[CLSA-2026:1788263953] openssl: Fix of CVE-2026-54874
Type:
security
Severity:
Important
Release date:
2026-09-03 08:38:55 UTC
Description:
- CVE-2026-54874: avoid buffering the whole DTLS read buffer for a record arriving early for the next epoch, capping per-connection memory amplification
CVEs fixed:
Updated packages:
  • openssl-1.0.1e-63.el6.tuxcare.els16.i686.rpm
    sha:55c70509b964b776eabb8c3110587c18d828117d464260ae2e6193bc2ea24a65
  • openssl-1.0.1e-63.el6.tuxcare.els16.x86_64.rpm
    sha:8df24d0194a7581f6f6e156d7d14690ebc61564164b20dbd8567c66bddfd9526
  • openssl-devel-1.0.1e-63.el6.tuxcare.els16.i686.rpm
    sha:d3266d0a23433514643bfa0a47897d1764cd5993c26478bf381f290acb8cd570
  • openssl-devel-1.0.1e-63.el6.tuxcare.els16.x86_64.rpm
    sha:abfa22b5e393327eb48f2b7a935334d1cd201dea7b0c18858c565b2faef302f4
  • openssl-perl-1.0.1e-63.el6.tuxcare.els16.x86_64.rpm
    sha:a2c268267037a9a8db0249c3cb64b9e0ffcff2507f556a72d7747da158b7c30d
  • openssl-static-1.0.1e-63.el6.tuxcare.els16.x86_64.rpm
    sha:b53292b0c6fe6a5271329db724806333cc6f2b96dfad94b6f040888d87bbdc9c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.