Priority MEDIUM 52
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.
RHSA-2026:0714
openssl security update
Released 2026-01-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) openssl-1:1.1.1k-14.el8_6.1, openssl-devel-1:1.1.1k-14.el8_6.1, openssl-libs-1:1.1.1k-14.el8_6.1 +1
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) openssl-1:1.1.1k-14.el8_6.1, openssl-devel-1:1.1.1k-14.el8_6.1, openssl-libs-1:1.1.1k-14.el8_6.1 +1
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) openssl-1:1.1.1k-14.el8_6.1, openssl-devel-1:1.1.1k-14.el8_6.1, openssl-libs-1:1.1.1k-14.el8_6.1 +1