{"cves":["CVE-2026-14456","CVE-2026-14457","CVE-2026-18798","CVE-2026-54874","CVE-2026-63072","CVE-2026-63073","CVE-2026-63074","CVE-2026-63075","CVE-2026-63076"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[3.5.8-1.0.1]\n- Replace upstream references [Orabug: 34340177]\n- Update FIPS provider name [Orabug: 35824276]\n\n[1:3.5.8-1]\n- Rebase to OpenSSL 3.5.8\n  Resolves: RHEL-242944\n  Resolves: RHEL-246254\n  Resolves: RHEL-246266\n  Resolves: RHEL-246306\n  Resolves: RHEL-246437\n  Resolves: RHEL-246441\n  Resolves: RHEL-246445\n  Resolves: RHEL-246449\n  Resolves: RHEL-246453\n\n[1:3.5.5-7]\n- Backport the 'HollowByte' hardening patch\n  Resolves: RHEL-212362","id":"ELSA-2026-67154-0","ovalId":"oval:com.oracle.elsa:def:2026671540","source":"oracle_linux","title":"ELSA-2026-67154-0:  openssl security, bug fix, and enhancement update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2026-67154-0.html"}