Skip to content
OpenAdvisories
High ELSA-2025-7937 1 CVE

Important: compat-openssl11 security update (Oracle Linux 9)

Published May 22, 2025 · Updated May 22, 2025

Ecosystem: Oracle Linux

Summary

[1:1.1.1k-5.1]
- Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName
Resolves: RHEL-88969

[1:1.1.1k-5]
- Update expired certificates used in the testsuite
Resolves: RHEL-5297

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 compat-openssl11 1:1.1.1k-5.el9_6.1

Vulnerabilities 1

  • High 7.4
    CVE-2023-0286 Public exploit EPSS 68%

    X.400 address type confusion in X.509 GeneralName

    There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address fiel…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI crates.io