Critical OpenSSL Vulnerability in Red Hat Packages: Security Advisory RHSA-2026:84573
Summary
RHSA-2026:84573: Red Hat Security Advisory: openssl security update. Affects openssl-debuginfo versions < 1:3.0.7-29.el9_4.3. Fixed in 1:3.0.7-29.el9_4.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenSSL is a widely used library that provides cryptographic functions and protocols for secure communication over networks. It is integral to many applications and services, ensuring data integrity and confidentiality. The recent vulnerabilities identified in OpenSSL could potentially expose systems to severe security risks, affecting the reliability of secure communications.
Vulnerability Detail
The vulnerabilities associated with OpenSSL, as detailed in the Red Hat Security Advisory RHSA-2026:84573, include multiple CVEs such as CVE-2025-69418 and CVE-2026-45447. These vulnerabilities may allow attackers to exploit weaknesses in the cryptographic implementations, leading to unauthorized access, data breaches, or service disruptions. The CVSS score of 9.1 indicates a critical level of severity, emphasizing the urgency of addressing these issues.
How To Fix
Minimum fixed version
1:3.0.7-29.el9_4.3
This is the first release that contains the fix.
sudo dnf update openssl-debuginfoTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing network-level security measures such as firewalls and intrusion detection systems to mitigate the risk of exploitation until the packages can be updated.
Conclusion
The OpenSSL vulnerabilities outlined in the Red Hat Security Advisory RHSA-2026:84573 pose significant risks to system security. It is crucial to update the affected packages to the patched version promptly and consider implementing additional security measures in the interim.
See every vulnerability recorded for openssl-debuginfo →
FAQ
The CVSS score of this vulnerability is 9.1, indicating a critical level of severity.
The affected packages include openssl, openssl-debuginfo, openssl-debugsource, openssl-libs, and their respective debuginfo packages.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
Failure to address this vulnerability could lead to unauthorized access, data breaches, and compromised secure communications.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
Related vulnerabilities
Recent vulnerabilities recorded for openssl-debuginfo.
