{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-42772, CVE-2026-54873: replace the QUIC stream reassembly list with\n an rbtree-based quic_strm_reas.c and cap packet-buffer pinning per stream\n- CVE-2026-84784: advance cur_retire_prior_to only when RETIRE_CONNECTION_ID\n is acknowledged\n- CVE-2026-35191: credit unvalidated amplification once per datagram\n- CVE-2026-75804: report connection-level QUIC flow control errors", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/tuxcare9.8esu/advisories/2026/clsa-2026_1791531442.json" } ], "tracking": { "current_release_date": "2026-10-09T07:38:49Z", "generator": { "date": "2026-10-09T07:38:49Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1791531442", "initial_release_date": "2026-10-09T07:38:49Z", "revision_history": [ { "date": "2026-10-09T07:38:49Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "openssl: Fix of 5 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.8", "product": { "name": "AlmaLinux 9.8", "product_id": "AlmaLinux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Rocky Linux 9.8", "product": { "name": "Rocky Linux 9.8", "product_id": "Rocky Linux-9.8", "product_identification_helper": { "cpe": "cpe:2.3:o:resf:rocky_linux:9.8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Rocky Linux" } ], "category": "vendor", "name": "Rocky Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_id": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.5.8-1.el9_8.tuxcare.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_id": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-fips-provider@3.5.8-1.el9_8.tuxcare.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_id": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.5.8-1.el9_8.tuxcare.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_id": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.5.8-1.el9_8.tuxcare.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_id": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.5.8-1.el9_8.tuxcare.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_id": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.5.8-1.el9_8.tuxcare.els1?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_id": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.5.8-1.el9_8.tuxcare.els1?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_id": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-fips-provider@3.5.8-1.el9_8.tuxcare.els1?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_id": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.5.8-1.el9_8.tuxcare.els1?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_id": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.5.8-1.el9_8.tuxcare.els1?arch=i686&epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_id": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.5.8-1.el9_8.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_id": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-fips-provider@3.5.8-1.el9_8.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_id": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.5.8-1.el9_8.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_id": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.5.8-1.el9_8.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_id": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.5.8-1.el9_8.tuxcare.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_id": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.5.8-1.el9_8.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_id": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.5.8-1.el9_8.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_id": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-fips-provider@3.5.8-1.el9_8.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_id": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.5.8-1.el9_8.tuxcare.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_id": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.5.8-1.el9_8.tuxcare.els1?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_id": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.5.8-1.el9_8.tuxcare.els2?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_id": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-fips-provider@3.5.8-1.el9_8.tuxcare.els2?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_id": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.5.8-1.el9_8.tuxcare.els2?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_id": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.5.8-1.el9_8.tuxcare.els2?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_id": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.5.8-1.el9_8.tuxcare.els2?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_id": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.5.8-1.el9_8.tuxcare.els1?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_id": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.5.8-1.el9_8.tuxcare.els1?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_id": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-fips-provider@3.5.8-1.el9_8.tuxcare.els1?