Security update for openssl-1_1
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for openssl-1_1 fixes the following issues: - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357). - CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349). - CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341). - CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340). - CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1266340
- https://bugzilla.suse.com/1266341
- https://bugzilla.suse.com/1266342
- https://bugzilla.suse.com/1266349
- https://bugzilla.suse.com/1266357
- https://www.suse.com/security/cve/CVE-2026-34180
- https://www.suse.com/security/cve/CVE-2026-42766
- https://www.suse.com/security/cve/CVE-2026-45447
- https://www.suse.com/security/cve/CVE-2026-7383
- https://www.suse.com/security/cve/CVE-2026-9076
- https://www.suse.com/support/update/announcement/2026/suse-su-20262403-1/