Skip to content
OpenAdvisories
Medium ALSA-2026:3042 1 CVE

Moderate: openssl security update

Published Feb 23, 2026 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing (CVE-2025-69419)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 4

ReleasePackageFixed in
AlmaLinux · 8 openssl 1:1.1.1k-15.el8_6
AlmaLinux · 8 openssl-devel 1:1.1.1k-15.el8_6
AlmaLinux · 8 openssl-libs 1:1.1.1k-15.el8_6
AlmaLinux · 8 openssl-perl 1:1.1.1k-15.el8_6

Vulnerabilities 1

  • High 7.4
    CVE-2025-69419 Public exploit

    Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

    Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://access.redhat.com/security/cve/CVE-2025-69419
  • report
    https://bugzilla.redhat.com/2430386
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-3042.html