openssl: heap buffer overflow in CMS key unwrapping

A flaw was found in OpenSSL. A crafted CMS Cryptographic Message Syntax message can cause an 8-byte out-of-bounds heap write when it is decrypted with CMSdecrypt. This issue occurs because the CMS decryption process incorrectly sizes the key-unwrap output buffer when using the AES-WRAP-PAD unwrap...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: August 2026 release. CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. Patch Instructions: To install this SUSE update use the SUS...

SUSE-SU-2026:4043-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788...

Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issues: CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713. Patch Instruction...

SUSE-SU-2026:4042-1 Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issues: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713...

SUSE-SU-2026:4041-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: August 2026 release. CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. Patch Instructions: To install this SUSE update use the SUS...

SUSE-SU-2026:4040-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. CVE-2026-63076: invalid point...

SUSE-SU-2026:4038-1 Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate bsc1275145, bsc1274792. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - CVE-2026-63076: invalid...

Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

SUSE-SU-2026:4037-1 Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788...

SUSE-SU-2026:4036-1 Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issues: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713...

Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issues: CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712, bsc1271713. Patch Instruction...

Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

SUSE-SU-2026:4034-1 Security update for openssl-1_1-livepatches

This update for openssl-11-livepatches fixes the following issue: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1275133, bsc1274788...

Security update for openssl-1_1

This update for openssl-11 fixes the following issues: August 2026 release. CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. Patch Instructions: To install this SUSE update use the SUS...

SUSE-SU-2026:4033-1 Security update for openssl-1_1

This update for openssl-11 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788...

SUSE-SU-2026:4032-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: August 2026 release. - CVE-2026-54874: excessive memory use buffering DTLS records for a future epoch bsc1274795. - CVE-2026-63072: heap buffer overflow in CMS key unwrapping bsc1274788. - CVE-2026-63074: CMP indefinite cache growth of...