CVE-2026-28386 vulnerabilities

Vulnerabilities for packages: openssl, openssl-provider-fips, libcrypto3-2.34...

CVE-2026-28386

The OpenSSL FIPS module (version 3.6) is vulnerable to an out-of-bounds read of up to 15 bytes when performing AES-CFB128 encryption or decryption on x86-64 systems with AVX-512 and VAES support. This occurs specifically when processing partial cipher blocks where the input buffer ends at a memor...