SUSE-SU-2026:1605-1

Опубликовано: 24 апр. 2026

Источник: suse-cvrf

Описание

Security update for openssl-3

This update for openssl-3 fixes the following issue:

Security issues fixed:

CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

Other updates and bugfixes:

Enable MD2 in legacy provider (jsc#PED-15724).

Список пакетов

Container suse/ltss/sle15.6/bci-base-fips:latest

libopenssl3-3.1.4-150600.5.50.1

Container suse/ltss/sle15.6/sle15:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/proxy-httpd:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/proxy-salt-broker:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/proxy-squid:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/proxy-ssh:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/proxy-tftpd:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/server-attestation:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/server-migration-14-16:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

Container suse/manager/5.0/x86_64/server:latest

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-Azure-3P

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-Azure-Basic

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-Azure-Standard

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-BYOS

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-BYOS-Azure

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-BYOS-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-BYOS-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-CHOST-BYOS

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-CHOST-BYOS-Azure

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-CHOST-BYOS-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-CHOST-BYOS-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-CHOST-BYOS-GDC

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-EC2-ECS-HVM

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-HPC

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-HPC-Azure

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-HPC-BYOS

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-HPC-BYOS-Azure

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-HPC-BYOS-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-HPC-BYOS-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-HPC-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-HPC-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-Hardened-BYOS

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-Hardened-BYOS-Azure

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-Hardened-BYOS-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-Hardened-BYOS-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Azure

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Azure-3P

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-BYOS

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-BYOS-Azure

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-BYOS-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-BYOS-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-EC2

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-GCE

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Hardened

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Hardened-Azure

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Hardened-BYOS

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Hardened-EC2

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAP-Hardened-GCE

libopenssl3-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAPCAL

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAPCAL-Azure

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAPCAL-EC2

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Image SLES15-SP6-SAPCAL-GCE

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

SUSE Linux Enterprise Server 15 SP6-LTSS

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl-3-fips-provider-32bit-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

libopenssl-3-devel-3.1.4-150600.5.50.1

libopenssl-3-fips-provider-3.1.4-150600.5.50.1

libopenssl-3-fips-provider-32bit-3.1.4-150600.5.50.1

libopenssl3-3.1.4-150600.5.50.1

libopenssl3-32bit-3.1.4-150600.5.50.1

openssl-3-3.1.4-150600.5.50.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261605-1/
Link for SUSE-SU-2026:1605-1
https://lists.suse.com/pipermail/sle-updates/2026-April/045935.html
E-Mail link for SUSE-SU-2026:1605-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1261678
SUSE Bug 1261678
https://www.suse.com/security/cve/CVE-2026-28390/
SUSE CVE CVE-2026-28390 page

Описание

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.

Затронутые продукты

Container suse/ltss/sle15.6/bci-base-fips:latest:libopenssl3-3.1.4-150600.5.50.1

Container suse/ltss/sle15.6/sle15:latest:libopenssl-3-fips-provider-3.1.4-150600.5.50.1

Container suse/ltss/sle15.6/sle15:latest:libopenssl3-3.1.4-150600.5.50.1

Container suse/ltss/sle15.6/sle15:latest:openssl-3-3.1.4-150600.5.50.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-28390.html
CVE-2026-28390
https://bugzilla.suse.com/1261678
SUSE Bug 1261678

SUSE-SU-2026:1605-1

Описание

Список пакетов

Container suse/ltss/sle15.6/bci-base-fips:latest

Container suse/ltss/sle15.6/sle15:latest

Container suse/manager/5.0/x86_64/proxy-httpd:latest

Container suse/manager/5.0/x86_64/proxy-salt-broker:latest

Container suse/manager/5.0/x86_64/proxy-squid:latest

Container suse/manager/5.0/x86_64/proxy-ssh:latest

Container suse/manager/5.0/x86_64/proxy-tftpd:latest

Container suse/manager/5.0/x86_64/server-attestation:latest

Container suse/manager/5.0/x86_64/server-hub-xmlrpc-api:latest

Container suse/manager/5.0/x86_64/server-migration-14-16:latest

Container suse/manager/5.0/x86_64/server:latest

Image SLES15-SP6

Image SLES15-SP6-Azure-3P

Image SLES15-SP6-Azure-Basic

Image SLES15-SP6-Azure-Standard

Image SLES15-SP6-BYOS

Image SLES15-SP6-BYOS-Azure

Image SLES15-SP6-BYOS-EC2

Image SLES15-SP6-BYOS-GCE

Image SLES15-SP6-CHOST-BYOS

Image SLES15-SP6-CHOST-BYOS-Aliyun

Image SLES15-SP6-CHOST-BYOS-Azure

Image SLES15-SP6-CHOST-BYOS-EC2

Image SLES15-SP6-CHOST-BYOS-GCE

Image SLES15-SP6-CHOST-BYOS-GDC

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

Image SLES15-SP6-EC2

Image SLES15-SP6-EC2-ECS-HVM

Image SLES15-SP6-GCE

Image SLES15-SP6-HPC

Image SLES15-SP6-HPC-Azure

Image SLES15-SP6-HPC-BYOS

Image SLES15-SP6-HPC-BYOS-Azure

Image SLES15-SP6-HPC-BYOS-EC2

Image SLES15-SP6-HPC-BYOS-GCE

Image SLES15-SP6-HPC-EC2

Image SLES15-SP6-HPC-GCE

Image SLES15-SP6-Hardened-BYOS

Image SLES15-SP6-Hardened-BYOS-Azure

Image SLES15-SP6-Hardened-BYOS-EC2

Image SLES15-SP6-Hardened-BYOS-GCE

Image SLES15-SP6-SAP

Image SLES15-SP6-SAP-Azure

Image SLES15-SP6-SAP-Azure-3P

Image SLES15-SP6-SAP-BYOS

Image SLES15-SP6-SAP-BYOS-Azure

Image SLES15-SP6-SAP-BYOS-EC2

Image SLES15-SP6-SAP-BYOS-GCE

Image SLES15-SP6-SAP-EC2

Image SLES15-SP6-SAP-GCE

Image SLES15-SP6-SAP-Hardened

Image SLES15-SP6-SAP-Hardened-Azure

Image SLES15-SP6-SAP-Hardened-BYOS

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

Image SLES15-SP6-SAP-Hardened-EC2

Image SLES15-SP6-SAP-Hardened-GCE

Image SLES15-SP6-SAPCAL

Image SLES15-SP6-SAPCAL-Azure

Image SLES15-SP6-SAPCAL-EC2

Image SLES15-SP6-SAPCAL-GCE

SUSE Linux Enterprise Server 15 SP6-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP6

Ссылки

Уязвимость: CVE-2026-28390

Описание

Затронутые продукты

Ссылки