Red Hat Product Errata RHSA-2026:22312 - Security Advisory Issued: 2026-06-01 Updated: 2026-06-01 RHSA-2026:22312 - Security Advisory Overview Updated Packages Synopsis Moderate: openssl security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for openssl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2456314 - CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing CVEs CVE-2026-28390 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM openssl-3.5.5-3.el9_8.src.rpm SHA-256: 6dcf0fd27d46993ee08de288fd4ef2387c4a5cd28925e78c7449403f6459ddbd x86_64 openssl-3.5.5-3.el9_8.x86_64.rpm SHA-256: 7bfbc78ae617d7d276c4708bbcbce2cd98b88aef0b8155b784f69dcd17d1b0a5 openssl-debuginfo-3.5.5-3.el9_8.i686.rpm SHA-256: 0208043f3af5c6c3483da2e822c7768afb212eb79e71e3a94b986e3ef244003b openssl-debuginfo-3.5.5-3.el9_8.i686.rpm SHA-256: 0208043f3af5c6c3483da2e822c7768afb212eb79e71e3a94b986e3ef244003b openssl-debuginfo-3.5.5-3.el9_8.x86_64.rpm SHA-256: 2025750a9825d9c1e3cd95be3e83c03cc39ea70bafcd329855896febe05048c3 openssl-debuginfo-3.5.5-3.el9_8.x86_64.rpm SHA-256: 2025750a9825d9c1e3cd95be3e83c03cc39ea70bafcd329855896febe05048c3 openssl-debugsource-3.5.5-3.el9_8.i686.rpm SHA-256: a2455d05c156002e85b9ef523d28bf043e20c89861de5378c54c997898c5bf51 openssl-debugsource-3.5.5-3.el9_8.i686.rpm SHA-256: a2455d05c156002e85b9ef523d28bf043e20c89861de5378c54c997898c5bf51 openssl-debugsource-3.5.5-3.el9_8.x86_64.rpm SHA-256: 0efdd9dac746c548745da8b6bb0c2f37e3e7dd718acc230ce0ef7844121b289c openssl-debugsource-3.5.5-3.el9_8.x86_64.rpm SHA-256: 0efdd9dac746c548745da8b6bb0c2f37e3e7dd718acc230ce0ef7844121b289c openssl-devel-3.5.5-3.el9_8.i686.rpm SHA-256: 608ced64e2f0276c6d07d4d8cfe2d3352d33db95653880966208dca81a282234 openssl-devel-3.5.5-3.el9_8.x86_64.rpm SHA-256: ea5fbee07e4425beacc88f17c0056bd796b363fc9849b2ad480d260614c443a2 openssl-libs-3.5.5-3.el9_8.i686.rpm SHA-256: 47e7326087e385f2505b5cacd30d45ae4722b638d62ecbe472a2f4d67a8ac15c openssl-libs-3.5.5-3.el9_8.x86_64.rpm SHA-256: 924b7eac2141b1bdad8abc2a1a4ac58b45c77293b1de27c00fb2433dfffa1289 openssl-libs-debuginfo-3.5.5-3.el9_8.i686.rpm SHA-256: 770e2d7d635955064fd50bd92b5c3eb3223db1893f1ae2288770586d397bea27 openssl-libs-debuginfo-3.5.5-3.el9_8.i686.rpm SHA-256: 770e2d7d635955064fd50bd92b5c3eb3223db1893f1ae2288770586d397bea27 openssl-libs-debuginfo-3.5.5-3.el9_8.x86_64.rpm SHA-256: 27168aadf6756e8090e7d9903d48412ce1958cdaa029f3328ea0c965ba1230ab openssl-libs-debuginfo-3.5.5-3.el9_8.x86_64.rpm SHA-256: 27168aadf6756e8090e7d9903d48412ce1958cdaa029f3328ea0c965ba1230ab openssl-perl-3.5.5-3.el9_8.x86_64.rpm SHA-256: 03870eeb9da977fc66b92d21692dfe021158813ee7c9f02835944162b6b98d5f Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM openssl-3.5.5-3.el9_8.src.rpm SHA-256: 6dcf0fd27d46993ee08de288fd4ef2387c4a5cd28925e78c7449403f6459ddbd x86_64 openssl-3.5.5-3.el9_8.x86_64.rpm SHA-256: 7bfbc78ae617d7d276c4708bbcbce2cd98b88aef0b8155b784f69dcd17d1b0a5 openssl-debuginfo-3.5.5-3.el9_8.i686.rpm SHA-256: 0208043f3af5c6c3483da2e822c7768afb212eb79e71e3a94b986e3ef244003b openssl-debuginfo-3.5.5-3.el9_8.i686.rpm SHA-256: 0208043f3af5c6c3483da2e822c7768afb212eb79e71e3a94b986e3ef244003b openssl-debuginfo-3.5.5-3.el9_8.x86_64.rpm SHA-256: 2025750a9825d9c1e3cd95be3e83c03cc39ea70bafcd329855896febe05048c3 openssl-debuginfo-3.5.5-3.el9_8.x86_64.rpm SHA-256: 2025750a9825d9c1e3cd95be3e83c03cc39ea70bafcd329855896febe05048c3 openssl-debugsource-3.5.5-3.el9_8.i686.rpm SHA-256: a2455d05c156002e85b9ef523d28bf043e20c89861de5378c54c997898c5bf51 openssl-debugsource-3.5.5-3.el9_8.i686.rpm SHA-256: a2455d05c156002e85b9ef523d28bf043e20c89861de5378c54c997898c5bf51 openssl-debugsource-3.5.5-3.el9_8.x86_64.rpm SHA-256: 0efdd9dac746c548745da8b6bb0c2f37e3e7dd718acc230ce0ef7844121b289c openssl-debugsource-3.5.5-3.el9_8.x86_64.rpm SHA-256: 0efdd9dac746c548745da8b6bb0c2f37e3e7dd718acc230ce0ef7844121b289c openssl-devel-3.5.5-3.el9_8.i686.rpm SHA-256: 608ced64e2f0276c6d07d4d8cfe2d3352d33db95653880966208dca81a282234 openssl-devel-3.5.5-3.el9_8.x86_64.rpm SHA-256: ea5fbee07e4425beacc88f17c0056bd796b363fc9849b2ad480d260614c443a2 openssl-libs-3.5.5-3.el9_8.i686.rpm SHA-256: 47e7326087e385f2505b5cacd30d45ae4722b638d62ecbe472a2f4d67a8ac15c openssl-libs-3.5.5-3.el9_8.x86_64.rpm SHA-256: 924b7eac2141b1bdad8abc2a1a4ac58b45c77293b1de27c00fb2433dfffa1289 openssl-libs-debuginfo-3.5.5-3.el9_8.i686.rpm SHA-256: 770e2d7d635955064fd50bd92b5c3eb3223db1893f1ae2288770586d397bea27 openssl-libs-debuginfo-3.5.5-3.el9_8.i686.rpm SHA-256: 770e2d7d635955064fd50bd92b5c3eb3223db1893f1ae2288770586d397bea27 openssl-libs-debuginfo-3.5.5-3.el9_8.x86_64.rpm SHA-256: 27168aadf6756e8090e7d9903d48412ce1958cdaa029f3328ea0c965ba1230ab openssl-libs-debuginfo-3.5.5-3.el9_8.x86_64.rpm SHA-256: 27168aadf6756e8090e7d9903d48412ce1958cdaa029f3328ea0c965ba1230ab openssl-perl-3.5.5-3.el9_8.x86_64.rpm SHA-256: 03870eeb9da977fc66b92d21692dfe021158813ee7c9f02835944162b6b98d5f Red Hat Enterprise Linux for IBM z Systems 9 SRPM openssl-3.5.5-3.el9_8.src.rpm SHA-256: 6dcf0fd27d46993ee08de288fd4ef2387c4a5cd28925e78c7449403f6459ddbd s390x openssl-3.5.5-3.el9_8.s390x.rpm SHA-256: 6eb661b0b1eafe6959c545666a6a91387e9ff777ff0cb534e9f42423f24996bb openssl-debuginfo-3.5.5-3.el9_8.s390x.rpm SHA-256: be361bc9dfaf85cbb5a54ae880ae0cc1cdd6b0e1eb381a334a6afa456c1d6a38 openssl-debuginfo-3.5.5-3.el9_8.s390x.rpm SHA-256: be361bc9dfaf85cbb5a54ae880ae0cc1cdd6b0e1eb381a334a6afa456c1d6a38 openssl-debugsource-3.5.5-3.el9_8.s390x.rpm SHA-256: f68d039f25ad3d086f4b5dff3f94f8d8b90fd3c71b08515ae52c5a69ce3764cd openssl-debugsource-3.5.5-3.el9_8.s390x.rpm SHA-256: f68d039f25ad3d086f4b5dff3f94f8d8b90fd3c71b08515ae52c5a69ce3764cd openssl-devel-3.5.5-3.el9_8.s390x.rpm SHA-256: b2d3a5c8b4f742202e4ee8b81ec6dc0072f2aa12bb9f43377e3d636019cc130a openssl-libs-3.5.5-3.el9_8.s390x.rpm SHA-256: c2586447ff4fcaddfbafdda0ba734aa25b3fd3e32e905d126e1dd806cb504d79 openssl-libs-debuginfo-3.5.5-3.el9_8.s390x.rpm SHA-256: 0da5a3cc02e4e4ba6fd4e49d4b2bd78a620e51461a288367631de26ae0042b46 openssl-libs-debuginfo-3.5.5-3.el9_8.s390x.rpm SHA-256: 0da5a3cc02e4e4ba6fd4e49d4b2bd78a620e51461a288367631de26ae0042b46 openssl-perl-3.5.5-3.el9_8.s390x.rpm SHA-256: b74234a4c98751b4a9a8dbfc6b9e4ff0d0da9cc1f1e01efd466f1eb3e7e2315a Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM openssl-3.5.5-3.el9_8.src.rpm SHA-256: 6dcf0fd27d46993ee08de288fd4ef2387c4a5cd28925e78c7449403f6459ddbd s390x openssl-3.5.5-3.el9_8.s390x.rpm SHA-256: 6eb661b0b1eafe6959c545666a6a91387e9ff777ff0cb534e9f42423f24996bb openssl-debuginfo-3.5.5-3.el9_8.s390x.rpm SHA-256: be361bc9dfaf85cbb5a54ae880ae0cc1cdd6b0e1eb381a334a6afa456c1d6a38 openssl-debuginfo-3.5.5-3.el9_8.s390x.rpm SHA-256: be361bc9dfaf85cbb5a54ae880ae0cc1cdd6b0e1eb381a334a6afa456c1d6a38 openssl-debugsource-3.5.5-3.el9_8.s390x.rpm SHA-256: f68d039f25ad3d086f4b5dff3f94f8d8b90fd3c71b08515ae52c5a69ce3764cd openssl-debugsource-3.5.5-3.el9_8.s390x.rpm SHA-256: f68d039f25ad3d086f4b5dff3f94f8d8b90fd3c71b08515ae52c5a69ce3764cd openssl-devel-3.5.5-3.el9_8.s390x.rpm SHA-256: b2d3a5c8b4f742202e4ee8b81ec6dc0072f2aa12bb9f43377e3d636019cc130a openssl-libs-3.5.5-3.el9_8.s390x.rpm SHA-256: c2586447ff4fcaddfbafdda0ba734aa25b3fd3e32e905d126e1dd806cb504d79 openssl-libs-debuginfo-3.5.5-3.el9_8.s390x.rpm SHA-256: 0da5a3cc02e4e4ba6fd4e49d4b2bd78a620e51461a288367631de26ae0042b46 openssl-libs-debuginfo-3.5.5-3.el9_8.s390x.rpm SHA-256: 0da5a3cc02e4e4ba6fd4e49d4b2bd78a620e51461a288367631de26ae0042b46 openssl-perl-3.5.5-3.el9_8.s390x.rpm SHA-256: b74234a4c98751b4a9a8dbfc6b9e4ff0d0da9cc1f1e01ef