CVE-2025-9230 — Out-of-bounds read & write in RFC 3211 KEK Unwrap

Description

Issue summary: An application trying to decrypt CMS messages encrypted using
password based encryption can trigger an out-of-bounds read and write.

Impact summary: This out-of-bounds read may trigger a crash which leads to
Denial of Service for an application. The out-of-bounds write can cause
a memory corruption which can have various consequences including
a Denial of Service or Execution of attacker-supplied code.

Although the consequences of a successful exploit of this vulnerability
could be severe, the probability that the attacker would be able to
perform it is low. Besides, password based (PWRI) encryption support in CMS
messages is very rarely used. For that reason the issue was assessed as
Moderate severity according to our Security Policy.

The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this
issue, as the CMS implementation is outside the OpenSSL FIPS module
boundary.

Affected products

Vendor	Product	Affected	Fixed
OpenSSL	OpenSSL	3.5.0 – < 3.5.4, 3.4.0 – < 3.4.3, 3.3.0 – < 3.3.5, 3.2.0 – < 3.2.6, 3.0.0 – < 3.0.18, 1.1.1 – < 1.1.1zd, 1.0.2 – < 1.0.2zm	3.5.4

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	openssl	3.5.4-1	—
Debian 13	openssl	3.5.1-1+deb13u1	DSA-6015-1
Debian 12	openssl	3.0.17-1~deb12u3	DSA-6015-1
Debian 11	openssl	1.1.1w-0+deb11u4	DLA-4321-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 26.04 LTS	openssl	3.5.3-1ubuntu2	—
Ubuntu 25.10	openssl	3.5.3-1ubuntu2	—
Ubuntu 24.04 LTS	openssl	3.0.13-0ubuntu3.6	USN-7786-1
Ubuntu 22.04 LTS	openssl	3.0.2-0ubuntu1.20	USN-7786-1

Show 14 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro FIPS 20.04 LTS	openssl	No fix yet	—
Ubuntu Pro FIPS 18.04 LTS	openssl	No fix yet	—
Ubuntu Pro FIPS 16.04 LTS	openssl	No fix yet	—
Ubuntu Pro FIPS-updates 24.04 LTS	openssl-fips	3.0.13-0ubuntu3.6+Fips1	—
Ubuntu Pro FIPS-updates 22.04 LTS	openssl	3.0.2-0ubuntu1.20+Fips1	—
Ubuntu Pro FIPS-updates 22.04 LTS	openssl-fips	No fix yet	—
Ubuntu Pro FIPS-updates 20.04 LTS	openssl	1.1.1f-1ubuntu2.fips.24.1	—
Ubuntu Pro FIPS-updates 18.04 LTS	openssl	1.1.1-1ubuntu2.fips.2.1~18.04.23.6	—
Ubuntu Pro FIPS-updates 16.04 LTS	openssl	1.0.2g-1ubuntu4.fips.4.20.13	—
Ubuntu Pro FIPS-preview 22.04 LTS	openssl +1	No fix yet	—
Ubuntu Pro 22.04 LTS	nodejs	No fix yet	—
Ubuntu Pro 20.04 LTS	openssl	1.1.1f-1ubuntu2.24+esm1	USN-7786-1
Ubuntu Pro 18.04 LTS	nodejs	No fix yet	—
Ubuntu Pro 18.04 LTS	openssl	1.1.1-1ubuntu2.1~18.04.23+esm6	USN-7786-1
Ubuntu Pro 18.04 LTS	openssl1.0	1.0.2n-1ubuntu5.13+esm2	USN-7786-1
Ubuntu Pro 16.04 LTS	nodejs	No fix yet	—
Ubuntu Pro 16.04 LTS	openssl	1.0.2g-1ubuntu4.20+esm13	USN-7786-1
Ubuntu Pro 14.04 LTS	openssl	1.0.1f-1ubuntu2.27+esm11	USN-7786-1

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 10	edk2 +4	20250822-4.el10	RHSA-2026:18320
RHEL 10	openssl +3	1:3.5.1-4.el10_1	RHSA-2025:21248
RHEL 9	edk2 +4	20241117-4.el9_7.3	RHSA-2026:2776
RHEL 9	openssl +3	1:3.5.1-4.el9_7	RHSA-2025:21255
RHEL 8	edk2 +2	20220126gitbb1bba3d77-13.el8_10.10	RHSA-2026:36721
RHEL 8	openssl +3	1:1.1.1k-14.el8_10	RHSA-2026:0337

Show 20 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat Satellite Utils 6	foreman +1	3.18.0.3-3.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-amazing_print	1.6.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-apipie-bindings	0.7.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-clamp	1.3.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-domain_name	0.6.20240107-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-fast_gettext	2.4.0-2.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-ffi	1.16.3-2.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-gssapi +1	1.3.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-hammer_cli	3.18.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-hammer_cli_foreman	3.18.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-hammer_cli_foreman_admin	1.2.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-hammer_cli_foreman_ansible	0.8.2-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-hammer_cli_foreman_azure_rm	0.3.2-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-hammer_cli_foreman_bootdisk	0.4.2-1.el9sat	RHBA-2026:14131
Red Hat Satellite Utils 6	rubygem-hammer_cli_foreman_google	1.1.2-1.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	ansible-core	1:2.16.14-3.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	libcomps +1	0.1.23-1.el9pc	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-cffi	2.0.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-cryptography	46.0.6-1.el9pc	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-jinja2	3.1.5-2.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-markupsafe	3.0.2-2.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-packaging	24.2-3.el9pc	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-pycparser	2.23-1.el9pc	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-pyparsing	3.2.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-pyyaml	6.0.3-1.el9pc	RHBA-2026:14131
Red Hat Satellite Maintenance 6	python3.12-resolvelib	1.0.1-3.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	rubygem-clamp	1.3.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	rubygem-foreman_maintain	1:1.14.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	rubygem-highline	2.1.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	satellite-clone	3.6.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Maintenance 6	satellite-maintain	0.0.5-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite	5.10.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	ansible-collection-redhat-satellite_operations	3.0.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	ansible-core +1	1:2.16.14-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	ansible-lint	5.4.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	ansible-runner +1	2.3.6-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	ansiblerole-insights-client	1.7.1-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	cjson	1.7.18-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	createrepo_c +2	1.2.1-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	dynflow-utils	1.6.3-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	foreman +2	3.18.0.3-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	foreman-bootloaders-redhat +1	202506020000-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	foreman-discovery-image	1:5.1.4-10.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	foreman-discovery-image-service +1	1.0.0-5.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	foreman-fapolicyd +3	1.1.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	foreman-installer +1	1:3.18.0.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	foreman-proxy +1	3.18.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	katello +3	4.20.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	katello-certs-tools	2.10.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	katello-client-bootstrap	1.7.9-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	libcomps +2	0.1.23-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	libsodium	1.0.17-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	libsolv +1	1:0.7.20-7.el8sat	RHSA-2026:50223
Red Hat Satellite Capsule 6	mosquitto	2.0.19-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	openvox-agent	8.24.1-1.el9sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite Capsule 6	openvox-server	8.12.1-1.el9sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite Capsule 6	pulpcore-obsolete-packages	1.3.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	pulpcore-selinux +1	2.2.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	puppet-agent-oauth	0.5.10-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	puppet-foreman_scap_client	1.0.0-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	puppetlabs-stdlib	9.4.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python-pillow +1	12.3.0-1.el8pc	RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite Capsule 6	python-pyjwt +2	2.13.0-1.el8pc	RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite Capsule 6	python3.12-aiodns	3.5.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-aiofiles	24.1.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-aiohappyeyeballs	2.6.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-aiohttp	3.13.3-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-aiohttp-xmlrpc	1.5.0-7.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-aiosignal	1.4.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-ansible-builder	3.0.0-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-asgiref	3.9.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-async-lru	2.0.4-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-asyncio-throttle	1.0.2-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-attrs	22.2.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-backoff	2.2.1-6.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-bindep	2.13.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-bleach	3.3.1-7.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-bleach-allowlist	1.0.3-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-bracex	2.6-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-brotli	1.2.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-certifi	2026.1.4-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-cffi +1	2.0.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-chardet	5.2.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-charset-normalizer	3.4.2-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-click	8.1.7-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-cryptography	46.0.6-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-daemon	2.3.1-5.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-dateutil	2.8.2-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-debian	0.1.49-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-defusedxml	0.7.1-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-deprecated	1.2.18-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-diff-match-patch	20241021-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-distro	1.7.0-7.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-django	4.2.30-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-django-filter	25.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-django-guid	3.5.2-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-django-import-export	3.3.9-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-django-lifecycle	1.2.4-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-django-readonly-field	1.1.2-6.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-djangorestframework	3.15.2-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-djangorestframework-queryfields	1.1.0-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-docutils	0.19-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-drf-access-policy	1.5.0-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-drf-nested-routers	0.94.1-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-drf-spectacular	0.27.2-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-enrich	1.2.6-11.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-flake8	6.1.0-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-frozenlist	1.5.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-galaxy-importer	0.4.33-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-gitdb	4.0.12-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-gitpython	3.1.46-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-gnupg	0.5.4-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-googleapis-common-protos	1.72.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-grpcio	1.70.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-gunicorn	23.0.0-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-idna	3.11-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-importlib-metadata	6.0.1-6.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-importlib-resources	6.4.5-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-inflection +1	0.5.1-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-iniparse	0.5-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-jinja2	3.1.5-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-jq	1.8.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-json_stream	2.3.4-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-json_stream_rs_tokenizer	0.4.28-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-jsonschema	4.10.3-6.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-lockfile	0.12.2-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-markdown	3.8.2-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-markuppy	1.14-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-markupsafe	3.0.2-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-mccabe	0.7.0-5.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-mdurl	0.1.2-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-multidict	6.4.3-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-nh3	0.3.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-odfpy	1.4.1-11.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-openpyxl	3.1.5-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-opentelemetry_api +4	1.36.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-opentelemetry_semantic_conventions	0.57b0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-packaging	24.2-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-parsley	1.3-7.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pbr	5.8.0-6.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pexpect	4.8.0-4.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pillow	12.1.1-1.el9pc	RHSA-2026:50263, RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-productmd	1.33-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-propcache	0.4.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-protobuf	5.29.5-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-psycopg +1	3.2.12-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-psycopg_c	3.2.10-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-ptyprocess	0.7.0-4.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pulp-ansible	1:0.28.6-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pulp-cli +1	0.32.3-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pulp-container	2.26.8-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pulp-deb	3.8.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pulp-rpm	3.32.8-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pulp_manifest	3.0.0-7.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pulpcore	3.85.15-4.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pyOpenSSL	26.0.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pycares	4.11.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pycodestyle	2.11.1-3.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pycparser	2.23-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pyflakes	3.1.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pygments	2.19.2-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pygtrie	2.5.0-6.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pyjwt +1	2.9.0-4.el9pc	RHSA-2026:50263, RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pyparsing	3.2.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pyrsistent	0.18.1-7.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pytz	2022.2.1-7.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-pyyaml	6.0.3-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-redis	5.2.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-requests	2.32.4-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-requirements-parser	0.2.0-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-resolvelib	1.0.1-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-rhsm	1.19.2-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-rich	13.3.1-11.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-ruamel-yaml	0.18.14-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-ruamel-yaml-clib	0.2.12-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-schema	0.7.7-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-semantic-version	2.10.0-6.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-six	1.17.0-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-smmap	5.0.2-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-solv	0.7.28-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-sqlparse	0.5.5-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-tablib	3.5.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-tenacity	7.0.0-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-tomli_w	1.2.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-typing-extensions	4.15.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-uritemplate	4.2.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-url-normalize	1.4.3-9.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-urllib3	2.6.3-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-urlman	2.0.1-6.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-uuid6	2024.7.10-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-wcmatch	10.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-whitenoise	6.9.0-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-wrapt	1.17.3-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-xlrd	2.0.2-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-xlwt	1.3.0-8.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-yarl	1.20.1-1.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	python3.12-zipp	3.21.0-2.el9pc	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-activesupport	7.0.10-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-algebrick	0.7.5-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-ansi	1.5.0-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-bcrypt_pbkdf	1.1.0-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-bundler_ext	0.4.1-7.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-clamp	1.3.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-concurrent-ruby	1:1.1.10-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-concurrent-ruby-edge	1:0.6.0-4.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-domain_name	0.6.20240107-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-dynflow	2.0.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-ed25519	1.2.4-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-excon	1.2.5-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-faraday	1.10.2-1.el9sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite Capsule 6	rubygem-faraday-multipart	1.0.4-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-faraday-rack +4	1.0.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-faraday-retry	1.0.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-faraday_middleware +2	1.2.