diff --git a/.gitignore b/.gitignore
index 599528b..ba96bb6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/openssl-3.5.5.tar.gz
+SOURCES/openssl-3.5.7.tar.gz
diff --git a/.openssl.metadata b/.openssl.metadata
index 067fc12..9692a51 100644
--- a/.openssl.metadata
+++ b/.openssl.metadata
@@ -1 +1 @@
-72a5ebbdd30bc28a66f069e2d50c66a007c324d2 SOURCES/openssl-3.5.5.tar.gz
+53d331880fbde8e6fe25870d5325a61201f6264d SOURCES/openssl-3.5.7.tar.gz
diff --git a/SOURCES/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch b/SOURCES/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch
index d53c49a..8d7cae7 100644
--- a/SOURCES/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch
+++ b/SOURCES/0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch
@@ -317,7 +317,7 @@ index 9874e6bad6..76b6befbad 100644
 +#endif
      ADD_TEST(test_default_cipherlist_explicit);
      ADD_TEST(test_default_cipherlist_clear);
-     ADD_TEST(test_stdname_cipherlist);
+ #ifndef OPENSSL_NO_TLS1_3
 -- 
 2.52.0
 
diff --git a/SOURCES/0100-RHEL9-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch b/SOURCES/0100-RHEL9-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
index dff547e..740e708 100644
--- a/SOURCES/0100-RHEL9-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
+++ b/SOURCES/0100-RHEL9-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
@@ -1,4 +1,4 @@
-From c63599ee9708d543205a9173207ee7167315c624 Mon Sep 17 00:00:00 2001
+From d0f984a8c5d943402f38043ff6898b1b06364bc5 Mon Sep 17 00:00:00 2001
 From: Clemens Lang <cllang@redhat.com>
 Date: Tue, 1 Mar 2022 15:44:18 +0100
 Subject: [PATCH] Allow SHA1 in seclevel 2 if rh-allow-sha1-signatures = yes
@@ -156,19 +156,19 @@ index 4b74ee1a34..5f089de107 100644
          return ssl_security(s, op, secbits, nid, x);
      else
 diff --git a/test/recipes/25-test_verify.t b/test/recipes/25-test_verify.t
-index 700bbd849c..2de1d76b5e 100644
+index ab8cdff..84421cc 100644
 --- a/test/recipes/25-test_verify.t
 +++ b/test/recipes/25-test_verify.t
-@@ -29,7 +29,7 @@ sub verify {
+@@ -30,7 +30,7 @@ sub verify {
      run(app([@args]));
  }
  
--plan tests => 203;
-+plan tests => 202;
+-plan tests => 204;
++plan tests => 203;
  
  # Canonical success
  ok(verify("ee-cert", "sslserver", ["root-cert"], ["ca-cert"]),
-@@ -387,8 +387,9 @@ ok(verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"
+@@ -485,8 +485,9 @@ ok(verify("ee-pss-sha1-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "0"
  ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], ),
      "CA with PSS signature using SHA256");
  
@@ -181,4 +181,4 @@ index 700bbd849c..2de1d76b5e 100644
  ok(verify("ee-pss-sha256-cert", "", ["root-cert"], ["ca-cert"], "-auth_level", "2"),
      "PSS signature using SHA256 and auth level 2");
 -- 
-2.35.1
+2.54.0
diff --git a/SPECS/openssl.spec b/SPECS/openssl.spec
index 53bc2c0..60aff45 100644
--- a/SPECS/openssl.spec
+++ b/SPECS/openssl.spec
@@ -28,7 +28,7 @@ print(string.sub(hash, 0, 16))
 
 Summary: Utilities from the general purpose cryptography library with TLS implementation
 Name: openssl
-Version: 3.5.5
+Version: 3.5.7
 Release: 1%{?dist}
 Epoch: 1
 Source0: openssl-%{version}.tar.gz
@@ -456,6 +456,31 @@ ln -s /etc/crypto-policies/back-ends/openssl_fips.config $RPM_BUILD_ROOT%{_sysco
 %ldconfig_scriptlets libs
 
 %changelog
+* Fri Jun 12 2026 Pavol Žáčik <pzacik@redhat.com> - 1:3.5.7-1
+- Rebase to OpenSSL 3.5.7
+  Resolves: RHEL-179700
+  Resolves: RHEL-179695
+  Resolves: RHEL-179692
+  Resolves: RHEL-179687
+  Resolves: RHEL-179677
+  Resolves: RHEL-179660
+  Resolves: RHEL-179634
+  Resolves: RHEL-179555
+  Resolves: RHEL-179551
+  Resolves: RHEL-179548
+  Resolves: RHEL-179543
+  Resolves: RHEL-179540
+  Resolves: RHEL-179284
+  Resolves: RHEL-179275
+
+* Wed May 13 2026 Pavol Žáčik <pzacik@redhat.com> - 1:3.5.5-3
+- Fix CVE-2026-28390
+  Resolves: RHEL-165870
+
+* Thu Apr 09 2026 Pavol Žáčik <pzacik@redhat.com> - 1:3.5.5-2
+- Fix CVE-2026-31790
+  Resolves: RHEL-161586
+
 * Tue Jan 27 2026 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
 - Rebase to OpenSSL 3.5.5
   Resolves: RHEL-136895