Skip to content
OpenAdvisories
High RHSA-2026:1733 2 CVEs

Red Hat Security Advisory: openssl security update

Published Feb 3, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream openssl-devel 1:3.0.1-46.el9_0.7
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream openssl-perl 1:3.0.1-46.el9_0.7
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::baseos openssl 1:3.0.1-46.el9_0.7
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::baseos openssl-libs 1:3.0.1-46.el9_0.7

Vulnerabilities 2

  • High 8.8
    CVE-2025-15467 Public exploit EPSS 75%

    Stack buffer overflow in CMS (Auth)EnvelopedData parsing

    Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote c…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.4
    CVE-2025-69419 Public exploit

    Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

    Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2430376
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2430386
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1733.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-15467
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-15467
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-15467
  • report
    https://access.redhat.com/security/cve/CVE-2025-69419
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-69419
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-69419