[CLSA-2026:1793030114] openssl11: Fix of CVE-2026-63072
Type:
security
Severity:
Important
Release date:
2026-10-26 16:30:37 UTC
Description:
- CVE-2026-63072: size the CMS key-unwrap output buffer for the worst case so a failed AES-WRAP-PAD unwrap cannot write past the allocation
CVEs fixed:
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:6f96733f373fec43690e626b10b5f0ab2d3bd8e0756f08cc69defe6606099b5f
  • openssl11-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:034217e564fcfb9a310d74de2f2e472171bb24e6f69178479d354b615dd43f95
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:9e821a706ffbc211fd9edd60f617c3c66357a83b2b486a9275c14db32e472e92
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:59ec8a7924c398d55db44255c05a50352d0a22789e56581c897ca04f2f37e510
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:53f59d4c0a11bd47e41745ab61334f504614c8611875f19efc01f60dd63a6a69
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:7e41d6fcc916f3a303c0d261ef826628c9cc5f77e84d106284fd3ab520c4aeac
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:03f447934d8f245b993650ec7e2e8f12d898027c91e021dfc4834cbb74839074
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:57d382cabe404c3c67589040344959f90fa19afd09c5f7f687131049de62b690
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.