shield Security update for openssl-1_1

SUSE-SLE-Module-Legacy-15-SP7-2026-331

This update for openssl-1_1 fixes the following issues: - CVE-2026-22795: Missing ASN1_TYPE validation in PKCS#12 parsing (bsc#1256839). - CVE-2025-69420: Missing ASN1_TYPE validation in TS_RESP_verify_response() function (bsc#1256837). - CVE-2025-69421: NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (bsc#1256838). - CVE-2026-22796: ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (bsc#1256840). - CVE-2025-68160: Heap out-of-bounds write in BIO_f_linebuffer on short writes (bsc#1256834). - CVE-2025-69418: Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (bsc#1256835). - CVE-2025-69419: Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (bsc#1256836).

Release Date

Jan 28 2026
References

Bugzilla: 1256840, 1256839, 1256834, 1256837, 1256838, 1256835, 1256836
CVEs: CVE-2025-68160, CVE-2025-69419, CVE-2025-69420, CVE-2026-22796, CVE-2025-69418, CVE-2025-69421, CVE-2026-22795
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Legacy Module 15.7 aarch64

Packages

openssl-1_1
Secure Sockets and Transport Layer Security

1.1.1w-150700.11.11.1 lock rpm lock src

Legacy Module 15.7 ppc64le

Packages

openssl-1_1
Secure Sockets and Transport Layer Security

1.1.1w-150700.11.11.1 lock rpm lock src

Legacy Module 15.7 s390x

Packages

openssl-1_1
Secure Sockets and Transport Layer Security

1.1.1w-150700.11.11.1 lock rpm lock src

Legacy Module 15.7 x86_64

Packages

openssl-1_1
Secure Sockets and Transport Layer Security

1.1.1w-150700.11.11.1 lock rpm lock src