Multiple vulnerabilities were discovered in OpenSSL affecting various Ubuntu releases. These include incorrect memory handling during CMS message decryption that could lead to denial of service or arbitrary code execution (CVE-2025-9230), a timing side-channel in SM2 signature computations on ARM platforms potentially allowing private data recovery (CVE-2025-9231), and incorrect memory handling during HTTP requests when the "no_proxy" environment variable is set, causing possible denial of service (CVE-2025-9232). The timing side-channel and HTTP request issues affect only Ubuntu 25.04. Fixes are available for all affected versions.