CLSA-2023:1700589307 TuxCare License Agreement 0 - Changed suffix from esu to els Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Changed suffix from esu to els

0 tuxcare-almalinux9.2-esu minizip-compat-1.2.11-39.el9.tuxcare.els1.x86_64.rpm a103cf0073badb06d217ba6616ee299ae761762c minizip-compat-devel-1.2.11-39.el9.tuxcare.els1.x86_64.rpm e61c34c93d7283be2b326e0787d9f71378090fcc zlib-1.2.11-39.el9.tuxcare.els1.i686.rpm 85c2dd1371c479922e9962b255cc30992618b98f zlib-1.2.11-39.el9.tuxcare.els1.x86_64.rpm 8a403aae37d5514866498712a17454dfa35c3aa8 zlib-devel-1.2.11-39.el9.tuxcare.els1.i686.rpm 48ffa98b423ae7f6aee6d2cbbbf60a542170b640 zlib-devel-1.2.11-39.el9.tuxcare.els1.x86_64.rpm 95fcff0afbb3d05093679edd0711fde2c05b4ddf zlib-static-1.2.11-39.el9.tuxcare.els1.i686.rpm 0332ffeafac3f5179f8e873b1a3470ba89f17fb9 zlib-static-1.2.11-39.el9.tuxcare.els1.x86_64.rpm 37bd90a98e56d2d7f9128e6f52a3e8a0da339460 CLSA-2023:1701293664 TuxCare License Agreement 0 - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els1.i686.rpm 222a549ae8ca77a377f54687c8202bb599741f39 binutils-2.35.2-37.el9.tuxcare.els1.x86_64.rpm 5c6177ed0e5593cd6a995c55f54101b8ac3d0062 binutils-devel-2.35.2-37.el9.tuxcare.els1.i686.rpm ac5b587fecb111b1399cbdcd6392f0901ee8a257 binutils-devel-2.35.2-37.el9.tuxcare.els1.x86_64.rpm 65586c922fc39c40b03cef20ddcc0c5997711a3e binutils-gold-2.35.2-37.el9.tuxcare.els1.x86_64.rpm e03bba11b2d24b17de6d891c7c7c66339f97276f cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els1.x86_64.rpm e8d12e9a4ef246e80cfe9f697f1dd93c52c98555 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els1.x86_64.rpm 771b105df25fcb1a2d246b4ed9daebb2a92fd061 cross-binutils-s390x-2.35.2-37.el9.tuxcare.els1.x86_64.rpm dce0f08be00221222f404d9095b8e38e7c36428f CLSA-2023:1701293817 TuxCare License Agreement 0 - CVE-2023-31484: fix possible MITM attach due to missing SSL verification - CVE-2023-31486: add verify_SSL=>1 to HTTP::Tiny default configuration Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-31484: fix possible MITM attach due to missing SSL verification - CVE-2023-31486: add verify_SSL=>1 to HTTP::Tiny default configuration

0 tuxcare-almalinux9.2-esu perl-5.32.1-480.el9.tuxcare.els1.x86_64.rpm 679049dd643b9e6a02e65e75afc0005536efd351 perl-Attribute-Handlers-1.01-480.el9.tuxcare.els1.noarch.rpm 4eaa930a36147365cfa758c0c97ae89ba833bcba perl-AutoLoader-5.74-480.el9.tuxcare.els1.noarch.rpm c1cc248d79d781af5f27bce3612d349f19ea973c perl-AutoSplit-5.74-480.el9.tuxcare.els1.noarch.rpm f2f2f96b30090eedaf6b73c5fdec17d4df2dedc1 perl-B-1.80-480.el9.tuxcare.els1.x86_64.rpm 2b7bada8eeb97314aef638ef19d5562a2ff2b3f4 perl-Benchmark-1.23-480.el9.tuxcare.els1.noarch.rpm b4209b089ab8223a0ba07be8965854608973dc8b perl-Class-Struct-0.66-480.el9.tuxcare.els1.noarch.rpm 4ed1ef48fcd3b5ec02c240d5347c4805cde544b1 perl-Config-Extensions-0.03-480.el9.tuxcare.els1.noarch.rpm 49fbbeecde7f6b95297c1f41467ca83348793e31 perl-DBM_Filter-0.06-480.el9.tuxcare.els1.noarch.rpm f6e487b339adeb86c5aa43ef3d79ee902f3d5c4b perl-Devel-Peek-1.28-480.el9.tuxcare.els1.x86_64.rpm 71a52f23fa65e1b99e3eef1ae578057979a9e433 perl-Devel-SelfStubber-1.06-480.el9.tuxcare.els1.noarch.rpm bd2a864afdbf0883beecbb0fd586496d8c8975ce perl-DirHandle-1.05-480.el9.tuxcare.els1.noarch.rpm 8ad2174eb5dbf234428c1f7ba1bf74c89ba3625e perl-Dumpvalue-2.27-480.el9.tuxcare.els1.noarch.rpm ba78b49ccb1c890cffe50caad6e854559dce18cd perl-DynaLoader-1.47-480.el9.tuxcare.els1.x86_64.rpm 2b8d2de3e89ad5de14fe20cf3a73190551066f47 perl-English-1.11-480.el9.tuxcare.els1.noarch.rpm b073f6aa76f3f415bf84816d9d16aa8a3b5f1e84 perl-Errno-1.30-480.el9.tuxcare.els1.x86_64.rpm f2c961de326328d93b015e4174a6e627f248e23d perl-ExtUtils-Constant-0.25-480.el9.tuxcare.els1.noarch.rpm 8a74758da770ac6b12216fb125cc16b7694c8ce7 perl-ExtUtils-Embed-1.35-480.el9.tuxcare.els1.noarch.rpm 8a7c5313a5edcfcce4c70d6fa3103a34e1fd2371 perl-ExtUtils-Miniperl-1.09-480.el9.tuxcare.els1.noarch.rpm 7668be41d3e117c1936ced06f5a29815bd979840 perl-Fcntl-1.13-480.el9.tuxcare.els1.x86_64.rpm 22ba13cdb895d5b9e282c433c4ee0519ec03ce86 perl-File-Basename-2.85-480.el9.tuxcare.els1.noarch.rpm 09181c105a2ad6e868cd4ea00bd004f89f8fb9ed perl-File-Compare-1.100.600-480.el9.tuxcare.els1.noarch.rpm aeaacbdbe06aad129ea4c7d5e632b14eb259da74 perl-File-Copy-2.34-480.el9.tuxcare.els1.noarch.rpm a09bbf5bbebb05614b42cf3c4844570408f614e9 perl-File-DosGlob-1.12-480.el9.tuxcare.els1.x86_64.rpm ee971bcb3d62656e61b6937bc8306344585b456e perl-File-Find-1.37-480.el9.tuxcare.els1.noarch.rpm fb205d27bb11965be61e4aa4f4922c4f0efeef18 perl-File-stat-1.09-480.el9.tuxcare.els1.noarch.rpm faed9da31ec77f38bd978f7bfc53f282282e779a perl-FileCache-1.10-480.el9.tuxcare.els1.noarch.rpm c6d4b0a1108af8a5b3b89ed3ec1129af563b7c47 perl-FileHandle-2.03-480.el9.tuxcare.els1.noarch.rpm a6b9ca79d4dd4a6dea66231421ddc04736a297d5 perl-FindBin-1.51-480.el9.tuxcare.els1.noarch.rpm 92a3b15b37065189f2096b419a9eba4e6be53d01 perl-GDBM_File-1.18-480.el9.tuxcare.els1.x86_64.rpm 39050619b09bb0e7ffeda10330f68a527a068413 perl-Getopt-Std-1.12-480.el9.tuxcare.els1.noarch.rpm 916b66d8deb93f0f9ef0822a63f421b47b7fbc10 perl-Hash-Util-0.23-480.el9.tuxcare.els1.x86_64.rpm 5a75a768fc9089502f2228809d3510fc197b0ceb perl-Hash-Util-FieldHash-1.20-480.el9.tuxcare.els1.x86_64.rpm f3aa752b26189ae86206080a750ce8d67c34b891 perl-I18N-Collate-1.02-480.el9.tuxcare.els1.noarch.rpm d71f63c019b2d87da70b2beacc65be9259af2280 perl-I18N-LangTags-0.44-480.el9.tuxcare.els1.noarch.rpm 5b6db450bd0c3c6a6d466458f4cc794ec3e004e2 perl-I18N-Langinfo-0.19-480.el9.tuxcare.els1.x86_64.rpm 913c64fd690a3b1cc421dc6a658230ea0b748416 perl-IO-1.43-480.el9.tuxcare.els1.x86_64.rpm 831558fa256dc198378c9ff6329b2bd1e79a2de4 perl-IPC-Open3-1.21-480.el9.tuxcare.els1.noarch.rpm 692444607371b49a683cacbb1b4ca78dab370946 perl-Locale-Maketext-Simple-0.21-480.el9.tuxcare.els1.noarch.rpm f416fb394049043fb2ba1195a81a15543ce033c9 perl-Math-Complex-1.59-480.el9.tuxcare.els1.noarch.rpm ad20846b9cb30a2706e01012313569a74fc195da perl-Memoize-1.03-480.el9.tuxcare.els1.noarch.rpm d2710f75b939fcea819ec28bf3eb0651f5b41f72 perl-Module-Loaded-0.08-480.el9.tuxcare.els1.noarch.rpm c77f0f1f743d3a02a6231a575de894df33c6ca58 perl-NDBM_File-1.15-480.el9.tuxcare.els1.x86_64.rpm 8d6924c1b5e808a1a09faec5231e0614c3cd159d perl-NEXT-0.67-480.el9.tuxcare.els1.noarch.rpm d4623a3abf678dd44fd3c47a2943b9a9e17f7ba9 perl-Net-1.02-480.el9.tuxcare.els1.noarch.rpm bda3557a0671cbaf7d57ea170043153210b7d38d perl-ODBM_File-1.16-480.el9.tuxcare.els1.x86_64.rpm dbd78e31a365758bb99bf72e47af29d3455c3961 perl-Opcode-1.48-480.el9.tuxcare.els1.x86_64.rpm facc6de51b5afc914db8f02ee38bd9672e8de415 perl-POSIX-1.94-480.el9.tuxcare.els1.x86_64.rpm 5382c41a107a3c289a5ee07fffbac8c510e08c7d perl-Pod-Functions-1.13-480.el9.tuxcare.els1.noarch.rpm 8ff57e9ca2e7a1935e91b0a2e685b80da340b841 perl-Pod-Html-1.25-480.el9.tuxcare.els1.noarch.rpm 150dcf273fdc28cd05a241a80b7bb104ada9f39f perl-Safe-2.41-480.el9.tuxcare.els1.noarch.rpm bdacf0368efa685550ab4892f53aef84f4923604 perl-Search-Dict-1.07-480.el9.tuxcare.els1.noarch.rpm f40809a3e96176f99e7393ee058099a1c1f71dc3 perl-SelectSaver-1.02-480.el9.tuxcare.els1.noarch.rpm b59f2408ee1df2b19ed079d52c5bf9fe9012c9b3 perl-SelfLoader-1.26-480.el9.tuxcare.els1.noarch.rpm cc3ab496650250124aa8b51344b83d1ef6a2f70d perl-Symbol-1.08-480.el9.tuxcare.els1.noarch.rpm 7e97ebed7f6fa98d6a2adabc46d1c514e33ec342 perl-Sys-Hostname-1.23-480.el9.tuxcare.els1.x86_64.rpm a9cdc12d135cf8492a49ad207615dd0188c626a2 perl-Term-Complete-1.403-480.el9.tuxcare.els1.noarch.rpm 83926e285d80268cd7f6141e4977c03158480184 perl-Term-ReadLine-1.17-480.el9.tuxcare.els1.noarch.rpm f4378c7bb63b1352297998b506341239861c161d perl-Test-1.31-480.el9.tuxcare.els1.noarch.rpm 02543f7f4f8582c4132ff066d58468a069734226 perl-Text-Abbrev-1.02-480.el9.tuxcare.els1.noarch.rpm 42b92245f29cf2fdc05ccb34973da964f9ed6caf perl-Thread-3.05-480.el9.tuxcare.els1.noarch.rpm 583893ffbc55ae96d05088bd66b04da115ea5e6c perl-Thread-Semaphore-2.13-480.el9.tuxcare.els1.noarch.rpm 7300a0767284b4d8a0433a4def5dd2ef312c40c7 perl-Tie-4.6-480.el9.tuxcare.els1.noarch.rpm f5dad033508c64f7aa61b69a76e1fb457c7c053e perl-Tie-File-1.06-480.el9.tuxcare.els1.noarch.rpm 9d10b703cefa11ea199bd6c81720d4b0ad07b23c perl-Tie-Memoize-1.1-480.el9.tuxcare.els1.noarch.rpm 5aab3517cf4dda70ad61f882e52776d7aa4148ea perl-Time-1.03-480.el9.tuxcare.els1.noarch.rpm 474cb97198a723b8a6633b9b01b1972d5651fff3 perl-Time-Piece-1.3401-480.el9.tuxcare.els1.x86_64.rpm 8f38e7cb5698c3cd018c76fa91424eb4e12fab64 perl-Unicode-UCD-0.75-480.el9.tuxcare.els1.noarch.rpm 9875c301fa638acd8b08535b56c95400fc389ac7 perl-User-pwent-1.03-480.el9.tuxcare.els1.noarch.rpm 700c6e3a0f3121ba5a2f309bcf5223d9686d0de5 perl-autouse-1.11-480.el9.tuxcare.els1.noarch.rpm 26e02895ba5aedd4f657ac7b12cb64bc021d90f3 perl-base-2.27-480.el9.tuxcare.els1.noarch.rpm e05486eec4a5527df9d2f7c73b67665a5682a65a perl-blib-1.07-480.el9.tuxcare.els1.noarch.rpm f95d072e75ce15e38a094cf7e8eaaf01931a0d9e perl-debugger-1.56-480.el9.tuxcare.els1.noarch.rpm da218f9f63c318df683cb2d04fcbc619944ce096 perl-deprecate-0.04-480.el9.tuxcare.els1.noarch.rpm 9695a8bb58b2f38fc6dcc060d5b0ad341ff6699e perl-devel-5.32.1-480.el9.tuxcare.els1.i686.rpm de2ed9f68357ed5502898f4b25d8aad54075b598 perl-devel-5.32.1-480.el9.tuxcare.els1.x86_64.rpm be51865778c46cb3a5c175074cc30499f905d6d2 perl-diagnostics-1.37-480.el9.tuxcare.els1.noarch.rpm 5f2f965c58fb8f084e5096d17436331df2f48f59 perl-doc-5.32.1-480.el9.tuxcare.els1.noarch.rpm 80d3b5934c8e22196476a5d566fe806a9af76c0c perl-encoding-warnings-0.13-480.el9.tuxcare.els1.noarch.rpm 87c40f07ba7f6147da1b4702ab677b9ae88d1ca7 perl-fields-2.27-480.el9.tuxcare.els1.noarch.rpm 47ff4adeb6dfd3fdb38ea86ccf2c7b65de854722 perl-filetest-1.03-480.el9.tuxcare.els1.noarch.rpm 7a46dfa89fb1fb9f611a9054579ccf14ffe98d52 perl-if-0.60.800-480.el9.tuxcare.els1.noarch.rpm 27f3f1d45c4f4878db8cffb39af8e04d8a1be2f1 perl-interpreter-5.32.1-480.el9.tuxcare.els1.x86_64.rpm 34837eba7ba8eb4bb9cebfce8091004effa5b362 perl-less-0.03-480.el9.tuxcare.els1.noarch.rpm 3830b24775a54e58f5d57a8b269765f4b78b65aa perl-lib-0.65-480.el9.tuxcare.els1.x86_64.rpm 8cbac5d23a237f91fb8134276bd4c36105126e7c perl-libnetcfg-5.32.1-480.el9.tuxcare.els1.noarch.rpm 367ccb310195c34237829f1e09ff2a5f30963b14 perl-libs-5.32.1-480.el9.tuxcare.els1.i686.rpm a4dd97ad2512885e570bb4b63ca3539664b5aa90 perl-libs-5.32.1-480.el9.tuxcare.els1.x86_64.rpm 3be12b8f241ab18f1722d6eefa10017a8958a97e perl-locale-1.09-480.el9.tuxcare.els1.noarch.rpm 9def6881f5d4c1220677b8942449570974fa01f8 perl-macros-5.32.1-480.el9.tuxcare.els1.noarch.rpm a3c181e8f7252e677739b15040de6c7d18acfe8b perl-meta-notation-5.32.1-480.el9.tuxcare.els1.noarch.rpm b80229db89d9a18326cd7d167736b9b927b360c9 perl-mro-1.23-480.el9.tuxcare.els1.x86_64.rpm 7e1fe96d02af5144e6eeb252450a9480eb37ebb8 perl-open-1.12-480.el9.tuxcare.els1.noarch.rpm b4e74709d690ea521e21e4da999f78aedb35137d perl-overload-1.31-480.el9.tuxcare.els1.noarch.rpm bbab25bac21c17fa28b5ceba9b473bd43ad290db perl-overloading-0.02-480.el9.tuxcare.els1.noarch.rpm c4eb31e108d167f1cd52da9ca715da45b8e54f97 perl-ph-5.32.1-480.el9.tuxcare.els1.x86_64.rpm 0d4e0b180cc19d74fd699f7b29110f319b012cd2 perl-sigtrap-1.09-480.el9.tuxcare.els1.noarch.rpm 0dd24f3ecccac6605f1ac626dcbd908adc5a08cb perl-sort-2.04-480.el9.tuxcare.els1.noarch.rpm bd75a95fc3478403e61aed6b250bdb64e85c2062 perl-subs-1.03-480.el9.tuxcare.els1.noarch.rpm fef7c1ba915603550e7b3f05c26fb5d66c408818 perl-tests-5.32.1-480.el9.tuxcare.els1.x86_64.rpm c72c3efb8de8c303e93063f8837f3a86c41806bc perl-utils-5.32.1-480.el9.tuxcare.els1.noarch.rpm 932b6f014f8cc21d73127c3a68e523f2248444dd perl-vars-1.05-480.el9.tuxcare.els1.noarch.rpm 2cc3d0335bffd2d62813f2ddd16826fc1728be91 perl-vmsish-1.04-480.el9.tuxcare.els1.noarch.rpm 75d6672571fd49121cfeb14e25c0b4a96ba4ffde CLSA-2023:1701444455 TuxCare License Agreement 0 - CVE-2023-24329: prevent bypass blocklisting methods Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-24329: prevent bypass blocklisting methods

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els1.noarch.rpm 81c80ab7f0557f35e678424a7889282e5be86aad python3-3.9.16-1.el9_2.2.tuxcare.els1.i686.rpm 09c837c30167256114bd6f1929798e129610750d python3-3.9.16-1.el9_2.2.tuxcare.els1.x86_64.rpm 1b0d262cc7af70394a803286ee9659d2a388d241 python3-debug-3.9.16-1.el9_2.2.tuxcare.els1.i686.rpm fee9f2658053fdb65791581ba1d3db4c1a928779 python3-debug-3.9.16-1.el9_2.2.tuxcare.els1.x86_64.rpm d88369110df2fc4106d85dce61f9b859980b590d python3-devel-3.9.16-1.el9_2.2.tuxcare.els1.i686.rpm 9752a78e95a5e0437e7b6daaa260fcd8e846ec5e python3-devel-3.9.16-1.el9_2.2.tuxcare.els1.x86_64.rpm 0ed14b5e49d77d2b369391a444a237d429360ca3 python3-idle-3.9.16-1.el9_2.2.tuxcare.els1.i686.rpm 41cec47621a233bdb786aad6f678656842f1d840 python3-idle-3.9.16-1.el9_2.2.tuxcare.els1.x86_64.rpm 5a3b3796cb304946a771e1706bdcb55a0d273001 python3-libs-3.9.16-1.el9_2.2.tuxcare.els1.i686.rpm eba549464fe1a7dd7929bf0fbab0a76980969a5a python3-libs-3.9.16-1.el9_2.2.tuxcare.els1.x86_64.rpm b3e220a77a5559b0511781df15f8441c74e11d43 python3-test-3.9.16-1.el9_2.2.tuxcare.els1.i686.rpm e35c0d468dd5bea31e05858c7ce4b66678efb0ca python3-test-3.9.16-1.el9_2.2.tuxcare.els1.x86_64.rpm c1cd60f4c3a9e98858d2fd0d44264c2c8f03a2e5 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els1.i686.rpm 5b3c13a8ad56c6960ba8581887c15d83c2684c96 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els1.x86_64.rpm 82f440a73e98612f6d2c7e9aef929e56cf2f2c09 CLSA-2023:1701444589 TuxCare License Agreement 0 - CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference

0 tuxcare-almalinux9.2-esu openldap-2.6.2-3.el9.tuxcare.els1.i686.rpm 38f064140275e9a3d160ce3ec8bc09d97a003b29 openldap-2.6.2-3.el9.tuxcare.els1.x86_64.rpm 96c8b322abde2da1d69bc41934152800347cca7b openldap-clients-2.6.2-3.el9.tuxcare.els1.x86_64.rpm 913ca1cf28025e98afb8f66f66a9fde09e3012f3 openldap-compat-2.6.2-3.el9.tuxcare.els1.i686.rpm 84a92375049d8b8016297bb784c0bbe65941c65e openldap-compat-2.6.2-3.el9.tuxcare.els1.x86_64.rpm 5151e86d6aa1b5ddc045b8b7ebc3df72aeb24f4b openldap-devel-2.6.2-3.el9.tuxcare.els1.i686.rpm 0c346c2e38376295592b08938bf8d7ff5a6b2fc6 openldap-devel-2.6.2-3.el9.tuxcare.els1.x86_64.rpm c4fc14fccf67dacb4aba5dbb0d6e37f73acd99f4 CLSA-2023:1701706552 TuxCare License Agreement 0 - CVE-2023-27522: mod_proxy_uwsgi: HTTP response splitting - CVE-2023-31122: mod_macro: fix out-of-bounds read vulnerability by using own strncmp function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-27522: mod_proxy_uwsgi: HTTP response splitting - CVE-2023-31122: mod_macro: fix out-of-bounds read vulnerability by using own strncmp function

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm 45f0bd57db799d7539bf0b2872849592351ed4be httpd-core-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm 7315623823786e66197a47db43f474a563377297 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm ce86ac09c61534fd1766d7b8189e58887772c3a6 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els1.noarch.rpm 7f96e12875eca8a164fa365203ee9af56e1062d8 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els1.noarch.rpm 7505a5d14551b9c4dfc3855062297684e31cfe30 httpd-tools-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm 11a9c8ba4f6eb6afeac273bf2173d5fb1d1f99dc mod_ldap-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm e6d8c203f0ef54e9b9653eca5db493a13836ceb0 mod_lua-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm 371a35c2155ca2ae8de45244280d42340beac161 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm 9b2ee618b307d098c8f9cbfa2e1a64df589d6a47 mod_session-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm 52783cc130088c745f2c4dfe74e44898012b753e mod_ssl-2.4.53-11.el9_2.5.tuxcare.els1.x86_64.rpm 7e04b89a0e88bd9b5d40cbace5a54971c2a20972 CLSA-2023:1701971779 TuxCare License Agreement 0 - Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 (INTEL-SA-00950): - Update of 06-6a-06/0x87 (ICX-SP D0) microcode (in 06-6a-06) from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 (ICL-D B0) microcode (in 06-6c-01) from revision 0x1000230 up to 0x1000268; - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in 06-7e-05) from revision 0xbc up to 0xc2; - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in 06-8c-01) from revision 0xac up to 0xb4; - Update of 06-8c-02/0xc2 (TGL-R C0) microcode (in 06-8c-02) from revision 0x2c up to 0x34; - Update of 06-8d-01/0xc2 (TGL-H R0) microcode (in 06-8d-01) from revision 0x46 up to 0x4e; - Update of 06-8f-04/0x10 microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004b1; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004b1; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x430; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x42c; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x42c; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in 06-9a-03) from revision 0x42c up to 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x430; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x42c; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x42c; - Update of 06-9a-04/0x40 (AZB A0) microcode (in 06-9a-04) from revision 0x4 up to 0x5; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in 06-9a-04) from revision 0x42c up to 0x430; - Update of 06-a7-01/0x02 (RKL-S B0) microcode (in 06-a7-01) from revision 0x59 up to 0x5d; - Update of 06-b7-01/0x32 (RPL-S B0) microcode (in 06-b7-01) from revision 0x119 up to 0x11d; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x411c; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x4119; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x4119; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in 06-ba-02) from revision 0x4119 up to 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x411c; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x4119; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x4119; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in 06-ba-03) from revision 0x4119 up to 0x411c; - Update of 06-be-00/0x11 (ADL-N A0) microcode (in 06-be-00) from revision 0x11 up to 0x12; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - gen_update2.py was updated to output strings having restricted length; - refactor the way to keep the realeasenote.md file actual; Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 (INTEL-SA-00950): - Update of 06-6a-06/0x87 (ICX-SP D0) microcode (in 06-6a-06) from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 (ICL-D B0) microcode (in 06-6c-01) from revision 0x1000230 up to 0x1000268; - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in 06-7e-05) from revision 0xbc up to 0xc2; - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in 06-8c-01) from revision 0xac up to 0xb4; - Update of 06-8c-02/0xc2 (TGL-R C0) microcode (in 06-8c-02) from revision 0x2c up to 0x34; - Update of 06-8d-01/0xc2 (TGL-H R0) microcode (in 06-8d-01) from revision 0x46 up to 0x4e; - Update of 06-8f-04/0x10 microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004b1; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004b1; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x430; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x42c; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x42c; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in 06-9a-03) from revision 0x42c up to 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x430; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x42c; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x42c; - Update of 06-9a-04/0x40 (AZB A0) microcode (in 06-9a-04) from revision 0x4 up to 0x5; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in 06-9a-04) from revision 0x42c up to 0x430; - Update of 06-a7-01/0x02 (RKL-S B0) microcode (in 06-a7-01) from revision 0x59 up to 0x5d; - Update of 06-b7-01/0x32 (RPL-S B0) microcode (in 06-b7-01) from revision 0x119 up to 0x11d; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x411c; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x4119; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x4119; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in 06-ba-02) from revision 0x4119 up to 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x411c; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x4119; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x4119; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in 06-ba-03) from revision 0x4119 up to 0x411c; - Update of 06-be-00/0x11 (ADL-N A0) microcode (in 06-be-00) from revision 0x11 up to 0x12; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - gen_update2.py was updated to output strings having restricted length; - refactor the way to keep the realeasenote.md file actual;

0 tuxcare-almalinux9.2-esu microcode_ctl-20220809-2.20231114.2.el9_2.tuxcare.els1.noarch.rpm 6d980b7d15ebc1f53c3b5c8980a32314aae3cdaf CLSA-2023:1702495051 TuxCare License Agreement 0 - CVE-2023-47100: fix read/write past buffer end Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-47100: fix read/write past buffer end

0 tuxcare-almalinux9.2-esu perl-5.32.1-480.el9.tuxcare.els2.x86_64.rpm aac61377e8b8d51eec5292e5ab283e106dae96b8 perl-Attribute-Handlers-1.01-480.el9.tuxcare.els2.noarch.rpm dc30b6eb8fa2f2b42cd819e1196841551997a8ad perl-AutoLoader-5.74-480.el9.tuxcare.els2.noarch.rpm a72e2c9951dc1e301f6babe13387526e6e7198cd perl-AutoSplit-5.74-480.el9.tuxcare.els2.noarch.rpm a73d2dd6535f88f2180ac4be5139ccc5eb442bef perl-B-1.80-480.el9.tuxcare.els2.x86_64.rpm 7fbff863733736f8b1d1b633715142c4c133d2c9 perl-Benchmark-1.23-480.el9.tuxcare.els2.noarch.rpm dfa22a381692fbdfb1926f70775a506d7207bef7 perl-Class-Struct-0.66-480.el9.tuxcare.els2.noarch.rpm 8ea765053f5d4d77d0bbd95ca4e792bf0e9305b6 perl-Config-Extensions-0.03-480.el9.tuxcare.els2.noarch.rpm 7bb80f9d8ba72e394ab2bf8d1301983d7e90de41 perl-DBM_Filter-0.06-480.el9.tuxcare.els2.noarch.rpm 68ee0a66a45e62df2c484a6220c6aaeb3b81a33e perl-Devel-Peek-1.28-480.el9.tuxcare.els2.x86_64.rpm 72f61d60285f031b321b7952152a04051d7ea007 perl-Devel-SelfStubber-1.06-480.el9.tuxcare.els2.noarch.rpm a2ef3247b0690bca480a1fba5ab12243733e1d5b perl-DirHandle-1.05-480.el9.tuxcare.els2.noarch.rpm 825b9cf24a891c625085c1edc4287e44e5e94d97 perl-Dumpvalue-2.27-480.el9.tuxcare.els2.noarch.rpm 108712af69f0571758deac66bf278cccd8072944 perl-DynaLoader-1.47-480.el9.tuxcare.els2.x86_64.rpm 33441903dc5ee7bc6b972be6d86b1edd3a9fc97f perl-English-1.11-480.el9.tuxcare.els2.noarch.rpm fa8f44966b256cca8b8936f0222d75e403a2ab31 perl-Errno-1.30-480.el9.tuxcare.els2.x86_64.rpm 1dddbfef6af332f42c66e1fbade4b35782b256c2 perl-ExtUtils-Constant-0.25-480.el9.tuxcare.els2.noarch.rpm a568b6ee848c8c18b95fcb95d25e9346c6165830 perl-ExtUtils-Embed-1.35-480.el9.tuxcare.els2.noarch.rpm 7d7e2a15a9e2ddd5efbd17bcfabacad6b5ff6356 perl-ExtUtils-Miniperl-1.09-480.el9.tuxcare.els2.noarch.rpm 5dabd11827d75b972463bc573f24fde6fb17b6d8 perl-Fcntl-1.13-480.el9.tuxcare.els2.x86_64.rpm ae8a6aba924b8c50b243cc586ca75718e5ffac47 perl-File-Basename-2.85-480.el9.tuxcare.els2.noarch.rpm 7c9374a325f0f98afbce865ec70850f497ee0724 perl-File-Compare-1.100.600-480.el9.tuxcare.els2.noarch.rpm e1b23892b28496587e4d05183d0d9c62615ad8c0 perl-File-Copy-2.34-480.el9.tuxcare.els2.noarch.rpm 6b42faec556b77f735379053574576044f1ca4cc perl-File-DosGlob-1.12-480.el9.tuxcare.els2.x86_64.rpm 6f6d8bd9936c30b775837eff32c123ab98ce2ec1 perl-File-Find-1.37-480.el9.tuxcare.els2.noarch.rpm 094c5d99962797c11de03c44586e16d2df4047cc perl-File-stat-1.09-480.el9.tuxcare.els2.noarch.rpm 9f882d9c6adc9a05210041cfd61512fff1999ca5 perl-FileCache-1.10-480.el9.tuxcare.els2.noarch.rpm 48dc061627ad10df8c9d301cfa2eab8371ac608b perl-FileHandle-2.03-480.el9.tuxcare.els2.noarch.rpm 97a0d6f71e96387dd3974bf2ba6458c6403a9987 perl-FindBin-1.51-480.el9.tuxcare.els2.noarch.rpm 18d2724c458e941a49e71820a435c2d6f9d46032 perl-GDBM_File-1.18-480.el9.tuxcare.els2.x86_64.rpm a109c4effdab93e08e7ff9c2180633c461003492 perl-Getopt-Std-1.12-480.el9.tuxcare.els2.noarch.rpm 86502122222e01a727d7be2eaa17ac8501fbcace perl-Hash-Util-0.23-480.el9.tuxcare.els2.x86_64.rpm 3c8cee87ba45978e78a74669cb3690dfc8fc8c15 perl-Hash-Util-FieldHash-1.20-480.el9.tuxcare.els2.x86_64.rpm 7646069132c058db406a95cf917be716e5a2a7e1 perl-I18N-Collate-1.02-480.el9.tuxcare.els2.noarch.rpm e639136f09dcc4d365a8a318185707eaa326610a perl-I18N-LangTags-0.44-480.el9.tuxcare.els2.noarch.rpm 01c11ad1979709cefa2bac9fd0836f8446ee4903 perl-I18N-Langinfo-0.19-480.el9.tuxcare.els2.x86_64.rpm e111329d1e3a964bf9a8989fd2cf0e43ef51c598 perl-IO-1.43-480.el9.tuxcare.els2.x86_64.rpm 1f7a47d96eec963e3e7252a770141b3ebf975331 perl-IPC-Open3-1.21-480.el9.tuxcare.els2.noarch.rpm 039ab35e7b1abb032e26a1a5c07e6a55332f8116 perl-Locale-Maketext-Simple-0.21-480.el9.tuxcare.els2.noarch.rpm b9169715627f5913155b7c292325e0ae51ceec94 perl-Math-Complex-1.59-480.el9.tuxcare.els2.noarch.rpm 3fae3707b633d17a4f159d1f9cab08fb07250568 perl-Memoize-1.03-480.el9.tuxcare.els2.noarch.rpm 01d74f0e876ef5ab8ffdc809508cd1373fbc08ef perl-Module-Loaded-0.08-480.el9.tuxcare.els2.noarch.rpm 58559fb4ac9ccbc03bd313653026cdfed12029ea perl-NDBM_File-1.15-480.el9.tuxcare.els2.x86_64.rpm a9c531819d956ecf576418884bc07e5c0be2b58f perl-NEXT-0.67-480.el9.tuxcare.els2.noarch.rpm 1356014ae0d66de908af5e8f3ebddf1c7394a9cb perl-Net-1.02-480.el9.tuxcare.els2.noarch.rpm 8e76478e0777bffbdf5a246393701dc8287e8df2 perl-ODBM_File-1.16-480.el9.tuxcare.els2.x86_64.rpm c85f5c36e5d389b56080891b193aab0ad440b74e perl-Opcode-1.48-480.el9.tuxcare.els2.x86_64.rpm 8d23a28e78ac2badac4f1884bc17ab325606e75f perl-POSIX-1.94-480.el9.tuxcare.els2.x86_64.rpm 9beec8be134799b72d5e23d62be071af2fe1e764 perl-Pod-Functions-1.13-480.el9.tuxcare.els2.noarch.rpm b1a5f869a453d1aaaf723b3ded5ca01ba001ea6c perl-Pod-Html-1.25-480.el9.tuxcare.els2.noarch.rpm 78ea47007237ac61134e3be88dda6f218c42fe27 perl-Safe-2.41-480.el9.tuxcare.els2.noarch.rpm 373b7d93ca49ed0ef2c6be460c76f68aaa6e9f29 perl-Search-Dict-1.07-480.el9.tuxcare.els2.noarch.rpm 7493a5032730391d71e4a54fccaa40e2ede94623 perl-SelectSaver-1.02-480.el9.tuxcare.els2.noarch.rpm 252ec27210d2481df42adb2259c2abbdc0d397e1 perl-SelfLoader-1.26-480.el9.tuxcare.els2.noarch.rpm 8f2987e10add9a373dcaaa5d21d0c90f8a8a3e9a perl-Symbol-1.08-480.el9.tuxcare.els2.noarch.rpm 992309d1aea87fbd6d326a13dad0c0606fdbf741 perl-Sys-Hostname-1.23-480.el9.tuxcare.els2.x86_64.rpm 8ecb1f1f2c47adc38a7d9eee19560888b81d88e2 perl-Term-Complete-1.403-480.el9.tuxcare.els2.noarch.rpm c9254c29259856d6b46647a2075b546bbc9475f1 perl-Term-ReadLine-1.17-480.el9.tuxcare.els2.noarch.rpm f3c0c64f3894cebfa35f4633bdc5025e06e8fdc2 perl-Test-1.31-480.el9.tuxcare.els2.noarch.rpm 3f021eafb939f1b0003d6d8c088a2177a524be9a perl-Text-Abbrev-1.02-480.el9.tuxcare.els2.noarch.rpm 8433bb8498375cc04bb1893b779a410baec962d3 perl-Thread-3.05-480.el9.tuxcare.els2.noarch.rpm ad40ed5feed4720e1120eb1ff1f56c8587320147 perl-Thread-Semaphore-2.13-480.el9.tuxcare.els2.noarch.rpm 2f7ce7fb470d5b5840563065e7461a4a69f660e2 perl-Tie-4.6-480.el9.tuxcare.els2.noarch.rpm aba55ec7a1f0f143ddb60e0db5f26216d397c3af perl-Tie-File-1.06-480.el9.tuxcare.els2.noarch.rpm 5e339841a8fd41b3b85d9020caa29edbc81f9a96 perl-Tie-Memoize-1.1-480.el9.tuxcare.els2.noarch.rpm cad94e63f41c4d4d20d89ede24e263ca7b5ec4ca perl-Time-1.03-480.el9.tuxcare.els2.noarch.rpm e9b397ae0dc7f765ca3e9f2906f81dcaa9a5e609 perl-Time-Piece-1.3401-480.el9.tuxcare.els2.x86_64.rpm b00460dbaaa43328def8d0af9b8cfdf593344a56 perl-Unicode-UCD-0.75-480.el9.tuxcare.els2.noarch.rpm 7e78320a859fd33d358d39dd4d398663de4da37f perl-User-pwent-1.03-480.el9.tuxcare.els2.noarch.rpm bc234ae9c1075679a2a5b329930231b93fc81a29 perl-autouse-1.11-480.el9.tuxcare.els2.noarch.rpm 73d72cb3ec89f6c48f0fd711460fa3915170bd7b perl-base-2.27-480.el9.tuxcare.els2.noarch.rpm 17384c258bd959e27a93e6906808113fe1bce37c perl-blib-1.07-480.el9.tuxcare.els2.noarch.rpm 66d2ef71c24ab94dc5e1bde5dbf23c6d2619e3ff perl-debugger-1.56-480.el9.tuxcare.els2.noarch.rpm 7ba130a24b4aab1f53eb3fe61deccd58faad76e0 perl-deprecate-0.04-480.el9.tuxcare.els2.noarch.rpm ce84be98b6bf1b847f98e3d3f9c0fbdf3e9ef701 perl-devel-5.32.1-480.el9.tuxcare.els2.i686.rpm 6487fd20026f1772f7df6e5149f5fba4a0211861 perl-devel-5.32.1-480.el9.tuxcare.els2.x86_64.rpm 435441b565e8ba0a8c8b480daaed63d73895e903 perl-diagnostics-1.37-480.el9.tuxcare.els2.noarch.rpm 874d173c0b3e677b97e6d055e02278e07e284759 perl-doc-5.32.1-480.el9.tuxcare.els2.noarch.rpm 0dea9e5f7230b494622d633b45886f53cde3a17f perl-encoding-warnings-0.13-480.el9.tuxcare.els2.noarch.rpm a44caa31f1ebaac2efd7becdb81440f3cceef43c perl-fields-2.27-480.el9.tuxcare.els2.noarch.rpm 948fb6c6332e68eb11df9ca560499b37aded2348 perl-filetest-1.03-480.el9.tuxcare.els2.noarch.rpm 6b44596096eb7702e2dc0daa3a1120f07a71554d perl-if-0.60.800-480.el9.tuxcare.els2.noarch.rpm fad927a2062c2e1f1b76375c3515fedd2e46a29a perl-interpreter-5.32.1-480.el9.tuxcare.els2.x86_64.rpm 3a519c497300789ad53818056d68bd0dcd60501c perl-less-0.03-480.el9.tuxcare.els2.noarch.rpm 80502970216648bf5142beefb7606552a6e14cae perl-lib-0.65-480.el9.tuxcare.els2.x86_64.rpm bc0e3e41a6b041d6625a18bf6afc8b9aa6d13d22 perl-libnetcfg-5.32.1-480.el9.tuxcare.els2.noarch.rpm b906f9869e3bb7cd4949d051dc363104778a8ec9 perl-libs-5.32.1-480.el9.tuxcare.els2.i686.rpm 9020e1a6d9bba89634b89aca41a58521dab3d316 perl-libs-5.32.1-480.el9.tuxcare.els2.x86_64.rpm 832aa47777d106242d28fe1e722dc01f2259d980 perl-locale-1.09-480.el9.tuxcare.els2.noarch.rpm 2cf6a62af5a57ae27a87fb999a78c29d8dc9f530 perl-macros-5.32.1-480.el9.tuxcare.els2.noarch.rpm 791a07354dbe13785b3778751ae7a0acf1b76bdb perl-meta-notation-5.32.1-480.el9.tuxcare.els2.noarch.rpm ee68261591a477a4b885a581d508e08a1569a632 perl-mro-1.23-480.el9.tuxcare.els2.x86_64.rpm 24fcb1bc6625314ab13baf622a8aba8badbcbb0f perl-open-1.12-480.el9.tuxcare.els2.noarch.rpm 9cb44183e86883aef30d4069255275f2e428fdd9 perl-overload-1.31-480.el9.tuxcare.els2.noarch.rpm 3d22079f4a38af72b86e1af8e6746c9136418243 perl-overloading-0.02-480.el9.tuxcare.els2.noarch.rpm 4a38fb9ff1c9b330e14c2db7a9d3a001b8dc8e5c perl-ph-5.32.1-480.el9.tuxcare.els2.x86_64.rpm 7a90667ff93bfd42fdcdb89e37eea84f72f18fbc perl-sigtrap-1.09-480.el9.tuxcare.els2.noarch.rpm e10a07efd3b7ed971e4507841308ae3992923a5f perl-sort-2.04-480.el9.tuxcare.els2.noarch.rpm f5decb1dde2776592bbdd8e7c07b465901245449 perl-subs-1.03-480.el9.tuxcare.els2.noarch.rpm 697715427f9037d3c658fdd5b80df02c5dc83c9c perl-tests-5.32.1-480.el9.tuxcare.els2.x86_64.rpm eb7a7ae98e3eaff34de30c90f082c4b8a8aa6ea2 perl-utils-5.32.1-480.el9.tuxcare.els2.noarch.rpm bfd56df5a0689a8a4f01f00215e315a9609b71a9 perl-vars-1.05-480.el9.tuxcare.els2.noarch.rpm 331cc55dfb957b672383d157587815cc1aadd35e perl-vmsish-1.04-480.el9.tuxcare.els2.noarch.rpm 371c93485023832d721a3f59867fc750d30be7d1 CLSA-2023:1702495193 TuxCare License Agreement 0 - CVE-2023-5363: evp: process key length and iv length early if present Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5363: evp: process key length and iv length early if present

0 tuxcare-almalinux9.2-esu openssl-3.0.7-17.el9_2.tuxcare.els1.x86_64.rpm f7ef34f9c4c3efc1cdbe67bbf5480796879a6165 openssl-devel-3.0.7-17.el9_2.tuxcare.els1.i686.rpm b10f841e629a41b929aa61fdc900d40f06087d24 openssl-devel-3.0.7-17.el9_2.tuxcare.els1.x86_64.rpm 63f716076f29f2cf07e12c4bf69aba2786cdc1e8 openssl-libs-3.0.7-17.el9_2.tuxcare.els1.i686.rpm 8b6da2549d04060c41b35fd4a1c242ffc4a926d6 openssl-libs-3.0.7-17.el9_2.tuxcare.els1.x86_64.rpm 9a29f877bcbd6b063d5a21c5864bd95b2e26ce3a openssl-perl-3.0.7-17.el9_2.tuxcare.els1.x86_64.rpm 9f29a0e59f58e0658271760bb77c18e87cc17949 CLSA-2023:1703785060 TuxCare License Agreement 0 - CVE-2023-51385: ban user/hostnames with most shell metacharacters in command line Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-51385: ban user/hostnames with most shell metacharacters in command line

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els3.x86_64.rpm eea7acaac13b2bf4fbd87e8f4d08142e419eec78 openssh-askpass-8.7p1-30.el9_2.tuxcare.els3.x86_64.rpm 4cd0822c4c2bd217a5b72bd3220dc014b536650a openssh-clients-8.7p1-30.el9_2.tuxcare.els3.x86_64.rpm 2fc86f029ab26c1e0e064ff4d26743f03f945525 openssh-keycat-8.7p1-30.el9_2.tuxcare.els3.x86_64.rpm be943c3394eeb69ad0dd2a610a7f995e237a53aa openssh-server-8.7p1-30.el9_2.tuxcare.els3.x86_64.rpm 682adc5c59fc49df1afede8607d37494889155d2 openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els3.x86_64.rpm d2230aeffc812ff7306920e723db1d9b0b060ba9 pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els3.x86_64.rpm 19f6ae7f5d7e783727762e52b55a3b3570f40026 CLSA-2024:1705940980 TuxCare License Agreement 0 - Update to CKBI 2.64 from NSS 3.95 - Removed: - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "E-Tugra Certification Authority" - # Certificate "Global Chambersign Root - 2008" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - Added: - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to CKBI 2.64 from NSS 3.95 - Removed: - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "E-Tugra Certification Authority" - # Certificate "Global Chambersign Root - 2008" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - Added: - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4"

0 tuxcare-almalinux9.2-esu ca-certificates-2023.2.64_v7.0.306-90.1.el9_2.tuxcare.els1.noarch.rpm 94969eba7dc1043e46d0635545f2128b5a743cc8 CLSA-2024:1707226462 TuxCare License Agreement 0 - CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary

0 tuxcare-almalinux9.2-esu grub2-common-2.06-61el9_2.1.alma.tuxcare.els1.noarch.rpm 043e2a57190c13aa66cab34ec8be4703698fc6df grub2-efi-aa64-modules-2.06-61el9_2.1.alma.tuxcare.els1.noarch.rpm 100877084076df97c59348b01911119c807fcb1e grub2-efi-x64-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm 7af80c920f58c40cbb985cdbef47c4c1bc5efcf2 grub2-efi-x64-cdboot-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm a893f31d215959e90a1f505591d797d1cd09514e grub2-efi-x64-modules-2.06-61el9_2.1.alma.tuxcare.els1.noarch.rpm 158ce15352c32bcdf9314d797fbd263b87de21f8 grub2-emu-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm 34cd9419649c1879fd6d7897d230a43544e7f80b grub2-emu-modules-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm 9cbe231340eae677af940023e6cf78ec8fac62cd grub2-pc-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm 87192f10d92f0bec312213109e6e82f77b29308d grub2-pc-modules-2.06-61el9_2.1.alma.tuxcare.els1.noarch.rpm 16951b839054741c33849ac3deb6c85e9f69ae84 grub2-tools-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm 02ae8819481f5660a55dd9fe7d1c09f4ddd8d797 grub2-tools-efi-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm b50690d1bb6a3997ea5ea184f59de9a5f400b30b grub2-tools-extra-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm a9daa82f689321e375d85359fdb2ecd175a795f2 grub2-tools-minimal-2.06-61el9_2.1.alma.tuxcare.els1.x86_64.rpm 27cf5240d1f5fb2ebe6a6138b925e65d4a94d79c CLSA-2024:1707419637 TuxCare License Agreement 0 - CVE-2023-7104: Fix heap-based buffer overflow in the sessionReadRecord function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-7104: Fix heap-based buffer overflow in the sessionReadRecord function

0 tuxcare-almalinux9.2-esu lemon-3.34.1-6.el9_1.tuxcare.els1.x86_64.rpm 48b55a63728c888bdc95206d64f95d37f560c609 sqlite-3.34.1-6.el9_1.tuxcare.els1.i686.rpm a8a1551c21006b1a9e97176335e5c53ceea2d0ab sqlite-3.34.1-6.el9_1.tuxcare.els1.x86_64.rpm eafd2553df3c62c61cc874fc143d31707344defe sqlite-analyzer-3.34.1-6.el9_1.tuxcare.els1.x86_64.rpm 4082cf92807d015ba7f4df61feffe752528ff8ac sqlite-devel-3.34.1-6.el9_1.tuxcare.els1.i686.rpm d1b667ad1291e305d33057edd8518e54004b530a sqlite-devel-3.34.1-6.el9_1.tuxcare.els1.x86_64.rpm 7a8fdd48a6d97513de7d77b67bc12504f49e7550 sqlite-doc-3.34.1-6.el9_1.tuxcare.els1.noarch.rpm b10bfcd4d7f36f66764a66d64c924de97447583b sqlite-libs-3.34.1-6.el9_1.tuxcare.els1.i686.rpm 23ad379ae2d2219152df35ac30d57aa7279ef24e sqlite-libs-3.34.1-6.el9_1.tuxcare.els1.x86_64.rpm 750524cdb069031caa88ae26b8f7704135802dce sqlite-tcl-3.34.1-6.el9_1.tuxcare.els1.x86_64.rpm 54910e3cee97320acaf4b0580ca75ef2b928a28e sqlite-tools-3.34.1-6.el9_1.tuxcare.els1.x86_64.rpm ad81aaebd2ddcfc60854e33d073e68579dcf139e CLSA-2024:1708029694 TuxCare License Agreement 0 - Update to CKBI 2.64 from NSS 3.95 - Removed: - # Certificate "E-Tugra Certification Authority" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - Added: - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - Updated test certificates None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to CKBI 2.64 from NSS 3.95 - Removed: - # Certificate "E-Tugra Certification Authority" - # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Symantec Class 1 Public Primary Certification Authority - G6" - # Certificate "Symantec Class 2 Public Primary Certification Authority - G6" - # Certificate "TrustCor ECA-1" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "Verisign Class 1 Public Primary Certification Authority - G3" - # Certificate "Verisign Class 2 Public Primary Certification Authority - G3" - Added: - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - Updated test certificates

0 tuxcare-almalinux9.2-esu nspr-4.35.0-3.el9_2.tuxcare.els1.i686.rpm 142115a9f045dd2174d0ffd8df5f94d69c84d73a nspr-4.35.0-3.el9_2.tuxcare.els1.x86_64.rpm c79376b0f7d04f713bf60c9aa2d3fcca753e7d68 nspr-devel-4.35.0-3.el9_2.tuxcare.els1.i686.rpm 0dfdf751ff65c8826ff5d94da422d85e7425b2c8 nspr-devel-4.35.0-3.el9_2.tuxcare.els1.x86_64.rpm 71e88e817c1170df49a5af36f95dc44e0cf9842d nss-3.90.0-3.el9_2.tuxcare.els1.i686.rpm 0f662aa250125c5caafb63bd649826acae2e2f78 nss-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 3953ec77c9e5cbc8f419f09c71329f2183b78dd1 nss-devel-3.90.0-3.el9_2.tuxcare.els1.i686.rpm 2689c9b8b33c081520a8a660a9def37833ba48c8 nss-devel-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 5f4373acae9dd0cf9e62c527c191e570cd39d5af nss-pkcs11-devel-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 50ab3576ca0c796f3d2a6533a903a41f43ca8b99 nss-softokn-3.90.0-3.el9_2.tuxcare.els1.i686.rpm a2b97e5ba84018b71b35f65369edd9e83086f504 nss-softokn-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 232615ec87aec93a5b691597894a30fdc38934a3 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els1.i686.rpm 87ddeae089fe4dda8f304d3caef4f4bbfad57541 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm b4d450524bb83b149cd8e3af7f6364b00f739d30 nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els1.i686.rpm 4ca1b5a3d8fd5cf87df970754d137e56cfc11d8b nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 743bc89caa74438c0b6324a734a697d6046b55a0 nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els1.i686.rpm 63737de077af1033391cc6660d74cdfd7cdce39a nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 27a5a93b16feabad7fe01217cf35403088d81de9 nss-sysinit-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm a149457e862371353a241d2b2f2e9ebfbbf96a8b nss-tools-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 63420a80ac1073c79dad9ea77eeb4ab2b782bf93 nss-util-3.90.0-3.el9_2.tuxcare.els1.i686.rpm 97fecb642ce80bcd01ff8e319ab5cae7d23064c3 nss-util-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 91c8c3cbb622d5d33fdbda2e3d7ed6b344b88af4 nss-util-devel-3.90.0-3.el9_2.tuxcare.els1.i686.rpm 83a4970eaf41ff9dcc0d954c80bff5b240d5a503 nss-util-devel-3.90.0-3.el9_2.tuxcare.els1.x86_64.rpm 9e6e12fdbbb937f4ba416f2bd2aac0bb073eb516 CLSA-2024:1708029809 TuxCare License Agreement 0 - CVE-2023-5981, CVE-2024-0553: fix timing sidechannel in RSA-PSK key exchange Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5981, CVE-2024-0553: fix timing sidechannel in RSA-PSK key exchange

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-21.el9_2.tuxcare.els1.i686.rpm 04dc955b80b99bafcd7c7144b91dc5d29f51206f gnutls-3.7.6-21.el9_2.tuxcare.els1.x86_64.rpm c4ece28b244c678aeef50da022a666ca5355cff5 gnutls-c++-3.7.6-21.el9_2.tuxcare.els1.i686.rpm c9a247bdb807e7c798d07f3bc5c64cfe2e74b72d gnutls-c++-3.7.6-21.el9_2.tuxcare.els1.x86_64.rpm 66048f5a9f067b9d61ddb452dfe80be0231879bd gnutls-dane-3.7.6-21.el9_2.tuxcare.els1.i686.rpm 5d1ced242e6c35e78a60157f4f07b581517bdaec gnutls-dane-3.7.6-21.el9_2.tuxcare.els1.x86_64.rpm afeed590ffbe22f8bb1b0f171e6ff194d4c2fe6b gnutls-devel-3.7.6-21.el9_2.tuxcare.els1.i686.rpm e672bb0600b40ef322531c49d9ab4735516ef52b gnutls-devel-3.7.6-21.el9_2.tuxcare.els1.x86_64.rpm ca8c295cfd02d49fbb5a375028a933abe052c4d7 gnutls-utils-3.7.6-21.el9_2.tuxcare.els1.x86_64.rpm 6784eaf35bce1a9df66e59f9ad23ee2712e99ffb CLSA-2024:1708029936 TuxCare License Agreement 0 - CVE-2024-0567: x509: detect loop in certificate chain Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0567: x509: detect loop in certificate chain

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-21.el9_2.tuxcare.els2.i686.rpm 8deecf42ac83c1dfd41e1086f05548a84a037bdf gnutls-3.7.6-21.el9_2.tuxcare.els2.x86_64.rpm f1287bb89e601039764c30cbbfbe01082c4c798b gnutls-c++-3.7.6-21.el9_2.tuxcare.els2.i686.rpm 5dfc8241516cd209ff3491665e9adcfb36e39f95 gnutls-c++-3.7.6-21.el9_2.tuxcare.els2.x86_64.rpm d36172ec1c8a16d7e265120f31668a6773e621de gnutls-dane-3.7.6-21.el9_2.tuxcare.els2.i686.rpm af467f3ac33694d1bb0fa78276d375fce26dbea5 gnutls-dane-3.7.6-21.el9_2.tuxcare.els2.x86_64.rpm d8acee41e5b4836c7bab6048674889d52c2319e4 gnutls-devel-3.7.6-21.el9_2.tuxcare.els2.i686.rpm 9600111ef071c829f824e68355b253045f32b7e7 gnutls-devel-3.7.6-21.el9_2.tuxcare.els2.x86_64.rpm 8fcf4bc91bd33f5233d705b15e419e63617e0856 gnutls-utils-3.7.6-21.el9_2.tuxcare.els2.x86_64.rpm bbbdf7f776a890c2419539bb553828869c1abbc1 CLSA-2024:1708416911 TuxCare License Agreement 0 - CVE-2024-25062: Fix use-after-free issue in libxml2 XML Reader interface with DTD validation and XInclude expansion enabled. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-25062: Fix use-after-free issue in libxml2 XML Reader interface with DTD validation and XInclude expansion enabled.

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els1.i686.rpm db23dbe91c6edce19202021fab016c207e2b6288 libxml2-2.9.13-3.el9_2.1.tuxcare.els1.x86_64.rpm 1d3d9f6e342af8ff43815b8157550e47811024b6 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els1.i686.rpm 91e803740789675db5da5c88fea7ee373b78a2b6 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els1.x86_64.rpm bf7575940a037ad44e576bac3b8bf95883e7b144 libxml2-static-2.9.13-3.el9_2.1.tuxcare.els1.x86_64.rpm f39d061fdde5198d19574859ca81e85b1c213894 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els1.x86_64.rpm 2555a907bb7d5e71b1d3063dc5da54ac39a8221e CLSA-2024:1708417063 TuxCare License Agreement 0 - CVE-2021-35937: fix a possible privilege escalation through a symlink check race condition - CVE-2021-35938: fix a possible privilege escalation using a symlink to a security-critical file - CVE-2021-35939: fix a possible privilege escalation using a symlink as a destination path Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-35937: fix a possible privilege escalation through a symlink check race condition - CVE-2021-35938: fix a possible privilege escalation using a symlink to a security-critical file - CVE-2021-35939: fix a possible privilege escalation using a symlink as a destination path

0 tuxcare-almalinux9.2-esu python3-rpm-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 2da6e71e68a0eccd8f3492772673d500e1d446ed rpm-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm c33389cef1f947528b07c3d2abc59bebc5012ce3 rpm-apidocs-4.16.1.3-22.el9.tuxcare.els1.noarch.rpm 2fde0addffb58066224a21bba4fcc38bc844c5ba rpm-build-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 497ac389f265a81ec5a938642c0b854ecdddfbef rpm-build-libs-4.16.1.3-22.el9.tuxcare.els1.i686.rpm 673b347408f9cb1ea59c86627e67775e59d77936 rpm-build-libs-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm e1614b52cd14c2529bde1d7d2cf32ff110ec7339 rpm-cron-4.16.1.3-22.el9.tuxcare.els1.noarch.rpm 45e9cbe5a7644107085fe5fcb50e9cd516c97a57 rpm-devel-4.16.1.3-22.el9.tuxcare.els1.i686.rpm 69f72a9a811c21dcdf7ecbb609f8c3da4b9c335c rpm-devel-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 5b0678ad28cfb8fc4822d076c1079aa05968b777 rpm-libs-4.16.1.3-22.el9.tuxcare.els1.i686.rpm eee0e2881b3a2e24bcf0abae5a9af28b22087ce6 rpm-libs-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm c6d7dfd6ca75168a1696e74715e4e64fe2cbe703 rpm-plugin-audit-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm c583a571f809641fe6b5f87d98ed9168d957b620 rpm-plugin-fapolicyd-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 87c9376515af9f83febea26625f5d522ad52b135 rpm-plugin-ima-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 94f710b30ea5ac1d70cbdb3215e7f5f4e358cc16 rpm-plugin-prioreset-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm c765b7018916702692218fa0132d0cadd7a5e1a0 rpm-plugin-selinux-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 35c42f1ffc63602b6cda1f1cd1c1d9c07d421518 rpm-plugin-syslog-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 59f81269a2885991ef6121187d051a5477c70a99 rpm-plugin-systemd-inhibit-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 5081cfa51cc828a8eeff6af935611717e2f5b6c0 rpm-sign-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 30039f6b81ef832e811a8913b3f342c43314d02a rpm-sign-libs-4.16.1.3-22.el9.tuxcare.els1.i686.rpm 88be241d6aaaaa6630c46883e9b048c428af737d rpm-sign-libs-4.16.1.3-22.el9.tuxcare.els1.x86_64.rpm 5411201af49a173547eef83581f54c68ed42988c CLSA-2024:1708638566 TuxCare License Agreement 0 - CVE-2023-48795: implement "strict key exchange" in ssh and sshd Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-48795: implement "strict key exchange" in ssh and sshd

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els4.x86_64.rpm acd375ceb7b6294878b47bf25896825f5a5775a8 openssh-askpass-8.7p1-30.el9_2.tuxcare.els4.x86_64.rpm 1639a4cf052c606ba69ec7b5d08b3db421f66834 openssh-clients-8.7p1-30.el9_2.tuxcare.els4.x86_64.rpm 27076c1d9b9d6dff178aefa8821a6277bb8e30de openssh-keycat-8.7p1-30.el9_2.tuxcare.els4.x86_64.rpm 1d2e989df1c037ebf83e7f93dcd8287da1a51f16 openssh-server-8.7p1-30.el9_2.tuxcare.els4.x86_64.rpm 74725b3d4c2191925736151dced9a840b3e5c81c openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els4.x86_64.rpm 3c748b15e8c81ff5937e40d1ed77aaef446de88a pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els4.x86_64.rpm 59e19b2835f0e05298b5d2fe06d9109199822b60 CLSA-2024:1709547568 TuxCare License Agreement 0 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els1.x86_64.rpm 324d1807a71422f119732ca6af8a5809715cccf6 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els1.x86_64.rpm bdd78447f3b0a5e6d2ef4856b7c4e37dccbcf288 bind-devel-9.16.23-11.el9_2.2.tuxcare.els1.i686.rpm c31064e96ab70b2097f6f62445566bde7516515b bind-devel-9.16.23-11.el9_2.2.tuxcare.els1.x86_64.rpm 19d2704cc8adfa234e4e95cd3cc5d9adecb8f15a bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els1.noarch.rpm a360873d23df98544393047c78d0bc4d927b8a39 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els1.x86_64.rpm 45e6f7f987781a9559619e466eb3cf52dd6792aa bind-doc-9.16.23-11.el9_2.2.tuxcare.els1.noarch.rpm c887be9d692fe8fff9a9b6c907d10f809fa89a7d bind-libs-9.16.23-11.el9_2.2.tuxcare.els1.i686.rpm 98718caba1f4198ba535984b7e929438d448caf7 bind-libs-9.16.23-11.el9_2.2.tuxcare.els1.x86_64.rpm 62dea558a793179a75e4ecf6f3ec3bc470c1e791 bind-license-9.16.23-11.el9_2.2.tuxcare.els1.noarch.rpm a536722981c3f2d260f9a282f915df85fc5f9bdd bind-utils-9.16.23-11.el9_2.2.tuxcare.els1.x86_64.rpm 6a310e5a9ce345362b81fa721d0a54c144e877ae python3-bind-9.16.23-11.el9_2.2.tuxcare.els1.noarch.rpm 31e219cba77405f2659c71949222fa4c4974d40c CLSA-2024:1709547699 TuxCare License Agreement 0 - CVE-2023-6004: fix the possibility of injections through a hostname parameter in the ProxyCommand/ProxyJump features - CVE-2023-6918: fix the issue when unchecked return values for digests may cause DoS Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6004: fix the possibility of injections through a hostname parameter in the ProxyCommand/ProxyJump features - CVE-2023-6918: fix the issue when unchecked return values for digests may cause DoS

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els1.i686.rpm d2855798af0d23f0d3afbf2c395db99a318cb175 libssh-0.10.4-8.el9.tuxcare.els1.x86_64.rpm 37082e2424a730ae7e81fd868436e8e05966e24c libssh-config-0.10.4-8.el9.tuxcare.els1.noarch.rpm 2055a39f717bb1d89c34de2973f4f394fb6fd82e libssh-devel-0.10.4-8.el9.tuxcare.els1.i686.rpm 9f0e6dda269d69d2efa19d9f18fb876f77fb13ec libssh-devel-0.10.4-8.el9.tuxcare.els1.x86_64.rpm 62b19a5e56197559ef4895a3519e37f89e442cd4 CLSA-2024:1709547826 TuxCare License Agreement 0 - CVE-2023-42465: Prevent row hammer attacks by modifying application logic to equal a success value instead of not equaling an error value and enhancing bit flip resistance of values. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-42465: Prevent row hammer attacks by modifying application logic to equal a success value instead of not equaling an error value and enhancing bit flip resistance of values.

0 tuxcare-almalinux9.2-esu sudo-1.9.5p2-9.el9.tuxcare.els1.x86_64.rpm 44664f0084bf974087fc77a49a8d4cc1a8a12c0d sudo-devel-1.9.5p2-9.el9.tuxcare.els1.x86_64.rpm 4c36354e22e36c0feada9885340fab3bd7f78e7f sudo-python-plugin-1.9.5p2-9.el9.tuxcare.els1.x86_64.rpm 7ed071a11c9a299055e44e3182a5da59a1fe0aaa CLSA-2024:1709839522 TuxCare License Agreement 0 - Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f11, sig 0x00a10f12, sig 0x00aa0f02; - Update AMD CPU microcode for processor family 17h: sig 0x00830f10. - tuxcare.els suffix added for each package. None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update AMD CPU microcode to 2023-12-05: - Update AMD CPU microcode for processor family 19h: sig 0x00a10f11, sig 0x00a10f12, sig 0x00aa0f02; - Update AMD CPU microcode for processor family 17h: sig 0x00830f10. - tuxcare.els suffix added for each package.

0 tuxcare-almalinux9.2-esu iwl100-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm dfdc951ee66a9e1334fc14f567acd777a2aee864 iwl1000-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 138e88e59e35d5d99917e3578c40290b8196a80d iwl105-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 8ae3cda80b9bf582f94912621dfe5bba1258dcd4 iwl135-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 881aa3899093c6a468f02cdca3079c75ba4afec8 iwl2000-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 2c303551974a8d32d68384deb8f27cd04c58750c iwl2030-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 1900b047b55ca1b5b5b0a1d8607a16656a6c39aa iwl3160-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els1.noarch.rpm e79feab1ca12cba36cc90c942aa4bedc21ede70f iwl3945-firmware-15.32.2.9-135.el9_2.alma.1.tuxcare.els1.noarch.rpm e051ee89458434ea1200f7cdd6d781e7bedc44b2 iwl4965-firmware-228.61.2.24-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 61a37fe39da60f6cc831b4deb15c2763b15f04d7 iwl5000-firmware-8.83.5.1_1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm f56a9293d2ecebb320dfa15cfb64749e05e59950 iwl5150-firmware-8.24.2.2-135.el9_2.alma.1.tuxcare.els1.noarch.rpm f35bea5a1a14a02f4d2c6f44a4665e3b98de77c7 iwl6000-firmware-9.221.4.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 8217c752cc6d27c564553de521cffbffb452d7f4 iwl6000g2a-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 315b8ead88671d6f10ced77fb59f9b5f9420acb8 iwl6000g2b-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 3596d1c07323e51932a91561c159ab82f3ea9ebf iwl6050-firmware-41.28.5.1-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 5dc7f1a304b43d506e3b3b03f57843fc1795ef7a iwl7260-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els1.noarch.rpm b0d1576dabccd2847bbced9b4df31afb00a3e92b libertas-sd8686-firmware-20230310-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 802ecb0346d1268a233ca3ce1f3cf6c3a2555970 libertas-sd8787-firmware-20230310-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 644b3fcae415a7fd757c01a32da1cebf73051287 libertas-usb8388-firmware-20230310-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 7269fb455ca27e2d2ebb1253ad8dfab0e4f3c8b0 libertas-usb8388-olpc-firmware-20230310-135.el9_2.alma.1.tuxcare.els1.noarch.rpm d720160f32539c4b3b76bfc89109e8e43e99966d linux-firmware-20230310-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 0b9dcffd25b999cc77ad7b78a547c9f0872cda91 linux-firmware-whence-20230310-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 700c2859f6664ea670162744b75d2d90bd408371 liquidio-firmware-20230310-135.el9_2.alma.1.tuxcare.els1.noarch.rpm b395b89aa3691856df5d8e9d5c072ca1a72f33ca netronome-firmware-20230310-135.el9_2.alma.1.tuxcare.els1.noarch.rpm 0a1aa5529696417fb57c8b8fec78dcfd47a30bf0 CLSA-2024:1710436801 TuxCare License Agreement 0 - Fix pthread barrier initialization in isc__netmgr_create() None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix pthread barrier initialization in isc__netmgr_create()

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els2.x86_64.rpm b830b18ed8da1ebf053b6ef656ad5a8a32b3c4e8 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els2.x86_64.rpm f9a66ca96886a33e447687d3e70412b3080f7440 bind-devel-9.16.23-11.el9_2.2.tuxcare.els2.i686.rpm 52914fa338d64da9f0f7eed33939b47aa9c0b601 bind-devel-9.16.23-11.el9_2.2.tuxcare.els2.x86_64.rpm af84b1f6a09750aeafbb512ee30b126391a9051e bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els2.noarch.rpm e4c2a0366882eeccf7fd7c1e82a0857c99520419 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els2.x86_64.rpm 9950abf882a9f07db9d643f5bd6dd23525d89d8d bind-doc-9.16.23-11.el9_2.2.tuxcare.els2.noarch.rpm c637d5c58d860d623b6f07beebe69ae399c6357e bind-libs-9.16.23-11.el9_2.2.tuxcare.els2.i686.rpm 0b96227bae8770649ac183189c287c768b7c00d6 bind-libs-9.16.23-11.el9_2.2.tuxcare.els2.x86_64.rpm 97b7b952d600e487edd363d800a8f3b08724479c bind-license-9.16.23-11.el9_2.2.tuxcare.els2.noarch.rpm 7dd0959689883615cad1a1cd50e1754ad9efbe8f bind-utils-9.16.23-11.el9_2.2.tuxcare.els2.x86_64.rpm f0194dcc01106ef2c8eec2c49994fb8a036f97e9 python3-bind-9.16.23-11.el9_2.2.tuxcare.els2.noarch.rpm 27ffaa27094a4321d7c2e4e73d9742b82c30e2d1 CLSA-2024:1711475067 TuxCare License Agreement 0 - CVE-2023-1667: fix possible NULL-pointer dereference during re-keying with algorithm guessing - CVE-2023-48795: fix the prefix truncation attack on Binary Packet Protocol Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-1667: fix possible NULL-pointer dereference during re-keying with algorithm guessing - CVE-2023-48795: fix the prefix truncation attack on Binary Packet Protocol

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els2.i686.rpm 1aef6e0f2184876b20b35018cd1372e4e2dde09b libssh-0.10.4-8.el9.tuxcare.els2.x86_64.rpm c22c066195214dbffbda227b57d88083f8a2e80a libssh-config-0.10.4-8.el9.tuxcare.els2.noarch.rpm 446858f43daa6429a6b9bdf8104611f712dc46bc libssh-devel-0.10.4-8.el9.tuxcare.els2.i686.rpm 94d57a99a2a21923dd31e3b98d7f3b91cb88987b libssh-devel-0.10.4-8.el9.tuxcare.els2.x86_64.rpm b2aeb561f111611df426505affd909d4b428e590 CLSA-2024:1711476502 TuxCare License Agreement 0 - CVE-2023-28486: Escape control characters in log messages - CVE-2023-28487: Escape control characters in sudoreplay output Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-28486: Escape control characters in log messages - CVE-2023-28487: Escape control characters in sudoreplay output

0 tuxcare-almalinux9.2-esu sudo-1.9.5p2-9.el9.tuxcare.els2.x86_64.rpm 29029eabcdfe8045b9be63f13fad252015f6e1c5 sudo-devel-1.9.5p2-9.el9.tuxcare.els2.x86_64.rpm 8f1e889e640ebc37578fe053aff9f0cd0989ac10 sudo-python-plugin-1.9.5p2-9.el9.tuxcare.els2.x86_64.rpm b60717b6c9196ca51847c990565168dca89dc477 CLSA-2024:1711561513 TuxCare License Agreement 0 - Upgrade to tzdata-2024a - Kazakhstan unifies on UTC+5 beginning 2024-03-01. - Palestine springs forward a week later after Ramadan. - localtime no longer mishandles Ciudad Juárez in 2422. - zic no longer pretends to support indefinite-past DST. - Ittoqqortoormiit, Greenland changes time zones on 2024-03-31. - Vostok, Antarctica changed time zones on 2023-12-18. - Casey, Antarctica changed time zones five times since 2020. - Code and data fixes for Palestine timestamps starting in 2072. - A new data file zonenow.tab for timestamps starting now. None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to tzdata-2024a - Kazakhstan unifies on UTC+5 beginning 2024-03-01. - Palestine springs forward a week later after Ramadan. - localtime no longer mishandles Ciudad Juárez in 2422. - zic no longer pretends to support indefinite-past DST. - Ittoqqortoormiit, Greenland changes time zones on 2024-03-31. - Vostok, Antarctica changed time zones on 2023-12-18. - Casey, Antarctica changed time zones five times since 2020. - Code and data fixes for Palestine timestamps starting in 2072. - A new data file zonenow.tab for timestamps starting now.

0 tuxcare-almalinux9.2-esu tzdata-2024a-1.el9.tuxcare.els1.noarch.rpm f18904b675d63d36a2b72fb38feeb000982ef0ee tzdata-java-2024a-1.el9.tuxcare.els1.noarch.rpm ca3628bca1086ddb5ef83b6dd20e1bd93c4ccc42 CLSA-2024:1711561903 TuxCare License Agreement 0 - SELinux: label /dev/userfaultfd with userfaultfd_t to satisfy the DISA STIG security requirements None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- SELinux: label /dev/userfaultfd with userfaultfd_t to satisfy the DISA STIG security requirements

0 tuxcare-almalinux9.2-esu selinux-policy-38.1.11-2.el9_2.4.tuxcare.els1.noarch.rpm 01131c04fc4be5eaa0704b69c3d19fb0f1418b53 selinux-policy-devel-38.1.11-2.el9_2.4.tuxcare.els1.noarch.rpm bce6c791b762496ecd1182f93903792b2e184670 selinux-policy-doc-38.1.11-2.el9_2.4.tuxcare.els1.noarch.rpm 69b3f09b4eb3b01289632b2c7533232e1b57ae7e selinux-policy-minimum-38.1.11-2.el9_2.4.tuxcare.els1.noarch.rpm d5c09760bcc1df2d00c043eadbb828289f4a708a selinux-policy-mls-38.1.11-2.el9_2.4.tuxcare.els1.noarch.rpm b60411876c7f73fa546ffb8e757cb33fabf32067 selinux-policy-sandbox-38.1.11-2.el9_2.4.tuxcare.els1.noarch.rpm 768aa45ba25e147aaf1da0d5f6365035cdf9ceb5 selinux-policy-targeted-38.1.11-2.el9_2.4.tuxcare.els1.noarch.rpm 7213775cd58753727914b6405242d62b5d5b5e3c CLSA-2024:1711648611 TuxCare License Agreement 0 - CVE-2023-27043: reject malformed addresses in email.parseaddr() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-27043: reject malformed addresses in email.parseaddr()

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els2.noarch.rpm 3694348869336d5dbe688a08a0c75262cda900e2 python3-3.9.16-1.el9_2.2.tuxcare.els2.i686.rpm a1da2e87040c23cec0624f2d647622d893ac22f0 python3-3.9.16-1.el9_2.2.tuxcare.els2.x86_64.rpm 8f8b377f6fae94d2ca2a7545caa3ad7bd28365bd python3-debug-3.9.16-1.el9_2.2.tuxcare.els2.i686.rpm 9dbabc07cd774350795b40055b8516b8842f2c42 python3-debug-3.9.16-1.el9_2.2.tuxcare.els2.x86_64.rpm a067d8af2783516ebb227d61ecba7307137ed4ed python3-devel-3.9.16-1.el9_2.2.tuxcare.els2.i686.rpm fb4b76a13323fe0ead4f51fb57ef42da1c7cd4f2 python3-devel-3.9.16-1.el9_2.2.tuxcare.els2.x86_64.rpm 4cd785cb730fe233714fc66c1f69189e5d5e178e python3-idle-3.9.16-1.el9_2.2.tuxcare.els2.i686.rpm 01586976bae1d571609c9b879e35c1228fe9ebb1 python3-idle-3.9.16-1.el9_2.2.tuxcare.els2.x86_64.rpm 032adca611f6d6d3f0bcf71b4c20fa434227f3c3 python3-libs-3.9.16-1.el9_2.2.tuxcare.els2.i686.rpm c5ed7ae3ac953d25dfd2262722b0bb993edc2b65 python3-libs-3.9.16-1.el9_2.2.tuxcare.els2.x86_64.rpm 10dd87da7e27bd58aec3b11e622ca9bc1dad43f0 python3-test-3.9.16-1.el9_2.2.tuxcare.els2.i686.rpm 0f46e791154132f569cdd7bd0933625c208e648e python3-test-3.9.16-1.el9_2.2.tuxcare.els2.x86_64.rpm e3248f027712de1c05810c021632630c4d13e7ca python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els2.i686.rpm 53da099ee2010b7d0065934d6d4ebac04d905876 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els2.x86_64.rpm c761c7d6467d7c9e70dd54148d3fa60777946789 CLSA-2024:1712263970 TuxCare License Agreement 0 - bpf: Fix re-attachment branch in bpf_tracing_prog_attach {CVE-2024-26591} - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - smb: client: fix OOB in receive_encrypted_standard() {CVE-2024-0565} - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier {CVE-2023-52449} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - ida: Fix crash in ida_free when the bitmap is empty {CVE-2023-6915} - nvmet: nul-terminate the NQNs passed in the connect command {CVE-2023-6121} - netfilter: nf_tables: Reject tables of unsupported family {CVE-2023-6040} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work {CVE-2023-1989} - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() {CVE-2023-1652} - x86/bugs: Flush IBP in ib_prctl_set() {CVE-2023-0045} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896} - x86: Clear .brk area at early boot {CVE-2022-36123} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - ipv6: rpl: Fix Route of Death. {CVE-2023-2156} - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-2156} - net: rpl: fix rpl header size calculation {CVE-2023-2156} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - ovl: fix use after free in struct ovl_aio_req {CVE-2023-1252} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - netfilter: nf_tables: reject QUEUE/DROP verdict parameters {CVE-2024-1086} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() {CVE-2023-6931} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-51043} - nvmet-tcp: Fix the H2C expected PDU len calculation {CVE-2023-6356} - nvmet-tcp: remove boilerplate code {CVE-2023-6356} - nvmet-tcp: fix a crash in nvmet_req_complete() {CVE-2023-6356} - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length {CVE-2023-6356} - net: tls, update curr on splice as well {CVE-2024-0646} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix potential OOB in cifs_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - RDMA/core: Update CMA destination address on rdma_resolve_addr {CVE-2023-2176} - RDMA/core: Refactor rdma_bind_addr {CVE-2023-2176} - nfp: fix use-after-free in area_cache_get() {CVE-2022-3545} - netfilter: nf_tables: skip bound chain on rule flush {CVE-2023-3777} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178} - net: tun: fix bugs for oversize packet when napi frags enabled {CVE-2023-3812} - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c {CVE-2023-42753} - bpf: Fix incorrect verifier pruning due to missing register precision taints {CVE-2023-2163} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4206} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4207} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4208} - net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609} Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- bpf: Fix re-attachment branch in bpf_tracing_prog_attach {CVE-2024-26591} - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - smb: client: fix OOB in receive_encrypted_standard() {CVE-2024-0565} - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier {CVE-2023-52449} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - ida: Fix crash in ida_free when the bitmap is empty {CVE-2023-6915} - nvmet: nul-terminate the NQNs passed in the connect command {CVE-2023-6121} - netfilter: nf_tables: Reject tables of unsupported family {CVE-2023-6040} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work {CVE-2023-1989} - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() {CVE-2023-1652} - x86/bugs: Flush IBP in ib_prctl_set() {CVE-2023-0045} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896} - x86: Clear .brk area at early boot {CVE-2022-36123} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - ipv6: rpl: Fix Route of Death. {CVE-2023-2156} - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-2156} - net: rpl: fix rpl header size calculation {CVE-2023-2156} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - ovl: fix use after free in struct ovl_aio_req {CVE-2023-1252} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - netfilter: nf_tables: reject QUEUE/DROP verdict parameters {CVE-2024-1086} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() {CVE-2023-6931} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-51043} - nvmet-tcp: Fix the H2C expected PDU len calculation {CVE-2023-6356} - nvmet-tcp: remove boilerplate code {CVE-2023-6356} - nvmet-tcp: fix a crash in nvmet_req_complete() {CVE-2023-6356} - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length {CVE-2023-6356} - net: tls, update curr on splice as well {CVE-2024-0646} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix potential OOB in cifs_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - RDMA/core: Update CMA destination address on rdma_resolve_addr {CVE-2023-2176} - RDMA/core: Refactor rdma_bind_addr {CVE-2023-2176} - nfp: fix use-after-free in area_cache_get() {CVE-2022-3545} - netfilter: nf_tables: skip bound chain on rule flush {CVE-2023-3777} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178} - net: tun: fix bugs for oversize packet when napi frags enabled {CVE-2023-3812} - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c {CVE-2023-42753} - bpf: Fix incorrect verifier pruning due to missing register precision taints {CVE-2023-2163} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4206} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4207} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4208} - net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 23e4d0d0b4e436f45e51e428d09d0c8fa9da3e65 kernel-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm b4f80a99627fe74a56d10c538b4e5436cee65c47 kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els2.noarch.rpm d373e18ed631f21b15f8254f7f66d3c2814aa720 kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 05484b11cfdb1964a980f508df17ecef051ea8d6 kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm feb96991bd501c4e23e4b0ffd9d62b1a0b3f3a77 kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 3809ad5dfbb4328a3aca74a54b2060a907e537ea kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm fd9d3d802cd9dbaf7917e4974ba05b68f5634d63 kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 78ccd46cd1cea67cb6a0d6978c265c2a6e20ce83 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 94ba293abe9f33eba88e0fb4b789e5f9276a39ad kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm c353dce64621d05e874fb31605715ff10192bdc3 kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 1e48bbdd4c8319cff5210dd93c9ec71ec06bf4a8 kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 82edb4ac6ec1dce4ccd1a90f005cf47c87514c74 kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 938d2ee2fec1b8aea3fa1c0ee77622c21f79befb kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm be33a54ea53dde914589eb441a0386a221af235b kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 7793f3f0e6837430ed3cb9005bc35d6117ffa722 kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 400b6dd47bcd2d5f7f54711293f01481ec6f77b6 kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 14a1bb4904ff07c4207963017ae9358d11fa3c94 kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els2.noarch.rpm 5858feba19277fa5b70ea9b7d50c226303252836 kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 9a3f5996e0d13f2dd01e1a267ad8766b13e20c08 kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 73db7042ae1561a51a8a90ddd684ba11cbfa9276 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm c5e2f5332469bb1a508d1efd32bdfe5d8bcd7e9d kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm df5853ca914b89ee3b09f4a826323e1d669a66c1 kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm d614c269054154d79c87472fb53090663b33c8b2 kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 8bc5e6abbbf3f70527d07dae033dd85f9df20f96 kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm b833eb3f6945d793bc21686d13053008ef291dfd kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm cdfd665ad074e064942b290d8846eec6adb5e2f9 kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm f1a4363ec584256b71f6e61c90db2566b6c9207c kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 32006cce633427eb7072d12c801e31cae836876b kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm bf68ad689472de690255f5adbb08acf1f1187856 kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm c9b4916637c2306dbf400f5dbfb85d87002e6ffd perf-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 27008e4ac076840f7976f6bdc43e797dd81ebc0b python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 6468fb03c63613b688c24c93658ee5c317ddf1a0 rtla-5.14.0-284.30.1.el9_2.tuxcare.els2.x86_64.rpm 5cf0f2aaafc194ee47f3f2d63dd3ea14793b3e20 CLSA-2024:1712672068 TuxCare License Agreement 0 - CVE-2023-46218: lowercase the domain names before PSL checks - Add verify cookie PSL mixed case test Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-46218: lowercase the domain names before PSL checks - Add verify cookie PSL mixed case test

0 tuxcare-almalinux9.2-esu curl-7.76.1-23.el9_2.4.tuxcare.els1.x86_64.rpm 7e0f1c6a96181972c2f729ebe13b6f28a551caed curl-minimal-7.76.1-23.el9_2.4.tuxcare.els1.x86_64.rpm 8f3c8185b07643aab859132e8db71bd0ae62097b libcurl-7.76.1-23.el9_2.4.tuxcare.els1.i686.rpm 5dbdd6be3b9d0768049939e9500960df6dc04263 libcurl-7.76.1-23.el9_2.4.tuxcare.els1.x86_64.rpm c7ea81b880c7a203afeedd9650c9f065ab49b804 libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els1.i686.rpm 5986fe6229d0925ab8fd3eb9cc3575c80c88f70a libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els1.x86_64.rpm 96e2ec9f9ca483d16c64ff90f990f33dd83a8399 libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els1.i686.rpm 8079145f95ed816f6df339a94d4c5e902aa078c7 libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els1.x86_64.rpm 5fad03b6c6c8f64950cdf31271a045750ac469df CLSA-2024:1712672178 TuxCare License Agreement 0 - CVE-2024-2398: http2: push headers better cleanup Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2398: http2: push headers better cleanup

0 tuxcare-almalinux9.2-esu curl-7.76.1-23.el9_2.4.tuxcare.els2.x86_64.rpm f797186c155dd141738cf14bd3cc6e9925abde06 curl-minimal-7.76.1-23.el9_2.4.tuxcare.els2.x86_64.rpm 9fe291a749d80c68929d05e7d6575ebbac9be09f libcurl-7.76.1-23.el9_2.4.tuxcare.els2.i686.rpm 1e11fede82dc6a19bff82df307bc7b46900de582 libcurl-7.76.1-23.el9_2.4.tuxcare.els2.x86_64.rpm cfea1abac9e1c7109bfb187b092f3c66b8e54a3a libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els2.i686.rpm a8f0fe409b3327558b077ae1dfbcc4fc00aaa1d9 libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els2.x86_64.rpm 73aeb5200975cea89c0f307419d639f7d7144b99 libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els2.i686.rpm e6459296a3ec148387f977e4550d962a455a3acd libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els2.x86_64.rpm 9a39ab04ec0a9618c30b7f88fe67e1639dad6242 CLSA-2024:1712672279 TuxCare License Agreement 0 - Fix CVE-2023-4001: add --root-dev-only flag to force only search root dev (the grub2 configuration file /boot/efi/EFI/almalinux/grub.cfg should be removed manually BEFORE grub2 updating) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2023-4001: add --root-dev-only flag to force only search root dev (the grub2 configuration file /boot/efi/EFI/almalinux/grub.cfg should be removed manually BEFORE grub2 updating)

0 tuxcare-almalinux9.2-esu grub2-common-2.06-61.el9_2.1.alma.tuxcare.els2.noarch.rpm 3e56723d021f44cba24a0645163758ddcc2f8861 grub2-efi-aa64-modules-2.06-61.el9_2.1.alma.tuxcare.els2.noarch.rpm f9dd63777542e0d3ecc172f6743ec36b7c6236f7 grub2-efi-x64-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm 8fb441ca8b468f5c1f17132c6fb86293ca6800ff grub2-efi-x64-cdboot-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm 1a877a67dea57d4a4d49d5fdcfa367bd5f8e29f0 grub2-efi-x64-modules-2.06-61.el9_2.1.alma.tuxcare.els2.noarch.rpm dc59df48e3da73c6a81c70d64894d48678f1276f grub2-emu-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm d9798676e77880afaf23bd147f49088ef8a8a2f8 grub2-emu-modules-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm 1b7495e0431c49d551b0a51ddce56d07385916ab grub2-pc-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm 233a2bfabaf0063897155769e02888712bfe9b5c grub2-pc-modules-2.06-61.el9_2.1.alma.tuxcare.els2.noarch.rpm 2e10516b5295b41d8edff0acbb70d1f2607cffed grub2-tools-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm 866c43c821d0002859c33608594e5bf3a1d59f19 grub2-tools-efi-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm 39e1fbe6870420ce97d6e19563c86e4899b38f63 grub2-tools-extra-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm 44d958a2af25e6c2559bf1317370089a53e7335b grub2-tools-minimal-2.06-61.el9_2.1.alma.tuxcare.els2.x86_64.rpm d22c7a64ef2c4aa730eb928a70c8656372105abc CLSA-2024:1713864372 TuxCare License Agreement 0 - Improve Xen detection so we don't set GRUB_ENABLE_BLSCFG=false for HVM domU guests. None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Improve Xen detection so we don't set GRUB_ENABLE_BLSCFG=false for HVM domU guests.

0 tuxcare-almalinux9.2-esu grub2-common-2.06-61.el9_2.1.alma.tuxcare.els3.noarch.rpm d0fa1b678d1130d3431dc19fe60f2aab5a7b5045 grub2-efi-aa64-modules-2.06-61.el9_2.1.alma.tuxcare.els3.noarch.rpm 23c1c1e00ff3f0f9d216188110ef937cbd781922 grub2-efi-x64-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm 6c0d858673f26e6d5d5d788b0f54992b7058556e grub2-efi-x64-cdboot-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm c421b6c293120ef18c80c73acb3d2e65aead4e64 grub2-efi-x64-modules-2.06-61.el9_2.1.alma.tuxcare.els3.noarch.rpm e8e025fdb34efbe58909e402f05d94839cdbc134 grub2-emu-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm 94dd9ecc1a01ca46b558bc675539afe908650941 grub2-emu-modules-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm 9180eaee552e0db18a3bb47f4ed10a45f0ba8937 grub2-pc-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm 67ffa4836bf2d296ab4fc2a3af4f215b33aaadee grub2-pc-modules-2.06-61.el9_2.1.alma.tuxcare.els3.noarch.rpm 47f079574f5c03450f2bf0357adb014d89c8ef8f grub2-tools-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm 1a666fc707eacb51efe4865cf64ad720561957f7 grub2-tools-efi-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm 594b39bb9a7a0efda565542c744fb187d81a4754 grub2-tools-extra-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm 976d9fa7a7e4d884fd3ed769c3e5af3024d88d2c grub2-tools-minimal-2.06-61.el9_2.1.alma.tuxcare.els3.x86_64.rpm b89104bb1b73f2c224e77900c6b2b2f11e27e2ae CLSA-2024:1713955813 TuxCare License Agreement 0 - Fix broken dependencies None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix broken dependencies

0 tuxcare-almalinux9.2-esu nspr-4.35.0-3.el9_2.tuxcare.els2.i686.rpm d23bb6b3a7378575c12f017653be7d43c7e6643a nspr-4.35.0-3.el9_2.tuxcare.els2.x86_64.rpm 4fc753e11be8280cf267daf54e233e0fb402c01f nspr-devel-4.35.0-3.el9_2.tuxcare.els2.i686.rpm 2fc9089dfedeb22a34838baa4dd77d09ffbf391c nspr-devel-4.35.0-3.el9_2.tuxcare.els2.x86_64.rpm aa9052bb5079f8966166de493f29f4e6f6496d6a nss-3.90.0-3.el9_2.tuxcare.els2.i686.rpm a6795fa1b38202de8888eb5fb435f0ab44a79f9e nss-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm 8080a7967bb5039f88aa22f5003d0c0f6e5b0c0e nss-devel-3.90.0-3.el9_2.tuxcare.els2.i686.rpm 9e5c0924bdde16d3b00c9a6d058c10423484e1cd nss-devel-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm e99016a65613919c609dc4be5cba9b14a74250f7 nss-pkcs11-devel-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm 81fac3b7440bff367b1b26efbb04cabb1fb2ba8e nss-softokn-3.90.0-3.el9_2.tuxcare.els2.i686.rpm 912d8dbae8a6af83400986bb1fdfe3e41cdcde97 nss-softokn-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm 22e5c584eb4b90b5a0104e0583410ce18544e114 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els2.i686.rpm 942d1cce9a45e2cca7ed4b62e308bd649692f3d5 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm 69061feefedb21e45a20aad30d9378fb90ef0690 nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els2.i686.rpm e3e4e747b123d95c9532f509ba3e45518608b414 nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm 27caf4751d85f61d4a90da05ec6e9b4b10454c4b nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els2.i686.rpm dece663e2d46882638eccf5741741f93e7d3ad93 nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm cf610c5f771bc645ce2ba05ec284b4cf7d796fc2 nss-sysinit-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm 773f41b03e7549275180e2060073678186659b3a nss-tools-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm f743f22f8304796f8cf76040bf6296e171dc6fcd nss-util-3.90.0-3.el9_2.tuxcare.els2.i686.rpm 2b5fb3d92c00c51420c2449e4200d6a4a0b5e9b6 nss-util-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm 885b08b223a9a12ace74dbf7299de532f87982da nss-util-devel-3.90.0-3.el9_2.tuxcare.els2.i686.rpm fab4bc878b4f7acbff75870c5d68cb2abc1fa291 nss-util-devel-3.90.0-3.el9_2.tuxcare.els2.x86_64.rpm b6bb299eb4a8b5d160cae9507be78ab0a374bd87 CLSA-2024:1714065693 TuxCare License Agreement 0 - CVE-2023-52425: fix reparsings for large token to prevent DoS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-52425: fix reparsings for large token to prevent DoS

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els1.i686.rpm 9927049d3257ab6b061ea3e4a6113167aac9f930 expat-2.5.0-1.el9.tuxcare.els1.x86_64.rpm e0ae4c9d4c35ed67bd7665a54ffa17d5c7bd102b expat-devel-2.5.0-1.el9.tuxcare.els1.i686.rpm 46c2e090b4058f8ba95a0eff6956791add389888 expat-devel-2.5.0-1.el9.tuxcare.els1.x86_64.rpm 4fdc39ce50e2a7c50467ee94204839ce21e8da62 expat-static-2.5.0-1.el9.tuxcare.els1.x86_64.rpm c5ba360ea2ef42f8a2beb8bf00c1846f08d30453 CLSA-2024:1714463262 TuxCare License Agreement 0 - Fix a broken patch None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix a broken patch

0 tuxcare-almalinux9.2-esu nspr-4.35.0-3.el9_2.tuxcare.els3.i686.rpm ac97374f7a0eaf59a3064feed97d18d9cac016a2 nspr-4.35.0-3.el9_2.tuxcare.els3.x86_64.rpm 1943df816629cbe3d41c5a8ad4e41909de3b8c00 nspr-devel-4.35.0-3.el9_2.tuxcare.els3.i686.rpm 3fb936570abb5524b3d15180a979a8c070bc0c55 nspr-devel-4.35.0-3.el9_2.tuxcare.els3.x86_64.rpm 85b1410968dc79dfb70491374f17aa58c7c89a8e nss-3.90.0-3.el9_2.tuxcare.els3.i686.rpm ff0fde687b747f0a953d43c65cee22b093758979 nss-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm 6bbef28fca108c6f23634ff218d4eb01f6dd35b5 nss-devel-3.90.0-3.el9_2.tuxcare.els3.i686.rpm df739c8eb2b6032a701153e465eeb9228bd48b9c nss-devel-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm e0af559cdd7bf76b63bd6a8dacf50c73aaa34a8b nss-pkcs11-devel-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm 937b0d04e19966e37bd02e7231957fdfdc7d0fb8 nss-softokn-3.90.0-3.el9_2.tuxcare.els3.i686.rpm 740334732069e5627d17689d00e7cb8762989a1a nss-softokn-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm c7b0625886cdce2e5a7c1be763de99a2389a31e8 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els3.i686.rpm dc3471455ad33e875038e2e2e66d49818804c388 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm 8ac7b6f60718ec7b14fdd955c1fee758ab7f4f5a nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els3.i686.rpm 4b508d2c639486b8efc82a7233fdf725a04ac668 nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm 0b548a53a37338986149bd8c00b9f3bb7c4be78f nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els3.i686.rpm 1b9a9931f3fd762cf9661ec18de73118e698c43c nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm 27fd108300d7e045828e908b1cc1976aeca10fe5 nss-sysinit-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm b28476ce4f3fbd86609229fa4e27546f739a4a0c nss-tools-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm 7092aa590a0b6f3833e76fea9e3cd53d6c8feedc nss-util-3.90.0-3.el9_2.tuxcare.els3.i686.rpm 3f6b8ebb7f895199666e5d93f259c1a680a0da67 nss-util-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm 04eb029a7c6978cacf83ed545ba0ff46e6920811 nss-util-devel-3.90.0-3.el9_2.tuxcare.els3.i686.rpm d5071aea2ce5b527b56e8ee2ca54731cf59aae17 nss-util-devel-3.90.0-3.el9_2.tuxcare.els3.x86_64.rpm 7a9d33e30acd5f32553964f162d9943393cc6919 CLSA-2024:1715000325 TuxCare License Agreement 0 - IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests {CVE-2023-52474} - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - RDMA/irdma: Prevent zero-length STAG registration {CVE-2023-25775} - block: add check that partition length needs to be aligned with block size {CVE-2023-52458} - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS {CVE-2024-26589} - bpf: fix check for attempt to corrupt spilled pointer {CVE-2023-52462} - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache {CVE-2024-26598} - ext4: regenerate buddy after block freeing failed if under fc replay {CVE-2024-26601} - ext4: allow ext4_get_group_info() to fail {CVE-2024-26601} - mlxsw: spectrum_acl_tcam: Fix stack corruption {CVE-2024-26586} - EDAC/thunderx: Fix possible out-of-bounds string access {CVE-2023-52464} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() {CVE-2023-52470} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} - igb: set max size RX buffer when store bad packet is enabled {CVE-2023-45871} - netfilter: nft_set_rbtree: skip end interval element from gc {CVE-2024-26581} - netfilter: nf_tables: check if catch-all set element is active in next generation {CVE-2024-1085} - netfilter: nf_tables: skip set commit for deleted/destroyed sets {CVE-2024-0193} - netfilter: nft_set_pipapo: skip inactive elements during set walk {CVE-2023-6817} - netfilter: nf_tables: split async and sync catchall in two functions {CVE-2023-4244} - netfilter: nf_tables: remove catchall element in GC sync path {CVE-2023-4244} - netfilter: nf_tables: expose opaque set element as struct nft_elem_priv {CVE-2023-4244} - netfilter: nf_tables: set backend .flush always succeeds {CVE-2023-4244} - netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush {CVE-2023-4244} - netfilter: nf_tables: work around newrule after chain binding {CVE-2023-4244} - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure {CVE-2023-4244} - netfilter: nf_tables: fix memleak when more than 255 elements expired {CVE-2023-4244} - netfilter: nf_tables: disable toggling dormant table state more than once {CVE-2023-4244} - netfilter: nf_tables: disallow element removal on anonymous sets {CVE-2023-4244} - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration {CVE-2023-4244} - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails {CVE-2023-4244} - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention {CVE-2023-4244} - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC {CVE-2023-4244} - netfilter: nf_tables: disallow rule removal from chain binding {CVE-2023-4244} - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction {CVE-2023-4244} - netfilter: nf_tables: defer gc run if previous batch is still pending {CVE-2023-4244} - netfilter: nf_tables: fix out of memory error handling {CVE-2023-4244} - netfilter: nf_tables: use correct lock to protect gc_list {CVE-2023-4244} - netfilter: nf_tables: GC transaction race with abort path {CVE-2023-4244} - netfilter: nf_tables: flush pending destroy work before netlink notifier {CVE-2023-4244} - netfilter: nft_dynset: disallow object maps {CVE-2023-4244} - netfilter: nf_tables: GC transaction race with netns dismantle {CVE-2023-4244} - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path {CVE-2023-4244} - netfilter: nf_tables: don't fail inserts if duplicate has expired {CVE-2023-4244} - netfilter: nf_tables: deactivate catchall elements in next generation {CVE-2023-4244} - netfilter: nf_tables: fix kdoc warnings after gc rework {CVE-2023-4244} - netfilter: nf_tables: fix false-positive lockdep splat {CVE-2023-4244} - netfilter: nf_tables: remove busy mark and gc batch API {CVE-2023-4244} - netfilter: nft_set_hash: mark set element as dead when deleting from packet path {CVE-2023-4244} - netfilter: nf_tables: adapt set backend to use GC transaction API {CVE-2023-4244} - netfilter: nft_set_rbtree: fix overlap expiration walk {CVE-2023-4244} - netfilter: nf_tables: GC transaction API to avoid race with control plane {CVE-2023-4244} - netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-4244} - netfilter: nf_tables: skip bound chain in netns release path {CVE-2023-4244} - netfilter: nf_tables: fix spurious set element insertion failure {CVE-2023-4244} - netfilter: nf_tables: report use refcount overflow {CVE-2023-4244} - netfilter: nf_tables: fix underflow in chain reference counter {CVE-2023-4244} - netfilter: nf_tables: disallow timeout for anonymous sets {CVE-2023-4244} - netfilter: nf_tables: disallow updates of anonymous sets {CVE-2023-4244} - netfilter: nf_tables: reject unbound chain set before commit phase {CVE-2023-4244} - netfilter: nf_tables: reject unbound anonymous set before commit phase {CVE-2023-4244} - netfilter: nf_tables: disallow element updates of bound anonymous sets {CVE-2023-4244} - netfilter: nf_tables: fix underflow in object reference counter {CVE-2023-4244} - netfilter: nf_tables: drop map element references from preparation phase {CVE-2023-4244} - netfilter: nf_tables: validate variable length element extension {CVE-2023-4244} - netfilter: nft_set_pipapo: .walk does not deal with generations {CVE-2023-4244} - netfilter: nf_tables: relax set/map validation checks {CVE-2023-4244} - netfilter: nf_tables: integrate pipapo into commit protocol {CVE-2023-4244} - netfilter: nf_tables: upfront validation of data via nft_data_init() {CVE-2023-4244} - netfilter: nft_set_rbtree: fix null deref on element insertion - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR {CVE-2023-4015} - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() {CVE-2023-7192} - Documentation/hw-vuln: Fix rST warning {CVE-2022-27672} - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions {CVE-2022-27672} - KVM: x86: Mitigate the cross-thread return address predictions bug {CVE-2022-27672} - x86/speculation: Identify processors vulnerable to SMT RSB predictions {CVE-2022-27672} - uio: Fix use-after-free in uio_open {CVE-2023-52439} - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump {CVE-2023-52448} Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests {CVE-2023-52474} - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - RDMA/irdma: Prevent zero-length STAG registration {CVE-2023-25775} - block: add check that partition length needs to be aligned with block size {CVE-2023-52458} - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS {CVE-2024-26589} - bpf: fix check for attempt to corrupt spilled pointer {CVE-2023-52462} - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache {CVE-2024-26598} - ext4: regenerate buddy after block freeing failed if under fc replay {CVE-2024-26601} - ext4: allow ext4_get_group_info() to fail {CVE-2024-26601} - mlxsw: spectrum_acl_tcam: Fix stack corruption {CVE-2024-26586} - EDAC/thunderx: Fix possible out-of-bounds string access {CVE-2023-52464} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() {CVE-2023-52470} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} - igb: set max size RX buffer when store bad packet is enabled {CVE-2023-45871} - netfilter: nft_set_rbtree: skip end interval element from gc {CVE-2024-26581} - netfilter: nf_tables: check if catch-all set element is active in next generation {CVE-2024-1085} - netfilter: nf_tables: skip set commit for deleted/destroyed sets {CVE-2024-0193} - netfilter: nft_set_pipapo: skip inactive elements during set walk {CVE-2023-6817} - netfilter: nf_tables: split async and sync catchall in two functions {CVE-2023-4244} - netfilter: nf_tables: remove catchall element in GC sync path {CVE-2023-4244} - netfilter: nf_tables: expose opaque set element as struct nft_elem_priv {CVE-2023-4244} - netfilter: nf_tables: set backend .flush always succeeds {CVE-2023-4244} - netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush {CVE-2023-4244} - netfilter: nf_tables: work around newrule after chain binding {CVE-2023-4244} - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure {CVE-2023-4244} - netfilter: nf_tables: fix memleak when more than 255 elements expired {CVE-2023-4244} - netfilter: nf_tables: disable toggling dormant table state more than once {CVE-2023-4244} - netfilter: nf_tables: disallow element removal on anonymous sets {CVE-2023-4244} - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration {CVE-2023-4244} - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails {CVE-2023-4244} - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention {CVE-2023-4244} - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC {CVE-2023-4244} - netfilter: nf_tables: disallow rule removal from chain binding {CVE-2023-4244} - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction {CVE-2023-4244} - netfilter: nf_tables: defer gc run if previous batch is still pending {CVE-2023-4244} - netfilter: nf_tables: fix out of memory error handling {CVE-2023-4244} - netfilter: nf_tables: use correct lock to protect gc_list {CVE-2023-4244} - netfilter: nf_tables: GC transaction race with abort path {CVE-2023-4244} - netfilter: nf_tables: flush pending destroy work before netlink notifier {CVE-2023-4244} - netfilter: nft_dynset: disallow object maps {CVE-2023-4244} - netfilter: nf_tables: GC transaction race with netns dismantle {CVE-2023-4244} - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path {CVE-2023-4244} - netfilter: nf_tables: don't fail inserts if duplicate has expired {CVE-2023-4244} - netfilter: nf_tables: deactivate catchall elements in next generation {CVE-2023-4244} - netfilter: nf_tables: fix kdoc warnings after gc rework {CVE-2023-4244} - netfilter: nf_tables: fix false-positive lockdep splat {CVE-2023-4244} - netfilter: nf_tables: remove busy mark and gc batch API {CVE-2023-4244} - netfilter: nft_set_hash: mark set element as dead when deleting from packet path {CVE-2023-4244} - netfilter: nf_tables: adapt set backend to use GC transaction API {CVE-2023-4244} - netfilter: nft_set_rbtree: fix overlap expiration walk {CVE-2023-4244} - netfilter: nf_tables: GC transaction API to avoid race with control plane {CVE-2023-4244} - netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-4244} - netfilter: nf_tables: skip bound chain in netns release path {CVE-2023-4244} - netfilter: nf_tables: fix spurious set element insertion failure {CVE-2023-4244} - netfilter: nf_tables: report use refcount overflow {CVE-2023-4244} - netfilter: nf_tables: fix underflow in chain reference counter {CVE-2023-4244} - netfilter: nf_tables: disallow timeout for anonymous sets {CVE-2023-4244} - netfilter: nf_tables: disallow updates of anonymous sets {CVE-2023-4244} - netfilter: nf_tables: reject unbound chain set before commit phase {CVE-2023-4244} - netfilter: nf_tables: reject unbound anonymous set before commit phase {CVE-2023-4244} - netfilter: nf_tables: disallow element updates of bound anonymous sets {CVE-2023-4244} - netfilter: nf_tables: fix underflow in object reference counter {CVE-2023-4244} - netfilter: nf_tables: drop map element references from preparation phase {CVE-2023-4244} - netfilter: nf_tables: validate variable length element extension {CVE-2023-4244} - netfilter: nft_set_pipapo: .walk does not deal with generations {CVE-2023-4244} - netfilter: nf_tables: relax set/map validation checks {CVE-2023-4244} - netfilter: nf_tables: integrate pipapo into commit protocol {CVE-2023-4244} - netfilter: nf_tables: upfront validation of data via nft_data_init() {CVE-2023-4244} - netfilter: nft_set_rbtree: fix null deref on element insertion - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR {CVE-2023-4015} - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() {CVE-2023-7192} - Documentation/hw-vuln: Fix rST warning {CVE-2022-27672} - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions {CVE-2022-27672} - KVM: x86: Mitigate the cross-thread return address predictions bug {CVE-2022-27672} - x86/speculation: Identify processors vulnerable to SMT RSB predictions {CVE-2022-27672} - uio: Fix use-after-free in uio_open {CVE-2023-52439} - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump {CVE-2023-52448}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 6442adad3f5a8ae5ea2fc2de11510bc5d659f59c kernel-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 13e0cc393629b8bff94ffb95eac442b6883876ba kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els3.noarch.rpm 04f87a9b0b9f7d7601ff5632829a303184f1f279 kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 359b3ed2cf5e2463eca0fc3ed21210d73cdff35c kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 39dec9b5d52f9e8c19a70b6fa958b2d4be79f802 kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 5d735bc3f70489c47684f39316d0715e3d6ae52f kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 4141bea819737cc927ab360cc6ca0dd9c447789a kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 597368cd5815f0beace3957e69e120b15c359727 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 3fcc1d6d64792cf40553651818e8fb7f7edc26df kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 866a73c87e08c1c61a30dd8662a2720aae2d12c2 kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 83c69b4937f27be59eccde49a3f9eb16be14a158 kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 3f9a82ab793c5c63236927eef224679c08049c83 kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 2b0672c8900e1f425116e1a6207711f5a35a9ea3 kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 380d516be11caf38e7dd3e2603dcb92dde9317dc kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 52242da54d39beb385cf18ce0534f4fdbffeae11 kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm d811ca96f2c33f59503ddf70ebb21c2a26d54227 kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 5b4dda46f88fd559926b1b87f027247ce19725f3 kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els3.noarch.rpm 786871b95d417efb95c38d6eadc86a56b43569ed kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 4d883eda5d7e9ee27aa20e68a08e32d15eedeac8 kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm defb8fc7f865b0f1884cca8b5d983c7c896d8bf8 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 32a3712fad61433a0d7880bcb0e1f464d357bee3 kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm fa07a13abd1558c8b95ec295ab8d605aca0b3082 kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 191b45e4f815acf465b9428d67fb301b6ecd51ee kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm a78c5c33b3751834bab692ff2cd822775d6b95e6 kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm c0e12d1bd955081af93b1e0d2b857e32acdf7ba2 kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 90d274c4d8eb627fced2f483123b390328ae86a9 kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm b65546e96e236ac98d626d0093227ec139d5f408 kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 08aa8dda5bd137facdbe94c323ad44c459c5ea2e kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm e025e0719732d2c606a30f4a0291fbdace1981af kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 6bd62463f390d8d17bef21618181cc3f8631548c perf-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm c0e9e3be5aa852232b446265cf526fa19c75c3b6 python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 30f3ed226e0b026f74f7d972e2f725d8ed519db8 rtla-5.14.0-284.30.1.el9_2.tuxcare.els3.x86_64.rpm 694932a334553d70dd75875312bd6bfd4ebda132 CLSA-2024:1715672446 TuxCare License Agreement 0 - Fix CVE-2024-32487: filename.c: quoting mishandling. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2024-32487: filename.c: quoting mishandling.

0 tuxcare-almalinux9.2-esu less-590-2.el9_2.tuxcare.els1.x86_64.rpm 5cd2adfef82f2f4b113fb80931cddbab325e49be CLSA-2024:1716271951 TuxCare License Agreement 0 - CVE-2022-48624: shell-quote filenames when invoking LESSCLOSE. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-48624: shell-quote filenames when invoking LESSCLOSE.

0 tuxcare-almalinux9.2-esu less-590-2.el9_2.tuxcare.els2.x86_64.rpm 312e0a77d76392bf2fe9060ef7214d30ee782a0d CLSA-2024:1716915132 TuxCare License Agreement 0 - CVE-2024-27316: fix HTTP/2 DoS vulnerability caused by memory exhaustion from endless continuation frames: Incoming headers that exceed limits are buffered in nghttp2 to generate an HTTP 413 response Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-27316: fix HTTP/2 DoS vulnerability caused by memory exhaustion from endless continuation frames: Incoming headers that exceed limits are buffered in nghttp2 to generate an HTTP 413 response

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm b68b3d26a6e391929d792d29b953c4196ccec0d1 httpd-core-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm 49ab41d83edd40ad810789b3192e30a510c789c0 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm 26052df922b1058044a91d6e592374346e4d3b3b httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els2.noarch.rpm 6a38cb98020b42906ac6a1e88bdc9a7969ff4dc3 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els2.noarch.rpm d698ac6d6d6562c50e3e455a54e9448f92e87575 httpd-tools-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm 82527da84a4d7d75d12ab6f5977b245be906df95 mod_ldap-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm 3b26d15d6e2b68eb73cbfc5a415c155142946eb4 mod_lua-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm 5449234f580577906f3f68cec15ddfa7fcd9b03d mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm 727350a1927983f92c97b9240494930cdf6b0a42 mod_session-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm 82dee55fd12e6dc4ea0d6f80347873d7f7967b36 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els2.x86_64.rpm 9757d6950dd4521569dc0611bfb08cf01a43a53e CLSA-2024:1717086553 TuxCare License Agreement 0 - Update iwlwifi firmware to mitigate CVE-2022-38076 for wifi adapters: Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260 - Update automatically loaded iwlwifi firmware to mitigate CVE-2022-36351, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Wi-Fi 6E AX211, AX411 - Update iwlwifi firmware to manually mitigate CVE-2022-36351, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Wi-Fi 6 AX101, AX200, AX201, AX203, Intel Wireless-AC 9560, 9462, 9461 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update iwlwifi firmware to mitigate CVE-2022-38076 for wifi adapters: Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260 - Update automatically loaded iwlwifi firmware to mitigate CVE-2022-36351, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Wi-Fi 6E AX211, AX411 - Update iwlwifi firmware to manually mitigate CVE-2022-36351, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Wi-Fi 6 AX101, AX200, AX201, AX203, Intel Wireless-AC 9560, 9462, 9461

0 tuxcare-almalinux9.2-esu iwl100-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm d5be7cf80fa6106d5628f48b14f4f830c5c652b5 iwl1000-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 6e27b7fa1abf1f13348ddb683027aec5b6953433 iwl105-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 8f515885c08a892a035db11be36c5dfcf3ae2eb0 iwl135-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 7026f8580f86c2a9345ea498ef47f6d675aaa361 iwl2000-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm d505b9d7745668ab073005ca08bacef069115056 iwl2030-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 46df6b49fb190878ea4c22fab750eee8bf103b8a iwl3160-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 12246caf5518fc91be34ace6777f806e4d7d8506 iwl3945-firmware-15.32.2.9-135.el9_2.alma.1.tuxcare.els3.noarch.rpm e4e1e4f5824e9485da8e2e95cadf4f70ae6c7429 iwl4965-firmware-228.61.2.24-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 68483ee051f56cc9dc3c54b975ac5716f37e8cc4 iwl5000-firmware-8.83.5.1_1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm fa9e68d269bebabdfe9c19e79d6a76aa388bc05b iwl5150-firmware-8.24.2.2-135.el9_2.alma.1.tuxcare.els3.noarch.rpm e92a9259f6df1dbade09b1ac6b82dd5de850b00a iwl6000-firmware-9.221.4.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm a58ad6ec5eee36a644a80bddc21cea8065744e46 iwl6000g2a-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 4e8510ca0e324ac68d3b2b12d173def914b775c8 iwl6000g2b-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 16d8d1998370cabc7d7163ca4814a5c0df9b447e iwl6050-firmware-41.28.5.1-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 093954c4f2779907ab239ff7578856543552f435 iwl7260-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els3.noarch.rpm dcb2a880ce5551ab86416bbe763f54805fb9523b libertas-sd8686-firmware-20230310-135.el9_2.alma.1.tuxcare.els3.noarch.rpm eebed6016b13a10800170fe95360ae1f79de14bd libertas-sd8787-firmware-20230310-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 3f7bf1bb17a6855525463bdd5c38aa45bcf4afd4 libertas-usb8388-firmware-20230310-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 046fb3a5e1df947abc69f34acd48db1cc4618897 libertas-usb8388-olpc-firmware-20230310-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 6b15a9549aa51716c938b91cbf3ff42221f17c5d linux-firmware-20230310-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 8ceda143f9cdfcaefec92cccb19341de1c07ed8f linux-firmware-whence-20230310-135.el9_2.alma.1.tuxcare.els3.noarch.rpm c1d77831f31839865fcce4986f3b2eb15ed54ad6 liquidio-firmware-20230310-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 383071b1a8b4f848f5ce242c0b7b7ebae8fb4317 netronome-firmware-20230310-135.el9_2.alma.1.tuxcare.els3.noarch.rpm 898683c9d0f0431fb31a6ffe895db24a4ea13faa CLSA-2024:1717691179 TuxCare License Agreement 0 - CVE-2022-48554: fix stack-based buffer over-read in file_copystr in funcs.c Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-48554: fix stack-based buffer over-read in file_copystr in funcs.c

0 tuxcare-almalinux9.2-esu file-5.39-12.1.el9_2.tuxcare.els1.x86_64.rpm 0f3030e86569fb6af66d26049ca933b19d4cf548 file-devel-5.39-12.1.el9_2.tuxcare.els1.i686.rpm 54b8337ccfff4eda8a0d6bb2c3143b38cb91de6e file-devel-5.39-12.1.el9_2.tuxcare.els1.x86_64.rpm 80c9e57caee51a60a6d6721f0f60db6e238b545b file-libs-5.39-12.1.el9_2.tuxcare.els1.i686.rpm c20e9d4476f55eb1c98daa80953d71e448b4b3dd file-libs-5.39-12.1.el9_2.tuxcare.els1.x86_64.rpm e3ec487036813ccba0089f35d972978533e0b391 file-static-5.39-12.1.el9_2.tuxcare.els1.x86_64.rpm c5c8a94f9ced911c1ffe092d8b2cd6d27bfd79f1 python3-file-magic-5.39-12.1.el9_2.tuxcare.els1.noarch.rpm cd967518b8ce82c625d3d7aa8b0f3d4fae64ecd6 CLSA-2024:1718023873 TuxCare License Agreement 0 - CVE-2024-2961: Fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set - CVE-2024-33599: Fix buffer overflow in netgroup cache Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2961: Fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set - CVE-2024-33599: Fix buffer overflow in netgroup cache

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 47f20024dcc138b6b7b602f0851443b39e3c0678 glibc-2.34-60.el9_2.7.tuxcare.els1.i686.rpm a21774d77049cae5ccc7ed1b8c2cde4a696f002d glibc-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 158c038d96290cbf9f67708612777c8449306bb9 glibc-all-langpacks-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 48e390013904ca9993867b8c9ac127c3e1da21fd glibc-benchtests-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3d81b3d430b04f6b070db5123f4844c66c5b3e03 glibc-common-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm a04b7343f12b5d900b0178b1fd7e1514a05eb66a glibc-devel-2.34-60.el9_2.7.tuxcare.els1.i686.rpm 43012764e1390e95352c65eeb7120c44d8450197 glibc-devel-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9113cd3f8f007b14ce9fbd28b3aed473a5d08042 glibc-doc-2.34-60.el9_2.7.tuxcare.els1.noarch.rpm 6a862e401344d360c9e955fef72a7dd1b5545559 glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els1.i686.rpm 86e5931d628b01e50a3be62a7a24e1597df0c576 glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d029be00f9f031e19bc51d0efe80791ed487f5fe glibc-headers-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e90f953da286afa452d1cbb91602605bbb0269d0 glibc-langpack-aa-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm c61867aba937f9a766a6ffa777b6d866447913d6 glibc-langpack-af-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9a25c72df29e6953d541e151ffa6740d5fa3efb2 glibc-langpack-agr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm a02e2d893b789fbe1f3f7fe7a43e959133d7cb6c glibc-langpack-ak-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8a5fc08e423faa15ab5f83746cf6a6bc6aa5b77c glibc-langpack-am-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm fa76f8882ead9c1a68f40d28ec303f82957831f2 glibc-langpack-an-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ac102554d36ed0a5eaa8f842a9538439184ea720 glibc-langpack-anp-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 06ea56958e91fb4c503cc5da362c33dabc26e3f8 glibc-langpack-ar-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 791cb1dbb4fd64463bd296b93f2122fe63c98b92 glibc-langpack-as-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 954afc583cb83d8d530f26f7c77caaea0bb18822 glibc-langpack-ast-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e4bc0766133b233cd5c5b0bfb47de89efa80c9b1 glibc-langpack-ayc-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 6679d19a3dbb8e14051c0a3af5381c74f785ba83 glibc-langpack-az-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 834d8060a0d13afb0478d98bf98a1d932a10cb99 glibc-langpack-be-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 4c5e17abd28449668e2d29634ef62fd8aed9fff6 glibc-langpack-bem-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 4849a3295069069d17f48e5afffda714ac3b3851 glibc-langpack-ber-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 1f4e2e4482ef995253dc12269dec726b5634f0a3 glibc-langpack-bg-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d14c1b654956fc69908286702907a93c046d782d glibc-langpack-bhb-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9869d6d9c97b4f86a0223c703dd26eed8a390a0f glibc-langpack-bho-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm eb4d54ec40de740e49d9647289435e214feacde0 glibc-langpack-bi-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d2cb3f3dcbfb990d37fa321e7b89512b69163b4b glibc-langpack-bn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0016b07ea800ed24eb142f60c2012fdf686136bf glibc-langpack-bo-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm a347d1fa0b1a61055a9cf5b1a353f169bd912066 glibc-langpack-br-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9e2dbc8e142215c44fca74bf40f512295761b0df glibc-langpack-brx-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm fa0a37bab30a432bb77d16119b815db233f32366 glibc-langpack-bs-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 544607a6128a8f0a89a12b712ab9e775ffb1f09d glibc-langpack-byn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 1614f76fd58e0bfde0863b1e13a9aa7530385ef4 glibc-langpack-ca-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm a5c539252f59e3df19263151ee4af482c10c35a4 glibc-langpack-ce-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 304089f5c54051883dd5c09547886cb601abd336 glibc-langpack-chr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0ac33aa0f4ebe4b06f0839ef5677920da1933fce glibc-langpack-ckb-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 31422790fbaf1382398eda7722123dfe460de958 glibc-langpack-cmn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2df30ddfab471b0f2a7309e8634061612cd0fc99 glibc-langpack-crh-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2612fce32615240f84dff81460b696132a51e655 glibc-langpack-cs-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 875c64a2b7a643948ab8992b7fff3aaa7074a2f7 glibc-langpack-csb-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 60c7fc0def86a95390aa256a0716b6597bf0b261 glibc-langpack-cv-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm fd9b68bdd80f6fd770ab04ee2d2ca1aa90696c02 glibc-langpack-cy-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 7b1a2875044b658460da44cee2a1244bb6add7e0 glibc-langpack-da-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9e1e9ac2c2fc9c00fc65eebb0f463aaa94c551d7 glibc-langpack-de-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 41ce06595537f594c7ad561bb8243d06be8e57c8 glibc-langpack-doi-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2d6141dd4f9b4105ec36826d07c09d42686de52b glibc-langpack-dsb-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm bc91e89e4edaa76242c04929e18c10550a14e636 glibc-langpack-dv-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8fb07c23ee0650e8df1dc83bb92cf6a5dba73e0b glibc-langpack-dz-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 26d3f2963ac4324871945f07c8967f806f637687 glibc-langpack-el-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 6eb8d6b55a41b6340cfefb3424a138aeb1134f8b glibc-langpack-en-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 970d8f0492f03cdcbdd010704891702007745a2c glibc-langpack-eo-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 81fa48d3e57b80a52625eea46bf9730ba4688454 glibc-langpack-es-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 56d9c29b70ea83afe68cd0d255701bb92b0ddc6c glibc-langpack-et-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2ea0226b968a6d58e0b4bc9fef0a2b75246dba94 glibc-langpack-eu-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e4e607f1bac4fb266b0af3969c8b5da7f148d863 glibc-langpack-fa-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3fae3e3eb98d75fa3067e2f279484e9bc3ad0f7f glibc-langpack-ff-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm bc66e182872fdd97c59fad1e0a9efe4d2e99a641 glibc-langpack-fi-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 310f66e7891f2a28cefb275eb710b5e18a7509d1 glibc-langpack-fil-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9ea68a450fcb9b05cce32dd04f9815ceb00591a3 glibc-langpack-fo-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d2710af027ad6a3a15a6e929331c5460444e9bc3 glibc-langpack-fr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 95d79f5b87f4cb734041344e697515065469577c glibc-langpack-fur-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm c20f7e31d42985ca39a02898adc504f82566cc17 glibc-langpack-fy-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm bc0829987410da7ab18c350a0d5f0f8216c78891 glibc-langpack-ga-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 6b0f078a795caad8252d775863c02459f2ffbccc glibc-langpack-gd-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 84af8bcdabef449689d2c1d71bb2547ac1ffdc4c glibc-langpack-gez-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 97f5a85f9cf66dd3473d6377c9227de67c602d46 glibc-langpack-gl-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d1ed6576266518867beae34972603ab90158cba1 glibc-langpack-gu-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e15c322dd8f487630f482f194e13e5bed4645013 glibc-langpack-gv-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm fd72bda48f64f40a84110b642c981307cff47237 glibc-langpack-ha-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 407908628d6dd65f1e5a29c3c3a72c885fb74838 glibc-langpack-hak-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 5115d17c0689da0a48541e96790b9125f03db60f glibc-langpack-he-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm b2ce2877b2060df529efcf561d32d2860b9adf59 glibc-langpack-hi-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm dfa6d95a313242df3fb019c4aebc123bfd6cd3ad glibc-langpack-hif-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 489fddb2298ba6f60ad89fdd4d301708870786bb glibc-langpack-hne-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 7743dae91b4fc58336a311748dc8e10304f8b190 glibc-langpack-hr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 46387079dd3a3a9d6650175e56d9aab829982dbc glibc-langpack-hsb-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 50c2a36cf23ea69e11feacb2cd2b911d80fd05af glibc-langpack-ht-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8cafdfa2cca430ff8b6ecc5e37287d76f2baee86 glibc-langpack-hu-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 47eea39d645ce174154b98145386f3e62c868a89 glibc-langpack-hy-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 5e772ca788c2bed92741a0883db066a959366628 glibc-langpack-ia-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d160fddbe497b1d2d4db54b0faf3729ceb6dcabc glibc-langpack-id-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm c94ada85f88a32ea5bc083be64a685cafef509ef glibc-langpack-ig-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 73800cfb8b01444d620ddde7285dfb00109a79a7 glibc-langpack-ik-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 5061b8080ce50d7f00e1405805435ad8694805fc glibc-langpack-is-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 029f2a6f764b56bd216b36f1c28287d6931d7e17 glibc-langpack-it-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ddc3681b25459da9a93a7384c4ab34bdcad2d5cf glibc-langpack-iu-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 772f6d3674d6566ed970bc5466e72c6fea2a7b31 glibc-langpack-ja-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm bda116f3f71db92ebdfc1efed801ee1cfc6626f9 glibc-langpack-ka-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0be48006a907b9eeee538f40e1fbbbef86248384 glibc-langpack-kab-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3bc201b61131be02f2751fdacf0057e7afe340ac glibc-langpack-kk-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 03262c6c6c158685940036a72832df80b9cbbbf2 glibc-langpack-kl-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2c391c06b25f50ab5ac080dd89de83f8b9189d9d glibc-langpack-km-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 877c99d0ac12faba1c22cd0dd727dd7f3561ebb2 glibc-langpack-kn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d6340d6985fd040539a0fa77e6942716402bae7a glibc-langpack-ko-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 4dc4a4c2f6ba57c8fcd16e7972b1e85d23b568ef glibc-langpack-kok-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 38e8f42e4e8a88f7571ab6afc1752ee6122e0143 glibc-langpack-ks-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 576ececafce8e7b63c6c7fb837ec7e27d0879757 glibc-langpack-ku-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 26b82f3c61cade884ae9d704b82a6b4ac7a07086 glibc-langpack-kw-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0752778f4d8e79f21b8c0467ebf2b8ca3307a525 glibc-langpack-ky-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 622f128a3d2477adc676af9f7a9c8bbcc39c5883 glibc-langpack-lb-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm f66dd9cc95c74372b66453f4286bbb2ab75c0b0a glibc-langpack-lg-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm b0afc7429feea16ab20eac8b49b81aa39a212a79 glibc-langpack-li-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm fd4867039199e52fcbed90cd3413b51a7ebdca03 glibc-langpack-lij-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e947db8ae5c08b5d0f312632f1903c38223751e4 glibc-langpack-ln-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 6a022ce5c177cb7c5115e72e3a7ec9f2e4d32da7 glibc-langpack-lo-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 368152471ddb7c462929d77b20a8b93f3f9c5316 glibc-langpack-lt-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 849fae6767a789c85df6b45cad086565cee9930f glibc-langpack-lv-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm f4795ea3a324839834c8275cc2ae1c417866d6a8 glibc-langpack-lzh-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2a26d8dda242ad2fe02d6b82c403b481ebb9bd4f glibc-langpack-mag-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 89b0b990d6fbfff7c9abf23e6301242018a12b67 glibc-langpack-mai-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 33a3fef52bdf6a8ea3783cdd2e7395f2de4ec8fe glibc-langpack-mfe-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3e6ffbae558c3e7ef8b02b783588b71fd1219424 glibc-langpack-mg-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 1926b457a3a4073fd447a9f899b9afaaa9e3d385 glibc-langpack-mhr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm cb56747179487b8ef42180a1ad263c310425a5c8 glibc-langpack-mi-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8f9979e156b33ffc90dd1349d695e75198451bd0 glibc-langpack-miq-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 7e1c8a4b1f3291b815fce7dd1b649744a8334833 glibc-langpack-mjw-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e3b6bd6aa734fd28cc556f2315ab4bab64ac0691 glibc-langpack-mk-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3996ca654f81693d91266af145c5417db4327132 glibc-langpack-ml-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 798c0864094e782e5a247a2cc083276ebf94893b glibc-langpack-mn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 5761fc101b8dc59f0ca8b382f585a9c884fb4777 glibc-langpack-mni-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e7d11117d204157b9302408a8a8a0f200d93c6f9 glibc-langpack-mnw-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm deac3e28664093def57a4a3f1d0b51939f8f4824 glibc-langpack-mr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 5c00a1b437c7d6edd392bcfcb0c026cd66becd06 glibc-langpack-ms-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 96919e254368be235344fe6d148a2c4c8d56c087 glibc-langpack-mt-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 1c79c15fd9d74e5ab837b3e0d4f2402aa9b6699a glibc-langpack-my-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ae2a4761512d3e8c44ee4a82f0d1dc905af91846 glibc-langpack-nan-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 331f192a2f9726f3d0132569690a8d1f1dc766f7 glibc-langpack-nb-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 108168078ae83611e3cd59e8a3f0c3bd05d0bc02 glibc-langpack-nds-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 584c28d33ad7c2b3120a50338490c5a551214262 glibc-langpack-ne-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm fe0b9b6080db85ef5ac96fa70c99aac8df9a4c4a glibc-langpack-nhn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm b3c0b887aee4d96ea3868ab92b59349fcef528e1 glibc-langpack-niu-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm affcb0009e18d303a733a1f4774917adfa962f5a glibc-langpack-nl-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0abf85abb15b55e3f7add488c1dfe79e38563aee glibc-langpack-nn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3fc32307bd663f968cb5032fc7c29b3ae8ca8e80 glibc-langpack-nr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ae6586abd90ef57ba4a0472bda0ff1cf4f9733be glibc-langpack-nso-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 92ccebadce9f2a9d527073ba1260eba9f2b69188 glibc-langpack-oc-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm a2238b8d953ab1f8e0b31b18c1c5a55d2971c9d0 glibc-langpack-om-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 648a043af0cbc1372846d9f57b29fb9a51ef6869 glibc-langpack-or-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ae33bf1f2d5e97a4eb49bac45a14ab2d5a7cee55 glibc-langpack-os-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3b3d1e3e60587abfaec36597c8c0fba755bcaaf8 glibc-langpack-pa-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 20ebbc2a50de3ad32e9f88eedd37d8ec34738c03 glibc-langpack-pap-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm baf3c64f9d2ee68077d32e318aa3ed8552c9742d glibc-langpack-pl-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e6cab740c638b60e2e8336a4e2361e9dc1fe28e6 glibc-langpack-ps-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0ed508383d2bc5025e2efd9b31e322a987625b50 glibc-langpack-pt-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 149b2f573b3117c4cf38ab24d29d688efd8f21ff glibc-langpack-quz-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3b777f0a898fb82ae3ce43bab369f5bc64adc206 glibc-langpack-raj-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e986a7bd9119a20630d564f9b89ae3f4e5217a5c glibc-langpack-ro-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm c9a724241e949a0e00db5b775e9111bdad3acc8f glibc-langpack-ru-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm c532fd1b7a88e754e9210a335c4013345b5704f0 glibc-langpack-rw-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8f7ca901586c3cb06b725866b048c691a91d5959 glibc-langpack-sa-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 692de3c9d9d960500c73cac8121c2d22a84cba22 glibc-langpack-sah-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm a60ec58f35cd615df0df41f23afb3135e733d9c1 glibc-langpack-sat-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8bda194cc5d70720326b5f85262409bf5a66cc12 glibc-langpack-sc-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 7b28cf8b128ea9b5fd0987378cf366af74cd6aac glibc-langpack-sd-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0e283b75a022b4886e7b3fa99cc6244839254c96 glibc-langpack-se-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 76401d95ab427f1a23b2db766293f053b18da054 glibc-langpack-sgs-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d79b77cd0fa0d19272ad1c3e9357fa76c7708c4f glibc-langpack-shn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3f1dd8493d8ba785e4ce8f8bb25d2489e07670dc glibc-langpack-shs-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ad4cb30b3269b234a99dfe0de02b46eb4cf64b61 glibc-langpack-si-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm f1b1b712d5997ca77783756d1598a8864e70990a glibc-langpack-sid-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 85ee96905664ca79e882187c98d67a68ed4496b7 glibc-langpack-sk-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3d236749490e0ccf6686d3894b85396d2e0c4722 glibc-langpack-sl-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3969106d2f6a4726bbc961d381e949d2430bbc9b glibc-langpack-sm-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm dfaf1327917390e15f9993fb09a0ad38c1f53fc7 glibc-langpack-so-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 900d1c3f0de73a55548c965baaf7db404c061589 glibc-langpack-sq-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 521bca928d1ac364afbec0fa4eb673d6ed781ccf glibc-langpack-sr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 1f30ac13f013005121463c9a4ffc1029d17272d8 glibc-langpack-ss-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3a07e6902fe5d6c6a30a8151f34d8eef0cafdeff glibc-langpack-st-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0a21afb165e74d66593234ba48876da71d54d006 glibc-langpack-sv-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0d92fcf987348b0db8d31c8a60ca78c2835e1cd9 glibc-langpack-sw-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2352b9a5c4aa4b6b5a8077de825a9be9cce28230 glibc-langpack-szl-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2eb469134ebdb9942dbbb9647021ed2e5751dcf1 glibc-langpack-ta-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 5963aa579e1ad1adefce4428dafc34009c877ae2 glibc-langpack-tcy-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 546b38bd43db07cdc76400c1104451de7a2db08e glibc-langpack-te-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 998b299f277197be1ea6e9063ac87a13ea39d49c glibc-langpack-tg-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm c64a4efe6ce2342057772efeb9174ff3829b6121 glibc-langpack-th-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e27e0a4ac3680af1ae65a47cf9a90a680010f627 glibc-langpack-the-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm a554071c16c50f577e265ecc41ac4b7000b5d375 glibc-langpack-ti-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm e342dcac48bafc8d4dbf1f6a287c68b65d2ae357 glibc-langpack-tig-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 033ba043507432a2e896e697d109ed07bb826b1d glibc-langpack-tk-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ddb76f0223cf67fef6bda42d6d4723670606117d glibc-langpack-tl-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8512b3f0a405a406c0d3f4cc03cbf46159f456f9 glibc-langpack-tn-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm d5f764a5ec5d85a9e2d76522cd6afd92f3eae13c glibc-langpack-to-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3116fada04cc3ca982e9dd96ea4e9b7df0937c9b glibc-langpack-tpi-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 4a6745ed5fd31c2368582d0854376ea3b83b12c8 glibc-langpack-tr-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8eb4e46b79eb35d41f7cbcaacac801cffd0d48bf glibc-langpack-ts-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 72ff6ef53c3c71f492debc2b62ef55638968a994 glibc-langpack-tt-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm a7059792cc4360a0474c5128b2c51887745ab0c8 glibc-langpack-ug-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm fc935714091365e764a562f70f75e96b22b9fda5 glibc-langpack-uk-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 66dcb1267167a5641f0cf8c137da7f2b58f36c5b glibc-langpack-unm-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 495ab315fcf4a7192256f01db04405428ba6c7c6 glibc-langpack-ur-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm eac3ed83418d6dcd423a2ca7dfe0c05a8dfc9649 glibc-langpack-uz-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 5e1a458fd4cf14eedb3bb71247187e95db14ff35 glibc-langpack-ve-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 37ad7adea3c91d82c8a2594aa051f01835354f6b glibc-langpack-vi-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9f20a1de0447eed2885a6a4f7a8c2d07ebb4073b glibc-langpack-wa-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 70d1d4648c10f656026380cfec9d2d1450e22b43 glibc-langpack-wae-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2ee528a81f1bd37f060cbd9f257c8cae27660abf glibc-langpack-wal-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 3de3ebea17954a0f7eac809bd6098759b9e56456 glibc-langpack-wo-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm f9be6c75653944a00e09b4e849ec837f29dbe311 glibc-langpack-xh-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 2df32b26fba73b1137eac42515ed3c19f2628745 glibc-langpack-yi-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 5162d38912dabfb66a7e308c45eac32358a3b5b1 glibc-langpack-yo-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 456c84436ae6b63c8e22fbb42118722b1ede5b19 glibc-langpack-yue-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 0f4ce3cc57473687d5c20920894c4c967770953e glibc-langpack-yuw-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 8470223dd3fb62f8b44d4527a7cb0537f59b8c1f glibc-langpack-zh-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 90a0fa58808b2996c848f649a4ea1c36ddff7e31 glibc-langpack-zu-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ac1283e3d2406c98f6fa419906449c179d6c5976 glibc-locale-source-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm dd87e666176accb012168b834ea37811277a91bc glibc-minimal-langpack-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 510f9ff2697ca4349d4364774cae170f07a036dc glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els1.i686.rpm 23893e0ba54b469869ca102fa77c68078b266146 glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9ccd654f6af238380234feb306fd410722d84dd2 glibc-static-2.34-60.el9_2.7.tuxcare.els1.i686.rpm 9bf047a63ef8df543359e14516aff4392ce4b61d glibc-static-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm ae774a532647aeeda4b1ae688a75b0d5f4139d3d glibc-utils-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 4fa176bd4edc6d08bc549ce753ac3df9a0c6b221 libnsl-2.34-60.el9_2.7.tuxcare.els1.i686.rpm d3ae3f214b9ad6f93850cafcc2f230fde110e2f0 libnsl-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 9d61d29b448506d3dfab9e5e5926f0e2859d3b7b nscd-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm b487f43c09ad23b12992ad949575968090d36361 nss_db-2.34-60.el9_2.7.tuxcare.els1.i686.rpm 3d2d19ebe3cd191e71634a898716e86a24d3bf2e nss_db-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm 240bad5005e2e36d55dab935873a286a7e332b2a nss_hesiod-2.34-60.el9_2.7.tuxcare.els1.i686.rpm e1e1738943bdca752cf05e690119749b6b80ace0 nss_hesiod-2.34-60.el9_2.7.tuxcare.els1.x86_64.rpm dfe822386f751b6551688ca7641dfab7830a31c8 sysroot-aarch64-el9-glibc-2.34-60.el9_2.7.tuxcare.els1.noarch.rpm 8e180a8fc8da3b92475eca8741c1912daa230898 sysroot-i386-el9-glibc-2.34-60.el9_2.7.tuxcare.els1.noarch.rpm 3af770c35831eec5432344a8e4d9f1f05b07b331 sysroot-x86_64-el9-glibc-2.34-60.el9_2.7.tuxcare.els1.noarch.rpm e0a02ba6409e1671fb7c2054d348cb2bebffe5ba CLSA-2024:1718202007 TuxCare License Agreement 0 - CVE-2024-22365: pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-22365: pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations

0 tuxcare-almalinux9.2-esu pam-1.5.1-14.el9.tuxcare.els1.i686.rpm 3c73ed261507d8da087987a8547e53348a7792ff pam-1.5.1-14.el9.tuxcare.els1.x86_64.rpm d8c89596a11ad8560d4e76668c8bddbeb07c0f69 pam-devel-1.5.1-14.el9.tuxcare.els1.i686.rpm 8d263566f01df9e6d5efbfa1fe90f44852cf4788 pam-devel-1.5.1-14.el9.tuxcare.els1.x86_64.rpm 9f101f321b4d9aea932a4316f4c66f9475ff103f pam-docs-1.5.1-14.el9.tuxcare.els1.x86_64.rpm 336a255aa07e350bdd2431a0139b5073a6b9299d CLSA-2024:1718202251 TuxCare License Agreement 0 - CVE-2023-4016: possible overflow in multiplication when allocating memory in ps/parser.c Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4016: possible overflow in multiplication when allocating memory in ps/parser.c

0 tuxcare-almalinux9.2-esu procps-ng-3.3.17-11.el9.tuxcare.els1.i686.rpm 6704cd8fa6e2bf817fc152cb20d09dc2a1c9ad58 procps-ng-3.3.17-11.el9.tuxcare.els1.x86_64.rpm a32609556c134a4a3418bb32347582eb41921eb8 procps-ng-devel-3.3.17-11.el9.tuxcare.els1.i686.rpm 7a7b6d451748b39e0afb42acc19f8241de80d777 procps-ng-devel-3.3.17-11.el9.tuxcare.els1.x86_64.rpm 10a387942514a1720dc7ed7c4f43684edab0c7cd procps-ng-i18n-3.3.17-11.el9.tuxcare.els1.noarch.rpm 73e7f17a4ee19ec5e55b1b8f3272b8fd91089e0b CLSA-2024:1718291413 TuxCare License Agreement 0 - CVE-2024-0727: Fix NULL pointer dereference in processing PKCS12 files, preventing potential DoS attack - CVE-2023-6129: Fix POLY1305 MAC implementation bug that corrupts internal state on PowerPC CPUs with vector instructions - CVE-2023-5678: Fix issue with excessively long X9.42 DH keys or parameters causing long delays and potential DoS by adding checks in DH_generate_key() and DH_check_pub_key() functions - CVE-2023-3817: Fix excessively long DH key or parameters check causing potential Denial of Service by preventing unnecessary checks if q is larger than p - CVE-2023-3446: Fix issue of excessively long DH keys or parameters causing slow checks, leading to potential Denial of Service. Added additional checks to prevent DoS vulnerability in DH_check(), DH_check_ex(), and EVP_PKEY_param_check() functions - CVE-2023-2975: Fix issue with AES-SIV cipher ignoring empty associated data entries by performing authentication operation for empty data during EVP_EncryptUpdate() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0727: Fix NULL pointer dereference in processing PKCS12 files, preventing potential DoS attack - CVE-2023-6129: Fix POLY1305 MAC implementation bug that corrupts internal state on PowerPC CPUs with vector instructions - CVE-2023-5678: Fix issue with excessively long X9.42 DH keys or parameters causing long delays and potential DoS by adding checks in DH_generate_key() and DH_check_pub_key() functions - CVE-2023-3817: Fix excessively long DH key or parameters check causing potential Denial of Service by preventing unnecessary checks if q is larger than p - CVE-2023-3446: Fix issue of excessively long DH keys or parameters causing slow checks, leading to potential Denial of Service. Added additional checks to prevent DoS vulnerability in DH_check(), DH_check_ex(), and EVP_PKEY_param_check() functions - CVE-2023-2975: Fix issue with AES-SIV cipher ignoring empty associated data entries by performing authentication operation for empty data during EVP_EncryptUpdate()

0 tuxcare-almalinux9.2-esu openssl-3.0.7-17.el9_2.tuxcare.els2.x86_64.rpm ad4a0ce9be95b2bf4e4f49d706aeb95633b57bf2 openssl-devel-3.0.7-17.el9_2.tuxcare.els2.i686.rpm daf80fa45f430e6ca42978758abad523d6ccfd92 openssl-devel-3.0.7-17.el9_2.tuxcare.els2.x86_64.rpm 33938c78980ad74e3b9d526c08f12ca4f875735e openssl-libs-3.0.7-17.el9_2.tuxcare.els2.i686.rpm c20661d12ce8a35ac238de2b3f12b2d6b8bd63f8 openssl-libs-3.0.7-17.el9_2.tuxcare.els2.x86_64.rpm b2aca3790fa42edca438b6b101f3e475ab3c1b68 openssl-perl-3.0.7-17.el9_2.tuxcare.els2.x86_64.rpm 777833a4589273857e657e917e8cdd0324aad1fa CLSA-2024:1718787131 TuxCare License Agreement 0 - CVE-2021-3826: fix buffer overflow in dlang_lname function to prevent denial of service Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3826: fix buffer overflow in dlang_lname function to prevent denial of service

0 tuxcare-almalinux9.2-esu cpp-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 81174e589d40a08b2e58d8059d7a8c9cb09c5060 cross-gcc-aarch64-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 31faf0592559075e551fdc139b24a2e7a8677285 cross-gcc-c++-aarch64-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm e94195738d10679c895a29171163793de244caf4 gcc-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 35e98025751fd5e5d861d4c8ccb5f1b1f3386419 gcc-c++-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 3d1cbeecc083a6ec9edffc18893a6e6c918d06ef gcc-gdb-plugin-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 1b118a8247825c9f9bb9ae94d15dd6e88675dbaf gcc-gfortran-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 2518fa73a713b6450902df8af176db831c26671c gcc-offload-nvptx-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm a190d8e38536cd67f442e3f1eba26c393092d60f gcc-plugin-annobin-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm ec7ee0cd76d97471b9db3280c46bdfebe42fd417 gcc-plugin-devel-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm b3a480828a437592cec27e885e4a74974221fd62 gcc-plugin-devel-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm d4ebf20cac326e4e0a82177f9400c99e03f40f68 libasan-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm 81b44936de4125c591b5facb98ecf395eb2cd949 libasan-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 04da450d66eca731c47acec9805a246d0e2c4621 libasan-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 4aedb120d4da9e9d8467ca0b1860c8b618d4abd7 libatomic-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm 3a34bdcc7fd1480ebbce7c628f5bfec227c21096 libatomic-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm ae835f912c582a534d8d75ccdf078a27208a8871 libatomic-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm b9bac0e3b7ba48d5c4731d05c7347aa6ecc7f048 libgcc-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm 45abcf0f8e2b78ec2b11dccb9a053d7df5cae996 libgcc-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 728d91ab2a799ab8447381656f8c8e5a164591b8 libgccjit-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm 4327282b86aec60408c4a6adf3d05d0b65981c78 libgccjit-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 43cf8a0ed83056422410dfa86ece99bdf29e6853 libgccjit-devel-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm a91f941abcb6cede3d89f125e1065df250f82883 libgccjit-devel-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm e9af74a4c2e032d32997c3e29cab3e5d41a43257 libgfortran-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm dc884b88d4ac65b91c92984d1c51a41e422fcf5d libgfortran-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 2d558b46da52db13453450f5299340bd9c645412 libgfortran-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm a3171f6fe2adf65fdfcc6aed8b07ea690c85c771 libgomp-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm e1a127bf2ea48631701df7b56967712e529a9b6e libgomp-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 804f60e5947d89d0674edad404cc8b4088efa260 libgomp-offload-nvptx-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm c04d7eb97bc062cbc3226eb07479d84d03741f43 libitm-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm 6fca3c195c8285a20bfa5946adae4e5e049c25f4 libitm-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 11615a47372f79a37f055b7a2085d253a2384bb5 libitm-devel-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm b9e5c3973caa8f458c004374378c02a3fb40dfd3 libitm-devel-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 1dc427b28950275a171f64d0228a5a6224aea25d libitm-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 82b4fbc7a6e6f1480e71ea8d94d83b7c66e81f2c liblsan-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 7d19bffd6a902341cd8690b719c366d11ea5ad8c liblsan-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm f3c767c75387cf2bb19728e29f63c4837cbf0b61 libquadmath-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm 04f33b9d9e0b289ff9aa702f41ec8a4bd040efab libquadmath-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 2993197de1cc1cf999fc5bc56c03788aa467111f libquadmath-devel-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm 86cba25ea31b0db7d1de20a4cca5c56ebd784f15 libquadmath-devel-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 5c4f080cb952711454234b94bb513f8b234ce117 libquadmath-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 62735c7f1c0df7f8f2a1f45c2c7bb6d14099eed6 libstdc++-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm d9b8f3c5784ef6737a49740d16fa54c7be318bcd libstdc++-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 335f4fedc72d66bae4391265929d25d002100665 libstdc++-devel-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm a8d5ebf7db7d59d1d5159a907a3075c5a688f9a1 libstdc++-devel-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm d2b51c0702a5635ea915789b775d0e3793a8ec89 libstdc++-docs-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm d3f314d17f12be70205d8c9060344c3c6a368b2f libstdc++-static-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm 9b76bae472d5acc324c86d9823af66abf43b2b90 libstdc++-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm c035c4e0b7221769a5616c71018e8971ee927072 libtsan-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 1c43ce95710da2bde81b80cb17a83f773d78ff74 libtsan-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm b127c93e95148ad1e2dc8b350d26f6233d690133 libubsan-11.3.1-4.3.el9.alma.tuxcare.els1.i686.rpm d5953421bfc2818cd23698f896e6075454c9c75c libubsan-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 18b520e089b569b02ea287d83130a7d5d4dd9a2b libubsan-static-11.3.1-4.3.el9.alma.tuxcare.els1.x86_64.rpm 5d4a2999262ac0b20eae4230bc6699f6416edc71 CLSA-2024:1718787475 TuxCare License Agreement 0 - CVE-2023-39975: fix double free vulnerability in authorization-data handling to prevent incorrect data copying from one ticket to another Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-39975: fix double free vulnerability in authorization-data handling to prevent incorrect data copying from one ticket to another

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els1.i686.rpm f091fb596311cb03e0860817eb1d8a2de4a8bb42 krb5-devel-1.20.1-9.el9_2.tuxcare.els1.x86_64.rpm 4c6ee3e6c9a7211d01c2ca26a44781804920bbde krb5-libs-1.20.1-9.el9_2.tuxcare.els1.i686.rpm 1669166e0ddbd807a650854305bbd6d1e8d15e81 krb5-libs-1.20.1-9.el9_2.tuxcare.els1.x86_64.rpm 5fa10d5db03069681a2550ed48d02ff6459ee0d3 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els1.i686.rpm 97b8be9a4d8d239d9f044dd64141f9a4abbfb76f krb5-pkinit-1.20.1-9.el9_2.tuxcare.els1.x86_64.rpm 08ae9176237efa28e5c559c8a37e3390adcfddec krb5-server-1.20.1-9.el9_2.tuxcare.els1.i686.rpm 8fd6ec68e918635950270d5d13e5d930f2961bdc krb5-server-1.20.1-9.el9_2.tuxcare.els1.x86_64.rpm fc9352e3800981da237e95e3543b93dd4f0866d0 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els1.i686.rpm 34214e80c1e342399b6c9518b4323da40ab433f2 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els1.x86_64.rpm d92c6eb5c7bab296bdc05d803cfed2718d09d192 krb5-workstation-1.20.1-9.el9_2.tuxcare.els1.x86_64.rpm 3fe24ec8592fe98e9de37ac03b3feaa078dd4aa6 libkadm5-1.20.1-9.el9_2.tuxcare.els1.i686.rpm 541233f22412a44d1e5e8c469534d2ec6e3c168d libkadm5-1.20.1-9.el9_2.tuxcare.els1.x86_64.rpm 4e6945500261211b4dff78573409223be8505613 CLSA-2024:1718787931 TuxCare License Agreement 0 - CVE-2023-2283: src/pki_crypto.c: fix possible authentication bypass, remove unneccessary null check; tests/client/torture_rekey.c: fix tests Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-2283: src/pki_crypto.c: fix possible authentication bypass, remove unneccessary null check; tests/client/torture_rekey.c: fix tests

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els3.i686.rpm c78b77f312bbb4e0b7e115fe666c392158852402 libssh-0.10.4-8.el9.tuxcare.els3.x86_64.rpm 6a5bb170778f537d5f73315ee79404499877127b libssh-config-0.10.4-8.el9.tuxcare.els3.noarch.rpm 61bb25d57e94761cc4176eab176ad0ef15a0c7f5 libssh-devel-0.10.4-8.el9.tuxcare.els3.i686.rpm 9a687bd36610e6af5048ddebb5d4e52d553eae8b libssh-devel-0.10.4-8.el9.tuxcare.els3.x86_64.rpm 799c2ea7a40931477cae07afa5ef8ce4c60b183d CLSA-2024:1718897210 TuxCare License Agreement 0 - CVE-2024-33600: nscd: avoid null pointer crashes after notfound response - CVE-2024-33601: fix memory allocation issue in netgroup cache by replacing xmalloc and xrealloc functions to prevent denial of service - CVE-2024-33602: fix memory corruption in netgroup cache by ensuring all strings are stored in the buffer in NSS callback Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-33600: nscd: avoid null pointer crashes after notfound response - CVE-2024-33601: fix memory allocation issue in netgroup cache by replacing xmalloc and xrealloc functions to prevent denial of service - CVE-2024-33602: fix memory corruption in netgroup cache by ensuring all strings are stored in the buffer in NSS callback

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 2ce559141af28f3ed0d61a5fdf3244c47cdd3422 glibc-2.34-60.el9_2.7.tuxcare.els2.i686.rpm 9a69ae3c4594aa21fdf80eede120f00b7f5f4e62 glibc-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d1e6e4006d026dd0db960a5df6b6377b817c3e86 glibc-all-langpacks-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm c026ccfedc1d1cc386f2849bdd02ab1c4d23429f glibc-benchtests-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 156b655eb0041b88749ac879ef08e2fa26403b8a glibc-common-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm cf59da19df12fbc921fb849e6f73c696ffd109f2 glibc-devel-2.34-60.el9_2.7.tuxcare.els2.i686.rpm 8bf7bbcae95f8100b7c5ac792b355d2593ccf622 glibc-devel-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm bd10a56af871eda873f738808eeb926857dee331 glibc-doc-2.34-60.el9_2.7.tuxcare.els2.noarch.rpm b8e18fafbdcf152cdc7cac3d294de8625b99fb3b glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els2.i686.rpm 422a0404fcc617e0100aa33862266ca609c17d0a glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 914965d7c81c23747eb407f4876df0838d43d1c4 glibc-headers-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0cabea2469874ff57e0855c397fd301dfea92b0e glibc-langpack-aa-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7d383f082d66f9935af043ad8eba57875f790328 glibc-langpack-af-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 1d6f9c1b5867d4780b865c8fc663b3d0d485eb66 glibc-langpack-agr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm c60eb3340ce81f1f8f42149daf0295d0be6c466b glibc-langpack-ak-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7512b546b214359c79200f3557da75f1b31bb4b1 glibc-langpack-am-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 2b84a42d82a270a850a8d7dd06d6731b50762400 glibc-langpack-an-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a6eeee3a54cccc9bb5e8a47a681c5a0592e1b627 glibc-langpack-anp-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a42bc6528c6de9d1fd2db161fbc2d02aef2451b5 glibc-langpack-ar-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a59280500f5d2cb1a07b28ac7194a1600e614cf0 glibc-langpack-as-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 2f924b547df7d7e962a37d6a323660d1b26a4410 glibc-langpack-ast-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0931a6827c9413c93515640f365529a498c9b756 glibc-langpack-ayc-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm aeb04e2e7bdb1f780cd2f4f2f9e7c047160a69f2 glibc-langpack-az-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 36506aabb87d9ca557f509a837c39fa84110ac8f glibc-langpack-be-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d9aa23c8d78e012169e81ea662d1aee41afd889b glibc-langpack-bem-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4fdff5442371c3446bac5e005628aa9415cae4be glibc-langpack-ber-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 8a8bd07c6a65294965e9a1865e86a00ceab6fc79 glibc-langpack-bg-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a75406c0c281a8c4c1df0345e06f9fbb8340c076 glibc-langpack-bhb-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 2d9e91af3cb2986717cd1127e0526a5cd7c66a84 glibc-langpack-bho-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm bf7224a7957bd11b9f66bbdedcf00877d24fc6d1 glibc-langpack-bi-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm df172a7a9cf3c793cc07470d038d041ff9ac5474 glibc-langpack-bn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 6436a4196b0bcb09f1de99a0ac0819d9c84dd3a2 glibc-langpack-bo-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 44b17e7d49fcb76faa264190be2fc255365532b7 glibc-langpack-br-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 31464135806faee47e7a7c365ec81f0cd8179ccb glibc-langpack-brx-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 367b6a03e6d637c37c8e90a94749099d989ce241 glibc-langpack-bs-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4ee80ce687d83700794294afcf2e2a4745a4c095 glibc-langpack-byn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm e399198a72beab394d9f44f0deaefcbad6fb7b64 glibc-langpack-ca-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm e8ebe442addbf6332d54898a8659ababd61f240a glibc-langpack-ce-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7a98d5cb85d64305a0b7166150bd3ac0c13d1c1b glibc-langpack-chr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 15c95ebd13b9e837a2945ac29b96c1b33945b31d glibc-langpack-ckb-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7a68c466463648220b08038b33b01b7b78449a79 glibc-langpack-cmn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 9c65290fa91ccdb000dba90d256d14a26730dc7b glibc-langpack-crh-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a4591e762a580ec2ab08c284dd475de5d342c49c glibc-langpack-cs-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm f82268be88f6ad68f16738b5bd1dd40b2ae0090b glibc-langpack-csb-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7ded583501f572961631951bd06fd5886447aaa4 glibc-langpack-cv-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm ddbe181a8c189200659a072258b46c99e7d125d4 glibc-langpack-cy-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7897515830d44ab4b7173c2b6fb8e3f486d0e355 glibc-langpack-da-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm ddf153a2b3eeed20770ab8dfe3b5ee7d4c7725a5 glibc-langpack-de-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3d10633acedf4644e5651dd5926dd7f08a264108 glibc-langpack-doi-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 871fc0b3772a3daae2f45e57a37bd1e5dedf1a4e glibc-langpack-dsb-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7ce6f43b7bb588b64152efa080af551e3b6ed790 glibc-langpack-dv-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm bb52883970744a9300cac95778c118b0506411e9 glibc-langpack-dz-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 22d9b3a841dea9def8d94716f209f03482a10f1a glibc-langpack-el-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 46844d5efb0f36dde3b16ed438bfbc82c6555748 glibc-langpack-en-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0cd8e8f8497c01630309a82b8e83e74fb1e1d805 glibc-langpack-eo-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7003a0f5630cb3b95b236dd03f12a8a95211168a glibc-langpack-es-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm c3604d9cb1433fecf5bab675e9bae9510777309e glibc-langpack-et-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 04d1a1a493e7f2f894f4fb0229c4466876d70b1c glibc-langpack-eu-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 34aaa48106dc07a77074e01c857a8a0264a3fc02 glibc-langpack-fa-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3248ba917a914f3e05438aa0e4b10f7138bc1c00 glibc-langpack-ff-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 43fa447dadc850258d79926415069d35b4c2cc58 glibc-langpack-fi-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 33af9669c81714128eb633c14dc9212c7fbf4b32 glibc-langpack-fil-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 51259dd380a6fefe9377d09f7c8249d851043693 glibc-langpack-fo-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d85a5a4818994e0b3b6760c27e5e0ee02ae37540 glibc-langpack-fr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0e4f7fe63c2e0a2ac4c962d72d88cacd1bc50f76 glibc-langpack-fur-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm ac48eb525609ebccb20a0a9b8328b7286a4f2b4e glibc-langpack-fy-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 8dbdf1a6dbd193179cf93e40a23be1ba1fc2865f glibc-langpack-ga-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 159b3386b1cab00ddad23f8ef9e336fae1dde8df glibc-langpack-gd-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3cadfe3ec7f13d95301f41e3e89f0158e2fcd59d glibc-langpack-gez-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 411097ad0e25b95ac6d0c1f3947f44394cad551b glibc-langpack-gl-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 165b3bad8dd3a4a5917558ff896dd5dfc1d6b629 glibc-langpack-gu-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4c5465e7cc5363c6e9a954afe7b581872c88d4fe glibc-langpack-gv-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 6130fe44e976a106d3a3739cb45affd1ae06999b glibc-langpack-ha-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm fd530ddb7419335787309c8989344e26d435d6e2 glibc-langpack-hak-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 81144583f3701c0afc88271f1fe0e308958305e3 glibc-langpack-he-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4e1f57c7073222bf34cc27b22d8d2ef2660d8ddf glibc-langpack-hi-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm b9ee2d7f27e41d6be8b82c85597184bd30ac0bfe glibc-langpack-hif-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm eb0874fb68c3edbc64f0c5a85b409cf58843b493 glibc-langpack-hne-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm ae1ad24674842b56d0e5163b9e65764a5dfbab92 glibc-langpack-hr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a97102b123fe11c0a2b8838c09db11e31360d4d0 glibc-langpack-hsb-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 5a7b566fd8b41b42770e143275c5e0b148a08cf1 glibc-langpack-ht-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm ec1652afe72de8c13aee32355b5be07f48ba90a1 glibc-langpack-hu-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a73e71a6c61e71c1f7fde9aa7ec7b7865bc738fa glibc-langpack-hy-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm b995d2b356dc7681f47b447d0a348e24e1978d96 glibc-langpack-ia-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3e5a12976c1e2db02186241e90a1e5f21930e194 glibc-langpack-id-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 68ae2f2d77e8527531b757bf75198e1bd324e316 glibc-langpack-ig-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3c44077b78471df5d0328c3a5110c2d000731b21 glibc-langpack-ik-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 5ce9da9669f8400c0e41f20f0c0d43ad2a5cbfde glibc-langpack-is-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 60b50f1c99325353dde0661e55dbabd454e9399b glibc-langpack-it-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 03fd69cb40867b7c5f7f7463d39bbe8cbe5c4531 glibc-langpack-iu-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 55c77803d85eaf95c9c46258d3a5cbb867dad617 glibc-langpack-ja-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 67db4202b54ec88fa89c42f9fe2624542445aa07 glibc-langpack-ka-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4e7a11d324314768898ac3ffa31b720e702f98b4 glibc-langpack-kab-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm bde3c1a2b414b02b29434287cfd967bebff114eb glibc-langpack-kk-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm fbe3f120fb9692b99c6920194ed6002f7ccb6003 glibc-langpack-kl-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 43ea6fe99deb6d33e7dc5e4b1a750810daceb3e5 glibc-langpack-km-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm f89b39161d6f334d4e318cda1f029eac45a845fa glibc-langpack-kn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4fbcb57cc55582de818fc9ac02af0f436886a6dd glibc-langpack-ko-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 2db255723a9b94a5ed615cc645bf9dd4fb7da456 glibc-langpack-kok-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 05295a9ab6da4487cb1f77b01b43153c49dc3835 glibc-langpack-ks-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 998c6f1403eadb71cea7445a7181fd0bdc3a55a7 glibc-langpack-ku-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm e33bda21781de82ce824f9a56aaf3909d3144a7e glibc-langpack-kw-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7f978e8e02029a3841abe2d7f61aecedf3749094 glibc-langpack-ky-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm dc0183c1269ab728cd365167c05da52fbadd0ca9 glibc-langpack-lb-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm e6f04359ebe7ef0c606d434c984e5eddc86dbcb5 glibc-langpack-lg-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 670b1e579071d9824c527291cd98f0a05bcf72b4 glibc-langpack-li-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7bfbbeb83219f71e31668fc27d3207645f659d67 glibc-langpack-lij-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 090eb37a0d5a5a179a87ea7a7b57b329d0ab50e7 glibc-langpack-ln-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 8e1cb018bf995f5bf5021ca2d26d392862ebd645 glibc-langpack-lo-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7851b41e48570ac66eb6bc0304444446d25a7d11 glibc-langpack-lt-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d9d66d03097715e2fca2928b7fad0014bbd15de7 glibc-langpack-lv-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm b70d9efb8cf13169232ff09910b940f7b79e7033 glibc-langpack-lzh-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm cb525507d945092ec98e74fd24102a8a1d0c2bf7 glibc-langpack-mag-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 5d76f3f3e18e301562ab12621f6317030e1d8b98 glibc-langpack-mai-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d572841f285d6cfd80876b46191fa4aa14fffbc8 glibc-langpack-mfe-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm f7a697ef300e46225d4c084dfd4d0ccb6cc080a3 glibc-langpack-mg-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm b0206b9121d123e63a62f60e40303ff9ddc72f94 glibc-langpack-mhr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7463e1e3b132f40556da9603ba582aa34fe021de glibc-langpack-mi-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 475388303e2b993813fb22e2202cadb09bcc2dcd glibc-langpack-miq-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm fa4da82dda834486cc00340d8bae09559bb78bfa glibc-langpack-mjw-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d085216bf53d4605e4f723f6e5a2895b73995c57 glibc-langpack-mk-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 63199b43df848a0c4ec3f044ec28dcfb1bb5412a glibc-langpack-ml-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm e35a0e01238799e07b9a5bcd782f78c0e47c8071 glibc-langpack-mn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm c7142e2e864e84d196eb0ac16b83e84324c8d342 glibc-langpack-mni-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0156f9bb5425136978fd23b68be864c96b2ffff0 glibc-langpack-mnw-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm dc56739b2301fbfa82cd7f46bb45d38ec828ff16 glibc-langpack-mr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 6e344e392276bfa50e54b9d0d604884ad2f774b3 glibc-langpack-ms-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0affb2c9e7f959cb3a499887d69527e0fe546556 glibc-langpack-mt-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm eb49e206f2e96064a3f761b5be3c47a50d2f4ff2 glibc-langpack-my-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3c3d88f817e46e3649fd3b6d2b2f7f3e18691caa glibc-langpack-nan-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a2ccf4c019aa2a575b9856b513a9be0fc69a5389 glibc-langpack-nb-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 56fde9e1f0d6e166ad137e61fff153065cea6794 glibc-langpack-nds-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 858f958087e9aee74d221ed46c4bf1dc127f0904 glibc-langpack-ne-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 40d00e27d718e0fd99a930d539465eca2acf3643 glibc-langpack-nhn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 776fad45972c5f8ea137fe787cf48ff287502ac2 glibc-langpack-niu-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7b5bd6f9deab5c3e2705da07e0ff55f57e20c2b5 glibc-langpack-nl-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 66958da93af6aa40bed4f97ac9a1578dab509c68 glibc-langpack-nn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 151b1cafdcf5510e627cc2769fcc8cac975e4fa4 glibc-langpack-nr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 5f58e37634ab965afb9e3fd02c68167c3195abea glibc-langpack-nso-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4706c4dd48d4e5287d6476f311b8d2f75570bf7e glibc-langpack-oc-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm fa08126af714fc6afe2e8a66038dd2c05e3c150c glibc-langpack-om-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 113b9f56a579b52e6bc09963e11f9ec96b21c970 glibc-langpack-or-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 6d682e1bd1df99e7ee73e3cbb7808d54f1f17a76 glibc-langpack-os-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm eef0d2a43095bdfa3903d2efb04c156667ec1735 glibc-langpack-pa-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm f6c7e1ab3aca807cf5a9c6e323dbeb28635bcb3e glibc-langpack-pap-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 75aa7111531a82e28dd28ed340d54b905a341c38 glibc-langpack-pl-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm e4223115b5234ab837db87ed1043c9856f1e274d glibc-langpack-ps-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 639790f081c59dd4aacb6d37fa09cc526fcc3d62 glibc-langpack-pt-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 17e36c121d087074cec633e3fd849d2c8606a3d8 glibc-langpack-quz-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4669c4ffcce9450a45e9f1b3bb10a2db00b96667 glibc-langpack-raj-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 15087f73541f0046ef739e9c8e92d206789d0815 glibc-langpack-ro-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 875d60ca4a303ca0525975f88021d4e3df5ce132 glibc-langpack-ru-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 396938f7e10d40dd1005d84f4eea88ef58be4e9d glibc-langpack-rw-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 071136cd5cbcb74120483de1ea152c8eb78ecf16 glibc-langpack-sa-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm ab61703aedcd6fd28f6d3c0514982e5c667d1d44 glibc-langpack-sah-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 365362d7f9152745277c63edf1c82363136df172 glibc-langpack-sat-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm dde7e8cf458b44053124068ba84f22f4cf529a21 glibc-langpack-sc-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 55d46cbf2b34b596ccaec5c0c0ad6730b7efc6df glibc-langpack-sd-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7723a3f007a01699bbf8644cea66379f397d28f6 glibc-langpack-se-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 28d76e3084428ce30212090004132e0f7b4bc10f glibc-langpack-sgs-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm f22b2346bc471b5ffea6c3c14c51a7b71f5cc22d glibc-langpack-shn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3c9ee463dc6330f479a24c6087ae39a92d22bab1 glibc-langpack-shs-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 4666eb2580c00d5f492eda5eef72d642ec37ea92 glibc-langpack-si-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 854703a919bf6bdd3cbfe43e80c11dce5c70d605 glibc-langpack-sid-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 57788d184d33b1cc212b729fcc90699ece4382c0 glibc-langpack-sk-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3518287e1084c3a8e1676c273cc71064e9b5076d glibc-langpack-sl-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 779b7bb62e14d2f7b6fde2a09418b4e57d5b3805 glibc-langpack-sm-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 919789655187f9bdf8c411a198526a1eeceedab0 glibc-langpack-so-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 8af19dbf27159316fdd233b50fb1d764baf6de30 glibc-langpack-sq-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d35b6c86c21f305b8faccb1eb977604e6ceb8632 glibc-langpack-sr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 8c8571148c4c327899dc3a7c85b88a04b131c624 glibc-langpack-ss-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0497ab0c017e786fa0b6b42f104cd393ac5c6bc6 glibc-langpack-st-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d5c6c39ff0496d6bdcfe081b8b0101f28bd2c074 glibc-langpack-sv-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 8cbe0b741acdda2469901c9204e6546c2cccee0b glibc-langpack-sw-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 70c2282b167ea15f7a8889a3ef67aa894173c254 glibc-langpack-szl-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm c2a8e40e56a0169a0b39aec7d1ff30aac482bc28 glibc-langpack-ta-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0382d17f8e6a495694acb1d46c92508bbc444ca5 glibc-langpack-tcy-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 47ad426dfd9bb5dd6f79c186a81b0f73b6cc9961 glibc-langpack-te-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 94b01f07da1d35a9697d69f19bd14ca158443e49 glibc-langpack-tg-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm fb7376e2fb9d9be024136a69dadefead7a0d529b glibc-langpack-th-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm c61f1b991b4eefb18df0fd381625eed78a33fdcd glibc-langpack-the-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 6894800ba9ef63bf07ca8f09c92baa46ae5d100b glibc-langpack-ti-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm d890437d3d7773f69a88b9323d304d6b486fc8a5 glibc-langpack-tig-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 5a27e2597ee98bee7ca7d4a8466cd26644654bd3 glibc-langpack-tk-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 85fbb1c69c1c79f2250378869b3443f699234d3c glibc-langpack-tl-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm c12afddc9272c79dfae5b25c154aa3086d6369aa glibc-langpack-tn-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm ee3e01e16dcd08d35e6be94e2c17572b65c974f3 glibc-langpack-to-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 25a8630ce8045dd89727f5a501951eab2b2335d8 glibc-langpack-tpi-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm a43f06c23080c991fa550c364bc9670dd9162b9b glibc-langpack-tr-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 556f79a855e918720542d354e5ac13e0f8645689 glibc-langpack-ts-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 553f04e369215372d0a368fceb71f2a2b0411476 glibc-langpack-tt-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm b9420afa0874afb4fabb0d9f2710a7e81a7e3442 glibc-langpack-ug-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 115ab137dec93c0d9f7f72972b74a4a0f5167d84 glibc-langpack-uk-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 826a7537f2ae5b74dc3a176b437d7b43f02d6702 glibc-langpack-unm-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm fbca83e08466d179fe73f9c87b4f24d36d480649 glibc-langpack-ur-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm b9d00e0574c6a2a8546c7d75371731dfdbc84c4d glibc-langpack-uz-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 6c69464aa184356ad54c0474f5ba77e3f714c8c5 glibc-langpack-ve-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm cc417409e5919a83ecd54f13b3853edb67dbcedf glibc-langpack-vi-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm b27e74fa03f6c7cc2b8e239e45ce76227dc9bfbc glibc-langpack-wa-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 5b09958909fc6a5b104db2f9f6962ba68ad07d84 glibc-langpack-wae-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 0e56db9a04e5f07e55831a7edb37c216962a9629 glibc-langpack-wal-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm fa93523889c3c4a960fb41a4195255596d61fdd9 glibc-langpack-wo-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 17e36260356239174963efab020399c504334031 glibc-langpack-xh-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 98df0bc2e5ad9f26dc0020ae66534464e65b650a glibc-langpack-yi-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 84cd24ce18878f15b7b7a2f1232b0cbe1d35b7e8 glibc-langpack-yo-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 8cda626d092d1447ea3ce2b17ce1f5aa727b6d06 glibc-langpack-yue-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 2c46726f0583c5a75ad588615b895b634706fa06 glibc-langpack-yuw-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 186c28794904b606e65ec26f4e13baaaeb182aff glibc-langpack-zh-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 49dbf28f2e4327d6055055d3206d27c4bf6d0ac6 glibc-langpack-zu-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 77028e9a7c6c2257739972c9a4d7a261d35ea98a glibc-locale-source-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm e2eb5d0e63cfbf9e3e6ffb7de9c79c5b997dc3ff glibc-minimal-langpack-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 029420db6e696149b401bed3abeea2bd1e974ff7 glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els2.i686.rpm cbaee0bfdc1fcac6c1118b809a7bcac40b5f70d6 glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm e0795dd51d29f4b3c6befdc0a0041dd7db9b8f60 glibc-static-2.34-60.el9_2.7.tuxcare.els2.i686.rpm 624dd2dbdbbe3975e6bf5741aeef8411c319b028 glibc-static-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 151eda9f1f050f26efe6e39630e65df6ed6c7045 glibc-utils-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 77a09706fefe3e4884e8e836041377714459e3e9 libnsl-2.34-60.el9_2.7.tuxcare.els2.i686.rpm bfcbb7967b844860ab185b8f3c9634959e78f05e libnsl-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 8675e8ff018c6258772bdea1b53a9f1e49197a49 nscd-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 72e8f06eb0a2eb34584ca603146b239d2bafdbe7 nss_db-2.34-60.el9_2.7.tuxcare.els2.i686.rpm 2a721a82ade4f77b84c58522969c11ac91b9cb53 nss_db-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 3f381fd87537e2309f1dfc1ac1d2cb334acfa4c9 nss_hesiod-2.34-60.el9_2.7.tuxcare.els2.i686.rpm 3358c80eb34273de5cd236b022f150f26255221f nss_hesiod-2.34-60.el9_2.7.tuxcare.els2.x86_64.rpm 7c34fe98cdc93755ae4a7d61fc951190dcce2fb5 sysroot-aarch64-el9-glibc-2.34-60.el9_2.7.tuxcare.els2.noarch.rpm dc3d63bfe943604f5cbabc10ae040f6d4bd15762 sysroot-i386-el9-glibc-2.34-60.el9_2.7.tuxcare.els2.noarch.rpm e2946eb8204b00f15fe931d73defe86486aef7c8 sysroot-x86_64-el9-glibc-2.34-60.el9_2.7.tuxcare.els2.noarch.rpm 33de82533d87b21bd2207b7e32b11cd3d665977b CLSA-2024:1719231016 TuxCare License Agreement 0 - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - tls: fix use-after-free on failed backlog decryption {CVE-2024-26800} - tls: separate no-async decryption request handling from async {CVE-2024-26584} - tls: decrement decrypt_pending if no async completion will be called {CVE-2024-26584} - net: tls: fix use-after-free with partial reads and async decrypt {CVE-2024-26582} - net: tls: handle backlogging of crypto requests {CVE-2024-26584} - net: tls: factor out tls_*crypt_async_wait() - tap: tap_open(): correctly initialize socket uid {CVE-2023-1076} - tun: tun_chr_open(): correctly initialize socket uid {CVE-2023-1076} - net: add sock_init_data_uid() {CVE-2023-1076} - netfilter: nf_tables: bail out on mismatching dynset and set expressions {CVE-2023-6622} - drm/qxl: fix UAF on handle creation {CVE-2023-39198} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - USB: core: Fix deadlock in port "disable" sysfs attribute {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines {CVE-2024-26933} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - scsi: qla2xxx: Fix double free of fcport {CVE-2024-26929} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - net: ip_tunnel: prevent perpetual headroom growth {CVE-2024-26804} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag {CVE-2024-26642} - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations {CVE-2024-26673} - ipv6: sr: fix possible use-after-free and null-ptr-deref {CVE-2024-26735} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() {CVE-2024-26993} - cifs: fix underflow in parse_server_interfaces() {CVE-2024-26828} - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Make fini symmetric to init {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() {CVE-2024-26595} - net: xfrm: Fix xfrm_address_filter OOB read {CVE-2023-39194} - exfat: check if filename entries exceeds max filename length {CVE-2023-4273} - xfrm: add NULL check in xfrm_update_ae_params {CVE-2023-3772} - firmware: arm_scmi: Harden accesses to the reset domains {CVE-2022-48655} - tcp: Reduce chance of collisions in inet6_hashfn(). {CVE-2023-1206} - ipv4: fix null-deref in ipv4_link_failure {CVE-2023-42754} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189} - netfilter: xt_sctp: validate the flag_info count {CVE-2023-39193} - net: qcom/emac: Fix use after free bug in emac_remove due to race condition {CVE-2023-33203} - net/tls: tls_is_tx_ready() checked list_entry {CVE-2023-1075} - HID: asus: use spinlock to safely schedule workers {CVE-2023-1079} - HID: asus: use spinlock to protect concurrent accesses {CVE-2023-1079} - HID: intel_ish-hid: Add check for ishtp_dma_tx_map {CVE-2023-3358} - gfs2: Don't deref jdesc in evict {CVE-2023-3212} - fbcon: Check font dimension limits {CVE-2023-3161} - KVM: nVMX: add missing consistency checks for CR0 and CR4 {CVE-2023-30456} - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition {CVE-2023-1855} - Bluetooth: HCI: Fix global-out-of-bounds {CVE-2023-28866} - HID: check empty report_list in hid_validate_values() {CVE-2023-1073} - net: mpls: fix stale pointer if allocation fails during device rename {CVE-2023-26545} - r8152: Rate limit overflow messages {CVE-2022-3594} - drm/vmwgfx: Fix shader stage validation {CVE-2022-36402} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - dm ioctl: fix nested locking in table_clear() to remove deadlock concern {CVE-2023-2269} - mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() {CVE-2023-52562} - i2c: i801: Fix block process call transactions {CVE-2024-26593} - bpf: Fix hashtab overflow check on 32-bit arches {CVE-2024-26884} - bpf: Fix stackmap overflow check on 32-bit arches {CVE-2024-26883} - x86/xen: Add some null pointer checking to smp.c {CVE-2024-26908} - RDMA/mlx5: Fix fortify source warning while accessing Eth segment {CVE-2024-26907} - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security {CVE-2024-26903} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak {CVE-2024-26901} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() {CVE-2024-26882} - tls: fix use-after-free on failed backlog decryption {CVE-2024-26800} - tls: separate no-async decryption request handling from async {CVE-2024-26584} - tls: decrement decrypt_pending if no async completion will be called {CVE-2024-26584} - net: tls: fix use-after-free with partial reads and async decrypt {CVE-2024-26582} - net: tls: handle backlogging of crypto requests {CVE-2024-26584} - net: tls: factor out tls_*crypt_async_wait() - tap: tap_open(): correctly initialize socket uid {CVE-2023-1076} - tun: tun_chr_open(): correctly initialize socket uid {CVE-2023-1076} - net: add sock_init_data_uid() {CVE-2023-1076} - netfilter: nf_tables: bail out on mismatching dynset and set expressions {CVE-2023-6622} - drm/qxl: fix UAF on handle creation {CVE-2023-39198} - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752} - USB: core: Fix deadlock in port "disable" sysfs attribute {CVE-2024-26933} - USB: core: Add hub_get() and hub_put() routines {CVE-2024-26933} - USB: core: Fix deadlock in usb_deauthorize_interface() {CVE-2024-26934} - scsi: qla2xxx: Fix double free of fcport {CVE-2024-26929} - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() {CVE-2024-27020} - net: ip_tunnel: prevent perpetual headroom growth {CVE-2024-26804} - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout {CVE-2024-26643} - netfilter: nf_tables: disallow anonymous set with timeout flag {CVE-2024-26642} - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations {CVE-2024-26673} - ipv6: sr: fix possible use-after-free and null-ptr-deref {CVE-2024-26735} - fs: sysfs: Fix reference leak in sysfs_break_active_protection() {CVE-2024-26993} - cifs: fix underflow in parse_server_interfaces() {CVE-2024-26828} - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Make fini symmetric to init {CVE-2024-26595} - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() {CVE-2024-26595} - net: xfrm: Fix xfrm_address_filter OOB read {CVE-2023-39194} - exfat: check if filename entries exceeds max filename length {CVE-2023-4273} - xfrm: add NULL check in xfrm_update_ae_params {CVE-2023-3772} - firmware: arm_scmi: Harden accesses to the reset domains {CVE-2022-48655} - tcp: Reduce chance of collisions in inet6_hashfn(). {CVE-2023-1206} - ipv4: fix null-deref in ipv4_link_failure {CVE-2023-42754} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189} - netfilter: xt_sctp: validate the flag_info count {CVE-2023-39193} - net: qcom/emac: Fix use after free bug in emac_remove due to race condition {CVE-2023-33203} - net/tls: tls_is_tx_ready() checked list_entry {CVE-2023-1075} - HID: asus: use spinlock to safely schedule workers {CVE-2023-1079} - HID: asus: use spinlock to protect concurrent accesses {CVE-2023-1079} - HID: intel_ish-hid: Add check for ishtp_dma_tx_map {CVE-2023-3358} - gfs2: Don't deref jdesc in evict {CVE-2023-3212} - fbcon: Check font dimension limits {CVE-2023-3161} - KVM: nVMX: add missing consistency checks for CR0 and CR4 {CVE-2023-30456} - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition {CVE-2023-1855} - Bluetooth: HCI: Fix global-out-of-bounds {CVE-2023-28866} - HID: check empty report_list in hid_validate_values() {CVE-2023-1073} - net: mpls: fix stale pointer if allocation fails during device rename {CVE-2023-26545} - r8152: Rate limit overflow messages {CVE-2022-3594} - drm/vmwgfx: Fix shader stage validation {CVE-2022-36402} - Bluetooth: L2CAP: Fix attempting to access uninitialized memory {CVE-2022-42895} - dm ioctl: fix nested locking in table_clear() to remove deadlock concern {CVE-2023-2269} - mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() {CVE-2023-52562} - i2c: i801: Fix block process call transactions {CVE-2024-26593} - bpf: Fix hashtab overflow check on 32-bit arches {CVE-2024-26884} - bpf: Fix stackmap overflow check on 32-bit arches {CVE-2024-26883} - x86/xen: Add some null pointer checking to smp.c {CVE-2024-26908} - RDMA/mlx5: Fix fortify source warning while accessing Eth segment {CVE-2024-26907} - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security {CVE-2024-26903} - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak {CVE-2024-26901} - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm becc9ad62af9c1316ecf53bf2ccfa01adc148b17 kernel-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 0929a42c7a979d028b2c4c03d19fcf858b5b6a3c kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els4.noarch.rpm 6bb8186867ec39701322e0410617c164adf201be kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 92028e585fcac1511bc67d59680da2272e272cdb kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 2a2c22c03d5564cda260be621767d0b6abb06729 kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm cce64992dfebac081d2aabfa4e277297d058171f kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm e87b80555e25189a0a661f9f40fc012e6c8f3822 kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 76e5a76e20e8d36f17e5ac7e58723bcf96ba01b1 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 954da8dc63c6a89840ac151778e6e6ad94324f7a kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 705abd7a56cdbd2c8efba356e46d0f1b5fb374b4 kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 1d5a7db605e40ce503a719ee7545c4a2862a4476 kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm d34ddcbc4e1de60fa7aae611aec863c5dd55e5e8 kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 60adc351d0658a7e862f63aa3fc777d88555afa7 kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 2ac5d962efc6b8b0edccf3081b4b91884de74d3f kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 69265b08b0ce144906926938a30044b08069fe6f kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm ddd17e149abe1abf1b7e4415e4b792d711cd2b91 kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 79d11a4ebdfab62f4e61de1bc4a3bb09d2ee1b3b kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els4.noarch.rpm a72ac96d81b601bf50ea748605091210dbb1fd5d kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm e6b01c9b0c8a8a12041788eab245090cff7ad77a kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 1ee9d8694a136fb7ea287e4c4c35992e95c85915 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm d535f4ef23dc646a31858cfe5ab0ead4b9177641 kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm da5c472a6e6a2f7a93704544007ef5998a9f103a kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 441f9db629346b07608b10a44a3ba0fc2d4a413c kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 21be679d05fe3a38ead9a7e1c34bb2eb09842249 kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm ec303e713bb8ded5d03f35141cd85e78666ed1a5 kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm f8148ef256cee2e9c404b6c49cb141e3726f7c31 kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm c94ddff9c4b948d2d173e9cfba23d789faa58e84 kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 0a02591416924272aecb9aa50dca5ea5d0e5f5f1 kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm e6aa7eebf03d3d6641513130e62b37312fb2a320 kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 30c2602ceff4c5280e117d89366f5fa0ee9b5b96 perf-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm fdd16f53c28ffc139c7ec7f876d2959b7d0870a5 python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 49d46cae109dca9608c632b85debc7e207f7bdf5 rtla-5.14.0-284.30.1.el9_2.tuxcare.els4.x86_64.rpm 3ca81b568ebc5801fc76a179eff70ba5ce1c9c92 CLSA-2024:1719246768 TuxCare License Agreement 0 - CVE-2023-4641: fix buffer cleaning issue when password fails on second attempt Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4641: fix buffer cleaning issue when password fails on second attempt

0 tuxcare-almalinux9.2-esu shadow-utils-4.9-6.el9.tuxcare.els1.x86_64.rpm a05a69ce509a5878b74ba8064d34810448ad09af shadow-utils-subid-4.9-6.el9.tuxcare.els1.i686.rpm ff95b1853a07745128d575c10910e8af643d2ec9 shadow-utils-subid-4.9-6.el9.tuxcare.els1.x86_64.rpm 5f96b67988c9bdabda0bbfffd2010d2d58ac23b6 shadow-utils-subid-devel-4.9-6.el9.tuxcare.els1.i686.rpm 4d42cd0099ad5fa72df22ffdda4ca51d45b597b1 shadow-utils-subid-devel-4.9-6.el9.tuxcare.els1.x86_64.rpm abbfcd3cd2749b823fb673b284b3d6ff09edad26 CLSA-2024:1719943814 TuxCare License Agreement 0 - CVE-2023-27538: url: fix the SSH connection reuse check - CVE-2023-27536: url: only reuse connections with same GSS delegation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-27538: url: fix the SSH connection reuse check - CVE-2023-27536: url: only reuse connections with same GSS delegation

0 tuxcare-almalinux9.2-esu curl-7.76.1-23.el9_2.4.tuxcare.els3.x86_64.rpm 9293fb7b6ca8cf7797b95753da4241cc080c6f5e curl-minimal-7.76.1-23.el9_2.4.tuxcare.els3.x86_64.rpm 763131b2c5e19d49d19f400fba3ef5376c8ca124 libcurl-7.76.1-23.el9_2.4.tuxcare.els3.i686.rpm 2f1bb2594b4d392f1e784446b34f9c87f1e0064f libcurl-7.76.1-23.el9_2.4.tuxcare.els3.x86_64.rpm 103760c77bd002f0338a05a0ecd415da25bede75 libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els3.i686.rpm ac61e4cb6898cd8c38d7891729b8fc82487d88ee libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els3.x86_64.rpm bdf9f0ba305e8e4e0578f9c248f937fc6e3d44dc libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els3.i686.rpm b88755f551f67ec2d149f99bba3d1666684d84ec libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els3.x86_64.rpm 949f963e7fc0b4fb9ac71b636cdd00f2e8ad6c55 CLSA-2024:1720093829 TuxCare License Agreement 0 - CVE-2024-6387: the signal handler race condition itself fixed by commenting out the async-signal-unsafe code from the sshsigdie() function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6387: the signal handler race condition itself fixed by commenting out the async-signal-unsafe code from the sshsigdie() function

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els5.x86_64.rpm 15ea5b40e1a60fd0bdada5e04ab017a5abadf5b5 openssh-askpass-8.7p1-30.el9_2.tuxcare.els5.x86_64.rpm 40f0161ccb08b5f40672173847a0526a86982952 openssh-clients-8.7p1-30.el9_2.tuxcare.els5.x86_64.rpm 095b5cf73c37da015664a02a8f7b7e691a329278 openssh-keycat-8.7p1-30.el9_2.tuxcare.els5.x86_64.rpm 2749fcdcd3c22ab0bd508adb0e1d6a8c548550b2 openssh-server-8.7p1-30.el9_2.tuxcare.els5.x86_64.rpm 0c494700dffb08566047840a56f99cccc4668a82 openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els5.x86_64.rpm 223ac67cdfd959f65b05c0bca9926a6fc1b58b18 pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els5.x86_64.rpm ae156b8775693f0338609ce8340323bec160f379 CLSA-2024:1720178212 TuxCare License Agreement 0 - CVE-2023-36054: fix uninitialized pointer in kadm_rpc_xdr.c to prevent kadmind crash Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-36054: fix uninitialized pointer in kadm_rpc_xdr.c to prevent kadmind crash

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els2.i686.rpm f68d971d20ee86735d030665af7892e5fec383f3 krb5-devel-1.20.1-9.el9_2.tuxcare.els2.x86_64.rpm 1555f01820f2b375bd14c61e8ebc6b426ce8edab krb5-libs-1.20.1-9.el9_2.tuxcare.els2.i686.rpm 2ae421b36c4820b20f666df9f83db3c0773e4856 krb5-libs-1.20.1-9.el9_2.tuxcare.els2.x86_64.rpm 7161f5b8b245a30b6fecb24e38a3412b03704956 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els2.i686.rpm 260f97d2eab3cd93c24cc76fd3ef1bb8b0dbc898 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els2.x86_64.rpm 5099b608fc8f482922c281d7a5a79d04bf3628fa krb5-server-1.20.1-9.el9_2.tuxcare.els2.i686.rpm 931bf716852efa068e3dc2557a496aa743ad0564 krb5-server-1.20.1-9.el9_2.tuxcare.els2.x86_64.rpm 785e491661c02474755d7ff2e34384cdad7966d1 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els2.i686.rpm 018fdc1a889e5c294ed51f7166a79b349c40d133 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els2.x86_64.rpm 4875e26c749de16be8e30daa2c5a9c0bf53a5e9e krb5-workstation-1.20.1-9.el9_2.tuxcare.els2.x86_64.rpm 5ad93825ca93021ddf5ba72be87f9c4ece179e9e libkadm5-1.20.1-9.el9_2.tuxcare.els2.i686.rpm 0533bc2227129e4c15e5d3de5af94708a36286f2 libkadm5-1.20.1-9.el9_2.tuxcare.els2.x86_64.rpm 684d6ffa58bb2c932fa65a636651aea760a1ed47 CLSA-2024:1720547879 TuxCare License Agreement 0 - CVE-2023-6597: prevent tempfile.TemporaryDirectory class dereference symlinks - Fix expat regression tests for xml_etree Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6597: prevent tempfile.TemporaryDirectory class dereference symlinks - Fix expat regression tests for xml_etree

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els3.noarch.rpm d17be0448634222a82c295c68991d573672dfb41 python3-3.9.16-1.el9_2.2.tuxcare.els3.i686.rpm bcab675320823f07bb7e2090207804c4a2b7c0b4 python3-3.9.16-1.el9_2.2.tuxcare.els3.x86_64.rpm 4eb943bab344cf644974dade35098fa2ec6ae7df python3-debug-3.9.16-1.el9_2.2.tuxcare.els3.i686.rpm cb4c70fd27d282949c5d02766da8c2a2d551abbf python3-debug-3.9.16-1.el9_2.2.tuxcare.els3.x86_64.rpm 5a8884c0a0edd53bb13e9ad4e46505692a1d35d9 python3-devel-3.9.16-1.el9_2.2.tuxcare.els3.i686.rpm e95e98130022d261b118205b672e25f2e824eef4 python3-devel-3.9.16-1.el9_2.2.tuxcare.els3.x86_64.rpm d54f917877f2c2b02f4e7b7634239e102264084c python3-idle-3.9.16-1.el9_2.2.tuxcare.els3.i686.rpm 29db0caf4aa371e0ba2237ca0aec583131408a96 python3-idle-3.9.16-1.el9_2.2.tuxcare.els3.x86_64.rpm eef44417a399f95f45c42e50c789df9dfe8469bc python3-libs-3.9.16-1.el9_2.2.tuxcare.els3.i686.rpm 64be6f70a5e37726c86b61f938b5f5d2c1917aa7 python3-libs-3.9.16-1.el9_2.2.tuxcare.els3.x86_64.rpm 823e3718e8e5bfbcfeef7d6fd0930b510dddfbf9 python3-test-3.9.16-1.el9_2.2.tuxcare.els3.i686.rpm 2b19270a3638e4d40d98aa74dddca741e846eefb python3-test-3.9.16-1.el9_2.2.tuxcare.els3.x86_64.rpm 4967a7ec9cbb6c2984b50b55e38b0f07c29e54a4 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els3.i686.rpm ed086db630d1e6e29c94192858ab35a774ab06be python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els3.x86_64.rpm 6624f7331c2c2a253edf7e5b613d071549781a95 CLSA-2024:1721929402 TuxCare License Agreement 0 - CVE-2024-6409: fix signal handler race condition vulnerability in sshd server Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6409: fix signal handler race condition vulnerability in sshd server

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els6.x86_64.rpm 28edf5d9a5f3d0415ab5af56e5b7393746c1452f openssh-askpass-8.7p1-30.el9_2.tuxcare.els6.x86_64.rpm d9591430f70ddc4be4968120ea3dc9e3b28c6461 openssh-clients-8.7p1-30.el9_2.tuxcare.els6.x86_64.rpm 333858cde8b49f1ff2775c21c20c6e088670ce98 openssh-keycat-8.7p1-30.el9_2.tuxcare.els6.x86_64.rpm 3ef8c1d11cd2627f6090654f6870e1217b7f839d openssh-server-8.7p1-30.el9_2.tuxcare.els6.x86_64.rpm 3b34b863cf24c9e01acf94c22d6ba423e7ed5c6b openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els6.x86_64.rpm deddcd00d359826913cb79003afe1d20456c3fc8 pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els6.x86_64.rpm 8bfab788a8f3c98099080685ea5acbd901692211 CLSA-2024:1722525083 TuxCare License Agreement 0 - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - Enable internal tests during meson build and ignore the failing ones Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - Enable internal tests during meson build and ignore the failing ones

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els1.i686.rpm 387073484e1947d563c33c43f073e286ebf17c32 glib2-2.68.4-6.el9.tuxcare.els1.x86_64.rpm 57425266200b5bc9006625848a897a8089e98949 glib2-devel-2.68.4-6.el9.tuxcare.els1.i686.rpm e3616d67ecb3a76ae31247ce6a39b30797a911e5 glib2-devel-2.68.4-6.el9.tuxcare.els1.x86_64.rpm 9c6d5a07b7628588559e8219d6d167cfd5fc8f07 glib2-doc-2.68.4-6.el9.tuxcare.els1.noarch.rpm 9f8e10ecd62ccb3d92a631877ea65beec616b288 glib2-static-2.68.4-6.el9.tuxcare.els1.i686.rpm 0b8559185d9ed9d071cb520d7dfebc45ead1d522 glib2-static-2.68.4-6.el9.tuxcare.els1.x86_64.rpm a4306f7416e4f5a9ba3f23b1c8b7d1f526bc96c5 glib2-tests-2.68.4-6.el9.tuxcare.els1.x86_64.rpm d06c7983e6ad0b264f00b5c39283599fd8471df2 CLSA-2024:1722533082 TuxCare License Agreement 0 - af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534} - bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - ima: define ima_max_digest_data struct without a flexible array variable - ima: detect changes to the backing overlay file - tpm: fix reference counting for struct tpm_chip {CVE-2022-2977} - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546} - tty: n_gsm: fix restart handling via CLD command - r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586} - netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904} - Bluetooth: Fix double free in hci_conn_cleanup {CVE-2023-28464} - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841} - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852} - tipc: fix UAF in error path {CVE-2024-36886} - Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779} - dma-mapping: benchmark: handle NUMA_NO_NODE correctly {CVE-2024-39277} - net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014} - net/mlx5e: Introduce flow steering API {CVE-2024-27014} - x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742} - x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742} - x86: Introduce ia32_enabled() {CVE-2024-25742} - x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742} - x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742} - RDMA/srpt: Support specifying the srpt_service_guid parameter {CVE-2024-26744} - platform/x86: think-lmi: Fix reference leak {CVE-2023-52520} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command {CVE-2024-27059} - fat: fix uninitialized field in nostale filehandles {CVE-2024-26973} - usb: xhci: Add error handling in xhci_map_urb_for_dma {CVE-2024-26964} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete {CVE-2024-26897} - wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779} - RDMA/qedr: Fix qedr_create_user_qp error flow {CVE-2024-26743} - wifi: iwlwifi: fix a memory corruption {CVE-2024-26610} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603} - wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg {CVE-2023-52528} - RDMA/siw: Fix connection failure handling {CVE-2023-52513} - usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477} - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc {CVE-2021-47185} - sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074} - memcg: enable accounting for file lock caches {CVE-2022-0480} - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176} - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872} - drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897} - net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() {CVE-2024-36902} - ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901} - vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627} - hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664} - i2c: Fix a potential use after free {CVE-2019-25162} - net/smc: fix illegal rmb_desc access in SMC-D connection dump {CVE-2024-26615} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- af_unix: Fix garbage collector racing against connect() {CVE-2024-26923} - netfilter: nft_limit: reject configurations that cause integer overflow {CVE-2024-26668} - libbpf: Fix use-after-free in btf_dump_name_dups {CVE-2022-3534} - bpf: Fix partial dynptr stack slot reads/writes {CVE-2023-39191} - ima: Fix use-after-free on a dentry's dname.name {CVE-2024-39494} - ima: define ima_max_digest_data struct without a flexible array variable - ima: detect changes to the backing overlay file - tpm: fix reference counting for struct tpm_chip {CVE-2022-2977} - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux {CVE-2023-6546} - tty: n_gsm: fix restart handling via CLD command - r8169: Fix possible ring buffer corruption on fragmented Tx packets. {CVE-2024-38586} - netfilter: tproxy: bail out if IP has been disabled on the device {CVE-2024-36270} - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). {CVE-2024-36904} - Bluetooth: Fix double free in hci_conn_cleanup {CVE-2023-28464} - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super {CVE-2024-0841} - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() {CVE-2024-26852} - tipc: fix UAF in error path {CVE-2024-36886} - Bluetooth: af_bluetooth: Fix deadlock {CVE-2024-26886} - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779} - dma-mapping: benchmark: handle NUMA_NO_NODE correctly {CVE-2024-39277} - net/mlx5e: Prevent deadlock while disabling aRFS {CVE-2024-27014} - net/mlx5e: Introduce flow steering API {CVE-2024-27014} - x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742} - x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742} - x86: Introduce ia32_enabled() {CVE-2024-25742} - x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742} - x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742} - RDMA/srpt: Support specifying the srpt_service_guid parameter {CVE-2024-26744} - platform/x86: think-lmi: Fix reference leak {CVE-2023-52520} - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command {CVE-2024-27059} - fat: fix uninitialized field in nostale filehandles {CVE-2024-26973} - usb: xhci: Add error handling in xhci_map_urb_for_dma {CVE-2024-26964} - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete {CVE-2024-26897} - wifi: mac80211: fix race condition on enabling fast-xmit {CVE-2024-26779} - RDMA/qedr: Fix qedr_create_user_qp error flow {CVE-2024-26743} - wifi: iwlwifi: fix a memory corruption {CVE-2024-26610} - x86/fpu: Stop relying on userspace for info to fault in xsave buffer {CVE-2024-26603} - wifi: rt2x00: restart beacon queue when hardware reset {CVE-2023-52595} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594} - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg {CVE-2023-52528} - RDMA/siw: Fix connection failure handling {CVE-2023-52513} - usb: hub: Guard against accesses to uninitialized BOS descriptors {CVE-2023-52477} - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc {CVE-2021-47185} - sctp: fail if no bound addresses can be used for a given scope {CVE-2023-1074} - memcg: enable accounting for file lock caches {CVE-2022-0480} - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() {CVE-2023-6176} - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872} - drm/amd/display: Atom Integrated System Info v2_2 for DCN35 {CVE-2024-36897} - net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667} - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() {CVE-2024-36902} - ipv6: prevent NULL dereference in ip6_output() {CVE-2024-36901} - vt: fix memory overlapping when deleting chars in the buffer {CVE-2022-48627} - hwmon: (coretemp) Fix out-of-bounds memory access {CVE-2024-26664} - i2c: Fix a potential use after free {CVE-2019-25162} - net/smc: fix illegal rmb_desc access in SMC-D connection dump {CVE-2024-26615}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 21d40bbb4c1e1aee8f93f806899841ab18e03d13 kernel-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 876d6e29ee7de52a2bbdf11e45252528c4c495c3 kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els5.noarch.rpm ea78562fd642bb755289c4b1b6cff24a08ec6c51 kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 35ce1dd58aa6ba442a97492795889a8ab0ecc86d kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 031c5edb78a239fca5028bc3726b9db9c76d29a2 kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm b46d88415990ce95e2d735ccc0df7f13c878e9f6 kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm b83f632cc5c96126d8092f4df62f4680e74e5fee kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 106a5edca300498ac51377b8f6a5710451ca3c4a kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 47f79dd89ca4a8b8ad26cc86da39685ff7e3896e kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 55ca846a5b3334be664da5e26274a14fa799fd2f kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 2490771fc847b54d9284356fb9bf7715a5433744 kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm ae9e8218813104019477a7c1569be18abd80bafe kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 7330cf66b1401c363ab0cc22169cd522eca81112 kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm bbc0fd2f86776f9cdd3fe6797302d2cddde4accc kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 3e1e9d721f39942b94cdcf11df3e93070315a712 kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 1c4c23703a92f8e743f7d7c1da64ef4e0e3f8188 kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 396172e4e785fe7d38e4ff24f47bf9bb290c88a0 kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els5.noarch.rpm fc22db82e4a51ff9d79aceff3d88be9fc07954b6 kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 8f0c06cfbace893d07edb972718a7f58eadf7bd3 kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 05e0efe0e594cd13fd537e0341f62a6db2ec0489 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 01abf4e6f14cfd853cdb7b35649eb817b8a04633 kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm f04989bd444d0dbf9e6b1b39c7400f281cb7655c kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 8697ef993da585850a19bf543cf50764adcb58b4 kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 3177d17a2906814d8122b4e73c625cf4800e26f0 kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 0fc6a5118f66f37a090b1c5e7d076157ece37ebf kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 0cf8d2167bc53f9f61a322430c8e63436436a963 kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 979d56c45d5b8d9d0e0bb9d78f90d0720f1977f0 kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 687f44f760ff9194b75198dfde9f9ad0993bd259 kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 24d81fb2e52974870cf6325b0b2074ebdb838ac3 kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 75ee6f2ac698cd63cec37af76612c49654504e5d perf-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm dcea07178e520e118da10a6b1ec66c931b7e148f python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 9575be8d9ee6235ec41596ea90485c9f2be6e21b rtla-5.14.0-284.30.1.el9_2.tuxcare.els5.x86_64.rpm 5c6e016058bb30388246945847a1e2613fe78a3f CLSA-2024:1722535503 TuxCare License Agreement 0 - CVE-2023-7008: prevent systemd-resolved from accepting DNS records of DNSSEC- signed domains without a signature to mitigate man-in-the-middle attacks Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-7008: prevent systemd-resolved from accepting DNS records of DNSSEC- signed domains without a signature to mitigate man-in-the-middle attacks

0 tuxcare-almalinux9.2-esu systemd-252-14.el9_2.3.tuxcare.els1.i686.rpm ca82ead08558f8947643b151146da74f43361ddd systemd-252-14.el9_2.3.tuxcare.els1.x86_64.rpm 7797c67da85ca35dfd8ee38d5a563f3fdaab23b6 systemd-boot-unsigned-252-14.el9_2.3.tuxcare.els1.x86_64.rpm 8ce723b9c2c7c7ff681797b7ce1c6269ea32c97b systemd-container-252-14.el9_2.3.tuxcare.els1.i686.rpm 89ac970b1527160d8a59ca30248915a3fd7cb8f5 systemd-container-252-14.el9_2.3.tuxcare.els1.x86_64.rpm 4b1f661b11472475ae5e5e96ec0810741c268bee systemd-devel-252-14.el9_2.3.tuxcare.els1.i686.rpm b9e6f31f6fe0dc4eee3969b8b4f647c8294f024d systemd-devel-252-14.el9_2.3.tuxcare.els1.x86_64.rpm fb66cf45a605372c6c4e7760ff50065d7ffef9e8 systemd-journal-remote-252-14.el9_2.3.tuxcare.els1.x86_64.rpm f7bfc57ee4cfd4b74df40461f6a5ba1f90ceffa9 systemd-libs-252-14.el9_2.3.tuxcare.els1.i686.rpm 0c8030988c3f0c90c5dca6ac733c6a647de56e57 systemd-libs-252-14.el9_2.3.tuxcare.els1.x86_64.rpm beb9c989d9056c9cdf7ace6824c1bf98d5834d00 systemd-oomd-252-14.el9_2.3.tuxcare.els1.x86_64.rpm bcc336f7046433274c735ae347e1ec93dbad8021 systemd-pam-252-14.el9_2.3.tuxcare.els1.x86_64.rpm 6feeeab93e585a598e4fe64f048d3306b4eaf101 systemd-resolved-252-14.el9_2.3.tuxcare.els1.x86_64.rpm 10b39a88649af2861085bb8b0d778a3609e8b7fd systemd-rpm-macros-252-14.el9_2.3.tuxcare.els1.noarch.rpm 2f0fefb525c4573110e79473215d03db286cb783 systemd-standalone-sysusers-252-14.el9_2.3.tuxcare.els1.x86_64.rpm 5a7bbdc87e358d574edf4345c213ab8c5bb4e72f systemd-standalone-tmpfiles-252-14.el9_2.3.tuxcare.els1.x86_64.rpm 23c77c410ee4851ea8de388827251a7f774da9e9 systemd-udev-252-14.el9_2.3.tuxcare.els1.x86_64.rpm d26c6a00b5b07fc4affddf79b4cfb425b1b1229d CLSA-2024:1722977316 TuxCare License Agreement 0 - CVE-2023-6135: fix a vulnerability in NSS involving NIST curves susceptible to the "Minerva" side-channel attack, potentially allowing private key recovery Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6135: fix a vulnerability in NSS involving NIST curves susceptible to the "Minerva" side-channel attack, potentially allowing private key recovery

0 tuxcare-almalinux9.2-esu nspr-4.35.0-3.el9_2.tuxcare.els4.i686.rpm e026a529706d4f324932db9a9ec994e83e449f9bff685e3b6d64ce4889d032c7 nspr-4.35.0-3.el9_2.tuxcare.els4.x86_64.rpm 85a58d05e06e8dffad54f3be2aaca963507fd732502d6665b6613e68dcbba01d nspr-devel-4.35.0-3.el9_2.tuxcare.els4.i686.rpm 6417f1580947d71302d3605445c127bf0e2b09e901ff302bb32201e3ff754716 nspr-devel-4.35.0-3.el9_2.tuxcare.els4.x86_64.rpm bf9b366c3bd78bc0356f5c585bcd3993c1a9518f2e8171d472325ef72d0e10fc nss-3.90.0-3.el9_2.tuxcare.els4.i686.rpm 351948e3c66b60449b5062bc446a17f22bd021ed5c13be4cc72956fcc6bd89e9 nss-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm c587fe248851b506a80ae902a9e871475b9e3b8db7a415871a692e5a155f3d79 nss-devel-3.90.0-3.el9_2.tuxcare.els4.i686.rpm b28b57c0c4d2cf35d369868f1940f8598820e4f19884b8d45e50c9c97aae151f nss-devel-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm 061d328ab177774cc834b7d7dc042f137dbe9a280beccdcd613d40bb12d2a208 nss-pkcs11-devel-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm a6c37632536e4824850f982edf487cfce41b75da8623214a3d862a8f4008e0a7 nss-softokn-3.90.0-3.el9_2.tuxcare.els4.i686.rpm 906ed32afd8f7578e64675588845713ded2066ac614339a6ccea4eff7561a509 nss-softokn-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm 3fca8340dd3fb13368b30d519370be39552e3f70a42f0c11a51ace7cef7d9fd8 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els4.i686.rpm 33ae4be596e58518c8e3fcfd968c1c6312c01a83ec9ec299ae065ab5a4d300ff nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm 04adba731478d54b4ea489a5db5af18ab8cda2c4b0bcfdcac55cb7cc99dc35ed nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els4.i686.rpm 66beb0d17fb7ffb1b8cf27345f4d3e48429b92b95a343a85bcf8f45bacf80a7a nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm 6ea6be16d9dcb89acfb4227854beb161be904c4e274cb1904983265125c5965e nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els4.i686.rpm 51f90b8addac89433f8f8a4b0825a0493ef7ab67f4a5f6fdffb05ff41a3b230a nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm 9cf394b2b2a8ed5a1f9d342964e65ca8f949942c74bc1067975ff993de1fa0a1 nss-sysinit-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm a8893bdaf39fc4f3724eec55fffcc263ffc9a025d8342d010603dc0fc01374b3 nss-tools-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm 9a6e01e0df17851f787bdc4244f893e203d08d110821c764b2a7f6409e2ca670 nss-util-3.90.0-3.el9_2.tuxcare.els4.i686.rpm 9eff0344b7133858367718c9951847efea7beb25e3f8ee3f90c0bb036a468afb nss-util-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm 614b27ac4515445dbeb626af3aa24ab481ce90f3da40505506808283d0d81477 nss-util-devel-3.90.0-3.el9_2.tuxcare.els4.i686.rpm 17e7bb329afc543c7e025a4bb17158af1e8d20962853c4be9c89fbafcbf75b1e nss-util-devel-3.90.0-3.el9_2.tuxcare.els4.x86_64.rpm 8168eb93073897a3b931a9966b030335e70326db693cb356db454dedf3a779d4 CLSA-2024:1724706840 TuxCare License Agreement 0 - CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38473: mod_proxy: server proxy encoding problem - CVE-2024-39573: mod_rewrite: proxy handler substitution - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38473: mod_proxy: server proxy encoding problem - CVE-2024-39573: mod_rewrite: proxy handler substitution - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm bcc180cc8945700623c5dd7f2b6f7633fe865ae1b7bf767d21df89b78ccd9cab httpd-core-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm e03f8798428a81a1126a7438f0021eae54523eac954bfdeab9679c5025dedf67 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm 38d4621d68d47f7521b65576226ed089bc508c4393f70bbee9405922eb5943b7 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els3.noarch.rpm 3ec92554c9ab54e5b83f5aeea775576f1e3737508898b37d42f27f9cc42a8782 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els3.noarch.rpm 2b16366ef81012f8ce47b6450759e21701e902854fcbd900c4f491285827916f httpd-tools-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm 5b05982f5a59536a9f169e047d4186088f4ca02120622372595be1fa2a186934 mod_ldap-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm af2f193f09d57f5fa6d4a190e44ac6f707b9cebefdea9d9786169ce79a6944a6 mod_lua-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm 1d61420551d2fdcb0645ee03baaa484a9bcfb21f5c5d3a064763e114675349ab mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm 8bbc1724ade5ce1e3d303b17898f562a24ffe9d540fe7beae63c3714ef03ea4e mod_session-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm 29f65944e2b282e0fb47509f3c57346084a8a3053bef09146fc50d4b76f50b63 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm 585bc5690ddf31b63f1b9c6df71c92b72d4c952360c01216e29fa2e21b7185c4 CLSA-2024:1724871398 TuxCare License Agreement 0 - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver

0 tuxcare-almalinux9.2-esu grub2-common-2.06-61.el9_2.1.alma.tuxcare.els4.noarch.rpm a428d0dbd73384cea34629d2ad9e95e64f24a1dabe5914bf262848adeda1f4a6 grub2-efi-aa64-modules-2.06-61.el9_2.1.alma.tuxcare.els4.noarch.rpm e96ca348ccbf04518a801ada1d8a149c3ba0a6bac08f9f9ed33be00b588f6560 grub2-efi-x64-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm ea5b55629df75b300ac8bbc2b45eb1d925809868b63920b9d4b28fb2c4a1563e grub2-efi-x64-cdboot-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm 4633426329149114cf2be83d0628387b43c6757461c4ef4601894855091301d1 grub2-efi-x64-modules-2.06-61.el9_2.1.alma.tuxcare.els4.noarch.rpm be4b301e7f8ac566665d440bc93f0a04f3576c9ba1b62d4be57ea77678f7ad70 grub2-emu-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm b914a04940205abc80ca3e3a66ba3caa777a0c4377215e3423bd6acdb9c92ae3 grub2-emu-modules-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm 5aac715562c1912b65990c0642afb11bf0c0cdb7805fdd9de74db9b5882bb253 grub2-pc-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm 79582200cae67eb81489d702b4f43fd74d86177e42abdb85615ee57830b2fc0a grub2-pc-modules-2.06-61.el9_2.1.alma.tuxcare.els4.noarch.rpm fce65290ab83791e6eac083791b40d5d070850887e1fb7b67eb7590003f9a2a8 grub2-tools-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm 127fbf23ccdbc5812d22ff210982109d9cba5cf09e7e89297ec97fea7bca5ce8 grub2-tools-efi-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm 0377de1f2f5a6d497016e00549c54262d080e3031b8eb3031b36c38195557848 grub2-tools-extra-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm 3c64edcad501befdeb9a49d53c61d61a5c88d7b3c5d1d8b7823ab03892468e15 grub2-tools-minimal-2.06-61.el9_2.1.alma.tuxcare.els4.x86_64.rpm 161d3013add5c386eeae1fe8659a9d7ba278247e1429fad6234da66fd45ee222 CLSA-2024:1725293298 TuxCare License Agreement 0 - tun: add missing verification for short frame {CVE-2024-41091} - tap: add missing verification for short frame {CVE-2024-41090} - drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552} - net: fix __dst_negative_advice() race {CVE-2024-36971} - net: annotate data-races around sk->sk_dst_pending_confirm {CVE-2024-36971} - net: fix out-of-bounds access in ops_init {CVE-2024-36883} - net/sched: flower: Fix chain template offload {CVE-2024-26669} - netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397} - netfilter: nft_set_rbtree: Remove unused variable nft_net {CVE-2024-27397} - netfilter: nft_set_rbtree: prefer sync gc to async worker {CVE-2024-27397} - netfilter: nft_set_rbtree: rename gc deactivate+erase function {CVE-2024-27397} - netfilter: nf_tables: de-constify set commit ops function argument {CVE-2024-27397} - netfilter: nft_set_rbtree: .deactivate fails if element has expired {CVE-2024-27397} - sched/membarrier: reduce the ability to hammer on sys_membarrier {CVE-2024-26602} - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts {CVE-2022-38096} - sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707} - wait: add wake_up_pollfree() {CVE-2023-52707} - x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2023-46813} - x86/sev: Check IOBM for IOIO exceptions from user-space {CVE-2023-46813} - x86/sev: Disable MMIO emulation from user mode {CVE-2023-46813} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). {CVE-2024-37356} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued {CVE-2024-38384} - netfilter: complete validation of user input {CVE-2024-35962} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - PM / devfreq: Synchronize devfreq_monitor_[start/stop] {CVE-2023-52635} - netfilter: validate user input for expected length {CVE-2024-35896} - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails {CVE-2024-37353} - bnxt: prevent skb UAF after handing over to PTP worker {CVE-2022-48637} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 {CVE-2024-38558} - net: core: reject skb_copy(_expand) for fraglist GSO skbs {CVE-2024-36929} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation {CVE-2024-36017} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound {CVE-2024-33621} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - gro: fix ownership transfer {CVE-2024-35890} - mlxbf_gige: stop interface during shutdown {CVE-2024-35885} - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() {CVE-2023-52809} - wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159} - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161} - drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581} - i40e: fix vf may be used uninitialized in this function warning {CVE-2024-36020} - vt: fix unicode buffer corruption when deleting characters {CVE-2024-35823} - ata: libata-core: Fix double free on error {CVE-2024-41087} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} - tcp_metrics: validate source addr length {CVE-2024-42154} Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- tun: add missing verification for short frame {CVE-2024-41091} - tap: add missing verification for short frame {CVE-2024-41090} - drm/amd/display: Fix potential index out of bounds in color transformation function {CVE-2024-38552} - net: fix __dst_negative_advice() race {CVE-2024-36971} - net: annotate data-races around sk->sk_dst_pending_confirm {CVE-2024-36971} - net: fix out-of-bounds access in ops_init {CVE-2024-36883} - net/sched: flower: Fix chain template offload {CVE-2024-26669} - netfilter: nf_tables: use timestamp to check for set element timeout {CVE-2024-27397} - netfilter: nft_set_rbtree: Remove unused variable nft_net {CVE-2024-27397} - netfilter: nft_set_rbtree: prefer sync gc to async worker {CVE-2024-27397} - netfilter: nft_set_rbtree: rename gc deactivate+erase function {CVE-2024-27397} - netfilter: nf_tables: de-constify set commit ops function argument {CVE-2024-27397} - netfilter: nft_set_rbtree: .deactivate fails if element has expired {CVE-2024-27397} - sched/membarrier: reduce the ability to hammer on sys_membarrier {CVE-2024-26602} - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts {CVE-2022-38096} - sched/psi: Fix use-after-free in ep_remove_wait_queue() {CVE-2023-52707} - wait: add wake_up_pollfree() {CVE-2023-52707} - x86/sev: Check for user-space IOIO pointing to kernel space {CVE-2023-46813} - x86/sev: Check IOBM for IOIO exceptions from user-space {CVE-2023-46813} - x86/sev: Disable MMIO emulation from user mode {CVE-2023-46813} - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). {CVE-2024-37356} - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued {CVE-2024-38384} - netfilter: complete validation of user input {CVE-2024-35962} - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() {CVE-2023-52885} - PM / devfreq: Synchronize devfreq_monitor_[start/stop] {CVE-2023-52635} - netfilter: validate user input for expected length {CVE-2024-35896} - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails {CVE-2024-37353} - bnxt: prevent skb UAF after handing over to PTP worker {CVE-2022-48637} - net: openvswitch: fix overwriting ct original tuple for ICMPv6 {CVE-2024-38558} - net: core: reject skb_copy(_expand) for fraglist GSO skbs {CVE-2024-36929} - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation {CVE-2024-36017} - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound {CVE-2024-33621} - drm/vmwgfx: Fix invalid reads in fence signaled events {CVE-2024-36960} - gro: fix ownership transfer {CVE-2024-35890} - mlxbf_gige: stop interface during shutdown {CVE-2024-35885} - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() {CVE-2023-52809} - wifi: mt76: replace skb_put with skb_put_zero {CVE-2024-42225} - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc {CVE-2024-42228} - scsi: mpi3mr: Sanitise num_phys {CVE-2024-42159} - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD {CVE-2024-42161} - drm/amdgpu/mes: fix use-after-free issue {CVE-2024-38581} - i40e: fix vf may be used uninitialized in this function warning {CVE-2024-36020} - vt: fix unicode buffer corruption when deleting characters {CVE-2024-35823} - ata: libata-core: Fix double free on error {CVE-2024-41087} - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path {CVE-2024-26925} - tcp_metrics: validate source addr length {CVE-2024-42154}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 4be750583dd26d5059d9de5ef0c44cf390d2279f0fbf7cbdcb5aa06dccfe6489 kernel-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 08df26b90cdfea7e43b6c9328856f6c67b1f6e6d9955dc6051680297e5b3f848 kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els6.noarch.rpm 3fd73616c17d074ab39f4ac3980204382fa757183b130bf00e5d7cfcbe75415a kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 32630864cc1f73a82ec1504a469b5030ca9090b4022bc98f175ba81c1a9fd39d kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm caf96e19cd47c58c889fa54babea94a7145dcab9d45177cf3abbb6ea88228653 kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 39a25cd648180ea60df1799fd60ca319371c735a386644d50ae18b77581af0e6 kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm e9fcf9d15fcbadfec49f684ed92bc700f6889808921356bc24d9fbdec16c718c kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 36c6aba4754159ecdd4aa12c5819128e903a6583b4791edff7c0a9d393ea98d5 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 3604559218d283f9f4028a065c786ec450bdf832195bdc7eb691bdc2040df361 kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 31cfcba5b23d4406d65ad9dc59d94fc52ed7dd8782c2b7c2712038cf42074fd9 kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm cea05cc65ba2f3d55e7ab6c24d34af29dde348c53a3841f69c51573a19c3aca1 kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 5496cfcf52d6abf6dbd0b7042810fd528093a81e924f4bc59ab6f3758a7d85ae kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 0018e116450b63ac1aa087e27a4b2a1deff7d8e0ff964b60eec432453fff616a kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 713783a122d1132bd030354b47c05e62780f295fc44b3da6fccdb7e29cf3fbb3 kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 29baea48a3c5dea8653f2df34730f1b0bde0c6a6f336bc8cc2f6dee3ee3c3aa7 kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 31df3a599da87d538839260370409c93c11eaae744d10edc5a25851857fe85f2 kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm b7cba3ea79717c86b073e445b197d79a6881a6c7668b8a3dbc72a6f0a9724293 kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els6.noarch.rpm 21241ed2ccff7e37c088a45addfc4eb798dffe52394417f30fdb2e640a048fd4 kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm d639f941e82481e47c6ef647bdd6fa17ae819d1bea37dac05718b5b3065c7c0b kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 76e006bff3fd5610650515fab0013602306ee3c3ab3186bba3eb335d89a189b4 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm fba46103d6f591f8e74cd0b3643d7ed19a29a39032f599ffa71ad6c14296a4c1 kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 1ff932227e74c3fba6e0ae5e6e4d973ea154af9c468d746ef6b8bbd2e4578f8c kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm c64fafb509c18ea5fd86da14fb13d6aba79dc12d60d6736dccb35816a018d18d kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 18fa07a8ea45250e5eb203a07e72859be1e5067b18292f8d9f80cad668933959 kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 59209a77a1d3e3a038d5701815da404b5473cb356c674b1b94275a34c1b40ed8 kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 35ed44e8ea5b29a0bdf3b9ee7eedddc6863b85ccc94ad31b40d89c0889a5d190 kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 458e3e81d6b940c89df144e87dc9d15f09211f2eb2b6cb06a914ef696b3a2f97 kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 5d6dee428800214028061d39d437b2b90cb8101be7153beef31db5babf65aefe kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm d4a6735a90a6d2b7574e31ee3a6bb923cd1df1a186ca3330dcc2df987bd69d68 kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 88b5197223618417f5e13acf9b29202c8e8d81bf9b9c29b79840fcb2be37a2e7 perf-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm e6ea01b792dbf5898b0f6f7b86a03cbce612195d46215ce1d5f4f6290d56812b python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 8ddb2003844a940e6b9385f5cc519c6732436fdad7abd678aa2f1746ea39a120 rtla-5.14.0-284.30.1.el9_2.tuxcare.els6.x86_64.rpm 5fec51700a0d73b365658fd15fdea0565337121391f696d0497221d1085c98b8 CLSA-2024:1725524582 TuxCare License Agreement 0 - CVE-2024-6119: possible denial of service in X.509 name checks Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6119: possible denial of service in X.509 name checks

0 tuxcare-almalinux9.2-esu openssl-3.0.7-17.el9_2.tuxcare.els3.x86_64.rpm e009556ee07c7f5bfa4ab883ac6101e2a2c8d40b830d7aa0fb89db3b993701a0 openssl-devel-3.0.7-17.el9_2.tuxcare.els3.i686.rpm 661cafcfbc565093c804b9b06d19faf399a5106995dda894823fcd321e175604 openssl-devel-3.0.7-17.el9_2.tuxcare.els3.x86_64.rpm bbdebc3858a49e1e77afce55fd4d68d8451a3ba72c69b88ccd72eb02b6746ebb openssl-libs-3.0.7-17.el9_2.tuxcare.els3.i686.rpm 27a5d7b498a19fa70d1ded41b0ee5faef542f90b2373129f8a6a3b2703655dc0 openssl-libs-3.0.7-17.el9_2.tuxcare.els3.x86_64.rpm 7203837e98cab5106faabd0658ce2155154cec06022f0fe37109614fba4efa45 openssl-perl-3.0.7-17.el9_2.tuxcare.els3.x86_64.rpm 8393e5471843e408d62324d35c3da0040abc1943c55d5a417329d274a0fca0dd CLSA-2024:1725650114 TuxCare License Agreement 0 - CVE-2024-45490: reject negative length in XML_ParseBuffer - CVE-2024-45491: detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: detect integer overflow in nextScaffoldPart on 32-bit platforms Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45490: reject negative length in XML_ParseBuffer - CVE-2024-45491: detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: detect integer overflow in nextScaffoldPart on 32-bit platforms

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els2.i686.rpm 7cb8d929cb3219b899cb0dae138b821877c949f2d201c35ef32e10029ebef6cd expat-2.5.0-1.el9.tuxcare.els2.x86_64.rpm f6845e24ec6511debae512aabb977377fa000219dc8631602c048fed41cbe5cc expat-devel-2.5.0-1.el9.tuxcare.els2.i686.rpm 293a4390dd9a2b5515a81ffc863b0b42fd9836c5376e2fae81b4b267e0b44cf8 expat-devel-2.5.0-1.el9.tuxcare.els2.x86_64.rpm f1ec4282ca19d95d8ce476924ee5792d2007f38a381594987c2ef1000047e291 expat-static-2.5.0-1.el9.tuxcare.els2.x86_64.rpm 4d6ab3b6578e7f63ff7645a896e0a2625db57bf1f4c174e31c59dfe26bea5212 CLSA-2024:1725898066 TuxCare License Agreement 0 - CVE-2024-38428: properly re-implement userinfo parsing Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-38428: properly re-implement userinfo parsing

0 tuxcare-almalinux9.2-esu wget-1.21.1-7.el9.tuxcare.els1.x86_64.rpm b1c72f1a61ee3c8d69f79155f18dab3e73cca5cd0d30ae609b7971c356acc4b8 CLSA-2024:1726059010 TuxCare License Agreement 0 - CVE-2024-6923: properly quote newlines for email headers to prevent header injection Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6923: properly quote newlines for email headers to prevent header injection

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els4.noarch.rpm a9471584f0843a6ce294e016e33f9730f04ed28a95e53546fab0d0646841e301 python3-3.9.16-1.el9_2.2.tuxcare.els4.i686.rpm 497a0d89a2d5f5de16b520ebe4756ea281608a1dd4cc20aee5cac379499e9e9e python3-3.9.16-1.el9_2.2.tuxcare.els4.x86_64.rpm 4c7f2cd9800e55979220c40b1267a16f2b5ba9860a40ee32008014fc8a15df77 python3-debug-3.9.16-1.el9_2.2.tuxcare.els4.i686.rpm b0735454830bf3b3ed0c62cfc61b5820b3be51780d355fa7baeccc4053126bd1 python3-debug-3.9.16-1.el9_2.2.tuxcare.els4.x86_64.rpm 8da60065de69c5a9d6f056314d4087d385bf45bdfa87236db0b551caa3e022dd python3-devel-3.9.16-1.el9_2.2.tuxcare.els4.i686.rpm 98094540cb6e7da8bb5a440560d2e6c935d5d6a5b7d3c57dab103fd099728ec5 python3-devel-3.9.16-1.el9_2.2.tuxcare.els4.x86_64.rpm 41386242dfa0ea4b1e8aea3aa83492c46e1b8770aff2e544675c8ac952e49e73 python3-idle-3.9.16-1.el9_2.2.tuxcare.els4.i686.rpm 8fe2bc49c62cc32d67d3bfdac38adb11c501cc10b5af9ba95b7c9ed9a92b4f40 python3-idle-3.9.16-1.el9_2.2.tuxcare.els4.x86_64.rpm 03eb9bde6b6e4015c0c416f753a9a7d980ccd715581d590d7efcbe2966120c64 python3-libs-3.9.16-1.el9_2.2.tuxcare.els4.i686.rpm 47c642f0116b5e7edb7bce52da7a4678be00191b904c5925e166b9e33f8e9dc8 python3-libs-3.9.16-1.el9_2.2.tuxcare.els4.x86_64.rpm bef3edee32adf736501d0cfa8fbf26601b84c8d042a028ab0b274c900df16a13 python3-test-3.9.16-1.el9_2.2.tuxcare.els4.i686.rpm f6c55ad731fa9345a67f45637ad003b50822027262a05327373d837f0f3cb04b python3-test-3.9.16-1.el9_2.2.tuxcare.els4.x86_64.rpm 83f568b198f9e7800f5f50fedb0cd8b722b8cc8b61a0a672f49352c6d38e1e98 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els4.i686.rpm 004b338d4cd15322d4790c16de4aadbbbfff60c8c1edd9c4d8ac7966dcdce191 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els4.x86_64.rpm 8c1ee5d6bb3d3cc9c6d561e61a687e2f54007c9ad95e804681344e1530a5fa3e CLSA-2024:1726583188 TuxCare License Agreement 0 - CVE-2024-4076: avoid assertion failure from client queries triggering stale data and needing local zone lookups - CVE-2024-1975: remove support for SIG(0) message verification Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-4076: avoid assertion failure from client queries triggering stale data and needing local zone lookups - CVE-2024-1975: remove support for SIG(0) message verification

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els3.x86_64.rpm 568a33d50b6e6918456f8d457545f0bc7e9b6c1d0ea7c5197d775356f8b1b68c bind-chroot-9.16.23-11.el9_2.2.tuxcare.els3.x86_64.rpm 605cd9a8d9c75f29e95044ca9197b959ae1f81cda66e360fa115665c3f134cea bind-devel-9.16.23-11.el9_2.2.tuxcare.els3.i686.rpm f56a86355d92adc4b830664b03fb151effb8f21aaee612a353536eedceeeda58 bind-devel-9.16.23-11.el9_2.2.tuxcare.els3.x86_64.rpm ce01ad8a32f33e1592c32ad7059e286fa84e048ecfcb3009ffe20db4b1207400 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els3.noarch.rpm 51e4c9e32352d3bb08622ef7b33d91cae4f19bbcd80280948cbd3065ba2f5be4 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els3.x86_64.rpm 494ca44bb91628d3e5c41320dcedd2305d2f8b295960cb6fb893d781aa27554f bind-doc-9.16.23-11.el9_2.2.tuxcare.els3.noarch.rpm 0de47725f2f15e990274d712d00b3fa37fed2d1ce89b7fd701d4089312678f84 bind-libs-9.16.23-11.el9_2.2.tuxcare.els3.i686.rpm e898f5b00f4401d9c36b4505c85982f54842d653dd91430be3c18559e94a221a bind-libs-9.16.23-11.el9_2.2.tuxcare.els3.x86_64.rpm ebeca0c178439611faa29474366938ee962b984366f346b8b1221707201d1924 bind-license-9.16.23-11.el9_2.2.tuxcare.els3.noarch.rpm 8a2e5ef25840b85ddea2f62863bd5a175c68f836416518520cb9cd47e82a5eac bind-utils-9.16.23-11.el9_2.2.tuxcare.els3.x86_64.rpm 30a5dc749ae7bf2dfa8dbebd01e85fa9fa2bb449cda989f7e6433b9484796db9 python3-bind-9.16.23-11.el9_2.2.tuxcare.els3.noarch.rpm 4a8054474fe21b0ac92082c505e70f876d4148d34ac10ded65f96ecb7f8dd990 CLSA-2024:1726683307 TuxCare License Agreement 0 - CVE-2024-1737: fix resolver caches and authoritative zone databases to prevent degraded performance when handling client queries for the same hostname Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-1737: fix resolver caches and authoritative zone databases to prevent degraded performance when handling client queries for the same hostname

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els4.x86_64.rpm 9db393b7bc890652ae33dd85da724ce8a0bcc3c4010bc4c6b9d5a744007db88b bind-chroot-9.16.23-11.el9_2.2.tuxcare.els4.x86_64.rpm 3568cafcf3cf45881c001c80ad029f243b1393d2e1566e20369d9377ad35c7e4 bind-devel-9.16.23-11.el9_2.2.tuxcare.els4.i686.rpm 927dd7c2429c6beb8e4ff34a1442f58108998b4ffc3c5b313e9a9e8878c13a4b bind-devel-9.16.23-11.el9_2.2.tuxcare.els4.x86_64.rpm b9c68f8631f5db6808e6472cc091cb5d370579ef0828fc8dab8483bbe04b5c59 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els4.noarch.rpm 5dc0823c33fe8ee4ea3719674ee9ed134cfff6bd243c5f9144526b266b870653 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els4.x86_64.rpm 80e6e03844f5d5cf91770d707cb7b6280a1084dd5744675426cdd9c938aa27fa bind-doc-9.16.23-11.el9_2.2.tuxcare.els4.noarch.rpm af0f98750a024065447806a359022cc06127fdd08a92b0cc2f763cfb0094fa82 bind-libs-9.16.23-11.el9_2.2.tuxcare.els4.i686.rpm 621d3f15c7da29768d011b459484a7fa59569c1b8298e3bad3784606b1222379 bind-libs-9.16.23-11.el9_2.2.tuxcare.els4.x86_64.rpm 1b51266c744b5a302c4b890946be42d89b5dce0e0420ff101c7dd9c75b6055ed bind-license-9.16.23-11.el9_2.2.tuxcare.els4.noarch.rpm cb19e7d6a08653c4531bd5ba8a3df877bab1cf521f15af72416766a75f2ac78b bind-utils-9.16.23-11.el9_2.2.tuxcare.els4.x86_64.rpm 313f029b472405d89d5986583d947b7e15752bd2db417b7e493edba5a3cfed69 python3-bind-9.16.23-11.el9_2.2.tuxcare.els4.noarch.rpm 48b36a3f635d65c6b8f665a612900f520eb9181690e18afa7b958f02772f5f9d CLSA-2024:1726769216 TuxCare License Agreement 0 - CVE-2024-28834: fix side-channel leak in the deterministic ECDSA Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-28834: fix side-channel leak in the deterministic ECDSA

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-21.el9_2.tuxcare.els3.i686.rpm 0eba86c419561fb2522859c9ecee7ebee34c576ac9dc87d3422a6872e4370cb9 gnutls-3.7.6-21.el9_2.tuxcare.els3.x86_64.rpm acaac78e8e59b1643cebb5ebc2322e581b730576668059d3cb75977148fccdcb gnutls-c++-3.7.6-21.el9_2.tuxcare.els3.i686.rpm 8361911ce3ba3775a338357e9dc05a5ca1e822cd620df8658f626093caec4689 gnutls-c++-3.7.6-21.el9_2.tuxcare.els3.x86_64.rpm 03f10e722ec95f8a1b05e7258e718cbd4ab83dbbfa8fbc5ab6ddfc5d74b68ec2 gnutls-dane-3.7.6-21.el9_2.tuxcare.els3.i686.rpm cde0a3f556223fde005c29d1d2847c395d10811b9174e96670c473a54de2d5a0 gnutls-dane-3.7.6-21.el9_2.tuxcare.els3.x86_64.rpm 2b0e1e1c0161f6595815eb7269d198c686dd230304f2155332863be3dd1bc316 gnutls-devel-3.7.6-21.el9_2.tuxcare.els3.i686.rpm dd9075ed0105e851fa6b6130dbf035e8fc20780393c66f025b0a2a3d9135e718 gnutls-devel-3.7.6-21.el9_2.tuxcare.els3.x86_64.rpm 71366821d5e6aebed85fbc96c655b58e1ebbfcd5d364d40aff99faa193ccc756 gnutls-utils-3.7.6-21.el9_2.tuxcare.els3.x86_64.rpm 760f6806016f04dfb53e95a62fbc3040b3074b89356b40e9a4e11a6b7f9da955 CLSA-2024:1726769331 TuxCare License Agreement 0 - CVE-2024-37370: prevent modification of Extra Count field in GSS krb5 wrap token to avoid appearing truncated to application - CVE-2024-37371: fix invalid memory reads during GSS message token handling Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-37370: prevent modification of Extra Count field in GSS krb5 wrap token to avoid appearing truncated to application - CVE-2024-37371: fix invalid memory reads during GSS message token handling

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els3.i686.rpm bed9337a92f88f5ff59b6b1e485e6af72dcf6042db54931deb81acd043e81952 krb5-devel-1.20.1-9.el9_2.tuxcare.els3.x86_64.rpm a5e45dd6b425cb87efc3c7284e76c3178a1aa361094dc831e18b26c7675aa132 krb5-libs-1.20.1-9.el9_2.tuxcare.els3.i686.rpm c3aebbaadaa222f34bd02b352f52d2bcb83c8632a1eebc11a19db84586dddea5 krb5-libs-1.20.1-9.el9_2.tuxcare.els3.x86_64.rpm ce7aaaf5348ccec2584d07db751c1e4dce88d908bb337d70ff2b1008df5191c5 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els3.i686.rpm 601085b2f0498786567a8b3277415047a0bd89ab28bb0dbb22a1f5bc1298ba68 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els3.x86_64.rpm 80cd5a55fd7723cdc11274d8298cc094358b04c37731c61ac43625ccc5898546 krb5-server-1.20.1-9.el9_2.tuxcare.els3.i686.rpm 6455174eb2a7911b54b6a1d74f5f9ae3335e03f7ec56b7dd487304287f6cc978 krb5-server-1.20.1-9.el9_2.tuxcare.els3.x86_64.rpm 51a11b92c0acc4448f023dac6da97af5c731a7ebd9e7f9971e84262c8649eeb2 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els3.i686.rpm 135149008041f430fcafbe64cf4878b7c44211b82235c0aabd24cab272f38fcb krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els3.x86_64.rpm 157ebca2629a493abd6dabeb31b167dc54654baa031467c919e730939664b998 krb5-workstation-1.20.1-9.el9_2.tuxcare.els3.x86_64.rpm 75b890646aa7ca0718ae9c82a74284b1660e9d38ee58dd7c3249db2fe291b424 libkadm5-1.20.1-9.el9_2.tuxcare.els3.i686.rpm efb4d0234639d3eef656fd5c34ab494a2d1d81d3f3faa0ebfe091b41d00ae3cc libkadm5-1.20.1-9.el9_2.tuxcare.els3.x86_64.rpm 9153a0fad19106f683321da76a206f97a3e48f7353d7b5cfbd13d82053ec6ee3 CLSA-2024:1727352561 TuxCare License Agreement 0 - tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - block/ioctl: prefer different overflow check {CVE-2024-41000} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." {CVE-2024-40984} - net/sched: Fix UAF when resolving a clash {CVE-2024-41040} - nvme: avoid double free special payload {CVE-2024-41073} - x86/tdx: Allow 32-bit emulation by default {CVE-2024-25744} - x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742} - x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742} - x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742} - x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744} - x86/entry: Compile entry_SYSCALL32_ignore() unconditionally {CVE-2024-25744} - x86/entry: Rename ignore_sysret() {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744} - x86: Introduce ia32_enabled() {CVE-2024-25742} - x86: Fix misspelled Kconfig symbols {CVE-2024-25744} - x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742} - objtool: Add entry UNRET validation {CVE-2024-25744} - x86/cpu: Switch to arch_cpu_finalize_init() {CVE-2022-40982} - init: Provide arch_cpu_finalize_init() {CVE-2022-40982} - gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570} - gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570} - gfs2: Remove ill-placed consistency check {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570} - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956} - drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - perf/core: Fix potential NULL deref {CVE-2023-5717} - perf: Disallow mis-matched inherited group reads {CVE-2023-5717} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- tipc: Return non-zero value from tipc_udp_addr2str() on error {CVE-2024-42284} - dev/parport: fix the array out-of-bounds risk {CVE-2024-42301} - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs {CVE-2024-42285} - scsi: aacraid: Fix double-free on probe failure {CVE-2024-46673} - ipv6: prevent UAF in ip6_send_skb() {CVE-2024-44987} - block/ioctl: prefer different overflow check {CVE-2024-41000} - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." {CVE-2024-40984} - net/sched: Fix UAF when resolving a clash {CVE-2024-41040} - nvme: avoid double free special payload {CVE-2024-41073} - x86/tdx: Allow 32-bit emulation by default {CVE-2024-25744} - x86/entry: Do not allow external 0x80 interrupts {CVE-2024-25742} - x86/entry: Convert INT 0x80 emulation to IDTENTRY {CVE-2024-25742} - x86/coco: Disable 32-bit emulation by default on TDX and SEV {CVE-2024-25742} - x86: Make IA32_EMULATION boot time configurable {CVE-2024-25744} - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() {CVE-2024-25744} - x86/elf: Make loading of 32bit processes depend on ia32_enabled() {CVE-2024-25744} - x86/entry: Compile entry_SYSCALL32_ignore() unconditionally {CVE-2024-25744} - x86/entry: Rename ignore_sysret() {CVE-2024-25744} - x86/cpu: Don't write CSTAR MSR on Intel CPUs {CVE-2024-25744} - x86: Introduce ia32_enabled() {CVE-2024-25742} - x86: Fix misspelled Kconfig symbols {CVE-2024-25744} - x86/sev: Harden #VC instruction emulation somewhat {CVE-2024-25742} - objtool: Add entry UNRET validation {CVE-2024-25744} - x86/cpu: Switch to arch_cpu_finalize_init() {CVE-2022-40982} - init: Provide arch_cpu_finalize_init() {CVE-2022-40982} - gfs2: Fix potential glock use-after-free on unmount {CVE-2024-38570} - gfs2: Rename sd_{ glock => kill }_wait {CVE-2024-38570} - gfs2: Remove ill-placed consistency check {CVE-2024-38570} - gfs2: simplify gdlm_put_lock with out_free label {CVE-2024-38570} - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list {CVE-2024-40956} - drm/amdgpu: add error handle to avoid out-of-bounds {CVE-2024-39471} - net/mlx5: Discard command completions in internal error {CVE-2024-38555} - net: bridge: xmit: make sure we have at least eth header len bytes {CVE-2024-38538} - netfilter: nftables: exthdr: fix 4-byte stack OOB write {CVE-2023-52628} - perf/core: Fix potential NULL deref {CVE-2023-5717} - perf: Disallow mis-matched inherited group reads {CVE-2023-5717}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 01d85e8896374a18358904f85fe1c0f4dae76c113e197e272fed40059cc17e15 kernel-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 7fc1bfc880f8b1583f4407d1b67d2acace526d7ea920ab4315bed0d4a1b91d04 kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els7.noarch.rpm 740577cdf033e0f4340628f51c6ed6c8ddb0966275a487c9d60c58768498710a kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm baf3bda3ecef6d3b8de55538bd472ae018e01f7a41004fce4cb1961f18f39e37 kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 0b5a241e4a9c86a475abb44eae03300e475af6f27c6209086a19f28e513f311d kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm fd8c1b2a4ddf1a325bc1d8e6cb2c5e92d552f0602e35fc227694a5c7a4a1cafe kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 8fca58ed9fb2eb31a16831e047cf4d4d33a4c66a5bc22714e783a15559466cfd kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 89aaeaf5a4bef9bb82de95145318282a362f80ee1ded54b2168cdd7ba9b69cef kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm b57b37a27ad7b34325170099175d64ba960b86a011417f7e8c7f2ae619c970ad kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm afff7b0afe30b8a4a3fe3dd70a6003ec205e73aa19d3c6b8e90007239dbc40b0 kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 0a45434ed8044404812f77baf52bbaa7db86aaea7eb78303410a223ad19b7cc6 kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 446048beaa298e579b29969b4f4e7a62d212eebd1da833f393d9597fa608791b kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 64bedcb4a87be7c1face7608782e6c9f0ab12884257a7ded5e7cec414fc7c7d2 kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 310f641c1ea381cee7501ffa8ed296bf85b5c0add86b39db9e692ab0a14b3019 kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm f7baacda1f6c1eb3947e65814dc9d5bc4f48775f4ddedf7d870fa9a7945db147 kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm a5146d26e9fa86ebe51316c56a60a6871f08373d2b65346ec3a078007079cc44 kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm ce7d4ad49e168b0a02a2d5992ea0ee4ccc839daa18d9a440f4d636230d11644a kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els7.noarch.rpm 15812e90d0b4d77d850b6331c629c107e17d76d96fc396c373c8057c26c77c85 kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 3bcc8b17c928fbaf77ca56af8983b6146786aecc92b1fc34274835aec4846d8b kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm c60680720d5fa820524df4cabfae39d8ed52d69c301b86a834127f24fc4c8e09 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 4f6d6bea43a72efa1daedd7572b2cb035155a8976e68453a73f0c6fa2b7ee82e kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 76a8856a3c52c887518c892e7dd178480d60805f1359a3d1ab4728e10f0306a8 kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm c8dee712569262f23c49248eed8ca47aa336a8f37cfdb8ea13969d9759d8c37e kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 36c616faf94b65b583dd464e630ab9087af7db4ba60372062e4caa9d1025897d kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 9613a8f40b8786495c9f0958d1ab88056c538c65159c841043b0cbc8ea6354e2 kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 9ce02ee119f0ebbce9907de0b2c07240b93222272a26f91cff02483b410d3c9a kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 4ef88d8264e62cedec359ccad57b60a28f30b887528e2a393b770e265c4549f0 kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm d8ed3ce0fde1693b8b65565c688e9c681819bdf682a3a6aaa7637d93f6e3d7f9 kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 434f1f8128342c98d55821a73c5a15c60415058afb93ab144f0c69ae156becb2 kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 053aab438be3943ebed04f05893caf9a0da587546e8652431c88667bea0932d0 perf-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 2040d8c011aaa42885c7e54e6aa69782b17ee931ef37d25c0f35852d9fc0d878 python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm 3a96280ca9c2a6476890ffba66b5cbbd466cf655902c9a0bee7e98a6e81011f2 rtla-5.14.0-284.30.1.el9_2.tuxcare.els7.x86_64.rpm c777048f9a1e1b88a49612f5614f98e1ccee09844c9bd1cf3fe4114cd8872d13 CLSA-2024:1727373881 TuxCare License Agreement 0 - CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-21.el9_2.tuxcare.els4.i686.rpm f204027cbe51c2ed94a27b4f5be81ce44d122a0871070be6b5bd7fb6701be642 gnutls-3.7.6-21.el9_2.tuxcare.els4.x86_64.rpm 8c230d9c4fd971e1091e3c9b17ee97410e1fa3b72a6d034343ea17903420a732 gnutls-c++-3.7.6-21.el9_2.tuxcare.els4.i686.rpm da70d569365edb72a4cfd56788045529047e1e9fb5859794fb0761f9f5db751e gnutls-c++-3.7.6-21.el9_2.tuxcare.els4.x86_64.rpm 54ea6683e804dd517641d3aeebc267276dbbe80bea6d166e7b8c7368492accda gnutls-dane-3.7.6-21.el9_2.tuxcare.els4.i686.rpm 8711748d636dc914ede5eca482597668a8b8d6ecd16694fb59e400d05ccf6ac5 gnutls-dane-3.7.6-21.el9_2.tuxcare.els4.x86_64.rpm 47fb666f83fc669e6f65d2e4df26c72de05b86d6a663b7f5c27b96f6317fa7bd gnutls-devel-3.7.6-21.el9_2.tuxcare.els4.i686.rpm 1cc7e7addb0c84d4a9d60bfb136d759fc474aa10b8693d230856246755bc6543 gnutls-devel-3.7.6-21.el9_2.tuxcare.els4.x86_64.rpm 119d032c065b665cd649469435174731c6ef87d9748162a3a4b09b973828b07c gnutls-utils-3.7.6-21.el9_2.tuxcare.els4.x86_64.rpm bf972e21a38f56f3b71fb4a25e6268e893b595471c0b183ae51bd9705b01946f CLSA-2024:1727374287 TuxCare License Agreement 0 - CVE-2024-4032: fix missing and incorrect ip address ranges in _private_network variables Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-4032: fix missing and incorrect ip address ranges in _private_network variables

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els5.noarch.rpm 5d761318123a9b8f9136adfbc50230493bae4b1bf73636ce1876dc0cbbf5d416 python3-3.9.16-1.el9_2.2.tuxcare.els5.i686.rpm a14678e8dab0c28131c97b8b59def0e1bb2a3a592238501938cddb390bafd92a python3-3.9.16-1.el9_2.2.tuxcare.els5.x86_64.rpm 947ea5d051f919bd0d2f3ee7f04c1bd797fd1b7190d4311a3a10e053553c02f1 python3-debug-3.9.16-1.el9_2.2.tuxcare.els5.i686.rpm ba9665eb945e3d5429be10c95d316afc35524518b7129a0f56e5a10304287843 python3-debug-3.9.16-1.el9_2.2.tuxcare.els5.x86_64.rpm 67db61f417b31f2de48f127f4d0e85af177b6e1e78d7b1ff216fccb761f4a190 python3-devel-3.9.16-1.el9_2.2.tuxcare.els5.i686.rpm 927ec3cadff4c2570d48f978da573ca0f388a23a7986c426072bdef67291a474 python3-devel-3.9.16-1.el9_2.2.tuxcare.els5.x86_64.rpm 2f77cd2e89131ec2d3a49d099d0ed42121121932d281860916362be60dd2c787 python3-idle-3.9.16-1.el9_2.2.tuxcare.els5.i686.rpm 655ec61438bf94bf5d73aa71348a3f73a31921c16654d429c551db57c35fb866 python3-idle-3.9.16-1.el9_2.2.tuxcare.els5.x86_64.rpm f3ca783d16a64456f502da5f32995ba72af064aecc47d6d18456798bc259a488 python3-libs-3.9.16-1.el9_2.2.tuxcare.els5.i686.rpm 9d61aaa56abd3699f570a7a32a64794feec070025314fe25931687f6f1f8c9d4 python3-libs-3.9.16-1.el9_2.2.tuxcare.els5.x86_64.rpm fb80f434963f4a5d07491da839a413ca6275299f089098d66f8a9c77b5704861 python3-test-3.9.16-1.el9_2.2.tuxcare.els5.i686.rpm f30e5be785cb33f20e1d026b463cb028e43fcce8133820f3f80d3d91b27f935e python3-test-3.9.16-1.el9_2.2.tuxcare.els5.x86_64.rpm 11bf34b1506f2a0e9fcbd543659ce159c4b0d086fd72620af2f412d25fb3a386 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els5.i686.rpm b35555432c7730c35437ec3eb3360b520ddcaf198b071091456d26870d0ffbbc python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els5.x86_64.rpm c24e39a45463839f7a1a1c61b2d03e958383eab407eda2b06830f20936c79464 CLSA-2024:1727979765 TuxCare License Agreement 0 - CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els6.noarch.rpm 929d733c7a6328b2cc072d464e20ab54d413432fa08cd453560b568b4ea2d34d python3-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm 76a8fb2e739d2ad6c68b7f2134d5e46601c728f40b1992f1b86f151efd79397d python3-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm 4f5e569fdfbe73609191f6771bee942cece439a5528e5e0e7d50c094403e7a63 python3-debug-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm b277c873a57aa82dafa4e87d7946961b858d4522881f35e96f5297548939a26d python3-debug-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm 96c621d6dc70367fc98383bf248f10622ed965e711b8c3d5a85a657af74ed8c0 python3-devel-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm 3b0367708fb0951bf6916d88b546f768429bfc3e1b936f772c79e1912af60c54 python3-devel-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm faf5dde20a96539a2f9b0469110b2831161f0251caed797ce1129f2dbb36403a python3-idle-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm 03541a68e6ae1f7983c42f55ff75f3c09f1299dc07f0b5089ecb6e5879bb027f python3-idle-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm f581f15c15a57ca1bf0f495d29975c9765a4274b169e8555a7623d68452c3ffa python3-libs-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm b2c6288294f05b701a8f5540891c3a5a48d832b9462f0e2f46caf40e3775895c python3-libs-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm 96d915e4dead939d2474def4708218ac5f78811e0bd9eec2b002a07c248fc6aa python3-test-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm 714a339b801b9ef4aa6312760513d9d5ce2c10e06986ab935c4583e6f64e203d python3-test-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm b04f25bce406e7c5146477d97c5134005deb1be1473735a7cf4d4ee6d26dab56 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm 52cbdf17ea87aaba7b276d38ed7a48e73311fd676ea413a43099e9b18c3b2deb python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm ee7cbde32f2dee4df1be6aebf8a73bd7c62eef018d02f499b49bb0b5f9f9c29f CLSA-2024:1728936982 TuxCare License Agreement 0 - drm/amd/pm: Fix negative array index read {CVE-2024-46821} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box {CVE-2024-46811} - Squashfs: sanity check symbolic link size {CVE-2024-46744} - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses {CVE-2024-46859} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() {CVE-2024-40995} - net/sched: act_api: rely on rcu in tcf_idr_check_alloc {CVE-2024-40995} - netfilter: bridge: confirm multicast packets before passing them up the stack {CVE-2024-27415} - netfilter: let reset rules clean out conntrack entries {CVE-2024-27415} - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray {CVE-2024-42243} - gpiolib: cdev: Fix use after free in lineinfo_changed_notify {CVE-2024-36899} - bpf, sockmap: Prevent lock inversion deadlock in map delete elem {CVE-2024-35895} - bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t {CVE-2024-35895} - mm/huge_memory: don't unpoison huge_zero_folio {CVE-2024-40914} - cxgb4: fix use after free bugs caused by circular dependency problem {CVE-2023-4133} - timers: Restore ABI Compatibility with timer_delete Functions {CVE-2023-4133} - timers: Provide timer_shutdown[_sync]() {CVE-2023-4133} - timers: Add shutdown mechanism to the internal functions {CVE-2023-4133} - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode {CVE-2023-4133} - timers: Silently ignore timers with a NULL function {CVE-2023-4133} - timers: Rename del_timer() to timer_delete() {CVE-2023-4133} - timers: Rename del_timer_sync() to timer_delete_sync() {CVE-2023-4133} - timers: Use del_timer_sync() even on UP {CVE-2023-4133} - timers: Update kernel-doc for various functions {CVE-2023-4133} - timers: Replace BUG_ON()s {CVE-2023-4133} - timers: Get rid of del_singleshot_timer_sync() {CVE-2023-4133} - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133} - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133} - mm: avoid overflows in dirty throttling logic {CVE-2024-42131} - ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601} - igc: avoid returning frame twice in XDP_REDIRECT {CVE-2024-26853} - igc: Avoid transmit queue timeout for XDP {CVE-2024-26853} - nfsd: fix RELEASE_LOCKOWNER {CVE-2024-26629} - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc {CVE-2023-52880} - nvmet: fix a possible leak when destroy a ctrl during qp establishment {CVE-2024-42152} - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() {CVE-2024-42110} - x86: stop playing stack games in profile_pc() {CVE-2024-42096} - xdp: Remove WARN() from __xdp_reg_mem_model() {CVE-2024-42082} - NFSv4: Fix memory leak in nfs4_set_security_label {CVE-2024-41076} - ppp: reject claimed-as-LCP but actually malformed packets {CVE-2024-41044} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). {CVE-2024-41041} - sched/deadline: Fix task_struct reference leak {CVE-2024-41023} - tipc: force a dst refcount before doing decryption {CVE-2024-40983} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} - wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - xhci: Handle TD clearing for multiple streams case {CVE-2024-40927} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911} - ipv6: fix possible race in __fib6_drop_pcpu_from() {CVE-2024-40905} - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING {CVE-2024-39476} - usb-storage: alauda: Check whether the media is initialized {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() {CVE-2024-38619} - crypto: bcm - Fix pointer arithmetic {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559} - wifi: nl80211: don't free NULL coalescing rule {CVE-2024-36941} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() {CVE-2024-36025} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() {CVE-2024-35898} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work {CVE-2024-35852} - wifi: iwlwifi: dbg-tlv: ensure NUL termination {CVE-2024-35845} - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() {CVE-2024-35791} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes {CVE-2024-35789} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work {CVE-2024-27052} - nfp: flower: handle acti_netdevs allocation failure {CVE-2024-27046} - octeontx2-af: Use separate handlers for interrupts {CVE-2024-27030} - netfilter: flowtable: validate pppoe header {CVE-2024-27016} - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address {CVE-2024-26946} - scsi: qla2xxx: Fix command flush on cable pull {CVE-2024-26931} - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel {CVE-2024-26737} - Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884} - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself {CVE-2023-52735} - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() {CVE-2023-52651} - net: tap_open(): set sk_uid from current_fsuid() {CVE-2023-4194} - net: tun_chr_open(): set sk_uid from current_fsuid() {CVE-2023-4194} - seg6: fix the iif in the IPv6 socket control block {CVE-2021-47515} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - hwmon: (adc128d818) Fix underflows seen when writing limit attributes {CVE-2024-46759} - net: bridge: mst: fix vlan use-after-free {CVE-2024-36979} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627} - wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - of/irq: Prevent device address out-of-bounds read in interrupt map walk {CVE-2024-46743} - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup {CVE-2024-46747} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722} - drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - wifi: nl80211: Avoid address calculations via out of bounds array indexing {CVE-2024-38562} - wifi: nl80211: convert cfg80211_scan_request allocation to *_size macros {CVE-2024-38562} - overflow: Implement size_t saturating arithmetic helpers {CVE-2024-38562} - cdrom: rearrange last_media_change check to avoid unintentional overflow {CVE-2024-42136} - ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588} - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() {CVE-2024-38588} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - firmware: cs_dsp: Fix overflow checking of wmfw header {CVE-2024-41039} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - HID: amd_sfh: free driver_data after destroying hid device {CVE-2024-46746} - xfs: don't walk off the end of a directory data block {CVE-2024-41013} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - drm/amdgpu/mes: fix mes ring buffer overflow {CVE-2024-46700} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - PCI/MSI: Fix UAF in msi_capability_init {CVE-2024-41096} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- drm/amd/pm: Fix negative array index read {CVE-2024-46821} - drm/amd/display: Check gpio_id before used as array index {CVE-2024-46818} - drm/amd/display: Check link_index before accessing dc->links[] {CVE-2024-46813} - drm/amd/display: Fix index may exceed array range within fpu_update_bw_bounding_box {CVE-2024-46811} - Squashfs: sanity check symbolic link size {CVE-2024-46744} - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses {CVE-2024-46859} - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() {CVE-2024-40995} - net/sched: act_api: rely on rcu in tcf_idr_check_alloc {CVE-2024-40995} - netfilter: bridge: confirm multicast packets before passing them up the stack {CVE-2024-27415} - netfilter: let reset rules clean out conntrack entries {CVE-2024-27415} - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray {CVE-2024-42243} - gpiolib: cdev: Fix use after free in lineinfo_changed_notify {CVE-2024-36899} - bpf, sockmap: Prevent lock inversion deadlock in map delete elem {CVE-2024-35895} - bpf, sockmap: Fix preempt_rt splat when using raw_spin_lock_t {CVE-2024-35895} - mm/huge_memory: don't unpoison huge_zero_folio {CVE-2024-40914} - cxgb4: fix use after free bugs caused by circular dependency problem {CVE-2023-4133} - timers: Restore ABI Compatibility with timer_delete Functions {CVE-2023-4133} - timers: Provide timer_shutdown[_sync]() {CVE-2023-4133} - timers: Add shutdown mechanism to the internal functions {CVE-2023-4133} - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode {CVE-2023-4133} - timers: Silently ignore timers with a NULL function {CVE-2023-4133} - timers: Rename del_timer() to timer_delete() {CVE-2023-4133} - timers: Rename del_timer_sync() to timer_delete_sync() {CVE-2023-4133} - timers: Use del_timer_sync() even on UP {CVE-2023-4133} - timers: Update kernel-doc for various functions {CVE-2023-4133} - timers: Replace BUG_ON()s {CVE-2023-4133} - timers: Get rid of del_singleshot_timer_sync() {CVE-2023-4133} - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133} - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function {CVE-2023-4133} - mm: avoid overflows in dirty throttling logic {CVE-2024-42131} - ring-buffer: Fix a race between readers and resize checks {CVE-2024-38601} - igc: avoid returning frame twice in XDP_REDIRECT {CVE-2024-26853} - igc: Avoid transmit queue timeout for XDP {CVE-2024-26853} - nfsd: fix RELEASE_LOCKOWNER {CVE-2024-26629} - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc {CVE-2023-52880} - nvmet: fix a possible leak when destroy a ctrl during qp establishment {CVE-2024-42152} - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() {CVE-2024-42110} - x86: stop playing stack games in profile_pc() {CVE-2024-42096} - xdp: Remove WARN() from __xdp_reg_mem_model() {CVE-2024-42082} - NFSv4: Fix memory leak in nfs4_set_security_label {CVE-2024-41076} - ppp: reject claimed-as-LCP but actually malformed packets {CVE-2024-41044} - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). {CVE-2024-41041} - sched/deadline: Fix task_struct reference leak {CVE-2024-41023} - tipc: force a dst refcount before doing decryption {CVE-2024-40983} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} - wifi: iwlwifi: mvm: don't read past the mfuart notifcation {CVE-2024-40941} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - xhci: Handle TD clearing for multiple streams case {CVE-2024-40927} - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() {CVE-2024-40912} - wifi: cfg80211: Lock wiphy in cfg80211_get_station {CVE-2024-40911} - ipv6: fix possible race in __fib6_drop_pcpu_from() {CVE-2024-40905} - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING {CVE-2024-39476} - usb-storage: alauda: Check whether the media is initialized {CVE-2024-38619} - usb-storage: alauda: Fix uninit-value in alauda_check_media() {CVE-2024-38619} - crypto: bcm - Fix pointer arithmetic {CVE-2024-38579} - scsi: qedf: Ensure the copied buf is NUL terminated {CVE-2024-38559} - wifi: nl80211: don't free NULL coalescing rule {CVE-2024-36941} - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() {CVE-2024-36025} - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() {CVE-2024-35898} - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work {CVE-2024-35852} - wifi: iwlwifi: dbg-tlv: ensure NUL termination {CVE-2024-35845} - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() {CVE-2024-35791} - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes {CVE-2024-35789} - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work {CVE-2024-27052} - nfp: flower: handle acti_netdevs allocation failure {CVE-2024-27046} - octeontx2-af: Use separate handlers for interrupts {CVE-2024-27030} - netfilter: flowtable: validate pppoe header {CVE-2024-27016} - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address {CVE-2024-26946} - scsi: qla2xxx: Fix command flush on cable pull {CVE-2024-26931} - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() {CVE-2024-26855} - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel {CVE-2024-26737} - Input: cyapa - add missing input core locking to suspend/resume functions {CVE-2023-52884} - bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself {CVE-2023-52735} - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() {CVE-2023-52651} - net: tap_open(): set sk_uid from current_fsuid() {CVE-2023-4194} - net: tun_chr_open(): set sk_uid from current_fsuid() {CVE-2023-4194} - seg6: fix the iif in the IPv6 socket control block {CVE-2021-47515} - tty: Fix out-of-bound vmalloc access in imageblit {CVE-2021-47383} - bnx2x: Fix multiple UBSAN array-index-out-of-bounds {CVE-2024-42148} - hwmon: (adc128d818) Fix underflows seen when writing limit attributes {CVE-2024-46759} - net: bridge: mst: fix vlan use-after-free {CVE-2024-36979} - stm class: Fix a double free in stm_register_device() {CVE-2024-38627} - wifi: mac80211: Avoid address calculations via out of bounds array indexing {CVE-2024-41071} - of/irq: Prevent device address out-of-bounds read in interrupt map walk {CVE-2024-46743} - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup {CVE-2024-46747} - drm/amdgpu: fix mc_data out-of-bounds read warning {CVE-2024-46722} - drm/amdgpu: Fix out-of-bounds write warning {CVE-2024-46725} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - wifi: nl80211: Avoid address calculations via out of bounds array indexing {CVE-2024-38562} - wifi: nl80211: convert cfg80211_scan_request allocation to *_size macros {CVE-2024-38562} - overflow: Implement size_t saturating arithmetic helpers {CVE-2024-38562} - cdrom: rearrange last_media_change check to avoid unintentional overflow {CVE-2024-42136} - ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588} - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() {CVE-2024-38588} - drm/amdgpu: fix ucode out-of-bounds read warning {CVE-2024-46723} - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738} - sch/netem: fix use after free in netem_dequeue {CVE-2024-46800} - firmware: cs_dsp: Fix overflow checking of wmfw header {CVE-2024-41039} - hwmon: (lm95234) Fix underflows seen when writing limit attributes {CVE-2024-46758} - HID: amd_sfh: free driver_data after destroying hid device {CVE-2024-46746} - xfs: don't walk off the end of a directory data block {CVE-2024-41013} - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes {CVE-2024-46756} - tunnels: fix out of bounds access when building IPv6 PMTU error {CVE-2024-26665} - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes {CVE-2024-46757} - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - drm/amdgpu/mes: fix mes ring buffer overflow {CVE-2024-46700} - exec: Fix ToCToU between perm check and set-uid/gid usage {CVE-2024-43882} - PCI/MSI: Fix UAF in msi_capability_init {CVE-2024-41096}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm d8918b3611f0f38f723f70537364173ccfbe2b9ce3ebb15ad9b2d6bdadc644d3 kernel-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 230d90183567a09b389df141263480f31d10aa6b798c9a028a43706f3abb833b kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els8.noarch.rpm 8a00784d36ddefff4e7daf1b64b51822b75ea593089cf700e966ec23910537b6 kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm c444a0b9666c223cdd99c227b4a9ce43153c32ad91175ba797bb1d005ffd0641 kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm b64644322382ca9d0f4ea1e2e782a9438ed4e9a5c5511a703c64871cf84e2b4e kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 8de3cbb685e209a1f44303c20ee05c80e0bd96267acb7abd8749ced312d549ee kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 78eae7987443ccd096447f6d43a5adf46c892fd1b944234a9c7453bd6d090ca1 kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 52236944f857bf7eda16ac52f7f37fba628f9239e9d0b7055551b69ae2fe6753 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm f04f4d54fdd375d978a72b1170973654d4cf2b12a6907a5c3bb90ccc513a7288 kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm f1505e4d52286130f0bd1322eab09e32ce89098971f7a0f500a03f34594178bd kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 07a9567e0aeefc582dafe663c0b89229b588681ae31d5346a00858d05c2ba81a kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm c14c973d64acb51deac8f9d8ca785d6c31bb748209da988bd9bb6c4f0c889c66 kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 2eca9a1b1761e93b6b570daba56b0a99f4898a68856e9fc49d28cefe28eb9a0b kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm eada11fdccdf03b561d2831f235b3ff74bffe4120f71db6c9570357aae3aacdd kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 0f94a8657a4551f2976cac0e74afecb58eb6419917ff60940ee92f0be27fce8d kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 2e9386b7f62bb4cb6d322aeb644fe1c5cc485f3cf7d2cf5d483dd32139003e2b kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 362495d3d94e7fbf21b0d7d260514ff1941e9c26f8d3c597adc56687920d9974 kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els8.noarch.rpm 356aae47c759b8a9cde15ffecb4b95735677b8714ff3fe47d690b2b45fbf9e17 kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm ee49d392f04c058edb4381d1402e91df5addb5b73771670fa1df96a5a96093ab kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm fe6243b3dff88aa302ea0665c43d881e004a0a211772044b9e4be2f8cff6b7a7 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 462458133b434e814a7ce10e880675abe467ac850d5d8e04f407ce61472e6bc8 kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 84f9ec9a53872ad6f207ff22ed98f25a851478ff296cd0a58c6b9831971a8e6c kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 8759135303dd77d2368e9b63e850429626731c3435c308331c01364565011199 kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 54c260489e754cc7f566597679e29d003fa5c0bb796b82f30b9c6d65ebf0a8a5 kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm a685d7dfb86ba730acfc99dffe345bb17d993e2384352d9184fc7b2fbf4d990e kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 3e5391ce35aa80d1336165e6c1f9974830e741c08256fbe72b2ae6c6a5424e6a kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm f6f6b66fa812f8b89035afb41d2bf50336c5fa4a0bfeebb6156ed70e160ac024 kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 4a363e81bcd5e93d982800bd371b1d059efca7af0ca1308501135e469dde09bd kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 57fd4c332e204af3bb2dd10ce45ff8b8202325ec362f73ce1b37224df1bbe9bf kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm f58964a7927f1b984d0fde2eee6978d1da1e77d11716c389c39d3827463ec491 perf-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 6e2bf492b006e1c2a64ba1b981dbbd903e3ac7bb128970c7f55362e90fe63345 python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm 83da09482a1bccc340bfcd584ddac418ed962785b310344f0e34749bddd16673 rtla-5.14.0-284.30.1.el9_2.tuxcare.els8.x86_64.rpm dec24e80444d2bb1decc5ad389d4fad5f986d3d74d998f313dcc86b6b1fdbe4c CLSA-2024:1729015920 TuxCare License Agreement 0 - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 - Update AMD CPU microcode to 2024-08-11 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 - Update AMD CPU microcode to 2024-08-11

0 tuxcare-almalinux9.2-esu iwl100-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm f007a46372c850450d0d74c9bf0174a71cfdab18a61e8a84afb256a65082f8a3 iwl1000-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm c2d8bb2a3a9aa2ac54d35614d6960d19551a422fe5743e3cd8e6c5ecf11bf3dc iwl105-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 50799934f95b3da1b322957f4528b17c65daa6d7c079ee44354fbb5d3660d8f0 iwl135-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 2e892495f7bac3b91f709e347497cf33af75b69d792fb03d3c2f99ed420d4f91 iwl2000-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm f29fd4b3f3bc2288c370d4785bbca04fabe44e2f5f0a2070a5a8cf7328207671 iwl2030-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 8f29e86cd4387201330493f1a533605ddfcdcaecc2ed8671291eb76ae004cade iwl3160-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 6033598133a1453e704182cdb886d348c800bb3467b212a956b41bc990cc1686 iwl3945-firmware-15.32.2.9-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 09eb504b39903ed13b09053b8840a1c9beb7a251ccba61c04e2da269974f7c3f iwl4965-firmware-228.61.2.24-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 8689888641762eb11cecf7194022483b565523e9ac4c36baba2f1b0b5e0b339b iwl5000-firmware-8.83.5.1_1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 5201d4724200cedb9d26140e9ad71d2048b40e271257dea4f51f5c60a2d7899d iwl5150-firmware-8.24.2.2-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 8c21835725b1805061258606d687cb90b6a641447552f02d61d36d2d32f25539 iwl6000-firmware-9.221.4.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm de80e2e24fb36594a24baedc4e9de2c998f2480c62ff8e192f589c45550309f6 iwl6000g2a-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm ca7f7a1bf15b8757903b4bd94fafbdc586f9cb881717291f8c7f97598aaa2420 iwl6000g2b-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 9104df447cf62c4115104d7c9d145f5ac476168b3a228c2502513baad1ddc2de iwl6050-firmware-41.28.5.1-135.el9_2.alma.1.tuxcare.els4.noarch.rpm c223f36aa2081f772227b498300415773937d78ad3b3018c102c8b69e50ed650 iwl7260-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 6dd9c84253f50cf8e976b6b5893d3577c7845b99df77cccaf0654ad7a148f3a7 libertas-sd8686-firmware-20230310-135.el9_2.alma.1.tuxcare.els4.noarch.rpm fea6224f10be67b89950f1fbb6104bb44f340c6d1e2fd5b2bac09608f478d067 libertas-sd8787-firmware-20230310-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 90100a35513c28c2b5093ff38c54f2fdbe64cbeb42a6e01684c74c5bf6a23736 libertas-usb8388-firmware-20230310-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 55988d7811a089cb7436d7289a64a80a5dc6cda52cb770ebe74ef819dc769e42 libertas-usb8388-olpc-firmware-20230310-135.el9_2.alma.1.tuxcare.els4.noarch.rpm b6e722483e1a749a5ad09afd78f8ccc07632fb5ead1a2bb742b20f25a70ef2cf linux-firmware-20230310-135.el9_2.alma.1.tuxcare.els4.noarch.rpm 665b63175934ed99b0829b821daccdb627a10597583d7e52b00f180944f55519 linux-firmware-whence-20230310-135.el9_2.alma.1.tuxcare.els4.noarch.rpm eacc2af7bf55b1cb501084dbbf0a8ae0cbf30a83f2442c94fbd2c2dfd571c789 liquidio-firmware-20230310-135.el9_2.alma.1.tuxcare.els4.noarch.rpm d5db1396ed9f06503c9c2eae93e327db273161023602f9c60819d97d38decd27 netronome-firmware-20230310-135.el9_2.alma.1.tuxcare.els4.noarch.rpm ef82432b2d902c1025a80c518a9a67f2176d72c4a51a846c5d2b2a751793d92e CLSA-2024:1730296987 TuxCare License Agreement 0 - Modify the spec file not to skip the %check section during the build None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Modify the spec file not to skip the %check section during the build

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els4.i686.rpm a1574218d473de1bda1c475a3646b06f02f9ad45c5306daf3d772828080834fb krb5-devel-1.20.1-9.el9_2.tuxcare.els4.x86_64.rpm 23ac5d1b1b138aca9c9bc1a551a46ae04110c8b0d0e1961cf8ac8dc7aa2ce7f5 krb5-libs-1.20.1-9.el9_2.tuxcare.els4.i686.rpm e257ffed038a1f81d19bf4e4c2d635bda13233f540c54293f87b70eea9856c67 krb5-libs-1.20.1-9.el9_2.tuxcare.els4.x86_64.rpm 7c13fe10093490d36f33ffaee383229feb46e4d8e9cb3adab1b1ade1071b9b61 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els4.i686.rpm eb63a40f49c4725a086bcea46165d17f2186c2647ddaaf290ea376eec0405a30 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els4.x86_64.rpm 31d1245f5b081be0401c474e6660facec82a717c4d08c3e23b3f4e782ca4fa45 krb5-server-1.20.1-9.el9_2.tuxcare.els4.i686.rpm c6f5e963f99103d53f0d9eb240b088768ba1370ad723f26b0a0783d09d4c52b9 krb5-server-1.20.1-9.el9_2.tuxcare.els4.x86_64.rpm a0bf1122370c1c48760baf0de26c760a7e7ccf92d5a05f3652bab1fc699b1708 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els4.i686.rpm cfa9cf39300f309c30ba523e7bffbf68e831210b8f430e3049cb0fb8679e386e krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els4.x86_64.rpm 980295b45f52dc52c8974f45dbe863e2552d95e73f194bc1fbc208cdb6c57ac8 krb5-workstation-1.20.1-9.el9_2.tuxcare.els4.x86_64.rpm ed59f9580cb646d93f5c21bdd6875dc7af1fcda23fe51679628596a74c5c0454 libkadm5-1.20.1-9.el9_2.tuxcare.els4.i686.rpm 674649113d04f014d72a86317cc88172b3faa90e198489ae091660215c0fdc14 libkadm5-1.20.1-9.el9_2.tuxcare.els4.x86_64.rpm b4c07a8386431be6db5538fb659e1d0991ae2551e6fee389c73c0be28619f0a7 CLSA-2024:1730297506 TuxCare License Agreement 0 - Update Intel CPU microcode to 20240813: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000390; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0005c0; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x35; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x433; - Addition of cpuid:A06A4/0xe6 microcode (in microcode.dat) at revision 0x1e; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4121; - Addition of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) at revision 0x4121; - Addition of cpuid:B06A8/0xe0 microcode (in microcode.dat) at revision 0x4121; - Addition of cpuid:C06F1/0x87 microcode (in microcode.dat) at revision 0x21000230; - Addition of cpuid:C06F2/0x87 microcode (in microcode.dat) at revision 0x21000230; - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x32; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x430; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x411c; - Update of cpuid:50653/0x97 (SKX-SP B1) microcode (in microcode.dat) from revision 0x1000181 up to 0x1000191; - Update of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) from revision 0x4003604 up to 0x4003605; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003604 up to 0x5003707; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002703 up to 0x7002904; - Update of cpuid:50665/0x10 (BDX-NS A0/A1, HWL A1) microcode (in microcode.dat) from revision 0xe000014 up to 0xe000015; - Update of cpuid:506F1/0x01 (DNV B0) microcode (in microcode.dat) from revision 0x38 up to 0x3e; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003b9 up to 0xd0003e7; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x1000268 up to 0x10002b0; - Update of cpuid:706A1/0x01 (GLK B0) microcode (in microcode.dat) from revision 0x3e up to 0x42; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x22 up to 0x24; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc2 up to 0xc6; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb4 up to 0xb8; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x34 up to 0x38; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x4e up to 0x52; - Update of cpuid:806E9/0x10 (AML-Y 2+2 H0) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:806E9/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:806EA/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:806EB/0xd0 (WHL-U W0) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000290 up to 0x2c000390; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b0004d0 up to 0x2b0005c0; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000290 up to 0x2c000390; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b0004d0 up to 0x2b0005c0; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000290 up to 0x2c000390; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b0004d0 up to 0x2b0005c0; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b0004d0 up to 0x2b0005c0; - Update of cpuid:90661/0x01 (EHL B1) microcode (in microcode.dat) from revision 0x17 up to 0x1a; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x32 up to 0x35; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x5 up to 0x7; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x430 up to 0x433; - Update of cpuid:906C0/0x01 (JSL A0/A1) microcode (in microcode.dat) from revision 0x24000024 up to 0x24000026; - Update of cpuid:906E9/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in microcode.dat) from revision 0xf4 up to 0xf8; - Update of cpuid:906EA/0x22 (CFL-H/S/Xeon E U0) microcode (in microcode.dat) from revision 0xf4 up to 0xf8; - Update of cpuid:906EB/0x02 (CFL-E/H/S B0) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:906EC/0x22 (CFL-H/S/Xeon E P0) microcode (in microcode.dat) from revision 0xf4 up to 0xf8; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0xfa up to 0x100; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xf8 up to 0xfe; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x5d up to 0x62; - Update of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) from revision 0x11d up to 0x123; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x411c up to 0x4121; - Update of cpuid:B06E0/0x11 (ADL-N A0) microcode (in microcode.dat) from revision 0x12 up to 0x17; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x32 up to 0x35; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x32 up to 0x35; None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update Intel CPU microcode to 20240813: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000390; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0005c0; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x35; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x433; - Addition of cpuid:A06A4/0xe6 microcode (in microcode.dat) at revision 0x1e; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4121; - Addition of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) at revision 0x4121; - Addition of cpuid:B06A8/0xe0 microcode (in microcode.dat) at revision 0x4121; - Addition of cpuid:C06F1/0x87 microcode (in microcode.dat) at revision 0x21000230; - Addition of cpuid:C06F2/0x87 microcode (in microcode.dat) at revision 0x21000230; - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x32; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x430; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x411c; - Update of cpuid:50653/0x97 (SKX-SP B1) microcode (in microcode.dat) from revision 0x1000181 up to 0x1000191; - Update of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) from revision 0x4003604 up to 0x4003605; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003604 up to 0x5003707; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002703 up to 0x7002904; - Update of cpuid:50665/0x10 (BDX-NS A0/A1, HWL A1) microcode (in microcode.dat) from revision 0xe000014 up to 0xe000015; - Update of cpuid:506F1/0x01 (DNV B0) microcode (in microcode.dat) from revision 0x38 up to 0x3e; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003b9 up to 0xd0003e7; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x1000268 up to 0x10002b0; - Update of cpuid:706A1/0x01 (GLK B0) microcode (in microcode.dat) from revision 0x3e up to 0x42; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x22 up to 0x24; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc2 up to 0xc6; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb4 up to 0xb8; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x34 up to 0x38; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x4e up to 0x52; - Update of cpuid:806E9/0x10 (AML-Y 2+2 H0) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:806E9/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:806EA/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:806EB/0xd0 (WHL-U W0) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000290 up to 0x2c000390; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b0004d0 up to 0x2b0005c0; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000290 up to 0x2c000390; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b0004d0 up to 0x2b0005c0; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000290 up to 0x2c000390; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b0004d0 up to 0x2b0005c0; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b0004d0 up to 0x2b0005c0; - Update of cpuid:90661/0x01 (EHL B1) microcode (in microcode.dat) from revision 0x17 up to 0x1a; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x32 up to 0x35; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x5 up to 0x7; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x430 up to 0x433; - Update of cpuid:906C0/0x01 (JSL A0/A1) microcode (in microcode.dat) from revision 0x24000024 up to 0x24000026; - Update of cpuid:906E9/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in microcode.dat) from revision 0xf4 up to 0xf8; - Update of cpuid:906EA/0x22 (CFL-H/S/Xeon E U0) microcode (in microcode.dat) from revision 0xf4 up to 0xf8; - Update of cpuid:906EB/0x02 (CFL-E/H/S B0) microcode (in microcode.dat) from revision 0xf4 up to 0xf6; - Update of cpuid:906EC/0x22 (CFL-H/S/Xeon E P0) microcode (in microcode.dat) from revision 0xf4 up to 0xf8; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0xfa up to 0x100; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xf8 up to 0xfe; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xf8 up to 0xfc; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x5d up to 0x62; - Update of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) from revision 0x11d up to 0x123; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x411c up to 0x4121; - Update of cpuid:B06E0/0x11 (ADL-N A0) microcode (in microcode.dat) from revision 0x12 up to 0x17; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x32 up to 0x35; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x32 up to 0x35;

0 tuxcare-almalinux9.2-esu microcode_ctl-20220809-2.20240813.1.el9_2.tuxcare.els1.noarch.rpm 86256e5bef219fdb18993f6ea5ef69f8e13739c0fd080172e32cb418292968d9 CLSA-2024:1730800739 TuxCare License Agreement 0 - CVE-2024-34397: Fix GDBus signal subscriptions from unicast spoofing Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-34397: Fix GDBus signal subscriptions from unicast spoofing

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els2.i686.rpm d85f4e5e619a04a301427278dcac71ffd6a4451ae2eaa59f8ea2e0fa2fa728aa glib2-2.68.4-6.el9.tuxcare.els2.x86_64.rpm 5a9f5d4e1bde2840c47acb37c9b490946a08ea8cb167e8498e4f7e817392000d glib2-devel-2.68.4-6.el9.tuxcare.els2.i686.rpm 3fdca98cc1db33f0e548fef6b92c694e8660b96d088d15a36cc08669101e554f glib2-devel-2.68.4-6.el9.tuxcare.els2.x86_64.rpm 55bd3c466c18d7c49bf852653fdd03971b64b054ffea5af6b2a49e49ff81d8d3 glib2-doc-2.68.4-6.el9.tuxcare.els2.noarch.rpm 550e090cbebe4843a1eefc8e20b72a006f97c09730eb10340452080c7a5e2307 glib2-static-2.68.4-6.el9.tuxcare.els2.i686.rpm 1be769aca3928511f15fef81a8a02ab0fc2a0e852bb0659d5187c7911b98bc5d glib2-static-2.68.4-6.el9.tuxcare.els2.x86_64.rpm 7c569c7c08428ddfd0d2d32b497100b58b48537cc0ce6c76d797fba973fcdb57 glib2-tests-2.68.4-6.el9.tuxcare.els2.x86_64.rpm 616c62d1f06910d4a6049f2ff193b96ac4df3941d53a7050bac8918e02c0de06 CLSA-2024:1730917387 TuxCare License Agreement 0 - update to CKBI 2.69 from NSS 3.103 - updated certificates: - # Certificate "GLOBALTRUST 2020" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Baltimore CyberTrust Root" - # Certificate "Entrust Root Certification Authority" - # Certificate "Certum Root CA" - # Certificate "Comodo AAA Services root" - # Certificate "QuoVadis Root CA 2" - # Certificate "QuoVadis Root CA 3" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - # Certificate "DigiCert Assured ID Root CA" - # Certificate "DigiCert Global Root CA" - # Certificate "DigiCert High Assurance EV Root CA" - # Certificate "SwissSign Gold CA - G2" - # Certificate "SwissSign Silver CA - G2" - # Certificate "SecureTrust CA" - # Certificate "Secure Global CA" - # Certificate "COMODO ECC Certification Authority" - # Certificate "OISTE WISeKey Global Root GA CA" - # Certificate "Certigna" - # Certificate "ePKI Root Certification Authority" - # Certificate "certSIGN ROOT CA" - # Certificate "SecureSign RootCA11" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "GlobalSign Root CA - R3" - # Certificate "Go Daddy Root Certificate Authority - G2" - # Certificate "Starfield Root Certificate Authority - G2" - # Certificate "Starfield Services Root Certificate Authority - G2" - # Certificate "AffirmTrust Commercial" - # Certificate "AffirmTrust Networking" - # Certificate "AffirmTrust Premium" - # Certificate "AffirmTrust Premium ECC" - # Certificate "Certum Trusted Network CA" - # Certificate "TWCA Root Certification Authority" - # Certificate "Security Communication RootCA2" - # Certificate "Actalis Authentication Root CA" - # Certificate "D-TRUST Root Class 3 CA 2 2009" - # Certificate "D-TRUST Root Class 3 CA 2 EV 2009" - # Certificate "CA Disig Root R2" - # Certificate "ACCVRAIZ1" - # Certificate "TWCA Global Root CA" - # Certificate "Atos TrustedRoot 2011" - # Certificate "QuoVadis Root CA 1 G3" - # Certificate "QuoVadis Root CA 2 G3" - # Certificate "QuoVadis Root CA 3 G3" - # Certificate "DigiCert Assured ID Root G2" - # Certificate "DigiCert Assured ID Root G3" - # Certificate "DigiCert Global Root G2" - # Certificate "DigiCert Global Root G3" - # Certificate "DigiCert Trusted Root G4" - # Certificate "COMODO RSA Certification Authority" - # Certificate "USERTrust RSA Certification Authority" - # Certificate "USERTrust ECC Certification Authority" - # Certificate "GlobalSign ECC Root CA - R5" - # Certificate "IdenTrust Commercial Root CA 1" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "CFCA EV ROOT" - # Certificate "OISTE WISeKey Global Root GB CA" - # Certificate "Certum Trusted Network CA 2" - # Certificate "Hellenic Academic and Research Institutions RootCA 2015" - # Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015" - # Certificate "Amazon Root CA 2" - # Certificate "SSL.com Root Certification Authority RSA" - # Certificate "SSL.com Root Certification Authority ECC" - # Certificate "SSL.com EV Root Certification Authority RSA R2" - # Certificate "SSL.com EV Root Certification Authority ECC" - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "emSign ECC Root CA - G3" - # Certificate "emSign ECC Root CA - C3" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "e-Szigno Root CA 2017" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" - # Certificate "Security Communication RootCA3" - # Certificate "Security Communication ECC RootCA1" - removed certificates: - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "A-Trust-Root-05" - # Certificate "A-Trust-Qual-02" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "CCA India 2011" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "SITHS CA v3" - # Certificate "ANF Server CA" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "StartCom Certification Authority" - # Certificate "CNNIC ROOT" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "CA Disig" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "IGC/A" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Juur-SK" - # Certificate "Global Chambersign Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign, Inc." - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "GTE CyberTrust Global Root" - # Certificate "Thawte Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "UTN-USERFirst-Object" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - added certificates: - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - remove duplicated certificate record: - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.69 from NSS 3.103 - updated certificates: - # Certificate "GLOBALTRUST 2020" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Baltimore CyberTrust Root" - # Certificate "Entrust Root Certification Authority" - # Certificate "Certum Root CA" - # Certificate "Comodo AAA Services root" - # Certificate "QuoVadis Root CA 2" - # Certificate "QuoVadis Root CA 3" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - # Certificate "DigiCert Assured ID Root CA" - # Certificate "DigiCert Global Root CA" - # Certificate "DigiCert High Assurance EV Root CA" - # Certificate "SwissSign Gold CA - G2" - # Certificate "SwissSign Silver CA - G2" - # Certificate "SecureTrust CA" - # Certificate "Secure Global CA" - # Certificate "COMODO ECC Certification Authority" - # Certificate "OISTE WISeKey Global Root GA CA" - # Certificate "Certigna" - # Certificate "ePKI Root Certification Authority" - # Certificate "certSIGN ROOT CA" - # Certificate "SecureSign RootCA11" - # Certificate "Microsec e-Szigno Root CA 2009" - # Certificate "GlobalSign Root CA - R3" - # Certificate "Go Daddy Root Certificate Authority - G2" - # Certificate "Starfield Root Certificate Authority - G2" - # Certificate "Starfield Services Root Certificate Authority - G2" - # Certificate "AffirmTrust Commercial" - # Certificate "AffirmTrust Networking" - # Certificate "AffirmTrust Premium" - # Certificate "AffirmTrust Premium ECC" - # Certificate "Certum Trusted Network CA" - # Certificate "TWCA Root Certification Authority" - # Certificate "Security Communication RootCA2" - # Certificate "Actalis Authentication Root CA" - # Certificate "D-TRUST Root Class 3 CA 2 2009" - # Certificate "D-TRUST Root Class 3 CA 2 EV 2009" - # Certificate "CA Disig Root R2" - # Certificate "ACCVRAIZ1" - # Certificate "TWCA Global Root CA" - # Certificate "Atos TrustedRoot 2011" - # Certificate "QuoVadis Root CA 1 G3" - # Certificate "QuoVadis Root CA 2 G3" - # Certificate "QuoVadis Root CA 3 G3" - # Certificate "DigiCert Assured ID Root G2" - # Certificate "DigiCert Assured ID Root G3" - # Certificate "DigiCert Global Root G2" - # Certificate "DigiCert Global Root G3" - # Certificate "DigiCert Trusted Root G4" - # Certificate "COMODO RSA Certification Authority" - # Certificate "USERTrust RSA Certification Authority" - # Certificate "USERTrust ECC Certification Authority" - # Certificate "GlobalSign ECC Root CA - R5" - # Certificate "IdenTrust Commercial Root CA 1" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "CFCA EV ROOT" - # Certificate "OISTE WISeKey Global Root GB CA" - # Certificate "Certum Trusted Network CA 2" - # Certificate "Hellenic Academic and Research Institutions RootCA 2015" - # Certificate "Hellenic Academic and Research Institutions ECC RootCA 2015" - # Certificate "Amazon Root CA 2" - # Certificate "SSL.com Root Certification Authority RSA" - # Certificate "SSL.com Root Certification Authority ECC" - # Certificate "SSL.com EV Root Certification Authority RSA R2" - # Certificate "SSL.com EV Root Certification Authority ECC" - # Certificate "GlobalSign Root CA - R6" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "UCA Global G2 Root" - # Certificate "UCA Extended Validation Root" - # Certificate "Certigna Root CA" - # Certificate "emSign ECC Root CA - G3" - # Certificate "emSign ECC Root CA - C3" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "e-Szigno Root CA 2017" - # Certificate "Trustwave Global Certification Authority" - # Certificate "Trustwave Global ECC P256 Certification Authority" - # Certificate "Trustwave Global ECC P384 Certification Authority" - # Certificate "Certum EC-384 CA" - # Certificate "Certum Trusted Root CA" - # Certificate "Security Communication RootCA3" - # Certificate "Security Communication ECC RootCA1" - removed certificates: - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Certification Authority of WoSign G2" - # Certificate "CA WoSign ECC Root" - # Certificate "A-Trust-Root-05" - # Certificate "A-Trust-Qual-02" - # Certificate "Certification Authority of WoSign" - # Certificate "CA 沃通根证书" - # Certificate "ADOCA02" - # Certificate "StartCom Certification Authority G2" - # Certificate "Macao Post eSignTrust Root Certification Authority (G02)" - # Certificate "Autoridade Certificadora Raiz Brasileira v2" - # Certificate "LuxTrust Global Root" - # Certificate "AC1 RAIZ MTIN" - # Certificate "CCA India 2011" - # Certificate "China Internet Network Information Center EV Certificates Root" - # Certificate "SITHS CA v3" - # Certificate "ANF Server CA" - # Certificate "KEYNECTIS ROOT CA" - # Certificate "I.CA - Standard Certification Authority, 09/2009" - # Certificate "I.CA - Qualified Certification Authority, 09/2009" - # Certificate "VI Registru Centras RCSC (RootCA)" - # Certificate "Autoridade Certificadora Raiz Brasileira v1" - # Certificate "Actalis Authentication CA G1" - # Certificate "A-Trust-Qual-03" - # Certificate "AddTrust External CA Root" - # Certificate "StartCom Certification Authority" - # Certificate "CNNIC ROOT" - # Certificate "Staat der Nederlanden Root CA - G2" - # Certificate "CA Disig" - # Certificate "I.CA - Qualified root certificate" - # Certificate "I.CA - Standard root certificate" - # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi" - # Certificate "Japanese Government" - # Certificate "AdminCA-CD-T01" - # Certificate "Admin-Root-CA" - # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3" - # Certificate "Halcom CA FO" - # Certificate "Halcom CA PO 2" - # Certificate "ACNLB" - # Certificate "state-institutions" - # Certificate "D-TRUST Root Class 2 CA 2007" - # Certificate "D-TRUST Root Class 3 CA 2007" - # Certificate "Root CA Generalitat Valenciana" - # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı" - # Certificate "ANCERT Certificados CGN" - # Certificate "ANCERT Certificados Notariales" - # Certificate "ANCERT Corporaciones de Derecho Publico" - # Certificate "Certipost E-Trust Primary Qualified CA" - # Certificate "Certipost E-Trust Primary Normalised CA" - # Certificate "Cybertrust Global Root" - # Certificate "IGC/A" - # Certificate "Microsec e-Szigno Root CA" - # Certificate "LGPKI" - # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado" - # Certificate "Staat der Nederlanden Root CA" - # Certificate "Juur-SK" - # Certificate "Global Chambersign Root" - # Certificate "GeoTrust Global CA" - # Certificate "GeoTrust Global CA 2" - # Certificate "QuoVadis Root Certification Authority" - # Certificate "Sonera Class2 CA" - # Certificate "VeriSign, Inc." - # Certificate "Microsoft Root Authority" - # Certificate "Microsoft Root Certificate Authority" - # Certificate "GTE CyberTrust Global Root" - # Certificate "Thawte Server CA" - # Certificate "Thawte Premium Server CA" - # Certificate "Equifax Secure Global eBusiness CA-1" - # Certificate "Equifax" - # Certificate "Class 1 Primary CA" - # Certificate "UTN-USERFirst-Object" - # Certificate "CHAMBERS OF COMMERCE ROOT - 2016" - # Certificate "E-Tugra Global Root CA RSA v3" - # Certificate "E-Tugra Global Root CA ECC v3" - # Certificate "Tunisian Root Certificate Authority - TunRootCA2" - added certificates: - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - remove duplicated certificate record: - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"

0 tuxcare-almalinux9.2-esu ca-certificates-2024.2.69_v7.0.306-90.1.el9_2.tuxcare.els1.noarch.rpm 1660c0251f2319f793935bfa88e812c3b74ba272f2f9f669c6f5a1d17943a58f CLSA-2024:1731001050 TuxCare License Agreement 0 - update to CKBI 2.70 from NSS 3.104 - updated certificates: - # Certificate "GLOBALTRUST 2020" - # Certificate "certSIGN ROOT CA" - # Certificate "ACCVRAIZ1" - # Certificate "OISTE WISeKey Global Root GC CA" - removed certificates: - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "Global Chambersign Root - 2008" - added certificates: - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - # Certificate "TWCA CYBER Root CA" - # Certificate "TWCA Global Root CA G2" - # Certificate "SecureSign Root CA12" - # Certificate "SecureSign Root CA14" - # Certificate "SecureSign Root CA15" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.70 from NSS 3.104 - updated certificates: - # Certificate "GLOBALTRUST 2020" - # Certificate "certSIGN ROOT CA" - # Certificate "ACCVRAIZ1" - # Certificate "OISTE WISeKey Global Root GC CA" - removed certificates: - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "Global Chambersign Root - 2008" - added certificates: - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - # Certificate "TWCA CYBER Root CA" - # Certificate "TWCA Global Root CA G2" - # Certificate "SecureSign Root CA12" - # Certificate "SecureSign Root CA14" - # Certificate "SecureSign Root CA15"

0 tuxcare-almalinux9.2-esu nspr-4.35.0-3.el9_2.tuxcare.els5.i686.rpm 0c1561a0af1499363176c5fc221592f4e81e2f01887cc60d2bfa1594efcc5a28 nspr-4.35.0-3.el9_2.tuxcare.els5.x86_64.rpm 54136482b19be6814704b4cb4d2ac46ed54fcef8c274c8a3146c4ebbad377b92 nspr-devel-4.35.0-3.el9_2.tuxcare.els5.i686.rpm 1fd26949f8f496414a8ae94acf9ff84a906763e623a16b80fc1b04fb5760e956 nspr-devel-4.35.0-3.el9_2.tuxcare.els5.x86_64.rpm 7355168f40e13af3048bfe3c9615adaa0b90bdd61f4cb7aeed3e7a306cf6bfb7 nss-3.90.0-3.el9_2.tuxcare.els5.i686.rpm 6ae453ed99f467416036a9dbb35ec5a39c303d12bcf44f83ec691561ac900c34 nss-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm bc4177124f09b6404ff74bd16dc8569af7b29b89be6b1a7f7b3ba48c060cc30d nss-devel-3.90.0-3.el9_2.tuxcare.els5.i686.rpm 215ea37c2ed17350f25c3a2bfc014b1ccbafc97ecc4bac099c5ad26dcc951dff nss-devel-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm ae406c3c45602aca04e50c51004b10ec5ee2ee0c996eea99f10640bfb8822776 nss-pkcs11-devel-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm 0470c4bda4e5363b0394abd6fa5e5a0ab2840f10eaae26ada6aebbc6f8428e15 nss-softokn-3.90.0-3.el9_2.tuxcare.els5.i686.rpm 5a3b719086e806e685a31c2369f7ca807fd8776a755727f4aae248215d54e0c5 nss-softokn-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm d90551058ca8dffd06a1bc8aa1a894713620b449cfcd3fe08eaade0faf0816ae nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els5.i686.rpm 945398bf49b63bca2e16b88ada1ece6b4d174097172cc4651c1293be62007a35 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm fc1305bcffa1bf1ff790379208b6f8e9679a75d205d8d49efb1b7f1e3d51a69c nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els5.i686.rpm 347e437b5341bb7e232f511b5c9400b8cd944fc1311415c5d258994dd2b07609 nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm 08e2cce091161a389a5c49d1833705166c80c02f1f68843da7223506b8ff9aa2 nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els5.i686.rpm 635081e9a7cbaa6f7535028b48261df012e2b7f93e093bcbffc92cdb4a78f0d8 nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm 0deae15ce45124f7bc9703eae1c863de1467b5378bf031755caec154418fc00c nss-sysinit-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm 20ba9359d2580ebd3493c49d26e8249192f85a0c3a0c7e2b9181d73038dc8cb6 nss-tools-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm a0dfe1b1c220435dbdcaff902d27b8a77f5faa00dd80d7b1f09a75935369366f nss-util-3.90.0-3.el9_2.tuxcare.els5.i686.rpm f29e69b514d389bdce0409c5e9b026922071f10039907590da0bc97cc87d48ea nss-util-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm ad271df86f49ec05e7052f11e0099c49b0f419eda4c29646c2a713d4db2b9800 nss-util-devel-3.90.0-3.el9_2.tuxcare.els5.i686.rpm 722e1660a61ec25254690b89b2f8a80fbe1cdda7bb7a05b229957fb5a0f0420f nss-util-devel-3.90.0-3.el9_2.tuxcare.els5.x86_64.rpm 0d012e3260d29a3431b1eedd9fd14319cf1b086cc93d626feeebd23a3f5ff885 CLSA-2024:1731933167 TuxCare License Agreement 0 - smb: client: fix use-after-free in smb2_query_info_compound() {CVE-2023-52751} - smb: client: prevent new fids from being removed by laundromat {CVE-2023-52751} - cifs: fix dentry lookups in directory handle cache {CVE-2023-52751} - uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067} - net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036} - smb: client: fix UAF in async decryption {CVE-2024-50047} - smb3: rename encryption/decryption TFMs - mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950} - mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858} - of: fdt: fix off-by-one error in unflatten_dt_nodes() {CVE-2022-48672} - filelock: fix potential use-after-free in posix_lock_inode {CVE-2024-41049} - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock {CVE-2024-41049} - drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - tipc: guard against string buffer overrun {CVE-2024-49995} - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698} - firmware_loader: Block path traversal {CVE-2024-47742} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685} - ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884} - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930} - net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978} - drm/amdgpu: Validate TA binary size {CVE-2024-44977} Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- smb: client: fix use-after-free in smb2_query_info_compound() {CVE-2023-52751} - smb: client: prevent new fids from being removed by laundromat {CVE-2023-52751} - cifs: fix dentry lookups in directory handle cache {CVE-2023-52751} - uprobe: avoid out-of-bounds memory access of fetching args {CVE-2024-50067} - net: do not delay dst_entries_add() in dst_release() {CVE-2024-50036} - smb: client: fix UAF in async decryption {CVE-2024-50047} - smb3: rename encryption/decryption TFMs - mm: call the security_mmap_file() LSM hook in remap_file_pages() {CVE-2024-47745} - ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701} - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux {CVE-2024-50073} - driver core: bus: Fix double free in driver API bus_register() {CVE-2024-50055} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - drm/amd/display: fix double free issue during amdgpu module unload {CVE-2024-49989} - ext4: fix timer use-after-free on failed mount {CVE-2024-49960} - Bluetooth: L2CAP: Fix uaf in l2cap_connect {CVE-2024-49950} - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit {CVE-2024-49950} - mptcp: pm: Fix uaf in __timer_delete_sync {CVE-2024-46858} - of: fdt: fix off-by-one error in unflatten_dt_nodes() {CVE-2022-48672} - filelock: fix potential use-after-free in posix_lock_inode {CVE-2024-41049} - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock {CVE-2024-41049} - drm/i915/gt: Fix potential UAF by revoke of fence registers {CVE-2024-41092} - ext4: no need to continue when the number of entries is 1 {CVE-2024-49967} - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation {CVE-2024-49895} - slip: make slhc_remember() more robust against malicious packets {CVE-2024-50033} - drm/amd/display: Fix index out of bounds in DCN30 color transformation {CVE-2024-49969} - drm/amd/display: Fix index out of bounds in degamma hardware format translation {CVE-2024-49894} - ext4: aovid use-after-free in ext4_ext_insert_extent() {CVE-2024-49883} - ACPI: sysfs: validate return type of _STR method {CVE-2024-49860} - ext4: fix double brelse() the buffer of the extents path {CVE-2024-49882} - tipc: guard against string buffer overrun {CVE-2024-49995} - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error {CVE-2024-47698} - firmware_loader: Block path traversal {CVE-2024-47742} - ppp: fix ppp_async_encode() illegal access {CVE-2024-50035} - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() {CVE-2024-47685} - ext4: fix slab-use-after-free in ext4_split_extent_at() {CVE-2024-49884} - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX {CVE-2024-46871} - ext4: avoid use-after-free in ext4_ext_show_leaf() {CVE-2024-49889} - wifi: ath11k: fix array out-of-bound access in SoC stats {CVE-2024-49930} - net: do not leave a dangling sk pointer, when socket creation fails {CVE-2024-40954} - net: sched: sch_multiq: fix possible OOB write in multiq_tune() {CVE-2024-36978} - drm/amdgpu: Validate TA binary size {CVE-2024-44977}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 822cd31546a763cd40d5a997696cea75bc9114f68a5c784e89038f4cf7a87da0 kernel-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 5398485ba60e87308623513bf4d2398dfc28b241aaabd5fb62293f28f91f1ad8 kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els9.noarch.rpm b40feb3e2d169c2589c660a9a8a4d03b85e3c6bbd175168f497274af5bfb111e kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm d8e0a971eff97f96c288af993cac4d97c9371913737fc0b173ecfc564804575f kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 9e526e1f283a37eab526bcc89a0584663de9d71f043d066a4c87d56b1a1fa00c kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm f1718202a992a5075522c4289e165b0280ced14d81dbc4e02ad85582b33fdfe3 kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 502a40140205c2a52ede512dba7f40a64e622c78f3f8ee5ab5a7d8b4300bc8bb kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm aae66db4a2ca28fa9d7be4ecf675ce72016ee888079b5be4b60ad8d3506417d1 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 1ab6dead428842c7dc42d51e12960afd4f561fa4390e4a249dc08cd6b0b5be79 kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 93ecd53fa6576d8c4c1824fc84604aadd59d3a2ad60e4e36b12067e5ad1bc20d kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm ece02db07c6bf6f434fe3091ffe2ab44e60f1de35233443bcfca075d8134cec4 kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 38044d1d8432d52decd802e0f7669408ff6d22adcfd57760c4c39e2d4d1071c3 kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 2bbf06f73d78574e9c13ae05f616c7c335cb87ceadd833b74ed60c83224acc43 kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 8b4afe33873fed76a411a5bb39c5ee19cdc4571c6ee9306e70a0a46c7801af30 kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm acea49242ecb0d7245994083710854c2c001e45ddc6615d0cfbcdcface0b0349 kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 7681df2ef67197d12972ea4e7b23814a36bdd190d300be343865b25f79d88d03 kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 8a45377376f9d3e1e617ca344f8d379a6c3f1442993d5aa766ec7863770195b5 kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els9.noarch.rpm a4c8c0e502641c20c083efb043850ff04485887690edc988cd1055cea531adc2 kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 90eecd59899d02ff16cd673d0088fccd84a8f7f420106f519452fa8a6142156e kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 38bacd1d9b7a19b6b198726f058fb6ecbc22f686a4b0c0e67b8401797104ea8b kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm c6cbbb7adb9afa266430c09e5b026d4f6decdd535b36f4fb9163dff0811f1fc9 kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm e34eac416a76ce19a37ade402cbb4f01803054acccec3264ec8702cf43e93b0c kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 4f7395ef1660ffc1bb8e98fc2a743279d57990c76ae92afa06e3a2468de72d49 kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 034861cd21dbb7f349b55744a9949910d089cdc924404f43209b047d776cac61 kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 1c31bf1b3cf0596d665bc2cc1a7696782e93c84fd0e950d0f43715a58367d105 kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 4422e75bc800eb5e318bf8d78844dda580ec2398625b51687a56741d9b5c21ce kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 76a5297c519fd120aaaac6ff5a9b419df00640f8a7400e9f341fd8cb7385f61b kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 52c97e67ddb2d3c1546598f4b733b2e210ea2c8512eae15a3ec531501354f350 kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 692ec5b8862dbad6f81df7bca74d415a75432e12655e4b472ba2b95ca19e74c9 kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 5a66b50856df7e0e61f9175d9ee9019f67e6980f1ea3591934f5076797b32162 perf-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 0504d1de738759ee77674f06f8e529fb0dbec0e56dbf5ba9849277b79e3ab15b python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm 3283eb192f2af1986d515303ce3b8e86ff64377cdad9a155b33fde61a35750b5 rtla-5.14.0-284.30.1.el9_2.tuxcare.els9.x86_64.rpm badda1ab9cf503c9a54357c54bd63e6662a9a9308bd1800d2041d5fb0808f078 CLSA-2024:1732194710 TuxCare License Agreement 0 - CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm afe0110a0006003e9dec3af074966b7519546374bfebe695cd104278cc83106b httpd-core-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm d6c9570f0ef3dfdebe5e08f867f8660bab2a0309553a8b30c8c3b8fff55da8c2 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm 246b7c2717af5fe6af395f2727584874b32db009f7c83c0d532d59bd0f3fdc46 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els4.noarch.rpm d8697f1195086b3731679e7717942c7731f4f6d7c75e8641680873efcc2c89bb httpd-manual-2.4.53-11.el9_2.5.tuxcare.els4.noarch.rpm fcd66362c062c17a81a33e16fb4d9f27dcc5feabf172d0fc4fed80e857ec41e0 httpd-tools-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm cb6588c815f1ac8db81d62ed051ca000509c6a31807271b62dc709878e846b3c mod_ldap-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm 87cdd099c97a22432e24a3643addbf9d8796684688add8ec8bada5f0ae85be44 mod_lua-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm ee56f199454a5823d1ab82ac4df45c2b3b0801b8eb46d0e5dd1bb37106cde522 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm cf1ecb9657b548d8b7a8c7e290021083f9eb4cdabc44d04c6a61483c2f56499c mod_session-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm 4233a739f7f518a49ff31a0b1a31e0ca6a075b337b357c3d79a6ad7dee49ce29 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els4.x86_64.rpm db961dfe640fd753a50a8bcaa549a67fd5c9df6524d77b466cba1bec5e607e61 CLSA-2024:1732195001 TuxCare License Agreement 0 - CVE-2024-26462: Fix memory leak vulnerability in src/kdc/ndr.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-26462: Fix memory leak vulnerability in src/kdc/ndr.c

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els5.i686.rpm 58bfda5680dd12dc008009b57ff162e1233a070494f56fbc205219a8d0772ab4 krb5-devel-1.20.1-9.el9_2.tuxcare.els5.x86_64.rpm 223965777791d6848b515a3f66084ca4baad432594cb7c36eeea78969b3e65c7 krb5-libs-1.20.1-9.el9_2.tuxcare.els5.i686.rpm 27ed552bc66a115a4d44bfe6cba2f52b843bcca9b077f522bf8480949c9f00cb krb5-libs-1.20.1-9.el9_2.tuxcare.els5.x86_64.rpm 01c117930349c745390e1cad658a935e52124c3ff3a3da2b57705ff269a9e444 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els5.i686.rpm 3981a92f1b8c13cac156152d590fb8ba843833a13a1591fec434f6b0d3982b91 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els5.x86_64.rpm 14a45c41ca090457c2f3cf40202015aae5fad15d305f19c44c9896541d777825 krb5-server-1.20.1-9.el9_2.tuxcare.els5.i686.rpm 92246ba2bf7819ee4a60139000be188012d24e982984b33505733846becd8ae6 krb5-server-1.20.1-9.el9_2.tuxcare.els5.x86_64.rpm e448dcb00e8b41e012caa7532151d0245a95c70b525b164b54f7111a3ed38ece krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els5.i686.rpm c18865b1bb2f43d102b75741f5741f7b86bf21515878a9ecbf3db7a78f229903 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els5.x86_64.rpm 09ab715ebf83c4e637eb2d10e6edfd158e8bd9e5ad5ddced9f214e0612bcb788 krb5-workstation-1.20.1-9.el9_2.tuxcare.els5.x86_64.rpm 31629f1f7ef8ae2c3620932f648400edad07ddb1786a20b94932d36df93cf177 libkadm5-1.20.1-9.el9_2.tuxcare.els5.i686.rpm 063f81f0094c4c9563359029ac3cc537600aacc6f531fef24e1db9fb5d99aea7 libkadm5-1.20.1-9.el9_2.tuxcare.els5.x86_64.rpm c368c0045b2b46c7c96e3b191fb8a4be5deccb6cc43958fb070cf4d402731c03 CLSA-2024:1732553483 TuxCare License Agreement 0 - CVE-2024-50602: Fix crash in XML_ResumeParser by preventing XML_StopParser from stopping/suspending unstarted parser Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-50602: Fix crash in XML_ResumeParser by preventing XML_StopParser from stopping/suspending unstarted parser

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els3.i686.rpm 89b04640b7a317aac8450c0cd11d769f03d9da4936b7ccfc592010feafa5fc36 expat-2.5.0-1.el9.tuxcare.els3.x86_64.rpm f5bbc69a3c1b7700dba5bf7b94b352c4eae7a71ed95e4ef756ca0c34ba051ce4 expat-devel-2.5.0-1.el9.tuxcare.els3.i686.rpm cc65bf29dad47e931dca1bf64ec653806149072aec0391c9807244632d904955 expat-devel-2.5.0-1.el9.tuxcare.els3.x86_64.rpm adc8bf66b7ff597fb935c3a91e7863466092949bb123c4a53f2bad2eadb0ab81 expat-static-2.5.0-1.el9.tuxcare.els3.x86_64.rpm 11d895aa8116599768c64614b91223224edf0ad4d1949fd3988afecd908b1f26 CLSA-2024:1732700855 TuxCare License Agreement 0 - CVE-2024-8088: Fix infinite loop vulnerability in zipfile.Path when iterating over zip archive entries Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-8088: Fix infinite loop vulnerability in zipfile.Path when iterating over zip archive entries

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els7.noarch.rpm 3c08bcb011a6867e5224a8b90344e988f2a6ef1c979c4b3c3374a6750c6f7f0e python3-3.9.16-1.el9_2.2.tuxcare.els7.i686.rpm 7c82bc514a875568622db4dd0b9bd514ecf2a0a829374b7a748278fcfa8fb9c1 python3-3.9.16-1.el9_2.2.tuxcare.els7.x86_64.rpm a82d41f7e09db2a21bf3c7cd00e14d7c8ab0c6893cd0ed84e2746f235771d4cd python3-debug-3.9.16-1.el9_2.2.tuxcare.els7.i686.rpm 05144a2babc416045faff4234615ce1ef97174bc3d29bd1ea8d523f34e108c65 python3-debug-3.9.16-1.el9_2.2.tuxcare.els7.x86_64.rpm a65dea249f73a3ff1c1531c5a87c74e0c0fcf2ca07bc9feec90dfd986b6e7494 python3-devel-3.9.16-1.el9_2.2.tuxcare.els7.i686.rpm cdd22662a95c67d9bf930dbf94d51eaf6a3da5b5da205f5781e5df43ff8177d4 python3-devel-3.9.16-1.el9_2.2.tuxcare.els7.x86_64.rpm 7af190fa06f0a55e894ad80babbeb41f7a29f4c0b998abda931ade24bfb9955e python3-idle-3.9.16-1.el9_2.2.tuxcare.els7.i686.rpm 6b156b6dd3b4e7f989f15a422d57773138abb3fe9e4382bb856e4f8a416ddf6d python3-idle-3.9.16-1.el9_2.2.tuxcare.els7.x86_64.rpm a410b4ff19f9d9a19273971cf7621c609a87defd7a66d084391b7e966a647278 python3-libs-3.9.16-1.el9_2.2.tuxcare.els7.i686.rpm d1dd7c65f2e5f286363e935d3ae67f10504dfe5dcf85e38653497facc5ad93ea python3-libs-3.9.16-1.el9_2.2.tuxcare.els7.x86_64.rpm 778e96ebe0c5dfd1f355908b763708b76422016792e8737ac24f8b867c42fed3 python3-test-3.9.16-1.el9_2.2.tuxcare.els7.i686.rpm b9e1d811d05ddc738499728b0e0c9681435c3e104531796e80e715ed2d0f3572 python3-test-3.9.16-1.el9_2.2.tuxcare.els7.x86_64.rpm 32b0dc31ae95175857a2b56a806d6b50af6a8c64858278d43db4aaf50172eb26 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els7.i686.rpm 7f84c77cd8ec9b93d1c5d2a2e45d05696ca55f6f4d9479e647a5dece541b06b3 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els7.x86_64.rpm 999d9f3b4117818ee5c39cfb9c53110ea043ee5a2079940c58719559aa7c15a1 CLSA-2024:1733141074 TuxCare License Agreement 0 - CVE-2024-26458: Fix memory leak vulnerability in src/lib/rpc/pmap_rmt.c - CVE-2024-26461: Fix memory leak vulnerability in src/lib/gssapi/krb5/k5sealv3.c Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-26458: Fix memory leak vulnerability in src/lib/rpc/pmap_rmt.c - CVE-2024-26461: Fix memory leak vulnerability in src/lib/gssapi/krb5/k5sealv3.c

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els6.i686.rpm 4a02e929f854f86eb3a4b624de21135db3b682d7d11eee1613eff8ac74e92b44 krb5-devel-1.20.1-9.el9_2.tuxcare.els6.x86_64.rpm 597afc649928bdaf2a5974e1463fc98622f03df3d502d07ed0603620c02da111 krb5-libs-1.20.1-9.el9_2.tuxcare.els6.i686.rpm 114375abbc694778405dc60279ed470531200662a2655721c449237b9a8b1278 krb5-libs-1.20.1-9.el9_2.tuxcare.els6.x86_64.rpm 5ab2de95f82fac513fc3f8cbbeab21740b8083756f97a9999e5157edd3b1db89 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els6.i686.rpm 622bd7ad55dce605bf5687b8a481c575bd3b0d7b3f252effd8bc5c77c7f451f2 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els6.x86_64.rpm 01281194a9f51c4ba2212a2355ea5453122aa71b34d3e6d2e9cb9dec353feb38 krb5-server-1.20.1-9.el9_2.tuxcare.els6.i686.rpm e6af18186f239e72d6e224f31e91be13935c888fac5dd2f1f7c12a2db0e0d376 krb5-server-1.20.1-9.el9_2.tuxcare.els6.x86_64.rpm 2c3d3f1f6540702acada9655ec8979e05d7a7669b64642839d5ab8d0d9fd7770 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els6.i686.rpm be0d7d285c0c5b9bc94abf03a56ad857aa59d7f049c863184aa22acd7fa9a594 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els6.x86_64.rpm 90aaccfb03f3307b11e88f742122bbf7e5d8289a586dc548695b34337979211b krb5-workstation-1.20.1-9.el9_2.tuxcare.els6.x86_64.rpm 439c22eff419224d374ca72264da38b3f02dc9c990b4d0bc1fbd927a47bbc5ea libkadm5-1.20.1-9.el9_2.tuxcare.els6.i686.rpm 2a0bc4f341658bd98c72165330a534641c67122d2eeb2d77c31d16656eb51fc2 libkadm5-1.20.1-9.el9_2.tuxcare.els6.x86_64.rpm c3b90cc9ba1bec72ff7619b1634cc44cb42125ee6433caeb0de6b95e411f4ea3 CLSA-2024:1733245575 TuxCare License Agreement 0 - CVE-2023-34241: Fix use-after-free bug in CUPS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-34241: Fix use-after-free bug in CUPS

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els1.x86_64.rpm 28442f10795f719d8e976f4f0f04e3e5e5460375e907bef152b82b66fc30030f cups-client-2.3.3op2-16.el9_2.1.tuxcare.els1.x86_64.rpm 3b5b377da31035b77cd23df9b64d53e644a17e7645c2b31d9fec9782f79bda6c cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els1.i686.rpm c764400e0280e18b27584270b62f79f086cec9cf0b8c7416e113e75b638dc21f cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els1.x86_64.rpm 9bb71462f8c2355ef55531194194404406f8770a6785d23e8544183c195b2f0d cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els1.noarch.rpm ef518ce7374ed8ce0aba4fafb70346b33d957c1c49b25323aff9cc2c34b447bd cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els1.x86_64.rpm 54ea7cf6726538242f9c4ebd0ff72e420e1cda4aa902e099ff437247787be1ca cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els1.i686.rpm 0f79c05936f431931ef5f7bbf6dff130c0b60102330173037b8a4669db8d78cd cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els1.x86_64.rpm 7c490080dfe977e8aad892086d1ef04c3b476ed4c9157b01246ebdc86f51dd04 cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els1.x86_64.rpm 82eeb9e5d805f2558a141f5f1b9c7a9b5704296a376f776c01f4c1a42c3b6475 cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els1.x86_64.rpm 4f9431888c0654872f58048c03aaeaf07657679486cf822c0b6b662a93e0e219 CLSA-2024:1733420952 TuxCare License Agreement 0 - CVE-2023-32324: Fix heap buffer overflow vulnerability in format_log_line function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-32324: Fix heap buffer overflow vulnerability in format_log_line function

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els3.x86_64.rpm 7ace5c77923e52dd666015a0044e39ee21304eb24412a7157ea44006c7eaaa88 cups-client-2.3.3op2-16.el9_2.1.tuxcare.els3.x86_64.rpm 242272a1fad1bd672497e48dcc44b9d2356f2801b1ad50d3beb4b5cf928707b0 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els3.i686.rpm 4d57649f95edc4c408b4046ff85b8c084d78ff9200ffff1b35338ec4a5048ab2 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els3.x86_64.rpm 6aad6593a7b4e6d541e2a205d79c2acdc9f6d3932a55dffb4ae5280a909ed4c6 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els3.noarch.rpm 83835bc907d94e79acfe644dff36dd2439153804b19ea0f6fda0cbd3ce644d6f cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els3.x86_64.rpm e868a67f8263738c014d18f45a980d9723556cb3b85c3794d1b637d830539c7c cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els3.i686.rpm afd4ae9995ab6ce43504fd8f287be7ab06f984603fbce823e9c991fd1cf16218 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els3.x86_64.rpm 313d90e4436ad58b7c0ff566b89260e1d05874be55889ca7c9cdb1e032ce7a8e cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els3.x86_64.rpm 9438cea90387f001152035192a1753cc26b7b8bfe6d8f82dde926b83594ae2a3 cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els3.x86_64.rpm d11dc3f27098c150dd82c1a7db074c4b2f8cb1c0018380739d0e427c6a1d28e5 CLSA-2024:1734531954 TuxCare License Agreement 0 - CVE-2024-35235: Patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-35235: Patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els4.x86_64.rpm ec9097aecb1e8cfc338e921bd7f4208c17c1e75189f72245f5cdee98125fee61 cups-client-2.3.3op2-16.el9_2.1.tuxcare.els4.x86_64.rpm 352e3072331479c3606244cb751b785efa4842fa406e1a083142bd463ec9e5de cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els4.i686.rpm 4663ec0ab1a477275aa321f180e18bcb773ff15fdaf744a4c6579d68fb31f637 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els4.x86_64.rpm 9c85a2783025c44a306971370b6de44548191bf5ed060ee1056cde93b33e5931 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els4.noarch.rpm 196dace8e987ed3f20e9412ee6487a76542af742aab264b908a161125c67916d cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els4.x86_64.rpm 5bc0dbe757981252c25ca7823fb6880a48eff270e2c4a4d2b8ed5e574a74a3f0 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els4.i686.rpm 084810a6ae911be42b7532e268b6a1005874932149ffdfad420428a723957c82 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els4.x86_64.rpm cb86af833342435365b60a05fff4b89f755430d899e0751e9b5d49b9a1a118f1 cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els4.x86_64.rpm 16582a7850592abac0bbf3d119b8741069bd148cfb61e98a56304b233614b604 cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els4.x86_64.rpm bc763ee2ce7cca6c0d6558d9d79942fbdd8177996db63b840df4500ba407265d CLSA-2024:1734532058 TuxCare License Agreement 0 - CVE-2023-50387: Evaluate DNSSEC responses to prevent KeyTrap denial of service issue. - CVE-2023-50868: Fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-50387: Evaluate DNSSEC responses to prevent KeyTrap denial of service issue. - CVE-2023-50868: Fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9.tuxcare.els1.x86_64.rpm 050e5c5e47de427ba78ca261e9ae95793e5a0a6b91ad76a11b2f4d91429815d0 unbound-1.16.2-3.el9.tuxcare.els1.x86_64.rpm bcea832589862eed3cc9265f582b3bf1e26af6ec09b498aebbad09d643a9ae01 unbound-devel-1.16.2-3.el9.tuxcare.els1.i686.rpm 24ddb3f85950dda8202bbb5c0f1968372d76927aaa1afcc1ea902d557fcec876 unbound-devel-1.16.2-3.el9.tuxcare.els1.x86_64.rpm f3bf995b4dcfbbc1d1dfd9f65597efbec4ee826c8ea2ae36f361815330eff454 unbound-libs-1.16.2-3.el9.tuxcare.els1.i686.rpm 2919d01cf683fc00a03e145703cf2b063d022717141df14c72db45433b1f4a54 unbound-libs-1.16.2-3.el9.tuxcare.els1.x86_64.rpm de5ff3bc8fefce766a62d09a23804b961c040670e46a36e4c43e35fbad9092c8 CLSA-2024:1734642829 TuxCare License Agreement 0 - CVE-2024-0450: Reject zip archives with overlapping entries to prevent quoted- overlap zip-bombs. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0450: Reject zip archives with overlapping entries to prevent quoted- overlap zip-bombs.

