ELSA-2026-25237
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-25237
ELSA-2026-25237 - openssl security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-07-28 |
Description
[3.5.5-5.0.1]
- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]
[1:3.5.5-5]
- Patch asn1_d2i_read_bio to read headers without blocking
Resolves: RHEL-169991
[1:3.5.5-4]
Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179267
Resolves: RHEL-179281
Resolves: RHEL-179537
Resolves: RHEL-179542
Resolves: RHEL-179545
Resolves: RHEL-179550
Resolves: RHEL-179553
Resolves: RHEL-179626
Resolves: RHEL-179658
Resolves: RHEL-179675
Resolves: RHEL-179682
Resolves: RHEL-179685
Resolves: RHEL-179689
Resolves: RHEL-179693
Resolves: RHEL-179697
[1:3.5.5-3]
- Fix CVE-2026-28390
Resolves: RHEL-165705
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 10 (aarch64) | openssl-3.5.5-5.0.1.el10_2.src.rpm | 9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae | - | ol10_aarch64_appstream |
| openssl-3.5.5-5.0.1.el10_2.src.rpm | 9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae | - | ol10_aarch64_baseos_latest | |
| openssl-3.5.5-5.0.1.el10_2.src.rpm | 9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae | - | ol10_aarch64_u2_baseos_patch | |
| openssl-3.5.5-5.0.1.el10_2.aarch64.rpm | 7f1faeeb650abee3d7e3c1c8b9d331bc81be12df0612fae973ad86c133f4c8c6 | - | ol10_aarch64_baseos_latest | |
| openssl-3.5.5-5.0.1.el10_2.aarch64.rpm | 7f1faeeb650abee3d7e3c1c8b9d331bc81be12df0612fae973ad86c133f4c8c6 | - | ol10_aarch64_u2_baseos_patch | |
| openssl-devel-3.5.5-5.0.1.el10_2.aarch64.rpm | ab0639b9b8178490ee663a59d96515b4e38389674b6a031da68e05ca624820ad | - | ol10_aarch64_appstream | |
| openssl-libs-3.5.5-5.0.1.el10_2.aarch64.rpm | 81eb5bea45e65dfc34835b566be6e22af27f1bd03056088c0ac17ae995dab432 | - | ol10_aarch64_baseos_latest | |
| openssl-libs-3.5.5-5.0.1.el10_2.aarch64.rpm | 81eb5bea45e65dfc34835b566be6e22af27f1bd03056088c0ac17ae995dab432 | - | ol10_aarch64_u2_baseos_patch | |
| openssl-perl-3.5.5-5.0.1.el10_2.aarch64.rpm | 770fcea68a36cc895c34e58dd4122bba65e91bab63f193cdfdadba7ce7303b59 | - | ol10_aarch64_appstream | |
| Oracle Linux 10 (x86_64) | openssl-3.5.5-5.0.1.el10_2.src.rpm | 9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae | - | ol10_x86_64_appstream |
| openssl-3.5.5-5.0.1.el10_2.src.rpm | 9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae | - | ol10_x86_64_baseos_latest | |
| openssl-3.5.5-5.0.1.el10_2.src.rpm | 9aae0d5e64f0c90bd54e211302e58b7e6998fc5ef4583f7af1a8e962fb4180ae | - | ol10_x86_64_u2_baseos_patch | |
| openssl-3.5.5-5.0.1.el10_2.x86_64.rpm | e8ee4c9eb950c9423c3f869cc0340228b1fafe5a3348199afde2afbb28a36804 | - | ol10_x86_64_baseos_latest | |
| openssl-3.5.5-5.0.1.el10_2.x86_64.rpm | e8ee4c9eb950c9423c3f869cc0340228b1fafe5a3348199afde2afbb28a36804 | - | ol10_x86_64_u2_baseos_patch | |
| openssl-devel-3.5.5-5.0.1.el10_2.x86_64.rpm | 86a70fecb7343828114d5fcf3bcb29e80e175f8e1e9739cd6c778d326d9c71e2 | - | ol10_x86_64_appstream | |
| openssl-libs-3.5.5-5.0.1.el10_2.x86_64.rpm | b9146339869ed1c071ec65e6f977c7e78d8ffd1ce30487ebc1daeca655e31c48 | - | ol10_x86_64_baseos_latest | |
| openssl-libs-3.5.5-5.0.1.el10_2.x86_64.rpm | b9146339869ed1c071ec65e6f977c7e78d8ffd1ce30487ebc1daeca655e31c48 | - | ol10_x86_64_u2_baseos_patch | |
| openssl-perl-3.5.5-5.0.1.el10_2.x86_64.rpm | 7aa54122d778b7079f855445b0b0fbaf4fe1948316c9d99ecafa9193f31b41d8 | - | ol10_x86_64_appstream | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
