diff --git a/opencryptoki.spec b/opencryptoki.spec
index 0880b4d..09a61bb 100644
--- a/opencryptoki.spec
+++ b/opencryptoki.spec
@@ -1,7 +1,7 @@
 Name: opencryptoki
 Summary: Implementation of the PKCS#11 (Cryptoki) specification v3.0 and partially v3.1
 Version: 3.25.0
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: CPL-1.0
 URL: https://github.com/opencryptoki/opencryptoki
 Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}/%{name}-%{version}.tar.gz
@@ -30,9 +30,9 @@ Patch11: opencryptoki-3.25.0-covscan-findings.patch
 Requires(pre): coreutils
 Requires: (selinux-policy >= 34.9-1 if selinux-policy-targeted)
 BuildRequires: gcc gcc-c++
-BuildRequires: openssl-devel >= 1.1.1
+BuildRequires: openssl-devel >= 3.5.1
 # testcases require 'openssl' command line tool
-BuildRequires: openssl >= 1.1.1
+BuildRequires: openssl >= 3.5.1
 # testcases require 'jq' command line tool
 BuildRequires: jq 
 %if 0%{?tmptok}
@@ -52,6 +52,8 @@ BuildRequires: libica-devel >= 3.3
 # for /usr/include/libudev.h
 BuildRequires: systemd-devel
 %endif
+# Workaround for RHEL-105518
+Requires: openssl >= 1:3.5.1
 Requires(pre): %{name}-libs%{?_isa} = %{version}-%{release}
 Requires: %{name}-libs%{?_isa} = %{version}-%{release}
 Requires: %{name}(token)
@@ -412,6 +414,9 @@ fi
 
 
 %changelog
+* Tue Jul 29 2025 Than Ngo <than@redhat.com> - 3.25.0-4
+- Resolves: RHEL-105910, require openssl >= 3.5.1
+
 * Mon Jul 21 2025 Than Ngo <than@redhat.com> - 3.25.0-3
 - Fix incorrect effective group id of pkcsslotd daemon
 - Fix covscan findings