Red Hat Security Advisory

RHSA-2026:56097

Red Hat Hardened Images RPMs Security Update

Released 2026-08-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images openssl-1:3.5.6-0.5.hum1@aarch64, openssl-1:3.5.6-0.5.hum1@src, openssl-1:3.5.6-0.5.hum1@x86_64 +12

Fixes 2 records

TI-2026-12219 CVE-2026-14456 · GHSA-9x89-v382-mjh7

Unbounded Memory Growth in QUIC Server Incoming Channel Queue

MEDIUM 40

Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00729 Published 2026-08-13 Partial fix · 4.0.2, 3.6.4 +1 CWE-770

TI-2026-39657 CVE-2026-54876 · GHSA-5cfw-78wc-wvjq

Client-Side Memory Leak in OCSP Response Checking

LOW 39

Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00497 Published 2026-08-05 Partial fix · 4.0.2, 3.6.4 CWE-401