Release date:
2026-09-09 10:58:16 UTC
Description:
* SECURITY UPDATE: Unbounded memory retention in the DTLS record layer.
dtls1_buffer_record() adopted the entire live read buffer for every queued
record and allocated a fresh one, so a peer could pin roughly 17.7 KB of
heap per queued record regardless of how small the record actually was,
up to the 100-entry queue limit, exhausting memory on the endpoint.
- debian/patches/CVE-2026-54874.patch: copy only the received record into
a right-sized allocation and restore it on retrieval, leaving the live
read buffer in place, in ssl/d1_pkt.c, ssl/d1_lib.c and ssl/dtls1.h.
- CVE-2026-54874
Updated packages:
-
libssl-dev_1.0.2g-1ubuntu4.21+tuxcare.els17_amd64.deb
sha:808677211eb728e3cd427255e4d3b857d8034f95
-
libssl-doc_1.0.2g-1ubuntu4.21+tuxcare.els17_all.deb
sha:2caa626cc138f2a0ea9c43b5e6fecf40200944a9
-
libssl1.0.0_1.0.2g-1ubuntu4.21+tuxcare.els17_amd64.deb
sha:7b59f28c81e4f066cceb079213ec3c18178b333d
-
openssl_1.0.2g-1ubuntu4.21+tuxcare.els17_amd64.deb
sha:49365b6a83e46476b0089c0e3605620303078498
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
