{"cves":["CVE-2025-9230"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[3.5.1-4.0.1]\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[3.5.1.openela.0.1]\n- Add OpenELA specific changes\n\n[1:3.5.1-4]\n- Fix CVE-2025-9230\n  Resolves: RHEL-115929\n\n[1:3.5.1-3]\n- Add custom define to disable symbol versioning in downstream patched code\n  Also add stricter Suggests for openssl-fips-provider\n  Resolves: RHEL-104236\n- Fix Requires/Provider to fix default install of fips providers\n  Resolves: RHEL-104856\n\n[1:3.5.1-2]\n- Move fips.so to a seprate subpackage\n  Reverts FIPS self test for SLH-DSA\n  Add Suggests to try to prefer the openssl-fips-provider package\n  over the fips-provider-next package by default\n  Revolves: RHEL-102408\n  Related: RHEL-80854\n\n[1:3.5.1-1]\n- Rebasing to OpenSSL 3.5.1\n  Resolves: RHEL-97797\n  Resolves: RHEL-98723\n  Resolves: RHEL-99352\n\n[1:3.5.0-4]\n- Compact patches for better maintainability\n  Related: RHEL-80854\n- Make hybrid MLKEM work with our FIPS provider (3.0.7)\n  Resolves: RHEL-95239\n\n[1:3.5.0-3]\n- Fix regressions caused by rebase to OpenSSL 3.5\n  Related: RHEL-80854\n\n[1:3.5.0-2]\n- OpenSSL ignores 'rh-allow-sha1-signatures = yes' option on RHEL-9\n  Resolves: RHEL-88910\n- PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9\n  Resolves: RHEL-88912\n- Fix openssl speed running in FIPS mode\n  Resolves: RHEL-89860\n- pkeyutl ecdsa signature with sha1 shouldn't work by default\n  Resolves: RHEL-89861\n- Expose settable params for EVP_SKEY\n  Resolves: RHEL-89862\n- Restore RHEL9-style indicators defines\n  Resolves: RHEL-89859\n- Enable sslkeylog support\n  Resolves: RHEL-90854\n\n[1:3.5.0-1]\n- Rebasing OpenSSL to 3.5\n  Resolves: RHEL-80854\n  Resolves: RHEL-50208\n  Resolves: RHEL-50210\n  Resolves: RHEL-50211\n  Resolves: RHEL-85954","id":"ELSA-2025-28020","ovalId":"oval:com.oracle.elsa:def:202528020","source":"oracle_linux","title":"ELSA-2025-28020: openssl security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2025-28020.html"}