Red Hat Product Errata RHSA-2026:43513 - Security Advisory Issued: 2026-07-22 Updated: 2026-07-22 RHSA-2026:43513 - Security Advisory Overview Updated Packages Synopsis Moderate: openssl security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for openssl is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing (CVE-2026-28390) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 x86_64 Red Hat Enterprise Linux Server - AUS 8.4 x86_64 Fixes BZ - 2456314 - CVE-2026-28390 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing CVEs CVE-2026-28390 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.4 SRPM openssl-1.1.1g-18.el8_4.3.src.rpm SHA-256: 160841ddaf958ac19eec707208f2e8870dacd7cc656d112381c422a0d7362cff x86_64 openssl-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: a87c1b9ad499877857cab01598c78c2446a1e091d009f580a4fbf4f2d397c11e openssl-debuginfo-1.1.1g-18.el8_4.3.i686.rpm SHA-256: d499f34d51012c3418b43f3f95aa8d9e55074f61d5501f1b1f78bd788d8b78af openssl-debuginfo-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: b2464e3c09b30b3ff1b254f00d55d155aebb1adf21c868c1bda688327e5356d1 openssl-debugsource-1.1.1g-18.el8_4.3.i686.rpm SHA-256: b3a104ea6b8909481554150ef125875387912b6c864710b70de397b7f18e8092 openssl-debugsource-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: f799bc51b2dd4bfde6d7c2bbca7a05cd74a5457d8820ee232f7cba956122e389 openssl-devel-1.1.1g-18.el8_4.3.i686.rpm SHA-256: 59ecb0b8a72a226ed9bed9ba70e97e8a777c9426a5f164fa763a49506f990468 openssl-devel-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: 07b5efd50807c4d11286059aa472b36201fc4367e74531b32320b97ce95e7b8c openssl-libs-1.1.1g-18.el8_4.3.i686.rpm SHA-256: 188b7ecfdbc665315539e5e786832d5bf6b3507cd905d1fb92ecd834849f079a openssl-libs-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: e5d1004a641896001a20ecc10a4d9d6457cd90edc83911714963531832e64a2d openssl-libs-debuginfo-1.1.1g-18.el8_4.3.i686.rpm SHA-256: 8ba4c5ce5943526e56ae283a10a6a73cdcdaeb8914dfe7a8028bba1205cb8bf8 openssl-libs-debuginfo-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: 19d1e70c7ce85f510f1e72f0bdac93801c1b076096a0e0c1942b69dc12eebc9e openssl-perl-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: 014c1fef1f5d13f711775c0d8cda10291bea3b9b7aa1267cb4a0d3eba4d01126 Red Hat Enterprise Linux Server - AUS 8.4 SRPM openssl-1.1.1g-18.el8_4.3.src.rpm SHA-256: 160841ddaf958ac19eec707208f2e8870dacd7cc656d112381c422a0d7362cff x86_64 openssl-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: a87c1b9ad499877857cab01598c78c2446a1e091d009f580a4fbf4f2d397c11e openssl-debuginfo-1.1.1g-18.el8_4.3.i686.rpm SHA-256: d499f34d51012c3418b43f3f95aa8d9e55074f61d5501f1b1f78bd788d8b78af openssl-debuginfo-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: b2464e3c09b30b3ff1b254f00d55d155aebb1adf21c868c1bda688327e5356d1 openssl-debugsource-1.1.1g-18.el8_4.3.i686.rpm SHA-256: b3a104ea6b8909481554150ef125875387912b6c864710b70de397b7f18e8092 openssl-debugsource-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: f799bc51b2dd4bfde6d7c2bbca7a05cd74a5457d8820ee232f7cba956122e389 openssl-devel-1.1.1g-18.el8_4.3.i686.rpm SHA-256: 59ecb0b8a72a226ed9bed9ba70e97e8a777c9426a5f164fa763a49506f990468 openssl-devel-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: 07b5efd50807c4d11286059aa472b36201fc4367e74531b32320b97ce95e7b8c openssl-libs-1.1.1g-18.el8_4.3.i686.rpm SHA-256: 188b7ecfdbc665315539e5e786832d5bf6b3507cd905d1fb92ecd834849f079a openssl-libs-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: e5d1004a641896001a20ecc10a4d9d6457cd90edc83911714963531832e64a2d openssl-libs-debuginfo-1.1.1g-18.el8_4.3.i686.rpm SHA-256: 8ba4c5ce5943526e56ae283a10a6a73cdcdaeb8914dfe7a8028bba1205cb8bf8 openssl-libs-debuginfo-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: 19d1e70c7ce85f510f1e72f0bdac93801c1b076096a0e0c1942b69dc12eebc9e openssl-perl-1.1.1g-18.el8_4.3.x86_64.rpm SHA-256: 014c1fef1f5d13f711775c0d8cda10291bea3b9b7aa1267cb4a0d3eba4d01126 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .