Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
OpenSSL 1.1.1 Update for Red Hat Fixes Multiple Security Risks
published 7 months ago
Summary
An update is available for OpenSSL 1.1.1 on Red Hat systems. This update addresses multiple security vulnerabilities that could allow an attacker to execute arbitrary code or cause a denial of service. Apply the update to ensure your system remains secure.
What to do
- Update redhat compat-openssl11 to version 1:1.1.1k-4.el9_0.1.
- Update redhat compat-openssl11-debuginfo to version 1:1.1.1k-4.el9_0.1.
- Update redhat compat-openssl11-debugsource to version 1:1.1.1k-4.el9_0.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_e4s:9.0::appstream | redhat | compat-openssl11 |
< 1:1.1.1k-4.el9_0.1 Fix: upgrade to 1:1.1.1k-4.el9_0.1
|
| Red Hat:rhel_e4s:9.0::appstream | redhat | compat-openssl11-debuginfo |
< 1:1.1.1k-4.el9_0.1 Fix: upgrade to 1:1.1.1k-4.el9_0.1
|
| Red Hat:rhel_e4s:9.0::appstream | redhat | compat-openssl11-debugsource |
< 1:1.1.1k-4.el9_0.1 Fix: upgrade to 1:1.1.1k-4.el9_0.1
|
Original advisory text
Red Hat Security Advisory: compat-openssl11 security update
References
- https://access.redhat.com/errata/RHSA-2026:5214 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2430386 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5214.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-69419 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-69419 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-69419 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published23 Mar 2026
Updated23 Mar 2026
First seen23 Mar 2026
Sources
RHSA-2026:5214 · OSV
Track software like this
Free during beta