Skip to content
OpenAdvisories
Medium RLSA-2026:98484 12 CVEs

Moderate: openssl security, bug fix, and enhancement update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Rocky Linux

Summary

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.

Security Fix(es):

* openssl: openssl: Denial of Service via excessive memory allocation in CRL distribution point processing (CVE-2026-35189)

* openssl: openssl: Denial of Service via excessive QUIC packet buffer retention (CVE-2026-54873)

* openssl: openssl: Denial of Service via crafted CMP certificate revocation response (CVE-2026-75805)

* openssl: openssl: Denial of Service via inefficient QUIC stream reassembly (CVE-2026-42772)

* openssl: OpenSSL: Private key recovery via timing side-channel in generic elliptic curve operations (CVE-2026-54872)

* openssl: OpenSSL: Denial of Service via unenforced QUIC connection flow control (CVE-2026-75804)

* openssl: openssl: information disclosure via non-constant-time SM2 scalar multiplication on ARM64 and RISC-V (CVE-2026-54875)

* openssl: openssl: Traffic amplification Denial of Service via QUIC packet over-accounting (CVE-2026-35191)

* openssl: OpenSSL: Private key recovery via SM2 timing side-channel (CVE-2026-77696)

* openssl: openssl: Denial of Service via out-of-bounds write during TLS context switch (CVE-2026-72897)

* openssl: OpenSSL: Denial of Service via undersized DTLS record (CVE-2026-75806)

* openssl: OpenSSL: Denial of Service via unbounded QUIC connection identifier backlog (CVE-2026-84784)

Bug Fix(es) and Enhancement(s):

* [Rocky Linux 9.9] OpenSSL silently uses default provider when `fips.so` is missing on systems in FIPS mode (JIRA:Rocky Linux-239862)

* OpenSSL fails to initialize when automatic initialization happens in threads [Rocky Linux 9] (JIRA:Rocky Linux-256385)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 33

ReleasePackageFixed in
Rocky Linux · 9 openssl 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debugsource 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debugsource 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debugsource 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debugsource 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-debugsource 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-devel 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-devel 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-devel 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-devel 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-devel 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-libs-debuginfo 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-perl 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-perl 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-perl 1:3.5.9-1.el9_9
Rocky Linux · 9 openssl-perl 1:3.5.9-1.el9_9

Vulnerabilities 12

  • High 7.5
    CVE-2026-54873

    QUIC STREAM Fragment Metadata DoS

    Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for pac…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Wolfi
  • High 7.5
    CVE-2026-72897

    Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake

    Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-84784

    QUIC: Unbounded RETIRE_CONNECTION_ID Backlog

    Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2026-35189

    Excessive Memory Allocation in Relative CRLDP Processing

    Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memo…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2026-42772

    Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC

    Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream d…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2026-75804

    QUIC Connection-Level Flow Control is Not Enforced for Streams

    Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connectio…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2026-75805

    NULL Pointer Dereference in CMP Client Revocation Response Handling

    Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a rea…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2026-75806

    Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS

    Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacke…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 3.7
    CVE-2026-35191

    QUIC Unvalidated Amplification Credit may be Over Accounted

    Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplificatio…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Wolfi
  • Low 3.7
    CVE-2026-54872

    Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves

    Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to me…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 3.7
    CVE-2026-54875

    Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V

    Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • Low 3.7
    CVE-2026-77696

    Timing Side-Channel in SM2 Signature Generation

    Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over man…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543242
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543244
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543247
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543249
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543250
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543254
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543256
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543257
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543258
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543259
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543260
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2543261
  • advisory
    https://access.redhat.com/errata/RHSA-2026:98484