exploitDog

SUSE-SU-2026:3443-1

Опубликовано: 31 июл. 2026

Источник: suse-cvrf

Описание

Security update for openssl-1_0_0

This update for openssl-1_0_0 fixes the following issue:

CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise Module for Legacy 15 SP7

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise Server 15 SP4-LTSS

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise Server 15 SP5-LTSS

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise Server 15 SP6-LTSS

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise Server for SAP Applications 15 SP4

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise Server for SAP Applications 15 SP5

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise Server for SAP Applications 15 SP6

libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

libopenssl10-1.0.2p-150000.3.111.2

libopenssl1_0_0-1.0.2p-150000.3.111.2

libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

openssl-1_0_0-1.0.2p-150000.3.111.2

Ссылки

Описание

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.

Затронутые продукты

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libopenssl-1_0_0-devel-1.0.2p-150000.3.111.2

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libopenssl10-1.0.2p-150000.3.111.2

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libopenssl1_0_0-1.0.2p-150000.3.111.2

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libopenssl1_0_0-hmac-1.0.2p-150000.3.111.2

Ссылки