Release date:
2026-09-01 12:11:54 UTC
Description:
- CVE-2026-54874: fix excessive memory use when buffering DTLS records for a future epoch by copying only the record's own bytes instead of the whole read buffer, and lowering the unprocessed-records queue limit to 16
- CVE-2026-63072: fix 8-byte out-of-bounds heap write in CMS key unwrapping by sizing the AES-WRAP-PAD unwrap output buffer for the worst case
Updated packages:
-
openssl-1.1.1k-5.el8_5.tuxcare.els21.x86_64.rpm
sha:15621448e4fe905bd9e95ab9352079f87ceb5489c789fc96f130f2ffb774899c
-
openssl-devel-1.1.1k-5.el8_5.tuxcare.els21.i686.rpm
sha:314916240a52bc7bfef2dba736774283ec12eba1e5baf96a020eaee698cc081f
-
openssl-devel-1.1.1k-5.el8_5.tuxcare.els21.x86_64.rpm
sha:dbd7f38d3552d975b1ab06736f27604abe2247f356623d74eb6db87adda55b0f
-
openssl-libs-1.1.1k-5.el8_5.tuxcare.els21.i686.rpm
sha:3171ea0222109dec48cb814250abf2311b5d11aac18a592ac95f13157b8c4d02
-
openssl-libs-1.1.1k-5.el8_5.tuxcare.els21.x86_64.rpm
sha:7bfb4046b0032704d4f2a07e8351cb5245522a4877b05a048f5d6f9b3d4f3497
-
openssl-perl-1.1.1k-5.el8_5.tuxcare.els21.x86_64.rpm
sha:c109d1250216a28e860b80b494d880ed52038bf186a780cdce44e552ae7fe2ba
-
openssl-static-1.1.1k-5.el8_5.tuxcare.els21.x86_64.rpm
sha:1910b729ccd1916be81d58ca7bf1bd43220f673024c362cf7f20a2fb3fa3a2a5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
