openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax CMS EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter...

Exploit for Improper Check for Unusual or Exceptional Conditions in Openssl

CVE-2025-69420 — OpenSSL TimeStamp Response type confusion PoC...

SUSE-SU-2026:22898-1 Security update for rust-keylime

This update for rust-keylime fixes the following issues: Update to version 0.2.9+49. Security issues fixed: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270174. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callbac...

SUSE-SU-2026:22895-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270208. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust-...

SUSE-SU-2026:22841-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270542. - CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl cra...

OPENSUSE-SU-2026:21406-1 Security update for aws-nitro-enclaves-cli

This update for aws-nitro-enclaves-cli fixes the following issues: - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate bsc1270542. - CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust-openssl cra...

[SECURITY] Fedora 43 Update: perl-Crypt-OpenSSL-X509-2.1.3-1.fc43

Crypt::OpenSSL::X509 - Perl extension to OpenSSL's X509 API...

Fedora 45 : bpfman (2026-fa34dc95e6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fa34dc95e6 advisory. Automatic update for bpfman-0.5.4-13.fc45. Changelog Wed Jul 22 2026 Daniel Mellado - 0.5.4-13 - Bump vendored openssl to 0.10.78 / openssl-sys to 0.9.117 fo...

Photon OS 5.0: Openssl PHSA-2026-5.0-0878

An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0878. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 8 : openssl (RHSA-2026:43513)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43513 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength...

SUSE SLES15: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2026:3152-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3152-1 advisory. This update for aws-nitro-enclaves-cli fixes the following issues - CVE-2026-41677: openssl: out-of-bounds read in PEM password...

Fedora 43 : perl-Crypt-OpenSSL-X509 (2026-7b98f6d033)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7b98f6d033 advisory. Fixes CVE-2026-58101 and CVE-2026-58102 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

SUSE SLES15: apache2-mod_php7 / php7 / php7-bcmath / php7-bz2 / php7-calendar / etc (SUSE-SU-2026:3165-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3165-1 advisory. This update for php7 fixes the following issue - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a...

SUSE SLED15 / SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:3151-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3151-1 advisory. This update for go1.25-openssl fixes the following issues - Update to version go1.25.12 bsc1244485. -...

Security update for libkrun (important)

openSUSE Security Update: Security update for libkrun Announcement ID: openSUSE-SU-2026:0255-1 Rating: important References: 1270198 1270429 1270470 1270582 1270683 1270721 1270831 1270877 Cross-References: CVE-2025-24898 CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898...

SUSE-SU-2026:22910-1 Security update for s390-tools

This update for s390-tools fixes the following issue - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1 bsc1270185...

Security update for php7

This update for php7 fixes the following issue CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw bsc1270351. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypp...

SUSE-SU-2026:3165-1 Security update for php7

This update for php7 fixes the following issue - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw bsc1270351...

Security update for php8

This update for php8 fixes the following issues Update to version 8.3.32. CVE-2026-12184: Failure to setup TLS with a remote server can result in a remote DoS bsc1270712. CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL extension contains a buffer allocation flaw bsc1270351...

CVE-2026-59847

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection...