FreshPorts - VuXML

The OpenSSL project reports:

• Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (CVE-2025-11187)
• Stack buffer overflow in CMS AuthEnvelopedData parsing (CVE-2025-15467)
• NULL dereference in SSL_CIPHER_find() function on unknown cipher ID (CVE-2025-15468)
• "openssl dgst" one-shot codepath silently truncates inputs >16MB (CVE-2025-15469)
• TLS 1.3 CompressedCertificate excessive memory allocation (CVE-2025-66199)
• Heap out-of-bounds write in BIO_f_linebuffer on short writes (CVE-2025-68160)
• Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (CVE-2025-69418)
• Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion (CVE-2025-69419)
• Missing ASN1_TYPE validation in TS_RESP_verify_response() function (CVE-2025-69420)
• NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function (CVE-2025-69421)
• Missing ASN1_TYPE validation in PKCS#12 parsing (CVE-2026-22795)
• ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function (CVE-2026-22796)

>= 15.0 lt 15.0_2

>= 14.3 lt 14.3_8

>= 13.5 lt 13.5_9

< 3.0.19,1

< 3.3.6

< 3.4.4

< 3.5.5

< 3.6.1

< 3.0.19

The OpenSSL project reports reports:

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Timing side-channel in SM2 algorithm on 64-bit ARM

Fix Out-of-bounds read in HTTP client no_proxy handling

< 3.0.18,1

< 3.2.6

< 3.3.5

< 3.3.5

< 3.4.3

< 3.5.4

< 3.6.0