{
  "document": {
    "aggregate_severity": {
      "text": "High"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_alt_common/el8/vex/2026/cve-2026-34183-els_alt_common-el8.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-10-15T21:19:22Z",
      "generator": {
        "date": "2026-10-15T21:19:22Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CVE-2026-34183-ELS_ALT_COMMON-EL8",
      "initial_release_date": "2026-06-09T17:17:00Z",
      "revision_history": [
        {
          "date": "2026-06-09T17:17:00Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-10-15T21:19:22Z",
          "number": "2",
          "summary": "Official Publication"
        }
      ],
      "status": "final",
      "version": "2"
    },
    "title": "Security update on CVE-2026-34183"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Community Enterprise Operating System 8",
                "product": {
                  "name": "Community Enterprise Operating System 8",
                  "product_id": "CentOS-8",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:centos:centos:8:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Community Enterprise Operating System"
          }
        ],
        "category": "vendor",
        "name": "Cloud Linux Software, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "alt-openssl11-1:1.1.1w-3.3.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-1:1.1.1w-3.3.el8.x86_64",
                  "product_id": "alt-openssl11-1:1.1.1w-3.3.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11@1.1.1w-3.3.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-1:1.1.1w-3.6.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-1:1.1.1w-3.6.el8.x86_64",
                  "product_id": "alt-openssl11-1:1.1.1w-3.6.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11@1.1.1w-3.6.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-1:1.1.1w-3.5.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-1:1.1.1w-3.5.el8.x86_64",
                  "product_id": "alt-openssl11-1:1.1.1w-3.5.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11@1.1.1w-3.5.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-1:1.1.1w-3.9.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-1:1.1.1w-3.9.el8.x86_64",
                  "product_id": "alt-openssl11-1:1.1.1w-3.9.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11@1.1.1w-3.9.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-1:1.1.1w-3.1.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-1:1.1.1w-3.1.el8.x86_64",
                  "product_id": "alt-openssl11-1:1.1.1w-3.1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11@1.1.1w-3.1.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-1:1.1.1w-3.2.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-1:1.1.1w-3.2.el8.x86_64",
                  "product_id": "alt-openssl11-1:1.1.1w-3.2.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11@1.1.1w-3.2.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-1:1.1.1w-3.8.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-1:1.1.1w-3.8.el8.x86_64",
                  "product_id": "alt-openssl11-1:1.1.1w-3.8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11@1.1.1w-3.8.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-1:1.1.1w-3.4.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-1:1.1.1w-3.4.el8.x86_64",
                  "product_id": "alt-openssl11-1:1.1.1w-3.4.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11@1.1.1w-3.4.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-devel-1:1.1.1w-3.6.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-devel-1:1.1.1w-3.6.el8.x86_64",
                  "product_id": "alt-openssl11-devel-1:1.1.1w-3.6.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-devel@1.1.1w-3.6.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-devel-1:1.1.1w-3.1.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-devel-1:1.1.1w-3.1.el8.x86_64",
                  "product_id": "alt-openssl11-devel-1:1.1.1w-3.1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-devel@1.1.1w-3.1.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-devel-1:1.1.1w-3.8.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-devel-1:1.1.1w-3.8.el8.x86_64",
                  "product_id": "alt-openssl11-devel-1:1.1.1w-3.8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-devel@1.1.1w-3.8.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-devel-1:1.1.1w-3.2.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-devel-1:1.1.1w-3.2.el8.x86_64",
                  "product_id": "alt-openssl11-devel-1:1.1.1w-3.2.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-devel@1.1.1w-3.2.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-devel-1:1.1.1w-3.9.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-devel-1:1.1.1w-3.9.el8.x86_64",
                  "product_id": "alt-openssl11-devel-1:1.1.1w-3.9.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-devel@1.1.1w-3.9.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-devel-1:1.1.1w-3.4.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-devel-1:1.1.1w-3.4.el8.x86_64",
                  "product_id": "alt-openssl11-devel-1:1.1.1w-3.4.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-devel@1.1.1w-3.4.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-devel-1:1.1.1w-3.3.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-devel-1:1.1.1w-3.3.el8.x86_64",
                  "product_id": "alt-openssl11-devel-1:1.1.1w-3.3.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-devel@1.1.1w-3.3.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-devel-1:1.1.1w-3.5.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-devel-1:1.1.1w-3.5.el8.x86_64",
                  "product_id": "alt-openssl11-devel-1:1.1.1w-3.5.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-devel@1.1.1w-3.5.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl-devel-1:1.0.2u-4.el8.x86_64",
                "product": {
                  "name": "alt-openssl-devel-1:1.0.2u-4.el8.x86_64",
                  "product_id": "alt-openssl-devel-1:1.0.2u-4.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl-devel@1.0.2u-4.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-libs-1:1.1.1w-3.1.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-libs-1:1.1.1w-3.1.el8.x86_64",
                  "product_id": "alt-openssl11-libs-1:1.1.1w-3.1.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-libs@1.1.1w-3.1.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-libs-1:1.1.1w-3.6.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-libs-1:1.1.1w-3.6.el8.x86_64",
                  "product_id": "alt-openssl11-libs-1:1.1.1w-3.6.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-libs@1.1.1w-3.6.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-libs-1:1.1.1w-3.8.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-libs-1:1.1.1w-3.8.el8.x86_64",
                  "product_id": "alt-openssl11-libs-1:1.1.1w-3.8.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-libs@1.1.1w-3.8.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-libs-1:1.1.1w-3.9.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-libs-1:1.1.1w-3.9.el8.x86_64",
                  "product_id": "alt-openssl11-libs-1:1.1.1w-3.9.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-libs@1.1.1w-3.9.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-libs-1:1.1.1w-3.4.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-libs-1:1.1.1w-3.4.el8.x86_64",
                  "product_id": "alt-openssl11-libs-1:1.1.1w-3.4.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-libs@1.1.1w-3.4.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-libs-1:1.1.1w-3.2.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-libs-1:1.1.1w-3.2.el8.x86_64",
                  "product_id": "alt-openssl11-libs-1:1.1.1w-3.2.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-libs@1.1.1w-3.2.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-libs-1:1.1.1w-3.3.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-libs-1:1.1.1w-3.3.el8.x86_64",
                  "product_id": "alt-openssl11-libs-1:1.1.1w-3.3.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-libs@1.1.1w-3.3.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl11-libs-1:1.1.1w-3.5.el8.x86_64",
                "product": {
                  "name": "alt-openssl11-libs-1:1.1.1w-3.5.el8.x86_64",
                  "product_id": "alt-openssl11-libs-1:1.1.1w-3.5.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl11-libs@1.1.1w-3.5.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl-libs-1:1.0.2u-4.el8.x86_64",
                "product": {
                  "name": "alt-openssl-libs-1:1.0.2u-4.el8.x86_64",
                  "product_id": "alt-openssl-libs-1:1.0.2u-4.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl-libs@1.0.2u-4.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "alt-openssl-1:1.0.2u-4.el8.x86_64",
                "product": {
                  "name": "alt-openssl-1:1.0.2u-4.el8.x86_64",
                  "product_id": "alt-openssl-1:1.0.2u-4.el8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/tuxcare/alt-openssl@1.0.2u-4.el8?arch=x86_64&epoch=1&os_name=centos&os_version=8"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-1:1.1.1w-3.3.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-1:1.1.1w-3.3.el8.x86_64"
        },
        "product_reference": "alt-openssl11-1:1.1.1w-3.3.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-1:1.1.1w-3.6.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-1:1.1.1w-3.6.el8.x86_64"
        },
        "product_reference": "alt-openssl11-1:1.1.1w-3.6.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-1:1.1.1w-3.5.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-1:1.1.1w-3.5.el8.x86_64"
