Skip to content
OpenAdvisories
High RHSA-2026:77396 1 CVE

Red Hat Security Advisory: openssl security update

Published Oct 10, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-debuginfo 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-debugsource 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-devel 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-libs-debuginfo 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::appstream openssl-perl 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl-debuginfo 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl-debugsource 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl-libs 1:3.5.8-2.el9_8
Red Hat · RHEL 9 enterprise_linux:9::baseos openssl-libs-debuginfo 1:3.5.8-2.el9_8

Vulnerabilities 1

  • High 8.2
    CVE-2026-84782

    DTLS Retransmits Handshake Messages From a Stale Buffer Offset

    Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspend…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2537080
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_77396.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-84782
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-84782
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-84782
  • article
    https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782