Read the docs
TI-2026-58283 Aliases CVE-2026-84782GHSA-6w84-hw79-7wgf

DTLS Retransmits Handshake Messages From a Stale Buffer Offset

Priority MEDIUM 43CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · High
Fix status
Partial Red Hat: 26 fixed, 23 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat.

Summary

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and position tracking as the message that was still being written, without resetting the position back to the start of the message being retransmitted. As a result the retransmission was read starting from wherever the suspended write had left off, producing a mislabelled message whose body was leftover bytes from the other, larger message still in flight - content that was never meant to be sent at that point, and which could run past the end of the allocated buffer. Separately, even when the retransmission is positioned correctly, allowing it to run to completion while another write is suspended overwrites the same shared bookkeeping that the suspended write depends on to resume. When the application later resumes the suspended write (via a subsequent SSL_read(), SSL_write(), SSL_accept(), or SSL_connect() call), it finds that bookkeeping in a state inconsistent with the message and aborts the process in a debugging build. The fix resets the retransmission's read position to the start of the message before resending, and skips retransmission entirely whenever a handshake write is still suspended, deferring to the next call that resumes it instead. FIPS impact: no The affected code is outside the FIPS module boundary.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00831 57th percentileScored 2026-11-07
Fix Partial OpenSSL (OpenSSL): 4.0.3, 3.6.5, 3.5.9 +4Red Hat: 33 advisoriesRed Hat: 26 fixed, 23 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenSSLOpenSSL4.0.0 to before 4.0.3; 3.6.0 to before 3.6.5; 3.5.0 to before 3.5.9; 3.4.0 to before 3.4.8; 3.0.0 to before 3.0.23; 1.1.1 to before 1.1.1zj; 1.0.2 to before 1.0.2zs4.0.3, 3.6.5, 3.5.9, 3.4.8, 3.0.23, 1.1.1zj, 1.0.2zsPatch availableCNA
  • OpenSSL VendorOpenSSL Affected 4.0.0 to before 4.0.3; 3.6.0 to before 3.6.5; 3.5.0 to before 3.5.9; 3.4.0 to before 3.4.8; 3.0.0 to before 3.0.23; 1.1.1 to before 1.1.1zj; 1.0.2 to before 1.0.2zs Fixed in 4.0.3, 3.6.5, 3.5.9, 3.4.8, 3.0.23, 1.1.1zj, 1.0.2zs Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*1.0.2 to before 1.0.2zs; 1.1.1 to before 1.1.1zj; 3.0.0 to before 3.0.23; 3.4.0 to before 3.4.8; 3.5.0 to before 3.5.9; 3.6.0 to before 3.6.5; 4.0.0 to before 4.0.3VulnerableOpenSSL
  • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 1.0.2 to before 1.0.2zs; 1.1.1 to before 1.1.1zj; 3.0.0 to before 3.0.23; 3.4.0 to before 3.4.8; 3.5.0 to before 3.5.9; 3.6.0 to before 3.6.5; 4.0.0 to before 4.0.3 Vulnerable ·OpenSSL

Remediation

  • Fix · CNA OpenSSL (OpenSSL) Fixed in 4.0.3, 3.6.5, 3.5.9, 3.4.8, 3.0.23, 1.1.1zj, 1.0.2zs

