Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-45447 (GCVE-0-2026-45447)
Vulnerability from cvelistv5 – Published: 2026-06-09 16:03 – Updated: 2026-07-20 12:04
VLAI
EPSS
VEX
Title
Heap Use-After-Free in the PKCS7_verify() Function
Summary
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could
trigger a use-after-free during PKCS#7 signature verification.
Impact summary: A use-after-free may result in process crashes, heap
corruption, or potentially remote code execution.
When processing a PKCS#7 or S/MIME signed message, if the SignedData
digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may
incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent
use of the BIO by the calling application results in a use-after-free
condition.
In the common case this occurs when the application later calls
BIO_free() on the BIO originally passed to PKCS7_verify(). Depending
on allocator behavior and application-specific BIO usage patterns, this
may result in a crash or other memory corruption. In some application
contexts this may potentially be exploitable for remote code execution.
Applications that process PKCS#7 or S/MIME signed messages using OpenSSL
PKCS#7 APIs may be affected. Applications using the CMS APIs for this
processing are not affected.
The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this
issue, as the affected code is outside the OpenSSL FIPS module boundary.
Severity
8.8 (High)
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
21 references
Impacted products
29 products
| Vendor | Product | Version | |
|---|---|---|---|
| OpenSSL | OpenSSL |
Affected:
4.0.0 , < 4.0.1
(semver)
Affected: 3.6.0 , < 3.6.3 (semver) Affected: 3.5.0 , < 3.5.7 (semver) Affected: 3.4.0 , < 3.4.6 (semver) Affected: 3.0.0 , < 3.0.21 (semver) Affected: 1.1.1 , < 1.1.1zh (custom) Affected: 1.0.2 , < 1.0.2zq (custom) |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:3.5.5-4.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:1.0.2o-4.el8_10.3 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:1.1.1k-16.el8_6 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On |
Unaffected:
1:1.1.1k-16.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_eus_long_life:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
1:1.0.2o-4.el8_8.1 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
1:1.1.1k-16.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
1:1.0.2o-4.el8_8.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
1:1.1.1k-16.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:3.5.5-4.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
1:1.1.1k-4.el9_2.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
1:1.1.1k-5.el9_4.3 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
1:1.1.1k-5.el9_6.3 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Cost Management 4 |
Unaffected:
1783539156 , < *
(rpm)
cpe:/a:redhat:cost_management:4::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1782159791 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1782166952 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Insights proxy 1.5 |
Unaffected:
1782890503 , < *
(rpm)
cpe:/a:redhat:insights_proxy:1.5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1781525684 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1781525671 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1781525693 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1781525739 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
Date Public
2026-06-09 14:00
Credits
Thai Duong (Calif.io in collaboration with Claude and Anthropic Research)
Igor Ustinov
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-45447",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-10T03:59:38.212378Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-10T13:32:20.413Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:3.5.5-4.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "compat-openssl10",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.0.2o-4.el8_10.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-16.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.6"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-16.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "compat-openssl10",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.0.2o-4.el8_8.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-16.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "compat-openssl10",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.0.2o-4.el8_8.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-16.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9",
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:3.5.5-4.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "compat-openssl11",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-4.el9_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "compat-openssl11",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-5.el9_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "compat-openssl11",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-5.el9_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cost_management:4::el9"
],
"defaultStatus": "affected",
"packageName": "costmanagement/costmanagement-metrics-rhel9-operator",
"product": "Cost Management 4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783539156",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-server-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782159791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782166952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:insights_proxy:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "insights-proxy/insights-proxy-container-rhel9",
"product": "Red Hat Insights proxy 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782890503",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/cds-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781525684",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/haproxy-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781525671",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/installer-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781525693",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/rhua-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781525739",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/hive-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/hypershift-rhel9-operator",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "edk2",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "shim",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-aarch64",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-x64",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "ovmf",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "shim-signed",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "edk2",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "mingw-openssl",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "shim",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-x64",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "compat-openssl11",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "edk2",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "shim",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-aarch64",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-x64",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-825",
"description": "Expired Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-20T12:04:39.805Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"name": "RHBZ#2481898",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25237"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36215"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39012"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39009"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35869"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25239"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26275"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34102"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26319"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:25237: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:36215: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:36217: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:39012: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:39009: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:35869: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:25239: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26275: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:39981: Cost Management Metrics Operator 4"
},
{
"lang": "en",
"value": "RHSA-2026:29197: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:34102: Red Hat Insights proxy 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:26319: Red Hat Update Infrastructure 5"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-27T14:17:46.000Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-09T00:00:00.000Z",
"value": "Made public."
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "OpenSSL",
"vendor": "OpenSSL",
"versions": [
{
"lessThan": "4.0.1",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"lessThan": "3.6.3",
"status": "affected",
"version": "3.6.0",
"versionType": "semver"
},
{
"lessThan": "3.5.7",
"status": "affected",
"version": "3.5.0",
"versionType": "semver"
},
{
"lessThan": "3.4.6",
"status": "affected",
"version": "3.4.0",
"versionType": "semver"
},
{
"lessThan": "3.0.21",
"status": "affected",
"version": "3.0.0",
"versionType": "semver"
},
{
"lessThan": "1.1.1zh",
"status": "affected",
"version": "1.1.1",
"versionType": "custom"
},
{
"lessThan": "1.0.2zq",
"status": "affected",
"version": "1.0.2",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Thai Duong (Calif.io in collaboration with Claude and Anthropic Research)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Igor Ustinov"
}
],
"datePublic": "2026-06-09T14:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\u003cbr\u003etrigger a use-after-free during PKCS#7 signature verification.\u003cbr\u003e\u003cbr\u003eImpact summary: A use-after-free may result in process crashes, heap\u003cbr\u003ecorruption, or potentially remote code execution.\u003cbr\u003e\u003cbr\u003eWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\u003cbr\u003edigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\u003cbr\u003eincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\u003cbr\u003euse of the BIO by the calling application results in a use-after-free\u003cbr\u003econdition.\u003cbr\u003e\u003cbr\u003eIn the common case this occurs when the application later calls\u003cbr\u003eBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\u003cbr\u003eon allocator behavior and application-specific BIO usage patterns, this\u003cbr\u003emay result in a crash or other memory corruption. In some application\u003cbr\u003econtexts this may potentially be exploitable for remote code execution.\u003cbr\u003e\u003cbr\u003eApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\u003cbr\u003ePKCS#7 APIs may be affected. Applications using the CMS APIs for this\u003cbr\u003eprocessing are not affected.\u003cbr\u003e\u003cbr\u003eThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\u003cbr\u003eissue, as the affected code is outside the OpenSSL FIPS module boundary."
}
],
"value": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."
}
],
"metrics": [
{
"format": "other",
"other": {
"content": {
"text": "High"
},
"type": "https://openssl-library.org/policies/general/security-policy/"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416 Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-10T07:48:15.381Z",
"orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"shortName": "openssl"
},
"references": [
{
"name": "OpenSSL Advisory",
"tags": [
"vendor-advisory"
],
"url": "https://openssl-library.org/news/secadv/20260609.txt"
},
{
"name": "4.0.1 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c"
},
{
"name": "3.6.3 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e"
},
{
"name": "3.5.7 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8"
},
{
"name": "3.4.6 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c"
},
{
"name": "3.0.21 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Heap Use-After-Free in the PKCS7_verify() Function",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"assignerShortName": "openssl",
"cveId": "CVE-2026-45447",
"datePublished": "2026-06-09T16:03:32.914Z",
"dateReserved": "2026-05-12T14:34:06.277Z",
"dateUpdated": "2026-07-20T12:04:39.805Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-45447",
"date": "2026-07-20",
"epss": "0.02719",
"percentile": "0.84397"
},
"microsoft_vex": {
"current_release_date": "2026-06-23T14:47:32.000Z",
"cve": "CVE-2026-45447",
"id": "msrc_CVE-2026-45447",
"initial_release_date": "2026-06-02T00:00:00.000Z",
"product_status:fixed": "1",
"product_status:known_affected": "1",
"product_status:known_not_affected": "5",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Heap Use-After-Free in the PKCS7_verify() Function",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-45447.json",
"version": "3"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-45447\",\"sourceIdentifier\":\"openssl-security@openssl.org\",\"published\":\"2026-06-09T17:17:19.277\",\"lastModified\":\"2026-07-20T12:19:30.657\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\\ntrigger a use-after-free during PKCS#7 signature verification.\\n\\nImpact summary: A use-after-free may result in process crashes, heap\\ncorruption, or potentially remote code execution.\\n\\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\\nuse of the BIO by the calling application results in a use-after-free\\ncondition.\\n\\nIn the common case this occurs when the application later calls\\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\\non allocator behavior and application-specific BIO usage patterns, this\\nmay result in a crash or other memory corruption. In some application\\ncontexts this may potentially be exploitable for remote code execution.\\n\\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\\nprocessing are not affected.\\n\\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\"}],\"affected\":[{\"source\":\"openssl-security@openssl.org\",\"affectedData\":[{\"vendor\":\"OpenSSL\",\"product\":\"OpenSSL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"4.0.0\",\"lessThan\":\"4.0.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.6.0\",\"lessThan\":\"3.6.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.5.0\",\"lessThan\":\"3.5.7\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.4.0\",\"lessThan\":\"3.4.6\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.0.0\",\"lessThan\":\"3.0.21\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.1.1\",\"lessThan\":\"1.1.1zh\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"1.0.2\",\"lessThan\":\"1.0.2zq\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"1:3.5.5-4.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl10\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:1.0.2o-4.el8_10.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:1.1.1k-16.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.6\"],\"versions\":[{\"version\":\"1:1.1.1k-16.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl10\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"1:1.0.2o-4.el8_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"1:1.1.1k-16.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl10\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"1:1.0.2o-4.el8_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"1:1.1.1k-16.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\",\"cpe:/o:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:3.5.5-4.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl11\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"1:1.1.1k-4.el9_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl11\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"1:1.1.1k-5.el9_4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl11\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"1:1.1.1k-5.el9_6.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cost Management 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"costmanagement/costmanagement-metrics-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:cost_management:4::el9\"],\"versions\":[{\"version\":\"1783539156\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1782159791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1782166952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Insights proxy 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"insights-proxy/insights-proxy-container-rhel9\",\"cpes\":[\"cpe:/a:redhat:insights_proxy:1.5::el9\"],\"versions\":[{\"version\":\"1782890503\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/cds-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1781525684\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/haproxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1781525671\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1781525693\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/rhua-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1781525739\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hive-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hypershift-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edk2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-aarch64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-x64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovmf\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-signed\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edk2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mingw-openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-x64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl11\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edk2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-aarch64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-x64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-10T03:59:38.212378Z\",\"id\":\"CVE-2026-45447\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"openssl-security@openssl.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-825\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.2\",\"versionEndExcluding\":\"1.0.2zq\",\"matchCriteriaId\":\"F534B804-67B6-49DA-8A86-0FF21E512908\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.1.1\",\"versionEndExcluding\":\"1.1.1zh\",\"matchCriteriaId\":\"43EFE1E3-4049-4EE6-A2AE-BDBA38E6870F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.0.21\",\"matchCriteriaId\":\"EDB88756-EDFE-4886-A267-3F19342A6042\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.4.0\",\"versionEndExcluding\":\"3.4.6\",\"matchCriteriaId\":\"BF7E21E7-AEC0-4882-B1F1-2D056B506F22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.5.0\",\"versionEndExcluding\":\"3.5.7\",\"matchCriteriaId\":\"6B6B9930-C549-4D88-9784-AF32CCDDB87A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.6.0\",\"versionEndExcluding\":\"3.6.3\",\"matchCriteriaId\":\"D41B3C45-EC73-4DC8-989D-B2E2792E102F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E881B9A-1A0A-4BC0-8160-20C00561167D\"}]}]}],\"references\":[{\"url\":\"https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://openssl-library.org/news/secadv/20260609.txt\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25237\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25239\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26275\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34102\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35869\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36215\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39009\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39012\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39981\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-45447\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2481898\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-19T14:01:38+00:00",
