Extreme Networks

Summary A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication path could, under specific high-concurrency traffic conditions, intermittently allow requests authenticated with an Extreme Platform ONE/IAM-issued API key...

Summary Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS...

Summary Out-of-bounds read/write flaw in OpenSSL’s RFC 3211 KEK unwrap function, affecting CMS decryption with password-based encryption. Malicious inputs could trigger denial of service or, in rare cases, code execution. Products not listed in the I...

Summary In the Linux kernel, the following has been resolved: crypto: algif_aead - Revert to operating out-of-place. This mostly reverts commit 72548b093ee3 except for the copying of the associated data. Products not listed in the Impact Details sect...

The ExtremeCloud™ IQ classic UI will be retired Q4 calendar year 2026. The new UI has been available  since July 2025 to ensure customers have ample time to become comfortable before the classic UI is retired. We will be transitioning from the classi...