Red Hat Product Errata RHSA-2026:44438 - Security Advisory Issued: 2026-07-23 Updated: 2026-07-23 RHSA-2026:44438 - Security Advisory Overview Updated Packages Synopsis Important: compat-openssl11 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for compat-openssl11 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the libraries from the 1.1.1 version and is provided for compatibility with previous releases. Security Fix(es): openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2481898 - CVE-2026-45447 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() CVEs CVE-2026-45447 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c x86_64 compat-openssl11-1.1.1k-5.el9_8.4.i686.rpm SHA-256: efb9aabb4cb9c9249d1c2c6f356a4d38fb532da6ed20f510517c30e0a3837556 compat-openssl11-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: e52e794e480ce92ffa7c4f677c71efc9a229c4c4aaa139b915f9ee1fbd18f4f6 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.i686.rpm SHA-256: cfec300bb604881d5bc48ce6d3d94a93e58d9e35a10816d277a2c2742cff4a97 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: bb0617de821618bcf7a4711bb23d2cc9b827049951cd8262b6bd441fa15e90d3 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.i686.rpm SHA-256: 0d82015f64891eedb4fc7f5672c5bfbba7c0b88f8112411ef78c3b6c2798f121 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: 8777777d3842f71b12ecffe9e941bde936ee5c09f7e6c11890551993da3128d9 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c x86_64 compat-openssl11-1.1.1k-5.el9_8.4.i686.rpm SHA-256: efb9aabb4cb9c9249d1c2c6f356a4d38fb532da6ed20f510517c30e0a3837556 compat-openssl11-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: e52e794e480ce92ffa7c4f677c71efc9a229c4c4aaa139b915f9ee1fbd18f4f6 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.i686.rpm SHA-256: cfec300bb604881d5bc48ce6d3d94a93e58d9e35a10816d277a2c2742cff4a97 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: bb0617de821618bcf7a4711bb23d2cc9b827049951cd8262b6bd441fa15e90d3 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.i686.rpm SHA-256: 0d82015f64891eedb4fc7f5672c5bfbba7c0b88f8112411ef78c3b6c2798f121 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: 8777777d3842f71b12ecffe9e941bde936ee5c09f7e6c11890551993da3128d9 Red Hat Enterprise Linux for IBM z Systems 9 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c s390x compat-openssl11-1.1.1k-5.el9_8.4.s390x.rpm SHA-256: e0f66a88d4d8e30040a01c22bc6d1539a37c9c9d0204b02172e5ed9dc9b67489 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.s390x.rpm SHA-256: 67c4e2e762989dc8d20cce91dac1fd1837423d29108f01c97b242304674a4ae4 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.s390x.rpm SHA-256: ea2be9fb975c55cbfb31f80c398107c09b3dd6eddf6c02812081531d14737374 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c s390x compat-openssl11-1.1.1k-5.el9_8.4.s390x.rpm SHA-256: e0f66a88d4d8e30040a01c22bc6d1539a37c9c9d0204b02172e5ed9dc9b67489 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.s390x.rpm SHA-256: 67c4e2e762989dc8d20cce91dac1fd1837423d29108f01c97b242304674a4ae4 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.s390x.rpm SHA-256: ea2be9fb975c55cbfb31f80c398107c09b3dd6eddf6c02812081531d14737374 Red Hat Enterprise Linux for Power, little endian 9 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c ppc64le compat-openssl11-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: b5bcdecc5ac2d6d65dfa71ccdc4e2a65b59a8212d5fd10ced6e40a334a3396fd compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: ef367dfba687319a9993520ad72c94118b1862a99c01b5fbd43260f332b362c3 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: c8d2312f4a349bf3ed772274541f9246d1f750f645a25b24bdaff49da930c53d Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c ppc64le compat-openssl11-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: b5bcdecc5ac2d6d65dfa71ccdc4e2a65b59a8212d5fd10ced6e40a334a3396fd compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: ef367dfba687319a9993520ad72c94118b1862a99c01b5fbd43260f332b362c3 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: c8d2312f4a349bf3ed772274541f9246d1f750f645a25b24bdaff49da930c53d Red Hat Enterprise Linux for ARM 64 9 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c aarch64 compat-openssl11-1.1.1k-5.el9_8.4.aarch64.rpm SHA-256: 99329e643cb30e51fdb045b81c5ac128cd8a9ab75a01b7915ca617fc8373ffe0 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.aarch64.rpm SHA-256: c6cd586f3609e94502a84a914dd9f1200d53662bdf3acf803567c4a86810fce0 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.aarch64.rpm SHA-256: f475feadd5fa7c7012c4a9f1099b60a778f4232fddd53b0c6b673d348c92afb9 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c aarch64 compat-openssl11-1.1.1k-5.el9_8.4.aarch64.rpm SHA-256: 99329e643cb30e51fdb045b81c5ac128cd8a9ab75a01b7915ca617fc8373ffe0 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.aarch64.rpm SHA-256: c6cd586f3609e94502a84a914dd9f1200d53662bdf3acf803567c4a86810fce0 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.aarch64.rpm SHA-256: f475feadd5fa7c7012c4a9f1099b60a778f4232fddd53b0c6b673d348c92afb9 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c ppc64le compat-openssl11-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: b5bcdecc5ac2d6d65dfa71ccdc4e2a65b59a8212d5fd10ced6e40a334a3396fd compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: ef367dfba687319a9993520ad72c94118b1862a99c01b5fbd43260f332b362c3 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.ppc64le.rpm SHA-256: c8d2312f4a349bf3ed772274541f9246d1f750f645a25b24bdaff49da930c53d Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c x86_64 compat-openssl11-1.1.1k-5.el9_8.4.i686.rpm SHA-256: efb9aabb4cb9c9249d1c2c6f356a4d38fb532da6ed20f510517c30e0a3837556 compat-openssl11-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: e52e794e480ce92ffa7c4f677c71efc9a229c4c4aaa139b915f9ee1fbd18f4f6 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.i686.rpm SHA-256: cfec300bb604881d5bc48ce6d3d94a93e58d9e35a10816d277a2c2742cff4a97 compat-openssl11-debuginfo-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: bb0617de821618bcf7a4711bb23d2cc9b827049951cd8262b6bd441fa15e90d3 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.i686.rpm SHA-256: 0d82015f64891eedb4fc7f5672c5bfbba7c0b88f8112411ef78c3b6c2798f121 compat-openssl11-debugsource-1.1.1k-5.el9_8.4.x86_64.rpm SHA-256: 8777777d3842f71b12ecffe9e941bde936ee5c09f7e6c11890551993da3128d9 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM compat-openssl11-1.1.1k-5.el9_8.4.src.rpm SHA-256: eb548682d3caf4884fcf8f8f43e6df03af930805c56fbac446542384fde79f5c aarch64 compat-openssl11-1.1.1k-5.el9_8.4.aarch64.rpm SHA-256: 99329e643cb30e51fdb045b81c5ac128cd8a9ab75a01b7915ca617fc8373ffe0 compat-openssl11-debuginfo-1.1.