Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
SUSE-SU-2026:1711-1
See a problem?
Please try reporting it
to the source
first.
Source
https://www.suse.com/support/update/announcement/2026/suse-su-20261711-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1711-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:1711-1
Upstream
CVE-2026-28390
Related
CVE-2026-28390
Published
2026-05-06T12:04:47Z
Modified
2026-05-07T08:47:41Z
Summary
Security update for openssl-3
Details
This update for openssl-3 fixes the following issue:
CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).
References
https://www.suse.com/support/update/announcement/2026/suse-su-20261711-1/
https://bugzilla.suse.com/1261678
https://www.suse.com/security/cve/CVE-2026-28390
Affected packages
SUSE-SU-2026:1711-1 - OSV