SUSE-SU-2026:5172-1: Security update for openssl-1_1
Published Nov 10, 2026
·Updated
This update for openssl-11 fixes the following issues:
- CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). - CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). - CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). - CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587).
Affected Software
3 affected componentsFixes available
suse/openssl-1_1<1.1.1w-150700.11.35.1
1.1.1w-150700.11.35.1
suse/openssl-1_1<1.1.1w-150700.11.35.1
1.1.1w-150700.11.35.1
suse/openssl-1_1<1.1.1w-150700.11.35.1
1.1.1w-150700.11.35.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/openssl-1_1to a version that resolves this vulnerability.Fixed in 1.1.1w-150700.11.35.1
Event History
Nov 10, 2026
Advisory Published
via OSV·03:22 PM
Data Sourced
via OSV·03:22 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.