elsa-2026-50081
oracle_linux[3.5.1-7.0.1] - Replace upstream references [Orabug: 34340177] - Update FIPS provider name [Orabug: 35824276] [1:3.5.1-7] - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-22795 CVE-2026-22796 Resolves: RHEL-142062 Resolves: RHEL-141985 Resolves: RHEL-142053 Resolves: RHEL-142049 Resolves: RHEL-142045 Resolves: RHEL-142041 Resolves: RHEL-142037 Resolves: RHEL-142033 Resolves: RHEL-142029 Resolves: RHEL-142008 Resolves: RHEL-142025 Resolves: RHEL-142021 [1:3.5.1-6] - Fix AES/GCM ppc64le encrypt/decrypt Resolves: RHEL-139108 [1:3.5.1-5] - Do not make key share choice in tls1_set_groups() Resolves: RHEL-130992 [1:3.5.1-4] - Fix CVE-2025-9230 Resolves: RHEL-115885 [1:3.5.1-3] - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 [1:3.5.1-2] - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80811 [1:3.5.1-1] - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-90350 Resolves: RHEL-95613 Resolves: RHEL-97796 Resolves: RHEL-99353 Resolves: RHEL-100168 [1:3.5.0-8] - rebuilt Related: RHEL-80811 [1:3.5.0-7] - rebuilt Related: RHEL-80811
- Published
- unknown
- Last Modified
- unknown
CVSS details not available.
No product information available.
No references available.
No linked vulnerabilities found.
{
"cves": [
"CVE-2025-11187",
"CVE-2025-15467",
"CVE-2025-15468",
"CVE-2025-15469",
"CVE-2025-66199",
"CVE-2025-68160",
"CVE-2025-69418",
"CVE-2025-69419",
"CVE-2025-69420",
"CVE-2025-69421",
"CVE-2026-22795",
"CVE-2026-22796"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[3.5.1-7.0.1]\n- Replace upstream references [Orabug: 34340177]\n- Update FIPS provider name [Orabug: 35824276]\n\n[1:3.5.1-7]\n- Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469\n CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420\n CVE-2025-69421 CVE-2026-22795 CVE-2026-22796\n Resolves: RHEL-142062\n Resolves: RHEL-141985\n Resolves: RHEL-142053\n Resolves: RHEL-142049\n Resolves: RHEL-142045\n Resolves: RHEL-142041\n Resolves: RHEL-142037\n Resolves: RHEL-142033\n Resolves: RHEL-142029\n Resolves: RHEL-142008\n Resolves: RHEL-142025\n Resolves: RHEL-142021\n\n[1:3.5.1-6]\n- Fix AES/GCM ppc64le encrypt/decrypt\n Resolves: RHEL-139108\n\n[1:3.5.1-5]\n- Do not make key share choice in tls1_set_groups()\n Resolves: RHEL-130992\n\n[1:3.5.1-4]\n- Fix CVE-2025-9230\n Resolves: RHEL-115885\n\n[1:3.5.1-3]\n- Add custom define to disable symbol versioning in downstream patched code\n Also add stricter Suggests for openssl-fips-provider\n Resolves: RHEL-101548\n- Fix Requires/Provider to fix default install of fips providers\n Resolves: RHEL-105010\n\n[1:3.5.1-2]\n- Move fips.so to a seprate subpackage\n Reverts FIPS self test for SLH-DSA\n Add Suggests to try to prefer the openssl-fips-provider package\n over the fips-provider-next package by default\n Revolves: RHEL-102408\n Related: RHEL-80811\n\n[1:3.5.1-1]\n- Rebasing to OpenSSL 3.5.1\n Resolves: RHEL-90350\n Resolves: RHEL-95613\n Resolves: RHEL-97796\n Resolves: RHEL-99353\n Resolves: RHEL-100168\n\n[1:3.5.0-8]\n- rebuilt\n Related: RHEL-80811\n\n[1:3.5.0-7]\n- rebuilt\n Related: RHEL-80811",
"id": "ELSA-2026-50081",
"ovalId": "oval:com.oracle.elsa:def:202650081",
"source": "oracle_linux",
"title": "ELSA-2026-50081: openssl security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2026-50081.html"
}