27392 matches found
SUSE-SU-2026:3876-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch bsc1274795. - CVE-2026-63072: Heap Buffer Overflow in CMS Key Unwrapping bsc1274788. - CVE-2026-63074: CMP Indefinite Cache Growth of ExtraCerts bsc1274797. -...
SUSE-SU-2026:23585-1 Security update for openssl-3-x86_64-v3-livepatches
This update for openssl-3-x8664-v3-livepatches fixes the following issues: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271713, bsc1271712. - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing...
php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD
A flaw was found in the OpenSSL extension of PHP. The AES-WRAP-PAD algorithm implementation uses the size of the plaintext length without accounting for the RFC 5649 expansion to allocate the output buffer for the AES key-wrap-with-padding operation. This may lead to an undersized memory allocati...
CVE-2026-62243
A flaw was found in Netty io.netty:netty-handler. When using the SslProvider.OPENSSL client path with a plain X509TrustManager and without Unsafe-based trust-manager wrapping Java 25+, TLS hostname verification is disabled. This misconfiguration allows a man-in-the-middle attacker to present a...
Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-2088)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2088 advisory. Issue summary: When an OpenSSL QUIC server Listener SSL object processesvalid QUIC Initial packets for unknown destination connection IDs, itcan allocate and queue new incoming channels without enforci...
Important: openssl
Issue Overview: Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial packets...
SUSE SLED15 / SLES15 Security Update : go1.26-openssl (SUSE-SU-2026:3816-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3816-1 advisory. Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips...
SUSE SLED15 / SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:3815-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3815-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged...
RockyLinux 9 : php (RLSA-2026:61259)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61259 advisory. php: ext/openssl: memory corruption in opensslencrypt with AES-WRAP-PAD CVE-2026-14355 php: ext-pgsql: PHP: SQL injection via improper backslash escapin...
Security update for go1.26-openssl (important)
openSUSE security update: security update for go1.26-openssl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21705-1 Rating: important References: bsc1255111 bsc1266609 bsc1275024 bsc1275025 bsc1275026 bsc1275028 bsc1275029 bsc1275032 bsc1275033...
SUSE-SU-2026:23576-1 Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...
OPENSUSE-SU-2026:21705-1 Security update for go1.26-openssl
This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release branch at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...
SUSE-SU-2026:23573-1 Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...
OPENSUSE-SU-2026:21696-1 Security update for go1.25-openssl
This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...
OESA-2026-3579 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs,...
libopenssl-3-devel-3.5.3-8.1 on GA media (moderate)
libopenssl-3-devel-3.5.3-8.1 on GA media Announcement ID: openSUSE-SU-2026:11623-1 Rating: moderate Cross-References: CVE-2026-14456 CVE-2026-14457 CVE-2026-18798 CVE-2026-34181 CVE-2026-54874 CVE-2026-63072 CVE-2026-63073 CVE-2026-63074 CVE-2026-63075 CVE-2026-63076 CVE-2026-75803 CVSS scores:...
CVE-2017-2751
creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:18+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-30 00:00:27+00:00| seen| Telegram/mygM17KSjyX1ytBX-vC2bUSC6Quyw0MIzjWP6u1Kpz11D0 2026-08-31 00:00:42+00:00| published-proof-of-concept|...
SUSE-SU-2026:3866-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: August 2026 release . - CVE-2026-54874: excessive memory use when buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. - CVE-2026-63074: unbounded growth of extraCerts...
SUSE CVE-2026-14457
Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...
SUSE CVE-2026-18798
Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidence...