CVE-Katalog
CVE-2025-11187
OpenSSL vulnerabilities
- Schweregrad
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 5.14% · Oct 22, 2026
Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do not support PBMAC1 in PKCS#12.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | not affected |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u1 | not affected |
| Ubuntu | openssl | noble | Not reported | not affected |
| Ubuntu | openssl | noble | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | libssl-dev | noble | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | libssl-doc | noble | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | libssl3t64 | noble | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.9 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.10 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.12 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.13 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.14 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.15 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.16 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.17 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.18 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.19 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.20 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.21 | fixed |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.5 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.6 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.7 | fixed |
| Ubuntu | openssl | 25.10 | 3.4.1-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.0-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.2-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu3 | fixed |
| Alpine | openssl | 3.22 | 3.5.5-r0 | fixed |
| Alpine | openssl | 3.23 | 3.5.5-r0 | fixed |
| Alpine | openssl | 3.24 | 3.5.5-r0 | fixed |
| Suse | openssl-3-livepatches | linux enterprise live patching 15 sp7 | 0.4-150700.16.6.1 | fixed |
| Suse | openssl-3-livepatches | linux micro 6.1 | 0.4-slfo.1.1_1.1 | fixed |
| Suse | openssl-3-livepatches | linux enterprise live patching 15 sp6 | 0.4-150600.13.11.1 | fixed |
| Ubuntu | nodejs | pro | 12.22.5~dfsg-5ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.7~dfsg-2ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.7~dfsg-2ubuntu3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu2 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.2 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.4 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.5 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.6 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.6+esm2 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.4.1-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.0-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.2-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu3 | fixed |
| Ubuntu | openssl | 26.04 | 3.5.3-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 26.04 | 3.5.5-1ubuntu1 | fixed |
| Opensuse | openssl-3 | leap 16.0 | 3.5.0-160000.5.1 | fixed |
| Opensuse | openssl-3 | tumbleweed | 3.5.3-2.1 | fixed |
| Suse | openssl-3-livepatches | linux enterprise server 16.0 | 0.3-160000.1.1 | fixed |
| Suse | openssl-3-livepatches | linux enterprise server for sap applications 16.0 | 0.3-160000.1.1 | fixed |
| Suse | openssl-3-livepatches | linux micro 6.2 | 0.3-160000.1.1 | fixed |
| Suse | openssl-3 | linux enterprise server 16.0 | 3.5.0-160000.5.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 16.0 | 3.5.0-160000.5.1 | fixed |
| Suse | openssl-3 | linux micro 6.2 | 3.5.0-160000.5.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.5.5-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.5.5-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 3.5.4-1~deb13u2 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | Not affected | unimportant | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.13-0ubuntu3.7 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-dev | deb | noble | 3.0.13-0ubuntu3.7 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-doc | deb | noble | 3.0.13-0ubuntu3.7 | Not reported | Not reported | Not reported |
| Ubuntu | libssl3t64 | deb | noble | 3.0.13-0ubuntu3.7 | Not reported | Not reported | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.21 | Not reported | USN-7980-1 | Not reported |
| Ubuntu | openssl | deb | 24.04 | 3.0.13-0ubuntu3.7 | Not reported | USN-7980-1 | Not reported |
| Ubuntu | openssl | deb | 25.10 | 3.5.3-1ubuntu3 | Not reported | USN-7980-1 | Not reported |
| Alpine | openssl | apk | 3.22 | 3.5.5-r0 | Not reported | ALPINE-CVE-2025-11187 | Not reported |
| Alpine | openssl | apk | 3.23 | 3.5.5-r0 | Not reported | ALPINE-CVE-2025-11187 | Not reported |
| Alpine | openssl | apk | 3.24 | 3.5.5-r0 | Not reported | ALPINE-CVE-2025-11187 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux enterprise live patching 15 sp7 | 0.4-150700.16.6.1 | Not reported | SUSE-SU-2026:2662-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux micro 6.1 | 0.4-slfo.1.1_1.1 | Not reported | SUSE-SU-2026:22143-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux enterprise live patching 15 sp6 | 0.4-150600.13.11.1 | Not reported | SUSE-SU-2026:2411-1 | Not reported |
