Summary
[3.5.5-2.0.1]
- Replace upstream references [Orabug: 34340177]
[1:3.5.5-2]
- Fix CVE-2026-31790
Resolves: RHEL-161586
[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5
Resolves: RHEL-136895
Resolves: RHEL-142004
Resolves: RHEL-142012
Resolves: RHEL-142020
Resolves: RHEL-142024
Resolves: RHEL-142028
Resolves: RHEL-142032
Resolves: RHEL-142036
Resolves: RHEL-142040
Resolves: RHEL-142044
Resolves: RHEL-142048
Resolves: RHEL-142052
Resolves: RHEL-142056
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | openssl | 1:3.5.5-2.0.1.el9_8 |
| Oracle Linux · 9 | openssl-devel | 1:3.5.5-2.0.1.el9_8 |
| Oracle Linux · 9 | openssl-libs | 1:3.5.5-2.0.1.el9_8 |
| Oracle Linux · 9 | openssl-perl | 1:3.5.5-2.0.1.el9_8 |
Vulnerabilities 1
-
High 7.5
Incorrect Failure Handling in RSA KEM RSASVE Encapsulation
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous ex…