SUSE-SU-2025:03586-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:03586-1

Upstream

Related

Published

2025-10-13T07:02:35Z

Modified

2025-10-14T02:03:18.096609Z

Summary

Security update for openssl-3-livepatches

Details

This update for openssl-3-livepatches fixes the following issues:

CVE-2025-9230: incorrect check of key size can lead to out-of-bounds read and write in RFC 3211 KEK unwrap (bsc#1250410).

References

Affected packages

Name: openssl-3-livepatches
Purl: pkg:rpm/suse/openssl-3-livepatches&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP6

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2-150600.13.8.1

{
    "binaries": [
        {
            "openssl-3-livepatches": "0.2-150600.13.8.1"
        }
    ]
}

Name: openssl-3-livepatches
Purl: pkg:rpm/suse/openssl-3-livepatches&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP7

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.2-150600.13.8.1

{
    "binaries": [
        {
            "openssl-3-livepatches": "0.2-150600.13.8.1"
        }
    ]
}