Skip To Main Content
Tomas Mraz on Muck Rack

Tomas Mraz

As seen in: JACC (Journal of the American College of Cardiology)
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Tomas Mraz’s profile

Articles by Tomas Mraz

OpenSSL Security Advisory [29th September 2026]

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas@openssl.foundation> Date: Tue, 29 Sep 2026 17:51:02 +0200 OpenSSL Security Advisory [29th September 2026] =============================================== DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) =============================================================================== Severity: High Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended...
Open in Who Shared Issue with article?

OpenSSL Security Advisory [25th August 2026]

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas@openssl.foundation> Date: Tue, 25 Aug 2026 14:55:51 +0200 OpenSSL Security Advisory [25th August 2026] ========================================= QUIC Server May Trigger Double Free When Processing INITIAL Packet (CVE-2026-18798) =================================================================================== Severity: Moderate Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas@openssl.foundation> Date: Thu, 13 Aug 2026 15:50:12 +0200 OpenSSL Security Advisory [13th August 2026] ============================================ Unbounded Memory Growth in QUIC Server Incoming Channel Queue (CVE-2026-14456) ============================================================================== Severity: Low Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas@openssl.foundation> Date: Tue, 09 Jun 2026 17:59:21 +0200 OpenSSL Security Advisory [9th June 2026] ========================================= Heap Use-After-Free in the PKCS7_verify() Function (CVE-2026-45447) =================================================================== Severity: High Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification.
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas@openssl.foundation> Date: Tue, 07 Apr 2026 18:28:42 +0200 OpenSSL Security Advisory [7th April 2026] ========================================== Incorrect Failure Handling in RSA KEM RSASVE Encapsulation (CVE-2026-31790) =========================================================================== Severity: Moderate Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas@openssl.foundation> Date: Fri, 13 Mar 2026 14:24:25 +0100 OpenSSL Security Advisory [13th March 2026] =========================================== OpenSSL TLS 1.3 server may choose unexpected key agreement group (CVE-2026-2673) ================================================================================ Severity: Low Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key...
Open in Who Shared Issue with article?

Re: OpenSSL Security Advisory (updated text for CVE-2025-15467)

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Wed, 25 Feb 2026 18:50:52 +0100 We have updated the advisory text for CVE-2025-15467 based on findings by Jan Lübbe (Pengutronix).
Open in Who Shared Issue with article?

Re: OpenSSL Security Advisory (corrected - added CVE-2026-22795 and CVE-2026-22796)

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Wed, 28 Jan 2026 10:21:41 +0100 On Wed, 2026-01-28 at 04:06 -0500, Demi Marie Obenour wrote: On 1/27/26 10:48, Tomas Mraz wrote: OpenSSL Security Advisory [27th January 2026] ============================================= Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (CVE-2025-11187) =================================================================== ================== Severity: Moderate ...
Open in Who Shared View Duplicates (2) Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Tue, 27 Jan 2026 16:20:01 +0100 OpenSSL Security Advisory [27th January 2026] ============================================= Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (CVE-2025-11187) ===================================================================================== Severity: Moderate Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based...
Open in Who Shared View Duplicates (2) Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Tue, 30 Sep 2025 15:44:08 +0200 OpenSSL Security Advisory [30th September 2025] =============================================== Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) ================================================================= Severity: Moderate Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and...
Open in Who Shared Issue with article?

CVE-2024-12797: OpenSSL: RFC7250 handshakes with unauthenticated servers don't abort as expected

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Tue, 11 Feb 2025 16:56:46 +0100 OpenSSL Security Advisory [11th February 2025] ============================================== RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797) ======================================================================================== Severity: High Issue summary: Clients using RFC7250 Raw Public Keys (RPKs) to authenticate a server may fail to...
Open in Who Shared Issue with article?

CVE-2024-13176: OpenSSL: Timing side-channel in ECDSA signature computation

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Mon, 20 Jan 2025 14:37:26 +0100 OpenSSL Security Advisory [20th January 2025] ============================================= Timing side-channel in ECDSA signature computation (CVE-2024-13176) =================================================================== Severity: Low Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation.
Open in Who Shared Issue with article?

CVE-2024-9143: OpenSSL: Low-level invalid GF(2^m) parameters lead to OOB memory access

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Wed, 16 Oct 2024 19:08:37 +0200 OpenSSL Security Advisory [16th October 2024] ============================================= Low-level invalid GF(2^m) parameters lead to OOB memory access (CVE-2024-9143) ============================================================================== Severity: Low Issue summary: Use of the low-level GF(2^m) elliptic curve APIs with untrusted explicit values for the field polynomial can...
Open in Who Shared Issue with article?

CVE-2024-6119: OpenSSL: Possible denial of service in X.509 name checks

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Tue, 03 Sep 2024 17:54:30 +0200 OpenSSL Security Advisory [3rd September 2024] ============================================== Possible denial of service in X.509 name checks (CVE-2024-6119) =============================================================== Severity: Moderate Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may attempt to read an invalid...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Thu, 16 May 2024 15:25:41 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [16th May 2024] ========================================= Excessive time spent checking DSA keys and parameters (CVE-2023-3446) ===================================================================== Severity: Low Issue summary: Checking excessively long DSA keys or parameters may be very slow.
Open in Who Shared View Duplicates (2) Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz, This Issue. OpenSsl
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Mon, 8 Apr 2024 13:59:33 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [8th April 2024] ========================================== Unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511) ======================================================================== Severity: Low Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Mon, 15 Jan 2024 12:32:40 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [15th January 2024] ============================================= Excessive time spent checking invalid RSA public keys (CVE-2023-6237) ===================================================================== Severity: Low Issue summary: Checking excessively long invalid RSA public keys may take a long time.
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Tue, 9 Jan 2024 16:39:40 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [9th January 2024] ============================================ POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129) ================================================================================ Severity: Low Issue summary: The POLY1305 MAC (message authentication code) implementation...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Fri, 8 Sep 2023 11:05:02 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [8th September 2023] ============================================== POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807) ============================================================================= Severity: Low Issue summary: The POLY1305 MAC (message authentication code) implementation...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Wed, 19 Jul 2023 11:35:37 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [19th July 2023] ========================================== Excessive time spent checking DH keys and parameters (CVE-2023-3446) ==================================================================== Severity: Low Issue summary: Checking excessively long DH keys or parameters may be very slow.
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Fri, 14 Jul 2023 22:00:17 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [14th July 2023] ========================================== AES-SIV implementation ignores empty associated data entries (CVE-2023-2975) ============================================================================ Severity: Low Issue summary: The AES-SIV cipher implementation contains a bug that causes it to...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz, Matt Caswell
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Tue, 30 May 2023 13:49:33 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [30th May 2023] ========================================= Possible DoS translating ASN.1 object identifiers (CVE-2023-2650) ================================================================= Severity: Moderate Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Thu, 20 Apr 2023 16:05:23 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [20th April 2023] =========================================== Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVE-2023-1255) ============================================================================== Severity: Low Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM...
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| seclists.org
oss-sec mailing list archives From: Tomas Mraz <tomas () openssl org> Date: Tue, 28 Mar 2023 14:03:39 +0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [28th March 2023] =========================================== Invalid certificate policies in leaf certificates are silently ignored (CVE-2023-0465) ====================================================================================== Severity: Low Applications that use a non-default option when verifying...
Open in Who Shared Issue with article?

OpenSSL Blog

|
By Tomas Mraz, Martin Koci, Matt Caswell
| openssl.org
, The OpenSSL Technical Committee (OTC) was recently made aware of several potential attacks against the OpenSSL libraries which might permit information leakage via the Spectre attack.1 Although there are currently no known exploits for the Spectre attacks identified, it is plausible that some of them might be exploitable. Local side channel attacks, such as these, are outside the scope of our security policy, however the project generally does introduce mitigations when they are discovered.
Open in Who Shared Issue with article?

OpenSSL Security Advisory

|
By Tomas Mraz
| LWN.net
From: Matt Caswell <matt-AT-openssl.org> To: openssl-project-AT-openssl.org, openssl-users-AT-openssl.org, openssl-announce-AT-openssl.org Subject: OpenSSL Security Advisory Date: Tue, 15 Mar 2022 16:41:15 +0000 Message-ID: <20220315164115.GA3956435__5030.19546610943$1647363268$gmane$org@openssl.org> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenSSL Security Advisory [15 March 2022] ============================================ Infinite loop in BN_mod_sqrt() reachable when parsing...
Open in Who Shared Issue with article?

Intracardiac Echocardiography-Guided Left Atrial Appendage Closure With a Novel Foam-Based Conformable Device: Safety and 1-Year Outcomes

|
By Mohit K. Turagam, Petr Neuzil, Pavel Hala, Tomas Mraz
| JACC (Journal of the American College of Cardiology)
Abstract Objectives This is a first report of the safety and 1-year outcomes of left atrial appendage closure (LAAC) using a novel foam-based conformable device, guided by intracardiac echocardiography (ICE). Background Limitations of current transcatheter LAAC devices include the need for precise coaxial delivery into the left atrial appendage (LAA), potential for traumatic implantation, incomplete LAA seal, and device-related thrombus.
Open in Who Shared Issue with article?
Show More