gpp_maybe Security update for openssl-3

SUSE-SL-Micro-6.2-547

This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652). - CVE-2026-28387: potential use-after-free in DANE client code (bsc#1260441). - CVE-2026-28388: NULL pointer dereference when processing a delta (bsc#1260442). - CVE-2026-28389: possible NULL pointer dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443). - CVE-2026-28390: NULL pointer dereference during processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678). - CVE-2026-31789: heap buffer overflow in hexadecimal conversion (bsc#1260444). - CVE-2026-31790: incorrect failure handling in RSA KEM RSASVE encapsulation (bsc#1260445). Other updates and bugfixes: - Enable MD2 in legacy provider (jsc#PED-15724).

• Release Date
  Apr 13 2026
• References
  Bugzilla: 1261678, 1260444, 1260441, 1259652, 1260443, 1260445, 1260442
  CVEs: CVE-2026-28387, CVE-2026-31789, CVE-2026-28388, CVE-2026-28390, CVE-2026-31790, CVE-2026-2673, CVE-2026-28389
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.2 ppc64le

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.5.0-160000.7.1 lock rpm

  libopenssl-3-fips-provider
  OpenSSL FIPS provider

  3.5.0-160000.7.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.5.0-160000.7.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.5.0-160000.7.1 lock rpm

SUSE Linux Micro 6.2 s390x

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.5.0-160000.7.1 lock rpm

  libopenssl-3-fips-provider
  OpenSSL FIPS provider

  3.5.0-160000.7.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.5.0-160000.7.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.5.0-160000.7.1 lock rpm

SUSE Linux Micro 6.2 aarch64

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.5.0-160000.7.1 lock rpm

  libopenssl-3-fips-provider
  OpenSSL FIPS provider

  3.5.0-160000.7.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.5.0-160000.7.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.5.0-160000.7.1 lock rpm

SUSE Linux Micro 6.2 x86_64

• Packages
  libopenssl-3-devel
  Development files for OpenSSL

  3.5.0-160000.7.1 lock rpm

  libopenssl-3-fips-provider
  OpenSSL FIPS provider

  3.5.0-160000.7.1 lock rpm

  libopenssl3
  Secure Sockets and Transport Layer Security

  3.5.0-160000.7.1 lock rpm

  openssl-3
  Secure Sockets and Transport Layer Security

  3.5.0-160000.7.1 lock rpm