Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

OpenSSL Update for Red Hat Systems: Potential Man-in-the-Middle Attack

published 3 months ago

Summary

A security update is available for OpenSSL on Red Hat systems. This update fixes a vulnerability that could allow an attacker to intercept sensitive information, such as login credentials or financial data. To protect your system, apply the update as soon as possible.

What to do

Update redhat openssl to version 1:1.1.1g-18.el8_4.3.
Update redhat openssl-debuginfo to version 1:1.1.1g-18.el8_4.3.
Update redhat openssl-devel to version 1:1.1.1g-18.el8_4.3.
Update redhat openssl-libs to version 1:1.1.1g-18.el8_4.3.
Update redhat openssl-libs-debuginfo to version 1:1.1.1g-18.el8_4.3.
Update redhat openssl-perl to version 1:1.1.1g-18.el8_4.3.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_aus:8.4::baseos	redhat	openssl	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_aus:8.4::baseos	redhat	openssl-debuginfo	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_aus:8.4::baseos	redhat	openssl-devel	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_aus:8.4::baseos	redhat	openssl-libs	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_aus:8.4::baseos	redhat	openssl-libs-debuginfo	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_aus:8.4::baseos	redhat	openssl-perl	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_eus_long_life:8.4::baseos	redhat	openssl	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_eus_long_life:8.4::baseos	redhat	openssl-debuginfo	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_eus_long_life:8.4::baseos	redhat	openssl-devel	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_eus_long_life:8.4::baseos	redhat	openssl-libs	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_eus_long_life:8.4::baseos	redhat	openssl-libs-debuginfo	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3
Red Hat:rhel_eus_long_life:8.4::baseos	redhat	openssl-perl	< 1:1.1.1g-18.el8_4.3 Fix: upgrade to 1:1.1.1g-18.el8_4.3

Original advisory text

Red Hat Security Advisory: openssl security update

References

https://access.redhat.com/errata/RHSA-2026:43513 Vendor Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2456314 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_43513.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-28390 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-28390 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-28390 Vendor Advisory
https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8... Third Party Advisory
https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397... Third Party Advisory
https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaf... Third Party Advisory
https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e07... Third Party Advisory
https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee... Third Party Advisory
https://openssl-library.org/news/secadv/20260407.txt Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published23 Jul 2026

Updated29 Jul 2026

First seen29 Jul 2026

Sources

RHSA-2026:43513 · OSV

Track software like this

Free during beta