CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6. A patched version of the package is available...

[SECURITY] Fedora 45 Update: openssl-4.0.2-1.fc45

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

ROOT-OS-DEBIAN-11-CVE-2026-54874 CVE-2026-54874 in openssl - Patched by Root

Root has patched CVE-2026-54874 in the openssl package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63072 CVE-2026-63072 in openssl - Patched by Root

Root has patched CVE-2026-63072 in the openssl package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63076 CVE-2026-63076 in openssl - Patched by Root

Root has patched CVE-2026-63076 in the openssl package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-14456 CVE-2026-14456 in openssl - Patched by Root

Root has patched CVE-2026-14456 in the openssl package for Root:Debian:11. Multiple fixed versions available...

Important: Red Hat Security Advisory: openssl security, bug fix, and enhancement update

An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

openssl: SSL_select_next_proto buffer overread

A flaw was found in OpenSSL. Affected versions of this package are vulnerable to Information Exposure through the SSLselectnextproto function. This flaw allows an attacker to cause unexpected application behavior or a crash by exploiting the buffer overread condition when the function is called...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

DEBIAN-CVE-2026-78123

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

AZL-100022 CVE-2026-78124 affecting package strongswan for versions less than 5.9.14-11

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

AZL-100037 CVE-2026-78123 affecting package strongswan for versions less than 5.9.14-11

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS7 parsing in the openssl plugin...

DEBIAN-CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

CVE-2026-78124

CVE-2026-78124 affects strongSwan (IKE/IPsec suite), versions 5.0.2 through 6.0.7 . The vulnerability is a memory leak in the openssl plugin during the enumeration of certificates in PKCS#7 containers, where memory is not released after its effective lifetime. This can lead to gradual memory exha...

CVE-2026-78124

strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...