Skip to content
OpenAdvisories
High ELSA-2026-26275 2 CVEs

Important: openssl security update (Oracle Linux 8)

Published Jun 16, 2026 · Updated Jun 16, 2026

Ecosystem: Oracle Linux

Summary

[1:1.1.1k-16]
- Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify()
Resolves: RHEL-180978
- Fix CVE-2024-4741: Use After Free with SSL_free_buffers
Resolves: RHEL-180983

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 8 openssl 1:1.1.1k-16.el8_6
Oracle Linux · 8 openssl-devel 1:1.1.1k-16.el8_6
Oracle Linux · 8 openssl-libs 1:1.1.1k-16.el8_6
Oracle Linux · 8 openssl-perl 1:1.1.1k-16.el8_6

Vulnerabilities 2

  • Critical 9.8
    CVE-2024-4741

    Use After Free with SSL_free_buffers

    Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, cra…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    CVE-2026-45447 Public exploit

    Heap Use-After-Free in the PKCS7_verify() Function

    Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi