Description
A flaw was found in OpenSSL's handling of the properties argument in certain functions. This vulnerability can allow use-after-free exploitation, which may result in undefined behavior or incorrect property parsing, leading to OpenSSL treating the input as an empty string.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | rust-openssl | 0.10.39 – < 0.10.72 | 0.10.72 |
| Red Hat | Red Hat Directory Server 11 | — | — |
| Red Hat | Red Hat Directory Server 12 | — | — |
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — |
| Red Hat | Red Hat Trusted Artifact Signer | — | — |
| Red Hat | Red Hat Trusted Profile Analyzer | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | rust-openssl | 0.10.72-1 | — |
| Debian 13 | rust-openssl | 0.10.72-1 | — |
| Debian 12 | rust-openssl | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | rust-openssl | 0.10.57-1ubuntu0.1~esm1 | USN-7891-1 |
| Ubuntu Pro 22.04 LTS | rust-openssl | 0.10.36-1ubuntu0.1~esm1 | USN-7891-1 |
| Ubuntu Pro 20.04 LTS | rust-openssl | 0.10.23-1ubuntu0.1~esm1 | USN-7891-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | himmelblau | 0.7.17+git.0.1ebdab0-150700.3.3.2 | SUSE-SU-2025:02166-1 |
| SLES 15 SP7 | rustup | 1.26.0~0-150600.10.7.1 | SUSE-SU-2025:03298-1 |
| SLES 15 SP7 | s390-tools | 2.37.0-150700.4.3.1 | SUSE-SU-2025:02017-1 |
| SLES 15 SP7 | sccache | 0.16.0~0-150600.10.11.1 | SUSE-SU-2026:3022-1 |
| SLES 15 SP7 | sevctl | 0.6.0-150700.3.3.1 | SUSE-SU-2025:03306-1 |
| SLES 15 SP7 | snpguest | 0.10.0-150700.3.3.1 | SUSE-SU-2026:0620-1 |
| SLES 15 SP6 | 389-ds | 2.2.10~git99.aa5d0ecbf-150600.8.20.1 | SUSE-SU-2025:01806-1 |
| SLES 15 SP6 | rustup | 1.26.0~0-150600.10.7.1 | SUSE-SU-2025:03298-1 |
| SLES 15 SP6 | s390-tools | 2.31.0-150600.8.16.1 | SUSE-SU-2025:01619-1 |
| SLES 15 SP6 | sccache | 0.16.0~0-150600.10.11.1 | SUSE-SU-2026:3022-1 |
| SLES 15 SP6 | sevctl | 0.4.3-150600.4.3.1 | SUSE-SU-2025:03307-1 |
| SLES 15 SP6 | snpguest | 0.3.2-150600.3.6.1 | SUSE-SU-2025:03445-1 |
| SLES 15 SP5 | 389-ds | 2.2.10~git99.aa5d0ecbf-150500.3.36.1 | SUSE-SU-2025:01807-1 |
| SLES 15 SP4 | python-cryptography | 41.0.3-150400.16.22.1 | SUSE-SU-2025:01818-1 |
| SLES 15 SP4 | s390-tools | 2.31.0-150400.7.31.1 | SUSE-SU-2025:01631-1 |
| SLES 3 | python-cryptography | 41.0.3-150600.23.6.1 | SUSE-SU-2025:01662-2, SUSE-SU-2025:01662-1 |
Show 11 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP6 | sccache | 0.16.0~0-150600.10.11.1 | SUSE-SU-2026:3022-1 |
| SLES for SAP 15 SP5 | 389-ds | 2.2.10~git99.aa5d0ecbf-150500.3.36.1 | SUSE-SU-2025:01807-1 |
| SLE Micro 6.1 | afterburn | 5.8.2-slfo.1.1_1.1 | SUSE-SU-2026:23071-1, SUSE-SU-2025:20474-1 |
| SLE Micro 6.1 | python-cryptography | 42.0.4-slfo.1.1_2.1 | SUSE-SU-2025:20463-1 |
| SLE Micro 6.1 | rust-keylime | 0.2.8+12-slfo.1.1_1.1 | SUSE-SU-2025:20858-1 |
| SLE Micro 6.1 | s390-tools | 2.31.0-slfo.1.1_2.1 | SUSE-SU-2025:20365-1 |
| SLE Micro 6.1 | sevctl | 0.4.3-slfo.1.1_3.1 | SUSE-SU-2025:20783-1 |
| SLE Micro 6.0 | afterburn | 5.8.2-1.1 | SUSE-SU-2026:22917-1, SUSE-SU-2025:20429-1 |
| SLE Micro 6.0 | python-cryptography | 42.0.4-2.1 | SUSE-SU-2025:20407-1 |
| SLE Micro 6.0 | rust-keylime | 0.2.8+12-1.1 | SUSE-SU-2025:20717-1 |
| SLE Micro 6.0 | s390-tools | 2.31.0-2.1 | SUSE-SU-2025:20352-1 |
| SLE Micro 6.0 | sevctl | 0.4.3-3.1 | SUSE-SU-2025:20716-1 |
| SLE Micro 5.5 | afterburn | 5.9.0.git21.a73f509-150500.3.3.1 | SUSE-SU-2025:3784-1 |
| SLE Micro 5.5 | rust-keylime | 0.2.7+141-150500.3.5.1 | SUSE-SU-2025:02811-1 |
| SLE Micro 5.4 | afterburn | 5.9.0.git21.a73f509-150400.3.3.1 | SUSE-SU-2025:3785-1 |
| SLE Micro 5.4 | rust-keylime | 0.2.7+141-150400.3.5.1 | SUSE-SU-2025:02810-1 |
| SLE Micro 5.4 | s390-tools | 2.31.0-150400.7.31.1 | SUSE-SU-2025:01631-1 |
| SLE Micro 5.3 | afterburn | 5.9.0.git21.a73f509-150400.3.3.1 | SUSE-SU-2025:3786-1 |
| SLE Micro 5.3 | rust-keylime | 0.2.7+141-150400.3.7.1 | SUSE-SU-2025:02809-1 |
| SLE Micro 5.3 | s390-tools | 2.31.0-150400.7.31.1 | SUSE-SU-2025:01631-1 |
| SLE Micro 5.2 | afterburn | 5.9.0.git21.a73f509-150300.3.5.1 | SUSE-SU-2025:3783-1 |
| SLE HPC 15 SP5 | 389-ds | 2.2.10~git99.aa5d0ecbf-150500.3.36.1 | SUSE-SU-2025:01807-1 |
| SUSE Package Hub 15 SP6 | kanidm | 1.6.2~git0.a20663ea8-bp156.29.1 | openSUSE-SU-2025:0152-1 |
| SUSE Manager Server 4.3 | s390-tools | 2.31.0-150400.7.31.1 | SUSE-SU-2025:01631-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | 389-ds | 3.1.2~git90.2bc7250be-1.1 | openSUSE-SU-2025:15056-1 |
| openSUSE Tumbleweed | afterburn | 5.7.0.git103.bae893c-1.1 | openSUSE-SU-2025:15071-1 |
| openSUSE Tumbleweed | cargo-c | 0.10.3~git0.ee7d7ef-3.1 | openSUSE-SU-2025:15057-1 |
| openSUSE Tumbleweed | flake-pilot | 3.1.19-1.1 | openSUSE-SU-2025:15217-1 |
| openSUSE Tumbleweed | kak-lsp | 21.0.2-1.1 | openSUSE-SU-2026:11475-1 |
| openSUSE Tumbleweed | kanidm | 1.6.0~git0.d7ae0f336-1.1 | openSUSE-SU-2025:15060-1 |
| openSUSE Tumbleweed | ldap-proxy | 0.1.0~90-1.1 | openSUSE-SU-2025:15066-1 |
| openSUSE Tumbleweed | libetebase | 0.5.8-1.1 | openSUSE-SU-2025:15238-1 |
| openSUSE Tumbleweed | pijul | 1.0.0~beta.23-1.1 | openSUSE-SU-2026:11838-1 |
| openSUSE Tumbleweed | rust-keylime | 0.2.7+117-1.1 | openSUSE-SU-2025:15346-1 |
| openSUSE Tumbleweed | rustup | 1.28.1~0-2.1 | openSUSE-SU-2025:15061-1 |
| openSUSE Tumbleweed | s390-tools | 2.37.0-4.1 | openSUSE-SU-2025:15173-1 |
| openSUSE Tumbleweed | sccache | 0.9.1~22-2.1 | openSUSE-SU-2025:15062-1 |
| openSUSE Tumbleweed | sequoia-octopus-librnp | 1.11.0-2.1 | openSUSE-SU-2025:15068-1 |
| openSUSE Tumbleweed | shadowsocks-rust | 1.25.0-1.1 | openSUSE-SU-2026:11818-1 |
| openSUSE Tumbleweed | tealdeer | 1.7.1-2.1 | openSUSE-SU-2025:15063-1 |
| openSUSE Tumbleweed | wasm-bindgen | 0.2.97~0-3.1 | openSUSE-SU-2025:15065-1 |
| openSUSE Leap 16.0 | forgejo-cli | 0.6.0-bp160.1.1 | openSUSE-SU-2026:21605-1 |
| openSUSE Leap 16.0 | kak-lsp | 21.0.2-bp160.1.1 | openSUSE-SU-2026:21560-1 |
| openSUSE Leap 16.0 | shadowsocks-libev | 3.3.6-bp160.3.1 | openSUSE-SU-2026:22189-1 |
| openSUSE Leap 16.0 | shadowsocks-rust | 1.25.0-bp160.1.1 | openSUSE-SU-2026:22189-1 |
| openSUSE Leap 15.6 | 389-ds | 2.2.10~git99.aa5d0ecbf-150600.8.20.1 | SUSE-SU-2025:01806-1 |
| openSUSE Leap 15.6 | cargo-c | 0.10.3~git0.ee7d7ef-150600.3.6.1 | SUSE-SU-2025:1570-1 |
| openSUSE Leap 15.6 | kanidm | 1.6.2~git0.a20663ea8-bp156.29.1 | openSUSE-SU-2025:0152-1 |
| openSUSE Leap 15.6 | python-cryptography | 41.0.3-150600.23.6.1 | SUSE-SU-2025:01662-1 |
| openSUSE Leap 15.6 | python-maturin | 1.4.0-150600.3.6.1 | SUSE-SU-2025:01591-1 |
| openSUSE Leap 15.6 | rustup | 1.26.0~0-150600.10.7.1 | SUSE-SU-2025:03298-1 |
| openSUSE Leap 15.6 | s390-tools | 2.31.0-150600.8.16.1 | SUSE-SU-2025:01619-1 |
| openSUSE Leap 15.6 | sevctl | 0.4.3-150600.4.3.1 | SUSE-SU-2025:03307-1 |
| openSUSE Leap 15.6 | snpguest | 0.3.2-150600.3.6.1 | SUSE-SU-2025:03445-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | amazon-efs-utils | 2.4.0-1.amzn2023 | ALAS2023-2025-1283 |
| Amazon Linux 2023 | aws-nitro-enclaves-cli +2 | 1.4.4-0.amzn2023 | ALAS2023-2026-1371 |
| Amazon Linux 2 | amazon-efs-utils | 2.4.0-1.amzn2 | ALAS2-2025-3076 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | 389-ds-base | No fix yet | — |
Advisories 50
- openSUSE-SU-2026:22189-1 Security update for shadowsocks-rust, shadowsocks-libev SUSE / openSUSE Security Updates · Nov 1, 2026
- USN-7891-1 rust-openssl vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
- openSUSE-SU-2026:11838-1 pijul-1.0.0~beta.23-1.1 on GA media SUSE / openSUSE Security Updates · Sep 22, 2026
- openSUSE-SU-2026:11818-1 shadowsocks-rust-1.25.0-1.1 on GA media SUSE / openSUSE Security Updates · Sep 19, 2026
- openSUSE-SU-2026:21605-1 Security update for forgejo-cli SUSE / openSUSE Security Updates · Aug 21, 2026
- SUSE-SU-2026:23071-1 Security update for afterburn SUSE / openSUSE Security Updates · Aug 14, 2026
- openSUSE-SU-2026:21560-1 Security update for kak-lsp SUSE / openSUSE Security Updates · Aug 12, 2026
- openSUSE-SU-2026:11475-1 kak-lsp-21.0.2-1.1 on GA media SUSE / openSUSE Security Updates · Aug 10, 2026
- SUSE-SU-2026:22917-1 Security update for afterburn SUSE / openSUSE Security Updates · Jul 28, 2026
