Red Hat Security Advisory

RHSA-2026:0337

openssl security update

Released 2026-01-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1k-14.el8_10, openssl-devel-1:1.1.1k-14.el8_10, openssl-libs-1:1.1.1k-14.el8_10 +1

TI-2025-08462 CVE-2025-9230

MEDIUM 52

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01499 Published 2025-09-30 Partial fix · 3.5.4, 3.4.3 +5 CWE-125