Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-45447 (GCVE-0-2026-45447)
Vulnerability from cvelistv5 – Published: 2026-06-09 16:03 – Updated: 2026-07-24 12:05
VLAI
EPSS
VEX
Title
Heap Use-After-Free in the PKCS7_verify() Function
Summary
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could
trigger a use-after-free during PKCS#7 signature verification.
Impact summary: A use-after-free may result in process crashes, heap
corruption, or potentially remote code execution.
When processing a PKCS#7 or S/MIME signed message, if the SignedData
digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may
incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent
use of the BIO by the calling application results in a use-after-free
condition.
In the common case this occurs when the application later calls
BIO_free() on the BIO originally passed to PKCS7_verify(). Depending
on allocator behavior and application-specific BIO usage patterns, this
may result in a crash or other memory corruption. In some application
contexts this may potentially be exploitable for remote code execution.
Applications that process PKCS#7 or S/MIME signed messages using OpenSSL
PKCS#7 APIs may be affected. Applications using the CMS APIs for this
processing are not affected.
The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this
issue, as the affected code is outside the OpenSSL FIPS module boundary.
Severity
8.8 (High)
8.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
22 references
Impacted products
30 products
| Vendor | Product | Version | |
|---|---|---|---|
| OpenSSL | OpenSSL |
Affected:
4.0.0 , < 4.0.1
(semver)
Affected: 3.6.0 , < 3.6.3 (semver) Affected: 3.5.0 , < 3.5.7 (semver) Affected: 3.4.0 , < 3.4.6 (semver) Affected: 3.0.0 , < 3.0.21 (semver) Affected: 1.1.1 , < 1.1.1zh (custom) Affected: 1.0.2 , < 1.0.2zq (custom) |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:3.5.5-4.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:1.0.2o-4.el8_10.3 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:1.1.1k-16.el8_6 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On |
Unaffected:
1:1.1.1k-16.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_eus_long_life:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
1:1.0.2o-4.el8_8.1 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
1:1.1.1k-16.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
1:1.0.2o-4.el8_8.1 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
1:1.1.1k-16.el8_6 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:3.5.5-4.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:1.1.1k-5.el9_8.4 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
1:1.1.1k-4.el9_2.2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
1:1.1.1k-5.el9_4.3 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
1:1.1.1k-5.el9_6.3 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Cost Management Metrics Operator 4 |
Unaffected:
1783539156 , < *
(rpm)
cpe:/a:redhat:cost_management:4::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1782159791 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1782166952 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Insights proxy 1.5 |
Unaffected:
1782890503 , < *
(rpm)
cpe:/a:redhat:insights_proxy:1.5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1781525684 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1781525671 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1781525693 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1781525739 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine |
|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10 |
|
| Red Hat | Red Hat Enterprise Linux 6 |
cpe:/o:redhat:enterprise_linux:6 |
|
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
Date Public
2026-06-09 14:00
Credits
Thai Duong (Calif.io in collaboration with Claude and Anthropic Research)
Igor Ustinov
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-45447",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-10T03:59:38.212378Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-10T13:32:20.413Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:3.5.5-4.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "compat-openssl10",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.0.2o-4.el8_10.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-16.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.6"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-16.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "compat-openssl10",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.0.2o-4.el8_8.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-16.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "compat-openssl10",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.0.2o-4.el8_8.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-16.el8_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9",
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:3.5.5-4.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "compat-openssl11",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-5.el9_8.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "compat-openssl11",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-4.el9_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "compat-openssl11",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-5.el9_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "compat-openssl11",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:1.1.1k-5.el9_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cost_management:4::el9"
],
"defaultStatus": "affected",
"packageName": "costmanagement/costmanagement-metrics-rhel9-operator",
"product": "Cost Management Metrics Operator 4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783539156",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-server-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782159791",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782166952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:insights_proxy:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "insights-proxy/insights-proxy-container-rhel9",
"product": "Red Hat Insights proxy 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782890503",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/cds-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781525684",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/haproxy-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781525671",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/installer-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781525693",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/rhua-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781525739",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/console-mce-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/hive-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/hypershift-rhel9-operator",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/console-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "edk2",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "shim",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-aarch64",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-x64",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "openssl",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "ovmf",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "shim-signed",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "edk2",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "mingw-openssl",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "shim",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-x64",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "edk2",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "shim",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-aarch64",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "shim-unsigned-x64",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-825",
"description": "Expired Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-24T12:05:34.773Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"name": "RHBZ#2481898",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25237"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36215"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36217"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39012"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39009"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35869"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44438"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25239"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26275"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39981"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29197"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34102"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26319"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:25237: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:36215: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:36217: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:39012: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:39009: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:35869: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:44438: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:25239: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:26275: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:39981: Cost Management Metrics Operator 4"
},
{
"lang": "en",
"value": "RHSA-2026:29197: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:34102: Red Hat Insights proxy 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:26319: Red Hat Update Infrastructure 5"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-27T14:17:46.000Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-09T00:00:00.000Z",
"value": "Made public."
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "OpenSSL",
"vendor": "OpenSSL",
"versions": [
{
"lessThan": "4.0.1",
"status": "affected",
"version": "4.0.0",
"versionType": "semver"
},
{
"lessThan": "3.6.3",
"status": "affected",
"version": "3.6.0",
"versionType": "semver"
},
{
"lessThan": "3.5.7",
"status": "affected",
"version": "3.5.0",
"versionType": "semver"
},
{
"lessThan": "3.4.6",
"status": "affected",
"version": "3.4.0",
"versionType": "semver"
},
{
"lessThan": "3.0.21",
"status": "affected",
"version": "3.0.0",
"versionType": "semver"
},
{
"lessThan": "1.1.1zh",
"status": "affected",
"version": "1.1.1",
"versionType": "custom"
},
{
"lessThan": "1.0.2zq",
"status": "affected",
"version": "1.0.2",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Thai Duong (Calif.io in collaboration with Claude and Anthropic Research)"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Igor Ustinov"
}
],
"datePublic": "2026-06-09T14:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\u003cbr\u003etrigger a use-after-free during PKCS#7 signature verification.\u003cbr\u003e\u003cbr\u003eImpact summary: A use-after-free may result in process crashes, heap\u003cbr\u003ecorruption, or potentially remote code execution.\u003cbr\u003e\u003cbr\u003eWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\u003cbr\u003edigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\u003cbr\u003eincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\u003cbr\u003euse of the BIO by the calling application results in a use-after-free\u003cbr\u003econdition.\u003cbr\u003e\u003cbr\u003eIn the common case this occurs when the application later calls\u003cbr\u003eBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\u003cbr\u003eon allocator behavior and application-specific BIO usage patterns, this\u003cbr\u003emay result in a crash or other memory corruption. In some application\u003cbr\u003econtexts this may potentially be exploitable for remote code execution.\u003cbr\u003e\u003cbr\u003eApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\u003cbr\u003ePKCS#7 APIs may be affected. Applications using the CMS APIs for this\u003cbr\u003eprocessing are not affected.\u003cbr\u003e\u003cbr\u003eThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\u003cbr\u003eissue, as the affected code is outside the OpenSSL FIPS module boundary."
}
],
"value": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary."
}
],
"metrics": [
{
"format": "other",
"other": {
"content": {
"text": "High"
},
"type": "https://openssl-library.org/policies/general/security-policy/"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-416",
"description": "CWE-416 Use After Free",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-10T07:48:15.381Z",
"orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"shortName": "openssl"
},
"references": [
{
"name": "OpenSSL Advisory",
"tags": [
"vendor-advisory"
],
"url": "https://openssl-library.org/news/secadv/20260609.txt"
},
{
"name": "4.0.1 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c"
},
{
"name": "3.6.3 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e"
},
{
"name": "3.5.7 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8"
},
{
"name": "3.4.6 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c"
},
{
"name": "3.0.21 git commit",
"tags": [
"patch"
],
"url": "https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Heap Use-After-Free in the PKCS7_verify() Function",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5",
"assignerShortName": "openssl",
"cveId": "CVE-2026-45447",
"datePublished": "2026-06-09T16:03:32.914Z",
"dateReserved": "2026-05-12T14:34:06.277Z",
"dateUpdated": "2026-07-24T12:05:34.773Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-45447",
"date": "2026-07-25",
"epss": "0.05236",
"percentile": "0.91658"
},
"microsoft_vex": {
"current_release_date": "2026-07-21T14:40:43.000Z",
"cve": "CVE-2026-45447",
"id": "msrc_CVE-2026-45447",
"initial_release_date": "2026-06-13T01:02:40.000Z",
"product_status:fixed": "2",
"product_status:known_affected": "2",
"product_status:known_not_affected": "5",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Heap Use-After-Free in the PKCS7_verify() Function",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-45447.json",
"version": "5"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-45447\",\"sourceIdentifier\":\"openssl-security@openssl.org\",\"published\":\"2026-06-09T17:17:19.277\",\"lastModified\":\"2026-07-24T13:18:23.377\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\\ntrigger a use-after-free during PKCS#7 signature verification.\\n\\nImpact summary: A use-after-free may result in process crashes, heap\\ncorruption, or potentially remote code execution.\\n\\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\\nuse of the BIO by the calling application results in a use-after-free\\ncondition.\\n\\nIn the common case this occurs when the application later calls\\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\\non allocator behavior and application-specific BIO usage patterns, this\\nmay result in a crash or other memory corruption. In some application\\ncontexts this may potentially be exploitable for remote code execution.\\n\\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\\nprocessing are not affected.\\n\\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\"},{\"lang\":\"es\",\"value\":\"Resumen del problema: Un mensaje firmado PKCS#7 o S/MIME especialmente dise\u00f1ado podr\u00eda desencadenar un uso despu\u00e9s de liberaci\u00f3n durante la verificaci\u00f3n de firma PKCS#7.\\n\\nResumen del impacto: Un uso despu\u00e9s de liberaci\u00f3n puede resultar en ca\u00eddas de proceso, corrupci\u00f3n de heap o potencialmente ejecuci\u00f3n remota de c\u00f3digo.\\n\\nAl procesar un mensaje firmado PKCS#7 o S/MIME, si el campo digestAlgorithms de SignedData est\u00e1 presente como un SET ASN.1 vac\u00edo, OpenSSL puede liberar incorrectamente un BIO propiedad del llamador durante PKCS7_verify(). Un uso posterior del BIO por la aplicaci\u00f3n llamadora resulta en una condici\u00f3n de uso despu\u00e9s de liberaci\u00f3n.\\n\\nEn el caso com\u00fan, esto ocurre cuando la aplicaci\u00f3n llama posteriormente a BIO_free() en el BIO pasado originalmente a PKCS7_verify(). Dependiendo del comportamiento del asignador y de los patrones de uso de BIO espec\u00edficos de la aplicaci\u00f3n, esto puede resultar en una ca\u00edda u otra corrupci\u00f3n de memoria. En algunos contextos de aplicaci\u00f3n, esto podr\u00eda ser potencialmente explotable para ejecuci\u00f3n remota de c\u00f3digo.\\n\\nLas aplicaciones que procesan mensajes firmados PKCS#7 o S/MIME utilizando las APIs PKCS#7 de OpenSSL pueden verse afectadas. Las aplicaciones que utilizan las APIs CMS para este procesamiento no se ven afectadas.\\n\\nLos m\u00f3dulos FIPS en 4.0, 3.6, 3.5, 3.4 y 3.0 no se ven afectados por este problema, ya que el c\u00f3digo afectado est\u00e1 fuera del l\u00edmite del m\u00f3dulo FIPS de OpenSSL.\"}],\"affected\":[{\"source\":\"openssl-security@openssl.org\",\"affectedData\":[{\"vendor\":\"OpenSSL\",\"product\":\"OpenSSL\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"4.0.0\",\"lessThan\":\"4.0.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.6.0\",\"lessThan\":\"3.6.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.5.0\",\"lessThan\":\"3.5.7\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.4.0\",\"lessThan\":\"3.4.6\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.0.0\",\"lessThan\":\"3.0.21\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.1.1\",\"lessThan\":\"1.1.1zh\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"1.0.2\",\"lessThan\":\"1.0.2zq\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"1:3.5.5-4.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl10\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:1.0.2o-4.el8_10.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:1.1.1k-16.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.6\"],\"versions\":[{\"version\":\"1:1.1.1k-16.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl10\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"1:1.0.2o-4.el8_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"1:1.1.1k-16.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl10\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"1:1.0.2o-4.el8_8.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"1:1.1.1k-16.el8_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\",\"cpe:/o:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:3.5.5-4.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl11\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:1.1.1k-5.el9_8.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl11\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"1:1.1.1k-4.el9_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl11\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"1:1.1.1k-5.el9_4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compat-openssl11\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"1:1.1.1k-5.el9_6.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cost Management Metrics Operator 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"costmanagement/costmanagement-metrics-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:cost_management:4::el9\"],\"versions\":[{\"version\":\"1783539156\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1782159791\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1782166952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Insights proxy 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"insights-proxy/insights-proxy-container-rhel9\",\"cpes\":[\"cpe:/a:redhat:insights_proxy:1.5::el9\"],\"versions\":[{\"version\":\"1782890503\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/cds-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1781525684\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/haproxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1781525671\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1781525693\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/rhua-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1781525739\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/console-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hive-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hypershift-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/console-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edk2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-aarch64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-x64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ovmf\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-signed\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edk2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mingw-openssl\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-x64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edk2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-aarch64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"shim-unsigned-x64\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-10T03:59:38.212378Z\",\"id\":\"CVE-2026-45447\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"openssl-security@openssl.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-825\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.2\",\"versionEndExcluding\":\"1.0.2zq\",\"matchCriteriaId\":\"F534B804-67B6-49DA-8A86-0FF21E512908\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.1.1\",\"versionEndExcluding\":\"1.1.1zh\",\"matchCriteriaId\":\"43EFE1E3-4049-4EE6-A2AE-BDBA38E6870F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.0.0\",\"versionEndExcluding\":\"3.0.21\",\"matchCriteriaId\":\"EDB88756-EDFE-4886-A267-3F19342A6042\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.4.0\",\"versionEndExcluding\":\"3.4.6\",\"matchCriteriaId\":\"BF7E21E7-AEC0-4882-B1F1-2D056B506F22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.5.0\",\"versionEndExcluding\":\"3.5.7\",\"matchCriteriaId\":\"6B6B9930-C549-4D88-9784-AF32CCDDB87A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.6.0\",\"versionEndExcluding\":\"3.6.3\",\"matchCriteriaId\":\"D41B3C45-EC73-4DC8-989D-B2E2792E102F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:4.0.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E881B9A-1A0A-4BC0-8160-20C00561167D\"}]}]}],\"references\":[{\"url\":\"https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://openssl-library.org/news/secadv/20260609.txt\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25237\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25239\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26275\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29197\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34102\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35869\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36215\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36217\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39009\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39012\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39981\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44438\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-45447\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2481898\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-23T16:01:43+00:00",
"cve": "CVE-2026-45447",
"id": "CVE-2026-45447",
"initial_release_date": "2026-06-09T00:00:00+00:00",
"product_status:fixed": "271",
"product_status:known_affected": "12",
"product_status:known_not_affected": "52",
"product_status:under_investigation": "4",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-16T18:00:15Z",
"cve": "CVE-2026-45447",
"id": "CVE-2026-45447",
"initial_release_date": "2026-06-13T02:17:25Z",
"product_status:known_affected": "507",
"product_status:known_not_affected": "74",
"product_status:recommended": "379",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-45447",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-45447.json",
"version": "18"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:3.5.5-4.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.0.2o-4.el8_10.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-16.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus_long_life:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-16.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.0.2o-4.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-16.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.0.2o-4.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-16.el8_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\", \"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:3.5.5-4.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-5.el9_8.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-4.el9_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-5.el9_4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:1.1.1k-5.el9_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compat-openssl11\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cost_management:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cost Management Metrics Operator 4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783539156\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"costmanagement/costmanagement-metrics-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782159791\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782166952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:insights_proxy:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Insights proxy 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782890503\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"insights-proxy/insights-proxy-container-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525684\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/cds-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525671\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/haproxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525693\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/installer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781525739\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/rhua-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/console-mce-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hive-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hypershift-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/console-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"edk2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"shim\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"shim-unsigned-aarch64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"shim-unsigned-x64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"ovmf\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"shim-signed\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"edk2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"mingw-openssl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"shim\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"shim-unsigned-x64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"edk2\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"shim\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"shim-unsigned-aarch64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"shim-unsigned-x64\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-27T14:17:46.000Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-09T00:00:00.000Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:25237: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36215: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36217: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39012: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39009: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35869: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44438: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25239: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26275: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39981: Cost Management Metrics Operator 4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29197: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34102: Red Hat Insights proxy 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26319: Red Hat Update Infrastructure 5\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-09T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-45447\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2481898\", \"name\": \"RHBZ#2481898\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45447.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25237\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36215\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36217\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39012\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39009\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35869\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44438\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25239\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26275\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39981\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29197\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34102\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-825\", \"description\": \"Expired Pointer Dereference\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-24T12:05:34.773Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-45447\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-10T03:59:38.212378Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-09T18:36:48.165Z\"}}], \"cna\": {\"title\": \"Heap Use-After-Free in the PKCS7_verify() Function\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"Thai Duong (Calif.io in collaboration with Claude and Anthropic Research)\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Igor Ustinov\"}], \"metrics\": [{\"other\": {\"type\": \"https://openssl-library.org/policies/general/security-policy/\", \"content\": {\"text\": \"High\"}}, \"format\": \"other\"}], \"affected\": [{\"vendor\": \"OpenSSL\", \"product\": \"OpenSSL\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.0.0\", \"lessThan\": \"4.0.1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.6.0\", \"lessThan\": \"3.6.3\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.5.0\", \"lessThan\": \"3.5.7\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.4.0\", \"lessThan\": \"3.4.6\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"3.0.0\", \"lessThan\": \"3.0.21\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.1.1\", \"lessThan\": \"1.1.1zh\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"1.0.2\", \"lessThan\": \"1.0.2zq\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2026-06-09T14:00:00.000Z\", \"references\": [{\"url\": \"https://openssl-library.org/news/secadv/20260609.txt\", \"name\": \"OpenSSL Advisory\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/3aad5eb7af4de4ee0633c30a8541a54d9bbde63c\", \"name\": \"4.0.1 git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/c505d7559da5d5f9f2c3913c6883a5562ce7273e\", \"name\": \"3.6.3 git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/7d4a980c62258c5910cc883936e0c8dbab4d75a8\", \"name\": \"3.5.7 git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/a541ae8bfe849a30cc885e8780715c0f488e496c\", \"name\": \"3.4.6 git commit\", \"tags\": [\"patch\"]}, {\"url\": \"https://github.com/openssl/openssl/commit/9dfd688ad2290fc5075cacbc9bf0c9a93eefed54\", \"name\": \"3.0.21 git commit\", \"tags\": [\"patch\"]}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\\ntrigger a use-after-free during PKCS#7 signature verification.\\n\\nImpact summary: A use-after-free may result in process crashes, heap\\ncorruption, or potentially remote code execution.\\n\\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\\nuse of the BIO by the calling application results in a use-after-free\\ncondition.\\n\\nIn the common case this occurs when the application later calls\\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\\non allocator behavior and application-specific BIO usage patterns, this\\nmay result in a crash or other memory corruption. In some application\\ncontexts this may potentially be exploitable for remote code execution.\\n\\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\\nprocessing are not affected.\\n\\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\u003cbr\u003etrigger a use-after-free during PKCS#7 signature verification.\u003cbr\u003e\u003cbr\u003eImpact summary: A use-after-free may result in process crashes, heap\u003cbr\u003ecorruption, or potentially remote code execution.\u003cbr\u003e\u003cbr\u003eWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\u003cbr\u003edigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\u003cbr\u003eincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\u003cbr\u003euse of the BIO by the calling application results in a use-after-free\u003cbr\u003econdition.\u003cbr\u003e\u003cbr\u003eIn the common case this occurs when the application later calls\u003cbr\u003eBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\u003cbr\u003eon allocator behavior and application-specific BIO usage patterns, this\u003cbr\u003emay result in a crash or other memory corruption. In some application\u003cbr\u003econtexts this may potentially be exploitable for remote code execution.\u003cbr\u003e\u003cbr\u003eApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\u003cbr\u003ePKCS#7 APIs may be affected. Applications using the CMS APIs for this\u003cbr\u003eprocessing are not affected.\u003cbr\u003e\u003cbr\u003eThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\u003cbr\u003eissue, as the affected code is outside the OpenSSL FIPS module boundary.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-416\", \"description\": \"CWE-416 Use After Free\"}]}], \"providerMetadata\": {\"orgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"shortName\": \"openssl\", \"dateUpdated\": \"2026-06-10T07:48:15.381Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-45447\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-24T12:05:34.773Z\", \"dateReserved\": \"2026-05-12T14:34:06.277Z\", \"assignerOrgId\": \"3a12439a-ef3a-4c79-92e6-6081a721f1e5\", \"datePublished\": \"2026-06-09T16:03:32.914Z\", \"assignerShortName\": \"openssl\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
SUSE-SU-2026:2403-1
Vulnerability from csaf_suse - Published: 2026-06-16 06:53 - Updated: 2026-06-16 06:53Summary
Security update for openssl-1_1
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1
Description of the patch: This update for openssl-1_1 fixes the following issues:
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).
- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).
- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).
- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).
Patchnames: SUSE-2026-2403,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2403,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2403
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1 fixes the following issues:\n\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).\n- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).\n- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).\n- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2403,SUSE-SLE-SERVER-12-SP5-LTSS-2026-2403,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2403",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2403-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2403-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262403-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2403-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047341.html"
},
{
"category": "self",
"summary": "SUSE Bug 1266340",
"url": "https://bugzilla.suse.com/1266340"
},
{
"category": "self",
"summary": "SUSE Bug 1266341",
"url": "https://bugzilla.suse.com/1266341"
},
{
"category": "self",
"summary": "SUSE Bug 1266342",
"url": "https://bugzilla.suse.com/1266342"
},
{
"category": "self",
"summary": "SUSE Bug 1266349",
"url": "https://bugzilla.suse.com/1266349"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34180 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7383 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9076 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9076/"
}
],
"title": "Security update for openssl-1_1",
"tracking": {
"current_release_date": "2026-06-16T06:53:38Z",
"generator": {
"date": "2026-06-16T06:53:38Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2403-1",
"initial_release_date": "2026-06-16T06:53:38Z",
"revision_history": [
{
"date": "2026-06-16T06:53:38Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"product_id": "libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-2.131.1.aarch64",
"product": {
"name": "libopenssl1_1-1.1.1d-2.131.1.aarch64",
"product_id": "libopenssl1_1-1.1.1d-2.131.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"product_id": "libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-2.131.1.aarch64",
"product": {
"name": "openssl-1_1-1.1.1d-2.131.1.aarch64",
"product_id": "openssl-1_1-1.1.1d-2.131.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-64bit-1.1.1d-2.131.1.aarch64_ilp32",
"product": {
"name": "libopenssl-1_1-devel-64bit-1.1.1d-2.131.1.aarch64_ilp32",
"product_id": "libopenssl-1_1-devel-64bit-1.1.1d-2.131.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-64bit-1.1.1d-2.131.1.aarch64_ilp32",
"product": {
"name": "libopenssl1_1-64bit-1.1.1d-2.131.1.aarch64_ilp32",
"product_id": "libopenssl1_1-64bit-1.1.1d-2.131.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-64bit-1.1.1d-2.131.1.aarch64_ilp32",
"product": {
"name": "libopenssl1_1-hmac-64bit-1.1.1d-2.131.1.aarch64_ilp32",
"product_id": "libopenssl1_1-hmac-64bit-1.1.1d-2.131.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.i586",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.i586",
"product_id": "libopenssl-1_1-devel-1.1.1d-2.131.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-2.131.1.i586",
"product": {
"name": "libopenssl1_1-1.1.1d-2.131.1.i586",
"product_id": "libopenssl1_1-1.1.1d-2.131.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.i586",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.i586",
"product_id": "libopenssl1_1-hmac-1.1.1d-2.131.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-2.131.1.i586",
"product": {
"name": "openssl-1_1-1.1.1d-2.131.1.i586",
"product_id": "openssl-1_1-1.1.1d-2.131.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-doc-1.1.1d-2.131.1.noarch",
"product": {
"name": "openssl-1_1-doc-1.1.1d-2.131.1.noarch",
"product_id": "openssl-1_1-doc-1.1.1d-2.131.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"product_id": "libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"product": {
"name": "libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"product_id": "libopenssl1_1-1.1.1d-2.131.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"product_id": "libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-2.131.1.ppc64le",
"product": {
"name": "openssl-1_1-1.1.1d-2.131.1.ppc64le",
"product_id": "openssl-1_1-1.1.1d-2.131.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390",
"product_id": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-2.131.1.s390",
"product": {
"name": "libopenssl1_1-1.1.1d-2.131.1.s390",
"product_id": "libopenssl1_1-1.1.1d-2.131.1.s390"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390",
"product_id": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-2.131.1.s390",
"product": {
"name": "openssl-1_1-1.1.1d-2.131.1.s390",
"product_id": "openssl-1_1-1.1.1d-2.131.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"product_id": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"product": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"product_id": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-2.131.1.s390x",
"product": {
"name": "libopenssl1_1-1.1.1d-2.131.1.s390x",
"product_id": "libopenssl1_1-1.1.1d-2.131.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"product": {
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"product_id": "libopenssl1_1-32bit-1.1.1d-2.131.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"product_id": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"product": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"product_id": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-2.131.1.s390x",
"product": {
"name": "openssl-1_1-1.1.1d-2.131.1.s390x",
"product_id": "openssl-1_1-1.1.1d-2.131.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"product_id": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"product_id": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1d-2.131.1.x86_64",
"product": {
"name": "libopenssl1_1-1.1.1d-2.131.1.x86_64",
"product_id": "libopenssl1_1-1.1.1d-2.131.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"product": {
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"product_id": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"product_id": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"product": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"product_id": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1d-2.131.1.x86_64",
"product": {
"name": "openssl-1_1-1.1.1d-2.131.1.x86_64",
"product_id": "openssl-1_1-1.1.1d-2.131.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1d-2.131.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1d-2.131.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34180"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer. More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL\u0027s ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL\u0027s own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34180",
"url": "https://www.suse.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "SUSE Bug 1266342 for CVE-2026-34180",
"url": "https://bugzilla.suse.com/1266342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:38Z",
"details": "moderate"
}
],
"title": "CVE-2026-34180"
},
{
"cve": "CVE-2026-42766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42766"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42766",
"url": "https://www.suse.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "SUSE Bug 1266349 for CVE-2026-42766",
"url": "https://bugzilla.suse.com/1266349"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:38Z",
"details": "moderate"
}
],
"title": "CVE-2026-42766"
},
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:38Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
},
{
"cve": "CVE-2026-7383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7383"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7383",
"url": "https://www.suse.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "SUSE Bug 1266340 for CVE-2026-7383",
"url": "https://bugzilla.suse.com/1266340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:38Z",
"details": "moderate"
}
],
"title": "CVE-2026-7383"
},
{
"cve": "CVE-2026-9076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9076"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker\u0027s PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9076",
"url": "https://www.suse.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "SUSE Bug 1266341 for CVE-2026-9076",
"url": "https://bugzilla.suse.com/1266341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_1-devel-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_1-hmac-32bit-1.1.1d-2.131.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_1-1.1.1d-2.131.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:38Z",
"details": "moderate"
}
],
"title": "CVE-2026-9076"
}
]
}
SUSE-SU-2026:2404-1
Vulnerability from csaf_suse - Published: 2026-06-16 06:53 - Updated: 2026-06-16 06:53Summary
Security update for openssl-1_1
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1
Description of the patch: This update for openssl-1_1 fixes the following issues:
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).
- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).
- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).
- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).
Patchnames: SUSE-2026-2404,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2404,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2404
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1 fixes the following issues:\n\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).\n- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).\n- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).\n- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2404,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2404,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2404",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2404-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2404-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262404-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2404-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047340.html"
},
{
"category": "self",
"summary": "SUSE Bug 1266340",
"url": "https://bugzilla.suse.com/1266340"
},
{
"category": "self",
"summary": "SUSE Bug 1266341",
"url": "https://bugzilla.suse.com/1266341"
},
{
"category": "self",
"summary": "SUSE Bug 1266342",
"url": "https://bugzilla.suse.com/1266342"
},
{
"category": "self",
"summary": "SUSE Bug 1266349",
"url": "https://bugzilla.suse.com/1266349"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34180 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7383 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9076 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9076/"
}
],
"title": "Security update for openssl-1_1",
"tracking": {
"current_release_date": "2026-06-16T06:53:51Z",
"generator": {
"date": "2026-06-16T06:53:51Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2404-1",
"initial_release_date": "2026-06-16T06:53:51Z",
"revision_history": [
{
"date": "2026-06-16T06:53:51Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"product": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"product_id": "libopenssl1_1-1.1.1w-150600.5.32.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"product": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"product_id": "openssl-1_1-1.1.1w-150600.5.32.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-64bit-1.1.1w-150600.5.32.1.aarch64_ilp32",
"product": {
"name": "libopenssl-1_1-devel-64bit-1.1.1w-150600.5.32.1.aarch64_ilp32",
"product_id": "libopenssl-1_1-devel-64bit-1.1.1w-150600.5.32.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-64bit-1.1.1w-150600.5.32.1.aarch64_ilp32",
"product": {
"name": "libopenssl1_1-64bit-1.1.1w-150600.5.32.1.aarch64_ilp32",
"product_id": "libopenssl1_1-64bit-1.1.1w-150600.5.32.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.i586",
"product": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.i586",
"product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.i586",
"product": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.i586",
"product_id": "libopenssl1_1-1.1.1w-150600.5.32.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1w-150600.5.32.1.i586",
"product": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.i586",
"product_id": "openssl-1_1-1.1.1w-150600.5.32.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-doc-1.1.1w-150600.5.32.1.noarch",
"product": {
"name": "openssl-1_1-doc-1.1.1w-150600.5.32.1.noarch",
"product_id": "openssl-1_1-doc-1.1.1w-150600.5.32.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"product": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"product": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"product_id": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"product": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"product_id": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"product": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"product": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"product_id": "libopenssl1_1-1.1.1w-150600.5.32.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"product": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"product_id": "openssl-1_1-1.1.1w-150600.5.32.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"product_id": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_1-devel-32bit-1.1.1w-150600.5.32.1.x86_64",
"product": {
"name": "libopenssl-1_1-devel-32bit-1.1.1w-150600.5.32.1.x86_64",
"product_id": "libopenssl-1_1-devel-32bit-1.1.1w-150600.5.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"product": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"product_id": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"product": {
"name": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"product_id": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"product": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"product_id": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6",
"product_id": "SUSE Linux Enterprise Server 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
},
"product_reference": "openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34180"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer. More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL\u0027s ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL\u0027s own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34180",
"url": "https://www.suse.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "SUSE Bug 1266342 for CVE-2026-34180",
"url": "https://bugzilla.suse.com/1266342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:51Z",
"details": "moderate"
}
],
"title": "CVE-2026-34180"
},
{
"cve": "CVE-2026-42766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42766"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42766",
"url": "https://www.suse.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "SUSE Bug 1266349 for CVE-2026-42766",
"url": "https://bugzilla.suse.com/1266349"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:51Z",
"details": "moderate"
}
],
"title": "CVE-2026-42766"
},
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:51Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
},
{
"cve": "CVE-2026-7383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7383"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7383",
"url": "https://www.suse.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "SUSE Bug 1266340 for CVE-2026-7383",
"url": "https://bugzilla.suse.com/1266340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:51Z",
"details": "moderate"
}
],
"title": "CVE-2026-7383"
},
{
"cve": "CVE-2026-9076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9076"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker\u0027s PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9076",
"url": "https://www.suse.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "SUSE Bug 1266341 for CVE-2026-9076",
"url": "https://bugzilla.suse.com/1266341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl-1_1-devel-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libopenssl1_1-32bit-1.1.1w-150600.5.32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:openssl-1_1-1.1.1w-150600.5.32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:53:51Z",
"details": "moderate"
}
],
"title": "CVE-2026-9076"
}
]
}
SUSE-SU-2026:2405-1
Vulnerability from csaf_suse - Published: 2026-06-16 06:54 - Updated: 2026-06-16 06:54Summary
Security update for openssl-1_1
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1
Description of the patch: This update for openssl-1_1 fixes the following issues:
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).
- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).
- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).
- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).
Patchnames: SUSE-2026-2405,SUSE-SLE-Micro-5.5-2026-2405,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2405,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2405,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2405,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2405
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
92 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1 fixes the following issues:\n\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).\n- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).\n- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).\n- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2405,SUSE-SLE-Micro-5.5-2026-2405,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2405,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2405,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2405,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2405",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2405-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2405-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262405-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2405-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047339.html"
},
{
"category": "self",
"summary": "SUSE Bug 1266340",
"url": "https://bugzilla.suse.com/1266340"
},
{
"category": "self",
"summary": "SUSE Bug 1266341",
"url": "https://bugzilla.suse.com/1266341"
},
{
"category": "self",
"summary": "SUSE Bug 1266342",
"url": "https://bugzilla.suse.com/1266342"
},
{
"category": "self",
"summary": "SUSE Bug 1266349",
"url": "https://bugzilla.suse.com/1266349"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-34180 page",
"url": "https://www.suse.com/security/cve/CVE-2026-34180/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-7383 page",
"url": "https://www.suse.com/security/cve/CVE-2026-7383/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9076 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9076/"
}
],
"title": "Security update for openssl-1_1",
"tracking": {
"current_release_date": "2026-06-16T06:54:17Z",
"generator": {
"date": "2026-06-16T06:54:17Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2405-1",
"initial_release_date": "2026-06-16T06:54:17Z",
"revision_history": [
{
"date": "2026-06-16T06:54:17Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"product_id": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"product": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"product_id": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"product_id": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"product": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"product_id": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32",
"product": {
"name": "libopenssl-1_1-devel-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32",
"product_id": "libopenssl-1_1-devel-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32",
"product": {
"name": "libopenssl1_1-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32",
"product_id": "libopenssl1_1-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32",
"product": {
"name": "libopenssl1_1-hmac-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32",
"product_id": "libopenssl1_1-hmac-64bit-1.1.1l-150500.17.57.2.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.i586",
"product": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.i586",
"product_id": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.i586",
"product": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.i586",
"product_id": "libopenssl1_1-1.1.1l-150500.17.57.2.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.i586",
"product": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.i586",
"product_id": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1l-150500.17.57.2.i586",
"product": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.i586",
"product_id": "openssl-1_1-1.1.1l-150500.17.57.2.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-doc-1.1.1l-150500.17.57.2.noarch",
"product": {
"name": "openssl-1_1-doc-1.1.1l-150500.17.57.2.noarch",
"product_id": "openssl-1_1-doc-1.1.1l-150500.17.57.2.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"product": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"product_id": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"product": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"product_id": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"product": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"product_id": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"product": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"product_id": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"product": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"product_id": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"product": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"product_id": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"product": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"product_id": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"product": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"product_id": "openssl-1_1-1.1.1l-150500.17.57.2.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"product": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"product_id": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_1-devel-32bit-1.1.1l-150500.17.57.2.x86_64",
"product": {
"name": "libopenssl-1_1-devel-32bit-1.1.1l-150500.17.57.2.x86_64",
"product_id": "libopenssl-1_1-devel-32bit-1.1.1l-150500.17.57.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"product": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"product_id": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"product": {
"name": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"product_id": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"product": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"product_id": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"product": {
"name": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"product_id": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"product": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"product_id": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.5",
"product": {
"name": "SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5",
"product_id": "SUSE Linux Enterprise Server 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
},
"product_reference": "openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34180",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-34180"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive\nelement whose content exceeds 2 gigabytes in length may cause a heap buffer\nover-read on 64-bit Unix and Unix-like platforms.\n\nImpact summary: The heap buffer over-read may crash the application (Denial of\nService) or to load into the decoded ASN.1 object contents of memory beyond the\nend of the input buffer. More typically such ASN.1 elements would instead be\ntruncated.\n\nAn integer truncation in OpenSSL\u0027s ASN.1 decoder causes the content length of\nan ASN.1 primitive element to be mishandled when it exceeds 2 gigabytes. In the\nworst case the truncated length is treated as a request to scan the binary\ncontent for a terminating zero byte, possibly causing OpenSSL to read either\nless than or beyond the end of the allocated buffer.\n\nApplications that pass attacker-supplied data to d2i_X509(), d2i_PKCS7(), or\nany other d2i_* decoding function are affected. OpenSSL\u0027s own command-line\ntools are not vulnerable, as data read through the BIO layer is checked before\nit reaches the affected code. The issue only affects 64-bit Unix and Unix-like\nplatforms; 32-bit platforms and 64-bit Windows are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-34180",
"url": "https://www.suse.com/security/cve/CVE-2026-34180"
},
{
"category": "external",
"summary": "SUSE Bug 1266342 for CVE-2026-34180",
"url": "https://bugzilla.suse.com/1266342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:54:17Z",
"details": "moderate"
}
],
"title": "CVE-2026-34180"
},
{
"cve": "CVE-2026-42766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42766"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted password-encrypted CMS message\ncan trigger a NULL pointer dereference during CMS decryption.\n\nImpact summary: This NULL pointer dereference leads to an application crash\nand a Denial of Service.\n\nThe CMS PasswordRecipientInfo.keyDerivationAlgorithm field is defined as\nOPTIONAL in the ASN.1 specification and may therefore be absent in specially\ncrafted inputs. During the password-based CMS decryption the OpenSSL\nCMS implementation dereferences this field without first checking whether it\nwas present.\n\nAn attacker who supplies such a CMS message to an application performing\npassword-based CMS decryption can trigger an application crash, leading to\na Denial of Service.\n\nApplications that process password-encrypted CMS messages may be affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42766",
"url": "https://www.suse.com/security/cve/CVE-2026-42766"
},
{
"category": "external",
"summary": "SUSE Bug 1266349 for CVE-2026-42766",
"url": "https://bugzilla.suse.com/1266349"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:54:17Z",
"details": "moderate"
}
],
"title": "CVE-2026-42766"
},
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:54:17Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
},
{
"cve": "CVE-2026-7383",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-7383"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\n\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\n\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-7383",
"url": "https://www.suse.com/security/cve/CVE-2026-7383"
},
{
"category": "external",
"summary": "SUSE Bug 1266340 for CVE-2026-7383",
"url": "https://bugzilla.suse.com/1266340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:54:17Z",
"details": "moderate"
}
],
"title": "CVE-2026-7383"
},
{
"cve": "CVE-2026-9076",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9076"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap)\nprocesses attacker-supplied CMS data, an attacker-chosen stream-mode KEK\ncipher can trigger a heap out-of-bounds read in kek_unwrap_key().\n\nImpact summary: A heap buffer over-read may trigger a crash which leads to\nDenial of Service for an application if the input buffer ends at a memory\npage boundary and the following page is unmapped. There is no information\ndisclosure as the over-read bytes are not revealed to the attacker.\n\nThe key unwrapping function performs a check-byte test as specified in the\nRFC that reads 7 bytes from a heap allocation that is based on the wrapped\nkey length from the message. There is a minimum length check based on the\nblock length of the wrapping cipher. However the cipher is selected from\nan OID carried in the attacker\u0027s PWRI keyEncryptionAlgorithm with no\nrequirement that the cipher be a block cipher. When an attacker selects\na stream-mode cipher the guard will be ineffective and the allocated buffer\ncontaining the unwrapped key can be too small to fit the check-bytes\nspecified in the RFC and a buffer over-read can happen.\n\nApplications calling CMS_decrypt() or CMS_decrypt_set1_password()\n(equivalently openssl cms -decrypt -pwri_password ...) on untrusted CMS\ndata are vulnerable to this issue. No password knowledge is required: the\nover-read happens during the unwrap attempt before any authentication\nsucceeds.\n\nThe over-read is limited to a few bytes and is not written to output, so\nthere is no information disclosure. Triggering a crash requires the\nallocation to border unmapped memory, which is unlikely with the normal\nallocator.\n\nThe FIPS modules are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9076",
"url": "https://www.suse.com/security/cve/CVE-2026-9076"
},
{
"category": "external",
"summary": "SUSE Bug 1266341 for CVE-2026-9076",
"url": "https://bugzilla.suse.com/1266341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Micro 5.5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.aarch64",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.s390x",
"SUSE Linux Enterprise Server 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl-1_1-devel-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libopenssl1_1-hmac-32bit-1.1.1l-150500.17.57.2.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:openssl-1_1-1.1.1l-150500.17.57.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T06:54:17Z",
"details": "moderate"
}
],
"title": "CVE-2026-9076"
}
]
}
SUSE-SU-2026:2409-1
Vulnerability from csaf_suse - Published: 2026-06-16 08:07 - Updated: 2026-06-16 08:07Summary
Security update for openssl-1_1-livepatches
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1-livepatches
Description of the patch: This update for openssl-1_1-livepatches fixes the following issues
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
Patchnames: SUSE-2026-2409,SUSE-SLE-Module-Live-Patching-15-SP5-2026-2409
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1-livepatches",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1-livepatches fixes the following issues\n\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2409,SUSE-SLE-Module-Live-Patching-15-SP5-2026-2409",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2409-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2409-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262409-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2409-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047335.html"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE Bug 1266389",
"url": "https://bugzilla.suse.com/1266389"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
}
],
"title": "Security update for openssl-1_1-livepatches",
"tracking": {
"current_release_date": "2026-06-16T08:07:15Z",
"generator": {
"date": "2026-06-16T08:07:15Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2409-1",
"initial_release_date": "2026-06-16T08:07:15Z",
"revision_history": [
{
"date": "2026-06-16T08:07:15Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64",
"product": {
"name": "openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64",
"product_id": "openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP5:openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64"
},
"product_reference": "openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:openssl-1_1-livepatches-0.6-150500.6.14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T08:07:15Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
}
]
}
SUSE-SU-2026:2410-1
Vulnerability from csaf_suse - Published: 2026-06-16 08:07 - Updated: 2026-06-16 08:07Summary
Security update for openssl-1_1-livepatches
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1-livepatches
Description of the patch: This update for openssl-1_1-livepatches fixes the following issues
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
Patchnames: SUSE-2026-2410,SUSE-SLE-Module-Live-Patching-15-SP6-2026-2410
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP6:openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1-livepatches",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1-livepatches fixes the following issues\n\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2410,SUSE-SLE-Module-Live-Patching-15-SP6-2026-2410",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2410-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2410-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262410-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2410-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047334.html"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE Bug 1266389",
"url": "https://bugzilla.suse.com/1266389"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
}
],
"title": "Security update for openssl-1_1-livepatches",
"tracking": {
"current_release_date": "2026-06-16T08:07:23Z",
"generator": {
"date": "2026-06-16T08:07:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2410-1",
"initial_release_date": "2026-06-16T08:07:23Z",
"revision_history": [
{
"date": "2026-06-16T08:07:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64",
"product": {
"name": "openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64",
"product_id": "openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP6",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP6",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP6:openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64"
},
"product_reference": "openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-1_1-livepatches-0.6-150600.11.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T08:07:23Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
}
]
}
SUSE-SU-2026:2411-1
Vulnerability from csaf_suse - Published: 2026-06-16 08:07 - Updated: 2026-06-16 08:07Summary
Security update for openssl-3-livepatches
Severity
Critical
Notes
Title of the patch: Security update for openssl-3-livepatches
Description of the patch: This update for openssl-3-livepatches fixes the following issues:
- CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878).
- CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876).
- CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256880).
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266389, bsc#1266357).
