[CLSA-2026:1791193015] openssl11: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-07 00:22:08 UTC
Description:
- CVE-2026-84782: reset init_off before a DTLS retransmission and skip it while a handshake write is suspended, avoiding a heap over-read - CVE-2026-35189: build relative CRL distribution point names only during CRL matching, avoiding unbounded heap growth when caching extensions
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els6.aarch64.rpm
    sha:2aea47dfe63ea24cd1f60479c6b4470c72be8f6fda410b7320842c18b723e2a4
  • openssl11-1.1.1k-7.el7.tuxcare.els6.i686.rpm
    sha:7752fe9873c4bf3b875596f0137d2e2799f9db48c9de56bc2ce77d626e6da17b
  • openssl11-1.1.1k-7.el7.tuxcare.els6.x86_64.rpm
    sha:f7128697d30da0a32a7627028d18d3ceedcc6bfd8fb2e324e9cfe7c316c2fb56
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els6.aarch64.rpm
    sha:37437f20f7fb73a6e00adb282cff5678a9a0a4db51bfaae11d37f1e72764e75c
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els6.i686.rpm
    sha:480422917e390d4ab574d9da8fa46a7c940122bd0d158a6b6239e55f5e32e982
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els6.x86_64.rpm
    sha:50ac30d47ba311fa65b6f437972644ccdcd7a8ff1995a94f93862624db73eeb1
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els6.aarch64.rpm
    sha:ba99eba863683f5f8c49e33b623a81196484fa5d19b7e53dbdbdaf411c4f0140
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els6.i686.rpm
    sha:a06aa290f724538cec2aa5b01e0feb3df37261dc9407b14a9509d9d198710796
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els6.x86_64.rpm
    sha:a7a4777d67c776a694b7fc57166744d5e3b322a4741c7ad5eb1dc6aea908c1d7
  • openssl11-static-1.1.1k-7.el7.tuxcare.els6.aarch64.rpm
    sha:212dcf5ac4229c3a3d2a1e3e1f179ac7f985473b1d1f5bbca6f5e462b8cf9cd6
  • openssl11-static-1.1.1k-7.el7.tuxcare.els6.i686.rpm
    sha:736f9bdd3e84bd79733292121489ce0da1e65e981c88765d302e140e6087c1f0
  • openssl11-static-1.1.1k-7.el7.tuxcare.els6.x86_64.rpm
    sha:aa8d7d6c4469b056b0574a1d61688fe197bd06bc3d0a6db716e2211c6e0674ba
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.