< back to search

gpp_maybe Security update for openssl-1_1-livepatches

SUSE-SLE-Module-Live-Patching-15-SP6-2026-4036

This update for openssl-1_1-livepatches fixes the following issues: - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788). - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712, bsc#1271713).

Release Date

Sep 7 2026
References

Bugzilla: 1271712, 1271713, 1274788, 1275133
CVEs: CVE-2026-63072
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Live Patching 15.6 x86_64

Packages

openssl-1_1-livepatches
Livepatches for OpenSSL

0.8-150600.11.9.1 lock rpm lock src