[CLSA-2026:1794628873] openssl11: Fix of CVE-2026-107496
Type:
security
Severity:
Important
Release date:
2026-11-14 04:01:23 UTC
Description:
- CVE-2026-107496: reject an EC group order of 1 during key generation so that CMS_encrypt() to an attacker-supplied EC certificate cannot loop forever
CVEs fixed:
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:1d43e12a40571fa126c0f42749deae9261ca24b70c1054e3170aa1eb2624060d
  • openssl11-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:75fa89af83729cb63fadad39b2f6a0f683e9d6ff21094524e90f5d71f2090341
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:cb8d69950607a6a96ec9cc90edd2536c074a64911a215cf4739b882025254e6d
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:f189f8b1af286afc4dffebeaa07c6010cf9cd3cd83992f896d4e6e1d67ee9bf4
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:d04b6e028b38fdfce0d8e3a050378eae22cbcba8f5a536329c50792d0aa9e465
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:ce5ad0bab04053c775b1ebb0c531cf418a4eed98ec0d8d05642ca80d43da761d
  • openssl11-static-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:ee3718712f7ff48802f2f53ee680b240ebe162c80927597428146783f1068b5a
  • openssl11-static-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:f229e55afad1947f923778b1401b045fa679db0875e476fe2ad85388efd91e9f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.