{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/ubuntu20.04els/vex/2025/cve-2025-9230-els_os-ubuntu20_04els.json" } ], "tracking": { "current_release_date": "2026-08-02T08:13:35Z", "generator": { "date": "2026-08-02T08:13:35Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2025-9230-ELS_OS-UBUNTU20.04ELS", "initial_release_date": "2025-09-30T14:15:00Z", "revision_history": [ { "date": "2025-09-30T14:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-06-13T14:39:22Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-08-02T08:13:35Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "Security update on CVE-2025-9230" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libssl-dev-0:1.1.1f-1ubuntu2.24.amd64", "product": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24.amd64", "product_id": "libssl-dev-0:1.1.1f-1ubuntu2.24.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libssl-dev@1.1.1f-1ubuntu2.24?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.1.1f-1ubuntu2.24.amd64", "product": { "name": "openssl-0:1.1.1f-1ubuntu2.24.amd64", "product_id": "openssl-0:1.1.1f-1ubuntu2.24.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.24?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.1-0:1.1.1f-1ubuntu2.24.amd64", "product": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24.amd64", "product_id": "libssl1.1-0:1.1.1f-1ubuntu2.24.amd64", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libssl1.1@1.1.1f-1ubuntu2.24?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "libssl-doc-0:1.1.1f-1ubuntu2.24.all", "product": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24.all", "product_id": "libssl-doc-0:1.1.1f-1ubuntu2.24.all", "product_identification_helper": { "purl": "pkg:deb/ubuntu/libssl-doc@1.1.1f-1ubuntu2.24?arch=all" } } } ], "category": "architecture", "name": "all" }, { "branches": [ { "category": "product_name", "name": "Ubuntu 20.04", "product": { "name": "Ubuntu 20.04", "product_id": "Ubuntu-20", "product_identification_helper": { "cpe": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*" } } } ], "category": "product_family", "name": "Ubuntu" } ], "category": "vendor", "name": "Canonical Ltd." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product_id": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-dev@1.1.1f-1ubuntu2.24%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product_id": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-dev@1.1.1f-1ubuntu2.24%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product_id": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-dev@1.1.1f-1ubuntu2.24%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product_id": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-dev@1.1.1f-1ubuntu2.24%2Btuxcare.els6?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product_id": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-dev@1.1.1f-1ubuntu2.24%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product_id": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/openssl@1.1.1f-1ubuntu2.24%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product_id": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/openssl@1.1.1f-1ubuntu2.24%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product_id": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/openssl@1.1.1f-1ubuntu2.24%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product_id": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/openssl@1.1.1f-1ubuntu2.24%2Btuxcare.els6?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product_id": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/openssl@1.1.1f-1ubuntu2.24%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product_id": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl1.1@1.1.1f-1ubuntu2.24%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product_id": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl1.1@1.1.1f-1ubuntu2.24%2Btuxcare.els6?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product_id": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl1.1@1.1.1f-1ubuntu2.24%2Btuxcare.els5?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product_id": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl1.1@1.1.1f-1ubuntu2.24%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product_id": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl1.1@1.1.1f-1ubuntu2.24%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product_id": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-dev@1.1.1f-1ubuntu2.24%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product_id": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl1.1@1.1.1f-1ubuntu2.24%2Btuxcare.els7?arch=amd64" } } }, { "category": "product_version", "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product_id": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/openssl@1.1.1f-1ubuntu2.24%2Btuxcare.els7?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all", "product": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all", "product_id": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-doc@1.1.1f-1ubuntu2.24%2Btuxcare.els5?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all", "product": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all", "product_id": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-doc@1.1.1f-1ubuntu2.24%2Btuxcare.els3?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all", "product": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all", "product_id": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-doc@1.1.1f-1ubuntu2.24%2Btuxcare.els6?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all", "product": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all", "product_id": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-doc@1.1.1f-1ubuntu2.24%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all", "product": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all", "product_id": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-doc@1.1.1f-1ubuntu2.24%2Btuxcare.els4?arch=all" } } }, { "category": "product_version", "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all", "product": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all", "product_id": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libssl-doc@1.1.1f-1ubuntu2.24%2Btuxcare.els7?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64" }, "product_reference": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24.amd64" }, "product_reference": "libssl-dev-0:1.1.1f-1ubuntu2.24.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64" }, "product_reference": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64" }, "product_reference": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64" }, "product_reference": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64" }, "product_reference": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64" }, "product_reference": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.1.1f-1ubuntu2.24.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24.amd64" }, "product_reference": "openssl-0:1.1.1f-1ubuntu2.24.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64" }, "product_reference": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64" }, "product_reference": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64" }, "product_reference": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64" }, "product_reference": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all" }, "product_reference": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24.all as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24.all" }, "product_reference": "libssl-doc-0:1.1.1f-1ubuntu2.24.all", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all" }, "product_reference": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all" }, "product_reference": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all" }, "product_reference": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all" }, "product_reference": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64" }, "product_reference": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24.amd64" }, "product_reference": "libssl1.1-0:1.1.1f-1ubuntu2.24.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64" }, "product_reference": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64" }, "product_reference": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64" }, "product_reference": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64" }, "product_reference": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64" }, "product_reference": "libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64" }, "product_reference": "libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64 as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64" }, "product_reference": "openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "relates_to_product_reference": "Ubuntu-20" }, { "category": "default_component_of", "full_product_name": { "name": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all as a component of Ubuntu 20.04", "product_id": "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all" }, "product_reference": "libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all", "relates_to_product_reference": "Ubuntu-20" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-9230", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "Issue summary: An application trying to decrypt CMS messages encrypted using\npassword based encryption can trigger an out-of-bounds read and write.\n\nImpact summary: This out-of-bounds read may trigger a crash which leads to\nDenial of Service for an application. The out-of-bounds write can cause\na memory corruption which can have various consequences including\na Denial of Service or Execution of attacker-supplied code.\n\nAlthough the consequences of a successful exploit of this vulnerability\ncould be severe, the probability that the attacker would be able to\nperform it is low. Besides, password based (PWRI) encryption support in CMS\nmessages is very rarely used. For that reason the issue was assessed as\nModerate severity according to our Security Policy.\n\nThe FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this\nissue, as the CMS implementation is outside the OpenSSL FIPS module\nboundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24.amd64", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24.all", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-9230" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45", "url": "https://github.com/openssl/openssl/commit/5965ea5dd6960f36d8b7f74f8eac67a8eb8f2b45" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280", "url": "https://github.com/openssl/openssl/commit/9e91358f365dee6c446dcdcdb01c04d2743fd280" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def", "url": "https://github.com/openssl/openssl/commit/a79c4ce559c6a3a8fd4109e9f33c1185d5bf2def" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd", "url": "https://github.com/openssl/openssl/commit/b5282d677551afda7d20e9c00e09561b547b2dfd" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482", "url": "https://github.com/openssl/openssl/commit/bae259a211ada6315dc50900686daaaaaa55f482" }, { "category": "external", "summary": "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3", "url": "https://github.openssl.org/openssl/extended-releases/commit/c2b96348bfa662f25f4fabf81958ae822063dae3" }, { "category": "external", "summary": "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba", "url": "https://github.openssl.org/openssl/extended-releases/commit/dfbaf161d8dafc1132dd88cd48ad990ed9b4c8ba" }, { "category": "external", "summary": "https://openssl-library.org/news/secadv/20250930.txt", "url": "https://openssl-library.org/news/secadv/20250930.txt" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/09/30/5", "url": "http://www.openwall.com/lists/oss-security/2025/09/30/5" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00001.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-089022.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-089022.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-485750.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-485750.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-585531.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-585531.html" } ], "release_date": "2025-09-30T14:15:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-06-12T13:03:40.005572Z", "details": "Ignored due to low severity", "product_ids": [ "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24.amd64", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24.all", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1" }, "products": [ "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:libssl-dev-0:1.1.1f-1ubuntu2.24.amd64", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els2.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els3.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els4.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els5.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els6.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24+tuxcare.els7.all", "Ubuntu-20:libssl-doc-0:1.1.1f-1ubuntu2.24.all", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:libssl1.1-0:1.1.1f-1ubuntu2.24.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els2.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els3.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els4.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els5.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els6.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24+tuxcare.els7.amd64", "Ubuntu-20:openssl-0:1.1.1f-1ubuntu2.24.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }