Red Hat Security Advisory

RHSA-2026:26275

openssl security update

Released 2026-06-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1k-16.el8_6, openssl-devel-1:1.1.1k-16.el8_6, openssl-libs-1:1.1.1k-16.el8_6 +1
Red Hat Enterprise Linux BaseOS E4S (v.8.8) openssl-1:1.1.1k-16.el8_6, openssl-devel-1:1.1.1k-16.el8_6, openssl-libs-1:1.1.1k-16.el8_6 +1
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) openssl-1:1.1.1k-16.el8_6, openssl-devel-1:1.1.1k-16.el8_6, openssl-libs-1:1.1.1k-16.el8_6 +1
Red Hat Enterprise Linux BaseOS TUS (v.8.8) openssl-1:1.1.1k-16.el8_6, openssl-devel-1:1.1.1k-16.el8_6, openssl-libs-1:1.1.1k-16.el8_6 +1

Fixes 2 records

TI-2024-04414 CVE-2024-4741 · GHSA-6vgq-8qjq-h578

Use After Free with SSL_free_buffers

MEDIUM 54

Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations Impact summary: A use after free can have a range of potential consequences su…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02926 Published 2024-11-13 Partial fix · 3.3.1, 3.2.2 +3 CWE-416

TI-2026-33226 CVE-2026-45447 · GHSA-f684-cpcq-j565

Heap Use-After-Free in the PKCS7_verify() Function

MEDIUM 47

Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04002 Published 2026-06-09 Partial fix · 4.0.1, 3.6.3 +5 CWE-416