{"id":"CLSA-2026-1770804474","summary":"Fix CVE(s): CVE-2025-69418, CVE-2025-69421, CVE-2026-22796","details":"   * SECURITY UPDATE: The trailing 1-15 bytes of a message may be exposed\n     in\u003cbr\u003ecleartext on encryption and are not covered by the authentication\n     tag,\u003cbr\u003eallowing an attacker to read or tamper with those bytes without\n     detection\n     - debian/patches/CVE-2025-69418.patch: fix OCB AES-NI/HW stream path\n       unauthenticated/unencrypted trailing bytes\n     - CVE-2025-69418\n   * SECURITY UPDATE: Invalid or NULL pointer dereference when processing\n     malformed PKCS#7 data can result in a Denial of Service\n     - debian/patches/CVE-2026-22796.patch: ensure ASN1 types are checked\n       before use.\n     - CVE-2026-22796\n   * SECURITY UPDATE: Processing a malformed PKCS#12 file can trigger a NULL\n     pointer dereference\n     - debian/patches/CVE-2025-69421.patch: Check oct argument for NULL\n     - CVE-2025-69421","modified":"2026-06-04T09:47:25.826417068Z","published":"2026-02-11T10:07:58Z","upstream":["CVE-2025-69418","CVE-2025-69421","CVE-2026-22796"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1770804474.html"}],"affected":[{"package":{"name":"libssl-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libssl-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.23+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1770804474.json"}},{"package":{"name":"libssl-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libssl-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.23+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1770804474.json"}},{"package":{"name":"libssl1.1","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libssl1.1?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.23+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1770804474.json"}},{"package":{"name":"openssl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openssl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.23+tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1770804474.json"}}],"schema_version":"1.7.5"}