Release date:
2026-10-05 11:32:57 UTC
Description:
* SECURITY UPDATE: DTLS retransmission from a stale buffer offset can leak heap memory or crash (ssl/statem/statem_dtls.c, ssl/d1_lib.c)
- debian/patches/CVE-2026-84782.patch: reset init_off before retransmitting a DTLS message and skip retransmission while a handshake write is suspended
- CVE-2026-84782
* SECURITY UPDATE: excessive heap growth from certificates with many relative CRL distribution points (crypto/x509v3/v3_purp.c, v3_crld.c)
- debian/patches/CVE-2026-35189.patch: defer computation of relative CRLDP names until CRL processing needs them
- CVE-2026-35189
Updated packages:
-
libssl-dev_1.1.1n-0+deb10u6+tuxcare.els7_amd64.deb
sha:db603c74680bc4bef48a9008aea70a128237287e
-
libssl-doc_1.1.1n-0+deb10u6+tuxcare.els7_all.deb
sha:8bd464934f290f91a1730e65993886a00e94c3ab
-
libssl1.1_1.1.1n-0+deb10u6+tuxcare.els7_amd64.deb
sha:012159cd1b6b9e907b8a84ff9cc055d2cd67368c
-
openssl_1.1.1n-0+deb10u6+tuxcare.els7_amd64.deb
sha:5ea887ef36bae7a11afa8ff4b3494b92c14af921
-
libssl-dev_1.1.1n-0+deb10u6+tuxcare.els7_arm64.deb
sha:3bcdde56602905c7396075fdeaa8f6e21f543e4b
-
libssl1.1_1.1.1n-0+deb10u6+tuxcare.els7_arm64.deb
sha:2d615bc00668c1daf1106134b503f0a63bc94fcc
-
openssl_1.1.1n-0+deb10u6+tuxcare.els7_arm64.deb
sha:4257cad3969469d1813f4017d7705c6122bbc064
-
libssl-dev_1.1.1n-0+deb10u6+tuxcare.els7_armel.deb
sha:2c91d6d9503ddf1455f021d713e42db674356bf3
-
libssl1.1_1.1.1n-0+deb10u6+tuxcare.els7_armel.deb
sha:4534c6710321bca532e83c705ac62c4b16545bb8
-
openssl_1.1.1n-0+deb10u6+tuxcare.els7_armel.deb
sha:ee992ddd558314e51c816720ef226a9ef07a3fbd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
