# CVE-2026-28390: Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

CVE-2026-28390 is fixed in 27 products on 1 platform, first by RHSA-2026:71542, released March 12, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-28390
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0084
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 6, 2026
- Weakness: NULL Pointer Dereference
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-28390

## Description

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | compat-openssl10 RHEL 8 | 1:1.0.2o-4.el8_10.2 | [RHSA-2026:22315](https://patchblox.com/security/data/fix/linux/rhsa-2026-22315.md) | Jun 24, 2026 |
| Linux | compat-openssl10 almalinux 8 | 1:1.0.2o-4.el8_10.2 | [ALSA-2026:22315](https://patchblox.com/security/data/fix/linux/alsa-2026-22315.md) | Jun 1, 2026 |
| Linux | compat-openssl10 ol 8 | 1:1.0.2o-4.el8_10.2 | [ELSA-2026-22315](https://patchblox.com/security/data/fix/linux/elsa-2026-22315.md) | Jun 2, 2026 |
| Linux | compat-openssl10 rocky 8 | 1:1.0.2o-4.el8_10.2 | [RLSA-2026:22315](https://patchblox.com/security/data/fix/linux/rlsa-2026-22315.md) | Jun 5, 2026 |
| Linux | compat-openssl11 RHEL 9 | 1:1.1.1k-5.el9_8.3 | [RHSA-2026:22313](https://patchblox.com/security/data/fix/linux/rhsa-2026-22313.md) | Jun 24, 2026 |
| Linux | compat-openssl11 almalinux 9 | 1:1.1.1k-5.el9_8.3 | [ALSA-2026:22313](https://patchblox.com/security/data/fix/linux/alsa-2026-22313.md) | Jun 1, 2026 |
| Linux | compat-openssl11 ol 9 | 1:1.1.1k-5.el9_8.3 | [ELSA-2026-22313](https://patchblox.com/security/data/fix/linux/elsa-2026-22313.md) | Jun 23, 2026 |
| Linux | compat-openssl11 rocky 9 | 1:1.1.1k-5.el9_8.3 | [RLSA-2026:22313](https://patchblox.com/security/data/fix/linux/rlsa-2026-22313.md) | Jun 2, 2026 |
| Linux | edk2 RHEL 10 | 20251114-5.el10_2.2 | [RHSA-2026:39297](https://patchblox.com/security/data/fix/linux/rhsa-2026-39297.md) | Apr 7, 2026 |
| Linux | edk2 rocky 10 | 0:20251114-5.el10_2.2 | [RLSA-2026:39297](https://patchblox.com/security/data/fix/linux/rlsa-2026-39297.md) | Jul 15, 2026 |
| Linux | edk2-aarch64 almalinux 10 | 20251114-5.el10_2.2 | [ALSA-2026:39297](https://patchblox.com/security/data/fix/linux/alsa-2026-39297.md) | Jul 14, 2026 |
| Linux | edk2-aarch64 ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-39297](https://patchblox.com/security/data/fix/linux/elsa-2026-39297.md) | Jul 16, 2026 |
| Linux | edk2-ovmf almalinux 10 | 20251114-5.el10_2.2 | [ALSA-2026:39297](https://patchblox.com/security/data/fix/linux/alsa-2026-39297.md) | Jul 14, 2026 |
| Linux | edk2-ovmf ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-39297](https://patchblox.com/security/data/fix/linux/elsa-2026-39297.md) | Jul 16, 2026 |
| Linux | edk2-tools almalinux 10 | 20251114-5.el10_2.2 | [ALSA-2026:39297](https://patchblox.com/security/data/fix/linux/alsa-2026-39297.md) | Jul 14, 2026 |
| Linux | edk2-tools ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-39297](https://patchblox.com/security/data/fix/linux/elsa-2026-39297.md) | Jul 16, 2026 |
| Linux | edk2-tools-doc almalinux 10 | 20251114-5.el10_2.2 | [ALSA-2026:39297](https://patchblox.com/security/data/fix/linux/alsa-2026-39297.md) | Jul 14, 2026 |
| Linux | edk2-tools-doc ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-39297](https://patchblox.com/security/data/fix/linux/elsa-2026-39297.md) | Jul 16, 2026 |
| Linux | libssl1.0.0 Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.13+esm4 | [libssl1.0.0 1.0.2n-1ubuntu5.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libssl1.0.0-1.0.2n-1ubuntu5.13-esm4.md) | Apr 15, 2026 |
| Linux | libssl1.1 Ubuntu 18.04.6 LTS (bionic) | 1.1.1-1ubuntu2.1~18.04.23+esm8 | [libssl1.1 1.1.1-1ubuntu2.1~18.04.23+esm8](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libssl1.1-1.1.1-1ubuntu2.1-18.04.23-esm8.md) | Apr 15, 2026 |
| Linux | libssl1.1 Ubuntu 20.04 LTS (focal) | 1.1.1f-1ubuntu2.24+esm3 | [libssl1.1 1.1.1f-1ubuntu2.24+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libssl1.1-1.1.1f-1ubuntu2.24-esm3.md) | Apr 15, 2026 |
| Linux | libssl3 Ubuntu 22.04.1 LTS (jammy) | 3.0.2-0ubuntu1.23 | [libssl3 3.0.2-0ubuntu1.23](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libssl3-3.0.2-0ubuntu1.23.md) | Apr 15, 2026 |
| Linux | libssl3t64 Ubuntu 24.04.5 LTS (noble) | 3.0.13-0ubuntu3.9 | [libssl3t64 3.0.13-0ubuntu3.9](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libssl3t64-3.0.13-0ubuntu3.9.md) | Apr 15, 2026 |
| Linux | libssl3t64 Ubuntu 25.10 (questing) | 3.5.3-1ubuntu3.3 | [libssl3t64 3.5.3-1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libssl3t64-3.5.3-1ubuntu3.3.md) | Apr 15, 2026 |
| Linux | libssl3t64 Ubuntu 26.04.1 LTS (resolute) | 3.5.5-1ubuntu3 | [libssl3t64 3.5.5-1ubuntu3](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libssl3t64-3.5.5-1ubuntu3.md) | Apr 6, 2026 |
| Linux | openssl Debian 12.15 (bookworm) | 3.0.19-1~deb12u2 | [DEBIAN-CVE-2026-28390](https://patchblox.com/security/data/fix/linux/debian-cve-2026-28390.md) | Apr 7, 2026 |
| Linux | openssl Debian 13.5 (trixie) | 3.5.5-1~deb13u2 | [DEBIAN-CVE-2026-28390](https://patchblox.com/security/data/fix/linux/debian-cve-2026-28390.md) | Apr 7, 2026 |
| Linux | openssl Debian 14 | 3.6.2-1 | [DEBIAN-CVE-2026-28390](https://patchblox.com/security/data/fix/linux/debian-cve-2026-28390.md) | Apr 7, 2026 |
| Linux | openssl RHEL 10 | 3.2.2-16.el10_0.7 | [RHSA-2026:71542](https://patchblox.com/security/data/fix/linux/rhsa-2026-71542.md) | Mar 12, 2026 |
| Linux | openssl RHEL 8 | 1:1.1.1k-17.el8_6 | [RHSA-2026:38503](https://patchblox.com/security/data/fix/linux/rhsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl RHEL 9 | 1:3.5.5-3.el9_8 | [RHSA-2026:22312](https://patchblox.com/security/data/fix/linux/rhsa-2026-22312.md) | Jun 24, 2026 |
| Linux | openssl Ubuntu 18.04.6 LTS (bionic) | 1.1.1-1ubuntu2.1~18.04.23+esm8 | [openssl 1.1.1-1ubuntu2.1~18.04.23+esm8](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openssl-1.1.1-1ubuntu2.1-18.04.23-esm8.md) | Apr 15, 2026 |
| Linux | openssl Ubuntu 20.04 LTS (focal) | 1.1.1f-1ubuntu2.24+esm3 | [openssl 1.1.1f-1ubuntu2.24+esm3](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openssl-1.1.1f-1ubuntu2.24-esm3.md) | Apr 15, 2026 |
| Linux | openssl Ubuntu 22.04.1 LTS (jammy) | 3.0.2-0ubuntu1.23 | [openssl 3.0.2-0ubuntu1.23](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-openssl-3.0.2-0ubuntu1.23.md) | Apr 15, 2026 |
| Linux | openssl Ubuntu 24.04.5 LTS (noble) | 3.0.13-0ubuntu3.9 | [openssl 3.0.13-0ubuntu3.9](https://patchblox.com/security/data/fix/linux/ubuntu-noble-openssl-3.0.13-0ubuntu3.9.md) | Apr 15, 2026 |
| Linux | openssl Ubuntu 25.10 (questing) | 3.5.3-1ubuntu3.3 | [openssl 3.5.3-1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-questing-openssl-3.5.3-1ubuntu3.3.md) | Apr 15, 2026 |
| Linux | openssl Ubuntu 26.04.1 LTS (resolute) | 3.5.5-1ubuntu3 | [openssl 3.5.5-1ubuntu3](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-openssl-3.5.5-1ubuntu3.md) | Apr 6, 2026 |
| Linux | openssl almalinux 10 | 1:3.5.5-3.el10_2.alma.1 | [ALSA-2026:22314](https://patchblox.com/security/data/fix/linux/alsa-2026-22314.md) | Jun 1, 2026 |
| Linux | openssl almalinux 8 | 1:1.1.1k-17.el8_6 | [ALSA-2026:38503](https://patchblox.com/security/data/fix/linux/alsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl almalinux 9 | 1:3.5.5-3.el9_8 | [ALSA-2026:22312](https://patchblox.com/security/data/fix/linux/alsa-2026-22312.md) | Jun 1, 2026 |
| Linux | openssl amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl ol 10 | 1:3.5.5-5.0.1.el10_2 | [ELSA-2026-22314](https://patchblox.com/security/data/fix/linux/elsa-2026-22314.md) | Jul 23, 2026 |
| Linux | openssl ol 8 | 1:1.1.1k-17.el8_6 | [ELSA-2026-38503](https://patchblox.com/security/data/fix/linux/elsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl ol 9 | 10:3.5.5-3.0.1.el9_8_fips | [ELSA-2026-50345](https://patchblox.com/security/data/fix/linux/elsa-2026-50345.md) | Jun 24, 2026 |
| Linux | openssl rocky 10 | 1:3.5.5-3.el10_2 | [RLSA-2026:22314](https://patchblox.com/security/data/fix/linux/rlsa-2026-22314.md) | Jun 5, 2026 |
| Linux | openssl rocky 8 | 1:1.1.1k-17.el8_10 | [RLSA-2026:38503](https://patchblox.com/security/data/fix/linux/rlsa-2026-38503.md) | Jul 14, 2026 |
| Linux | openssl rocky 9 | 1:3.5.5-3.el9_8 | [RLSA-2026:22312](https://patchblox.com/security/data/fix/linux/rlsa-2026-22312.md) | Jun 2, 2026 |
| Linux | openssl-1_0_0 sles 15.6 | 1.0.2p-150000.3.111.2 | [SUSE-SU-2026:3443-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3443-1.md) | Jul 31, 2026 |
| Linux | openssl-1_0_0 sles 15.7 | 1.0.2p-150000.3.111.2 | [SUSE-SU-2026:3443-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3443-1.md) | Jul 31, 2026 |
| Linux | openssl-1_1 sles 15.6 | 1.1.1w-150600.5.26.2 | [SUSE-SU-2026:1577-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1577-1.md) | Apr 23, 2026 |
| Linux | openssl-1_1 sles 15.7 | 1.1.1w-150700.11.16.1 | [SUSE-SU-2026:1386-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1386-1.md) | Apr 16, 2026 |
| Linux | openssl-3 opensuse-leap 16.0 | 3.5.0-160000.7.1 | [OPENSUSE-SU-2026:20525-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20525-1.md) | Apr 13, 2026 |
| Linux | openssl-3 sles 15.6 | 3.1.4-150600.5.50.1 | [SUSE-SU-2026:1605-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1605-1.md) | Apr 24, 2026 |
| Linux | openssl-3 sles 15.7 | 3.2.3-150700.5.31.1 | [SUSE-SU-2026:1375-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1375-1.md) | Apr 15, 2026 |
| Linux | openssl-3 sles 16.0 | 3.5.0-160000.7.1 | [SUSE-SU-2026:21186-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-21186-1.md) | Apr 13, 2026 |
| Linux | openssl-debuginfo amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-debugsource amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-devel RHEL 8 | 1:1.1.1k-17.el8_6 | [RHSA-2026:38503](https://patchblox.com/security/data/fix/linux/rhsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-devel RHEL 9 | 1:3.5.5-3.el9_8 | [RHSA-2026:22312](https://patchblox.com/security/data/fix/linux/rhsa-2026-22312.md) | Jun 24, 2026 |
| Linux | openssl-devel almalinux 10 | 1:3.5.5-3.el10_2.alma.1 | [ALSA-2026:22314](https://patchblox.com/security/data/fix/linux/alsa-2026-22314.md) | Jun 1, 2026 |
| Linux | openssl-devel almalinux 8 | 1:1.1.1k-17.el8_6 | [ALSA-2026:38503](https://patchblox.com/security/data/fix/linux/alsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-devel almalinux 9 | 1:3.5.5-3.el9_8 | [ALSA-2026:22312](https://patchblox.com/security/data/fix/linux/alsa-2026-22312.md) | Jun 1, 2026 |
| Linux | openssl-devel amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-devel ol 10 | 1:3.5.5-5.0.1.el10_2 | [ELSA-2026-22314](https://patchblox.com/security/data/fix/linux/elsa-2026-22314.md) | Jul 23, 2026 |
| Linux | openssl-devel ol 8 | 1:1.1.1k-17.el8_6 | [ELSA-2026-38503](https://patchblox.com/security/data/fix/linux/elsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-devel ol 9 | 10:3.5.5-3.0.1.el9_8_fips | [ELSA-2026-50345](https://patchblox.com/security/data/fix/linux/elsa-2026-50345.md) | Jun 24, 2026 |
