[CLSA-2026:1791282362] openssl: Fix of 6 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-06 10:26:17 UTC
Description:
- CVE-2026-84782: reset s->init_off on DTLS handshake retransmit and skip retransmission while a handshake write is suspended - CVE-2026-35189: compute relative CRLDP names on demand instead of for every cached certificate - CVE-2026-72897: refresh ssl_pkey_num and valid_flags in SSL_set_SSL_CTX - CVE-2026-54872: pin the scalar width in the EC ladder so BN_add padding no longer depends on the secret nonce - CVE-2026-75805: skip the issuer/serial comparison for CSR-based CMP revocation requests - CVE-2026-75806: fail short TLS 1.2/DTLS AEAD records without sending an alert
Updated packages:
  • openssl-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm
    sha:7ca38a83c179061a2643f7162de4a29d484270eabc57c1870053a75645118828
  • openssl-3.5.8-1.el9_8.tuxcare.els1.i686.rpm
    sha:e522aad6a1fbe590b8195466b40495c5ccd9a271b00a0c208da25a228fe6906b
  • openssl-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm
    sha:03f0b47e043bdfb94be36323ea5592a896a9910b79349d83753667020080fb05
  • openssl-devel-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm
    sha:3493313660aed3cc71e3c1beadb55f3c0ea934f69ce6dc8df48a8b3a5e90897b
  • openssl-devel-3.5.8-1.el9_8.tuxcare.els1.i686.rpm
    sha:f0317a966b0bbea78dd02d68b696778a150261bc8e8d2623534b6a94e70f592b
  • openssl-devel-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm
    sha:8db31e07da990e9c04637141d660e3c808cc77c2cd2b523d6bfe8920ce3ce00b
  • openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm
    sha:fd125431aaa6bf9ec57c762a55d5f705a1e6d2044e37efd6a22fe6d2f31a9ab9
  • openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els1.i686.rpm
    sha:9b66079fba8a677b6556b0890ce778ef6322ce4284c0e89095797ca1ae593961
  • openssl-fips-provider-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm
    sha:4e6f795a4e9370064d33c1c74e63b9ac7da41dbc8c01d41024f48d623546da0e
  • openssl-libs-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm
    sha:01284e74365ca15fd6d689cffae4a8250a9100c8b9b887ed683b3589dae9b442
  • openssl-libs-3.5.8-1.el9_8.tuxcare.els1.i686.rpm
    sha:7cffae79102752e5ef244f6975beb1ee901df9f52eefd1ea1ce9ab92d394f2ce
  • openssl-libs-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm
    sha:5a79f4f7077b8aa862999b5d450b8355258c4692bdcae9012bd3da30d4c48e11
  • openssl-perl-3.5.8-1.el9_8.tuxcare.els1.aarch64.rpm
    sha:6a6842deaf2ce9301a148e01640254fea62f93aafd72000448a44d9f00379db3
  • openssl-perl-3.5.8-1.el9_8.tuxcare.els1.i686.rpm
    sha:8422ceecb9abf2db45cf53e114a3db70a9fd04223b80c40c653c5e76605068da
  • openssl-perl-3.5.8-1.el9_8.tuxcare.els1.x86_64.rpm
    sha:3fc801b10a0553190ad402b82845079d491b8ab04e1c98e3b47727e12ce07351
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.