ELSA-2026-80514

ELSA-2026-80514 - compat-openssl11 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-10-11

Description

[1:1.1.1k-5.6]
- Fixes CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Resolves: RHEL-265517

[1:1.1.1k-5.5]
- Fixes CVE-2026-63072: Heap buffer overflow in CMS key unwrapping
Resolves: RHEL-246280

Related CVEs

CVE-2026-63072

CVE-2026-84782

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	compat-openssl11-1.1.1k-5.el9_8.6.src.rpm	b485ab15cc8c2bdc178da73ada37f2c99774de0a22be37cc708fa26f5e5c545b	-	ol9_aarch64_appstream
	compat-openssl11-1.1.1k-5.el9_8.6.aarch64.rpm	bed27953026539f0528bf740dd46b1f0e794151373af34aa6a3ac398a8b786ea	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	compat-openssl11-1.1.1k-5.el9_8.6.src.rpm	b485ab15cc8c2bdc178da73ada37f2c99774de0a22be37cc708fa26f5e5c545b	-	ol9_x86_64_appstream
	compat-openssl11-1.1.1k-5.el9_8.6.i686.rpm	fa6107dd66eb2dc43d0e4990803e639e09e03df55cd17483e97d99cac3cbc4a7	-	ol9_x86_64_appstream
	compat-openssl11-1.1.1k-5.el9_8.6.x86_64.rpm	50dd01f06d94351fff2a54a370dd08c2a0cc6387aa92e824512c8463d412828d	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team