Red Hat Security AdvisoryRHSA-2026:19218
openssl security update
Released 2026-05-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.5.5-2.el9_8, openssl-perl-1:3.5.5-2.el9_8
- Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.5.5-2.el9_8, openssl-libs-1:3.5.5-2.el9_8
Fixes 1 record
Priority MEDIUM 41
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01049 · Published 2026-04-07 · Partial fix · 3.6.2, 3.5.6 +3 CWE-754
