Release date:
2026-11-14 03:57:50 UTC
Description:
- CVE-2026-107496: reject an EC group order of 1 during key generation so
that CMS_encrypt() to an attacker-supplied EC certificate cannot loop
forever
Updated packages:
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els7.i686.rpm
sha:dae3a8b32798c7af35e7cc85fd460df35d619b060b05301f01bfeb4c3fbd338d
-
openssl-1.0.2k-26.0.1.el7_9.tuxcare.els7.x86_64.rpm
sha:d298d0a95b7cdd50dd516336b198c9c5b209eaadaec42aa3da6ac3f01d829622
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els7.i686.rpm
sha:9a34c8f6db742459237b02921fe90edfd5147090f635108472f4e6c88db24cdb
-
openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els7.x86_64.rpm
sha:e4e9939d6f1518af49bd974eea3b1ce2b07c8c8c54d3d53e4faacd951cf4b883
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els7.i686.rpm
sha:5d55c563845b607b562f5f85d38e98b6f9191b4e07590bf022601cecc47bd7eb
-
openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els7.x86_64.rpm
sha:161732b2b7f204156486bed5803258096c7381691154981955d0745f3b028225
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els7.i686.rpm
sha:c283749d7dc08fb33bdc6cd6704e81255315b1fcced08c420a7117b0e1b2493d
-
openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els7.x86_64.rpm
sha:e26b16fe4cd5108aadbe92c74c8353c9d63f2e9516a6ff46f7628168540eaf6c
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els7.i686.rpm
sha:6b0ed0e4e49ead9358c7a67c9a86038e9fe64d45a5ff4b33b9f1d75c1263e3b6
-
openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els7.x86_64.rpm
sha:0c0a56d16a2ed9bc6760abaee181738e03b2fb9e95efbb89e17ff25a1437c109
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
