RHSA-2026:98121: Important: openssl security update

Q: Which OpenSSL package variants are covered by this update?

The update covers redhat/openssl, redhat/openssl-debuginfo, redhat/openssl-devel, redhat/openssl-perl, and redhat/openssl-static.

Q: Does the advisory specify affected versions, exploit prerequisites, or a workaround?

No. The provided advisory data does not identify affected versions, required attacker access or configuration conditions, or mitigation steps for systems that cannot yet be updated.

Q: Where can I find the vulnerability’s detailed impact and CVSS information?

The advisory directs readers to the CVE references for impact, CVSS score, acknowledgments, and related details. It identifies the issue as CVE-2026-84782.

Published Nov 11, 2026

Updated

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.Security Fix(es): openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

10 affected componentsFixes available

redhat/openssl<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl-debuginfo<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl-debuginfo<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl-devel<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl-devel<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl-perl<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl-static<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl-perl<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

redhat/openssl-static<1.0.1e-61.el6_10.2

1.0.1e-61.el6_10.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/openssl to a version that resolves this vulnerability.
Fixed in 1.0.1e-61.el6_10.2
Upgrade
Upgrade redhat/openssl-debuginfo to a version that resolves this vulnerability.
Fixed in 1.0.1e-61.el6_10.2
Upgrade
Upgrade redhat/openssl-devel to a version that resolves this vulnerability.
Fixed in 1.0.1e-61.el6_10.2
Upgrade
Upgrade redhat/openssl-perl to a version that resolves this vulnerability.
Fixed in 1.0.1e-61.el6_10.2
Upgrade
Upgrade redhat/openssl-static to a version that resolves this vulnerability.
Fixed in 1.0.1e-61.el6_10.2

Event History

Nov 11, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

Which OpenSSL package variants are covered by this update?

The update covers redhat/openssl, redhat/openssl-debuginfo, redhat/openssl-devel, redhat/openssl-perl, and redhat/openssl-static.

Does the advisory specify affected versions, exploit prerequisites, or a workaround?

No. The provided advisory data does not identify affected versions, required attacker access or configuration conditions, or mitigation steps for systems that cannot yet be updated.

Where can I find the vulnerability’s detailed impact and CVSS information?

The advisory directs readers to the CVE references for impact, CVSS score, acknowledgments, and related details. It identifies the issue as CVE-2026-84782.

RHSA-2026:98121: Important: openssl security update

Affected Software

Remediation

Event History

Frequently Asked Questions

Which OpenSSL package variants are covered by this update?

Does the advisory specify affected versions, exploit prerequisites, or a workaround?

Where can I find the vulnerability’s detailed impact and CVSS information?

Company

Resources

Contact

Frequently Asked Questions

Which OpenSSL package variants are covered by this update?

Does the advisory specify affected versions, exploit prerequisites, or a workaround?

Where can I find the vulnerability’s detailed impact and CVSS information?