ELSA-2026-500441

ELSA-2026-500441 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-19

Description

[3.5.8-2.0.1]
- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]

[1:3.5.8-2]
- Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782)
Resolves: RHEL-264466

[1:3.5.8-1]
- Rebase to OpenSSL 3.5.8
Resolves: RHEL-242944
Resolves: RHEL-246254
Resolves: RHEL-246266
Resolves: RHEL-246306
Resolves: RHEL-246437
Resolves: RHEL-246441
Resolves: RHEL-246445
Resolves: RHEL-246449
Resolves: RHEL-246453

[1:3.5.5-7]
- Backport the 'HollowByte' hardening patch
Resolves: RHEL-212362

[1:3.5.5-6]
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary
Resolves: RHEL-210864

[1:3.5.5-5]
- Patch asn1_d2i_read_bio to read headers without blocking
Resolves: RHEL-169991

[1:3.5.5-4]
Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,
CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,
CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,
CVE-2026-34182.
Resolves: RHEL-179267
Resolves: RHEL-179281
Resolves: RHEL-179537
Resolves: RHEL-179542
Resolves: RHEL-179545
Resolves: RHEL-179550
Resolves: RHEL-179553
Resolves: RHEL-179626
Resolves: RHEL-179658
Resolves: RHEL-179675
Resolves: RHEL-179682
Resolves: RHEL-179685
Resolves: RHEL-179689
Resolves: RHEL-179693
Resolves: RHEL-179697

[1:3.5.5-3]
- Fix CVE-2026-28390
Resolves: RHEL-165705

[1:3.5.5-2]
- Fix CVE-2026-31790
Resolves: RHEL-161574

[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5
Resolves: RHEL-122599
Resolves: RHEL-141987
Resolves: RHEL-142009
Resolves: RHEL-142022
Resolves: RHEL-142026
Resolves: RHEL-142030
Resolves: RHEL-142034
Resolves: RHEL-142038
Resolves: RHEL-142042
Resolves: RHEL-142046
Resolves: RHEL-142050
Resolves: RHEL-142054

Related CVEs

CVE-2026-84782

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	openssl-3.5.8-2.0.1.ksplice1.el10_2.src.rpm	9481df07915903086b3dffdd85794127ab2057a0e7018d88dbe77932ae7d2ceb	-	ol10_aarch64_userspace_ksplice
	openssl-3.5.8-2.0.1.ksplice1.el10_2.aarch64.rpm	2438d7e35ca70f730db79426b7d7d5684ac79af563f115e27d5480856a07ea42	-	ol10_aarch64_userspace_ksplice
	openssl-devel-3.5.8-2.0.1.ksplice1.el10_2.aarch64.rpm	15829b90604373ba5fd88ffb43e99972f890021cd6311ca3f95ca74c23c1d1a9	-	ol10_aarch64_userspace_ksplice
	openssl-libs-3.5.8-2.0.1.ksplice1.el10_2.aarch64.rpm	d4b473559461b7280777c20f10fd35840c31fd4d8bee801e554fb39f8c4f478a	-	ol10_aarch64_userspace_ksplice
	openssl-perl-3.5.8-2.0.1.ksplice1.el10_2.aarch64.rpm	2278964dae18b83774b67ba5850965f09824d3f1a7522b453615b12dd3c735b3	-	ol10_aarch64_userspace_ksplice
Oracle Linux 10 (x86_64)	openssl-3.5.8-2.0.1.ksplice1.el10_2.src.rpm	9481df07915903086b3dffdd85794127ab2057a0e7018d88dbe77932ae7d2ceb	-	ol10_x86_64_userspace_ksplice
	openssl-3.5.8-2.0.1.ksplice1.el10_2.x86_64.rpm	8a5affcb919577be6a3ace046c0e24b5209f63559792f17fba67d61021b6c3d1	-	ol10_x86_64_userspace_ksplice
	openssl-devel-3.5.8-2.0.1.ksplice1.el10_2.x86_64.rpm	c97f1c64c06bc9c10d37244b8ca2d1e7ce81b05bf6d266574f142411fea58499	-	ol10_x86_64_userspace_ksplice
	openssl-libs-3.5.8-2.0.1.ksplice1.el10_2.x86_64.rpm	05d43be26c00074fd138771b28fb104c378c86621133ed6bc22483e3213ee41a	-	ol10_x86_64_userspace_ksplice
	openssl-perl-3.5.8-2.0.1.ksplice1.el10_2.x86_64.rpm	1a90f3620ac2c27bf94c39af831abf79889817d924806a9922eefb916ae94967	-	ol10_x86_64_userspace_ksplice

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team