gpp_maybe Security update for openssl-3-livepatches

SUSE-SLE-Micro-6.1-575

This update for openssl-3-livepatches fixes the following issues - CVE-2025-11187: Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (bsc#1256878). - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing (bsc#1256876). - CVE-2025-15468: NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (bsc#1256880). - CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266389, bsc#1266357).

• Release Date
  Jun 11 2026
• References
  Bugzilla: 1256876, 1256878, 1256880, 1266357, 1266389
  CVEs: CVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2026-45447
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.1 x86_64

• Packages
  openssl-3-livepatches
  Livepatches for OpenSSL-3

  0.4-slfo.1.1_1.1 lock rpm