Release date:
2026-09-15 14:44:00 UTC
Description:
- CVE-2026-31789: bound the length passed to hex_to_string() so the hex
buffer size computation cannot overflow when printing Subject Key
Identifier or Authority Key Identifier extensions
Updated packages:
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:dc8f0a4c929ac7d303e8b1e1689383289b178cd4680e37f991e2ea393d2cee7a
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els4.i686.rpm
sha:d3db78fb809b8555283a82cc066523089854ba466b301777163ee409d2ed7347
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:d9c22f44517f849131a4035a980056b0b034c6ceda5fd04457c355b93fe3e2df
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els4.i686.rpm
sha:74e1d4b10366819b632f1e78540d338afb27c2433ca0066672df138936f3c5b3
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:c643d50c2cfb096ab751cb0f6cd35f4745a766fe813870e09ca973bb79623320
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:af27cbe5aa21f553e529b6b647dd0e9f8a39d30ead16aca65b14f20d02df17c1
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els4.i686.rpm
sha:0920f229a338daa3eb3072ddb89643d8f09e9ddebe7920e17703eeaafac59f12
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els4.x86_64.rpm
sha:6e727900a3d60b75c3a9f6066e8b31d62829c86e36607b2e69d03ed809549c5f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
