[CLSA-2026:1793106383] openssl: Fix of CVE-2024-5535
Type:
security
Severity:
Moderate
Release date:
2026-10-28 18:28:17 UTC
Description:
- CVE-2024-5535: validate the client and server protocol lists in SSL_select_next_proto() to prevent a buffer overread, and reject a zero-length protocol selected by the NPN callback
CVEs fixed:
Updated packages:
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:2095582d94e8c85a27b8fbc7afc169ab1cadec3ed2e1008ea1848e106ad1a42a
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:ef7689a4bd9c2977da3c2a7481efb837cbfa5a44be94d4df2c60df403180b736
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:c5156a87b9f4f7c8592576a62808b0181a7ef73cb4887950efaf2b1fe1984d82
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:cb48113edb9a162f5f7107523e45fedd1243f9748f4acb8cdd97df81878296ac
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:00de5bd8e614f4f7c69412868d6d3ac888207ddae9e215aa74d95df37721f0e0
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:3d9b9b778f3c666efed0744d8083fe2a9ae712cbcfd92cf5bb152e4ea336b6aa
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:71ab15c72875f4c0a6255494603580114712dc0fd3ae9b0652778d9c5c2a584e
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:be5933490bc6f30567728144a74e422f191b6ee598a316bf205159a58ffe9e3d
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:07f6cf1064e5df19e5769e574a2137291a6a53d868ced51b9a32d92950864854
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:e8da72b11ee6af69636bff74fdbbe3c9bb94da7c3b5e675f68890a7c6c44e30a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.