ELSA-2026-85968

ELSA-2026-85968 - openssl security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-20

Description


[1:1.1.1k-18]
- Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping
Resolves: RHEL-246295
- Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Resolves: RHEL-264420


Related CVEs


CVE-2026-63072
CVE-2026-84782

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) openssl-1.1.1k-18.el8_6.src.rpmd336b84886f1d546d8d5a221ca15ce78ec20ab7e8ae465ac05099365a0903034-ol8_aarch64_baseos_latest
openssl-1.1.1k-18.el8_6.src.rpmd336b84886f1d546d8d5a221ca15ce78ec20ab7e8ae465ac05099365a0903034-ol8_aarch64_u10_baseos_patch
openssl-1.1.1k-18.el8_6.aarch64.rpm8217fcbdc80f78624603f474d43915a38e32e31243970982647a04f12c168529-ol8_aarch64_baseos_latest
openssl-1.1.1k-18.el8_6.aarch64.rpm8217fcbdc80f78624603f474d43915a38e32e31243970982647a04f12c168529-ol8_aarch64_u10_baseos_patch
openssl-devel-1.1.1k-18.el8_6.aarch64.rpm4c5c85a6793d82cf20988ffc60ff5d225fa550f9182873ac2ebf773ea95090a8-ol8_aarch64_baseos_latest
openssl-devel-1.1.1k-18.el8_6.aarch64.rpm4c5c85a6793d82cf20988ffc60ff5d225fa550f9182873ac2ebf773ea95090a8-ol8_aarch64_u10_baseos_patch
openssl-libs-1.1.1k-18.el8_6.aarch64.rpm85a712b51cd5645b5019ecb7486fa1e438c8d4365172a8c39074f9e0c77208b2-ol8_aarch64_baseos_latest
openssl-libs-1.1.1k-18.el8_6.aarch64.rpm85a712b51cd5645b5019ecb7486fa1e438c8d4365172a8c39074f9e0c77208b2-ol8_aarch64_u10_baseos_patch
openssl-perl-1.1.1k-18.el8_6.aarch64.rpmc6c4967cc5bb04b22acdbba2e750bb131d740fe205faf939ec0cac50fa0a8499-ol8_aarch64_baseos_latest
openssl-perl-1.1.1k-18.el8_6.aarch64.rpmc6c4967cc5bb04b22acdbba2e750bb131d740fe205faf939ec0cac50fa0a8499-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) openssl-1.1.1k-18.el8_6.src.rpmd336b84886f1d546d8d5a221ca15ce78ec20ab7e8ae465ac05099365a0903034-ol8_x86_64_baseos_latest
openssl-1.1.1k-18.el8_6.src.rpmd336b84886f1d546d8d5a221ca15ce78ec20ab7e8ae465ac05099365a0903034-ol8_x86_64_u10_baseos_patch
openssl-1.1.1k-18.el8_6.x86_64.rpm6016e9240f5a1575b941fb0fda2c3b03e44bde4591fb27388570ddecc4c32016-ol8_x86_64_baseos_latest
openssl-1.1.1k-18.el8_6.x86_64.rpm6016e9240f5a1575b941fb0fda2c3b03e44bde4591fb27388570ddecc4c32016-ol8_x86_64_u10_baseos_patch
openssl-devel-1.1.1k-18.el8_6.i686.rpm664eb5c746dbcb63d45cbfddee75336067dd25417748f7881e9cfdafd95c301e-ol8_x86_64_baseos_latest
openssl-devel-1.1.1k-18.el8_6.i686.rpm664eb5c746dbcb63d45cbfddee75336067dd25417748f7881e9cfdafd95c301e-ol8_x86_64_u10_baseos_patch
openssl-devel-1.1.1k-18.el8_6.x86_64.rpmc1b3c6cbb142221de5f10a53f34dc08ed1bd24c5c7fa681195722db736ae8951-ol8_x86_64_baseos_latest
openssl-devel-1.1.1k-18.el8_6.x86_64.rpmc1b3c6cbb142221de5f10a53f34dc08ed1bd24c5c7fa681195722db736ae8951-ol8_x86_64_u10_baseos_patch
openssl-libs-1.1.1k-18.el8_6.i686.rpmd782cf44e1a2159de09b691d7dde33ddabf19e0f530fa2df80720c6fb93dd27b-ol8_x86_64_baseos_latest
openssl-libs-1.1.1k-18.el8_6.i686.rpmd782cf44e1a2159de09b691d7dde33ddabf19e0f530fa2df80720c6fb93dd27b-ol8_x86_64_u10_baseos_patch
openssl-libs-1.1.1k-18.el8_6.x86_64.rpmff6c09949cf8e51110640b1931d3ce3fa8626bea35ef9f6eead5aad4aa11efe5-ol8_x86_64_baseos_latest
openssl-libs-1.1.1k-18.el8_6.x86_64.rpmff6c09949cf8e51110640b1931d3ce3fa8626bea35ef9f6eead5aad4aa11efe5-ol8_x86_64_u10_baseos_patch
openssl-perl-1.1.1k-18.el8_6.x86_64.rpm42027181e5902ef012aaa304c02fde1342d8d8eabbe1495454d379db2218cc4e-ol8_x86_64_baseos_latest
openssl-perl-1.1.1k-18.el8_6.x86_64.rpm42027181e5902ef012aaa304c02fde1342d8d8eabbe1495454d379db2218cc4e-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete