Release date:
2026-08-27 15:12:01 UTC
Description:
- CVE-2026-42766: fix NULL pointer dereference during password-based CMS
decryption when the optional keyDerivationAlgorithm field is absent
- CVE-2026-34180: fix heap buffer over-read caused by integer truncation of
ASN.1 primitive content lengths above 2 GB on 64-bit platforms
Updated packages:
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:cc57b91ce701d3e2a7c378642ee1390e3f50cb0f265edb63f85113c73efcc05d
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:23cfedf5ee880eccdb592f0f2da0afcd7d4c6b147ce219e3431673b4d9caaf9f
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:1c64ac486f128edb7aa0f8af91a9287f18aa06ff2367a0355676dfafcec23eb5
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:df2696e58bf31a1215f917eaa1a4440901546467f8e6b20c3fccba8d78bb8818
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:06013d82fdc8d42a30de06bc2538f229775c269d412a10b2e11cd4a725998531
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:898ba39d5cbf06781684c8f2b2b4efd5c1349f8a24b295089ea25257a435d133
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:aeeac14c083d0fbbb7d75317467e2e0c23fea4f04c31e6c50a30adb770e1266f
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:04578ad0a45518db363a14ec9fa30b5c37eeb7485a4780c441d40f47f4c3bfbe
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
