Material CVE changesDuplicate refreshes excludedSource-attributed evidence

Change intelligence · 1999–2026 catalogue

Material CVE updates

See newly actionable facts without comparing complete reports manually. Cosmetic source edits and repeated refreshes are excluded.

6,010CVEs changed · showing 30 on this page

Open a record to inspect its material changes, evidence source and before-and-after values.

CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCisco · Secure Email GatewayCVSS 3.1 · 9.8 Critical5 material changes15 Oct 2026, 05:42 UTC

Remediation statusRemediation status changed from Awaiting fix to Mitigation available.
Show before and after
Before
Awaiting fix
After
Mitigation available
14 Oct 2026, 16:00 UTCCisco PSIRT ↗
ENISA known-exploited stateENISA EUVD now records this CVE in its known-exploited dataset.
Show before and after
Before
not listed in ENISA EUVD known-exploited dataset
After
listed in ENISA EUVD known-exploited dataset (EUVD-2026-101420)
15 Oct 2026, 00:11 UTCENISA EUVD ↗
BlackTree coverageBlackTree article coverage changed from no BlackTree article to 1 BlackTree article.
Show before and after
Before
no BlackTree article
After
1 BlackTree article
14 Oct 2026, 19:52 UTCBlackTree editorial ↗
CISA KEV stateCISA KEV now confirms exploitation in the wild.
Show before and after
Before
not listed in CISA KEV
After
listed in CISA KEV since 2026-10-14
14 Oct 2026, 16:07 UTCCISA KEV ↗
New catalogue recordCVE added to the BlackTree catalogue.
14 Oct 2026, 16:07 UTCCNA ↗

Open full change history →

CVE-2023-27532Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function VulnerabilityVeeam · Backup & ReplicationCVSS 3.1 · 7.5 High28 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
15 Oct 2026, 05:42 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
15 Oct 2026, 05:42 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
15 Oct 2026, 02:25 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
15 Oct 2026, 02:25 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 23:57 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 23:57 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 22:44 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 22:44 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 19:37 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 19:37 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 18:25 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 18:25 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 17:11 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 17:11 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 15:35 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 15:35 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 13:19 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 13:19 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 11:40 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 11:40 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 10:24 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 10:24 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 09:14 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 09:14 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 08:08 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 08:08 UTCVeeam ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
Veeam Backup & Replication: Fixed Versions: v12 (build 12.0.0.1420 P20230223), 11a (build 11.0.1.1261 P20230227) · Fixed: 11a (build 11.0.1.1261 P20230227); 12 (build 12.0.0.1420 P20230223)
14 Oct 2026, 06:57 UTCVeeam ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 06:57 UTCVeeam ↗

Open full change history →

CVE-2025-0395The GNU C Library glibc: Incorrect Calculation of Buffer SizeThe GNU C Library · glibcCVSS 3.1 · 6.2 Medium5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
glibc: 2.13 ≤ 2.40 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
glibc: 2.13 ≤ 2.40 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
13 Oct 2026, 21:11 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
13 Oct 2026, 21:11 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
15 Oct 2026, 01:01 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed patch: cert-portal.siemens.com/ssa-577017.html; removed remediation: cert-portal.siemens.com/ssa-577017.html.
Show before and after
Before
patch: cert-portal.siemens.com/ssa-577017.html · remediation: cert-portal.siemens.com/ssa-577017.html
After
no authoritative guidance recorded
15 Oct 2026, 01:01 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
2.13 ≤ 2.40 · Fixed: Update to V2.17.1 or later version
After
glibc: 2.13 ≤ 2.40 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
15 Oct 2026, 01:01 UTCCNA ↗

Open full change history →

CVE-2025-20137Cisco IOS — Improper Access ControlCisco · IOSCVSS 3.1 · 4.7 Medium1 material change15 Oct 2026, 05:42 UTC

Remediation statusRemediation status changed from Awaiting fix to Mitigation available.
Show before and after
Before
Awaiting fix
After
Mitigation available
7 May 2025, 16:00 UTCCisco PSIRT ↗

Open full change history →

CVE-2025-31115XZ has a heap-use-after-free bug in threaded .xz decodertukaani-project · xzCVSS 4.0 · 8.7 High4 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
xz: >= 5.3.3alpha, < 5.8.1 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
xz: >= 5.3.3alpha, < 5.8.1 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
31 Aug 2026, 11:24 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
15 Oct 2026, 01:06 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2025-31115.
Show before and after
Before
remediation: access.redhat.com/CVE-2025-31115
After
no authoritative guidance recorded
15 Oct 2026, 01:06 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
>= 5.3.3alpha, < 5.8.1 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
xz: >= 5.3.3alpha, < 5.8.1 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
15 Oct 2026, 01:06 UTCCNA ↗

Open full change history →

CVE-2025-46836net-tools Stack-based Buffer Overflow vulnerabilityecki · net-toolsCVSS 3.1 · 6.6 Medium4 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
net-tools: <= 2.10 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
net-tools: <= 2.10 · Fixed: Update to V2.17.1 or later version
12 May 2026, 00:00 UTCSiemens ProductCERT ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
15 Oct 2026, 01:09 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed patch: cert-portal.siemens.com/ssa-577017.html; removed remediation: cert-portal.siemens.com/ssa-577017.html.
Show before and after
Before
patch: cert-portal.siemens.com/ssa-577017.html · remediation: cert-portal.siemens.com/ssa-577017.html
After
no authoritative guidance recorded
15 Oct 2026, 01:09 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
<= 2.10 · Fixed: Update to V2.17.1 or later version
After
net-tools: <= 2.10 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
15 Oct 2026, 01:09 UTCCNA ↗

Open full change history →

CVE-2025-59375libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsinglibexpat project · libexpatCVSS 3.1 · 7.5 High5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
libexpat: < 2.7.2 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
libexpat: < 2.7.2 · Fixed: For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes You may download the oc tool and use it to inspect release image metadata for the x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:9ea794d2dd24ff7377534edfb0447e5398a28919a84300cc79fe7bb8ae550d1b All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.
9 Oct 2026, 01:06 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
9 Oct 2026, 01:06 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
15 Oct 2026, 01:09 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2025-59375.
Show before and after
Before
remediation: access.redhat.com/CVE-2025-59375
After
no authoritative guidance recorded
15 Oct 2026, 01:09 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
< 2.7.2 · Fixed: For OpenShift Container Platform 4.12 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html/release_notes You may download the oc tool and use it to inspect release image metadata for the x86_64 architecture. The image digest may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags. The sha value for the release is as follows: (For x86_64 architecture) The image digest is sha256:9ea794d2dd24ff7377534edfb0447e5398a28919a84300cc79fe7bb8ae550d1b All OpenShift Container Platform 4.12 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.12/html-single/updating_clusters/index#updating-cluster-within-minor.
After
libexpat: < 2.7.2 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
15 Oct 2026, 01:09 UTCCNA ↗

Open full change history →

CVE-2025-66382In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing timelibexpat project · libexpatCVSS 3.1 · 2.9 Low4 material changes15 Oct 2026, 05:42 UTC

Remediation statusRemediation status changed from Awaiting fix to Mitigation available.
Show before and after
Before
Awaiting fix
After
Mitigation available
23 Sep 2026, 17:08 UTCSUSE Product Security Team ↗
Remediation statusRemediation status changed from Mitigation available to Awaiting fix.
Show before and after
Before
Mitigation available
After
Awaiting fix
15 Oct 2026, 01:09 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed patch: cert-portal.siemens.com/ssa-253495.html; removed remediation: cert-portal.siemens.com/ssa-253495.html.
Show before and after
Before
patch: cert-portal.siemens.com/ssa-253495.html · remediation: cert-portal.siemens.com/ssa-253495.html
After
no authoritative guidance recorded
15 Oct 2026, 01:09 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
≤ 2.7.5 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
libexpat: ≤ 2.7.5 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
15 Oct 2026, 01:09 UTCCNA ↗

Open full change history →

CVE-2025-68160Heap out-of-bounds write in BIO_f_linebuffer on short writesOpenSSL · OpenSSLCVSS 3.1 · 4.7 Medium5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/4c96fbba618e1940f038012506ee9e21d32ee12c; removed remediation: access.redhat.com/CVE-2025-68160.
Show before and after
Before
patch: github.com/384011202af92605d926fafe4a0bcd6b65d162ad · patch: github.com/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6 · patch: github.com/4c96fbba618e1940f038012506ee9e21d32ee12c · 4 more references
After
patch: github.com/384011202af92605d926fafe4a0bcd6b65d162ad · patch: github.com/475c466ef2fbd8fc1df6fae1c3eed9c813fc8ff6 · patch: github.com/4c96fbba618e1940f038012506ee9e21d32ee12c · 4 more references
15 Oct 2026, 01:09 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.1; 3.5.0 < 3.5.5; 3.4.0 < 3.4.4; 3.3.0 < 3.3.6; 3.0.0 < 3.0.19; 1.1.1 < 1.1.1ze; 1.0.2 < 1.0.2zn · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:09 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 104 more
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 77 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
14 Oct 2026, 03:27 UTCRed Hat Product Security ↗

Open full change history →

CVE-2025-69418Unauthenticated/unencrypted trailing bytes with low-level OCB function callsOpenSSL · OpenSSLCVSS 3.1 · 4.0 Medium5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/ed40856d7d4ba6cb42779b6770666a65f19cb977; removed remediation: access.redhat.com/CVE-2025-69418.
Show before and after
Before
patch: github.com/372fc5c77529695b05b4f5b5187691a57ef5dffc · patch: github.com/4016975d4469cd6b94927c607f7c511385f928d8 · patch: github.com/52d23c86a54adab5ee9f80e48b242b52c4cc2347 · 4 more references
After
patch: github.com/372fc5c77529695b05b4f5b5187691a57ef5dffc · patch: github.com/4016975d4469cd6b94927c607f7c511385f928d8 · patch: github.com/52d23c86a54adab5ee9f80e48b242b52c4cc2347 · 4 more references
15 Oct 2026, 01:10 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.1; 3.5.0 < 3.5.5; 3.4.0 < 3.4.4; 3.3.0 < 3.3.6; 3.0.0 < 3.0.19; 1.1.1 < 1.1.1ze · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:10 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); and 136 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); and 137 more
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); and 110 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debugsource-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-devel-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-perl-1:3.2.2-16.el10_0.7.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0); openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); and 136 more
14 Oct 2026, 03:27 UTCRed Hat Product Security ↗

Open full change history →

CVE-2025-69419Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversionOpenSSL · OpenSSLCVSS 3.1 · 7.4 High4 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:31 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/7e9cac9832e4705b91987c2474ed06a37a93cecb; removed remediation: access.redhat.com/CVE-2025-69419.
Show before and after
Before
patch: github.com/41be0f216404f14457bbf3b9cc488dba60b49296 · patch: github.com/7e9cac9832e4705b91987c2474ed06a37a93cecb · patch: github.com/a26a90d38edec3748566129d824e664b54bee2e2 · 4 more references
After
patch: github.com/41be0f216404f14457bbf3b9cc488dba60b49296 · patch: github.com/7e9cac9832e4705b91987c2474ed06a37a93cecb · patch: github.com/a26a90d38edec3748566129d824e664b54bee2e2 · 4 more references
15 Oct 2026, 01:10 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.1; 3.5.0 < 3.5.5; 3.4.0 < 3.4.4; 3.3.0 < 3.3.6; 3.0.0 < 3.0.19; 1.1.1 < 1.1.1ze · Fixed: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:10 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · Fixed: jbcs-httpd24-apr-util-0:1.6.3-4.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-debuginfo-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-devel-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-ldap-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-mysql-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-nss-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-odbc-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-openssl-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-pgsql-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-sqlite-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-curl-0:8.11.0-4.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-curl-0:8.11.0-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-curl-debuginfo-0:8.11.0-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-0:2.4.62-11.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-debuginfo-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-devel-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-manual-0:2.4.62-11.el7jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-selinux-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-tools-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-libcurl-0:8.11.0-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-libcurl-devel-0:8.11.0-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_http2-0:2.0.29-8.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_http2-0:2.0.29-8.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_http2-debuginfo-0:2.0.29-8.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_jk-0:1.2.50-12.redhat_1.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_jk-ap24-0:1.2.50-12.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-12.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_ldap-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; and 522 more
After
openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6 · Fixed: jbcs-httpd24-apr-util-0:1.6.3-4.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-debuginfo-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-devel-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-ldap-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-mysql-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-nss-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-odbc-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-openssl-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-pgsql-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-apr-util-sqlite-0:1.6.3-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-curl-0:8.11.0-4.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-curl-0:8.11.0-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-curl-debuginfo-0:8.11.0-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-0:2.4.62-11.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-debuginfo-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-devel-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-manual-0:2.4.62-11.el7jbcs.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-selinux-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-httpd-tools-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-libcurl-0:8.11.0-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-libcurl-devel-0:8.11.0-4.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_http2-0:2.0.29-8.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_http2-0:2.0.29-8.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_http2-debuginfo-0:2.0.29-8.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_jk-0:1.2.50-12.redhat_1.el7jbcs.src as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_jk-ap24-0:1.2.50-12.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_jk-debuginfo-0:1.2.50-12.redhat_1.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; jbcs-httpd24-mod_ldap-0:2.4.62-11.el7jbcs.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server; and 550 more
14 Oct 2026, 19:31 UTCRed Hat Product Security ↗

Open full change history →

CVE-2025-69420Missing ASN1_TYPE validation in TS_RESP_verify_response() functionOpenSSL · OpenSSLCVSS 3.1 · 7.5 High5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/a99349ebfc519999edc50620abe24d599b9eb085; removed remediation: access.redhat.com/CVE-2025-69420.
Show before and after
Before
patch: github.com/27c7012c91cc986a598d7540f3079dfde2416eb9 · patch: github.com/4e254b48ad93cc092be3dd62d97015f33f73133a · patch: github.com/564fd9c73787f25693bf9e75faf7bf6bb1305d4e · 4 more references
After
patch: github.com/27c7012c91cc986a598d7540f3079dfde2416eb9 · patch: github.com/4e254b48ad93cc092be3dd62d97015f33f73133a · patch: github.com/564fd9c73787f25693bf9e75faf7bf6bb1305d4e · 4 more references
15 Oct 2026, 01:10 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.1; 3.5.0 < 3.5.5; 3.4.0 < 3.4.4; 3.3.0 < 3.3.6; 3.0.0 < 3.0.19; 1.1.1 < 1.1.1ze · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:10 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 104 more
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 77 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
14 Oct 2026, 03:27 UTCRed Hat Product Security ↗

Open full change history →

CVE-2025-69421NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionOpenSSL · OpenSSLCVSS 3.1 · 7.5 High5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/a2dbc539f0f9cc63832709fa5aa33ad9495eb19c; removed remediation: access.redhat.com/CVE-2025-69421.
Show before and after
Before
patch: github.com/3524a29271f8191b8fd8a5257eb05173982a097b · patch: github.com/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7 · patch: github.com/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd · 4 more references
After
patch: github.com/3524a29271f8191b8fd8a5257eb05173982a097b · patch: github.com/36ecb4960872a4ce04bf6f1e1f4e78d75ec0c0c7 · patch: github.com/4bbc8d41a72c842ce4077a8a3eccd1109aaf74bd · 4 more references
15 Oct 2026, 01:10 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.1; 3.5.0 < 3.5.5; 3.4.0 < 3.4.4; 3.3.0 < 3.3.6; 3.0.0 < 3.0.19; 1.1.1 < 1.1.1ze; 1.0.2 < 1.0.2zn · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:10 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 104 more
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 77 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
14 Oct 2026, 03:27 UTCRed Hat Product Security ↗

Open full change history →

CVE-2025-70873An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP fileSiemens · RUGGEDCOM CROSSBOW Station Access Controller (SAC)CVSS 3.1 · 7.5 High5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
RUGGEDCOM CROSSBOW Station Access Controller (SAC): < V6.0 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
RUGGEDCOM CROSSBOW Station Access Controller (SAC): < V6.0 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
1 Sep 2026, 12:10 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: sqlite.org/3d459f1fb1bd1b5e; removed remediation: access.redhat.com/CVE-2025-70873.
Show before and after
Before
patch: sqlite.org/3d459f1fb1bd1b5e · remediation: access.redhat.com/CVE-2025-70873
After
patch: sqlite.org/3d459f1fb1bd1b5e · remediation: sqlite.org/3d459f1fb1bd1b5e
15 Oct 2026, 01:10 UTCcve@mitre.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
n/a · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
After
RUGGEDCOM CROSSBOW Station Access Controller (SAC): < V6.0 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:10 UTCOther authority ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: sqlite.org/3d459f1fb1bd1b5e; removed remediation: access.redhat.com/CVE-2025-70873.
Show before and after
Before
patch: sqlite.org/3d459f1fb1bd1b5e · remediation: access.redhat.com/CVE-2025-70873
After
patch: sqlite.org/3d459f1fb1bd1b5e · remediation: sqlite.org/3d459f1fb1bd1b5e
14 Mar 2026, 03:35 UTCcve@mitre.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
n/a · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
After
n/a · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
14 Mar 2026, 03:35 UTCCVE.org ↗

Open full change history →

CVE-2025-9232Out-of-bounds read in HTTP client no_proxy handlingOpenSSL · OpenSSLCVSS 3.1 · 5.9 Medium4 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.5.0 < 3.5.4, 3.4.0 < 3.4.3, 3.3.3 < 3.3.5, 3.2.4 < 3.2.6, 3.0.16 < 3.0.18 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
OpenSSL: 3.5.0 < 3.5.4, 3.4.0 < 3.4.3, 3.3.3 < 3.3.5, 3.2.4 < 3.2.6, 3.0.16 < 3.0.18 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
1 Sep 2026, 12:08 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
15 Oct 2026, 01:02 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2025-9232.
Show before and after
Before
remediation: access.redhat.com/CVE-2025-9232
After
no authoritative guidance recorded
15 Oct 2026, 01:02 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.5.0 < 3.5.4; 3.4.0 < 3.4.3; 3.3.3 < 3.3.5; 3.2.4 < 3.2.6; 3.0.16 < 3.0.18 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
After
OpenSSL: 3.5.0 < 3.5.4, 3.4.0 < 3.4.3, 3.3.3 < 3.3.5, 3.2.4 < 3.2.6, 3.0.16 < 3.0.18 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
15 Oct 2026, 01:02 UTCCNA ↗

Open full change history →

CVE-2026-22795Missing ASN1_TYPE validation in PKCS#12 parsingOpenSSL · OpenSSLCVSS 3.1 · 5.5 Medium5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/ef2fb66ec571564d64d1c74a12e388a2a54d05d2; removed remediation: access.redhat.com/CVE-2026-22795.
Show before and after
Before
patch: github.com/2502e7b7d4c0cf4f972a881641fe09edc67aeec4 · patch: github.com/572844beca95068394c916626a6d3a490f831a49 · patch: github.com/7bbca05be55b129651d9df4bdb92becc45002c12 · 4 more references
After
patch: github.com/2502e7b7d4c0cf4f972a881641fe09edc67aeec4 · patch: github.com/572844beca95068394c916626a6d3a490f831a49 · patch: github.com/7bbca05be55b129651d9df4bdb92becc45002c12 · 4 more references
15 Oct 2026, 01:12 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.1; 3.5.0 < 3.5.5; 3.4.0 < 3.4.4; 3.3.0 < 3.3.6; 3.0.0 < 3.0.19; 1.1.1 < 1.1.1ze · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:12 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 104 more
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 77 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
14 Oct 2026, 03:27 UTCRed Hat Product Security ↗

Open full change history →

CVE-2026-22796ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() functionOpenSSL · OpenSSLCVSS 3.1 · 5.3 Medium5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/ef2fb66ec571564d64d1c74a12e388a2a54d05d2; removed remediation: access.redhat.com/CVE-2026-22796.
Show before and after
Before
patch: github.com/2502e7b7d4c0cf4f972a881641fe09edc67aeec4 · patch: github.com/572844beca95068394c916626a6d3a490f831a49 · patch: github.com/7bbca05be55b129651d9df4bdb92becc45002c12 · 4 more references
After
patch: github.com/2502e7b7d4c0cf4f972a881641fe09edc67aeec4 · patch: github.com/572844beca95068394c916626a6d3a490f831a49 · patch: github.com/7bbca05be55b129651d9df4bdb92becc45002c12 · 4 more references
15 Oct 2026, 01:12 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.1; 3.5.0 < 3.5.5; 3.4.0 < 3.4.4; 3.3.0 < 3.3.6; 3.0.0 < 3.0.19; 1.1.1 < 1.1.1ze; 1.0.2 < 1.0.2zn · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
OpenSSL: 3.6.0 < 3.6.1, 3.5.0 < 3.5.5, 3.4.0 < 3.4.4, 3.3.0 < 3.3.6, 3.0.0 < 3.0.19, 1.1.1 < 1.1.1ze, 1.0.2 < 1.0.2zn · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:12 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 104 more
14 Oct 2026, 19:46 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 77 more
After
edk2-aarch64 as a component of Red Hat Enterprise Linux 10; edk2-ovmf as a component of Red Hat Enterprise Linux 10; edk2-tools as a component of Red Hat Enterprise Linux 10; edk2-tools-doc as a component of Red Hat Enterprise Linux 10; edk2.src as a component of Red Hat Enterprise Linux 10; mokutil as a component of Red Hat Enterprise Linux 10; shim-aa64 as a component of Red Hat Enterprise Linux 10; shim-unsigned-aarch64.src as a component of Red Hat Enterprise Linux 10; shim-unsigned-x64.src as a component of Red Hat Enterprise Linux 10; shim-x64 as a component of Red Hat Enterprise Linux 10; openssl as a component of Red Hat Enterprise Linux 6; openssl-devel as a component of Red Hat Enterprise Linux 6; openssl-perl as a component of Red Hat Enterprise Linux 6; openssl-static as a component of Red Hat Enterprise Linux 6; openssl.src as a component of Red Hat Enterprise Linux 6; AAVMF as a component of Red Hat Enterprise Linux 7; OVMF as a component of Red Hat Enterprise Linux 7; openssl as a component of Red Hat Enterprise Linux 7; openssl-devel as a component of Red Hat Enterprise Linux 7; openssl-libs as a component of Red Hat Enterprise Linux 7; openssl-perl as a component of Red Hat Enterprise Linux 7; openssl-static as a component of Red Hat Enterprise Linux 7; openssl.src as a component of Red Hat Enterprise Linux 7; ovmf.src as a component of Red Hat Enterprise Linux 7; compat-openssl10 as a component of Red Hat Enterprise Linux 8; compat-openssl10.src as a component of Red Hat Enterprise Linux 8; edk2-aarch64 as a component of Red Hat Enterprise Linux 8; edk2-ovmf as a component of Red Hat Enterprise Linux 8; edk2.src as a component of Red Hat Enterprise Linux 8; mingw-openssl.src as a component of Red Hat Enterprise Linux 8; and 30 more · Fixed: openssl-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debugsource-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-devel-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-libs-debuginfo-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-perl-1:3.5.1-7.el10_1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); openssl-debuginfo-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debuginfo-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9); openssl-debugsource-1:3.5.1-7.el9_7.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9); and 103 more
14 Oct 2026, 03:27 UTCRed Hat Product Security ↗

Open full change history →

CVE-2026-28387Potential Use-after-free in DANE Client CodeOpenSSL · OpenSSLCVSS 3.1 · 8.1 High3 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
15 Sep 2026, 19:34 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/258a8f63b26995ba357f4326da00e19e29c6acbe; removed remediation: access.redhat.com/CVE-2026-28387.
Show before and after
Before
patch: github.com/07e727d304746edb49a98ee8f6ab00256e1f012b · patch: github.com/258a8f63b26995ba357f4326da00e19e29c6acbe · patch: github.com/444958deaf450aea819171f97ae69eaedede42c3 · 4 more references
After
patch: github.com/07e727d304746edb49a98ee8f6ab00256e1f012b · patch: github.com/258a8f63b26995ba357f4326da00e19e29c6acbe · patch: github.com/444958deaf450aea819171f97ae69eaedede42c3 · 4 more references
15 Oct 2026, 01:15 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.2; 3.5.0 < 3.5.6; 3.4.0 < 3.4.5; 3.3.0 < 3.3.7; 3.0.0 < 3.0.20; 1.1.1 < 1.1.1zg · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
After
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:15 UTCCNA ↗

Open full change history →

CVE-2026-28388NULL Pointer Dereference When Processing a Delta CRLOpenSSL · OpenSSLCVSS 3.1 · 7.5 High3 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
1 Sep 2026, 12:10 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/602542f2c0c2d5edb47128f93eac10b62aeeefb3; removed remediation: access.redhat.com/CVE-2026-28388.
Show before and after
Before
patch: github.com/59c3b3158553ab53275bbbccca5cb305d591cf2e · patch: github.com/5a0b4930779cd2408880979db765db919da55139 · patch: github.com/602542f2c0c2d5edb47128f93eac10b62aeeefb3 · 4 more references
After
patch: github.com/59c3b3158553ab53275bbbccca5cb305d591cf2e · patch: github.com/5a0b4930779cd2408880979db765db919da55139 · patch: github.com/602542f2c0c2d5edb47128f93eac10b62aeeefb3 · 4 more references
15 Oct 2026, 01:15 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.2; 3.5.0 < 3.5.6; 3.4.0 < 3.4.5; 3.3.0 < 3.3.7; 3.0.0 < 3.0.20; 1.1.1 < 1.1.1zg; 1.0.2 < 1.0.2zp · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
After
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:15 UTCCNA ↗

Open full change history →

CVE-2026-28389Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfoOpenSSL · OpenSSLCVSS 3.1 · 7.5 High3 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
1 Sep 2026, 12:10 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/f80f83bc5fd036bc47d773e8b15a001e2b4ce686; removed remediation: access.redhat.com/CVE-2026-28389.
Show before and after
Before
patch: github.com/16cea4188e0ea567deb4f93f85902247e67384f5 · patch: github.com/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616 · patch: github.com/7b5274e812400cacb6f3be4c2df5340923fa807f · 4 more references
After
patch: github.com/16cea4188e0ea567deb4f93f85902247e67384f5 · patch: github.com/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616 · patch: github.com/7b5274e812400cacb6f3be4c2df5340923fa807f · 4 more references
15 Oct 2026, 01:15 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.2; 3.5.0 < 3.5.6; 3.4.0 < 3.4.5; 3.3.0 < 3.3.7; 3.0.0 < 3.0.20; 1.1.1 < 1.1.1zg; 1.0.2 < 1.0.2zp · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
After
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:15 UTCCNA ↗

Open full change history →

CVE-2026-28390Possible NULL Dereference When Processing CMS KeyTransportRecipientInfoOpenSSL · OpenSSLCVSS 3.1 · 7.5 High5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 20:30 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/01194a8f1941115cd0383bfa91c736dd3993c8bc; removed remediation: access.redhat.com/CVE-2026-28390.
Show before and after
Before
patch: github.com/01194a8f1941115cd0383bfa91c736dd3993c8bc · patch: github.com/2e39b7a6993be445fddb9fbce316fa756e0397b6 · patch: github.com/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4 · 4 more references
After
patch: github.com/01194a8f1941115cd0383bfa91c736dd3993c8bc · patch: github.com/2e39b7a6993be445fddb9fbce316fa756e0397b6 · patch: github.com/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4 · 4 more references
15 Oct 2026, 01:15 UTCopenssl-security@openssl.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
3.6.0 < 3.6.2; 3.5.0 < 3.5.6; 3.4.0 < 3.4.5; 3.3.0 < 3.3.7; 3.0.0 < 3.0.20; 1.1.1 < 1.1.1zg; 1.0.2 < 1.0.2zp · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
OpenSSL: 3.6.0 < 3.6.2, 3.5.0 < 3.5.6, 3.4.0 < 3.4.5, 3.3.0 < 3.3.7, 3.0.0 < 3.0.20, 1.1.1 < 1.1.1zg, 1.0.2 < 1.0.2zp · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:15 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
confidential-clusters-beta/confidential-cluster-operator-bundle as a component of Confidential Cluster Operator; redhat-user-workloads/attestation-key-register as a component of Confidential Cluster Operator; redhat-user-workloads/buildroot as a component of Confidential Cluster Operator; redhat-user-workloads/compute-pcrs as a component of Confidential Cluster Operator; redhat-user-workloads/confidential-cluster-operator as a component of Confidential Cluster Operator; redhat-user-workloads/registration-server as a component of Confidential Cluster Operator; openshift-sandboxed-containers/osc-operator-bundle as a component of Confidential Compute Attestation; redhat-user-workloads/osc-monitor as a component of Confidential Compute Attestation; redhat-user-workloads/osc-operator as a component of Confidential Compute Attestation; redhat-user-workloads/osc-podvm-builder as a component of Confidential Compute Attestation; redhat-user-workloads/osc-podvm-payload as a component of Confidential Compute Attestation; redhat-user-workloads/trustee as a component of Confidential Compute Attestation; lightspeed-core/dataverse-exporter-rhel9 as a component of Lightspeed Core; redhat-user-workloads/logging-vector-v6-2 as a component of Logging Subsystem for Red Hat OpenShift; redhat-user-workloads/logging-vector-v6-4 as a component of Logging Subsystem for Red Hat OpenShift; redhat-user-workloads/art-images as a component of Migration Toolkit for Applications 8; openshift-lightspeed/lightspeed-ocp-rag as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-to-dataverse-exporter as a component of OpenShift Lightspeed; redhat-user-workloads/pen-drive-scanner as a component of Pen Drive Powered by Red Hat Lightspeed; 3scale-amp2/backend-rhel8 as a component of Red Hat 3scale API Management Platform 2; 3scale-amp21/backend as a component of Red Hat 3scale API Management Platform 2; 3scale-amp22/backend as a component of Red Hat 3scale API Management Platform 2; rhacs-eng/release-fact as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-24/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/lightspeed-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/automation-reports as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/lightspeed-chatbot-rhel8 as a component of Red Hat Ansible Automation Platform 2; and 170 more · Fixed: openssl-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); and 437 more
After
confidential-clusters-beta/confidential-cluster-operator-bundle as a component of Confidential Cluster Operator; redhat-user-workloads/attestation-key-register as a component of Confidential Cluster Operator; redhat-user-workloads/buildroot as a component of Confidential Cluster Operator; redhat-user-workloads/compute-pcrs as a component of Confidential Cluster Operator; redhat-user-workloads/confidential-cluster-operator as a component of Confidential Cluster Operator; redhat-user-workloads/registration-server as a component of Confidential Cluster Operator; openshift-sandboxed-containers/osc-operator-bundle as a component of Confidential Compute Attestation; redhat-user-workloads/osc-monitor as a component of Confidential Compute Attestation; redhat-user-workloads/osc-operator as a component of Confidential Compute Attestation; redhat-user-workloads/osc-podvm-builder as a component of Confidential Compute Attestation; redhat-user-workloads/osc-podvm-payload as a component of Confidential Compute Attestation; redhat-user-workloads/trustee as a component of Confidential Compute Attestation; lightspeed-core/dataverse-exporter-rhel9 as a component of Lightspeed Core; redhat-user-workloads/logging-vector-v6-2 as a component of Logging Subsystem for Red Hat OpenShift; redhat-user-workloads/logging-vector-v6-4 as a component of Logging Subsystem for Red Hat OpenShift; redhat-user-workloads/art-images as a component of Migration Toolkit for Applications 8; openshift-lightspeed/lightspeed-ocp-rag as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-to-dataverse-exporter as a component of OpenShift Lightspeed; redhat-user-workloads/pen-drive-scanner as a component of Pen Drive Powered by Red Hat Lightspeed; 3scale-amp2/backend-rhel8 as a component of Red Hat 3scale API Management Platform 2; 3scale-amp21/backend as a component of Red Hat 3scale API Management Platform 2; 3scale-amp22/backend as a component of Red Hat 3scale API Management Platform 2; rhacs-eng/release-fact as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-24/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/lightspeed-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/automation-reports as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/lightspeed-chatbot-rhel8 as a component of Red Hat Ansible Automation Platform 2; and 168 more · Fixed: openssl-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); and 439 more
14 Oct 2026, 20:30 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
confidential-clusters-beta/confidential-cluster-operator-bundle as a component of Confidential Cluster Operator; redhat-user-workloads/attestation-key-register as a component of Confidential Cluster Operator; redhat-user-workloads/buildroot as a component of Confidential Cluster Operator; redhat-user-workloads/compute-pcrs as a component of Confidential Cluster Operator; redhat-user-workloads/confidential-cluster-operator as a component of Confidential Cluster Operator; redhat-user-workloads/registration-server as a component of Confidential Cluster Operator; openshift-sandboxed-containers/osc-operator-bundle as a component of Confidential Compute Attestation; redhat-user-workloads/osc-monitor as a component of Confidential Compute Attestation; redhat-user-workloads/osc-operator as a component of Confidential Compute Attestation; redhat-user-workloads/osc-podvm-builder as a component of Confidential Compute Attestation; redhat-user-workloads/osc-podvm-payload as a component of Confidential Compute Attestation; redhat-user-workloads/trustee as a component of Confidential Compute Attestation; lightspeed-core/dataverse-exporter-rhel9 as a component of Lightspeed Core; redhat-user-workloads/logging-vector-v6-2 as a component of Logging Subsystem for Red Hat OpenShift; redhat-user-workloads/logging-vector-v6-4 as a component of Logging Subsystem for Red Hat OpenShift; redhat-user-workloads/art-images as a component of Migration Toolkit for Applications 8; openshift-lightspeed/lightspeed-ocp-rag as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-to-dataverse-exporter as a component of OpenShift Lightspeed; redhat-user-workloads/pen-drive-scanner as a component of Pen Drive Powered by Red Hat Lightspeed; 3scale-amp2/backend-rhel8 as a component of Red Hat 3scale API Management Platform 2; 3scale-amp21/backend as a component of Red Hat 3scale API Management Platform 2; 3scale-amp22/backend as a component of Red Hat 3scale API Management Platform 2; rhacs-eng/release-fact as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-24/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/lightspeed-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/automation-reports as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/lightspeed-chatbot-rhel8 as a component of Red Hat Ansible Automation Platform 2; and 170 more · Fixed: openssl-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); and 409 more
After
confidential-clusters-beta/confidential-cluster-operator-bundle as a component of Confidential Cluster Operator; redhat-user-workloads/attestation-key-register as a component of Confidential Cluster Operator; redhat-user-workloads/buildroot as a component of Confidential Cluster Operator; redhat-user-workloads/compute-pcrs as a component of Confidential Cluster Operator; redhat-user-workloads/confidential-cluster-operator as a component of Confidential Cluster Operator; redhat-user-workloads/registration-server as a component of Confidential Cluster Operator; openshift-sandboxed-containers/osc-operator-bundle as a component of Confidential Compute Attestation; redhat-user-workloads/osc-monitor as a component of Confidential Compute Attestation; redhat-user-workloads/osc-operator as a component of Confidential Compute Attestation; redhat-user-workloads/osc-podvm-builder as a component of Confidential Compute Attestation; redhat-user-workloads/osc-podvm-payload as a component of Confidential Compute Attestation; redhat-user-workloads/trustee as a component of Confidential Compute Attestation; lightspeed-core/dataverse-exporter-rhel9 as a component of Lightspeed Core; redhat-user-workloads/logging-vector-v6-2 as a component of Logging Subsystem for Red Hat OpenShift; redhat-user-workloads/logging-vector-v6-4 as a component of Logging Subsystem for Red Hat OpenShift; redhat-user-workloads/art-images as a component of Migration Toolkit for Applications 8; openshift-lightspeed/lightspeed-ocp-rag as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-to-dataverse-exporter as a component of OpenShift Lightspeed; redhat-user-workloads/pen-drive-scanner as a component of Pen Drive Powered by Red Hat Lightspeed; 3scale-amp2/backend-rhel8 as a component of Red Hat 3scale API Management Platform 2; 3scale-amp21/backend as a component of Red Hat 3scale API Management Platform 2; 3scale-amp22/backend as a component of Red Hat 3scale API Management Platform 2; rhacs-eng/release-fact as a component of Red Hat Advanced Cluster Security 4; ansible-automation-platform-24/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-24/lightspeed-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/automation-reports as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel8 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/ee-supported-rhel9 as a component of Red Hat Ansible Automation Platform 2; ansible-automation-platform-25/lightspeed-chatbot-rhel8 as a component of Red Hat Ansible Automation Platform 2; and 170 more · Fixed: openssl-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-devel-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-libs-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-perl-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); openssl-static-1:1.0.2k-26.el7_9.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS); and 437 more
14 Oct 2026, 03:13 UTCRed Hat Product Security ↗

Open full change history →

CVE-2026-32776libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity contentlibexpat project · libexpatCVSS 3.1 · 4.0 Medium3 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
libexpat: < 2.7.5 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
libexpat: < 2.7.5 · Fixed: Update to V3.1.6 or later version
13 Oct 2026, 00:00 UTCSiemens ProductCERT ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/1158; removed patch: cert-portal.siemens.com/ssa-082556.html; removed remediation: cert-portal.siemens.com/ssa-082556.html.
Show before and after
Before
patch: cert-portal.siemens.com/ssa-082556.html · patch: github.com/1158 · patch: github.com/1159 · 1 more references
After
patch: github.com/1158 · patch: github.com/1159 · remediation: github.com/1158
15 Oct 2026, 01:18 UTCcve@mitre.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
< 2.7.5 · Fixed: Update to V3.1.6 or later version
After
libexpat: < 2.7.5 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:18 UTCCNA ↗

Open full change history →

CVE-2026-32777libexpat before 2.7.5 allows an infinite loop while parsing DTD contentlibexpat project · libexpatCVSS 3.1 · 4.0 Medium3 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
libexpat: < 2.7.5 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
libexpat: < 2.7.5 · Fixed: Update to V3.1.6 or later version
13 Oct 2026, 00:00 UTCSiemens ProductCERT ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/1159; removed patch: cert-portal.siemens.com/ssa-082556.html; removed remediation: cert-portal.siemens.com/ssa-082556.html.
Show before and after
Before
patch: cert-portal.siemens.com/ssa-082556.html · patch: github.com/1159 · patch: github.com/1162 · 2 more references
After
patch: github.com/1159 · patch: github.com/1162 · remediation: github.com/1159 · 1 more references
15 Oct 2026, 01:18 UTCcve@mitre.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
< 2.7.5 · Fixed: Update to V3.1.6 or later version
After
libexpat: < 2.7.5 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:18 UTCCNA ↗

Open full change history →

CVE-2026-32778libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory conditionlibexpat project · libexpatCVSS 3.1 · 2.9 Low3 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
libexpat: < 2.7.5 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
libexpat: < 2.7.5 · Fixed: Update to V3.1.6 or later version
13 Oct 2026, 00:00 UTCSiemens ProductCERT ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/1159; removed patch: cert-portal.siemens.com/ssa-082556.html; removed remediation: cert-portal.siemens.com/ssa-082556.html.
Show before and after
Before
patch: cert-portal.siemens.com/ssa-082556.html · patch: github.com/1159 · patch: github.com/1163 · 1 more references
After
patch: github.com/1159 · patch: github.com/1163 · remediation: github.com/1159
15 Oct 2026, 01:18 UTCcve@mitre.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
< 2.7.5 · Fixed: Update to V3.1.6 or later version
After
libexpat: < 2.7.5 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:18 UTCCNA ↗

Open full change history →

CVE-2026-33818Enforce maximum recursion depth in encoding/asn1Go standard library · encoding/asn1CVSS 3.1 · 7.5 High18 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
14 Oct 2026, 19:25 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 19:25 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
15 Oct 2026, 04:27 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2026-33818.
Show before and after
Before
remediation: access.redhat.com/CVE-2026-33818
After
no authoritative guidance recorded
15 Oct 2026, 04:27 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
After
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
15 Oct 2026, 04:27 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
rhai/assisted-installer-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; albo/aws-load-balancer-operator as a component of AWS Load Balancer Operator; compliance/openshift-compliance-rhel8-operator as a component of Compliance Operator; build-of-trustee/trustee-rhel9-operator as a component of Confidential Compute Attestation; dvo/deployment-validation-rhel8-operator as a component of Deployment Validation Operator; edo/external-dns-rhel9 as a component of ExternalDNS Operator; edo/external-dns-rhel9-operator as a component of ExternalDNS Operator; workload-availability/fence-agents-remediation-rhel8-operator as a component of Fence Agents Remediation Operator; compliance/openshift-file-integrity-rhel8-operator as a component of File Integrity Operator; openshift-logging/cluster-logging-rhel9-operator as a component of Logging Subsystem for Red Hat OpenShift; lvms4/topolvm-rhel9 as a component of Logical Volume Manager Storage; workload-availability/machine-deletion-remediation-rhel8-operator as a component of Machine Deletion Remediation Operator; openshift/mirror-registry-rhel8 as a component of mirror registry for Red Hat OpenShift 2; multicluster-engine/addon-manager-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/assisted-service-9-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/backplane-rhel9-operator as a component of Multicluster Engine for Kubernetes; multicluster-engine/cluster-curator-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/cluster-image-set-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/clusterclaims-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/clusterlifecycle-state-metrics-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/hive-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/hypershift-addon-rhel9-operator as a component of Multicluster Engine for Kubernetes; multicluster-engine/kube-rbac-proxy-mce-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/maestro-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/managedcluster-import-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/multicloud-manager-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/placement-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/provider-credential-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/registration-operator-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/registration-rhel9 as a component of Multicluster Engine for Kubernetes; and 152 more · Fixed: receptor-0:1.6.8-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; receptor-0:1.6.8-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; receptor-0:1.6.8-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; flightctl-0:1.1.4-1.el10em.src as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-0:1.2.1-1.el10.src as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.s390x as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.s390x as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10; openshift-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.src as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.aarch64 as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.ppc64le as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.s390x as a component of Red Hat OpenShift Container Platform 4.21; and 7995 more
After
rhai/assisted-installer-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; albo/aws-load-balancer-operator as a component of AWS Load Balancer Operator; compliance/openshift-compliance-rhel8-operator as a component of Compliance Operator; build-of-trustee/trustee-rhel9-operator as a component of Confidential Compute Attestation; dvo/deployment-validation-rhel8-operator as a component of Deployment Validation Operator; edo/external-dns-rhel9 as a component of ExternalDNS Operator; edo/external-dns-rhel9-operator as a component of ExternalDNS Operator; workload-availability/fence-agents-remediation-rhel8-operator as a component of Fence Agents Remediation Operator; compliance/openshift-file-integrity-rhel8-operator as a component of File Integrity Operator; lvms4/topolvm-rhel9 as a component of Logical Volume Manager Storage; workload-availability/machine-deletion-remediation-rhel8-operator as a component of Machine Deletion Remediation Operator; openshift/mirror-registry-rhel8 as a component of mirror registry for Red Hat OpenShift 2; multicluster-engine/addon-manager-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/assisted-service-9-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/backplane-rhel9-operator as a component of Multicluster Engine for Kubernetes; multicluster-engine/cluster-curator-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/cluster-image-set-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/clusterclaims-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/clusterlifecycle-state-metrics-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/hive-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/hypershift-addon-rhel9-operator as a component of Multicluster Engine for Kubernetes; multicluster-engine/kube-rbac-proxy-mce-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/maestro-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/managedcluster-import-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/multicloud-manager-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/placement-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/provider-credential-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/registration-operator-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/registration-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/work-rhel9 as a component of Multicluster Engine for Kubernetes; and 151 more · Fixed: receptor-0:1.6.8-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; receptor-0:1.6.8-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; receptor-0:1.6.8-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; flightctl-0:1.1.4-1.el10em.src as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-0:1.2.1-1.el10.src as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.s390x as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.s390x as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10; openshift-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.src as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.aarch64 as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.ppc64le as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.s390x as a component of Red Hat OpenShift Container Platform 4.21; and 8006 more
14 Oct 2026, 19:25 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
14 Oct 2026, 05:36 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 05:36 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
14 Oct 2026, 22:24 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2026-33818.
Show before and after
Before
remediation: access.redhat.com/CVE-2026-33818
After
no authoritative guidance recorded
14 Oct 2026, 22:24 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
After
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
14 Oct 2026, 22:24 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
rhai/assisted-installer-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; albo/aws-load-balancer-operator as a component of AWS Load Balancer Operator; cert-manager/cert-manager-operator-rhel9 as a component of cert-manager Operator for Red Hat OpenShift; cert-manager/jetstack-cert-manager-rhel9 as a component of cert-manager Operator for Red Hat OpenShift; compliance/openshift-compliance-rhel8-operator as a component of Compliance Operator; build-of-trustee/trustee-rhel9-operator as a component of Confidential Compute Attestation; dvo/deployment-validation-rhel8-operator as a component of Deployment Validation Operator; edo/external-dns-rhel9 as a component of ExternalDNS Operator; edo/external-dns-rhel9-operator as a component of ExternalDNS Operator; workload-availability/fence-agents-remediation-rhel8-operator as a component of Fence Agents Remediation Operator; compliance/openshift-file-integrity-rhel8-operator as a component of File Integrity Operator; openshift-logging/cluster-logging-rhel9-operator as a component of Logging Subsystem for Red Hat OpenShift; lvms4/topolvm-rhel9 as a component of Logical Volume Manager Storage; workload-availability/machine-deletion-remediation-rhel8-operator as a component of Machine Deletion Remediation Operator; mta/mta-cli-rhel9 as a component of Migration Toolkit for Applications 8; openshift/mirror-registry-rhel8 as a component of mirror registry for Red Hat OpenShift 2; multicluster-engine/addon-manager-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/assisted-service-9-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/backplane-rhel9-operator as a component of Multicluster Engine for Kubernetes; multicluster-engine/cluster-curator-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/cluster-image-set-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/clusterclaims-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/clusterlifecycle-state-metrics-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/hive-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/hypershift-addon-rhel9-operator as a component of Multicluster Engine for Kubernetes; multicluster-engine/kube-rbac-proxy-mce-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/maestro-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/managedcluster-import-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/multicloud-manager-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/placement-rhel9 as a component of Multicluster Engine for Kubernetes; and 155 more · Fixed: receptor-0:1.6.8-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; receptor-0:1.6.8-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; receptor-0:1.6.8-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; flightctl-0:1.1.4-1.el10em.src as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-0:1.2.1-1.el10.src as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.s390x as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.s390x as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10; openshift-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.src as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.aarch64 as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.ppc64le as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.s390x as a component of Red Hat OpenShift Container Platform 4.21; and 7977 more
After
rhai/assisted-installer-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; albo/aws-load-balancer-operator as a component of AWS Load Balancer Operator; compliance/openshift-compliance-rhel8-operator as a component of Compliance Operator; build-of-trustee/trustee-rhel9-operator as a component of Confidential Compute Attestation; dvo/deployment-validation-rhel8-operator as a component of Deployment Validation Operator; edo/external-dns-rhel9 as a component of ExternalDNS Operator; edo/external-dns-rhel9-operator as a component of ExternalDNS Operator; workload-availability/fence-agents-remediation-rhel8-operator as a component of Fence Agents Remediation Operator; compliance/openshift-file-integrity-rhel8-operator as a component of File Integrity Operator; openshift-logging/cluster-logging-rhel9-operator as a component of Logging Subsystem for Red Hat OpenShift; lvms4/topolvm-rhel9 as a component of Logical Volume Manager Storage; workload-availability/machine-deletion-remediation-rhel8-operator as a component of Machine Deletion Remediation Operator; openshift/mirror-registry-rhel8 as a component of mirror registry for Red Hat OpenShift 2; multicluster-engine/addon-manager-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/assisted-service-9-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/backplane-rhel9-operator as a component of Multicluster Engine for Kubernetes; multicluster-engine/cluster-curator-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/cluster-image-set-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/clusterclaims-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/clusterlifecycle-state-metrics-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/hive-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/hypershift-addon-rhel9-operator as a component of Multicluster Engine for Kubernetes; multicluster-engine/kube-rbac-proxy-mce-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/maestro-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/managedcluster-import-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/multicloud-manager-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/placement-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/provider-credential-controller-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/registration-operator-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/registration-rhel9 as a component of Multicluster Engine for Kubernetes; and 152 more · Fixed: receptor-0:1.6.8-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.8-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; receptor-0:1.6.8-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; receptor-0:1.6.8-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.7 for RHEL 10; flightctl-0:1.1.4-1.el10em.src as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-0:1.2.1-1.el10.src as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.s390x as a component of RHEM 1.2 for RHEL 10; flightctl-agent-0:1.2.1-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.aarch64 as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.ppc64le as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.s390x as a component of RHEM 1.2 for RHEL 10; flightctl-cli-0:1.2.1-1.el10.x86_64 as a component of RHEM 1.2 for RHEL 10; openshift-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.src as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.aarch64 as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.ppc64le as a component of Red Hat OpenShift Container Platform 4.21; openshift-hyperkube-0:4.21.0-202609170630.p2.g601ff80.assembly.stream.el10.s390x as a component of Red Hat OpenShift Container Platform 4.21; and 7995 more
14 Oct 2026, 05:36 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
14 Oct 2026, 10:26 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2026-33818.
Show before and after
Before
remediation: access.redhat.com/CVE-2026-33818
After
no authoritative guidance recorded
14 Oct 2026, 10:26 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
After
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
14 Oct 2026, 10:26 UTCCNA ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
14 Oct 2026, 04:25 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2026-33818.
Show before and after
Before
remediation: access.redhat.com/CVE-2026-33818
After
no authoritative guidance recorded
14 Oct 2026, 04:25 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
After
encoding/asn1: < 1.25.13, 1.26.0-0 < 1.26.6, 1.27.0-0 < 1.27.0-rc.3 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
14 Oct 2026, 04:25 UTCCNA ↗

Open full change history →

CVE-2026-3904The GNU C Library glibc: Race Condition within a ThreadThe GNU C Library · glibcCVSS 3.1 · 6.2 Medium3 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
glibc: 2.35 < 2.37 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
glibc: 2.35 < 2.37 · Fixed: Update to V3.1.6 or later version
13 Oct 2026, 00:00 UTCSiemens ProductCERT ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: sourceware.org/show_bug.cgi?id=29863; removed remediation: access.redhat.com/CVE-2026-3904.
Show before and after
Before
patch: sourceware.org/git?p=glibc.git;a=commit;h=8804157ad9da39631703b92315460808eac86b0c · patch: sourceware.org/git?p=glibc.git;a=commit;h=b712be52645282c706a5faa038242504feb06db5 · patch: sourceware.org/show_bug.cgi?id=29863 · 1 more references
After
patch: sourceware.org/git?p=glibc.git;a=commit;h=8804157ad9da39631703b92315460808eac86b0c · patch: sourceware.org/git?p=glibc.git;a=commit;h=b712be52645282c706a5faa038242504feb06db5 · patch: sourceware.org/show_bug.cgi?id=29863 · 1 more references
15 Oct 2026, 01:12 UTCsourceware.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
2.35 < 2.37 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/
After
glibc: 2.35 < 2.37 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:12 UTCCNA ↗

Open full change history →

CVE-2026-4046iconv crash due to assertion failure with untrusted inputThe GNU C Library · glibcCVSS 3.1 · 7.5 High5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
glibc: 2.3.3 ≤ 2.43 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
glibc: 2.3.3 ≤ 2.43 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:24 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: sourceware.org/show_bug.cgi?id=33980; removed remediation: access.redhat.com/CVE-2026-4046.
Show before and after
Before
patch: sourceware.org/show_bug.cgi?id=33980 · remediation: access.redhat.com/CVE-2026-4046
After
patch: sourceware.org/show_bug.cgi?id=33980 · remediation: sourceware.org/show_bug.cgi?id=33980
15 Oct 2026, 01:12 UTCsourceware.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
2.3.3 ≤ 2.43 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
glibc: 2.3.3 ≤ 2.43 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:12 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
compat-glibc-headers as a component of Red Hat Enterprise Linux 6; compat-glibc.src as a component of Red Hat Enterprise Linux 6; glibc as a component of Red Hat Enterprise Linux 6; glibc-common as a component of Red Hat Enterprise Linux 6; glibc-devel as a component of Red Hat Enterprise Linux 6; glibc-headers as a component of Red Hat Enterprise Linux 6; glibc-static as a component of Red Hat Enterprise Linux 6; glibc-utils as a component of Red Hat Enterprise Linux 6; glibc.src as a component of Red Hat Enterprise Linux 6; nscd as a component of Red Hat Enterprise Linux 6; compat-glibc as a component of Red Hat Enterprise Linux 7; compat-glibc-headers as a component of Red Hat Enterprise Linux 7; compat-glibc.src as a component of Red Hat Enterprise Linux 7; glibc as a component of Red Hat Enterprise Linux 7; glibc-common as a component of Red Hat Enterprise Linux 7; glibc-devel as a component of Red Hat Enterprise Linux 7; glibc-headers as a component of Red Hat Enterprise Linux 7; glibc-static as a component of Red Hat Enterprise Linux 7; glibc-utils as a component of Red Hat Enterprise Linux 7; glibc.src as a component of Red Hat Enterprise Linux 7; nscd as a component of Red Hat Enterprise Linux 7; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · Fixed: glibc-benchtests-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-doc-0:2.39-124.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-utils-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 3494 more
After
compat-glibc-headers as a component of Red Hat Enterprise Linux 6; compat-glibc.src as a component of Red Hat Enterprise Linux 6; glibc as a component of Red Hat Enterprise Linux 6; glibc-common as a component of Red Hat Enterprise Linux 6; glibc-devel as a component of Red Hat Enterprise Linux 6; glibc-headers as a component of Red Hat Enterprise Linux 6; glibc-static as a component of Red Hat Enterprise Linux 6; glibc-utils as a component of Red Hat Enterprise Linux 6; glibc.src as a component of Red Hat Enterprise Linux 6; nscd as a component of Red Hat Enterprise Linux 6; compat-glibc as a component of Red Hat Enterprise Linux 7; compat-glibc-headers as a component of Red Hat Enterprise Linux 7; compat-glibc.src as a component of Red Hat Enterprise Linux 7; glibc as a component of Red Hat Enterprise Linux 7; glibc-common as a component of Red Hat Enterprise Linux 7; glibc-devel as a component of Red Hat Enterprise Linux 7; glibc-headers as a component of Red Hat Enterprise Linux 7; glibc-static as a component of Red Hat Enterprise Linux 7; glibc-utils as a component of Red Hat Enterprise Linux 7; glibc.src as a component of Red Hat Enterprise Linux 7; nscd as a component of Red Hat Enterprise Linux 7; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · Fixed: glibc-benchtests-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-doc-0:2.39-124.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-utils-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 3496 more
14 Oct 2026, 19:24 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
compat-glibc-headers as a component of Red Hat Enterprise Linux 6; compat-glibc.src as a component of Red Hat Enterprise Linux 6; glibc as a component of Red Hat Enterprise Linux 6; glibc-common as a component of Red Hat Enterprise Linux 6; glibc-devel as a component of Red Hat Enterprise Linux 6; glibc-headers as a component of Red Hat Enterprise Linux 6; glibc-static as a component of Red Hat Enterprise Linux 6; glibc-utils as a component of Red Hat Enterprise Linux 6; glibc.src as a component of Red Hat Enterprise Linux 6; nscd as a component of Red Hat Enterprise Linux 6; compat-glibc as a component of Red Hat Enterprise Linux 7; compat-glibc-headers as a component of Red Hat Enterprise Linux 7; compat-glibc.src as a component of Red Hat Enterprise Linux 7; glibc as a component of Red Hat Enterprise Linux 7; glibc-common as a component of Red Hat Enterprise Linux 7; glibc-devel as a component of Red Hat Enterprise Linux 7; glibc-headers as a component of Red Hat Enterprise Linux 7; glibc-static as a component of Red Hat Enterprise Linux 7; glibc-utils as a component of Red Hat Enterprise Linux 7; glibc.src as a component of Red Hat Enterprise Linux 7; nscd as a component of Red Hat Enterprise Linux 7; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · Fixed: glibc-benchtests-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-doc-0:2.39-124.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-utils-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 3022 more
After
compat-glibc-headers as a component of Red Hat Enterprise Linux 6; compat-glibc.src as a component of Red Hat Enterprise Linux 6; glibc as a component of Red Hat Enterprise Linux 6; glibc-common as a component of Red Hat Enterprise Linux 6; glibc-devel as a component of Red Hat Enterprise Linux 6; glibc-headers as a component of Red Hat Enterprise Linux 6; glibc-static as a component of Red Hat Enterprise Linux 6; glibc-utils as a component of Red Hat Enterprise Linux 6; glibc.src as a component of Red Hat Enterprise Linux 6; nscd as a component of Red Hat Enterprise Linux 6; compat-glibc as a component of Red Hat Enterprise Linux 7; compat-glibc-headers as a component of Red Hat Enterprise Linux 7; compat-glibc.src as a component of Red Hat Enterprise Linux 7; glibc as a component of Red Hat Enterprise Linux 7; glibc-common as a component of Red Hat Enterprise Linux 7; glibc-devel as a component of Red Hat Enterprise Linux 7; glibc-headers as a component of Red Hat Enterprise Linux 7; glibc-static as a component of Red Hat Enterprise Linux 7; glibc-utils as a component of Red Hat Enterprise Linux 7; glibc.src as a component of Red Hat Enterprise Linux 7; nscd as a component of Red Hat Enterprise Linux 7; openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4; openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 · Fixed: glibc-benchtests-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-doc-0:2.39-124.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-124.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-utils-0:2.39-124.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 3494 more
14 Oct 2026, 03:12 UTCRed Hat Product Security ↗

