[CLSA-2026:1782152259] openssl: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-06-22 18:17:58 UTC
Description:
- CVE-2026-45445: AES-OCB IV ignored on EVP_Cipher() path
CVEs fixed:
Updated packages:
  • openssl-3.0.7-20.el9_2.tuxcare.1.els18.x86_64.rpm
    sha:3d21f2c827e24e8fd5b9d08f5bfb81bc7c4bd0eb7edb5d0ba8488133a65c902d
  • openssl-devel-3.0.7-20.el9_2.tuxcare.1.els18.i686.rpm
    sha:058347d1e789d6bbdc2e091835c5ca8c4b96f157483624a60c8705da26460d38
  • openssl-devel-3.0.7-20.el9_2.tuxcare.1.els18.x86_64.rpm
    sha:306ab488653fd088803c7bba18bd0cb76d88867ed2c027bb1f5b309fb665a6bc
  • openssl-libs-3.0.7-20.el9_2.tuxcare.1.els18.i686.rpm
    sha:eaa8c8464cbdb4403c50305aac78e323b59d294aab0f821eaeba102a20ea853c
  • openssl-libs-3.0.7-20.el9_2.tuxcare.1.els18.x86_64.rpm
    sha:e0f23f6885b2f08fdbc09323c8640dacfd7b6dd529b279f24ea2bfcc361cb231
  • openssl-perl-3.0.7-20.el9_2.tuxcare.1.els18.x86_64.rpm
    sha:29a12a3da6d592e7c92224b398ada165936112c38f871bf17c860e9222e30549
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.