Red Hat Product Errata RHSA-2026:38804 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:38804 - Security Advisory Overview Updated Packages Synopsis Moderate: openssl security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for openssl is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2456314 - CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing CVEs CVE-2026-28390 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.6 SRPM openssl-1.1.1k-17.el8_6.src.rpm SHA-256: a7c7c944978492dd300bf769d4d46499f0fe56eb3388c13b2b6e63615d406bca x86_64 openssl-1.1.1k-17.el8_6.x86_64.rpm SHA-256: d2e8518509c5900095c9811c7663a614b9ef44648e24e61dde954ca07328ad27 openssl-debuginfo-1.1.1k-17.el8_6.i686.rpm SHA-256: b94bab8887d7d59cf66e4e3e1d2d2c24336e7d965424af135ce199332619bd0e openssl-debuginfo-1.1.1k-17.el8_6.x86_64.rpm SHA-256: b8f798abe8c57b600f92a4142d16743944e165772279848d1bf49804d178d1fb openssl-debugsource-1.1.1k-17.el8_6.i686.rpm SHA-256: e7fcb4b56598a7ddc7857edc758a761ec4a015f8f1c7e8b34db61b74278df9c8 openssl-debugsource-1.1.1k-17.el8_6.x86_64.rpm SHA-256: 4513d97caba02aab0e932c19e1cb6a7306b23cb7c747dd9f121b2f4a105ca49f openssl-devel-1.1.1k-17.el8_6.i686.rpm SHA-256: 4ce42009c3337548ce936adffced6df662618d1346f71da96e9c4c8504c20f51 openssl-devel-1.1.1k-17.el8_6.x86_64.rpm SHA-256: a00348f97f6cf63944fe4f0ac1c2e4cadfebd9cb14fe3cec97ae52940f96c4b2 openssl-libs-1.1.1k-17.el8_6.i686.rpm SHA-256: 60a33808ac5205950d8e631678267ebb56c10eebfa9c00c13a48a63f1fac0f76 openssl-libs-1.1.1k-17.el8_6.x86_64.rpm SHA-256: 18b2b75589a5976e8bf7bd4e72933b69221e6ae75c6531ce97621c0bf204f79d openssl-libs-debuginfo-1.1.1k-17.el8_6.i686.rpm SHA-256: 042870f96675c10cf757aa454a75b482fd2e2c128a9c4361793c1a245074ff75 openssl-libs-debuginfo-1.1.1k-17.el8_6.x86_64.rpm SHA-256: 81d4d6ef179322053a903d23de6560333d3f63edd0c30c9860f9c322fbb9450b openssl-perl-1.1.1k-17.el8_6.x86_64.rpm SHA-256: 69d62e3ec4b63b62d2342dab231100a3e2485c5b8d96930f0090ca385249d316 Red Hat Enterprise Linux Server - AUS 8.6 SRPM openssl-1.1.1k-17.el8_6.src.rpm SHA-256: a7c7c944978492dd300bf769d4d46499f0fe56eb3388c13b2b6e63615d406bca x86_64 openssl-1.1.1k-17.el8_6.x86_64.rpm SHA-256: d2e8518509c5900095c9811c7663a614b9ef44648e24e61dde954ca07328ad27 openssl-debuginfo-1.1.1k-17.el8_6.i686.rpm SHA-256: b94bab8887d7d59cf66e4e3e1d2d2c24336e7d965424af135ce199332619bd0e openssl-debuginfo-1.1.1k-17.el8_6.x86_64.rpm SHA-256: b8f798abe8c57b600f92a4142d16743944e165772279848d1bf49804d178d1fb openssl-debugsource-1.1.1k-17.el8_6.i686.rpm SHA-256: e7fcb4b56598a7ddc7857edc758a761ec4a015f8f1c7e8b34db61b74278df9c8 openssl-debugsource-1.1.1k-17.el8_6.x86_64.rpm SHA-256: 4513d97caba02aab0e932c19e1cb6a7306b23cb7c747dd9f121b2f4a105ca49f openssl-devel-1.1.1k-17.el8_6.i686.rpm SHA-256: 4ce42009c3337548ce936adffced6df662618d1346f71da96e9c4c8504c20f51 openssl-devel-1.1.1k-17.el8_6.x86_64.rpm SHA-256: a00348f97f6cf63944fe4f0ac1c2e4cadfebd9cb14fe3cec97ae52940f96c4b2 openssl-libs-1.1.1k-17.el8_6.i686.rpm SHA-256: 60a33808ac5205950d8e631678267ebb56c10eebfa9c00c13a48a63f1fac0f76 openssl-libs-1.1.1k-17.el8_6.x86_64.rpm SHA-256: 18b2b75589a5976e8bf7bd4e72933b69221e6ae75c6531ce97621c0bf204f79d openssl-libs-debuginfo-1.1.1k-17.el8_6.i686.rpm SHA-256: 042870f96675c10cf757aa454a75b482fd2e2c128a9c4361793c1a245074ff75 openssl-libs-debuginfo-1.1.1k-17.el8_6.x86_64.rpm SHA-256: 81d4d6ef179322053a903d23de6560333d3f63edd0c30c9860f9c322fbb9450b openssl-perl-1.1.1k-17.el8_6.x86_64.rpm SHA-256: 69d62e3ec4b63b62d2342dab231100a3e2485c5b8d96930f0090ca385249d316 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .