FlawAtlas
Search the atlas
SUSE-SU-2026:2399-1 Not scored

Security update for openssl-1_0_0

This update for openssl-1_0_0 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - NULL pointer dereference when processing an OCSP response (bsc#1260446).

Exploit probability Not scored
Published June 15, 2026
Required by Not available
Last source change June 16, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS openssl-1_0_0
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS openssl-1_0_0
SUSE:Linux Enterprise Module for Legacy 15 SP7 openssl-1_0_0
SUSE:Linux Enterprise Server 15 SP4-LTSS openssl-1_0_0
SUSE:Linux Enterprise Server 15 SP5-LTSS openssl-1_0_0
SUSE:Linux Enterprise Server 15 SP6-LTSS openssl-1_0_0
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 openssl-1_0_0
SUSE:Linux Enterprise Server for SAP Applications 15 SP5 openssl-1_0_0
SUSE:Linux Enterprise Server for SAP Applications 15 SP6 openssl-1_0_0

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2026:2399-1

This update for openssl-1_0_0 fixes the following issues - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442). - CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - NULL pointer dereference when processing an OCSP response (bsc#1260446).

View original source

05 / REFERENCES

Further evidence