critical Security update for openssl-3-livepatches

SUSE-SL-Micro-6.2-298

This update for openssl-3-livepatches fixes the following issues: - CVE-2025-11187: Fixed improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Fixed stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876). - CVE-2025-15468: Fixed NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256880). - CVE-2025-9230: Fixed out-of-bounds read & write in RFC 3211 KEK Unwrap (bsc#1250410).

• Release Date
  Feb 18 2026
• References
  Bugzilla: 1250410, 1256878, 1256880, 1256876
  CVEs: CVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-9230
• Type
  security
• Severity
  critical

cloud_download Downloads

SUSE Linux Micro 6.2 ppc64le

• Packages
  openssl-3-livepatches
  Livepatches for OpenSSL-3

  0.3-160000.1.1 lock rpm

SUSE Linux Micro 6.2 x86_64

• Packages
  openssl-3-livepatches
  Livepatches for OpenSSL-3

  0.3-160000.1.1 lock rpm