Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

OpenSSL Update for Red Hat Systems: Insecure Cryptography

published 5 months ago

Summary

A security update is available for OpenSSL on Red Hat systems. This update fixes a vulnerability that could allow an attacker to access sensitive information. To protect your system, apply the latest update as soon as possible.

What to do

Update redhat openssl to version 1:3.5.5-2.el10_2.
Update redhat openssl-debuginfo to version 1:3.5.5-2.el10_2.
Update redhat openssl-debugsource to version 1:3.5.5-2.el10_2.
Update redhat openssl-devel to version 1:3.5.5-2.el10_2.
Update redhat openssl-libs to version 1:3.5.5-2.el10_2.
Update redhat openssl-libs-debuginfo to version 1:3.5.5-2.el10_2.
Update redhat openssl-perl to version 1:3.5.5-2.el10_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:10.2	redhat	openssl	< 1:3.5.5-2.el10_2 Fix: upgrade to 1:3.5.5-2.el10_2
Red Hat:enterprise_linux:10.2	redhat	openssl-debuginfo	< 1:3.5.5-2.el10_2 Fix: upgrade to 1:3.5.5-2.el10_2
Red Hat:enterprise_linux:10.2	redhat	openssl-debugsource	< 1:3.5.5-2.el10_2 Fix: upgrade to 1:3.5.5-2.el10_2
Red Hat:enterprise_linux:10.2	redhat	openssl-devel	< 1:3.5.5-2.el10_2 Fix: upgrade to 1:3.5.5-2.el10_2
Red Hat:enterprise_linux:10.2	redhat	openssl-libs	< 1:3.5.5-2.el10_2 Fix: upgrade to 1:3.5.5-2.el10_2
Red Hat:enterprise_linux:10.2	redhat	openssl-libs-debuginfo	< 1:3.5.5-2.el10_2 Fix: upgrade to 1:3.5.5-2.el10_2
Red Hat:enterprise_linux:10.2	redhat	openssl-perl	< 1:3.5.5-2.el10_2 Fix: upgrade to 1:3.5.5-2.el10_2

Original advisory text

Red Hat Security Advisory: openssl security update

References

https://access.redhat.com/errata/RHSA-2026:19066 Vendor Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2451094 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19066.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-2673 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2447327 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-2673 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-2673 Vendor Advisory
https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd6... Third Party Advisory
https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e... Third Party Advisory
https://openssl-library.org/news/secadv/20260313.txt Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-31790 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-31790 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-31790 Vendor Advisory
https://openssl-library.org/news/secadv/20260407.txt Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

6.5 Medium

Timeline

Published20 May 2026

Updated26 Sep 2026

First seen27 May 2026

Sources

RHSA-2026:19066 · OSV

Track software like this

Free during beta