SUSE-SU-2026:1256-1
Vulnerability from csaf_suse - Published: 2026-04-10 14:57 - Updated: 2026-04-10 14:57Summary
Security update for openssl-1_0_0
Severity
Important
Notes
Title of the patch: Security update for openssl-1_0_0
Description of the patch: This update for openssl-1_0_0 fixes the following issues:
- CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441).
- CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442).
- CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443).
- CVE-2026-31789: Heap buffer overflow in hexadecimal conversion (bsc#1260444).
- CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE encapsulation (bsc#1260445).
Patchnames: SUSE-2026-1256,SUSE-SLE-SERVER-12-SP5-LTSS-2026-1256,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1256
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.5 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
5.3 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
7.3 (High)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
6.5 (Medium)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for openssl-1_0_0",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2026-28387: Potential use-after-free in DANE client code (bsc#1260441).\n- CVE-2026-28388: NULL Pointer Dereference When Processing a Delta CRL (bsc#1260442).\n- CVE-2026-28389: Possible NULL dereference when processing CMS KeyAgreeRecipientInfo (bsc#1260443).\n- CVE-2026-31789: Heap buffer overflow in hexadecimal conversion (bsc#1260444).\n- CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE encapsulation (bsc#1260445).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1256,SUSE-SLE-SERVER-12-SP5-LTSS-2026-1256,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-1256",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1256-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1256-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261256-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1256-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045371.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260441",
"url": "https://bugzilla.suse.com/1260441"
},
{
"category": "self",
"summary": "SUSE Bug 1260442",
"url": "https://bugzilla.suse.com/1260442"
},
{
"category": "self",
"summary": "SUSE Bug 1260443",
"url": "https://bugzilla.suse.com/1260443"
},
{
"category": "self",
"summary": "SUSE Bug 1260444",
"url": "https://bugzilla.suse.com/1260444"
},
{
"category": "self",
"summary": "SUSE Bug 1260445",
"url": "https://bugzilla.suse.com/1260445"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-28387 page",
"url": "https://www.suse.com/security/cve/CVE-2026-28387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-28388 page",
"url": "https://www.suse.com/security/cve/CVE-2026-28388/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-28389 page",
"url": "https://www.suse.com/security/cve/CVE-2026-28389/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31789 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31789/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-31790 page",
"url": "https://www.suse.com/security/cve/CVE-2026-31790/"
}
],
"title": "Security update for openssl-1_0_0",
"tracking": {
"current_release_date": "2026-04-10T14:57:18Z",
"generator": {
"date": "2026-04-10T14:57:18Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1256-1",
"initial_release_date": "2026-04-10T14:57:18Z",
"revision_history": [
{
"date": "2026-04-10T14:57:18Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"product_id": "libopenssl1_0_0-1.0.2p-3.106.1.aarch64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"product_id": "openssl-1_0_0-1.0.2p-3.106.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.106.1.aarch64_ilp32",
"product": {
"name": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.106.1.aarch64_ilp32",
"product_id": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.106.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-64bit-1.0.2p-3.106.1.aarch64_ilp32",
"product": {
"name": "libopenssl1_0_0-64bit-1.0.2p-3.106.1.aarch64_ilp32",
"product_id": "libopenssl1_0_0-64bit-1.0.2p-3.106.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.106.1.aarch64_ilp32",
"product": {
"name": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.106.1.aarch64_ilp32",
"product_id": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.106.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.i586",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.i586",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.106.1.i586",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.i586",
"product_id": "libopenssl1_0_0-1.0.2p-3.106.1.i586"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.i586",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.i586",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.i586"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.106.1.i586",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.i586",
"product_id": "openssl-1_0_0-1.0.2p-3.106.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"product": {
"name": "openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"product_id": "openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"product_id": "libopenssl1_0_0-1.0.2p-3.106.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"product_id": "openssl-1_0_0-1.0.2p-3.106.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.106.1.s390",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.s390",
"product_id": "libopenssl1_0_0-1.0.2p-3.106.1.s390"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.106.1.s390",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.s390",
"product_id": "openssl-1_0_0-1.0.2p-3.106.1.s390"
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"product": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"product_id": "libopenssl1_0_0-1.0.2p-3.106.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"product_id": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.106.1.s390x",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.s390x",
"product_id": "openssl-1_0_0-1.0.2p-3.106.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"product_id": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"product": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"product": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"product_id": "libopenssl1_0_0-1.0.2p-3.106.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"product": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"product_id": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64"
}
},
{
"category": "product_version",
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"product": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64"
}
},
{
"category": "product_version",
"name": "openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"product": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"product_id": "openssl-1_0_0-1.0.2p-3.106.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x"
},
"product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.106.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-doc-1.0.2p-3.106.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
},
"product_reference": "openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64"
},
"product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-1.0.2p-3.106.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64"
},
"product_reference": "openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1_0_0-doc-1.0.2p-3.106.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
},
"product_reference": "openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-28387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-28387"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as \u0027unusable\u0027 any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-28387",
"url": "https://www.suse.com/security/cve/CVE-2026-28387"
},
{
"category": "external",
"summary": "SUSE Bug 1260441 for CVE-2026-28387",
"url": "https://bugzilla.suse.com/1260441"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-10T14:57:18Z",
"details": "moderate"
}
],
"title": "CVE-2026-28387"
},
{
"cve": "CVE-2026-28388",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-28388"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-28388",
"url": "https://www.suse.com/security/cve/CVE-2026-28388"
},
{
"category": "external",
"summary": "SUSE Bug 1260442 for CVE-2026-28388",
"url": "https://bugzilla.suse.com/1260442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-10T14:57:18Z",
"details": "important"
}
],
"title": "CVE-2026-28388"
},
{
"cve": "CVE-2026-28389",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-28389"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-28389",
"url": "https://www.suse.com/security/cve/CVE-2026-28389"
},
{
"category": "external",
"summary": "SUSE Bug 1260443 for CVE-2026-28389",
"url": "https://bugzilla.suse.com/1260443"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-10T14:57:18Z",
"details": "moderate"
}
],
"title": "CVE-2026-28389"
},
{
"cve": "CVE-2026-31789",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31789"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31789",
"url": "https://www.suse.com/security/cve/CVE-2026-31789"
},
{
"category": "external",
"summary": "SUSE Bug 1260444 for CVE-2026-31789",
"url": "https://bugzilla.suse.com/1260444"
},
{
"category": "external",
"summary": "SUSE Bug 1260931 for CVE-2026-31789",
"url": "https://bugzilla.suse.com/1260931"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-10T14:57:18Z",
"details": "important"
}
],
"title": "CVE-2026-31789"
},
{
"cve": "CVE-2026-31790",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-31790"
}
],
"notes": [
{
"category": "general",
"text": "Issue summary: Applications using RSASVE key encapsulation to establish\na secret encryption key can send contents of an uninitialized memory buffer to\na malicious peer.\n\nImpact summary: The uninitialized buffer might contain sensitive data from the\nprevious execution of the application process which leads to sensitive data\nleakage to an attacker.\n\nRSA_public_encrypt() returns the number of bytes written on success and -1\non error. The affected code tests only whether the return value is non-zero.\nAs a result, if RSA encryption fails, encapsulation can still return success to\nthe caller, set the output lengths, and leave the caller to use the contents of\nthe ciphertext buffer as if a valid KEM ciphertext had been produced.\n\nIf applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an\nattacker-supplied invalid RSA public key without first validating that key,\nthen this may cause stale or uninitialized contents of the caller-provided\nciphertext buffer to be disclosed to the attacker in place of the KEM\nciphertext.\n\nAs a workaround calling EVP_PKEY_public_check() or\nEVP_PKEY_public_check_quick() before EVP_PKEY_encapsulate() will mitigate\nthe issue.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.1 and 3.0 are affected by this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-31790",
"url": "https://www.suse.com/security/cve/CVE-2026-31790"
},
{
"category": "external",
"summary": "SUSE Bug 1260445 for CVE-2026-31790",
"url": "https://bugzilla.suse.com/1260445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl-1_0_0-devel-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libopenssl1_0_0-hmac-32bit-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-1.0.2p-3.106.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:openssl-1_0_0-doc-1.0.2p-3.106.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-10T14:57:18Z",
"details": "moderate"
}
],
"title": "CVE-2026-31790"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…