cve-2026-2673
MEDIUM CVSS 6.5 csaf_redhat
Description
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
Timeline
- Published
- 2026-03-13 13:23 UTC
- Last Modified
- 2026-07-22
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
References
No references available.
Linked Vulnerabilities
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright © Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2673.json"
}
],
"title": "openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group",
"tracking": {
"current_release_date": "2026-07-22T15:03:03+00:00",
"generator": {
"date": "2026-07-22T15:03:03+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "CVE-2026-2673",
"initial_release_date": "2026-03-13T13:23:00.376000+00:00",
"revision_history": [
{
"date": "2026-03-13T13:23:00.376000+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-14T11:01:03+00:00",
"number": "2",
"summary": "Current version"
},
{
"date": "2026-07-22T15:03:03+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 10",
"product": {
"name": "Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 10"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 6",
"product": {
"name": "Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 6"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 7",
"product": {
"name": "Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 7"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 8",
"product": {
"name": "Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 8"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux 9",
"product": {
"name": "Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux 9"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Server 5",
"product": {
"name": "Red Hat JBoss Web Server 5",
"product_id": "red_hat_jboss_web_server_5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Server 5"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Web Server 6.2.4",
"product": {
"name": "Red Hat JBoss Web Server 6.2.4",
"product_id": "Red Hat JBoss Web Server 6.2.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:6.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat JBoss Web Server 7.0.0",
"product": {
"name": "Red Hat JBoss Web Server 7.0.0",
"product_id": "Red Hat JBoss Web Server 7.0.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_enterprise_web_server:7.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Web Server"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat JBoss Core Services 2.4.62.SP4",
"product": {
"name": "Red Hat JBoss Core Services 2.4.62.SP4",
"product_id": "Red Hat JBoss Core Services 2.4.62.SP4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:jboss_core_services:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat JBoss Core Services"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"category": "product_version",
"name": "openssl-perl",
"product": {
"name": "openssl-perl",
"product_id": "openssl-perl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl"
}
}
},
{
"category": "product_version",
"name": "openssl",
"product": {
"name": "openssl",
"product_id": "openssl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl"
}
}
},
{
"category": "product_version",
"name": "openssl-devel",
"product": {
"name": "openssl-devel",
"product_id": "openssl-devel",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel"
}
}
},
{
"category": "product_version",
"name": "openssl-libs",
"product": {
"name": "openssl-libs",
"product_id": "openssl-libs",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs"
}
}
},
{
"category": "product_version",
"name": "openssl.src",
"product": {
"name": "openssl.src",
"product_id": "openssl.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl?arch=src"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider-so",
"product": {
"name": "openssl-fips-provider-so",
"product_id": "openssl-fips-provider-so",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider-so"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider.src",
"product": {
"name": "openssl-fips-provider.src",
"product_id": "openssl-fips-provider.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider?arch=src"
}
}
},
{
"category": "product_version",
"name": "openssl-fips-provider",
"product": {
"name": "openssl-fips-provider",
"product_id": "openssl-fips-provider",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-fips-provider"
}
}
},
{
"category": "product_version",
"name": "openssl-static",
"product": {
"name": "openssl-static",
"product_id": "openssl-static",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-static"
}
}
},
{
"category": "product_version",
"name": "openssl098e.src",
"product": {
"name": "openssl098e.src",
"product_id": "openssl098e.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl098e?arch=src"
}
}
},
{
"category": "product_version",
"name": "openssl098e",
"product": {
"name": "openssl098e",
"product_id": "openssl098e",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl098e"
}
}
},
{
"category": "product_version",
"name": "compat-openssl10.src",
"product": {
"name": "compat-openssl10.src",
"product_id": "compat-openssl10.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10?arch=src"
}
}
},
{
"category": "product_version",
"name": "compat-openssl10",
"product": {
"name": "compat-openssl10",
"product_id": "compat-openssl10",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl10"
}
}
},
{
"category": "product_version",
"name": "mingw64-openssl",
"product": {
"name": "mingw64-openssl",
"product_id": "mingw64-openssl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw64-openssl"
}
}
},
{
"category": "product_version",
"name": "mingw32-openssl",
"product": {
"name": "mingw32-openssl",
"product_id": "mingw32-openssl",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/mingw32-openssl"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11.src",
"product": {
"name": "compat-openssl11.src",
"product_id": "compat-openssl11.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11?arch=src"
}
}
},
{
"category": "product_version",
"name": "compat-openssl11",
"product": {
"name": "compat-openssl11",
"product_id": "compat-openssl11",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/compat-openssl11"
}
}
},
{
"category": "product_version",
"name": "jbcs-httpd24-openssl.src",
"product": {
"name": "jbcs-httpd24-openssl.src",
"product_id": "jbcs-httpd24-openssl.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/jbcs-httpd24-openssl?arch=src"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-main@aarch64",
"product": {
"name": "openssl-main@aarch64",
"product_id": "openssl-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.5.6-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-main@src",
"product": {
"name": "openssl-main@src",
"product_id": "openssl-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.5.6-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-main@x86_64",
"product": {
"name": "openssl-main@x86_64",
"product_id": "openssl-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.5.6-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:openssl-main@aarch64"
},
"product_reference": "openssl-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:openssl-main@src"
},
"product_reference": "openssl-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:openssl-main@x86_64"
},
"product_reference": "openssl-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:openssl"
},
"product_reference": "openssl",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:openssl-devel"
},
"product_reference": "openssl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:openssl-fips-provider"
},
"product_reference": "openssl-fips-provider",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-so as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:openssl-fips-provider-so"
},
"product_reference": "openssl-fips-provider-so",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:openssl-fips-provider.src"
},
"product_reference": "openssl-fips-provider.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:openssl-libs"
},
"product_reference": "openssl-libs",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:openssl-perl"
},
"product_reference": "openssl-perl",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl.src as a component of Red Hat Enterprise Linux 10",
"product_id": "red_hat_enterprise_linux_10:openssl.src"
},
"product_reference": "openssl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_10"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:openssl"
},
"product_reference": "openssl",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:openssl-devel"
},
"product_reference": "openssl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:openssl-perl"
},
"product_reference": "openssl-perl",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:openssl-static"
},
"product_reference": "openssl-static",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl.src as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:openssl.src"
},
"product_reference": "openssl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl098e as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:openssl098e"
},
"product_reference": "openssl098e",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl098e.src as a component of Red Hat Enterprise Linux 6",
"product_id": "red_hat_enterprise_linux_6:openssl098e.src"
},
"product_reference": "openssl098e.src",
"relates_to_product_reference": "red_hat_enterprise_linux_6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:openssl"
},
"product_reference": "openssl",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:openssl-devel"
},
"product_reference": "openssl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:openssl-libs"
},
"product_reference": "openssl-libs",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:openssl-perl"
},
"product_reference": "openssl-perl",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:openssl-static"
},
"product_reference": "openssl-static",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl.src as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:openssl.src"
},
"product_reference": "openssl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl098e as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:openssl098e"
},
"product_reference": "openssl098e",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl098e.src as a component of Red Hat Enterprise Linux 7",
"product_id": "red_hat_enterprise_linux_7:openssl098e.src"
},
"product_reference": "openssl098e.src",
"relates_to_product_reference": "red_hat_enterprise_linux_7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10 as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:compat-openssl10"
},
"product_reference": "compat-openssl10",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl10.src as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:compat-openssl10.src"
},
"product_reference": "compat-openssl10.src",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw32-openssl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:mingw32-openssl"
},
"product_reference": "mingw32-openssl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mingw64-openssl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:mingw64-openssl"
},
"product_reference": "mingw64-openssl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:openssl"
},
"product_reference": "openssl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:openssl-devel"
},
"product_reference": "openssl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:openssl-libs"
},
"product_reference": "openssl-libs",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:openssl-perl"
},
"product_reference": "openssl-perl",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-static as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:openssl-static"
},
"product_reference": "openssl-static",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl.src as a component of Red Hat Enterprise Linux 8",
"product_id": "red_hat_enterprise_linux_8:openssl.src"
},
"product_reference": "openssl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11 as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:compat-openssl11"
},
"product_reference": "compat-openssl11",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "compat-openssl11.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:compat-openssl11.src"
},
"product_reference": "compat-openssl11.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:openssl"
},
"product_reference": "openssl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:openssl-devel"
},
"product_reference": "openssl-devel",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:openssl-fips-provider"
},
"product_reference": "openssl-fips-provider",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider-so as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:openssl-fips-provider-so"
},
"product_reference": "openssl-fips-provider-so",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-fips-provider.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:openssl-fips-provider.src"
},
"product_reference": "openssl-fips-provider.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:openssl-libs"
},
"product_reference": "openssl-libs",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:openssl-perl"
},
"product_reference": "openssl-perl",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl.src as a component of Red Hat Enterprise Linux 9",
"product_id": "red_hat_enterprise_linux_9:openssl.src"
},
"product_reference": "openssl.src",
"relates_to_product_reference": "red_hat_enterprise_linux_9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "jbcs-httpd24-openssl.src as a component of Red Hat JBoss Web Server 5",
"product_id": "red_hat_jboss_web_server_5:jbcs-httpd24-openssl.src"
},
"product_reference": "jbcs-httpd24-openssl.src",