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-fast_gettext	2.4.0-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-ffi	1.16.3-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-foreman_maintain	1:1.14.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-gssapi	1.3.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-hashie	5.1.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-highline +2	2.1.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-http-accept	1.7.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-i18n	1.14.8-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-infoblox	3.0.0-4.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-journald-logger	3.1.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-journald-native	1.0.12-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-jwt	2.10.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-kafo	7.6.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-kafo_parsers	1.2.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-kafo_wizards	0.0.2-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-little-plugger	1.1.4-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-logging	2.4.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-mime-types	3.7.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-mime-types-data	3.2026.0113-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-mqtt +1	0.5.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-msgpack	1.8.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-multi_json	1.15.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-multipart-post	2.2.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-mustermann	2.0.2-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-net-ssh	7.3.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-netrc	0.11.0-7.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-newt +2	1.0.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-nokogiri	1.15.7-3.el8sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite Capsule 6	rubygem-oauth	1.1.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-oauth-tty	1.0.6-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-openscap_parser	1.0.2-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-pg	1.6.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-powerbar	2.0.1-3.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-rack	2.2.21-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-rack-protection	2.2.4-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-rb-inotify	0.11.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-rbnacl	4.0.2-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-redfish_client	0.7.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-rkerberos	0.1.5-22.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-rsec	0.4.3-5.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-ruby-libvirt	0.8.4-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-ruby2_keywords	0.0.5-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-rubyipmi	0.13.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-sd_notify	0.1.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-sequel	5.100.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-server_sent_events	0.1.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-sinatra	1:2.2.4-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_ansible	3.7.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_container_gateway	3.5.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_dhcp_infoblox	0.0.18-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_dhcp_remote_isc	0.0.5-6.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_discovery	1.0.5-10.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_discovery_image	1.6.0-2.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_openscap	0.12.1-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_pulp	3.4.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_remote_execution_ssh	1.0.2-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-smart_proxy_shellhooks	0.9.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-snaky_hash	2.0.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-sqlite3	1.7.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-statsd-instrument	2.9.2-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-tilt	2.7.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-tzinfo	2.0.6-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-version_gem	1.1.9-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-webrick	1.9.2-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	rubygem-xmlrpc	0.3.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	satellite +3	6.19.0-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	satellite-installer	6.19.0.3-1.el9sat	RHBA-2026:14131
Red Hat Satellite Capsule 6	satellite-maintain	0.0.5-3.el9sat	RHBA-2026:14131
Red Hat Satellite 6	libsolv +1	1:0.7.20-7.el8sat	RHSA-2026:50223
Red Hat Satellite 6	openvox-agent	8.24.1-3.el8sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite 6	openvox-server	8.14.1-1.el8sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite 6	python-pillow +1	12.3.0-1.el8pc	RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite 6	python-pyjwt +2	2.13.0-1.el8pc	RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite 6	python3.12-pillow	12.3.0-1.el9pc	RHSA-2026:50263
Red Hat Satellite 6	python3.12-pyjwt +1	2.13.0-1.el9pc	RHSA-2026:50263
Red Hat Satellite 6	rubygem-faraday	1.10.6-1.el8sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite 6	rubygem-katello	4.14.0.21-1.el8sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
Red Hat Satellite 6	rubygem-nokogiri	1.15.7-3.el8sat	RHSA-2026:50263, RHSA-2026:50223, RHSA-2026:50222
RHEL 10.0 EUS	edk2 +4	20241117-2.el10_0.2	RHSA-2026:65132
RHEL 10.0 EUS	openssl +3	1:3.2.2-16.el10_0.5	RHSA-2025:22794
RHEL 9.6 EUS	edk2 +4	20241117-2.el9_6.2	RHSA-2026:2771
RHEL 9.6 EUS	openssl +3	1:3.2.2-7.el9_6.1	RHSA-2025:21174
RHEL 9.4 EUS	edk2 +4	20231122-6.el9_4.10	RHSA-2026:3164
RHEL 9.4 EUS	openssl +3	1:3.0.7-29.el9_4.1	RHSA-2025:21562
RHEL 9.2 E4S	openssl +3	1:3.0.7-18.el9_2.2	RHSA-2026:0794
RHEL 9.2 E4S	openssl-fips-provider +1	3.0.7-1.el9_2.1	RHSA-2026:0794
RHEL 9.0 E4S	openssl +3	1:3.0.1-46.el9_0.6	RHSA-2026:1349
RHEL 9.0 E4S	openssl-fips-provider +1	3.0.7-1.el9_0.1	RHSA-2026:1349
RHEL 8.8 TUS	edk2 +1	20220126gitbb1bba3d77-4.el8_8.8	RHSA-2026:35846
RHEL 8.8 TUS	openssl +3	1:1.1.1k-14.el8_8.1	RHSA-2026:0602
RHEL 8.8 E4S	edk2 +1	20220126gitbb1bba3d77-4.el8_8.8	RHSA-2026:35846
RHEL 8.8 E4S	openssl +3	1:1.1.1k-14.el8_8.1	RHSA-2026:0602
RHEL 8.6 TUS	openssl +3	1:1.1.1k-14.el8_6.1	RHSA-2026:0714
RHEL 8.6 E4S	openssl +3	1:1.1.1k-14.el8_6.1	RHSA-2026:0714
RHEL 8.6 AUS	openssl +3	1:1.1.1k-14.el8_6.1	RHSA-2026:0714
RHEL 8.4 EUS Long Life	openssl +3	1:1.1.1g-18.el8_4.1	RHSA-2026:1475
RHEL 8.4 AUS	openssl +3	1:1.1.1g-18.el8_4.1	RHSA-2026:1475
RHEL 8.2 AUS	openssl +3	1:1.1.1c-21.el8_2.1	RHSA-2026:0887
RHEL 7 ELS	openssl +4	1:1.0.2k-26.el7_9.1	RHSA-2026:1720
Red Hat JBoss Core Services 1	jbcs-httpd24-apr-util +8	1.6.3-4.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-curl +2	8.11.0-4.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-httpd +6	2.4.62-11.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_http2	2.0.29-8.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_jk +1	1.2.50-12.redhat_1.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_md	1:2.4.28-13.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_proxy_cluster	1.3.22-7.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_security	2.9.6-14.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-mod_ssl +1	1:2.4.62-11.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-openssl +4	1:1.1.1k-21.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-openssl-chil	1.0.0-25.el7jbcs	RHSA-2026:2994
Red Hat JBoss Core Services 1	jbcs-httpd24-openssl-pkcs11	0.4.12-5.el7jbcs	RHSA-2026:2994
Red Hat Hardened Images 1	openssl +5	3.5.6-0.1.hum1	RHSA-2026:7261

AlmaLinux

Errata ↗

Release	Package	Fixed in	Advisory
AlmaLinux 10	openssl +3	1:3.5.1-4.el10_1.alma.1	ALSA-2025:21248
AlmaLinux 9	edk2-ovmf +3	20241117-4.el9_7.3	ALSA-2026:2776
AlmaLinux 9	openssl +3	1:3.5.1-4.el9_7	ALSA-2025:21255
AlmaLinux 8	edk2-ovmf +1	20220126gitbb1bba3d77-13.el8_10.10	ALSA-2026:36721
AlmaLinux 8	openssl +3	1:1.1.1k-14.el8_10	ALSA-2026:0337

Rocky Linux

Errata ↗

Release	Package	Fixed in	Advisory
Rocky Linux 10	openssl	1:3.5.1-4.el10_1	RLSA-2025:21248
Rocky Linux 9	edk2	20241117-4.el9_7.3	RLSA-2026:2776
Rocky Linux 9	openssl	1:3.5.1-4.el9_7	RLSA-2025:21255
Rocky Linux 8	edk2	20220126gitbb1bba3d77-13.el8_10.10	RLSA-2026:36721
Rocky Linux 8	openssl	1:1.1.1k-14.el8_10	RLSA-2026:0337

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 15 SP7	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLES 15 SP7	openssl-1_1	1.1.1w-150700.11.6.1	SUSE-SU-2025:03635-1
SLES 15 SP7	openssl-3	3.2.3-150700.5.21.1	SUSE-SU-2025:03546-1
SLES 15 SP6	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLES 15 SP6	openssl-1_1	1.1.1w-150600.5.18.1	SUSE-SU-2025:03443-1
SLES 15 SP6	openssl-3	3.1.4-150600.5.39.1	SUSE-SU-2025:03442-1
SLES 15 SP5	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLES 15 SP5	openssl-1_1	1.1.1l-150500.17.43.1	SUSE-SU-2025:03438-1
SLES 15 SP5	openssl-3	3.0.8-150500.5.54.1	SUSE-SU-2025:03441-1
SLES 15 SP4	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLES 15 SP4	openssl-1_1	1.1.1l-150400.7.84.1	SUSE-SU-2025:03437-1
SLES 15 SP4	openssl-3	3.0.8-150400.4.75.1	SUSE-SU-2025:03439-1
SLES 15 SP3	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLES 15 SP3	openssl-1_1	1.1.1d-150200.11.103.1	SUSE-SU-2025:03440-1

Show 25 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SLES 12 SP5	openssl-1_0_0	1.0.2p-3.98.1	SUSE-SU-2025:03464-1
SLES 12 SP5	openssl-1_1	1.1.1d-2.119.1	SUSE-SU-2025:03463-1
SLES 11 SP4	openssl1	1.0.1g-0.58.85.1	SUSE-SU-2025:03630-1
SLES for SAP 16.0	openssl-3	3.5.0-160000.4.1	SUSE-SU-2025:21213-1
SLES for SAP 16.0	openssl-3-livepatches	0.3-160000.1.1	SUSE-SU-2026:20607-1
SLES for SAP 15 SP5	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLES for SAP 15 SP5	openssl-1_1	1.1.1l-150500.17.43.1	SUSE-SU-2025:03438-1
SLES for SAP 15 SP5	openssl-3	3.0.8-150500.5.54.1	SUSE-SU-2025:03441-1
SLES for SAP 15 SP4	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLES for SAP 15 SP4	openssl-1_1	1.1.1l-150400.7.84.1	SUSE-SU-2025:03437-1
SLES for SAP 15 SP4	openssl-3	3.0.8-150400.4.75.1	SUSE-SU-2025:03439-1
SLES for SAP 15 SP3	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLES for SAP 15 SP3	openssl-1_1	1.1.1d-150200.11.103.1	SUSE-SU-2025:03440-1
SLES 16.0	openssl-3	3.5.0-160000.4.1	SUSE-SU-2025:21213-1
SLES 16.0	openssl-3-livepatches	0.3-160000.1.1	SUSE-SU-2026:20607-1
SLE Micro 6.2	openssl-3	3.5.0-160000.4.1	SUSE-SU-2025:21224-1
SLE Micro 6.2	openssl-3-livepatches	0.3-160000.1.1	SUSE-SU-2026:20542-1
SLE Micro 6.1	openssl-3	3.1.4-slfo.1.1_7.1	SUSE-SU-2025:20896-1
SLE Micro 6.1	openssl-3-livepatches	0.2-slfo.1.1_1.1	SUSE-SU-2025:20910-1
SLE Micro 6.0	openssl-3	3.1.4-10.1	SUSE-SU-2025:20867-1
SLE Micro 5.5	openssl-1_1	1.1.1l-150500.17.43.1	SUSE-SU-2025:03438-1
SLE Micro 5.4	openssl-1_1	1.1.1l-150400.7.84.1	SUSE-SU-2025:03437-1
SLE Micro 5.4	openssl-3	3.0.8-150400.4.75.1	SUSE-SU-2025:03439-1
SLE Micro 5.3	openssl-1_1	1.1.1l-150400.7.84.1	SUSE-SU-2025:03437-1
SLE Micro 5.3	openssl-3	3.0.8-150400.4.75.1	SUSE-SU-2025:03439-1
SLE Micro 5.2	openssl-1_1	1.1.1d-150200.11.103.1	SUSE-SU-2025:03440-1
SLE Micro 5.1	openssl-1_1	1.1.1d-150200.11.103.1	SUSE-SU-2025:03440-1
SLE Live Patching 15 SP7	openssl-1_1-livepatches	0.5-150700.13.3.1	SUSE-SU-2025:03523-1
SLE Live Patching 15 SP7	openssl-3-livepatches	0.2-150600.13.8.1	SUSE-SU-2025:3917-1, SUSE-SU-2025:03586-1
SLE Live Patching 15 SP6	openssl-1_1-livepatches	0.5-150600.11.3.1	SUSE-SU-2025:03632-1
SLE Live Patching 15 SP6	openssl-3-livepatches	0.2-150600.13.8.1	SUSE-SU-2025:03586-1
SLE Live Patching 15 SP5	openssl-1_1-livepatches	0.5-150500.6.11.1	SUSE-SU-2025:03522-1
SLE Live Patching 15 SP4	openssl-1_1-livepatches	0.5-150400.3.17.1	SUSE-SU-2025:3758-1
SLE HPC 15 SP5	openssl-1_1	1.1.1l-150500.17.43.1	SUSE-SU-2025:03438-1
SLE HPC 15 SP5	openssl-3	3.0.8-150500.5.54.1	SUSE-SU-2025:03441-1
SLE HPC 15 SP4	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLE HPC 15 SP4	openssl-1_1	1.1.1l-150400.7.84.1	SUSE-SU-2025:03437-1
SLE HPC 15 SP4	openssl-3	3.0.8-150400.4.75.1	SUSE-SU-2025:03439-1
SLE HPC 15 SP3	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SLE HPC 15 SP3	openssl-1_1	1.1.1d-150200.11.103.1	SUSE-SU-2025:03440-1
SUSE Manager Server LTS 4.3	openssl-1_1	1.1.1l-150400.7.84.1	SUSE-SU-2025:03437-1
SUSE Manager Server LTS 4.3	openssl-3	3.0.8-150400.4.75.1	SUSE-SU-2025:03439-1
SUSE Manager Proxy LTS 4.3	openssl-1_1	1.1.1l-150400.7.84.1	SUSE-SU-2025:03437-1
SUSE Manager Proxy LTS 4.3	openssl-3	3.0.8-150400.4.75.1	SUSE-SU-2025:03439-1
SUSE Enterprise Storage 7.1	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
SUSE Enterprise Storage 7.1	openssl-1_1	1.1.1d-150200.11.103.1	SUSE-SU-2025:03440-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	openssl-3	3.5.3-2.1	openSUSE-SU-2026:10237-1
openSUSE Tumbleweed	regclient	0.10.0-1.1	openSUSE-SU-2025:15723-1
openSUSE Leap 16.0	openssl-3	3.5.0-160000.4.1	openSUSE-SU-2025:20164-1
openSUSE Leap 15.6	openssl-1_0_0	1.0.2p-150000.3.97.1	SUSE-SU-2025:4126-1
openSUSE Leap 15.6	openssl-1_1	1.1.1w-150600.5.18.1	SUSE-SU-2025:03443-1
openSUSE Leap 15.6	openssl-3	3.1.4-150600.5.39.1	SUSE-SU-2025:03442-1

