UnratedFix available
openssl vulnerabilities
Type: advisorySources: OSV
Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC verification. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11187) Stanislav Fort discovered that OpenSSL incorrectly parsed CMS AuthEnvelopedData messages. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2025-15467) Stanislav Fort discovered that OpenSSL incorrectly handled memory in the SSL_CIPHER_find() function. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-15468) Stanislav Fort discovered that the OpenSSL "openssl dgst" command line tool incorrectly truncated data to 16MB. An attacker could posibly use this issue to hide unauthenticated data beyond the 16MB limit. This issue only affected Ubuntu 25.10. (CVE-2025-15469) Tomas Dulka and Stanislav Fort discovered that OpenSSL incorrectly handled memory with TLS 1.3 connections using certificate compression. An attacker could possibly use this issue to consume resources, leading to a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-66199) Petr Simecek and Stanislav Fort discovered that OpenSSL incorrectly handled memory when writing large data into a BIO chain. An attacker could possibly use this issue to consume r
- Products
- openssl
- Affected versions
- 1.1.1l-1ubuntu1, 3.0.0-1ubuntu1, 3.0.1-0ubuntu1, 3.0.10-1ubuntu2, 3.0.10-1ubuntu2.1, 3.0.10-1ubuntu3, 3.0.10-1ubuntu4, 3.0.13-0ubuntu2, 3.0.13-0ubuntu3, 3.0.13-0ubuntu3.1, 3.0.13-0ubuntu3.2, 3.0.13-0ubuntu3.3, 3.0.13-0ubuntu3.4, 3.0.13-0ubuntu3.5, 3.0.13-0ubuntu3.6, 3.0.2-0ubuntu1, 3.0.2-0ubuntu1.1, 3.0.2-0ubuntu1.10, 3.0.2-0ubuntu1.12, 3.0.2-0ubuntu1.13, 3.0.2-0ubuntu1.14, 3.0.2-0ubuntu1.15, 3.0.2-0ubuntu1.16, 3.0.2-0ubuntu1.17, 3.0.2-0ubuntu1.18, 3.0.2-0ubuntu1.19, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.20, 3.0.2-0ubuntu1.4, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6, 3.0.2-0ubuntu1.7, 3.0.2-0ubuntu1.8, 3.0.2-0ubuntu1.9, 3.4.1-1ubuntu3, 3.5.0-2ubuntu1, 3.5.2-1ubuntu1, 3.5.3-1ubuntu2
- Fixed versions
- 3.0.13-0ubuntu3.7, 3.0.2-0ubuntu1.21, 3.5.3-1ubuntu3
- CVEs
- CVE-2025-11187, CVE-2025-15467, CVE-2025-15468, CVE-2025-15469, CVE-2025-66199, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, CVE-2026-22796
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 17:16 UTC · Revision 1
Source evidence
Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC verification. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11187) Stanislav Fort discovered that OpenSSL incorrectly parsed CMS AuthEnvelopedData messages. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2025-15467) Stanislav Fort discovered that OpenSSL incorrectly handled memory in the SSL_CIPHER_find() function. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-15468) Stanislav Fort discovered that the OpenSSL "openssl dgst" command line tool incorrectly truncated data to 16MB. An attacker could posibly use this issue to hide unauthenticated data beyond the 16MB limit. This issue only affected Ubuntu 25.10. (CVE-2025-15469) Tomas Dulka and Stanislav Fort discovered that OpenSSL incorrectly handled memory with TLS 1.3 connections using certificate compression. An attacker could possibly use this issue to consume resources, leading to a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-66199) Petr Simecek and Stanislav Fort discovered that OpenSSL incorrectly handled memory when writing large data into a BIO chain. An attacker could possibly use this issue to consume r
osv:USN-7980-1
openssl
Fixed versions: 3.0.2-0ubuntu1.21
openssl
Fixed versions: 3.0.13-0ubuntu3.7
openssl
Fixed versions: 3.5.3-1ubuntu3
Complete source record
{
"id": "7b078cdafec5a70346384f128bf9f928a99a99e7eafe4df352ce2e43e85d7ab2",
"url": "https://osv.dev/vulnerability/USN-7980-1",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "openssl vulnerabilities",
"summary": "Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC verification. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11187) Stanislav Fort discovered that OpenSSL incorrectly parsed CMS AuthEnvelopedData messages. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. (CVE-2025-15467) Stanislav Fort discovered that OpenSSL incorrectly handled memory in the SSL_CIPHER_find() function. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-15468) Stanislav Fort discovered that the OpenSSL \"openssl dgst\" command line tool incorrectly truncated data to 16MB. An attacker could posibly use this issue to hide unauthenticated data beyond the 16MB limit. This issue only affected Ubuntu 25.10. (CVE-2025-15469) Tomas Dulka and Stanislav Fort discovered that OpenSSL incorrectly handled memory with TLS 1.3 connections using certificate compression. An attacker could possibly use this issue to consume resources, leading to a denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-66199) Petr Simecek and Stanislav Fort discovered that OpenSSL incorrectly handled memory when writing large data into a BIO chain. An attacker could possibly use this issue to consume r",
"evidence": "osv:USN-7980-1",
"products": [
{
"name": {
"value": "openssl",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.2-0ubuntu1.21",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "1.1.1l-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.0-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.1-0ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.2",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.4",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.5",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.6",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.7",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.8",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.9",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.10",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.12",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.13",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.14",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.15",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.16",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.17",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.18",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.19",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.2-0ubuntu1.20",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "openssl",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.13-0ubuntu3.7",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "3.0.10-1ubuntu2",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.10-1ubuntu2.1",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.10-1ubuntu3",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.10-1ubuntu4",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.13-0ubuntu2",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.13-0ubuntu3",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.13-0ubuntu3.1",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.13-0ubuntu3.2",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.13-0ubuntu3.3",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.13-0ubuntu3.4",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.13-0ubuntu3.5",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.13-0ubuntu3.6",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "openssl",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.5.3-1ubuntu3",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "3.4.1-1ubuntu3",
"evidence": "/affected/2/versions"
},
{
"value": "3.5.0-2ubuntu1",
"evidence": "/affected/2/versions"
},
{
"value": "3.5.2-1ubuntu1",
"evidence": "/affected/2/versions"
},
{
"value": "3.5.3-1ubuntu2",
"evidence": "/affected/2/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "USN-7980-1",
"aliases": [
"USN-7980-1"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.2-0ubuntu1.21"
}
]
}
],
"package": {
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"1.1.1l-1ubuntu1",
"3.0.0-1ubuntu1",
"3.0.1-0ubuntu1",
"3.0.2-0ubuntu1",
"3.0.2-0ubuntu1.1",
"3.0.2-0ubuntu1.2",
"3.0.2-0ubuntu1.4",
"3.0.2-0ubuntu1.5",
"3.0.2-0ubuntu1.6",
"3.0.2-0ubuntu1.7",
"3.0.2-0ubuntu1.8",
"3.0.2-0ubuntu1.9",
"3.0.2-0ubuntu1.10",
"3.0.2-0ubuntu1.12",
"3.0.2-0ubuntu1.13",
"3.0.2-0ubuntu1.14",
"3.0.2-0ubuntu1.15",
"3.0.2-0ubuntu1.16",
"3.0.2-0ubuntu1.17",
"3.0.2-0ubuntu1.18",
"3.0.2-0ubuntu1.19",
"3.0.2-0ubuntu1.20"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7980-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-15467",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-68160",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69418",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69419",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69420",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69421",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2026-22795",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2026-22796",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
],
"ecosystem": "Ubuntu:22.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libssl3",
"binary_version": "3.0.2-0ubuntu1.21"
},
{
"binary_name": "openssl",
"binary_version": "3.0.2-0ubuntu1.21"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.0.13-0ubuntu3.7"
}
]
}
],
"package": {
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.0.10-1ubuntu2",
"3.0.10-1ubuntu2.1",
"3.0.10-1ubuntu3",
"3.0.10-1ubuntu4",
"3.0.13-0ubuntu2",
"3.0.13-0ubuntu3",
"3.0.13-0ubuntu3.1",
"3.0.13-0ubuntu3.2",
"3.0.13-0ubuntu3.3",
"3.0.13-0ubuntu3.4",
"3.0.13-0ubuntu3.5",
"3.0.13-0ubuntu3.6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7980-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-15467",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-68160",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69418",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69419",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69420",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69421",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2026-22795",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2026-22796",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
],
"ecosystem": "Ubuntu:24.04:LTS"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libssl3t64",
"binary_version": "3.0.13-0ubuntu3.7"
},
{
"binary_name": "openssl",
"binary_version": "3.0.13-0ubuntu3.7"
}
],
"availability": "No subscription required"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.5.3-1ubuntu3"
}
]
}
],
"package": {
"name": "openssl",
"purl": "pkg:deb/ubuntu/openssl?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"3.4.1-1ubuntu3",
"3.5.0-2ubuntu1",
"3.5.2-1ubuntu1",
"3.5.3-1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7980-1.json",
"cves_map": {
"cves": [
{
"id": "CVE-2025-11187",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-15467",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
]
},
{
"id": "CVE-2025-15468",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-15469",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-66199",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-68160",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69418",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69419",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69420",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2025-69421",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2026-22795",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
]
},
{
"id": "CVE-2026-22796",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
{
"type": "Ubuntu",
"score": "low"
}
]
}
],
"ecosystem": "Ubuntu:25.10"
}
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libssl3t64",
"binary_version": "3.5.3-1ubuntu3"
},
{
"binary_name": "openssl",
"binary_version": "3.5.3-1ubuntu3"
},
{
"binary_name": "openssl-provider-legacy",
"binary_version": "3.5.3-1ubuntu3"
}
],
"availability": "No subscription required"
}
}
],
"modified": "2026-10-27T04:16:43.807335609Z",
"provider": "osv",
"upstream": [
"CVE-2025-11187",
"CVE-2025-15467",
"CVE-2025-15468",
"CVE-2025-15469",
"CVE-2025-66199",
"CVE-2025-68160",
"CVE-2025-69418",
"CVE-2025-69419",
"CVE-2025-69420",
"CVE-2025-69421",
"CVE-2026-22795",
"CVE-2026-22796",
"UBUNTU-CVE-2025-11187",
"UBUNTU-CVE-2025-15467",
"UBUNTU-CVE-2025-15468",
"UBUNTU-CVE-2025-15469",
"UBUNTU-CVE-2025-66199",
"UBUNTU-CVE-2025-68160",
"UBUNTU-CVE-2025-69418",
"UBUNTU-CVE-2025-69419",
"UBUNTU-CVE-2025-69420",
"UBUNTU-CVE-2025-69421",
"UBUNTU-CVE-2026-22795",
"UBUNTU-CVE-2026-22796"
],
"references": [
"https://ubuntu.com/security/notices/USN-7980-1",
"https://ubuntu.com/security/CVE-2025-11187",
"https://ubuntu.com/security/CVE-2025-15467",
"https://ubuntu.com/security/CVE-2025-15468",
"https://ubuntu.com/security/CVE-2025-15469",
"https://ubuntu.com/security/CVE-2025-66199",
"https://ubuntu.com/security/CVE-2025-68160",
"https://ubuntu.com/security/CVE-2025-69418",
"https://ubuntu.com/security/CVE-2025-69419",
"https://ubuntu.com/security/CVE-2025-69420",
"https://ubuntu.com/security/CVE-2025-69421",
"https://ubuntu.com/security/CVE-2026-22795",
"https://ubuntu.com/security/CVE-2026-22796"
]
},
"related_cves": [
{
"value": "CVE-2025-11187",
"evidence": "/upstream"
},
{
"value": "CVE-2025-15467",
"evidence": "/upstream"
},
{
"value": "CVE-2025-15468",
"evidence": "/upstream"
},
{
"value": "CVE-2025-15469",
"evidence": "/upstream"
},
{
"value": "CVE-2025-66199",
"evidence": "/upstream"
},
{
"value": "CVE-2025-68160",
"evidence": "/upstream"
},
{
"value": "CVE-2025-69418",
"evidence": "/upstream"
},
{
"value": "CVE-2025-69419",
"evidence": "/upstream"
},
{
"value": "CVE-2025-69420",
"evidence": "/upstream"
},
{
"value": "CVE-2025-69421",
"evidence": "/upstream"
},
{
"value": "CVE-2026-22795",
"evidence": "/upstream"
},
{
"value": "CVE-2026-22796",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 460196,
"published_at": "2026-01-27T18:10:18+00:00"
}