"cve": "CVE-2026-45447",
"id": "CVE-2026-45447",
"initial_release_date": "2026-06-09T00:00:00+00:00",
"product_status:fixed": "265",
"product_status:known_affected": "14",
"product_status:known_not_affected": "42",
"product_status:under_investigation": "4",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-16T18:00:15Z",
"cve": "CVE-2026-45447",
"id": "CVE-2026-45447",
"initial_release_date": "2026-06-13T02:17:25Z",
"product_status:known_affected": "507",
"product_status:known_not_affected": "74",
"product_status:recommended": "379",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-45447",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-45447.json",
"version": "18"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:3.5.5-4.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.0.2o-4.el8_10.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-16.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus_long_life:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-16.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.0.2o-4.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-16.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.0.2o-4.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-16.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\", \"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:3.5.5-4.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-4.el9_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-5.el9_4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-5.el9_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cost_management:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cost Management 4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783539156\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"costmanagement/costmanagement-metrics-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782159791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782166952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:insights_proxy:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Insights proxy 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782890503\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"insights-proxy/insights-proxy-container-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525684\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/cds-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525671\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/haproxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525693\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/installer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525739\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/rhua-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hive-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hypershift-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"edk2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"shim\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"shim-unsigned-aarch64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"shim-unsigned-x64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"ovmf\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"shim-signed\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"edk2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"mingw-openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"shim\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"shim-unsigned-x64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"compat-openssl11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"edk2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"shim\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"shim-unsigned-aarch64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"shim-unsigned-x64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-27T14:17:46.000Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-09T00:00:00.000Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:25237: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36215: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36217: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39012: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39009: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35869: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25239: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26275: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39981: Cost Management Metrics Operator 4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29197: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34102: Red Hat Insights proxy 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26319: Red Hat Update Infrastructure 5\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-09T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-45447\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2481898\", \"name\": \"RHBZ#2481898\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25237\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36215\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36217\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39012\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39009\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35869\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25239\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26275\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39981\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34102\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-825\", \"description\": \"Expired Pointer Dereference\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-20T12:04:39.805Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-45447\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-10T03:59:38.212378Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-09T18:36:48.165Z\"}}], \"cna\": {\"title\": \"Heap Use-After-Free in the PKCS7_verify() Function\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"Thai Duong (Calif.io in collaboration with Claude and Anthropic Research)\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Igor Ustinov\"}], \"metrics\": [{\"other\": {\"type\": \"https://openssl-library.org/policies/general/security-policy/\", \"content\": {\"text\": \"High\"}}, \"format\": \"other\"}], \"affected\": [{\"vendor\": \"OpenSSL\", \"product\": \"OpenSSL\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.0.1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.6.0\", \"lessThan\": \"3.6.3\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.5.0\", \"lessThan\": \"3.5.7\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.4.0\", \"lessThan\": \"3.4.6\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.0.0\", \"lessThan\": \"3.0.21\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.1.1\", \"lessThan\": \"1.1.1zh\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"1.0.2\", \"lessThan\": \"1.0.2zq\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2026-06-09T14:00:00.000Z\", \"references\": [{\"url\": \"https://openssl-library.org/news/secadv/20260609.txt\", \"name\": \"OpenSSL Advisory\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c\", \"name\": \"4.0.1 git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e\", \"name\": \"3.6.3 git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8\", \"name\": \"3.5.7 git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c\", \"name\": \"3.4.6 git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54\", \"name\": \"3.0.21 git commit\", \"tags\": [\"patch\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\\ntrigger a use-after-free during PKCS#7 signature verification.\\n\\nImpact summary: A use-after-free may result in process crashes, heap\\ncorruption, or potentially remote code execution.\\n\\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\\nuse of the BIO by the calling application results in a use-after-free\\ncondition.\\n\\nIn the common case this occurs when the application later calls\\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\\non allocator behavior and application-specific BIO usage patterns, this\\nmay result in a crash or other memory corruption. In some application\\ncontexts this may potentially be exploitable for remote code execution.\\n\\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\\nprocessing are not affected.\\n\\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\u003cbr\u003etrigger a use-after-free during PKCS#7 signature verification.\u003cbr\u003e\u003cbr\u003eImpact summary: A use-after-free may result in process crashes, heap\u003cbr\u003ecorruption, or potentially remote code execution.\u003cbr\u003e\u003cbr\u003eWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\u003cbr\u003edigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\u003cbr\u003eincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\u003cbr\u003euse of the BIO by the calling application results in a use-after-free\u003cbr\u003econdition.\u003cbr\u003e\u003cbr\u003eIn the common case this occurs when the application later calls\u003cbr\u003eBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\u003cbr\u003eon allocator behavior and application-specific BIO usage patterns, this\u003cbr\u003emay result in a crash or other memory corruption. In some application\u003cbr\u003econtexts this may potentially be exploitable for remote code execution.\u003cbr\u003e\u003cbr\u003eApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\u003cbr\u003ePKCS#7 APIs may be affected. Applications using the CMS APIs for this\u003cbr\u003eprocessing are not affected.\u003cbr\u003e\u003cbr\u003eThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\u003cbr\u003eissue, as the affected code is outside the OpenSSL FIPS module boundary.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"shortName\": \"openssl\", \"dateUpdated\": \"2026-06-10T07:48:15.381Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-45447\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-20T12:04:39.805Z\", \"dateReserved\": \"2026-05-12T14:34:06.277Z\", \"assignerOrgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"datePublished\": \"2026-06-09T16:03:32.914Z\", \"assignerShortName\": \"openssl\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:36217
Vulnerability from csaf_redhat - Published: 2026-07-07 13:31 - Updated: 2026-07-19 15:36Summary
Red Hat Security Advisory: compat-openssl10 security update
Severity
Important
Notes
Topic: An update for compat-openssl10 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1.
Security Fix(es):
* openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390)
* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.
8.1 (High)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for compat-openssl10 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1.\n\nSecurity Fix(es):\n\n* openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390)\n\n* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:36217",
"url": "https://access.redhat.com/errata/RHSA-2026:36217"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2456314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314"
},
{
"category": "external",
"summary": "2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_36217.json"
}
],
"title": "Red Hat Security Advisory: compat-openssl10 security update",
"tracking": {
"current_release_date": "2026-07-19T15:36:15+00:00",
"generator": {
"date": "2026-07-19T15:36:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:36217",
"initial_release_date": "2026-07-07T13:31:25+00:00",
"revision_history": [
{
"date": "2026-07-07T13:31:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-07T13:31:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-19T15:36:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:8.8::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_tus:8.8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"product": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"product_id": "compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10@1.0.2o-4.el8_8.1?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"product": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"product_id": "compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10@1.0.2o-4.el8_8.1?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"product": {
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"product_id": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10-debugsource@1.0.2o-4.el8_8.1?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"product": {
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"product_id": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10-debuginfo@1.0.2o-4.el8_8.1?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"product": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"product_id": "compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10@1.0.2o-4.el8_8.1?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"product": {
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"product_id": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10-debugsource@1.0.2o-4.el8_8.1?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"product": {
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"product_id": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10-debuginfo@1.0.2o-4.el8_8.1?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"product": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"product_id": "compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10@1.0.2o-4.el8_8.1?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"product": {
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"product_id": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10-debugsource@1.0.2o-4.el8_8.1?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"product": {
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"product_id": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10-debuginfo@1.0.2o-4.el8_8.1?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686"
},
"product_reference": "compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le"
},
"product_reference": "compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.src as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src"
},
"product_reference": "compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64"
},
"product_reference": "compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686"
},
"product_reference": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le"
},
"product_reference": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64"
},
"product_reference": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686"
},
"product_reference": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le"
},
"product_reference": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)",
"product_id": "AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
},
"product_reference": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.i686 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686"
},
"product_reference": "compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.src as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src"
},
"product_reference": "compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64"
},
"product_reference": "compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686"
},
"product_reference": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64"
},
"product_reference": "compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686"
},
"product_reference": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream TUS (v.8.8)",
"product_id": "AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
},
"product_reference": "compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"relates_to_product_reference": "AppStream-8.8.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-28390",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-04-07T23:01:18.313921+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456314"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE has been rated as moderate by redhat because the vulnerability is limited to a denial-of-service condition caused by a NULL pointer dereference in OpenSSL CMS processing, without evidence of memory corruption or code execution, furthermore the Affected functionality is niche. The vulnerable path requires:\nCMS/S/MIME processing,\nspecifically CMS_decrypt(),\nwith RSA-OAEP KeyTransportRecipientInfo.\nMany OpenSSL consumers never use CMS APIs, never process S/MIME,\nor do not decrypt attacker-controlled CMS objects.\nSo exposure is far narrower than a generic TLS parsing vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28390"
},
{
"category": "external",
"summary": "RHBZ#2456314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
"url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
"url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
"url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
"url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
"url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260407.txt",
"url": "https://openssl-library.org/news/secadv/20260407.txt"
}
],
"release_date": "2026-04-07T22:00:54.172000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T13:31:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36217"
},
{
"category": "workaround",
"details": "Applications that process Cryptographic Message Syntax (CMS) EnvelopedData messages should be configured to only accept input from trusted sources. Restricting network access to services that process untrusted CMS data can also reduce exposure to this Denial of Service vulnerability.",
"product_ids": [
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This High severity heap use-after-free flaw in OpenSSL\u0027s PKCS7_verify() function can be triggered by processing a specially crafted PKCS#7 or S/MIME signed message. This could lead to application crashes, memory corruption, or potentially remote code execution, impacting services that handle such messages. The vulnerability specifically affects applications utilizing OpenSSL PKCS#7 APIs, while those using CMS APIs are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "RHBZ#2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-07T13:31:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:36217"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.E4S:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.ppc64le",
"AppStream-8.8.0.Z.E4S:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.src",
"AppStream-8.8.0.Z.TUS:compat-openssl10-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debuginfo-1:1.0.2o-4.el8_8.1.x86_64",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.i686",
"AppStream-8.8.0.Z.TUS:compat-openssl10-debugsource-1:1.0.2o-4.el8_8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()"
}
]
}
RHSA-2026:39009
Vulnerability from csaf_redhat - Published: 2026-07-13 16:38 - Updated: 2026-07-19 15:36Summary
Red Hat Security Advisory: compat-openssl11 security update
Severity
Important
Notes
Topic: An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases.
Security Fix(es):
* openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390)
* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases.\n\nSecurity Fix(es):\n\n* openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390)\n\n* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:39009",
"url": "https://access.redhat.com/errata/RHSA-2026:39009"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2456314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314"
},
{
"category": "external",
"summary": "2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39009.json"
}
],
"title": "Red Hat Security Advisory: compat-openssl11 security update",
"tracking": {
"current_release_date": "2026-07-19T15:36:17+00:00",
"generator": {
"date": "2026-07-19T15:36:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:39009",
"initial_release_date": "2026-07-13T16:38:24+00:00",
"revision_history": [
{
"date": "2026-07-13T16:38:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-13T16:38:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-19T15:36:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.4::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"product": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"product_id": "compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-5.el9_4.3?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"product": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"product_id": "compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-5.el9_4.3?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-5.el9_4.3?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-5.el9_4.3?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"product": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"product_id": "compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-5.el9_4.3?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-5.el9_4.3?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-5.el9_4.3?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"product": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"product_id": "compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-5.el9_4.3?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-5.el9_4.3?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-5.el9_4.3?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"product": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"product_id": "compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-5.el9_4.3?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-5.el9_4.3?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-5.el9_4.3?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"product": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"product_id": "compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-5.el9_4.3?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-5.el9_4.3?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-5.el9_4.3?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64"
},
"product_reference": "compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686"
},
"product_reference": "compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le"
},
"product_reference": "compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x"
},
"product_reference": "compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src"
},
"product_reference": "compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64"
},
"product_reference": "compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)",
"product_id": "AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-28390",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-04-07T23:01:18.313921+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456314"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE has been rated as moderate by redhat because the vulnerability is limited to a denial-of-service condition caused by a NULL pointer dereference in OpenSSL CMS processing, without evidence of memory corruption or code execution, furthermore the Affected functionality is niche. The vulnerable path requires:\nCMS/S/MIME processing,\nspecifically CMS_decrypt(),\nwith RSA-OAEP KeyTransportRecipientInfo.\nMany OpenSSL consumers never use CMS APIs, never process S/MIME,\nor do not decrypt attacker-controlled CMS objects.\nSo exposure is far narrower than a generic TLS parsing vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28390"
},
{
"category": "external",
"summary": "RHBZ#2456314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
"url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
"url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
"url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
"url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
"url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260407.txt",
"url": "https://openssl-library.org/news/secadv/20260407.txt"
}
],
"release_date": "2026-04-07T22:00:54.172000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-13T16:38:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39009"
},
{
"category": "workaround",
"details": "Applications that process Cryptographic Message Syntax (CMS) EnvelopedData messages should be configured to only accept input from trusted sources. Restricting network access to services that process untrusted CMS data can also reduce exposure to this Denial of Service vulnerability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This High severity heap use-after-free flaw in OpenSSL\u0027s PKCS7_verify() function can be triggered by processing a specially crafted PKCS#7 or S/MIME signed message. This could lead to application crashes, memory corruption, or potentially remote code execution, impacting services that handle such messages. The vulnerability specifically affects applications utilizing OpenSSL PKCS#7 APIs, while those using CMS APIs are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "RHBZ#2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-13T16:38:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.src",
"AppStream-9.4.0.Z.E4S:compat-openssl11-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-5.el9_4.3.x86_64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.aarch64",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.i686",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.s390x",
"AppStream-9.4.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-5.el9_4.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()"
}
]
}
RHSA-2026:39012
Vulnerability from csaf_redhat - Published: 2026-07-13 17:34 - Updated: 2026-07-19 15:36Summary
Red Hat Security Advisory: compat-openssl11 security update
Severity
Important
Notes
Topic: An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases.
Security Fix(es):
* openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390)
* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases.\n\nSecurity Fix(es):\n\n* openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390)\n\n* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:39012",
"url": "https://access.redhat.com/errata/RHSA-2026:39012"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2456314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314"
},
{
"category": "external",
"summary": "2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39012.json"
}
],
"title": "Red Hat Security Advisory: compat-openssl11 security update",
"tracking": {
"current_release_date": "2026-07-19T15:36:17+00:00",
"generator": {
"date": "2026-07-19T15:36:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:39012",
"initial_release_date": "2026-07-13T17:34:24+00:00",
"revision_history": [
{
"date": "2026-07-13T17:34:24+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-13T17:34:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-19T15:36:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"product": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"product_id": "compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-4.el9_2.2?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"product": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"product_id": "compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-4.el9_2.2?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-4.el9_2.2?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-4.el9_2.2?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"product": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"product_id": "compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-4.el9_2.2?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-4.el9_2.2?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-4.el9_2.2?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"product": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"product_id": "compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-4.el9_2.2?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-4.el9_2.2?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-4.el9_2.2?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"product": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"product_id": "compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-4.el9_2.2?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-4.el9_2.2?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-4.el9_2.2?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"product": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"product_id": "compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11@1.1.1k-4.el9_2.2?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"product": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"product_id": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debugsource@1.1.1k-4.el9_2.2?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"product": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"product_id": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11-debuginfo@1.1.1k-4.el9_2.2?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64"
},
"product_reference": "compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686"
},
"product_reference": "compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le"
},
"product_reference": "compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x"
},
"product_reference": "compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src"
},
"product_reference": "compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64"
},
"product_reference": "compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64"
},
"product_reference": "compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
},
"product_reference": "compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-28390",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-04-07T23:01:18.313921+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456314"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE has been rated as moderate by redhat because the vulnerability is limited to a denial-of-service condition caused by a NULL pointer dereference in OpenSSL CMS processing, without evidence of memory corruption or code execution, furthermore the Affected functionality is niche. The vulnerable path requires:\nCMS/S/MIME processing,\nspecifically CMS_decrypt(),\nwith RSA-OAEP KeyTransportRecipientInfo.\nMany OpenSSL consumers never use CMS APIs, never process S/MIME,\nor do not decrypt attacker-controlled CMS objects.\nSo exposure is far narrower than a generic TLS parsing vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28390"
},
{
"category": "external",
"summary": "RHBZ#2456314",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456314"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28390",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28390"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28390"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc",
"url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6",
"url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4",
"url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788",
"url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75",
"url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260407.txt",
"url": "https://openssl-library.org/news/secadv/20260407.txt"
}
],
"release_date": "2026-04-07T22:00:54.172000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-13T17:34:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39012"
},
{
"category": "workaround",
"details": "Applications that process Cryptographic Message Syntax (CMS) EnvelopedData messages should be configured to only accept input from trusted sources. Restricting network access to services that process untrusted CMS data can also reduce exposure to this Denial of Service vulnerability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This High severity heap use-after-free flaw in OpenSSL\u0027s PKCS7_verify() function can be triggered by processing a specially crafted PKCS#7 or S/MIME signed message. This could lead to application crashes, memory corruption, or potentially remote code execution, impacting services that handle such messages. The vulnerability specifically affects applications utilizing OpenSSL PKCS#7 APIs, while those using CMS APIs are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "RHBZ#2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-13T17:34:24+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39012"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.src",
"AppStream-9.2.0.Z.E4S:compat-openssl11-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debuginfo-1:1.1.1k-4.el9_2.2.x86_64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.aarch64",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.i686",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.ppc64le",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.s390x",
"AppStream-9.2.0.Z.E4S:compat-openssl11-debugsource-1:1.1.1k-4.el9_2.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()"
}
]
}
RHSA-2026:39981
Vulnerability from csaf_redhat - Published: 2026-07-15 13:07 - Updated: 2026-07-21 01:50Summary
Red Hat Security Advisory: Cost Management Metrics Operator Update
Severity
Important
Notes
Topic: Cost Management Metrics Operator version 4.4.2 release.
Details: The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift.
The operator runs on the latest supported versions of Openshift.
This operator obtains OpenShift usage data by querying Prometheus every hour to create metric reports
that it uploads to Cost Management at console.redhat.com.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.
4.4 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in glibc, the GNU C Library. When an application calls the `getnetbyaddr` or `getnetbyaddr_r` functions to resolve a network address, and the system's `nsswitch.conf` file is configured to use a DNS (Domain Name System) backend for network lookups, a query for a zero-valued network can lead to the disclosure of stack memory contents. This information is leaked to the configured DNS resolver, potentially allowing an attacker who controls the resolver to gain sensitive data from the affected system.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.
6.7 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.
5.0 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL's Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL's QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 | — |
Workaround
|
Threats
Impact
Important
References
63 references
Acknowledgments
Mohamed Maatallah
Ali Raza
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Cost Management Metrics Operator version 4.4.2 release.",
"title": "Topic"
},
{
"category": "general",
"text": "The Cost Management Metrics Operator is a component of the Red Hat Cost Managment service for Openshift.\nThe operator runs on the latest supported versions of Openshift.\nThis operator obtains OpenShift usage data by querying Prometheus every hour to create metric reports\nthat it uploads to Cost Management at console.redhat.com.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:39981",
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-5278",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-0915",
"url": "https://access.redhat.com/security/cve/CVE-2026-0915"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-31790",
"url": "https://access.redhat.com/security/cve/CVE-2026-31790"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34182",
"url": "https://access.redhat.com/security/cve/CVE-2026-34182"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34183",
"url": "https://access.redhat.com/security/cve/CVE-2026-34183"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42764",
"url": "https://access.redhat.com/security/cve/CVE-2026-42764"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45445",
"url": "https://access.redhat.com/security/cve/CVE-2026-45445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45447",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4878",
"url": "https://access.redhat.com/security/cve/CVE-2026-4878"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5450",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/cost_management_service/1-latest/html/getting_started_with_cost_management/steps-to-cost-management",
"url": "https://docs.redhat.com/en/documentation/cost_management_service/1-latest/html/getting_started_with_cost_management/steps-to-cost-management"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39981.json"
}
],
"title": "Red Hat Security Advisory: Cost Management Metrics Operator Update",
"tracking": {
"current_release_date": "2026-07-21T01:50:11+00:00",
"generator": {
"date": "2026-07-21T01:50:11+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:39981",
"initial_release_date": "2026-07-15T13:07:37+00:00",
"revision_history": [
{
"date": "2026-07-15T13:07:37+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-21T01:50:11+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cost Management Metrics Operator 4",
"product": {
"name": "Cost Management Metrics Operator 4",
"product_id": "Cost Management Metrics Operator 4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cost_management:4::el9"
}
}
}
],
"category": "product_family",
"name": "Cost Management Metrics Operator"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"product": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"product_identification_helper": {
"purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3A093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea?arch=amd64\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator\u0026tag=1783539156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"product": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/costmanagement-metrics-operator-bundle@sha256%3Afa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7?arch=amd64\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle\u0026tag=1783613222"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"product": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"product_identification_helper": {
"purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3A1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593?arch=arm64\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator\u0026tag=1783539156"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le",
"product": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le",
"product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3Ac76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf?arch=ppc64le\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator\u0026tag=1783539156"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"product": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"product_id": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3A7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1?arch=s390x\u0026repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator\u0026tag=1783539156"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64 as a component of Cost Management Metrics Operator 4",
"product_id": "Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
},
"product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"relates_to_product_reference": "Cost Management Metrics Operator 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64 as a component of Cost Management Metrics Operator 4",
"product_id": "Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64"
},
"product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"relates_to_product_reference": "Cost Management Metrics Operator 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64 as a component of Cost Management Metrics Operator 4",
"product_id": "Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64"
},
"product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"relates_to_product_reference": "Cost Management Metrics Operator 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x as a component of Cost Management Metrics Operator 4",
"product_id": "Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x"
},
"product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"relates_to_product_reference": "Cost Management Metrics Operator 4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le as a component of Cost Management Metrics Operator 4",
"product_id": "Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
},
"product_reference": "registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le",
"relates_to_product_reference": "Cost Management Metrics Operator 4"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mohamed Maatallah"
]
}
],
"cve": "CVE-2025-5278",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"discovery_date": "2025-05-27T13:50:20.148000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2368764"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GNU Coreutils. The sort utility\u0027s begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key format. A malicious input could lead to a crash or leak sensitive data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The severity of this issue is considered Moderate rather than Critical because successful exploitation requires the use of the traditional key specification syntax with an exceptionally large character position value, which is uncommon in typical usage. Although the vulnerability can lead to a heap buffer overflow resulting in a read one byte before the allocated buffer, it does not enable code execution, privilege escalation, or direct compromise of data confidentiality or integrity. The impact is therefore primarily limited to potential service disruption due to application crashes.\n\nFurthermore, default RHEL configurations such as SELinux enforcement, ASLR, and memory protections reduce the likelihood of exploitation and limit the scope of any resulting impact. These safeguards, along with typical system usage patterns that do not commonly invoke the vulnerable code path, restrict exploitability in default and hardened environments. Consequently, the vulnerability\u2019s overall security impact is mitigated compared to flaws that allow immediate code execution or broader compromise across system components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-5278"
},
{
"category": "external",
"summary": "RHBZ#2368764",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368764"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-5278",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-5278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5278"
},
{
"category": "external",
"summary": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633",
"url": "https://cgit.git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8c9602e3a145e9596dc1a63c6ed67865814b6633"
},
{
"category": "external",
"summary": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507",
"url": "https://debbugs.gnu.org/cgi/bugreport.cgi?bug=78507"
}
],
"release_date": "2025-05-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification"
},
{
"cve": "CVE-2026-0915",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"discovery_date": "2026-01-15T23:01:26.157678+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430201"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc, the GNU C Library. When an application calls the `getnetbyaddr` or `getnetbyaddr_r` functions to resolve a network address, and the system\u0027s `nsswitch.conf` file is configured to use a DNS (Domain Name System) backend for network lookups, a query for a zero-valued network can lead to the disclosure of stack memory contents. This information is leaked to the configured DNS resolver, potentially allowing an attacker who controls the resolver to gain sensitive data from the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Information disclosure via zero-valued network query",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat products. It allows for information disclosure of stack contents to a configured DNS resolver when an application utilizes `getnetbyaddr` or `getnetbyaddr_r` with a DNS backend specified in `nsswitch.conf` for a zero-valued network query. This affects Red Hat Enterprise Linux and OpenShift Container Platform.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-0915"
},
{
"category": "external",
"summary": "RHBZ#2430201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430201"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-0915",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0915"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0915",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0915"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=33802",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=33802"
}
],
"release_date": "2026-01-15T22:08:41.630000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Information disclosure via zero-valued network query"
},
{
"acknowledgments": [
{
"names": [
"Ali Raza"
]
}
],
"cve": "CVE-2026-4878",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-03-26T06:56:21.213270+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451615"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4878"
},
{
"category": "external",
"summary": "RHBZ#2451615",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
}
],
"release_date": "2026-04-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
},
{
"cve": "CVE-2026-5450",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-20T21:01:35.403778+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2459853"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in glibc (GNU C Library). This vulnerability occurs when an application uses the `scanf` family of functions with a `%mc` format specifier, which is used for dynamically allocating memory for character input, and provides an explicit width greater than 1024. This specific combination can lead to a one-byte heap buffer overflow, potentially allowing an attacker to corrupt memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Because this flaw requires that an affected application call the affected functions with an attacker-supplied value, Red Hat assesses the Attack Complexity of this flaw as High. Additionally, the flaw overflows a single byte onto the heap, so meaningful exploitation requires that the heap is structured such that a single byte can lead to an attacker-controlled outcome, or that the affected functions can be invoked with an attacker-controlled buffer base address. Regarding Attack Vector and Privileges Required, Red Hat assesses these elements as Local and Low respectively, as remote unauthenticated exploitation would require all the conditions above in a library client that listened on a network port and processed attacker-controllable data with the affected library functions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5450"
},
{
"category": "external",
"summary": "RHBZ#2459853",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459853"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5450",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5450"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450"
},
{
"category": "external",
"summary": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u",
"url": "https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5450#range-21286997"
},
{
"category": "external",
"summary": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450"
}
],
"release_date": "2026-04-20T20:55:41.170000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width"
},
{
"cve": "CVE-2026-31790",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-03-25T02:59:10.179000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451094"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact. This flaw affects applications utilizing RSASVE key encapsulation, where an attacker-supplied invalid RSA public key is used with EVP_PKEY_encapsulate() without prior validation. This can lead to the disclosure of sensitive, uninitialized memory buffer contents to a malicious peer.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-31790"
},
{
"category": "external",
"summary": "RHBZ#2451094",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451094"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-31790",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-31790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-31790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-31790"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260407.txt",
"url": "https://openssl-library.org/news/secadv/20260407.txt"
}
],
"release_date": "2026-04-07T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key"
},
{
"cve": "CVE-2026-34182",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-05-27T13:59:43+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481884"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL\u0027s Cryptographic Message Services (CMS) AuthEnvelopedData processing. An on-path attacker can exploit insufficient input validation on cipher and tag length fields by sending specially crafted CMS messages. This can lead to the forging of messages or bypassing integrity validation. Consequently, an attacker may achieve key-equivalent functionality for a given CMS recipient.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This flaw in OpenSSL\u0027s Cryptographic Message Services (CMS) AuthEnvelopedData processing could allow an on-path attacker to forge messages or bypass integrity validation. This is due to insufficient input validation on cipher and tag length fields, potentially leading to key-equivalent functionality or integrity bypass in applications utilizing affected OpenSSL versions for CMS AuthEnvelopedData.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34182"
},
{
"category": "external",
"summary": "RHBZ#2481884",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34182",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34182"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34182",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34182"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "Systems configured to operate in FIPS mode are not affected by this vulnerability. To mitigate this issue, ensure that OpenSSL is operating in FIPS mode by enabling the system-wide FIPS policy. This may have broader implications for cryptographic operations on the system and should be evaluated for compatibility with existing applications. A system reboot may be required for the changes to take effect.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages"
},
{
"cve": "CVE-2026-34183",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-27T14:04:59+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481885"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL\u0027s QUIC PATH_CHALLENGE handler. A remote attacker can exploit this vulnerability by flooding a QUIC client or server with specially crafted PATH_CHALLENGE frames. This leads to unbounded memory allocation within the local QUIC stack, as the system continuously allocates PATH_RESPONSE frames without them being acknowledged. The primary consequence is a Denial of Service (DoS), causing the affected application to terminate abnormally due to memory exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A Moderate severity flaw exists in the QUIC PATH_CHALLENGE handler, allowing a remote attacker to exhaust heap memory of a QUIC client or server. By flooding the local QUIC stack with PATH_CHALLENGE frames, a malicious peer can trigger unbounded memory allocation, leading to a denial of service for applications utilizing the vulnerable QUIC implementation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34183"
},
{
"category": "external",
"summary": "RHBZ#2481885",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34183",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34183"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34183",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34183"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, apply UDP rate limiting at your network edge to throttle malicious traffic. If QUIC is not strictly required, disable the listener entirely and configure your application to use standard TLS over TCP. Additionally, enforce strict process memory limits using cgroups to prevent host-wide memory exhaustion during an attack.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler"
},
{
"cve": "CVE-2026-42764",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-27T14:08:07+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481887"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server\u0027s address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: NULL pointer dereference in QUIC server initial packet handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Moderate severity issue. A NULL pointer dereference can occur in the OpenSSL QUIC server when processing initial packets with invalid tokens, leading to a denial of service. This vulnerability is only exploitable if the client address validation is explicitly disabled using the `SSL_LISTENER_FLAG_NO_VALIDATE` flag, which is not the default configuration for OpenSSL QUIC servers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42764"
},
{
"category": "external",
"summary": "RHBZ#2481887",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42764",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42764"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42764",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42764"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that the OpenSSL QUIC server has client address validation enabled. This is the default configuration. If the `SSL_LISTENER_FLAG_NO_VALIDATE` flag is being used with the `SSL_new_listener()` call, it should be removed to prevent the vulnerability from being exploitable.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: NULL pointer dereference in QUIC server initial packet handling"
},
{
"cve": "CVE-2026-45445",
"cwe": {
"id": "CWE-1204",
"name": "Generation of Weak Initialization Vector (IV)"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481896"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. Applications that use the AES-OCB encryption method with a specific one-shot interface (EVP_Cipher()) will have their provided Initialization Vector (IV) silently discarded. This leads to the same internal cryptographic value being used repeatedly, which compromises the confidentiality of encrypted data. Additionally, this issue allows for the universal forgery of authentication tags, undermining the integrity of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: AES-OCB IV Ignored on EVP_Cipher() Path",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Moderate severity flaw where applications utilizing the AES-OCB cipher through OpenSSL\u0027s EVP_Cipher() one-shot interface may silently discard the provided initialization vector (IV). This leads to nonce reuse, compromising confidentiality and enabling universal forgery of authentication tags. Red Hat products are primarily affected if they include or rely on third-party applications that specifically employ this less common and discouraged API usage with AES-OCB, as standard OpenSSL SSL/TLS implementations and applications using the recommended streaming AEAD API are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45445"
},
{
"category": "external",
"summary": "RHBZ#2481896",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45445"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: AES-OCB IV Ignored on EVP_Cipher() Path"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This High severity heap use-after-free flaw in OpenSSL\u0027s PKCS7_verify() function can be triggered by processing a specially crafted PKCS#7 or S/MIME signed message. This could lead to application crashes, memory corruption, or potentially remote code execution, impacting services that handle such messages. The vulnerability specifically affects applications utilizing OpenSSL PKCS#7 APIs, while those using CMS APIs are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"known_not_affected": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "RHBZ#2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-15T13:07:37+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle@sha256:fa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:093ff7d3b7e420f4cd6650314bea628408ec38e2965e770295f4a5eb8e9b97ea_amd64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:1c4cf70fef001a66b2d93b43668e21e87ccb1203e8206e7449c5a70d9204c593_arm64",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:7d1fc978c1e10cf51876a725fa41c53c52ecec884c2d25d6f782a7cbd87f4ca1_s390x",
"Cost Management Metrics Operator 4:registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator@sha256:c76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()"
}
]
}
rlsa-2026:25237
Vulnerability from osv_rocky
Published
2026-06-13 00:05
Modified
2026-06-27 00:06
Summary
Important: openssl security update
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
-
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing (CVE-2026-7383)
-
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption (CVE-2026-9076)
-
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. (CVE-2026-34180)
-
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVE-2026-34181)
-
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182)
-
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (CVE-2026-34183)
-
openssl: NULL pointer dereference in QUIC server initial packet handling (CVE-2026-42764)
-
openssl: Possible NULL Dereference in Password-Based CMS Decryption (CVE-2026-42766)
-
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVE-2026-42767)
-
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (CVE-2026-42768)
-
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVE-2026-42769)
-
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770)
-
openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445)
-
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVE-2026-45446)
-
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
9.1 (Critical)
Credits
Rocky Enterprise Software Foundation
Red Hat
References
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:10",
"name": "openssl",
"purl": "pkg:rpm/rocky-linux/openssl?distro=rocky-linux-10\u0026epoch=1"
},
"ranges": [
{
"database_specific": {
"yum_repository": "BaseOS"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.5.5-4.el10_2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"details": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing (CVE-2026-7383)\n\n* openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption (CVE-2026-9076)\n\n* openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. (CVE-2026-34180)\n\n* openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVE-2026-34181)\n\n* openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182)\n\n* openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (CVE-2026-34183)\n\n* openssl: NULL pointer dereference in QUIC server initial packet handling (CVE-2026-42764)\n\n* openssl: Possible NULL Dereference in Password-Based CMS Decryption (CVE-2026-42766)\n\n* openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVE-2026-42767)\n\n* openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (CVE-2026-42768)\n\n* openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVE-2026-42769)\n\n* openssl: FFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770)\n\n* openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445)\n\n* openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVE-2026-45446)\n\n* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:25237",
"modified": "2026-06-27T00:06:22.555811Z",
"published": "2026-06-13T00:05:06.020189Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:25237"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
],
"summary": "Important: openssl security update",
"upstream": [
"CVE-2026-34180",
"CVE-2026-34181",
"CVE-2026-34182",
"CVE-2026-34183",
"CVE-2026-42764",
"CVE-2026-42766",
"CVE-2026-42767",
"CVE-2026-42768",
"CVE-2026-42769",
"CVE-2026-42770",
"CVE-2026-45445",
"CVE-2026-45446",
"CVE-2026-45447",
"CVE-2026-7383",
"CVE-2026-9076"
]
}
rlsa-2026:25239
Vulnerability from osv_rocky
Published
2026-06-13 00:03
Modified
2026-06-27 00:06
Summary
Important: openssl security update
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
-
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing (CVE-2026-7383)
-
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption (CVE-2026-9076)
-
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. (CVE-2026-34180)
-
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVE-2026-34181)
-
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182)
-
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (CVE-2026-34183)
-
openssl: NULL pointer dereference in QUIC server initial packet handling (CVE-2026-42764)
-
openssl: Possible NULL Dereference in Password-Based CMS Decryption (CVE-2026-42766)
-
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVE-2026-42767)
-
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (CVE-2026-42768)
-
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVE-2026-42769)
-
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770)
-
openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445)
-
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVE-2026-45446)
-
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
9.1 (Critical)
Credits
Rocky Enterprise Software Foundation
Red Hat
References
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:9",
"name": "openssl",
"purl": "pkg:rpm/rocky-linux/openssl?distro=rocky-linux-9\u0026epoch=1"
},
"ranges": [
{
"database_specific": {
"yum_repository": "BaseOS"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "1:3.5.5-4.el9_8"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"details": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing (CVE-2026-7383)\n\n* openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption (CVE-2026-9076)\n\n* openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. (CVE-2026-34180)\n\n* openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVE-2026-34181)\n\n* openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages (CVE-2026-34182)\n\n* openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (CVE-2026-34183)\n\n* openssl: NULL pointer dereference in QUIC server initial packet handling (CVE-2026-42764)\n\n* openssl: Possible NULL Dereference in Password-Based CMS Decryption (CVE-2026-42766)\n\n* openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVE-2026-42767)\n\n* openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (CVE-2026-42768)\n\n* openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVE-2026-42769)\n\n* openssl: FFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770)\n\n* openssl: AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445)\n\n* openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVE-2026-45446)\n\n* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:25239",
"modified": "2026-06-27T00:06:16.715697Z",
"published": "2026-06-13T00:03:17.085789Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:25239"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
],
"summary": "Important: openssl security update",
"upstream": [
"CVE-2026-34180",
"CVE-2026-34181",
"CVE-2026-34182",
"CVE-2026-34183",
"CVE-2026-42764",
"CVE-2026-42766",
"CVE-2026-42767",
"CVE-2026-42768",
"CVE-2026-42769",
"CVE-2026-42770",
"CVE-2026-45445",
"CVE-2026-45446",
"CVE-2026-45447",
"CVE-2026-7383",
"CVE-2026-9076"
]
}
rlsa-2026:26275
Vulnerability from osv_rocky
Published
2026-06-17 06:00
Modified
2026-07-01 06:04
Summary
Important: openssl security update
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
-
openssl: Use After Free with SSL_free_buffers (CVE-2024-4741)
-
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
8.1 (High)
Credits
Rocky Enterprise Software Foundation
Red Hat
References
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:8",
"name": "openssl",
"purl": "pkg:rpm/rocky-linux/openssl?distro=rocky-linux-8\u0026epoch=1"
},
"ranges": [
{
"database_specific": {
"yum_repository": "BaseOS"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.1.1k-16.el8_10"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"details": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: Use After Free with SSL_free_buffers (CVE-2024-4741)\n\n* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:26275",
"modified": "2026-07-01T06:04:51.845425Z",
"published": "2026-06-17T06:00:15.788686Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:26275"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2283757"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Important: openssl security update",
"upstream": [
"CVE-2024-4741",
"CVE-2026-45447"
]
}
rlsa-2026:36215
Vulnerability from osv_rocky
Published
2026-07-13 18:01
Modified
2026-07-21 06:05
Summary
Important: compat-openssl10 security update
Details
The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1.
Security Fix(es):
- openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Severity
8.1 (High)
Credits
Rocky Enterprise Software Foundation
Red Hat
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"package": {
"ecosystem": "Rocky Linux:8",
"name": "compat-openssl10",
"purl": "pkg:rpm/rocky-linux/compat-openssl10?distro=rocky-linux-8\u0026epoch=1"
},
"ranges": [
{
"database_specific": {
"yum_repository": "AppStream"
},
"events": [
{
"introduced": "0"
},
{
"fixed": "1:1.0.2o-4.el8_10.3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [
{
"name": "Rocky Enterprise Software Foundation"
},
{
"name": "Red Hat"
}
],
"details": "The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries and is provided for compatibility with previous releases and software that does not support compilation with OpenSSL-1.1.\n\nSecurity Fix(es):\n\n* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "RLSA-2026:36215",
"modified": "2026-07-21T06:05:45.609551Z",
"published": "2026-07-13T18:01:45.429329Z",
"references": [
{
"type": "ADVISORY",
"url": "https://errata.rockylinux.org/RLSA-2026:36215"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
}
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "Important: compat-openssl10 security update",
"upstream": [
"CVE-2026-45447"
]
}
SUSE-SU-2026:22100-1
Vulnerability from csaf_suse - Published: 2026-06-11 10:02 - Updated: 2026-06-11 10:02Summary
Security update for openssl-3
Severity
Important
Notes
Title of the patch: Security update for openssl-3
Description of the patch: This update for openssl-3 fixes the following issues
- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).
- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).
- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).
- CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344).
- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).
- CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353).
- CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355).
- CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356).
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
Patchnames: SUSE-SLE-Micro-6.0-752,SUSE-SLE-Micro-Extras-6.0-kernel-464
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
41 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/s… | self |
| https://www.suse.com/support/update/announcement/… | self |
| https://lists.suse.com/pipermail/sle-security-upd… | self |
| https://bugzilla.suse.com/1266340 | self |
| https://bugzilla.suse.com/1266341 | self |
| https://bugzilla.suse.com/1266342 | self |
| https://bugzilla.suse.com/1266344 | self |
| https://bugzilla.suse.com/1266349 | self |
| https://bugzilla.suse.com/1266353 | self |
| https://bugzilla.suse.com/1266355 | self |
| https://bugzilla.suse.com/1266356 | self |
| https://bugzilla.suse.com/1266357 | self |
| https://www.suse.com/security/cve/CVE-2026-34180/ | self |
| https://www.suse.com/security/cve/CVE-2026-34182/ | self |
| https://www.suse.com/security/cve/CVE-2026-42766/ | self |
| https://www.suse.com/security/cve/CVE-2026-42770/ | self |
| https://www.suse.com/security/cve/CVE-2026-45445/ | self |
| https://www.suse.com/security/cve/CVE-2026-45446/ | self |
| https://www.suse.com/security/cve/CVE-2026-45447/ | self |
| https://www.suse.com/security/cve/CVE-2026-7383/ | self |
| https://www.suse.com/security/cve/CVE-2026-9076/ | self |
| https://www.suse.com/security/cve/CVE-2026-34180 | external |
| https://bugzilla.suse.com/1266342 | external |
| https://www.suse.com/security/cve/CVE-2026-34182 | external |
| https://bugzilla.suse.com/1266344 | external |
| https://www.suse.com/security/cve/CVE-2026-42766 | external |
| https://bugzilla.suse.com/1266349 | external |
| https://www.suse.com/security/cve/CVE-2026-42770 | external |
| https://bugzilla.suse.com/1266353 | external |
| https://www.suse.com/security/cve/CVE-2026-45445 | external |
| https://bugzilla.suse.com/1266355 | external |
| https://www.suse.com/security/cve/CVE-2026-45446 | external |
| https://bugzilla.suse.com/1266356 | external |
| https://www.suse.com/security/cve/CVE-2026-45447 | external |
| https://bugzilla.suse.com/1266357 | external |
| https://bugzilla.suse.com/1266389 | external |
| https://www.suse.com/security/cve/CVE-2026-7383 | external |
| https://bugzilla.suse.com/1266340 | external |
| https://www.suse.com/security/cve/CVE-2026-9076 | external |
| https://bugzilla.suse.com/1266341 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-3",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-3 fixes the following issues\n\n- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).\n- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).\n- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).\n- CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344).\n- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).\n- CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353).\n- CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355).\n- CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356).\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-752,SUSE-SLE-Micro-Extras-6.0-kernel-464",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22100-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22100-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622100-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22100-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026790.html"
},
{
"category": "self",
"summary": "SUSE Bug 1266340",
"url": "https://bugzilla.suse.com/1266340"
},
{
"category": "self",
"summary": "SUSE Bug 1266341",
"url": "https://bugzilla.suse.com/1266341"
},
{
"category": "self",
"summary": "SUSE Bug 1266342",
"url": "https://bugzilla.suse.com/1266342"
},
{
"category": "self",
"summary": "SUSE Bug 1266344",
"url": "https://bugzilla.suse.com/1266344"
},
{
"category": "self",
"summary": "SUSE Bug 1266349",
"url": "https://bugzilla.suse.com/1266349"
},
{
"category": "self",
"summary": "SUSE Bug 1266353",
"url": "https://bugzilla.suse.com/1266353"
},
{
"category": "self",
"summary": "SUSE Bug 1266355",
"url": "https://bugzilla.suse.com/1266355"
},
{
"category": "self",
"summary": "SUSE Bug 1266356",
"url": "https://bugzilla.suse.com/1266356"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34180 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34182 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42770 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45445 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45445/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45446 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7383 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9076 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9076/"
}
],
"title": "Security update for openssl-3",
"tracking": {
"current_release_date": "2026-06-11T10:02:22Z",
"generator": {
"date": "2026-06-11T10:02:22Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22100-1",
"initial_release_date": "2026-06-11T10:02:22Z",
"revision_history": [
{
"date": "2026-06-11T10:02:22Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.1.4-14.1.aarch64",
"product": {
"name": "libopenssl-3-devel-3.1.4-14.1.aarch64",
"product_id": "libopenssl-3-devel-3.1.4-14.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"product": {
"name": "libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"product_id": "libopenssl-3-fips-provider-3.1.4-14.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.1.4-14.1.aarch64",
"product": {
"name": "libopenssl3-3.1.4-14.1.aarch64",
"product_id": "libopenssl3-3.1.4-14.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-3-3.1.4-14.1.aarch64",
"product": {
"name": "openssl-3-3.1.4-14.1.aarch64",
"product_id": "openssl-3-3.1.4-14.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.1.4-14.1.s390x",
"product": {
"name": "libopenssl-3-devel-3.1.4-14.1.s390x",
"product_id": "libopenssl-3-devel-3.1.4-14.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"product": {
"name": "libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"product_id": "libopenssl-3-fips-provider-3.1.4-14.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.1.4-14.1.s390x",
"product": {
"name": "libopenssl3-3.1.4-14.1.s390x",
"product_id": "libopenssl3-3.1.4-14.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-3-3.1.4-14.1.s390x",
"product": {
"name": "openssl-3-3.1.4-14.1.s390x",
"product_id": "openssl-3-3.1.4-14.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.1.4-14.1.x86_64",
"product": {
"name": "libopenssl-3-devel-3.1.4-14.1.x86_64",
"product_id": "libopenssl-3-devel-3.1.4-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"product": {
"name": "libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"product_id": "libopenssl-3-fips-provider-3.1.4-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.1.4-14.1.x86_64",
"product": {
"name": "libopenssl3-3.1.4-14.1.x86_64",
"product_id": "libopenssl3-3.1.4-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-3-3.1.4-14.1.x86_64",
"product": {
"name": "openssl-3-3.1.4-14.1.x86_64",
"product_id": "openssl-3-3.1.4-14.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.1.4-14.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64"
},
"product_reference": "libopenssl-3-devel-3.1.4-14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.1.4-14.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x"
},
"product_reference": "libopenssl-3-devel-3.1.4-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.1.4-14.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64"
},
"product_reference": "libopenssl-3-devel-3.1.4-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-fips-provider-3.1.4-14.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64"
},
"product_reference": "libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-fips-provider-3.1.4-14.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x"
},
"product_reference": "libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-fips-provider-3.1.4-14.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64"
},
"product_reference": "libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.1.4-14.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64"
},
"product_reference": "libopenssl3-3.1.4-14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.1.4-14.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x"
},
"product_reference": "libopenssl3-3.1.4-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.1.4-14.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64"
},
"product_reference": "libopenssl3-3.1.4-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.1.4-14.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64"
},
"product_reference": "openssl-3-3.1.4-14.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.1.4-14.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x"
},
"product_reference": "openssl-3-3.1.4-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.1.4-14.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
},
"product_reference": "openssl-3-3.1.4-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34180"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer. More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL\u0027s ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL\u0027s own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34180",
"url": "https://www.suse.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "SUSE Bug 1266342 for CVE-2026-34180",
"url": "https://bugzilla.suse.com/1266342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-34180"
},
{
"cve": "CVE-2026-34182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34182"
}
],
"notes": [
{
"category": "general",
"text": "Issue Summary: Cryptographic Message Services (CMS) processing fails to perform\nsufficient input validation on the cipher and tag length fields of\nAuthEnvelopedData containers, leading to various potential compromises.\n\nImpact Summary: Attackers making use of these vulnerabilities may achieve\nkey-equivalent functionality for a given CMS recipient and/or bypass integrity\nvalidation for a given message.\n\nIn one use case, an attacker may send a CMS message containing\nAuthEnvelopedData with the cipher specified as a non-AEAD cipher. OpenSSL\nerroneously allows this selection, and attempts to decrypt and validate the\nmessage.\n\nAn on-path attacker who captures one legitimate AES-GCM AuthEnvelopedData\naddressed to the victim can re-emit it with the recipientInfos set left\nbyte-for-byte intact, so the victim\u0027s private key still unwraps the genuine CEK\n(the content-encryption key), but with the inner OID rewritten to AES-256-OFB\n(Output Feedback Mode, an unauthenticated keystream mode) and with an\nattacker-chosen IV and ciphertext. The victim initializes AES-256-OFB under the\nreal CEK, never consults the MAC field, and CMS_decrypt() returns success.\n\nIf the application under attack responds to the attacker with any indicator\nshowing success or failure of the decryption effort, it is possible for the\nattacker to use this as an oracle to obtain key equivalent functionality for the\nCEK used for the chosen recipient of the message.\n\nIn another use case, an attacker can reduce the tag length of the chosen AEAD\ncipher for a given AuthEnvelopedData container to be a single byte long,\nallowing an attacker to brute force CMS decryption, producing an integrity\nbypass for applications that trust CMS_decrypt() to reject modified content.\n\nThe FIPS modules are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34182",
"url": "https://www.suse.com/security/cve/CVE-2026-34182"
},
{
"category": "external",
"summary": "SUSE Bug 1266344 for CVE-2026-34182",
"url": "https://bugzilla.suse.com/1266344"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-34182"
},
{
"cve": "CVE-2026-42766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42766"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42766",
"url": "https://www.suse.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "SUSE Bug 1266349 for CVE-2026-42766",
"url": "https://bugzilla.suse.com/1266349"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-42766"
},
{
"cve": "CVE-2026-42770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42770"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42)\npeer key, the peer key is not properly checked for the subgroup membership.\n\nImpact summary: A malicious peer which presents an X9.42 key carrying the\nvictim\u0027s p and g parameters, a forged q = r (a small prime factor of the\ncofactor (p\u22121)/q_local), and a public value Y of order r can recover the\nvictim\u0027s private key after a small number of key exchange attempts.\n\nWhen EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the\nsubgroup membership check Y^q \u2261 1 (mod p) is performed using the peer\u0027s\nown q parameter, not the local key\u0027s q. The peer\u0027s domain parameters are\nthen matched against the domain parameters of the private key, but the value\nof q is not compared.\n\nA malicious peer who presents an X9.42 key carrying the victim\u0027s p, g,\na forged q = r (a small prime factor of the cofactor), and a public\nvalue Y of order r passes all checks. The shared secret then takes only\nr distinct values, leaking priv mod r. Repeating for each small-prime\nfactor of the cofactor and combining via CRT recovers the full private\nkey (Lim-Lee / small-subgroup-confinement attack).\n\nThe realistic attack surface is narrow: principally CMP deployments with\nlong-lived RA/CA DHX keys and bespoke enterprise or government applications\nusing X9.42 DHX static keys with interactive protocols and therefore this\nissue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are affected by this\nissue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42770",
"url": "https://www.suse.com/security/cve/CVE-2026-42770"
},
{
"category": "external",
"summary": "SUSE Bug 1266353 for CVE-2026-42770",
"url": "https://bugzilla.suse.com/1266353"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-42770"
},
{
