Red Hat Security Advisory

RHSA-2026:66524

openssl security, bug fix, and enhancement update

Released 2026-09-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) openssl-1.0.1e-61.el6_10.1
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) openssl-static-1.0.1e-61.el6_10.1

Fixes 2 records

TI-2024-05145 CVE-2024-5535 · GHSA-4fc7-mvrr-wv2c

SSL_select_next_proto buffer overread

MEDIUM 54

Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.05582 Published 2024-06-27 Partial fix · 3.3.2, 3.2.3 +4 CWE-125

TI-2026-33226 CVE-2026-45447 · GHSA-f684-cpcq-j565

Heap Use-After-Free in the PKCS7_verify() Function

MEDIUM 47

Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04002 Published 2026-06-09 Partial fix · 4.0.1, 3.6.3 +5 CWE-416