Bugs fixes in "openssl"
| Origin | Bug number | Title | Date fixed |
|---|---|---|---|
| CVE | CVE-2026-28388 | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CR | 2026-04-09 |
| CVE | CVE-2026-28387 | Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA reco | 2026-04-09 |
| CVE | CVE-2026-31790 | Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer t | 2026-04-08 |
| CVE | CVE-2026-31789 | Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impac | 2026-04-08 |
| CVE | CVE-2026-28390 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact | 2026-04-08 |
| CVE | CVE-2026-28389 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact sum | 2026-04-08 |
| CVE | CVE-2026-28388 | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CR | 2026-04-08 |
| CVE | CVE-2026-28387 | Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA reco | 2026-04-08 |
| CVE | CVE-2026-31790 | Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer t | 2026-04-08 |
| CVE | CVE-2026-31789 | Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impac | 2026-04-08 |
| CVE | CVE-2026-28390 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact | 2026-04-08 |
| CVE | CVE-2026-28389 | Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact sum | 2026-04-08 |
| CVE | CVE-2026-28388 | Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CR | 2026-04-08 |
| CVE | CVE-2026-28387 | Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA reco | 2026-04-08 |
| CVE | CVE-2026-22796 | Issue summary: A type confusion vulnerability exists in the signature ... | 2026-01-29 |
| CVE | CVE-2026-22795 | Issue summary: An invalid or NULL pointer dereference can happen in an ... | 2026-01-29 |
| CVE | CVE-2025-69421 | Issue summary: Processing a malformed PKCS#12 file can trigger a NULL ... | 2026-01-29 |
| CVE | CVE-2025-69420 | Issue summary: A type confusion vulnerability exists in the TimeStamp ... | 2026-01-29 |
| CVE | CVE-2025-69419 | Issue summary: Calling PKCS12_get_friendlyname() function on a malicio ... | 2026-01-29 |
| CVE | CVE-2025-69418 | Issue summary: When using the low-level OCB API directly with AES-NI o ... | 2026-01-29 |
About
-
Send Feedback to @ubuntu_updates
