# CVE-2025-9230: Out-of-bounds read & write in RFC 3211 KEK Unwrap

CVE-2025-9230 is fixed in 28 products on 1 platform, first by libssl1.0.0 1.0.2n-1ubuntu5.13+esm2, released September 29, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-9230
- Priority: High
- CVSS: 9.8 (Important)
- EPSS: 0.0150
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 29, 2025
- Weakness: Out-of-bounds Read
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-9230

## Description

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | edk2 RHEL 10 | 20241117-2.el10_0.2 | [RHSA-2026:65132](https://patchblox.com/security/data/fix/linux/rhsa-2026-65132.md) | Sep 30, 2025 |
| Linux | edk2 rocky 8 | 0:20220126gitbb1bba3d77-13.el8_10.10 | [RLSA-2026:36721](https://patchblox.com/security/data/fix/linux/rlsa-2026-36721.md) | Jul 9, 2026 |
| Linux | edk2 rocky 9 | 0:20241117-4.el9_7.3 | [RLSA-2026:2776](https://patchblox.com/security/data/fix/linux/rlsa-2026-2776.md) | Feb 24, 2026 |
| Linux | edk2-aarch64 RHEL 8 | 0:20220126gitbb1bba3d77-13.el8_10.10 | [RHSA-2026:36721](https://patchblox.com/security/data/fix/linux/rhsa-2026-36721.md) | Jul 9, 2026 |
| Linux | edk2-aarch64 RHEL 9 | 0:20241117-4.el9_7.3 | [RHSA-2026:2776](https://patchblox.com/security/data/fix/linux/rhsa-2026-2776.md) | Mar 12, 2026 |
| Linux | edk2-aarch64 almalinux 8 | 20220126gitbb1bba3d77-13.el8_10.10 | [ALSA-2026:36721](https://patchblox.com/security/data/fix/linux/alsa-2026-36721.md) | Jul 8, 2026 |
| Linux | edk2-aarch64 almalinux 9 | 20241117-4.el9_7.3 | [ALSA-2026:2776](https://patchblox.com/security/data/fix/linux/alsa-2026-2776.md) | Feb 17, 2026 |
| Linux | edk2-aarch64 ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-18320](https://patchblox.com/security/data/fix/linux/elsa-2026-18320.md) | Jul 21, 2026 |
| Linux | edk2-aarch64 ol 8 | 0:20220126gitbb1bba3d77-13.el8_10.10 | [ELSA-2026-36721](https://patchblox.com/security/data/fix/linux/elsa-2026-36721.md) | Jul 8, 2026 |
| Linux | edk2-aarch64 ol 9 | 0:20241117-4.0.1.el9_7.3 | [ELSA-2026-2776](https://patchblox.com/security/data/fix/linux/elsa-2026-2776.md) | Feb 17, 2026 |
| Linux | edk2-ovmf RHEL 8 | 0:20220126gitbb1bba3d77-13.el8_10.10 | [RHSA-2026:36721](https://patchblox.com/security/data/fix/linux/rhsa-2026-36721.md) | Jul 9, 2026 |
| Linux | edk2-ovmf RHEL 9 | 0:20241117-4.el9_7.3 | [RHSA-2026:2776](https://patchblox.com/security/data/fix/linux/rhsa-2026-2776.md) | Mar 12, 2026 |
| Linux | edk2-ovmf almalinux 8 | 20220126gitbb1bba3d77-13.el8_10.10 | [ALSA-2026:36721](https://patchblox.com/security/data/fix/linux/alsa-2026-36721.md) | Jul 8, 2026 |
| Linux | edk2-ovmf almalinux 9 | 20241117-4.el9_7.3 | [ALSA-2026:2776](https://patchblox.com/security/data/fix/linux/alsa-2026-2776.md) | Feb 17, 2026 |
| Linux | edk2-ovmf ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-18320](https://patchblox.com/security/data/fix/linux/elsa-2026-18320.md) | Jul 21, 2026 |
| Linux | edk2-ovmf ol 8 | 0:20220126gitbb1bba3d77-13.el8_10.10 | [ELSA-2026-36721](https://patchblox.com/security/data/fix/linux/elsa-2026-36721.md) | Jul 8, 2026 |
| Linux | edk2-ovmf ol 9 | 0:20241117-4.0.1.el9_7.3 | [ELSA-2026-2776](https://patchblox.com/security/data/fix/linux/elsa-2026-2776.md) | Feb 17, 2026 |
| Linux | edk2-tools RHEL 9 | 0:20241117-4.el9_7.3 | [RHSA-2026:2776](https://patchblox.com/security/data/fix/linux/rhsa-2026-2776.md) | Mar 12, 2026 |
| Linux | edk2-tools almalinux 9 | 20241117-4.el9_7.3 | [ALSA-2026:2776](https://patchblox.com/security/data/fix/linux/alsa-2026-2776.md) | Feb 17, 2026 |
| Linux | edk2-tools ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-18320](https://patchblox.com/security/data/fix/linux/elsa-2026-18320.md) | Jul 21, 2026 |
| Linux | edk2-tools ol 9 | 0:20241117-4.0.1.el9_7.3 | [ELSA-2026-2776](https://patchblox.com/security/data/fix/linux/elsa-2026-2776.md) | Feb 17, 2026 |
| Linux | edk2-tools-doc RHEL 9 | 0:20241117-4.el9_7.3 | [RHSA-2026:2776](https://patchblox.com/security/data/fix/linux/rhsa-2026-2776.md) | Mar 12, 2026 |
| Linux | edk2-tools-doc almalinux 9 | 20241117-4.el9_7.3 | [ALSA-2026:2776](https://patchblox.com/security/data/fix/linux/alsa-2026-2776.md) | Feb 17, 2026 |
| Linux | edk2-tools-doc ol 10 | 0:20251114-5.0.1.el10_2.2 | [ELSA-2026-18320](https://patchblox.com/security/data/fix/linux/elsa-2026-18320.md) | Jul 21, 2026 |
| Linux | edk2-tools-doc ol 9 | 0:20241117-4.0.1.el9_7.3 | [ELSA-2026-2776](https://patchblox.com/security/data/fix/linux/elsa-2026-2776.md) | Feb 17, 2026 |
| Linux | libssl1.0.0 Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.13+esm2 | [libssl1.0.0 1.0.2n-1ubuntu5.13+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libssl1.0.0-1.0.2n-1ubuntu5.13-esm2.md) | Sep 29, 2025 |
| Linux | libssl1.1 Ubuntu 18.04.6 LTS (bionic) | 1.1.1-1ubuntu2.1~18.04.23+esm6 | [libssl1.1 1.1.1-1ubuntu2.1~18.04.23+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libssl1.1-1.1.1-1ubuntu2.1-18.04.23-esm6.md) | Sep 29, 2025 |
| Linux | libssl1.1 Ubuntu 20.04 LTS (focal) | 1.1.1f-1ubuntu2.24+esm1 | [libssl1.1 1.1.1f-1ubuntu2.24+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libssl1.1-1.1.1f-1ubuntu2.24-esm1.md) | Sep 29, 2025 |
| Linux | libssl3 Ubuntu 22.04.1 LTS (jammy) | 3.0.2-0ubuntu1.20 | [libssl3 3.0.2-0ubuntu1.20](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libssl3-3.0.2-0ubuntu1.20.md) | Sep 29, 2025 |
| Linux | libssl3t64 Ubuntu 24.04.5 LTS (noble) | 3.0.13-0ubuntu3.6 | [libssl3t64 3.0.13-0ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libssl3t64-3.0.13-0ubuntu3.6.md) | Sep 29, 2025 |
| Linux | libssl3t64 Ubuntu 25.04 (plucky) | 3.4.1-1ubuntu4 | [libssl3t64 3.4.1-1ubuntu4](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libssl3t64-3.4.1-1ubuntu4.md) | Sep 30, 2025 |
| Linux | libssl3t64 Ubuntu 25.10 (questing) | 3.5.3-1ubuntu2 | [libssl3t64 3.5.3-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-libssl3t64-3.5.3-1ubuntu2.md) | Sep 29, 2025 |
| Linux | libssl3t64 Ubuntu 26.04.1 LTS (resolute) | 3.5.3-1ubuntu2 | [libssl3t64 3.5.3-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libssl3t64-3.5.3-1ubuntu2.md) | Sep 29, 2025 |
| Linux | openssl Debian 11.6 (bullseye) | 1.1.1w-0+deb11u4 | [DLA-4321-1](https://patchblox.com/security/data/fix/linux/dla-4321-1.md) | Oct 3, 2025 |
| Linux | openssl Debian 12.15 (bookworm) | 3.0.17-1~deb12u3 | [DSA-6015-1](https://patchblox.com/security/data/fix/linux/dsa-6015-1.md) | Oct 1, 2025 |
| Linux | openssl Debian 13.5 (trixie) | 3.5.1-1+deb13u1 | [DSA-6015-1](https://patchblox.com/security/data/fix/linux/dsa-6015-1.md) | Oct 1, 2025 |
| Linux | openssl Debian 14 | 3.5.4-1 | [DEBIAN-CVE-2025-9230](https://patchblox.com/security/data/fix/linux/debian-cve-2025-9230.md) | Sep 30, 2025 |
| Linux | openssl RHEL 10 | 3.2.2-16.el10_0.5 | [RHSA-2025:22794](https://patchblox.com/security/data/fix/linux/rhsa-2025-22794.md) | Sep 30, 2025 |
| Linux | openssl RHEL 8 | 1:1.1.1k-14.el8_10 | [RHSA-2026:0337](https://patchblox.com/security/data/fix/linux/rhsa-2026-0337.md) | Jan 16, 2026 |
| Linux | openssl RHEL 9 | 1:3.5.1-4.el9_7 | [RHSA-2025:21255](https://patchblox.com/security/data/fix/linux/rhsa-2025-21255.md) | Nov 13, 2025 |
| Linux | openssl Ubuntu 18.04.6 LTS (bionic) | 1.1.1-1ubuntu2.1~18.04.23+esm6 | [openssl 1.1.1-1ubuntu2.1~18.04.23+esm6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openssl-1.1.1-1ubuntu2.1-18.04.23-esm6.md) | Sep 29, 2025 |
| Linux | openssl Ubuntu 20.04 LTS (focal) | 1.1.1f-1ubuntu2.24+esm1 | [openssl 1.1.1f-1ubuntu2.24+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openssl-1.1.1f-1ubuntu2.24-esm1.md) | Sep 29, 2025 |
| Linux | openssl Ubuntu 22.04.1 LTS (jammy) | 3.0.2-0ubuntu1.20 | [openssl 3.0.2-0ubuntu1.20](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-openssl-3.0.2-0ubuntu1.20.md) | Sep 29, 2025 |
| Linux | openssl Ubuntu 24.04.5 LTS (noble) | 3.0.13-0ubuntu3.6 | [openssl 3.0.13-0ubuntu3.6](https://patchblox.com/security/data/fix/linux/ubuntu-noble-openssl-3.0.13-0ubuntu3.6.md) | Sep 29, 2025 |
| Linux | openssl Ubuntu 25.04 (plucky) | 3.4.1-1ubuntu4 | [openssl 3.4.1-1ubuntu4](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openssl-3.4.1-1ubuntu4.md) | Sep 30, 2025 |
| Linux | openssl Ubuntu 25.10 (questing) | 3.5.3-1ubuntu2 | [openssl 3.5.3-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-openssl-3.5.3-1ubuntu2.md) | Sep 29, 2025 |
| Linux | openssl Ubuntu 26.04.1 LTS (resolute) | 3.5.3-1ubuntu2 | [openssl 3.5.3-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-openssl-3.5.3-1ubuntu2.md) | Sep 29, 2025 |
| Linux | openssl almalinux 10 | 1:3.5.1-4.el10_1.alma.1 | [ALSA-2025:21248](https://patchblox.com/security/data/fix/linux/alsa-2025-21248.md) | Nov 13, 2025 |
| Linux | openssl almalinux 8 | 1:1.1.1k-14.el8_10 | [ALSA-2026:0337](https://patchblox.com/security/data/fix/linux/alsa-2026-0337.md) | Jan 8, 2026 |
| Linux | openssl almalinux 9 | 1:3.5.1-4.el9_7 | [ALSA-2025:21255](https://patchblox.com/security/data/fix/linux/alsa-2025-21255.md) | Nov 13, 2025 |
| Linux | openssl amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl ol 10 | 1:3.5.1-4.0.1.el10_1 | [ELSA-2025-21248](https://patchblox.com/security/data/fix/linux/elsa-2025-21248.md) | Dec 2, 2025 |
| Linux | openssl ol 8 | 1:1.1.1k-14.el8_10 | [ELSA-2026-0337](https://patchblox.com/security/data/fix/linux/elsa-2026-0337.md) | Jan 8, 2026 |
| Linux | openssl ol 9 | 10:3.5.1-4.0.2.el9_7_fips | [ELSA-2025-28011](https://patchblox.com/security/data/fix/linux/elsa-2025-28011.md) | Nov 25, 2025 |
| Linux | openssl rocky 10 | 1:3.5.1-4.el10_1 | [RLSA-2025:21248](https://patchblox.com/security/data/fix/linux/rlsa-2025-21248.md) | Nov 25, 2025 |
| Linux | openssl rocky 8 | 1:1.1.1k-14.el8_10 | [RLSA-2026:0337](https://patchblox.com/security/data/fix/linux/rlsa-2026-0337.md) | Jan 14, 2026 |
| Linux | openssl rocky 9 | 1:3.5.1-4.el9_7 | [RLSA-2025:21255](https://patchblox.com/security/data/fix/linux/rlsa-2025-21255.md) | Nov 21, 2025 |
| Linux | openssl-1_0_0 opensuse-leap 15.6 | 1.0.2p-150000.3.97.1 | [SUSE-SU-2025:4126-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4126-1.md) | Nov 18, 2025 |
| Linux | openssl-1_0_0 sles 15.6 | 1.0.2p-150000.3.97.1 | [SUSE-SU-2025:4126-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4126-1.md) | Nov 18, 2025 |
| Linux | openssl-1_0_0 sles 15.7 | 1.0.2p-150000.3.97.1 | [SUSE-SU-2025:4126-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4126-1.md) | Nov 18, 2025 |
| Linux | openssl-1_1 opensuse-leap 15.6 | 1.1.1w-150600.5.18.1 | [SUSE-SU-2025:03443-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03443-1.md) | Sep 30, 2025 |
| Linux | openssl-1_1 sles 15.6 | 1.1.1w-150600.5.18.1 | [SUSE-SU-2025:03443-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03443-1.md) | Sep 30, 2025 |
| Linux | openssl-1_1 sles 15.7 | 1.1.1w-150700.11.6.1 | [SUSE-SU-2025:03635-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03635-1.md) | Oct 17, 2025 |
| Linux | openssl-1_1-livepatches sles 15.6 | 0.5-150600.11.3.1 | [SUSE-SU-2025:03632-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03632-1.md) | Oct 17, 2025 |
| Linux | openssl-1_1-livepatches sles 15.7 | 0.5-150700.13.3.1 | [SUSE-SU-2025:03523-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03523-1.md) | Oct 10, 2025 |
| Linux | openssl-3 opensuse-leap 15.6 | 3.1.4-150600.5.39.1 | [SUSE-SU-2025:03442-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03442-1.md) | Sep 30, 2025 |
| Linux | openssl-3 opensuse-leap 16.0 | 3.5.0-160000.4.1 | [OPENSUSE-SU-2025:20164-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-20164-1.md) | Dec 15, 2025 |
| Linux | openssl-3 sles 15.6 | 3.1.4-150600.5.39.1 | [SUSE-SU-2025:03442-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03442-1.md) | Sep 30, 2025 |
| Linux | openssl-3 sles 15.7 | 3.2.3-150700.5.21.1 | [SUSE-SU-2025:03546-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03546-1.md) | Oct 11, 2025 |
| Linux | openssl-3 sles 16.0 | 3.5.0-160000.4.1 | [SUSE-SU-2025:21213-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-21213-1.md) | Dec 15, 2025 |
| Linux | openssl-3-livepatches sles 15.6 | 0.2-150600.13.8.1 | [SUSE-SU-2025:03586-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03586-1.md) | Oct 13, 2025 |
| Linux | openssl-3-livepatches sles 15.7 | 0.2-150700.16.3.2 | [SUSE-SU-2025:3917-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-3917-1.md) | Nov 3, 2025 |
| Linux | openssl-3-livepatches sles 16.0 | 0.3-160000.1.1 | [SUSE-SU-2026:20607-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20607-1.md) | Feb 18, 2026 |
| Linux | openssl-debuginfo amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-debugsource amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-devel RHEL 8 | 1:1.1.1k-14.el8_10 | [RHSA-2026:0337](https://patchblox.com/security/data/fix/linux/rhsa-2026-0337.md) | Jan 16, 2026 |
| Linux | openssl-devel RHEL 9 | 1:3.5.1-4.el9_7 | [RHSA-2025:21255](https://patchblox.com/security/data/fix/linux/rhsa-2025-21255.md) | Nov 13, 2025 |
| Linux | openssl-devel almalinux 10 | 1:3.5.1-4.el10_1.alma.1 | [ALSA-2025:21248](https://patchblox.com/security/data/fix/linux/alsa-2025-21248.md) | Nov 13, 2025 |
| Linux | openssl-devel almalinux 8 | 1:1.1.1k-14.el8_10 | [ALSA-2026:0337](https://patchblox.com/security/data/fix/linux/alsa-2026-0337.md) | Jan 8, 2026 |
| Linux | openssl-devel almalinux 9 | 1:3.5.1-4.el9_7 | [ALSA-2025:21255](https://patchblox.com/security/data/fix/linux/alsa-2025-21255.md) | Nov 13, 2025 |
| Linux | openssl-devel amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-devel ol 10 | 1:3.5.1-4.0.1.el10_1 | [ELSA-2025-21248](https://patchblox.com/security/data/fix/linux/elsa-2025-21248.md) | Dec 2, 2025 |
| Linux | openssl-devel ol 8 | 1:1.1.1k-14.el8_10 | [ELSA-2026-0337](https://patchblox.com/security/data/fix/linux/elsa-2026-0337.md) | Jan 8, 2026 |
| Linux | openssl-devel ol 9 | 10:3.5.1-4.0.2.el9_7_fips | [ELSA-2025-28011](https://patchblox.com/security/data/fix/linux/elsa-2025-28011.md) | Nov 25, 2025 |
| Linux | openssl-fips-provider-latest amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-fips-provider-latest-debuginfo amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-libs RHEL 8 | 1:1.1.1k-14.el8_10 | [RHSA-2026:0337](https://patchblox.com/security/data/fix/linux/rhsa-2026-0337.md) | Jan 16, 2026 |
| Linux | openssl-libs RHEL 9 | 1:3.5.1-4.el9_7 | [RHSA-2025:21255](https://patchblox.com/security/data/fix/linux/rhsa-2025-21255.md) | Nov 13, 2025 |
| Linux | openssl-libs almalinux 10 | 1:3.5.1-4.el10_1.alma.1 | [ALSA-2025:21248](https://patchblox.com/security/data/fix/linux/alsa-2025-21248.md) | Nov 13, 2025 |
| Linux | openssl-libs almalinux 8 | 1:1.1.1k-14.el8_10 | [ALSA-2026:0337](https://patchblox.com/security/data/fix/linux/alsa-2026-0337.md) | Jan 8, 2026 |
| Linux | openssl-libs almalinux 9 | 1:3.5.1-4.el9_7 | [ALSA-2025:21255](https://patchblox.com/security/data/fix/linux/alsa-2025-21255.md) | Nov 13, 2025 |
| Linux | openssl-libs amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-libs ol 10 | 1:3.5.1-4.0.1.el10_1 | [ELSA-2025-21248](https://patchblox.com/security/data/fix/linux/elsa-2025-21248.md) | Dec 2, 2025 |
| Linux | openssl-libs ol 8 | 1:1.1.1k-14.el8_10 | [ELSA-2026-0337](https://patchblox.com/security/data/fix/linux/elsa-2026-0337.md) | Jan 8, 2026 |
| Linux | openssl-libs ol 9 | 10:3.5.1-4.0.2.el9_7_fips | [ELSA-2025-28011](https://patchblox.com/security/data/fix/linux/elsa-2025-28011.md) | Nov 25, 2025 |
| Linux | openssl-libs-debuginfo amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-perl RHEL 8 | 1:1.1.1k-14.el8_10 | [RHSA-2026:0337](https://patchblox.com/security/data/fix/linux/rhsa-2026-0337.md) | Jan 16, 2026 |
| Linux | openssl-perl RHEL 9 | 1:3.5.1-4.el9_7 | [RHSA-2025:21255](https://patchblox.com/security/data/fix/linux/rhsa-2025-21255.md) | Nov 13, 2025 |
| Linux | openssl-perl almalinux 10 | 1:3.5.1-4.el10_1.alma.1 | [ALSA-2025:21248](https://patchblox.com/security/data/fix/linux/alsa-2025-21248.md) | Nov 13, 2025 |
| Linux | openssl-perl almalinux 8 | 1:1.1.1k-14.el8_10 | [ALSA-2026:0337](https://patchblox.com/security/data/fix/linux/alsa-2026-0337.md) | Jan 8, 2026 |
| Linux | openssl-perl almalinux 9 | 1:3.5.1-4.el9_7 | [ALSA-2025:21255](https://patchblox.com/security/data/fix/linux/alsa-2025-21255.md) | Nov 13, 2025 |
| Linux | openssl-perl amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-perl ol 10 | 1:3.5.1-4.0.1.el10_1 | [ELSA-2025-21248](https://patchblox.com/security/data/fix/linux/elsa-2025-21248.md) | Dec 2, 2025 |
| Linux | openssl-perl ol 8 | 1:1.1.1k-14.el8_10 | [ELSA-2026-0337](https://patchblox.com/security/data/fix/linux/elsa-2026-0337.md) | Jan 8, 2026 |
| Linux | openssl-perl ol 9 | 10:3.5.1-4.0.2.el9_7_fips | [ELSA-2025-28011](https://patchblox.com/security/data/fix/linux/elsa-2025-28011.md) | Nov 25, 2025 |
| Linux | openssl-provider-legacy Ubuntu 25.04 (plucky) | 3.4.1-1ubuntu4 | [openssl-provider-legacy 3.4.1-1ubuntu4](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openssl-provider-legacy-3.4.1-1ubuntu4.md) | Sep 30, 2025 |
| Linux | openssl-provider-legacy Ubuntu 25.10 (questing) | 3.5.3-1ubuntu2 | [openssl-provider-legacy 3.5.3-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-openssl-provider-legacy-3.5.3-1ubuntu2.md) | Sep 29, 2025 |
| Linux | openssl-provider-legacy Ubuntu 26.04.1 LTS (resolute) | 3.5.3-1ubuntu2 | [openssl-provider-legacy 3.5.3-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-openssl-provider-legacy-3.5.3-1ubuntu2.md) | Sep 29, 2025 |
| Linux | openssl-snapsafe-libs amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-snapsafe-libs-debuginfo amzn 2023 | 1:3.2.2-1.amzn2023.0.2 | [ALAS2023-2025-1225](https://patchblox.com/security/data/fix/linux/alas2023-2025-1225.md) | Oct 14, 2025 |
| Linux | openssl-static ol 8 | 2:1.1.1k-14.ksplice1.el8_10 | [ELSA-2026-50008](https://patchblox.com/security/data/fix/linux/elsa-2026-50008.md) | Jan 13, 2026 |
| Linux | openssl1.0 Ubuntu 18.04.6 LTS (bionic) | 1.0.2n-1ubuntu5.13+esm2 | [openssl1.0 1.0.2n-1ubuntu5.13+esm2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openssl1.0-1.0.2n-1ubuntu5.13-esm2.md) | Sep 29, 2025 |

---

Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.