Open full change history →

CVE-2026-41080libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML documentlibexpat project · libexpatCVSS 3.1 · 2.9 Low3 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
libexpat: < 2.8.0 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
libexpat: < 2.8.0 · Fixed: Update to V3.1.6 or later version
13 Oct 2026, 00:00 UTCSiemens ProductCERT ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: github.com/1183; removed patch: cert-portal.siemens.com/ssa-082556.html; removed remediation: cert-portal.siemens.com/ssa-082556.html.
Show before and after
Before
patch: cert-portal.siemens.com/ssa-082556.html · patch: github.com/1183 · remediation: cert-portal.siemens.com/ssa-082556.html
After
patch: github.com/1183 · remediation: github.com/1183
15 Oct 2026, 01:18 UTCcve@mitre.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
< 2.8.0 · Fixed: Update to V3.1.6 or later version
After
libexpat: < 2.8.0 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:18 UTCCNA ↗

Open full change history →

CVE-2026-42504Quadratic complexity in WordDecoder.DecodeHeader in mimeGo standard library · mimeCVSS 3.1 · 7.5 High17 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
14 Oct 2026, 19:26 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 19:26 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
15 Oct 2026, 04:27 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2026-42504.
Show before and after
Before
remediation: access.redhat.com/CVE-2026-42504
After
no authoritative guidance recorded
15 Oct 2026, 04:27 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
After
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
15 Oct 2026, 04:27 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
After
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
14 Oct 2026, 02:55 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Awaiting fix to Patch available.
Show before and after
Before
Awaiting fix
After
Patch available
14 Oct 2026, 02:55 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
14 Oct 2026, 22:24 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2026-42504.
Show before and after
Before
remediation: access.redhat.com/CVE-2026-42504
After
no authoritative guidance recorded
14 Oct 2026, 22:24 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
After
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
14 Oct 2026, 22:24 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
rhai/assisted-installer-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-builds/openshift-builds-waiters-rhel9 as a component of Builds for Red Hat OpenShift; compliance/openshift-compliance-rhel8-operator as a component of Compliance Operator; build-of-trustee/trustee-rhel9-operator as a component of Confidential Compute Attestation; openshift-sandboxed-containers/osc-monitor-rhel9 as a component of Confidential Compute Attestation; dvo/deployment-validation-rhel8-operator as a component of Deployment Validation Operator; external-secrets-operator/external-secrets-rhel9 as a component of External Secrets Operator for Red Hat OpenShift; compliance/openshift-file-integrity-rhel8-operator as a component of File Integrity Operator; openshift-logging/cluster-logging-rhel9-operator as a component of Logging Subsystem for Red Hat OpenShift; multiarch-tuning/multiarch-tuning-rhel9-operator as a component of Multiarch Tuning Operator; multicluster-engine/assisted-service-9-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/maestro-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-globalhub/multicluster-globalhub-agent-rhel9 as a component of Multicluster Global Hub; network-observability/network-observability-cli-rhel9 as a component of Network Observability Operator; multicluster-engine/hypershift-addon-rhel9-operator as a component of OpenShift API for Data Protection; multicluster-engine/multicloud-manager-rhel9 as a component of OpenShift API for Data Protection; rhacm2/config-policy-controller-rhel9 as a component of OpenShift API for Data Protection; helm.src as a component of OpenShift Developer Tools and Services; openshift-lightspeed/lightspeed-rhel9-operator as a component of OpenShift Lightspeed; openshift-pipelines/pipelines-scheduler-rhel9 as a component of OpenShift Pipelines; kn-workflow-plugin.src as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/logic-rhel9-operator as a component of OpenShift Serverless; openshift-serverless-clients.src as a component of OpenShift Serverless; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; openshift-power-monitoring/kepler-rhel9 as a component of Power monitoring for Red Hat OpenShift; 3scale-amp2/3scale-rhel9-operator as a component of Red Hat 3scale API Management Platform 2; redhat-user-workloads/memcached-exporter-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/thanos-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-certification-preflight.src as a component of Red Hat Certification Program for Red Hat Enterprise Linux 9; and 48 more · Fixed: receptor-0:1.6.7-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.7-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.7-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.7-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.7-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debuginfo-0:1.6.7-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debuginfo-0:1.6.7-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debuginfo-0:1.6.7-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debuginfo-0:1.6.7-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debugsource-0:1.6.7-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debugsource-0:1.6.7-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debugsource-0:1.6.7-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debugsource-0:1.6.7-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptorctl-0:1.6.7-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; flightctl-0:1.1.4-1.el10em.src as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; openshift-0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10.src as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.aarch64 as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.ppc64le as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.s390x as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.src as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.x86_64 as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-redistributable-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.x86_64 as a component of Red Hat OpenShift Container Platform 4.21; and 4853 more
After
rhai/assisted-installer-rhel9 as a component of Assisted Installer for Red Hat OpenShift Container Platform 2; openshift-builds/openshift-builds-waiters-rhel9 as a component of Builds for Red Hat OpenShift; compliance/openshift-compliance-rhel8-operator as a component of Compliance Operator; build-of-trustee/trustee-rhel9-operator as a component of Confidential Compute Attestation; openshift-sandboxed-containers/osc-monitor-rhel9 as a component of Confidential Compute Attestation; dvo/deployment-validation-rhel8-operator as a component of Deployment Validation Operator; external-secrets-operator/external-secrets-rhel9 as a component of External Secrets Operator for Red Hat OpenShift; compliance/openshift-file-integrity-rhel8-operator as a component of File Integrity Operator; openshift-logging/cluster-logging-rhel9-operator as a component of Logging Subsystem for Red Hat OpenShift; multiarch-tuning/multiarch-tuning-rhel9-operator as a component of Multiarch Tuning Operator; multicluster-engine/assisted-service-9-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-engine/maestro-rhel9 as a component of Multicluster Engine for Kubernetes; multicluster-globalhub/multicluster-globalhub-agent-rhel9 as a component of Multicluster Global Hub; network-observability/network-observability-cli-rhel9 as a component of Network Observability Operator; multicluster-engine/hypershift-addon-rhel9-operator as a component of OpenShift API for Data Protection; multicluster-engine/multicloud-manager-rhel9 as a component of OpenShift API for Data Protection; rhacm2/config-policy-controller-rhel9 as a component of OpenShift API for Data Protection; helm.src as a component of OpenShift Developer Tools and Services; openshift-lightspeed/lightspeed-rhel9-operator as a component of OpenShift Lightspeed; openshift-pipelines/pipelines-scheduler-rhel9 as a component of OpenShift Pipelines; kn-workflow-plugin.src as a component of OpenShift Serverless; openshift-serverless-1/kn-plugin-event-sender-rhel9 as a component of OpenShift Serverless; openshift-serverless-1/logic-rhel9-operator as a component of OpenShift Serverless; openshift-serverless-clients.src as a component of OpenShift Serverless; openshift-service-mesh/kiali-rhel8 as a component of OpenShift Service Mesh 2; openshift-power-monitoring/kepler-rhel9 as a component of Power monitoring for Red Hat OpenShift; 3scale-amp2/3scale-rhel9-operator as a component of Red Hat 3scale API Management Platform 2; redhat-user-workloads/memcached-exporter-acm-211 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-user-workloads/thanos-acm-213 as a component of Red Hat Advanced Cluster Management for Kubernetes 2; redhat-certification-preflight.src as a component of Red Hat Certification Program for Red Hat Enterprise Linux 9; and 48 more · Fixed: receptor-0:1.6.7-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.7-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.7-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.7-1.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-0:1.6.7-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debuginfo-0:1.6.7-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debuginfo-0:1.6.7-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debuginfo-0:1.6.7-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debuginfo-0:1.6.7-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debugsource-0:1.6.7-1.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debugsource-0:1.6.7-1.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debugsource-0:1.6.7-1.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptor-debugsource-0:1.6.7-1.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; receptorctl-0:1.6.7-1.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10; flightctl-0:1.1.4-1.el10em.src as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-agent-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.aarch64 as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.ppc64le as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.s390x as a component of RHEM 1.1 for RHEL 10; flightctl-cli-0:1.1.4-1.el10em.x86_64 as a component of RHEM 1.1 for RHEL 10; openshift-0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10.src as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.aarch64 as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.ppc64le as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.s390x as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.src as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.x86_64 as a component of Red Hat OpenShift Container Platform 4.21; openshift-clients-redistributable-0:4.21.0-202609071555.p2.gd0bf7cc.assembly.stream.el10.x86_64 as a component of Red Hat OpenShift Container Platform 4.21; and 4869 more
14 Oct 2026, 02:55 UTCRed Hat Product Security ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
14 Oct 2026, 10:26 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2026-42504.
Show before and after
Before
remediation: access.redhat.com/CVE-2026-42504
After
no authoritative guidance recorded
14 Oct 2026, 10:26 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
After
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
14 Oct 2026, 10:26 UTCCNA ↗
Remediation statusRemediation status changed from Patch available to Awaiting fix.
Show before and after
Before
Patch available
After
Awaiting fix
14 Oct 2026, 04:25 UTCCNA ↗
Vendor guidanceAuthoritative vendor guidance changed: removed remediation: access.redhat.com/CVE-2026-42504.
Show before and after
Before
remediation: access.redhat.com/CVE-2026-42504
After
no authoritative guidance recorded
14 Oct 2026, 04:25 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: For details on how to apply this update, refer to Ansible Automation Platform documentation.
After
mime: < 1.25.11, 1.26.0-0 < 1.26.4 · Fixed: No fixed version is explicitly recorded in the structured CVE data.
14 Oct 2026, 04:25 UTCCNA ↗

Open full change history →

CVE-2026-4437gethostbyaddr and gethostbyaddr_r may incorrectly handle DNS responseThe GNU C Library · glibcCVSS 3.1 · 7.5 High5 material changes15 Oct 2026, 05:42 UTC

Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
glibc: 2.34 ≤ 2.43 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
After
glibc: 2.34 ≤ 2.43 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
14 Oct 2026, 19:24 UTCRed Hat Product Security ↗
Vendor guidanceAuthoritative vendor guidance changed: added remediation: sourceware.org/show_bug.cgi?id=34014; removed remediation: access.redhat.com/CVE-2026-4437.
Show before and after
Before
patch: sourceware.org/show_bug.cgi?id=34014 · remediation: access.redhat.com/CVE-2026-4437
After
patch: sourceware.org/show_bug.cgi?id=34014 · remediation: sourceware.org/show_bug.cgi?id=34014
15 Oct 2026, 01:12 UTCsourceware.org ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
2.34 ≤ 2.43 · Fixed: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
After
glibc: 2.34 ≤ 2.43 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
15 Oct 2026, 01:12 UTCCNA ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
compat-glibc-headers as a component of Red Hat Enterprise Linux 6; compat-glibc.src as a component of Red Hat Enterprise Linux 6; glibc as a component of Red Hat Enterprise Linux 6; glibc-common as a component of Red Hat Enterprise Linux 6; glibc-devel as a component of Red Hat Enterprise Linux 6; glibc-headers as a component of Red Hat Enterprise Linux 6; glibc-static as a component of Red Hat Enterprise Linux 6; glibc-utils as a component of Red Hat Enterprise Linux 6; glibc.src as a component of Red Hat Enterprise Linux 6; nscd as a component of Red Hat Enterprise Linux 6; compat-glibc as a component of Red Hat Enterprise Linux 7; compat-glibc-headers as a component of Red Hat Enterprise Linux 7; compat-glibc.src as a component of Red Hat Enterprise Linux 7; glibc as a component of Red Hat Enterprise Linux 7; glibc-common as a component of Red Hat Enterprise Linux 7; glibc-devel as a component of Red Hat Enterprise Linux 7; glibc-headers as a component of Red Hat Enterprise Linux 7; glibc-static as a component of Red Hat Enterprise Linux 7; glibc-utils as a component of Red Hat Enterprise Linux 7; glibc.src as a component of Red Hat Enterprise Linux 7; nscd as a component of Red Hat Enterprise Linux 7; compat-libpthread-nonshared as a component of Red Hat Enterprise Linux 8; glibc as a component of Red Hat Enterprise Linux 8; glibc-all-langpacks as a component of Red Hat Enterprise Linux 8; glibc-benchtests as a component of Red Hat Enterprise Linux 8; glibc-common as a component of Red Hat Enterprise Linux 8; glibc-devel as a component of Red Hat Enterprise Linux 8; glibc-doc as a component of Red Hat Enterprise Linux 8; glibc-gconv-extra as a component of Red Hat Enterprise Linux 8; glibc-headers as a component of Red Hat Enterprise Linux 8; and 208 more · Fixed: glibc-benchtests-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-doc-0:2.39-121.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-utils-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 2477 more
After
compat-glibc-headers as a component of Red Hat Enterprise Linux 6; compat-glibc.src as a component of Red Hat Enterprise Linux 6; glibc as a component of Red Hat Enterprise Linux 6; glibc-common as a component of Red Hat Enterprise Linux 6; glibc-devel as a component of Red Hat Enterprise Linux 6; glibc-headers as a component of Red Hat Enterprise Linux 6; glibc-static as a component of Red Hat Enterprise Linux 6; glibc-utils as a component of Red Hat Enterprise Linux 6; glibc.src as a component of Red Hat Enterprise Linux 6; nscd as a component of Red Hat Enterprise Linux 6; compat-glibc as a component of Red Hat Enterprise Linux 7; compat-glibc-headers as a component of Red Hat Enterprise Linux 7; compat-glibc.src as a component of Red Hat Enterprise Linux 7; glibc as a component of Red Hat Enterprise Linux 7; glibc-common as a component of Red Hat Enterprise Linux 7; glibc-devel as a component of Red Hat Enterprise Linux 7; glibc-headers as a component of Red Hat Enterprise Linux 7; glibc-static as a component of Red Hat Enterprise Linux 7; glibc-utils as a component of Red Hat Enterprise Linux 7; glibc.src as a component of Red Hat Enterprise Linux 7; nscd as a component of Red Hat Enterprise Linux 7; compat-libpthread-nonshared as a component of Red Hat Enterprise Linux 8; glibc as a component of Red Hat Enterprise Linux 8; glibc-all-langpacks as a component of Red Hat Enterprise Linux 8; glibc-benchtests as a component of Red Hat Enterprise Linux 8; glibc-common as a component of Red Hat Enterprise Linux 8; glibc-devel as a component of Red Hat Enterprise Linux 8; glibc-doc as a component of Red Hat Enterprise Linux 8; glibc-gconv-extra as a component of Red Hat Enterprise Linux 8; glibc-headers as a component of Red Hat Enterprise Linux 8; and 208 more · Fixed: glibc-benchtests-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-doc-0:2.39-121.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-utils-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 2479 more
14 Oct 2026, 19:24 UTCRed Hat Product Security ↗
Affected versionsThe structured affected or fixed version information changed.
Show before and after
Before
compat-glibc-headers as a component of Red Hat Enterprise Linux 6; compat-glibc.src as a component of Red Hat Enterprise Linux 6; glibc as a component of Red Hat Enterprise Linux 6; glibc-common as a component of Red Hat Enterprise Linux 6; glibc-devel as a component of Red Hat Enterprise Linux 6; glibc-headers as a component of Red Hat Enterprise Linux 6; glibc-static as a component of Red Hat Enterprise Linux 6; glibc-utils as a component of Red Hat Enterprise Linux 6; glibc.src as a component of Red Hat Enterprise Linux 6; nscd as a component of Red Hat Enterprise Linux 6; compat-glibc as a component of Red Hat Enterprise Linux 7; compat-glibc-headers as a component of Red Hat Enterprise Linux 7; compat-glibc.src as a component of Red Hat Enterprise Linux 7; glibc as a component of Red Hat Enterprise Linux 7; glibc-common as a component of Red Hat Enterprise Linux 7; glibc-devel as a component of Red Hat Enterprise Linux 7; glibc-headers as a component of Red Hat Enterprise Linux 7; glibc-static as a component of Red Hat Enterprise Linux 7; glibc-utils as a component of Red Hat Enterprise Linux 7; glibc.src as a component of Red Hat Enterprise Linux 7; nscd as a component of Red Hat Enterprise Linux 7; compat-libpthread-nonshared as a component of Red Hat Enterprise Linux 8; glibc as a component of Red Hat Enterprise Linux 8; glibc-all-langpacks as a component of Red Hat Enterprise Linux 8; glibc-benchtests as a component of Red Hat Enterprise Linux 8; glibc-common as a component of Red Hat Enterprise Linux 8; glibc-devel as a component of Red Hat Enterprise Linux 8; glibc-doc as a component of Red Hat Enterprise Linux 8; glibc-gconv-extra as a component of Red Hat Enterprise Linux 8; glibc-headers as a component of Red Hat Enterprise Linux 8; and 208 more · Fixed: glibc-benchtests-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-doc-0:2.39-121.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-utils-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 2005 more
After
compat-glibc-headers as a component of Red Hat Enterprise Linux 6; compat-glibc.src as a component of Red Hat Enterprise Linux 6; glibc as a component of Red Hat Enterprise Linux 6; glibc-common as a component of Red Hat Enterprise Linux 6; glibc-devel as a component of Red Hat Enterprise Linux 6; glibc-headers as a component of Red Hat Enterprise Linux 6; glibc-static as a component of Red Hat Enterprise Linux 6; glibc-utils as a component of Red Hat Enterprise Linux 6; glibc.src as a component of Red Hat Enterprise Linux 6; nscd as a component of Red Hat Enterprise Linux 6; compat-glibc as a component of Red Hat Enterprise Linux 7; compat-glibc-headers as a component of Red Hat Enterprise Linux 7; compat-glibc.src as a component of Red Hat Enterprise Linux 7; glibc as a component of Red Hat Enterprise Linux 7; glibc-common as a component of Red Hat Enterprise Linux 7; glibc-devel as a component of Red Hat Enterprise Linux 7; glibc-headers as a component of Red Hat Enterprise Linux 7; glibc-static as a component of Red Hat Enterprise Linux 7; glibc-utils as a component of Red Hat Enterprise Linux 7; glibc.src as a component of Red Hat Enterprise Linux 7; nscd as a component of Red Hat Enterprise Linux 7; compat-libpthread-nonshared as a component of Red Hat Enterprise Linux 8; glibc as a component of Red Hat Enterprise Linux 8; glibc-all-langpacks as a component of Red Hat Enterprise Linux 8; glibc-benchtests as a component of Red Hat Enterprise Linux 8; glibc-common as a component of Red Hat Enterprise Linux 8; glibc-devel as a component of Red Hat Enterprise Linux 8; glibc-doc as a component of Red Hat Enterprise Linux 8; glibc-gconv-extra as a component of Red Hat Enterprise Linux 8; glibc-headers as a component of Red Hat Enterprise Linux 8; and 208 more · Fixed: glibc-benchtests-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-benchtests-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-common-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-debugsource-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-devel-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-doc-0:2.39-121.el10_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-gconv-extra-debuginfo-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-locale-source-0:2.39-121.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10); glibc-utils-0:2.39-121.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10); and 2477 more
14 Oct 2026, 03:12 UTCRed Hat Product Security ↗

Open full change history →