Skip to content
OpenAdvisories
High RHSA-2026:56097 2 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Aug 19, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 7

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 openssl 1:3.5.6-0.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 openssl-config-fips 1:3.5.6-0.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 openssl-devel 1:3.5.6-0.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 openssl-devel-engine 1:3.5.6-0.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 openssl-fips-provider-upstream 1:3.5.6-0.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 openssl-libs 1:3.5.6-0.5.hum1
Red Hat · Hardened Images 1 hummingbird:1 openssl-perl 1:3.5.6-0.5.hum1

Vulnerabilities 2

  • High 7.5
    CVE-2026-14456

    Unbounded Memory Growth in QUIC Server Incoming Channel Queue

    Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can m…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Alpine Wolfi
  • High 7.5
    CVE-2026-54876

    Client-Side Memory Leak in OCSP Response Checking

    Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memo…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Wolfi

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-14456
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-54876
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_56097.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2515348
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-14456
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-14456
  • article
    https://github.com/openssl/openssl/commit/08e7756c3900bcfd77a720e7b74e27d6e4ed01a9
  • article
    https://github.com/openssl/openssl/commit/4084152e040329ca0194c4c1750b9b46d00a5b6b
  • article
    https://github.com/openssl/openssl/commit/f2f1465f2d2e5c61dfeac4d20fd093797d821139
  • article
    https://openssl-library.org/news/secadv/20260813.txt
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2511600
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-54876
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-54876
  • article
    https://github.com/openssl/openssl/commit/155b5fe0f93365e6df1c56ee3606b121080c6c12
  • article
    https://github.com/openssl/openssl/commit/d8c51048ac037a21bae0f41cad7a3920dc7f3638
  • article
    https://openssl-library.org/news/secadv/20260805.txt