Skip to content
SUSE Releases OpenSSL Patches for DTLS Vulnerability

SUSE Releases OpenSSL Patches for DTLS Vulnerability

First seen 12 Nov 2026, 06:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 06:19 UTC
  • •CVE-2026-84782 poses a critical risk with a CVSS score of 8.2.
  • •Multiple SUSE and openSUSE versions are affected, requiring immediate patching.
  • •The vulnerability allows for potential exploitation of DTLS handshake processes.

SUSE has released multiple updates addressing vulnerabilities in OpenSSL, notably CVE-2026-84782, which allows DTLS to retransmit handshake messages from a stale buffer offset. This flaw, rated 8.2 on the CVSS scale, affects various SUSE Linux Enterprise and openSUSE versions. The vulnerability was disclosed on September 29, 2026, and has been in the wild. Users are urged to apply the patches immediately to mitigate potential attacks. The updates also address other vulnerabilities, including memory allocation and timing side-channel issues. Affected systems include SUSE Linux Enterprise Live Patching and openSUSE Leap. The patches can be installed using SUSE's recommended methods, such as YaST or zypper commands.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 7h ago How this analysis works

Timeline

2026-09-29
CVE-2026-84782 published
SUSE disclosed a critical DTLS vulnerability allowing retransmission of handshake messages from stale buffers.
Linuxsecurity
2026-11-11
SUSE patches released
SUSE released multiple updates addressing CVE-2026-84782 and related vulnerabilities across various systems.
Linuxsecurity
2026-11-11
Patch for CVE-2026-84782 applied
Users are advised to apply the patches to mitigate the risks associated with the critical vulnerabilities.
Linuxsecurity

More articles in this cluster (7)

Following this threat?

Track CVE-2026-35189 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 2

Common questions

Which SUSE versions are affected?
The vulnerability affects SUSE Linux Enterprise Live Patching 15-SP4, 15-SP5, and openSUSE Leap 15.4, 15.5.
How urgent is the patching process?
Patching is critical due to active exploitation of the vulnerability in the wild.
What are the patch installation methods?
Patches can be installed using YaST online_update or the zypper patch command.