Skip to content
OpenAdvisories
High RHSA-2026:85968 2 CVEs

Red Hat Security Advisory: openssl security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 28

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl 1:1.1.1k-18.el8_6
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-debuginfo 1:1.1.1k-18.el8_6
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-debugsource 1:1.1.1k-18.el8_6
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-devel 1:1.1.1k-18.el8_6
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-libs 1:1.1.1k-18.el8_6
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-libs-debuginfo 1:1.1.1k-18.el8_6
Red Hat · RHEL 8 enterprise_linux:8::baseos openssl-perl 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::baseos openssl 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::baseos openssl-debuginfo 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::baseos openssl-debugsource 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::baseos openssl-devel 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::baseos openssl-libs 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::baseos openssl-libs-debuginfo 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::baseos openssl-perl 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos openssl 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos openssl-debuginfo 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos openssl-debugsource 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos openssl-devel 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos openssl-libs 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos openssl-libs-debuginfo 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.6 EUS Long Life rhel_eus_long_life:8.6::baseos openssl-perl 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::baseos openssl 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::baseos openssl-debuginfo 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::baseos openssl-debugsource 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::baseos openssl-devel 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::baseos openssl-libs 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::baseos openssl-libs-debuginfo 1:1.1.1k-18.el8_6
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::baseos openssl-perl 1:1.1.1k-18.el8_6

Vulnerabilities 2

  • High 8.2
    CVE-2026-84782

    DTLS Retransmits Handshake Messages From a Stale Buffer Offset

    Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspend…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-63072 Public exploit

    Heap Buffer Overflow in CMS Key Unwrapping

    Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impa…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2517560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2537080
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_85968.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-63072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63072
  • article
    https://openssl-library.org/news/secadv/20260825.txt
  • report
    https://access.redhat.com/security/cve/CVE-2026-84782
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-84782
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-84782
  • article
    https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782