Skip to content
OpenAdvisories
High ELSA-2025-7895 1 CVE

Important: compat-openssl10 security update (Oracle Linux 8)

Published May 19, 2025 · Updated May 19, 2025

Ecosystem: Oracle Linux

Summary

[1.1.0.2o-4.1]
- Fix CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
Resolves: RHEL-9699

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 compat-openssl10 1:1.0.2o-4.el8_10.1

Vulnerabilities 1

  • High 7.4
    CVE-2023-0286 Public exploit EPSS 68%

    X.400 address type confusion in X.509 GeneralName

    There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI crates.io