Release date:
2026-08-29 10:34:25 UTC
Description:
- CVE-2026-42766: fix NULL pointer dereference during password-based CMS
decryption when the optional keyDerivationAlgorithm field is absent
- CVE-2026-34180: fix heap buffer over-read caused by integer truncation of
ASN.1 primitive content lengths above 2 GB on 64-bit platforms
Updated packages:
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:63a79ce4d573afb1cd14d443da81c1c5c7b54247fc882a796b3784ccd755aafe
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:5d2df26cd97d4955dab9c27a2ca0a05dad135786829780cde34fddc1596020c8
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:fcf9536ba0da1d1256f30ac97997874cb69a57d4c07b509980db19d245931edd
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:5f2fa2e4075d1b6a24073288bd1c0f61a076fefbd7ee21d397f2c6952509ac52
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:c2df1c135ce677eee4f17bd412af5e247543e6c5c178eb57cdfc736a8d156954
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:d460b35209d363792ed1406f07d5e79bc3c92ac39730abf73e745b9b7672d291
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:9cca241b3d7efcece71f73563faa87740f6e84a1236884f7913f33ea09fcf125
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:d84b0d02c4b4d858ca3d4318e5e4f9cc776d42c4b4bc518ac9f7c958ff352a45
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
