gpp_maybe Security update for openssl-3-livepatches

SUSE-SLE-Module-Live-Patching-15-SP6-2026-4038

This update for openssl-3-livepatches fixes the following issues: - CVE-2026-14457: RPK server signature algorithm selection can dereference a missing certificate (bsc#1275145, bsc#1274792). - CVE-2026-63072: heap buffer overflow in CMS key unwrapping (bsc#1275133, bsc#1274788). - CVE-2026-63076: invalid pointer dereference in CMP server via crafted `protectionAlg` (bsc#1275143, bsc#1274790).

• Release Date
  Sep 7 2026
• References
  Bugzilla: 1274788, 1274790, 1274792, 1275133, 1275143, 1275145
  CVEs: CVE-2026-14457, CVE-2026-63072, CVE-2026-63076
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.6 x86_64

• Packages
  openssl-3-livepatches
  Livepatches for OpenSSL-3

  0.6-150600.13.19.1 lock rpm lock src