SUSE-SU-2026:20607-1

Security update for openssl-3-livepatches

Advisory ansehen veröffentlicht 2026-02-18

Security update for openssl-3-livepatches

beschreibt (4)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-15468US	—	0.82% (57th)	—	2026-01-27
Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs.…
CVE-2025-15467US	—	55.9% (99th)	Exploit	2026-01-27
Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer…
CVE-2025-11187US	—	5.06% (92nd)	Exploit	2026-01-27
Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC ver…
CVE-2025-9230US	—	1.55% (75th)	—	2025-09-30
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bou…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

SUSE Bug 1250410self
SUSE Bug 1256876self
SUSE Bug 1256878self
SUSE Bug 1256880self
URL of this CSAF noticeself
E-Mail link for SUSE-SU-2026:20607-1self
SUSE CVE CVE-2025-11187 pageself
SUSE CVE CVE-2025-15467 pageself

Behebungen (16)

Behobenopenssl-3-livepatches-0:0.3-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenopenssl-3-livepatches-0:0.3-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan