Oracle Linux Security Advisory ELSA-2026-3042 http://linux.oracle.com/errata/ELSA-2026-3042.html
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: openssl-1.1.1k-15.el8_6.x86_64.rpm openssl-devel-1.1.1k-15.el8_6.i686.rpm openssl-devel-1.1.1k-15.el8_6.x86_64.rpm openssl-libs-1.1.1k-15.el8_6.i686.rpm openssl-libs-1.1.1k-15.el8_6.x86_64.rpm openssl-perl-1.1.1k-15.el8_6.x86_64.rpm aarch64: openssl-1.1.1k-15.el8_6.aarch64.rpm openssl-devel-1.1.1k-15.el8_6.aarch64.rpm openssl-libs-1.1.1k-15.el8_6.aarch64.rpm openssl-perl-1.1.1k-15.el8_6.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/openssl-1.1.1k-15.el8_6.src.rpm Related CVEs: CVE-2025-69419 Description of changes: [1:1.1.1k-15] - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 [1:1.1.1k-14.1] - Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615 _______________________________________________ El-errata mailing list [email protected] https://oss.oracle.com/mailman/listinfo/el-errata