        },
        "product_reference": "alt-openssl11-1:1.1.1w-3.5.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-1:1.1.1w-3.9.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-1:1.1.1w-3.9.el8.x86_64"
        },
        "product_reference": "alt-openssl11-1:1.1.1w-3.9.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-1:1.1.1w-3.1.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-1:1.1.1w-3.1.el8.x86_64"
        },
        "product_reference": "alt-openssl11-1:1.1.1w-3.1.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-1:1.1.1w-3.2.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-1:1.1.1w-3.2.el8.x86_64"
        },
        "product_reference": "alt-openssl11-1:1.1.1w-3.2.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-1:1.1.1w-3.8.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-1:1.1.1w-3.8.el8.x86_64"
        },
        "product_reference": "alt-openssl11-1:1.1.1w-3.8.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-1:1.1.1w-3.4.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-1:1.1.1w-3.4.el8.x86_64"
        },
        "product_reference": "alt-openssl11-1:1.1.1w-3.4.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-devel-1:1.1.1w-3.6.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.6.el8.x86_64"
        },
        "product_reference": "alt-openssl11-devel-1:1.1.1w-3.6.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-devel-1:1.1.1w-3.1.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.1.el8.x86_64"
        },
        "product_reference": "alt-openssl11-devel-1:1.1.1w-3.1.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-devel-1:1.1.1w-3.8.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.8.el8.x86_64"
        },
        "product_reference": "alt-openssl11-devel-1:1.1.1w-3.8.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-devel-1:1.1.1w-3.2.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.2.el8.x86_64"
        },
        "product_reference": "alt-openssl11-devel-1:1.1.1w-3.2.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-devel-1:1.1.1w-3.9.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.9.el8.x86_64"
        },
        "product_reference": "alt-openssl11-devel-1:1.1.1w-3.9.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-devel-1:1.1.1w-3.4.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.4.el8.x86_64"
        },
        "product_reference": "alt-openssl11-devel-1:1.1.1w-3.4.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-devel-1:1.1.1w-3.3.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.3.el8.x86_64"
        },
        "product_reference": "alt-openssl11-devel-1:1.1.1w-3.3.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-devel-1:1.1.1w-3.5.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.5.el8.x86_64"
        },
        "product_reference": "alt-openssl11-devel-1:1.1.1w-3.5.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl-devel-1:1.0.2u-4.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl-devel-1:1.0.2u-4.el8.x86_64"
        },
        "product_reference": "alt-openssl-devel-1:1.0.2u-4.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-libs-1:1.1.1w-3.1.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.1.el8.x86_64"
        },
        "product_reference": "alt-openssl11-libs-1:1.1.1w-3.1.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-libs-1:1.1.1w-3.6.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.6.el8.x86_64"
        },
        "product_reference": "alt-openssl11-libs-1:1.1.1w-3.6.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-libs-1:1.1.1w-3.8.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.8.el8.x86_64"
        },
        "product_reference": "alt-openssl11-libs-1:1.1.1w-3.8.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-libs-1:1.1.1w-3.9.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.9.el8.x86_64"
        },
        "product_reference": "alt-openssl11-libs-1:1.1.1w-3.9.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-libs-1:1.1.1w-3.4.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.4.el8.x86_64"
        },
        "product_reference": "alt-openssl11-libs-1:1.1.1w-3.4.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-libs-1:1.1.1w-3.2.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.2.el8.x86_64"
        },
        "product_reference": "alt-openssl11-libs-1:1.1.1w-3.2.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-libs-1:1.1.1w-3.3.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.3.el8.x86_64"
        },
        "product_reference": "alt-openssl11-libs-1:1.1.1w-3.3.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl11-libs-1:1.1.1w-3.5.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.5.el8.x86_64"
        },
        "product_reference": "alt-openssl11-libs-1:1.1.1w-3.5.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl-libs-1:1.0.2u-4.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl-libs-1:1.0.2u-4.el8.x86_64"
        },
        "product_reference": "alt-openssl-libs-1:1.0.2u-4.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "alt-openssl-1:1.0.2u-4.el8.x86_64 as a component of Community Enterprise Operating System 8",
          "product_id": "CentOS-8:alt-openssl-1:1.0.2u-4.el8.x86_64"
        },
        "product_reference": "alt-openssl-1:1.0.2u-4.el8.x86_64",
        "relates_to_product_reference": "CentOS-8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-34183",
      "cwe": {
        "id": "CWE-1325",
        "name": "Improperly Controlled Sequential Memory Allocation"
      },
      "notes": [
        {
          "category": "description",
          "text": "Issue summary: Remote peer may exhaust heap memory of the QUIC\nserver or client by flooding it with packets containing PATH_CHALLENGE\nframes.\n\nImpact summary: A malicious remote peer can cause an unbounded\nmemory allocation which can lead to an abnormal termination of the\napplication acting as a QUIC client or server and a Denial of Service.\n\nA remote peer may exhaust heap memory by flooding the local\nQUIC stack with PATH_CHALLENGE frames. The local QUIC stack\nallocates a PATH_RESPONSE frame for every PATH_CHALLENGE it receives.\nThe allocated PATH_RESPONSE frame gets freed only when the remote\npeer acknowledges reception of the PATH_RESPONSE frame which will\nnot be done by a malicious peer.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by\nthis issue. The QUIC stack is outside of OpenSSL FIPS module\nboundary.",
          "title": "Vulnerability description"
        },
        {
          "category": "other",
          "text": "TuxCare has assessed that this vulnerability does not impact any currently supported TuxCare products. This evaluation may change as new information becomes available. For additional details regarding this vulnerability and affected products, refer to the provided references.",
          "title": "Statement"
        }
      ],
      "product_status": {
        "known_not_affected": [
          "CentOS-8:alt-openssl-1:1.0.2u-4.el8.x86_64",
          "CentOS-8:alt-openssl-devel-1:1.0.2u-4.el8.x86_64",
          "CentOS-8:alt-openssl-libs-1:1.0.2u-4.el8.x86_64",
          "CentOS-8:alt-openssl11-1:1.1.1w-3.1.el8.x86_64",
          "CentOS-8:alt-openssl11-1:1.1.1w-3.2.el8.x86_64",
          "CentOS-8:alt-openssl11-1:1.1.1w-3.3.el8.x86_64",
          "CentOS-8:alt-openssl11-1:1.1.1w-3.4.el8.x86_64",
          "CentOS-8:alt-openssl11-1:1.1.1w-3.5.el8.x86_64",
          "CentOS-8:alt-openssl11-1:1.1.1w-3.6.el8.x86_64",
          "CentOS-8:alt-openssl11-1:1.1.1w-3.8.el8.x86_64",
          "CentOS-8:alt-openssl11-1:1.1.1w-3.9.el8.x86_64",
          "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.1.el8.x86_64",
          "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.2.el8.x86_64",
          "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.3.el8.x86_64",
          "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.4.el8.x86_64",
          "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.5.el8.x86_64",
          "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.6.el8.x86_64",
          "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.8.el8.x86_64",
          "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.9.el8.x86_64",
          "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.1.el8.x86_64",
          "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.2.el8.x86_64",
          "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.3.el8.x86_64",
          "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.4.el8.x86_64",
          "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.5.el8.x86_64",
          "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.6.el8.x86_64",
          "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.8.el8.x86_64",
          "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.9.el8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els-alt-common/cve/CVE-2026-34183"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/5b306efb0b3779dfdd0803b4afc9d08c91f11517",
          "url": "https://github.com/openssl/openssl/commit/5b306efb0b3779dfdd0803b4afc9d08c91f11517"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/7d06955ebe0ecf8adfd4c1e92018586da47ef9ac",
          "url": "https://github.com/openssl/openssl/commit/7d06955ebe0ecf8adfd4c1e92018586da47ef9ac"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/d2e9efbe4900a373227deb136e8665401404ffac",
          "url": "https://github.com/openssl/openssl/commit/d2e9efbe4900a373227deb136e8665401404ffac"
        },
        {
          "category": "external",
