Описание
ELSA-2026-500440: openssl security update (IMPORTANT)
[3.5.8-2.0.1]
- Replace upstream references [Orabug: 34340177]
[1:3.5.8-2]
- Fixed DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) Resolves: RHEL-264479
[1:3.5.8-1]
- Rebase to OpenSSL 3.5.8 Resolves: RHEL-242945 Resolves: RHEL-246260 Resolves: RHEL-246284 Resolves: RHEL-246319 Resolves: RHEL-246439 Resolves: RHEL-246443 Resolves: RHEL-246447 Resolves: RHEL-246451 Resolves: RHEL-246455
[1:3.5.5-7]
- Backport the 'HollowByte' hardening patch Resolves: RHEL-232828
[1:3.5.5-6]
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862
[1:3.5.5-5]
- Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642
[1:3.5.5-4] Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699
[1:3.5.5-3]
- Fix CVE-2026-28390 Resolves: RHEL-165870
[1:3.5.5-2]
- Fix CVE-2026-31790 Resolves: RHEL-161586
[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056
Обновленные пакеты
Oracle Linux 9
Oracle Linux aarch64
openssl
3.5.8-2.0.1.ksplice1.el9_8
openssl-devel
3.5.8-2.0.1.ksplice1.el9_8
openssl-libs
3.5.8-2.0.1.ksplice1.el9_8
openssl-perl
3.5.8-2.0.1.ksplice1.el9_8
Oracle Linux x86_64
openssl
3.5.8-2.0.1.ksplice1.el9_8
openssl-devel
3.5.8-2.0.1.ksplice1.el9_8
openssl-libs
3.5.8-2.0.1.ksplice1.el9_8
openssl-perl
3.5.8-2.0.1.ksplice1.el9_8
Связанные CVE
Связанные уязвимости
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and p...
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and p...
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Issue summary: The DTLS retransmission logic does not correctly handle ...