Release date:
2026-10-05 11:36:47 UTC
Description:
- CVE-2026-84782: reset s->init_off to 0 in dtls1_retransmit_message() so a
DTLS retransmission is read from the start of the queued message instead of
the offset left by a write suspended on WANT_WRITE, and skip retransmission
in dtls1_handle_timeout() while such a write is still parked
- CVE-2026-35189: defer building the full name of a nameRelativeToCRLIssuer
CRL distribution point out of setup_dp() and into crl_crldp_check(), so a
certificate with many relative distribution points no longer caches one
copy of the issuer name per entry
Updated packages:
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:577f1bfb77316169c3b86e20bbc936d05c59c32391a4b22116602f1e934644bb
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:845ef0b4f0a8a4d81559c8bc9f605f1a26568891df24597021edf737a488421e
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:97e81b0102d445587b297e7629a13f29163e2ba2d623375cd1cd0e41a6c6cc0f
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:a304a997f8dc3b79855fc47ab7b538481921e0fe976ddd55435f2f1043e012d8
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:5195c0a46b4ec08413447171b622dfb32741736ad2941d95d6d359d04ffbb925
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:cc32ad8677f62c5b2eb48cf236ef895fa6e72af677cb625e0823cf2a2c5f0d82
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:48a59ac4acc9bccef7df53186644435082a481bf55461c0f0283b10c223598d1
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:fb457d927ae06754dd296bfc1c66fa5f1b6d99c5e92b226c45338d5048d5850e
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els5.i686.rpm
sha:2b04e010cee9451a661692272545ee847f0cebc88afcf4559ad5fcb14fac52e3
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els5.x86_64.rpm
sha:673e81190d80fdeea93baa62c4ed6d55a259a0455440bfc1f04d753aa630568b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
