Skip to content
OpenAdvisories
High ELSA-2026-44438 1 CVE

Important: compat-openssl11 security update (Oracle Linux 9)

Published Jul 23, 2026 · Updated Jul 23, 2026

Ecosystem: Oracle Linux

Summary

[1:1.1.1k-5.4]
- Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify()

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 compat-openssl11 1:1.1.1k-5.el9_8.4

Vulnerabilities 1

  • High 8.8
    CVE-2026-45447 Public exploit

    Heap Use-After-Free in the PKCS7_verify() Function

    Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi