[CLSA-2026:1794629306] openssl11: Fix of CVE-2026-107496
Type:
security
Severity:
Important
Release date:
2026-11-14 04:08:36 UTC
Description:
- CVE-2026-107496: reject an EC group order of 1 during key generation so that CMS_encrypt() to an attacker-supplied EC certificate cannot loop forever
CVEs fixed:
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els8.aarch64.rpm
    sha:473df77d984ff30069a202a805be65709e77666416b4f2a5032f6a56577e82e7
  • openssl11-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:49b712165ef0f75940cfb30b0342572dc7b0cf4e0fbcb05739003ebc4ad1572e
  • openssl11-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:a9a46f41bd7bae12f73e572e5d44761c9663c6c470d3f256b98bb1762a2a2e84
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els8.aarch64.rpm
    sha:0d8708a7c8aa4e982e7188107f257de348c5372467dcfd78872fe5fe48a3a967
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:b1a1925fc86d4f619e99b5ddd086db8bae4737ab75ebe77f45e2ba348e41718b
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:b1382e2e68790d70a5a2cd8c9e6cfca455807094bf66e049f9701f2c9611c5c0
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els8.aarch64.rpm
    sha:896ad0b2cab371740c7dea9d16b32e9ee6dc4b5624504b14ff514252601779c8
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:ed6317bd9ea79534a98aefe207c7877f4b2281248f2abd143ded7e6dd6775f2a
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:7d1f8a9e00024db8a52d7b1015867986643f00335675adf918ffa0ec991b3d25
  • openssl11-static-1.1.1k-7.el7.tuxcare.els8.aarch64.rpm
    sha:a5a490fbb32628f60152f88a7f3eed00f34e11adea742a6c4ddefff0c43e5768
  • openssl11-static-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:c4b3548323ba80520578f41af25640c2598b7309b1448b495faee5c493eb6858
  • openssl11-static-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:65ca76988949388ffb5216a998eaccded8db2a3129515675955d65672e106494
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.