Red Hat Security AdvisoryRHSA-2025:3666
openssl security update
Released 2025-04-08 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.4) openssl-devel-1:3.0.7-29.el9_4, openssl-perl-1:3.0.7-29.el9_4
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) openssl-1:3.0.7-29.el9_4, openssl-libs-1:3.0.7-29.el9_4
Fixes 1 record
Priority MEDIUM 54
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.05582 · Published 2024-06-27 · Partial fix · 3.3.2, 3.2.3 +4 CWE-125