Red Hat 33 advisories

  • RHSA-2026:95346 Released 2026-11-06 · Red Hat rating Critical
    OpenShift Container Platform 4.22.22 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202611032353-0, rhcos-ppc64le-4.22.9.8.202611032353-0, rhcos-s390x-4.22.9.8.202611032353-0 +1
  • RHSA-2026:95264 Released 2026-11-04 · Red Hat rating Critical
    Cost Management Metrics Operator Update
    • Cost Management 4 registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator
  • RHSA-2026:92856 Released 2026-10-29 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9, registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9, registry.redhat.io/ansible-automation-platform-26/gateway-rhel9
Show 30 more Red Hat advisories
  • RHSA-2026:92848 Released 2026-10-29 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.7 Container Release Update
    • Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/gateway-rhel9
  • RHSA-2026:92628 Released 2026-10-29 · Red Hat rating Important
    General availability of the satellite/iop-advisor-backend-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-advisor-backend-rhel9
  • RHSA-2026:92620 Released 2026-10-29 · Red Hat rating Important
    satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vulnerability-engine-rhel9
  • RHSA-2026:92619 Released 2026-10-29 · Red Hat rating Important
    satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vulnerability-engine-rhel9
  • RHSA-2026:92595 Released 2026-10-29 · Red Hat rating Important
    General availability of the satellite/iop-advisor-backend-rhel9 container image
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-advisor-backend-rhel9
  • RHSA-2026:92588 Released 2026-10-29 · Red Hat rating Important
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:92583 Released 2026-10-29 · Red Hat rating Critical
    General availability of the satellite/iop-host-inventory-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-host-inventory-rhel9
  • RHSA-2026:92574 Released 2026-10-29 · Red Hat rating Important
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:92566 Released 2026-10-29 · Red Hat rating Critical
    General availability of the satellite/iop-host-inventory-rhel9 container image
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-host-inventory-rhel9
  • RHSA-2026:89738 Released 2026-10-26 · Red Hat rating Important
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) compat-openssl11-1:1.1.1k-5.el9_6.4
  • RHSA-2026:89736 Released 2026-10-26 · Red Hat rating Important
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) compat-openssl11-1:1.1.1k-5.el9_4.4
  • RHSA-2026:89737 Released 2026-10-26 · Red Hat rating Important
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) compat-openssl11-1:1.1.1k-4.el9_2.3
  • RHSA-2026:88198 Released 2026-10-22 · Red Hat rating Important
    Red Hat Developer Hub 1.10.6 release.
    • Red Hat Developer Hub 1.10 registry.redhat.io/rhdh/rhdh-hub-rhel9
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:86891 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 3.5.2 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9 +47
  • RHSA-2026:85968 Released 2026-10-20 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1k-18.el8_6, openssl-devel-1:1.1.1k-18.el8_6, openssl-libs-1:1.1.1k-18.el8_6 +1
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) openssl-1:1.1.1k-18.el8_6, openssl-devel-1:1.1.1k-18.el8_6, openssl-libs-1:1.1.1k-18.el8_6 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) openssl-1:1.1.1k-18.el8_6, openssl-devel-1:1.1.1k-18.el8_6, openssl-libs-1:1.1.1k-18.el8_6 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) openssl-1:1.1.1k-18.el8_6, openssl-devel-1:1.1.1k-18.el8_6, openssl-libs-1:1.1.1k-18.el8_6 +1
  • RHSA-2026:85970 Released 2026-10-20 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) openssl-1:1.1.1g-18.el8_4.4, openssl-devel-1:1.1.1g-18.el8_4.4, openssl-libs-1:1.1.1g-18.el8_4.4 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) openssl-1:1.1.1g-18.el8_4.4, openssl-devel-1:1.1.1g-18.el8_4.4, openssl-libs-1:1.1.1g-18.el8_4.4 +1
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:82939 Released 2026-10-14 · Red Hat rating Important
    Red Hat Update Infrastructure 5.3 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
  • RHSA-2026:80514 Released 2026-10-12 · Red Hat rating Moderate
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream (v. 9) compat-openssl11-1:1.1.1k-5.el9_8.6
  • RHSA-2026:80510 Released 2026-10-12 · Red Hat rating Important
    compat-openssl10 security update
    • Red Hat Enterprise Linux AppStream (v. 8) compat-openssl10-1:1.0.2o-4.el8_10.4
  • RHSA-2026:77396 Released 2026-10-08 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.5.8-2.el9_8, openssl-perl-1:3.5.8-2.el9_8
    • Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.5.8-2.el9_8, openssl-libs-1:3.5.8-2.el9_8
  • RHSA-2026:76918 Released 2026-10-08 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream (v. 10) openssl-devel-1:3.5.8-2.el10_2, openssl-perl-1:3.5.8-2.el10_2
    • Red Hat Enterprise Linux BaseOS (v. 10) openssl-1:3.5.8-2.el10_2, openssl-libs-1:3.5.8-2.el10_2
  • RHSA-2026:74166 Released 2026-09-30 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images openssl3-1:3.5.9-0.1.hum1@src, openssl3-devel-1:3.5.9-0.1.hum1@aarch64, openssl3-devel-1:3.5.9-0.1.hum1@x86_64 +4
  • RHSA-2026:74162 Released 2026-09-30 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images openssl-1:3.5.9-0.1.hum1@aarch64, openssl-1:3.5.9-0.1.hum1@src, openssl-1:3.5.9-0.1.hum1@x86_64 +12
  • RHSA-2026:73496 Released 2026-09-29 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images chunkah-0.7.0-1.1.hum1@aarch64, chunkah-0.7.0-1.1.hum1@src, chunkah-0.7.0-1.1.hum1@x86_64
  • RHSA-2026:67551 Released 2026-09-15 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images bootupd-0.3.2-1.hum1@aarch64, bootupd-0.3.2-1.hum1@x86_64, rust-bootupd-0.3.2-1.hum1@src
  • RHSA-2026:62790 Released 2026-09-02 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images ruby3.4-3.4.10-31.7.hum1@aarch64, ruby3.4-3.4.10-31.7.hum1@src, ruby3.4-3.4.10-31.7.hum1@x86_64 +10
  • RHSA-2026:62562 Released 2026-09-02 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images ruby3.3-3.3.10-23.6.hum1@aarch64, ruby3.3-3.3.10-23.6.hum1@src, ruby3.3-3.3.10-23.6.hum1@x86_64 +46
  • RHSA-2026:55543 Released 2026-08-17 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images python-cryptography-50.0.0-1.hum1@src, python3-cryptography-50.0.0-1.hum1@aarch64, python3-cryptography-50.0.0-1.hum1@x86_64

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    OpenSSL — openssl-library.org/news/secadv/20260929.txt

    14 records Highest priority Priority MEDIUM 3 MEDIUM, 11 LOW

    Other records, highest priority first

    • TI-2026-58285 QUIC: Unbounded RETIRE_CONNECTION_ID BacklogPriority MEDIUM 40
    • TI-2026-39654 QUIC STREAM Fragment Metadata DoSPriority MEDIUM 40
    • TI-2026-58284 Use-After-Free in X.509 Extension Cache Under Concurrent UsePriority LOW 39
    Show all 14 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Ansible Automation Orchestrator 2026AffectedNo fix planned: Will not fix
Confidential Compute AttestationAffectedNo fix yet
Lightspeed CoreAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Ansible Automation Platform Ansible Core 2AffectedNo fix yet
Red Hat Developer Hub 1AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 6AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat Enterprise Linux command line assistantAffectedNo fix yet
Red Hat JBoss Core ServicesAffectedNo fix yet
Red Hat Lightspeed Services for OCPAffectedNo fix yet
Red Hat Offline Knowledge PortalAffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenStack Platform 16.2AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Cost Management 4Fixed RHSA-2026:95264
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:92856
Red Hat Ansible Automation Platform 2.7Fixed RHSA-2026:92848
Red Hat Developer Hub 1.10Fixed RHSA-2026:88198
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:76918
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:80510
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:77396, RHSA-2026:80514
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:89737
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:89736
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:89738
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:76918
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:85968
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:77396
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:85970
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:85968
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:85970
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:85968
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:85968
Red Hat Hardened ImagesFixed RHSA-2026:55543, RHSA-2026:62562, RHSA-2026:62790, RHSA-2026:67551, RHSA-2026:73496, RHSA-2026:74162, RHSA-2026:74166
Red Hat OpenShift AI 2.25Fixed RHSA-2026:87410
Red Hat OpenShift AI 3.4Fixed RHSA-2026:84734
Red Hat OpenShift AI 3.5Fixed RHSA-2026:86891
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:95346
Red Hat Satellite 6.18Fixed RHSA-2026:92583, RHSA-2026:92588, RHSA-2026:92620, RHSA-2026:92628
Red Hat Satellite 6.19Fixed RHSA-2026:92566, RHSA-2026:92574, RHSA-2026:92595, RHSA-2026:92619
Red Hat Update Infrastructure 5Fixed RHSA-2026:82939
Not affected: 35 products
  • Cost Management 4
  • Logging Subsystem for Red Hat OpenShift
  • Migration Toolkit for Applications 8
  • OpenShift Service Mesh 3
  • Pen Drive Powered by Red Hat Lightspeed
  • Red Hat 3scale API Management Platform 2
  • Red Hat Advanced Cluster Security 4
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Ansible Automation Platform 2.7
  • Red Hat Connectivity Link 1
  • Red Hat Developer Hub 1.10
  • Red Hat Directory Server 11
  • Red Hat Directory Server 12
  • Red Hat Directory Server 13
  • Red Hat Discovery 2
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Enterprise Linux AppStream E4S (v.9.4)
  • Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS AUS (v.8.4)
  • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)
  • Red Hat Hardened Images
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.4
  • Red Hat OpenShift AI 3.5
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Update Service
  • Red Hat Quay 3
  • Red Hat Trusted Profile Analyzer

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-84782
  2. 2026-10-03 Alias added: GHSA-6w84-hw79-7wgf
  3. 2026-10-05 Affected versions changed · Red Hat
  4. 2026-10-06 Affected versions changed · Red Hat
  5. 2026-10-07 Affected versions changed · Red Hat
  6. 2026-10-09 Fix available: RHSA-2026:76918 · Red Hat
  7. 2026-10-09 Fix available: RHSA-2026:77396 · Red Hat
  8. 2026-10-09 Fix available: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 10) +1 · Red Hat
  9. 2026-10-10 Affected versions changed · Red Hat
  10. 2026-10-12 Fix available: RHSA-2026:80514 · Red Hat
  11. 2026-10-12 Fix available: RHSA-2026:80510 · Red Hat
  12. 2026-10-12 Fix available: Red Hat Enterprise Linux AppStream (v. 8) · Red Hat
  13. 2026-10-16 Fix available: RHSA-2026:82939 · Red Hat
  14. 2026-10-16 Fix available: Red Hat Update Infrastructure 5 · Red Hat
  15. 2026-10-18 Affected versions changed · Red Hat
  16. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  17. 2026-10-20 Fix available: Red Hat OpenShift AI 3.4 · Red Hat
  18. 2026-10-20 Fix available: RHSA-2026:85970 · Red Hat
  19. 2026-10-20 Fix available: RHSA-2026:85968 · Red Hat
  20. 2026-10-21 Fix available: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS E4S (v.8.8) +3 · Red Hat
  21. 2026-10-22 Fix available: RHSA-2026:86891 · Red Hat
  22. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  23. 2026-10-23 Fix available: RHSA-2026:88198 · Red Hat
  24. 2026-10-23 Fix available: Red Hat Developer Hub 1.10, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.5 · Red Hat
  25. 2026-10-25 EPSS moved to the 50th–90th percentile
  26. 2026-10-26 Fix available: RHSA-2026:89738 · Red Hat
  27. 2026-10-26 Fix available: RHSA-2026:89736 · Red Hat
  28. 2026-10-26 Fix available: RHSA-2026:89737 · Red Hat
  29. 2026-10-26 Fix available: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.6) · Red Hat
  30. 2026-10-27 Affected versions changed · Red Hat
  31. 2026-10-29 Affected versions changed · Red Hat
  32. 2026-10-30 Affected versions changed · Red Hat
  33. 2026-10-30 Affected versions changed · Red Hat
  34. 2026-10-30 Fix available: Red Hat Ansible Automation Platform 2.6, Red Hat Ansible Automation Platform 2.7, Red Hat Satellite 6.18 +1 · Red Hat
  35. 2026-10-31 Fix available: RHSA-2026:92619 · Red Hat
  36. 2026-10-31 Fix available: RHSA-2026:92583 · Red Hat
  37. 2026-10-31 Fix available: RHSA-2026:92574 · Red Hat
  38. 2026-10-31 Fix available: RHSA-2026:92620 · Red Hat
  39. 2026-10-31 Fix available: RHSA-2026:92628 · Red Hat
  40. 2026-10-31 Fix available: RHSA-2026:92848 · Red Hat
  41. 2026-10-31 Fix available: RHSA-2026:92856 · Red Hat
  42. 2026-11-01 Fix available: RHSA-2026:92566 · Red Hat
  43. 2026-11-01 Fix available: RHSA-2026:92588 · Red Hat
  44. 2026-11-01 Fix available: RHSA-2026:92595 · Red Hat
  45. 2026-11-04 Affected versions changed · Red Hat
  46. 2026-11-05 Fix available: Cost Management 4 · Red Hat
  47. 2026-11-06 Fix available: RHSA-2026:95264 · Red Hat
  48. 2026-11-07 Fix available: RHSA-2026:95346 · Red Hat
  49. 2026-11-07 Fix available: Red Hat OpenShift Container Platform 4.22 · Red Hat

References

Patch 4

Advisory 1

  • TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
  • TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
  • TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
  • TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
  • TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
  • TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
See all 312 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences