[CLSA-2026:1793021007] openssl11: Fix of CVE-2026-63072
Type:
security
Severity:
Important
Release date:
2026-10-26 13:23:37 UTC
Description:
- CVE-2026-63072: size the CMS key-unwrap output buffer for the worst case so a failed AES-WRAP-PAD unwrap cannot write past the allocation
CVEs fixed:
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:303ec32ced29871fac587d9d718279b1f9847e1d2540574301290c35905f813f
  • openssl11-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:3e6f5a59d0315c226a1ad782546bd481275bd5e960a2cd97c5d23605edc0ccc1
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:de771190fa25a37e9effaf4a86534877b12f49893c0c8ca2b1a13147e061b446
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:82d08be93bd6717201842433df5a1ce269cc58da326f367fa12d76bbc6963b6d
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:3c93c3ec44d69ae96c6894e7e016e5e2959f57fdf45783f7337f34f4d0b67a1f
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:b928aa645e04b15ca5dd844862526d21a5569b706f6dd1dc4458d71100ecb220
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:5354d821b661cf723a226eaad545b4d2e8dfbaec3df6d45195a90ca853fac47e
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:cc9c8188365cb3237eca2911b3e3a34bcf5d75efb8dce326cddc55ffc2f1a343
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.