"cve": "CVE-2026-45445",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45445"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When an application drives an AES-OCB context through the\npublic EVP_Cipher() one-shot interface, the application-supplied\ninitialisation vector (IV) is silently discarded.\n\nImpact summary: Every message encrypted under the same key uses the\nsame effective nonce regardless of the IV supplied by the caller,\nresulting in (key, nonce) reuse and loss of confidentiality. If the\nsame code path is used to compute the authentication tag, the tag\ndepends only on the (key, IV) pair and not on the plaintext or\nciphertext, allowing universal forgery of arbitrary ciphertext from a\nsingle captured message.\n\nOpenSSL provides two ways to drive a cipher: the documented streaming\ninterface (EVP_CipherUpdate / EVP_CipherFinal_ex) and a lower-level\none-shot, EVP_Cipher(), whose documentation explicitly recommends\nagainst use by applications in favour of EVP_CipherUpdate() and\nEVP_CipherFinal_ex(). The OCB provider\u0027s streaming handler flushes\nthe application-supplied IV into the OCB context before processing\ndata; the one-shot handler did not. Every call to EVP_Cipher() on an\nAES-OCB context therefore ran with the all-zero key-derived offset\nstate left by cipher initialisation, regardless of the caller\u0027s IV.\n\nIf EVP_EncryptFinal_ex() is subsequently used to obtain the\nauthentication tag, the deferred IV setup runs at that point and\nclears the running checksum that should have been accumulated over the\nplaintext. The resulting tag is a function of (key, IV) only and\nverifies against any ciphertext produced under the same (key, IV)\npair.\n\nThe OpenSSL SSL/TLS implementation is not affected: AES-OCB is not a\nTLS cipher suite, and libssl does not call EVP_Cipher() in any case.\nApplications that drive AES-OCB through the documented streaming AEAD\nAPI (EVP_CipherUpdate / EVP_CipherFinal_ex) are not affected. Only\napplications that combine the AES-OCB cipher with the EVP_Cipher()\none-shot API are vulnerable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as AES-OCB is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45445",
"url": "https://www.suse.com/security/cve/CVE-2026-45445"
},
{
"category": "external",
"summary": "SUSE Bug 1266355 for CVE-2026-45445",
"url": "https://bugzilla.suse.com/1266355"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-45445"
},
{
"cve": "CVE-2026-45446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45446"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV\n(RFC 8452) mishandle the authentication of AAD (Additional Authenticated\nData) with an empty ciphertext allowing a forgery of such messages.\n\nImpact summary: An attacker can forge empty messages with arbitrary AAD\nto the victim\u0027s application using these ciphers.\n\nAES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) are nonce-misuse-resistant AEAD\nmodes: they accept a key, nonce, optional AAD (bytes that are authenticated\nbut not encrypted), and plaintext, and produces ciphertext plus a 16-byte\ntag. On decrypt, `EVP_DecryptFinal_ex()` is documented to return success only\nif the tag is verified succesfully.\n\nIn OpenSSL\u0027s provider implementation of these ciphers, the expected tag is\ncomputed only when decryption function is invoked with non-empty data.\nIf the caller supplies AAD and then calls `EVP_DecryptFinal_ex()` without\ninvocation of the ciphertext update, which can happen when the received\nciphertext length is zero, the tag is never recalculated and still holds its\nall-zeros value.\n\nWhen AES-GCM-SIV is used, an attacker who sends arbitrary AAD, empty\nciphertext, and all-zeros tag passes authentication under any key they do not\nknow, single-shot. When AES-SIV is used, for mounting the attack it\u0027s\nnecessary for the application to reuse the decryption context without\nresetting the key.\n\nAES-SIV is implemented since OpenSSL 3.0. AES-GCM-SIV is implemented since\nOpenSSL 3.2.\n\nNo protocols implemented in OpenSSL itself (TLS/CMS/PKCS7/HPKE/QUIC) support\neither AES-GCM-SIV or AES-SIV. To mount an attack, the applications must\nimplement their own protocol and use the EVP interface. Also they must skip the\nciphertext update when a message with an empty ciphertext arrives.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as these algorithms are not FIPS approved and the affected code is\noutside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45446",
"url": "https://www.suse.com/security/cve/CVE-2026-45446"
},
{
"category": "external",
"summary": "SUSE Bug 1266356 for CVE-2026-45446",
"url": "https://bugzilla.suse.com/1266356"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-45446"
},
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
},
{
"cve": "CVE-2026-7383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7383"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7383",
"url": "https://www.suse.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "SUSE Bug 1266340 for CVE-2026-7383",
"url": "https://bugzilla.suse.com/1266340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-7383"
},
{
"cve": "CVE-2026-9076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9076"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker\u0027s PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9076",
"url": "https://www.suse.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "SUSE Bug 1266341 for CVE-2026-9076",
"url": "https://bugzilla.suse.com/1266341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-devel-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl-3-fips-provider-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:libopenssl3-3.1.4-14.1.x86_64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.aarch64",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.s390x",
"SUSE Linux Micro 6.0:openssl-3-3.1.4-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T10:02:22Z",
"details": "moderate"
}
],
"title": "CVE-2026-9076"
}
]
}
SUSE-SU-2026:22132-1
Vulnerability from csaf_suse - Published: 2026-06-11 12:42 - Updated: 2026-06-11 12:42Summary
Security update for openssl-3
Severity
Important
Notes
Title of the patch: Security update for openssl-3
Description of the patch: This update for openssl-3 fixes the following issues
- CVE-2024-41996: DHEATATTACK: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol,
when an approved safe prime is used, allows remote attackers to trigger expensive server-side DHE (bsc#1230698).
- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).
- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).
- CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with
KeyTransportRecipientInfo (bsc#1261678).
- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).
- CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344).
- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).
- CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353).
- CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355).
- CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356).
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
Patchnames: SUSE-SLE-Micro-6.1-576
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
50 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/s… | self |
| https://www.suse.com/support/update/announcement/… | self |
| https://lists.suse.com/pipermail/sle-security-upd… | self |
| https://bugzilla.suse.com/1230698 | self |
| https://bugzilla.suse.com/1260446 | self |
| https://bugzilla.suse.com/1261678 | self |
| https://bugzilla.suse.com/1266340 | self |
| https://bugzilla.suse.com/1266341 | self |
| https://bugzilla.suse.com/1266342 | self |
| https://bugzilla.suse.com/1266344 | self |
| https://bugzilla.suse.com/1266349 | self |
| https://bugzilla.suse.com/1266353 | self |
| https://bugzilla.suse.com/1266355 | self |
| https://bugzilla.suse.com/1266356 | self |
| https://bugzilla.suse.com/1266357 | self |
| https://www.suse.com/security/cve/CVE-2024-41996/ | self |
| https://www.suse.com/security/cve/CVE-2026-28390/ | self |
| https://www.suse.com/security/cve/CVE-2026-34180/ | self |
| https://www.suse.com/security/cve/CVE-2026-34182/ | self |
| https://www.suse.com/security/cve/CVE-2026-42766/ | self |
| https://www.suse.com/security/cve/CVE-2026-42770/ | self |
| https://www.suse.com/security/cve/CVE-2026-45445/ | self |
| https://www.suse.com/security/cve/CVE-2026-45446/ | self |
| https://www.suse.com/security/cve/CVE-2026-45447/ | self |
| https://www.suse.com/security/cve/CVE-2026-7383/ | self |
| https://www.suse.com/security/cve/CVE-2026-9076/ | self |
| https://www.suse.com/security/cve/CVE-2024-41996 | external |
| https://bugzilla.suse.com/1229742 | external |
| https://www.suse.com/security/cve/CVE-2026-28390 | external |
| https://bugzilla.suse.com/1261678 | external |
| https://www.suse.com/security/cve/CVE-2026-34180 | external |
| https://bugzilla.suse.com/1266342 | external |
| https://www.suse.com/security/cve/CVE-2026-34182 | external |
| https://bugzilla.suse.com/1266344 | external |
| https://www.suse.com/security/cve/CVE-2026-42766 | external |
| https://bugzilla.suse.com/1266349 | external |
| https://www.suse.com/security/cve/CVE-2026-42770 | external |
| https://bugzilla.suse.com/1266353 | external |
| https://www.suse.com/security/cve/CVE-2026-45445 | external |
| https://bugzilla.suse.com/1266355 | external |
| https://www.suse.com/security/cve/CVE-2026-45446 | external |
| https://bugzilla.suse.com/1266356 | external |
| https://www.suse.com/security/cve/CVE-2026-45447 | external |
| https://bugzilla.suse.com/1266357 | external |
| https://bugzilla.suse.com/1266389 | external |
| https://www.suse.com/security/cve/CVE-2026-7383 | external |
| https://bugzilla.suse.com/1266340 | external |
| https://www.suse.com/security/cve/CVE-2026-9076 | external |
| https://bugzilla.suse.com/1266341 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-3",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-3 fixes the following issues\n\n- CVE-2024-41996: DHEATATTACK: Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol,\n when an approved safe prime is used, allows remote attackers to trigger expensive server-side DHE (bsc#1230698).\n- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).\n- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).\n- CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with\n KeyTransportRecipientInfo (bsc#1261678).\n- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).\n- CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344).\n- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).\n- CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353).\n- CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355).\n- CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356).\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-576",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22132-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22132-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622132-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22132-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026811.html"
},
{
"category": "self",
"summary": "SUSE Bug 1230698",
"url": "https://bugzilla.suse.com/1230698"
},
{
"category": "self",
"summary": "SUSE Bug 1260446",
"url": "https://bugzilla.suse.com/1260446"
},
{
"category": "self",
"summary": "SUSE Bug 1261678",
"url": "https://bugzilla.suse.com/1261678"
},
{
"category": "self",
"summary": "SUSE Bug 1266340",
"url": "https://bugzilla.suse.com/1266340"
},
{
"category": "self",
"summary": "SUSE Bug 1266341",
"url": "https://bugzilla.suse.com/1266341"
},
{
"category": "self",
"summary": "SUSE Bug 1266342",
"url": "https://bugzilla.suse.com/1266342"
},
{
"category": "self",
"summary": "SUSE Bug 1266344",
"url": "https://bugzilla.suse.com/1266344"
},
{
"category": "self",
"summary": "SUSE Bug 1266349",
"url": "https://bugzilla.suse.com/1266349"
},
{
"category": "self",
"summary": "SUSE Bug 1266353",
"url": "https://bugzilla.suse.com/1266353"
},
{
"category": "self",
"summary": "SUSE Bug 1266355",
"url": "https://bugzilla.suse.com/1266355"
},
{
"category": "self",
"summary": "SUSE Bug 1266356",
"url": "https://bugzilla.suse.com/1266356"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-41996 page",
"url": "https://www.suse.com/security/cve/CVE-2024-41996/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-28390 page",
"url": "https://www.suse.com/security/cve/CVE-2026-28390/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34180 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34182 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34182/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42770 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45445 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45445/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45446 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45446/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7383 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9076 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9076/"
}
],
"title": "Security update for openssl-3",
"tracking": {
"current_release_date": "2026-06-11T12:42:44Z",
"generator": {
"date": "2026-06-11T12:42:44Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22132-1",
"initial_release_date": "2026-06-11T12:42:44Z",
"revision_history": [
{
"date": "2026-06-11T12:42:44Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"product": {
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"product_id": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"product": {
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"product_id": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"product": {
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"product_id": "libopenssl3-3.1.4-slfo.1.1_10.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"product": {
"name": "openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"product_id": "openssl-3-3.1.4-slfo.1.1_10.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"product": {
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"product_id": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"product": {
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"product_id": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"product": {
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"product_id": "libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"product": {
"name": "openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"product_id": "openssl-3-3.1.4-slfo.1.1_10.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"product": {
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"product_id": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"product": {
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"product_id": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"product": {
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"product_id": "libopenssl3-3.1.4-slfo.1.1_10.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"product": {
