SUSE-SU-2026:0312-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20260312-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:0312-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:0312-1
- Upstream
- Related
- Published
- 2026-01-28T09:37:56Z
- Modified
- 2026-02-04T03:54:26.961439Z
- Summary
- Security update for openssl-3
- Details
-
This update for openssl-3 fixes the following issues:
- CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256830).
- CVE-2025-68160: Heap out-of-bounds write in BIOflinebuffer on short writes (bsc#1256834).
- CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (bsc#1256835).
- CVE-2025-69419: Out of bounds write in PKCS12getfriendlyname() UTF-8 conversion (bsc#1256836).
- CVE-2025-69420: Missing ASN1TYPE validation in TSRESPverifyresponse() function (bsc#1256837).
- CVE-2025-69421: NULL Pointer Dereference in PKCS12itemdecryptd2iex function (bsc#1256838).
- CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839).
- CVE-2026-22796: ASN1TYPE Type Confusion in the PKCS7digestfromattributes() function (bsc#1256840).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20260312-1/
- https://bugzilla.suse.com/1256830
- https://bugzilla.suse.com/1256834
- https://bugzilla.suse.com/1256835
- https://bugzilla.suse.com/1256836
- https://bugzilla.suse.com/1256837
- https://bugzilla.suse.com/1256838
- https://bugzilla.suse.com/1256839
- https://bugzilla.suse.com/1256840
- https://www.suse.com/security/cve/CVE-2025-15467
- https://www.suse.com/security/cve/CVE-2025-68160
- https://www.suse.com/security/cve/CVE-2025-69418
- https://www.suse.com/security/cve/CVE-2025-69419
- https://www.suse.com/security/cve/CVE-2025-69420
- https://www.suse.com/security/cve/CVE-2025-69421
- https://www.suse.com/security/cve/CVE-2026-22795
- https://www.suse.com/security/cve/CVE-2026-22796
Affected packages
openSUSE:Leap 15.6
openssl-3
Package
- Name
- openssl-3
- Purl
- pkg:rpm/opensuse/openssl-3&distro=openSUSE%20Leap%2015.6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.1.4-150600.5.42.1
Ecosystem specific
{
"binaries": [
{
"libopenssl-3-fips-provider": "3.1.4-150600.5.42.1",
"libopenssl-3-devel": "3.1.4-150600.5.42.1",
"libopenssl-3-devel-32bit": "3.1.4-150600.5.42.1",
"libopenssl-3-fips-provider-32bit": "3.1.4-150600.5.42.1",
"openssl-3-doc": "3.1.4-150600.5.42.1",
"libopenssl3": "3.1.4-150600.5.42.1",
"openssl-3": "3.1.4-150600.5.42.1",
"libopenssl3-32bit": "3.1.4-150600.5.42.1"
}
]
}SUSE:Linux Enterprise Server 15 SP6-LTSS
openssl-3
Package
- Name
- openssl-3
- Purl
- pkg:rpm/suse/openssl-3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP6-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.1.4-150600.5.42.1
Ecosystem specific
{
"binaries": [
{
"libopenssl-3-fips-provider": "3.1.4-150600.5.42.1",
"libopenssl-3-devel": "3.1.4-150600.5.42.1",
"libopenssl-3-fips-provider-32bit": "3.1.4-150600.5.42.1",
"openssl-3": "3.1.4-150600.5.42.1",
"libopenssl3": "3.1.4-150600.5.42.1",
"libopenssl3-32bit": "3.1.4-150600.5.42.1"
}
]
}SUSE:Linux Enterprise Server for SAP Applications 15 SP6
openssl-3
Package
- Name
- openssl-3
- Purl
- pkg:rpm/suse/openssl-3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP6
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed3.1.4-150600.5.42.1
Ecosystem specific
{
"binaries": [
{
"libopenssl-3-fips-provider": "3.1.4-150600.5.42.1",
"libopenssl-3-devel": "3.1.4-150600.5.42.1",
"libopenssl-3-fips-provider-32bit": "3.1.4-150600.5.42.1",
"openssl-3": "3.1.4-150600.5.42.1",
"libopenssl3": "3.1.4-150600.5.42.1",
"libopenssl3-32bit": "3.1.4-150600.5.42.1"
}
]
}