Skip to content
OpenAdvisories
High RHSA-2026:96216 3 CVEs

Red Hat Security Advisory: openssl security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream openssl-debuginfo 1:3.0.7-29.el9_4.4
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream openssl-debugsource 1:3.0.7-29.el9_4.4
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::appstream openssl-libs-debuginfo 1:3.0.7-29.el9_4.4
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos openssl 1:3.0.7-29.el9_4.4
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos openssl-debuginfo 1:3.0.7-29.el9_4.4
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos openssl-debugsource 1:3.0.7-29.el9_4.4
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos openssl-libs 1:3.0.7-29.el9_4.4
Red Hat · RHEL 9.4 E4S rhel_e4s:9.4::baseos openssl-libs-debuginfo 1:3.0.7-29.el9_4.4

Vulnerabilities 3

  • High 8.2
    CVE-2026-84782

    DTLS Retransmits Handshake Messages From a Stale Buffer Offset

    Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspend…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-63072 Public exploit

    Heap Buffer Overflow in CMS Key Unwrapping

    Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impa…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-63076

    Invalid Pointer Dereference in CMP Server via Crafted protectionAlg

    Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which i…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2517560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2517561
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2537080
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_96216.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-63072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63072
  • article
    https://openssl-library.org/news/secadv/20260825.txt
  • report
    https://access.redhat.com/security/cve/CVE-2026-63076
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-63076
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-63076
  • report
    https://access.redhat.com/security/cve/CVE-2026-84782
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-84782
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-84782
  • article
    https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782