Summary
[3.5.8-2.0.1_fips]
- Replace upstream references in fips man pages [Orabug: 35824276]
- Update additional upstream references
- Add FIPS package change: add fips suffix to Release and
set Epoch to 10 [Orabug: 35824276]
- Update FIPS module name [Orabug: 35824276]
- Enable openssl-fips-provider dependency [Orabug: 36504822]
- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]
[3.5.8-2.0.1]
- Replace upstream references [Orabug: 34340177]
[1:3.5.8-2]
- Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782)
Resolves: RHEL-264479
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | openssl | 10:3.5.8-2.0.1.el9_8_fips |
| Oracle Linux · 9 | openssl-devel | 10:3.5.8-2.0.1.el9_8_fips |
| Oracle Linux · 9 | openssl-libs | 10:3.5.8-2.0.1.el9_8_fips |
| Oracle Linux · 9 | openssl-perl | 10:3.5.8-2.0.1.el9_8_fips |
Vulnerabilities 1
-
High 8.2
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspend…