elsa-2025-28041

oracle_linux
Description

[3.5.1-4.0.1] - Replace upstream references [Orabug: 34340177] - Update FIPS provider name [Orabug: 35824276] [1:3.5.1-4] - Fix CVE-2025-9230 Resolves: RHEL-115885 [1:3.5.1-3] - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-101548 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-105010 [1:3.5.1-2] - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80811 [1:3.5.1-1] - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-90350 Resolves: RHEL-95613 Resolves: RHEL-97796 Resolves: RHEL-99353 Resolves: RHEL-100168 [1:3.5.0-8] - rebuilt Related: RHEL-80811 [1:3.5.0-7] - rebuilt Related: RHEL-80811 [1:3.5.0-6] - rebuilt Related: RHEL-80811 [1:3.5.0-5] - Compact patches for better maintainability Related: RHEL-80811 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-94614 [1:3.5.0-4] - Fix regressions caused by rebase to OpenSSL 3.5 Related: RHEL-80811 - Fix UEFI builds on double function definitions Resolves: RHEL-93168

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2025-9230"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[3.5.1-4.0.1]\n- Replace upstream references [Orabug: 34340177]\n- Update FIPS provider name [Orabug: 35824276]\n\n[1:3.5.1-4]\n- Fix CVE-2025-9230\n  Resolves: RHEL-115885\n\n[1:3.5.1-3]\n- Add custom define to disable symbol versioning in downstream patched code\n  Also add stricter Suggests for openssl-fips-provider\n  Resolves: RHEL-101548\n- Fix Requires/Provider to fix default install of fips providers\n  Resolves: RHEL-105010\n\n[1:3.5.1-2]\n- Move fips.so to a seprate subpackage\n  Reverts FIPS self test for SLH-DSA\n  Add Suggests to try to prefer the openssl-fips-provider package\n  over the fips-provider-next package by default\n  Revolves: RHEL-102408\n  Related: RHEL-80811\n\n[1:3.5.1-1]\n- Rebasing to OpenSSL 3.5.1\n  Resolves: RHEL-90350\n  Resolves: RHEL-95613\n  Resolves: RHEL-97796\n  Resolves: RHEL-99353\n  Resolves: RHEL-100168\n\n[1:3.5.0-8]\n- rebuilt\n  Related: RHEL-80811\n\n[1:3.5.0-7]\n- rebuilt\n  Related: RHEL-80811\n\n[1:3.5.0-6]\n- rebuilt\n  Related: RHEL-80811\n\n[1:3.5.0-5]\n- Compact patches for better maintainability\n  Related: RHEL-80811\n- Make hybrid MLKEM work with our FIPS provider (3.0.7)\n  Resolves: RHEL-94614\n\n[1:3.5.0-4]\n- Fix regressions caused by rebase to OpenSSL 3.5\n  Related: RHEL-80811\n- Fix UEFI builds on double function definitions\n  Resolves: RHEL-93168",
  "id": "ELSA-2025-28041",
  "ovalId": "oval:com.oracle.elsa:def:202528041",
  "source": "oracle_linux",
  "title": "ELSA-2025-28041: openssl security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-28041.html"
}
View JSON API Download JSON