[CLSA-2026:1793105532] openssl: Fix of CVE-2024-5535
Type:
security
Severity:
Moderate
Release date:
2026-10-27 12:52:23 UTC
Description:
- CVE-2024-5535: validate the client and server protocol lists in SSL_select_next_proto() to prevent a buffer overread, and reject a zero-length protocol selected by the NPN callback
CVEs fixed:
Updated packages:
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:b238c1c619523186f2b11fb4b0e6962af0ed777558aa9aceb9920f6b2fb7d6a7
  • openssl-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:38ba16e939090c6f9b2220bdc324f54bf0cc8c7d9d30a2dca786fa87b86fbeac
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:2f63e1c8b32b8420bad475ca24328b185def8ec0e0bd76714f61500510c91348
  • openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:b75a7e1a175bc3d2b1330a6183f8afc73015e32f87f1578da2bfabbbfb768cdf
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:952e1d89104069c6693760696e6f34902daeb1959b06d25df6c0d7e336d02988
  • openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:31651d94e92b6d8fddba226e3fa354da842aa7ce3c6ef0e76e22e85ba217c0ca
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:a2ab3a971a24619ee63a2e36c9b5624786ea5f2dcad75627ae372e14a66c8b6c
  • openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:ccc56ba2e2982d5b74dd58fd49b001dc20f2e3a30b98624ed84c56538b448351
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.i686.rpm
    sha:680512f834ab3b7544fd606868c84ac443d854f4db04531339e31eabf565ce8e
  • openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els6.x86_64.rpm
    sha:8cc43ccbf3464411bbac56dad6539217478edddeb94338b926354c84c91a27b9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.