SUSE-SU-2026:22143-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202622143-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22143-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:22143-1
- Upstream
- Related
- Published
- 2026-06-11T12:51:17Z
- Modified
- 2026-06-18T18:24:18Z
- Summary
- Security update for openssl-3-livepatches
- Details
-
This update for openssl-3-livepatches fixes the following issues
- CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878).
- CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876).
- CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256880).
- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266389, bsc#1266357).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202622143-1/
- https://bugzilla.suse.com/1256876
- https://bugzilla.suse.com/1256878
- https://bugzilla.suse.com/1256880
- https://bugzilla.suse.com/1266357
- https://bugzilla.suse.com/1266389
- https://www.suse.com/security/cve/CVE-2025-11187
- https://www.suse.com/security/cve/CVE-2025-15467
- https://www.suse.com/security/cve/CVE-2025-15468
- https://www.suse.com/security/cve/CVE-2026-45447