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_id": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.5.8-1.el9_8.tuxcare.els1?arch=aarch64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_id": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.5.8-1.el9_8.tuxcare.els1?arch=aarch64&epoch=1" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of AlmaLinux 9.8", "product_id": "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "AlmaLinux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "relates_to_product_reference": "Rocky Linux-9.8" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686 as a component of Rocky Linux 9.8", "product_id": "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686" }, "product_reference": "openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "relates_to_product_reference": "Rocky Linux-9.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-84784", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Issue summary: A malicious remote peer may flood the local QUIC\nstack with NEW_CONNECTION_ID frames by avoiding a limit check on\nhow many connection IDs the remote QUIC stack can use.\n\nImpact summary: The local QUIC stack sends a RETIRE_CONN_ID frame\nfor every NEW_CONNECTION_ID frame it receives. The RETIRE_CONN_ID\nframe is dispatched via the Control Frame Queue (CFQ). If the remote\npeer also withholds ACKs, then it can force the local stack\nto allocate ~400MB (depending on ACK delay).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: RFC 9000 sections 5.1.1 and 5.1.2 [1] describe the mechanism\nby which a remote peer can notify the local QUIC stack to change the\ndestination connection ID (a.k.a. CID) the local stack uses to\nidentify the connection at the remote peer. Each CID is associated\nwith a sequence number. The sequence number is transmitted\nin NEW_CONNECTION_ID and RETIRE_CONNECTION_ID frames to identify the CID\nwhich is being either associated with a connection or retired.\n\nThe remote peer sends a NEW_CONNECTION_ID frame to let the local stack know\na new CID is being associated with an existing connection. The\nNEW_CONNECTION_ID frame carries the new CID, its sequence number, and the\nretire-prior-to number. The retire-prior-to identifies existing\nCIDs that are to be retired. The local QUIC stack must send a\nRETIRE_CONNECTION_ID for every destination CID whose sequence number\nis less than retire-prior-to. The CID becomes retired after the\nlocal stack receives an ACK for its RETIRE_CONNECTION_ID frame.\n\nAlthough the OpenSSL QUIC stack supports at most one destination CID\nfor every connection, it can be tricked into processing more than\none RETIRE_CONNECTION_ID frame per connection. The OpenSSL QUIC\nstack currently retires the destination CID as soon as it receives\nthe NEW_CONNECTION_ID, while in fact the destination CID must\nbe retired after an ACK for the RETIRE_CONNECTION_ID frame is received.\nCorrecting the flawed logic also fixes the backlog growth.\n\n[1] https://datatracker.ietf.org/doc/html/rfc9000#name-issuing-connection-ids\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "known_affected": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-84784" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/4685c914b0d410b1034f40b547c95bc95e7a380a", "url": "https://github.com/openssl/openssl/commit/4685c914b0d410b1034f40b547c95bc95e7a380a" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/9a30fe0fba195c14e5b87bf93c0d0fdb70373806", "url": "https://github.com/openssl/openssl/commit/9a30fe0fba195c14e5b87bf93c0d0fdb70373806" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/dba3c48d653c64fcbc9070a17a0ee2b3e2f3af1f", "url": "https://github.com/openssl/openssl/commit/dba3c48d653c64fcbc9070a17a0ee2b3e2f3af1f" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/e9e5155833fa968bee50024bf9ca3a185ab599fe", "url": "https://github.com/openssl/openssl/commit/e9e5155833fa968bee50024bf9ca3a185ab599fe" }, { "category": "external", "summary": "https://openssl-library.org/news/secadv/20260929.txt", "url": "https://openssl-library.org/news/secadv/20260929.txt" } ], "release_date": "2026-09-29T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:37:23.325845Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442" }, { "category": "none_available", "date": "2026-09-29T16:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-54873", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Issue summary: QUIC process may keep memory for QUIC packet\nbuffer for much longer period than necessary.\n\nImpact summary: Remote peer can exploit this vulnerability\nby sending maliciously crafted packets, making the local\nQUIC stack to keep the memory for packet buffers allocated.\nThe time for which the memory remains allocated is entirely\nunder the control of the potentially malicious remote peer.\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: To save copy operation from the packet buffer to the\nstream reassemble buffer the QUIC stack leaves the stream data\non the packet buffer waiting to be copied to a buffer provided\nby the local receiving application. The QUIC stack releases\na reference to the packet buffer only after the data are copied\nto the application buffer. This design is more efficient for\nlegitimate data transfers but enables an attacker to allocate a lot\nmore memory than actually required by the data kept in the receiving\nstream buffer.\n\nTo mitigate the vulnerability, the QUIC stack now calculates\nand monitors memory overhead for every stream. The memory overhead\nfor a single stream frame is calculated as a difference between the\nsize of the whole packet that carries the stream frame and the size\nof the stream frame itself. The memory overhead for a single stream\nframe is added to the total (cumulative) memory overhead QUIC stack\nkeeps for each stream. Once the cumulative memory overhead exceeds\n64kB, the QUIC stack moves the stream frame data from the packet\nbuffer to the stream buffer, starting with the next packet received.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "known_affected": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-54873" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23", "url": "https://github.com/openssl/openssl/commit/1f643b8bc735487b500a1f68a7fb3a22d5e38e23" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53", "url": "https://github.com/openssl/openssl/commit/279e7ee1392af98785746788168749491c74bd53" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb", "url": "https://github.com/openssl/openssl/commit/3ea6213e050e938ecbbf8c4eff32bec2736780eb" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2", "url": "https://github.com/openssl/openssl/commit/7127fb10888b49711c63128a09e524c0d2d5d0b2" }, { "category": "external", "summary": "https://openssl-library.org/news/secadv/20260929.txt", "url": "https://openssl-library.org/news/secadv/20260929.txt" } ], "release_date": "2026-09-29T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:37:23.325845Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442" }, { "category": "none_available", "date": "2026-09-29T16:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-35191", "cwe": { "id": "CWE-440", "name": "Expected Behavior Violation" }, "notes": [ { "category": "description", "text": "Issue summary: The OpenSSL QUIC server, when configured to not preform address\nvalidation, can be forced to count incoming packets multiple times in its\nunvalidated credit computation, leading to a violation of the RFC 9000\nunvalidated connection amplification limit of 3 times the amount of data\nreceived.\n\nImpact summary: A remote attacker able to spoof packets to a server using the\nOpenSSL QUIC implementation might use the server for an amplification of\na DDoS attack.\n\nCWE: CWE-440: Expected Behavior Violation \n\nDescription: OpenSSL's QUIC stack, when operating as a server, enforces client\naddress validation (RFC 9000, Section 8), to confirm the peer address is not\nused for a traffic amplification attack. If this feature is disabled on the\nserver, the QUIC stack limits the amount of server data that can be sent to 3\ntimes the amount of data received from the peer address, until such time as the\nTLS handshake is completed.\n\nThe OpenSSL QUIC server, when operating in non-validation mode, adds the\nlength of the whole datagram received to the unvalidated credit limit when\nprocessing each QUIC packet in the datagram. A remote peer may,\nafter establishing a connection with an initial client hello frame, send a\nsubsequent datagram containing multiple QUIC packets, leading the server to\naccount the entire datagram length for each packet in the datagram, resulting\nin the server believing that the peer has sent more data than it actually has,\nthereby violating the 3x amplification limit mandated by the RFC.\n\nFIPS impact: no\nAs the QUIC stack lives outside the FIPS module boundary, no FIPS modules\nare affected by this CVE.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "known_affected": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-35191" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/0fe4442d4f8ea3af8a174046dae176e0d4717239", "url": "https://github.com/openssl/openssl/commit/0fe4442d4f8ea3af8a174046dae176e0d4717239" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/2de4c35fb13fc58f43fd8dc1d261700472ce72e5", "url": "https://github.com/openssl/openssl/commit/2de4c35fb13fc58f43fd8dc1d261700472ce72e5" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/e44292e58b090014232ef75bd400393851b24d1a", "url": "https://github.com/openssl/openssl/commit/e44292e58b090014232ef75bd400393851b24d1a" }, { "category": "external", "summary": "https://openssl-library.org/news/secadv/20260929.txt", "url": "https://openssl-library.org/news/secadv/20260929.txt" } ], "release_date": "2026-09-29T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:37:23.325845Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442" }, { "category": "none_available", "date": "2026-09-29T16:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-75804", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "Issue summary: OpenSSL QUIC stack does not enforce connection\nlevel flow control for streams. Remote peers may send more bytes\nas long as they fit within the stream flow control limits.\n\nImpact summary: A malicious remote peer may exploit the lack of connection\nflow control for streams to make the QUIC stack receive ~100MB of memory\ninstead of 768 KiB (default flow control window size).\n\nCWE: CWE-770: Allocation of Resources Without Limits or Throttling\n\nDescription: The local QUIC stack advertises two flow control limits\nto its remote peer: stream flow control limit and connection flow\ncontrol limit. The remote peer must follow both limits when transmitting\nstream data.\n\nWhenever the local QUIC stack receives a stream frame, it validates\nthat the size of the received stream frame stays within flow control limits.\nIf either limit is exceeded (stream level or connection level), then\nthe QUIC stack must close the connection with a flow control error.\n\nThe vulnerable OpenSSL QUIC stack enforces the stream-level but not\nthe connection-level limit. To exploit the issue, three conditions must be met:\n - the remote peer opens several streams\n - each stream must stay within the stream-level flow control limit\n - there must be no zero-offset byte sent on any of the streams\n (to prevent the vulnerable QUIC stack from consuming data).\nBy meeting the conditions above, the remote peer may make the local stack\nallocate 2 x MAX_STREAMS x (stream flow control limit) bytes\nof memory. MAX_STREAMS defaults to 100, and the limit applies to both\nbidirectional and unidirectional streams, making it 200 in total. The default\nflow control window for a stream is 512kB. The remote peer may\nforce the vulnerable QUIC stack to allocate 100MB of heap per connection.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "known_affected": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-75804" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e", "url": "https://github.com/openssl/openssl/commit/2e8f54666b3fb7b05ff5f58aa6cac9285163654e" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538", "url": "https://github.com/openssl/openssl/commit/4533ee8a5686c953ed3b644738ac4bdf20806538" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a", "url": "https://github.com/openssl/openssl/commit/64d3102fb5b54311e92517f26ba00169d719e74a" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03", "url": "https://github.com/openssl/openssl/commit/f9eaecf5bdd6692da052bc65b0332af2a938ac03" }, { "category": "external", "summary": "https://openssl-library.org/news/secadv/20260929.txt", "url": "https://openssl-library.org/news/secadv/20260929.txt" } ], "release_date": "2026-09-29T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:37:23.325845Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442" }, { "category": "none_available", "date": "2026-09-29T16:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-42772", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "description", "text": "Issue summary: The QUIC stream reassembly algorithm performance deteriorates\nprogressively as packets are arriving out of order. The worst case has\na quadratic complexity proportional to the number of stream frames kept in\nthe buffer for the received stream data.\n\nImpact summary: A remote QUIC peer that completes the handshake can create\na connection-scoped CPU pressure and potentially a Denial of Service using\ncompliant STREAM frames inside the advertised receive window, with low\nattacker bandwidth.\n\nCWE: CWE-407: Inefficient Algorithmic Complexity\n\nDescription: OpenSSL manages received QUIC stream fragments using a\ndoubly-linked list. While it optimizes for append operations (at the end of\nthe list), it falls back to a head-to-tail linear search for any fragment\nthat does not immediately follow the current `tail`.\n\nBy manipulating the sequence of offsets, an attacker can force the server\nto perform O(n^2) operations, consuming excessive CPU time for the\nQUIC process.\n\nFIPS impact: no\nThe FIPS module is not affected as the QUIC implementation is outside of\nthe OpenSSL FIPS module boundary.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "known_affected": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42772" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09", "url": "https://github.com/openssl/openssl/commit/32d0ed8afe1b8c3e7ece725b44663da3d7087a09" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e", "url": "https://github.com/openssl/openssl/commit/ca8402e273af4de5b3f04fa61a0f0c02ce3ae20e" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773", "url": "https://github.com/openssl/openssl/commit/eb2becc0a4baea7f3050a247834d0e5c2ebe1773" }, { "category": "external", "summary": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a", "url": "https://github.com/openssl/openssl/commit/f42ae513bbda513b3c121d54834040ee4a0eae1a" }, { "category": "external", "summary": "https://openssl-library.org/news/secadv/20260929.txt", "url": "https://openssl-library.org/news/secadv/20260929.txt" } ], "release_date": "2026-09-29T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-09T07:37:23.325845Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els2.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els2.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1791531442" }, { "category": "none_available", "date": "2026-09-29T16:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "AlmaLinux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-devel-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-fips-provider-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-libs-1:3.5.8-1.el9_8.tuxcare.els1.x86_64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.aarch64", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.i686", "Rocky Linux-9.8:openssl-perl-1:3.5.8-1.el9_8.tuxcare.els1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }