{
  "cves": [
    "CVE-2026-14456",
    "CVE-2026-14457",
    "CVE-2026-18798",
    "CVE-2026-54874",
    "CVE-2026-63072",
    "CVE-2026-63073",
    "CVE-2026-63074",
    "CVE-2026-63075",
    "CVE-2026-63076"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[3.5.8-1.0.1]\n- Replace upstream references [Orabug: 34340177]\n- Update FIPS provider name [Orabug: 35824276]\n\n[1:3.5.8-1]\n- Rebase to OpenSSL 3.5.8\n  Resolves: RHEL-242944\n  Resolves: RHEL-246254\n  Resolves: RHEL-246266\n  Resolves: RHEL-246306\n  Resolves: RHEL-246437\n  Resolves: RHEL-246441\n  Resolves: RHEL-246445\n  Resolves: RHEL-246449\n  Resolves: RHEL-246453\n\n[1:3.5.5-7]\n- Backport the 'HollowByte' hardening patch\n  Resolves: RHEL-212362",
  "id": "ELSA-2026-67154-0",
  "ovalId": "oval:com.oracle.elsa:def:2026671540",
  "source": "oracle_linux",
  "title": "ELSA-2026-67154-0:  openssl security, bug fix, and enhancement update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-67154-0.html"
}