[CLSA-2026:1791193238] openssl11: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-05 10:14:30 UTC
Description:
- CVE-2026-84782: reset init_off before a DTLS retransmission and skip it while a handshake write is suspended, avoiding a heap over-read - CVE-2026-35189: build relative CRL distribution point names only during CRL matching, avoiding unbounded heap growth when caching extensions
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els6.i686.rpm
    sha:528374360ebc91a7adb638b676a25eee3c2bf247f54c433fcc4139ded07a5c82
  • openssl11-1.1.1k-7.el7.tuxcare.els6.x86_64.rpm
    sha:ac26224687ef2e8f5f7156e060d47b9a18fe509a57dbabf9c16f2af06897eb88
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els6.i686.rpm
    sha:069063a81a200ebff4eea434f9e95c308aff76e1faec23b6c649ad079f68688c
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els6.x86_64.rpm
    sha:0471cfa674b58bf37d0cfd7a2c08db5449c96658027bbe4edc8a0e5a8158daa6
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els6.i686.rpm
    sha:f0278e29efece509d5f1db4dd00d5b4b8cd45917ebca458dc218456d00e7532f
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els6.x86_64.rpm
    sha:a9d47c2da85ab5483f7ada7cef690ab242c62ec0afbc9b027d9ce97b5665dc96
  • openssl11-static-1.1.1k-7.el7.tuxcare.els6.i686.rpm
    sha:c49b3a06d7d24e41b006d0bb8532079bd495171703483dd2069e34f7d8afd81c
  • openssl11-static-1.1.1k-7.el7.tuxcare.els6.x86_64.rpm
    sha:1c5021a59b1d37c484d9140712e9a4f1e15a8987e07509a635ab51d137740381
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.