[CLSA-2026:1793022066] openssl11: Fix of CVE-2026-63072
Type:
security
Severity:
Important
Release date:
2026-10-26 17:54:06 UTC
Description:
- CVE-2026-63072: size the CMS key-unwrap output buffer for the worst case so a failed AES-WRAP-PAD unwrap cannot write past the allocation
CVEs fixed:
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els7.aarch64.rpm
    sha:27b010f7900744c2eaa209ebd7309d8fc433de79f1006fc938809eb1c0a04a4a
  • openssl11-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:e8ff52acbaa6a8827a74b44982310ec542e07b0332e05abbe3ee680da25052fd
  • openssl11-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:6c45dcf42c651cf520b0ee1ea1dee0a6d847f3c50e2b384ff15a7ec01d6845f9
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.aarch64.rpm
    sha:abb556fc56ed0af5a0362ba3a5a5174e0bb9ba1e91f2ebe4019f5997c948abfe
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:693e34e07c49f07fc0e1a85f50c93e66a48ba84524c0795ab66b02bc1601bb56
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:74932f9e17d22f75e5966ab339a0f2db640b997a710107d26857893a90de32d4
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.aarch64.rpm
    sha:89082b93cbf98d9394e9fabdaea08f6ac899871085fafe7bdeb7fe9d4bdc5c45
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:0e151b96b6d764ffa6fcd3bbf07df4af9fc8455af175bdeac531bf7487b03283
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:46e9cf5647c7023c4dde7591e1fc53c161e88ab7606d68599bfad4f7760372fb
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.aarch64.rpm
    sha:5833ad7e800aefa398691d60a025caa16aa22eab80e58d13784139633b8c25a9
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:779a2711ac0716bd9958e48ef2a6084c5e0d975d8bc9e454512af40b3c406678
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:69bfccf3d32f0a5dc706317558054df59b00da179f96111b17da2fbebc4534a3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.