"relates_to_product_reference": "red_hat_jboss_web_server_5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-2673",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-03-13T14:01:14.098405+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"red_hat_enterprise_linux_10:openssl-fips-provider",
"red_hat_enterprise_linux_10:openssl-fips-provider-so",
"red_hat_enterprise_linux_10:openssl-fips-provider.src",
"red_hat_enterprise_linux_6:openssl",
"red_hat_enterprise_linux_6:openssl-devel",
"red_hat_enterprise_linux_6:openssl-perl",
"red_hat_enterprise_linux_6:openssl-static",
"red_hat_enterprise_linux_6:openssl.src",
"red_hat_enterprise_linux_6:openssl098e",
"red_hat_enterprise_linux_6:openssl098e.src",
"red_hat_enterprise_linux_7:openssl",
"red_hat_enterprise_linux_7:openssl-devel",
"red_hat_enterprise_linux_7:openssl-libs",
"red_hat_enterprise_linux_7:openssl-perl",
"red_hat_enterprise_linux_7:openssl-static",
"red_hat_enterprise_linux_7:openssl.src",
"red_hat_enterprise_linux_7:openssl098e",
"red_hat_enterprise_linux_7:openssl098e.src",
"red_hat_enterprise_linux_8:compat-openssl10",
"red_hat_enterprise_linux_8:compat-openssl10.src",
"red_hat_enterprise_linux_8:mingw32-openssl",
"red_hat_enterprise_linux_8:mingw64-openssl"
]
},
{
"label": "component_not_present",
"product_ids": [
"red_hat_enterprise_linux_8:openssl",
"red_hat_enterprise_linux_8:openssl-devel",
"red_hat_enterprise_linux_8:openssl-libs",
"red_hat_enterprise_linux_8:openssl-perl",
"red_hat_enterprise_linux_8:openssl-static",
"red_hat_enterprise_linux_8:openssl.src",
"red_hat_enterprise_linux_9:compat-openssl11",
"red_hat_enterprise_linux_9:compat-openssl11.src"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447327"
}
],
"notes": [
{
"category": "description",
"text": "A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the \"DEFAULT\" keyword. A less preferred key exchange may be used even when a more preferred group is supported by both client and server, if the group was not included among the client's initial predicated keyshares. This will sometimes be the case with the new hybrid post-quantum groups, if the client chooses to defer their use until specifically requested by the server. No OpenSSL FIPS modules are affected by this issue, the code in question lies outside the FIPS boundary.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The impact of this flaw is limited to the choice of key agreement groups in a specific TLS connection. While a less a preferred key agreement group may allow for a connection to lack post-quantum protection, it is important to know that the connection will still be encrypted with a secure classical cipher and that the degradation of the cipher is limited to the active connection and is not a persistent degradation. Groups which the server operator has disallowed will not be used and it may be the case that the client and server fail to agree upon a key exchange group which would prevent the offending client from constructing a TLS connection.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:openssl-main@aarch64",
"Red Hat Hardened Images:openssl-main@src",
"Red Hat Hardened Images:openssl-main@x86_64",
"Red Hat JBoss Core Services 2.4.62.SP4",
"Red Hat JBoss Web Server 6.2.4",
"Red Hat JBoss Web Server 7.0.0"
],
"known_affected": [
"red_hat_enterprise_linux_10:openssl",
"red_hat_enterprise_linux_10:openssl-devel",
"red_hat_enterprise_linux_10:openssl-libs",
"red_hat_enterprise_linux_10:openssl-perl",
"red_hat_enterprise_linux_10:openssl.src",
"red_hat_enterprise_linux_9:openssl",
"red_hat_enterprise_linux_9:openssl-devel",
"red_hat_enterprise_linux_9:openssl-fips-provider",
"red_hat_enterprise_linux_9:openssl-fips-provider-so",
"red_hat_enterprise_linux_9:openssl-fips-provider.src",
"red_hat_enterprise_linux_9:openssl-libs",
"red_hat_enterprise_linux_9:openssl-perl",
"red_hat_enterprise_linux_9:openssl.src",
"red_hat_jboss_web_server_5:jbcs-httpd24-openssl.src"
],
"known_not_affected": [
"red_hat_enterprise_linux_10:openssl-fips-provider",
"red_hat_enterprise_linux_10:openssl-fips-provider-so",
"red_hat_enterprise_linux_10:openssl-fips-provider.src",
"red_hat_enterprise_linux_6:openssl",
"red_hat_enterprise_linux_6:openssl-devel",
"red_hat_enterprise_linux_6:openssl-perl",
"red_hat_enterprise_linux_6:openssl-static",
"red_hat_enterprise_linux_6:openssl.src",
"red_hat_enterprise_linux_6:openssl098e",
"red_hat_enterprise_linux_6:openssl098e.src",
"red_hat_enterprise_linux_7:openssl",
"red_hat_enterprise_linux_7:openssl-devel",
"red_hat_enterprise_linux_7:openssl-libs",
"red_hat_enterprise_linux_7:openssl-perl",
"red_hat_enterprise_linux_7:openssl-static",
"red_hat_enterprise_linux_7:openssl.src",
"red_hat_enterprise_linux_7:openssl098e",
"red_hat_enterprise_linux_7:openssl098e.src",
"red_hat_enterprise_linux_8:compat-openssl10",
"red_hat_enterprise_linux_8:compat-openssl10.src",
"red_hat_enterprise_linux_8:mingw32-openssl",
"red_hat_enterprise_linux_8:mingw64-openssl",
"red_hat_enterprise_linux_8:openssl",
"red_hat_enterprise_linux_8:openssl-devel",
"red_hat_enterprise_linux_8:openssl-libs",
"red_hat_enterprise_linux_8:openssl-perl",
"red_hat_enterprise_linux_8:openssl-static",
"red_hat_enterprise_linux_8:openssl.src",
"red_hat_enterprise_linux_9:compat-openssl11",
"red_hat_enterprise_linux_9:compat-openssl11.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-2673"
},
{
"category": "external",
"summary": "RHBZ#2447327",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447327"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-2673",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2673"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2673",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2673"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f",
"url": "https://github.com/openssl/openssl/commit/2157c9d81f7b0bd7dfa25b960e928ec28e8dd63f"
},
{
"category": "external",
"summary": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34",
"url": "https://github.com/openssl/openssl/commit/85977e013f32ceb96aa034c0e741adddc1a05e34"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/secadv/20260313.txt",
"url": "https://openssl-library.org/news/secadv/20260313.txt"
}
],
"release_date": "2026-03-13T13:23:00.376000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-04-09T08:50:10+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:openssl-main@aarch64",
"Red Hat Hardened Images:openssl-main@src",
"Red Hat Hardened Images:openssl-main@x86_64"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7261"
},
{
"category": "vendor_fix",
"date": "2026-06-22T15:13:13+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat JBoss Core Services 2.4.62.SP4"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27201"
},
{
"category": "vendor_fix",
"date": "2026-07-22T12:22:32+00:00",
"details": "Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Web Server 6.2.4"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43402"
},
{
"category": "vendor_fix",
"date": "2026-07-14T16:08:37+00:00",
"details": "Before applying the update, back up your existing Red Hat JBoss Web Server installation, including all applications and configuration files.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.",
"product_ids": [
"Red Hat JBoss Web Server 7.0.0"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39189"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Hardened Images:openssl-main@aarch64",
"Red Hat Hardened Images:openssl-main@src",
"Red Hat Hardened Images:openssl-main@x86_64",
"Red Hat JBoss Core Services 2.4.62.SP4",
"Red Hat JBoss Web Server 6.2.4",
"Red Hat JBoss Web Server 7.0.0",
"red_hat_enterprise_linux_10:openssl",
"red_hat_enterprise_linux_10:openssl-devel",
"red_hat_enterprise_linux_10:openssl-libs",
"red_hat_enterprise_linux_10:openssl-perl",
"red_hat_enterprise_linux_10:openssl.src",
"red_hat_enterprise_linux_9:openssl",
"red_hat_enterprise_linux_9:openssl-devel",
"red_hat_enterprise_linux_9:openssl-fips-provider",
"red_hat_enterprise_linux_9:openssl-fips-provider-so",
"red_hat_enterprise_linux_9:openssl-fips-provider.src",
"red_hat_enterprise_linux_9:openssl-libs",
"red_hat_enterprise_linux_9:openssl-perl",
"red_hat_enterprise_linux_9:openssl.src",
"red_hat_jboss_web_server_5:jbcs-httpd24-openssl.src"
]
},
{
"category": "no_fix_planned",
"details": "Out of support scope",
"product_ids": [
"red_hat_jboss_web_server_5:jbcs-httpd24-openssl.src"
]
},
{
"category": "no_fix_planned",
"details": "Will not fix",
"product_ids": [
"red_hat_enterprise_linux_10:openssl",
"red_hat_enterprise_linux_10:openssl-devel",
"red_hat_enterprise_linux_10:openssl-libs",
"red_hat_enterprise_linux_10:openssl-perl",
"red_hat_enterprise_linux_10:openssl.src",
"red_hat_enterprise_linux_9:openssl",
"red_hat_enterprise_linux_9:openssl-devel",
"red_hat_enterprise_linux_9:openssl-libs",
"red_hat_enterprise_linux_9:openssl-perl",
"red_hat_enterprise_linux_9:openssl.src"
]
},
{
"category": "none_available",
"details": "Affected",
"product_ids": [
"red_hat_enterprise_linux_9:openssl-fips-provider",
"red_hat_enterprise_linux_9:openssl-fips-provider-so",
"red_hat_enterprise_linux_9:openssl-fips-provider.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:openssl-main@aarch64",
