Linux · Security advisory · January 27, 2026

RHSA-2026:1472: openssl security update

RHSA-2026:1472, released January 27, 2026, fixes 8 CVEs in openssl (version 3.5.1-7.el10_1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0094
61st percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
opensslRHEL 103.5.1-7.el10_1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2025-69421 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as... 9.8 0.0094 None reported
High CVE-2025-69420 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as... 9.8 0.0092 None reported
High CVE-2025-15468 openssl-3-livepatches: This update for openssl-3-livepatches fixes the following issues - CVE-2025-11187: Improper validation of PBMAC1 par... 9.8 0.0082 None reported
High CVE-2026-22796 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as... 9.8 0.0059 None reported
High CVE-2025-66199 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as... 9.8 0.0046 None reported
High CVE-2025-15469 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as... 9.8 0.0021 None reported
High CVE-2025-68160 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as... 9.8 0.0019 None reported
High CVE-2026-22795 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as... 9.8 0.0018 None reported
Showing 1 to 8 of 8 1