[CLSA-2026:1778071148] openssl: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-22 00:26:53 UTC
Description:
- CVE-2026-28387: fix use of OPENSSL_free instead of X509_free on dane->mcert in dane_match() (X509 reference-count bypass / UAF) - CVE-2026-28388: fix NULL deref in check_delta_base when a delta CRL carries the Delta CRL Indicator extension but lacks a CRL Number - CVE-2026-28389: fix NULL deref in dh_cms_set_shared_info / ecdh_cms_set_shared_info on absent CMS KARI parameters - CVE-2026-31789: fix integer overflow in OPENSSL_buf2hexstr causing heap OOB write when converting > SIZE_MAX/3 bytes (32-bit builds)
CVEs fixed:
Updated packages:
  • openssl-3.0.7-20.el9_2.tuxcare.1.els11.aarch64.rpm
    sha:de382e31a5541242d246a5aac59847b79fd801316d7e1a4d2a989527664834b8
  • openssl-3.0.7-20.el9_2.tuxcare.1.els11.i686.rpm
    sha:1cc954f477d2566dd82ee6acc24fe6d030d510ea38aed3683d3ba34469fd732c
  • openssl-3.0.7-20.el9_2.tuxcare.1.els11.x86_64.rpm
    sha:3ac3e097cf0a5683e73cec38b376f2e36dd0db333d5fe36c0947ed82573e1065
  • openssl-devel-3.0.7-20.el9_2.tuxcare.1.els11.aarch64.rpm
    sha:4b65a634d2c4090b0ecac51017a395830bbe8b8a4e6f41e0f8ac3789a145852a
  • openssl-devel-3.0.7-20.el9_2.tuxcare.1.els11.i686.rpm
    sha:15a3e2cabc6b1fad07c34f0764294ad567808b20a52d4c1d3c37425503f73390
  • openssl-devel-3.0.7-20.el9_2.tuxcare.1.els11.x86_64.rpm
    sha:a2edb2308433d4af222ceee05f821d438bf162f0045341ab3bc5bd704b9f1468
  • openssl-libs-3.0.7-20.el9_2.tuxcare.1.els11.aarch64.rpm
    sha:a2de455029be273fc51f0b0283e2bab3143a241a0eb2c8be20be88986fb1c11c
  • openssl-libs-3.0.7-20.el9_2.tuxcare.1.els11.i686.rpm
    sha:8f147558bc02a3bf8ef37438cbd249ad72dfa05c6c4c4a29b910dc5dbd9bbbc0
  • openssl-libs-3.0.7-20.el9_2.tuxcare.1.els11.x86_64.rpm
    sha:cc5a787dcc1eb7f5280d640bffe4c53fdc4499abbd35ed510761153aa8547f80
  • openssl-perl-3.0.7-20.el9_2.tuxcare.1.els11.aarch64.rpm
    sha:ced07c9dc98a16d3ff9e4b4b28f9c80a4e0ad17d15a3c205404ddaf6e9c78de0
  • openssl-perl-3.0.7-20.el9_2.tuxcare.1.els11.i686.rpm
    sha:080322f73cdcbe9f80d207aa26d8833247d0fae0720c2acad4be58177cf8a604
  • openssl-perl-3.0.7-20.el9_2.tuxcare.1.els11.x86_64.rpm
    sha:65cb3be1b43626973b9bb59004efb2077b0cb538d20f21a30c8ebe55204b12df
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.