Patchnames: SUSE-2026-2411,SUSE-SLE-Module-Live-Patching-15-SP6-2026-2411
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
25 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-3-livepatches",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-3-livepatches fixes the following issues:\n\n- CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878).\n- CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876).\n- CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256880).\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266389, bsc#1266357).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2411,SUSE-SLE-Module-Live-Patching-15-SP6-2026-2411",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2411-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2411-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262411-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2411-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047333.html"
},
{
"category": "self",
"summary": "SUSE Bug 1256876",
"url": "https://bugzilla.suse.com/1256876"
},
{
"category": "self",
"summary": "SUSE Bug 1256878",
"url": "https://bugzilla.suse.com/1256878"
},
{
"category": "self",
"summary": "SUSE Bug 1256880",
"url": "https://bugzilla.suse.com/1256880"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE Bug 1266389",
"url": "https://bugzilla.suse.com/1266389"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-11187 page",
"url": "https://www.suse.com/security/cve/CVE-2025-11187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-15467 page",
"url": "https://www.suse.com/security/cve/CVE-2025-15467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-15468 page",
"url": "https://www.suse.com/security/cve/CVE-2025-15468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
}
],
"title": "Security update for openssl-3-livepatches",
"tracking": {
"current_release_date": "2026-06-16T08:07:30Z",
"generator": {
"date": "2026-06-16T08:07:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2411-1",
"initial_release_date": "2026-06-16T08:07:30Z",
"revision_history": [
{
"date": "2026-06-16T08:07:30Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssl-3-livepatches-0.4-150600.13.11.1.x86_64",
"product": {
"name": "openssl-3-livepatches-0.4-150600.13.11.1.x86_64",
"product_id": "openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP6",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-livepatches-0.4-150600.13.11.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP6",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
},
"product_reference": "openssl-3-livepatches-0.4-150600.13.11.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-11187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-11187"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation\nwhich can trigger a stack-based buffer overflow, invalid pointer or NULL\npointer dereference during MAC verification.\n\nImpact summary: The stack buffer overflow or NULL pointer dereference may\ncause a crash leading to Denial of Service for an application that parses\nuntrusted PKCS#12 files. The buffer overflow may also potentially enable\ncode execution depending on platform mitigations.\n\nWhen verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2\nsalt and keylength parameters from the file are used without validation.\nIf the value of keylength exceeds the size of the fixed stack buffer used\nfor the derived key (64 bytes), the key derivation will overflow the buffer.\nThe overflow length is attacker-controlled. Also, if the salt parameter is\nnot an OCTET STRING type this can lead to invalid or NULL pointer\ndereference.\n\nExploiting this issue requires a user or application to process\na maliciously crafted PKCS#12 file. It is uncommon to accept untrusted\nPKCS#12 files in applications as they are usually used to store private\nkeys which are trusted by definition. For this reason the issue was assessed\nas Moderate severity.\n\nThe FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as\nPKCS#12 processing is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.\n\nOpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do\nnot support PBMAC1 in PKCS#12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-11187",
"url": "https://www.suse.com/security/cve/CVE-2025-11187"
},
{
"category": "external",
"summary": "SUSE Bug 1256829 for CVE-2025-11187",
"url": "https://bugzilla.suse.com/1256829"
},
{
"category": "external",
"summary": "SUSE Bug 1256878 for CVE-2025-11187",
"url": "https://bugzilla.suse.com/1256878"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T08:07:30Z",
"details": "important"
}
],
"title": "CVE-2025-11187"
},
{
"cve": "CVE-2025-15467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-15467"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\nmaliciously crafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-15467",
"url": "https://www.suse.com/security/cve/CVE-2025-15467"
},
{
"category": "external",
"summary": "SUSE Bug 1256830 for CVE-2025-15467",
"url": "https://bugzilla.suse.com/1256830"
},
{
"category": "external",
"summary": "SUSE Bug 1256876 for CVE-2025-15467",
"url": "https://bugzilla.suse.com/1256876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T08:07:30Z",
"details": "critical"
}
],
"title": "CVE-2025-15467"
},
{
"cve": "CVE-2025-15468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-15468"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-15468",
"url": "https://www.suse.com/security/cve/CVE-2025-15468"
},
{
"category": "external",
"summary": "SUSE Bug 1256831 for CVE-2025-15468",
"url": "https://bugzilla.suse.com/1256831"
},
{
"category": "external",
"summary": "SUSE Bug 1256880 for CVE-2025-15468",
"url": "https://bugzilla.suse.com/1256880"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T08:07:30Z",
"details": "important"
}
],
"title": "CVE-2025-15468"
},
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP6:openssl-3-livepatches-0.4-150600.13.11.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T08:07:30Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
}
]
}
SUSE-SU-2026:2412-1
Vulnerability from csaf_suse - Published: 2026-06-16 08:07 - Updated: 2026-06-16 08:07Summary
Security update for openssl-1_1-livepatches
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1-livepatches
Description of the patch: This update for openssl-1_1-livepatches fixes the following issues
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
Patchnames: SUSE-2026-2412,SUSE-SLE-Module-Live-Patching-15-SP7-2026-2412
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1-livepatches",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1-livepatches fixes the following issues\n\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2412,SUSE-SLE-Module-Live-Patching-15-SP7-2026-2412",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2412-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2412-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262412-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2412-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047332.html"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE Bug 1266389",
"url": "https://bugzilla.suse.com/1266389"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
}
],
"title": "Security update for openssl-1_1-livepatches",
"tracking": {
"current_release_date": "2026-06-16T08:07:36Z",
"generator": {
"date": "2026-06-16T08:07:36Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2412-1",
"initial_release_date": "2026-06-16T08:07:36Z",
"revision_history": [
{
"date": "2026-06-16T08:07:36Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le",
"product": {
"name": "openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le",
"product_id": "openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64",
"product": {
"name": "openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64",
"product_id": "openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP7",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP7",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le"
},
"product_reference": "openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64"
},
"product_reference": "openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-1_1-livepatches-0.6-150700.13.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-16T08:07:36Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
}
]
}
SUSE-SU-2026:2621-1
Vulnerability from csaf_suse - Published: 2026-06-24 09:05 - Updated: 2026-06-24 09:05Summary
Security update for openssl-1_1-livepatches
Severity
Important
Notes
Title of the patch: Security update for openssl-1_1-livepatches
Description of the patch: This update for openssl-1_1-livepatches fixes the following issues
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).
Patchnames: SUSE-2026-2621,SUSE-SLE-Module-Live-Patching-15-SP4-2026-2621
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
11 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_1-livepatches",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_1-livepatches fixes the following issues\n\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2621,SUSE-SLE-Module-Live-Patching-15-SP4-2026-2621",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2621-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2621-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262621-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2621-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047601.html"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE Bug 1266389",
"url": "https://bugzilla.suse.com/1266389"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
}
],
"title": "Security update for openssl-1_1-livepatches",
"tracking": {
"current_release_date": "2026-06-24T09:05:52Z",
"generator": {
"date": "2026-06-24T09:05:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2621-1",
"initial_release_date": "2026-06-24T09:05:52Z",
"revision_history": [
{
"date": "2026-06-24T09:05:52Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64",
"product": {
"name": "openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64",
"product_id": "openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP4:openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64"
},
"product_reference": "openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
},
{
"category": "external",
"summary": "SUSE Bug 1268888 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1268888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:openssl-1_1-livepatches-0.6-150400.3.20.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-24T09:05:52Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
}
]
}
SUSE-SU-2026:2662-1
Vulnerability from csaf_suse - Published: 2026-06-26 13:59 - Updated: 2026-06-26 13:59Summary
Security update for openssl-3-livepatches
Severity
Critical
Notes
Title of the patch: Security update for openssl-3-livepatches
Description of the patch: This update for openssl-3-livepatches fixes the following issues
- CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878).
- CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876).
- CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256880).
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266389, bsc#1266357).
Patchnames: SUSE-2026-2662,SUSE-SLE-Module-Live-Patching-15-SP7-2026-2662
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
9.8 (Critical)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
critical
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-3-livepatches",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-3-livepatches fixes the following issues\n\n- CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878).\n- CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876).\n- CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256880).\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266389, bsc#1266357).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2662,SUSE-SLE-Module-Live-Patching-15-SP7-2026-2662",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2662-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2662-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262662-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2662-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047652.html"
},
{
"category": "self",
"summary": "SUSE Bug 1256876",
"url": "https://bugzilla.suse.com/1256876"
},
{
"category": "self",
"summary": "SUSE Bug 1256878",
"url": "https://bugzilla.suse.com/1256878"
},
{
"category": "self",
"summary": "SUSE Bug 1256880",
"url": "https://bugzilla.suse.com/1256880"
},
{
"category": "self",
"summary": "SUSE Bug 1266357",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "self",
"summary": "SUSE Bug 1266389",
"url": "https://bugzilla.suse.com/1266389"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-11187 page",
"url": "https://www.suse.com/security/cve/CVE-2025-11187/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-15467 page",
"url": "https://www.suse.com/security/cve/CVE-2025-15467/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-15468 page",
"url": "https://www.suse.com/security/cve/CVE-2025-15468/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45447 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45447/"
}
],
"title": "Security update for openssl-3-livepatches",
"tracking": {
"current_release_date": "2026-06-26T13:59:10Z",
"generator": {
"date": "2026-06-26T13:59:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2662-1",
"initial_release_date": "2026-06-26T13:59:10Z",
"revision_history": [
{
"date": "2026-06-26T13:59:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"product": {
"name": "openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"product_id": "openssl-3-livepatches-0.4-150700.16.6.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-3-livepatches-0.4-150700.16.6.1.x86_64",
"product": {
"name": "openssl-3-livepatches-0.4-150700.16.6.1.x86_64",
"product_id": "openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP7",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp7"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-livepatches-0.4-150700.16.6.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP7",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le"
},
"product_reference": "openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-3-livepatches-0.4-150700.16.6.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
},
"product_reference": "openssl-3-livepatches-0.4-150700.16.6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-11187",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-11187"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation\nwhich can trigger a stack-based buffer overflow, invalid pointer or NULL\npointer dereference during MAC verification.\n\nImpact summary: The stack buffer overflow or NULL pointer dereference may\ncause a crash leading to Denial of Service for an application that parses\nuntrusted PKCS#12 files. The buffer overflow may also potentially enable\ncode execution depending on platform mitigations.\n\nWhen verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2\nsalt and keylength parameters from the file are used without validation.\nIf the value of keylength exceeds the size of the fixed stack buffer used\nfor the derived key (64 bytes), the key derivation will overflow the buffer.\nThe overflow length is attacker-controlled. Also, if the salt parameter is\nnot an OCTET STRING type this can lead to invalid or NULL pointer\ndereference.\n\nExploiting this issue requires a user or application to process\na maliciously crafted PKCS#12 file. It is uncommon to accept untrusted\nPKCS#12 files in applications as they are usually used to store private\nkeys which are trusted by definition. For this reason the issue was assessed\nas Moderate severity.\n\nThe FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as\nPKCS#12 processing is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue.\n\nOpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do\nnot support PBMAC1 in PKCS#12.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-11187",
"url": "https://www.suse.com/security/cve/CVE-2025-11187"
},
{
"category": "external",
"summary": "SUSE Bug 1256829 for CVE-2025-11187",
"url": "https://bugzilla.suse.com/1256829"
},
{
"category": "external",
"summary": "SUSE Bug 1256878 for CVE-2025-11187",
"url": "https://bugzilla.suse.com/1256878"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T13:59:10Z",
"details": "important"
}
],
"title": "CVE-2025-11187"
},
{
"cve": "CVE-2025-15467",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-15467"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with\nmaliciously crafted AEAD parameters can trigger a stack buffer overflow.\n\nImpact summary: A stack buffer overflow may lead to a crash, causing Denial\nof Service, or potentially remote code execution.\n\nWhen parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as\nAES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is\ncopied into a fixed-size stack buffer without verifying that its length fits\nthe destination. An attacker can supply a crafted CMS message with an\noversized IV, causing a stack-based out-of-bounds write before any\nauthentication or tag verification occurs.\n\nApplications and services that parse untrusted CMS or PKCS#7 content using\nAEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable.\nBecause the overflow occurs prior to authentication, no valid key material\nis required to trigger it. While exploitability to remote code execution\ndepends on platform and toolchain mitigations, the stack-based write\nprimitive represents a severe risk.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.\n\nOpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue.\n\nOpenSSL 1.1.1 and 1.0.2 are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-15467",
"url": "https://www.suse.com/security/cve/CVE-2025-15467"
},
{
"category": "external",
"summary": "SUSE Bug 1256830 for CVE-2025-15467",
"url": "https://bugzilla.suse.com/1256830"
},
{
"category": "external",
"summary": "SUSE Bug 1256876 for CVE-2025-15467",
"url": "https://bugzilla.suse.com/1256876"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T13:59:10Z",
"details": "critical"
}
],
"title": "CVE-2025-15467"
},
{
"cve": "CVE-2025-15468",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-15468"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: If an application using the SSL_CIPHER_find() function in\na QUIC protocol client or server receives an unknown cipher suite from\nthe peer, a NULL dereference occurs.\n\nImpact summary: A NULL pointer dereference leads to abnormal termination of\nthe running process causing Denial of Service.\n\nSome applications call SSL_CIPHER_find() from the client_hello_cb callback\non the cipher ID received from the peer. If this is done with an SSL object\nimplementing the QUIC protocol, NULL pointer dereference will happen if\nthe examined cipher ID is unknown or unsupported.\n\nAs it is not very common to call this function in applications using the QUIC \nprotocol and the worst outcome is Denial of Service, the issue was assessed\nas Low severity.\n\nThe vulnerable code was introduced in the 3.2 version with the addition\nof the QUIC protocol support.\n\nThe FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue,\nas the QUIC implementation is outside the OpenSSL FIPS module boundary.\n\nOpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue.\n\nOpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-15468",
"url": "https://www.suse.com/security/cve/CVE-2025-15468"
},
{
"category": "external",
"summary": "SUSE Bug 1256831 for CVE-2025-15468",
"url": "https://bugzilla.suse.com/1256831"
},
{
"category": "external",
"summary": "SUSE Bug 1256880 for CVE-2025-15468",
"url": "https://bugzilla.suse.com/1256880"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T13:59:10Z",
"details": "important"
}
],
"title": "CVE-2025-15468"
},
{
"cve": "CVE-2026-45447",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45447"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\n\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\n\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\n\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\n\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45447",
"url": "https://www.suse.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "SUSE Bug 1266357 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266357"
},
{
"category": "external",
"summary": "SUSE Bug 1266389 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1266389"
},
{
"category": "external",
"summary": "SUSE Bug 1268888 for CVE-2026-45447",
"url": "https://bugzilla.suse.com/1268888"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP7:openssl-3-livepatches-0.4-150700.16.6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T13:59:10Z",
"details": "important"
}
],
"title": "CVE-2026-45447"
}
]
}
ubuntu-cve-2026-45447
Vulnerability from osv_ubuntu
Published
2026-06-09 00:00
Modified
2026-07-08 20:56
Summary
Details
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition. In the common case this occurs when the application later calls BIO_free() on the BIO originally passed to PKCS7_verify(). Depending on allocator behavior and application-specific BIO usage patterns, this may result in a crash or other memory corruption. In some application contexts this may potentially be exploitable for remote code execution. Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected. Applications using the CMS APIs for this processing are not affected. The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.
