[CLSA-2026:1786527958] openssl: Fix of CVE-2026-28389
Type:
security
Severity:
Important
Release date:
2026-08-13 05:31:26 UTC
Description:
- CVE-2026-28389: avoid NULL dereferences when CMS KARI omits KeyEncryptionAlgorithmIdentifier parameters
CVEs fixed:
Updated packages:
  • openssl-3.2.2-7.el9_6.tuxcare.1.els9.x86_64.rpm
    sha:8ae763f5fb74f36744138b96d9b9966025ba17deea329c788a33441a8bb00e2e
  • openssl-devel-3.2.2-7.el9_6.tuxcare.1.els9.i686.rpm
    sha:0bcb117e033aa1c7d70c57fbadf6107d640f5233fdc0d5a82f9f89bbdc76fa0b
  • openssl-devel-3.2.2-7.el9_6.tuxcare.1.els9.x86_64.rpm
    sha:e9f49bdd8b4bd1b4bc48a6c947b94d32d02c738740606b0c543194577b85dca6
  • openssl-libs-3.2.2-7.el9_6.tuxcare.1.els9.i686.rpm
    sha:36b7d7043f9db87013f3269b326e637ea8ac119cf4edbc237a293c47d444e57b
  • openssl-libs-3.2.2-7.el9_6.tuxcare.1.els9.x86_64.rpm
    sha:d1dd22d8364584efd88fa8fe217bcf8eefece8b148011ae943e4f9b4f0f80e54
  • openssl-perl-3.2.2-7.el9_6.tuxcare.1.els9.x86_64.rpm
    sha:7da6ef43d64bb8d5d10582d3e3260477049ec811c5aeeaf63097ae17b5f1557b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.