Release date:
2026-10-05 19:51:01 UTC
Description:
* SECURITY UPDATE: excessive memory use with relative CRL distribution
point names
- debian/patches/CVE-2026-35189.patch: build the full name of a
nameRelativeToCRLIssuer distribution point only while matching a
CRL instead of for every parsed certificate in
crypto/x509v3/v3_purp.c and crypto/x509/x509_vfy.c
- CVE-2026-35189
* SECURITY UPDATE: DTLS retransmission corrupts a suspended write
- debian/patches/CVE-2026-84782.patch: reset init_off before
retransmitting a message in ssl/d1_both.c and skip the
retransmission while a handshake write is unfinished in
ssl/d1_lib.c
- CVE-2026-84782
Updated packages:
-
libssl-dev_1.0.2g-1ubuntu4.21+tuxcare.els18_amd64.deb
sha:66d4c913d60d90a2f956ae6c69699a123fcb34de
-
libssl-doc_1.0.2g-1ubuntu4.21+tuxcare.els18_all.deb
sha:2486c29a4ae0971d902a6890cbb7f54f81e1590b
-
libssl1.0.0_1.0.2g-1ubuntu4.21+tuxcare.els18_amd64.deb
sha:1a31547caf8b374345cfbc5c2654e955b0a32261
-
openssl_1.0.2g-1ubuntu4.21+tuxcare.els18_amd64.deb
sha:b6c6e2ac0951ec0e938c6f03d7edcab501d11bec
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
