Every CVESearch/Get API key

SUSE-SU-2026:22947-1

Security update for openssl-3

No scoreFix available

SUSE-SU-2026:22947-1 is a vulnerability with no CVSS score yet in openssl-3, published July 25, 2026. No source lists public exploit code. Fixed in openssl-3 3.5.0-160000.9.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
3.5.0-160000.9.1openssl-3 +1 more

Description

This update for openssl-3 fixes the following issue:

  • "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712).

Affected packages

Affected packages
PackageAffectedFixed
openssl-3
SUSE:Linux Enterprise Server 16.0
before 3.5.0-160000.9.1
3.5.0-160000.9.1
openssl-3
SUSE:Linux Enterprise Server for SAP applications 16.0
before 3.5.0-160000.9.1
3.5.0-160000.9.1

What each source reports

OSVNo score

Security update for openssl-3

This update for openssl-3 fixes the following issue:

  • "HollowByte" DoS via attacker-controlled memory allocation (bsc#1271712).
Record
SUSE-SU-2026:22947-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open