diff --git a/.gitignore b/.gitignore
index edf92da..f8764b5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@ SOURCES/openssl-rhel-d00c3c5b8a9d6d3ea3dabfcafdf36afd61ba8bcc.tar.xz
 /edk2-bb1bba3d77.tar.xz
 /openssl-rhel-d00c3c5b8a9d6d3ea3dabfcafdf36afd61ba8bcc.tar.xz
 /openssl-rhel-cf317b2bb227899cb2e761b9163210f62cab1b1e.tar.xz
+/openssl-rhel-f91c816560a65ffd75f553a34e6f94dd4b326598.tar.xz
diff --git a/edk2.spec b/edk2.spec
index 9ee6630..83ced5c 100644
--- a/edk2.spec
+++ b/edk2.spec
@@ -7,7 +7,7 @@ ExclusiveArch: x86_64 aarch64
 
 Name:       edk2
 Version:    %{GITDATE}git%{GITCOMMIT}
-Release:    13%{?dist}.10
+Release:    13%{?dist}.11
 Summary:    UEFI firmware for 64-bit virtual machines
 Group:      Applications/Emulators
 License:    BSD-2-Clause-Patent and OpenSSL and MIT
@@ -19,7 +19,7 @@ URL:        http://www.tianocore.org
 # | xz -9ev >/tmp/edk2-$COMMIT.tar.xz
 Source0: http://batcave.lab.eng.brq.redhat.com/www/edk2-%{GITCOMMIT}.tar.xz
 Source1: ovmf-whitepaper-c770f8c.txt
-Source2: openssl-rhel-ad510221a6db362d7ed8725b2c92c91f643bc505.tar.xz
+Source2: openssl-rhel-f91c816560a65ffd75f553a34e6f94dd4b326598.tar.xz
 Source3: ovmf-vars-generator
 Source4: LICENSE.qosb
 Source5: RedHatSecureBootPkKek1.pem
@@ -851,6 +851,11 @@ true
 %endif
 
 %changelog
+* Thu Aug 21 2026 Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.11
+- edk2-Bumped-openssl-submodule-to-rhel-8-main.patch [RHEL-165755]
+- Resolves: RHEL-165755
+  (CVE-2026-28390 edk2: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing [rhel-8.10.z])
+
 * Thu Mar 26 2026 Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-13.el8.10
 - edk2-OvmfPkg-Expand-EnrollDefaultKeys-with-Microsoft-2023.patch [RHEL-151949]
 - Resolves: RHEL-151949
diff --git a/sources b/sources
index 654eeb2..59b5de4 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (edk2-bb1bba3d77.tar.xz) = 3e0deb750d3443f4a2c15a066842e35a05a6dc65ce1869c229a8328d3dba8375949ee3825e16c7fe01bd77516a6717ccbdda1d674a2a862453e5480094c49c4c
-SHA512 (openssl-rhel-ad510221a6db362d7ed8725b2c92c91f643bc505.tar.xz) = eefae2e7089a0782d99e21660bc874059edf7161200463d210c479862bccc02ee07a8c8c73a576a35365b953e12230a42e4b26bd62ee96284c2008088298415e
+SHA512 (openssl-rhel-f91c816560a65ffd75f553a34e6f94dd4b326598.tar.xz) = c0da441e69122383108445325348230b8023cfef4b276943834aaa7c8453040e6247daf881c93446b3e238049894acf8862b08dd2aef46d5a08ca688ea143cb2