Skip to content
OpenAdvisories
Medium ELSA-2026-80514 2 CVEs

Moderate: compat-openssl11 security update (Oracle Linux 9)

Published Oct 11, 2026 · Updated Oct 11, 2026

Ecosystem: Oracle Linux

Summary

[1:1.1.1k-5.6]
- Fixes CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Resolves: RHEL-265517

[1:1.1.1k-5.5]
- Fixes CVE-2026-63072: Heap buffer overflow in CMS key unwrapping
Resolves: RHEL-246280

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 compat-openssl11 1:1.1.1k-5.el9_8.6

Vulnerabilities 2

  • High 8.2
    CVE-2026-84782

    DTLS Retransmits Handshake Messages From a Stale Buffer Offset

    Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspend…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-63072 Public exploit

    Heap Buffer Overflow in CMS Key Unwrapping

    Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impa…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi