Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Fedora 42 OpenSSL Critical PKCS#12 DoS Issue FEDORA-2026-9bb4c555f1

fedora
Calendar Grey January 31, 2026
Dist Fedora Esm H88
Critical security advisory for Fedora 42 to fix OpenSSL issues with PKCS#12, impacting secure communications.
Don't crash on parsing PKCS#12 without MAC Resolves: CVE-2025-11187 Resolves: CVE-2025-15467 Resolves: CVE-2025-69419

Summary

The OpenSSL toolkit provides support for secure communications between

machines. OpenSSL includes a certificate management tool and shared

libraries which provide various cryptographic algorithms and

protocols.

Update Information:

Don't crash on parsing PKCS#12 without MAC Resolves: CVE-2025-11187 Resolves: CVE-2025-15467 Resolves: CVE-2025-69419

Change Log

* Tue Jan 20 2026 Dmitry Belyavskiy - 1:3.2.6-3 - Don't crash on parsing PKCS#12 without MAC - Resloves: CVE-2025-11187 - Resloves: CVE-2025-15467 - Resloves: CVE-2025-69419

References

Fedora Update Notification FEDORA-2026-9bb4c555f1 2026-01-31 17:08:28.805806+00:00 Name : openssl Product : Fedora 42 Version : 3.2.6 Release : 3.fc42 URL : http://www.openssl.org/ Summary : Utilities from the general purpose cryptography library with TLS implementation Description : The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9bb4c555f1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: openssl
Product: Fedora 42
Version: 3.2.6
Release: 3.fc42
Summary: Utilities from the general purpose cryptography library with TLS implementation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here