          "summary": "https://github.com/openssl/openssl/commit/fbaa83859c01ad64f497b757aaf51be7d05ed9eb",
          "url": "https://github.com/openssl/openssl/commit/fbaa83859c01ad64f497b757aaf51be7d05ed9eb"
        },
        {
          "category": "external",
          "summary": "https://openssl-library.org/news/secadv/20260609.txt",
          "url": "https://openssl-library.org/news/secadv/20260609.txt"
        }
      ],
      "release_date": "2026-06-09T17:17:00Z",
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        },
        {
          "category": "impact",
          "date": "2026-08-01T12:14:00.301399Z",
          "details": "Not vulnerable\n\nalt-openssl11 1.1.1w: NOT AFFECTED — the flaw lives entirely in OpenSSL's QUIC stack (`ssl/quic/*`, `include/internal/quic_*.h`), which does not exist in the 1.1.1 line; the shipped `openssl-1.1.1w.tar.gz` contains no QUIC code, no `PATH_CHALLENGE`/`PATH_RESPONSE` handling, and none of the 14 applied patches introduce any.\n\nPlatform in scope: el8 (alt-openssl11 1.1.1w). No sibling precedent existed for this CVE at this version anywhere in ELSLANG; assessed from the shipped source and build configuration of alt-openssl11, not from NVD version ranges.\n\nEvidence\n**Basis relied on: vulnerable-component-absent.**\n\n### What the CVE is\nCVE-2026-34183 — \"Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler\". The QUIC stack allocates a `PATH_RESPONSE` frame for every received `PATH_CHALLENGE` and only frees it once the peer ACKs the response; a malicious peer never ACKs, so a flood of `PATH_CHALLENGE` frames drives unbounded heap growth → DoS. Moderate severity per OpenSSL; the ELSLANG tickets carry CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H = 7.5 HIGH (availability-only impact).\n\n### Upstream fix commits + first releases containing them\n| Branch | Fix commit | First release |\n|---|---|---|\n| 4.0 | `fbaa83859c01ad64f497b757aaf51be7d05ed9eb` | 4.0.1 |\n| 3.6 | `5b306efb0b3779dfdd0803b4afc9d08c91f11517` | 3.6.3 |\n| 3.5 | `7d06955ebe0ecf8adfd4c1e92018586da47ef9ac` | 3.5.7 |\n| 3.4 | `d2e9efbe4900a373227deb136e8665401404ffac` | 3.4.6 |\n\nUpstream lists affected ranges as **4.0.0<4.0.1, 3.6.0<3.6.3, 3.5.0<3.5.7, 3.4.0<3.4.6 only**. 1.1.1 is **not** in the affected list (openssl-library.org/news/vulnerabilities/). QUIC was introduced in OpenSSL 3.2 (client) / 3.5 (server); it has never existed in the 1.1.1 line.\n\nCommit title of the 3.6 fix: *\"QUIC stack must limit the number of PATH_CHALLENGE frames processed in RX\"* — limits processing to one `PATH_CHALLENGE` per packet and caps the pending `PATH_RESPONSE` queue at `QUIC_PATH_RESPONSE_QLEN` = 32. Files touched (9, all QUIC-only):\n- `include/internal/quic_cfq.h` (`ossl_quic_cfq_discard_unreliable()`)\n- `include/internal/quic_channel.h` (`ossl_ch_reset_rx_state()`)",
          "product_ids": [
            "CentOS-8:alt-openssl-1:1.0.2u-4.el8.x86_64",
            "CentOS-8:alt-openssl-devel-1:1.0.2u-4.el8.x86_64",
            "CentOS-8:alt-openssl-libs-1:1.0.2u-4.el8.x86_64",
            "CentOS-8:alt-openssl11-1:1.1.1w-3.1.el8.x86_64",
            "CentOS-8:alt-openssl11-1:1.1.1w-3.2.el8.x86_64",
            "CentOS-8:alt-openssl11-1:1.1.1w-3.3.el8.x86_64",
            "CentOS-8:alt-openssl11-1:1.1.1w-3.4.el8.x86_64",
            "CentOS-8:alt-openssl11-1:1.1.1w-3.5.el8.x86_64",
            "CentOS-8:alt-openssl11-1:1.1.1w-3.6.el8.x86_64",
            "CentOS-8:alt-openssl11-1:1.1.1w-3.8.el8.x86_64",
            "CentOS-8:alt-openssl11-1:1.1.1w-3.9.el8.x86_64",
            "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.1.el8.x86_64",
            "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.2.el8.x86_64",
            "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.3.el8.x86_64",
            "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.4.el8.x86_64",
            "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.5.el8.x86_64",
            "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.6.el8.x86_64",
            "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.8.el8.x86_64",
            "CentOS-8:alt-openssl11-devel-1:1.1.1w-3.9.el8.x86_64",
            "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.1.el8.x86_64",
            "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.2.el8.x86_64",
            "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.3.el8.x86_64",
            "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.4.el8.x86_64",
            "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.5.el8.x86_64",
            "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.6.el8.x86_64",
            "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.8.el8.x86_64",
            "CentOS-8:alt-openssl11-libs-1:1.1.1w-3.9.el8.x86_64"
          ]
        }
      ]
    }
  ]
}