Tuxcare Errata System 0.0.1 5.10 2026-08-11T18:48:44 Community Enterprise Operating System 10 - strip debug symbols from binary files Important TuxCare License Agreement CVE-2026-22796 CVE-2025-69421 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2023-5678: fix excessive time in DH check/generation with large Q parameter by adding bounds checks in DH_check_pub_key and DH_generate_key - CVE-2024-0727: fix PKCS12 decoding NULL pointer dereference by adding NULL checks where ContentInfo data can be NULL Moderate TuxCare License Agreement CVE-2024-0727 CVE-2023-5678 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2026-28387: fix use-after-free in DANE client code by using X509_free() instead of OPENSSL_free() to properly release reference-counted X509 objects - CVE-2026-28388: fix NULL pointer dereference when processing a delta CRL that has a Delta CRL Indicator but lacks a CRL Number extension - CVE-2026-28389: fix NULL pointer dereference in CMS KeyAgreeRecipientInfo processing when KeyEncryptionAlgorithmIdentifier omits the optional parameter field, by using safe X509_ALGOR_get0() extraction - CVE-2026-28390: fix NULL pointer dereference in CMS KeyTransportRecipientInfo processing when RSA-OAEP SourceFunc parameters are missing, by using safe X509_ALGOR_get0() extraction and OPENSSL_memdup() for label data Important TuxCare License Agreement CVE-2026-28389 CVE-2026-28390 CVE-2026-28388 CVE-2026-28387 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2026-45447: fix use-after-free in PKCS7_verify triggered by a crafted PKCS#7 / S-MIME message with an empty digestAlgorithms ASN.1 SET, which made OpenSSL free a caller-owned BIO; free the BIO chain explicitly and stop at the caller-supplied indata BIO Critical TuxCare License Agreement CVE-2026-45447 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - HollowByte: grow the handshake init_buf incrementally as data is received instead of pre-allocating the full peer-declared message size, so a peer that claims a large message but never sends it can no longer strand memory (ELS-2635). Backport of OpenSSL 3.0 commit c5785a5e35 (PR #30794); handled by OpenSSL as a "bug or hardening" fix with no CVE assigned Important TuxCare License Agreement CVE-2025-69419 cpe:/o:centos:centos:10 Community Enterprise Operating System 10 - CVE-2026-34180: asn1: avoid content length truncation in asn1_ex_c2i() so a primitive element longer than 2GB can no longer cause a heap buffer over-read - CVE-2026-42766: cms: check that PasswordRecipientInfo.keyDerivationAlgorithm is present before dereferencing it, avoiding a NULL pointer dereference Important TuxCare License Agreement CVE-2026-34180 CVE-2026-42766 cpe:/o:centos:centos:10 alt-openssl11 alt-openssl11-devel alt-openssl11-libs x86_64 1:1.1.1w-3.1.el10 d07bf2a08d50eb66 x86_64 1:1.1.1w-3.2.el10 x86_64 1:1.1.1w-3.3.el10 x86_64 1:1.1.1w-3.4.el10 x86_64 1:1.1.1w-3.5.el10 x86_64 1:1.1.1w-3.6.el10