Release date:
2026-09-19 01:32:55 UTC
Description:
- CVE-2026-63074: roll back cached CMP extraCerts when a message is
rejected to stop unbounded untrusted-stack growth on a long-lived ctx
- CVE-2026-63076: require the CMP protectionAlg parameter to be a
SEQUENCE before using it as a PBMParameter, avoiding a pointer deref
- CVE-2026-75803: check the AEAD tag on a terminal EVP_Cipher() call for
AES-OCB and ChaCha20-Poly1305 so an empty ciphertext cannot be forged
Updated packages:
-
openssl-3.0.7-20.el9_2.tuxcare.1.els23.x86_64.rpm
sha:d580bfd6c217b50d540c7c1dba995e705ce558db6d076319a18ad2858696eb46
-
openssl-devel-3.0.7-20.el9_2.tuxcare.1.els23.i686.rpm
sha:023c58c5baa076cfcb230a10e19f9fefe03e6f860187bf09a907fe138717868f
-
openssl-devel-3.0.7-20.el9_2.tuxcare.1.els23.x86_64.rpm
sha:addf77ea1f02f45dd952428fdb60479729da49ba453edbbcb3fa3d46cd0909db
-
openssl-libs-3.0.7-20.el9_2.tuxcare.1.els23.i686.rpm
sha:c836cb83aa5f64c3ac46d3300b74e59be55652c81faa66535851ea4970ba37e5
-
openssl-libs-3.0.7-20.el9_2.tuxcare.1.els23.x86_64.rpm
sha:fb38679b4ffe76db2fa258ae4af5b981253798ecd6dccbec1935cf6040f3d647
-
openssl-perl-3.0.7-20.el9_2.tuxcare.1.els23.x86_64.rpm
sha:da6472716e76b6e8fca9a24b7fe19122e9919bb09225657d97d217f20587e03e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
