Release date:
2026-09-01 14:08:24 UTC
Description:
- CVE-2026-54874: fix excessive memory use when buffering DTLS records for a future epoch by copying only the record's own bytes instead of the whole read buffer, and lowering the unprocessed-records queue limit to 16
- CVE-2026-63072: fix 8-byte out-of-bounds heap write in CMS key unwrapping by sizing the AES-WRAP-PAD unwrap output buffer for the worst case
Updated packages:
-
openssl-1.1.1g-15.el8_4.tuxcare.els22.x86_64.rpm
sha:dd8f8899b5d1f949f70b6a4eb51a79b473c7e7912f3e049ae9486b3035a3ffbf
-
openssl-devel-1.1.1g-15.el8_4.tuxcare.els22.i686.rpm
sha:ef7aeb60292c7bc49bc62d5fb048cbc1dae98fd82c5b1238c5adc1b42363ce7a
-
openssl-devel-1.1.1g-15.el8_4.tuxcare.els22.x86_64.rpm
sha:6ec680ac53f2a2314d56d143cb82e961b8964822f67b74b94eb1aa56cb3f2100
-
openssl-libs-1.1.1g-15.el8_4.tuxcare.els22.i686.rpm
sha:e26020625351e286136ba635538f57d5e8d0c0b0b16a6da62b98cc286252d776
-
openssl-libs-1.1.1g-15.el8_4.tuxcare.els22.x86_64.rpm
sha:0752894d2f9721d4583b53f09fa6a08f1a5197928b30ba3db30cd7cd4a31eea0
-
openssl-perl-1.1.1g-15.el8_4.tuxcare.els22.x86_64.rpm
sha:3f55818ec904979a11e373c4523c4a95b429a7d6f8b2ae691ca0e7bb67c66c27
-
openssl-static-1.1.1g-15.el8_4.tuxcare.els22.x86_64.rpm
sha:104bc85d0d8196b610bd5d5e91c7c3912ceb40d9a7cda800c122400617617222
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
