< back to search

shield Security update for openssl-3

SUSE-SLE-Micro-5.4-2026-3094

This update for openssl-3 fixes the following issues - CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344). - CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).

Release Date

Jul 17 2026
References

Bugzilla: 1266344, 1266350
CVEs: CVE-2026-34182, CVE-2026-42767
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.4 aarch64

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.90.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.90.1 lock src

SUSE Linux Enterprise Micro 5.4 s390x

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.90.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.90.1 lock src

SUSE Linux Enterprise Micro 5.4 x86_64

Packages

libopenssl3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.90.1 lock rpm

openssl-3
Secure Sockets and Transport Layer Security

3.0.8-150400.4.90.1 lock src