CVE-2026-28390
published 2026-04-07CVE-2026-28390: Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary…
PriorityP344high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.80%
52.7th percentile
Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen.
Impact summary: Applications that process attacker-controlled CMS data may
crash before authentication or cryptographic operations occur resulting in
Denial of Service.
When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with
RSA-OAEP encryption is processed, the optional parameters field of
RSA-OAEP SourceFunc algorithm identifier is examined without checking
for its presence. This results in a NULL pointer dereference if the field
is missing.
Applications and services that call CMS_decrypt() on untrusted input
(e.g., S/MIME processing or CMS-based protocols) are vulnerable.
The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this
issue, as the affected code is outside the OpenSSL FIPS module boundary.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openssl | < openssl 3.0.19-1~deb12u2 (bookworm) | openssl 3.0.19-1~deb12u2 (bookworm) |
| openssl | openssl | >= 0 < 3.5.6-r0 | 3.5.6-r0 |
| openssl | openssl | >= 0 < 3.5.6-r0 | 3.5.6-r0 |
| openssl | openssl | >= 0 < 3.0.19-1~deb12u2 | 3.0.19-1~deb12u2 |
| openssl | openssl | >= 0 < 3.5.5-1~deb13u2 | 3.5.5-1~deb13u2 |
| openssl | openssl | >= 1.0.2 < 1.0.2zp | 1.0.2zp |
| openssl | openssl | >= 1.1.1 < 1.1.1zg | 1.1.1zg |
| openssl | openssl | >= 3.0.0 < 3.0.20 | 3.0.20 |
| openssl | openssl | >= 3.3.0 < 3.3.7 | 3.3.7 |
| openssl | openssl | >= 3.4.0 < 3.4.5 | 3.4.5 |
| openssl | openssl | >= 3.5.0 < 3.5.6 | 3.5.6 |
| openssl | openssl | >= 3.6.0 < 3.6.2 | 3.6.2 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2026-04-09·CVSS 7.5
CVE-2026-28387 [HIGH] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
USN-8155-1 fixed vulnerabilities in OpenSSL. This update provides the
corresponding updates for openssl and openssl1.0 packages for Ubuntu 14.04
LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
Original advisory details:
Viktor Dukhovni discovered that OpenSSL incorrectly negotiated the
expected preferred key exchange group when used as a TLS 1.3 server. This
could result in a less preferred key exchange being used, contrary to
expectations. This issue only affected Ubuntu 25.10. (CVE-2026-2673)
Igor Morgenstern discovered that OpenSSL incorrectly handled certain
memory operations when used as a DANE client. A remote attacker could use
this issue to cause OpenSSL to crash, resulting in
Ubuntu
OpenSSL vulnerabilities
vendor_ubuntu·2026-04-08·CVSS 7.5
CVE-2026-28388 [HIGH] OpenSSL vulnerabilities
Title: OpenSSL vulnerabilities
Summary: Several security issues were fixed in OpenSSL.
Viktor Dukhovni discovered that OpenSSL incorrectly negotiated the expected
preferred key exchange group when used as a TLS 1.3 server. This could
result in a less preferred key exchange being used, contrary to
expectations. This issue only affected Ubuntu 25.10. (CVE-2026-2673)
Igor Morgenstern discovered that OpenSSL incorrectly handled certain memory
operations when used as a DANE client. A remote attacker could use this
issue to cause OpenSSL to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-28387)
Igor Morgenstern discovered that OpenSSL incorrectly handled certain memory
operations when processing a delta CRL. A remote attacker could possibly
use this iss
Red Hat
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
vendor_redhat·2026-04-07·CVSS 7.5
CVE-2026-28390 [HIGH] CWE-476 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
A flaw was found in OpenSSL. A remote attacker could exploit this vulnerability by sending a specially crafted Cryptographic Message Syntax (CMS) EnvelopedData message. During the processing of a KeyTransportRecipientInfo with RSA-OAEP encryption, the system attempts to access an optional parameter field without first verifying its presence. This leads to a NULL pointer dereference, which can cause applications processing the attacker-controlled CMS data to crash, resulting in a Denial of Service (DoS).
Mitigation: Applications that process Cryptographic Message Syntax (CMS) EnvelopedData messages should be configured to only accept input from trusted sources. Restricting network access to
Debian
CVE-2026-28390: openssl - Issue summary: During processing of a crafted CMS EnvelopedData message with Key...
vendor_debian·2026·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390: openssl - Issue summary: During processing of a crafted CMS EnvelopedData message with Key...
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not aff
GHSA
GHSA-fgpp-q3px-3xhc: Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen
ghsa_unreviewed·2026-04-08
CVE-2026-28390 CWE-476 GHSA-fgpp-q3px-3xhc: Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen
Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen.
Impact summary: Applications that process attacker-controlled CMS data may
crash before authentication or cryptographic operations occur resulting in
Denial of Service.
When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with
RSA-OAEP encryption is processed, the optional parameters field of
RSA-OAEP SourceFunc algorithm identifier is examined without checking
for its presence. This results in a NULL pointer dereference if the field
is missing.
Applications and services that call CMS_decrypt() on untrusted input
(e.g., S/MIME processing or CMS-based protocols) are vulnerable.
The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not
OSV
CVE-2026-28390: Possible NULL dereference when processing CMS KeyTransportRecipientInfo
osv·2026-04-07·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390: Possible NULL dereference when processing CMS KeyTransportRecipientInfo
Possible NULL dereference when processing CMS KeyTransportRecipientInfo
OSV
CVE-2026-28390: Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen
osv·2026-04-07·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390: Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen
Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen.
Impact summary: Applications that process attacker-controlled CMS data may
crash before authentication or cryptographic operations occur resulting in
Denial of Service.
When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with
RSA-OAEP encryption is processed, the optional parameters field of
RSA-OAEP SourceFunc algorithm identifier is examined without checking
for its presence. This results in a NULL pointer dereference if the field
is missing.
Applications and services that call CMS_decrypt() on untrusted input
(e.g., S/MIME processing or CMS-based protocols) are vulnerable.
The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not
OSV
CVE-2026-28390: Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen
osv·2026-04-07·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390: Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not aff
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-28390 shim-unsigned-x64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 shim-unsigned-x64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 shim-unsigned-x64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
shim does not call CMS_decrypt() at all.
Closing since we are not affected.
Bugzilla
CVE-2026-28390 mozjs128: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 mozjs128: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 mozjs128: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
edk2 does not use encrypted messages, only pkcs#7 signatures, and is most likely not affected.
Bugzilla
CVE-2026-28390 cosmic-store: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 cosmic-store: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 cosmic-store: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 bpfman: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 bpfman: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 bpfman: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
bpfman dynamically links OpenSSL via openssl-sys and doesn't vendor the C code, so it inherits the fix from the system openssl-libs package with no rebuild required. It should be fine once Fedora updates it ,)
Bugzilla
CVE-2026-28390 samba: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 samba: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 samba: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
Samba is using GnuTLS.
Bugzilla
CVE-2026-28390 shim-unsigned-aarch64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 shim-unsigned-aarch64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 shim-unsigned-aarch64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
shim does not call CMS_decrypt() at all.
Closing since we are not affected.
Bugzilla
CVE-2026-28390 aw-server-rust: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 aw-server-rust: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 aw-server-rust: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 icecat: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 icecat: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 icecat: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 samba: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 samba: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 samba: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
Samba is using GnuTLS.
Bugzilla
CVE-2026-28390 goose: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 goose: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
CVE-2026-28390 goose: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 icecat: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 icecat: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 icecat: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 rpm-ostree: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 rpm-ostree: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 rpm-ostree: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 firefox: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 firefox: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 firefox: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 rust-bootupd: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 rust-bootupd: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 rust-bootupd: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 gotify-desktop: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 gotify-desktop: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 gotify-desktop: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 shim: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 shim: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 shim: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
shim does not call CMS_decrypt() at all.
Closing since we are not affected.
Bugzilla
CVE-2026-28390 thunderbird: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 thunderbird: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 thunderbird: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 awatcher: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 awatcher: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 awatcher: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 trunk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 trunk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 trunk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 fractal: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 fractal: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 fractal: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
Not only does maturin not bundle any code from the OpenSSL C library, but I can’t figure out why it was targeted for this bug-filing at all. It doesn’t even mention OpenSSL in the spec file or in the source archive.
Bugzilla
CVE-2026-28390 ruby: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 ruby: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 ruby: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
After analysis, we determined that this vulnerability is not exploitable for Ruby:
* Reason: This CVE is for OpenSSL and is misreported on Ruby. The bindings carry the same name, but the CVE do not affect Ruby bindings.
Based on this, we are closing this tracker as Not a Bug.
Bugzilla
CVE-2026-28390 aw-server-rust: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 aw-server-rust: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 aw-server-rust: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 389-ds-base: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 389-ds-base: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 389-ds-base: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
The vulnerability requires calling `CMS_decrypt()` on untrusted input. 389-ds-base uses NSS as the primary crypto library. OpenSSL is used only in limited use cases:
1. pwdchan plugin uses `openssl` Rust crate for PBKDF2 password hashing.
2. lib389 shells out to `openssl` CLI for certificate inspection (x509, req, pkcs12, rehash) - not used for CMS decryption.
OpenSSL CMS API is not used by 389-ds-base at all. Closing as not a
Bugzilla
CVE-2026-28390 mozjs140: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 mozjs140: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 mozjs140: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 bootc: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 bootc: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 bootc: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 mozjs128: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 mozjs128: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 mozjs128: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 trustee-guest-components: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 trustee-guest-components: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 trustee-guest-components: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 bootc: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 bootc: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 bootc: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 chunkah: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 chunkah: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 chunkah: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 rustup: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 rustup: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 rustup: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 rust-bootupd: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 rust-bootupd: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 rust-bootupd: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 bcvk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 bcvk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
CVE-2026-28390 bcvk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 rustup: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 rustup: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 rustup: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 fractal: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 fractal: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 fractal: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
Not only does maturin not bundle any code from the OpenSSL C library, but I can’t figure out why it was targeted for this bug-filing at all. It doesn’t even mention OpenSSL in the spec file or in the source archive.
Bugzilla
CVE-2026-28390 shim-unsigned-aarch64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 shim-unsigned-aarch64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 shim-unsigned-aarch64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
shim does not call CMS_decrypt() at all.
Closing since we are not affected.
Bugzilla
CVE-2026-28390 cosmic-settings-daemon: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 cosmic-settings-daemon: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 cosmic-settings-daemon: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 rpm-ostree: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 rpm-ostree: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 rpm-ostree: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 mozjs115: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 mozjs115: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 mozjs115: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 shim-unsigned-x64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 shim-unsigned-x64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 shim-unsigned-x64: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
shim does not call CMS_decrypt() at all.
Closing since we are not affected.
Bugzilla
CVE-2026-28390 mingw-openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 mingw-openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 mingw-openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 gotify-desktop: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 gotify-desktop: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 gotify-desktop: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
FEDORA-2026-74048d5349 (edk2-20260213-3.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-74048d5349
---
FEDORA-2026-74048d5349 has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-74048d5349`
You can provide feedback for this upda
Bugzilla
CVE-2026-28390 rust-zincati: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 rust-zincati: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 rust-zincati: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 cosmic-store: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 cosmic-store: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 cosmic-store: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 cosmic-settings-daemon: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 cosmic-settings-daemon: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 cosmic-settings-daemon: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 shim: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 shim: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 shim: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
shim does not call CMS_decrypt() at all.
Closing since we are not affected.
Bugzilla
CVE-2026-28390 mozjs115: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 mozjs115: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 mozjs115: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 sslscan: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 vaultwarden: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 goose: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 goose: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 goose: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 mingw-openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 mingw-openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 mingw-openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 rust-zincati: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 rust-zincati: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 rust-zincati: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 mesa: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 mesa: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 mesa: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 chunkah: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 chunkah: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 chunkah: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 389-ds-base: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 389-ds-base: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 389-ds-base: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
The vulnerability requires calling `CMS_decrypt()` on untrusted input. 389-ds-base uses NSS as the primary crypto library. OpenSSL is used only in limited use cases:
1. pwdchan plugin uses `openssl` Rust crate for PBKDF2 password hashing.
2. lib389 shells out to `openssl` CLI for certificate inspection (x509, req, pkcs12, rehash) - not used for CMS decryption.
OpenSSL CMS API is not used by 389-ds-base at all. Closing as not a
Bugzilla
CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
CVE-2026-28390 maturin: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
Not only does maturin not bundle any code from the OpenSSL C library, but I can’t figure out why it was targeted for this bug-filing at all. It doesn’t even mention OpenSSL in the spec file or in the source archive.
Bugzilla
CVE-2026-28390 awatcher: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 awatcher: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 awatcher: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 bpfman: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 bpfman: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 bpfman: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
bpfman dynamically links OpenSSL via openssl-sys and doesn't vendor the C code, so it inherits the fix from the system openssl-libs package with no rebuild required. It should be fine once Fedora updates it ,)
Bugzilla
CVE-2026-28390 trustee-guest-components: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 trustee-guest-components: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 trustee-guest-components: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 firefox: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 firefox: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 firefox: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 bcvk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 bcvk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
CVE-2026-28390 bcvk: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-43]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 thunderbird: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 thunderbird: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 thunderbird: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 openssl3: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 openssl3: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
CVE-2026-28390 openssl3: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Bugzilla
CVE-2026-28390 ruby: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
bugzilla·2026-04-08·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 ruby: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
CVE-2026-28390 ruby: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Discussion:
After analysis, we determined that this vulnerability is not exploitable for Ruby:
* Reason: This CVE is for OpenSSL and is misreported on Ruby. The bindings carry the same name, but the CVE do not affect Ruby bindings.
Based on this, we are closing this tracker as Not a Bug.
Bugzilla
CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
bugzilla·2026-04-07·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen.
Impact summary: Applications that process attacker-controlled CMS data may
crash before authentication or cryptographic operations occur resulting in
Denial of Service.
When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with
RSA-OAEP encryption is processed, the optional parameters field of
RSA-OAEP SourceFunc algorithm identifier is examined without checking
for its presence. This results in a NULL pointer dereference if the field
is missing.
Applications and services that call CMS_decrypt() on untrusted input
(e.g
Wiz
CVE-2026-28388 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2026-28388 [HIGH] CVE-2026-28388 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28388 :
OpenSSL vulnerability analysis and mitigation
Issue summary: When a delta CRL that contains a Delta CRL Indicator extension
is processed a NULL pointer dereference might happen if the required CRL
Number extension is missing.
Impact summary: A NULL pointer dereference can trigger a crash which
leads to a Denial of Service for an application.
When CRL processing and delta CRL processing is enabled during X.509
certificate verification, the delta CRL processing does not check
whether the CRL Number extension is NULL before dereferencing it.
When a malformed delta CRL file is being processed, this parameter
can be NULL, causing a NULL pointer dereference.
Exploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in
the verification context, the cert
Wiz
CVE-2026-28386 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 9.1
CVE-2026-28386 [CRITICAL] CVE-2026-28386 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28386 :
OpenSSL vulnerability analysis and mitigation
Issue summary: Applications using AES-CFB128 encryption or decryption on
systems with AVX-512 and VAES support can trigger an out-of-bounds read
of up to 15 bytes when processing partial cipher blocks.
Impact summary: This out-of-bounds read may trigger a crash which leads to
Denial of Service for an application if the input buffer ends at a memory
page boundary and the following page is unmapped. There is no information
disclosure as the over-read bytes are not written to output.
The vulnerable code path is only reached when processing partial blocks
(when a previous call left an incomplete block and the current call provides
fewer bytes than needed to complete it). Additionally, the input buffer
must be positioned at a
Wiz
CVE-2026-28387 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2026-28387 CVE-2026-28387 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28387 :
OpenSSL vulnerability analysis and mitigation
Issue summary: An uncommon configuration of clients performing DANE TLSA-based
server authentication, when paired with uncommon server DANE TLSA records, may
result in a use-after-free and/or double-free on the client side.
Impact summary: A use after free can have a range of potential consequences
such as the corruption of valid data, crashes or execution of arbitrary code.
However, the issue only affects clients that make use of TLSA records with both
the PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate
usage.
By far the most common deployment of DANE is in SMTP MTAs for which RFC7672
recommends that clients treat as 'unusable' any TLSA records that have the PKIX
certificate usages. These SMTP (o
Wiz
CVE-2026-28389 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2026-28389 [HIGH] CVE-2026-28389 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28389 :
OpenSSL vulnerability analysis and mitigation
Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyAgreeRecipientInfo a NULL pointer dereference can happen.
Impact summary: Applications that process attacker-controlled CMS data may
crash before authentication or cryptographic operations occur resulting in
Denial of Service.
When a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is
processed, the optional parameters field of KeyEncryptionAlgorithmIdentifier
is examined without checking for its presence. This results in a NULL
pointer dereference if the field is missing.
Applications and services that call CMS_decrypt() on untrusted input
(e.g., S/MIME processing or CMS-based protocols) are vulnerable.
The FIPS modules in 3.6, 3.
Wiz
CVE-2026-28390 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2026-28390 [HIGH] CVE-2026-28390 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28390 :
OpenSSL vulnerability analysis and mitigation
Issue summary: During processing of a crafted CMS EnvelopedData message
with KeyTransportRecipientInfo a NULL pointer dereference can happen.
Impact summary: Applications that process attacker-controlled CMS data may
crash before authentication or cryptographic operations occur resulting in
Denial of Service.
When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with
RSA-OAEP encryption is processed, the optional parameters field of
RSA-OAEP SourceFunc algorithm identifier is examined without checking
for its presence. This results in a NULL pointer dereference if the field
is missing.
Applications and services that call CMS_decrypt() on untrusted input
(e.g., S/MIME processing or CMS-based protocols) are
Wiz
CVE-2026-31789 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2026-31789 CVE-2026-31789 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-31789 :
OpenSSL vulnerability analysis and mitigation
Issue summary: Converting an excessively large OCTET STRING value to
a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.
Impact summary: A heap buffer overflow may lead to a crash or possibly
an attacker controlled code execution or other undefined behavior.
If an attacker can supply a crafted X.509 certificate with an excessively
large OCTET STRING value in extensions such as the Subject Key Identifier
(SKID) or Authority Key Identifier (AKID) which are being converted to hex,
the size of the buffer needed for the result is calculated as multiplication
of the input length by 3. On 32 bit platforms, this multiplication may overflow
resulting in the allocation of a smaller buffer and a heap buffer ov
Wiz
CVE-2026-31790 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2026-31790 [HIGH] CVE-2026-31790 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-31790 :
OpenSSL vulnerability analysis and mitigation
Issue summary: Applications using RSASVE key encapsulation to establish
a secret encryption key can send contents of an uninitialized memory buffer to
a malicious peer.
Impact summary: The uninitialized buffer might contain sensitive data from the
previous execution of the application process which leads to sensitive data
leakage to an attacker.
RSA_public_encrypt() returns the number of bytes written on success and -1
on error. The affected code tests only whether the return value is non-zero.
As a result, if RSA encryption fails, encapsulation can still return success to
the caller, set the output lengths, and leave the caller to use the contents of
the ciphertext buffer as if a valid KEM ciphertext had been produced.
https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bchttps://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75https://openssl-library.org/news/secadv/20260407.txthttps://cert-portal.siemens.com/productcert/html/ssa-032379.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
2026-04-07
Published