RHBA-2025:6314 — Red Hat Bug Fix Advisory: OpenSSL bug fix and enhancement update

The Red Hat advisory describes a flaw in OpenSSL RFC7250 Raw Public Key (RPK) authentication. The flaw may allow man-in-the-middle (MITM) attacks when a TLS/DTLS handshake does not abort after the server’s RPK fails to match the expected key, even though SSL_VERIFY_PEER verification mode is enabled.