Skip to content
OpenAdvisories
High ELSA-2026-77396 1 CVE

Important: openssl security update (Oracle Linux 9)

Published Oct 8, 2026 · Updated Oct 8, 2026

Ecosystem: Oracle Linux

Summary

[3.5.8-2.0.1]
- Replace upstream references [Orabug: 34340177]

[1:3.5.8-2]
- Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782)
Resolves: RHEL-264479

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 9 openssl 1:3.5.8-2.0.1.el9_8
Oracle Linux · 9 openssl-devel 1:3.5.8-2.0.1.el9_8
Oracle Linux · 9 openssl-libs 1:3.5.8-2.0.1.el9_8
Oracle Linux · 9 openssl-perl 1:3.5.8-2.0.1.el9_8

Vulnerabilities 1

  • High 8.2
    CVE-2026-84782

    DTLS Retransmits Handshake Messages From a Stale Buffer Offset

    Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspend…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi