Release date:
2026-10-28 08:48:43 UTC
Description:
* SECURITY UPDATE: security hardening in CMS key unwrapping
- debian/patches/openssl-1.1.1-cve-2026-63072.patch: size the key-unwrap
output buffer in cms_kek_cipher() for the largest amount the unwrap
primitive can write, rather than the length reported for the unwrapped
key
- debian/patches/openssl-1.1.1-cve-2026-63072-unwrap-pad.patch: cleanse
padded_len rather than inlen on the four CRYPTO_128_unwrap_pad()
integrity-failure paths, so the exported primitive no longer writes 8
bytes past an output buffer sized per its own documented contract
- CVE-2026-63072
Updated packages:
-
alt-openssl11_1.1.1w-3.12_amd64.deb
sha:8331d5307fe77cc19e8479ff23433cb5401a9cd8
-
alt-openssl11-dev_1.1.1w-3.12_amd64.deb
sha:ddc27d18150e3f3bc4901c58f9502d708f4cb7af
-
alt-openssl11-doc_1.1.1w-3.12_all.deb
sha:fec2beee8a5f5ece6cab27b7b30a62f6a1715d16
-
alt-openssl11-libs_1.1.1w-3.12_amd64.deb
sha:cf76592bcdb8e6caa8eb39bb7e4441f29ddd0a69
-
alt-openssl11_1.1.1w-3.12_arm64.deb
sha:5ac92ea52057ec8807fb7170053b604f035d70a6
-
alt-openssl11-dev_1.1.1w-3.12_arm64.deb
sha:2783678f5a4b22180c8acc98f1d085733e76fb1a
-
alt-openssl11-libs_1.1.1w-3.12_arm64.deb
sha:f8c6a17e35358515dc4901fe208b902699a35f03
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