"Red Hat Hardened Images:openssl-main@src",
"Red Hat Hardened Images:openssl-main@x86_64",
"Red Hat JBoss Core Services 2.4.62.SP4",
"Red Hat JBoss Web Server 6.2.4",
"Red Hat JBoss Web Server 7.0.0",
"red_hat_enterprise_linux_10:openssl",
"red_hat_enterprise_linux_10:openssl-devel",
"red_hat_enterprise_linux_10:openssl-fips-provider",
"red_hat_enterprise_linux_10:openssl-fips-provider-so",
"red_hat_enterprise_linux_10:openssl-fips-provider.src",
"red_hat_enterprise_linux_10:openssl-libs",
"red_hat_enterprise_linux_10:openssl-perl",
"red_hat_enterprise_linux_10:openssl.src",
"red_hat_enterprise_linux_6:openssl",
"red_hat_enterprise_linux_6:openssl-devel",
"red_hat_enterprise_linux_6:openssl-perl",
"red_hat_enterprise_linux_6:openssl-static",
"red_hat_enterprise_linux_6:openssl.src",
"red_hat_enterprise_linux_6:openssl098e",
"red_hat_enterprise_linux_6:openssl098e.src",
"red_hat_enterprise_linux_7:openssl",
"red_hat_enterprise_linux_7:openssl-devel",
"red_hat_enterprise_linux_7:openssl-libs",
"red_hat_enterprise_linux_7:openssl-perl",
"red_hat_enterprise_linux_7:openssl-static",
"red_hat_enterprise_linux_7:openssl.src",
"red_hat_enterprise_linux_7:openssl098e",
"red_hat_enterprise_linux_7:openssl098e.src",
"red_hat_enterprise_linux_8:compat-openssl10",
"red_hat_enterprise_linux_8:compat-openssl10.src",
"red_hat_enterprise_linux_8:mingw32-openssl",
"red_hat_enterprise_linux_8:mingw64-openssl",
"red_hat_enterprise_linux_8:openssl",
"red_hat_enterprise_linux_8:openssl-devel",
"red_hat_enterprise_linux_8:openssl-libs",
"red_hat_enterprise_linux_8:openssl-perl",
"red_hat_enterprise_linux_8:openssl-static",
"red_hat_enterprise_linux_8:openssl.src",
"red_hat_enterprise_linux_9:compat-openssl11",
"red_hat_enterprise_linux_9:compat-openssl11.src",
"red_hat_enterprise_linux_9:openssl",
"red_hat_enterprise_linux_9:openssl-devel",
"red_hat_enterprise_linux_9:openssl-fips-provider",
"red_hat_enterprise_linux_9:openssl-fips-provider-so",
"red_hat_enterprise_linux_9:openssl-fips-provider.src",
"red_hat_enterprise_linux_9:openssl-libs",
"red_hat_enterprise_linux_9:openssl-perl",
"red_hat_enterprise_linux_9:openssl.src",
"red_hat_jboss_web_server_5:jbcs-httpd24-openssl.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate",
"product_ids": [
"Red Hat Hardened Images:openssl-main@aarch64",
"Red Hat Hardened Images:openssl-main@src",
"Red Hat Hardened Images:openssl-main@x86_64",
"Red Hat JBoss Core Services 2.4.62.SP4",
"Red Hat JBoss Web Server 6.2.4",
"Red Hat JBoss Web Server 7.0.0",
"red_hat_enterprise_linux_10:openssl",
"red_hat_enterprise_linux_10:openssl-devel",
"red_hat_enterprise_linux_10:openssl-fips-provider",
"red_hat_enterprise_linux_10:openssl-fips-provider-so",
"red_hat_enterprise_linux_10:openssl-fips-provider.src",
"red_hat_enterprise_linux_10:openssl-libs",
"red_hat_enterprise_linux_10:openssl-perl",
"red_hat_enterprise_linux_10:openssl.src",
"red_hat_enterprise_linux_6:openssl",
"red_hat_enterprise_linux_6:openssl-devel",
"red_hat_enterprise_linux_6:openssl-perl",
"red_hat_enterprise_linux_6:openssl-static",
"red_hat_enterprise_linux_6:openssl.src",
"red_hat_enterprise_linux_6:openssl098e",
"red_hat_enterprise_linux_6:openssl098e.src",
"red_hat_enterprise_linux_7:openssl",
"red_hat_enterprise_linux_7:openssl-devel",
"red_hat_enterprise_linux_7:openssl-libs",
"red_hat_enterprise_linux_7:openssl-perl",
"red_hat_enterprise_linux_7:openssl-static",
"red_hat_enterprise_linux_7:openssl.src",
"red_hat_enterprise_linux_7:openssl098e",
"red_hat_enterprise_linux_7:openssl098e.src",
"red_hat_enterprise_linux_8:compat-openssl10",
"red_hat_enterprise_linux_8:compat-openssl10.src",
"red_hat_enterprise_linux_8:mingw32-openssl",
"red_hat_enterprise_linux_8:mingw64-openssl",
"red_hat_enterprise_linux_8:openssl",
"red_hat_enterprise_linux_8:openssl-devel",
"red_hat_enterprise_linux_8:openssl-libs",
"red_hat_enterprise_linux_8:openssl-perl",
"red_hat_enterprise_linux_8:openssl-static",
"red_hat_enterprise_linux_8:openssl.src",
"red_hat_enterprise_linux_9:compat-openssl11",
"red_hat_enterprise_linux_9:compat-openssl11.src",
"red_hat_enterprise_linux_9:openssl",
"red_hat_enterprise_linux_9:openssl-devel",
"red_hat_enterprise_linux_9:openssl-fips-provider",
"red_hat_enterprise_linux_9:openssl-fips-provider-so",
"red_hat_enterprise_linux_9:openssl-fips-provider.src",
"red_hat_enterprise_linux_9:openssl-libs",
"red_hat_enterprise_linux_9:openssl-perl",
"red_hat_enterprise_linux_9:openssl.src",
"red_hat_jboss_web_server_5:jbcs-httpd24-openssl.src"
]
}
],
"title": "openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group"
}
]
}