[CLSA-2026:1793106820] openssl: Fix of CVE-2024-5535
Type:
security
Severity:
Moderate
Release date:
2026-10-27 14:34:27 UTC
Description:
- CVE-2024-5535: validate the client and server protocol lists in SSL_select_next_proto() to prevent a buffer overread, and reject a zero-length protocol selected by the NPN callback
CVEs fixed:
Updated packages:
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.aarch64.rpm
    sha:d1e63ebfbc263e20617597770386c0eb054cc463cf413640bd8c8e0ad9e00670
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:32e0330e48dec8582c9bfb78f57c003b9ce3765fee986de36cfbc48b896fe307
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:b51038e8ce37d7ce0ce75c63907bee191358e3940d5e710e0e346e5284c525e6
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.aarch64.rpm
    sha:80116e87752ace4572bc559ae08c2ab69479c06b7013cd6921273f8d96a1768c
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:41e4571c1e427377a9f6b872288b41025a642ac1af2b44fa6dc5f6fd958c80ff
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:6f5b62fee4dc659350d2efe8b97d8085b0f6617616ca6b4e33cd97127df1136b
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.aarch64.rpm
    sha:8b6f0a669d3f90f75ce5a8476059563f24f2d58f2e49ff5202eb8126eb3d0f4e
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:d86ce918f0faa6261529cee02302a3bbe9671aec705cc9ad32d5ba913bc0bf5f
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:02b457bc12c9134dc1c1dcb4cd460f65e7f0761c86117aff68ef9ac56fec291b
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.aarch64.rpm
    sha:9d079d4ff61fb4ca6ca7857d9d6d5bc1c1f201425b38d07276c2e993483188bf
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:24932a00578450cbfca8782aacfb6b58a2974f86a95394084ddb537f0fae1211
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:3f9f3ec521cc64dfbb5e27a258e625d5732c21d9c8d9f99d130dfd0504df4085
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.aarch64.rpm
    sha:f0f3758f09f6a61780574cf333dedd84a135302966a372d6998af9ccab7af662
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:c197933566132bc5a6e174068b62bd3b4725c84a8f2a0c12ebe602d9422c2d2d
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:c455dc78b0bbd268a11ab8090ebda55e244b215a4e945da00c49344603db2e10
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.