Red Hat Product Errata RHSA-2026:27746 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27746 - Security Advisory Overview Updated Packages Synopsis Moderate: openssl-fips-provider security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for openssl-fips-provider is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This package provides a custom build of the OpenSSL FIPS module that has been submitted to NIST for certification. Security Fix(es): openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2451094 - CVE-2026-31790 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key CVEs CVE-2026-31790 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d x86_64 openssl-fips-provider-3.0.7-11.el10_2.x86_64.rpm SHA-256: 93604ae6c7ef3fc6195653722eaea877863f18b98d80412d4aaed1c38178de61 openssl-fips-provider-so-3.0.7-11.el10_2.x86_64.rpm SHA-256: e0f01c61a79c9c128dc2eabcd92b66e36e089885023305370e9188ecf3f591cf openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.x86_64.rpm SHA-256: 50ed789387627409155649127a416231131cb7923defc29e49b498418026ae00 openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.x86_64.rpm SHA-256: b9bcb46dae00432c4ad61bac963ff480438cf776b3eaced9f3aeab2a6532fcb2 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d x86_64 openssl-fips-provider-3.0.7-11.el10_2.x86_64.rpm SHA-256: 93604ae6c7ef3fc6195653722eaea877863f18b98d80412d4aaed1c38178de61 openssl-fips-provider-so-3.0.7-11.el10_2.x86_64.rpm SHA-256: e0f01c61a79c9c128dc2eabcd92b66e36e089885023305370e9188ecf3f591cf openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.x86_64.rpm SHA-256: 50ed789387627409155649127a416231131cb7923defc29e49b498418026ae00 openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.x86_64.rpm SHA-256: b9bcb46dae00432c4ad61bac963ff480438cf776b3eaced9f3aeab2a6532fcb2 Red Hat Enterprise Linux for IBM z Systems 10 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d s390x openssl-fips-provider-3.0.7-11.el10_2.s390x.rpm SHA-256: dea6efd15f61a81c3c29b498169dc14651228e6f8d8bd3b5ba6be98c581310e0 openssl-fips-provider-so-3.0.7-11.el10_2.s390x.rpm SHA-256: 681563095e029a61e1d1b79be1398acbc1a381e0e8b6b27f95f7c4e9e4394cec openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.s390x.rpm SHA-256: 620e5caa00b1c5bfd9911fb9af6d1f5791c52306f41a3cb4fc2632a05e02b4e1 openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.s390x.rpm SHA-256: 4ee8e83d24a78927aa0f7f00138b4b09904d857c38ec557fe0f7ede51f014fef Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d s390x openssl-fips-provider-3.0.7-11.el10_2.s390x.rpm SHA-256: dea6efd15f61a81c3c29b498169dc14651228e6f8d8bd3b5ba6be98c581310e0 openssl-fips-provider-so-3.0.7-11.el10_2.s390x.rpm SHA-256: 681563095e029a61e1d1b79be1398acbc1a381e0e8b6b27f95f7c4e9e4394cec openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.s390x.rpm SHA-256: 620e5caa00b1c5bfd9911fb9af6d1f5791c52306f41a3cb4fc2632a05e02b4e1 openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.s390x.rpm SHA-256: 4ee8e83d24a78927aa0f7f00138b4b09904d857c38ec557fe0f7ede51f014fef Red Hat Enterprise Linux for Power, little endian 10 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d ppc64le openssl-fips-provider-3.0.7-11.el10_2.ppc64le.rpm SHA-256: f458b95b5044c48dcf21303da9eca9cb0d0fb4b4ec48be6fb42d53213dc582f9 openssl-fips-provider-so-3.0.7-11.el10_2.ppc64le.rpm SHA-256: 72464f4a3362eb78de48540746e629927fccf6a7e1a6189d455a510e63df452c openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.ppc64le.rpm SHA-256: 4de6057a60437fdc11abf839fb0418032b17ce27d17280bc4c22b2213c7c5b6c openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.ppc64le.rpm SHA-256: 1e260690f5c5b6fdab48a0a6858ad729cd04254041cc0f9853e763460220a6c8 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d ppc64le openssl-fips-provider-3.0.7-11.el10_2.ppc64le.rpm SHA-256: f458b95b5044c48dcf21303da9eca9cb0d0fb4b4ec48be6fb42d53213dc582f9 openssl-fips-provider-so-3.0.7-11.el10_2.ppc64le.rpm SHA-256: 72464f4a3362eb78de48540746e629927fccf6a7e1a6189d455a510e63df452c openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.ppc64le.rpm SHA-256: 4de6057a60437fdc11abf839fb0418032b17ce27d17280bc4c22b2213c7c5b6c openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.ppc64le.rpm SHA-256: 1e260690f5c5b6fdab48a0a6858ad729cd04254041cc0f9853e763460220a6c8 Red Hat Enterprise Linux for ARM 64 10 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d aarch64 openssl-fips-provider-3.0.7-11.el10_2.aarch64.rpm SHA-256: 27bd03bc08be35a58e2c49c0c75f9c4c3164fed82be896a1fe720464f0fbe38b openssl-fips-provider-so-3.0.7-11.el10_2.aarch64.rpm SHA-256: 02c1899fe73a69f57711a6f73a65640ca7253ed97e60aeae7c2ce40950c72919 openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.aarch64.rpm SHA-256: 70866eb889ac523a8a9a3a91376a6499ba0fff91d35b1beb50ca841784786f23 openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.aarch64.rpm SHA-256: 17e7d6bf17e97fee6c43d60fe1e7051aff598b2e2e232e6a1eed7e4cae53a267 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d aarch64 openssl-fips-provider-3.0.7-11.el10_2.aarch64.rpm SHA-256: 27bd03bc08be35a58e2c49c0c75f9c4c3164fed82be896a1fe720464f0fbe38b openssl-fips-provider-so-3.0.7-11.el10_2.aarch64.rpm SHA-256: 02c1899fe73a69f57711a6f73a65640ca7253ed97e60aeae7c2ce40950c72919 openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.aarch64.rpm SHA-256: 70866eb889ac523a8a9a3a91376a6499ba0fff91d35b1beb50ca841784786f23 openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.aarch64.rpm SHA-256: 17e7d6bf17e97fee6c43d60fe1e7051aff598b2e2e232e6a1eed7e4cae53a267 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d aarch64 openssl-fips-provider-3.0.7-11.el10_2.aarch64.rpm SHA-256: 27bd03bc08be35a58e2c49c0c75f9c4c3164fed82be896a1fe720464f0fbe38b openssl-fips-provider-so-3.0.7-11.el10_2.aarch64.rpm SHA-256: 02c1899fe73a69f57711a6f73a65640ca7253ed97e60aeae7c2ce40950c72919 openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.aarch64.rpm SHA-256: 70866eb889ac523a8a9a3a91376a6499ba0fff91d35b1beb50ca841784786f23 openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.aarch64.rpm SHA-256: 17e7d6bf17e97fee6c43d60fe1e7051aff598b2e2e232e6a1eed7e4cae53a267 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM openssl-fips-provider-3.0.7-11.el10_2.src.rpm SHA-256: af457a8a630521c068a56bbc6b1147b6af37a226d4710b4e4d01377f46c4836d s390x openssl-fips-provider-3.0.7-11.el10_2.s390x.rpm SHA-256: dea6efd15f61a81c3c29b498169dc14651228e6f8d8bd3b5ba6be98c581310e0 openssl-fips-provider-so-3.0.7-11.el10_2.s390x.rpm SHA-256: 681563095e029a61e1d1b79be1398acbc1a381e0e8b6b27f95f7c4e9e4394cec openssl-fips-provider-so-debuginfo-3.0.7-11.el10_2.s390x.rpm SHA-256: 620e5caa00b1c5bfd9911fb9af6d1f5791c52306f41a3cb4fc2632a05e02b4e1 openssl-fips-provider-so-debugsource-3.0.7-11.el10_2.s390x.rpm SHA-256: 4ee8e83d24a78927aa0f7f00138b4b09904d857c38ec557fe0f7ede51f014fef Red Hat Enterprise Linux for Power,