Skip to content
OpenAdvisories
High ELSA-2026-76918 1 CVE

Important: openssl security update (Oracle Linux 10)

Published Oct 8, 2026 · Updated Oct 8, 2026

Ecosystem: Oracle Linux

Summary

[3.5.8-2.0.1]
- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]

[1:3.5.8-2]
- Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782)
Resolves: RHEL-264466

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 10 openssl 1:3.5.8-2.0.1.el10_2
Oracle Linux · 10 openssl-devel 1:3.5.8-2.0.1.el10_2
Oracle Linux · 10 openssl-libs 1:3.5.8-2.0.1.el10_2
Oracle Linux · 10 openssl-perl 1:3.5.8-2.0.1.el10_2

Vulnerabilities 1

  • High 8.2
    CVE-2026-84782

    DTLS Retransmits Handshake Messages From a Stale Buffer Offset

    Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspend…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi