Description
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could
trigger a use-after-free during PKCS#7 signature verification.
Impact summary: A use-after-free may result in process crashes, heap
corruption, or potentially remote code execution.
When processing a PKCS#7 or S/MIME signed message, if the SignedData
digestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may
incorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent
use of the BIO by the calling application results in a use-after-free
condition.
In the common case this occurs when the application later calls
BIO_free() on the BIO originally passed to PKCS7_verify(). Depending
on allocator behavior and application-specific BIO usage patterns, this
may result in a crash or other memory corruption. In some application
contexts this may potentially be exploitable for remote code execution.
Applications that process PKCS#7 or S/MIME signed messages using OpenSSL
PKCS#7 APIs may be affected. Applications using the CMS APIs for this
processing are not affected.
The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this
issue, as the affected code is outside the OpenSSL FIPS module boundary.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenSSL | OpenSSL | 4.0.0 – < 4.0.1, 3.6.0 – < 3.6.3, 3.5.0 – < 3.5.7, 3.4.0 – < 3.4.6, 3.0.0 – < 3.0.21, 1.1.1 – < 1.1.1zh, 1.0.2 – < 1.0.2zq | 4.0.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssl | 3.6.3-1 | — |
| Debian 13 | openssl | 3.5.6-1~deb13u2 | — |
| Debian 12 | openssl | 3.0.20-1~deb12u2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | edk2 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu 26.04 LTS | openssl | 3.5.5-1ubuntu3.2 | — |
| Ubuntu 25.10 | edk2 | No fix yet | — |
| Ubuntu 25.10 | openssl | 3.5.3-1ubuntu3.4 | — |
| Ubuntu 24.04 LTS | edk2 | No fix yet | — |
| Ubuntu 24.04 LTS | openssl | 3.0.13-0ubuntu3.11 | — |
| Ubuntu 22.04 LTS | edk2 | No fix yet | — |
| Ubuntu 22.04 LTS | openssl | 3.0.2-0ubuntu1.25 | — |
Show 14 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro FIPS 20.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | openssl-fips | 3.0.13-0ubuntu3.12+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl | 3.0.2-0ubuntu1.25+Fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | openssl-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | openssl | 1.1.1f-1ubuntu2.fips.24.4 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | openssl | 1.1.1-1ubuntu2.fips.2.1~18.04.23.9 | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | openssl | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | openssl +1 | No fix yet | — |
| Ubuntu Pro 22.04 LTS | nodejs | No fix yet | — |
| Ubuntu Pro 20.04 LTS | edk2 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | openssl | 1.1.1f-1ubuntu2.24+esm4 | — |
| Ubuntu Pro 18.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm9 | — |
| Ubuntu Pro 18.04 LTS | openssl1.0 | 1.0.2n-1ubuntu5.13+esm5 | — |
| Ubuntu Pro 16.04 LTS | edk2 +1 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | openssl | 1.0.2g-1ubuntu4.20+esm16 | — |
| Ubuntu Pro 14.04 LTS | openssl | 1.0.1f-1ubuntu2.27+esm14 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | openssl +3 | 1:3.5.5-4.el10_2 | RHSA-2026:25237 |
| RHEL 9 | compat-openssl11 | 1:1.1.1k-5.el9_8.4 | RHSA-2026:44438 |
| RHEL 9 | openssl +3 | 1:3.5.5-4.el9_8 | RHSA-2026:25239 |
| RHEL 8 | compat-openssl10 | 1:1.0.2o-4.el8_10.3 | RHSA-2026:36215 |
| RHEL 8 | openssl +3 | 1:1.1.1k-16.el8_6 | RHSA-2026:26275 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | openssl +3 | 1:3.2.2-16.el10_0.7 | RHSA-2026:71542 |
