{"id":"CLSA-2026-1788271054","summary":"Fix CVE(s): CVE-2026-54874, CVE-2026-63072","details":"   * SECURITY UPDATE: Memory amplification denial of service in the DTLS\n     record layer: buffering a record that arrives early for the next epoch\n     retained the entire read buffer, sized for the largest possible DTLS\n     record (~16.7KB), rather than only the record's own bytes, so a peer\n     sending a stream of small forged next-epoch records could make an\n     endpoint retain around 1.7MB per connection.\n     - debian/patches/CVE-2026-54874.patch: copy only the record's on-wire\n       bytes into the queue entry and rebase the record pointers on\n       retrieval in ssl/record/rec_layer_d1.c, ssl/record/record.h,\n       ssl/record/record_local.h and ssl/record/ssl3_record.c, and lower\n       the unprocessed_rcds queue limit to 16.\n     - CVE-2026-54874\n   * SECURITY UPDATE: Out-of-bounds heap write in CMS decryption: the\n     key-unwrap output buffer was sized from the cipher's length query, but\n     the AES-WRAP-PAD unwrap primitive writes and cleanses up to inlen bytes\n     on its integrity-failure paths, so a crafted CMS message naming a\n     padded key-wrap OID caused an 8-byte write past the allocation.\n     - debian/patches/CVE-2026-63072.patch: size the unwrap output buffer\n       for the worst case in cms_kek_cipher() in crypto/cms/cms_kari.c.\n     - CVE-2026-63072","modified":"2026-10-26T09:31:40.149918297Z","published":"2026-09-01T13:57:45Z","upstream":["CVE-2026-54874","CVE-2026-63072"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1788271054.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54874"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072"}],"affected":[{"package":{"name":"libssl-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libssl-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.24+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1788271054.json"}},{"package":{"name":"libssl-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libssl-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.24+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1788271054.json"}},{"package":{"name":"libssl1.1","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libssl1.1?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.24+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1788271054.json"}},{"package":{"name":"openssl","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/openssl?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1f-1ubuntu2.24+tuxcare.els8"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1788271054.json"}}],"schema_version":"1.9.0"}