{
  "cves": [
    "CVE-2026-34180",
    "CVE-2026-34181",
    "CVE-2026-34182",
    "CVE-2026-34183",
    "CVE-2026-42764",
    "CVE-2026-42766",
    "CVE-2026-42767",
    "CVE-2026-42768",
    "CVE-2026-42769",
    "CVE-2026-42770",
    "CVE-2026-45445",
    "CVE-2026-45446",
    "CVE-2026-45447",
    "CVE-2026-7383",
    "CVE-2026-9076"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[3.5.5-5.0.1]\n- Replace upstream references [Orabug: 34340177]\n- Update FIPS provider name [Orabug: 35824276]\n\n[1:3.5.5-5]\n- Patch asn1_d2i_read_bio to read headers without blocking\n  Resolves: RHEL-169991\n\n[1:3.5.5-4]\nFix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181,\nCVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,\nCVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447,\nCVE-2026-34182.\nResolves: RHEL-179267\nResolves: RHEL-179281\nResolves: RHEL-179537\nResolves: RHEL-179542\nResolves: RHEL-179545\nResolves: RHEL-179550\nResolves: RHEL-179553\nResolves: RHEL-179626\nResolves: RHEL-179658\nResolves: RHEL-179675\nResolves: RHEL-179682\nResolves: RHEL-179685\nResolves: RHEL-179689\nResolves: RHEL-179693\nResolves: RHEL-179697\n\n[1:3.5.5-3]\n- Fix CVE-2026-28390\n  Resolves: RHEL-165705",
  "id": "ELSA-2026-25237",
  "ovalId": "oval:com.oracle.elsa:def:202625237",
  "source": "oracle_linux",
  "title": "ELSA-2026-25237:  openssl security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-25237.html"
}