Release date:
2026-08-29 10:33:11 UTC
Description:
- CVE-2026-42766: fix NULL pointer dereference during password-based CMS
decryption when the optional keyDerivationAlgorithm field is absent
- CVE-2026-34180: fix heap buffer over-read caused by integer truncation of
ASN.1 primitive content lengths above 2 GB on 64-bit platforms
Updated packages:
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:a2276fc6d7307509363ee57b62eb58b505e97453783d24d8df07dd6a0ca4c0d9
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:7ec450dcbdcb21dc590fb652b82800d47613a9d8ebf63bde0df9dec822b5b1cd
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:0b07c2da30d4722766f0eef43d966f59c7034d59589d30967f1d87f28eb2d595
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:5734dae8df014abd9de0bd8fca79f6876c3013a8e6fc7d965c56a271dd53422f
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:21347bdc55919e48601c57e7434a5400305c4636d8370440afd877a8f805f5dc
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:d93878cd26ae4931219d139ef2066859680d0483fd5353f53bc55e80d4313dc9
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm
sha:5a80741644eab1eef686ad3e14ab2e19d811580856ac2ffa176ed9427ee2f8cb
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm
sha:d8a3e8e6a41f6c0477cdd5806536beaad6c5ee1adafab9c6abd9f9f2c4dccd84
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
