RHSA-2026:58563: Important: openssl security update

Published Aug 24, 2026

Updated

Important: openssl security update

Other sources

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.Security Fix(es): openssl: SSLselectnextproto buffer overread (CVE-2024-5535) openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) openssl: Heap Use-After-Free in OpenSSL PKCS7verify() (CVE-2026-45447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat

Affected Software

22 affected componentsFixes available

Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support

Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian

Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems)

Red Hat Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian

redhat/openssl<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-debuginfo<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-debuginfo<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-devel<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-devel<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-libs<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-libs<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-perl<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-static<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-static<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-perl<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-debuginfo<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-devel<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-libs<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-perl<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

redhat/openssl-static<1.0.2k-26.el7_9.2

1.0.2k-26.el7_9.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/openssl to a version that resolves this vulnerability.
Fixed in 1.0.2k-26.el7_9.2
Upgrade
Upgrade redhat/openssl-debuginfo to a version that resolves this vulnerability.
Fixed in 1.0.2k-26.el7_9.2
Upgrade
Upgrade redhat/openssl-devel to a version that resolves this vulnerability.
Fixed in 1.0.2k-26.el7_9.2
Upgrade
Upgrade redhat/openssl-libs to a version that resolves this vulnerability.
Fixed in 1.0.2k-26.el7_9.2
Upgrade
Upgrade redhat/openssl-perl to a version that resolves this vulnerability.
Fixed in 1.0.2k-26.el7_9.2
Upgrade
Upgrade redhat/openssl-static to a version that resolves this vulnerability.
Fixed in 1.0.2k-26.el7_9.2
Upgrade
Upgrade openssl to a version that resolves this vulnerability.
Patch CVE-2026-45447
Upgrade
Upgrade openssl to a version that resolves this vulnerability.
Patch CVE-2026-28390
Upgrade
Upgrade openssl to a version that resolves this vulnerability.
Patch CVE-2024-5535

Event History

Aug 24, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·12:55 AM

Data Sourced

via Red Hat·12:55 AM

Severity

RHSA-2026:58563: Important: openssl security update

Other sources

Affected Software

Remediation

Event History

Company

Resources

Contact