[CLSA-2026:1791803986] openssl: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-12 11:19:58 UTC
Description:
- CVE-2026-35189: defer expansion of relative CRL distribution point names to CRL matching time so certificates with many nameRelativeToCRLIssuer entries no longer cause disproportionate heap growth - CVE-2026-84782: reset the read offset before a DTLS handshake message is retransmitted and skip retransmission while a handshake write is suspended, preventing an out-of-bounds read and state corruption
CVEs fixed:
Updated packages:
  • openssl-3.0.7-20.el9_2.tuxcare.1.els25.aarch64.rpm
    sha:3a953cc1651ff81ccfca0d73a493bde55b2fd13fbace6bdc2d5fda18b8c4cfd0
  • openssl-3.0.7-20.el9_2.tuxcare.1.els25.i686.rpm
    sha:7501797ef0e1838b37beb8a1f9b4d207537fb509bf4dc58413631d921e36da8a
  • openssl-3.0.7-20.el9_2.tuxcare.1.els25.x86_64.rpm
    sha:f4ce1df0253b421d8411e91d90323fb13054ba9e5f5495a54f926890636516d6
  • openssl-devel-3.0.7-20.el9_2.tuxcare.1.els25.aarch64.rpm
    sha:7c85392af7e88eb631e46191e22c290e9adfb3a2a567df12f81558aacf6c515a
  • openssl-devel-3.0.7-20.el9_2.tuxcare.1.els25.i686.rpm
    sha:d665d5a3a70a3fd1d56eb9a20c711f1f8bd36372f4e537fb40cd84be9db2c88b
  • openssl-devel-3.0.7-20.el9_2.tuxcare.1.els25.x86_64.rpm
    sha:a2970aa888966df38ff6c3989685add9ae17db56ac4e71fb749ab324416c4179
  • openssl-libs-3.0.7-20.el9_2.tuxcare.1.els25.aarch64.rpm
    sha:13a3bea96375aaea5c82147a565c476f1b806031ec70567bd5306fec5ee95ae2
  • openssl-libs-3.0.7-20.el9_2.tuxcare.1.els25.i686.rpm
    sha:859939c6b6d89ee468875ac7a3c0471fa3bc7b6b2a6a17dfd30c6ed63058c08d
  • openssl-libs-3.0.7-20.el9_2.tuxcare.1.els25.x86_64.rpm
    sha:cfe59af20e51810f9d0d62683597f2d906e8a9ec40d423a14a0fe0558250e2ce
  • openssl-perl-3.0.7-20.el9_2.tuxcare.1.els25.aarch64.rpm
    sha:d087609fe5024c53b57c6cc35a58d2e7219046c4383eca3eb587fd5a5bb4bfbd
  • openssl-perl-3.0.7-20.el9_2.tuxcare.1.els25.i686.rpm
    sha:dedefec4b8b6db06af852dab79c7592c7d242ec513010547bf6e2ec21f613757
  • openssl-perl-3.0.7-20.el9_2.tuxcare.1.els25.x86_64.rpm
    sha:9b6de4a0703a1dc7c0af971673887e21f881f93676007a64ea52791617190d56
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.