Red Hat Security Advisory

RHSA-2025:21248

openssl security update

Released 2025-11-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) openssl-devel-1:3.5.1-4.el10_1, openssl-perl-1:3.5.1-4.el10_1
Red Hat Enterprise Linux BaseOS (v. 10) openssl-1:3.5.1-4.el10_1, openssl-libs-1:3.5.1-4.el10_1

TI-2025-08462 CVE-2025-9230

MEDIUM 52

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01499 Published 2025-09-30 Partial fix · 3.5.4, 3.4.3 +5 CWE-125