Release date:
2026-08-27 16:27:29 UTC
Description:
- CVE-2026-42766: fix NULL pointer dereference during password-based CMS
decryption when the optional keyDerivationAlgorithm field is absent
- CVE-2026-34180: fix heap buffer over-read caused by integer truncation of
ASN.1 primitive content lengths above 2 GB on 64-bit platforms
Updated packages:
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:cf075f4880ab9fabaeb3b85dfceacd07a2e29a7a4cc1e126fb10bbd40540a79d
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:48271279d8e87e38e6ef0ad1aa09c3755769cdd30de0b62cd7ee2ccf4c8606f8
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:f797ffb7b53116045c4f6630b1f157404704f70e7aa0e4094ee9957113717d0f
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:fa0a1c6ab45210081a797e229668b42fca1ad130558537dd6c78b04081591d13
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:beae6ec5ebf89606d4dad2551e613b028c5f743735aaa3391867832bfbefd74b
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:84933076b43cf2e43ec9cfc903a4b29cf2fa7551da06d1ad309a1d2cc77ac9fc
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:7a3f3f90860deecf82281138a0024bf5d56c16388dba56a9536f061fb2f4f657
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:b89676d6e56bc40ba0c4dde4a630a75abf187019cd6c63093143de9a040119f1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
