Release date:
2026-10-05 11:34:08 UTC
Description:
- CVE-2026-84782: reset s->init_off to 0 in dtls1_retransmit_message() so a
DTLS retransmission is read from the start of the queued message instead of
the offset left by a write suspended on WANT_WRITE, and skip retransmission
in dtls1_handle_timeout() while such a write is still parked
- CVE-2026-35189: defer building the full name of a nameRelativeToCRLIssuer
CRL distribution point out of setup_dp() and into crl_crldp_check(), so a
certificate with many relative distribution points no longer caches one
copy of the issuer name per entry
Updated packages:
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:db5593e19405ffebfa1bdfc5d0eea8979a1592c9ad03024ed5086ad9885df813
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:764f5d865fc475c97044cff29928189ea8205b7fb261a76610eeb621f9c31dbb
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:73f1b4fa3f372c18d851f9e5ad5d83366c4578e17026d0e69c1c7494dd565265
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:3768f1fa4d6b6200533646394e5a1ebf6ecebe5b7db3dadcd82acbcd800c825b
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:d9e20cef6f0d4a153029ec830b113d653fa3f863cc29925804daab1cf40c3d22
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:bc3ab0a9bcce4fdd4529ca1de3e5d0f791e691dba7ca2837fd7a5cef196fb80a
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:6dca66ff35f50d5f94968a79d61f8350bfc03879eee364f5babb6cccee5f065f
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:3803e0cd59879b1e7444aa0290caa06019f0da17541b71cd91f09f9f2d1e8dad
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:b2653b67687eb7d4de61e25c424ce6b73e70c21d7507924c86e698df4d7bbad4
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:a2830f47d0a930fb27c5c6f7caafe0c2aa3a5a349fb6b9087fb81f09334a5ab2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
