GHSA-5PG7-F6XV-J6M4 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-4JGC-CJ59-F9MM vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-3C8F-QQ7H-7QV6 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-9076 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-3CXM-476W-GHM2 vulnerabilities

Vulnerabilities for packages: openssl-provider-fips-3.1.2, openssl, openssl-provider-fips, libcrypto3-2.34, openssl-provider-fips-3.6.0...

GHSA-W853-V86G-GV7J vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42768 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42767 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-42766 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-35188 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-34182 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-GXHG-7JX8-M22J vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

GHSA-F9V2-4W9P-2CWC vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-7383 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-45447 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-45445 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

A flaw was found in OpenSSL. A malicious peer can exploit this vulnerability by presenting a specially crafted DHX X9.42 peer key. Due to improper validation of the peer key's subgroup membership, an attacker can recover the victim's private key after a small number of key exchange attempts. This...

openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

A flaw was found in OpenSSL. The implementations of AES-SIV Advanced Encryption Standard - SIV and AES-GCM-SIV Advanced Encryption Standard - Galois/Counter Mode - SIV incorrectly process authentication tags for empty messages. This vulnerability allows a remote attacker to forge empty messages...

openssl: Possible NULL Dereference in Password-Based CMS Decryption

A flaw was found in OpenSSL. A remote attacker could exploit a NULL pointer dereference vulnerability in the Cryptographic Message Syntax CMS decryption process by providing a specially crafted password-encrypted CMS message. This occurs because the keyDerivationAlgorithm field, which is optional...

openssl: NULL pointer dereference in QUIC server initial packet handling

A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...