Release date:
2026-10-05 19:47:27 UTC
Description:
* SECURITY UPDATE: excessive memory use with relative CRL distribution
point names
- debian/patches/CVE-2026-35189.patch: build the full name of a
nameRelativeToCRLIssuer distribution point only while matching a
CRL instead of for every parsed certificate in
crypto/x509v3/v3_crld.c, crypto/x509v3/v3_purp.c and
crypto/x509/x509_vfy.c
- CVE-2026-35189
* SECURITY UPDATE: DTLS retransmission corrupts a suspended write
- debian/patches/CVE-2026-84782.patch: reset init_off before
retransmitting a message in ssl/statem/statem_dtls.c and skip the
retransmission while a write is still parked in ssl/d1_lib.c
- CVE-2026-84782
Updated packages:
-
libssl-dev_1.1.1-1ubuntu2.1~18.04.23+tuxcare.els12_amd64.deb
sha:bc4f000fef32efd88d5c1a33296a2a10c57ca8f8
-
libssl-doc_1.1.1-1ubuntu2.1~18.04.23+tuxcare.els12_all.deb
sha:3d31aabdc58d93fdd6e41c9dba3e89fc28a15f38
-
libssl1.1_1.1.1-1ubuntu2.1~18.04.23+tuxcare.els12_amd64.deb
sha:d941986438989efa9e740efc9beb92c66e7422fa
-
openssl_1.1.1-1ubuntu2.1~18.04.23+tuxcare.els12_amd64.deb
sha:5916e44bf5bbfbac41bbe42c74cc6c384e9be049
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
