ELSA-2026-1473

ELSA-2026-1473 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-01-28

Description

[3.5.1-7.0.1]
- Enable openssl-fips-provider dependency [Orabug: 36504822]
- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
- Replace upstream references [Orabug: 34340177]

[3.5.1.openela.0.1]
- Add OpenELA specific changes

[1:3.5.1-7]
- Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469
CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420
CVE-2025-69421 CVE-2026-22795 CVE-2026-22796
Resolves: RHEL-142068
Resolves: RHEL-142002
Resolves: RHEL-142055
Resolves: RHEL-142051
Resolves: RHEL-142047
Resolves: RHEL-142043
Resolves: RHEL-142039
Resolves: RHEL-142035
Resolves: RHEL-142031
Resolves: RHEL-142011
Resolves: RHEL-142027
Resolves: RHEL-142023

[1:3.5.1-6]
- Fix AES/GCM ppc64le encrypt/decrypt
Resolves: RHEL-139131

Related CVEs

CVE-2025-11187

CVE-2025-15467

CVE-2025-15468

CVE-2025-15469

CVE-2025-66199

CVE-2025-68160

CVE-2025-69418

CVE-2025-69419

CVE-2025-69420

CVE-2025-69421

CVE-2026-22795

CVE-2026-22796

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssl-3.5.1-7.0.1.el9_7.src.rpm	b97fe3573b526df6e777f9e6ef3fac6cb33d85dc0267dfac7c28efdb697d6d6b	-	ol9_aarch64_appstream
	openssl-3.5.1-7.0.1.el9_7.src.rpm	b97fe3573b526df6e777f9e6ef3fac6cb33d85dc0267dfac7c28efdb697d6d6b	-	ol9_aarch64_baseos_latest
	openssl-3.5.1-7.0.1.el9_7.src.rpm	b97fe3573b526df6e777f9e6ef3fac6cb33d85dc0267dfac7c28efdb697d6d6b	-	ol9_aarch64_u7_baseos_patch
	openssl-3.5.1-7.0.1.el9_7.aarch64.rpm	a1565423e024d54f00bb659e0d8160bc8fd285286dd94bd6e45416ba16c4e8ec	-	ol9_aarch64_baseos_latest
	openssl-3.5.1-7.0.1.el9_7.aarch64.rpm	a1565423e024d54f00bb659e0d8160bc8fd285286dd94bd6e45416ba16c4e8ec	-	ol9_aarch64_u7_baseos_patch
	openssl-devel-3.5.1-7.0.1.el9_7.aarch64.rpm	fb668ae1c88e84f0b530ffde65b92fffa4834b3daadf382e6a3ba8934f7f922d	-	ol9_aarch64_appstream
	openssl-libs-3.5.1-7.0.1.el9_7.aarch64.rpm	3e1aed3ece4f90488d08869082f12614685f977e505e52f2ac1bf0617cfa07be	-	ol9_aarch64_baseos_latest
	openssl-libs-3.5.1-7.0.1.el9_7.aarch64.rpm	3e1aed3ece4f90488d08869082f12614685f977e505e52f2ac1bf0617cfa07be	-	ol9_aarch64_u7_baseos_patch
	openssl-perl-3.5.1-7.0.1.el9_7.aarch64.rpm	2171236218a686f427db3aa3da921b415269d194af36c335e5e6346a622da167	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	openssl-3.5.1-7.0.1.el9_7.src.rpm	b97fe3573b526df6e777f9e6ef3fac6cb33d85dc0267dfac7c28efdb697d6d6b	-	ol9_x86_64_appstream
	openssl-3.5.1-7.0.1.el9_7.src.rpm	b97fe3573b526df6e777f9e6ef3fac6cb33d85dc0267dfac7c28efdb697d6d6b	-	ol9_x86_64_baseos_latest
	openssl-3.5.1-7.0.1.el9_7.src.rpm	b97fe3573b526df6e777f9e6ef3fac6cb33d85dc0267dfac7c28efdb697d6d6b	-	ol9_x86_64_u7_baseos_patch
	openssl-3.5.1-7.0.1.el9_7.x86_64.rpm	06a39f506c7fba167d5bc9ba27b2b77f4438150389a99ab673144b8f8be1a1a9	-	ol9_x86_64_baseos_latest
	openssl-3.5.1-7.0.1.el9_7.x86_64.rpm	06a39f506c7fba167d5bc9ba27b2b77f4438150389a99ab673144b8f8be1a1a9	-	ol9_x86_64_u7_baseos_patch
	openssl-devel-3.5.1-7.0.1.el9_7.i686.rpm	26f15599a189adf17ecee84384aee23d4a6331e87c56b67187c01ec967aad92a	-	ol9_x86_64_appstream
	openssl-devel-3.5.1-7.0.1.el9_7.x86_64.rpm	216499fa00ebe58088d2b50d5adb07532a79a2159c4b576ada1977e41ca00438	-	ol9_x86_64_appstream
	openssl-libs-3.5.1-7.0.1.el9_7.i686.rpm	51a02495d0b8b6421223c3bb77eece109a5ebb526c283f66e6352920eb04243d	-	ol9_x86_64_baseos_latest
	openssl-libs-3.5.1-7.0.1.el9_7.i686.rpm	51a02495d0b8b6421223c3bb77eece109a5ebb526c283f66e6352920eb04243d	-	ol9_x86_64_u7_baseos_patch
	openssl-libs-3.5.1-7.0.1.el9_7.x86_64.rpm	17efcf91e14d9711a929c20bd83f4aa0dd3c9fa16cacd02f92ad23ca3d7e44d4	-	ol9_x86_64_baseos_latest
	openssl-libs-3.5.1-7.0.1.el9_7.x86_64.rpm	17efcf91e14d9711a929c20bd83f4aa0dd3c9fa16cacd02f92ad23ca3d7e44d4	-	ol9_x86_64_u7_baseos_patch
	openssl-perl-3.5.1-7.0.1.el9_7.x86_64.rpm	8629bbe5f13fd7edc93408c7f3a09da151da28ecd8429add4a8dc699ed73b25b	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team