Описание
ELSA-2026-500441: openssl security update (IMPORTANT)
[3.5.8-2.0.1]
- Replace upstream references [Orabug: 34340177]
- Update FIPS provider name [Orabug: 35824276]
[1:3.5.8-2]
- Fixes DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVE-2026-84782) Resolves: RHEL-264466
[1:3.5.8-1]
- Rebase to OpenSSL 3.5.8 Resolves: RHEL-242944 Resolves: RHEL-246254 Resolves: RHEL-246266 Resolves: RHEL-246306 Resolves: RHEL-246437 Resolves: RHEL-246441 Resolves: RHEL-246445 Resolves: RHEL-246449 Resolves: RHEL-246453
[1:3.5.5-7]
- Backport the 'HollowByte' hardening patch Resolves: RHEL-212362
[1:3.5.5-6]
- Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210864
[1:3.5.5-5]
- Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-169991
[1:3.5.5-4] Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179267 Resolves: RHEL-179281 Resolves: RHEL-179537 Resolves: RHEL-179542 Resolves: RHEL-179545 Resolves: RHEL-179550 Resolves: RHEL-179553 Resolves: RHEL-179626 Resolves: RHEL-179658 Resolves: RHEL-179675 Resolves: RHEL-179682 Resolves: RHEL-179685 Resolves: RHEL-179689 Resolves: RHEL-179693 Resolves: RHEL-179697
[1:3.5.5-3]
- Fix CVE-2026-28390 Resolves: RHEL-165705
[1:3.5.5-2]
- Fix CVE-2026-31790 Resolves: RHEL-161574
[1:3.5.5-1]
- Rebase to OpenSSL 3.5.5 Resolves: RHEL-122599 Resolves: RHEL-141987 Resolves: RHEL-142009 Resolves: RHEL-142022 Resolves: RHEL-142026 Resolves: RHEL-142030 Resolves: RHEL-142034 Resolves: RHEL-142038 Resolves: RHEL-142042 Resolves: RHEL-142046 Resolves: RHEL-142050 Resolves: RHEL-142054
Обновленные пакеты
Oracle Linux 10
Oracle Linux aarch64
openssl
3.5.8-2.0.1.ksplice1.el10_2
openssl-devel
3.5.8-2.0.1.ksplice1.el10_2
openssl-libs
3.5.8-2.0.1.ksplice1.el10_2
openssl-perl
3.5.8-2.0.1.ksplice1.el10_2
Oracle Linux x86_64
openssl
3.5.8-2.0.1.ksplice1.el10_2
openssl-devel
3.5.8-2.0.1.ksplice1.el10_2
openssl-libs
3.5.8-2.0.1.ksplice1.el10_2
openssl-perl
3.5.8-2.0.1.ksplice1.el10_2
Связанные CVE
Связанные уязвимости
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and p...
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and p...
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Issue summary: The DTLS retransmission logic does not correctly handle ...