Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/openssl@1:3.5.1-7?arch=el10_1
purl pkg:rpm/redhat/openssl@1:3.5.1-7?arch=el10_1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.4
Vulnerabilities affecting this package (12)
Vulnerability Summary Fixed by
VCID-3u2b-yumu-rkcd
Aliases:
CVE-2025-15468
openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling There are no reported fixed by versions.
VCID-6mua-rkdu-87ay
Aliases:
CVE-2025-68160
openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter There are no reported fixed by versions.
VCID-7xwq-vdej-ayg1
Aliases:
CVE-2026-22796
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification There are no reported fixed by versions.
VCID-9b9g-yngp-7kd7
Aliases:
CVE-2025-15469
openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation There are no reported fixed by versions.
VCID-antn-nu5a-7yf6
Aliases:
CVE-2025-69420
openssl: OpenSSL: Denial of Service via malformed TimeStamp Response There are no reported fixed by versions.
VCID-chgr-9utt-kqbp
Aliases:
CVE-2025-69419
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing There are no reported fixed by versions.
VCID-d4rs-rag3-cfcy
Aliases:
CVE-2025-15467
openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing There are no reported fixed by versions.
VCID-g8at-dasq-h3fb
Aliases:
CVE-2025-66199
openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression There are no reported fixed by versions.
VCID-j51b-cm37-6fdj
Aliases:
CVE-2025-11187
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file There are no reported fixed by versions.
VCID-p7ca-uc7n-mfc4
Aliases:
CVE-2025-69418
openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls There are no reported fixed by versions.
VCID-rgue-at15-k7a2
Aliases:
CVE-2026-22795
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing There are no reported fixed by versions.
VCID-w9yg-3dbq-8qge
Aliases:
CVE-2025-69421
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T20:06:31.043160+00:00 RedHat Importer Affected by VCID-chgr-9utt-kqbp https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69419.json 38.1.0
2026-04-04T20:06:30.312310+00:00 RedHat Importer Affected by VCID-d4rs-rag3-cfcy https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-15467.json 38.1.0
2026-04-01T13:32:19.075949+00:00 RedHat Importer Affected by VCID-7xwq-vdej-ayg1 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22796.json 38.0.0
2026-04-01T13:32:19.014885+00:00 RedHat Importer Affected by VCID-rgue-at15-k7a2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-22795.json 38.0.0
2026-04-01T13:32:18.954760+00:00 RedHat Importer Affected by VCID-antn-nu5a-7yf6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69420.json 38.0.0
2026-04-01T13:32:18.894857+00:00 RedHat Importer Affected by VCID-w9yg-3dbq-8qge https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69421.json 38.0.0
2026-04-01T13:32:18.096706+00:00 RedHat Importer Affected by VCID-chgr-9utt-kqbp https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69419.json 38.0.0
2026-04-01T13:32:17.288159+00:00 RedHat Importer Affected by VCID-p7ca-uc7n-mfc4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-69418.json 38.0.0
2026-04-01T13:32:17.229525+00:00 RedHat Importer Affected by VCID-6mua-rkdu-87ay https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68160.json 38.0.0
2026-04-01T13:32:17.166969+00:00 RedHat Importer Affected by VCID-g8at-dasq-h3fb https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-66199.json 38.0.0
2026-04-01T13:32:17.106953+00:00 RedHat Importer Affected by VCID-9b9g-yngp-7kd7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-15469.json 38.0.0
2026-04-01T13:32:17.043921+00:00 RedHat Importer Affected by VCID-3u2b-yumu-rkcd https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-15468.json 38.0.0
2026-04-01T13:32:16.951198+00:00 RedHat Importer Affected by VCID-j51b-cm37-6fdj https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-11187.json 38.0.0
2026-04-01T13:32:16.634274+00:00 RedHat Importer Affected by VCID-d4rs-rag3-cfcy https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-15467.json 38.0.0