ELSA-2026-22314

ELSA-2026-22314 - openssl security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-07-23

Description

[3.5.5-5.0.1]
- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]

[1:3.5.5-5]
- Patch asn1_d2i_read_bio to read headers without blocking
Resolves: RHEL-169991

[1:3.5.5-4]
- Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179267
Resolves: RHEL-179281
Resolves: RHEL-179537
Resolves: RHEL-179542
Resolves: RHEL-179545
Resolves: RHEL-179550
Resolves: RHEL-179553
Resolves: RHEL-179626
Resolves: RHEL-179658
Resolves: RHEL-179675
Resolves: RHEL-179682
Resolves: RHEL-179685
Resolves: RHEL-179689
Resolves: RHEL-179693
Resolves: RHEL-179697

[1:3.5.5-3]
- Fix CVE-2026-28390
Resolves: RHEL-165705

Related CVEs

CVE-2026-28390

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	openssl-3.5.5-5.0.1.el10_2.src.rpm	9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae	-	ol10_aarch64_appstream
	openssl-3.5.5-5.0.1.el10_2.src.rpm	9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae	-	ol10_aarch64_baseos_latest
	openssl-3.5.5-5.0.1.el10_2.src.rpm	9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae	-	ol10_aarch64_u2_baseos_patch
	openssl-3.5.5-5.0.1.el10_2.aarch64.rpm	7f1faeeb650abee3d7e3c1c8b9d331bc81be12df0612fae973ad86c133f4c8c6	-	ol10_aarch64_baseos_latest
	openssl-3.5.5-5.0.1.el10_2.aarch64.rpm	7f1faeeb650abee3d7e3c1c8b9d331bc81be12df0612fae973ad86c133f4c8c6	-	ol10_aarch64_u2_baseos_patch
	openssl-devel-3.5.5-5.0.1.el10_2.aarch64.rpm	ab0639b9b8178490ee663a59d96515b4e38389674b6a031da68e05ca624820ad	-	ol10_aarch64_appstream
	openssl-libs-3.5.5-5.0.1.el10_2.aarch64.rpm	81eb5bea45e65dfc34835b566be6e22af27f1bd03056088c0ac17ae995dab432	-	ol10_aarch64_baseos_latest
	openssl-libs-3.5.5-5.0.1.el10_2.aarch64.rpm	81eb5bea45e65dfc34835b566be6e22af27f1bd03056088c0ac17ae995dab432	-	ol10_aarch64_u2_baseos_patch
	openssl-perl-3.5.5-5.0.1.el10_2.aarch64.rpm	770fcea68a36cc895c34e58dd4122bba65e91bab63f193cdfdadba7ce7303b59	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	openssl-3.5.5-5.0.1.el10_2.src.rpm	9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae	-	ol10_x86_64_appstream
	openssl-3.5.5-5.0.1.el10_2.src.rpm	9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae	-	ol10_x86_64_baseos_latest
	openssl-3.5.5-5.0.1.el10_2.src.rpm	9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae	-	ol10_x86_64_u2_baseos_patch
	openssl-3.5.5-5.0.1.el10_2.x86_64.rpm	e8ee4c9eb950c9423c3f869cc0340228b1fafe5a3348199afde2afbb28a36804	-	ol10_x86_64_baseos_latest
	openssl-3.5.5-5.0.1.el10_2.x86_64.rpm	e8ee4c9eb950c9423c3f869cc0340228b1fafe5a3348199afde2afbb28a36804	-	ol10_x86_64_u2_baseos_patch
	openssl-devel-3.5.5-5.0.1.el10_2.x86_64.rpm	86a70fecb7343828114d5fcf3bcb29e80e175f8e1e9739cd6c778d326d9c71e2	-	ol10_x86_64_appstream
	openssl-libs-3.5.5-5.0.1.el10_2.x86_64.rpm	b9146339869ed1c071ec65e6f977c7e78d8ffd1ce30487ebc1daeca655e31c48	-	ol10_x86_64_baseos_latest
	openssl-libs-3.5.5-5.0.1.el10_2.x86_64.rpm	b9146339869ed1c071ec65e6f977c7e78d8ffd1ce30487ebc1daeca655e31c48	-	ol10_x86_64_u2_baseos_patch
	openssl-perl-3.5.5-5.0.1.el10_2.x86_64.rpm	7aa54122d778b7079f855445b0b0fbaf4fe1948316c9d99ecafa9193f31b41d8	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team