Release date:
2026-07-29 14:23:41 UTC
Description:
- CVE-2026-34180: fix heap buffer over-read in ASN.1 content parsing caused by truncating a long content length to int
- CVE-2026-7383: fix heap buffer overflow in ASN1_mbstring_ncopy() caused by signed integer overflow when computing the output length
- CVE-2026-42766: fix NULL pointer dereference when keyDerivationAlgorithm is absent in CMS PasswordRecipientInfo
- CVE-2026-9076: fix out-of-bounds read in kek_unwrap_key() check-byte validation for KEK ciphers with a block size below 4 octets
- CVE-2026-42768: enforce implicit rejection for CMS and PKCS#7 RSA PKCS#1 v1.5 decryption
Updated packages:
-
openssl-1.1.1k-5.el8_5.tuxcare.els20.x86_64.rpm
sha:ee07963c49de85d1ac510f701a09c1fad52d3da5596267ce3f8585427ba0ca53
-
openssl-devel-1.1.1k-5.el8_5.tuxcare.els20.i686.rpm
sha:71207b7e80debe7fd66e887c8c03773667fee2b714b039b61777b2692bdfee88
-
openssl-devel-1.1.1k-5.el8_5.tuxcare.els20.x86_64.rpm
sha:3cac6aeba5869a0a900746e306dd91056495d24e89a882485452bc4cd163d577
-
openssl-libs-1.1.1k-5.el8_5.tuxcare.els20.i686.rpm
sha:990ac54209868b2f51dc2ae2db7c834850694a56be660150b49cf499a9f52ca7
-
openssl-libs-1.1.1k-5.el8_5.tuxcare.els20.x86_64.rpm
sha:292aa867323a2bdae305afd71e91e371dc1978bc542ba9c0cffac75498afd325
-
openssl-perl-1.1.1k-5.el8_5.tuxcare.els20.x86_64.rpm
sha:e98c6846d3e75614b9090689f1c3837981cd2e0921b405690a2a5cc410c38ac8
-
openssl-static-1.1.1k-5.el8_5.tuxcare.els20.x86_64.rpm
sha:a0ee146cc0166c106020c9ac22cdf6c11e8308372f42c627cf01f37273a48be3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
