Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.6
OpenSSL Update Fixes Security Flaw in Encryption Software
published 9 months ago
Summary
A security issue was discovered in OpenSSL, a widely-used encryption tool. This issue could allow an attacker to decrypt sensitive information. Users of OpenSSL should update to the latest version to protect their data.
What to do
- Update redhat openssl to version 1:1.1.1k-14.el8_10.
- Update redhat openssl-debuginfo to version 1:1.1.1k-14.el8_10.
- Update redhat openssl-debugsource to version 1:1.1.1k-14.el8_10.
- Update redhat openssl-devel to version 1:1.1.1k-14.el8_10.
- Update redhat openssl-libs to version 1:1.1.1k-14.el8_10.
- Update redhat openssl-libs-debuginfo to version 1:1.1.1k-14.el8_10.
- Update redhat openssl-perl to version 1:1.1.1k-14.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:8::baseos | redhat | openssl |
< 1:1.1.1k-14.el8_10 Fix: upgrade to 1:1.1.1k-14.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | openssl-debuginfo |
< 1:1.1.1k-14.el8_10 Fix: upgrade to 1:1.1.1k-14.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | openssl-debugsource |
< 1:1.1.1k-14.el8_10 Fix: upgrade to 1:1.1.1k-14.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | openssl-devel |
< 1:1.1.1k-14.el8_10 Fix: upgrade to 1:1.1.1k-14.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | openssl-libs |
< 1:1.1.1k-14.el8_10 Fix: upgrade to 1:1.1.1k-14.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | openssl-libs-debuginfo |
< 1:1.1.1k-14.el8_10 Fix: upgrade to 1:1.1.1k-14.el8_10
|
| Red Hat:enterprise_linux:8::baseos | redhat | openssl-perl |
< 1:1.1.1k-14.el8_10 Fix: upgrade to 1:1.1.1k-14.el8_10
|
Original advisory text
Red Hat Security Advisory: openssl security update
References
- https://access.redhat.com/errata/RHSA-2026:0337 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2396054 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0337.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-9230 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-9230 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-9230 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published14 Jan 2026
Updated6 Mar 2026
First seen6 Mar 2026
Sources
RHSA-2026:0337 · OSV
Track software like this
Free during beta