Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
Red Hat OpenSSL packages could let attackers alter data
published 25 days ago
Summary
Several OpenSSL components on Red Hat systems may let a malicious user change encrypted information or cause the program to behave incorrectly. This risk affects the standard OpenSSL libraries and development files. Apply the latest Red Hat security update for OpenSSL as soon as possible to protect your systems.
What to do
- Update redhat openssl-debuginfo to version 1:3.5.8-2.el10_2.
- Update redhat openssl-debugsource to version 1:3.5.8-2.el10_2.
- Update redhat openssl-devel to version 1:3.5.8-2.el10_2.
- Update redhat openssl-libs-debuginfo to version 1:3.5.8-2.el10_2.
- Update redhat openssl-perl to version 1:3.5.8-2.el10_2.
- Update redhat openssl to version 1:3.5.8-2.el10_2.
- Update redhat openssl-libs to version 1:3.5.8-2.el10_2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:10.2 | redhat | openssl-debuginfo |
< 1:3.5.8-2.el10_2 Fix: upgrade to 1:3.5.8-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | openssl-debugsource |
< 1:3.5.8-2.el10_2 Fix: upgrade to 1:3.5.8-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | openssl-devel |
< 1:3.5.8-2.el10_2 Fix: upgrade to 1:3.5.8-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | openssl-libs-debuginfo |
< 1:3.5.8-2.el10_2 Fix: upgrade to 1:3.5.8-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | openssl-perl |
< 1:3.5.8-2.el10_2 Fix: upgrade to 1:3.5.8-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | openssl |
< 1:3.5.8-2.el10_2 Fix: upgrade to 1:3.5.8-2.el10_2
|
| Red Hat:enterprise_linux:10.2 | redhat | openssl-libs |
< 1:3.5.8-2.el10_2 Fix: upgrade to 1:3.5.8-2.el10_2
|
Original advisory text
Red Hat Security Advisory: openssl security update
References
- https://access.redhat.com/errata/RHSA-2026:76918 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2537080 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76918.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84782 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84782 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84782 Vendor Advisory
- https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published10 Oct 2026
Updated10 Oct 2026
First seen10 Oct 2026
Sources
RHSA-2026:76918 · OSV
Track software like this
Free during beta