Release date:
2026-10-02 09:26:20 UTC
Description:
- CVE-2026-84782: reset s->init_off to 0 in dtls1_retransmit_message() and skip
retransmission in dtls1_handle_timeout() while a handshake write is suspended,
preventing a DTLS retransmit from being sent from a stale buffer offset
- CVE-2026-35189: defer building the full nameRelativeToCRLIssuer distribution
point name out of certificate parsing into CRL matching, so a certificate with
many relative CRL distribution points no longer duplicates the issuer name per
entry at parse time
Updated packages:
-
openssl-1.1.1k-5.el8_5.tuxcare.els22.i686.rpm
sha:703996ce8dc908fd15c9e770c6b2fe655a85dc76aa16fcf1ca9d3514dcd5e7b2
-
openssl-1.1.1k-5.el8_5.tuxcare.els22.x86_64.rpm
sha:f1afa7e6b66d93e2d483706b1d2eb6b395f24c7d804fee22c4cbc888807f0c53
-
openssl-devel-1.1.1k-5.el8_5.tuxcare.els22.i686.rpm
sha:1321c2cea810a8e3c6ab1346f2242d4b6750c9fd42a08a324c8052db0a316429
-
openssl-devel-1.1.1k-5.el8_5.tuxcare.els22.x86_64.rpm
sha:c44dd65108581b7eecdb65a99bc8a45e2a1ca32a5a3f5f8ee8bda1a088a37b33
-
openssl-libs-1.1.1k-5.el8_5.tuxcare.els22.i686.rpm
sha:f43f183a7e9da39a64d68d07486126c3e9ea6924000251fd0257eef97bf76ead
-
openssl-libs-1.1.1k-5.el8_5.tuxcare.els22.x86_64.rpm
sha:eafb8a435b323278f9287d66199cfccfa67ff062793c626fc1f54bee9d3bfb93
-
openssl-perl-1.1.1k-5.el8_5.tuxcare.els22.i686.rpm
sha:fdaba7d3b53c3dd2b619ce5ccdd021e4f27b5b3880dfd5bb8a5289180f193f36
-
openssl-perl-1.1.1k-5.el8_5.tuxcare.els22.x86_64.rpm
sha:21d75eb0eeb83d0a22e4d72f67a8f1964367ad829b8c68bc1a8aa0ce5a51a56e
-
openssl-static-1.1.1k-5.el8_5.tuxcare.els22.i686.rpm
sha:726b489a2c8d03916eb05ce63faffb18e0922cb865aeb6d421bf32e9236ee66b
-
openssl-static-1.1.1k-5.el8_5.tuxcare.els22.x86_64.rpm
sha:644e925019628acc42da70878657c41d1cf0f5e00c9ab288674dee7ed571d58e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