Severity
8.8 (High)
8.1 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libssl1.0.0",
"binary_version": "1.0.1f-1ubuntu2.27+esm14"
},
{
"binary_name": "openssl",
"binary_version": "1.0.1f-1ubuntu2.27+esm14"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.0.1f-1ubuntu2.27+esm14?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.1f-1ubuntu2.27+esm14"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.0.1e-3ubuntu1",
"1.0.1e-4ubuntu1",
"1.0.1e-4ubuntu2",
"1.0.1e-4ubuntu3",
"1.0.1e-4ubuntu4",
"1.0.1f-1ubuntu1",
"1.0.1f-1ubuntu2",
"1.0.1f-1ubuntu2.1",
"1.0.1f-1ubuntu2.2",
"1.0.1f-1ubuntu2.3",
"1.0.1f-1ubuntu2.4",
"1.0.1f-1ubuntu2.5",
"1.0.1f-1ubuntu2.7",
"1.0.1f-1ubuntu2.8",
"1.0.1f-1ubuntu2.11",
"1.0.1f-1ubuntu2.12",
"1.0.1f-1ubuntu2.15",
"1.0.1f-1ubuntu2.16",
"1.0.1f-1ubuntu2.17",
"1.0.1f-1ubuntu2.18",
"1.0.1f-1ubuntu2.19",
"1.0.1f-1ubuntu2.20",
"1.0.1f-1ubuntu2.21",
"1.0.1f-1ubuntu2.22",
"1.0.1f-1ubuntu2.23",
"1.0.1f-1ubuntu2.24",
"1.0.1f-1ubuntu2.25",
"1.0.1f-1ubuntu2.26",
"1.0.1f-1ubuntu2.27",
"1.0.1f-1ubuntu2.27+esm1",
"1.0.1f-1ubuntu2.27+esm2",
"1.0.1f-1ubuntu2.27+esm3",
"1.0.1f-1ubuntu2.27+esm4",
"1.0.1f-1ubuntu2.27+esm5",
"1.0.1f-1ubuntu2.27+esm6",
"1.0.1f-1ubuntu2.27+esm7",
"1.0.1f-1ubuntu2.27+esm9",
"1.0.1f-1ubuntu2.27+esm10",
"1.0.1f-1ubuntu2.27+esm11",
"1.0.1f-1ubuntu2.27+esm12",
"1.0.1f-1ubuntu2.27+esm13"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libssl1.0.0",
"binary_version": "1.0.2g-1ubuntu4.20+esm16"
},
{
"binary_name": "openssl",
"binary_version": "1.0.2g-1ubuntu4.20+esm16"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.0.2g-1ubuntu4.20+esm16?arch=source\u0026distro=esm-infra-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.2g-1ubuntu4.20+esm16"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.0.2d-0ubuntu1",
"1.0.2d-0ubuntu2",
"1.0.2e-1ubuntu1",
"1.0.2f-2ubuntu1",
"1.0.2g-1ubuntu2",
"1.0.2g-1ubuntu3",
"1.0.2g-1ubuntu4",
"1.0.2g-1ubuntu4.1",
"1.0.2g-1ubuntu4.2",
"1.0.2g-1ubuntu4.4",
"1.0.2g-1ubuntu4.5",
"1.0.2g-1ubuntu4.6",
"1.0.2g-1ubuntu4.8",
"1.0.2g-1ubuntu4.9",
"1.0.2g-1ubuntu4.10",
"1.0.2g-1ubuntu4.11",
"1.0.2g-1ubuntu4.12",
"1.0.2g-1ubuntu4.13",
"1.0.2g-1ubuntu4.14",
"1.0.2g-1ubuntu4.15",
"1.0.2g-1ubuntu4.16",
"1.0.2g-1ubuntu4.17",
"1.0.2g-1ubuntu4.18",
"1.0.2g-1ubuntu4.19",
"1.0.2g-1ubuntu4.20",
"1.0.2g-1ubuntu4.20+esm1",
"1.0.2g-1ubuntu4.20+esm2",
"1.0.2g-1ubuntu4.20+esm3",
"1.0.2g-1ubuntu4.20+esm4",
"1.0.2g-1ubuntu4.20+esm5",
"1.0.2g-1ubuntu4.20+esm6",
"1.0.2g-1ubuntu4.20+esm7",
"1.0.2g-1ubuntu4.20+esm9",
"1.0.2g-1ubuntu4.20+esm10",
"1.0.2g-1ubuntu4.20+esm11",
"1.0.2g-1ubuntu4.20+esm12",
"1.0.2g-1ubuntu4.20+esm13",
"1.0.2g-1ubuntu4.20+esm14",
"1.0.2g-1ubuntu4.20+esm15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ovmf",
"binary_version": "0~20160408.ffea0a2c-2ubuntu0.2+esm3"
},
{
"binary_name": "qemu-efi",
"binary_version": "0~20160408.ffea0a2c-2ubuntu0.2+esm3"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "edk2",
"purl": "pkg:deb/ubuntu/edk2@0~20160408.ffea0a2c-2ubuntu0.2+esm3?arch=source\u0026distro=esm-apps/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0~20150106.5c2d456b-2",
"0~20160104.c2a892d7-1",
"0~20160408.ffea0a2c-2",
"0~20160408.ffea0a2c-2ubuntu0.1",
"0~20160408.ffea0a2c-2ubuntu0.2",
"0~20160408.ffea0a2c-2ubuntu0.2+esm1",
"0~20160408.ffea0a2c-2ubuntu0.2+esm3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "nodejs",
"binary_version": "4.2.6~dfsg-1ubuntu4.2+esm3"
},
{
"binary_name": "nodejs-legacy",
"binary_version": "4.2.6~dfsg-1ubuntu4.2+esm3"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "nodejs",
"purl": "pkg:deb/ubuntu/nodejs@4.2.6~dfsg-1ubuntu4.2+esm3?arch=source\u0026distro=esm-apps/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.10.25~dfsg2-2ubuntu1",
"4.2.2~dfsg-1",
"4.2.3~dfsg-1",
"4.2.4~dfsg-1ubuntu1",
"4.2.4~dfsg-2",
"4.2.6~dfsg-1ubuntu1",
"4.2.6~dfsg-1ubuntu4",
"4.2.6~dfsg-1ubuntu4.1",
"4.2.6~dfsg-1ubuntu4.2",
"4.2.6~dfsg-1ubuntu4.2+esm1",
"4.2.6~dfsg-1ubuntu4.2+esm2",
"4.2.6~dfsg-1ubuntu4.2+esm3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libssl1.0.0",
"binary_version": "1.0.2g-1ubuntu4.fips.4.20.15"
},
{
"binary_name": "libssl1.0.0-hmac",
"binary_version": "1.0.2g-1ubuntu4.fips.4.20.15"
},
{
"binary_name": "openssl",
"binary_version": "1.0.2g-1ubuntu4.fips.4.20.15"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS:16.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.0.2g-1ubuntu4.fips.4.20.15?arch=source\u0026distro=fips-updates/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.0.2g-1ubuntu4.fips.4.9.1",
"1.0.2g-1ubuntu4.fips.4.13.1",
"1.0.2g-1ubuntu4.fips.4.15.1",
"1.0.2g-1ubuntu4.fips.4.16.1",
"1.0.2g-1ubuntu4.fips.4.17.1",
"1.0.2g-1ubuntu4.fips.4.18.1",
"1.0.2g-1ubuntu4.fips.4.19.3",
"1.0.2g-1ubuntu4.fips.4.20.1",
"1.0.2g-1ubuntu4.fips.4.20.2",
"1.0.2g-1ubuntu4.fips.4.20.3",
"1.0.2g-1ubuntu4.fips.4.20.6",
"1.0.2g-1ubuntu4.fips.4.20.7",
"1.0.2g-1ubuntu4.fips.4.20.9",
"1.0.2g-1ubuntu4.fips.4.20.10",
"1.0.2g-1ubuntu4.fips.4.20.11",
"1.0.2g-1ubuntu4.fips.4.20.12",
"1.0.2g-1ubuntu4.fips.4.20.13",
"1.0.2g-1ubuntu4.fips.4.20.14",
"1.0.2g-1ubuntu4.fips.4.20.15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libssl1.0.0",
"binary_version": "1.0.2g-1ubuntu4.fips.4.6.3"
},
{
"binary_name": "libssl1.0.0-hmac",
"binary_version": "1.0.2g-1ubuntu4.fips.4.6.3"
},
{
"binary_name": "openssl",
"binary_version": "1.0.2g-1ubuntu4.fips.4.6.3"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS:16.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.0.2g-1ubuntu4.fips.4.6.3?arch=source\u0026distro=fips/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.0.2g-1ubuntu4.fips.4.6~ppa1",
"1.0.2g-1ubuntu4.fips.4.6~ppa2",
"1.0.2g-1ubuntu4.fips.4.6~ppa3",
"1.0.2g-1ubuntu4.fips.4.6",
"1.0.2g-1ubuntu4.fips.4.6.1",
"1.0.2g-1ubuntu4.fips.4.6.2",
"1.0.2g-1ubuntu4.fips.4.6.3"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libssl1.1",
"binary_version": "1.1.1-1ubuntu2.1~18.04.23+esm9"
},
{
"binary_name": "openssl",
"binary_version": "1.1.1-1ubuntu2.1~18.04.23+esm9"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.1.1-1ubuntu2.1~18.04.23+esm9?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.1-1ubuntu2.1~18.04.23+esm9"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.0.2g-1ubuntu13",
"1.0.2g-1ubuntu14",
"1.0.2n-1ubuntu1",
"1.1.0g-2ubuntu1",
"1.1.0g-2ubuntu2",
"1.1.0g-2ubuntu3",
"1.1.0g-2ubuntu4",
"1.1.0g-2ubuntu4.1",
"1.1.0g-2ubuntu4.3",
"1.1.1-1ubuntu2.1~18.04.1",
"1.1.1-1ubuntu2.1~18.04.2",
"1.1.1-1ubuntu2.1~18.04.3",
"1.1.1-1ubuntu2.1~18.04.4",
"1.1.1-1ubuntu2.1~18.04.5",
"1.1.1-1ubuntu2.1~18.04.6",
"1.1.1-1ubuntu2.1~18.04.7",
"1.1.1-1ubuntu2.1~18.04.8",
"1.1.1-1ubuntu2.1~18.04.9",
"1.1.1-1ubuntu2.1~18.04.10",
"1.1.1-1ubuntu2.1~18.04.13",
"1.1.1-1ubuntu2.1~18.04.14",
"1.1.1-1ubuntu2.1~18.04.15",
"1.1.1-1ubuntu2.1~18.04.17",
"1.1.1-1ubuntu2.1~18.04.19",
"1.1.1-1ubuntu2.1~18.04.20",
"1.1.1-1ubuntu2.1~18.04.21",
"1.1.1-1ubuntu2.1~18.04.22",
"1.1.1-1ubuntu2.1~18.04.23",
"1.1.1-1ubuntu2.1~18.04.23+esm1",
"1.1.1-1ubuntu2.1~18.04.23+esm3",
"1.1.1-1ubuntu2.1~18.04.23+esm4",
"1.1.1-1ubuntu2.1~18.04.23+esm5",
"1.1.1-1ubuntu2.1~18.04.23+esm6",
"1.1.1-1ubuntu2.1~18.04.23+esm7",
"1.1.1-1ubuntu2.1~18.04.23+esm8"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libssl1.0.0",
"binary_version": "1.0.2n-1ubuntu5.13+esm5"
},
{
"binary_name": "openssl1.0",
"binary_version": "1.0.2n-1ubuntu5.13+esm5"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "openssl1.0",
"purl": "pkg:deb/ubuntu/openssl1.0@1.0.2n-1ubuntu5.13+esm5?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.2n-1ubuntu5.13+esm5"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.0.2n-1ubuntu2",
"1.0.2n-1ubuntu3",
"1.0.2n-1ubuntu4",
"1.0.2n-1ubuntu5",
"1.0.2n-1ubuntu5.1",
"1.0.2n-1ubuntu5.2",
"1.0.2n-1ubuntu5.3",
"1.0.2n-1ubuntu5.4",
"1.0.2n-1ubuntu5.5",
"1.0.2n-1ubuntu5.6",
"1.0.2n-1ubuntu5.7",
"1.0.2n-1ubuntu5.8",
"1.0.2n-1ubuntu5.9",
"1.0.2n-1ubuntu5.10",
"1.0.2n-1ubuntu5.11",
"1.0.2n-1ubuntu5.12",
"1.0.2n-1ubuntu5.13",
"1.0.2n-1ubuntu5.13+esm1",
"1.0.2n-1ubuntu5.13+esm2",
"1.0.2n-1ubuntu5.13+esm3",
"1.0.2n-1ubuntu5.13+esm4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ovmf",
"binary_version": "0~20180205.c0d9813c-2ubuntu0.3+esm2"
},
{
"binary_name": "qemu-efi",
"binary_version": "0~20180205.c0d9813c-2ubuntu0.3+esm2"
},
{
"binary_name": "qemu-efi-aarch64",
"binary_version": "0~20180205.c0d9813c-2ubuntu0.3+esm2"
},
{
"binary_name": "qemu-efi-arm",
"binary_version": "0~20180205.c0d9813c-2ubuntu0.3+esm2"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "edk2",
"purl": "pkg:deb/ubuntu/edk2@0~20180205.c0d9813c-2ubuntu0.3+esm2?arch=source\u0026distro=esm-apps/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0~20170911.5dfba97c-1",
"0~20171010.234dbcef-1",
"0~20171027.76fd5a66-1",
"0~20171205.a9212288-1",
"0~20180105.0bc94c74-1",
"0~20180205.c0d9813c-1",
"0~20180205.c0d9813c-2",
"0~20180205.c0d9813c-2ubuntu0.1",
"0~20180205.c0d9813c-2ubuntu0.2",
"0~20180205.c0d9813c-2ubuntu0.3",
