ELSA-2026-67165-0

ELSA-2026-67165-0 - openssl security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-14

Description

[3.5.8-1.0.1]
- Replace upstream references [Orabug: 34340177]

[3.5.8.openela.0.1]
- Add OpenELA specific changes

[1:3.5.8-1]
- Rebase to OpenSSL 3.5.8
Resolves: RHEL-242945
Resolves: RHEL-246260
Resolves: RHEL-246284
Resolves: RHEL-246319
Resolves: RHEL-246439
Resolves: RHEL-246443
Resolves: RHEL-246447
Resolves: RHEL-246451
Resolves: RHEL-246455

[1:3.5.5-7]
- Backport the 'HollowByte' hardening patch
Resolves: RHEL-232828

Related CVEs

CVE-2026-14456

CVE-2026-14457

CVE-2026-18798

CVE-2026-54874

CVE-2026-63072

CVE-2026-63073

CVE-2026-63074

CVE-2026-63075

CVE-2026-63076

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	openssl-3.5.8-1.0.1.el9_8.src.rpm	ab17a6d36fc32c11f136e92bfb93d85b8eb0e02b124c33ceda6b19aea375c7c9	-	ol9_aarch64_appstream
	openssl-3.5.8-1.0.1.el9_8.src.rpm	ab17a6d36fc32c11f136e92bfb93d85b8eb0e02b124c33ceda6b19aea375c7c9	-	ol9_aarch64_baseos_latest
	openssl-3.5.8-1.0.1.el9_8.src.rpm	ab17a6d36fc32c11f136e92bfb93d85b8eb0e02b124c33ceda6b19aea375c7c9	-	ol9_aarch64_u8_baseos_patch
	openssl-3.5.8-1.0.1.el9_8.aarch64.rpm	72f367d6c488256ebfed8cc1a30dcd3d128ff2a49e94014a9d0a93b3c43b0b64	-	ol9_aarch64_baseos_latest
	openssl-3.5.8-1.0.1.el9_8.aarch64.rpm	72f367d6c488256ebfed8cc1a30dcd3d128ff2a49e94014a9d0a93b3c43b0b64	-	ol9_aarch64_u8_baseos_patch
	openssl-devel-3.5.8-1.0.1.el9_8.aarch64.rpm	e0f331c7fdb524f1767ab533606a06d7b9ba4517a030d089910be99a2e11479b	-	ol9_aarch64_appstream
	openssl-libs-3.5.8-1.0.1.el9_8.aarch64.rpm	a854d825406ef27851d3ffd75a0d867acc4901c65da791a75384a21ce9e814fb	-	ol9_aarch64_baseos_latest
	openssl-libs-3.5.8-1.0.1.el9_8.aarch64.rpm	a854d825406ef27851d3ffd75a0d867acc4901c65da791a75384a21ce9e814fb	-	ol9_aarch64_u8_baseos_patch
	openssl-perl-3.5.8-1.0.1.el9_8.aarch64.rpm	65ee83f3e1fd2e09e1f885edbb382279db945bcd69c63ee9ac53eebe26f2648e	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	openssl-3.5.8-1.0.1.el9_8.src.rpm	ab17a6d36fc32c11f136e92bfb93d85b8eb0e02b124c33ceda6b19aea375c7c9	-	ol9_x86_64_appstream
	openssl-3.5.8-1.0.1.el9_8.src.rpm	ab17a6d36fc32c11f136e92bfb93d85b8eb0e02b124c33ceda6b19aea375c7c9	-	ol9_x86_64_baseos_latest
	openssl-3.5.8-1.0.1.el9_8.src.rpm	ab17a6d36fc32c11f136e92bfb93d85b8eb0e02b124c33ceda6b19aea375c7c9	-	ol9_x86_64_u8_baseos_patch
	openssl-3.5.8-1.0.1.el9_8.x86_64.rpm	b03c659d53605d2a95c5e2f629810a7ab0ed82eccee9441dbc74a7aff3de7e87	-	ol9_x86_64_baseos_latest
	openssl-3.5.8-1.0.1.el9_8.x86_64.rpm	b03c659d53605d2a95c5e2f629810a7ab0ed82eccee9441dbc74a7aff3de7e87	-	ol9_x86_64_u8_baseos_patch
	openssl-devel-3.5.8-1.0.1.el9_8.i686.rpm	247c1a2d3ac897c9d26f41669ea1e034436aa392a33bd1641122f674753612fd	-	ol9_x86_64_appstream
	openssl-devel-3.5.8-1.0.1.el9_8.x86_64.rpm	f714fcd39bb103cd4d4c4df5de8274bdc82ba08fea180bca23edc7baf138371c	-	ol9_x86_64_appstream
	openssl-libs-3.5.8-1.0.1.el9_8.i686.rpm	52ba250e3b7a1d5bcbbfc349a13469161f38b7b5800ca1a79763cb6afc0b517f	-	ol9_x86_64_baseos_latest
	openssl-libs-3.5.8-1.0.1.el9_8.i686.rpm	52ba250e3b7a1d5bcbbfc349a13469161f38b7b5800ca1a79763cb6afc0b517f	-	ol9_x86_64_u8_baseos_patch
	openssl-libs-3.5.8-1.0.1.el9_8.x86_64.rpm	a59db90c00ac8d39906c99e75ecd79e5368d9038772e63af4a1916389abe3091	-	ol9_x86_64_baseos_latest
	openssl-libs-3.5.8-1.0.1.el9_8.x86_64.rpm	a59db90c00ac8d39906c99e75ecd79e5368d9038772e63af4a1916389abe3091	-	ol9_x86_64_u8_baseos_patch
	openssl-perl-3.5.8-1.0.1.el9_8.x86_64.rpm	511a49105f1efdce4560aac8e7fcd0f822c1ba28e1ae9943c48f1396e02d35d5	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team