Red Hat Security AdvisoryRHSA-2026:22314
openssl security update
Released 2026-06-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) openssl-devel-1:3.5.5-3.el10_2, openssl-perl-1:3.5.5-3.el10_2
- Red Hat Enterprise Linux BaseOS (v. 10) openssl-1:3.5.5-3.el10_2, openssl-libs-1:3.5.5-3.el10_2
Fixes 1 record
Priority MEDIUM 40
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00836 · Published 2026-04-07 · Partial fix · 3.6.2, 3.5.6 +5 CWE-476
