| Name: | openssl-libs |
|---|---|
| Epoch: | 1 |
| Version: | 3.5.8 |
| Release: | 1.0.1.el10_2 |
| Architecture: | x86_64 |
| Group: | Unspecified |
| Size: | 6898563 |
| License: | Apache-2.0 |
| RPM: | openssl-libs-3.5.8-1.0.1.el10_2.x86_64.rpm |
| Source RPM: | openssl-3.5.8-1.0.1.el10_2.src.rpm |
| Build Date: | Mon Sep 14 2026 |
| Build Host: | build-ol10-x86_64.oracle.com |
| Vendor: | Oracle America |
| URL: | http://www.openssl.org/ |
| Summary: | A general purpose cryptography library with TLS implementation |
| Description: | OpenSSL is a toolkit for supporting cryptography. The openssl-libs package contains the libraries that are used by various applications which support cryptographic algorithms and protocols. |
- Replace upstream references [Orabug: 34340177] - Update FIPS provider name [Orabug: 35824276]
- Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445 Resolves: RHEL-246449 Resolves: RHEL-246453
- Backport the "HollowByte" hardening patch Resolves: RHEL-212362
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210864
- Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991
Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697
- Fix CVE-2026-28390 Resolves: RHEL-165705
- Fix CVE-2026-31790 Resolves: RHEL-161574
- Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054
- Fix CVE-2025-9230 Resolves: RHEL-115883