ELSA-2026-50345

ELSA-2026-50345 - openssl security fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-06-24

Description

[3.5.5-3.0.1]
- Replace upstream references in fips man pages [Orabug: 35824276]
- Update additional upstream references
- Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35824276]
- Update FIPS module name [Orabug: 35824276]
- Enable openssl-fips-provider dependency [Orabug: 36504822]
- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
- Replace upstream references [Orabug: 34340177]

[1:3.5.5-3]
- Fix CVE-2026-28390
Resolves: RHEL-165870

[1:3.5.5-2]
- Fix CVE-2026-31790
Resolves: RHEL-161586

[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5
Resolves: RHEL-136895
Resolves: RHEL-142004
Resolves: RHEL-142012
Resolves: RHEL-142020
Resolves: RHEL-142024
Resolves: RHEL-142028
Resolves: RHEL-142032
Resolves: RHEL-142036
Resolves: RHEL-142040
Resolves: RHEL-142044
Resolves: RHEL-142048
Resolves: RHEL-142052
Resolves: RHEL-142056

Related CVEs

CVE-2026-28390

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssl-3.5.5-3.0.1.el9_8_fips.src.rpm	762ac053997a7e790236d4e3986cc07e6fb9171ea9f2f4a0d6f2b87d28a7e218	-	ol9_aarch64_u3_security_validation
	openssl-3.5.5-3.0.1.el9_8_fips.aarch64.rpm	928c0d0468533b3fdb3291a910370f163f90783c5e38a163235a391b594a81e6	-	ol9_aarch64_u3_security_validation
	openssl-devel-3.5.5-3.0.1.el9_8_fips.aarch64.rpm	e872fc341efbed4ba2b203272abe2ebf1f92c06ffff25eb4c450fde88e125359	-	ol9_aarch64_u3_security_validation
	openssl-libs-3.5.5-3.0.1.el9_8_fips.aarch64.rpm	5cb0f4130781f42238cc2f8b84eeb5415fb5d2fe97146a8fe41573b0d5bfd8e1	-	ol9_aarch64_u3_security_validation
	openssl-perl-3.5.5-3.0.1.el9_8_fips.aarch64.rpm	067505cf5d3322293ccdd09a27d695f923263cddd9df83d81125aeba8e2ff45d	-	ol9_aarch64_u3_security_validation
Oracle Linux 9 (x86_64)	openssl-3.5.5-3.0.1.el9_8_fips.src.rpm	762ac053997a7e790236d4e3986cc07e6fb9171ea9f2f4a0d6f2b87d28a7e218	-	ol9_x86_64_u3_security_validation
	openssl-3.5.5-3.0.1.el9_8_fips.x86_64.rpm	3889c8836206958356231b260af21a6dc05310e73295107a72ea9eb808c811cc	-	ol9_x86_64_u3_security_validation
	openssl-devel-3.5.5-3.0.1.el9_8_fips.i686.rpm	6a87834dfad766f1a8310e270098a71672a24212eecf810ba00513ae8ef81a8c	-	ol9_x86_64_u3_security_validation
	openssl-devel-3.5.5-3.0.1.el9_8_fips.x86_64.rpm	d767f3994e94ac6bab9114a70807c2fc091c685b6cbfd228750df6fdda71fb55	-	ol9_x86_64_u3_security_validation
	openssl-libs-3.5.5-3.0.1.el9_8_fips.i686.rpm	b7f2234b3848c8c4c6e5aefd851c8bf244ead415dae168fb40abc08ef2f4328e	-	ol9_x86_64_u3_security_validation
	openssl-libs-3.5.5-3.0.1.el9_8_fips.x86_64.rpm	0ae191e7efd8d0345ee5fa3b9143978a01fd664e254874f4baa4039e48554402	-	ol9_x86_64_u3_security_validation
	openssl-perl-3.5.5-3.0.1.el9_8_fips.x86_64.rpm	2f5545e1205200844ff4ee1da5dc5e9c7426caaa8f201ca7465db1061854b4b6	-	ol9_x86_64_u3_security_validation

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team