Описание
ELSA-2026-500498: openssl security update (IMPORTANT)
[1:1.1.1k-18]
- Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246295
- Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264420
[1:1.1.1k-17]
- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165783
[1:1.1.1k-16]
- Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-180978
- Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-180983
[1:1.1.1k-15]
- Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715
[1:1.1.1k-14.1]
- Backport fix for openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
openssl
1.1.1k-18.ksplice1.el8_6
openssl-devel
1.1.1k-18.ksplice1.el8_6
openssl-libs
1.1.1k-18.ksplice1.el8_6
openssl-perl
1.1.1k-18.ksplice1.el8_6
openssl-static
1.1.1k-18.ksplice1.el8_6
Oracle Linux x86_64
openssl
1.1.1k-18.ksplice1.el8_6
openssl-devel
1.1.1k-18.ksplice1.el8_6
openssl-libs
1.1.1k-18.ksplice1.el8_6
openssl-perl
1.1.1k-18.ksplice1.el8_6
Связанные CVE
Связанные уязвимости
ELSA-2026-80514: compat-openssl11 security update (MODERATE)
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and p...
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impact summary: The retransmitted message can disclose a heap memory to the peer as plaintext handshake data or cause a crash and a Denial of Service when the read reaches an unmapped memory region. CWE: CWE-125: Out-of-bounds Read Description: DTLS handshake messages can be written out in multiple fragments, and a write can suspend mid-message (returning WANT_WRITE) if the underlying transport temporarily cannot accept more data. While such a write is suspended, the DTLS retransmission timer may independently fire and ask the retransmission logic to resend an earlier, already-acknowledged-as-sent message from its retransmit queue. The retransmission logic reused the same internal buffer and p...