| Linux | openssl-fips-provider-latest amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-fips-provider-latest-debuginfo amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-libs RHEL 8 | 1:1.1.1k-17.el8_6 | [RHSA-2026:38503](https://patchblox.com/security/data/fix/linux/rhsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-libs RHEL 9 | 1:3.5.5-3.el9_8 | [RHSA-2026:22312](https://patchblox.com/security/data/fix/linux/rhsa-2026-22312.md) | Jun 24, 2026 |
| Linux | openssl-libs almalinux 10 | 1:3.5.5-3.el10_2.alma.1 | [ALSA-2026:22314](https://patchblox.com/security/data/fix/linux/alsa-2026-22314.md) | Jun 1, 2026 |
| Linux | openssl-libs almalinux 8 | 1:1.1.1k-17.el8_6 | [ALSA-2026:38503](https://patchblox.com/security/data/fix/linux/alsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-libs almalinux 9 | 1:3.5.5-3.el9_8 | [ALSA-2026:22312](https://patchblox.com/security/data/fix/linux/alsa-2026-22312.md) | Jun 1, 2026 |
| Linux | openssl-libs amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-libs ol 10 | 1:3.5.5-5.0.1.el10_2 | [ELSA-2026-22314](https://patchblox.com/security/data/fix/linux/elsa-2026-22314.md) | Jul 23, 2026 |
| Linux | openssl-libs ol 8 | 1:1.1.1k-17.el8_6 | [ELSA-2026-38503](https://patchblox.com/security/data/fix/linux/elsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-libs ol 9 | 10:3.5.5-3.0.1.el9_8_fips | [ELSA-2026-50345](https://patchblox.com/security/data/fix/linux/elsa-2026-50345.md) | Jun 24, 2026 |
| Linux | openssl-libs-debuginfo amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-perl RHEL 8 | 1:1.1.1k-17.el8_6 | [RHSA-2026:38503](https://patchblox.com/security/data/fix/linux/rhsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-perl RHEL 9 | 1:3.5.5-3.el9_8 | [RHSA-2026:22312](https://patchblox.com/security/data/fix/linux/rhsa-2026-22312.md) | Jun 24, 2026 |
| Linux | openssl-perl almalinux 10 | 1:3.5.5-3.el10_2.alma.1 | [ALSA-2026:22314](https://patchblox.com/security/data/fix/linux/alsa-2026-22314.md) | Jun 1, 2026 |
| Linux | openssl-perl almalinux 8 | 1:1.1.1k-17.el8_6 | [ALSA-2026:38503](https://patchblox.com/security/data/fix/linux/alsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-perl almalinux 9 | 1:3.5.5-3.el9_8 | [ALSA-2026:22312](https://patchblox.com/security/data/fix/linux/alsa-2026-22312.md) | Jun 1, 2026 |
| Linux | openssl-perl amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-perl ol 10 | 1:3.5.5-5.0.1.el10_2 | [ELSA-2026-22314](https://patchblox.com/security/data/fix/linux/elsa-2026-22314.md) | Jul 23, 2026 |
| Linux | openssl-perl ol 8 | 1:1.1.1k-17.el8_6 | [ELSA-2026-38503](https://patchblox.com/security/data/fix/linux/elsa-2026-38503.md) | Jul 13, 2026 |
| Linux | openssl-perl ol 9 | 10:3.5.5-3.0.1.el9_8_fips | [ELSA-2026-50345](https://patchblox.com/security/data/fix/linux/elsa-2026-50345.md) | Jun 24, 2026 |
| Linux | openssl-provider-legacy Ubuntu 25.10 (questing) | 3.5.3-1ubuntu3.3 | [openssl-provider-legacy 3.5.3-1ubuntu3.3](https://patchblox.com/security/data/fix/linux/ubuntu-questing-openssl-provider-legacy-3.5.3-1ubuntu3.3.md) | Apr 15, 2026 |
| Linux | openssl-provider-legacy Ubuntu 26.04.1 LTS (resolute) | 3.5.5-1ubuntu3 | [openssl-provider-legacy 3.5.5-1ubuntu3](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-openssl-provider-legacy-3.5.5-1ubuntu3.md) | Apr 6, 2026 |
| Linux | openssl-snapsafe-libs amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl-snapsafe-libs-debuginfo amzn 2023 | 1:3.5.5-1.amzn2023.0.4 | [ALAS2023-2026-1586](https://patchblox.com/security/data/fix/linux/alas2023-2026-1586.md) | Apr 13, 2026 |
| Linux | openssl1.0 Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.13+esm4 | [openssl1.0 1.0.2n-1ubuntu5.13+esm4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openssl1.0-1.0.2n-1ubuntu5.13-esm4.md) | Apr 15, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.