CLSA-2026-1780683040
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1780683040.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1780683040
- Upstream
- Published
- 2026-10-19T20:23:13Z
- Modified
- 2026-10-26T09:43:24Z
- Summary
- openssl11: Fix of 10 CVEs
- Details
-
- CVE-2021-3711: fix SM2 decryption buffer overflow; check the plaintext buffer is large enough when decrypting SM2; add extended tests for SM2
- CVE-2022-3996: fix X.509 policy constraints double-locking denial of service
- CVE-2023-0464: fix excessive resource use verifying X.509 policy constraints
- CVE-2023-0466: fix X509_VERIFY_PARAM_add0_policy() does not enable policy check
- CVE-2023-2650: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt translates
- CVE-2024-13176: fix timing side-channel in ECDSA signature computation
- CVE-2024-5535: validate provided client list in SSL_select_next_proto
- CVE-2025-9230: fix out-of-bounds read and write in RFC 3211 KEK unwrap
- CVE-2025-69419: fix one-byte write-before-buffer in PKCS#12 BMPString conversion
- CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex()
- CVE-2026-28387: fix use-after-free / double-free in dane_match()
- CVE-2026-28388: fix NULL dereference in check_delta_base()
- CVE-2026-28389: fix NULL dereference in dh/ecdh_cms_set_shared_info()
- CVE-2026-28390: fix NULL dereference in rsa_cms_decrypt()
- References
-
- https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1780683040.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-3711
- https://nvd.nist.gov/vuln/detail/CVE-2022-3996
- https://nvd.nist.gov/vuln/detail/CVE-2023-0464
- https://nvd.nist.gov/vuln/detail/CVE-2024-5535
- https://nvd.nist.gov/vuln/detail/CVE-2025-69419
- https://nvd.nist.gov/vuln/detail/CVE-2025-69421
- https://nvd.nist.gov/vuln/detail/CVE-2026-28387
- https://nvd.nist.gov/vuln/detail/CVE-2026-28388
- https://nvd.nist.gov/vuln/detail/CVE-2026-28389
- https://nvd.nist.gov/vuln/detail/CVE-2026-28390
Affected packages
TuxCare:CentOS:7 / openssl11
Package
- Name
- openssl11
- Purl
- pkg:rpm/tuxcare/openssl11?distro=centos-7
TuxCare:CentOS:7 / openssl11-devel
Package
- Name
- openssl11-devel
- Purl
- pkg:rpm/tuxcare/openssl11-devel?distro=centos-7
TuxCare:CentOS:7 / openssl11-libs
Package
- Name
- openssl11-libs
- Purl
- pkg:rpm/tuxcare/openssl11-libs?distro=centos-7