MGASA-2026-0029

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2026-0029.html
Import Source
https://advisories.mageia.org/MGASA-2026-0029.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2026-0029
Upstream
Published
2026-01-30T00:39:37Z
Modified
2026-04-16T04:44:37Z
Summary
Updated openssl packages fix security vulnerabilities
Details

Stack buffer overflow in CMS AuthEnvelopedData parsing. (CVE-2025-15467) Heap out-of-bounds write in BIO_f_linebuffer on short writes. (CVE-2025-68160) Unauthenticated/unencrypted trailing bytes with low-level OCB function calls. (CVE-2025-69418) Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion. (CVE-2025-69419) Missing ASN1_TYPE validation in TS_RESP_verify_response() function. (CVE-2025-69420) NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function. (CVE-2025-69421) Missing ASN1_TYPE validation in PKCS#12 parsing. (CVE-2026-22795) ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function. (CVE-2026-22796)

References
Credits

Affected packages

Mageia:9 / openssl

Package

Name
openssl
Purl
pkg:rpm/mageia/openssl?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.0.19-1.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2026-0029.json"