{"cves":["CVE-2026-28390"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[1.1.0.2o-4.2]\n- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing\n  Resolves: RHEL-165754","id":"ELSA-2026-22315","ovalId":"oval:com.oracle.elsa:def:202622315","source":"oracle_linux","title":"ELSA-2026-22315:  compat-openssl10 security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-22315.html"}