Skip to content
OpenAdvisories
Medium ELSA-2026-0337 1 CVE

Moderate: openssl security update (Oracle Linux 8)

Published Jan 8, 2026 · Updated Jan 8, 2026

Ecosystem: Oracle Linux

Summary

[1:1.1.1k-14]
- Backport fix for Out-of-bounds read & write in RFC 3211 KEK Unwrap
Fix CVE-2025-9230
Resolves: RHEL-128613
- Fix bug for ticket_lifetime_hint exceed issue
Resolves: RHEL-119891

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 openssl 1:1.1.1k-14.el8_10
Oracle Linux · 8 openssl-devel 1:1.1.1k-14.el8_10
Oracle Linux · 8 openssl-libs 1:1.1.1k-14.el8_10
Oracle Linux · 8 openssl-perl 1:1.1.1k-14.el8_10

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-9230

    Out-of-bounds read & write in RFC 3211 KEK Unwrap

    Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi