[CLSA-2026:1794628876] openssl11: Fix of CVE-2026-107496
Type:
security
Severity:
Important
Release date:
2026-11-14 04:01:25 UTC
Description:
- CVE-2026-107496: reject an EC group order of 1 during key generation so that CMS_encrypt() to an attacker-supplied EC certificate cannot loop forever
CVEs fixed:
Updated packages:
  • openssl11-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:995176de1c29f03248d3d0f5db76f6c466074efad877fe8a89f155e3ee559da9
  • openssl11-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:5f16a9b8df7ccb8be1c10b9389e8dfedd9b3362c3ea1818d30a597b71d13ce7b
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:6b4dcfdfa2b5d59068f7579d98afd54fd42f9c72706c7d1805cd8660e256a474
  • openssl11-devel-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:c82e75a94b5962a01ad1a8882313d54e50cd1fcd49cab7ad9491543eb1a25187
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:9f1a46355eff25d18cbe47df7001f38146a40ed3ff7bb6516ff32509f2dd4847
  • openssl11-libs-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:26db5c98afc1000c286b5ed61164bf5834152dfa1e417432f6c4a9069eeaf7d0
  • openssl11-static-1.1.1k-7.el7.tuxcare.els8.i686.rpm
    sha:55b16128edfb2779a5927d09c04bffb925cdfcf96a7dd59e24c5749d35f6030a
  • openssl11-static-1.1.1k-7.el7.tuxcare.els8.x86_64.rpm
    sha:2acfd6cfcb168e38c8d8f7805daaaaaf5b6a965350b75b178e67c3430fdaaa1e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.