CLSA-2025-1744926159
Update of openssl
No scoreFix available
- Backport the implicit rejection mechanism for RSA PKCS#1 v1.5 to prevent Bleichenbacher attacks; add an option to disable the mechanism
What each source reports
OSV No score
Update of openssl
- Backport the implicit rejection mechanism for RSA PKCS#1 v1.5 to prevent Bleichenbacher attacks; add an option to disable the mechanism
- Record
CLSA-2025-1744926159- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslTuxCare:CentOS:7 |
before 1:1.0.2k-26.el7_9.tuxcare.els3 | 1:1.0.2k-26.el7_9.tuxcare.els3 |
openssl-develTuxCare:CentOS:7 |
before 1:1.0.2k-26.el7_9.tuxcare.els3 | 1:1.0.2k-26.el7_9.tuxcare.els3 |
openssl-libsTuxCare:CentOS:7 |
before 1:1.0.2k-26.el7_9.tuxcare.els3 | 1:1.0.2k-26.el7_9.tuxcare.els3 |
openssl-perlTuxCare:CentOS:7 |
before 1:1.0.2k-26.el7_9.tuxcare.els3 | 1:1.0.2k-26.el7_9.tuxcare.els3 |
openssl-staticTuxCare:CentOS:7 |
before 1:1.0.2k-26.el7_9.tuxcare.els3 | 1:1.0.2k-26.el7_9.tuxcare.els3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2025-1744926159 is a vulnerability with no CVSS score yet in openssl, published April 17, 2025. No source lists public exploit code. Fixed in openssl 1:1.0.2k-26.el7_9.tuxcare.els3.