| RHEL 9.6 EUS | compat-openssl11 | 1:1.1.1k-5.el9_6.3 | RHSA-2026:35869 |
| RHEL 9.6 EUS | openssl +3 | 1:3.2.2-7.el9_6.4 | RHSA-2026:83617 |
| RHEL 9.4 E4S | compat-openssl11 | 1:1.1.1k-5.el9_4.3 | RHSA-2026:39009 |
| RHEL 9.4 E4S | openssl +1 | 1:3.0.7-29.el9_4.3 | RHSA-2026:84573 |
| RHEL 9.2 E4S | compat-openssl11 | 1:1.1.1k-4.el9_2.2 | RHSA-2026:39012 |
| RHEL 9.2 E4S | openssl +1 | 1:3.0.7-18.el9_2.4 | RHSA-2026:84572 |
| RHEL 8.8 TUS | compat-openssl10 | 1:1.0.2o-4.el8_8.1 | RHSA-2026:36217 |
| RHEL 8.8 TUS | openssl +3 | 1:1.1.1k-16.el8_6 | RHSA-2026:26275 |
| RHEL 8.8 E4S | compat-openssl10 | 1:1.0.2o-4.el8_8.1 | RHSA-2026:36217 |
| RHEL 8.8 E4S | openssl +3 | 1:1.1.1k-16.el8_6 | RHSA-2026:26275 |
| RHEL 8.6 EUS Long Life | openssl +3 | 1:1.1.1k-16.el8_6 | RHSA-2026:26275 |
| RHEL 7 ELS | openssl +4 | 1:1.0.2k-26.el7_9.2 | RHSA-2026:58563 |
| RHEL 6 ELS | openssl +1 | 1.0.1e-61.el6_10.1 | RHSA-2026:66524 |
| Red Hat Hardened Images 1 | bootupd +1 | 0.3.2-1.hum1 | RHSA-2026:67551 |
| Red Hat Hardened Images 1 | chunkah | 0.6.0-3.hum1 | RHSA-2026:42825 |
| Red Hat Hardened Images 1 | openssl +10 | 3.5.8-0.1.hum1 | RHSA-2026:59641, RHSA-2026:59635 |
| Red Hat Hardened Images 1 | python-cryptography +1 | 50.0.0-1.hum1 | RHSA-2026:55543 |
| Red Hat Hardened Images 1 | ruby3.3 +5 | 3.3.10-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | ruby3.4 +5 | 3.4.10-31.7.hum1 | RHSA-2026:62790 |
| Red Hat Hardened Images 1 | ruby4.0 +5 | 4.0.6-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem3.3-bigdecimal | 3.1.5-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-bundler | 2.5.22-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-devel +1 | 3.5.22-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-io-console | 0.7.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-irb | 1.13.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-json | 2.7.2-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-minitest | 5.20.0-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-power_assert | 2.0.3-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-psych | 5.1.2-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-racc | 1.7.3-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rake | 13.1.0-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rbs | 3.4.0-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rdoc | 6.6.3.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rexml | 3.4.4-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-rss | 0.3.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-test-unit | 3.6.1-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem3.3-typeprof | 0.21.9-23.6.hum1 | RHSA-2026:62562 |
| Red Hat Hardened Images 1 | rubygem4.0-bigdecimal | 4.0.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-devel +2 | 4.0.16-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-io-console | 0.8.2-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-irb | 1.16.0-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-json | 2.18.0-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-minitest | 6.0.0-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-power_assert | 3.0.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-psych | 5.3.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-racc | 1.8.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rake | 13.3.1-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rbs | 3.10.0-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rdoc | 7.0.4-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rexml | 3.4.4-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-rss | 0.3.2-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-test-unit | 3.7.5-37.3.hum1 | RHSA-2026:62563 |
