High8.1Red Hat Linux

High [CVE-2026-45447] Heap Use-After-Free in OpenSSL PKCS7_verify()

This high-severity Red Hat Linux advisory covers CVE-2026-45447 affecting OpenSSL, Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux AppStream (v. 8).

CVE-2026-45447 Published Jun 9, 2026

CVE-2026-45447

Affected products & platforms

Red Hat LinuxUnclassified

Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Heap Use-After-Free in OpenSSL PKCS7_verify(). Red Hat rates this important (CVSS 8.1).

Weakness: CWE-825. Affected package(s): insights-proxy/insights-proxy-container-rhel9:1782890503, rhui5/haproxy-rhel9:1781525671, openssl, compat-openssl11, rhui5/installer-rhel9:1781525693, rhui5/cds-rhel9:1781525684.

Resolved in Red Hat advisory RHSA-2026:26275 — update the affected packages (`sudo dnf update`).

Affected products named by the advisory: Red Hat Enterprise Linux AppStream (v. 10); Red Hat Enterprise Linux AppStream (v. 8); Red Hat Enterprise Linux AppStream E4S (v.8.8); Red Hat Enterprise Linux AppStream TUS (v.8.8); and 24 more.

Affected versions

insights-proxy/insights-proxy-container-rhel9:1782890503
rhui5/haproxy-rhel9:1781525671
openssl-1:3.5.5-4.el10_2
compat-openssl11-1:1.1.1k-5.el9_6.3
rhui5/installer-rhel9:1781525693
openssl-1:1.1.1k-16.el8_6
openssl-1:3.5.5-4.el9_8
rhui5/cds-rhel9:1781525684
discovery/discovery-ui-rhel9:1782166952
discovery/discovery-server-rhel9:1782159791
rhui5/rhua-rhel9:1781525739

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions

RHSA-2026:26275

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Update the affected package(s) to the fixed version shipped in RHSA-2026:26275 (`sudo dnf update` / `yum update`).

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.