Red Hat Security Advisory

RHSA-2026:62786

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-09-02 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Hardened Images ruby3.4-3.4.10-31.7.hum1@aarch64, ruby3.4-3.4.10-31.7.hum1@src, ruby3.4-3.4.10-31.7.hum1@x86_64 +10

Fixes 1 record

TI-2026-53058 CVE-2026-75803 · GHSA-vr27-9w4v-hjw2

AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()

MEDIUM 47

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00254 Published 2026-08-25 Partial fix · 4.0.2, 3.6.4 +3 CWE-354