ELSA-2026-1472

ELSA-2026-1472 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-01-28

Description

[3.5.1-7.0.1]
- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]

[1:3.5.1-7]
- Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469
CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420
CVE-2025-69421 CVE-2026-22795 CVE-2026-22796
Resolves: RHEL-142062
Resolves: RHEL-141985
Resolves: RHEL-142053
Resolves: RHEL-142049
Resolves: RHEL-142045
Resolves: RHEL-142041
Resolves: RHEL-142037
Resolves: RHEL-142033
Resolves: RHEL-142029
Resolves: RHEL-142008
Resolves: RHEL-142025
Resolves: RHEL-142021

[1:3.5.1-6]
- Fix AES/GCM ppc64le encrypt/decrypt
Resolves: RHEL-139108

Related CVEs

CVE-2025-11187

CVE-2025-15467

CVE-2025-15468

CVE-2025-15469

CVE-2025-66199

CVE-2025-68160

CVE-2025-69418

CVE-2025-69419

CVE-2025-69420

CVE-2025-69421

CVE-2026-22795

CVE-2026-22796

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	openssl-3.5.1-7.0.1.el10_1.src.rpm	ad5f750709985fb342e0f936f7c140fba1cc93363f4e90a7f86b129d3d139f5f	-	ol10_aarch64_appstream
	openssl-3.5.1-7.0.1.el10_1.src.rpm	ad5f750709985fb342e0f936f7c140fba1cc93363f4e90a7f86b129d3d139f5f	-	ol10_aarch64_baseos_latest
	openssl-3.5.1-7.0.1.el10_1.src.rpm	ad5f750709985fb342e0f936f7c140fba1cc93363f4e90a7f86b129d3d139f5f	-	ol10_aarch64_u1_baseos_patch
	openssl-3.5.1-7.0.1.el10_1.aarch64.rpm	49ccc874b56e5985a610958674b93d94ebc1ea04dabc7fac3a270dc452245c97	-	ol10_aarch64_baseos_latest
	openssl-3.5.1-7.0.1.el10_1.aarch64.rpm	49ccc874b56e5985a610958674b93d94ebc1ea04dabc7fac3a270dc452245c97	-	ol10_aarch64_u1_baseos_patch
	openssl-devel-3.5.1-7.0.1.el10_1.aarch64.rpm	cc39b80d3664cfc692714a6abf440b8e6e785972328b8a66815da084cc2d8256	-	ol10_aarch64_appstream
	openssl-libs-3.5.1-7.0.1.el10_1.aarch64.rpm	08084e2d163a4bdbf185ef9cc9807dfaa80653dfcf0669e919a61308e3f62246	-	ol10_aarch64_baseos_latest
	openssl-libs-3.5.1-7.0.1.el10_1.aarch64.rpm	08084e2d163a4bdbf185ef9cc9807dfaa80653dfcf0669e919a61308e3f62246	-	ol10_aarch64_u1_baseos_patch
	openssl-perl-3.5.1-7.0.1.el10_1.aarch64.rpm	c96702591304ed47ac858a68702c392dcfb50fa9edf649936f45430ee8d16bbb	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	openssl-3.5.1-7.0.1.el10_1.src.rpm	ad5f750709985fb342e0f936f7c140fba1cc93363f4e90a7f86b129d3d139f5f	-	ol10_x86_64_appstream
	openssl-3.5.1-7.0.1.el10_1.src.rpm	ad5f750709985fb342e0f936f7c140fba1cc93363f4e90a7f86b129d3d139f5f	-	ol10_x86_64_baseos_latest
	openssl-3.5.1-7.0.1.el10_1.src.rpm	ad5f750709985fb342e0f936f7c140fba1cc93363f4e90a7f86b129d3d139f5f	-	ol10_x86_64_u1_baseos_patch
	openssl-3.5.1-7.0.1.el10_1.x86_64.rpm	cf20784f816315235b29526c52d50d86644ad95c32b069a5f4d8dbe855bdaad0	-	ol10_x86_64_baseos_latest
	openssl-3.5.1-7.0.1.el10_1.x86_64.rpm	cf20784f816315235b29526c52d50d86644ad95c32b069a5f4d8dbe855bdaad0	-	ol10_x86_64_u1_baseos_patch
	openssl-devel-3.5.1-7.0.1.el10_1.x86_64.rpm	2d8dd3d2e26dc56bdbd0aaf88cad8d0cf5a4f5ea19d7e61bf5cc623f833ae72c	-	ol10_x86_64_appstream
	openssl-libs-3.5.1-7.0.1.el10_1.x86_64.rpm	309a0d780101547932d8a7f0ee69855174f26ce8563931159c57401041d9c733	-	ol10_x86_64_baseos_latest
	openssl-libs-3.5.1-7.0.1.el10_1.x86_64.rpm	309a0d780101547932d8a7f0ee69855174f26ce8563931159c57401041d9c733	-	ol10_x86_64_u1_baseos_patch
	openssl-perl-3.5.1-7.0.1.el10_1.x86_64.rpm	488bfa637428d7ac97ce7fb92f2abb87520ed5ea0ab0075b9d13f5c2d10c87d2	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team