Release date:
2026-08-06 14:56:02 UTC
Description:
- CVE-2026-7383: fix signed integer overflow when sizing Unicode output in ASN1_mbstring_ncopy()
- CVE-2026-9076: fix heap out-of-bounds read in kek_unwrap_key() check-byte validation
- CVE-2026-28388: fix NULL pointer dereference when delta CRL lacks the CRL Number extension
- CVE-2026-34180: avoid length truncation in ASN1_STRING_set() when called from asn1_ex_c2i()
- CVE-2026-42766: fix NULL dereference when keyDerivationAlgorithm is absent in CMS PasswordRecipientInfo
Updated packages:
-
openssl-1.0.1e-63.el6.tuxcare.els15.i686.rpm
sha:31802d95579c74f680df49a9d271ba0477404a7c12e8c7a91ce039c70f1b7822
-
openssl-1.0.1e-63.el6.tuxcare.els15.x86_64.rpm
sha:2fe621d3ca512769464cf08a7a4317dd28f3d150e1d38fd3f330f96b7f40c805
-
openssl-devel-1.0.1e-63.el6.tuxcare.els15.i686.rpm
sha:5ac72a1fff0b07c9b853fb8dbb436774eef33ed709eb8fceae60a245e0d4e377
-
openssl-devel-1.0.1e-63.el6.tuxcare.els15.x86_64.rpm
sha:ac78b45fa834c5c89f74c396dbb08811cf5eb7d1389ddf56855847e7b285b756
-
openssl-perl-1.0.1e-63.el6.tuxcare.els15.x86_64.rpm
sha:a0b34af587087db295dd3025d05bee55b142b8ad79b60e6304e4d38145f66ac4
-
openssl-static-1.0.1e-63.el6.tuxcare.els15.x86_64.rpm
sha:325d6302da7951e22cc7b69d72fda93a3e21d64ae6bfb5c3989b631c166bea80
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
