Amazon Linux 2 : edk2, --advisory ALAS2-2026-3150 (ALAS-2026-3150)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3150 advisory. Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. CVE-2025-68160 When using...

Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-1434)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1434 advisory. If an application using the SSLCIPHERfind function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. CVE-2025-15468 A TLS 1.3...

[slackware-security] openssl

New openssl packages are available for Slackware 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/openssl-1.1.1ze-i586-1slack15.0.txz: Upgraded. Apply patch to fix the following security issues: Fixed Heap out-of-bounds write in BIOflinebuffer ...