SUSE-SU-2026:1550-1

Опубликовано: 22 апр. 2026

Источник: suse-cvrf

Описание

Security update for openssl-1_1

This update for openssl-1_1 fixes the following issues:

CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

Список пакетов

Container suse/ltss/sle15.5/sle15:latest

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Container suse/sle-micro/5.5/toolbox:latest

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Container suse/sle-micro/5.5:latest

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Container suse/sle-micro/base-5.5:latest

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Container suse/sle-micro/kvm-5.5:latest

libopenssl1_1-1.1.1l-150500.17.54.1

Container suse/sle-micro/rt-5.5:latest

libopenssl1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Azure-3P

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Azure-Basic

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Azure-Standard

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-CHOST-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-CHOST-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-CHOST-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-CHOST-BYOS-GDC

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-HPC-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-HPC-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-HPC-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-HPC-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Hardened-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Hardened-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Hardened-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Micro-5-5

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Micro-5-5-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Micro-5-5-BYOS

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Micro-5-5-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-Micro-5-5-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-Azure-3P

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-Hardened-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAP-Hardened-GCE

libopenssl1_1-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAPCAL-Azure

libopenssl-1_1-devel-1.1.1l-150500.17.54.1

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-32bit-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAPCAL-EC2

libopenssl-1_1-devel-1.1.1l-150500.17.54.1

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-32bit-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Image SLES15-SP5-SAPCAL-GCE

libopenssl-1_1-devel-1.1.1l-150500.17.54.1

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-32bit-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

libopenssl-1_1-devel-1.1.1l-150500.17.54.1

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-32bit-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-32bit-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

libopenssl-1_1-devel-1.1.1l-150500.17.54.1

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-32bit-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-32bit-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

SUSE Linux Enterprise Micro 5.5

libopenssl-1_1-devel-1.1.1l-150500.17.54.1

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

SUSE Linux Enterprise Server 15 SP5-LTSS

libopenssl-1_1-devel-1.1.1l-150500.17.54.1

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-32bit-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-32bit-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

libopenssl-1_1-devel-1.1.1l-150500.17.54.1

libopenssl1_1-1.1.1l-150500.17.54.1

libopenssl1_1-32bit-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-1.1.1l-150500.17.54.1

libopenssl1_1-hmac-32bit-1.1.1l-150500.17.54.1

openssl-1_1-1.1.1l-150500.17.54.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261550-1/
Link for SUSE-SU-2026:1550-1
https://lists.suse.com/pipermail/sle-updates/2026-April/045868.html
E-Mail link for SUSE-SU-2026:1550-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1261678
SUSE Bug 1261678
https://www.suse.com/security/cve/CVE-2026-28390/
SUSE CVE CVE-2026-28390 page

Описание

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.

Затронутые продукты

Container suse/ltss/sle15.5/sle15:latest:libopenssl1_1-1.1.1l-150500.17.54.1

Container suse/ltss/sle15.5/sle15:latest:libopenssl1_1-hmac-1.1.1l-150500.17.54.1

Container suse/ltss/sle15.5/sle15:latest:openssl-1_1-1.1.1l-150500.17.54.1

Container suse/sle-micro/5.5/toolbox:latest:libopenssl1_1-1.1.1l-150500.17.54.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-28390.html
CVE-2026-28390
https://bugzilla.suse.com/1261678
SUSE Bug 1261678

SUSE-SU-2026:1550-1

Описание

Список пакетов

Container suse/ltss/sle15.5/sle15:latest

Container suse/sle-micro/5.5/toolbox:latest

Container suse/sle-micro/5.5:latest

Container suse/sle-micro/base-5.5:latest

Container suse/sle-micro/kvm-5.5:latest

Container suse/sle-micro/rt-5.5:latest

Image SLES15-SP5-Azure-3P

Image SLES15-SP5-Azure-Basic

Image SLES15-SP5-Azure-Standard

Image SLES15-SP5-BYOS-Azure

Image SLES15-SP5-BYOS-EC2

Image SLES15-SP5-BYOS-GCE

Image SLES15-SP5-CHOST-BYOS-Aliyun

Image SLES15-SP5-CHOST-BYOS-Azure

Image SLES15-SP5-CHOST-BYOS-EC2

Image SLES15-SP5-CHOST-BYOS-GCE

Image SLES15-SP5-CHOST-BYOS-GDC

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

Image SLES15-SP5-EC2

Image SLES15-SP5-GCE

Image SLES15-SP5-HPC-Azure

Image SLES15-SP5-HPC-BYOS-Azure

Image SLES15-SP5-HPC-BYOS-EC2

Image SLES15-SP5-HPC-BYOS-GCE

Image SLES15-SP5-Hardened-BYOS-Azure

Image SLES15-SP5-Hardened-BYOS-EC2

Image SLES15-SP5-Hardened-BYOS-GCE

Image SLES15-SP5-Micro-5-5

Image SLES15-SP5-Micro-5-5-Azure

Image SLES15-SP5-Micro-5-5-BYOS

Image SLES15-SP5-Micro-5-5-BYOS-Azure

Image SLES15-SP5-Micro-5-5-BYOS-EC2

Image SLES15-SP5-Micro-5-5-BYOS-GCE

Image SLES15-SP5-Micro-5-5-EC2

Image SLES15-SP5-Micro-5-5-GCE

Image SLES15-SP5-SAP-Azure-3P

Image SLES15-SP5-SAP-BYOS-Azure

Image SLES15-SP5-SAP-BYOS-EC2

Image SLES15-SP5-SAP-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-GCE

Image SLES15-SP5-SAPCAL-Azure

Image SLES15-SP5-SAPCAL-EC2

Image SLES15-SP5-SAPCAL-GCE

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP5

Ссылки

Уязвимость: CVE-2026-28390

Описание

Затронутые продукты

Ссылки