Skip to content
OpenAdvisories
High DLA-4321-1 1 CVE

openssl - security update

Published Oct 3, 2025 · Updated Oct 3, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 openssl 1.1.1w-0+deb11u4

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-9230

    Out-of-bounds read & write in RFC 3211 KEK Unwrap

    Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi