[Apollo] Advisories Statistics light light Login

RLSA-2026:0337

Security Mirrored from RHSA-2026:0337
Issued at: 2026-01-14
Updated at: 2026-01-21

Synopsis

Moderate: openssl security update



Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 8 aarch64 Rocky Linux 8 x86_64

Fixes

2396054

CVEs

CVE-2025-9230

Affected packages

Rocky Linux 8 x86_64 - BaseOS

openssl-1:1.1.1k-14.el8_10.src.rpm

Rocky Linux 8 aarch64 - BaseOS

openssl-1:1.1.1k-14.el8_10.src.rpm