| Ubuntu | openssl | deb | 25.10 | 3.5.3-1ubuntu3 | Not reported | UBUNTU-CVE-2025-11187 | Not reported |
| Ubuntu | openssl | deb | 26.04 | 3.5.5-1ubuntu1 | Not reported | UBUNTU-CVE-2025-11187 | Not reported |
| Opensuse | openssl-3 | rpm | leap 16.0 | 3.5.0-160000.5.1 | Not reported | OPENSUSE-SU-2026:20152-1 | Not reported |
| Opensuse | openssl-3 | rpm | tumbleweed | 3.5.3-2.1 | Not reported | OPENSUSE-SU-2026:10237-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux enterprise server 16.0 | 0.3-160000.1.1 | Not reported | SUSE-SU-2026:20607-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux enterprise server for sap applications 16.0 | 0.3-160000.1.1 | Not reported | SUSE-SU-2026:20607-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux micro 6.2 | 0.3-160000.1.1 | Not reported | SUSE-SU-2026:20542-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 16.0 | 3.5.0-160000.5.1 | Not reported | SUSE-SU-2026:20223-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 16.0 | 3.5.0-160000.5.1 | Not reported | SUSE-SU-2026:20223-1 | Not reported |
| Suse | openssl-3 | rpm | linux micro 6.2 | 3.5.0-160000.5.1 | Not reported | SUSE-SU-2026:20211-1 | Not reported |
OpenFactory catalog packages
Die Paketzuordnung läuft.
[Debian 12 (Bookworm)]
- [libssl3]Unbekannt
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
- [libssl-dev]Unbekannt
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
- [libssl-doc]Unbekannt
Quellpaket: [openssl]
Details (6)
3.0.20-1~deb12u2· all · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· all · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· all · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
- [openssl]Unbekannt
Details (6)
3.0.20-1~deb12u2· amd64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookwormNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· amd64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.20-1~deb12u2· arm64 · bookworm-securityNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· amd64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
3.0.17-1~deb12u2· arm64 · bookworm-updatesNicht betroffen
usn · openssl · debian · bookworm
[Debian 13 (Trixie)]
- [libssl3t64]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [libssl-dev]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [libssl-doc]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· all · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· all · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· all · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· all · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· all · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [openssl]Unbekannt
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [openssl-provider-fips]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
- [openssl-provider-legacy]Unbekannt
Quellpaket: [openssl]
Details (6)
3.5.6-1~deb13u2· amd64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· arm64 · trixieBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.6-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· amd64 · trixie-security · Historical versionBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u2· arm64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
3.5.7-1~deb13u3· amd64 · trixie-securityBehoben · Behoben:
3.5.4-1~deb13u2usn · openssl · debian · 13
[openSUSE Tumbleweed]
- [libopenssl3]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl3-32bit]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-devel]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-devel-32bit]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider-32bit]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl-3-fips-provider-x86-64-v3]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [libopenssl3-x86-64-v3]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
- [openssl-3]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· x86_64 · tumbleweedBehoben · Behoben:
3.5.3-2.1usn · openssl-3 · opensuse · tumbleweed
- [openssl-3-doc]Unbekannt
Quellpaket: [openssl-3]
Details (1)
3.5.3-8.1· noarch · tumbleweedUnbekannt · Behoben:
3.5.3-2.1Version impact unknown
usn · openssl-3 · opensuse · tumbleweed
Beobachtet:
Referenzen
- [https://access.redhat.com/errata/RHSA-2026:1496]
- [https://ftp.suse.com/pub/projects/security/]
- [https://osv.dev/vulnerability/ALPINE-CVE-2025-11187]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2025-11187]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20211-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20223-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20542-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:20607-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22143-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2411-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2662-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-11187]
- [https://osv.dev/vulnerability/USN-7980-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:10237-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:20152-1]
- [https://security-tracker.debian.org/tracker/CVE-2025-11187]
- [https://ubuntu.com/security/notices/USN-7980-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1730.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]