{"cves":["CVE-2026-28390"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[3.5.5-5.0.1]\n- Replace upstream references [Orabug: 34340177]\n- Update FIPS provider name [Orabug: 35824276]\n\n[1:3.5.5-5]\n- Patch asn1_d2i_read_bio to read headers without blocking\n  Resolves: RHEL-169991\n\n[1:3.5.5-4]\n- Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,\nCVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,\nCVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,\nCVE-2026-34182.\nResolves: RHEL-179267\nResolves: RHEL-179281\nResolves: RHEL-179537\nResolves: RHEL-179542\nResolves: RHEL-179545\nResolves: RHEL-179550\nResolves: RHEL-179553\nResolves: RHEL-179626\nResolves: RHEL-179658\nResolves: RHEL-179675\nResolves: RHEL-179682\nResolves: RHEL-179685\nResolves: RHEL-179689\nResolves: RHEL-179693\nResolves: RHEL-179697\n\n[1:3.5.5-3]\n- Fix CVE-2026-28390\n  Resolves: RHEL-165705","id":"ELSA-2026-22314","ovalId":"oval:com.oracle.elsa:def:202622314","source":"oracle_linux","title":"ELSA-2026-22314:  openssl security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-22314.html"}