[CLSA-2026:1781175688] openssl: Fix of CVE-2026-45447
Type:
security
Severity:
Critical
Release date:
2026-06-11 11:03:41 UTC
Description:
- CVE-2026-45447: fix use-after-free in PKCS7_verify() by freeing the BIO chain explicitly, stopping at the caller-owned indata BIO
CVEs fixed:
Updated packages:
  • openssl-1.1.1k-12.el8.tuxcare.els9.x86_64.rpm
    sha:4c1e5833d0578f0dd95908601f1c7424c2ee0430ea2e921b244d67280326cae5
  • openssl-devel-1.1.1k-12.el8.tuxcare.els9.i686.rpm
    sha:75d75bd2d07b8ca37b05726315fc3891841063c78a7fa93b8cbff69ea4b067d4
  • openssl-devel-1.1.1k-12.el8.tuxcare.els9.x86_64.rpm
    sha:caf314d146e1c228ef964d9065c000b529a920170087394b6e41341b98902b1e
  • openssl-libs-1.1.1k-12.el8.tuxcare.els9.i686.rpm
    sha:0b7e28adc6466b73b3a5b3b1616829ab1007940e2838a337aa4172617ff5df23
  • openssl-libs-1.1.1k-12.el8.tuxcare.els9.x86_64.rpm
    sha:211ff407ecca8006a95c9682ab02fbae6d1d4b3a782fc3d578eed1ace6f91090
  • openssl-perl-1.1.1k-12.el8.tuxcare.els9.x86_64.rpm
    sha:14c9d2ae9aa3fb299bff49cb2b34e6eab634611ff2017892cf39cc5f6d2a32ba
  • openssl-static-1.1.1k-12.el8.tuxcare.els9.x86_64.rpm
    sha:d73e3468373b7c4436b33ad4b0b9ec3d93b9e28a2dc028d3ebe4a6ffccd8dbf1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.