Skip to content
OpenAdvisories
Medium ELSA-2026-1720 1 CVE

Moderate: openssl security update (Oracle Linux 7)

Published Feb 12, 2026 · Updated Feb 12, 2026

Ecosystem: Oracle Linux

Summary

[1:1.0.2k-26.0.1]
- Fixes CVE-2025-9230 Fix incorrect check of unwrapped key size [Orabug: 38916245]

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 7 openssl 1:1.0.2k-26.0.1.el7_9
Oracle Linux · 7 openssl-devel 1:1.0.2k-26.0.1.el7_9
Oracle Linux · 7 openssl-libs 1:1.0.2k-26.0.1.el7_9
Oracle Linux · 7 openssl-perl 1:1.0.2k-26.0.1.el7_9
Oracle Linux · 7 openssl-static 1:1.0.2k-26.0.1.el7_9

Vulnerabilities 1

  • Critical 9.8
    CVE-2025-9230

    Out-of-bounds read & write in RFC 3211 KEK Unwrap

    Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi