Release date:
2026-10-08 20:11:47 UTC
Description:
* SECURITY UPDATE: excessive memory use with relative CRL distribution
point names
- debian/patches/CVE-2026-35189.patch: build the full name of a
nameRelativeToCRLIssuer distribution point only while matching a
CRL instead of for every parsed certificate in
crypto/x509v3/v3_crld.c, crypto/x509v3/v3_purp.c and
crypto/x509/x509_vfy.c
- CVE-2026-35189
* SECURITY UPDATE: DTLS retransmission corrupts a suspended write
- debian/patches/CVE-2026-84782.patch: reset init_off before
retransmitting a message in ssl/statem/statem_dtls.c and skip the
retransmission while a write is still parked in ssl/d1_lib.c
- CVE-2026-84782
Updated packages:
-
libssl-dev_1.1.1f-1ubuntu2.24+tuxcare.els9_amd64.deb
sha:6366ec2bd087933e0d19b436ca2106ec162f2dbe
-
libssl-doc_1.1.1f-1ubuntu2.24+tuxcare.els9_all.deb
sha:48455623cbba9efa66d608e476f0100280e9b126
-
libssl1.1_1.1.1f-1ubuntu2.24+tuxcare.els9_amd64.deb
sha:7c838831a6004d539015d65ba024959224341b8c
-
openssl_1.1.1f-1ubuntu2.24+tuxcare.els9_amd64.deb
sha:4db8ed8e76f98ea687e7fe7c3ad7deec122eedf9
-
libssl-dev_1.1.1f-1ubuntu2.24+tuxcare.els9_arm64.deb
sha:8096f4271ea4d8c278f1dc946ffbd41e846c3b1d
-
libssl1.1_1.1.1f-1ubuntu2.24+tuxcare.els9_arm64.deb
sha:b58a22262e746e8b71335655e879f2a5ce8ca4fd
-
openssl_1.1.1f-1ubuntu2.24+tuxcare.els9_arm64.deb
sha:fe972b25bf398fb1e98c5fc6709ec33461f38de1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
