{"cves":["CVE-2026-28390"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[3.5.5-3.0.1]\n- Replace upstream references in fips man pages [Orabug: 35824276]\n- Update additional upstream references\n- Add FIPS package change: add fips suffix to Release and\n  set Epoch to 10 [Orabug: 35824276]\n- Update FIPS module name [Orabug: 35824276]\n- Enable openssl-fips-provider dependency [Orabug: 36504822]\n- Temporary disable openssl-fips-provider dependency [Orabug: 36504822]\n- Replace upstream references [Orabug: 34340177]\n\n[1:3.5.5-3]\n- Fix CVE-2026-28390\n  Resolves: RHEL-165870\n\n[1:3.5.5-2]\n- Fix CVE-2026-31790\n  Resolves: RHEL-161586\n\n[1:3.5.5-1]\n- Rebase to OpenSSL 3.5.5\n  Resolves: RHEL-136895\n  Resolves: RHEL-142004\n  Resolves: RHEL-142012\n  Resolves: RHEL-142020\n  Resolves: RHEL-142024\n  Resolves: RHEL-142028\n  Resolves: RHEL-142032\n  Resolves: RHEL-142036\n  Resolves: RHEL-142040\n  Resolves: RHEL-142044\n  Resolves: RHEL-142048\n  Resolves: RHEL-142052\n  Resolves: RHEL-142056","id":"ELSA-2026-50345","ovalId":"oval:com.oracle.elsa:def:202650345","source":"oracle_linux","title":"ELSA-2026-50345:  openssl security fix update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-50345.html"}