Priority MEDIUM 52
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.
RHSA-2026:0794
openssl and openssl-fips-provider security update
Released 2026-01-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.2) openssl-devel-1:3.0.7-18.el9_2.2, openssl-perl-1:3.0.7-18.el9_2.2
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) openssl-1:3.0.7-18.el9_2.2, openssl-fips-provider-3.0.7-1.el9_2.1, openssl-fips-provider-so-3.0.7-1.el9_2.1 +1