Security update for openssl-1_0_0
This update for openssl-1_0_0 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - NULL pointer dereference when processing an OCSP response (bsc#1260446).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for openssl-1_0_0 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - NULL pointer dereference when processing an OCSP response (bsc#1260446).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1260442
- https://bugzilla.suse.com/1260443
- https://bugzilla.suse.com/1260446
- https://bugzilla.suse.com/1266340
- https://bugzilla.suse.com/1266341
- https://bugzilla.suse.com/1266342
- https://bugzilla.suse.com/1266349
- https://bugzilla.suse.com/1266357
- https://www.suse.com/security/cve/CVE-2026-28388
- https://www.suse.com/security/cve/CVE-2026-28389
- https://www.suse.com/security/cve/CVE-2026-34180
- https://www.suse.com/security/cve/CVE-2026-42766
- https://www.suse.com/security/cve/CVE-2026-45447
- https://www.suse.com/security/cve/CVE-2026-7383
- https://www.suse.com/security/cve/CVE-2026-9076
- https://www.suse.com/support/update/announcement/2026/suse-su-20262396-1/