ELBA-2026-500130

ELBA-2026-500130 - openssl bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-08-04

Description

[3.5.5-6.0.1]
- Replace upstream references [Orabug: 34340177]

[3.5.5.openela.0.1]
- Add OpenELA specific changes

[1:3.5.5-6]
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
Resolves: RHEL-210862

[1:3.5.5-5]
- Patch asn1_d2i_read_bio to read headers without blocking
Resolves: RHEL-178642

[1:3.5.5-4]
Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699

[1:3.5.5-3]
- Fix CVE-2026-28390
Resolves: RHEL-165870

[1:3.5.5-2]
- Fix CVE-2026-31790
Resolves: RHEL-161586

[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5
Resolves: RHEL-136895
Resolves: RHEL-142004
Resolves: RHEL-142012
Resolves: RHEL-142020
Resolves: RHEL-142024
Resolves: RHEL-142028
Resolves: RHEL-142032
Resolves: RHEL-142036
Resolves: RHEL-142040
Resolves: RHEL-142044
Resolves: RHEL-142048
Resolves: RHEL-142052
Resolves: RHEL-142056

[1:3.5.1-6]
- Fix CVE-2025-9230
Resolves: RHEL-115928

[1:3.5.1-5]
- Fix globally disabled LTO
Related: RHEL-111633

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssl-3.5.5-6.0.1.ksplice1.el9_8.src.rpm	67f9311578e16eeb36b0fbfebff3f4774c2137f4ba72be5fc963dd13b8f0877b	-	ol9_aarch64_userspace_ksplice
	openssl-3.5.5-6.0.1.ksplice1.el9_8.aarch64.rpm	69903d527e15ac515ecb73ed4b8807834c65e65935d7a914457c7a9b72d77b2f	-	ol9_aarch64_userspace_ksplice
	openssl-devel-3.5.5-6.0.1.ksplice1.el9_8.aarch64.rpm	80a07e0526eac5f17b671c06e7c44205f33cd6ad0fc3a9b553c1dc4de3e8cb58	-	ol9_aarch64_userspace_ksplice
	openssl-libs-3.5.5-6.0.1.ksplice1.el9_8.aarch64.rpm	499bac002744d41010a7e38540c958f339e21d52a1bff6f4240e5650284690c9	-	ol9_aarch64_userspace_ksplice
	openssl-perl-3.5.5-6.0.1.ksplice1.el9_8.aarch64.rpm	bef503c3049359d2c9bc0ac9227e0adb2cad6db690da92ac6a98c2825f9ce8df	-	ol9_aarch64_userspace_ksplice
Oracle Linux 9 (x86_64)	openssl-3.5.5-6.0.1.ksplice1.el9_8.src.rpm	67f9311578e16eeb36b0fbfebff3f4774c2137f4ba72be5fc963dd13b8f0877b	-	ol9_x86_64_userspace_ksplice
	openssl-3.5.5-6.0.1.ksplice1.el9_8.x86_64.rpm	ac98affb41924d57bb70b2280aecb34a82fab0c25df470a3cf9dec8c89452b08	-	ol9_x86_64_userspace_ksplice
	openssl-devel-3.5.5-6.0.1.ksplice1.el9_8.i686.rpm	0f1ca7e0087bd18cc2c704db3dcfff4ec1d078bc24e5a57b4581fc118cef8573	-	ol9_x86_64_userspace_ksplice
	openssl-devel-3.5.5-6.0.1.ksplice1.el9_8.x86_64.rpm	8f19a14c8af5b6c4890a3c8e9289f64f556bce5ffbc7dca094480a4f3b3239b9	-	ol9_x86_64_userspace_ksplice
	openssl-libs-3.5.5-6.0.1.ksplice1.el9_8.i686.rpm	da1c60eb5916acd5e012614fee0b99f59e5883d05c149f4d666857449d7a30dc	-	ol9_x86_64_userspace_ksplice
	openssl-libs-3.5.5-6.0.1.ksplice1.el9_8.x86_64.rpm	e88a155b50b94246843f840a12d2b91ff4557c701599f4dfb3645302c3510487	-	ol9_x86_64_userspace_ksplice
	openssl-perl-3.5.5-6.0.1.ksplice1.el9_8.x86_64.rpm	ed30cb320990221a1fa10eb822e5ac91685a7cbbe1b54dd09be4840232410a09	-	ol9_x86_64_userspace_ksplice

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team