[CLSA-2026:1793174428] openssl: Fix of CVE-2024-5535
Type:
security
Severity:
Moderate
Release date:
2026-10-28 08:00:40 UTC
Description:
- CVE-2024-5535: validate the client and server protocol lists in SSL_select_next_proto() to prevent a buffer overread, and reject a zero-length protocol selected by the NPN callback
CVEs fixed:
Updated packages:
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:6ec023b21cab6633de1f038bd1e22bf966f64c955e7f6c0e4803cc6804db47be
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:d61d66a793a004cf04fc57bfdc5a4829220252bb537aed7e736c06fe0a6fa18e
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:135cda3627e29ffe04916fa454e358b50d08908e2bbde2cb8c1e2a9bd4e4bd5f
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:130da93883a39f0f43570329ecaf1f0791675054ea9eeede0884b92f62259452
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:553ee5a83ba7267809f937b6eb7231df0cd3cc6dec9b6823e88da4debbd86c29
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:e438ae333f90392b6893b9f7993eb71d2b0318bb3f9d615e8c8360f20746694d
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:a695ffbd4c684a47b243d1661fab0ac62db727a2283499ba716af0a94eed3c1a
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:291f607395085a88eb298619f2a3e176ab1cf848c316b308955ca71bf787f6f5
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:b3ec8658873431cb252050b1f99502465ad54a0d01752717344b0b8b5c8d9d1f
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:00e8bec4bbe94491723415b622cc8e6d4bb5b606e5de56906ea653477b4875b1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.