Red Hat Security Advisory

RHSA-2026:3437

openssl security update

Released 2026-02-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1
Red Hat Enterprise Linux BaseOS E4S (v.8.6) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1
Red Hat Enterprise Linux BaseOS TUS (v.8.6) openssl-1:1.1.1k-15.el8_6, openssl-devel-1:1.1.1k-15.el8_6, openssl-libs-1:1.1.1k-15.el8_6 +1

Fixes 1 record

TI-2025-42862 CVE-2025-69419 · GHSA-x77r-97gw-wh89

Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

LOW 35

Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the alloca…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00607 Published 2026-01-27 Partial fix · 3.6.1, 3.5.5 +4 CWE-787