Loading story…
Red Hat released Important security updates for OpenSSL across multiple RHEL 9 and RHEL 10 channels to address two high-impact vulnerabilities, CVE-2025-15467 and CVE-2025-69419. The first flaw affects parsing of CMS AuthEnvelopedData with AEAD ciphers, where an oversized initialization vector can overflow a fixed-size stack buffer before authentication or tag verification, creating a path to denial of service and possible remote code execution. The second flaw is a memory corruption bug in PKCS#12 processing, where BMPString to UTF-8 conversion can trigger an out-of-bounds heap write when an application parses an attacker-controlled PKCS#12 file, potentially causing a crash or arbitrary code execution.
Upstream fixes were issued in OpenSSL 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1, and 1.1.1ze for the affected branches, while OpenSSL 1.0.2 is not affected and the OpenSSL FIPS modules are outside the vulnerable code paths. Red Hat advisories including RHSA-2026:1496, RHSA-2026:1503, RHSA-2026:1519, RHSA-2026:1594, and RHSA-2026:1733 cover impacted products such as RHEL 9.0, 9.2, 9.4, 9.6, and 10.0 variants, along with related SAP, AUS, EUS, OpenShift, and JBoss Core Services offerings, with updated package builds released for major architectures including x86_64, aarch64, ppc64le, and s390x.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
Red Hat published RHSA-2026:1733 for RHEL 9.0 Update Services for SAP Solutions, releasing OpenSSL 3.0.1-46.el9_0.7 to address CVE-2025-15467 and CVE-2025-69419.
Red Hat published RHSA-2026:1594 for RHEL 9.2 Update Services for SAP Solutions and related variants, releasing OpenSSL 3.0.7-18.el9_2.3 to fix CVE-2025-15467 and CVE-2025-69419.
Red Hat published RHSA-2026:1496 for RHEL 10.0 offerings, releasing OpenSSL 3.2.2-16.el10_0.6 and addressing CVE-2025-15467 and CVE-2025-69419 along with CVE-2025-11187.
Red Hat published RHSA-2026:1503 for RHEL 9.6 support channels, releasing OpenSSL 3.2.2-7.el9_6.2 to remediate CVE-2025-15467 and CVE-2025-69419.
Red Hat published RHSA-2026:1519 for RHEL 9.4 support channels, releasing OpenSSL 3.0.7-29.el9_4.2 to address CVE-2025-15467 and CVE-2025-69419.
Red Hat Bugzilla documented CVE-2025-69419 as an out-of-bounds write in OpenSSL PKCS#12 BMPString-to-UTF-8 conversion reachable via PKCS12_get_friendlyname(). The entry states upstream fixed releases are OpenSSL 3.6.1, 3.5.5, 3.4.4, 3.3.6, 3.0.19, and 1.1.1ze, and notes Red Hat advisories for affected products.
Red Hat Bugzilla documented CVE-2025-15467 as a stack buffer overflow in OpenSSL CMS AuthEnvelopedData parsing with AEAD ciphers, caused by copying an oversized IV into a fixed-size stack buffer. The entry states upstream fixed releases are OpenSSL 3.0.19, 3.3.6, 3.4.4, 3.5.5, and 3.6.1, and notes Red Hat advisories for affected products.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
7 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourcebugzilla.redhat.com
Open sourcebugzilla.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **Important** security updates for **OpenSSL** in **Red Hat Enterprise Linux 9** and **Red Hat Enterprise Linux 10**, fixing a broad set of flaws that could lead to remote code execution, arbitrary code execution, denial of service, information disclosure, data tampering, and data integrity bypass. The updates, published as `RHSA-2026:1473` for RHEL 9 and `RHSA-2026:1472` for RHEL 10, cover twelve CVEs across PKCS#12 processing, CMS parsing, QUIC handling, TLS 1.3 certificate compression, BIO filtering, OCB encryption and decryption calls, TimeStamp Response parsing, and PKCS#7 signature verification, with updated package version `3.5.1-7` issued for supported architectures and product variants.
Aug 21, 2026
Red Hat released **Important** security updates for the Linux kernel across **RHEL 8, RHEL 9, and RHEL 10**, including `kernel-rt` for Real Time deployments, fixing vulnerabilities in core subsystems such as **SMB/CIFS client code, iSCSI target handling, SMC, `sched/psi`, `memfd`, UDF, netfilter, POSIX CPU timers, and AMD GPU drivers**. The advisories cover **nine CVEs in RHEL 8**, **26 CVEs in RHEL 9**, and **24 CVEs in RHEL 10**, with affected offerings spanning standard, Extended Life Cycle, Extended Update Support, SAP, NFV, and CodeReady Linux Builder channels across **x86_64, s390x, ppc64le, and aarch64**. Red Hat said systems should be **rebooted after applying the updates** and reiterated that kernel errata should be treated as security-relevant because of the kernel’s central role. Among the patched flaws, Red Hat detailed **`CVE-2026-53143`**, a **buffer overflow** in the `drm/amdkfd` driver on **GFX11** that could leak or corrupt adjacent GTT memory during CRIU checkpoint and restore operations because SDMA queues used compute-specific handlers with the wrong MQD size. The company also fixed **`CVE-2026-63952`** in **`memfd`**, where writable mappings could persist even when `SEAL_EXEC` implicitly applied `SEAL_WRITE`, weakening the expected write-seal guarantees and undermining **W^X** protections. The RHEL 9 advisory also includes non-security fixes, including a regression in `5.14.0-687.5.1.el9_8` that broke Wi-Fi when **FIPS** was enabled.
Aug 20, 2026
Red Hat released multiple **Important** security advisories for `gstreamer1-plugins-bad-free` across **Red Hat Enterprise Linux 9 and 10**, fixing two GStreamer vulnerabilities tracked as **`CVE-2026-59691`** and **`CVE-2026-59692`**. The first flaw is a heap out-of-bounds write in `rfbsrc/librfb` Hextile handling when processing a **16bpp framebuffer**, while the second is a stack buffer overflow in `openssl_verify_callback` tied to a **DTLS certificate Subject DN**. The advisories cover standard and extended support channels, including RHEL 9.4, 9.6, 9.8, and RHEL 10.0 product variants. Updated packages were issued for multiple architectures, including **`x86_64`**, **`aarch64`**, **`ppc64le`**, and **`s390x`**, with package versions including `1.22.1-6.el9_4.6`, `1.22.12-5.el9_6.6`, `1.22.12-7.el9_8.3`, `1.24.11-3.el10_0.6`, and `1.26.7-2.el10_2.6`. Affected offerings also include **Extended Update Support**, **Extended Life Cycle**, **SAP Solutions update services**, **4-years-of-updates/support variants**, and **CodeReady Linux Builder** repositories. Red Hat instructed customers to apply the updated packages through standard patching processes to remediate affected systems.
Aug 20, 2026