ELSA-2026-500440

ELSA-2026-500440 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-19

Description

[3.5.8-2.0.1]
- Replace upstream references [Orabug: 34340177]

[1:3.5.8-2]
- Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782)
Resolves: RHEL-264479

[1:3.5.8-1]
- Rebase to OpenSSL 3.5.8
Resolves: RHEL-242945
Resolves: RHEL-246260
Resolves: RHEL-246284
Resolves: RHEL-246319
Resolves: RHEL-246439
Resolves: RHEL-246443
Resolves: RHEL-246447
Resolves: RHEL-246451
Resolves: RHEL-246455

[1:3.5.5-7]
- Backport the 'HollowByte' hardening patch
Resolves: RHEL-232828

[1:3.5.5-6]
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
Resolves: RHEL-210862

[1:3.5.5-5]
- Patch asn1_d2i_read_bio to read headers without blocking
Resolves: RHEL-178642

[1:3.5.5-4]
Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179274
Resolves: RHEL-179287
Resolves: RHEL-179539
Resolves: RHEL-179544
Resolves: RHEL-179547
Resolves: RHEL-179552
Resolves: RHEL-179556
Resolves: RHEL-179633
Resolves: RHEL-179661
Resolves: RHEL-179678
Resolves: RHEL-179684
Resolves: RHEL-179688
Resolves: RHEL-179691
Resolves: RHEL-179696
Resolves: RHEL-179699

[1:3.5.5-3]
- Fix CVE-2026-28390
Resolves: RHEL-165870

[1:3.5.5-2]
- Fix CVE-2026-31790
Resolves: RHEL-161586

[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5
Resolves: RHEL-136895
Resolves: RHEL-142004
Resolves: RHEL-142012
Resolves: RHEL-142020
Resolves: RHEL-142024
Resolves: RHEL-142028
Resolves: RHEL-142032
Resolves: RHEL-142036
Resolves: RHEL-142040
Resolves: RHEL-142044
Resolves: RHEL-142048
Resolves: RHEL-142052
Resolves: RHEL-142056

Related CVEs

CVE-2026-84782

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssl-3.5.8-2.0.1.ksplice1.el9_8.src.rpm	d6142fbfeff40254d6efb0c514974c02029e19ea35a38bbb2af67d7a4eea1598	-	ol9_aarch64_userspace_ksplice
	openssl-3.5.8-2.0.1.ksplice1.el9_8.aarch64.rpm	cd355098221fee046e8c53a108408bb72ba9b0cfb4de55bae41f53cd2dc8d5e7	-	ol9_aarch64_userspace_ksplice
	openssl-devel-3.5.8-2.0.1.ksplice1.el9_8.aarch64.rpm	ec3c151e9168377ace8cb1a21e3e1cf919a8b2038cfaf28334c185b32f0c6d8a	-	ol9_aarch64_userspace_ksplice
	openssl-libs-3.5.8-2.0.1.ksplice1.el9_8.aarch64.rpm	7fe85b4191e7cb62af38b1cb38935ce1e70831389419fd6d7a674d0d0eb1b0c2	-	ol9_aarch64_userspace_ksplice
	openssl-perl-3.5.8-2.0.1.ksplice1.el9_8.aarch64.rpm	1137ac10b397c09a0d1efc1f1c5559e8a984ee2181262376ff794abc294c7ca8	-	ol9_aarch64_userspace_ksplice
Oracle Linux 9 (x86_64)	openssl-3.5.8-2.0.1.ksplice1.el9_8.src.rpm	d6142fbfeff40254d6efb0c514974c02029e19ea35a38bbb2af67d7a4eea1598	-	ol9_x86_64_userspace_ksplice
	openssl-3.5.8-2.0.1.ksplice1.el9_8.x86_64.rpm	bc620d57d898cb6e217d9fd1fddd29351b1892f822b521bb7e1ef5db76ba6a57	-	ol9_x86_64_userspace_ksplice
	openssl-devel-3.5.8-2.0.1.ksplice1.el9_8.i686.rpm	4f18e7c950b0b9f850e348b295951a62ddcb24c3ccb4ff05868caa0018e18391	-	ol9_x86_64_userspace_ksplice
	openssl-devel-3.5.8-2.0.1.ksplice1.el9_8.x86_64.rpm	89ba7265f2d217593dafae91284e93f64c2ff3058422e995fb637d4860b9ab48	-	ol9_x86_64_userspace_ksplice
	openssl-libs-3.5.8-2.0.1.ksplice1.el9_8.i686.rpm	dc87d137ba764022143d04c61ea986536240a04b65ca55ed8a2eb0bb33343a06	-	ol9_x86_64_userspace_ksplice
	openssl-libs-3.5.8-2.0.1.ksplice1.el9_8.x86_64.rpm	3cd1bddaea382a42226237dda5bff40805abad2124a95b47eaae19240e809486	-	ol9_x86_64_userspace_ksplice
	openssl-perl-3.5.8-2.0.1.ksplice1.el9_8.x86_64.rpm	c485547db071ac1a85f1a7e693726fc80fe7ffef23335036f47f04c8ecce31be	-	ol9_x86_64_userspace_ksplice

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team