{"cves":["CVE-2026-28390"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[1:1.1.1k-17]\n- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing\n  Resolves: RHEL-165783","id":"ELSA-2026-38503","ovalId":"oval:com.oracle.elsa:def:202638503","source":"oracle_linux","title":"ELSA-2026-38503:  openssl security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-38503.html"}