CVE-2026-45445 affecting package openssl for versions less than 3.3.7-3

CVE-2026-45445 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3

CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-42767 affecting package openssl for versions less than 3.3.7-3

CVE-2026-42767 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-34180 affecting package openssl for versions less than 3.3.7-3

CVE-2026-34180 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-7383 affecting package openssl for versions less than 3.3.7-3

CVE-2026-7383 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

CVE-2026-34183 affecting package openssl for versions less than 3.3.7-3

CVE-2026-34183 affecting package openssl for versions less than 3.3.7-3. A patched version of the package is available...

RHEL 9 : openssl-fips-provider (RHSA-2026:28832)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28832 advisory. This package provides a custom build of the OpenSSL FIPS module that has been submitted to NIST for certification. Security Fixes: openssl: openssl:...

Oracle Linux 9 : compat-openssl11 (ELSA-2026-22313)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-22313 advisory. 1:1.1.1k-5.3 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165863 Tenable has...

openssl security fix update

3.5.5-3.0.1 - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35824276 - Update FIPS module name Orabug: 35824276 - Enable openssl-fips-provider dependency...

Security update for openssl-3

This update for openssl-3 fixes the following issues CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion bsc1266340. CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption bsc1266341. CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing...

SUSE-SU-2026:2598-1 Security update for openssl-3

This update for openssl-3 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion bsc1266340. - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption bsc1266341. - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl-fips-provider: openssl-fips-provider-3.0.7-1.2.hum1 aarch64, x8664 openssl-fips-provider-so-3.0.7-1.2.hum1 aarch64, x8664 openssl-fips-provider-3.0.7-1.2.hum1.src src...

openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without prope...

Exploit for Improper Certificate Validation in Openssl

No d...

CVE-2026-55653 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

nginx:1.24 security update

1.24.0-7.1.0.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-7.1 - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945 1:1.24.0-7 - Resolves: RHEL-157889 CVE-2026-32647...

compat-openssl11 security update

1:1.1.1k-5.3 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165863...

openssl security update

3.5.5-4.0.1 - Replace upstream references Orabug: 34340177 3.5.5.openela.0.1 - Add OpenELA specific changes 1:3.5.5-4 - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770,...

Oracle Linux 9 : compat-openssl11 (ELSA-2026-19187)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-19187 advisory. 1:1.1.1k-5.2 - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS12 processing Resolves: RHEL-142723 Tenable has extract...

Oracle Linux 9 : openssl (ELSA-2026-19218)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19218 advisory. - Fix CVE-2026-31790 Resolves: RHEL-161586 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...