Hi, is anyone working on openssl version mitigating CVE-2025-15467
If yes, is release date already known?
openssl-library.org/news/secadv/20260127.txt
RHSA-2026:1472 - Security Advisory - Red Hat Customer Portal
Generally you have to wait for RHEL to fix it before it appears in Rocky and RHEL only fixed it yesterday. On Rocky website is already explained how long before updates are released between RHEL and Rocky. 24-48 hours, best effort and may be longer than this since people have day jobs, family, etc.
Updates have now hit the mirrors.
1 Like