"0~20180205.c0d9813c-2ubuntu0.3+esm1",
"0~20180205.c0d9813c-2ubuntu0.3+esm2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "nodejs",
"binary_version": "8.10.0~dfsg-2ubuntu0.4+esm6"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "nodejs",
"purl": "pkg:deb/ubuntu/nodejs@8.10.0~dfsg-2ubuntu0.4+esm6?arch=source\u0026distro=esm-apps/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"6.11.4~dfsg-1ubuntu1",
"6.11.4~dfsg-1ubuntu2",
"6.12.0~dfsg-1ubuntu1",
"6.12.0~dfsg-2ubuntu1",
"6.12.0~dfsg-2ubuntu2",
"8.10.0~dfsg-2",
"8.10.0~dfsg-2ubuntu0.2",
"8.10.0~dfsg-2ubuntu0.3",
"8.10.0~dfsg-2ubuntu0.4",
"8.10.0~dfsg-2ubuntu0.4+esm1",
"8.10.0~dfsg-2ubuntu0.4+esm2",
"8.10.0~dfsg-2ubuntu0.4+esm3",
"8.10.0~dfsg-2ubuntu0.4+esm4",
"8.10.0~dfsg-2ubuntu0.4+esm5",
"8.10.0~dfsg-2ubuntu0.4+esm6"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libssl1.1",
"binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.23.9"
},
{
"binary_name": "libssl1.1-hmac",
"binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.23.9"
},
{
"binary_name": "openssl",
"binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.23.9"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:18.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.1.1-1ubuntu2.fips.2.1~18.04.23.9?arch=source\u0026distro=fips-updates/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.1-1ubuntu2.fips.2.1~18.04.23.9"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.1.1-1ubuntu2.fips.2.1~18.04.5.1",
"1.1.1-1ubuntu2.fips.2.1~18.04.6.1",
"1.1.1-1ubuntu2.fips.2.1~18.04.7.1",
"1.1.1-1ubuntu2.fips.2.1~18.04.9.1",
"1.1.1-1ubuntu2.fips.2.1~18.04.9.2",
"1.1.1-1ubuntu2.fips.2.1~18.04.9.3",
"1.1.1-1ubuntu2.fips.2.1~18.04.13.2",
"1.1.1-1ubuntu2.fips.2.1~18.04.15",
"1.1.1-1ubuntu2.fips.2.1~18.04.15.1",
"1.1.1-1ubuntu2.fips.2.1~18.04.15.2",
"1.1.1-1ubuntu2.fips.2.1~18.04.17",
"1.1.1-1ubuntu2.fips.2.1~18.04.20",
"1.1.1-1ubuntu2.fips.2.1~18.04.21",
"1.1.1-1ubuntu2.fips.2.1~18.04.22",
"1.1.1-1ubuntu2.fips.2.1~18.04.23",
"1.1.1-1ubuntu2.fips.2.1~18.04.23.3",
"1.1.1-1ubuntu2.fips.2.1~18.04.23.4",
"1.1.1-1ubuntu2.fips.2.1~18.04.23.5",
"1.1.1-1ubuntu2.fips.2.1~18.04.23.6",
"1.1.1-1ubuntu2.fips.2.1~18.04.23.7",
"1.1.1-1ubuntu2.fips.2.1~18.04.23.8"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libssl1.1",
"binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.15.2"
},
{
"binary_name": "libssl1.1-hmac",
"binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.15.2"
},
{
"binary_name": "openssl",
"binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.15.2"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS:18.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.1.1-1ubuntu2.fips.2.1~18.04.15.2?arch=source\u0026distro=fips/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.1.1-1ubuntu2.fips.2.1~18.04.3.1",
"1.1.1-1ubuntu2.fips.2.1~18.04.15.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ovmf",
"binary_version": "0~20191122.bd85bf54-2ubuntu3.6"
},
{
"binary_name": "qemu-efi",
"binary_version": "0~20191122.bd85bf54-2ubuntu3.6"
},
{
"binary_name": "qemu-efi-aarch64",
"binary_version": "0~20191122.bd85bf54-2ubuntu3.6"
},
{
"binary_name": "qemu-efi-arm",
"binary_version": "0~20191122.bd85bf54-2ubuntu3.6"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:20.04:LTS",
"name": "edk2",
"purl": "pkg:deb/ubuntu/edk2@0~20191122.bd85bf54-2ubuntu3.6?arch=source\u0026distro=focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0~20190606.20d2e5a1-2ubuntu1",
"0~20190828.37eef910-3",
"0~20190828.37eef910-4",
"0~20191122.bd85bf54-1",
"0~20191122.bd85bf54-1ubuntu1",
"0~20191122.bd85bf54-2",
"0~20191122.bd85bf54-2ubuntu1",
"0~20191122.bd85bf54-2ubuntu2",
"0~20191122.bd85bf54-2ubuntu3",
"0~20191122.bd85bf54-2ubuntu3.1",
"0~20191122.bd85bf54-2ubuntu3.2",
"0~20191122.bd85bf54-2ubuntu3.3",
"0~20191122.bd85bf54-2ubuntu3.4",
"0~20191122.bd85bf54-2ubuntu3.5",
"0~20191122.bd85bf54-2ubuntu3.6"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libssl1.1",
"binary_version": "1.1.1f-1ubuntu2.24+esm4"
},
{
"binary_name": "openssl",
"binary_version": "1.1.1f-1ubuntu2.24+esm4"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.24+esm4?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.1f-1ubuntu2.24+esm4"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.1.1c-1ubuntu4",
"1.1.1d-2ubuntu3",
"1.1.1d-2ubuntu6",
"1.1.1f-1ubuntu1",
"1.1.1f-1ubuntu2",
"1.1.1f-1ubuntu2.1",
"1.1.1f-1ubuntu2.2",
"1.1.1f-1ubuntu2.3",
"1.1.1f-1ubuntu2.4",
"1.1.1f-1ubuntu2.5",
"1.1.1f-1ubuntu2.8",
"1.1.1f-1ubuntu2.9",
"1.1.1f-1ubuntu2.10",
"1.1.1f-1ubuntu2.11",
"1.1.1f-1ubuntu2.12",
"1.1.1f-1ubuntu2.13",
"1.1.1f-1ubuntu2.15",
"1.1.1f-1ubuntu2.16",
"1.1.1f-1ubuntu2.17",
"1.1.1f-1ubuntu2.18",
"1.1.1f-1ubuntu2.19",
"1.1.1f-1ubuntu2.20",
"1.1.1f-1ubuntu2.21",
"1.1.1f-1ubuntu2.22",
"1.1.1f-1ubuntu2.23",
"1.1.1f-1ubuntu2.24",
"1.1.1f-1ubuntu2.24+esm1",
"1.1.1f-1ubuntu2.24+esm2",
"1.1.1f-1ubuntu2.24+esm3"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libssl1.1",
"binary_version": "1.1.1f-1ubuntu2.fips.24.4"
},
{
"binary_name": "libssl1.1-hmac",
"binary_version": "1.1.1f-1ubuntu2.fips.24.4"
},
{
"binary_name": "openssl",
"binary_version": "1.1.1f-1ubuntu2.fips.24.4"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:20.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.fips.24.4?arch=source\u0026distro=fips-updates/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.1f-1ubuntu2.fips.24.4"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.1.1f-1ubuntu2.fips.7",
"1.1.1f-1ubuntu2.fips.7.2",
"1.1.1f-1ubuntu2.fips.12",
"1.1.1f-1ubuntu2.fips.13",
"1.1.1f-1ubuntu2.fips.13.1",
"1.1.1f-1ubuntu2.fips.16",
"1.1.1f-1ubuntu2.fips.17",
"1.1.1f-1ubuntu2.fips.18",
"1.1.1f-1ubuntu2.fips.19",
"1.1.1f-1ubuntu2.fips.20",
"1.1.1f-1ubuntu2.fips.21",
"1.1.1f-1ubuntu2.fips.22",
"1.1.1f-1ubuntu2.fips.24",
"1.1.1f-1ubuntu2.fips.24.1",
"1.1.1f-1ubuntu2.fips.24.2",
"1.1.1f-1ubuntu2.fips.24.3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libssl1.1",
"binary_version": "1.1.1f-1ubuntu2.fips.7.1"
},
{
"binary_name": "libssl1.1-hmac",
"binary_version": "1.1.1f-1ubuntu2.fips.7.1"
},
{
"binary_name": "openssl",
"binary_version": "1.1.1f-1ubuntu2.fips.7.1"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS:20.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.fips.7.1?arch=source\u0026distro=fips/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.1.1f-1ubuntu2.fips.2.8",
"1.1.1f-1ubuntu2.fips.7.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ovmf",
"binary_version": "2022.02-3ubuntu0.22.04.6"
},
{
"binary_name": "ovmf-ia32",
"binary_version": "2022.02-3ubuntu0.22.04.6"
},
{
"binary_name": "qemu-efi",
"binary_version": "2022.02-3ubuntu0.22.04.6"
},
{
"binary_name": "qemu-efi-aarch64",
"binary_version": "2022.02-3ubuntu0.22.04.6"
},
{
"binary_name": "qemu-efi-arm",
"binary_version": "2022.02-3ubuntu0.22.04.6"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "edk2",
"purl": "pkg:deb/ubuntu/edk2@2022.02-3ubuntu0.22.04.6?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2021.08~rc0-2",
"2021.08-3",
"2021.11~rc1-1",
"2021.11-1",
"2021.11-2",
"2022.02~rc1-1",
"2022.02~rc1-1ubuntu1",
"2022.02-1",
"2022.02-2",
"2022.02-3",
"2022.02-3ubuntu0.22.04.1",
"2022.02-3ubuntu0.22.04.2",
"2022.02-3ubuntu0.22.04.3",
"2022.02-3ubuntu0.22.04.4",
"2022.02-3ubuntu0.22.04.5",
"2022.02-3ubuntu0.22.04.6"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libssl3",
"binary_version": "3.0.2-0ubuntu1.25"
},
{
"binary_name": "openssl",
"binary_version": "3.0.2-0ubuntu1.25"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.25?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.2-0ubuntu1.25"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.1.1l-1ubuntu1",
"3.0.0-1ubuntu1",
"3.0.1-0ubuntu1",
"3.0.2-0ubuntu1",
"3.0.2-0ubuntu1.1",
"3.0.2-0ubuntu1.2",
"3.0.2-0ubuntu1.4",
"3.0.2-0ubuntu1.5",
"3.0.2-0ubuntu1.6",
"3.0.2-0ubuntu1.7",
"3.0.2-0ubuntu1.8",
"3.0.2-0ubuntu1.9",
"3.0.2-0ubuntu1.10",
"3.0.2-0ubuntu1.12",
"3.0.2-0ubuntu1.13",
"3.0.2-0ubuntu1.14",
"3.0.2-0ubuntu1.15",
"3.0.2-0ubuntu1.16",
"3.0.2-0ubuntu1.17",
"3.0.2-0ubuntu1.18",
"3.0.2-0ubuntu1.19",
"3.0.2-0ubuntu1.20",
"3.0.2-0ubuntu1.21",
"3.0.2-0ubuntu1.23"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnode72",
"binary_version": "12.22.9~dfsg-1ubuntu3.6+esm2"
},
{
"binary_name": "nodejs",
"binary_version": "12.22.9~dfsg-1ubuntu3.6+esm2"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:22.04:LTS",
"name": "nodejs",
"purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.6+esm2?arch=source\u0026distro=esm-apps/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"12.22.5~dfsg-5ubuntu1",
"12.22.7~dfsg-2ubuntu1",
"12.22.7~dfsg-2ubuntu3",
"12.22.9~dfsg-1ubuntu2",
"12.22.9~dfsg-1ubuntu3",
"12.22.9~dfsg-1ubuntu3.1",
"12.22.9~dfsg-1ubuntu3.2",
"12.22.9~dfsg-1ubuntu3.3",
"12.22.9~dfsg-1ubuntu3.4",
"12.22.9~dfsg-1ubuntu3.5",
"12.22.9~dfsg-1ubuntu3.6",
"12.22.9~dfsg-1ubuntu3.6+esm2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libssl3",
"binary_version": "3.0.2-0ubuntu1.12+Fips1"
},
{
"binary_name": "openssl",
"binary_version": "3.0.2-0ubuntu1.12+Fips1"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.12+Fips1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.2-0ubuntu1.10+Fips1",
"3.0.2-0ubuntu1.12+Fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "openssl-fips-module-3",
"binary_version": "3.0.5-0ubuntu0.1+Fips2.1"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-preview:22.04:LTS",
"name": "openssl-fips",
"purl": "pkg:deb/ubuntu/openssl-fips@3.0.5-0ubuntu0.1+Fips2.1?arch=source\u0026distro=fips-preview/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.5-0ubuntu0.1+Fips2.1"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libssl3",
"binary_version": "3.0.2-0ubuntu1.25+Fips1"
},
{
"binary_name": "openssl",
"binary_version": "3.0.2-0ubuntu1.25+Fips1"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.25+Fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.2-0ubuntu1.25+Fips1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.2-0ubuntu1.10+Fips1",
"3.0.2-0ubuntu1.12+Fips1",
"3.0.2-0ubuntu1.14+Fips1",
"3.0.2-0ubuntu1.15+Fips1",
"3.0.2-0ubuntu1.16+Fips1",
"3.0.2-0ubuntu1.17+Fips1",
"3.0.2-0ubuntu1.18+Fips1",
"3.0.2-0ubuntu1.19+Fips1",
"3.0.2-0ubuntu1.20+Fips1",
"3.0.2-0ubuntu1.21+Fips1",
"3.0.2-0ubuntu1.23+Fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "openssl-fips-module-3",
"binary_version": "3.0.5-0ubuntu0.2+Fips1"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:22.04:LTS",
"name": "openssl-fips",
"purl": "pkg:deb/ubuntu/openssl-fips@3.0.5-0ubuntu0.2+Fips1?arch=source\u0026distro=fips-updates/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.5-0ubuntu0.1+Fips2.1",
"3.0.5-0ubuntu0.2+Fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "efi-shell-aa64",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "efi-shell-arm",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "efi-shell-ia32",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "efi-shell-riscv64",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "efi-shell-x64",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "ovmf",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "ovmf-ia32",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "ovmf-legacy",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "qemu-efi-aarch64",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "qemu-efi-arm",
"binary_version": "2024.02-2ubuntu0.9"
},
{
"binary_name": "qemu-efi-riscv64",
"binary_version": "2024.02-2ubuntu0.9"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "edk2",
"purl": "pkg:deb/ubuntu/edk2@2024.02-2ubuntu0.9?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2023.05-2",
"2023.11-2",
"2023.11-3",
"2023.11-4",
"2023.11-5",
"2023.11-6",
"2023.11-8",
"2024.02-1",
"2024.02-2",
"2024.02-2ubuntu0.1",
"2024.02-2ubuntu0.3",
"2024.02-2ubuntu0.4",
"2024.02-2ubuntu0.5",
"2024.02-2ubuntu0.6",
"2024.02-2ubuntu0.7",
"2024.02-2ubuntu0.8",
"2024.02-2ubuntu0.9"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libssl3t64",
"binary_version": "3.0.13-0ubuntu3.11"
},
{
"binary_name": "openssl",
"binary_version": "3.0.13-0ubuntu3.11"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.11?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.13-0ubuntu3.11"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.10-1ubuntu2",
"3.0.10-1ubuntu2.1",
"3.0.10-1ubuntu3",
"3.0.10-1ubuntu4",
"3.0.13-0ubuntu2",
"3.0.13-0ubuntu3",
"3.0.13-0ubuntu3.1",
"3.0.13-0ubuntu3.2",
"3.0.13-0ubuntu3.3",
"3.0.13-0ubuntu3.4",
"3.0.13-0ubuntu3.5",
"3.0.13-0ubuntu3.6",
"3.0.13-0ubuntu3.7",
"3.0.13-0ubuntu3.9"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "openssl-fips-module-3",
"binary_version": "3.0.13-0ubuntu3.6+Fips1"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:Pro:FIPS-updates:24.04:LTS",
"name": "openssl-fips",
"purl": "pkg:deb/ubuntu/openssl-fips@3.0.13-0ubuntu3.6+Fips1?arch=source\u0026distro=fips-updates/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.13-0ubuntu3+Fips1",
"3.0.13-0ubuntu3.6+Fips1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "efi-shell-aa64",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "efi-shell-arm",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "efi-shell-ia32",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "efi-shell-loongarch64",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "efi-shell-riscv64",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "efi-shell-x64",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "ovmf",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "ovmf-ia32",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "ovmf-inteltdx",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "ovmf-legacy",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "qemu-efi-aarch64",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "qemu-efi-arm",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "qemu-efi-loongarch64",
"binary_version": "2025.02-8ubuntu3.2"
},
{
"binary_name": "qemu-efi-riscv64",
"binary_version": "2025.02-8ubuntu3.2"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "edk2",
"purl": "pkg:deb/ubuntu/edk2@2025.02-8ubuntu3.2?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2025.02-3ubuntu2",
"2025.02-8",
"2025.02-8ubuntu1",
"2025.02-8ubuntu2",
"2025.02-8ubuntu3",
"2025.02-8ubuntu3.1",
"2025.02-8ubuntu3.2"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libssl3t64",
"binary_version": "3.5.3-1ubuntu3.4"
},
{
"binary_name": "openssl",
"binary_version": "3.5.3-1ubuntu3.4"
},
{
"binary_name": "openssl-provider-legacy",
"binary_version": "3.5.3-1ubuntu3.4"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@3.5.3-1ubuntu3.4?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.5.3-1ubuntu3.4"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.4.1-1ubuntu3",
"3.5.0-2ubuntu1",
"3.5.2-1ubuntu1",
"3.5.3-1ubuntu2",
"3.5.3-1ubuntu3",
"3.5.3-1ubuntu3.3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "efi-shell-aa64",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "efi-shell-loongarch64",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "efi-shell-riscv64",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "efi-shell-x64",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "ovmf",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "ovmf-amdsev",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "ovmf-generic",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "ovmf-inteltdx",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "ovmf-legacy",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "qemu-efi-aarch64",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "qemu-efi-loongarch64",
"binary_version": "2025.11-3ubuntu7"
},
{
"binary_name": "qemu-efi-riscv64",
"binary_version": "2025.11-3ubuntu7"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "edk2",
"purl": "pkg:deb/ubuntu/edk2@2025.11-3ubuntu7?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2025.02-8ubuntu3",
"2025.11-3ubuntu6",
"2025.11-3ubuntu7"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libssl3t64",
"binary_version": "3.5.5-1ubuntu3.2"
},
{
"binary_name": "openssl",
"binary_version": "3.5.5-1ubuntu3.2"
},
{
"binary_name": "openssl-provider-legacy",
"binary_version": "3.5.5-1ubuntu3.2"
}
],
"priority_reason": "OpenSSL developers have rated this as being high severity"
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3.2?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.5.5-1ubuntu3.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.5.3-1ubuntu2",
"3.5.5-1ubuntu1",
"3.5.5-1ubuntu3"
]
}
],
"aliases": [],
"details": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#7 or S/MIME signed message, if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent use of the BIO by the calling application results in a use-after-free condition. In the common case this occurs when the application later calls BIO_free() on the BIO originally passed to PKCS7_verify(). Depending on allocator behavior and application-specific BIO usage patterns, this may result in a crash or other memory corruption. In some application contexts this may potentially be exploitable for remote code execution. Applications that process PKCS#7 or S/MIME signed messages using OpenSSL PKCS#7 APIs may be affected. Applications using the CMS APIs for this processing are not affected. The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.",
"id": "UBUNTU-CVE-2026-45447",
"modified": "2026-07-08T20:56:24Z",
"published": "2026-06-09T00:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-45447"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"type": "REPORT",
"url": "https://openssl-library.org/news/secadv/20260609.txt"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8414-2"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8414-1"
}
],
"related": [
"USN-8414-2",
"USN-8414-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-45447"
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…