ELSA-2026-500448

ELSA-2026-500448 - openssl security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-20

Description

[3.5.8-2.0.1_fips]
- Replace upstream references in fips man pages [Orabug: 35824276]
- Update additional upstream references
- Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35824276]
- Update FIPS module name [Orabug: 35824276]
- Enable openssl-fips-provider dependency [Orabug: 36504822]
- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]

[3.5.8-2.0.1]
- Replace upstream references [Orabug: 34340177]

[1:3.5.8-2]
- Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782)
Resolves: RHEL-264479

Related CVEs

CVE-2026-84782

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssl-3.5.8-2.0.1.el9_8_fips.src.rpm	46800f39f9193b90893bda5c58eb631705f6802bd44cdef71b15cdaf5317d543	-	ol9_aarch64_u3_security_validation
	openssl-3.5.8-2.0.1.el9_8_fips.aarch64.rpm	0bdd15949585b74f14b9ffe026099c7628c51d8c319e80a2ddf2ac1daf26a7f1	-	ol9_aarch64_u3_security_validation
	openssl-devel-3.5.8-2.0.1.el9_8_fips.aarch64.rpm	7a3499d2bb612e32cdd192380ad6927a39940c89f93c30c9dea55b00c47a6309	-	ol9_aarch64_u3_security_validation
	openssl-libs-3.5.8-2.0.1.el9_8_fips.aarch64.rpm	f038c92e45ad189a82afbbadda1802129a56ef62a92b2ebadf2ba2511ba784ee	-	ol9_aarch64_u3_security_validation
	openssl-perl-3.5.8-2.0.1.el9_8_fips.aarch64.rpm	d04b282c47c5a4b73f2ab53225fb3b1abeaddabf6bbe040547181ac81a6d377d	-	ol9_aarch64_u3_security_validation
Oracle Linux 9 (x86_64)	openssl-3.5.8-2.0.1.el9_8_fips.src.rpm	46800f39f9193b90893bda5c58eb631705f6802bd44cdef71b15cdaf5317d543	-	ol9_x86_64_u3_security_validation
	openssl-3.5.8-2.0.1.el9_8_fips.x86_64.rpm	ab953cca36335accb2ba68307f989895d58c401d0ab31b34bce44a7bb1bc6e96	-	ol9_x86_64_u3_security_validation
	openssl-devel-3.5.8-2.0.1.el9_8_fips.i686.rpm	5312b98f98ed8587fc39f47b49930e762d0c117747d0b9640f341a992a5a4f0a	-	ol9_x86_64_u3_security_validation
	openssl-devel-3.5.8-2.0.1.el9_8_fips.x86_64.rpm	d70582b3510c5a42d7d170605809b4fffc8ce4f4c4cb9ee61105fd12c2076402	-	ol9_x86_64_u3_security_validation
	openssl-libs-3.5.8-2.0.1.el9_8_fips.i686.rpm	d24aceddfbe0f59321c39446cb7ba2600d1c42816e77e0ebe9d6c2d56938feca	-	ol9_x86_64_u3_security_validation
	openssl-libs-3.5.8-2.0.1.el9_8_fips.x86_64.rpm	7fcd491682743e2605385fdf51c0c00244b9bb8324306615446008b8ab019e2b	-	ol9_x86_64_u3_security_validation
	openssl-perl-3.5.8-2.0.1.el9_8_fips.x86_64.rpm	d31612c332885f5f53b20e4e4f90cc72159beac30552f0ab1472cd991d7a4b49	-	ol9_x86_64_u3_security_validation

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team