ELBA-2026-500129

ELBA-2026-500129 - openssl bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-08-04

Description

[3.5.5-6.0.1]
- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]

[1:3.5.5-6]
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
Resolves: RHEL-210864

[1:3.5.5-5]
- Patch asn1_d2i_read_bio to read headers without blocking
Resolves: RHEL-169991

[1:3.5.5-4]
Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179267
Resolves: RHEL-179281
Resolves: RHEL-179537
Resolves: RHEL-179542
Resolves: RHEL-179545
Resolves: RHEL-179550
Resolves: RHEL-179553
Resolves: RHEL-179626
Resolves: RHEL-179658
Resolves: RHEL-179675
Resolves: RHEL-179682
Resolves: RHEL-179685
Resolves: RHEL-179689
Resolves: RHEL-179693
Resolves: RHEL-179697

[1:3.5.5-3]
- Fix CVE-2026-28390
Resolves: RHEL-165705

[1:3.5.5-2]
- Fix CVE-2026-31790
Resolves: RHEL-161574

[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5
Resolves: RHEL-122599
Resolves: RHEL-141987
Resolves: RHEL-142009
Resolves: RHEL-142022
Resolves: RHEL-142026
Resolves: RHEL-142030
Resolves: RHEL-142034
Resolves: RHEL-142038
Resolves: RHEL-142042
Resolves: RHEL-142046
Resolves: RHEL-142050
Resolves: RHEL-142054

[1:3.5.1-6]
- Fix CVE-2025-9230
Resolves: RHEL-115883

[1:3.5.1-5]
- Fix globally disabled LTO
Related: RHEL-111634
- Initialize reserved and unused memory in aes-s390x.pl
Resolves: RHEL-107479

[1:3.5.1-4]
- Make openssl speed test signatures without errors
Resolves: RHEL-95182
- Build tests in check and without LTO
Resolves: RHEL-111634

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	openssl-3.5.5-6.0.1.ksplice1.el10_2.src.rpm	27868dfc98ec92cc742c070cd30ea30743e7da009b42f0a36b8f464834411e33	-	ol10_aarch64_userspace_ksplice
	openssl-3.5.5-6.0.1.ksplice1.el10_2.aarch64.rpm	9babcac934152dec1dc2297d937bd8dcbc9c9912bc3192f8bb1e00689a7fce1f	-	ol10_aarch64_userspace_ksplice
	openssl-devel-3.5.5-6.0.1.ksplice1.el10_2.aarch64.rpm	911a7a5ede58cff5f7bd6d66a6ed406bb57ef10335b6df74ceea4787c2bc9ec7	-	ol10_aarch64_userspace_ksplice
	openssl-libs-3.5.5-6.0.1.ksplice1.el10_2.aarch64.rpm	f00c01be206610d40d98eea767d5a6ada6183fa96ed8961a863c25a9e5cc9db2	-	ol10_aarch64_userspace_ksplice
	openssl-perl-3.5.5-6.0.1.ksplice1.el10_2.aarch64.rpm	c16cc3728689d6c8f9289d5f3486bba1b2ecf1313bf78faeda91dd1040700cad	-	ol10_aarch64_userspace_ksplice
Oracle Linux 10 (x86_64)	openssl-3.5.5-6.0.1.ksplice1.el10_2.src.rpm	27868dfc98ec92cc742c070cd30ea30743e7da009b42f0a36b8f464834411e33	-	ol10_x86_64_userspace_ksplice
	openssl-3.5.5-6.0.1.ksplice1.el10_2.x86_64.rpm	8e124de22266999a40922f42a36c598196a9560efab65c4f4f8efe290466e2d2	-	ol10_x86_64_userspace_ksplice
	openssl-devel-3.5.5-6.0.1.ksplice1.el10_2.x86_64.rpm	5210e03305dffcb92078d01c2cf3f2777a346a86de2291616d69601cef06ad1c	-	ol10_x86_64_userspace_ksplice
	openssl-libs-3.5.5-6.0.1.ksplice1.el10_2.x86_64.rpm	6141eeffe675ded29944a00dcf6eea5c9c5c6d2225a20c3e77835b370cefca03	-	ol10_x86_64_userspace_ksplice
	openssl-perl-3.5.5-6.0.1.ksplice1.el10_2.x86_64.rpm	667914c6a51da83d644cdcd940b9efb7693bd16c161b2a575c4d2c10efb8ade8	-	ol10_x86_64_userspace_ksplice

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team