OpenSSL issued security updates to fix 12 flaws, including Remote Code Execution

OpenSSL published patches for 12 vulnerabilities—mostly memory-safety and parsing issues—including two high-severity flaws (CVE‑2025‑15467 and CVE‑2025‑11187) that can lead to denial-of-service and potentially remote code execution when parsing untrusted CMS/PKCS#7 and PKCS#12 inputs; affected versions include OpenSSL 3.0–3.6 and users should apply updates promptly.