27560 matches found
K000162843: wolfSSL vulnerability CVE-2026-11310
Security Advisory Description X.509 trust-chain bypass in the OpenSSL compatibility certificate verifier wolfSSLX509verifycert. This affects only builds with --enable-opensslextra OPENSSLEXTRA and whose application validates certificates by calling X509verifycert with caller-supplied untrusted...
K000162842: wolfSSL vulnerability CVE-2026-55961
Security Advisory Description wolfSSLPKCS7verify returning success for a degenerate certs-only PKCS7 object that contains no signer. Such an object has empty signerInfos, so the underlying signed-data verification succeeds without authenticating any content. The compatibility-layer verify path no...
SUSE-SU-2026:23058-1 Security update for openssl-3
This update for openssl-3 fixes the following issue: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
PT-2026-80716
This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
PT-2026-76733
This update for openssl-3 fixes the following issue: - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
PT-2026-76900
This update for openssl-3-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
PT-2026-76899
This update for openssl-1 1-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
PT-2026-76898
This update for openssl-1 1-livepatches fixes the following issues: - 'HollowByte' DoS via attacker-controlled memory allocation bsc1271712, bsc1271713...
ruby:3.3 security, bug fix, and enhancement update
ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 rubygem-mysql2 0.5.5-3 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 0.5.5-2 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 0.5.5-1 - Upgrade to mysql2 0.5.5. Related: RHEL-17089 rubygem-pg...
SUSE SLES15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3516-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3516-1 advisory. This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled...
SUSE SLES15: libopenssl-1_1-devel / libopenssl1_1 / libopenssl1_1-32bit / etc (SUSE-SU-2026:3515-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3515-1 advisory. This update for openssl-11 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlle...
openssl: Fix of 5 CVEs
CVE-2026-7383: fix signed integer overflow when sizing Unicode output in ASN1mbstringncopy - CVE-2026-9076: fix heap out-of-bounds read in kekunwrapkey check-byte validation - CVE-2026-28388: fix NULL pointer dereference when delta CRL lacks the CRL Number extension - CVE-2026-34180: avoid length...
CVE-2026-58101
A flaw was found in Crypt::OpenSSL::X509, a Perl module for handling X.509 certificates. A remote attacker could exploit this vulnerability by presenting a malformed X.509 certificate. This could lead to a Denial of Service DoS by causing the Perl process to crash due to a NULL pointer dereferenc...
Security update for openssl-3
This update for openssl-3 fixes the following issue HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...
Security update for openssl-1_1
This update for openssl-11 fixes the following issue HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zyppe...
SUSE-SU-2026:3515-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
SUSE-SU-2026:23056-1 Security update for libssh
This update for libssh fixes the following issues: - CVE-2026-3731: denial of Service via out-of-bounds read in SFTP extension name handler bsc1259377. - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: denial of service via oversized SFTP re...
PT-2026-76547
This update for openssl-1 1 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...
SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:3502-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3502-1 advisory. This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled...