Every CVESearch/Get API key

SUSE-SU-2026:3651-1

Security update for openssl-3-livepatches

No scoreFix available

SUSE-SU-2026:3651-1 is a vulnerability with no CVSS score yet in openssl-3-livepatches, published August 19, 2026. No source lists public exploit code. Fixed in openssl-3-livepatches 0.5-150600.13.16.1.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
0.5-150600.13.16.1openssl-3-livepatches

Description

This update for openssl-3-livepatches fixes the following issues:

  • HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712, bsc#1271713).

Affected packages

Affected packages
PackageAffectedFixed
openssl-3-livepatches
SUSE:Linux Enterprise Live Patching 15 SP6
before 0.5-150600.13.16.1
0.5-150600.13.16.1

What each source reports

OSVNo score

Security update for openssl-3-livepatches

This update for openssl-3-livepatches fixes the following issues:

  • HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations (bsc#1271712, bsc#1271713).
Record
SUSE-SU-2026:3651-1
Updated
2026-11-02

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open