ELSA-2026-67154-0

ELSA-2026-67154-0 - openssl security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-14

Description

[3.5.8-1.0.1]
- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]

[1:3.5.8-1]
- Rebase to OpenSSL 3.5.8
Resolves: RHEL-242944
Resolves: RHEL-246254
Resolves: RHEL-246266
Resolves: RHEL-246306
Resolves: RHEL-246437
Resolves: RHEL-246441
Resolves: RHEL-246445
Resolves: RHEL-246449
Resolves: RHEL-246453

[1:3.5.5-7]
- Backport the 'HollowByte' hardening patch
Resolves: RHEL-212362

Related CVEs

CVE-2026-14456

CVE-2026-14457

CVE-2026-18798

CVE-2026-54874

CVE-2026-63072

CVE-2026-63073

CVE-2026-63074

CVE-2026-63075

CVE-2026-63076

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 10 (aarch64)	openssl-3.5.8-1.0.1.el10_2.src.rpm	dfed04afe055cf6a8c23944c84461a572b7449fd529cdb3f8c8e21036e3fb78e	-	ol10_aarch64_appstream
	openssl-3.5.8-1.0.1.el10_2.src.rpm	dfed04afe055cf6a8c23944c84461a572b7449fd529cdb3f8c8e21036e3fb78e	-	ol10_aarch64_baseos_latest
	openssl-3.5.8-1.0.1.el10_2.src.rpm	dfed04afe055cf6a8c23944c84461a572b7449fd529cdb3f8c8e21036e3fb78e	-	ol10_aarch64_u2_baseos_patch
	openssl-3.5.8-1.0.1.el10_2.aarch64.rpm	46ced9e4fa23c4c6c0bb020adceb5860725b93171306fbf2c4517d269aa77410	-	ol10_aarch64_baseos_latest
	openssl-3.5.8-1.0.1.el10_2.aarch64.rpm	46ced9e4fa23c4c6c0bb020adceb5860725b93171306fbf2c4517d269aa77410	-	ol10_aarch64_u2_baseos_patch
	openssl-devel-3.5.8-1.0.1.el10_2.aarch64.rpm	4e4c182ceea518acf793bdf1ad5b7107258d18f687586f87380dd589e281ce73	-	ol10_aarch64_appstream
	openssl-libs-3.5.8-1.0.1.el10_2.aarch64.rpm	6c5b17ca3526741c805b0437a32f2ec35948de2302bc7bca1dd9ea29364a184e	-	ol10_aarch64_baseos_latest
	openssl-libs-3.5.8-1.0.1.el10_2.aarch64.rpm	6c5b17ca3526741c805b0437a32f2ec35948de2302bc7bca1dd9ea29364a184e	-	ol10_aarch64_u2_baseos_patch
	openssl-perl-3.5.8-1.0.1.el10_2.aarch64.rpm	751b8f92f4abe09387dcfd520f9e37d5ed1847dc4714448bbbe09789e886414a	-	ol10_aarch64_appstream
Oracle Linux 10 (x86_64)	openssl-3.5.8-1.0.1.el10_2.src.rpm	dfed04afe055cf6a8c23944c84461a572b7449fd529cdb3f8c8e21036e3fb78e	-	ol10_x86_64_appstream
	openssl-3.5.8-1.0.1.el10_2.src.rpm	dfed04afe055cf6a8c23944c84461a572b7449fd529cdb3f8c8e21036e3fb78e	-	ol10_x86_64_baseos_latest
	openssl-3.5.8-1.0.1.el10_2.src.rpm	dfed04afe055cf6a8c23944c84461a572b7449fd529cdb3f8c8e21036e3fb78e	-	ol10_x86_64_u2_baseos_patch
	openssl-3.5.8-1.0.1.el10_2.x86_64.rpm	1144e54c7cac1b8df3936d589f62cc74df7925269af5d1f198aa7e4009141de4	-	ol10_x86_64_baseos_latest
	openssl-3.5.8-1.0.1.el10_2.x86_64.rpm	1144e54c7cac1b8df3936d589f62cc74df7925269af5d1f198aa7e4009141de4	-	ol10_x86_64_u2_baseos_patch
	openssl-devel-3.5.8-1.0.1.el10_2.x86_64.rpm	e008f88d14266e0b54364e00f984a01eb5076c07e7f0a0a0c2e3cff19243d302	-	ol10_x86_64_appstream
	openssl-libs-3.5.8-1.0.1.el10_2.x86_64.rpm	305c820e0f361f2d3f8c5083a8fcb478aaeaf0adfb4336803863892f08b40b93	-	ol10_x86_64_baseos_latest
	openssl-libs-3.5.8-1.0.1.el10_2.x86_64.rpm	305c820e0f361f2d3f8c5083a8fcb478aaeaf0adfb4336803863892f08b40b93	-	ol10_x86_64_u2_baseos_patch
	openssl-perl-3.5.8-1.0.1.el10_2.x86_64.rpm	cf9ec7e06ac7782586c44671a80f994dd6f2a7b75f1de725816f98484edb50c1	-	ol10_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team