Red Hat Product Errata RHSA-2026:27744 - Security Advisory Issued: 2026-06-22 Updated: 2026-06-22 RHSA-2026:27744 - Security Advisory Overview Updated Packages Synopsis Moderate: openssl-fips-provider security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for openssl-fips-provider is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description This package provides a custom build of the OpenSSL FIPS module that has been submitted to NIST for certification. Security Fix(es): openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key (CVE-2026-31790) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2451094 - CVE-2026-31790 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key CVEs CVE-2026-31790 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 x86_64 openssl-fips-provider-3.0.7-11.el9_8.i686.rpm SHA-256: 9e541e3de6b66e95db2c20866bc1d145a99a5908208cca93d8b9d46e89faf863 openssl-fips-provider-3.0.7-11.el9_8.x86_64.rpm SHA-256: c00860e9c5a1d90488aa2eb65fe41f62926b38c6b3669d331a8b97e4a60223ac openssl-fips-provider-so-3.0.7-11.el9_8.i686.rpm SHA-256: 6a0d8c818e69a77819976db7f1559d9990347b4936708564be4a6f5fe506dc48 openssl-fips-provider-so-3.0.7-11.el9_8.x86_64.rpm SHA-256: 60d36ad3a67d6b00e67bb0a19c0902fbb2ecdd873cf7f280a3039d04a092790c openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.i686.rpm SHA-256: 7f4166ab7bfd3b0e5ece404d3cf08c43bcbeee0b7845376e4746e7d9a0603558 openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.x86_64.rpm SHA-256: ada3556bd2916cabe1eb85bf4d82dcce6db28a366287a4218f5c3d1ba1e66ccb openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.i686.rpm SHA-256: c19e6cf5df51eee629547c14cf7c3cc523d6766d4abb2a5f2f61ee80f1d8ee21 openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.x86_64.rpm SHA-256: 993f3b9ac2e7544f3666177993d1bfc74708a3bac9d04214abebfcbe4ebb79c5 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 x86_64 openssl-fips-provider-3.0.7-11.el9_8.i686.rpm SHA-256: 9e541e3de6b66e95db2c20866bc1d145a99a5908208cca93d8b9d46e89faf863 openssl-fips-provider-3.0.7-11.el9_8.x86_64.rpm SHA-256: c00860e9c5a1d90488aa2eb65fe41f62926b38c6b3669d331a8b97e4a60223ac openssl-fips-provider-so-3.0.7-11.el9_8.i686.rpm SHA-256: 6a0d8c818e69a77819976db7f1559d9990347b4936708564be4a6f5fe506dc48 openssl-fips-provider-so-3.0.7-11.el9_8.x86_64.rpm SHA-256: 60d36ad3a67d6b00e67bb0a19c0902fbb2ecdd873cf7f280a3039d04a092790c openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.i686.rpm SHA-256: 7f4166ab7bfd3b0e5ece404d3cf08c43bcbeee0b7845376e4746e7d9a0603558 openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.x86_64.rpm SHA-256: ada3556bd2916cabe1eb85bf4d82dcce6db28a366287a4218f5c3d1ba1e66ccb openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.i686.rpm SHA-256: c19e6cf5df51eee629547c14cf7c3cc523d6766d4abb2a5f2f61ee80f1d8ee21 openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.x86_64.rpm SHA-256: 993f3b9ac2e7544f3666177993d1bfc74708a3bac9d04214abebfcbe4ebb79c5 Red Hat Enterprise Linux for IBM z Systems 9 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 s390x openssl-fips-provider-3.0.7-11.el9_8.s390x.rpm SHA-256: 54be1c06222de4835a90b6c56cdf8310891726a8a362c5d027772d91770df142 openssl-fips-provider-so-3.0.7-11.el9_8.s390x.rpm SHA-256: 3a865d8d32325c3ad20c65b5e821e0847d100780dd7e6447f9c204be5a36ef9f openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.s390x.rpm SHA-256: 960ed42b7f175c74d27e63ab5ade1e6839662fc31cc2a33a70d545d2ce4e839c openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.s390x.rpm SHA-256: 82300d6e29e3321c95b2f38f0e1aee0a59995f3a3f1f4269e3ababf89d69a1e6 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 s390x openssl-fips-provider-3.0.7-11.el9_8.s390x.rpm SHA-256: 54be1c06222de4835a90b6c56cdf8310891726a8a362c5d027772d91770df142 openssl-fips-provider-so-3.0.7-11.el9_8.s390x.rpm SHA-256: 3a865d8d32325c3ad20c65b5e821e0847d100780dd7e6447f9c204be5a36ef9f openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.s390x.rpm SHA-256: 960ed42b7f175c74d27e63ab5ade1e6839662fc31cc2a33a70d545d2ce4e839c openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.s390x.rpm SHA-256: 82300d6e29e3321c95b2f38f0e1aee0a59995f3a3f1f4269e3ababf89d69a1e6 Red Hat Enterprise Linux for Power, little endian 9 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 ppc64le openssl-fips-provider-3.0.7-11.el9_8.ppc64le.rpm SHA-256: edbc6b74ad3ad2b54a2481da28f468b98b021132391e6691218f7cb0733b790a openssl-fips-provider-so-3.0.7-11.el9_8.ppc64le.rpm SHA-256: 2961c20585a313054dcb6aaad5f10bdaa3b675839a530d0a79fbe71c942a3c22 openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.ppc64le.rpm SHA-256: 8cb47a0f9bd1321c6d494bd69197d363c915697208e740769e550563d523ddab openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.ppc64le.rpm SHA-256: b3622e0ef0aa053066d7c8cb45d87bf2c5e7bf5bea1cfcd09e91c0259ce861d9 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 ppc64le openssl-fips-provider-3.0.7-11.el9_8.ppc64le.rpm SHA-256: edbc6b74ad3ad2b54a2481da28f468b98b021132391e6691218f7cb0733b790a openssl-fips-provider-so-3.0.7-11.el9_8.ppc64le.rpm SHA-256: 2961c20585a313054dcb6aaad5f10bdaa3b675839a530d0a79fbe71c942a3c22 openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.ppc64le.rpm SHA-256: 8cb47a0f9bd1321c6d494bd69197d363c915697208e740769e550563d523ddab openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.ppc64le.rpm SHA-256: b3622e0ef0aa053066d7c8cb45d87bf2c5e7bf5bea1cfcd09e91c0259ce861d9 Red Hat Enterprise Linux for ARM 64 9 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 aarch64 openssl-fips-provider-3.0.7-11.el9_8.aarch64.rpm SHA-256: 158193d2f965db318148ec76e9347b530ac1f5379d849012c0a04d3c50cda478 openssl-fips-provider-so-3.0.7-11.el9_8.aarch64.rpm SHA-256: 22374a51f8a529dcfcf3b3ebbb2095103e0e811a28953535e5a62e26d1233301 openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.aarch64.rpm SHA-256: bb957597c077cb8e1b7d9548f6a8fe71db202a9c036633287b6f2bb195f26167 openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.aarch64.rpm SHA-256: 238979be04e097efaa6ce1fced512af6e2e199f91bbf8f13ddbf0e194c27ac62 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 aarch64 openssl-fips-provider-3.0.7-11.el9_8.aarch64.rpm SHA-256: 158193d2f965db318148ec76e9347b530ac1f5379d849012c0a04d3c50cda478 openssl-fips-provider-so-3.0.7-11.el9_8.aarch64.rpm SHA-256: 22374a51f8a529dcfcf3b3ebbb2095103e0e811a28953535e5a62e26d1233301 openssl-fips-provider-so-debuginfo-3.0.7-11.el9_8.aarch64.rpm SHA-256: bb957597c077cb8e1b7d9548f6a8fe71db202a9c036633287b6f2bb195f26167 openssl-fips-provider-so-debugsource-3.0.7-11.el9_8.aarch64.rpm SHA-256: 238979be04e097efaa6ce1fced512af6e2e199f91bbf8f13ddbf0e194c27ac62 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM openssl-fips-provider-3.0.7-11.el9_8.src.rpm SHA-256: 0b14c251cccb4506df185e78ec55cb49e14e7bcd8de19ad3f3246017b2120693 ppc64le openssl-fips-provider-3.0.7-11.el9_8.ppc64le.rpm SHA-256: edbc6b74ad3ad2b54a2481da28f468b98b021132391e6691218f7cb0733b790a openssl-fips-provider-so-3.0.7-11.el9_8.ppc64le.rpm SHA-256: 2961c20585a313054dcb6aaad5f10bdaa3b675839a530d0a79fbe71c942a3c22 openssl-fips-provider-so-deb