elsa-2026-500498

oracle_linux
Description

[1:1.1.1k-18] - Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping Resolves: RHEL-246295 - Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset Resolves: RHEL-264420 [1:1.1.1k-17] - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165783 [1:1.1.1k-16] - Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() Resolves: RHEL-180978 - Fix CVE-2024-4741: Use After Free with SSL_free_buffers Resolves: RHEL-180983 [1:1.1.1k-15] - Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients Resolves: RHEL-149165 Resolves: RHEL-142715 [1:1.1.1k-14.1] - Backport fix for openssl: Out-of-bounds read write in RFC 3211 KEK Unwrap Fix CVE-2025-9230 Resolves: RHEL-128615

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": [
    "CVE-2026-63072",
    "CVE-2026-84782"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[1:1.1.1k-18]\n- Fix CVE-2026-63072: heap buffer overflow in CMS key unwrapping\n  Resolves: RHEL-246295\n- Fix CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset\n  Resolves: RHEL-264420\n\n[1:1.1.1k-17]\n- Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing\n  Resolves: RHEL-165783\n\n[1:1.1.1k-16]\n- Fix CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify()\n  Resolves: RHEL-180978\n- Fix CVE-2024-4741: Use After Free with SSL_free_buffers\n  Resolves: RHEL-180983\n\n[1:1.1.1k-15]\n- Fix CVE-2025-69419: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing\n  ticket_lifetime_hint exceed 1 week in TLSv1.3 and breaks compliant clients\n  Resolves: RHEL-149165\n  Resolves: RHEL-142715\n\n[1:1.1.1k-14.1]\n- Backport fix for openssl: Out-of-bounds read  write in RFC 3211 KEK Unwrap\n  Fix CVE-2025-9230\n  Resolves: RHEL-128615",
  "id": "ELSA-2026-500498",
  "ovalId": "oval:com.oracle.elsa:def:2026500498",
  "source": "oracle_linux",
  "title": "ELSA-2026-500498: openssl security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-500498.html"
}
View JSON API Download JSON