{"id":"CLSA-2026-1777541792","summary":"Fix CVE(s): CVE-2026-28390","details":"   * SECURITY UPDATE: NULL dereference in CMS RSA-OAEP decryption when the\n     optional pSourceFunc parameters field is omitted from a\n     KeyTransportRecipientInfo, leading to a denial of service.\n     - debian/patches/CVE-2026-28390.patch: check plab-\u003eparameter for NULL\n       before accessing its type field in rsa_cms_decrypt()\n     - CVE-2026-28390","modified":"2026-06-04T09:47:31.364212024Z","published":"2026-04-30T09:36:38Z","upstream":["CVE-2026-28390"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1777541792.html"}],"affected":[{"package":{"name":"libssl-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libssl-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.23+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1777541792.json"}},{"package":{"name":"libssl-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libssl-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.23+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1777541792.json"}},{"package":{"name":"libssl1.1","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libssl1.1?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.23+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1777541792.json"}},{"package":{"name":"openssl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/openssl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu2.1~18.04.23+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1777541792.json"}}],"schema_version":"1.7.5"}