Bugs fixes in "openssl"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-42770 | Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X ... | 2026-06-09 |
| CVE | CVE-2026-42769 | Issue Summary: An error in the callback used to verify the certificate ... | 2026-06-09 |
| CVE | CVE-2026-42768 | Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnera ... | 2026-06-09 |
| CVE | CVE-2026-42767 | Issue summary: An attacker-controlled CMP (Certificate Management Prot ... | 2026-06-09 |
| CVE | CVE-2026-42766 | Issue summary: A specially crafted password-encrypted CMS message can ... | 2026-06-09 |
| CVE | CVE-2026-42764 | Issue summary: Receiving a QUIC initial packet with an invalid token m ... | 2026-06-09 |
| CVE | CVE-2026-34183 | Issue summary: Remote peer may exhaust heap memory of the QUIC server ... | 2026-06-09 |
| CVE | CVE-2026-34182 | Issue Summary: Cryptographic Message Services (CMS) processing fails t ... | 2026-06-09 |
| CVE | CVE-2026-34181 | Issue Summary: The PKCS#12 file processing fails to perform sufficient ... | 2026-06-09 |
| CVE | CVE-2026-34180 | Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a pr ... | 2026-06-09 |
| CVE | CVE-2026-31790 | Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer t | 2026-04-09 |
| CVE | CVE-2026-31789 | Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impac | 2026-04-09 |
| CVE | CVE-2026-28390 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact | 2026-04-09 |
| CVE | CVE-2026-28389 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact sum | 2026-04-09 |
| CVE | CVE-2026-28388 | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CR | 2026-04-09 |
| CVE | CVE-2026-28387 | Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA reco | 2026-04-09 |
| CVE | CVE-2026-31790 | Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer t | 2026-04-09 |
| CVE | CVE-2026-31789 | Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impac | 2026-04-09 |
| CVE | CVE-2026-28390 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact | 2026-04-09 |
| CVE | CVE-2026-28389 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact sum | 2026-04-09 |
About
-
Send Feedback to @ubuntu_updates
