SUSE-SU-2026:1256-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20261256-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1256-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1256-1
- Upstream
- Related
- Published
- 2026-04-10T14:57:18Z
- Modified
- 2026-04-11T08:00:15.025069Z
- Summary
- Security update for openssl-1_0_0
- Details
-
This update for openssl-100 fixes the following issues:
- CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441).
- CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442).
- CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443).
- CVE-2026-31789: Heap buffer overflow in hexadecimal conversion (bsc#1260444).
- CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE encapsulation (bsc#1260445).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20261256-1/
- https://bugzilla.suse.com/1260441
- https://bugzilla.suse.com/1260442
- https://bugzilla.suse.com/1260443
- https://bugzilla.suse.com/1260444
- https://bugzilla.suse.com/1260445
- https://www.suse.com/security/cve/CVE-2026-28387
- https://www.suse.com/security/cve/CVE-2026-28388
- https://www.suse.com/security/cve/CVE-2026-28389
- https://www.suse.com/security/cve/CVE-2026-31789
- https://www.suse.com/security/cve/CVE-2026-31790
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / openssl-1_0_0
Package
- Name
- openssl-1_0_0
- Purl
- pkg:rpm/suse/openssl-1_0_0&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.0.2p-3.106.1
Ecosystem specific
{
"binaries": [
{
"libopenssl-1_0_0-devel-32bit": "1.0.2p-3.106.1",
"libopenssl1_0_0-hmac-32bit": "1.0.2p-3.106.1",
"openssl-1_0_0": "1.0.2p-3.106.1",
"libopenssl1_0_0-32bit": "1.0.2p-3.106.1",
"libopenssl-1_0_0-devel": "1.0.2p-3.106.1",
"libopenssl1_0_0-hmac": "1.0.2p-3.106.1",
"openssl-1_0_0-doc": "1.0.2p-3.106.1",
"libopenssl1_0_0": "1.0.2p-3.106.1"
}
]
}
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / openssl-1_0_0
Package
- Name
- openssl-1_0_0
- Purl
- pkg:rpm/suse/openssl-1_0_0&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1.0.2p-3.106.1
Ecosystem specific
{
"binaries": [
{
"libopenssl-1_0_0-devel-32bit": "1.0.2p-3.106.1",
"libopenssl1_0_0-hmac-32bit": "1.0.2p-3.106.1",
"openssl-1_0_0": "1.0.2p-3.106.1",
"libopenssl1_0_0-32bit": "1.0.2p-3.106.1",
"libopenssl-1_0_0-devel": "1.0.2p-3.106.1",
"libopenssl1_0_0-hmac": "1.0.2p-3.106.1",
"openssl-1_0_0-doc": "1.0.2p-3.106.1",
"libopenssl1_0_0": "1.0.2p-3.106.1"
}
]
}