RHSA-2026:99574: Red Hat Hardened Images RPMs Security Update

Published Nov 12, 2026

Updated

Red Hat Hardened Images RPMs Security Update

Other sources

This update includes the following RPMs:openssl3: openssl3-devel-1:3.5.9-1.3.hum1 (aarch64, s390x, x8664) openssl3-devel-engine-1:3.5.9-1.3.hum1 (aarch64, s390x, x8664) openssl3-libs-1:3.5.9-1.3.hum1 (aarch64, s390x, x8664) openssl3-1:3.5.9-1.3.hum1.src (src) Security Fix(es):openssl3: CVE-2026-95691 CVE-2026-107496

— Red Hat

Affected Software

1 affected component

Red Hat Red Hat Hardened Images

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade openssl3 to a version that resolves this vulnerability.
Fixed in 1:3.5.9-1.3.hum1

Event History

Nov 12, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Advisory Published

via Red Hat·09:41 AM

Data Sourced

via Red Hat·09:41 AM

Severity

Frequently Asked Questions

Which systems are in scope for this update?

The update applies to Red Hat Hardened Images and provides OpenSSL 3 RPMs for aarch64, s390x, and x86_64. A source RPM is also included.

Which installed packages and version indicate the update has been applied?

The update provides openssl3-libs, openssl3-devel, and openssl3-devel-engine at version 1:3.5.9-1.3.hum1. The advisory identifies CVE-2026-95691 and CVE-2026-107496 as fixed by these RPMs.