Release date:
2026-09-02 08:59:17 UTC
Description:
- CVE-2026-54874: avoid allocating a full read buffer for each buffered DTLS
next-epoch record and lower the unprocessed_rcds queue limit; prevents
excessive memory use from small bogus next-epoch records
- CVE-2026-63072: size the CMS key-unwrap output buffer for the worst case
written by AES-WRAP-PAD; prevents an 8-byte out-of-bounds heap write in
cms_kek_cipher (crypto/cms/cms_kari.c)
Updated packages:
-
openssl-3.2.2-7.el9_6.tuxcare.1.els10.x86_64.rpm
sha:f03778fbbd6cd1e80bf0ed47fece77f46feb5c3b706874494732ab91352060ab
-
openssl-devel-3.2.2-7.el9_6.tuxcare.1.els10.i686.rpm
sha:fe6a75100daac7b219656b4a7917f65c886346742a4405ea4cf5ac2b43a9f87d
-
openssl-devel-3.2.2-7.el9_6.tuxcare.1.els10.x86_64.rpm
sha:44ace644134294662b5af692f6e5f6499d096c0481eceeb20951ff7048aa997c
-
openssl-libs-3.2.2-7.el9_6.tuxcare.1.els10.i686.rpm
sha:62a785d87bd0e0a1ae4ad87f10445dd0a8ab16a61a67d433129c6f690e02411a
-
openssl-libs-3.2.2-7.el9_6.tuxcare.1.els10.x86_64.rpm
sha:ddee5555ee8d6bdca9560746d23c9d54ca076095e1b2e9978de9d77693f63f24
-
openssl-perl-3.2.2-7.el9_6.tuxcare.1.els10.x86_64.rpm
sha:e1cc9e5eb4238beec12f2f26dd2e3ce8ffc862a31891eefb756912ce3f42e76b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
