23988 matches found
CVE-2025-69419 affecting package openssl for versions less than 1.1.1k-38
CVE-2025-69419 affecting package openssl for versions less than 1.1.1k-38. A patched version of the package is available...
CVE-2026-22796 affecting package openssl for versions less than 1.1.1k-38
CVE-2026-22796 affecting package openssl for versions less than 1.1.1k-38. A patched version of the package is available...
CVE-2025-69420 affecting package openssl for versions less than 1.1.1k-38
CVE-2025-69420 affecting package openssl for versions less than 1.1.1k-38. A patched version of the package is available...
CVE-2025-68160 affecting package openssl for versions less than 1.1.1k-38
CVE-2025-68160 affecting package openssl for versions less than 1.1.1k-38. A patched version of the package is available...
CVE-2025-69418 affecting package openssl for versions less than 1.1.1k-38
CVE-2025-69418 affecting package openssl for versions less than 1.1.1k-38. A patched version of the package is available...
CVE-2026-22795 affecting package openssl for versions less than 1.1.1k-38
CVE-2026-22795 affecting package openssl for versions less than 1.1.1k-38. A patched version of the package is available...
SUSE-SU-2026:0620-1 Security update for snpguest
This update for snpguest fixes the following issues: Update to version 0.10.0. Security issues fixed: - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion bsc1257927. - CVE-2025-3416: openssl: Use-After-Free in Md::fetch and Cipher::fetch...
[SECURITY] [DLA 4490-1] openssl security update
Debian LTS Advisory DLA-4490-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson February 23, 2026 https://wiki.debian.org/LTS Package : openssl Version : 1.1.1w-0+deb11u5 CVE ID : CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421...
Debian dla-4490 : libcrypto1.1-udeb - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4490 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4490-1 [email protected]...
Oracle Linux 8 : openssl (ELSA-2026-3042)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-3042 advisory. - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS12 processing ticketlifetimehint exceed 1 week in TLSv1.3 and breaks compliant...
Debian: Security Advisory (DLA-4490-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
libopenssl-3-devel-3.5.3-2.1 on GA media (moderate)
libopenssl-3-devel-3.5.3-2.1 on GA media Announcement ID: openSUSE-SU-2026:10237-1 Rating: moderate Cross-References: CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2025-9230 CVE-2025-9231...
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...
Important: Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP3 security update
Red Hat JBoss Core Services Apache HTTP Server 2.4.62 Service Pack 3 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
A flaw was found in the OpenSSL CMS implementation RFC 3211 KEK Unwrap. This vulnerability allows memory corruption, an application level denial of service, or potential execution of attacker-supplied code via crafted CMS messages using password-based encryption PWRI...
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...
openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
A flaw was found in OpenSSL. A remote attacker can exploit a stack buffer overflow vulnerability by supplying a crafted Cryptographic Message Syntax CMS message with an oversized Initialization Vector IV when parsing AuthEnvelopedData structures that use Authenticated Encryption with Associated...
OPENSUSE-SU-2026:20260-1 Security update for mosquitto
This update for mosquitto fixes the following issues: Changes in mosquitto: - update to 2.0.23 boo1258671 Fix handling of disconnected sessions for perlistenersettings true Check return values of openssl getexdata and setexdata to prevent possible crash. This could occur only in extremely unlikel...