQ] Security Update: compat-openssl10 / compat-openssl10-debuginfo / etc (crlsa-2026_80510)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202680510 advisory. openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 Tenable has extracted the preceding description block direct...
Unity Linux 20.1070a Security Update: libssh (UTSA-2026-130147)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130147 advisory. A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-pat...
Fedora 44 : curl (2026-a06b828d65)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a06b828d65 advisory. - Fix incomplete mTLS config matching in conn reuse CVE-2026-8932 - Fix OpenLDAP SASL authentication bypass CVE-2026-13608 - Fix OpenSSL pinning...
Copeland XWEB and XWEB Pro Improper Neutralization of Special Elements Used in an OS Command (CVE-2026-24695)
An OS Command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by injecting malicious input into OpenSSL argument fields within requests sent to the utility route, leading to remote code executio...
K000163699: OpenSSL vulnerability CVE-2026-75803
Security Advisory Description Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on ...
K000163698: OpenSSL vulnerability CVE-2026-63075
Security Advisory Description Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer...
K000163697: OpenSSL vulnerability CVE-2026-63076
Security Advisory Description Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then...
ROOT-OS-ALPINE-315-CVE-2026-54874 CVE-2026-54874 in openssl - Patched by Root
Root has patched CVE-2026-54874 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-69421 CVE-2025-69421 in openssl - Patched by Root
Root has patched CVE-2025-69421 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-28388 CVE-2026-28388 in openssl - Patched by Root
Root has patched CVE-2026-28388 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-28387 CVE-2026-28387 in openssl - Patched by Root
Root has patched CVE-2026-28387 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-9076 CVE-2026-9076 in openssl - Patched by Root
Root has patched CVE-2026-9076 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2025-9230 CVE-2025-9230 in openssl - Patched by Root
Root has patched CVE-2025-9230 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-7383 CVE-2026-7383 in openssl - Patched by Root
Root has patched CVE-2026-7383 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2024-4741 CVE-2024-4741 in openssl - Patched by Root
Root has patched CVE-2024-4741 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2026-45447 CVE-2026-45447 in openssl - Patched by Root
Root has patched CVE-2026-45447 in the openssl package for Root:Alpine:3.15. Multiple fixed versions available...