[CLSA-2026:1793021488] openssl11: Fix of CVE-2026-63072
Type:
security
Severity:
Important
Release date:
2026-10-26 13:31:39 UTC
Description:
- CVE-2026-63072: size the CMS key-unwrap output buffer for the worst case so a failed AES-WRAP-PAD unwrap cannot write past the allocation
CVEs fixed:
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:a1082e5e19f288aba3301e57c8fe5297f56e461fa85dad78bf8e763a02fba61c
  • openssl11-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:25a51c770730d630f030799d7bb655e41469831b7e6f0e1140b0df7338065a7c
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:74a64ab6733bc02d2797529c8e2d2ee3c34d3cad972a2bbe27eb5051eb884e47
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:224f5fc1e86759d14d024b7ee0364eea1f116983d89b6c28c2703f48205184d0
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:59301f4c4821b4b970615e14f0bf09fb5f4dffdfbdb01c6f5bbbcd371ca4479e
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:c00bc00027bfb2c6ab7b40cf0383887f4be670b20eb3470d710f1e6f9e80eec6
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.i686.rpm
    sha:4699b2892cf62b5fac138746a57299ca75d1605a43c2f696096071894a897fd7
  • openssl11-static-1.1.1k-7.el7.tuxcare.els7.x86_64.rpm
    sha:912e4344e8d9006766471f203ae477a1b0faa5621c1dced5dfd8915cc0d3291b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.