Skip to content
OpenAdvisories
Medium ELSA-2026-4472 1 CVE

Moderate: compat-openssl11 security update (Oracle Linux 9)

Published Mar 12, 2026 · Updated Mar 12, 2026

Ecosystem: Oracle Linux

Summary

[1:1.1.1k-5.2]
- Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
Resolves: RHEL-142722

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 compat-openssl11 1:1.1.1k-5.el9_7.1

Vulnerabilities 1

  • High 7.4
    CVE-2025-69419 Public exploit

    Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

    Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi