Skip to main content
VulnerabilityPublished Updated

SUSE · Security update for openssl-3

Affects SUSESource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 26 Oct 2026, 16:19 UTC

What to do

Affected software

ProductAffectedFixed in
SUSE Product Security Team SUSEAffected
  • SUSE
  • aarch64
  • libopenssl-3-devel-3.5.0-160000.9.1.aarch64
  • libopenssl-3-fips-provider-3.5.0-160000.9.1.aarch64
  • libopenssl3-3.5.0-160000.9.1.aarch64
  • libopenssl-3-devel-0:3.5.0-160000.9.1.aarch64
  • libopenssl-3-fips-provider-0:3.5.0-160000.9.1.aarch64
  • libopenssl3-0:3.5.0-160000.9.1.aarch64
Fixed in–

AI-suggested

A security update for OpenSSL 3 has been released by the SUSE Product Security Team to fix this vulnerability. Users should apply this update to mitigate the risk. Patch status is not explicitly confirmed in the provided data; users should consult the official SUSE advisory for current remediation guidance.

Description

A security update for OpenSSL 3 addresses a denial-of-service (DoS) vulnerability identified as 'HollowByte' that involves attacker-controlled memory allocation. This vulnerability could allow an attacker to cause a DoS condition by manipulating memory allocation in OpenSSL 3. The update fixes this issue to prevent such exploitation.

References

Community reviews

Loading reviews…