[CLSA-2026:1791199071] openssl: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-07 00:26:09 UTC
Description:
- CVE-2026-84782: reset s->init_off to 0 in dtls1_retransmit_message() so a DTLS retransmission is read from the start of the queued message instead of the offset left by a write suspended on WANT_WRITE, and skip retransmission in dtls1_handle_timeout() while such a write is still parked - CVE-2026-35189: defer building the full name of a nameRelativeToCRLIssuer CRL distribution point out of setup_dp() and into crl_crldp_check(), so a certificate with many relative distribution points no longer caches one copy of the issuer name per entry
Updated packages:
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:567a388ffec45ba2adeb93dfc0cb34b7b53161c300270ddee1781891cca04d05
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:ac273b3c1bac0ba26523c504edcd8e3d4e285d3c8e2c5410e3ae1a3aeb3eb6fa
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:561dfd51b5d826b285602007761b2e97a4ad2aaed709dddef4db35a092337d28
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:fa252a19281d955495a2fbd755144dd9581cbb7a4ceb37a440df3d948a72123b
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:53943b8ee632c8b795dac7282a768a4faaed2f1478cab7a581baa01e78683b82
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:edcd799edd3b62e57a922efe153fffe0616b95a43c846370ec664d20b7b9b6f8
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:caeffb1b84e09ac9f90b9870251ff38b4e3e3a8ed0921684d1287772ac251b51
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:a829f3c74f60681d64a4cea7a017d85fd1407bce915c9be9d109f72507a1a8da
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:73ec36d56651d21a798a275c9e7f8faaf6d3e5b739eb4deaa7ce2804adffae74
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:fdfcabef403eb554edda585a3829f1c7f6af838f9a4476043ef908680ddd44ab
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:733951d20a68ac41fa57baa4015dc4674f3d54ea6248b8877e3fcabb2f7f92fa
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:fae7b4180112c517bd74ceeff37e428f792960aa8eaa416b6aed6d537df9f5ae
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els5.aarch64.rpm
    sha:f9011449a3e3bfe695c785da3ffecca2cef135f6818e9e5e9102d2b7c240122c
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
    sha:3d560d876a79136753f94315674e7b367c29c5e092c5e7f022460a2353b98da3
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
    sha:df5d60def30c389c4cdca984c0139d8c59517211acf6f78dea49affa0d5b2e0d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.