nvidia-device-plugin (0.19.3-ubuntu24.04u14) noble; urgency=low

  * [HIGH] CVE-2026-34180 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial...
  * [HIGH] CVE-2026-45445 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: AES-OCB IV Ignored on EVP_Cipher() Path
  * [HIGH] CVE-2026-7383 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unic...
  * [HIGH] CVE-2026-9076 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS pas...
  * [LOW] CVE-2026-42768 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7...
  * [MEDIUM] CVE-2026-34183 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
  * [MEDIUM] CVE-2026-42766 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: Possible NULL Dereference in Password-Based CMS Decryption
  * [MEDIUM] CVE-2026-42767 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
  * [MEDIUM] CVE-2026-45446 in openssl (3.3.7-2.azl3), openssl-libs (3.3.7-2.azl3) - openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-S...
 -- azcu-bot <azcu-publishing@microsoft.com>  Fri, 26 Jun 2026 00:00:00 +0000