"name": "openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"product_id": "openssl-3-3.1.4-slfo.1.1_10.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"product": {
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"product_id": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"product": {
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"product_id": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"product": {
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"product_id": "libopenssl3-3.1.4-slfo.1.1_10.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-3-3.1.4-slfo.1.1_10.1.x86_64",
"product": {
"name": "openssl-3-3.1.4-slfo.1.1_10.1.x86_64",
"product_id": "openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64"
},
"product_reference": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le"
},
"product_reference": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x"
},
"product_reference": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64"
},
"product_reference": "libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64"
},
"product_reference": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le"
},
"product_reference": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x"
},
"product_reference": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64"
},
"product_reference": "libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64"
},
"product_reference": "libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le"
},
"product_reference": "libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x"
},
"product_reference": "libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl3-3.1.4-slfo.1.1_10.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64"
},
"product_reference": "libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.1.4-slfo.1.1_10.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64"
},
"product_reference": "openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.1.4-slfo.1.1_10.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le"
},
"product_reference": "openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.1.4-slfo.1.1_10.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x"
},
"product_reference": "openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-3.1.4-slfo.1.1_10.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
},
"product_reference": "openssl-3-3.1.4-slfo.1.1_10.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-41996",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-41996"
}
],
"notes": [
{
"category": "general",
"text": "Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-41996",
"url": "https://www.suse.com/security/cve/CVE-2024-41996"
},
{
"category": "external",
"summary": "SUSE Bug 1229742 for CVE-2024-41996",
"url": "https://bugzilla.suse.com/1229742"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "important"
}
],
"title": "CVE-2024-41996"
},
{
"cve": "CVE-2026-28390",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-28390"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-28390",
"url": "https://www.suse.com/security/cve/CVE-2026-28390"
},
{
"category": "external",
"summary": "SUSE Bug 1261678 for CVE-2026-28390",
"url": "https://bugzilla.suse.com/1261678"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-28390"
},
{
"cve": "CVE-2026-34180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34180"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer. More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL\u0027s ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL\u0027s own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34180",
"url": "https://www.suse.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "SUSE Bug 1266342 for CVE-2026-34180",
"url": "https://bugzilla.suse.com/1266342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-34180"
},
{
"cve": "CVE-2026-34182",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34182"
}
],
"notes": [
{
"category": "general",
"text": "Issue Summary: Cryptographic Message Services (CMS) processing fails to perform\nsufficient input validation on the cipher and tag length fields of\nAuthEnvelopedData containers, leading to various potential compromises.\n\nImpact Summary: Attackers making use of these vulnerabilities may achieve\nkey-equivalent functionality for a given CMS recipient and/or bypass integrity\nvalidation for a given message.\n\nIn one use case, an attacker may send a CMS message containing\nAuthEnvelopedData with the cipher specified as a non-AEAD cipher. OpenSSL\nerroneously allows this selection, and attempts to decrypt and validate the\nmessage.\n\nAn on-path attacker who captures one legitimate AES-GCM AuthEnvelopedData\naddressed to the victim can re-emit it with the recipientInfos set left\nbyte-for-byte intact, so the victim\u0027s private key still unwraps the genuine CEK\n(the content-encryption key), but with the inner OID rewritten to AES-256-OFB\n(Output Feedback Mode, an unauthenticated keystream mode) and with an\nattacker-chosen IV and ciphertext. The victim initializes AES-256-OFB under the\nreal CEK, never consults the MAC field, and CMS_decrypt() returns success.\n\nIf the application under attack responds to the attacker with any indicator\nshowing success or failure of the decryption effort, it is possible for the\nattacker to use this as an oracle to obtain key equivalent functionality for the\nCEK used for the chosen recipient of the message.\n\nIn another use case, an attacker can reduce the tag length of the chosen AEAD\ncipher for a given AuthEnvelopedData container to be a single byte long,\nallowing an attacker to brute force CMS decryption, producing an integrity\nbypass for applications that trust CMS_decrypt() to reject modified content.\n\nThe FIPS modules are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34182",
"url": "https://www.suse.com/security/cve/CVE-2026-34182"
},
{
"category": "external",
"summary": "SUSE Bug 1266344 for CVE-2026-34182",
"url": "https://bugzilla.suse.com/1266344"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-34182"
},
{
"cve": "CVE-2026-42766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42766"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42766",
"url": "https://www.suse.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "SUSE Bug 1266349 for CVE-2026-42766",
"url": "https://bugzilla.suse.com/1266349"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-42766"
},
{
"cve": "CVE-2026-42770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42770"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42)\npeer key, the peer key is not properly checked for the subgroup membership.\n\nImpact summary: A malicious peer which presents an X9.42 key carrying the\nvictim\u0027s p and g parameters, a forged q = r (a small prime factor of the\ncofactor (p\u22121)/q_local), and a public value Y of order r can recover the\nvictim\u0027s private key after a small number of key exchange attempts.\n\nWhen EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the\nsubgroup membership check Y^q \u2261 1 (mod p) is performed using the peer\u0027s\nown q parameter, not the local key\u0027s q. The peer\u0027s domain parameters are\nthen matched against the domain parameters of the private key, but the value\nof q is not compared.\n\nA malicious peer who presents an X9.42 key carrying the victim\u0027s p, g,\na forged q = r (a small prime factor of the cofactor), and a public\nvalue Y of order r passes all checks. The shared secret then takes only\nr distinct values, leaking priv mod r. Repeating for each small-prime\nfactor of the cofactor and combining via CRT recovers the full private\nkey (Lim-Lee / small-subgroup-confinement attack).\n\nThe realistic attack surface is narrow: principally CMP deployments with\nlong-lived RA/CA DHX keys and bespoke enterprise or government applications\nusing X9.42 DHX static keys with interactive protocols and therefore this\nissue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are affected by this\nissue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42770",
"url": "https://www.suse.com/security/cve/CVE-2026-42770"
},
{
"category": "external",
"summary": "SUSE Bug 1266353 for CVE-2026-42770",
"url": "https://bugzilla.suse.com/1266353"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-42770"
},
{
"cve": "CVE-2026-45445",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45445"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When an application drives an AES-OCB context through the\npublic EVP_Cipher() one-shot interface, the application-supplied\ninitialisation vector (IV) is silently discarded.\n\nImpact summary: Every message encrypted under the same key uses the\nsame effective nonce regardless of the IV supplied by the caller,\nresulting in (key, nonce) reuse and loss of confidentiality. If the\nsame code path is used to compute the authentication tag, the tag\ndepends only on the (key, IV) pair and not on the plaintext or\nciphertext, allowing universal forgery of arbitrary ciphertext from a\nsingle captured message.\n\nOpenSSL provides two ways to drive a cipher: the documented streaming\ninterface (EVP_CipherUpdate / EVP_CipherFinal_ex) and a lower-level\none-shot, EVP_Cipher(), whose documentation explicitly recommends\nagainst use by applications in favour of EVP_CipherUpdate() and\nEVP_CipherFinal_ex(). The OCB provider\u0027s streaming handler flushes\nthe application-supplied IV into the OCB context before processing\ndata; the one-shot handler did not. Every call to EVP_Cipher() on an\nAES-OCB context therefore ran with the all-zero key-derived offset\nstate left by cipher initialisation, regardless of the caller\u0027s IV.\n\nIf EVP_EncryptFinal_ex() is subsequently used to obtain the\nauthentication tag, the deferred IV setup runs at that point and\nclears the running checksum that should have been accumulated over the\nplaintext. The resulting tag is a function of (key, IV) only and\nverifies against any ciphertext produced under the same (key, IV)\npair.\n\nThe OpenSSL SSL/TLS implementation is not affected: AES-OCB is not a\nTLS cipher suite, and libssl does not call EVP_Cipher() in any case.\nApplications that drive AES-OCB through the documented streaming AEAD\nAPI (EVP_CipherUpdate / EVP_CipherFinal_ex) are not affected. Only\napplications that combine the AES-OCB cipher with the EVP_Cipher()\none-shot API are vulnerable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as AES-OCB is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45445",
"url": "https://www.suse.com/security/cve/CVE-2026-45445"
},
{
"category": "external",
"summary": "SUSE Bug 1266355 for CVE-2026-45445",
"url": "https://bugzilla.suse.com/1266355"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-45445"
},
{
"cve": "CVE-2026-45446",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45446"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV\n(RFC 8452) mishandle the authentication of AAD (Additional Authenticated\nData) with an empty ciphertext allowing a forgery of such messages.\n\nImpact summary: An attacker can forge empty messages with arbitrary AAD\nto the victim\u0027s application using these ciphers.\n\nAES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) are nonce-misuse-resistant AEAD\nmodes: they accept a key, nonce, optional AAD (bytes that are authenticated\nbut not encrypted), and plaintext, and produces ciphertext plus a 16-byte\ntag. On decrypt, `EVP_DecryptFinal_ex()` is documented to return success only\nif the tag is verified succesfully.\n\nIn OpenSSL\u0027s provider implementation of these ciphers, the expected tag is\ncomputed only when decryption function is invoked with non-empty data.\nIf the caller supplies AAD and then calls `EVP_DecryptFinal_ex()` without\ninvocation of the ciphertext update, which can happen when the received\nciphertext length is zero, the tag is never recalculated and still holds its\nall-zeros value.\n\nWhen AES-GCM-SIV is used, an attacker who sends arbitrary AAD, empty\nciphertext, and all-zeros tag passes authentication under any key they do not\nknow, single-shot. When AES-SIV is used, for mounting the attack it\u0027s\nnecessary for the application to reuse the decryption context without\nresetting the key.\n\nAES-SIV is implemented since OpenSSL 3.0. AES-GCM-SIV is implemented since\nOpenSSL 3.2.\n\nNo protocols implemented in OpenSSL itself (TLS/CMS/PKCS7/HPKE/QUIC) support\neither AES-GCM-SIV or AES-SIV. To mount an attack, the applications must\nimplement their own protocol and use the EVP interface. Also they must skip the\nciphertext update when a message with an empty ciphertext arrives.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as these algorithms are not FIPS approved and the affected code is\noutside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45446",
"url": "https://www.suse.com/security/cve/CVE-2026-45446"
},
{
"category": "external",
"summary": "SUSE Bug 1266356 for CVE-2026-45446",
"url": "https://bugzilla.suse.com/1266356"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-45446"
},
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
},
{
"cve": "CVE-2026-7383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7383"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7383",
"url": "https://www.suse.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "SUSE Bug 1266340 for CVE-2026-7383",
"url": "https://bugzilla.suse.com/1266340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-7383"
},
{
"cve": "CVE-2026-9076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9076"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker\u0027s PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9076",
"url": "https://www.suse.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "SUSE Bug 1266341 for CVE-2026-9076",
"url": "https://bugzilla.suse.com/1266341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-devel-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl-3-fips-provider-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:libopenssl3-3.1.4-slfo.1.1_10.1.x86_64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.aarch64",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.ppc64le",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.s390x",
"SUSE Linux Micro 6.1:openssl-3-3.1.4-slfo.1.1_10.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-11T12:42:44Z",
"details": "moderate"
}
],
"title": "CVE-2026-9076"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…