ELBA-2026-50377

ELBA-2026-50377 - openssl bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-07-07

Description

[1:1.1.1k-16]
- Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify()
Resolves: RHEL-180978
- Fix CVE-2024-4741: Use After Free with SSL_free_buffers
Resolves: RHEL-180983

[1:1.1.1k-15]
- Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients
Resolves: RHEL-149165
Resolves: RHEL-142715

[1:1.1.1k-14.1]
- Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
Fix CVE-2025-9230
Resolves: RHEL-128615

[1:1.1.1k-14]
- Backport fix SSL_select_next proto from OpenSSL 3.2
Fix CVE-2024-5535
Resolves: RHEL-45654

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	openssl-1.1.1k-16.ksplice2.el8_6.src.rpm	91e3ad1f649827748e246f924e3d882e6867d064a67d07d38db681880f821a0d	-	ol8_aarch64_userspace_ksplice
	openssl-1.1.1k-16.ksplice2.el8_6.aarch64.rpm	2ee2a613cebd7bfd96e20a35f8d4487eccb61f9f5ded678192dbbd98acb6c383	-	ol8_aarch64_userspace_ksplice
	openssl-devel-1.1.1k-16.ksplice2.el8_6.aarch64.rpm	485b13fa604e02c3c055ab98faa848c8a1c7cd674229c4ad0ed5d238c95edafa	-	ol8_aarch64_userspace_ksplice
	openssl-libs-1.1.1k-16.ksplice2.el8_6.aarch64.rpm	eb20abaa6a59387ce18f4de4c78119ba56ee1bdf36e318f5af4a485c52f76bf8	-	ol8_aarch64_userspace_ksplice
	openssl-perl-1.1.1k-16.ksplice2.el8_6.aarch64.rpm	5e6729d7ece5c0aa1689189de150fa2910740c0453e4ae7351b2a791620f9910	-	ol8_aarch64_userspace_ksplice
	openssl-static-1.1.1k-16.ksplice2.el8_6.aarch64.rpm	f8cd04d54bf1a28a8397164203a52bccc21f2b565cfcd5866051b148fa4b185b	-	ol8_aarch64_userspace_ksplice
Oracle Linux 8 (x86_64)	openssl-1.1.1k-16.ksplice2.el8_6.src.rpm	91e3ad1f649827748e246f924e3d882e6867d064a67d07d38db681880f821a0d	-	ol8_x86_64_userspace_ksplice
	openssl-1.1.1k-16.ksplice2.el8_6.x86_64.rpm	cd7a1dd4b129281f6409600e1a89a67568a4d524d273eb904002cd14b6a5fd56	-	ol8_x86_64_userspace_ksplice
	openssl-devel-1.1.1k-16.ksplice2.el8_6.i686.rpm	84fc0a33271fadb9811fa69a25b9b3847a5f4e93786ba91453a5fcf57594fc19	-	ol8_x86_64_userspace_ksplice
	openssl-devel-1.1.1k-16.ksplice2.el8_6.x86_64.rpm	cc76f4d8b06c4b0357cb9962d7e883a265ab2e73576ce4e08b6432ddf7329bd8	-	ol8_x86_64_userspace_ksplice
	openssl-libs-1.1.1k-16.ksplice2.el8_6.i686.rpm	a0612e1e52ded4a6aec25702595f665755cc372c68294edddeb7248ead4f8d09	-	ol8_x86_64_userspace_ksplice
	openssl-libs-1.1.1k-16.ksplice2.el8_6.x86_64.rpm	54b6ac44754d7b7bfb31743544b6215d51be1a0250cfc2980722748f55bb8b45	-	ol8_x86_64_userspace_ksplice
	openssl-perl-1.1.1k-16.ksplice2.el8_6.x86_64.rpm	3c3d246afe27e879e5a494791fcb13d1c0be4b34425c004c3b894e89ea8073af	-	ol8_x86_64_userspace_ksplice

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team