SUSE-SU-2026:2662-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:2662-1

Upstream

CVE (4)

Related

CVE (4)

Published

2026-06-26T13:59:10Z

Modified

2026-06-27T08:45:06Z

Summary

Security update for openssl-3-livepatches

Details

This update for openssl-3-livepatches fixes the following issues

CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878).
CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876).
CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256880).
CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266389, bsc#1266357).

References

Affected packages

Name: openssl-3-livepatches
Purl: pkg:rpm/suse/openssl-3-livepatches&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP7

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.4-150700.16.6.1

{
    "binaries": [
        {
            "openssl-3-livepatches": "0.4-150700.16.6.1"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2662-1.json"