Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

SUSE Agama Security Patch for Important OpenSSL Issues 2026-22622-1

suse
Calendar Grey July 16, 2026
Scroller Suse
A crucial security update for agama addressing multiple issues including out-of-bounds and buffer overflows.
SUSE announced a security update addressing seven vulnerabilities in agama affecting SUSE Linux Enterprise Server 16.0 and SAP applications, recommending users to apply the patches...

Summary

## This update for agama fixes the following issues * CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270602). * CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust- openssl crate (bsc#1270678). * CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate (bsc#1270784). * CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent memory in rust-openssl crate (bsc#1270850). * CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate (bsc#1270526). * CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key-

Topics%20covered

Topics Covered

security advisory SuSE arbitrary code execution OpenSSL important heap buffer overflow

References

* bsc#1270526

* bsc#1270602

* bsc#1270678

* bsc#1270784

* bsc#1270850

* bsc#1270891

* bsc#1270992

Cross-

* CVE-2026-41677

* CVE-2026-41678

* CVE-2026-41681

* CVE-2026-41898

* CVE-2026-42327

* CVE-2026-44662

* CVE-2026-45784

CVSS scores:

* CVE-2026-41677 ( SUSE ): 1.7

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U

* CVE-2026-41677 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

* CVE-2026-41677 ( NVD ): 1.7

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2026-41677 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

* CVE-2026-41678 ( SUSE ): 8.3

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:22622-1
Release Date: 2026-07-10T09:03:03Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE arbitrary code execution OpenSSL important heap buffer overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.