Description
Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen.
Impact summary: Applications that process attacker-controlled CMS data may
crash before authentication or cryptographic operations occur resulting in
Denial of Service.
When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with
RSA-OAEP encryption is processed, the optional parameters field of
RSA-OAEP SourceFunc algorithm identifier is examined without checking
for its presence. This results in a NULL pointer dereference if the field
is missing.
Applications and services that call CMS_decrypt() on untrusted input
(e.g., S/MIME processing or CMS-based protocols) are vulnerable.
The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this
issue, as the affected code is outside the OpenSSL FIPS module boundary.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 3.6.0 – < 3.6.2, 3.5.0 – < 3.5.6, 3.4.0 – < 3.4.5, 3.3.0 – < 3.3.7, 3.0.0 – < 3.0.20, 1.1.1 – < 1.1.1zg, 1.0.2 – < 1.0.2zp | 3.6.2 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.6.2-1 | — |
| Debian 13 | openssl | 3.5.5-1~deb13u2 | — |
| Debian 12 | openssl | 3.0.19-1~deb12u2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | edk2 +1 | No fix yet | — |
| Ubuntu 26.10 | openssl | 3.5.5-1ubuntu3 | — |
| Ubuntu 26.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | openssl | 3.5.5-1ubuntu3 | — |
| Ubuntu 25.10 | edk2 | No fix yet | — |
| Ubuntu 25.10 | openssl | 3.5.3-1ubuntu3.3 | — |
| Ubuntu 24.04 LTS | edk2 | No fix yet | — |
| Ubuntu 24.04 LTS | openssl | 3.0.13-0ubuntu3.9 | — |
| Ubuntu 22.04 LTS | edk2 | No fix yet | — |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.23 | — |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | openssl-fips | 3.0.13-0ubuntu3.12+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl | 3.0.2-0ubuntu1.23+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssl | 1.1.1f-1ubuntu2.fips.24.3 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.23.8 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssl | 1.0.2g-1ubuntu4.fips.4.20.15 | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 20.04 LTS | edk2 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | openssl | 1.1.1f-1ubuntu2.24+esm3 | — |
| Ubuntu Pro 18.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm8 | — |
| Ubuntu Pro 18.04 LTS | openssl1.0 | 1.0.2n-1ubuntu5.13+esm4 | — |
| Ubuntu Pro 16.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | openssl | 1.0.2g-1ubuntu4.20+esm15 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | edk2 +4 | 20251114-5.el10_2.2 | RHSA-2026:39297 |
| RHEL 10 | openssl +3 | 1:3.5.5-3.el10_2 | RHSA-2026:22314 |
| RHEL 9 | compat-openssl11 | 1:1.1.1k-5.el9_8.3 | RHSA-2026:22313 |
| RHEL 9 | openssl +3 | 1:3.5.5-3.el9_8 | RHSA-2026:22312 |
| RHEL 8 | compat-openssl10 | 1:1.0.2o-4.el8_10.2 | RHSA-2026:22315 |
| RHEL 8 | openssl +3 | 1:1.1.1k-17.el8_6 | RHSA-2026:38503 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | openssl +3 | 1:3.2.2-16.el10_0.7 | RHSA-2026:71542 |
| RHEL 9.6 EUS | compat-openssl11 | 1:1.1.1k-5.el9_6.3 | RHSA-2026:35869 |
| RHEL 9.6 EUS | openssl +3 | 1:3.2.2-7.el9_6.4 | RHSA-2026:83617 |
| RHEL 9.4 E4S | compat-openssl11 | 1:1.1.1k-5.el9_4.3 | RHSA-2026:39009 |
| RHEL 9.4 E4S | openssl +1 | 1:3.0.7-29.el9_4.3 | RHSA-2026:84573 |
| RHEL 9.2 E4S | compat-openssl11 | 1:1.1.1k-4.el9_2.2 | RHSA-2026:39012 |
| RHEL 9.2 E4S | openssl +1 | 1:3.0.7-18.el9_2.4 | RHSA-2026:84572 |
| RHEL 8.8 TUS | compat-openssl10 | 1:1.0.2o-4.el8_8.1 | RHSA-2026:36217 |
| RHEL 8.8 TUS | openssl +3 | 1:1.1.1k-17.el8_6 | RHSA-2026:38805 |
| RHEL 8.8 E4S | compat-openssl10 | 1:1.0.2o-4.el8_8.1 | RHSA-2026:36217 |
| RHEL 8.8 E4S | openssl +3 | 1:1.1.1k-17.el8_6 | RHSA-2026:38805 |
| RHEL 8.6 EUS Long Life | compat-openssl10 | 1:1.0.2o-4.el8_6.1 | RHSA-2026:44480 |
| RHEL 8.6 EUS Long Life | openssl +3 | 1:1.1.1k-17.el8_6 | RHSA-2026:38804 |
| RHEL 8.6 AUS | compat-openssl10 | 1:1.0.2o-4.el8_6.1 | RHSA-2026:44480 |
| RHEL 8.6 AUS | openssl +3 | 1:1.1.1k-17.el8_6 | RHSA-2026:38804 |
| RHEL 8.4 EUS Long Life | compat-openssl10 | 1:1.0.2o-3.el8_4.1 | RHSA-2026:47096 |
| RHEL 8.4 EUS Long Life | openssl +3 | 1:1.1.1g-18.el8_4.3 | RHSA-2026:43513 |
| RHEL 8.4 AUS | compat-openssl10 | 1:1.0.2o-3.el8_4.1 | RHSA-2026:47096 |
| RHEL 8.4 AUS | openssl +3 | 1:1.1.1g-18.el8_4.3 | RHSA-2026:43513 |
| RHEL 7 ELS | openssl +4 | 1:1.0.2k-26.el7_9.2 | RHSA-2026:58563 |
| Red Hat Hardened Images 1 | openssl +5 | 3.5.6-0.1.hum1 | RHSA-2026:14217, RHSA-2026:7261 |
| Red Hat Hardened Images 1 | openssl-fips-provider-upstream | 3.5.6-0.3.hum1 | RHSA-2026:14217 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | edk2-ovmf +3 | 20251114-5.el10_2.2 | ALSA-2026:39297 |
| AlmaLinux 10 | openssl +3 | 1:3.5.5-3.el10_2.alma.1 | ALSA-2026:22314 |
| AlmaLinux 9 | compat-openssl11 | 1:1.1.1k-5.el9_8.3 | ALSA-2026:22313 |
| AlmaLinux 9 | openssl +3 | 1:3.5.5-3.el9_8 | ALSA-2026:22312 |
| AlmaLinux 8 | compat-openssl10 | 1:1.0.2o-4.el8_10.2 | ALSA-2026:22315 |
| AlmaLinux 8 | openssl +3 | 1:1.1.1k-17.el8_6 | ALSA-2026:38503 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | edk2 | 20251114-5.el10_2.2 | RLSA-2026:39297 |
| Rocky Linux 10 | openssl | 1:3.5.5-3.el10_2 | RLSA-2026:22314 |
| Rocky Linux 9 | compat-openssl11 | 1:1.1.1k-5.el9_8.3 | RLSA-2026:22313 |
| Rocky Linux 9 | openssl | 1:3.5.5-3.el9_8 | RLSA-2026:22312 |
| Rocky Linux 8 | compat-openssl10 | 1:1.0.2o-4.el8_10.2 | RLSA-2026:22315 |
| Rocky Linux 8 | openssl | 1:1.1.1k-17.el8_10 | RLSA-2026:38503 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | openssl-1_0_0 | 1.0.2p-150000.3.111.2 | SUSE-SU-2026:3443-1 |
| SLES 15 SP7 | openssl-1_1 | 1.1.1w-150700.11.16.1 | SUSE-SU-2026:1386-1 |
| SLES 15 SP7 | openssl-3 | 3.2.3-150700.5.31.1 | SUSE-SU-2026:1375-1 |
| SLES 15 SP6 | openssl-1_0_0 | 1.0.2p-150000.3.111.2 | SUSE-SU-2026:3443-1 |
| SLES 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.26.2 | SUSE-SU-2026:1577-1 |
| SLES 15 SP6 | openssl-3 | 3.1.4-150600.5.50.1 | SUSE-SU-2026:1605-1 |
| SLES 15 SP5 | openssl-1_0_0 | 1.0.2p-150000.3.111.2 | SUSE-SU-2026:3443-1 |
| SLES 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.54.1 | SUSE-SU-2026:1550-1 |
| SLES 15 SP4 | openssl-1_0_0 | 1.0.2p-150000.3.111.2 | SUSE-SU-2026:3443-1 |
| SLES 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.93.1 | SUSE-SU-2026:1562-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.84.1 | SUSE-SU-2026:1429-1 |
| SLES 12 SP5 | openssl-1_0_0 | 1.0.2p-3.112.1 | SUSE-SU-2026:3272-1 |
| SLES 12 SP5 | openssl-1_1 | 1.1.1d-2.128.1 | SUSE-SU-2026:1549-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | openssl-3 | 3.5.0-160000.7.1 | SUSE-SU-2026:21186-1 |
| SLES for SAP 15 SP6 | openssl-1_0_0 | 1.0.2p-150000.3.111.2 | SUSE-SU-2026:3443-1 |
| SLES for SAP 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.26.2 | SUSE-SU-2026:1577-1 |
| SLES for SAP 15 SP6 | openssl-3 | 3.1.4-150600.5.50.1 | SUSE-SU-2026:1605-1 |
| SLES for SAP 15 SP5 | openssl-1_0_0 | 1.0.2p-150000.3.111.2 | SUSE-SU-2026:3443-1 |
| SLES for SAP 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.54.1 | SUSE-SU-2026:1550-1 |
| SLES for SAP 15 SP4 | openssl-1_0_0 | 1.0.2p-150000.3.111.2 | SUSE-SU-2026:3443-1 |
| SLES for SAP 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.93.1 | SUSE-SU-2026:1562-1 |
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.84.1 | SUSE-SU-2026:1429-1 |
| SLES 16.0 | openssl-3 | 3.5.0-160000.7.1 | SUSE-SU-2026:21186-1 |
| SLE Micro 6.2 | openssl-3 | 3.5.0-160000.7.1 | SUSE-SU-2026:21107-1 |
| SLE Micro 6.1 | openssl-3 | 3.1.4-slfo.1.1_10.1 | SUSE-SU-2026:22132-1 |
| SLE Micro 6.0 | openssl-3 | 3.1.4-13.1 | SUSE-SU-2026:21244-1 |
| SLE Micro 5.5 | openssl-1_1 | 1.1.1l-150500.17.54.1 | SUSE-SU-2026:1550-1 |
| SLE Micro 5.4 | openssl-1_1 | 1.1.1l-150400.7.93.1 | SUSE-SU-2026:1562-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.84.1 | SUSE-SU-2026:1429-1 |
| SLE Micro 5.3 | openssl-1_1 | 1.1.1l-150400.7.93.1 | SUSE-SU-2026:1562-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.84.1 | SUSE-SU-2026:1429-1 |
| SLE HPC 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.54.1 | SUSE-SU-2026:1550-1 |
| SLE HPC 15 SP4 | openssl-1_0_0 | 1.0.2p-150000.3.111.2 | SUSE-SU-2026:3443-1 |
| SLE HPC 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.93.1 | SUSE-SU-2026:1562-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.84.1 | SUSE-SU-2026:1429-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-3 | 3.5.3-4.1 | openSUSE-SU-2026:10533-1 |
| openSUSE Leap 16.0 | openssl-3 | 3.5.0-160000.7.1 | openSUSE-SU-2026:20525-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 3.5.6-r0 | — |
| Alpine v3.23 | openssl | 3.5.6-r0 | — |
| Alpine v3.22 | openssl | 3.5.6-r0 | — |
| Alpine v3.21 | openssl | 3.3.7-r0 | — |
| Alpine v3.20 | openssl | 3.3.7-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +5 | 1:3.5.5-1.amzn2023.0.4 | ALAS2023-2026-1586 |
| Amazon Linux 2 | edk2-ovmf +3 | 20240813-307.amzn2 | ALAS2-2026-3275 |
| Amazon Linux 2 | openssl +4 | 1:1.0.2k-24.amzn2.0.20 | ALAS2-2026-3274 |
| Amazon Linux 2 | openssl11 +3 | 1:1.1.1zg-1.amzn2.0.1 | ALAS2-2026-3249 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | edk2 | 20240524git3e722403cd16-16 | — |
| Azure Linux 3 | openssl | 3.3.5-5 | — |
| Azure Linux 3 | openssl-fips-provider | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | edk2-ovmf +3 | 20251114-5.0.1.el10_2.2 | ELSA-2026-39297 |
| Oracle Linux 10 | openssl +3 | 1:3.5.5-5.0.1.el10_2 | ELSA-2026-22314 |
| Oracle Linux 9 | compat-openssl11 | 1:1.1.1k-5.el9_8.3 | ELSA-2026-22313 |
| Oracle Linux 9 | openssl +3 | 1:3.5.5-4.0.1.el9_8 | ELSA-2026-50345, ELSA-2026-22312 |
| Oracle Linux 8 | compat-openssl10 | 1:1.0.2o-4.el8_10.2 | ELSA-2026-22315 |
| Oracle Linux 8 | openssl +3 | 1:1.1.1k-17.el8_6 | ELSA-2026-38503 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl +1 | 3.6.2-r0 | — |
Advisories 50
- WID-SEC-2026-0995 OpenSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026
- ALSA-2026:22312 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:22313 Moderate: compat-openssl11 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:39297 Moderate: edk2 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:22314 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:38503 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:22315 Moderate: compat-openssl10 security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-2437 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 22, 2026
- RHSA-2026:84573 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:84572 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:83617 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:7261 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:71542 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:58563 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:47096 Red Hat Security Advisory: compat-openssl10 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:44480 Red Hat Security Advisory: compat-openssl10 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:43513 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:39297 Red Hat Security Advisory: edk2 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:39012 Red Hat Security Advisory: compat-openssl11 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:39009 Red Hat Security Advisory: compat-openssl11 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:38804 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:38805 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:38503 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:36217 Red Hat Security Advisory: compat-openssl10 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:35869 Red Hat Security Advisory: compat-openssl11 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:22315 Red Hat Security Advisory: compat-openssl10 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:22313 Red Hat Security Advisory: compat-openssl11 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:22314 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:22312 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:14217 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- SSA-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 Siemens ProductCERT · Oct 13, 2026
- SUSE-SU-2026:3443-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Aug 3, 2026
- SUSE-SU-2026:3272-1 Security update for openssl-1_0_0 SUSE / openSUSE Security Updates · Jul 28, 2026
- ELSA-2026-22314 Moderate: openssl security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 23, 2026
- ELSA-2026-39297 Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 16, 2026
- RLSA-2026:39297 Moderate: edk2 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 15, 2026
- RLSA-2026:38503 Moderate: openssl security update Rocky Linux Security Advisories · Jul 14, 2026
- ELSA-2026-38503 Moderate: openssl security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 13, 2026
- ELSA-2026-22312 Moderate: openssl security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 29, 2026
- ELSA-2026-50345 Moderate: openssl security fix update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 24, 2026
- ELSA-2026-22313 Moderate: compat-openssl11 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 23, 2026
- SUSE-SU-2026:22132-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Jun 18, 2026
- RLSA-2026:22314 Moderate: openssl security update Rocky Linux Security Advisories · Jun 5, 2026
- RLSA-2026:22315 Moderate: compat-openssl10 security update Rocky Linux Security Advisories · Jun 5, 2026
- RLSA-2026:22312 Moderate: openssl security update Rocky Linux Security Advisories · Jun 2, 2026
- RLSA-2026:22313 Moderate: compat-openssl11 security update Rocky Linux Security Advisories · Jun 2, 2026
- ELSA-2026-22315 Moderate: compat-openssl10 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jun 2, 2026
- ICSA-26-134-10 Siemens SIMATIC CISA ICS & IT advisories · May 14, 2026
- ICSA-24-102-01 Siemens SIMATIC S7-1500 TM MFP CISA ICS & IT advisories · May 14, 2026
- NCSC-2026-0147 Kwetsbaarheden verholpen in Siemens-producten NCSC-NL (Netherlands) · May 13, 2026
References
- OpenSSL Advisory vendor-advisory
- 3.6.2 git commit patch
- 3.5.6 git commit patch
- 3.4.5 git commit patch
- 3.3.7 git commit patch
- 3.0.20 git commit patch