Linux · Red Hat · Security advisory · January 27, 2026

RHSA-2026:1472: openssl security update

RHSA-2026:1472, released January 27, 2026, fixes 8 CVEs in openssl (version 3.5.1-7.el10_1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0094
61st percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
opensslRHEL 103.5.1-7.el10_1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2025-69421 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...9.8 0.0094 None reported
High CVE-2025-69420 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...9.8 0.0092 None reported
High CVE-2025-15468 openssl-3-livepatches: This update for openssl-3-livepatches fixes the following issues - CVE-2025-11187: Improper validation of PBMAC1 par...9.8 0.0082 None reported
High CVE-2026-22796 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...9.8 0.0059 None reported
High CVE-2025-66199 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...9.8 0.0046 None reported
High CVE-2025-15469 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...9.8 0.0021 None reported
High CVE-2025-68160 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...9.8 0.0019 None reported
High CVE-2026-22795 openssl: OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as...9.8 0.0018 None reported
Showing 1 to 8 of 8 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.