- SUSE-SU-2026:3022-1 Security update for sccache SUSE / openSUSE Security Updates · Jul 16, 2026
- openSUSE-SU-2025:15346-1 keylime-ima-policy-0.2.7+117-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15238-1 libetebase-devel-0.5.8-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15217-1 flake-pilot-3.1.19-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15173-1 s390-tools-2.37.0-4.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15071-1 afterburn-5.7.0.git103.bae893c-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15061-1 rustup-1.28.1~0-2.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15062-1 sccache-0.9.1~22-2.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15063-1 tealdeer-1.7.1-2.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15065-1 wasm-bindgen-0.2.97~0-3.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15060-1 kanidm-1.6.0~git0.d7ae0f336-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15057-1 cargo-c-0.10.3~git0.ee7d7ef-3.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2025:15056-1 389-ds-3.1.2~git90.2bc7250be-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20716-1 Security update for sevctl SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20717-1 Security update for rust-keylime SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20429-1 Security update for afterburn SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20407-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20352-1 Security update for s390-tools SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03445-1 Security update for snpguest SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02809-1 Security update for rust-keylime SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:01631-1 Security update for s390-tools SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20783-1 Security update for sevctl SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:01806-1 Security update for 389-ds SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:01807-1 Security update for 389-ds SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20474-1 Security update for afterburn SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20463-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03307-1 Security update for sevctl SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:01619-1 Security update for s390-tools SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20365-1 Security update for s390-tools SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02811-1 Security update for rust-keylime SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:02810-1 Security update for rust-keylime SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03306-1 Security update for sevctl SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20858-1 Security update for rust-keylime SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0620-1 Security update for snpguest SUSE / openSUSE Security Updates · Feb 26, 2026
- ALAS2023-2026-1371 Moderate: aws-nitro-enclaves-cli security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 5, 2026
- openSUSE-SU-2025:15066-1 ldap-proxy-0.1.0~90-1.1 on GA media SUSE / openSUSE Security Updates · Feb 5, 2026
- SUSE-SU-2025:01818-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01591-1 Security update for python-maturin SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:01662-1 Security update for python-cryptography SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:0152-1 Security update for kanidm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:3784-1 Security update for afterburn SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://access.redhat.com/security/cve/CVE-2025-3416 vdb-entry
- RHBZ#2357560 issue-tracking
- https://github.com/sfackler/rust-openssl
- https://github.com/sfackler/rust-openssl/commit/87085bd67896b7f92e6de35d081f607a334beae4
- https://github.com/sfackler/rust-openssl/pull/2390
- https://rustsec.org/advisories/RUSTSEC-2025-0022.html