| Red Hat Hardened Images 1 | rubygem4.0-typeprof | 0.31.1-37.3.hum1 | RHSA-2026:62563 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | openssl +3 | 1:3.5.5-4.el10_2.alma.1 | ALSA-2026:25237 |
| AlmaLinux 9 | compat-openssl11 | 1:1.1.1k-5.el9_8.4 | ALSA-2026:44438 |
| AlmaLinux 9 | openssl +3 | 1:3.5.5-4.el9_8 | ALSA-2026:25239 |
| AlmaLinux 8 | compat-openssl10 | 1:1.0.2o-4.el8_10.3 | ALSA-2026:36215 |
| AlmaLinux 8 | openssl +3 | 1:1.1.1k-16.el8_6 | ALSA-2026:26275 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | openssl | 1:3.5.5-4.el10_2 | RLSA-2026:25237 |
| Rocky Linux 9 | compat-openssl11 | 1:1.1.1k-5.el9_8.4 | RLSA-2026:44438 |
| Rocky Linux 9 | openssl | 1:3.5.5-4.el9_8 | RLSA-2026:25239 |
| Rocky Linux 8 | compat-openssl10 | 1:1.0.2o-4.el8_10.3 | RLSA-2026:36215 |
| Rocky Linux 8 | openssl | 1:1.1.1k-16.el8_10 | RLSA-2026:26275 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | openssl-1_0_0 | 1.0.2p-150000.3.108.1 | SUSE-SU-2026:2399-1 |
| SLES 15 SP7 | openssl-1_1 | 1.1.1w-150700.11.22.1 | SUSE-SU-2026:2392-1 |
| SLES 15 SP7 | openssl-3 | 3.2.3-150700.5.36.1 | SUSE-SU-2026:2648-1 |
| SLES 15 SP6 | openssl-1_0_0 | 1.0.2p-150000.3.108.1 | SUSE-SU-2026:2399-1 |
| SLES 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.32.1 | SUSE-SU-2026:2404-1 |
| SLES 15 SP6 | openssl-3 | 3.1.4-150600.5.53.1 | SUSE-SU-2026:2393-1 |
| SLES 15 SP5 | openssl-1_0_0 | 1.0.2p-150000.3.108.1 | SUSE-SU-2026:2399-1 |
| SLES 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.57.2 | SUSE-SU-2026:2405-1 |
| SLES 15 SP5 | openssl-3 | 3.0.8-150500.5.66.1 | SUSE-SU-2026:2397-1 |
| SLES 15 SP4 | openssl-1_0_0 | 1.0.2p-150000.3.108.1 | SUSE-SU-2026:2399-1 |
| SLES 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.96.2 | SUSE-SU-2026:2614-1 |
| SLES 15 SP4 | openssl-3 | 3.0.8-150400.4.87.1 | SUSE-SU-2026:2598-1 |
| SLES 12 SP5 | openssl-1_0_0 | 1.0.2p-3.109.1 | SUSE-SU-2026:2396-1 |
| SLES 12 SP5 | openssl-1_1 | 1.1.1d-2.131.1 | SUSE-SU-2026:2403-1 |
Show 17 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | openssl-3 | 3.5.0-160000.8.1 | SUSE-SU-2026:22315-1 |
| SLES for SAP 15 SP6 | openssl-1_0_0 | 1.0.2p-150000.3.108.1 | SUSE-SU-2026:2399-1 |
| SLES for SAP 15 SP6 | openssl-1_1 | 1.1.1w-150600.5.32.1 | SUSE-SU-2026:2404-1 |
| SLES for SAP 15 SP6 | openssl-3 | 3.1.4-150600.5.53.1 | SUSE-SU-2026:2393-1 |
| SLES for SAP 15 SP5 | openssl-1_0_0 | 1.0.2p-150000.3.108.1 | SUSE-SU-2026:2399-1 |
| SLES for SAP 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.57.2 | SUSE-SU-2026:2405-1 |
| SLES for SAP 15 SP5 | openssl-3 | 3.0.8-150500.5.66.1 | SUSE-SU-2026:2397-1 |
| SLES for SAP 15 SP4 | openssl-1_0_0 | 1.0.2p-150000.3.108.1 | SUSE-SU-2026:2399-1 |
| SLES for SAP 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.96.2 | SUSE-SU-2026:2614-1 |
| SLES for SAP 15 SP4 | openssl-3 | 3.0.8-150400.4.87.1 | SUSE-SU-2026:2598-1 |
| SLES 16.0 | openssl-3 | 3.5.0-160000.8.1 | SUSE-SU-2026:22315-1 |
| SLE Micro 6.2 | openssl-3 | 3.5.0-160000.8.1 | SUSE-SU-2026:22251-1 |
| SLE Micro 6.1 | openssl-3 | 3.1.4-slfo.1.1_10.1 | SUSE-SU-2026:22132-1 |
| SLE Micro 6.1 | openssl-3-livepatches | 0.4-slfo.1.1_1.1 | SUSE-SU-2026:22143-1 |
| SLE Micro 6.0 | openssl-3 | 3.1.4-14.1 | SUSE-SU-2026:22100-1 |
| SLE Micro 5.5 | openssl-1_1 | 1.1.1l-150500.17.57.2 | SUSE-SU-2026:2405-1 |
| SLE Micro 5.4 | openssl-1_1 | 1.1.1l-150400.7.96.2 | SUSE-SU-2026:2614-1 |
| SLE Micro 5.4 | openssl-3 | 3.0.8-150400.4.87.1 | SUSE-SU-2026:2598-1 |
| SLE Micro 5.3 | openssl-1_1 | 1.1.1l-150400.7.96.2 | SUSE-SU-2026:2614-1 |
| SLE Micro 5.3 | openssl-3 | 3.0.8-150400.4.87.1 | SUSE-SU-2026:2598-1 |
| SLE Live Patching 15 SP7 | openssl-1_1-livepatches | 0.6-150700.13.6.1 | SUSE-SU-2026:2412-1 |
| SLE Live Patching 15 SP7 | openssl-3-livepatches | 0.4-150700.16.6.1 | SUSE-SU-2026:2662-1 |
| SLE Live Patching 15 SP6 | openssl-1_1-livepatches | 0.6-150600.11.6.1 | SUSE-SU-2026:2410-1 |
| SLE Live Patching 15 SP6 | openssl-3-livepatches | 0.4-150600.13.11.1 | SUSE-SU-2026:2411-1 |
| SLE Live Patching 15 SP5 | openssl-1_1-livepatches | 0.6-150500.6.14.1 | SUSE-SU-2026:2409-1 |
| SLE Live Patching 15 SP4 | openssl-1_1-livepatches | 0.6-150400.3.20.1 | SUSE-SU-2026:2621-1 |
| SLE HPC 15 SP5 | openssl-1_1 | 1.1.1l-150500.17.57.2 | SUSE-SU-2026:2405-1 |
| SLE HPC 15 SP5 | openssl-3 | 3.0.8-150500.5.66.1 | SUSE-SU-2026:2397-1 |
| SLE HPC 15 SP4 | openssl-1_0_0 | 1.0.2p-150000.3.108.1 | SUSE-SU-2026:2399-1 |
| SLE HPC 15 SP4 | openssl-1_1 | 1.1.1l-150400.7.96.2 | SUSE-SU-2026:2614-1 |
| SLE HPC 15 SP4 | openssl-3 | 3.0.8-150400.4.87.1 | SUSE-SU-2026:2598-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | openssl-3 | 3.5.3-6.1 | openSUSE-SU-2026:11023-1 |
| openSUSE Leap 16.0 | openssl-3 | 3.5.0-160000.8.1 | openSUSE-SU-2026:21005-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | openssl | 3.5.7-r0 | — |
| Alpine v3.23 | openssl | 3.5.7-r0 | — |
| Alpine v3.22 | openssl | 3.5.7-r0 | — |
| Alpine v3.21 | openssl | 3.3.7-r1 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | openssl +5 | 1:3.5.5-1.amzn2023.0.5 | ALAS2023-2026-1853 |
| Amazon Linux 2 | edk2-ovmf +3 | 20240813-312.amzn2 | ALAS2-2026-3363 |
| Amazon Linux 2 | openssl +4 | 1:1.0.2k-24.amzn2.0.21 | ALAS2-2026-3365 |
| Amazon Linux 2 | openssl11 +3 | 1:1.1.1zh-1.amzn2.0.1 | ALAS2-2026-3364 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | edk2 | 20240524git3e722403cd16-18 | — |
| Azure Linux 3 | openssl | 3.3.7-4 | — |
| Azure Linux 3 | openssl-fips-provider | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | openssl +3 | 1:3.5.5-5.0.1.el10_2 | ELSA-2026-25237 |
| Oracle Linux 9 | compat-openssl11 | 1:1.1.1k-5.el9_8.4 | ELSA-2026-44438 |
| Oracle Linux 9 | openssl +3 | 1:3.5.5-4.0.1.el9_8 | ELSA-2026-50379, ELSA-2026-25239 |
| Oracle Linux 8 | compat-openssl10 | 1:1.0.2o-4.el8_10.3 | ELSA-2026-36215 |
| Oracle Linux 8 | openssl +3 | 1:1.1.1k-16.el8_6 | ELSA-2026-26275 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | openssl +1 | 3.6.3-r0 | — |
| Wolfi rolling | openssl-4.0 +2 | 4.0.1-r0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 2 repositories
-
ashrafzaryouh/CVE-2026-45447 ★ 1 · Jun 13, 2026
CVE-2026-45447
-
HORKimhab/CVE-2026-45447 ★ 0 · Jun 11, 2026
CVE-2026-45447 - Draft
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- WID-SEC-2026-1852 OpenSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
- ALSA-2026:25239 Important: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:44438 Important: compat-openssl11 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:25237 Important: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:36215 Important: compat-openssl10 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:26275 Important: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2026-2919 IBM App Connect Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2026
- WID-SEC-2026-2455 Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 27, 2026
- WID-SEC-2026-2929 Splunk Splunk Enterprise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 21, 2026
- RHSA-2026:84573 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:84572 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:83617 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:71542 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:67551 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:66524 Red Hat Security Advisory: openssl security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:62790 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:62562 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:62563 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:59635 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:59641 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:58563 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:55543 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:44438 Red Hat Security Advisory: compat-openssl11 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:42825 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:39012 Red Hat Security Advisory: compat-openssl11 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:39009 Red Hat Security Advisory: compat-openssl11 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:36215 Red Hat Security Advisory: compat-openssl10 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:36217 Red Hat Security Advisory: compat-openssl10 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:35869 Red Hat Security Advisory: compat-openssl11 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:26275 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:25239 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:25237 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- VDE-2026-088 METTLER TOLEDO: LabX Standard and Enterprise Report on External Component Analysis - v21.4 CERT@VDE · Sep 10, 2026
- NCSC-2026-0307 Kwetsbaarheden verholpen in Oracle Database Producten NCSC-NL (Netherlands) · Aug 19, 2026
- ELSA-2026-25237 Important: openssl security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 28, 2026
- RLSA-2026:44438 Important: compat-openssl11 security update Rocky Linux Security Advisories · Jul 27, 2026
- ELSA-2026-44438 Important: compat-openssl11 security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 23, 2026
- RLSA-2026:36215 Important: compat-openssl10 security update Rocky Linux Security Advisories · Jul 13, 2026
- ELSA-2026-36215 Important: compat-openssl10 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 7, 2026
- ELSA-2026-50379 Moderate: openssl security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 7, 2026
- SUSE-SU-2026:22315-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Jul 2, 2026
- openSUSE-SU-2026:21005-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22251-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:2662-1 Security update for openssl-3-livepatches SUSE / openSUSE Security Updates · Jun 27, 2026
- SUSE-SU-2026:2648-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Jun 27, 2026
- SUSE-SU-2026:2621-1 Security update for openssl-1_1-livepatches SUSE / openSUSE Security Updates · Jun 25, 2026
- SUSE-SU-2026:2614-1 Security update for openssl-1_1 SUSE / openSUSE Security Updates · Jun 25, 2026
- SUSE-SU-2026:2598-1 Security update for openssl-3 SUSE / openSUSE Security Updates · Jun 24, 2026
- ELSA-2026-25239 Important: openssl security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jun 23, 2026
- ALAS2-2026-3363 Important: edk2 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jun 22, 2026
References
- OpenSSL Advisory vendor-advisory
- 4.0.1 git commit patch
- 3.6.3 git commit patch
- 3.5.7 git commit patch
- 3.4.6 git commit patch
- 3.0.21 git commit patch