Alpine

Security tracker ↗

Release	Package	Fixed in	Advisory
Alpine v3.24	libressl	4.1.1-r0	—
Alpine v3.24	openssl	3.5.4-r0	—
Alpine v3.23	libressl	4.1.1-r0	—
Alpine v3.23	openssl	3.5.4-r0	—
Alpine v3.22	libressl	4.1.1-r0	—
Alpine v3.22	openssl	3.5.4-r0	—
Alpine v3.21	openssl	3.3.5-r0	—
Alpine v3.20	openssl	3.3.5-r0	—

Show 2 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Alpine v3.19	openssl	3.1.8-r1	—
Alpine v3.17	openssl	3.0.19-r0	—

Amazon Linux

Release	Package	Fixed in	Advisory
Amazon Linux 2023	openssl +5	1:3.2.2-1.amzn2023.0.2	ALAS2023-2025-1225
Amazon Linux 2	aws-cfn-bootstrap	2.0-38.amzn2	ALAS2-2025-3104
Amazon Linux 2	edk2-ovmf +3	20240813-304.amzn2	ALAS2-2025-3022
Amazon Linux 2	openssl +4	1:1.0.2k-24.amzn2.0.16	ALAS2-2025-3034
Amazon Linux 2	openssl11 +3	1:1.1.1zd-1.amzn2.0.1	ALAS2-2025-3033

Azure Linux

Release	Package	Fixed in	Advisory
Azure Linux 3	edk2	20240524git3e722403cd16-10	—
Azure Linux 3	openssl	3.3.5-1	—
Azure Linux 3	openssl-fips-provider	No fix yet	—
Azure Linux 2 (CBL-Mariner)	openssl	1.1.1k-37	—

Oracle Linux

Release	Package	Fixed in	Advisory
Oracle Linux 10	edk2-ovmf +3	20251114-5.0.1.el10_2.2	ELSA-2026-18320
Oracle Linux 10	openssl +3	1:3.5.1-4.0.1.el10_1	ELSA-2025-21248
Oracle Linux 9	edk2-ovmf +3	20241117-4.0.1.el9_7.3	ELSA-2026-2776
Oracle Linux 9	openssl +3	1:3.5.1-4.0.1.el9_7	ELSA-2025-28011, ELSA-2025-21255
Oracle Linux 8	edk2-ovmf +1	20220126gitbb1bba3d77-13.el8_10.10	ELSA-2026-36721
Oracle Linux 8	openssl +3	1:1.1.1k-14.el8_10	ELSA-2026-0337
Oracle Linux 7	openssl +4	1:1.0.2k-26.0.1.el7_9	ELSA-2026-50114, ELSA-2026-1720

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	openssl	3.5.4-r0	—

Advisories 50

USN-7786-1 openssl, openssl1.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 9, 2026
WID-SEC-2026-2189 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 2, 2026
ALSA-2025:21248 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2026:2776 Moderate: edk2 security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2025:21255 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2026:0337 Moderate: openssl security update AlmaLinux Security Advisories · Oct 29, 2026
ALSA-2026:36721 Moderate: edk2 security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
RHSA-2026:7261 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:50223 Red Hat Security Advisory: Satellite 6.16.12 Async Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:50263 Red Hat Security Advisory: Satellite 6.18.8 Async Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:50222 Red Hat Security Advisory: Satellite 6.17.10 Async Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
RHSA-2026:65132 Red Hat Security Advisory: edk2 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:36721 Red Hat Security Advisory: edk2 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:35846 Red Hat Security Advisory: edk2 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:3164 Red Hat Security Advisory: edk2 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:2994 Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP3 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:2776 Red Hat Security Advisory: edk2 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:2771 Red Hat Security Advisory: edk2 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:18320 Red Hat Security Advisory: edk2 security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:1720 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:1475 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:1349 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:0794 Red Hat Security Advisory: openssl and openssl-fips-provider security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:0887 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:0714 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:0602 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2026:0337 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHBA-2026:14131 Red Hat Bug Fix Advisory: Important: Satellite 6.19.0 new version release Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2025:22794 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2025:21562 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2025:21248 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2025:21255 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
RHSA-2025:21174 Red Hat Security Advisory: openssl security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
SSA-082556 SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 Siemens ProductCERT · Oct 13, 2026
SSA-265688 SSA-265688: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1 Siemens ProductCERT · Oct 13, 2026
WID-SEC-2025-2166 OpenSSL und LibreSSL: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 27, 2026
WID-SEC-2026-0349 Dell Avamar und NetWorker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
ICSA-26-202-04 Siemens SIDIS Secured SmartPlug CISA ICS & IT advisories · Jul 21, 2026
ELSA-2026-18320 Moderate: edk2 security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 21, 2026
WID-SEC-2026-1730 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Jul 16, 2026
NCSC-2026-0229 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jul 14, 2026
SSA-585531 SSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310 Siemens ProductCERT · Jul 14, 2026
RLSA-2026:36721 Moderate: edk2 security, bug fix, and enhancement update Rocky Linux Security Advisories · Jul 9, 2026
ELSA-2026-36721 Moderate: edk2 security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 8, 2026
ICSA-26-188-05 Siemens SINEC OS CISA ICS & IT advisories · Jul 7, 2026
VDE-2026-064 METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3 CERT@VDE · Jun 9, 2026
SSA-253495 SSA-253495: Multiple Vulnerabilities in SINEC OS before V4.0 Siemens ProductCERT · Jun 2, 2026
WID-SEC-2026-0168 Oracle MySQL: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 21, 2026
ICSA-26-134-10 Siemens SIMATIC CISA ICS & IT advisories · May 14, 2026
ICSA-25-162-05 Siemens SIMATIC S7-1500 CPU family CISA ICS & IT advisories · May 14, 2026

EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Description

Affected products

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

AlmaLinux

Rocky Linux

SUSE

openSUSE

Alpine

Amazon Linux

Azure Linux

Oracle Linux

Wolfi

Advisories 50

References