ARM OpenSSL version causing Tenable "OpenSSL 3.5.0 < 3.5.8 Vulnerability"

[alex-rowe]

Describe the issue

Similar to #10415 and other ARM related OpenSSL updates.

For ARM instances with AWS CLI installed, Tenable is reporting https://www.tenable.com/plugins/nessus/335167

Path             : /usr/local/aws-cli/v2/2.36.28/dist/libcrypto.so.3
  Reported version : 3.5.7
  Fixed version    : 3.5.8

Also testing the latest version as of today.

% curl "https://awscli.amazonaws.com/awscli-exe-linux-aarch64-2.36.31.zip" -o "awscliv2.zip"
% unzip awscliv2.zip 
% strings aws/dist/libcrypto.so.3 | grep "^OpenSSL 3"
OpenSSL 3.5.7 9 Jun 2026

Additional Information/Context

No response

CLI version used

2.36.31

Environment details (OS name and version, etc.)

aarch/arm Linux

[RyanFitzSimmonsAK]

Hi @alex-rowe, thanks for reaching out. OpenSSL 3.5.8 was released yesterday and we've taken a backlog item to upgrade the bundled OpenSSL version. When we've done so, we'll update you in this issue.