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els8.noarch.rpm 97a2ccfecbfec79739415119d913eb3db85b91c094e7086882f01a5438f5c300 python3-3.9.16-1.el9_2.2.tuxcare.els8.i686.rpm 35947439593f77c609c549471b97392ba0270174ca166cd5bbb88c05b2c00b38 python3-3.9.16-1.el9_2.2.tuxcare.els8.x86_64.rpm b3054da527d8082dfb15af25fa89416eb81b5f6717ea90f908116552c8c826a5 python3-debug-3.9.16-1.el9_2.2.tuxcare.els8.i686.rpm abaa2898e3d4807398bdf561a9a97c42dd02160ff23b72dbd5b11654ffc14906 python3-debug-3.9.16-1.el9_2.2.tuxcare.els8.x86_64.rpm f40e00cbb8acd2f78970ce36fc8564da3904361a3ad377437927e23bcf6c3c8c python3-devel-3.9.16-1.el9_2.2.tuxcare.els8.i686.rpm 6a324e48e7b8e9c01e0343aba5bdc5954c75af6f5241d7f79f3d868bd6059d32 python3-devel-3.9.16-1.el9_2.2.tuxcare.els8.x86_64.rpm 3578350c98dfbcc31f6cca43efff96857ac9633574bfd8493f6fee2f0966bcd1 python3-idle-3.9.16-1.el9_2.2.tuxcare.els8.i686.rpm e3a5ea8a58dde275a3589606c2239adf5397f538b7e9a2f13034de6a5aebade9 python3-idle-3.9.16-1.el9_2.2.tuxcare.els8.x86_64.rpm 2efe2c9a4e4685b63a08b1b79b1a3804b9b8716305fd79e4cb62168c6e21b2f6 python3-libs-3.9.16-1.el9_2.2.tuxcare.els8.i686.rpm 33c39d261cde889e5a829ffeaba9825c74893c600970691888647d3087d75254 python3-libs-3.9.16-1.el9_2.2.tuxcare.els8.x86_64.rpm 2e584971bc3798798ff59562c29c01c80fbbc317a3f8f647305d8ea58554aa89 python3-test-3.9.16-1.el9_2.2.tuxcare.els8.i686.rpm 6068c5fbe9a9648dd577a081fff1e730d1214300242783d6dd0b3aedb975bfbc python3-test-3.9.16-1.el9_2.2.tuxcare.els8.x86_64.rpm 22149582340abeaf5aa267de3602868ec405c6f7dd0b98b0801e4e5852cbe0b9 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els8.i686.rpm 6608f2f9ba8b18f6844153e361004e15ee23e375146349d9709039a48044b75b python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els8.x86_64.rpm 0c811f810a79fb5b4ef152543b4f1da269c2617f1d7b305b681c34aaf1012297 CLSA-2024:1735119353 TuxCare License Agreement 0 - CVE-2024-4741: Only free the read buffers if we're not using them Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-4741: Only free the read buffers if we're not using them

0 tuxcare-almalinux9.2-esu openssl-3.0.7-17.el9_2.tuxcare.els4.x86_64.rpm 08f415dbac377d1604e21f439042b0bee0dbc86bc7980b01dfe88244d5541c0b openssl-devel-3.0.7-17.el9_2.tuxcare.els4.i686.rpm 9007e2e91104a4d50c5c693a04d941d9351cb05e5b43a57fc36a0319807241c7 openssl-devel-3.0.7-17.el9_2.tuxcare.els4.x86_64.rpm 049c2b127f34d287254993db5b851028bef8947bf9f86136b9984509ec811776 openssl-libs-3.0.7-17.el9_2.tuxcare.els4.i686.rpm 11a83f7e177272ea216aef2b2934bf9142140e09b23dc5f9d6d6367ae258a546 openssl-libs-3.0.7-17.el9_2.tuxcare.els4.x86_64.rpm 9c4e1f6a29d95e5be43ecace6487fbf97abf0bff209f6a9e20bc055586be18c8 openssl-perl-3.0.7-17.el9_2.tuxcare.els4.x86_64.rpm dee78d5ba34a7035d67551b9d0d2de67db2f748d14cb7381b18486beb34448d0 CLSA-2024:1735121358 TuxCare License Agreement 0 - CVE-2024-4603: Check DSA parameters for excessive sizes before validating Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-4603: Check DSA parameters for excessive sizes before validating

0 tuxcare-almalinux9.2-esu openssl-3.0.7-17.el9_2.tuxcare.els5.x86_64.rpm fcd953c3f1df66ff3bb52046861137982ada6d3b868b88c93d95c1ae2124fb9b openssl-devel-3.0.7-17.el9_2.tuxcare.els5.i686.rpm 22edf009890ea69cece01c7b1c48bd800043f33b405f1728e8f9c458b6e3d074 openssl-devel-3.0.7-17.el9_2.tuxcare.els5.x86_64.rpm f29352e7746ee83e419bdff23eb6668d0c25b6be76aa69797ea2711b070d0c9b openssl-libs-3.0.7-17.el9_2.tuxcare.els5.i686.rpm 0f5195887fb333135779972c209d69924926ee68f5ff4d79ec54658caf77d89d openssl-libs-3.0.7-17.el9_2.tuxcare.els5.x86_64.rpm eb8ddbc9e1b5373164ec14c9658cd6fe0c5b2633f46fa8ea132ec875bda101c7 openssl-perl-3.0.7-17.el9_2.tuxcare.els5.x86_64.rpm 3f6352cd9f69a490c65010b5c5ffe3427f947887ae1a7700a4afc14a456f018f CLSA-2024:1735126310 TuxCare License Agreement 0 - CVE-2023-46724: fix validation of certificates with CN=* Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-46724: fix validation of certificates with CN=*

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els1.x86_64.rpm ce2f6248addda112bb871941fb727e85d91d575d88dedafe7a951815c356286d CLSA-2024:1735300164 TuxCare License Agreement 0 - CVE-2024-10963: pam_access: rework resolving of tokens as hostname Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-10963: pam_access: rework resolving of tokens as hostname

0 tuxcare-almalinux9.2-esu pam-1.5.1-14.el9.tuxcare.els2.i686.rpm 7f9d1995753a247a23a9c0062232e15aaee1e65feb06bce666fd3f2e3b2de33c pam-1.5.1-14.el9.tuxcare.els2.x86_64.rpm 7ba31e365207cb0461cf17eef975c80f918ec66710aec41602f4dc93318a39f8 pam-devel-1.5.1-14.el9.tuxcare.els2.i686.rpm fd256044cec98127edd42f77a481fe590254fb28ba9663645283cfea9116f083 pam-devel-1.5.1-14.el9.tuxcare.els2.x86_64.rpm 74ddcb4f8a2d5fb093a1458de41c194ca4b7b2c95f31c6512d5079151b9e9250 pam-docs-1.5.1-14.el9.tuxcare.els2.x86_64.rpm 4e303847fc80ee56916e177b93c9c9465367c5141e87b748a983305a4e6fa1ec CLSA-2024:1735311149 TuxCare License Agreement 0 - CVE-2024-2511: Fix an issue where some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2511: Fix an issue where some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions

0 tuxcare-almalinux9.2-esu openssl-3.0.7-17.el9_2.tuxcare.els7.x86_64.rpm 518e6e4525a648c28cf52f9ace487330fd08b7fbe33a245c92f8fd10ca392d8b openssl-devel-3.0.7-17.el9_2.tuxcare.els7.i686.rpm d8eeb72f55741131e21ee1fdbc12e4208aa0b6c81967b415f2b0938695f75e49 openssl-devel-3.0.7-17.el9_2.tuxcare.els7.x86_64.rpm 8aa91ec48acfd60c72c7e390aab01b79b36b083047999ef6602c7429f84452f2 openssl-libs-3.0.7-17.el9_2.tuxcare.els7.i686.rpm 593a0d43291498395b3d9af490034ccf5dea1a66b3a34df0be7f6bd78f2ae9d5 openssl-libs-3.0.7-17.el9_2.tuxcare.els7.x86_64.rpm 315feaf9544a97579f94b6c8f23c97ee1d94cd8e7dcdaf90ae03aa92cacbae06 openssl-perl-3.0.7-17.el9_2.tuxcare.els7.x86_64.rpm 0e3348d32d5537dce3f012be955f997317c57264d6a6fc865019dabbfd162561 CLSA-2024:1735311253 TuxCare License Agreement 0 - CVE-2023-5824: do not send serialized HTTP response header bytes in storeClientCopy() answers. Ignore serialized header size when calling storeClientCopy(). Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5824: do not send serialized HTTP response header bytes in storeClientCopy() answers. Ignore serialized header size when calling storeClientCopy().

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els3.x86_64.rpm 6efb79655d218d3178e6216bb741f30d126fc26ab4a7b1c1eb98903172d517b6 CLSA-2025:1736284126 TuxCare License Agreement 0 - CVE-2023-0836: Fix information leak vulnerability in connection buffer by initializing 5 bytes in FCGI_BEGIN_REQUEST record encoding. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-0836: Fix information leak vulnerability in connection buffer by initializing 5 bytes in FCGI_BEGIN_REQUEST record encoding.

0 tuxcare-almalinux9.2-esu haproxy-2.4.17-6.el9.tuxcare.els1.x86_64.rpm 72ec066ccd748c20a179d187839d44d0aa197cbedd0112ae0bc34ec05aea2254 CLSA-2025:1736503350 TuxCare License Agreement 0 - CVE-2023-40225: Fix forward empty Content-Length headers issue Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-40225: Fix forward empty Content-Length headers issue

0 tuxcare-almalinux9.2-esu haproxy-2.4.17-6.el9.tuxcare.els3.x86_64.rpm 1a91be1fe2b762e8a1663e97016ca2c60a0f1c68f5a1a58ada45de782959eff1 CLSA-2025:1736503464 TuxCare License Agreement 0 - CVE-2024-9287: Fix improperly quoting path names in virtual environment creation to prevent command injection in activation scripts Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9287: Fix improperly quoting path names in virtual environment creation to prevent command injection in activation scripts

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els9.noarch.rpm 9af5a41ec7e7ac1ee3895c69b62d6a4d5a797e1ae5b726dafc2bc5b296b4a298 python3-3.9.16-1.el9_2.2.tuxcare.els9.i686.rpm ebab28964157c6e15cfd980e48dcc5e0efb8e6ed064b47dc393144bd1fa8da54 python3-3.9.16-1.el9_2.2.tuxcare.els9.x86_64.rpm 51fb4f93a67d517ae9a12fd6daea45e9ab65915a730bc4efa816dc71924529c4 python3-debug-3.9.16-1.el9_2.2.tuxcare.els9.i686.rpm 5c77402685a905e0ee52a87c61df0a43de566333c061b9826fdcebb0e3a2b40d python3-debug-3.9.16-1.el9_2.2.tuxcare.els9.x86_64.rpm 35b1165c38a8545d00ee88f05067c44bfbf6c157bc323c8de563c41c94b946df python3-devel-3.9.16-1.el9_2.2.tuxcare.els9.i686.rpm f2534ffb655f0c82da447fed8014109d111b3b58a0842bfa70f2a29885b7c513 python3-devel-3.9.16-1.el9_2.2.tuxcare.els9.x86_64.rpm 9f2df98d5e732b1f1546d7977085700781c913ec1c38793c18f4408f0f5ad3c3 python3-idle-3.9.16-1.el9_2.2.tuxcare.els9.i686.rpm 65f5927ce6f55e0964f69f5c9a0e1a554f071e821fef3b839a17b58bd8a43114 python3-idle-3.9.16-1.el9_2.2.tuxcare.els9.x86_64.rpm 9ead57737c871d80f13b0f52e169095f39bfe5c7db2051eb6ffa2eb3f9ea3ce6 python3-libs-3.9.16-1.el9_2.2.tuxcare.els9.i686.rpm 69c412d4636faff80e20c42ea5c8a1dfaa1d7dd433e41ccb00f0dff55e82c486 python3-libs-3.9.16-1.el9_2.2.tuxcare.els9.x86_64.rpm c1c71520b36c5d5b6d9495f1e7a62328877809d5f50b07710060c71d49e8eaad python3-test-3.9.16-1.el9_2.2.tuxcare.els9.i686.rpm 9136242cc85f00953f95c93e966c042aaaad858ba7d4f8741440951115ea5305 python3-test-3.9.16-1.el9_2.2.tuxcare.els9.x86_64.rpm be2ab8757c95549118db642eaee1ee8f2f0c43541c80ebd3b0ca1ec8bcbf3996 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els9.i686.rpm 4c57abcab7040e59a48d45945805ccb4be9d78943f1ad72918ba83c59898044d python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els9.x86_64.rpm 561338387e23241108a71749e2338305325ed394cdcf3f893a0db8891e11f738 CLSA-2025:1736503631 TuxCare License Agreement 0 - CVE-2023-49285: Fix Buffer Overread bug to prevent Denial of Service attack - CVE-2023-49286: Fix Incorrect Check of Function Return Value bug in Helper process management - CVE-2023-50269: Fix Uncontrolled Recursion bug in HTTP Request parsing by limiting X-Forwarded-For header size to prevent Denial of Service attack. - CVE-2024-25617: Fix Collapse of Data into Unsafe Value bug to prevent Denial of Service attack against HTTP header parsing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-49285: Fix Buffer Overread bug to prevent Denial of Service attack - CVE-2023-49286: Fix Incorrect Check of Function Return Value bug in Helper process management - CVE-2023-50269: Fix Uncontrolled Recursion bug in HTTP Request parsing by limiting X-Forwarded-For header size to prevent Denial of Service attack. - CVE-2024-25617: Fix Collapse of Data into Unsafe Value bug to prevent Denial of Service attack against HTTP header parsing

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els4.x86_64.rpm 8e7945267f665de8c559a5d2978df2dbe7a947d2ecd77f1370cb5fe79ec0e52d CLSA-2025:1736503760 TuxCare License Agreement 0 - CVE-2024-8508: Limit number of name compression calculations per packet to prevent CPU lock and potential denial of service Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-8508: Limit number of name compression calculations per packet to prevent CPU lock and potential denial of service

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9.tuxcare.els2.x86_64.rpm 126ce4b23cbd150d64092f5e41ca27a2641f2014b0962ebb53222b4252baec40 unbound-1.16.2-3.el9.tuxcare.els2.x86_64.rpm 373c5a49a3a20a8c9e69945226609c6fefa38fd676616af6311d95ba40fb3abe unbound-devel-1.16.2-3.el9.tuxcare.els2.i686.rpm f20c964b3682e9a95a1d3fb0e40e4ebb52d8c1e3d3946e8e67c5d50677361f43 unbound-devel-1.16.2-3.el9.tuxcare.els2.x86_64.rpm 7f89f697d2d6913f676da7daccfd73872920a53ddd513352f5a7d424b5b48814 unbound-libs-1.16.2-3.el9.tuxcare.els2.i686.rpm 5be931a16225684afbb01dba42c734b85403168ea8e8238f19702bd15fd40a3f unbound-libs-1.16.2-3.el9.tuxcare.els2.x86_64.rpm 097db0a75622390eb197d7bfb7fbf0caddca8ce5fe6235557213e3d87b0c0653 CLSA-2025:1736856534 TuxCare License Agreement 0 - CVE-2024-9287: Quote path names when creating virtual environments to prevent command injection in activation scripts Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9287: Quote path names when creating virtual environments to prevent command injection in activation scripts

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els2.i686.rpm e0eac85f768300d3bdb5da4ab3dddeb03806b7d1cc8b5c2a7aad74c364317615 python3.11-3.11.2-2.el9_2.2.tuxcare.els2.x86_64.rpm b5bcb0d7a122f04860ea752d6c5120ba4e1e61249ecb4445d7bfa14bfec70b77 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els2.i686.rpm 1cffa6e3738c4a2099ea4a2491f1e8b129251afb9f62715ce803ac190b63668c python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els2.x86_64.rpm 60a31de0a10d6d9a325aa1f0e4db8ba15a1bfcee9135b5aa8e04440be8586be6 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els2.i686.rpm b1e0ef9fd07284bb4123671fbac684dc92ada5a943185555cc18d34d267188eb python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els2.x86_64.rpm c9f3dc7e1ca5517fb47f21a59a68b80ea43e8b2ab6cdf5fa903352be08e84fb9 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els2.i686.rpm 3f4ac434c47a2ec0226bcd32e05300d65766b16319eca77412e0ba39bba73de4 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els2.x86_64.rpm 7370da8811b705143d30c4bd968957b6cb1d6e43503a891296d693a70dc1d924 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els2.i686.rpm 321b9406d2a2851621831e5029621c355289c3ddf8009bdf5ded044d18fbfc15 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els2.x86_64.rpm 426a4f501671c35a2c87d04947b1062229cf91c809ba2e825eb460da6c9e5dab python3.11-test-3.11.2-2.el9_2.2.tuxcare.els2.i686.rpm 1a6113d1cf8eff86ca5f25ba71f8e9c040fe64241bf53549de599bebf5b79d9c python3.11-test-3.11.2-2.el9_2.2.tuxcare.els2.x86_64.rpm 31a9569938b8ebf308094127259520cbb22ecea0d19400002d6ee5a2cbec1201 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els2.i686.rpm ee024abf27ff01da5e0336389bc1e1189d491f771c81c5d75ee41965e4317b1e python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els2.x86_64.rpm 8b0c1facf80d3817197588095491fcd21ef8558ee53e343022cbe5aa90779645 CLSA-2025:1736859209 TuxCare License Agreement 0 - CVE-2024-2236: fix timing-based side-channel vulnerability in RSA implementation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2236: fix timing-based side-channel vulnerability in RSA implementation

0 tuxcare-almalinux9.2-esu libgcrypt-1.10.0-10.el9_2.tuxcare.els1.i686.rpm 69e10b4ebdb0f013d4d32d7f6f8f2094c46a4f7566ef4e518c699f2cf1fa4736 libgcrypt-1.10.0-10.el9_2.tuxcare.els1.x86_64.rpm ed64fe938553d8688ddaddf94480361637822012a580b160e364d84fcc5aa7fb libgcrypt-devel-1.10.0-10.el9_2.tuxcare.els1.i686.rpm 1ba663d6b14fd6864aa224b9d01863c75a48541ed5f066419006576ab6b68a3b libgcrypt-devel-1.10.0-10.el9_2.tuxcare.els1.x86_64.rpm 78e7e0d79104fac592c6303e0c443550d60517fdb4fa1cc4e29266db59a8e117 CLSA-2025:1736860159 TuxCare License Agreement 0 - CVE-2024-23638: Fix Denial of Service attack against Cache Manager error responses - CVE-2024-37894: Fix Out-of-bounds Write error when assigning ESI variables Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-23638: Fix Denial of Service attack against Cache Manager error responses - CVE-2024-37894: Fix Out-of-bounds Write error when assigning ESI variables

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els5.x86_64.rpm b508b216d54a0694bb57c2593a1974d2bd0263a573cd2e3439f5f94ad2f5fe60 CLSA-2025:1737023462 TuxCare License Agreement 0 - Fix CVE-2023-3961: fix path traversal vulnerability when processing client pipe names connecting to Unix domain sockets within a private directory Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2023-3961: fix path traversal vulnerability when processing client pipe names connecting to Unix domain sockets within a private directory

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 5129c3789e116b8b784e3d216909d020b60230b920a64cd06d910b13b81252c1 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm 1547fc1131c084f17bb3b8a46ecb48e0d16744856953c848c4df796589647c39 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 4e57ca8154a4d7f27f8f17fc51bf1558e3fc2dddec624628937354331dd5edca libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm 3fa84025fc0c8f0468c305c5f39b6e3217d33983dd3e36e7d21158d47aad6126 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 8a9857f1123b0fc7ce0f1f685deea2c6ae03a6951ae97c0a46ae21e5230c694c libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm d1340142398211f1c79b34c740a3f7ebae958c68431fd1b3612484bef25c5204 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm de4ff915f9b98b64ac081379ea4ed65dd28422b0e6fc094f48b0c6ca4dd40103 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm 8d7f315d21c2b2bd8cbf65c9ae1a20adf53aa45c432d23083489b1d2ded55c77 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm ecbbe9e442f066719937495c7bed9ba0fc4474fde8f02691a6c6e3524ff10dd3 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm c9f2a8a3b8369879822778e2ebe2f4c96412276123474c1f77519a2af20bbee0 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 397b02d8105cded3d4a5c7e54dd66858cf7222c9fc9bca91f7133cfa0c8f70e4 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm 59761c3e7e0907c16caa5c29f6393938aa9014bdffeaae10caf2c6012a49d7b2 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm fa19546f29fbda332c62d0b0cc80337dd3a4d14ef700a6075caed24096ec46a3 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm b9b952d5fb0d23a11fd6949dac9f2425b445739f3f43a878e9ca3fa73bf996b1 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm b9312d83244f4bb385f76e4a0e4131fe95dcf726c8efe4b7618207d35ac3c495 python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm d48d205c4ea3a63f4556de30be815c0b8f5290d38fc37400e0f6ee51f612e742 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm 453667afce6de504bb151270060dde5dfb211829bac1c2571bfbd5f6a31bbdf0 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm db5284b285aee7c2fbab3108a03036f77a156e93decf94a78655dafa5238988c python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 171f633afc2ebf3e5e0e0682db880d349fa15897e7d387b014374f89792031f8 samba-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm ba859f2300ff4c3bcbda18e71d87a7cd1db9ad2d63a2f853b8190f03a07f7edb samba-client-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm a8507e0aa09add246e0126dc05d9c216808b6d8c72e98a072746c76469c2f21c samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm d64d98b177d2bd8e5b9601d522f791563699f6bec7a3184e93dc622358fac853 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 21828a095907ec44f688aaca652502a9394b8df84a002c115dcf5f6dd680f945 samba-common-4.17.5-103.el9_2.alma.tuxcare.els1.noarch.rpm 7a95b5a30fbeb09854855b70157c201b4c40dd0c7c93f822acc6f95e28fb98f7 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm 9c99216a8f0e8904ad520171cedc4854219c27f8caa13059c2eb6071c0159d18 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 4ebff7d3f3ee249fd3f66af2c5b6e46d9c6d1fe612d272b0eea12a86619e07eb samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 9fb7b431d021f85faab0bef83637f2eccb757e047dd9ec0aad71a7b44c2320bf samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm f74146e60ae735174986413de9bcfb1b297f4230dd28ace88a330c00fd90630d samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 217c4c9ea73506f0e0f8f84d12124af4da56cef5e5f1d41d2c471e2e59c021fa samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 2ab555d932095526d0927a00c93e92a61dbb276e91ec9830d8d90af83ed28919 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm 7ab518536be825b7957aacd13d2c82b242d1dd21562e3be5d5528ccb5ae3ab18 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm f1fa88675f6ef1c347030615f2f789e364bcb9ccc99a70e9fa9621347c49c1d3 samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 6040447a68327c6c028a49e368342e217a236ae605e02ce41e7f915ffe6b9cbf samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm d3634268ca4b4bda0cced217d0121f90829fd79a16af37e357a63c9e18f55212 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm 99b8f3fa80b676cce90fd445138dfa1b06c1b1696d4d0765dbcd10a81135279e samba-libs-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm af2c4585064356924491cd773622878d8740c6d0ec2e66702cdc2780141fb680 samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els1.noarch.rpm 4a931e0660798943efa76f98fe5f91b1803e578316f135f707f40efdb90a1fb0 samba-test-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 6c361e13e8b79ac6984c322753c451c11e54568b4f0c786749e64da276bcf76f samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm d890baf2fefe209d0d28edc1b80b6f15b83e9f8557abc93e155650ecdaeffc83 samba-tools-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 192a7b7c5586be5c0d83bd201b4a0c04017eb1499e063e6957edc245bd2bc93b samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm e4b4d4e33633b341a1dae3fc79908567a52f05421c751beb2f120e85b0275a58 samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 81132e472ffbb799829d36ef7153b7523fb8b8a4eff8e16efaa22b1fa5cef794 samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 8cc910a6be2244aa40eb89f99db132d0af8ea19ddb6810fba9d5651dbb045d9f samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm f03aa47995fb64961e5af4b764c15974c2cf4d36e7258b077c90b19ea5c4bfa1 samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 3ab73387a33d822a47f0df3cb6019d9f9a24ed72c17330bd3f127b7d1f16727e samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els1.i686.rpm fcf2d5c76fb6dfd1fe6641271bd7bcf41f6752b4347852e8251c6160b9fbae04 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm 4f6ce9e946d3486d4f23d49a33f7712bbca5f85d55810ccbb318188d7361696d samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els1.x86_64.rpm ac647bc53e8eaf927f98cd9d27ceb7c6c6d95e05d3810a4799947e2a62cb146c CLSA-2025:1737024110 TuxCare License Agreement 0 - CVE-2021-3903: fix invalid memory access when scrolling without valid screen Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3903: fix invalid memory access when scrolling without valid screen

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els1.x86_64.rpm f918a7d1380bf4912e5330be9f08054d0ab8b004c286685fcffce087fed6a6aa vim-common-8.2.2637-20.el9_1.tuxcare.els1.x86_64.rpm ccad8ff0a1adafd2df4bfc254e8e6e1ed3561135e0f3cc75c776a6f21b9cfe5c vim-enhanced-8.2.2637-20.el9_1.tuxcare.els1.x86_64.rpm 9cd3ef5c395a98418a2df359200b99cd1d906623ced6bd9ea6b66e520f880c0f vim-filesystem-8.2.2637-20.el9_1.tuxcare.els1.noarch.rpm a2d1f0807f83d233d9a933a7399a74ad39f3949ea8b05569de32aa7cc6366934 vim-minimal-8.2.2637-20.el9_1.tuxcare.els1.x86_64.rpm 66d9842668988b50405eb70f7fa632092a4d1f243f6b80bf0a57dbf689ecbfa4 CLSA-2025:1737024983 TuxCare License Agreement 0 - CVE-2023-0288: prevent the cursor from moving to line zero to fix invalid memory access with folding and using "L" Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-0288: prevent the cursor from moving to line zero to fix invalid memory access with folding and using "L"

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els2.x86_64.rpm 58bbc50fb5bcea6a83e4f1897b260442266898b2c5251102444cf65346b48635 vim-common-8.2.2637-20.el9_1.tuxcare.els2.x86_64.rpm 036f82ff7715ed6038c170094fc22e5e351199e7d8b4ad5aee8c484083b32df3 vim-enhanced-8.2.2637-20.el9_1.tuxcare.els2.x86_64.rpm 0a0359ec2eccddd7b4d5ffa9b9b8f68360ae9cede2f012b197a1411b1650c06e vim-filesystem-8.2.2637-20.el9_1.tuxcare.els2.noarch.rpm 5282aea2cb011ab63c54859c696f78de3b24d50300b92b9f2ad4ce0d948f7848 vim-minimal-8.2.2637-20.el9_1.tuxcare.els2.x86_64.rpm d080584cd097b274060d941d8c51d7b9b3e9983b1894b959718ffece65d2b3bc CLSA-2025:1737153672 TuxCare License Agreement 0 - CVE-2024-32002: fix submodule paths to not contain symlinks Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-32002: fix submodule paths to not contain symlinks

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els1.x86_64.rpm 191b54a7eba3475179d67591c5185a588986df570123af10fb2972e2caac4627 git-all-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm a78a63bda5d8ae19517a25f6ef074d7363b364c80c0c581177e0e2526a868a1d git-core-2.39.3-1.el9_2.tuxcare.els1.x86_64.rpm 82847fa2d9575ef30c8e55a55b9bb7b892e4f94bb8533ac53bc668cc15b4049b git-core-doc-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm 39aedb32862a49ca6aeda9f7a870d25cd63f596f8c6fb83ebf6ed8eb3125ceb5 git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els1.x86_64.rpm 674a8266679397fa3a4859960526d04f644825d04a3a2e33cd55f688b6893ee0 git-daemon-2.39.3-1.el9_2.tuxcare.els1.x86_64.rpm c5d643b06b527e8eff8a413acbdf60d69ae4b8dab7bb0e9dfa0bbedbf60e0fc0 git-email-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm a080782d7508c3b2af62c1ae50e468bf1c2c88a747f94214f0a17189c996fceb git-gui-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm 037505e679354515c8d31e8338fc7e39ec83f1cfdbd618825129c7dcf5216daa git-instaweb-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm 638c954c67d35a9436c42ce3ae36900538bc4e71cd18e6048b0075be0ece5e3b git-subtree-2.39.3-1.el9_2.tuxcare.els1.x86_64.rpm 99e128640d66826f6ebc78a00a3dbbc72493f5d2437fdc88f4fba74e39971825 git-svn-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm 2f8dcc2bb8ab371f47bce66e36e0a5648d6a67e6e4d5b962c791065b4e3cda12 gitk-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm f0c4356e20427c5015ece301d1c1619ee2cb91f3bf530e2cfb1561a4ab31a47e gitweb-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm da1c9e2c28d9c50030c7685198d83f4ec1920e2ad5a7149a8888589b71234ade perl-Git-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm 081258b6d55018595d5a7bf0ab91c986ac703b04244d84b1e4dcfe3e3d31228d perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els1.noarch.rpm 35e440ee3f98c3bf1cec354ea5dc4069d3e0bfb17ec657c434886f18b37de56a CLSA-2025:1737153872 TuxCare License Agreement 0 - CVE-2023-0433: check for not going over the end of the line to fix reading past the end of a line when formatting text Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-0433: check for not going over the end of the line to fix reading past the end of a line when formatting text

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els3.x86_64.rpm a582c7a0c39ddcc59cf73d1389d1ad5e4d16003c9776691330df2e264d954c07 vim-common-8.2.2637-20.el9_1.tuxcare.els3.x86_64.rpm 68600f846e8284445edfe959c9fd188cb652b14e41e115bb5a714c3c2eee281b vim-enhanced-8.2.2637-20.el9_1.tuxcare.els3.x86_64.rpm cfb485b36e74864a4b10894ab4ee088df27d5ab30d14565e8d464cc65e99235f vim-filesystem-8.2.2637-20.el9_1.tuxcare.els3.noarch.rpm e5568382c7dc3253abad6844d246c49f8dd9ba5839a485924c84955c5924cfdf vim-minimal-8.2.2637-20.el9_1.tuxcare.els3.x86_64.rpm 804a58947b4a4845271fa625b215d56522aabaddb880059ac7aa0337a8b161dd CLSA-2025:1737155612 TuxCare License Agreement 0 - CVE-2024-32004: fetch/clone: detect dubious ownership of local repositories Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-32004: fetch/clone: detect dubious ownership of local repositories

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els2.x86_64.rpm be38d359f6819eb960b84bd1b507d55ae32d2a16b09fb8798a9ce897edd3c7f9 git-all-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm 8ac3545d7ad76ed532a14693ab284643b1afa68cbba0d9755446cb94615e10b0 git-core-2.39.3-1.el9_2.tuxcare.els2.x86_64.rpm 93dd86c99fe57689f4bb8e4e488c7f1e9136fbb620c9fbd60c8fd73d53243d1b git-core-doc-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm 3066686f8eb633324d0792c25819d337895f730f0c414a0585329a1e77e88a17 git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els2.x86_64.rpm 7307ee4ec09a21f22f7539c02d6e79a1595df9875f218bdbd9a0d0182f5b12a1 git-daemon-2.39.3-1.el9_2.tuxcare.els2.x86_64.rpm 9ebb38786b40b3c5bc0951a975f2a423d5fa32c6e12964f8bae5ba5e978d28a5 git-email-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm ebe01130dc1c3325f0eb7724e02dc0773136b16e6ec852079e12fecd0811444c git-gui-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm 5915dc9e5ce5616bdfb7a0083b94b5c10a99df2bbe8632e1725d4a21b6b32dd3 git-instaweb-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm 441bae08b8f4fd520bb6264606fbc03611297f6e84bad512c3caa8ef1ec7b6ba git-subtree-2.39.3-1.el9_2.tuxcare.els2.x86_64.rpm 7249f3847b662780e6fa6f43655691e558525cf98db3ef3784edb60f0f1bace3 git-svn-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm 8a8014b074ccaca4898dc5823c6821c7a37c1870fd299c8a26250a4117bdfa56 gitk-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm 87810b9b3c710590045b939a0dfb9ba0a295b82e92938a56c739eae72a9171d7 gitweb-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm f896a29b9698509294c2a7ed24f3f4d53001242260c0be113765c9e955b66124 perl-Git-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm 58b9f4a4e9147ae9d080006588e04ddd06bebc512ab9719b5f980fe01a081748 perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els2.noarch.rpm 256b042fb632c60f2c3412b8a77cdf30746e050c05d41688549e79808fe8d325 CLSA-2025:1737156361 TuxCare License Agreement 0 - CVE-2024-32465: Fix issue allowing protections to be bypassed when obtaining Git repository from untrusted sources Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-32465: Fix issue allowing protections to be bypassed when obtaining Git repository from untrusted sources

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els3.x86_64.rpm 35e16ab3b093a464b45c6cf98d19e6587eb456ce84d50426c53ad2361ef9a55c git-all-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm b8b80b40ec5ed87af77577a6ae42ee242a7cbd37911bcd1869e51d0a36558a6f git-core-2.39.3-1.el9_2.tuxcare.els3.x86_64.rpm 71cab0a6ef0e58bf90d97d19b615a27850ea29d7c110f23f50dbdf6c8d0483ce git-core-doc-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm cc342762079f9eb298bde705de36bfa772fa7e7e1d2f84c63865c5131741b2bc git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els3.x86_64.rpm 605498a8e1ee4b66597e9cece0a9852875da865a543666b7487d08381a88fec7 git-daemon-2.39.3-1.el9_2.tuxcare.els3.x86_64.rpm 079813e9cf00d21a6c8384af2e0779228d78c911f04a975d67028f9b96ea5a1d git-email-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm 6679fefe67213c32cd6a1dcc82e12804d5cd8206faec22ebdaa1035f8326ce02 git-gui-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm c811ca9440cae916b05d30fecf660f5f88b8081e6a95af42f95a583483cb9266 git-instaweb-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm aac7caf97053b09528a7c3bb26de6c22a995e84a649be25802e96fa6cfaf2def git-subtree-2.39.3-1.el9_2.tuxcare.els3.x86_64.rpm b7015ccf0387c67b5ec4416016edabe20329611c932325197b319e703fe5d04d git-svn-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm 2959389b187b84b295d80b60dd85e4df5bc446e8c5646c65e7206d29af0d2ac8 gitk-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm b69201b76658198e6236b6eb0689e784bdfeab48c755eca79e5616ce1a163d24 gitweb-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm febab3d39bdb0f4f3a832b02d83147d56470a572c8b19c56b8f28e7eaa318d86 perl-Git-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm a6b3619a9a4e5ff46925f778e30bae4e0975ed51345f15d8d1eb5acfc4e9933c perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els3.noarch.rpm cfb82d0576a09948275df833ca1d56280b56b32955335644b260939b0387f244 CLSA-2025:1737471798 TuxCare License Agreement 0 - CVE-2023-4751: fix illegal memory access when using :ball - CVE-2023-4734: fix crash caused by int overflow - CVE-2023-5344: fix buffer overflow - CVE-2023-5535: fix use after free Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4751: fix illegal memory access when using :ball - CVE-2023-4734: fix crash caused by int overflow - CVE-2023-5344: fix buffer overflow - CVE-2023-5535: fix use after free

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els4.x86_64.rpm 909b1a625583264648f857cd5021aaaf181c49443479b7917cd0cc8e957a384f vim-common-8.2.2637-20.el9_1.tuxcare.els4.x86_64.rpm 80949c5335c74b277cf4b9933d18b524488931c3915f8833fdf02a9e959c81e9 vim-enhanced-8.2.2637-20.el9_1.tuxcare.els4.x86_64.rpm b497062a641b62aea4fef0a9fcf2b7c627a2bf05fda09255d4dc1215bf94b7c2 vim-filesystem-8.2.2637-20.el9_1.tuxcare.els4.noarch.rpm 4cfcecf8eba1e6eb1e8ca0dd9669fc72ae9915852ff074a5da09a1608f6e6228 vim-minimal-8.2.2637-20.el9_1.tuxcare.els4.x86_64.rpm 11eef256efcba1d826022a06a931f6fe65a001f0dd5f12c7b5df4151258abce9 CLSA-2025:1737654382 TuxCare License Agreement 0 CVE-2024-38286: fix DoS vulnerability in TLS handshake process Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

CVE-2024-38286: fix DoS vulnerability in TLS handshake process

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els1.noarch.rpm 6965c809094b52511304b5603b829758d92dd9acb9fca30cfc25eb28dad681f3 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els1.noarch.rpm 5d69eccd3c2f3d0a7f746d0bf8ff4c95907799f24ea63f77ff445ee056b4478d tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els1.noarch.rpm d00ca69d7e0bd1b5f285de228ae70cd65edd8060f91223521f3608dbc1bff78b tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els1.noarch.rpm ad0b8b4e1daa42bb9a0eea15e3dbe7854f72d53e1129c1a27f1d8749d824a05f tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els1.noarch.rpm be114dd70a5142835f4bc0298bfb5e9621f808dec7a1a43c1f440f08efd5b968 tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els1.noarch.rpm 4709b6b3f5e79d79f9e4db4b2178c63e8430e9f806d69465b3ab1f1457e74001 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els1.noarch.rpm 815b47eb948ee19b5862e251e8cedf3d8e028d0b4a68040a7da60df512213f86 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els1.noarch.rpm a856b716dd596ce2754ef889dfe3809ff7794732d66394242d10e72c7b974c04 CLSA-2025:1737655662 TuxCare License Agreement 0 - CVE-2023-4733: fix use after free vulnerability Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4733: fix use after free vulnerability

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els5.x86_64.rpm 7ae342d39e661490895709b34308ce5f30a49cc86553dfa8f800df21d243adf0 vim-common-8.2.2637-20.el9_1.tuxcare.els5.x86_64.rpm 556209eba58985d5961955079dcd880a6a0032dac4ef103e3d0f04a5f2ae606c vim-enhanced-8.2.2637-20.el9_1.tuxcare.els5.x86_64.rpm 33b237c81400ba006028992ea6f244c53ba3c2b05783704a92b7ce91cf4777f5 vim-filesystem-8.2.2637-20.el9_1.tuxcare.els5.noarch.rpm e92cf3901f3b0ceaa2dc9ad371b4a3e1e00b4fde8d1192996abc7858189fe208 vim-minimal-8.2.2637-20.el9_1.tuxcare.els5.x86_64.rpm 2bf380b628f19d7695735fdef572a9194fe31ba40cbb7f96008be2cb1c683889 CLSA-2025:1737993115 TuxCare License Agreement 0 - CVE-2024-12085: Fix issue where checksum length manipulation could leak uninitialized stack data during file comparison. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12085: Fix issue where checksum length manipulation could leak uninitialized stack data during file comparison.

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9.tuxcare.els1.x86_64.rpm 561da55f6fca6ad25a265ff4fc60180b2694cc923c766c4706783e1f9f9572c2 rsync-daemon-3.2.3-19.el9.tuxcare.els1.noarch.rpm e380e444ad4219ae0a36418d79f540dab8693bb3496039a0fa40f55bc4cce8be CLSA-2025:1737993258 TuxCare License Agreement 0 - CVE-2024-34750: correctly count the number of active streams Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-34750: correctly count the number of active streams

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els2.noarch.rpm bac3a8165d4e2cdc9edf9316348e03af309eab7cc9145db4f520da4eb05f18f0 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els2.noarch.rpm 8f09f03985a4e8cad45ff13815e8a5aa0387214c337b96c862cdd496f8ac1b63 tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els2.noarch.rpm 0aec0e2a9afa93b179427be9785f6d633dc5cbba02698ad0748d83cc09191286 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els2.noarch.rpm 82e8c8c47bcabbe57b035ec2e3c21be43ed36a6a6782e91ad81d842a0f39e07e tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els2.noarch.rpm a7d3704438576c0c22d82f37dc3087b5f0b2191b31ca713790a86043534a00bc tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els2.noarch.rpm b6fb96bfeada8957fd6c1835a3df81aed5468f1b4989c8ed1f6589e883d9de67 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els2.noarch.rpm d18597951db271b53c5a07fb8a5cbd85d9446f37ab3570fe040631b4fd847223 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els2.noarch.rpm c72f2b62152fdb6379886fff2eb55bf7582da8771d5964699f2d58755e3ad927 CLSA-2025:1737993483 TuxCare License Agreement 0 - CVE-2023-0049: fix invalid memory access with bad 'statusline' value Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-0049: fix invalid memory access with bad 'statusline' value

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els7.x86_64.rpm ce33b94a92e5993da0906267060d458b41681e7e292e26415b91256ead1fb6ce vim-common-8.2.2637-20.el9_1.tuxcare.els7.x86_64.rpm 8d118ab44a52e68ac4efe500da920635a79317bdca8dc1371d2cbf6380611a0a vim-enhanced-8.2.2637-20.el9_1.tuxcare.els7.x86_64.rpm 7ea892518209cf31cc0d48e1d0652087b8b13578f48f07d29dff48ca9abcbb6d vim-filesystem-8.2.2637-20.el9_1.tuxcare.els7.noarch.rpm 89bd2b96f1dc999c9bdc270eae6f1faa28162e6a85ca4b62187899dae2536e58 vim-minimal-8.2.2637-20.el9_1.tuxcare.els7.x86_64.rpm 681a67c2121180da99c047fafb80929d0ff9e4106e9a08aee7800bff84681148 CLSA-2025:1738170016 TuxCare License Agreement 0 - CVE-2024-1488: make sure that only the unbound group is allowed to modify the configuration Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-1488: make sure that only the unbound group is allowed to modify the configuration

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9.tuxcare.els3.x86_64.rpm 8ee6b94e2a25c5ba77dd375b1defb63bc560b0809806ead9a87b8f431e1eec98 unbound-1.16.2-3.el9.tuxcare.els3.x86_64.rpm bc56b9aa32b7148c3f220087ac472b7ffee7700931f9260feab27ddb7da9ea1d unbound-devel-1.16.2-3.el9.tuxcare.els3.i686.rpm f58dbcf1a62d634429bb7741b53caa65707fd78a0a78d0cc708798011d06c021 unbound-devel-1.16.2-3.el9.tuxcare.els3.x86_64.rpm f80b128d92e8dd74ad80cdcbe9c0546de6e981dcc1d2c5ed9fa5747af7e6ea17 unbound-libs-1.16.2-3.el9.tuxcare.els3.i686.rpm 1350c3ad6166f4838416d58374932e442150a6574e4f3b087168f7e3b9083b5d unbound-libs-1.16.2-3.el9.tuxcare.els3.x86_64.rpm fe5277c9c17eb4faea83d08b07a9190eb9c1cfef657aedd381e7c66048f70a61 CLSA-2025:1738170565 TuxCare License Agreement 0 - CVE-2023-2610: limit the text length to MAXCOL - CVE-2023-4735: don't overflow buf2, check size in for loop() - CVE-2023-4750: check buffer is valid before accessing it - CVE-2023-4752: validate buffer before accessing it - CVE-2023-4781: disallow exchanging windows when textlock is active - Drop the patch level in version.c to the original one Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-2610: limit the text length to MAXCOL - CVE-2023-4735: don't overflow buf2, check size in for loop() - CVE-2023-4750: check buffer is valid before accessing it - CVE-2023-4752: validate buffer before accessing it - CVE-2023-4781: disallow exchanging windows when textlock is active - Drop the patch level in version.c to the original one

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els9.x86_64.rpm bd2ce004d2cebf73a3cbeac1917037d8aeff582f5ace691f0df5334e47293282 vim-common-8.2.2637-20.el9_1.tuxcare.els9.x86_64.rpm 2f1b96a12d62e24ee07120393eaba6f47246ba98ff7d13c1f8c07dc5057bf47f vim-enhanced-8.2.2637-20.el9_1.tuxcare.els9.x86_64.rpm 4db30adf7e1bb3f24a93510f983ab4f15ac0d372e121ee8bbd1dcf5f599c38fa vim-filesystem-8.2.2637-20.el9_1.tuxcare.els9.noarch.rpm 2396fdea63420aba98e34eb7d6a7abe9c3dd72c6b37b22760adccf15cfd1e3ea vim-minimal-8.2.2637-20.el9_1.tuxcare.els9.x86_64.rpm 9aeb01bbcfd31471bc3ab580b6bff4e156f13df63e73696e9f0af64c096382cd CLSA-2025:1738266573 TuxCare License Agreement 0 - Fix CVE-2023-34967: fix type confusion vulnerability in Samba's mdssvc RPC service for Spotlight Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2023-34967: fix type confusion vulnerability in Samba's mdssvc RPC service for Spotlight

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 0facfc174707bb0d682371d3bed7e3f4a9888c575e9c752aafaaed8e0cb521ef libnetapi-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm a25aeae743e025c1a88ac02e5643cd07890c8b6a5f644671007032116e014cb4 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 4d05d0633e79b72a2f29fcc2d8065a158834626475ae12c0aeb4198e59e94359 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 7a1d288254fcc1c755ccd764c5e12b0bcb1d287a8c7d656ca14c152c1f657e25 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm f4a3f49bab1befd64a5019da455941a07d3861ee0814734244e988a7b41661a1 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 3c0a132521a65e6762f2960a9247840cbb2945f2a11fcd1a67af1eca40eb07a2 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 47520453eb0da85ac7c34d9e9bf1ec105d3cc92a99c9b1fafca75c65e4ffc21d libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm a32045d30f80183132a25a03cbe918bd98e6e59a5df6ebf08260579c022f6ad0 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 861359bb8cb410c5dfbdbd391150d03c568513f381868ed75d0df100bfc51e8a libwbclient-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm f6c98a408b618273f319b80d3081ea30a5e7c7ce78c20b1be542845e87ab0f43 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 3d29e9c33b2bad69925cb61c83af8c0d12870d5ec5a06929a1b05081b0b5e8ed libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm b6cc561534dfc89925f58dae9569e2c3fdf1a68c412227475fc934ba7ddee437 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm fc923be8bf406bd7ef592b069342e002e0616aed9e0708682502f36d2031c09b python3-samba-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 683ab95ca034f3dcff86c7a1e25d04fc4887dfa6b3428c6382437caa8683f803 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 9719a2c7bdd2b98c4819ef0b29f9df915cee553b644a0580da9d82020a87a740 python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 49aff1fce460bf9283be188f1f86d3ccae8e47edd925e147b39c54d698e9fd95 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 002b1fc34890791d3c535b2d4887fb5c01608fe08146927d0fdaa21663b8ba21 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm c5c699272d00bc5bf3cc996e74c60cb7ecde4b2c890683bfe6a0ee4e289d058d python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 1a125c415bd19976f78f2ffef2bc91204bf3bd667ae4336c6efdc043df7016fa samba-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm ae0779d892ac01e1b9f0772dee415530a57227ef664bd37d98a7b8f564b41484 samba-client-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 7b40f86396517776fe5bd1b33b8e7eac37eec81c34d2724c780e4feb45e5f9fc samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 2d2b31215c3b257dab4bf09351dfe7b784a1cb6d53c2c2846f54caba3233641d samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 8765f84658877b09de27079c2e8740ccccccb1093d1ef95a838d4e507c5caa35 samba-common-4.17.5-103.el9_2.alma.tuxcare.els3.noarch.rpm 54803bfc236168fc7fae61f85bf6014cc860dddb0a210fb6f5334053593d0c6c samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 907e836cfa834f1655f269574116a36ffea8e9e027b873d1ad5ad125d90e272b samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm db04d500941ee584d11bfd5c235cf3c8d1290a2f61f7a5a6ccfaf1cb44764953 samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 106f94b5ca7328e28daea42a6ded5417d176ad75cd25076006d7914c90c12754 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 80daafd35baabd080c2c73c19c4d001739942d896969f37154f1f0db34a58d88 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 80af553204dbd507d07d8bd9d4453a48d5ef054882ba8c170f2664a263a20f1f samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 52d4f485cd3c42d314c1be08494c4a7b0db44b753277efaa3c9cffb3a1bbbeab samba-devel-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 38df2f268256f96566a4661234d5873e7c6b688a9c00313971df1a6e87fafec7 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 0aa703b1643c296c422f4445eac840dbfad310728949c85d500bd2e99ffca163 samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm e1961effce3b4cfe6df2d1eeeb6d3a4329b3cb41c8a21c75fd2475467faf333a samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm bd200c2416cd1d9605947bcef0037d11792d148231bb614dae367bff29f64888 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 492971f9cb8c97a6ae3e7ea3990fedd593f31bc7e85f70721d4c06736f3fec94 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm b4b78d856c79c765b3d0f6de0f15d6065d5e5e6c1027aa364f16fbab29af1fa7 samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els3.noarch.rpm 5270037c001c58fbb6aa5cc8493eee82fcb760093ce5b89ed5a0e51c15e0d864 samba-test-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm dc417ba2ddfd40b7f84f3bcf4fd3798f2f320c7292034028411c2b75d5a5e966 samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 5538888e35de5e05133a3873a0d5356400c9409e0ec481566db60d23d7fe0989 samba-tools-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 9143248e86708f9ec052de0fd216f9848f6f5f4c72362be5301c9e4fb3de59b1 samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm d874728b91568ae5baa45404b8dea608698582cc6b633e21e47edfde326cf8a8 samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 10dc40d4fc61f7847e77efdd5ac0411fd399f4a69169d6bf4b5991448eecbb7f samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 99a72b7fb2ebafd7e8b7eee829a24525a64f3a12b9518dae185ed77b2e911ae3 samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm f81e457d0b271806a3ee39c94caed727463a99f07459f07b91fb135c65dc7e94 samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm c079904f08591a002f6aa737a60ab60a1834b1b8c824e857950c0412de8a3e8e samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els3.i686.rpm 2f83092cdf8b780a1f8da1b8bb9410bad2b74f4eef9d78352351009fbe5d9564 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm 62b5d3b7d71c6c87215257f90afada530642372241a6aa5921255bf1149bfa0a samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els3.x86_64.rpm af8b8ae97229601bbaa905996fd36efd22461f1a5c99dff491a93acf2868c8b1 CLSA-2025:1738267482 TuxCare License Agreement 0 - CVE-2023-51764: Improvements for inbound SMTP smuggling defense. Reject or restrict input lines from an SMTP client that end in bare new line. Replace each stray <CR> or <LF> character in message content with a space character, to prevent outbound SMTP smuggling To prevent the SMTP smuggling vulnerability, the option "smtpd_forbid_bare_newline = reject" must be set. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-51764: Improvements for inbound SMTP smuggling defense. Reject or restrict input lines from an SMTP client that end in bare new line. Replace each stray <CR> or <LF> character in message content with a space character, to prevent outbound SMTP smuggling To prevent the SMTP smuggling vulnerability, the option "smtpd_forbid_bare_newline = reject" must be set.

0 tuxcare-almalinux9.2-esu postfix-3.5.9-19.el9.tuxcare.els1.x86_64.rpm a1684dcc97c8e330635b9fc23a1533ffb6610e422778ed8e2463b75272279585 postfix-cdb-3.5.9-19.el9.tuxcare.els1.x86_64.rpm 6ee36cd406f1f73dc693e772f619b50e2c82ca9bc3631621c4683f3e64fbfe29 postfix-ldap-3.5.9-19.el9.tuxcare.els1.x86_64.rpm d70314854db7e543ac2cfbb047f2fe4ba3d2fa65b4d6e8c5e971e3dcfe0f4f24 postfix-lmdb-3.5.9-19.el9.tuxcare.els1.x86_64.rpm e16bcb454d94a895fc7279637d6845342f9daa72edbc94e2af08a34ea2058581 postfix-mysql-3.5.9-19.el9.tuxcare.els1.x86_64.rpm b0594dd137dc720aacf35ee1d559f5f60294a788a59fb395c581efd807f0d5d3 postfix-pcre-3.5.9-19.el9.tuxcare.els1.x86_64.rpm 4cdefcbff8ad2494552bf4f3f47dfddab053ddf4b9882abf86f87419320b497e postfix-perl-scripts-3.5.9-19.el9.tuxcare.els1.x86_64.rpm d328ad3b6e32cf1260f98514a16698749b6bbfbae39e6427de57a5ba5ecbbc11 postfix-pgsql-3.5.9-19.el9.tuxcare.els1.x86_64.rpm 5a56f02635e651d1db047e8d9f5e39fcbfce23c82cde7213457f684f6bc199bd postfix-sqlite-3.5.9-19.el9.tuxcare.els1.x86_64.rpm 393e86794d0c5dcc9a7ca4f80668410a8f11965008324bf6bd6d1e2806300309 CLSA-2025:1738671431 TuxCare License Agreement 0 - smb: client: fix use-after-free of signing key {CVE-2024-53179} - smb: client: stop flooding dmesg in smb2_calc_signature() {CVE-2024-53179} - smb3: fix oops in calculating shash_setkey {CVE-2024-53179} - cifs: return correct error in ->calc_signature() {CVE-2024-53179} - cifs: secmech: use shash_desc directly, remove sdesc {CVE-2024-53179} - cifs: replace kfree() with kfree_sensitive() for sensitive data {CVE-2024-53179} - xsk: fix OOB map writes when deleting elements {CVE-2024-56614} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103} - scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631} - EDAC/igen6: Avoid segmentation fault on module unload {CVE-2024-56708} - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl {CVE-2024-56662} - net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - Bluetooth: msft: fix slab-use-after-free in msft_do_close() {CVE-2024-36012} - Bluetooth: Fix support for Read Local Supported Codecs V2 {CVE-2024-36012} - Bluetooth: hci_codec: Fix leaking content of local_codecs {CVE-2024-36012} - blk-cgroup: Fix UAF in blkcg_unpin_online() {CVE-2024-56672} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602} - net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 {CVE-2023-52818} - bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit {CVE-2023-52519} - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-56642} - cifs: Fix buffer overflow when parsing NFS reparse points {CVE-2024-49996} - Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475} - PM / devfreq: Fix buffer overflow in trans_stat_show {CVE-2023-52614} - PM / devfreq: Rework freq_table to be local to devfreq struct {CVE-2023-52614} - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() {CVE-2024-41057} - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() {CVE-2024-41058} - [ELSCVE-37480] netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() {CVE-2024-41058} - memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988} - Bluetooth: ISO: Fix UAF on iso_sock_timeout {CVE-2024-50124} - Bluetooth: SCO: Fix UAF on sco_sock_timeout {CVE-2024-50125} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout {CVE-2024-50125} - Bluetooth: Consolidate code around sk_alloc into a helper function {CVE-2024-50125} - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() {CVE-2024-35861} - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() {CVE-2024-26754} - smb: client: fix potential UAF in cifs_stats_proc_write() {CVE-2024-35868} - smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-35868} - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531} - x86/alternatives: Disable KASAN in apply_alternatives() {CVE-2023-52504} - bpf: Fix out-of-bounds write in trie_get_next_key() {CVE-2024-50262} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2024-27043} - media: dvbdev: fix build warning due to comments {CVE-2024-27043} - media: dvbdev: adopts refcnt to avoid UAF {CVE-2024-27043} - spec: '--with lts' to create packages with '-lts' suffix ('kernel-lts') Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- smb: client: fix use-after-free of signing key {CVE-2024-53179} - smb: client: stop flooding dmesg in smb2_calc_signature() {CVE-2024-53179} - smb3: fix oops in calculating shash_setkey {CVE-2024-53179} - cifs: return correct error in ->calc_signature() {CVE-2024-53179} - cifs: secmech: use shash_desc directly, remove sdesc {CVE-2024-53179} - cifs: replace kfree() with kfree_sensitive() for sensitive data {CVE-2024-53179} - xsk: fix OOB map writes when deleting elements {CVE-2024-56614} - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer {CVE-2024-53103} - scsi: sg: Fix slab-use-after-free read in sg_release() {CVE-2024-56631} - EDAC/igen6: Avoid segmentation fault on module unload {CVE-2024-56708} - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl {CVE-2024-56662} - net: inet: do not leave a dangling sk pointer in inet_create() {CVE-2024-56601} - initramfs: avoid filename buffer overrun {CVE-2024-53142} - ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150} - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() {CVE-2024-56604} - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() {CVE-2024-53156} - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() {CVE-2024-56605} - Bluetooth: msft: fix slab-use-after-free in msft_do_close() {CVE-2024-36012} - Bluetooth: Fix support for Read Local Supported Codecs V2 {CVE-2024-36012} - Bluetooth: hci_codec: Fix leaking content of local_codecs {CVE-2024-36012} - blk-cgroup: Fix UAF in blkcg_unpin_online() {CVE-2024-56672} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() {CVE-2024-56602} - net: inet6: do not leave a dangling sk pointer in inet6_create() {CVE-2024-56600} - NFSv4.0: Fix a use-after-free problem in the asynchronous open() {CVE-2024-53173} - net: af_can: do not leave a dangling sk pointer in can_create() {CVE-2024-56603} - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 {CVE-2023-52818} - bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664} - ceph: prevent use-after-free in encode_cap_msg() {CVE-2024-26689} - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608} - netfilter: ipset: add missing range check in bitmap_ip_uadt {CVE-2024-53141} - HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit {CVE-2023-52519} - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). {CVE-2024-56642} - cifs: Fix buffer overflow when parsing NFS reparse points {CVE-2024-49996} - Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475} - PM / devfreq: Fix buffer overflow in trans_stat_show {CVE-2023-52614} - PM / devfreq: Rework freq_table to be local to devfreq struct {CVE-2023-52614} - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() {CVE-2024-41057} - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() {CVE-2024-41058} - [ELSCVE-37480] netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() {CVE-2024-41058} - memcg: fix possible use-after-free in memcg_write_event_control() {CVE-2022-48988} - Bluetooth: ISO: Fix UAF on iso_sock_timeout {CVE-2024-50124} - Bluetooth: SCO: Fix UAF on sco_sock_timeout {CVE-2024-50125} - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout {CVE-2024-50125} - Bluetooth: Consolidate code around sk_alloc into a helper function {CVE-2024-50125} - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() {CVE-2024-35861} - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() {CVE-2024-26754} - smb: client: fix potential UAF in cifs_stats_proc_write() {CVE-2024-35868} - smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-35868} - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans {CVE-2024-50264} - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT {CVE-2024-53057} - wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531} - x86/alternatives: Disable KASAN in apply_alternatives() {CVE-2023-52504} - bpf: Fix out-of-bounds write in trie_get_next_key() {CVE-2024-50262} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - media: edia: dvbdev: fix a use-after-free {CVE-2024-27043} - media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2024-27043} - media: dvbdev: fix build warning due to comments {CVE-2024-27043} - media: dvbdev: adopts refcnt to avoid UAF {CVE-2024-27043} - spec: '--with lts' to create packages with '-lts' suffix ('kernel-lts')

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm aea27d47fc938e4cb36cb5120235662e80a59f3446806896eba8eed4aca7b1f6 kernel-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm c9592a084393654a6f1dd63c66d9a8e659bce2b63399e684d00814a80bed659e kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els10.noarch.rpm 8f42c4b842ecb9e3d1508583a22c2d817924aec3eb7d1b152113dad595bf6813 kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 8d9820d3fb3005406fb7f63fe417e7d299e6912405a16ac315f8594b1d722c80 kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 1934cfea8f380c2019bec41f282f6489ac7821beb7a015063cdb7bee35ddb32a kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 079b3f52beff837aeaec1319c127ad49f8b3ddd6269cc76c0ea661a7a75e4404 kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 5dfbffd05eb5b1153d3b98f37080fcbe648c61744015b0c3cadd7252e7964200 kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 555e5fad4727df033f8887518ccb1330ddb05aef4d08262b70f301af3587fb69 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 8078d5a15c4923cab196099a2881b1e3ec698481e55ea272098f91ed4c4f373e kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm c098fed1c020585ab4760915123399e00a0f6cd0a93668fd0c89a9d54d3d64f8 kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 67831ff485e3cdd38c5d5c5244646e837450f84c78a94911352faddc5b285818 kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm a098362fa90a9d64787b8cbd4c0fbd1e706e389c1911f0fd8f115e9c268006c8 kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm c35ccf9b8ae10ba201650a4352a0876c42ddfa2f271bb3d3e5efb7e8615ac2c9 kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm ed0b4f30791cba72bc7443d840f7271412253263204da6cf80e21929dcb5e145 kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 72a2e4d4c50519974cbc8e50f39d053c7726fbedee64dd955f603097324c9b49 kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm cd677924f4584c7a3b8e6fc01816bcaa4fad90928cbd1f26310b63ba332cda3b kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 40896c8a316c86ecc3188c7f3458d2a9982452dba31f52d28ff0f23fd75ec2ae kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els10.noarch.rpm 71824c3bbbc492b28fb81b21fd59eee431f4e5652c320b0e82f50e9142d618d4 kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 595530823651fea07dd11ea7eae3b9fdc2580f52aebcc1c1e1ddb77daead8a52 kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm ba819adf90a52c79bf1afb1ebc0b7474941c8bb722c3fc8e7dc8a0808c0714b1 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 9f245b3b617f5b1954d1be390f429e3d6fa721d352f9bd420c1b8e70fb3e81f7 kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm f994895a72a9ff58818a09a012aa410f367a11d8106c54891003ad7c559f1fb2 kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 387d78f3979a35002a3fdfb3f5c2f06891de52dc19b4e163ac1bf6aa54eb66a7 kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 5f5549ee4c52068f186ebd1a5bbcb5980412704ec7bea63b63e0d9567d86fd89 kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm baec887f21780ab04669f4fdb00ce464e060d898bbb72b39ec086fa6db73db75 kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 990da76bc2df6e6deca5f5452e39539bf60ae1df20f557be2be09097215bcfc3 kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 8354659b9b9a4f0f634bc28949ebbac6051c3a36b4556db8ce0c680046665e55 kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm a8531a996c82fda7ee27fe66735c22bc3f6b897715d72665bc9195334cca4c56 kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm ac8d0a8d41169e7965a0002c5ff520bb6e275b84250b81271081e692069c34e3 kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 077c9d98c9dfe4478c7beaba9bd7c03dc104ffcf3c7e4ad90abb09dd070bcb23 perf-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm 3bd40d2972be728839d3c4984b033e3af55f2e6da8f158028c0cb848adff9476 python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm bb83aa88a41650ffdfc8128a477ce5a7babdefe36134601cf0d328502eef3627 rtla-5.14.0-284.30.1.el9_2.tuxcare.els10.x86_64.rpm f0ed041e39aea77ac0e81c090eb1342af8586a411a4a58e661f61645045cb6db CLSA-2025:1738691753 TuxCare License Agreement 0 - CVE-2024-2756: fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2756: fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm f11260a477caee603230766fb37be855860fa5fcc9f1c6158e72041fa45f8bac php-bcmath-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 8bcc1c068952b1fa2943a0d64a6175c8103f85b89fce266d1929a8c6370ca67f php-cli-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm b1cda6ba41dedbcdfb2992d56d9dd1af5acfb3dd1c74fec7ebb0633f885bf378 php-common-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm fd564dba222c4692f91a5b9d726b9791a699dd197497a22deb6ba28db2fa63e3 php-dba-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm c35195df9da9448af4625531cc0164660c2e35418b430040635ddd4546aea9b7 php-dbg-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 01f203786a0cae40268aa807385cebb694f3197237c82174dde08f3ac7f17bad php-devel-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 3914394ba0832b56701f6e3f6976be568828b0b805d29b3cac3ea227b64779fc php-embedded-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 40506619552387fbfa3adc0dd6b609e329b06ea286b74ea1edbf94a040f3e65c php-enchant-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 41c503a4520c0115d7e1cf8ada895e6b24d94bf5e8bbec56931b5c540ee510b4 php-ffi-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 795f06315992186fa08a0f36f2605311dec647de5949a1895d05a7957b266af6 php-fpm-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 862d15d35c4e683165c951e2965d7c0237c615ad335370ef1bc9882daced1020 php-gd-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm de42f52300792899ac34b0aa9f321505634924f3be329835ccdf2ed1d0085f20 php-gmp-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm f19d34b8ed95ccc27b87883a8220294ba6d550119c4e57be9181b77eceda847d php-intl-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm a6017640b93b3f541b622a1dfc8aaa59624245ca1fc17c2fb4d0fec3f6ae8dcf php-ldap-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 0908abf77f21ad30d65977ceb33a8405e5137920a2289ca98d451b665ab2deb6 php-mbstring-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 5ae7e4cd89d4e27c4a183c747ebecf71a698aa456bdccccfd9e9b53017f60138 php-mysqlnd-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 79872ec28ce54e30dbf036fc2e65a01695c64c61179e954d2a8b0e6c661dce37 php-odbc-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm ba2b384e8e52d594c89f85a6ff9c0a9804238f11ce5b404e1bf6745666ab50dd php-opcache-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 1f5d08ebe7133ce35687863f64c393942d5c1d7dd8723ae69dfeb9fceb4c92bb php-pdo-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm f6b80b3df6f477ed5bb16e267dc175832bb38216afc6e81d5209a4549a8604f1 php-pgsql-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 3f85f73a5608ff7b002462c1e889d99e66102a389c343b18ba6c52124c7dab54 php-process-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm c35c72f93bdefb4e8f4f71a33f3380f2dabfd0872e3ca3b065056e4c069c01a0 php-snmp-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 880f6731ec99b91d1280be085b1d0bbf935b3d0d8a6d93e27e79c408b7414771 php-soap-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 06a6df8b5490123499773c4d0fbd331d1bc3e366a9577fd293857743baccc220 php-xml-8.0.30-1.el9_2.tuxcare.els3.x86_64.rpm 641af9126acec16732b00173ad86789a9f983274cffd9767f911438077c463e6 CLSA-2025:1738693764 TuxCare License Agreement 0 - CVE-2024-25111: Fix uncontrolled recursion bug in HTTP Chunked decoder to prevent DoS attack Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-25111: Fix uncontrolled recursion bug in HTTP Chunked decoder to prevent DoS attack

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els7.x86_64.rpm 098c6026b8ac5b7c0a52dc9ea50d7a473cfe4f980a1176df6bae88b5b57c266d CLSA-2025:1738695770 TuxCare License Agreement 0 - CVE-2023-45648: fix improper processing of trailer headers which could lead to the possibility of request smuggling when behind a reverse proxy Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-45648: fix improper processing of trailer headers which could lead to the possibility of request smuggling when behind a reverse proxy

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els3.noarch.rpm 8861e05ca2103c9aceb51b65876854cc3a2054a69b8af11a4a75b4ebdcc75706 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els3.noarch.rpm a0a9832909e32606c9c7e43f9001bb609d5ef886b7929010eaac864bc3a7b2cc tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els3.noarch.rpm 5aa33839bcc4ae93d5664f2e823942b3fe8dc9adb8f0089ceb4950ddd9c82a1b tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els3.noarch.rpm bacd3238bb9ad5f987480c57fb88f534c7903e90fa9fbe3cffe5bccc1971ebc1 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els3.noarch.rpm c96b453929d86516ead8f98214f488d523a7b8882e74b2a41a8320f7499832cb tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els3.noarch.rpm 1ac1e5e7c6f3fdec69d6039aff224ca5c86730eed8f3786fb62c3fd9a072c433 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els3.noarch.rpm 0665fddc4f0c0476d57f28306edf3bbaa0f75f43a7d554fe60bd3177da426830 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els3.noarch.rpm f295a965df1a74cffc05c58d53c33e19ba1dffe9be86b06122987692132f5a6e CLSA-2025:1738695944 TuxCare License Agreement 0 - Fix CVE-2023-42669: disable the rpcecho server - Fix CVE-2022-2127: fix out-of-bounds read triggered by a malicious request Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2023-42669: disable the rpcecho server - Fix CVE-2022-2127: fix out-of-bounds read triggered by a malicious request

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 21e4944de76efa05fc6a180f95cdfe52d35b1f1f4b01ade351165ec50d0a346b libnetapi-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 8a03204428f3360af4dc2485632134bbd03df1471bc337be402cf77381520144 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 8a6409d66483377b08b778b5cd47f9b841ef8fc0255430604b50c60b3d20cf74 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 51e47e0c7f44eeee5de6a700028a3ca4f6faf4047c3208ee64db71ecff55a878 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 09ca86cb8ddfa985ae2ec0172673260e6d18b5fef918873ced5b119c840b7fa0 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 6c1972d0196d2badb63f64471306a5ca074f7775c554734f474ec65300ef4289 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm bd415c008f23274e5a9d16c1c066327c7d02aabed467102d5f242eb569a54bcf libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm dd0ae78a321307a906e1ef66eb7e798f3498935a4ba74f0bb8f8132997d02978 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 1d9895eb7d0384f67aee76f68978e2b8590bd02da14b66ba64bb8b05bc3bc547 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 58d683262c00112ae0bb4a0120cfe39b2e45f7334952aa8479af41b291935809 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 4e4697ab75460157d8666ebcbb910cc26d2939386accb6cd9541a0e49e925ccf libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 5b17891d510d35cd130d09e1eaed51386c9c9576cc7f2d59a761d6cae95ef636 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm b73a21fe5981d27cfb6910f024c9eb47c4b08c1ab6aac4febe344acfe1c19174 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 1b17d42b0aa3ae8891bca06f0e5776b560fff9ef004c3dc305bb85a6be941d0f python3-samba-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 85b0c8d72142fde5b37a4162494d1742903f663485347769f71d1d1d938b7bd3 python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 9b6201f3fab6c79994a0b7379b50fdd5bee3967d79299744fb5b5f02bf79c67e python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 2385685236b3eae4098e023c02be15e031069b09d3a4c6e23ddf986c7f963382 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm d60a54e9b58e427036fa73cced8c69f58c2907c8f0a5beee59c33fb05ee1993b python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 1607c181abe84ed227610b38891beeb751be79afe7598aa61fdd2abd0ee2ca05 samba-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm e2650c2fa915c00fcbdaa15bf65ba8017139711e90b6d13854653ae136c48000 samba-client-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 80867318a7a23c9aab195f2a8088b1e8f08416130517a17634b2e69399e19b9c samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm d71a3f122fc13b51953a29d132d144e47cb7a34952c9900ee68982ede9903fa8 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 3d8775770050bdbe72a8543573b41c42122511dfb068ed41dc5591aecf8e6cbb samba-common-4.17.5-103.el9_2.alma.tuxcare.els5.noarch.rpm 5bba9ea98eec77e91698e2e1f909e9a87592434e2e9833a740a471f1a5b02ebd samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 26a3cd5e49a74f7d1978b472e8edd23aeff33ec42fd03c6a36655c96a1f0f767 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm de70e3672769df072b7c7b912be48ddefd0efae0e4649e6b843af7ed5b3c61dd samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 387233fb5fe41867c9936e9a75bab671ae662c84a882ed750a494811701a1a4d samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 150668a3497edf89fe5d4d7cf793463f6b3a5ba4122fb8f5ed135fec3bcf2d2b samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 25f5508ccf7b5d3155d0e0e4e28890692381db33fa21aa2c181759aa91fc3a1b samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 699276b23cc53e1d7cc4d776442eb71c3b1dfba65ad1a844dd0994015af47355 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 067d7c92eaa94977f05b18401d5a1bb0a3e4b15b80c40e873250d2a385e22bc5 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 908fe1609b5036e630c5cdc1e037befa18568546a39a52fbc531001028c1abc2 samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 002d22570d231f43592af92564fc8bb76b26b8bd5baf68a4acf8a6440516d1af samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 4d145c63363de9b2d5e600962c3703443698da66027b3145d030080a870a443c samba-libs-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm c55a2e736e21bc15de8c50f6a17a85ee02ae181e8e063f3a298c18162fbc1d6d samba-libs-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm fad14a13aea740b58c2ff2930086ea52870de9932383f5a1b1b00d030d2e9209 samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els5.noarch.rpm 4f61929d2d9452c798438568f7fc4f12f475ae93c120b012f3ae5619d7ea67ce samba-test-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 6dc44deb4d0ccdc1e60779452e0e32d05dd2106401cfec34751190c1c7dd44e5 samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 16f8fb56507b4f8d72bc0b061dbeff5990d941f3a79532abe988eb99870329fc samba-tools-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm e1c8ae34f76443dfe0ed3bc9a0027fab810edf37ab04d84e4a6f3ea261dde325 samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm d9b46d8ee7ccf509fb15a78a665fb980ecf8fd8fed109879a4f5d4feb00d740c samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm eab8967328b918f35ddf9851466e99cd40bcb47f20fc98f9f60841b3c3eb9fb7 samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm be08bd57851276b478d3b1753be2fe5a6dabe61aa018312456ee3255299a8384 samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm 8b4f6930878e419a0711d5d3e4b62fac93cf15ff5a10bc74b5bb282e02730ffd samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm d01e3a65f4f75d3ba613f23eab9aaac8039418cf9c12784fd44cb49138d9f33f samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els5.i686.rpm 715a59eb64ba8f6042d84b1f5b9a43bcebd9d138d5d8fe206598904ea4a956a2 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm dc1d3b04ae661417c94d1be695d53301bee69a9235f94c38a696dff1c98aa5cc samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els5.x86_64.rpm c6c2551cfea3e0c72742ecbae08f45d7264cad49c6a15b92a13ffdbcf2510b99 CLSA-2025:1738833732 TuxCare License Agreement 0 - CVE-2024-52533: Fix off-by-one error in gsocks4aproxy.c to prevent buffer overflow caused by insufficient length of SOCKS4_CONN_MSG_LEN Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52533: Fix off-by-one error in gsocks4aproxy.c to prevent buffer overflow caused by insufficient length of SOCKS4_CONN_MSG_LEN

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els3.i686.rpm 541dfe8c40b1c1af23edf5d2c0ea8d9271ebe49a496b935ce6062edeaeaecdcb glib2-2.68.4-6.el9.tuxcare.els3.x86_64.rpm c6630e82ad6d20a2c83152b8d4ce7ae957c0f04325a74f2bf1ff42d52ab17450 glib2-devel-2.68.4-6.el9.tuxcare.els3.i686.rpm 0791dfcd382b29e8ee89486866ccd41449ce386f151d79fcccd03484c6f47a31 glib2-devel-2.68.4-6.el9.tuxcare.els3.x86_64.rpm 5696c34da95ad8a1f0a4d1ba181c4823e856870de75ef25601f631ad914e7b93 glib2-doc-2.68.4-6.el9.tuxcare.els3.noarch.rpm 70ac1f3b03ffa1d4c8144d752dbe1300f6eb5f6b53f799fcdb587217f9a36534 glib2-static-2.68.4-6.el9.tuxcare.els3.i686.rpm 8a54e459851a606eb465da602c334fcbae6b21ec9a74cc985a6faa16a9e93df1 glib2-static-2.68.4-6.el9.tuxcare.els3.x86_64.rpm a25729b348daf05ac698fddc4a571a68493dd40da120b8fbf22891a4e398a873 glib2-tests-2.68.4-6.el9.tuxcare.els3.x86_64.rpm dc71f20d47fc1c76e37d0bf4babbf168469b3fa082a89d27a7ec1e0e7a0ff946 CLSA-2025:1738833923 TuxCare License Agreement 0 - Fix CVE-2023-4091: fix vulnerability that allows SMB clients to truncate files, even with read-only permissions for certain acl_xattr settings. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2023-4091: fix vulnerability that allows SMB clients to truncate files, even with read-only permissions for certain acl_xattr settings.

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm f4efa7f94537417c9b151ebcac9c1b614d3fa35e8ddfbbd35526ca6c75a56c10 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 5efaebca4f580a68337b16a17dd87a6428c7d582ff36b71de11fda08a1f714b2 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 24395d15258de068349448deaedd6cf08313931881f826a78e4c6cd38cbb96e5 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm e91cd79c2c4d817975178f720af2a4775f4b63702e22d09e6147a9f24455b03c libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm d2b52df7cc5b7029bc1df90b34d27120bae7882ceaa8016680196fa153dbba6a libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 6263d5ef2140d8be6ffcd4d6b8b98cfa472ba0218c757f3e85bd292d45efcce2 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm f74e00da3f3cf01ab85216236ff5d289adfadea1fa361234ec7228b5cc20d780 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 325cd26d5ac7221221b5f1e6e2da8c04589b435342ef94ea143eebee96d49963 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm b061236be4277ec21f566df8f29fbd5c5d270216c912f0a6c5cc3a40f3b007aa libwbclient-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 645ea480fde3353705ad192873b7938b2c9882b4eece13965ccdf723543325d7 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm e4e18397e09b0261434c684ee69d2008028f8a6e35aeece3feb4f3068b09ebd0 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 4483932392203ffa1cb24e66a6b1d813d42e70c5f4e92881612e68d88cbea381 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 45b8ab5fd319a1b83c16e3bb071ea1ef4bc24c5a04fafda736975abc3781b516 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm e6cdcf2896e64b1dbfca49c0d3fece854284103c19d2217dee23614bf10ad71f python3-samba-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm d62ad278824b4bd246bfd5cce00208fe86f2bf1ba01803ba6258434c695441b4 python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm b05efca07ca7070e164174f5377f6a6e4f64c4a862f19c077c7a57eb2c4903de python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 5c6a50ec0276c8051eb2242ee5901e1cb5ebb7b3341339a7ac62798bfc67f054 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 7507d5fb0391f286163404d55eaf3985062b20939c08d113ba6890d453cf23c1 python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 8d7b4d73eaa3c8fd199dad0d9742bc95c4b7fc93c9588514615287314bf7057a samba-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 5c26691597d6c18f2cea367acad3d0de290067342bce3778bf7039b16f89dbf9 samba-client-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 401174ca2310362c2c990790857e6557d4ffc771a6f7779303b71cc19ae1eddc samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 79f7310e9bbdc4fbd537368c91a4d1716e3a573f43f97612d3fb54d2bc53caf1 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 1a2e969d2f0d9e24c5deff7f728069b4df9d7300bcc4a4dc3126a6074700e2b6 samba-common-4.17.5-103.el9_2.alma.tuxcare.els4.noarch.rpm d58114fafa3fa5e8f97c3d63e4c4d177d491e7f2d61980df363d3858a49317f3 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm abf2373d272481da1d9b7b688877e15606d16c76fcb735ca0e22ef5f6fb75536 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 9ee5259e8e04871333efcb88d2c39af31d34d3f9b42d8867d0899ecdc9ce2f54 samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm f67be495b649542a541303034f2068d067291b07215b6f2fe13c07850a302204 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 522fdaef5c0938fbf6bf8ac34d488065a009da4bf96248fba5d9abf4e52aade4 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 65f0ddbcd2df3a50c40e728f442f83d7c5d650fa819467f82c8c4bcfb644b7f9 samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 1e5f22860c6562718e035e1628e50883c0f1b0e7bc7556a354276d619942e42d samba-devel-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm b171ef5ddcac92fcf71f5de22bc066d580455fe460bb0691c7c967dd1a7fb92e samba-devel-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 7c358b496052af4c3445e97096db780e0179baa950d96db9428f6b8aa87300f6 samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 26da07dc0b5f1ba4e9556e6f76a67244ae2a8d5b6172e2f5d92fc9d4823152e6 samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 1a1ff83ca1c60c66db479e3fedd901526429945fae6e3591ca53c49512068ffa samba-libs-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 9df394586c11cf3dd0b0e817d4f2bb47ea53443fe5703460c8bd22d15fddcb55 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 109e291366c789be9f8784e03a243b179fa9f77ba1cbbbd70b5bdbc6ace76d33 samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els4.noarch.rpm 6499f440c55fce2428c800b8be07244140f4171fdd816d45d01a7d68fc5b182c samba-test-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 3c2cf995c0dd77af651633f8eb1280ae33e1c0d06455f7315ba85d6df99a5c92 samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 37d3984436e0b9fa25949a735cfcec65f71845210aaff449982afb183c33e417 samba-tools-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 0822287e4542c3a7a281f20435b00e25a5450dce8eed389d209e84428649342e samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm cc6c9d45be052fc1f06be0967c803b09c38e7b45d180f494ae4a560a75f5ed17 samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 6189e0012ce28d3c170b7b4526de7dccd75e900b6dc3314fc31b862e7200c751 samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 0cba6ebc89e4d9a51abaf9970ce5a8f4899a0c73ce08bd263d51b9fac9584ff6 samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 702f1bd7ceb01ad1c0364250c46125015e86e912d907acd035e1bae1ae09b7b8 samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm 9a84ab223ab99f105c807fb05c56b85a2e7634c47804ab0d6e25f00c424acc64 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els4.i686.rpm 67b227defbf91f2f73bcece2c2f41314f7798b9662160d2446b6369c03a40b8d samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm bdeeb1aecfaa2c2ededbfe32a79606aebe5ef303656732c3f19d2999e8090fc5 samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els4.x86_64.rpm a236c3e025956128c05fe1581de4c0f55f5b4bbbf8065928915281f5a4820eea CLSA-2025:1739386415 TuxCare License Agreement 0 - CVE-2023-5517: fix a flaw causing named to crash with an assertion failure when nxdomain-redirect is set, and a PTR query for an RFC 1918 address returns NXDOMAIN - CVE-2023-5679: fix a crash in named due to an assertion failure during recursive resolution when both DNS64 and serve-stale are enabled - CVE-2023-6516: fix a vulnerability where named may exceed max-cache-size due to unbounded growth of queued cache cleanup events Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5517: fix a flaw causing named to crash with an assertion failure when nxdomain-redirect is set, and a PTR query for an RFC 1918 address returns NXDOMAIN - CVE-2023-5679: fix a crash in named due to an assertion failure during recursive resolution when both DNS64 and serve-stale are enabled - CVE-2023-6516: fix a vulnerability where named may exceed max-cache-size due to unbounded growth of queued cache cleanup events

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els5.x86_64.rpm 34c9d1b130fb7292e577613bf8a3735dcceda40e395152bb9d5b81e7a4cf72f2 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els5.x86_64.rpm 6cb01124694097726d5a9f22ff24dd09c2dbe055209e932cf3f00ac00bd87f19 bind-devel-9.16.23-11.el9_2.2.tuxcare.els5.i686.rpm 6e817ff337289b9cafed1d0ef6c8034d750a03b48da7853891c60cf222f71359 bind-devel-9.16.23-11.el9_2.2.tuxcare.els5.x86_64.rpm dcaa50efcbc63bab01ed9448b71bbfe55f44ce877b2213994cdf8480f086ff39 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els5.noarch.rpm e0ee653c8d2d6116c387db057d27016bba096b8658cec75901f479915024055a bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els5.x86_64.rpm 21aa735b23db47ad28774482f4260087de45bb6b7c93deebf22b6f9543e3a3d0 bind-doc-9.16.23-11.el9_2.2.tuxcare.els5.noarch.rpm 7d2d7a34f56070e37d073383c9115f3e302f5de09ddbd807c407470b3cc6d58c bind-libs-9.16.23-11.el9_2.2.tuxcare.els5.i686.rpm e98fea784b6e63a1fcc42b57b5b631c641f187b94d5ddf3ee9b913620149e05a bind-libs-9.16.23-11.el9_2.2.tuxcare.els5.x86_64.rpm 81ffd9b465fe9d6631de06d9b525f63ca420b712c302e03aa07698885c217337 bind-license-9.16.23-11.el9_2.2.tuxcare.els5.noarch.rpm b298d29c13f9bbc32a6d39ca420de87364058f586d1210b92bc5ebda5e5620bd bind-utils-9.16.23-11.el9_2.2.tuxcare.els5.x86_64.rpm 81da0a0c304cf5396152ddfef7a8e9fdc239b0bca0cc8c1c64f95c825081b103 python3-bind-9.16.23-11.el9_2.2.tuxcare.els5.noarch.rpm 77137523003343e1676851f84288d566ff2110bd6e24c3daec92c9d375ad2c90 CLSA-2025:1739386567 TuxCare License Agreement 0 - CVE-2024-32020: fix issue where local clones may hardlink files into target repository's object database when owned by different user - CVE-2024-32021: fix issue with hardlinks to arbitrary user-readable files when cloning local source repository containing symlinks Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-32020: fix issue where local clones may hardlink files into target repository's object database when owned by different user - CVE-2024-32021: fix issue with hardlinks to arbitrary user-readable files when cloning local source repository containing symlinks

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els4.x86_64.rpm c6f4606476c38ee30c4682fbe261b70411d993fee51208f6fcf095c4cac4f163 git-all-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm 167828c22dadf629f409aba3cd6d10d90abe01db28466b893faa1c634fbcbf7d git-core-2.39.3-1.el9_2.tuxcare.els4.x86_64.rpm 25e4923f3e72b238032cb2f0ee60a208f46004e75c8a2cd30aac6098ed6fcfdf git-core-doc-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm c048d81e84a9bf3a67ececbf7b3d44aca3a4eb7456e7fa7e416091bd99e98971 git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els4.x86_64.rpm ab062aa87ab1b018d2fa319a6b1df6d6b858d1b274ebff8f2a0335a12faefad3 git-daemon-2.39.3-1.el9_2.tuxcare.els4.x86_64.rpm e8ca7e522496eaa133def60d27ac99e5aa42d176b748db9fdb13acc922f4d634 git-email-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm 09308052d913d27d963a95672afe37995d12abe4a7b8d1d53212e323c6c7419c git-gui-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm c1552d957471085646bd8c136c5205076dde1ab09016d37f12bd4efd78b326d8 git-instaweb-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm 93a3eb9fa0d33438d5a44486ee51a3d2c182a207806387d8e01e1cda0f49c2ec git-subtree-2.39.3-1.el9_2.tuxcare.els4.x86_64.rpm 737d57c5ab9b9f877df453643660111c05cfa421e3cf54756f357c6f2a4db0cb git-svn-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm 39a844411718d7ee55022f8d1d09f4f6552db03560ad6455526fb2fc909ae190 gitk-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm 3a7375e41a286014f38491533c76ee1d88b57da0a6b9aaf479c69d0f34018324 gitweb-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm f2244c925c3cff7474af0f7932cb334318476df0d6507ecf6c8058529836b2f8 perl-Git-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm dde70ebb42d124d9430de09b51f541d8956ecb064a4541a45e3ccb9020cbebd1 perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els4.noarch.rpm 90ea5b193eeb119bfaaed26d9df70f828ab6b416d73deaceb5dc7820c29b2cf9 CLSA-2025:1739386692 TuxCare License Agreement 0 - CVE-2024-2496: fix memory corruption listing interfaces - CVE-2024-4418: fix stack use-after-free in event loop Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2496: fix memory corruption listing interfaces - CVE-2024-4418: fix stack use-after-free in event loop

0 tuxcare-almalinux9.2-esu libvirt-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 2301946e3523d7bf76072ff57478b723a3c7cd4d9c063d461526d1be2a41f36b libvirt-client-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 1a32717c23f0cbe55d644556eae65f34f23c9c8d92f72fab29d898efcebf6207 libvirt-client-qemu-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm b7514814ce491f8760023210599f699f8e0922e3c8a33571884de3ac513ed687 libvirt-daemon-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm a8ff02a5e3ae54c5dd597b2f3383c32c23b376a4c112d3f9867b2ebe3021a774 libvirt-daemon-config-network-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm d5e59d39ec900cfc6a2d4751d59d2935db3f81968c57b500866a5ec14528cc70 libvirt-daemon-config-nwfilter-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm b7446090599eb54e0e4bffc2c01428588a3c25e7144aeb6749257d874457f201 libvirt-daemon-driver-interface-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm c58a5933fe28fa0e728ce8273ea9eeb3f0af1d4bdf253c6938694849ab8ef811 libvirt-daemon-driver-network-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm cf82d9ee0cc72a2beb8451c1c304c6695439aa09211062102c0cc5d491c30a43 libvirt-daemon-driver-nodedev-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm b6a7682e9bc45b11134f076c58d9cfe45c412d7ddba529dbe234156ba0071324 libvirt-daemon-driver-nwfilter-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 274c45e12d72f690603b8bd442b0fb30eee1c885f9b18245735dfe044c11234a libvirt-daemon-driver-qemu-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 0f0220a6e566a053be7e37b0f147462dacc053345eb159d8ea9c0e4526057728 libvirt-daemon-driver-secret-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 97e2922f533f4ddc5b13b7ab7775cbc12ede7f77bbe904f3fb216f2872480155 libvirt-daemon-driver-storage-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 224920bccce1c0030bd54408de349db119b659640fb9775ab93751b709509b97 libvirt-daemon-driver-storage-core-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm abbb6779cd8f93a1e1ee5eb63cb8cbdf9ce9545c6491a8140f2fc67903e86796 libvirt-daemon-driver-storage-disk-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 8545901cdd3f362ae590dc6eee299254a54a2c147c6d6e7eee88dfd0925a797d libvirt-daemon-driver-storage-iscsi-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 7657fe376f1f9d8956bf628e0a58ece0ef6f423f3072b11c6a15a9a8028b3d7e libvirt-daemon-driver-storage-logical-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm cbe90e9c6b550d81a1671e5b05792121f696415ff6144cf0e3765b78f9926efb libvirt-daemon-driver-storage-mpath-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm f363684487900c74278960a484044d2951fb94393afca8ab61cd674fe9bc964c libvirt-daemon-driver-storage-rbd-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 5bb1c9cabe2b91f83f75513ccae56ce90434531a8a796be5b57fe8d310228547 libvirt-daemon-driver-storage-scsi-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 50456338bd950d6a22bfb4de264d16e8213c21bc7d7275b99c71f28ee08c1ae9 libvirt-daemon-kvm-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm a63e627fe0c4e829c3c85fce50307399ec3ef75d4a49927027fa867436da0a58 libvirt-devel-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 4030013095ab0cc50b9af1a7a09d185664974273811f20600df1d248987faf26 libvirt-docs-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 9fb31c6de96edeb3f235560b4b0e20be842ba85cc29ca7d199556d04e30c7e65 libvirt-libs-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm bcc162f51ccc9e643f25f88a2a11fe193336e1556486181fa788d2779f74fcb2 libvirt-lock-sanlock-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 48a45265dbb6d72ae4e59450267a0d9150e0edd05c98ca72321f27fdfbc9a18d libvirt-nss-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm 0f2b90505b7b11b4a7948fb61c2833f5dcf8c2221b8223fa57570cc3bcaee3f3 libvirt-wireshark-9.0.0-10.3.el9_2.alma.1.tuxcare.els1.x86_64.rpm aa9bb9a462a948a6fa8aca2bd2688009c496e8c8f6ecaa87cb5d7fd9e45fee32 CLSA-2025:1739387560 TuxCare License Agreement 0 - CVE-2023-29491: fix triggering memory corruption via malformed terminfo database file when used by a setuid application Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-29491: fix triggering memory corruption via malformed terminfo database file when used by a setuid application

0 tuxcare-almalinux9.2-esu ncurses-6.2-8.20210508.el9.tuxcare.els1.x86_64.rpm 81a432ebf884d1a92728548867932409d25b459c2fd1410035bb9eaca57aa2fa ncurses-base-6.2-8.20210508.el9.tuxcare.els1.noarch.rpm 579142d4c1865c28a16a4f0fdf99e8a36379e285f0fa91feab8e69a59f43d257 ncurses-c++-libs-6.2-8.20210508.el9.tuxcare.els1.i686.rpm 6b2ffa39e604d3c2745b4ca4c8a02349301629a26e01f1a224728512b349409a ncurses-c++-libs-6.2-8.20210508.el9.tuxcare.els1.x86_64.rpm 9276ae6e7c82ca9e1eb0598adf5c3442a8cb87a6bd367b0d0b2acb0b2fec0514 ncurses-compat-libs-6.2-8.20210508.el9.tuxcare.els1.x86_64.rpm 2fb3117d648ac416ca239da7cbd8f6a5c65fdbd95dccb6519b7da37e528a21ec ncurses-devel-6.2-8.20210508.el9.tuxcare.els1.i686.rpm f9a39ae994643aa818f2076a59bd546610ce9510da371992469b8fc639e60a96 ncurses-devel-6.2-8.20210508.el9.tuxcare.els1.x86_64.rpm 269daaa00dfd464141bfe6caf568f4c26e13b863a3aefc5e2ae96a07d08a6e4a ncurses-libs-6.2-8.20210508.el9.tuxcare.els1.i686.rpm 102f441f7fa16f8f74aaee96c8cca277f7eca3a0f9a4961af2dedc9145e88f80 ncurses-libs-6.2-8.20210508.el9.tuxcare.els1.x86_64.rpm 6ac6b6f14486023e0eb0e85ae81129de6a3afd1b23a3f087b98d8fce552bb556 ncurses-static-6.2-8.20210508.el9.tuxcare.els1.x86_64.rpm f9d8f291e8fd09c7c10d5fe4a66634f5dc54c96269888bd38f1199fccb06178e ncurses-term-6.2-8.20210508.el9.tuxcare.els1.noarch.rpm c114e787f957596aeb9ff4131fa6df65e3a8ea1cee595ef634e81d635b8c8f7b CLSA-2025:1739387678 TuxCare License Agreement 0 - CVE-2023-42795: improve handling of failures during recycle() methods Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-42795: improve handling of failures during recycle() methods

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els4.noarch.rpm 2b78f27ab48d57ef2dbd60d601bb80bc1d4352bbf178b60410adae57f8dd2e99 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els4.noarch.rpm b6a68d2cbc550d595acd657ac32e44e5bf200a1f9da168079302d069ab5d9109 tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els4.noarch.rpm 10df2dd55d4307d9d4fd9592143376dd05d781a47cd92ccbde412ae312b2d95c tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els4.noarch.rpm 0a72c087e7bf6d5963d6cfe891e16f3e8529c98cb6beec8f931df4f1fc0e4dee tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els4.noarch.rpm 6916308765e00f42bd0f9e3c841d75eca8265bb24150fef488fcfa11c337290a tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els4.noarch.rpm 3e15a21b85d41b0744b59a98c9273cca9f9cb3cafc3c5951578c110e4be8b849 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els4.noarch.rpm d7aae7cf5dc95fb2bc40249c1201df8073d2f86e81d23f1457e5e0e93859c001 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els4.noarch.rpm 1b160d110a372d37dee57edee9b0690f30e29529f684b023ee8fd322a80ea4bb CLSA-2025:1739387851 TuxCare License Agreement 0 - CVE-2023-42794: restore the finalize() method Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-42794: restore the finalize() method

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els7.noarch.rpm fd09f673c2d5afffae80dc4a4ef2d119ad96cf97bd6e6cb087225f8ac2c18ead tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els7.noarch.rpm f0f144bbbaf4765dad38b021596901f985604a8089eec672a5264d90496433fd tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els7.noarch.rpm 64723db769347e4ba262c41e1bc179ac28599fb45038709342b6b16cbee4c14c tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els7.noarch.rpm b04a6e0afc42cdaad5f7bc7570b1c94a51b775354f895809cd7ff7c014b12744 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els7.noarch.rpm a1cbb7005e684d862bf1c9ada0419cc01b776a60b330fadb64d54963de59a68c tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els7.noarch.rpm caa5a3c04f20e19c61e8eb5befbdcb62cf1b9d5b1598dff21a0bcf21565cc9f0 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els7.noarch.rpm 2c2639a5062d59f02e912d08387be51952df296653a2ab02d9c76ae72273c9f1 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els7.noarch.rpm 1811a861eafc2c7cadbfa0477117fbce3a25f5d79884a3aee2d20f02e993911c CLSA-2025:1739820848 TuxCare License Agreement 0 - Update to MySQL 8.0.40 - CVEs fixed: CVE-2024-21201 CVE-2024-21236 CVE-2024-21230 CVE-2024-21160 CVE-2024-21196 CVE-2024-21239 CVE-2024-21173 CVE-2024-21193 CVE-2024-21159 CVE-2024-21135 CVE-2024-20996 CVE-2024-21166 CVE-2024-21157 CVE-2024-21231 CVE-2024-21199 CVE-2024-21207 CVE-2024-21194 CVE-2024-21238 CVE-2024-21218 CVE-2024-21203 CVE-2024-21162 CVE-2024-21213 CVE-2024-21219 CVE-2024-21163 CVE-2024-21241 CVE-2024-21125 CVE-2024-21134 CVE-2024-21130 CVE-2024-21198 CVE-2024-21142 CVE-2024-21127 CVE-2024-21237 CVE-2024-21197 CVE-2024-21212 CVE-2024-21247 CVE-2024-21129 CVE-2024-21200 CVE-2024-21171 CVE-2024-21165 CVE-2024-21137 CVE-2024-21061 CVE-2024-21057 CVE-2024-21056 CVE-2024-21055 CVE-2024-21053 CVE-2024-21052 CVE-2024-21051 CVE-2024-21050 CVE-2024-21049 CVE-2024-20993 CVE-2024-20984 CVE-2024-20982 CVE-2024-20970 CVE-2024-20968 CVE-2024-20966 CVE-2024-20964 CVE-2024-20962 CVE-2024-20960 CVE-2024-21179 CVE-2024-21185 CVE-2024-21177 CVE-2024-20972 CVE-2024-20976 CVE-2024-20974 CVE-2024-20978 CVE-2024-20981 CVE-2024-20969 CVE-2024-20985 CVE-2024-20965 CVE-2024-20967 CVE-2024-20977 CVE-2024-20961 CVE-2024-20983 CVE-2024-20963 CVE-2024-20971 CVE-2024-20973 CVE-2023-22103 CVE-2023-22070 CVE-2023-22114 CVE-2023-22079 CVE-2023-22066 CVE-2023-22104 CVE-2023-22084 CVE-2023-22078 CVE-2023-22111 CVE-2023-22064 CVE-2023-22113 CVE-2023-22097 CVE-2023-22065 CVE-2023-22092 CVE-2023-22110 CVE-2023-22059 CVE-2023-22068 CVE-2023-22115 CVE-2023-22032 CVE-2023-22112 CVE-2023-22033 CVE-2023-22048 CVE-2023-21950 CVE-2023-22058 CVE-2023-22008 CVE-2023-22007 CVE-2023-22046 CVE-2023-22054 CVE-2023-22005 CVE-2023-22056 CVE-2023-22038 CVE-2023-22053 CVE-2023-22057 CVE-2023-21935 CVE-2023-21972 CVE-2023-21953 CVE-2023-21977 CVE-2023-21962 CVE-2023-21955 CVE-2023-21946 CVE-2023-21920 CVE-2023-21919 CVE-2023-21980 CVE-2023-21929 CVE-2023-21982 CVE-2023-21966 CVE-2023-21945 CVE-2023-21911 CVE-2023-21933 CVE-2023-21976 CVE-2023-21940 CVE-2023-21947 CVE-2022-4899 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to MySQL 8.0.40 - CVEs fixed: CVE-2024-21201 CVE-2024-21236 CVE-2024-21230 CVE-2024-21160 CVE-2024-21196 CVE-2024-21239 CVE-2024-21173 CVE-2024-21193 CVE-2024-21159 CVE-2024-21135 CVE-2024-20996 CVE-2024-21166 CVE-2024-21157 CVE-2024-21231 CVE-2024-21199 CVE-2024-21207 CVE-2024-21194 CVE-2024-21238 CVE-2024-21218 CVE-2024-21203 CVE-2024-21162 CVE-2024-21213 CVE-2024-21219 CVE-2024-21163 CVE-2024-21241 CVE-2024-21125 CVE-2024-21134 CVE-2024-21130 CVE-2024-21198 CVE-2024-21142 CVE-2024-21127 CVE-2024-21237 CVE-2024-21197 CVE-2024-21212 CVE-2024-21247 CVE-2024-21129 CVE-2024-21200 CVE-2024-21171 CVE-2024-21165 CVE-2024-21137 CVE-2024-21061 CVE-2024-21057 CVE-2024-21056 CVE-2024-21055 CVE-2024-21053 CVE-2024-21052 CVE-2024-21051 CVE-2024-21050 CVE-2024-21049 CVE-2024-20993 CVE-2024-20984 CVE-2024-20982 CVE-2024-20970 CVE-2024-20968 CVE-2024-20966 CVE-2024-20964 CVE-2024-20962 CVE-2024-20960 CVE-2024-21179 CVE-2024-21185 CVE-2024-21177 CVE-2024-20972 CVE-2024-20976 CVE-2024-20974 CVE-2024-20978 CVE-2024-20981 CVE-2024-20969 CVE-2024-20985 CVE-2024-20965 CVE-2024-20967 CVE-2024-20977 CVE-2024-20961 CVE-2024-20983 CVE-2024-20963 CVE-2024-20971 CVE-2024-20973 CVE-2023-22103 CVE-2023-22070 CVE-2023-22114 CVE-2023-22079 CVE-2023-22066 CVE-2023-22104 CVE-2023-22084 CVE-2023-22078 CVE-2023-22111 CVE-2023-22064 CVE-2023-22113 CVE-2023-22097 CVE-2023-22065 CVE-2023-22092 CVE-2023-22110 CVE-2023-22059 CVE-2023-22068 CVE-2023-22115 CVE-2023-22032 CVE-2023-22112 CVE-2023-22033 CVE-2023-22048 CVE-2023-21950 CVE-2023-22058 CVE-2023-22008 CVE-2023-22007 CVE-2023-22046 CVE-2023-22054 CVE-2023-22005 CVE-2023-22056 CVE-2023-22038 CVE-2023-22053 CVE-2023-22057 CVE-2023-21935 CVE-2023-21972 CVE-2023-21953 CVE-2023-21977 CVE-2023-21962 CVE-2023-21955 CVE-2023-21946 CVE-2023-21920 CVE-2023-21919 CVE-2023-21980 CVE-2023-21929 CVE-2023-21982 CVE-2023-21966 CVE-2023-21945 CVE-2023-21911 CVE-2023-21933 CVE-2023-21976 CVE-2023-21940 CVE-2023-21947 CVE-2022-4899

0 tuxcare-almalinux9.2-esu mysql-8.0.40-1.el9_2.tuxcare.els1.x86_64.rpm 2dc933ccfb705720fcd0c342f5b670b6a6400d2a5ae9cd1e36338b6528981160 mysql-common-8.0.40-1.el9_2.tuxcare.els1.x86_64.rpm 793819f68b339fab6bda28f8439178a0ab9c5be34ff4ef7d324f709765af57e0 mysql-devel-8.0.40-1.el9_2.tuxcare.els1.x86_64.rpm 32ca6c0f54526784140f854c1359d62a6785782d36944380163c27e01e0bd1ca mysql-errmsg-8.0.40-1.el9_2.tuxcare.els1.x86_64.rpm e94aebf9886520d5c10b83e9b3f220a53955e33e2c006eb267e1d7e52bf8ed12 mysql-libs-8.0.40-1.el9_2.tuxcare.els1.x86_64.rpm 7eaf579e98343f5bf524004ad33b9a030d1f3d06ef46c5de4a7df6b6ad6c7496 mysql-server-8.0.40-1.el9_2.tuxcare.els1.x86_64.rpm 62e3917c78b55147200fd512bd799db7f72a0516031b7cf8e072b9fec3b9189e mysql-test-8.0.40-1.el9_2.tuxcare.els1.x86_64.rpm 7990c700ee45228f66de8301e1c211059a5ccb5e55b3fb10d459eb7cee8b6261 CLSA-2025:1739821812 TuxCare License Agreement 0 - CVE-2024-8925: fix erroneous parsing of multipart form data contained in an HTTP POST request - CVE-2024-9026: fix log tampering in PHP-FPM - CVE-2024-5458: fix early-out for ipv6 hostname validation, ensure full check is performed Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-8925: fix erroneous parsing of multipart form data contained in an HTTP POST request - CVE-2024-9026: fix log tampering in PHP-FPM - CVE-2024-5458: fix early-out for ipv6 hostname validation, ensure full check is performed

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm f17695621cf743d5d21ce7c6eee6d5e5ed1be468db17ed0a7241d527ef9b641e php-bcmath-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm d3315c336085aaa2533345e5b88d5390cb3e8b3176ed8fb8c43f8955df138605 php-cli-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 6a3c24bbae0f7609755d29ce93caafc618eaa2727580006ab92b0f2dcedde643 php-common-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 29edb71c04650bbeb0bbe1f482135f5b52c0e7820fd15f724df31f40fe61857c php-dba-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 0f4e6531ab463f60a49ef6beb659479323dc9b6dac78385228bd2b4a1666bf66 php-dbg-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm b188d3f9baf2089fa10d1d588065c8eb24fc7cf7d80c8de6d96a743834acc6d5 php-devel-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm ae9ba1aad88f005e93126c3901e31dc379102516240e042096dd6ac8fe861c41 php-embedded-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 6764c6b379eaa4cc5864484f95a35132cdd64e6a91db295f51c3488551e82717 php-enchant-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 99bc79cc17fbb36c6e4d9c6d547ece5303b13f36fd40cd6ea5c024ef24df2095 php-ffi-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 6fcceccf47985f1474027f19d9586b6abd2a08350f271dba9472a76de51a7806 php-fpm-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 678a5ed154f6c6de4896b0ec71c141f17801a3e7f69c94f06a8dd93dc3c31a78 php-gd-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 1ee943b202e68e376c9e62588c24ed3f58b7d1d1caae7141bc481c561229b1cb php-gmp-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 1e6b3ebd46f101ef2eb5adaa88365fe02aced25b54177d7a519d7e5e355f711c php-intl-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 0674cb3cb6b854dd3e3d2b89c52a17322c23ad3fe7a1c89932dab1a29e3b6db5 php-ldap-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 51f7cafd41c4d715fcec8261b0feafb4d4984cfc2bcdb74b0e53c51b44bfd1b9 php-mbstring-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 071c1012e33c641efebcb9d9cbf8cee36607c5839995ac6bd1f058f35a8c13c5 php-mysqlnd-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm d5b6fe1c574a0e96436a4fb4bca87ab6023a2eb333522eeb314d77f731b7f400 php-odbc-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm d8d9b93bb815376f6441762e3f0383ed02c4184624167da9c96ecb5d6106a0d5 php-opcache-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 3f3a64df170696f65c0c588affc9f3554c4eee979c9205fc6e1b66e115480d09 php-pdo-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm a516918f62365dad370143d405ac34e4b4b8e9629ffced2320a09ce1afd59442 php-pgsql-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm fe976736935fa10431c153a90db728fdbfa75b4afe1ab4dde36aca3a9f47b424 php-process-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm cd7d24d9f1bad2fb7a7d927279da33b540dd52011b2198184ad5b065ac5c6e4a php-snmp-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm 699d1ebf065431095a71ab95ea0fcbbbc678ba792f25f7d1d5ed79d703d10e35 php-soap-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm fc94c1d6995a1729625777525deabf98474cb393c119f2787b32f5087ad1123b php-xml-8.0.30-1.el9_2.tuxcare.els4.x86_64.rpm ba418b32038c3ae4eb8166a1130cbdf5d24191b9a09965e05ea581e36dd371a5 CLSA-2025:1739822055 TuxCare License Agreement 0 - CVE-2023-3750: fix race condition in virStoragePoolObjListSearch function to prevent denial of service Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-3750: fix race condition in virStoragePoolObjListSearch function to prevent denial of service

0 tuxcare-almalinux9.2-esu libvirt-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 2cb9e8188acb359ebd5f223094586dd038771aeda2900a4f8ba7f2fbb4982504 libvirt-client-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 41e64ea90b1ce722768c724e053cc4fd3da4dfb55219370ea6c76a422fde111b libvirt-client-qemu-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 2542112255c58070e8c3e4351c3e3ac5ad3eaf95a07a277d85b80e94de536ec3 libvirt-daemon-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm de3de19b4edc4286123c8eb29907548c9732e12d6eea879400aab7885d64336c libvirt-daemon-config-network-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm e08f86a32ba2550127f745b46408f27a02f5d0791ee514f490450f057357bb7f libvirt-daemon-config-nwfilter-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 94881aa8408931489303a3c4754f96541aab18895f34b0c5f6d731caa6328f44 libvirt-daemon-driver-interface-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm a48bbc89165137b8b05f928dc715ab2bfb21f4f1bf42e11c05e4baffeedd29cd libvirt-daemon-driver-network-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 682b42c990511acf2cf1020e09aad773c69c400d0226f1adc49bc9916b64b007 libvirt-daemon-driver-nodedev-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 2c6d9cb88fa8ce549e1a555350e9bef501d98950907977571f11bc2d2347f0ca libvirt-daemon-driver-nwfilter-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 70b3addad9eac679f8ad443a490a61841c49a8d45579a3311f4e866ea63f3791 libvirt-daemon-driver-qemu-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm e730b5725921ca195ffc111a20714170760ed5bafacd0a01d0853ffb9b06b1c3 libvirt-daemon-driver-secret-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 2f7444cc549f304041b3d0f4555e5da68090647c70e59cfd9f7d4515f710b987 libvirt-daemon-driver-storage-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 76397b35d2a7281d99e28d5eb86492089648f854551cb4fa6b3fc04c5e27ef5a libvirt-daemon-driver-storage-core-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 50288e52b852ea8436520d0356d9a209e69b56ea575bd192bae9f6af0100539f libvirt-daemon-driver-storage-disk-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm c50be96d5faf595f56771546ebbfebe86a6125070cc52431b7d8397dba8f4124 libvirt-daemon-driver-storage-iscsi-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 7a14d1fa6e083b2a0f4c23bb91cc5ed832f90ff16b7a902b61e7e54dfeca2af1 libvirt-daemon-driver-storage-logical-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 57fad4b1b8336da747d87905ee54f94b62d6116b40f52a6feeac8bd3795af6b8 libvirt-daemon-driver-storage-mpath-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 931230bc95d00236bc86c918d51ead55aeffc4b45fc803283e5c69fdf6f7d38f libvirt-daemon-driver-storage-rbd-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm c8166cfbb87e2d21ad7f51abd835de151aef0a657263342c116024ad65607f72 libvirt-daemon-driver-storage-scsi-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm fc742c5942b43ee6fb4dc1c5d5e1229e579a280f7a7bedd2458539e511468242 libvirt-daemon-kvm-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 777b03eb9a5eb11fd7b4841b47d0c6c5d8b92f69f57e12bd19161a729df64ffa libvirt-devel-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 19dcdbf08ae427e7335bacdfe16cd3a13c3d7dbe10fba75ae06465010e3526c9 libvirt-docs-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm e3c3135e9ed6c929baa24cfe026f0eb729215455523898b073cdde25845e1f17 libvirt-libs-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm d66dd63ab2d8abb8fe415cd965517f4280627122d2b29e57a18cab37c585b674 libvirt-lock-sanlock-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm a196860541e0260a0724230bd01e52fa84999231bd185e51f11c9115bd18964f libvirt-nss-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm f9159d059fb7450c958d0cfba01c57ab62ed20383cef31f8fc3ff3d995e2700a libvirt-wireshark-9.0.0-10.3.el9_2.alma.1.tuxcare.els2.x86_64.rpm 68d1303e04461a5e2af31a61a8e478c398ec5c8040c8461ffa158d8430c32e23 CLSA-2025:1739822224 TuxCare License Agreement 0 - Fix CVE-2023-34968: fix path disclosure vulnerability by sanitizing search query results - Delete fixed tests from knowfail list Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2023-34968: fix path disclosure vulnerability by sanitizing search query results - Delete fixed tests from knowfail list

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 28802dd9075e30f9ca81274bc6f003ed032edd0b9284814c56508719e79a09de libnetapi-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm f7006c1ad50ba3513299baa12b74e00f60db62b4d1090c75051df24394961241 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 0eb039d73f0aeda50c6d7708018607b34597643990d3cb4857f643a8105efb8e libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 51e606a79790407b28ec9d877936a2080be126961f4b851780641bf4d8b7ef58 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 51c5beecaabb3d4efc0ac2613ca158e22189e2db2e057ca9c79477c7fef737e7 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 99abc6fd6714faaa0f4bcac635a5fa3d9d28d998396c943d5462b0ffb87f2c82 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm ce46f95bc3f627a1d11e49ef297152745edfdac70865b448ed317b672436a5c7 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 77d03c1dcf684774a93808e24b8035051a81c87641be9a74e1099e8580078c2f libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 89a82301973fb4e873f6df1b64458bdd70076dd92da5eaa5bdb6c9943b592825 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 496690d22ce94298c434b52defee983cdef4380e9008a8849fe8e14e7a46aecc libwbclient-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm b80d4ea4c3058ffe52aebf7612662646ff36259792f500319b5f7649099d2489 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 6f104a4245e20d61924e38516f890a31e5a9ce9263152291f4b9408730578b71 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 1af88e9268b81a980f7635d93083c8d2a5293835a8b8a130fa9bd5f83ae7c68a python3-samba-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm d709756308ce9605a46c479cf45d750dec341d2d60776e21a49e2a2f010dda01 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 3c53651801d4f89646550e6a0180e530e07465fe50ea1628740c1746a9ac56e3 python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 6003cb8fcd7be14f0fda1d8e091d8b314206d8b138327d2db82e4fa0bc79b3b6 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 02a27dc3b945f4a1884a52a4a71b222748ea636633ffdfbf6e61a3a8790869f3 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 0f5ba763925205b842faa2e34fdc0f61a62c232100f425b09cabcf34e10789ca python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 379fce0b31a1ef2225a850d6cb2afbfd893c81bb1925abeb7ecfdead28dc2582 samba-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm a2965fd8c3ebc8f32e4bcd3d25bb4d41985ffbec626aa23be8763ba3fea2d508 samba-client-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 1cac6104e05f2c45e214695422c75e3589f300256e336e57df7d6ec2e43951e7 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm fc2b17430326e5447e502b064e190263f3af30ed4fbd3b333c2fcdf387f7e83e samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 52dd6f375c050804f53e4bcf209b6bcfc1b2b1158f9e354e10b7d2d14630856d samba-common-4.17.5-103.el9_2.alma.tuxcare.els6.noarch.rpm 23242a7b10d8839bfa6f32e5b0a920a93b52f00c949b759024765b2b505b525a samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 43e0636f6dc221bc35e1307cb1effa948f6b5af2d3948f3614a304050d4af3ce samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 066960718f1f2a6a2dbd04a0aca336fce9830f93542939b2a0f87ab88a4b8e9e samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 23655c301b6db85275105e692c5d95500e68be12e05393c01b4fda51fa4da513 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 2694031f54801599e4903a2fd9ab63ff1419073eab57b643568aa4751a1f2604 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 88d9c44489f913cd70b86ce76a6f51287ae5d8c7f91f4e56894293eb335c3122 samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 4e8bbcad4dd2b29c3a061b29cd18a351259a6ca1da0b82c3040da877941fe40d samba-devel-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm ed0b978186bf53445b270533f41b003f148dcdda76258de3319f9a2df87dacea samba-devel-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm dc506312ac2255d5138d25b11b398078716d6051cc6444589993987ab68a0a49 samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 27b9879d33e2f1d0539eddc7f707d8c79c8223f7c1f9a6518a0b64e03f671a68 samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm e8b5c32b85b54e485586079e504d22450b8bb50831bd8376759c06bac4d69f3d samba-libs-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 794da1b7d21545239f2f99f2b7668a765ecf1a3b83dd75b7922ab537f49c9393 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm d4781154aa4a30ed928bc011d0b56149f54675862b8bff42a5ebc702efcc7359 samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els6.noarch.rpm 2f644a9bbd18d4f88460a59342922a7c5ff60a56f497229322a17065174e5ea2 samba-test-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm b5f1e2975d333aed74a44a0d363a7475d2a07d61eae05d84e85220766ca4cde1 samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 60d528bed5d1dab3e15121d9464ab641256d37f424b757a3741efb3d74442c7f samba-tools-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm a39dbfdc3d3dbb4021025bb649cbb9f6af4d328ac93ef014d36e81eccd9d5de0 samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 82504484cd4066fedd3b395a47b16e6a34236b8aa8b3e62d3dbce1daf723ddd4 samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 8762fc3230938e2c5a08cf535c672aee780c8649879f0da325b22064b879c668 samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm b41da5f88a5226a04a1cabca3d8ff528350c04c010a3e74724097a32afe37f14 samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm a0c01a40728cb5ce31bc95e2b922a962668f1cfd66a4472718e618b7576a40f4 samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 3d38937de0ab660430c5c4033e69c85b111cf7861d6a06cdf2871753e6c356cf samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els6.i686.rpm 5790e6083f5ba4f7bc79ab82d428a430b1ef979f348cd17f8c9c50310bfbe7c3 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 68438ab1935c3d500636ce32b7ee478a3a481d916d0d148848a80b7740979569 samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els6.x86_64.rpm 3e97ee4109f61e79c5f51083a90415788bc76341e82fb13fc39c48754293a8ca CLSA-2025:1739961336 TuxCare License Agreement 0 - CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els2.i686.rpm 6f9be04848d1ec2ac3a933b4e578ebdc623202565f534478f5cf4cf5682e64ca libxml2-2.9.13-3.el9_2.1.tuxcare.els2.x86_64.rpm 37512a300d5b9282ea12df6932ea7f60d6ab58f6488ec0695745c83267342e1b libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els2.i686.rpm fed005d0ead5ee8462cad2fccaf2ad5a804f0cac12bffde32725f2174b7d527d libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els2.x86_64.rpm 8bdeac324321eeedfdf5967572e54b3008277b898350814e0d1e7f3aff702d3a libxml2-static-2.9.13-3.el9_2.1.tuxcare.els2.x86_64.rpm 429fb1dfd84e5c942bef76370723830d80f1ed2efdcac57e8e2fd58277a54b06 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els2.x86_64.rpm 42c7130d17e24f0b5c77fd100da91cbf460b7fc4720bbace41535b05fbb05903 CLSA-2025:1739961948 TuxCare License Agreement 0 - CVE-2023-4408: fix high CPU load in ‘named’ while parsing large DNS messages Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4408: fix high CPU load in ‘named’ while parsing large DNS messages

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els6.x86_64.rpm 64db3b7d74668d4a66331f40e9d12d30fa1ea51349b1af6b6ec3fd7050546505 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els6.x86_64.rpm 9fd37c2315386bdeb97ac41ed4afb4964caa73a4e6cba33e0f207dcaefa48b9f bind-devel-9.16.23-11.el9_2.2.tuxcare.els6.i686.rpm bff850139f9f34517512a9d3a0b741ef7d6bd33709d4f66989195bbbd908a674 bind-devel-9.16.23-11.el9_2.2.tuxcare.els6.x86_64.rpm 3cab41437d3e76522783556ddde14a15e8117a0a2ca615ec98fb4dd541aeb546 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els6.noarch.rpm af7db248bdf28ccac1af597ea1145d4da5c3e9a9ad51a1239f83a149efc07fda bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els6.x86_64.rpm f1538c7330c1dd159568485c028acee6f243f16a7bbe7f64510980f1281b5024 bind-doc-9.16.23-11.el9_2.2.tuxcare.els6.noarch.rpm dfa59d7610348c523f6bae6a2ce2c84c8565c7f7aea10256cccdc0c65bf9375d bind-libs-9.16.23-11.el9_2.2.tuxcare.els6.i686.rpm d44ab4f90b73b5ae3ae43aa039b687edcbbcfd1b82d35b2587714642b5c6ad7b bind-libs-9.16.23-11.el9_2.2.tuxcare.els6.x86_64.rpm 7b46e74a470fb1d76b81478629059f9e207dec9a6df76afd565974425a061f9a bind-license-9.16.23-11.el9_2.2.tuxcare.els6.noarch.rpm ea162b18924e5d15fa108ed45dfd31995009733906df6b86631ba8d343a8113a bind-utils-9.16.23-11.el9_2.2.tuxcare.els6.x86_64.rpm 314626180c228945fd043fbeddd6b0ce8ea0f6c04a2d459b6d86f19b99cb6f8b python3-bind-9.16.23-11.el9_2.2.tuxcare.els6.noarch.rpm 1242d8618d4b6721339aa9146b4952b4e8aae1aad512389297369a9dd78bd0da CLSA-2025:1739962899 TuxCare License Agreement 0 - CVE-2024-3596: implement support for Message-Authenticator in libkrad Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3596: implement support for Message-Authenticator in libkrad

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els7.i686.rpm 60f4db369b8d88bee4f3c3ed16b5107dcc76400c2bfc7c7f9bfe5ec7958800cf krb5-devel-1.20.1-9.el9_2.tuxcare.els7.x86_64.rpm e77df8fb8c0bce544d063a0237a6ad320b38d5eace5f64e14683ca68180062c3 krb5-libs-1.20.1-9.el9_2.tuxcare.els7.i686.rpm 2c9fc07e93aae27b6eeced3a6864a302c2605bad98f0001a499bb655960966d8 krb5-libs-1.20.1-9.el9_2.tuxcare.els7.x86_64.rpm 43528264314fbdca138e157df2ae97c0215b6bcc670fa83187d7066c74f5a8e5 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els7.i686.rpm 36619f0e3cfedaf1f12eda4de4b85991ab4ed14568216e8028d387ccfa9a0766 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els7.x86_64.rpm 325570d4e6daa6cb3de3e0b0bbd0acaa500b142cf19bae347cef5573cf9a6349 krb5-server-1.20.1-9.el9_2.tuxcare.els7.i686.rpm e95b3945db352a1f41c7263c228cc174e2c749198b3cab4fdb1fc13e062de9f4 krb5-server-1.20.1-9.el9_2.tuxcare.els7.x86_64.rpm 65e16b4e0bbed7b72e11ceb56e06a74fcbe375b87ac0b01e3c18bf35e033e904 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els7.i686.rpm 897bd2c4e2c13c3dc6ce2095f8225cb8767c9e5c2f284c69f17c65fbda1943dc krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els7.x86_64.rpm a0516e99093ec81df8f594a0e264c14dc0ebcf286ba54f10e5958fc28f4e38ef krb5-workstation-1.20.1-9.el9_2.tuxcare.els7.x86_64.rpm dd4c962fbb6b952f4c8772c51fdaa462a8ec21c436136285242a9b0be4d69610 libkadm5-1.20.1-9.el9_2.tuxcare.els7.i686.rpm 327337cbe489261942af88d12579dc6f8a57438559baa08af1cb5c23b48ae435 libkadm5-1.20.1-9.el9_2.tuxcare.els7.x86_64.rpm 9abc86e1d0ac833f67cc8dfbc258eb3268a4170b76419989d87fb2c496b28b5f CLSA-2025:1740051873 TuxCare License Agreement 0 - CVE-2024-24549: fix improper input validation vulnerability for HTTP/2 requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-24549: fix improper input validation vulnerability for HTTP/2 requests

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els5.noarch.rpm 9c5f8159277d649785d46ab35a245e31dc43bfb59ca89590cc2cc4d3201f830b tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els5.noarch.rpm fe82ccb6fb94c460e529373f2f218dc8ad957c359e9af173378b96d635019b19 tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els5.noarch.rpm 0d7886037ad76982ec4b83f95f2f795d3eac76ced5bec6bdd25393ec67d33380 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els5.noarch.rpm af9601f8bdf5c34c42f25f582ad98103751b30172f5914eab50e10b7823e24d3 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els5.noarch.rpm 1b3cd19b1d251cb12e25b1ad20fa84db0bbd63088e2070a9061fe6c26e21db38 tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els5.noarch.rpm c9c37aafd750e1641e75d2e428f0ec23d74505768ae39922cfe5a632098115d0 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els5.noarch.rpm 2158f41ae1d36a7deee351fc8caccfd7a47ad6cdb3907333357374d2b2fe2629 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els5.noarch.rpm 2e6d6544a43996650e1019f732f3bec8f90ac165daf7aded6bc3464675a30262 CLSA-2025:1740132708 TuxCare License Agreement 0 - CVE-2023-28100: fix issue where Flatpak could copy text from Linux virtual console and paste it into command buffer, potentially leading to command execution Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-28100: fix issue where Flatpak could copy text from Linux virtual console and paste it into command buffer, potentially leading to command execution

0 tuxcare-almalinux9.2-esu flatpak-1.12.7-2.el9.tuxcare.els1.i686.rpm 8572062f1f5fb9c1a172e590f9d05d273355bc5943e5bcd59a74b595970b8f6e flatpak-1.12.7-2.el9.tuxcare.els1.x86_64.rpm fc2285acd650935a0dea28dc47caf58f0182db418996c92ecedcc22231d9ac62 flatpak-devel-1.12.7-2.el9.tuxcare.els1.i686.rpm 155e4b47ca9375d383b5d2c0dcdc0b63f3b36dfd40a18c73e45d27dd73449a0f flatpak-devel-1.12.7-2.el9.tuxcare.els1.x86_64.rpm 43504be79a45d2776d35f96ee83ca80977f8270a22ad9b113f1a39d40c57b60d flatpak-libs-1.12.7-2.el9.tuxcare.els1.i686.rpm 9852422e6e685f279f3915a4774f5d606f4c6a1be6cedee27a5962e22f2fd006 flatpak-libs-1.12.7-2.el9.tuxcare.els1.x86_64.rpm e25f0e6053a085aadc931d8c33d2413ccec1700b32215fa37463fbc49b294a4a flatpak-selinux-1.12.7-2.el9.tuxcare.els1.noarch.rpm e1efca1168b1c153c345602d95da46813e60cf9352f6063ce221ea1608c4497a flatpak-session-helper-1.12.7-2.el9.tuxcare.els1.i686.rpm eb98af0cc1cf4b678c54cac86fc046f3771aa331b3199a035c0ad5fc5155a4d0 flatpak-session-helper-1.12.7-2.el9.tuxcare.els1.x86_64.rpm dae886f2b5ca1977fd8238320045e66661ddc03b772ed222959d9d8ff01ec60f flatpak-tests-1.12.7-2.el9.tuxcare.els1.x86_64.rpm ed01db35f9c3656ce9d57649cbb62660c5a058c708cb48d9dae40705c2ec9eff CLSA-2025:1740230407 TuxCare License Agreement 0 - CVE-2024-1441: fix off-by-one error in udevListInterfacesByStatus - CVE-2024-2494: check for negative array lengths before allocation in remote_daemon_dispatch Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-1441: fix off-by-one error in udevListInterfacesByStatus - CVE-2024-2494: check for negative array lengths before allocation in remote_daemon_dispatch

0 tuxcare-almalinux9.2-esu libvirt-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm e3a5eda98d12e6004f147c6703c7032718fff0bb7253904240d6f8a525c6d6da libvirt-client-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 882de0ccab23e6d1b3b6c2d39a869517b4a59b9449901c991aa51a008730f081 libvirt-client-qemu-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm ba4352e5f97d1cff9e04be2fa188460fb25322c82fb4bf97a963592e539aed1b libvirt-daemon-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 81a64318fa44bf2bd7538bdc2cdd78125eb196ac6e87fabba0b12f7a057aabdf libvirt-daemon-config-network-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm f98d2e82cd1553fee1bbbcdff73e83755ef5b29cc3ba30cbd5e0054e37301093 libvirt-daemon-config-nwfilter-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm a0149a55837e86e85893206906228fe29ed275c27b882dd33c4d9ec9f49dbcac libvirt-daemon-driver-interface-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 3fe624b5eba15a5da640ff3354947ddde5b86516384c704aa5d2e667831068a5 libvirt-daemon-driver-network-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm ff9d6b004187a173518db452422edee3df568b24762c4704702123e3175be391 libvirt-daemon-driver-nodedev-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 54f0162f7094c5594d484e44a859e83dfcf6f1f237c04033b89bfcc87d125e2a libvirt-daemon-driver-nwfilter-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 4bdaa7222a2bd9bf082e8d8a8f4f21a0da4a821dd2ccf49407ab98728b8cd088 libvirt-daemon-driver-qemu-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 8f39702aeea7cb2f7121a0532c3b776017b23fb8417846ab37a3900ca9c91152 libvirt-daemon-driver-secret-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 741ffcc2a2cbd4ac84852d1fe7f6f65bf3c6ae6c05a233125e6d848156e35d9e libvirt-daemon-driver-storage-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm aa4499c40d9c3ea3b333f6743a19bfe6a315d40105fb15ddfce477b4705b3263 libvirt-daemon-driver-storage-core-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 9feb53887baaeb0b8ee6ac0b279bb7304bdbd76627451951fd712b447190603b libvirt-daemon-driver-storage-disk-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm c991a5a62a754d2712b2cd629401986520d3353a8dffd00da2fa289b89e82aab libvirt-daemon-driver-storage-iscsi-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 5b9c8f87b8330a008c992454d62af5d4fb366dd3eb328f8dd9c8d39610bf47a9 libvirt-daemon-driver-storage-logical-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm f9b2f54da54f8ab33a2c46bcc316ca69844413ca961fbd135d744d6a824ebf71 libvirt-daemon-driver-storage-mpath-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm c70660fd741cf7a4958819d31bdc1ffe594d14dac83c752056029390ac3047fa libvirt-daemon-driver-storage-rbd-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 1b65e9558a3a01d82a8cba5287a92ca7335613e07d2fbd322c1882a694bd3bce libvirt-daemon-driver-storage-scsi-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 9c883b414585bd5954c5b409573ba64f32c0bc4bf077fc787b5852ebe5bbf56a libvirt-daemon-kvm-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 9b8e8ac4c1d4dbf973298d2dddd44659b89cbbf0dd5cf6403578743e3f6b321f libvirt-devel-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 6e4d66ed200ee5424ae16eae5cb3b37c2d126b0037aee2f5bcbf49e432003a44 libvirt-docs-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 5f860b90766c151bdbeb9e27bf458e8f6348fbba4909f0468125257835d796e6 libvirt-libs-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm a5963bc9a26aeaed878b9dda2c28dbf27d99e2df383e890646f3e4d7aab3a7a9 libvirt-lock-sanlock-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 1f99d9cc7bab2c24278633ff77e5644279a59edf38215a16700fe4f4c260bbe8 libvirt-nss-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm 0189a15e806994142b572a07285f118a4f1c372169b5b2b37b9f4e16a8e96b7c libvirt-wireshark-9.0.0-10.3.el9_2.alma.1.tuxcare.els3.x86_64.rpm b91642b68fb5126415f9eb7d0a58a5f0ec3d0b5caa9228ed0d67db7064890140 CLSA-2025:1740230558 TuxCare License Agreement 0 - CVE-2024-23672: fix incomplete cleanup vulnerability to prevent Denial of Service Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-23672: fix incomplete cleanup vulnerability to prevent Denial of Service

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els8.noarch.rpm ecca9a08580615a35bcd13cfe864d473698948e0a282c5f6d5ed6da61c340665 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els8.noarch.rpm 5d5cfac6ec0f08e78e42e5db2e73d1b326f3f4a4ac7ca870147c2e0474b3a29a tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els8.noarch.rpm e20fc34a4d6fd5eef99a36e275bdcc7b5bcfdd00651534aa45e6536469038c41 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els8.noarch.rpm bcce6949c17bc97fb342a55b6e80a0ac7d71923da8a1c87ec09eebe676e5f0e0 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els8.noarch.rpm 74f302ec86ea8dc5352d32204d746694274b1dea8f38c11a6f3b5fed1b81cbd9 tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els8.noarch.rpm d9bbd2b3fa170c94f6ed252770389be4f62e50c98270462e7b0019c2dfc0e66b tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els8.noarch.rpm fcd3c4c847dfac677b6b2a4c64e6e58f9307bed65ba355ad09c87f38616298df tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els8.noarch.rpm b3fb71ddbf34573c16b383d03fa02ab6015b11ba61971e3a7391558b2f6b7524 CLSA-2025:1740470712 TuxCare License Agreement 0 - Update AMD SEV CPU firmware to address CVE-2023-31356, CVE-2023-20584 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update AMD SEV CPU firmware to address CVE-2023-31356, CVE-2023-20584

0 tuxcare-almalinux9.2-esu iwl100-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm c516a44cbd6c6f44f453ec2eae894c95dadea5dd2ed512a8471274d2b572e51b iwl1000-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 387d9c804df1d93a311a4446ffbe069ae0d87b75a5ce15c16ea566471f5d3780 iwl105-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm a90bed990afa68f509d92138d965242823841c07fd7938dbbbfe94d3873bfddd iwl135-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm d92bce745e88da5bc47705b8da25b2ac44188623f016effcbf8ac50fa85c0c2d iwl2000-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 9871b638927d5ae7b6c3bf5b14ea133e8716c54827d4d30bebcab47cd2dbe80c iwl2030-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 6bf04f599358278bcc76846db4faa08d2acb9fece2bad5a509e257612a33dce0 iwl3160-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 6bac648d16647ffcfbde40787319e5ed69cd48b690b0cf95593967a7985181d6 iwl3945-firmware-15.32.2.9-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 3866e2e9b4862bd65c0b14234f38db3fb743ac47bd15eca8b444dc95d213c0e6 iwl4965-firmware-228.61.2.24-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 7a2734c76f00d6d70c38347592f56e07e268b1839649c43e41b40fa14b86ba61 iwl5000-firmware-8.83.5.1_1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 561871f4b4663afe1ba0e5c0a36688190473267816894508d02578c6854ea99c iwl5150-firmware-8.24.2.2-135.el9_2.alma.1.tuxcare.els5.noarch.rpm e8eb1eaad5460a9a410b6cd73cf6ef60e2f57846a641672d5976867c552db0b2 iwl6000-firmware-9.221.4.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 56663055c9176b6c4610dc55ea907bd3c7ac385c63f72c8d2ec227581b990035 iwl6000g2a-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm f1cbb997ad185030d0f5d5dcc650dec1957cb936b7e56c3ef3d3c49f25d6ef00 iwl6000g2b-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 759503f49f1f558d38daa0a0a02fcb2ac501905b5c119bd7a3b84895d8546164 iwl6050-firmware-41.28.5.1-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 2c9d219b1489264a5204a4437b4c8b1b62e5221ac3ec6d3de648dc7c1fc3c4df iwl7260-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 6f1b2d06175f7f0919b9195d2b9ce2e5cd6215260e33aa9c14a4ebf75ab5a44b libertas-sd8686-firmware-20230310-135.el9_2.alma.1.tuxcare.els5.noarch.rpm b7aa19f8fc2b692ed3dd781cbf87be6d6b0bee5a2b1961beca7282356ca33e25 libertas-sd8787-firmware-20230310-135.el9_2.alma.1.tuxcare.els5.noarch.rpm efd607f45c9a5c9fcee4f78c5f405b79317181024fdd76908b90ddb076446801 libertas-usb8388-firmware-20230310-135.el9_2.alma.1.tuxcare.els5.noarch.rpm c2fd6f6f42e1053e9c5396c260fd54d36df5d1ab457375468c8d2a67f15d2b2c libertas-usb8388-olpc-firmware-20230310-135.el9_2.alma.1.tuxcare.els5.noarch.rpm 4e8509533ef481bc66a01f55bfc23f880593fa005fd622f6e52d287423e277f0 linux-firmware-20230310-135.el9_2.alma.1.tuxcare.els5.noarch.rpm a285ad9899e64c0748b8340c407cbd60afecbf0fa69ba4631edbca068e39ed1d linux-firmware-whence-20230310-135.el9_2.alma.1.tuxcare.els5.noarch.rpm d18b2f400a710297f2fb68dbd7a19c9a77364e36513c63177d111de281f1b955 liquidio-firmware-20230310-135.el9_2.alma.1.tuxcare.els5.noarch.rpm fa7b03aa40487f57fbbb51b9777f616748fdad36cef4a4b58f34df4e224ac748 netronome-firmware-20230310-135.el9_2.alma.1.tuxcare.els5.noarch.rpm db08bc9d5acb48fcbf6d8a71126951128b4add2200d3c983b3bf8ccfd343bc1f CLSA-2025:1740470877 TuxCare License Agreement 0 - CVE-2023-41105: fix unexpected path truncation in os.path.normpath() when handling '\0' bytes - fix potential nullptr dereference + use of uninitialized memory Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-41105: fix unexpected path truncation in os.path.normpath() when handling '\0' bytes - fix potential nullptr dereference + use of uninitialized memory

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els3.i686.rpm 823c4d9737dd31767675d1f6b200b2e0f5d16b8fc353e9369a2902bd9437ca13 python3.11-3.11.2-2.el9_2.2.tuxcare.els3.x86_64.rpm a8c8f5a8a020f5f631fa8a4470a9ece22d96fb60aa2af7dd157d333c267fcd87 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els3.i686.rpm 6a42d80cec5c00561d09c85483ba43828ba26860d095c8033f450313dc3f8bde python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els3.x86_64.rpm 15ec443887962e39a4259597821e049aaea604d5e5d7430ff498bf37ca9e696d python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els3.i686.rpm d6d4d073cd3c5f9487306b37e1c3fd89fab281dbcdc501dc04fa9ceb8594eed0 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els3.x86_64.rpm 4727de467842f5c94b93426bd85448f4f0cc3e7d05fb13267a0fbaf86b6ef87e python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els3.i686.rpm f7325addb509dab198cbda0de9ed3acb944d391a986f72df82f7fcefa371894b python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els3.x86_64.rpm f06c0cdda9a0d53d1e1bd6224901f95e9626dad087e3c4a06dd276d6ea3e8c67 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els3.i686.rpm 82e5a085d0db05068306776def12ba88894760f2f2ead04e5a30c4ae81a47b14 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els3.x86_64.rpm 4d5b0220fd2ac8b5c6468a06ee9184ad200d5477c4de8ad6316c4749516913fd python3.11-test-3.11.2-2.el9_2.2.tuxcare.els3.i686.rpm 20e256e4efe1d1921082e48cff6d28a9ef76f451b77d15c3486d9f3d5412bace python3.11-test-3.11.2-2.el9_2.2.tuxcare.els3.x86_64.rpm 2181d0f018f7a008598a1e1dfeb56f04382c0cb0fc98ab52093ca5ee65b34803 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els3.i686.rpm e9efe7fef1490a6a21bfd5c13d857c09be909aa7e3cd221d801871fd06803d68 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els3.x86_64.rpm 984d5e11efe0f594c12210f383d8ded0da54667d704e25f79477e1d790f0e388 CLSA-2025:1740471603 TuxCare License Agreement 0 - CVE-2007-4559: add security filter in the tarfile module to prevent directory traversal attacks. Uses `filter="data"` by default to block unsafe filenames; set `filter="tar"` to keep legacy behavior Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2007-4559: add security filter in the tarfile module to prevent directory traversal attacks. Uses `filter="data"` by default to block unsafe filenames; set `filter="tar"` to keep legacy behavior

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els4.i686.rpm 7914e59781c9bb1392c4e59aa51f9f14683a7713f52a016a9dcfe770eb0bcd94 python3.11-3.11.2-2.el9_2.2.tuxcare.els4.x86_64.rpm 117481f0272ea2fd0605a57058f8cce6c0f943554ac421c71a3d45453bff27bc python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els4.i686.rpm 55ca3c4adcae8efa7e78ca5d000659253a994d75955ebfc10bf1b0435f11776e python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els4.x86_64.rpm 73fb21f65f7afa19769160a7660f6787d742529f2fc3f4d5b75f1cf1d3c15434 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els4.i686.rpm a57d718a5f10033ef60496ebd441c7dfe691bc045042244f014d405cd4c95546 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els4.x86_64.rpm b9086c701a0ce466a7e2e1a532dfd1ab2443fddd76b3a9d9ccb2c3cac5e16eb2 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els4.i686.rpm 3f5a1c3f35bb299795e97e9b19eb43224f7fa3eb74dba84326a17b923e949cb1 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els4.x86_64.rpm adfbc99f1244dcdf68ecd4a444ef62254181c40a336780a2586de467169f1eec python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els4.i686.rpm 0f609b1680b26016ea37108c90afd4661ae530740994c2e17ef9bb3b8cb26bc8 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els4.x86_64.rpm 800d6d52b36b378e507b8b86f5912241d3e78bbb778078e59322317b9b304855 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els4.i686.rpm 24014c4b6828def8da3b83f45a3704ce1ae80279024c906f0833c1586e123cd0 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els4.x86_64.rpm 48d1563647a740f9ff191df0c886c2b1d5730be7afef4e2937d59e23a44bdc25 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els4.i686.rpm c74a192127c1a9af0c6f86cd0b9154023ac356994f1ecab480b4a286502e07b1 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els4.x86_64.rpm 8b18964a0195fdd55794d37aa42bc13aae220bf75e2e5e9f61862b099823c8df CLSA-2025:1740477793 TuxCare License Agreement 0 - CVE-2024-6232: fix excessive backtracking in tarfile.TarFile header parsing to address ReDoS vulnerability. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6232: fix excessive backtracking in tarfile.TarFile header parsing to address ReDoS vulnerability.

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els5.i686.rpm 01398b83bde80e158359b8aeca16644335db3a4fa5bb9a0e85d62bcb301355e5 python3.11-3.11.2-2.el9_2.2.tuxcare.els5.x86_64.rpm f1fc0e6f71bafba5e8364a4d4011f1cf4740900c37e4946bb0734d26b2b8dc50 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els5.i686.rpm 249b4dc5d88f1dd9f415aa05987a71511e90d4164a8ef5d3593e5e3212e6f5fe python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els5.x86_64.rpm 150306d461127d2be4d4b039dd5d0aaeb158b1f2b557f4ef72f7a10f6925f6c5 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els5.i686.rpm 746f798b34f027aa71029900340b3afb662b3a43cb84d6bfe5ded474a0a54cc1 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els5.x86_64.rpm 5bc31593bc9a55a21dfdb3855156a5f70a373f35f4f63631e0e69118fdf6c478 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els5.i686.rpm 510c52c9820697d5ce2637ec6668acefa2560687684d0264f88965e8b3b88d25 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els5.x86_64.rpm b195502a36cbc0f9127bbef6cb76dee0ed754e5c0b556f702cb4ff77d4f5a5bb python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els5.i686.rpm 8f839dc4e5cce7f4fbd3ecf2f83a567b3aa702712bbe0d3085b1d8836f4393ea python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els5.x86_64.rpm 0f855eb1dd08cbc93948daf7d6693c414ab26af649e9f0798fb67dcf62bb20d3 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els5.i686.rpm 35171f83ddcfa32af9d911b97bd3d7ae6019157d4fe73870fb8694c0b2e184fb python3.11-test-3.11.2-2.el9_2.2.tuxcare.els5.x86_64.rpm 31d3614ba06c814c3b1e87d304600ec026a3a62de8d3a84cd845fe05335f5037 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els5.i686.rpm 55bffa870e2e3021192e380fff43f3de7ddb78b444594fb34ad65e61e3c86a7c python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els5.x86_64.rpm aec5bda2d965215d6847fe48fff59b0c6ca4dab0e4da927bc6a5420b323def91 CLSA-2025:1740479778 TuxCare License Agreement 0 - CVE-2023-6597: fix symlink dereferencing in TemporaryDirectory cleanup process Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6597: fix symlink dereferencing in TemporaryDirectory cleanup process

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els6.i686.rpm 59c02d38ea025f5fee334e3888c0b3f6aeb913efff71e268ba68339aab125c70 python3.11-3.11.2-2.el9_2.2.tuxcare.els6.x86_64.rpm 5c1c864101ce18a0f10ab80b0d1e8320b6845eda62e0fd24a87970dc16799689 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els6.i686.rpm 8f98fa9922856e270cd1890606fd03277b27be13f4a7efcac16fd34ebc288259 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els6.x86_64.rpm 4ec2bbb0ad12cafdf5dc85a9284edcf060e39bcfb7d1103a2f6da158974e5bae python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els6.i686.rpm b87822d6783a8d14b902fbf3d2165fdae1d9ed850019d941b545039775b4e018 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els6.x86_64.rpm c06d478666c096e535d3fc94b386c90fdd625d35cc54dde57694084bbf4065ca python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els6.i686.rpm 39f6b20c9a0384e8fd8cebd4a50a7ce78e4966f348ee6e93691a6d4b5c7817b2 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els6.x86_64.rpm 5967e69761a319f82322748ec456567c3d5c558cd07fb5bfe815db11538467c0 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els6.i686.rpm 555fe6331c82f9e6646b9602ddb3afd8ebb44d4053c2c55b4e6d6831f5e36b38 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els6.x86_64.rpm 9cc8a594b1519909df76232772b2a539566e993a76ab22adae3487123db307e7 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els6.i686.rpm 99afd3c8eb24e6a44453b2d9018510a9bdee2b1375b2bed7887c8db8b962ea63 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els6.x86_64.rpm a3894d7bcc892dd0b55ad916da1c3a4c1a768cd18786ffed95a0ddd987cb32f2 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els6.i686.rpm 9bded3da5b93520e6db23f9ba0a69cb178306b36b87d56ed214c290963d2d626 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els6.x86_64.rpm 9ffbaa47c60324c3389f9f8934f2c8fbd636af44542aec2c4f5492c942c4a94c CLSA-2025:1740645491 TuxCare License Agreement 0 - CVE-2023-27043: add a strict parsing mode to prevent incorrect address interpretation. By default, strict=True is enabled. If you need the legacy behavior, explicitly set strict=False when calling parseaddr() or getaddresses() - Additionally, strict parsing can be disabled globally by setting the environment variable PYTHON_EMAIL_DISABLE_STRICT_ADDR_PARSING to a non-empty string or by creating the configuration file /etc/python/email.cfg with the following content: [email_addr_parsing] PYTHON_EMAIL_DISABLE_STRICT_ADDR_PARSING = true Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-27043: add a strict parsing mode to prevent incorrect address interpretation. By default, strict=True is enabled. If you need the legacy behavior, explicitly set strict=False when calling parseaddr() or getaddresses() - Additionally, strict parsing can be disabled globally by setting the environment variable PYTHON_EMAIL_DISABLE_STRICT_ADDR_PARSING to a non-empty string or by creating the configuration file /etc/python/email.cfg with the following content: [email_addr_parsing] PYTHON_EMAIL_DISABLE_STRICT_ADDR_PARSING = true

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els7.i686.rpm d0a8acf122a6c6d16d466af2c1cc06501b3ea74d05f43065c6427d2861c0acb8 python3.11-3.11.2-2.el9_2.2.tuxcare.els7.x86_64.rpm fa3ff839df059f88eb673130123537efce7e8e31edd48c22ed62eee2638faba6 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els7.i686.rpm 85f8471573b11c22fce06430cfa8eee7ce96cdb4e6d1ede5f1564a98d4c2ea1a python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els7.x86_64.rpm d87a3ce0b45e2c999f1ea8ef189514d0a0b5f501da46ef9e12c6d40cdfa0d3e2 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els7.i686.rpm 434ae890c51073468d0c3d78392a8d51c89d59624b4a08ef8bab750be4477a29 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els7.x86_64.rpm edd41fbad18c3ea67090335a65709f79c17d48a792fba585ce859dcdfe886467 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els7.i686.rpm 684009619dff7e76430fd6e48ddd59db697c5c392006682fa493ea7612bc047c python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els7.x86_64.rpm db523f9cab92205f28e4764352c4e520f925e0aaedaefd42767453055c32ef83 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els7.i686.rpm c2f541935a8b1c9661fe52c09cdb7acf212c1a927e3d9ed73fa278d929edcf44 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els7.x86_64.rpm d03611021cdc9204de130de628c9d556d2ba23336660a64f5357832e0d5bfad0 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els7.i686.rpm 20bed635fd9fa17f3a6e6aea9cdcc2bb3b855b609db7692397b58f2105ae71fc python3.11-test-3.11.2-2.el9_2.2.tuxcare.els7.x86_64.rpm 93d6f6354f81919a618d99d9904dfdf2a17715cb32635bbebc1b70d7cfbfa80f python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els7.i686.rpm 3160e9457021ed985921e02fa11ae69a445595e26e3cee08fb5cc9b50438ac89 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els7.x86_64.rpm cffa04c7f5aeadd778eda30cd5d2da54141b4df23d06a3e69d6f56e90ecc2e24 CLSA-2025:1740740956 TuxCare License Agreement 0 - CVE-2023-28101: fix issue of hiding elevated permissions by setting crafted values containing non-printable control characters Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-28101: fix issue of hiding elevated permissions by setting crafted values containing non-printable control characters

0 tuxcare-almalinux9.2-esu flatpak-1.12.7-2.el9.tuxcare.els2.i686.rpm 755274357f91f3a92c15d9c8693a89fca85257c976bbc822babb6f0fcdf5c704 flatpak-1.12.7-2.el9.tuxcare.els2.x86_64.rpm 16a47484d93ccb5f83f5023543aa2a83ca156d1155ef28dc48f5f835fc05e28f flatpak-devel-1.12.7-2.el9.tuxcare.els2.i686.rpm d92197ed1cf68d9366e3a7241849e234b5127068247bdabb7f82433f7297772a flatpak-devel-1.12.7-2.el9.tuxcare.els2.x86_64.rpm 5e984378133aa6afe6b4648b6c5e57b0856fa355b206913743e3d72069e7b2fb flatpak-libs-1.12.7-2.el9.tuxcare.els2.i686.rpm fdeec8d167697cd35a5d10a2f1e3b7770bef5aa0d863d6c52e60e2614d290bef flatpak-libs-1.12.7-2.el9.tuxcare.els2.x86_64.rpm eb58d423fa1b6729683e1c6f90657c7cd2e11b1af3fa09db5f727ed6c94f4dab flatpak-selinux-1.12.7-2.el9.tuxcare.els2.noarch.rpm 59fd6a55a92bd156eca3727eee047ff0172273aaead2605df75647f561eb42ae flatpak-session-helper-1.12.7-2.el9.tuxcare.els2.i686.rpm b7cd271d1ff773eacf394c635e6014dc7b66337b889d30e0ec03ef1f79ee11b0 flatpak-session-helper-1.12.7-2.el9.tuxcare.els2.x86_64.rpm 06570333d4ab599b9b46ce672edbf1adb5501fe7059ab705238028b7f73729c1 flatpak-tests-1.12.7-2.el9.tuxcare.els2.x86_64.rpm d5da03aa8ad7d1ee19c72d6fc28a60c4144bb107def9a4782df2f98735ec9798 CLSA-2025:1741034026 TuxCare License Agreement 0 - CVE-2023-49288: fix Denial of Service in HTTP Collapsed Forwarding Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-49288: fix Denial of Service in HTTP Collapsed Forwarding

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els8.x86_64.rpm fa380050ff0351153b99cb274c12b98ad55972bb7a2249fb854e3ff03803ad9c CLSA-2025:1741125454 TuxCare License Agreement 0 - fix CVE-2024-42472 in flatpak by adding --bind-fd and --ro-bind-fd options in in bubblewrap, enabling race-free bind mounts using an O_PATH file descriptor instead of a direct path Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix CVE-2024-42472 in flatpak by adding --bind-fd and --ro-bind-fd options in in bubblewrap, enabling race-free bind mounts using an O_PATH file descriptor instead of a direct path

0 tuxcare-almalinux9.2-esu bubblewrap-0.4.1-6.el9.tuxcare.els1.x86_64.rpm 9d290b41a14fd7577cfa59cf04ae166d1094a79f17a3a9ccbfc6bb08ee5bd3cf CLSA-2025:1741125595 TuxCare License Agreement 0 - CVE-2007-4559: add security filter in the tarfile module to prevent directory traversal attacks. Introduces the `filter` parameter; use `filter="data"` to block unsafe filenames Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2007-4559: add security filter in the tarfile module to prevent directory traversal attacks. Introduces the `filter` parameter; use `filter="data"` to block unsafe filenames

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els10.noarch.rpm e2b27c7f258c28ed8fb8d716eb0486dc9f9d05354807f7e3c98ea5311b1f639a python3-3.9.16-1.el9_2.2.tuxcare.els10.i686.rpm e3aac310b3a92451d164d59cbb2bacc7592ea348cbdcb6868857fd405e71c8b9 python3-3.9.16-1.el9_2.2.tuxcare.els10.x86_64.rpm bfc43ae02d29638b045393428233e866d0948e7605e5a10504dccc6df60f61e6 python3-debug-3.9.16-1.el9_2.2.tuxcare.els10.i686.rpm dad77c7fecdb2c9f429eafb25b14becfb7e33fcbb948ee344259a1a688e66ec7 python3-debug-3.9.16-1.el9_2.2.tuxcare.els10.x86_64.rpm 627539d6eee6f413b013afde66443c8a7192358436603c4d3a13aaa60555a800 python3-devel-3.9.16-1.el9_2.2.tuxcare.els10.i686.rpm 60b18f8a5a21d5bee656c23b1e592b38ec9a8e6e5e4e9df4c944145e1b333b05 python3-devel-3.9.16-1.el9_2.2.tuxcare.els10.x86_64.rpm e4b4afbefcdececb325926499450f8a64f856a21b8665641a15b3dbef94300ca python3-idle-3.9.16-1.el9_2.2.tuxcare.els10.i686.rpm 2045619ee0d02289725266288e1b956eab7b4354f2e77ef3714b03738377e2a6 python3-idle-3.9.16-1.el9_2.2.tuxcare.els10.x86_64.rpm 1178477875511d969018a458438541b76a84bca7b0f1ca34755e03acbf4145ad python3-libs-3.9.16-1.el9_2.2.tuxcare.els10.i686.rpm dad62e65bc5cb10402aa71371a17446a5fcba02ff7b5416f1b10143345b1419f python3-libs-3.9.16-1.el9_2.2.tuxcare.els10.x86_64.rpm 2b25308a5184a7b499e4b1910b96d9b7f3624bf8a3099c3135e9efcc6c412aef python3-test-3.9.16-1.el9_2.2.tuxcare.els10.i686.rpm 431ba7a089b5b23ded7b14aff06fbe7e6fd84f82e378fe8d01f579309affc457 python3-test-3.9.16-1.el9_2.2.tuxcare.els10.x86_64.rpm d25240e6c41043b18ff63b4dc12a7f38b63c54c3ad4d080bfabf27f05a296267 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els10.i686.rpm 8fbf9fab878cd17a680e18c88813f2b083f952e66fe1e1ee5801724c3c9007a8 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els10.x86_64.rpm de73bb5ed994593d81d99464fd912b56be280f51aac1acf86d547abaeceb1ddf CLSA-2025:1741126041 TuxCare License Agreement 0 - CVE-2024-11187: fix excessive resource usage by limiting additional section processing and adjusting resolver tests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-11187: fix excessive resource usage by limiting additional section processing and adjusting resolver tests

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els7.x86_64.rpm a58649ee83dca0fabd61246fdaa9f78e68c94437eda950efba82f1f41c1ac37f bind-chroot-9.16.23-11.el9_2.2.tuxcare.els7.x86_64.rpm 6004be90871a863f840f54b3d114d1bbb736b6026f854e251cc9368b5cd64676 bind-devel-9.16.23-11.el9_2.2.tuxcare.els7.i686.rpm 8f7d525712222cd1e64f64d0b46ce1c0eae7d868b85ea010c0e2531fbfcc237a bind-devel-9.16.23-11.el9_2.2.tuxcare.els7.x86_64.rpm e928415d992e9b82e599f78ce2051397da5e28c71cc2dc7682437ea658a10511 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els7.noarch.rpm 3c8f61f029c592ea9b7b3b0afb7741a6d794b35e773bbb034f1b2fb5c188c440 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els7.x86_64.rpm a736ba533b6ecb39bcbbf2325a6d1802377e8d1091f54dc010635be006d3355e bind-doc-9.16.23-11.el9_2.2.tuxcare.els7.noarch.rpm af15a9e68b003df66599d9226ef6f03292760a4f229fb5141d88c220677d023c bind-libs-9.16.23-11.el9_2.2.tuxcare.els7.i686.rpm 98da5f540b2ea831ec52d8dede935341bad001b53b5cee2e4f8445ba9d26e05c bind-libs-9.16.23-11.el9_2.2.tuxcare.els7.x86_64.rpm dab5388a6fc4d5e6a052a551aeb169615aec10408bf11d5f08aee2c8f14139f1 bind-license-9.16.23-11.el9_2.2.tuxcare.els7.noarch.rpm 846fe3569482d2fc8603b9016d808d8bee9e7e16ddc362a8d449828328d97b86 bind-utils-9.16.23-11.el9_2.2.tuxcare.els7.x86_64.rpm da42c41c3533c7847bd9f8c69fdc5a907a2d7e5e585db0cec444b424aac97f92 python3-bind-9.16.23-11.el9_2.2.tuxcare.els7.noarch.rpm df4c40333a650ca7b9f102b96d58ebd3e41230fd3143615dba96a53a75f86b67 CLSA-2025:1741126677 TuxCare License Agreement 0 - CVE-2024-4032: update 'ipaddress' module to correct is_private and is_global properties based on latest IANA information - CVE-2024-6923: properly quote newlines for email headers to prevent header injection - CVE-2024-8088: fix issue causing infinite loop when iterating over names of entries in a zip archive in 'zipfile.Path' module Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-4032: update 'ipaddress' module to correct is_private and is_global properties based on latest IANA information - CVE-2024-6923: properly quote newlines for email headers to prevent header injection - CVE-2024-8088: fix issue causing infinite loop when iterating over names of entries in a zip archive in 'zipfile.Path' module

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els9.i686.rpm e4e40acf79930c0ebedfc28cfad6d166c9b680a6304cb8cc80c16c372c82acb1 python3.11-3.11.2-2.el9_2.2.tuxcare.els9.x86_64.rpm 1fd85869a6b2b0dcb27749aefd01501ae963d0eb24b99e951d334a58924208ce python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els9.i686.rpm b4781d05f25d1df7a7967b38e27a87049c59a2e976a90e5f387fa45b2f788225 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els9.x86_64.rpm 3fb1ec8b7a8f1beb3677d9a2b2f1ddac9d889fe288e4f8566ef6fb39719580d2 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els9.i686.rpm 77c0cceaf31c07ed2ae77065de7afc6140f8e11da8bc01a376289ee962617292 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els9.x86_64.rpm 419e1b7fcca90939e4bd02c75a170b0b2ff550ded76c23d8104c6a50d0419682 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els9.i686.rpm 37dd6e94bb4981d8cadfbf8cbc41f851697ed78fc8b31a1c7a7a7461d2e873f2 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els9.x86_64.rpm 9b64bb0d6a36b1a63bb5865ea604619ce82492279740291afd626d07db7bf3c9 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els9.i686.rpm 5969c8cfea9f81f11a9f83b045f6cd97cbb37f1699d095d01139ae91916303db python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els9.x86_64.rpm d06ea7a702a7b7928207cd3f42a852b2cfaa3749ed791416bafebb627725535c python3.11-test-3.11.2-2.el9_2.2.tuxcare.els9.i686.rpm 2680cd4d859c525256213951ae3696a30027a98738d853bddda9e3b100583d6e python3.11-test-3.11.2-2.el9_2.2.tuxcare.els9.x86_64.rpm a993d1fe1a06a33381e3a8f9a54ce4f325a3ad7b4047ec136d06fc002da1249b python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els9.i686.rpm 6918e34bdc24d513c40b63b60e0f2789cb03dc97444e0f5764d99dac1aa6e9c6 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els9.x86_64.rpm 7a0c32e0dbe66bf0cd1da6db057562c46ebfb39fad3bbb332d0f7cc7ff08de41 CLSA-2025:1741126840 TuxCare License Agreement 0 - CVE-2023-4408: use hashtable when parsing a message Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4408: use hashtable when parsing a message

0 tuxcare-almalinux9.2-esu dhcp-client-4.4.2-18.b1.el9.tuxcare.els1.x86_64.rpm 66bcf2ec3e5eceeb3d372a0d0865e7a19d50f5a402dfba567aa3bbdb6e8f9796 dhcp-common-4.4.2-18.b1.el9.tuxcare.els1.noarch.rpm 7753622eca0b212a02a0c61099270548c8c2687a0ae7388f4614f963d595d5fe dhcp-devel-4.4.2-18.b1.el9.tuxcare.els1.x86_64.rpm c9f0ceac62c5835c8c576fc6995bdebdc817de4ecfea212e4272bd853d7e81ce dhcp-devel-doc-4.4.2-18.b1.el9.tuxcare.els1.noarch.rpm 1219b902b649f92d79ce340d8d0ab9645fe0369d8fd2a513b7cf16fc3687a198 dhcp-libs-static-4.4.2-18.b1.el9.tuxcare.els1.x86_64.rpm 61cba1d24077071714e60cf234be41dfa6fed1b7868899e64c500b278da6db08 dhcp-relay-4.4.2-18.b1.el9.tuxcare.els1.x86_64.rpm cce991a924d3dc7d03f39762c364a791adeb6c2e341a1f92a51ebf59ce2f0105 dhcp-server-4.4.2-18.b1.el9.tuxcare.els1.x86_64.rpm c8d7a5338d5ba8657bf86440b7210a57d84d735e43e1e4594fb54efc0d74911d CLSA-2025:1741215546 TuxCare License Agreement 0 - CVE-2024-47175: fixed multiple PPD vulnerabilities by validating inputs, sanitizing strings, quoting localized data, and addressing warnings in cups/ppd-cache.c and scheduler/ipp.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47175: fixed multiple PPD vulnerabilities by validating inputs, sanitizing strings, quoting localized data, and addressing warnings in cups/ppd-cache.c and scheduler/ipp.c

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els5.x86_64.rpm 84563a2f9e50e8f07bb24a782a345f65709639134ff85478a397881c127ef46c cups-client-2.3.3op2-16.el9_2.1.tuxcare.els5.x86_64.rpm 3240852c2483fb67b3cb3d220fee2cd6ee864139c1600e5a302011d17a1e564a cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els5.i686.rpm 5a6cbeacbb31da06242ba8796385b80594500548ac5f7279759f4dab261a8ca5 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els5.x86_64.rpm 5fc69afea51166bef058eaad767478d9ead088951d02a865cc0b4673b736570f cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els5.noarch.rpm 0024389e8cb236d9773f72c105c2fb3c0ac12a6fe3154cd8cec709d74f1ed556 cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els5.x86_64.rpm 8a9f544fc612d628099a3314364b7ead6f45e42e9e625f45ed246f1de746472d cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els5.i686.rpm ff34b43b1d91ff6cdff124bc793658963de5b65f369f5c67bd2c74a59679ff42 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els5.x86_64.rpm 1b2aa302af50f1e8b8d169fcdc94631dbf415f48a2b9de58f5ef13e251e0d0f8 cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els5.x86_64.rpm ddf997cacb4aa329b8c2e6e715cd6fadff58f5a9aa601257025bc0084e812021 cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els5.x86_64.rpm b1627a07744bbe59a94dc466c0a2143e4e03c8cd44606624a7b64c1861114cf3 CLSA-2025:1741215702 TuxCare License Agreement 0 - CVE-2025-27113: fix NULL pointer dereference in xmlPatMatch in pattern.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27113: fix NULL pointer dereference in xmlPatMatch in pattern.c

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els3.i686.rpm 82bd6bc0651180293c4b00cd0db734eb75c19f9aa17e20c43ed668410aa9fd26 libxml2-2.9.13-3.el9_2.1.tuxcare.els3.x86_64.rpm 8c1bb54be39393d02627b4fcbbdee93ad9c6ea98cf07c1ff0eae46681dcdcec2 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els3.i686.rpm 558a5d4e53d603abb261316ba0ff74641d12052eac56db0cc492a64d11b250fa libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els3.x86_64.rpm 6cfaf7ac322ba591ea57106c9b2448204faaf0ed727b1177bf731e1c847f1c07 libxml2-static-2.9.13-3.el9_2.1.tuxcare.els3.x86_64.rpm 3cd22c1fecbeec23c29f7aa216a3c04c031d8542dc7070bb5648828cc1420977 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els3.x86_64.rpm f8d293cf9a1e8b3277a89de06fad6ae147c5d339d589e021840cafc600e768fe CLSA-2025:1741215879 TuxCare License Agreement 0 - CVE-2024-32462: mitigate sandbox escape by passing the -- argument to bwrap Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-32462: mitigate sandbox escape by passing the -- argument to bwrap

0 tuxcare-almalinux9.2-esu flatpak-1.12.7-2.el9.tuxcare.els4.i686.rpm 91ce26390c617ef2e9e8925307e8fa695a4dc50524e76adb717bcffefd5af4db flatpak-1.12.7-2.el9.tuxcare.els4.x86_64.rpm 5fde8de31180b47206dc57ac3cb0eaae833a3816816a41e50115b3fd2db5b93a flatpak-devel-1.12.7-2.el9.tuxcare.els4.i686.rpm 6ca367cf5b952ef00fddeb17e2e3df2d34255b50cdc2943e48afb5e93da464be flatpak-devel-1.12.7-2.el9.tuxcare.els4.x86_64.rpm e8d05c96f3aadbabc4bca9c2bbb6b1a81c5fe2c8eeebcba8dac002fac52a14b2 flatpak-libs-1.12.7-2.el9.tuxcare.els4.i686.rpm 20ec2e3f1c6e0c89e4b8f5997d987c8d834eec4877ce2a10af1b4ce210649a65 flatpak-libs-1.12.7-2.el9.tuxcare.els4.x86_64.rpm f25966106abca884a1377f2a1ebee0d2d90a5fab20e1e43aee296743cb4212b7 flatpak-selinux-1.12.7-2.el9.tuxcare.els4.noarch.rpm 20e7ef6fbfd3e29d8c0927cc6bd3143ad08cc747d971b825225033f4a54a0c24 flatpak-session-helper-1.12.7-2.el9.tuxcare.els4.i686.rpm 32b088dca8c49a8e8b192f61a818ceea55a09666876ee81de0ea57788c8c5f2c flatpak-session-helper-1.12.7-2.el9.tuxcare.els4.x86_64.rpm 3dcea03878677cf290c9e30d24a6ea60414e0186f1af054aee9db85abd3dd2cc flatpak-tests-1.12.7-2.el9.tuxcare.els4.x86_64.rpm bb3c00b76832516e2cdb34249827433971a98f3c69714416c25cbb9a089b2158 CLSA-2025:1741290429 TuxCare License Agreement 0 - CVE-2025-26465: fix a machine-in-the-middle attack vulnerability caused by a malicious machine impersonating a legitimate server Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-26465: fix a machine-in-the-middle attack vulnerability caused by a malicious machine impersonating a legitimate server

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els7.x86_64.rpm eca4fc88d9ce3f354643832f238b22dc30d72e73783a997a7c2534fdb9db02f8 openssh-askpass-8.7p1-30.el9_2.tuxcare.els7.x86_64.rpm 4df8a9ab9e762daec7e66e19224266fcdda8114979df1b65429227ec16d70841 openssh-clients-8.7p1-30.el9_2.tuxcare.els7.x86_64.rpm 3a54fe35f1048c552cd76234d916123627408f7a16efb6e58e5c3042f4d71ba9 openssh-keycat-8.7p1-30.el9_2.tuxcare.els7.x86_64.rpm 6918ce0e97c701d596f6a3bc689a826bbff75b9a41ec61e66e6f1911377bed8e openssh-server-8.7p1-30.el9_2.tuxcare.els7.x86_64.rpm 8fde834692d0196ac26d7f97144038c8230217a30ebb01750da6cf98bd0c8fcb openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els7.x86_64.rpm a5ccce4be074dacaee9c12141fc73de08c434acae0f8762c6f748f0d8cb6845d pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els7.x86_64.rpm fa8200c961b69190b181a176176751f2e8a1ac0bcff58ad823816307f1bd6dd0 CLSA-2025:1741290577 TuxCare License Agreement 0 - CVE-2020-11023: fix jQuery untrusted code execution vulnerability in the documentation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-11023: fix jQuery untrusted code execution vulnerability in the documentation

0 tuxcare-almalinux9.2-esu cpp-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm ef3839eec28b122c25d5e69e3c9484bdbf5da0de50794a3e18684378dbc575e7 cross-gcc-aarch64-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm ecca278f85b3a537522559b138ac047a09717bdfbbcd35c1f6e4ce326aac5d9d cross-gcc-c++-aarch64-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 113e3f32b91aa7a32ddef8954b7e5092733a184a9ab9da5164d3c3866678c972 gcc-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 16d0be91e04c7f740c09d6d754ddd02b369fa1bb65e054f89296d158936fe977 gcc-c++-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 622e85fa71bcde5ef688841ab0566cd1a5aa770344c307d2895306c1b354c556 gcc-gdb-plugin-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 4a810c23698cd4980a36dc7f1bec77d1337aa65398d1c73ac144fcc60fe49b48 gcc-gfortran-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 9d6003bac6b87ff2e8661c02fdd299f07cefe234984179abd36ca44a9f1a5fed gcc-offload-nvptx-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 59002c8168bb6a8d5549df6d41b77486172f134a9ad1750ccf7f56b69b023175 gcc-plugin-annobin-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 08bfdc90b88ff4e60a9c71ed099a5cf060dafadf3a4322a3b3b7073894650db3 gcc-plugin-devel-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm eedb63f876f4fc3c2b06dcba263de6b96317ff4a3fab0933e8fd8f2f0008388f gcc-plugin-devel-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 0038f993065755c5ea6f778f8fecd0451c71c49592c35248ad657879f8221c3a libasan-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 9b8eb57f5659c77db01e8ef9ebeff33a70048121796171143ee3ebd7178488c1 libasan-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm cd7e74bee69d608a9bcff8c20ed588e696fadbf28fa04ec140407c1f95baddfd libasan-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 6f8d149a0d36e60240699290ea1fa4f9a274ecb01349da549538b475b8983142 libatomic-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 678a4c5d00285592fa3f80c021b01647298af38d59c22783d89e04a3474f75cf libatomic-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 818b7f7b83c8ba89353e39658695c54e350265af46ddd69e8ad9324f9853bc7d libatomic-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 9741475bcd12f0da540d5a20c67f42e67a88f892f9618910910c2a27bcae68e5 libgcc-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 1631ba75b93cd83373ba5245573975b0097b2251cc0e6724e7f62e967c638035 libgcc-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm dc4d7b75d9197fcee857324f47b216a6806f680d72e4f6d9880a48b7434095d3 libgccjit-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 7ea1b442148fa5928f5c17c626d5557d225a0bfeccbbbaa6d81b877eeebfbbe6 libgccjit-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm e5cc1a2787e325f554730096641afe179efea71c83a9fa7f92250531e1d75fae libgccjit-devel-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm da75d35a1acc98a26df20d6a7b27ef3c83f5be3dd716f0b1294471cc6a086024 libgccjit-devel-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 771949436eb8756137b42135d7ca0494390936c65e603f487c4057d8f883109b libgfortran-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm ab82bc6f32f34b17a957296f688f0ec5b2f2a8f8674a4a40cca60ad9872f7c11 libgfortran-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 8ae2bda62e712a410d488a939a755f1b0f0c584e17b2762a7b9c367dcf5e1418 libgfortran-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 3a864cd22a30348cb4c7bfa29adc3acbbaf00b5ec5d20e7374993b45a731d62d libgomp-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm e9e9efaf08abfb2b55aedb5dd5bac90f7a0ede175c08bb17554701002bddba92 libgomp-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm d667e730667552ccb724b5e7e979a4b930b9c94887b9ee1999acabf362608169 libgomp-offload-nvptx-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 45651dd0436edb0e8d9862599d11fbc711cfa82f8f3930c2454888584abe93d4 libitm-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 7b52d2db8d1edd327f1be3435a9c560673353115259c85f4464c00e7cad8de6f libitm-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 35b1a84f3538491d45c5625e7c75bce8cf0151aa44fc70ac17a97b2299361331 libitm-devel-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 19a72ab976aa12691862e737e704c4f202997c4f5720b9075bcaeccd390ef7e2 libitm-devel-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 5a0762ffc5ff7b4be1ebb29cf29e486cf45fcf37bd511a1a3d4169e5e5f0b72c libitm-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm bde6e6371dbde7c8dbd9fd6ec024e5e073461fc74537f3e86ac33d0ef3ba66cd liblsan-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 6df07ae847bb77b54c6fd27a97c12a13a9dfd120b9892cd1aa1a138724bdedd6 liblsan-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm af5078c081516329cd8e28db78dbba99b2ff4a04e9d765ec68fc726545cfe804 libquadmath-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 35674775b936152b6fb8bccda7c650f374433b3555b09f95040603cfdcc42e76 libquadmath-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm adc0b95e1a7d07330bffb04103c90b5acb9138e473dc5c3fa6b97066da0c80cf libquadmath-devel-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 9ad27e522f94068932e0de25a186111231a896fdc007dc2dd6cccf5d4fb4dc01 libquadmath-devel-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm f8f536136fef210effe258fc3e89b8190814e6aafdbabde61110bd5a4f511f57 libquadmath-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 3aecb2b94dedc3abc87fdc7f4a45b6857053a1c79a9e36e2bbc93501b1a7d3e5 libstdc++-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm a9ce202f29b473826e42e72aa0d8c5b59cd24dbddd995019460531bc4c5a6504 libstdc++-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 6e8fa78b40f455fad4e2b11423b758b75deea34f77aacb5de939383977194c6b libstdc++-devel-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 3a78500d2206a63c7a4c0e71798345a1857ebf422ca1f8eeaf815273dd6c3e6f libstdc++-devel-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 15a1c5d86bab849a28a804e6aeb4d6f9e32bdf7af4734e9df5a0e971b6145020 libstdc++-docs-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 7223a438f608a33c79a91ccdee96289bf13d8947b993406358e770e15c91031a libstdc++-static-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm 9a5d03f1c503b2e1732812f9e4249b94df2e7cd295ea392015d573dc825391a6 libstdc++-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm fa73d195959f88f9f65e59b2fa163fcde6b3af80d9cbc8dc34a60f7c58f72ce8 libtsan-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 3d657f8d9d22d3c8ba140d11cfad12e7974066a72d3768f3b21527dfbe3eef70 libtsan-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm b0872dee8c8af6676582e68eccc8aa5fcf08c95570d0b2cc661a6550c305b22a libubsan-11.3.1-4.3.el9.alma.tuxcare.els2.i686.rpm aea97207d7e61fb10d667deeef6d1dd0495e519161ccf19c260c8643a178a317 libubsan-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm 73c1a39ceb4af9904357ad5ba70cac445f025b310d88fe1d811f5c1efb2fd5a2 libubsan-static-11.3.1-4.3.el9.alma.tuxcare.els2.x86_64.rpm b1ceecce3f765ac98a7a921dd3ac6e6f092fffe5f996d3e301c1839a6e42315e CLSA-2025:1741291038 TuxCare License Agreement 0 - CVE-2024-28757: Prevent billion laughs attacks in isolated external parser (part of #839) Reject direct parameter entity recursion (part of #839) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-28757: Prevent billion laughs attacks in isolated external parser (part of #839) Reject direct parameter entity recursion (part of #839)

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els4.i686.rpm 9c67d24285fd20ee2872d0ea4974bd9b0fd475bd1457529296667be58c911e0c expat-2.5.0-1.el9.tuxcare.els4.x86_64.rpm 35976f7cf47b142e4dc9d41bb1b226a46973781a16a75da4982c327c857bce5e expat-devel-2.5.0-1.el9.tuxcare.els4.i686.rpm 50f2a8dbba7d8113ebdfacc203f766108b3e98308f4a49cb83d9353ee2025749 expat-devel-2.5.0-1.el9.tuxcare.els4.x86_64.rpm d4b5b6c38115233af7e209364fc15136b507717d540d293fb8374a369ab3823d expat-static-2.5.0-1.el9.tuxcare.els4.x86_64.rpm 2215212e2af9d46094541e4d78562c8d7f7adaae523e9054f40c7781cd7f09e8 CLSA-2025:1741291194 TuxCare License Agreement 0 - CVE-2024-42472: patch Flatpak to include the new --bind-fd option in bubblewrap to prevent symlink attacks on persistent directories Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-42472: patch Flatpak to include the new --bind-fd option in bubblewrap to prevent symlink attacks on persistent directories

0 tuxcare-almalinux9.2-esu flatpak-1.12.7-2.el9.tuxcare.els3.i686.rpm 7372684f0a78b4c4ef352f705b6bc3c50bedaa476812e9589db48f23c216380e flatpak-1.12.7-2.el9.tuxcare.els3.x86_64.rpm c791101a1b404b319f1fdf8b0c00f7d802abb01943c8073ce65b2dc69a81bee7 flatpak-devel-1.12.7-2.el9.tuxcare.els3.i686.rpm 506e644cea6256c5bdc039b7bb0f20a6fc9fc2043205a08667b142e092892cbb flatpak-devel-1.12.7-2.el9.tuxcare.els3.x86_64.rpm e476ff95117bb7950cddb9fd5811f2b3722ff261545231d72c71710c5d933284 flatpak-libs-1.12.7-2.el9.tuxcare.els3.i686.rpm 8dd6b1b02df4c94f2d6f66e699ef1bd9e69561d5a12756183501419f57cca376 flatpak-libs-1.12.7-2.el9.tuxcare.els3.x86_64.rpm 7d29f1fa0e748f942cc067e99db5e56789a3116ec169f77b95d0e5b7e3d1a425 flatpak-selinux-1.12.7-2.el9.tuxcare.els3.noarch.rpm 4ad8a514f35a5294fa79dddbe484fbf5eaa09e1980fee365d7c2596392703825 flatpak-session-helper-1.12.7-2.el9.tuxcare.els3.i686.rpm 0097b4c9e6e5020751b82ad2002a75d77f7942b4e4137281bd4f36108931b03c flatpak-session-helper-1.12.7-2.el9.tuxcare.els3.x86_64.rpm 3343ad41e2e477997cee844c9d5bef565bc345c08cbaea92eb072946cb1d8c43 flatpak-tests-1.12.7-2.el9.tuxcare.els3.x86_64.rpm 010be031ffd0cdadf88302e64c09696cbc848a3d360618b9c3b1628797111d3b CLSA-2025:1741637440 TuxCare License Agreement 0 - Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-21101 CVE-2025-21559 CVE-2025-21555 CVE-2025-21546 CVE-2025-21543 CVE-2025-21540 CVE-2025-21531 CVE-2025-21529 CVE-2025-21523 CVE-2025-21522 CVE-2025-21520 CVE-2025-21519 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504 CVE-2025-21503 CVE-2025-21501 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491 CVE-2025-21490 CVE-2024-11053 CVE-2024-7264 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-21101 CVE-2025-21559 CVE-2025-21555 CVE-2025-21546 CVE-2025-21543 CVE-2025-21540 CVE-2025-21531 CVE-2025-21529 CVE-2025-21523 CVE-2025-21522 CVE-2025-21520 CVE-2025-21519 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504 CVE-2025-21503 CVE-2025-21501 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491 CVE-2025-21490 CVE-2024-11053 CVE-2024-7264

0 tuxcare-almalinux9.2-esu mysql-8.0.41-1.el9_2.tuxcare.els1.x86_64.rpm c2c38b75d064b8ccfb8ac121bc379235a542663486ed7ff94a761b2c19a3a28b mysql-common-8.0.41-1.el9_2.tuxcare.els1.x86_64.rpm c77433a1315cddf39e0ed7547547b88747a8bf7ea33cf28c2e8ed58374ce3aad mysql-devel-8.0.41-1.el9_2.tuxcare.els1.x86_64.rpm c597b0610f0cde49013add9b0de76b8fdaee26fef95bddbf733abae882ce5ae4 mysql-errmsg-8.0.41-1.el9_2.tuxcare.els1.x86_64.rpm dda448420c4efd5902e09bcc62752b1a211fa5a64af835c8cb8b27c561bcaf8e mysql-libs-8.0.41-1.el9_2.tuxcare.els1.x86_64.rpm 876a97be532596f7e1b77f8bd65b0911525eb69ad8c7b99d42618b49b30a7476 mysql-server-8.0.41-1.el9_2.tuxcare.els1.x86_64.rpm c5139b7a33d5e42459303d0f0cb012565ede7090b80652eea08ae29747f28770 mysql-test-8.0.41-1.el9_2.tuxcare.els1.x86_64.rpm 76694db8ec26ec1042b53839a98cdc70d475add5ba0ba3d971f420ef6af1f478 CLSA-2025:1741787087 TuxCare License Agreement 0 - CVE-2023-6237: optimize computation time for RSA modulus to avoid possible denial of service while checking excessively long invalid RSA public keys Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6237: optimize computation time for RSA modulus to avoid possible denial of service while checking excessively long invalid RSA public keys

0 tuxcare-almalinux9.2-esu openssl-3.0.7-17.el9_2.tuxcare.els8.x86_64.rpm 636727bf4e23ac1e07385a22f5188d4e485bb47c62934b0d4c1d7007ef156dc3 openssl-devel-3.0.7-17.el9_2.tuxcare.els8.i686.rpm 3e4f59caff64a9ff8c33b7482f8c943d185cc9cea6b8f197537a2c35ad703e66 openssl-devel-3.0.7-17.el9_2.tuxcare.els8.x86_64.rpm 96f5767d7167ff8923e7528b3f0857858eb73da88d302d72ffd63cf64392aa8a openssl-libs-3.0.7-17.el9_2.tuxcare.els8.i686.rpm e4c167dbaec469b63c687d915c098ddc2626d5a238f213cfbf578111b77bb7a6 openssl-libs-3.0.7-17.el9_2.tuxcare.els8.x86_64.rpm 395f1defe446e891e6beeb170ad8e8e8689cfcc9c85a5ef14ea49328baea48a9 openssl-perl-3.0.7-17.el9_2.tuxcare.els8.x86_64.rpm eb50efec1ec5edef69f086ab6bff6e0c5bd348a48ab5297e689587c243094854 CLSA-2025:1742391294 TuxCare License Agreement 0 - CVE-2025-0840: fix stack-based buffer overflow in disassemble_bytes function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0840: fix stack-based buffer overflow in disassemble_bytes function

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els2.i686.rpm 3973f5dc61d3335018affddc2f128782bc4a5a389ea581bcd8f9027ee917bd48 binutils-2.35.2-37.el9.tuxcare.els2.x86_64.rpm 9e8fd835834430f8ead614f5c159025d9806e9c54b932061bd53473762f66c3c binutils-devel-2.35.2-37.el9.tuxcare.els2.i686.rpm 97167faa62a7d2360a3f562f7b02773520d4c947a5b4051b1ad39da14fbb669e binutils-devel-2.35.2-37.el9.tuxcare.els2.x86_64.rpm da5a37faac99bedf0497e5f906daeabf4fec30ccabf859c17d651e8f267a8344 binutils-gold-2.35.2-37.el9.tuxcare.els2.x86_64.rpm 55e6db3f5f6935916d1a4f31cd78370b9654b2e5e281247e9372656b642feb83 cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els2.x86_64.rpm cc67cbeda646e58a1b4efa3472cf67408e006ae4c113f7510029d596a930607e cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els2.x86_64.rpm 132ff93adf54cf5536450df6affe496a828191f928f64ecba7977d7bed9284dd cross-binutils-s390x-2.35.2-37.el9.tuxcare.els2.x86_64.rpm 6e4bc80e28f3857a5f8f1e15f2e557985cc509b23fdefdebb33f0da80d9ff64a CLSA-2025:1742733084 TuxCare License Agreement 0 - CVE-2025-24813: Fix path equivalence vulnerability to prevent remote code execution and information disclosure in Default Servlet Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24813: Fix path equivalence vulnerability to prevent remote code execution and information disclosure in Default Servlet

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els9.noarch.rpm 6a4435c2797f59da5cc88b2f910372b038c5b5945ea554e2159e6511428134f1 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els9.noarch.rpm 3c7de887f303739d5cbd1bca24cf4231cc95a655b2a60046cf54b57e72461e3b tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els9.noarch.rpm aa613fb34aa5c5994eebe0c3c8ab0c734238b293bf2752649629ea782ae9db77 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els9.noarch.rpm 1ca7b094ef3dfe0f607020345c50a62e896184c0e3a6d60fa256992f4a137607 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els9.noarch.rpm 60593cbef9a1f228596fe815dc7c01df98d58c6849bcc911efc59b47c8253af5 tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els9.noarch.rpm 529316fe4045d98cb69c85e4c89c3db219fde359d2906cdfe602a7748a10f607 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els9.noarch.rpm 91e8484e5109920cf15c52f29a935a6d0563a68a4fdfa09c1f29171bdfe77d77 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els9.noarch.rpm 038d20fc56c977cbc748b3b3b5544a835f8755a05190cbab502f636965e3eef2 CLSA-2025:1742805183 TuxCare License Agreement 0 - CVE-2025-0624: net: Out-of-bounds write in grub_net_search_config_file() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0624: net: Out-of-bounds write in grub_net_search_config_file() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write

0 tuxcare-almalinux9.2-esu grub2-common-2.06-61.el9_2.1.alma.tuxcare.els8.noarch.rpm 844124bcb1a93759b9ac4f275d283e64ef1624cfe10a30d3a6998d1fda2af8f5 grub2-efi-aa64-modules-2.06-61.el9_2.1.alma.tuxcare.els8.noarch.rpm 50ec5087604997d83c39104387a7315d83f6863fb9b454fde55d6917a0db3e8f grub2-efi-x64-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm 47b38b02031620236b5d1aa20034e5cb677872071627558aad704003b5e1dc86 grub2-efi-x64-cdboot-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm 79a808d6ed8f53ee54e9963d4e2e56f042f0705cf40bf48033e2f0fb086db56b grub2-efi-x64-modules-2.06-61.el9_2.1.alma.tuxcare.els8.noarch.rpm f26b1df21d0af1a73b9aed4e0ace3de9cc41bfdee6f951c5b56624a86449ee87 grub2-emu-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm 1da2ccd9d3c0b6663e579f16031d344edbd8495a411968812e84332ffdb6ed9c grub2-emu-modules-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm c7ee1146841b871889a3357e35f2370bdb742ff3ff92d7b840486db5d2471715 grub2-pc-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm 18da8442c20c058a87d615c22e8dad6a5e362f15b7b945c736eef0da91f423bb grub2-pc-modules-2.06-61.el9_2.1.alma.tuxcare.els8.noarch.rpm 68a6866afced1366125a905bef287016439be8d5f004ef8694a9ee4cc4b1581d grub2-tools-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm 9e1f513d417b75be9e7c667c44d1c5c9cd564c555c4036e0cfad098bc8198fa0 grub2-tools-efi-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm 3893724c95d45693a6feebe7b708a5dd2c8687ab05e5e2f874c3c9c7786f0c2b grub2-tools-extra-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm 14517a91bd3bc8d1ed70814947e98eefb8fc1766e811f26e009960d54801e8a0 grub2-tools-minimal-2.06-61.el9_2.1.alma.tuxcare.els8.x86_64.rpm 1119a1efc9e17451b9e6ca244c030cef1fdb69b7d24076e2e0f7a10e0226fd8d CLSA-2025:1742806677 TuxCare License Agreement 0 - Make this package installable only on a system having a either Almalinux or Cloudlinux signed kernel - Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Make this package installable only on a system having a either Almalinux or Cloudlinux signed kernel - Update to shim-15.8 and fix the following CVEs: Resolves: CVE-2023-40546 Resolves: CVE-2023-40547 Resolves: СVE-2023-40548 Resolves: СVE-2023-40549 Resolves: CVE-2023-40550 Resolves: CVE-2023-40551

0 tuxcare-almalinux9.2-esu shim-x64-15.8-1.el9.alma.1.tuxcare.els1.x86_64.rpm 7ec288bd5ef4eeabe11a386eb2fe8c5919626192d7fe7e0fe672e27c5f032ebf CLSA-2025:1742806909 TuxCare License Agreement 0 - HID: core: zero-initialize the report buffer {CVE-2024-50302} - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658} - bus: mhi: host: Add alignment check for event ring read pointer {CVE-2023-52494} - net: sched: fix ets qdisc OOB Indexing {CVE-2025-21692} - parport: Proper fix for array out-of-bounds access {CVE-2024-50074} - udf: fix uninit-value use in udf_get_fileshortad {CVE-2024-50143} - security/keys: fix slab-out-of-bounds in key_task_permission {CVE-2024-50301} - usb: typec: altmode should keep reference to parent {CVE-2024-50150} - dm cache: fix potential out-of-bounds access on the first resume {CVE-2024-50278} - dm cache: optimize dirty bit checking with find_next_bit when resizing {CVE-2024-50278} - dm cache: fix out-of-bounds access to the dirty bitset when resizing {CVE-2024-50279} - spi: nxp-fspi: fix the KASAN report out-of-bounds bug {CVE-2024-46853} - smb: client: fix OOBs when building SMB2_IOCTL request {CVE-2024-50151} - net: sched: fix use-after-free in taprio_change() {CVE-2024-50127} - USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267} - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() {CVE-2024-53059} - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed {CVE-2024-53059} - tracing: Consider the NULL character when validating the event length {CVE-2024-50131} - crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612} - NFSD: fix hang in nfsd4_shutdown_callback {CVE-2025-21795} - NFSD: add courteous server support for thread with only delegation {CVE-2025-21795} - mptcp: refactor passive socket initialization {CVE-2024-26782} - mptcp: implement delayed seq generation for passive fastopen {CVE-2024-26782} - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} - smb: client: fix potential UAF in cifs_dump_full_key() {CVE-2024-35866} - cifs: fix session state check in reconnect to avoid use-after-free issue {CVE-2024-35866} - smb: client: fix potential UAF in smb2_is_network_name_deleted() {CVE-2024-35862} - smb: client: fix potential UAF in is_valid_oplock_break() {CVE-2024-35863} - smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867} - bpf: Protect against int overflow for stack access size {CVE-2024-35905} - bpf: Fix verification of indirect var-off stack access {CVE-2024-35905} - devlink: fix possible use-after-free and memory leaks in devlink_init() {CVE-2024-26734} - leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830} - ionic: fix use after netif_napi_del() {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race {CVE-2024-39502} - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - vt_ioctl: fix array_index_nospec in vt_setactivate {CVE-2022-48804} - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() {CVE-2022-49011} - raid1: fix use-after-free for original bio in raid1_write_request() {CVE-2024-35979} - md/raid1: free the r1bio before waiting for blocked rdev {CVE-2024-35979} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - drm/amd: Use `amdgpu_ucode_*` helpers for GPU info bin {CVE-2024-56551} - drm/amd: Add a new helper for loading/validating microcode {CVE-2024-56551} - drm/amd: check num of link levels when update pcie param {CVE-2023-52812} - drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments {CVE-2023-52812} - drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported {CVE-2023-52812} - drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters() {CVE-2023-52812} - drm/amd: Use amdgpu_device_pcie_dynamic_switching_supported() for SMU7 {CVE-2023-52812} - drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13 {CVE-2023-52812} - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs {CVE-2023-52812} - drm/amd: Move helper for dynamic speed switch check out of smu13 {CVE-2023-52812} - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 {CVE-2023-52812} - drm/amd/pm: share the code around SMU13 pcie parameters update {CVE-2023-52812} - drm: zynqmp_kms: Unplug DRM device before removal {CVE-2024-56538} - padata: Fix refcnt handling in padata_free_shell() {CVE-2023-52854} - padata: Convert from atomic_t to refcount_t on parallel_data->refcnt {CVE-2023-52854} - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798} - drm/dp_mst: Skip CSN if topology probing is not done yet {CVE-2024-57798} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- HID: core: zero-initialize the report buffer {CVE-2024-50302} - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658} - bus: mhi: host: Add alignment check for event ring read pointer {CVE-2023-52494} - net: sched: fix ets qdisc OOB Indexing {CVE-2025-21692} - parport: Proper fix for array out-of-bounds access {CVE-2024-50074} - udf: fix uninit-value use in udf_get_fileshortad {CVE-2024-50143} - security/keys: fix slab-out-of-bounds in key_task_permission {CVE-2024-50301} - usb: typec: altmode should keep reference to parent {CVE-2024-50150} - dm cache: fix potential out-of-bounds access on the first resume {CVE-2024-50278} - dm cache: optimize dirty bit checking with find_next_bit when resizing {CVE-2024-50278} - dm cache: fix out-of-bounds access to the dirty bitset when resizing {CVE-2024-50279} - spi: nxp-fspi: fix the KASAN report out-of-bounds bug {CVE-2024-46853} - smb: client: fix OOBs when building SMB2_IOCTL request {CVE-2024-50151} - net: sched: fix use-after-free in taprio_change() {CVE-2024-50127} - USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267} - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() {CVE-2024-53059} - wifi: iwlwifi: mvm: disconnect station vifs if recovery failed {CVE-2024-53059} - tracing: Consider the NULL character when validating the event length {CVE-2024-50131} - crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612} - NFSD: fix hang in nfsd4_shutdown_callback {CVE-2025-21795} - NFSD: add courteous server support for thread with only delegation {CVE-2025-21795} - mptcp: refactor passive socket initialization {CVE-2024-26782} - mptcp: implement delayed seq generation for passive fastopen {CVE-2024-26782} - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} - smb: client: fix potential UAF in cifs_dump_full_key() {CVE-2024-35866} - cifs: fix session state check in reconnect to avoid use-after-free issue {CVE-2024-35866} - smb: client: fix potential UAF in smb2_is_network_name_deleted() {CVE-2024-35862} - smb: client: fix potential UAF in is_valid_oplock_break() {CVE-2024-35863} - smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867} - bpf: Protect against int overflow for stack access size {CVE-2024-35905} - bpf: Fix verification of indirect var-off stack access {CVE-2024-35905} - devlink: fix possible use-after-free and memory leaks in devlink_init() {CVE-2024-26734} - leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830} - ionic: fix use after netif_napi_del() {CVE-2024-39502} - ionic: clean interrupt before enabling queue to avoid credit race {CVE-2024-39502} - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970} - vt_ioctl: fix array_index_nospec in vt_setactivate {CVE-2022-48804} - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() {CVE-2022-49011} - raid1: fix use-after-free for original bio in raid1_write_request() {CVE-2024-35979} - md/raid1: free the r1bio before waiting for blocked rdev {CVE-2024-35979} - drm/amdgpu: fix usage slab after free {CVE-2024-56551} - drm/amd: Use `amdgpu_ucode_*` helpers for GPU info bin {CVE-2024-56551} - drm/amd: Add a new helper for loading/validating microcode {CVE-2024-56551} - drm/amd: check num of link levels when update pcie param {CVE-2023-52812} - drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments {CVE-2023-52812} - drm/amd: Disable PP_PCIE_DPM_MASK when dynamic speed switching not supported {CVE-2023-52812} - drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters() {CVE-2023-52812} - drm/amd: Use amdgpu_device_pcie_dynamic_switching_supported() for SMU7 {CVE-2023-52812} - drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13 {CVE-2023-52812} - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs {CVE-2023-52812} - drm/amd: Move helper for dynamic speed switch check out of smu13 {CVE-2023-52812} - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 {CVE-2023-52812} - drm/amd/pm: share the code around SMU13 pcie parameters update {CVE-2023-52812} - drm: zynqmp_kms: Unplug DRM device before removal {CVE-2024-56538} - padata: Fix refcnt handling in padata_free_shell() {CVE-2023-52854} - padata: Convert from atomic_t to refcount_t on parallel_data->refcnt {CVE-2023-52854} - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() {CVE-2024-57798} - drm/dp_mst: Skip CSN if topology probing is not done yet {CVE-2024-57798}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 36a75a5867d269baef3f26a401ded27764ee79a50138ecaaad83ebf8e423eb67 kernel-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 91c9bbd8239e17b2687dd5b56e298e4d93ffcb7350a878bae1445e969040bb5f kernel-abi-stablelists-5.14.0-284.30.1.el9_2.tuxcare.els12.noarch.rpm ea77a8b14a1c63378c39f09fbd0369bf6ef6223c2a57c77ea7c4e10d153fe177 kernel-core-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm bbde3038880e4af533092293201d120e68b2b412c0ff07e9b0493aec1b67100e kernel-cross-headers-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm aab985127908907cdf7a326f434a3a64213af741cf882ea4e66129074f55d46d kernel-debug-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 2bbfd4dd6312ab7aac211930171770c4f06b4911fbb85bfa10b9cdc09460613d kernel-debug-core-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 795202e5cb76afab9fa7c5906187c47b0f5600616a772a243395ff54b71bc4bd kernel-debug-devel-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 0b89017faaca8102496f2261be42e676122be5bff3c3c6ba7bab000b2e8216c1 kernel-debug-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm af7415e2e54ffba3d64641cafa09c3a6efda079756d7cae46b2677f4d55e9539 kernel-debug-modules-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 9d55d72e88ea033e29820635d94fd3cd31410e5da252a7bdfa4b02ecc3c1d98e kernel-debug-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 5912a624625767b39f24539c3d25bb923807281e52ce11df9e9cfcf44c4366fc kernel-debug-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm c736117451e7a41cd058a0601d95404b1f38b5c748abb77b1809a435f89d42e0 kernel-debug-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm c6894db8c25d575d36ddbb5006a1187a72a2357236bca9946042e95474c1d448 kernel-debug-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 857e4490f8449b5db2133fcc9e785250224819a220957d865ed074f45a0e0f8a kernel-debug-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 7152c65353646f11347a81585fbbceeda49e806c828c7f97f1263abed3e6c55e kernel-devel-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 13810313063fca412438b3e21bef54d280db5b3517a6fc7ee03dfedc837c5115 kernel-devel-matched-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 4a9cc79b76a65f3476dcb7a66632089e976535a29668968f20ca9eb13964c0ff kernel-doc-5.14.0-284.30.1.el9_2.tuxcare.els12.noarch.rpm adf56a48749c70b1af7aa63a7f8c8de688d3d5c7cffee852275d04fe0309fb36 kernel-headers-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm cab03640f831e12fc542f3fc6b4456fae3414b53e69f06e93ecc7da18c125664 kernel-ipaclones-internal-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 32da61df0be61709843a20d4a933259031d8314cc8a3a5c34e7f9bf8bf8fb0e0 kernel-modules-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 025beccf71c84703de7e7bf50166d7743ea304e407cff0638d37ef3c7651466f kernel-modules-core-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 4bda211a7b7de806613b51ed9df067acbf7b552b63f1b093b4ce3f6fede2b71a kernel-modules-extra-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 6dfcc6f9d9af5534f838d3ad2f27dcd818fcd13acfdfb8506faa80179d6be2a5 kernel-modules-internal-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 7ec4eb3d93227d373802daddff84504d5a3c468b338a490f73f0ed3135d8f10a kernel-modules-partner-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm d989f87220ed5193fa68afb8ecedd2989685e0d7480700c484240bd3c87a8c39 kernel-selftests-internal-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 81d3dd196b5066bd13242727e85c18078a06b1b40cabd1f84c888ef71587f9ac kernel-tools-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm f0280b213a1a3bce6f6e7c1908d7838dff47364adfbe54a2a39296d340d556e3 kernel-tools-libs-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm ee0f1f9eb9e8e28ea4afee9f1b64f9ab5e9bef332a2b2654bc680e0b77d41070 kernel-tools-libs-devel-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 3d6c3d7f0bbf7b1109ebacef5bbef0c4bf3b7ed569b30ac4b5e9a27c9243760d kernel-uki-virt-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 4be1324e2f9326b4b75d4a28066a5f9b159c4a86f9590f72791c021773475563 perf-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 45f6cb893c5436ec75b49e1bfecec4c9104966c414c030c8c80c9d165438e25a python3-perf-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm a1f6b632b94e91aca0064b85336b6588cd72123066c8e2a883bfee7f3876b145 rtla-5.14.0-284.30.1.el9_2.tuxcare.els12.x86_64.rpm 1365e242f9e9a94fa273f2b4b9807b4a196653eb91f93ac42faa125558ac12f6 CLSA-2025:1742918628 TuxCare License Agreement 0 - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els4.i686.rpm ff2ad6bf3318288fc341cbe7f9ed948d3f83769ed3cda21463b5459445068e79 libxml2-2.9.13-3.el9_2.1.tuxcare.els4.x86_64.rpm 9e74f21d347f2c34e007e54acf604c3971edad374e4566f5671851aba882a1a3 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els4.i686.rpm 1add26b550de79aabe751824217f4b6b8bf397983f09039c38d9979220246449 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els4.x86_64.rpm 14e30f617e0b59ec76bd62b374adc774c978a273b34dfe93f9208358621e792b libxml2-static-2.9.13-3.el9_2.1.tuxcare.els4.x86_64.rpm b0fb1f79975d6e695ffa8c0da763d3e052022da2c3585c4fb3527c26ca826623 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els4.x86_64.rpm 184eb4c44378a7e5f7726bbd3eaf90da179bb7abb7eed899598a00eca41d193e CLSA-2025:1742919946 TuxCare License Agreement 0 - CVE-2024-11168: fix improper validation of bracketed hosts in urllib.parse.urlsplit() and urlparse() functions - CVE-2025-0938: fix incomplete algorithm of validating hosts by disallowing square brackets in domain names Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-11168: fix improper validation of bracketed hosts in urllib.parse.urlsplit() and urlparse() functions - CVE-2025-0938: fix incomplete algorithm of validating hosts by disallowing square brackets in domain names

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els11.noarch.rpm 4ad22c949254efb107d772ffb6f11a14ebc5ec3e8a83654f487aa4831e789cc8 python3-3.9.16-1.el9_2.2.tuxcare.els11.i686.rpm 1a15ec503a139f399698c01795aac2c8b799dcd879d151c12763bae44236d6f3 python3-3.9.16-1.el9_2.2.tuxcare.els11.x86_64.rpm dadc2cff968978a8e02eb033c6f3736695296ce417ec246d8d1db6b47b653496 python3-debug-3.9.16-1.el9_2.2.tuxcare.els11.i686.rpm 9fa4c83a09ef34c6e769c1f8a97e4c3c1405e02fb0c44d8d0279ac1b1f9a8a3b python3-debug-3.9.16-1.el9_2.2.tuxcare.els11.x86_64.rpm 1c4c94db6aa7c37fa189ae407f7f26c1b0dac35102ccf18c80cc0149929f2902 python3-devel-3.9.16-1.el9_2.2.tuxcare.els11.i686.rpm 163d6798177f896362513f25d3167955923ebd2e89801af1f8851b70eb72f5b1 python3-devel-3.9.16-1.el9_2.2.tuxcare.els11.x86_64.rpm ba0a883c9fedad5958be4b1750491244065076e83c24216835e40ff1a19726a5 python3-idle-3.9.16-1.el9_2.2.tuxcare.els11.i686.rpm ce9ce9d07e7cbaa4bed98a0bd3740e6706e7c62de8b67bccfa34fcbde4a91c53 python3-idle-3.9.16-1.el9_2.2.tuxcare.els11.x86_64.rpm 5eed263f0a4df64ea8c3dd3b85b41062623762a8e85cc9b1e66101c215d20a2b python3-libs-3.9.16-1.el9_2.2.tuxcare.els11.i686.rpm b4448def461559a3e32548dbfaa82cfd39a334add6ab9d72a84861cb150a0983 python3-libs-3.9.16-1.el9_2.2.tuxcare.els11.x86_64.rpm 854c171f509fe2f4df0a1adb5a8dc063d0d4c7559e2c59cf2249be345f17ec9e python3-test-3.9.16-1.el9_2.2.tuxcare.els11.i686.rpm 5b2b37e89e5f56f5c28ae65ba8b6b4dea32407dcb1678b11748a3bda9de8d025 python3-test-3.9.16-1.el9_2.2.tuxcare.els11.x86_64.rpm 1b89b1f8ccbf182396de16de27eb05c0bb574ec1da0448f2da2b75b2b3e11ecb python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els11.i686.rpm f83ad7b103a86d57dbea1206f332421af688340c885e2b1be1a472df28b230e6 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els11.x86_64.rpm 26f7dc779ae4e0c77ad3c088a208b1b11217939df09c9105e385724103db82f9 CLSA-2025:1742920518 TuxCare License Agreement 0 - CVE-2025-26595: xorg-x11-server: fix buffer overflow in XkbVModMaskText() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-26595: xorg-x11-server: fix buffer overflow in XkbVModMaskText()

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els2.x86_64.rpm 17b179d6c7e30a26fe1b3f05e138914a1958e870b1d92bbb5640883cbfd469b9 tigervnc-icons-1.12.0-13.el9_2.tuxcare.els2.noarch.rpm 848d63939762d7fe39dc0c02e3eafaeb209cb6246ea237daf78c2e49fdfd140d tigervnc-license-1.12.0-13.el9_2.tuxcare.els2.noarch.rpm 58a251750efa8b77614765935725432a6d0a82cd44dfec2f15458205c14adde6 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els2.noarch.rpm 137ef0e560c2caa78805cca8a2db505928114136a0bd5aaf0b34c637c5fe7115 tigervnc-server-1.12.0-13.el9_2.tuxcare.els2.x86_64.rpm 73df73d92763b014edd13058a1720adeba1e86cf2940a06d2d16461c388a2e89 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els2.x86_64.rpm bc13f2e0a3d047330ea0cea5b56d8acf1b5d6eafb642982e66c3950594603586 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els2.x86_64.rpm a8eb95ee561c2d5d559ac640f5a1892c0d45976af54f91a4931d299cc069e26c CLSA-2025:1742923385 TuxCare License Agreement 0 - CVE-2023-28879: Fix buffer overflow in base/sbcp.c by correctly handling write buffer for BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode functions Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-28879: Fix buffer overflow in base/sbcp.c by correctly handling write buffer for BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode functions

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els1.i686.rpm 57fba77d25f50906f49772658c76ad2f654411c4f3affa63c0f7a9cb50dbab17 ghostscript-9.54.0-11.el9_2.tuxcare.els1.x86_64.rpm 056243847083ed00141a0958086e9aa9554a840c39de02618c762840720e1b14 ghostscript-doc-9.54.0-11.el9_2.tuxcare.els1.noarch.rpm 4a50544a88e366c07d5c965c010f228388348d5e610a870f4fe8d3faf5a74046 ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els1.x86_64.rpm 9aecd9ecd4f1a8d1804d3e7ab2a9474f19ab9ec56837de1cbe51374d09f06614 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els1.x86_64.rpm ae77a86dfddbfdb0d48cb6601925dc5ac623128a1240166b402a3ba2855dfb43 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els1.i686.rpm d30b0a2e46a91a8c0cecf3769497f010d2d41f2f4f1b3fbf58dd3255fd1d0cee ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els1.x86_64.rpm 4216ac702f1f407a0d112e1d07a3d53907e93ac411d569710bec1662c042941a ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els1.i686.rpm b9c5f680c71af49938da096661bccbb6f971b34aac1db9ccf480acc084e985aa ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els1.x86_64.rpm f47698a50fbf290bc4043099a17062345ca378ea895ddfc2a0d1f76f7c0b7ea4 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els1.x86_64.rpm cb346a2cd29e4dc4c3091558ceef57ee718ee7a15bb6499489d1770503b9679f libgs-9.54.0-11.el9_2.tuxcare.els1.i686.rpm acdb3119d4054bbda90ffba4d9a5f30333b0a67d46565ca658921fbd41fb6744 libgs-9.54.0-11.el9_2.tuxcare.els1.x86_64.rpm 07037868f4d8dd38203a6ca3127b5b278d19e6d5cfe03400cd8a3baa39255903 libgs-devel-9.54.0-11.el9_2.tuxcare.els1.i686.rpm 4388e98bcb6c41d5fc489d382cdd4807729f9a030d6087a30fb6ffdb34699ad8 libgs-devel-9.54.0-11.el9_2.tuxcare.els1.x86_64.rpm e5a94c6f14520df8d746a5cf2acd9db27a24a4bfbc1dde6705a990df19e96b70 CLSA-2025:1742924432 TuxCare License Agreement 0 - CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions - enable modules test Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions - enable modules test

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els1.x86_64.rpm 417d28b2e45fb15d476c8c76228e39882f6276eaa7832371b89e606b426f5144 postgresql-contrib-13.11-1.el9_2.tuxcare.els1.x86_64.rpm 783c8df03aa19fd8d84d64e67bd71f131b613834c19ce3e0957a99d8e3e20206 postgresql-docs-13.11-1.el9_2.tuxcare.els1.x86_64.rpm ef9ae2628314155142bb6069be8c235dd2301d12c22a383ad7c2a5f53cbb7aaf postgresql-plperl-13.11-1.el9_2.tuxcare.els1.x86_64.rpm 0b056d4b2015fedcc7d14c3cf6242a3ea33e0320e17f1a9022472c1c61f51ef5 postgresql-plpython3-13.11-1.el9_2.tuxcare.els1.x86_64.rpm 72216b40a73998f4974b027c01567720599d6eba1ad0d74f8b2cf35e681e0ba5 postgresql-pltcl-13.11-1.el9_2.tuxcare.els1.x86_64.rpm a45b93b029e97a0c6bfca5fe2d4b8ec80a39cb80ba841fb31f508aefc701183c postgresql-private-devel-13.11-1.el9_2.tuxcare.els1.x86_64.rpm b3d9a5246c8b55961d61a1a03b0bf498e8872b2d9eefb0d2f2c8e835a922135e postgresql-private-libs-13.11-1.el9_2.tuxcare.els1.x86_64.rpm 92f96759140e42425aeacc846d6317d2c6268cbbb06890a7906a01a0d6136df4 postgresql-server-13.11-1.el9_2.tuxcare.els1.x86_64.rpm c9d065d2b680b088a57a9d071c06644eb49a26debb9ce0f3e48024cf30fd8f7d postgresql-server-devel-13.11-1.el9_2.tuxcare.els1.x86_64.rpm b7ab6e07db662fbd4a92e7d33dc512ff80ff00e0fb1c100c96d3525a6b5ed673 postgresql-static-13.11-1.el9_2.tuxcare.els1.x86_64.rpm e68ed80df625d10b72e5686e307137391209e73d9fbbeef3ab02f39927847e4a postgresql-test-13.11-1.el9_2.tuxcare.els1.x86_64.rpm 38dd509209978a6dc81f63c2690fc598b4044ce5c728e116cb586685e642b4ed postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els1.noarch.rpm 51ebd2851d440c72f771dfbb32dce52b1dc48072aa02af7a989c54b290afb273 postgresql-upgrade-13.11-1.el9_2.tuxcare.els1.x86_64.rpm dedb39f763b8b4f5ce2c497c93e386f6ac3eb0be1ad48bfb3c22c3f4aa6a6a28 postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els1.x86_64.rpm e571fe9b23700f1b9fe1ac29c132be9a2aa4047dfb898ae3a0541233e254ad1a CLSA-2025:1742924802 TuxCare License Agreement 0 - CVE-2023-46589: fix improper input validation vulnerability Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-46589: fix improper input validation vulnerability

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els10.noarch.rpm 003146b8a40e0b6bbfc380731ac36b0991e5307ef1c0df50b24861b5e72197e5 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els10.noarch.rpm 4b9a32235506276b23451b7d4f21f3930c67978f1e68f93fe59475fa02e60395 tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els10.noarch.rpm ecdfc8ab3e16761de98faa4f4b285648b05f045ac4d8a30ad6437acacbd59032 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els10.noarch.rpm 35f172c232f30910f6da6931e5b91f3c70646489247e86af56f5c824ecbc3512 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els10.noarch.rpm eb2d9572018124d310d7d8e21323cb6abc9e8557eceaa1f53a16b791aae0bb51 tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els10.noarch.rpm ef9143015d2434179c35e6ccf31fa42d6711eb398099a31dc735da1f8286265d tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els10.noarch.rpm 8377547311cc9729fdf0ffe7491299bab9fa0d522505ffccd981694b0a5182d0 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els10.noarch.rpm 51b65971b0808e90e3cece9c669533f68cef2cdb95c43279a5756e0523f2df67 CLSA-2025:1743011981 TuxCare License Agreement 0 - CVE-2024-10979: fix incorrect control of environment variables in PostgreSQL PL/Perl Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-10979: fix incorrect control of environment variables in PostgreSQL PL/Perl

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els6.x86_64.rpm 591ae41d087d240b0c4b7b7cb9f0141104645218ea0aa68f477d8b19c330c3e6 postgresql-contrib-13.11-1.el9_2.tuxcare.els6.x86_64.rpm d3e8812e67c0d199d9f379e1b87cad807242661b59d8de4ba0dcc1bfbddd0465 postgresql-docs-13.11-1.el9_2.tuxcare.els6.x86_64.rpm f61e16cedd1a48284ae403c25901c91c3ec75d50ca2e5866aef7cfac02864778 postgresql-plperl-13.11-1.el9_2.tuxcare.els6.x86_64.rpm 9211e70dce60610f01728bcc56130fd88f4456ce5309b745f789588189355531 postgresql-plpython3-13.11-1.el9_2.tuxcare.els6.x86_64.rpm 5f9086d5071ed5d9c56bea4df3383296fe69128015f9c091a0e8bd68ef6b4f95 postgresql-pltcl-13.11-1.el9_2.tuxcare.els6.x86_64.rpm b25c4566a4b00bfabbbf9a5b642f8f5ad067c25d7f3cdeffff57be3fc0a19868 postgresql-private-devel-13.11-1.el9_2.tuxcare.els6.x86_64.rpm a356693f12d17937bc1b5e7ac2561629f934547645bc8a4442bcc5c506f98e0a postgresql-private-libs-13.11-1.el9_2.tuxcare.els6.x86_64.rpm 720f560877120109abbae2a66b8ba5b8e5039875766009adb8380bd23f2fb559 postgresql-server-13.11-1.el9_2.tuxcare.els6.x86_64.rpm d7aad0cf4b8daeddde5b7bcddaf17928ed5ecb6066705f2d1b3982fcc7ecd17d postgresql-server-devel-13.11-1.el9_2.tuxcare.els6.x86_64.rpm 3f850523ead4930697ce855756593b9541f10eb20ab0a83a5d0a5fb9637fb910 postgresql-static-13.11-1.el9_2.tuxcare.els6.x86_64.rpm a6d1062b9db61f510e7efa41d84ec6a3962f0800817fad69907652f4596ccae3 postgresql-test-13.11-1.el9_2.tuxcare.els6.x86_64.rpm 917874733f99bb8da18480f39abf517ca1f5e67b26223a20a6a786a1eaa4ddf4 postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els6.noarch.rpm c16bef39025878a0fc641a6c3b1d24eb55da40cf16802068b29ce78595012543 postgresql-upgrade-13.11-1.el9_2.tuxcare.els6.x86_64.rpm 5546e3df208d11a6d03ec4c5ac8b927290878eae3b91e626beb24c42bf3d4067 postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els6.x86_64.rpm a05c44a12bb12893dd31fc771fa3bf4bf2e4af352c9b166c782237f0f0dd6cc0 CLSA-2025:1743012551 TuxCare License Agreement 0 - Fix installation on systems having Almalinux signed kernels None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix installation on systems having Almalinux signed kernels

0 tuxcare-almalinux9.2-esu shim-x64-15.8-1.el9.alma.1.tuxcare.els2.x86_64.rpm 8624fa4a7eb4c4f21e7a4e56effe4e172036a95fe90bdd6cf46f7dfa66193ac5 CLSA-2025:1743071343 TuxCare License Agreement 0 - CVE-2025-26601: xorg-x11-server: fix use-after-free issue by adding check to ensure new sync object is added before alarm triggers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-26601: xorg-x11-server: fix use-after-free issue by adding check to ensure new sync object is added before alarm triggers

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els8.x86_64.rpm 422d47984a0490c1b3d034676635a78d129cc0d1d2c4253f574d586c6db14fa3 tigervnc-icons-1.12.0-13.el9_2.tuxcare.els8.noarch.rpm b740b8812daba6e6393d5c7cab7604431edce3e661fa283430739c05b628e5cd tigervnc-license-1.12.0-13.el9_2.tuxcare.els8.noarch.rpm 58029f3213e2e6b6c808f23c0bceec0867ee5705eb23ab5f743b5d80c51a489c tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els8.noarch.rpm 8bb4efbda402dd8f203678d57348a2c7916c89f8aa7017c54759c89ce0aa8831 tigervnc-server-1.12.0-13.el9_2.tuxcare.els8.x86_64.rpm e129d38fd0b69d991a0323c944bc736cf1460c4d9fdf0b44b1fa1126d371b4ec tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els8.x86_64.rpm fa411d3ca67a64a83361c56e353f5738d08bf9f763f0ea9312d6a3b0ee5facbe tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els8.x86_64.rpm f250d6610d60c4b9564ef339414b6a3ba6a4e989c55ebd857e607e2ec84ebf2d CLSA-2025:1743103421 TuxCare License Agreement 0 - CVE-2024-3596: fix chosen-prefix collision attack against MD5 Response Authenticator signature that allowed malicious modification of valid RADIUS responses Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3596: fix chosen-prefix collision attack against MD5 Response Authenticator signature that allowed malicious modification of valid RADIUS responses

0 tuxcare-almalinux9.2-esu freeradius-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm ea767ff2bbb4f8726f973917e53354342d9d8d0a65504d3be47fc7ba1938cdc4 freeradius-devel-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 1e324cb901715c63789776b6e47776092906b3c0041cd990d7fce838258f20ad freeradius-doc-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 303d2196d775f0df192f2b0e09c782fe83fd890ee5349028b7c7984a9aa7d000 freeradius-krb5-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 0affd2190117e1e746c72647434e74ed561615e2060e8c0357cbfcf93854caee freeradius-ldap-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 909db127efbc7e612a6792f5c4abd693e71ee9006d2eb8cf5464f9f7abedcf2c freeradius-mysql-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm b4724e46377f2b03dfa13958d93b1b04e32b497ff5d76e4ca41302ff8cca26a6 freeradius-perl-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm d022741e62955692a539a2365801371f944297b1e7a601d7c37b56baeb114879 freeradius-postgresql-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 152476fc30feb4c57158d590ec9688a07943f06320acf0a9237d2ddc80ec610e freeradius-rest-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm bbb501aed2a7c2ffcccbb5d8f530c4a56c24f3e6a360286fceb849ee345cbcb2 freeradius-sqlite-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 70051f9af64a85f0b9110da5db7e009e028925b9a85971650be0039a9b86d98e freeradius-unixODBC-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 3b9e83f422a04d20fc7a39da91ee6360adfce9afecb54cb5613e4e5c764f9f70 freeradius-utils-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 8f19d120d94f6f8be014b0e471da162c545e5f509442d53300d1de1a5c37ebd5 python3-freeradius-3.0.21-37.el9_2.tuxcare.els1.x86_64.rpm 6bc95043f64d74f97a20bb8075db00ff447e6565f01297550eb9a50d5be2e045 CLSA-2025:1743409093 TuxCare License Agreement 0 - CVE-2024-56171: Fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-56171: Fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els5.i686.rpm ffb73bd0fedb3aaa416054251e917b337b20403df3a97d8eaf21601a0b1cc1b3 libxml2-2.9.13-3.el9_2.1.tuxcare.els5.x86_64.rpm 492a0a7fbc218476fe020b7e1400c4d981d2b792cbfaee02a827b528873a7b40 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els5.i686.rpm 058b89a7591f829a4c9a9a455b14dbddc551f9941431e40fb42bf8b3e93504bd libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els5.x86_64.rpm 05de3d4639d31c3254ad5d5286b6be83d951fbf26acff30010794a8c4017e7bb libxml2-static-2.9.13-3.el9_2.1.tuxcare.els5.x86_64.rpm c12391f64aa46d90ca93a225cdd2600b76e4c8d435ae518db210db47f4eab89a python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els5.x86_64.rpm 08c308f2f9c58035d633c89177cff001c94709eda1c1b43c57740430c0b153b1 CLSA-2025:1743675732 TuxCare License Agreement 0 - CVE-2021-3468: handle termination event on avahi Unix socket to prevent infinite loop - CVE-2023-1981: prevent avahi daemon crash by emitting an error if the requested D-Bus service is not found - CVE-2021-3502: fix avahi-daemon crashing from NULL pointer assertions - CVE-2023-38469: reject overly long TXT resource records to prevent reachable assertion in avahi_dns_packet_append_record - CVE-2023-38470: ensure each label is at least one byte long in avahi_normalize_name() to prevent reachable assertion in avahi_escape_label() - CVE-2023-38471: fix creating invalid escape sequence in dbus_set_host_name function - CVE-2023-38472: ensure avahi_rdata_parse() has valid rdata before parsing to prevent reachable assertion - CVE-2023-38473: normalize input in avahi_alternative_host_name() to prevent reachable assertion due to unescaped dot handling Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3468: handle termination event on avahi Unix socket to prevent infinite loop - CVE-2023-1981: prevent avahi daemon crash by emitting an error if the requested D-Bus service is not found - CVE-2021-3502: fix avahi-daemon crashing from NULL pointer assertions - CVE-2023-38469: reject overly long TXT resource records to prevent reachable assertion in avahi_dns_packet_append_record - CVE-2023-38470: ensure each label is at least one byte long in avahi_normalize_name() to prevent reachable assertion in avahi_escape_label() - CVE-2023-38471: fix creating invalid escape sequence in dbus_set_host_name function - CVE-2023-38472: ensure avahi_rdata_parse() has valid rdata before parsing to prevent reachable assertion - CVE-2023-38473: normalize input in avahi_alternative_host_name() to prevent reachable assertion due to unescaped dot handling

0 tuxcare-almalinux9.2-esu avahi-0.8-12.el9_2.1.tuxcare.els1.i686.rpm c57f3308c8b49bc24fadcc08fbd2315ca9d71840b6346e1785606e8da38556f2 avahi-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 9ab42f622c59edc320a74dac712bcebe56bf47dd733a21aad4ffcc1863e8fea9 avahi-autoipd-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 4adc11757879f22b6bfbc183e88800bfc07641dea8d9accd834c5652341407e8 avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els1.i686.rpm b879d180894a4711cca1ac1fa0cf2cec577d65a90dc5d4ceb2108ab365322b91 avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm dd914c66388912555832df1313789e4810d799690d57ab717e46ce82a24a9e46 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els1.i686.rpm 9caaa6f21a0c3af5aec2bfb158aec3450db3e43107410db6489247a4d9ea3f43 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 4c9d9635642a9b304ec76fe295e1e4cb923f210d3a1edd0c366454dcba09ddb6 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els1.i686.rpm 1b012a481f3cb96c3bcd50a3071a3020d21a099a221416a046e3d155e002bbda avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 5bb2e28cd04fbea957d15a3b8fc3adcf6d7e415a6ad88eb78f01016f8cac0667 avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els1.i686.rpm 5826efd609c9291000005d55adcb49ccd0a391f994691db403ba20bfb69d727e avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 9f2735841df732d2953472707d66885026f70f5b64e8424d13d9e8ef3c4cabd4 avahi-devel-0.8-12.el9_2.1.tuxcare.els1.i686.rpm 7c60eea38dee497dbe7e5761d1d98f7d91db99e02b311c1d9217306a3f9f138c avahi-devel-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 510be1e6c56c92a2660c51d1561b6421b71fff47a824a01d7f8942399e37a2de avahi-dnsconfd-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 88724fc3a6eaf5ba66b1efaf7b0bbb3f65c0f904d9feeddfaa2a73d90e0d9efe avahi-glib-0.8-12.el9_2.1.tuxcare.els1.i686.rpm 4417bf14326088fa76ae33e125c4900d8fa5539a8be648c75dea2d3ff090dc02 avahi-glib-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm b5b7782348aa372d67b8d6304e68576bdaada2e66f98174179e92512794d9b8f avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els1.i686.rpm fa6e5c93c5430029e54d6cb6a4c5f69426af2fb697fb9273356a173f49b08cde avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 72d2dc2fae14a9d78b7268a0447ec1e7683393263da4648de6129b131934f42e avahi-gobject-0.8-12.el9_2.1.tuxcare.els1.i686.rpm 37d1304c06560f76aa0ad8a1cddf0ae10e77e0bb4a83369ce9119a3fa3dfffaf avahi-gobject-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm b7f94d35c3bd6db51e02bf34f31bda14788bd4ef71c3e7c433c1105d4c2efc78 avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els1.i686.rpm 0e0f0208cc540d0e1e129979c05307b197496c4fb4c3a01c066c2738946bb023 avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm f0e830768ec6b8d3e53f235a5e78729232b48dc69eed0c3a38b84c979ed6d8ce avahi-libs-0.8-12.el9_2.1.tuxcare.els1.i686.rpm 0712a55fa04ba82716a2bbd53eea7d71b6e53798dd811af08fddfd222444c4a8 avahi-libs-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm f5e6c186a14024a7f380f1b7816b7232a6c476df3688b5008cee75de2ace0588 avahi-tools-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm eed5df837ec25e863e53fa4c04149906950101a1766618f4eb446ed4c903be17 avahi-ui-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm 2486bd6176b25c2f407aa5eae8fba2d0f0cdcccd033c353a10a2a86d7ac3afdb avahi-ui-devel-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm f964a4bdcab363dd320e02e8572de64bb2cbf1a8dbc28bd772dae1896c8aee29 avahi-ui-gtk3-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm f94d8a69cdfff99247cc20a2cc5d57ea0324cab258b3c933675ca513398cb4d3 avahi-ui-tools-0.8-12.el9_2.1.tuxcare.els1.x86_64.rpm adc84c969795da4a9132abb84a60e02e4a3ac3ef4cbcb4c23e614ebe77432920 CLSA-2025:1744116383 TuxCare License Agreement 0 - CVE-2024-7006: check return value of _TIFFCreateAnonField() to avoid potential DoS via memory allocation failures - CVE-2023-6228: validate input image codec in tiffcp to prevent heap-based buffer overflow and potential application crash - CVE-2022-40090: improve IFD loop handling in TIFFReadDirectory to prevent DoS via crafted TIFF files - CVE-2023-2731: handle missing end-of-information marker in LZWDecode() to prevent NULL pointer dereference and potential DoS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-7006: check return value of _TIFFCreateAnonField() to avoid potential DoS via memory allocation failures - CVE-2023-6228: validate input image codec in tiffcp to prevent heap-based buffer overflow and potential application crash - CVE-2022-40090: improve IFD loop handling in TIFFReadDirectory to prevent DoS via crafted TIFF files - CVE-2023-2731: handle missing end-of-information marker in LZWDecode() to prevent NULL pointer dereference and potential DoS

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els1.i686.rpm e9caf03cea418f78493bce1c30c1872ef28fe66364a7a61e81e88866bb30c998 libtiff-4.4.0-8.el9_2.tuxcare.els1.x86_64.rpm 8f8b1c21434a5e6c30e2d78bd73d15e4b241890b3063e439aeacb406483fdcf3 libtiff-devel-4.4.0-8.el9_2.tuxcare.els1.i686.rpm 7f2c3d43b80bfff84b4f1fdcd0635adc7564711cb2245783a4b23a66ad19a9b8 libtiff-devel-4.4.0-8.el9_2.tuxcare.els1.x86_64.rpm 8b3e01d323db6ba033d6b080c49021d0156f7dfb1061375338756e99594a4e51 libtiff-static-4.4.0-8.el9_2.tuxcare.els1.x86_64.rpm 119743a309217777d3e91f0d7b53df52e70ce8b54cc6a1b814107b21e10a64ec libtiff-tools-4.4.0-8.el9_2.tuxcare.els1.x86_64.rpm 7a134929bb335f92db8836e8d29ad450ca9e69c294c71d052c15e147a6cd913d CLSA-2025:1744116893 TuxCare License Agreement 0 - CVE-2022-4904: fix missing checks in ares_set_sortlist to prevent possible stack overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-4904: fix missing checks in ares_set_sortlist to prevent possible stack overflow

0 tuxcare-almalinux9.2-esu c-ares-1.17.1-5.el9_2.1.tuxcare.els1.i686.rpm 13ca4be7eccfdc77aacc4fde76ad693076b7c54b8d947987c9837bf485f0f9fe c-ares-1.17.1-5.el9_2.1.tuxcare.els1.x86_64.rpm eaaf65f3419a084dcc13b4d5ba3642feb2e9f1cace9e703d7002c8630a51066e c-ares-devel-1.17.1-5.el9_2.1.tuxcare.els1.i686.rpm fa50360e8ca3d331551371f22f7f2f6379b7bd6a8e480562cc4b4c8fb97cd9bd c-ares-devel-1.17.1-5.el9_2.1.tuxcare.els1.x86_64.rpm 595bcad9a5cccfd8a1abc40ed6789fbdf051a2836360d41862fe378ac4eb6fc4 CLSA-2025:1744213437 TuxCare License Agreement 0 - CVE-2023-6816: xorg-x11-server: fix use-after-free issue by adding check to allocate sufficient space for logical button maps to prevent heap overflow in DeviceFocusEvent and XIQueryPointer replies - CVE-2023-5367: xorg-x11-server: correct buffer offset handling in XIChangeDeviceProperty and RRChangeOutputProperty to prevent out-of-bound writes during append/prepend operations - CVE-2023-6478: xorg-x11-server: fix integer overflow in RRChangeProviderProperty and RRChangeOutputProperty to prevent disclosure of sensitive information Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6816: xorg-x11-server: fix use-after-free issue by adding check to allocate sufficient space for logical button maps to prevent heap overflow in DeviceFocusEvent and XIQueryPointer replies - CVE-2023-5367: xorg-x11-server: correct buffer offset handling in XIChangeDeviceProperty and RRChangeOutputProperty to prevent out-of-bound writes during append/prepend operations - CVE-2023-6478: xorg-x11-server: fix integer overflow in RRChangeProviderProperty and RRChangeOutputProperty to prevent disclosure of sensitive information

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els9.x86_64.rpm eb7f45b1e95a0038d97f474bd52da0abcc6f6f81f897b7d19287b02ca84e6086 tigervnc-icons-1.12.0-13.el9_2.tuxcare.els9.noarch.rpm f1832c0e99b9bec411568733151169113d66762cec9c435309a42828ec5b1d71 tigervnc-license-1.12.0-13.el9_2.tuxcare.els9.noarch.rpm 9c57fd269bad86ef4c47415dd12eae7dab2c280be1f844233b5f0150b0d171f7 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els9.noarch.rpm e1d84b4b8803e9bf7ab956a66bdbca2e1d533fb0204c36ae89282db1f2be989e tigervnc-server-1.12.0-13.el9_2.tuxcare.els9.x86_64.rpm b6a11bb97b6ecd79b6b91a1363c73f2a70932c8a42267aeac602cffc5380a35e tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els9.x86_64.rpm af20f857219423ea25a3e38039b6114d27e769250be904d7c039ee91494a0034 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els9.x86_64.rpm 0460a1fb2a28fd9325c5357c4efbbfdc47a535f9b2bf13f8d63595f2b672ad20 CLSA-2025:1744223313 TuxCare License Agreement 0 - CVE-2024-31080: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIGetSelectedEvents() by avoiding byte-swapped length values in replies - CVE-2024-9632: xorg-x11-server: fix improperly tracked allocation size in _XkbSetCompatMap to prevent buffer overflow condition - CVE-2024-31081: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIPassiveGrabDevice() function to prevent memory leakage and segmentation faults by handling byte-swapped length values in replies correctly Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-31080: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIGetSelectedEvents() by avoiding byte-swapped length values in replies - CVE-2024-9632: xorg-x11-server: fix improperly tracked allocation size in _XkbSetCompatMap to prevent buffer overflow condition - CVE-2024-31081: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIPassiveGrabDevice() function to prevent memory leakage and segmentation faults by handling byte-swapped length values in replies correctly

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els10.x86_64.rpm cc342db7f08c85ec8dfbaa3e8f8f93cdb417c99ed665e7ec9693946a13b10c96 tigervnc-icons-1.12.0-13.el9_2.tuxcare.els10.noarch.rpm c110d453f26226a08f59af4f216e24f5722c192a2fc92aaf4316a94872a66f9f tigervnc-license-1.12.0-13.el9_2.tuxcare.els10.noarch.rpm e16122a3e4e1c0ed934180e426f1b27ab536266deecba5b9a031c23b88bca2b8 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els10.noarch.rpm 29de83793ea7cc74255dd2cca6e130a62ea479d682db26f4bb6f0dd017f2ae75 tigervnc-server-1.12.0-13.el9_2.tuxcare.els10.x86_64.rpm 73d95afb1e0085fa24600216450850ead15cad84f7497eb04f8ac84d81666cf9 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els10.x86_64.rpm 5a7c7c786791b23b395a18363118b6f2e9d15c4912c3c1cdb1f81bbd1a6ab595 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els10.x86_64.rpm 930821a6107455a53c7775944103d40fbb8e087cecabd817cbef30a52c81c07d CLSA-2025:1744291208 TuxCare License Agreement 0 - Fix ecc DER wrapping. None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix ecc DER wrapping.

0 tuxcare-almalinux9.2-esu nspr-4.35.0-6.el9.i686.rpm 32688f80c03a8f7ffe6233ccd2d99441b7412159216e3ea539af1cdfba4345c5 nspr-4.35.0-6.el9.x86_64.rpm b3afe85a841954a938fd66a8f8691c82fd8b70a2997aa436d6893a0fbc67452b nspr-devel-4.35.0-6.el9.i686.rpm b37cd31897cb975df10c6d3ddc714674d43c7a527648ec5f4bb401448adecdf6 nspr-devel-4.35.0-6.el9.x86_64.rpm 9bc6cd29ffa311c53d49780288d1e984f69b518b9a9e3e1e83e4bf8459225c81 nss-3.90.0-6.el9.i686.rpm 537d450bc4c2eb31ea7c88e6ebb69a8b305a2140b9f4995d497f31481ef47cf2 nss-3.90.0-6.el9.x86_64.rpm 3dcb237ce6f0482b7273d6004a5f255fd08c1e675d759089df4592473869328c nss-devel-3.90.0-6.el9.i686.rpm 039c6ca1300026c3b18ac38d40223c36449d3be9fb68c8ecb612c5400a6c819b nss-devel-3.90.0-6.el9.x86_64.rpm 2d34ffacdf1fc47bb156f3f920f6a8ebbee0ac5d41a04b466be57e98d7eb97cf nss-pkcs11-devel-3.90.0-6.el9.x86_64.rpm 45f404eae8b7b5602129950766ab381280b8851d12e55185767d872cc94edb44 nss-softokn-3.90.0-6.el9.i686.rpm a85c2465be01e2001f4ce1356924d9ff669be8d91c06f6d813bb71135f532bdb nss-softokn-3.90.0-6.el9.x86_64.rpm 01c24ba70a8c15ce1d1e9a5816b75e2a06beddb43f299ed1d7e8e1b21e8d79f6 nss-softokn-devel-3.90.0-6.el9.i686.rpm e838808fbc13044dffcbf43217febbef4e82205c341e0007533d91d2ee9a8983 nss-softokn-devel-3.90.0-6.el9.x86_64.rpm fc0403e5496121aa8a6ab2fe52b4dae31c5ea5b9bb2a4166f4cedb458ddbb797 nss-softokn-freebl-3.90.0-6.el9.i686.rpm b95bb2bb06fabf938a092c43581b6c7ff4903a32368c629ea5f2ac5255431446 nss-softokn-freebl-3.90.0-6.el9.x86_64.rpm fdafb1fa0b5104d3f04ff7159d1ed26842364a6ec940a9dc58ffe1c360db4351 nss-softokn-freebl-devel-3.90.0-6.el9.i686.rpm aa4de7f996ff6b4b3b7c3d36a18a80cef6a4e85d82d3aa977008387a062189b1 nss-softokn-freebl-devel-3.90.0-6.el9.x86_64.rpm d50d58ceebb455c147a53a28c17e465603a6100ea628194539a03a802d6df47e nss-sysinit-3.90.0-6.el9.x86_64.rpm f7d53dc23de1b1f96beb618109a13e5f6289583012923aa682bc87398569b959 nss-tools-3.90.0-6.el9.x86_64.rpm 8f44172048f3ba60f8606b089724838ac00bf2a062a818aee399e144246eaa51 nss-util-3.90.0-6.el9.i686.rpm 546cb7089da40420a3e660135328b575e3908307561fa779dce447149382aa86 nss-util-3.90.0-6.el9.x86_64.rpm 2016d79847002476c4f9f7dfdd88fce59fb75422e48562eca3a1bf2f6040f57f nss-util-devel-3.90.0-6.el9.i686.rpm 112178d6c74a878bc7c628169b8f54e18c90b2d08645b0421fd4d4f8609c4da6 nss-util-devel-3.90.0-6.el9.x86_64.rpm c913393ecf6f791f18a1d7c3a44d35549d73d0d2c23275e153683d5c843f0477 CLSA-2025:1744301726 TuxCare License Agreement 0 - Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 (RHEL-34579) None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 (RHEL-34579)

0 tuxcare-almalinux9.2-esu libgcrypt-1.10.0-11.el9.tuxcare.1.i686.rpm 758755d030a5da3a0d5dc47db08eb92620bd8178ef769dc5904d5958831f2f6b libgcrypt-1.10.0-11.el9.tuxcare.1.x86_64.rpm 496d092e51d4f890a659b041ae5f76c70f071d53d548702ce29ad3f6709b8b75 libgcrypt-devel-1.10.0-11.el9.tuxcare.1.i686.rpm dbf11d4eaec3b9940a12053f8f05fda0000186062b809acc9640807b942b1cc9 libgcrypt-devel-1.10.0-11.el9.tuxcare.1.x86_64.rpm 4c173ce70699407e7f17fa689be06708e31cedb9fc2748a6875d2c0d3cfaac91 CLSA-2025:1744303053 TuxCare License Agreement 0 - Rebuild in new side-tag None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild in new side-tag

0 tuxcare-almalinux9.2-esu nettle-3.8-3.el9_0.tuxcare.1.i686.rpm 5f23c2c02cac5335140b45dc417a26a3f6f7d2f8df8b8432bddeae8132c8c401 nettle-3.8-3.el9_0.tuxcare.1.x86_64.rpm 2beef8499a6ed08ffce00071678c1366f2a7433100346b2b253f987842a6f3c9 nettle-devel-3.8-3.el9_0.tuxcare.1.i686.rpm 3b1cd0eb3d8cec3db64d92f1e7863e3761b4c384f35b94e0fc6b75ad92bfe763 nettle-devel-3.8-3.el9_0.tuxcare.1.x86_64.rpm f686a5a7af0131eef0699cbb9f55961ada5a9647d7f9c53c9c7dc9716a9d4f50 CLSA-2025:1744308182 TuxCare License Agreement 0 - Rebuild in new side-tag None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild in new side-tag

0 tuxcare-almalinux9.2-fips nettle-3.8-3.el9_2.tuxcare.1.x86_64.rpm 0db65c5b6ff867a37fb5b61d1d3b20dfddddd6df nettle-devel-3.8-3.el9_2.tuxcare.1.x86_64.rpm b183d2ab285b493e914d3dfdea14ebacb31f50f3 CLSA-2025:1744312522 TuxCare License Agreement 0 - Fix ecc DER wrapping. None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix ecc DER wrapping.

0 tuxcare-almalinux9.2-fips nspr-4.35.0-6.el9_2.tuxcare.1.i686.rpm 51280e796010de384db5bae4d7356ec043154e99 nspr-4.35.0-6.el9_2.tuxcare.1.x86_64.rpm 9470d36782dbcf837751fd429317a31245e513fe nspr-devel-4.35.0-6.el9_2.tuxcare.1.i686.rpm bb391b1a3e948e8624f9ecce911c02221ad7fb1b nspr-devel-4.35.0-6.el9_2.tuxcare.1.x86_64.rpm e3312acbe12b1e46c57505b111e339b453fbca47 nss-3.90.0-6.el9_2.tuxcare.1.i686.rpm fe29f06bc02224a683da2018784f9b0b8879ccbe nss-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 63f1c9f703ee1a6acc4da50c1032f98017cad7f1 nss-devel-3.90.0-6.el9_2.tuxcare.1.i686.rpm 0deb321438ddd4dc893d1e5e623075f7c401ff20 nss-devel-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 8179aa3c29f3ef69525aee42a3e3dc51706a2c1c nss-pkcs11-devel-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 1d5db10b1cf0f8e9bfd7394d2286335fc5385c52 nss-softokn-3.90.0-6.el9_2.tuxcare.1.i686.rpm 802fd6154bcfe8c29948a985fc07b53ce23b92c8 nss-softokn-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm e07c20fefca1382b3906dd5a694039833400b4e2 nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.i686.rpm 237ff2232947804316d3af1bebc25ed19d43bea8 nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 4404e8c390d2f790d07c987dc65736f897430063 nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.i686.rpm d527a4f31bb235a3e55bac3396e0bd0995f56ab1 nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 95aed7ac9216c7499c3159238cbb49cb31f825cc nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.i686.rpm 90aef4b6890da7e0da611e23ce62bd4829aec448 nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 30cda765ff618207b7944c498a8ae3a01e3c550d nss-sysinit-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 4eb1ea9f1f1e507f67ab660ea20fb8383fed3236 nss-tools-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 9098b0807f6dc1b0423e20f65bded33ed19a5e4d nss-util-3.90.0-6.el9_2.tuxcare.1.i686.rpm 289fd1cfb23af6b7bf5c9191f57cb6053cd84b62 nss-util-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 009f4a0379d85af1ba2fd2a375f066334c5e6a1a nss-util-devel-3.90.0-6.el9_2.tuxcare.1.i686.rpm 15fa97f2615fd8f4d6b7816bda8d0f169bff1542 nss-util-devel-3.90.0-6.el9_2.tuxcare.1.x86_64.rpm 15830a065db451b371906c948af1d4815f3bc254 CLSA-2025:1737656427 TuxCare License Agreement 0 - Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 (RHEL-34579) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 (RHEL-34579)

0 tuxcare-almalinux9.2-fips libgcrypt-1.10.0-11.el9_2.tuxcare.1.i686.rpm 8657ca96443e93d0348a77952477794132ab94ba263434810c2d64f9554db706 libgcrypt-1.10.0-11.el9_2.tuxcare.1.x86_64.rpm 8d58ee74303b84142c886e018622f06083fb6467631087d0d237d5ffba26c8fd libgcrypt-devel-1.10.0-11.el9_2.tuxcare.1.i686.rpm 07a459ce5aae7d4d097251f2abad915fadfea9debdf6ef64204982b70583e986 libgcrypt-devel-1.10.0-11.el9_2.tuxcare.1.x86_64.rpm 74f2729d60f4c6a385104cfe03b4158388eb33cd08a8013ddfb9d8aabfa322c5 CLSA-2025:1744359874 TuxCare License Agreement 0 - fips: Zeroize temporary values in integrity check (RHEL-21870) None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fips: Zeroize temporary values in integrity check (RHEL-21870)

0 tuxcare-almalinux9.2-fips gnutls-3.7.6-23.el9_2.tuxcare.3.i686.rpm 1c51be0565e9e64bf916597cf4d277692af4667b gnutls-3.7.6-23.el9_2.tuxcare.3.x86_64.rpm 30a68a50b29d8301cf2e959c6b802fc06e757c9e gnutls-c++-3.7.6-23.el9_2.tuxcare.3.i686.rpm ccfd27cf1e14f43357470541308536f09414b7f2 gnutls-c++-3.7.6-23.el9_2.tuxcare.3.x86_64.rpm 0eb92b4fe2fd73026429ace9db330a411a928ee4 gnutls-dane-3.7.6-23.el9_2.tuxcare.3.i686.rpm e73cf311dcba796153125a6b586c7858d1a375e1 gnutls-dane-3.7.6-23.el9_2.tuxcare.3.x86_64.rpm bab65102f944f0171cd06826caca90b9f931c318 gnutls-devel-3.7.6-23.el9_2.tuxcare.3.i686.rpm f95ca3f72f4a5d502c25c60e8fb93ac8e607cc03 gnutls-devel-3.7.6-23.el9_2.tuxcare.3.x86_64.rpm 9f81b6f46f0d8600b85fe84fca87dd827bc50c33 gnutls-utils-3.7.6-23.el9_2.tuxcare.3.x86_64.rpm 41b79e18d1050d5ccba5ca090b1b22c551b419a6 CLSA-2025:1744368964 TuxCare License Agreement 0 - Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 - Release the DRBG in global default libctx early Resolves: rhbz#2211340 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 - Release the DRBG in global default libctx early Resolves: rhbz#2211340

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.x86_64.rpm 9a845c1a54d6635904522db2765be7725c8f78bf openssl-devel-3.0.7-20.el9_2.tuxcare.1.x86_64.rpm 1342fd10e6c6e587d0bfc85f05f2e02902a67c58 openssl-libs-3.0.7-20.el9_2.tuxcare.1.x86_64.rpm 967560f9223380b411ac8b0b26ab39c7ddf5ddc9 openssl-perl-3.0.7-20.el9_2.tuxcare.1.x86_64.rpm bbc784ffa34171820433a664682eadfefcb11d85 CLSA-2025:1744372501 TuxCare License Agreement 0 - Backported els0..els3 patches and changelog including CVE-2024-1086 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Backported els0..els3 patches and changelog including CVE-2024-1086

0 tuxcare-almalinux9.2-fips bpftool-7.0.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 81b1ed79ba69fea0cc7c4ed81e9b4ba5d812c2af kernel-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 7eb840ed4f62f3f174f11ec7c7cc9638e92e794a kernel-abi-stablelists-5.14.0-284.11.1.el9_2.tuxcare.6.noarch.rpm 404522c97bd0a8234191bb73826e819847a69d5b kernel-core-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm ea26b5a3712fc19b0e5aacb159142539594979ca kernel-cross-headers-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm a9788f566e15b11f878deccf87645c538ed562a8 kernel-debug-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 03ec627fc312acf9b9876a56cef9699321469c7d kernel-debug-core-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 3af5547d08be68d3e6dade5debb230ea67987020 kernel-debug-devel-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 756a19064d2d314d76d3c5fa5a1e6657cb38a6d7 kernel-debug-devel-matched-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 68ce51b177149c5c8f76c3a117ef0552b6c65c12 kernel-debug-modules-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 3d6edc7262f57b74d92f62c1dcc5f92bec14c6f0 kernel-debug-modules-core-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 68f518109f9fb93f0360ccf0fb261d35d936277d kernel-debug-modules-extra-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm f13598038b7b9d4abaebd7f68e6733c5479afb93 kernel-debug-modules-internal-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 3804f457c4bd471ddbace870ab70a03b253360de kernel-debug-modules-partner-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 8eb1d05403e01240eaa895aab39a0fc253726178 kernel-debug-uki-virt-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 0074b862a59899bc9577b31573ddb0543851c482 kernel-devel-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 02092acda78c54cb6b19967de6201a5577ff3897 kernel-devel-matched-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm e20d323b12500b74edb1c830812cfedea4ce7985 kernel-doc-5.14.0-284.11.1.el9_2.tuxcare.6.noarch.rpm b0257574b27053f12f22bada888dff97b1436a6a kernel-headers-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm a74ce9634cfbcf38ac78b4fb4fd759fe2ec750e1 kernel-ipaclones-internal-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 8aed27121e08338aaaaf7cbb722809b192c4aab4 kernel-modules-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 2d07a76d3fc9fe82ad8616212e3fcdf0d7aadbe4 kernel-modules-core-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm d8826a1259b849eb059b5bc2db0af66660bd20dd kernel-modules-extra-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 8d4bf0ee379aa185ff1f56fe631d29acd6e21617 kernel-modules-internal-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 2b3b62ab75ab1737e918989462cf8fd952e6f3f2 kernel-modules-partner-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 6560f4d2a36e25b36407d39959ebfec0ea1bb01c kernel-selftests-internal-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 53a4f4531b79b9bf083d9c47d5d66d870acdafb5 kernel-tools-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 6fe3bd648d76feb1af665278e3d35a9a6399c515 kernel-tools-libs-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm d780195056f97937c8c9e64dbe3992e23ccb27d7 kernel-tools-libs-devel-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 9f48bf7e364bc8d20e836fb29039647442495c4e kernel-uki-virt-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 9b28f03ed7fe5af45c5af7db23e6abb62459521f perf-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 88c9dee785c37333ad0af5c925a16e0bc3dd263e python3-perf-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 35dbff75ccc04cef3cfed7bdfaf0f2efa6152f57 rtla-5.14.0-284.11.1.el9_2.tuxcare.6.x86_64.rpm 8fd1948d8640325412f5c10459e228caa2b524f7 CLSA-2025:1743193221 TuxCare License Agreement 0 - Backported els3..els12 patches and changelog Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Backported els3..els12 patches and changelog

0 tuxcare-almalinux9.2-fips bpftool-7.0.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 2957be583c2eb5044b4ce63294d3fb79b53f4d7ae3f6e1ace64482c5c518c8e0 kernel-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 631ec8b91f3a6cfb7216e9643ea36c7b15a300f696c988472b44bd6a39e5db5f kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.noarch.rpm e5c1a961c7d0071acca76051ad84a8eb48b65d8d364b40b49f985f30f099c36b kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 557eac1c4abe30b2dac3c4fe0df768241d10edc7a5d9d4f3627e667971f54b48 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 67b4c6b3379dd8b185f63d42fac3a96c670cc1379a207cad49f0296fd0e1e5d0 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 226d7f7fb23869299d2ed13cce0ba7e16adc9fd68dd8c1d57c6201d859e80fea kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 1f50fd33216dd558288d6fa9baa03e624afc91477ccade249661663f817c6119 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 02d4779940bdf0f3cf38a73d124c652f77df96a24958a4ca82d57ec8e442b369 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 0e7b6eb097c70e4af32a566db472604c34514ef345973c55d04a4ed50a5632ff kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm d8d8b41628278afbd8f6e0248a76645870aa23cbbfc5a80b58a49e09becda402 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm e01b6ff4d10e1c498626badda0e5aa5e1fc480d322f2c1c1129bc9414302cfbf kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 7c9a9158c860ee1a28e53c66b1357fbe0894eab9223a52f7a17e0a523e274a9b kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 024d831ae7f1b98ce1d3bbb39081961ba579d44f277c5ad6e639bc7917ed4fd6 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm cb62ce14d122a110dfcf53f486b5a1d0068ede7ade15b681be4e3f4bcaffeb2a kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm ca92be91b9b132cf6043883c907e283393bbe3a1f289e6c0499706dd929ef68b kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 5f72c68a081cbb26ea97fb14c825d6ae8a8250ac0c603cdb0ea7942d0ffa10bf kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 0ad22a2344ed801045f6014d0ce92790f5c725d2a645e84720d1d81fe297e2b0 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.noarch.rpm 06ed69927cb3b4f721589b5389f1eda41720e2b005a756af4b1d4a2c0f31ceed kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 5ba6b5ed4f050058815c95fc989fa30e7330e88473e9801d9bea00f2a1afb1cd kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm fbf945580de914773f9918200a1aa9df2be55a1943d99bb915f15845bfc73892 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 81956f5ceec7bc6bcdb9998cee9a260e3c67f24909fce6086f7936381569da6d kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 5734a6747c788381b57385d791756dd2807693d694b36586f0734d2cfef161c4 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 39820d283229e304387d3ce2543a245da76a3ba9f32d836c52a4936649064de8 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 6de23b4c257670d3786ce2ac49d6be401b9eee67ead4028a27db7f77ae0f62a7 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm ff080dddf3f50da31461eaeae41c1fe75491d3d8bca720ee612f1d5f74980ccf kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm c700cfdd45f32a522f1f41d6b4d3aebdb1af8fe5f0d6a4f070ec9d812a5c3f17 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm a820714324aa853a3730e524ab358848cfccce49dc560c2748a1cd806b84f7ec kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 5012e668a4539e627b53028c811d282240a901f19f545536ff3956a79ff15e0c kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 37d3b377b6a352ffc1744a0c5f84ddb4d95e670cb52d8bd1ca6aee0a59bb3507 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm ea7c41f65db5392098aad6e7b1a2218636260d62622dae7932f3f014c40cf0bb perf-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 1184c888a94a49e367dd47a0caa77f88c1c29a4dcd41b14ff4d8b513260f499e python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 3bbc98d332fcc94dd3cfc1fb09f90ca6b852b2548cdeb8c237f33334f3d98920 rtla-5.14.0-284.1101.el9_2.tuxcare.7.x86_64.rpm 21c6e27eed8e64b65d82f78cab082cb35fc7917f63d91f334db2121eccc5d5e1 CLSA-2024:1709548308 TuxCare License Agreement 0 - CVE-2023-5363: process key length and iv length early if present Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5363: process key length and iv length early if present

0 tuxcare-almalinux9.2-fips openssl-3.0.7-20.el9_2.tuxcare.1.els1.x86_64.rpm 50610fce35a32eb0189576bb02395d5061f82dc2 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els1.i686.rpm 80783c84470ad8f6d0e4dbab5d1874855887629d openssl-devel-3.0.7-20.el9_2.tuxcare.1.els1.x86_64.rpm 1d33339689a5b593c42693af0585b88f8e3724d0 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els1.i686.rpm 29a8c26d3c1afcf4b1f7858948059da3c1e996e0 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els1.x86_64.rpm 6107cf85fb6b02e5e8d17b0ccadaa534fb5e6609 openssl-perl-3.0.7-20.el9_2.tuxcare.1.els1.x86_64.rpm 6561143cc74670e5e9012f6d69f5f76fd01798df CLSA-2025:1744390816 TuxCare License Agreement 0 - CVE-2024-0567: detect loop in certificate chain None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0567: detect loop in certificate chain

0 tuxcare-almalinux9.2-fips gnutls-3.7.6-23.el9_2.tuxcare.3.els1.i686.rpm 5f521b76c5f28ee04d7b4c05ec4c570a6a0d30043fff8a81f3e368c10b858c89 gnutls-3.7.6-23.el9_2.tuxcare.3.els1.x86_64.rpm 690d23d5c75e6866405a96bdf7df8fa9bb0f2bda550998c72a4ae2975468d49e gnutls-c++-3.7.6-23.el9_2.tuxcare.3.els1.i686.rpm eac34294361fc36a835ba77190f692f4619e41e6dc76cf90f7cb9630c735a5eb gnutls-c++-3.7.6-23.el9_2.tuxcare.3.els1.x86_64.rpm 4622f90f506a8b71f2e17aa349bdd15ab49947a081137502442da11ebfd017e6 gnutls-dane-3.7.6-23.el9_2.tuxcare.3.els1.i686.rpm 83fd6310dec144ba3f2b4a1a75a3d93a7de4518085ba64db1038e261003d55d9 gnutls-dane-3.7.6-23.el9_2.tuxcare.3.els1.x86_64.rpm 9e4d23bbd448d5bb0dc1f479f5b89f33c19875c0826c2b4a5a7b0222db6c846e gnutls-devel-3.7.6-23.el9_2.tuxcare.3.els1.i686.rpm 2fdc96f025c68257324cdcdc17d26065380d685ef402fbcd53a0c341ab7e3e19 gnutls-devel-3.7.6-23.el9_2.tuxcare.3.els1.x86_64.rpm 83d4b8bc0e5f2e77aa95827c3017b209982cdae869a1e55082bf89702aa2b51c gnutls-utils-3.7.6-23.el9_2.tuxcare.3.els1.x86_64.rpm 0be8968748c24effcb06516d8c0b7d73301ee47b599a6914ebab3537984ea144 CLSA-2024:1729546540 TuxCare License Agreement 0 - CVE-2024-6119: avoid type errors in EAI-related name check logic Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6119: avoid type errors in EAI-related name check logic

0 tuxcare-almalinux9.2-fips openssl-3.0.7-20.el9_2.tuxcare.1.els2.x86_64.rpm f519dc6deb4ebca344f2e14184e639e4344f31e39ddd9427febad1d9e16206f4 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els2.i686.rpm f3b51fde0b4e433fb36cf2aa0626318c9f16d33c7777520c4cf7109339eadb5c openssl-devel-3.0.7-20.el9_2.tuxcare.1.els2.x86_64.rpm 88a912d237b9d5f0bc949f5bfab6263069b47f8c0810ce07addf053222fafd6d openssl-libs-3.0.7-20.el9_2.tuxcare.1.els2.i686.rpm 9110e65e1ef6466e6f56fc69497121e854c5133caa230d7bbb25e03dd09d3223 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els2.x86_64.rpm be224c0a0e319e58ff649b6913de6fdcbb9844abc3455d8f25956656916cb4bd openssl-perl-3.0.7-20.el9_2.tuxcare.1.els2.x86_64.rpm 2a4dfdd2d7ebda6d0572f3f37a3442c0c1a02738bc9087283813ce88784276a0 CLSA-2025:1744623473 TuxCare License Agreement 0 - CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els10.i686.rpm b32b32dbae47f744b657d8411457fbf5e7e89a5f10acc95f6684595889c32dd6 python3.11-3.11.2-2.el9_2.2.tuxcare.els10.x86_64.rpm bdb1fd4dad4d1274a7c8c2071674b06b0f2dd15fbe1b32532e45c541593e1930 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els10.i686.rpm 3b4e9a652155c7aee8d3b225e8c15e0e218e38af2881b979502c43249ac7270e python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els10.x86_64.rpm 53ac74d0547b8b24af8f5ccadb7890e3ae0e2b6106a6dff3293d13ac69823f91 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els10.i686.rpm ef03f4ca23dbb9cc8352e8ae3933bd7d8a24b7fd4a7f6ea184d22466a04f9766 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els10.x86_64.rpm 500d8dbbe4d3f4bc4246c26599d50239d2612452b2cf390d1ed40e4a19c5f67c python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els10.i686.rpm f887d9c93896156c3542765e70f8d3e7757852a583620c589ef2a8f0913fd87b python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els10.x86_64.rpm 63bc0645fb6f6aa0f4db186468ea95f4f99521718eadfc8c60269a64dbc43166 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els10.i686.rpm 525c8ac80544d993ac0d87cc4c5d0ca7e9a53870c02c233f67696df1b16fe5ee python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els10.x86_64.rpm 737f7becc12110fc27c64444b9499c34329c76b45d8d8bab3e03f01f0cfa6adb python3.11-test-3.11.2-2.el9_2.2.tuxcare.els10.i686.rpm 9b62b07ad0d76f44ec2828bcaf6061b075f2353daa8f644536f4acea73b56b99 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els10.x86_64.rpm 179c1c677e7137e369be291cf91f8c54690918b5f8774ee69df7b1cf86d801c9 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els10.i686.rpm 6244cc329cb62b89fb72157acb3cad8546682e87744647ac7a94e8e79a697882 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els10.x86_64.rpm 835f678a4302c0719d23f657a8e790bf632df06ac4e28b63a84b815865eb0eaa CLSA-2025:1744628407 TuxCare License Agreement 0 - CVE-2023-28450: Set the default maximum DNS UDP packet size to 1232 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-28450: Set the default maximum DNS UDP packet size to 1232

0 tuxcare-almalinux9.2-esu dnsmasq-2.85-6.el9.tuxcare.els1.x86_64.rpm 1fbb3e91c7edac27e625c9d49dc96ad85ac7afcd125855219413272ea087b59d dnsmasq-utils-2.85-6.el9.tuxcare.els1.x86_64.rpm 9cd81b0c131b7ccb7cd00e69751f58cc1a1a58d054790e76ef773f198feca23e CLSA-2025:1744631318 TuxCare License Agreement 0 - CVE-2024-6239: Fix crash caused by malformed input files when using -dests parameter in pdfinfo utility Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6239: Fix crash caused by malformed input files when using -dests parameter in pdfinfo utility

0 tuxcare-almalinux9.2-esu poppler-21.01.0-14.el9.tuxcare.els1.i686.rpm 82f3a537e331816992a001ad6f0a8e2edc32a80cc084ae3f7708dee40d2373a0 poppler-21.01.0-14.el9.tuxcare.els1.x86_64.rpm c44d1f3a470b9cfd017ef427209b817953dcf12ae210fa003278c00ef154eedb poppler-cpp-21.01.0-14.el9.tuxcare.els1.i686.rpm 25deebaf925f69358b5c3fbd757c34971450ea1419750f65d9c8e43ec5138a7e poppler-cpp-21.01.0-14.el9.tuxcare.els1.x86_64.rpm ff76feb41fda5c43e2a959da4bcd3fc1c597fa99a20486a8c6ddc7e782efbc93 poppler-cpp-devel-21.01.0-14.el9.tuxcare.els1.i686.rpm 82da1042583be2cd28ee0f5f9a0d2395cb68e6ee7752910e13699610168d7757 poppler-cpp-devel-21.01.0-14.el9.tuxcare.els1.x86_64.rpm 57f955a12c03bf6c85c17ff34e0625f663456d47fc0351a62bb71d4917ccd80f poppler-devel-21.01.0-14.el9.tuxcare.els1.i686.rpm b5d8e61839b652846409889a0a3efe4415868eeaeb23b7a5825a962b28435f9c poppler-devel-21.01.0-14.el9.tuxcare.els1.x86_64.rpm 80ba86872ddd19925eebc4a4fa90f5266fb57db3829bae329e4eee6d66a802f0 poppler-glib-21.01.0-14.el9.tuxcare.els1.i686.rpm 8e86c90ed610f6a707f835572ae1a8983dee60907d0688a09bd2d62988fad1e0 poppler-glib-21.01.0-14.el9.tuxcare.els1.x86_64.rpm 4b8f5bca4fe99f2cfc060a2b0b2e952e9799774da6af4744e4fdd07ff50236bd poppler-glib-devel-21.01.0-14.el9.tuxcare.els1.i686.rpm fb4e9704491cf30fd0e5b3872302f6657792468c223d1f5b8336aa0b1d8ffd47 poppler-glib-devel-21.01.0-14.el9.tuxcare.els1.x86_64.rpm 7e189d6a3c91981178361e3ad812eaca311482b4674a6b6daf3f651d4f9fcacc poppler-glib-doc-21.01.0-14.el9.tuxcare.els1.noarch.rpm 2336699bfa8891d0a9adc1c7640ab72657c255e5ef7c9baa01727dd725d95102 poppler-qt5-21.01.0-14.el9.tuxcare.els1.i686.rpm b50b86a28655733d142622f1993530000d294658b5c70c7e3475db7d6d0a5c2d poppler-qt5-21.01.0-14.el9.tuxcare.els1.x86_64.rpm bc41f93bf9870309a838fc9ffe536ef06b3c2ef6425c187a3e2328f36c3c4407 poppler-qt5-devel-21.01.0-14.el9.tuxcare.els1.i686.rpm 1641736db583b2a73c6855f4d53495658beac5f6af19699763e55e9fd2422c9d poppler-qt5-devel-21.01.0-14.el9.tuxcare.els1.x86_64.rpm 5ca94fc49fc79a9e400f43f97ce0f2f20c951ad130304cd4055347e6e38c955c poppler-utils-21.01.0-14.el9.tuxcare.els1.x86_64.rpm d791352b4ff33c4a210bfde1816001f8e00d2d487dc255bec3b80dd80be69013 CLSA-2025:1744631931 TuxCare License Agreement 0 - CVE-2021-29390: fix buffer overrun with certain narrow prog JPEGs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-29390: fix buffer overrun with certain narrow prog JPEGs

0 tuxcare-almalinux9.2-esu libjpeg-turbo-2.0.90-6.el9_2.tuxcare.els1.i686.rpm 25c7365ab801abe09d1b493e4cab23fa0eb25ee8ca418cba484b10f54b096e9c libjpeg-turbo-2.0.90-6.el9_2.tuxcare.els1.x86_64.rpm c4d3125c79aadb4ad0eeb2816d3702dd26d12b2a74cd351927c43a92244dfada libjpeg-turbo-devel-2.0.90-6.el9_2.tuxcare.els1.i686.rpm 315c3c10e93a1d4bbe316063d6aa440b8cddd2764433909698eb6aa60625d411 libjpeg-turbo-devel-2.0.90-6.el9_2.tuxcare.els1.x86_64.rpm 160475c2c720cc888c26a8bc358b9e3e7dc01c21ca5b4b178e992682d5e363d6 libjpeg-turbo-utils-2.0.90-6.el9_2.tuxcare.els1.x86_64.rpm 477fe1f80c07fbe76ba7e565100edd460c60762d7761356d51ab30d1a54df2ac turbojpeg-2.0.90-6.el9_2.tuxcare.els1.i686.rpm 6e2a3d4fddf37b4575b7ed862ef50f673d434126cf246bc9ca451137b1605855 turbojpeg-2.0.90-6.el9_2.tuxcare.els1.x86_64.rpm a38dffd3129b0c756df35beb046767815edd92273e878171945b0bbf207ffcf3 turbojpeg-devel-2.0.90-6.el9_2.tuxcare.els1.i686.rpm f6d7474006e3e2271665f0178e399eace22977a29f69c2e78394ab89e5b1cb1f turbojpeg-devel-2.0.90-6.el9_2.tuxcare.els1.x86_64.rpm a67581ed36bc423097c999441b015654896af8334977866dc9c3d75bdcda0938 CLSA-2025:1744632481 TuxCare License Agreement 0 - CVE-2023-5380: xorg-x11-server: fix use-after-free flaw causing X server crash in specific multi-screen Zaphod mode configuration by handling window destruction properly Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5380: xorg-x11-server: fix use-after-free flaw causing X server crash in specific multi-screen Zaphod mode configuration by handling window destruction properly

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els13.x86_64.rpm efd59706fdb4194bf414112f65406bc53468a731dcfdaa4b59bde57335cae33a tigervnc-icons-1.12.0-13.el9_2.tuxcare.els13.noarch.rpm 7617355b541d2596fa47bd76d371c4bd415140e40ed7df9d7eb8d87e47f3be2b tigervnc-license-1.12.0-13.el9_2.tuxcare.els13.noarch.rpm 73adcf47376f1d3a7939c9e0eb3dbe9fdea5d4de4a276d67822744080b0cd2ee tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els13.noarch.rpm bcdc4635ef1be6753cf2821382a7d16074fd1b6a70c6c413406455e3cffe3cc3 tigervnc-server-1.12.0-13.el9_2.tuxcare.els13.x86_64.rpm 29abf443cbb5816a224fd6f10694e299ef93faaa727868e71403ec95a4c3c8bf tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els13.x86_64.rpm 33461e29ee0d7e7f98122c17ced460ab9dd3ac941f590ef8a776e8321b4e4f3d tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els13.x86_64.rpm 01f1f050d1e446a6962b1bd44ce7cff38748aa004c4cbdad7baf3c70de5d7474 CLSA-2025:1744633827 TuxCare License Agreement 0 - CVE-2024-7347: fix MP4 stsc cropping: prevent overflow and buffer underread causing invalid seeks and possible segfault. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-7347: fix MP4 stsc cropping: prevent overflow and buffer underread causing invalid seeks and possible segfault.

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm fdb7af82111df239469e7ae92ffbbead3d58f1dabcafb190147664394bbbc162 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.noarch.rpm f3088eb9189ed68b20fff992078ca18d74803abfba2794b3f7e387228f2e563f nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 8362cfa3764e91366ec37b6bf8c4e82d429a90efa4a1084199ecd4e32756d1ba nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.noarch.rpm b82da45edbadd0958be6ce628e2cce47982eebe30d362300029abedbfcbe41ec nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 8f62dd7bab5378cf449514dc94a89d9d0c54bd0cd4d29b6d8b03719747ec9bac nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 667e49edbd85c4e8ded9d6e66ca3447bc1492e02905872da75716757205ef11f nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 2a3f603901413e5418b2a6d8a2ab135ddba6affa47aa5f1abf48cd1a1c1eec92 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm a88ddb1f2e6cf6819e43bf7a6c68cd66a9c50a96b7337cd351a05acf48e44f9d nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 3cafd32a8b5fadd5a0c4a7218c19519684fa014287478ea10cd9486b36277044 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 89c80f2ef57b285ef4fc2de975358b8119cd43f89dd5f6b7e420fce720cabd3c CLSA-2025:1744716861 TuxCare License Agreement 0 - CVE-2024-47176: fix remote code execution vulnerability Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47176: fix remote code execution vulnerability

0 tuxcare-almalinux9.2-esu cups-filters-1.28.7-11.el9_2.1.tuxcare.els1.x86_64.rpm edbf100dceddd55fffc893f05d874630a9f16a334423ffaf0c5853c54f9bc0b3 cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els1.i686.rpm fe78ad60e609f987277faf4ba7f284dec4e73acfbcb222d07fdbba52f1be41f5 cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els1.x86_64.rpm be96bda4cd2169afd17a5360a32187c2558b20d761d474625db770ee02bc5ce7 cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els1.i686.rpm 33e8c47917ab5c30b0aae1a4bd2f5b675e8be2cf27e5c80d2863acf09969af7a cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els1.x86_64.rpm 7bdc8ba67532211df06057714e2d6c9c6ec09944e145d83291d654a3f2bc5e5e CLSA-2025:1744721593 TuxCare License Agreement 0 - CVE-2024-25629: fix invalid memory read issue in ares__read_line() - CVE-2023-31130: fix buffer underflow in ares_inet_net_pton() for certain ipv6 addresses - CVE-2023-31147: fix issue of using weak random numbers in DNS query ids by replacing rand() with a modern OS-provided CSPRNG like arc4random() - CVE-2023-31124: prevent fallback to rand() for entropy generation which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-25629: fix invalid memory read issue in ares__read_line() - CVE-2023-31130: fix buffer underflow in ares_inet_net_pton() for certain ipv6 addresses - CVE-2023-31147: fix issue of using weak random numbers in DNS query ids by replacing rand() with a modern OS-provided CSPRNG like arc4random() - CVE-2023-31124: prevent fallback to rand() for entropy generation which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG.

0 tuxcare-almalinux9.2-esu c-ares-1.17.1-5.el9_2.1.tuxcare.els3.i686.rpm 6a008449fe15a638c2b401a4bb11ffd311182ea66db3959cd310f3bf45f62390 c-ares-1.17.1-5.el9_2.1.tuxcare.els3.x86_64.rpm a0a4e72907e036345c9eb91a83cebdf12cacf235e8d629e44ededa4d7605eeb4 c-ares-devel-1.17.1-5.el9_2.1.tuxcare.els3.i686.rpm 8c4fe44aedbe2455cb06c4a9496d2e43d58b53681bf91389c7950b926d8e68f5 c-ares-devel-1.17.1-5.el9_2.1.tuxcare.els3.x86_64.rpm 1959beb2942926e45821bc6813a3aa3c4a623a57da11a554000b34aafa0812d6 CLSA-2025:1744782967 TuxCare License Agreement 0 - CVE-2024-33871: fix arbitrary code execution by restricting Driver parameter to load only known dynamic libraries in gdevopvp.c - CVE-2023-38559: fix buffer overflow flaw in devn_pcx_write_rle() function by adding input validation checks - CVE-2024-29510: fix memory corruption and SAFER sandbox bypass by preventing format string injection with a uniprint device Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-33871: fix arbitrary code execution by restricting Driver parameter to load only known dynamic libraries in gdevopvp.c - CVE-2023-38559: fix buffer overflow flaw in devn_pcx_write_rle() function by adding input validation checks - CVE-2024-29510: fix memory corruption and SAFER sandbox bypass by preventing format string injection with a uniprint device

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els2.i686.rpm cd46eadc6e12bf70782f1076ed3cf91434c29c0bee358fb453794a22e15823ee ghostscript-9.54.0-11.el9_2.tuxcare.els2.x86_64.rpm a12131e4ad5c1c3ae645a797d0c968e2fb643724d0977dbb4cf03013f4cc1161 ghostscript-doc-9.54.0-11.el9_2.tuxcare.els2.noarch.rpm 5f446848b0b861b8314b0e91334fd4a27213c21e41cd11378af6c2996c1cf3c5 ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els2.x86_64.rpm 97a1192e5b6e32982510cd6a7ec68b7d2ad7859caac3791b0f116e723394b271 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els2.x86_64.rpm 6117436dcf3c66e1b073ba158145ee9b24bc4147210ace280d214bfc6af38b3d ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els2.i686.rpm 07250544f2bf1b3749ff10bfd06aed29c365bfe7fe055be259f8f81b2c603c1d ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els2.x86_64.rpm 07ab7ca7859c075a8c4586129bce3c99dc2ecc36aa44ecb82611e06c2cbb089e ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els2.i686.rpm b122d87d4bfb930f62188cfcbe3f39b8e3b4425abfe0a44f3fb3efda39dacf4f ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els2.x86_64.rpm 4a59da2671ad8ab6aa13aa019f11f8296d60672461a9c3b9593f9ce5f0c14f64 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els2.x86_64.rpm b9f8d9aab5253bda965f2d6e9ac033c384193c3598cb7d2b8b7199c1fa076132 libgs-9.54.0-11.el9_2.tuxcare.els2.i686.rpm 9ada241d82f6ae9b441be4831168c54a82709d0298add9e63fefc0184a5a5255 libgs-9.54.0-11.el9_2.tuxcare.els2.x86_64.rpm e1b381f76f2f920de9dd7980e1fdd0904acaaf62707a5e1b0239c549b8d28a1b libgs-devel-9.54.0-11.el9_2.tuxcare.els2.i686.rpm f1034eaf8407d818dc3f840aa467f613c6b9fc52a20c35df3ef51ee8ed999cfe libgs-devel-9.54.0-11.el9_2.tuxcare.els2.x86_64.rpm 939a6c210879a0ebe7d60b519053570d96fa92e22918e632000eb30732162a16 CLSA-2025:1744927038 TuxCare License Agreement 0 - CVE-2023-6185: escape filename of embedded video to prevent execution of arbitrary GStreamer plugins. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6185: escape filename of embedded video to prevent execution of arbitrary GStreamer plugins.

0 tuxcare-almalinux9.2-esu autocorr-af-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 4be7bd44ea97c201080e34e9c2fa31d07b986d9380ef12d984089cf0d7dcc536 autocorr-bg-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 5ca6d91d5e51dc4c847d90bb322fb69faea6679f31154a277988a304bfa257b0 autocorr-ca-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 525d9a66a07b40b46f2c2ac51eb42a66b17c2e9f08d1889a25cff0224a041645 autocorr-cs-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 408214ba7100493a4feaa4c06d5a3b5b852200540603bee079a8f55474189e7a autocorr-da-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 7198bb46ad45633616346687e9d065497da02e5652fb07d0acb4a7b81ee75365 autocorr-de-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 475bf17003cce91d96242a602e803a8181a81b6733481e8e645cc4c21e6df81e autocorr-dsb-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 07391a28a533050e28b784e60df84747f7c0d8bab0742a7499246f5c941d26a3 autocorr-el-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm b9b4be5bfc44057bafbf780cdfc0ca84e7d87994a6e2931c3521bdf22ba7ebbf autocorr-en-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 4811cc0e31a58b8602570e9b553f4d3d2dc8a9d4f6a33422e34f6a6bbdc5f693 autocorr-es-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 733b4f178dbf534dee01b107ac6abf9fd5f641b638281e45ee88a71b7065421e autocorr-fa-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm aeb283fb839602cf39c18135a5d79ee4144d6c7a0909b87e8143b10cfc797743 autocorr-fi-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 813959e8723935adb7c794cbf1b16fcd11ec434de96c4caf6d0bb25fc43e2a76 autocorr-fr-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 11527b888877a9d65a4e4c18966e841f6b94c6506fff52a573de2352a40f3ef1 autocorr-ga-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 1059d87ac6032e2e128d50df9d7ab8c17e012a4f9a425d40343886d2d3b50f9c autocorr-hr-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 8fa42c644fc75d475b38b1e7629688f9c8923e6106c28a7dd124a28e00cf8a39 autocorr-hsb-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm f060bcd323e47868b74a1fefa27f22f75aeed1c090425c4dda4f8dec96da22be autocorr-hu-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm aa1a24bb59524313496c4701f677b6b9949fbfe13f3abe5ec9a058739ee231f2 autocorr-is-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 311e4e7b9af5bd170efa2c69ab84afc626b084db68958b990e62c45871e18ecd autocorr-it-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 3390df663547a8614af0f95703a2c67687a411e5f78d7e13faa1d283233ea7dd autocorr-ja-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 38e893a1b5d93499ea90a5f133b10237eec96eed44ee4043305bdf0885984c22 autocorr-ko-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm a7886365385ac800876d4646d55ed1bac97ff926b71dd227cab103c24447928c autocorr-lb-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 310ef206bba5072f5e99d622eb68026c9047574f6163c23c8e177f6ff76c8fc9 autocorr-lt-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm df53662435d9eea52802e6f006c345af6803506cd48de5e6ad914f8dd963720e autocorr-mn-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 86c6f758d71a8564cd50f0d92b1b8fe8a7c839347cb110cbd50b43759f0bff85 autocorr-nl-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm a88bb73f0d44d8639ce4288fb06167a47fec89f0370271f9fbff33fddad54c19 autocorr-pl-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm f08ca32151d94280f1163162d37bfa9fa0775886e3f27f707512e37d5a0cf549 autocorr-pt-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 4886fafdad45036465f84cd762a25cd9b75e4645612e4a5b40b26e1f8c1a0378 autocorr-ro-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 3dfeebb36bcb4e1ca65cc92f91b2e92c1349f8f1d2b01d6914a54d1fe89b1025 autocorr-ru-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 8a8650ecef3d077a16483868dfbaed968105e3b2cc2bc26730852ba84853e5a8 autocorr-sk-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 5d0f288c38257069e84b5d7b07bf1e123a32abc6b5445b594438285fead1c665 autocorr-sl-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 4a63bb086992453749b1042fe10f50d9319d7555d5cd81142e48444b6f978cbf autocorr-sr-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm cd2d6c6285e2146519400128c56b4c16a788e7a48fb4a944a6e034b8fdc622b7 autocorr-sv-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 4c5f5c64ecc03fb98dde80ba8892d58d3bc72a27a08c34e899b2df9904a296b9 autocorr-tr-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 85df2297ab704ed4344b0396988e66dc0b6a5bc13bfab5c14249731743706b24 autocorr-vi-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm f512c55e8e1de09c0788611269c3fed47a8d53e0968e4b944fdcf9e3a97a5f61 autocorr-vro-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 7a21e1d9792ab8e748c753704c303c9a5473e06f92e2cf17d3f6d6496ae09c8d autocorr-zh-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 3bdb17cf8b76a5fbd0e60dc36743e310171bd813a5d9484075ee024bd09125db libreoffice-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 01a3ad2bc710577364ec4e53919e1466521ca9082c0e19053d3180eedf948f19 libreoffice-base-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 6223db40244df06bc1bdb48c153868c621e79a26462c8bff8c93d34fccf7d9c1 libreoffice-calc-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 1225ca9dcce0525f071bb7a32b46292c1ded087eef3cbbe9533b181968b2463d libreoffice-core-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 7bcc40110d24ebd3942624d53b48b79bc125f43f0a99d657cd3f2c04eb741fde libreoffice-data-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 55f592334047af5ca1440534d6571f08babce65b3daef0e8d8f8056b2a5e86af libreoffice-draw-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 2331c605b0195bb86a8102d3b8cdd27ff1dc53effd3549e9e371bf0d5deb3e7a libreoffice-emailmerge-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm c71fd42b45ad55cd9de2b784a9da15db043c955585136d025b5269a0963c7551 libreoffice-filters-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 4af8a0348b3be3d0d9c24275fa4153ebfad89532d1c3ef8e335aa69d56bb00b7 libreoffice-gdb-debug-support-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm d88116a92cc9c9261b56165f85694c6d568765ff36d4c2cab6df94cb9fcd9322 libreoffice-glade-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm df283531479fe1e9b452463071d604706992eb7a64cdfc82f16cbb9614c492f4 libreoffice-graphicfilter-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm fb16d30e6303cebd21207922b02ad50f3a3c5af9c081876e06f8abe70f4bf389 libreoffice-gtk3-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm eccb65318bc5d6a40ae8908a9cd231175ff05321c67a34d050b70f0cac952ff7 libreoffice-help-ar-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm e65763cbdc557f60fd2e62cfe6c493d3d8529392b8e45bd9b1420281a066fd88 libreoffice-help-bg-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm f25e4aef8318fab54d814564ca36ff52448737ed9d6d5e087b0550c802f9e23c libreoffice-help-bn-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 09e6266f0fe3dbe299dbcab43ca25430ae7f42c7c57975f7eac4f067b14e7a77 libreoffice-help-ca-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm acd0f041cb44a0466b9999ffc05945e5160267695b52372e66d51eb188ec0575 libreoffice-help-cs-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 6c92503ab6c904e6edfcd0d1663de06a0e260f917b593368a2ff8a383b162190 libreoffice-help-da-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm cdf62cb11548f7f60b01b39a3a369c26ff89f701ce5411e24a40200d5d26eb2f libreoffice-help-de-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 8de499024f24b7e39e99219055206b73f8a975a92396687dd732ff3d77cf349f libreoffice-help-dz-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm c22443452a86321feb8d2fb3ffab54c118cd4ee32e90381d9818d2a26081fbb4 libreoffice-help-el-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 6346b8453aa6d1bafd0d319446924688614fb1df4a635fd1edcc59abe28abaa4 libreoffice-help-en-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 52fc01346b949d22403140db7f6b053b5e75c4a2e2a2d8f2f11eadabf0d29f34 libreoffice-help-eo-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 1776b80f841cbcd0f94df37b5030544f6749fd37c8f7d9b0bdc8f1066f7681b7 libreoffice-help-es-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 73e15edc35858d2427c8c4297b59d2ed8b4e96c0fa5a2d13011990ee16b31e6d libreoffice-help-et-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 5fe7f639c4abbba4c9a2ae217eb33e5bd57045ea0a25462f0b5666bff37d46d7 libreoffice-help-eu-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm b4ded377a38599da52617eb08c491b9aebab7e4ca7b945058015abb37ee8a7b2 libreoffice-help-fi-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 2624a6ee7b9ac999ded81f44afbfe1372d41aa37abcfa4fde74485d2adb7796d libreoffice-help-fr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 1983807ff027f21a1f1ac802cf34f9e7e731669a036ce39119b078713d64ed21 libreoffice-help-gl-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 0fd46af51ddc3d05872b0cac046b8fcb8945ac471dca94cdbb7846f69880ed43 libreoffice-help-gu-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 5c40cc50409f6bcf1ffa48d94ae1641226fac7b0584cd8c4bbbe3582b69897be libreoffice-help-he-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 910d3b1cb2616d75c47b5ececa17af50e7e2ebf874a83e0072bed50c534bdb4b libreoffice-help-hi-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 25806b9317b05ce7360b7108d482c638464dd3b1dd173c41ae6565d5747c1b28 libreoffice-help-hr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 627172af90ff49c438eafa82aa3d08d0aaaae51cd45566bccba1373d40e833ca libreoffice-help-hu-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm ed0e0aaf4d701b910f85d3da153dfa3187ac140dec8c939e10bb785d1f22efa8 libreoffice-help-id-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 5859613635a5513afe395200075a26198349131683e3a8c6174e7a39e90c9923 libreoffice-help-it-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm ddbce47166fb121336ea7639b43bf6f1a21df87f292979701eefdb91abed8340 libreoffice-help-ja-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 79dd3378c53b90639fc256656a70625661c9cb05003292355d36577cf517aa27 libreoffice-help-ko-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 3a45369a7e856dc5493f42336d973c6a18a1356eaa422745726084b100cd52c5 libreoffice-help-lt-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm fceeff6ac743c76587fca2e6fa63fd4ed8d9e8cc89f877dba5b58d47db52b326 libreoffice-help-lv-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm d63ac52e56a5ee35a3daf2eda31a38c9e57b6ac314b67ac9d71132af18cfd5ca libreoffice-help-nb-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 8dd04bc7fc65a4ee2a7f44d0c02178fb1fb9a79dd947413d65ed7bc27e3af0e7 libreoffice-help-nl-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm a75686448227780c473bf7a0c31dca61d1324caaf48196a1ad3f409dcd034f85 libreoffice-help-nn-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm f90fa93b40447cf3791c9ffd9b4c0fa64f76755de47ad6db4598db79322c3168 libreoffice-help-pl-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 8a90e1eac572c12cff12bd926ad597076d71e22d3c8315f082b0f3f415223b69 libreoffice-help-pt-BR-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 02e3f14420b251f087a8b56e7e73174b2870eafa3f7883d101413cbc2852ecd3 libreoffice-help-pt-PT-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 60de2bce2a1283d6bacf37e87d346108d17c88792f333ccc34f8d300de3b2e9e libreoffice-help-ro-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm f6aea7ef68a190c29c9eeecc10d40fe042e5abb9e2a655a7a3bcdc4f555173a2 libreoffice-help-ru-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 813bbb2ddb69e969db2d5ba0459b5880724bb3c8b9875c4a625cb16f673e2e09 libreoffice-help-si-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm b3607da180f57ac195cf74f66c70fdfb4d53e4a27089c54fcf33c98dabd3e447 libreoffice-help-sk-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 9ccd6fa86671708acfe7e3a6b04a2a1551d40df843f4d28bb9a62094754690af libreoffice-help-sl-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm f21e8b57d72107307c1e168391d18ca31698ef50075f6707b1e480bc0bdcbe2b libreoffice-help-sv-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 46f3d63f971b77070c8f7d0c4bddd5fe1a378e7737685bf6c5011b35c5303ae6 libreoffice-help-ta-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 96fe6e88c7bf6198dc8a82bea036cfa3e65c09d22f1deab0d10d1b7bdb667e10 libreoffice-help-tr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 3bb57a6b775559a5dcae33f7ff8b3344f4c99fffd42655d95f7f785efba0ee03 libreoffice-help-uk-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm e24b397759c7ff1a3c7d0b7a14db38b3f544e89693b11e0616b9cbbde31e1254 libreoffice-help-zh-Hans-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm c15cd911c0f444df2765c572ef533a78db353b51a3d26f7b303928456c51c26b libreoffice-help-zh-Hant-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 896fa0c7db6f6008dfe2efcb6571aa33b1fe668b39e0be879e0d49205e5b4186 libreoffice-impress-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 98362fc97bb5469e029d3029c06f16464cdbac6a78764121ce8856e551819f46 libreoffice-langpack-af-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 1344da2fd8ac8180499de43f463466de5c3480e144e13c44aa1af1a6d8418ab7 libreoffice-langpack-ar-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 8b6ec20fb9b138bc8ca7a4de386d61f4b0381334aacc350d27106c047ea72964 libreoffice-langpack-as-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 208d6b2be0b12002fc41bfca312c79ae958cf3e329448ffc2992568c1ee01c30 libreoffice-langpack-bg-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm fa0c36984fbe314f09cf2e3c3dbb4167dc69db6fb2d30cefec4ea554172d33c8 libreoffice-langpack-bn-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm f02072e2725680b16036e66fe8248183bd8041968c4458383d632fb04ead7648 libreoffice-langpack-br-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm ad388590ece622533ce00595856527bedfc51f9c5b0301ebb93d9272b997149c libreoffice-langpack-ca-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 4877e8f53ab149a1c344ce9d55f867d38f4976ef243fef500d50b90d6198cb6e libreoffice-langpack-cs-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm e3b57a8cfd2ecf0183ce8c489d8f0c39fdf80147c464b074f9fdbeeb5dcd65b8 libreoffice-langpack-cy-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 07f0e6a9373d4a45e03d9a6a225aa4d94fb120b884cc64040111be822fd8f3da libreoffice-langpack-da-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 41ade65a35199aaae9aad66a3c7ccfe3d4701b64059ced1c67c17e03c5f922e9 libreoffice-langpack-de-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 6b149fa2a93ab2547361eb03e8525b5029e53e5bca8b473db6d83eb73904751f libreoffice-langpack-dz-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 93b5198feabe28f838c2d4a00d71cef8caeaac1b838bd3e423be48e66ef4a889 libreoffice-langpack-el-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm a4d117359883c04120f0688b9dbd789fcd768b970971c076ee012f551f3ee020 libreoffice-langpack-en-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm dac05ad2a4801de7331b5532c373cc8bd0308dd0705d52adec8e2b4d948e03d8 libreoffice-langpack-eo-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 42414af13b5f6ef5b8b8e094a465493aec8ee5f7f42ed0c95b70c648f3426f60 libreoffice-langpack-es-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm a161e8cb747e38450c4f2155132786fe4ec632e18d120141c6f8ae1bfd7b966a libreoffice-langpack-et-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm cd80605c0d030989ddcb76afa945c9830bc0c8387443275adcfd15e062cc552b libreoffice-langpack-eu-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm c3b524df9a7df6800bc8f78a41e0af0774a3df74702cfc3678193e3dc4ad7775 libreoffice-langpack-fa-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 54aebd31eb24ed754c2156b17d6d87c5d823faa979e162da4fbe21f3f42136bf libreoffice-langpack-fi-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm b96fee769a8b07c6f3deb478477259a75a6cf3059eef976a05e1a82b529a8571 libreoffice-langpack-fr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 3d7203249c370c5a66e9e140f7f9620ee1df1b33ad9d294c069b63b771dbf371 libreoffice-langpack-fy-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 45a09b55e563e0f21e6a4f26b7321a78acd713e1047448e9e97831e02711bf99 libreoffice-langpack-ga-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm a6352016bbabacb77adc7c9c1bb4e83481a1c5b2abe2760c4e26d53649d4f4c6 libreoffice-langpack-gl-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 7cdf0d06e7eada01e1b7ba95d0828ae90d56e2550cc55fb413a9df020487f529 libreoffice-langpack-gu-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 448f0d92a6c9821415e41ee0e003de6a439f1d05349a231a7e552cff9bc29a20 libreoffice-langpack-he-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 65b3c3b95b749340fe0e958d0b6e8ce38f9c22b7869ae4546eb1dfeae827d2df libreoffice-langpack-hi-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm b6dd4fb86be1ed5e24798ad64ea072828619b4a742c94fe2ced2aa9a7754605c libreoffice-langpack-hr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 40f2da1cf634f9fdc6fd4c7ccfa42e2fb1e6c1843f845a5112fb91fb7d4ac030 libreoffice-langpack-hu-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 451cdc0654b2b2f83f49bdaf4c345beea345f317e06178c82ac4a0d73ff4df38 libreoffice-langpack-id-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 6fd25b061d241f236f0569ac3c647e6c784f98e58f4f8f2621fd4fbe835d6c4a libreoffice-langpack-it-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm a821eb431d081459037e11fdb1b2f12a3603d6be45936a21dd7bda7bfb0a45b6 libreoffice-langpack-ja-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm b228cfa31f2cdee0e5f92d7bd8546b6832fe974706a87a6d9edf086697cdfd8c libreoffice-langpack-kk-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 5660386c151bf7fc4b5c925952f9e0b266d5c6cfb3dbb6b95b9fd582b084e363 libreoffice-langpack-kn-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm b946acc1c8c4c86d95f6f379198272f82826b593d6eb3540f850dd42500a7a5e libreoffice-langpack-ko-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm ca7461154e906ad4bf3bd9ebecdc68218f7a4c072e0691a7f42cd75ca7cd982a libreoffice-langpack-lt-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm e2dc107b0e97c7b88546a571fd6eb8256bcd4e9e1752eb2551548eb5a8c39a13 libreoffice-langpack-lv-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm b04feeb83e2892f6389c350483b5d2390d11e30b62a7f102620c17c66c0d3867 libreoffice-langpack-mai-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm eb0fe48978c568648c98abd3d3bd75ea3648d586b5d889372bc93f68be9957a0 libreoffice-langpack-ml-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 25116e03f39f0f1bfdd85e174bba4f88f75557c8f13d64e33beaacad9442ebf3 libreoffice-langpack-mr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 3d3d7ddb2cc813d63e14808ffe2599cfe97dc39ec6dd2f2274037d476842990c libreoffice-langpack-nb-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm dc477fd435ad5f07bf99933da1da33e3289e21ef94b0f975fe53dc878bdf386e libreoffice-langpack-nl-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm ad4e684dd7327836a359f345142a88274b3d95462c09f8ce9558bd4b7ff28e06 libreoffice-langpack-nn-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 62defb1d24a1fd15d4db9ce3ee23512522f54d58a396ade9a62fb88c48651828 libreoffice-langpack-nr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm cfe88735530bf8c631178129db0c0bb98917b68a2700290d02c5a3a5ab7488e6 libreoffice-langpack-nso-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 6355a2ef93b654e3222afa9d9ca385a2fba27320f65af0145be39d54d4bec973 libreoffice-langpack-or-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 8dbb47ec68033c19c7db81cd83b11c1244b8e2d02ccb4d12f64990bd1e21a76e libreoffice-langpack-pa-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 0a71df9ed22f267078a333c6ee6576db07b84e512e28c84ea951abb49503435a libreoffice-langpack-pl-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 873116e904682de3c199143a423e60320c9aac947e9f3ad305f3ef6782d19b22 libreoffice-langpack-pt-BR-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 90158683d8dc236cc545f7d4eb1694e09a6ada1e80ba498c9e0df7fd5beba09d libreoffice-langpack-pt-PT-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 38525511e2d9cbe1af3b0654c353a598fca47f417bba85ee3ce926a72fa4d3ee libreoffice-langpack-ro-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 209f0b4bd3f3dca4927a01fe712ed4bb9a6ffc391c9d106145f3bfaca2b1b239 libreoffice-langpack-ru-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 1f52982eda53167574b6feb5285dccb9fc02d1238dc01429b2f87c294ed01565 libreoffice-langpack-si-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm d3c2170a3524448c21b554e7ed8d2280309a610d0c5642a37b798d7c149fc22e libreoffice-langpack-sk-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 82bc7f9eb728e3c0fcf9ed139dc15632a3e2b8039838492b643bf665c762507d libreoffice-langpack-sl-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 9450c9f95ed054be6e1f534035374b7df7e895215bf6150a388f0b4109cf7b20 libreoffice-langpack-sr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm a0ec672ff22eccef2eda184bb90b2b189084086b5914db8590081f2a80cd5092 libreoffice-langpack-ss-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 914d8c0fd7905f723f4e7cc051dac53dce34ec10fbd28286d3ea159398e0df65 libreoffice-langpack-st-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 940348dfb5b151595bda3eacd1444cb21133e0a162a441f1648de44e8b056b70 libreoffice-langpack-sv-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 4936b49349d880e627d65ae8c2b7b58e3bf390b4499b64a573809159dc12e7f6 libreoffice-langpack-ta-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm fa88fa24356683bbc9437370aec573fb522b9e7ac584bd79389072a456aeb925 libreoffice-langpack-te-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 76fc57388117749982c2b5597a0aa92ac71431e2a0dc8a7f1b0af6d0345cf9d9 libreoffice-langpack-th-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 2afeeb5443243bf68f2e7b1af3dcbf84aadb73a5776d20c0efcd6201b9a3c691 libreoffice-langpack-tn-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm b65d2b09639ec592a4432727ddf53fe77c642fee15981e964819db62b0587169 libreoffice-langpack-tr-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 09bada493958b7bfd7c6d9e2158d429d09e6c6562bf6c9fe1c19baa3a9256634 libreoffice-langpack-ts-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm ab483544dc62e2fb9c292f3582b850e119dde7e0bfdb1721b088400d9d63bf91 libreoffice-langpack-uk-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 2023d64be7349e9f7056105c8c74d29aa0bd5666b0b3ad8311ecf574522db641 libreoffice-langpack-ve-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 634d7cdc74257b7f82bfc5b924b213cedf43b0b77f3beecb6cd6b1a2c7897f05 libreoffice-langpack-xh-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm cc12a7140bc752e682dc3ff0b78d3e7c3c9d45b11ffc53b5227bf551b82accf0 libreoffice-langpack-zh-Hans-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 5b8f2f0e358c2677b5d40ad5a215e41e4edab886b1bac8d7cf3835381a6ab84b libreoffice-langpack-zh-Hant-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 7fc45e1ad84f2cd84eaf22502c19aed7f4bba84998d8460d8547cbb6b0d39b3b libreoffice-langpack-zu-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 66a65c660fab1eef889410aa60b1b70938f9115b7ffef3d70d1722e9dc86c8c0 libreoffice-librelogo-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm e39b9370fe03c2413de0577731b29046ac54895342dfd92d6eef0a16112bebdb libreoffice-math-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 1e50dd99913f51361412665e4409735ea72ecf18202b4c62b74ae2d0051ce3c5 libreoffice-nlpsolver-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 69f2350f6bb443e4b45517d4eff08fe7fd7a2d2255f2cb0a285ee2d32306c67f libreoffice-officebean-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 4ae58209d7a9d4cd409400ce7996ac294b9e0015cab175c09853aff56ef3420c libreoffice-officebean-common-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm a66c24930cdf7442145201ae1b597305adaafa3c6d140716d1f6bde8755f61e9 libreoffice-ogltrans-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 1c1af93af7d64ab30b9c32cc11b3ad10102ce5753315bab73f3988640d6de767 libreoffice-opensymbol-fonts-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm 9106354708197cd5c7130ed49a5e9bf275cef4eaf221ce4509f6701b2c5d75c9 libreoffice-pdfimport-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 8da8dcccf8bb2fbcfc52585793cf4d48ed876c42f07ecdc8aec3ec1bde161aea libreoffice-postgresql-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 233d52bba64d08773ed7a9b9a07948789c79328dbb71dabd42426213c3e6440c libreoffice-pyuno-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 732bba20517467e2c39597afab3a569e9fea59216e2bc52ff83e509673af5cb6 libreoffice-sdk-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 95660e7b3895011654c6fa7394abc0cb67e63f4211a584646d310b9ef1561daa libreoffice-sdk-doc-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 04d756ceced4846b3a89627964b16e3fd8685f19c0d3c3185a166ca5481a47e4 libreoffice-ure-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 5b6c59687dd31f4b14f4cc37839bb3134666b0f37aa528d356bbb01aa38ab456 libreoffice-ure-common-7.1.8.1-8.el9_2.alma.tuxcare.els1.noarch.rpm cf446b7ab6c710246016626ff0123dd64d169c76b433d9b9cf14e3a1b9085727 libreoffice-wiki-publisher-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 48acd3e55b027f19830448ee67f8c4e4d6917f14985f8df7289df7bd473a7718 libreoffice-writer-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 2a85c29e3be3c741eb5595db1c49acb204bd5280cdcbd9e13f69282fc5e5aeee libreoffice-x11-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 795d8fd001a933bef21f6a22243cfb7d0c594d330f52727b0e8f0859ee2d5796 libreoffice-xsltfilter-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 8702875533ef631a30d35fc26829013fcaccb80b72cafc441d25c08ce30f66c8 libreofficekit-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm fb54190c7889e2d40131115d58690c783e72ddc8f1fa53f07d765ff6045ae488 libreofficekit-devel-7.1.8.1-8.el9_2.alma.tuxcare.els1.x86_64.rpm 77a0f32be631677cb10c44b0e3de63adb0d8b3c30159ac55d296ae9a59989fd1 CLSA-2025:1745052086 TuxCare License Agreement 0 - CVE-2024-55549: fix use-after-free related to excluded namespaces Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-55549: fix use-after-free related to excluded namespaces

0 tuxcare-almalinux9.2-esu libxslt-1.1.34-9.el9.tuxcare.els1.i686.rpm 3ca8a6d0f76cf5dfc7cf3bb5d575df21efa6ea7900d3ea5346b51dd371e7d71e libxslt-1.1.34-9.el9.tuxcare.els1.x86_64.rpm 0097522bcb0900b56fbaeb313f8fbeebde7938db8f3589ca72ea25f04c40e268 libxslt-devel-1.1.34-9.el9.tuxcare.els1.i686.rpm 5e7448c5411fcdcf8cfba5df1707908ac49a694045b5b9c94e48e22e47c46560 libxslt-devel-1.1.34-9.el9.tuxcare.els1.x86_64.rpm a7edcd7baa3f9a48cdeba81059892769861d06ce992e7f649fdb73552205f725 CLSA-2025:1745052473 TuxCare License Agreement 0 - Update Intel CPU microcode to 20250211 release, addresses: CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28127, CVE-2024-29214 (INTEL-SA-01139): - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Addition of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) at revision 0x3000330; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Addition of cpuid:B0674/0x32 microcode (in microcode.dat) at revision 0x12c; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Addition of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) at revision 0x1c; - Addition of cpuid:B06F6/0x07 microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:B06F7/0x07 microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x35; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x433; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x123; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06A8/0xe0 microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06E0/0x11 (ADL-N A0) microcode (in microcode.dat) at revision 0x17; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000230; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003e7 up to 0xd0003f5; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002b0 up to 0x10002c0; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x7 up to 0x9; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x433 up to 0x436; - Update of cpuid:906EA/0x22 (CFL-H/S/Xeon E U0) microcode (in microcode.dat) from revision 0xf8 up to 0xfa; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x100 up to 0x102; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x62 up to 0x63; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x1e up to 0x20; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4121 up to 0x4124; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4121 up to 0x4124; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000230 up to 0x21000291; Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update Intel CPU microcode to 20250211 release, addresses: CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28127, CVE-2024-29214 (INTEL-SA-01139): - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Addition of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) at revision 0x3000330; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Addition of cpuid:B0674/0x32 microcode (in microcode.dat) at revision 0x12c; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Addition of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) at revision 0x1c; - Addition of cpuid:B06F6/0x07 microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:B06F7/0x07 microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x35; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x433; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x123; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06A8/0xe0 microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06E0/0x11 (ADL-N A0) microcode (in microcode.dat) at revision 0x17; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000230; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003e7 up to 0xd0003f5; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002b0 up to 0x10002c0; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x7 up to 0x9; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x433 up to 0x436; - Update of cpuid:906EA/0x22 (CFL-H/S/Xeon E U0) microcode (in microcode.dat) from revision 0xf8 up to 0xfa; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x100 up to 0x102; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x62 up to 0x63; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x1e up to 0x20; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4121 up to 0x4124; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4121 up to 0x4124; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000230 up to 0x21000291;

0 tuxcare-almalinux9.2-esu microcode_ctl-20220809-2.20250211.1.el9_2.tuxcare.els1.noarch.rpm 8939d92db8b1f05e1fd7991b4e0ff0d6338869808e4e05834eaac88b102eced1 CLSA-2025:1745053071 TuxCare License Agreement 0 - CVE-2024-49761: parse XML with many digits in hex numeric character reference (&#x...) to fix ReDoS vulnerability in REXML Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-49761: parse XML with many digits in hex numeric character reference (&#x...) to fix ReDoS vulnerability in REXML

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els2.i686.rpm 02403e7670813613ae6ffccd1ca6efbd1d68851c929d2625d135a8a1bf623a26 ruby-3.0.4-160.el9_0.tuxcare.els2.x86_64.rpm 897530c69acc728649ed018fae5ab8e7ae8bd9c332de7d5149ab327872dc9e75 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els2.noarch.rpm f780c709eb6d9c991c03c530d5d176d4d0930b0d784ec998adedab618866bc04 ruby-devel-3.0.4-160.el9_0.tuxcare.els2.i686.rpm fb070eca748fe9d0a75a2f69f013c1385275d625cf020a75c3e4f7845468bebf ruby-devel-3.0.4-160.el9_0.tuxcare.els2.x86_64.rpm ebc02568aaffd22eeafa1344bd42df2694f57119df27b5f92c76eda1e36dc70b ruby-doc-3.0.4-160.el9_0.tuxcare.els2.noarch.rpm 2c5901247e9bfaa407802e03ebdf7e93917826a683bc33b617982474149d401c ruby-libs-3.0.4-160.el9_0.tuxcare.els2.i686.rpm a624933e9a24f98aaa8ab576a459fe1df2e49d45d8a08116da4d2caec447331b ruby-libs-3.0.4-160.el9_0.tuxcare.els2.x86_64.rpm 318e3faac29ad45bf5a26def78e3df1dab5dbbc4edf9bf09896643a5306c829a rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els2.i686.rpm 55fed9718ead277b09667cd41f859308b23118d2e944daa070c4e368048aada3 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els2.x86_64.rpm ad5a3bb7a11cc28e6cdf8211c477901e86057bb3faa0412b511a1cb48e79990e rubygem-bundler-2.2.33-160.el9_0.tuxcare.els2.noarch.rpm 45a33e5b91e96cd0761940fc7352b6abd190082eef76a30bc0e93b97b4f5bc80 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els2.i686.rpm 46173dcb49654b9b05c735b92da465e18102866cf6191aebaa0e03311c11aa59 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els2.x86_64.rpm c9f80890a14182cca98d46d3cf0930f7a562dd3667de18b7d3ec49b65e75df1d rubygem-irb-1.3.5-160.el9_0.tuxcare.els2.noarch.rpm aa44d894ce94e9a11a92b2d97c0e178def555d050c4f25d25577149783b23401 rubygem-json-2.5.1-160.el9_0.tuxcare.els2.i686.rpm 9f4c73dc8b0e9e233b19aabcf50043bcc18d33370da1ce8a92891f417b26b838 rubygem-json-2.5.1-160.el9_0.tuxcare.els2.x86_64.rpm 06352925bc3e3c8c04f41488fcbc44cf511669066c64b09bd1d449f456259730 rubygem-minitest-5.14.2-160.el9_0.tuxcare.els2.noarch.rpm 38baffb77258806e28f9246ba872886a6b0fd938cabc1f0f211f0264b7746b3f rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els2.noarch.rpm 93c31aa06a069911b677caf09e621578bd34a4836717ce6f3259488db98e37a5 rubygem-psych-3.3.2-160.el9_0.tuxcare.els2.i686.rpm 269bded6599a8b72a9d80f1991b039951381c418d86f92fbffd3d05f2e2b9d4e rubygem-psych-3.3.2-160.el9_0.tuxcare.els2.x86_64.rpm 82795f0f9c09271e623452a9665b12b6e073e5c3acf0de21077d03010428e8c8 rubygem-rake-13.0.3-160.el9_0.tuxcare.els2.noarch.rpm 95c2fd1006c8232a988a6901052f4dd0c9c5a5442dfe5ca90165f3c2c1e4c316 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els2.noarch.rpm 267b684c3293cc5b68cb934dd64cf1a3489092151d52da881d650d8753183c21 rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els2.noarch.rpm ec1202098b898b4a3d672a8cd99d3454d3fa1ca7dbb405e3052d665ae29ff9ac rubygem-rexml-3.2.5-160.el9_0.tuxcare.els2.noarch.rpm 5107564406c5a55f1090a9f2130e3af8fbee4ec16ef3cde20b2e78bb6433e566 rubygem-rss-0.2.9-160.el9_0.tuxcare.els2.noarch.rpm a797d8f9748f4034d3abce2f39631e2a5e91b433ca9e9618e0e97cbba83d39b5 rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els2.noarch.rpm bcece019aea34d744dafa3f932d9582f48b66f549224387dd3ccb15ec8c93723 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els2.noarch.rpm c435aca3296202c8e43edaa8a14bc6959d0cd8652661d8580574d789c5922f44 rubygems-3.2.33-160.el9_0.tuxcare.els2.noarch.rpm 05ee1808567be15349dc62eaeb3ed0fbcef4ddc333c16eb9069921c79746edc5 rubygems-devel-3.2.33-160.el9_0.tuxcare.els2.noarch.rpm 1b2f334fb15c2871ccab238423934969dabea47431a4ef0a003e789bf2fae71b CLSA-2025:1745053614 TuxCare License Agreement 0 - CVE-2022-24805: fix buffer overflow issue in handling of the INDEX of NET-SNMP-VACM- MIB that allows out-of-bounds memory access by user with read-only credentials - CVE-2022-24810: fix NULL pointer dereference caused by a user with read-write credentials using a malformed OID in a SET to the nsVacmAccessTable Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-24805: fix buffer overflow issue in handling of the INDEX of NET-SNMP-VACM- MIB that allows out-of-bounds memory access by user with read-only credentials - CVE-2022-24810: fix NULL pointer dereference caused by a user with read-write credentials using a malformed OID in a SET to the nsVacmAccessTable

0 tuxcare-almalinux9.2-esu net-snmp-5.9.1-11.el9_2.tuxcare.els1.x86_64.rpm 72ecc1ed207895f4109b113b1526b5a9f4324c9d917b91958d6b4dc0a2326f3c net-snmp-agent-libs-5.9.1-11.el9_2.tuxcare.els1.i686.rpm 0262716f8dfc63755db5259ad06929b75cb35ebbafe2bd525a32cac7654cb22d net-snmp-agent-libs-5.9.1-11.el9_2.tuxcare.els1.x86_64.rpm d9d7b94e6259d5d196742269d9a1288c23fdfeb064510691a812df1b3f2fbcfa net-snmp-devel-5.9.1-11.el9_2.tuxcare.els1.i686.rpm 018b9db8829babb2dba05f1575a85976ce025c79ace303a7f5c296dce67e56b7 net-snmp-devel-5.9.1-11.el9_2.tuxcare.els1.x86_64.rpm 44a6d65b80dbee60bcb20808dbd0e8480e7e0886e553b03fe9e9283c8de15cd3 net-snmp-gui-5.9.1-11.el9_2.tuxcare.els1.x86_64.rpm 37f00d50fb222f9d71aa3bf6912f5a112b06d8cd88bb42ef9efe2fd60cc80e51 net-snmp-libs-5.9.1-11.el9_2.tuxcare.els1.i686.rpm 189c22e84191cc1a7a4137417e69c53a29da34446e3f0e42089cacc0bc8b8414 net-snmp-libs-5.9.1-11.el9_2.tuxcare.els1.x86_64.rpm ffa91fff834853b9d3568734aee3b0cb4dfae5390311822c57188a55b44de000 net-snmp-perl-5.9.1-11.el9_2.tuxcare.els1.x86_64.rpm 17738ebdc6123b15ed8103643c45507e7fdbc67b14e8f06e3f9e3d5a3c780332 net-snmp-utils-5.9.1-11.el9_2.tuxcare.els1.x86_64.rpm 1b156ce3775a5376ccf7c94e5fdc1b8ddb781ff6952551c0efebbbd1730e206b python3-net-snmp-5.9.1-11.el9_2.tuxcare.els1.x86_64.rpm b031cf6e95f4a21e670fa52c07667eb75badb43fe632c3e15bf6b0fc86e65fbe CLSA-2025:1745269163 TuxCare License Agreement 0 - CVE-2023-50387: DNSSEC aspects of the DNS protocol allow remote attackers to cause a DDOS - CVE-2023-50868: The Closest Encloser Proof aspect of the DNS protocol allows remote attackers to cause a DDOS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-50387: DNSSEC aspects of the DNS protocol allow remote attackers to cause a DDOS - CVE-2023-50868: The Closest Encloser Proof aspect of the DNS protocol allows remote attackers to cause a DDOS

0 tuxcare-almalinux9.2-esu dnsmasq-2.85-6.el9_2.tuxcare.els2.x86_64.rpm d3c18f44470b9cc1e497e108180734a04c36cafaba9ce4e1eb7d9a142aee3728 dnsmasq-utils-2.85-6.el9_2.tuxcare.els2.x86_64.rpm f9559319987b7aae5bc53d8a51de2f65f5a0bc6f51eba995e3abbfa6be0d5404 CLSA-2025:1745269602 TuxCare License Agreement 0 - CVE-2022-33065: fix int overflow in dataend calculation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-33065: fix int overflow in dataend calculation

0 tuxcare-almalinux9.2-esu libsndfile-1.0.31-7.el9.tuxcare.els1.i686.rpm 9f59823bc4c9f8f215b8ff5f4e564f50c91fa492bbbc9a20210630d576369d04 libsndfile-1.0.31-7.el9.tuxcare.els1.x86_64.rpm 7fa20d4a738d3164968b5a616e3a8e2bc65395f74e8e6af61772953c015070b8 libsndfile-devel-1.0.31-7.el9.tuxcare.els1.i686.rpm d2f9a9bc9a0dbf3f29367afad975225d44df90ff681521a27d33693f89aa0ad1 libsndfile-devel-1.0.31-7.el9.tuxcare.els1.x86_64.rpm 69585f20275aa2c148071af1ee7a12301ea528683ff694b4e185f8ce39b4623c libsndfile-utils-1.0.31-7.el9.tuxcare.els1.x86_64.rpm 381f120910cad1b6e2cf7c58949d5a01cae1915cb39df61632470a645989af83 CLSA-2025:1745270046 TuxCare License Agreement 0 - CVE-2023-3138: prevent out-of-bounds writes in XQueryExtension responses within Display struct Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-3138: prevent out-of-bounds writes in XQueryExtension responses within Display struct

0 tuxcare-almalinux9.2-esu libX11-1.7.0-7.el9.tuxcare.els1.i686.rpm a977a527ab1e335ae45564c22c067e8e28c43be4ca0513291744a1a2be49dd77 libX11-1.7.0-7.el9.tuxcare.els1.x86_64.rpm 51dad349459e74d924d92602166efcc617b860f641da9c20e5b744a1a2a1389e libX11-common-1.7.0-7.el9.tuxcare.els1.noarch.rpm 1a5360e1e87bf1975c1f924a0ec860aa33580af774f558a4ae8d67e1d6311656 libX11-devel-1.7.0-7.el9.tuxcare.els1.i686.rpm 6e88a798a79b427f8ca70cc396c1c7c43f3351661e3d625b54efc7aba8307fce libX11-devel-1.7.0-7.el9.tuxcare.els1.x86_64.rpm b904f415bdb1d435623c01ed33b6691e966ea61f89043faea56558c0b6b97686 libX11-xcb-1.7.0-7.el9.tuxcare.els1.i686.rpm caf35c961b9b365baec447193d436b506bf31c26444aa96d62972a262cdf0c33 libX11-xcb-1.7.0-7.el9.tuxcare.els1.x86_64.rpm 3822df63d2862c0117b0ef78afeee50a07e7fe5e3f1101edb5eeb306fd7c9644 CLSA-2025:1745270484 TuxCare License Agreement 0 - CVE-2024-5564: validate route information option length Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-5564: validate route information option length

0 tuxcare-almalinux9.2-esu libndp-1.8-4.el9.tuxcare.els1.i686.rpm d3b6ff076d134c9a5f66c02fd460cce09fbea3f11d1b2bdc6c8450a686834f55 libndp-1.8-4.el9.tuxcare.els1.x86_64.rpm 5dd0728b2c4b1cb422df0d377f4e3cc09adda266a441421608d7e39405cb5da0 libndp-devel-1.8-4.el9.tuxcare.els1.x86_64.rpm 6eec37683bb1daf14fc74988b8b586e363bb09c8c741a78d203ae2d83338334c CLSA-2025:1745270908 TuxCare License Agreement 0 - CVE-2022-44638: fix out-of-bounds write in rasterize_edges_8 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-44638: fix out-of-bounds write in rasterize_edges_8

0 tuxcare-almalinux9.2-esu pixman-0.40.0-5.el9_2.tuxcare.els1.i686.rpm 9871ce663dedc207a0e3bc2e9475bfb52c3a1de7080b9e6af6a7016f6c72fd38 pixman-0.40.0-5.el9_2.tuxcare.els1.x86_64.rpm 9696b876a933d9786fc94730c466198c8e8b96b9aadbb96ce00e2eafe36756bd pixman-devel-0.40.0-5.el9_2.tuxcare.els1.i686.rpm 75c2a2b4dfa019f2bc2639a76609cd8b80e36f6b9f12a8572a193e585d94d694 pixman-devel-0.40.0-5.el9_2.tuxcare.els1.x86_64.rpm ef47269365a47f09c75235874e0208da7853244df5b2dfb5ee9f7c1bfd388b04 CLSA-2025:1745271345 TuxCare License Agreement 0 - CVE-2023-3316: avoid NULL pointer dereference in TIFFClose() when output file fails to open due to invalid path or permissions - CVE-2023-3618: handle errors from writeSelections() to prevent buffer overflow in Fax3Encode() and potential DoS - CVE-2023-3576: resolve memory leak in tiffcrop.c to prevent potential DoS via crafted TIFF file Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-3316: avoid NULL pointer dereference in TIFFClose() when output file fails to open due to invalid path or permissions - CVE-2023-3618: handle errors from writeSelections() to prevent buffer overflow in Fax3Encode() and potential DoS - CVE-2023-3576: resolve memory leak in tiffcrop.c to prevent potential DoS via crafted TIFF file

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els2.i686.rpm fedfefb5edbab010946c2b8e0d5f03344d5178a1b1393c6d286a5a86499d4607 libtiff-4.4.0-8.el9_2.tuxcare.els2.x86_64.rpm e47a09c4fce3019b5190d9e8eb9e2bf33d9a9c1c5b78dc0f403e263d615cb7dd libtiff-devel-4.4.0-8.el9_2.tuxcare.els2.i686.rpm 66136a6394627632bd1bed42fa67eb16487f85819bd706d8a28b9ebd4521b2ec libtiff-devel-4.4.0-8.el9_2.tuxcare.els2.x86_64.rpm 1fc53c85bdc925e02e1c86e9612ab4451b0a5e0e3bcd42e8d8b1354421797948 libtiff-static-4.4.0-8.el9_2.tuxcare.els2.x86_64.rpm fd367d288f6e8c49ce1c5e8d1390f436b499eb9e21f63da94342588400a766a1 libtiff-tools-4.4.0-8.el9_2.tuxcare.els2.x86_64.rpm 32657f72d486de24f116716b09e52a5aaaf9b9ee77c69d390bddd1c9119a2ee6 CLSA-2025:1745271805 TuxCare License Agreement 0 - CVE-2021-43618: fix integer overflow and buffer overflow in mpz/inp_raw.c to prevent segmentation fault on 32-bit platforms Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-43618: fix integer overflow and buffer overflow in mpz/inp_raw.c to prevent segmentation fault on 32-bit platforms

0 tuxcare-almalinux9.2-esu gmp-6.2.0-10.el9.tuxcare.els1.i686.rpm 5a68cd38732c4f32c3a4071e4e8629eefa2c8957cd809c42764f1dd2156e4c24 gmp-6.2.0-10.el9.tuxcare.els1.x86_64.rpm 007e55e527b929f3cf6ccc12fa6a43151e08e48bdb97608793985a932eb48b04 gmp-c++-6.2.0-10.el9.tuxcare.els1.i686.rpm 1e6a28f54e1065c5d2ccdc4fc0aea17040b4072739066b9ba3b80042e41faaa1 gmp-c++-6.2.0-10.el9.tuxcare.els1.x86_64.rpm 67857f70bdacb576686cd06e56d736a4f716cb499c2e66b5db9a4bdbf8bfc12c gmp-devel-6.2.0-10.el9.tuxcare.els1.i686.rpm da81f01abd6f360204b6f3e42b81c17a9b40c7d070ca28dee932222d05798ae7 gmp-devel-6.2.0-10.el9.tuxcare.els1.x86_64.rpm 5d2bc50f041bd3588e82d0681cf3c6629acf32e6a3ec6b261c911d9296c4c849 gmp-static-6.2.0-10.el9.tuxcare.els1.x86_64.rpm 41d39953ecfb7ccfb5dc1677c917d74f1d655e06b82dbeb7cc2aa2a3e166b430 CLSA-2025:1745272309 TuxCare License Agreement 0 - CVE-2024-33869: fix path traversal and command execution vulnerability in base/gpmisc.c - CVE-2024-33870: fix path traversal vulnerability to prevent unauthorized access to arbitrary files by restricting access to permitted paths Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-33869: fix path traversal and command execution vulnerability in base/gpmisc.c - CVE-2024-33870: fix path traversal vulnerability to prevent unauthorized access to arbitrary files by restricting access to permitted paths

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els3.i686.rpm c795dfbb6be35b4718e868443d275c827a506bb09bea5be5e2ac3dfc67a04fca ghostscript-9.54.0-11.el9_2.tuxcare.els3.x86_64.rpm dadf15ff1a5abb4216cd91e99f5344a1814c2756fedef4f301df06930d2d8887 ghostscript-doc-9.54.0-11.el9_2.tuxcare.els3.noarch.rpm 762652f89c9a7a1db1de6c400c0558827be8eee9d3e776d77d7557188bce6520 ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els3.x86_64.rpm d96651603051a9ca083d39b4933b6817a424a6522d7906de27a0704103eec1a9 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els3.x86_64.rpm 2f3983dd928af66ddc21966e3dea7e7c879791a308226e3c5dac3918b21187fd ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els3.i686.rpm 480befab5ced6cc87e4c6dd639a28d533bb28310a1ef05de8fcbff322f4c5124 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els3.x86_64.rpm d3627f54800cf68282e9a6bda1406a3c9827c59412481155e2a4cd4eaf880e71 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els3.i686.rpm f46614909b37058ad0f71c70e84a8f9c90510f2224f62fba74c10cc4e40c09d2 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els3.x86_64.rpm 2aca3dfe49a5a3778e8613b95e14a2e5f676a86a92ae6b578f84c48eb5d25125 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els3.x86_64.rpm d30d867ebfc759629fda2c19bcd07542b8db7271b552850581d6d44d1fa1a8b2 libgs-9.54.0-11.el9_2.tuxcare.els3.i686.rpm b3e88d4e8d0b38d94f2f6b82306bd616ecda81f816258ffb2005c6f870649c84 libgs-9.54.0-11.el9_2.tuxcare.els3.x86_64.rpm 204cd6363679119eb7875083277bd67ed901b95568aca6ce9efb842ec4acad40 libgs-devel-9.54.0-11.el9_2.tuxcare.els3.i686.rpm 134ac85ddec67d5db974bc0bc25af0e60221723b9990d2df4f9a9e532dc6d8d8 libgs-devel-9.54.0-11.el9_2.tuxcare.els3.x86_64.rpm 23e75c49f965bd6b12c77c11131979f33a9cf4f5afb452f15489a75ce8ebfa72 CLSA-2025:1745426658 TuxCare License Agreement 0 - CVE-2024-9675: fix incorrect handling of paths in cache mounts that allows mounting of arbitrary directories in a container Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9675: fix incorrect handling of paths in cache mounts that allows mounting of arbitrary directories in a container

0 tuxcare-almalinux9.2-esu buildah-1.29.1-2.el9_2.tuxcare.els1.x86_64.rpm b4150f0a67d47aa3448b133cdbbd294bd58bb0e993162c9eb57828b6d9ae9e16 buildah-tests-1.29.1-2.el9_2.tuxcare.els1.x86_64.rpm d8d2c882896601eb24e90717420e382d7a93e43bb0c5add0eb097d941fa15289 CLSA-2025:1745427138 TuxCare License Agreement 0 - CVE-2021-32142: fix buffer overflow vulnerability in LibRaw_buffer_datastream::gets(char*, int) in libraw_datastream.cpp Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-32142: fix buffer overflow vulnerability in LibRaw_buffer_datastream::gets(char*, int) in libraw_datastream.cpp

0 tuxcare-almalinux9.2-esu LibRaw-0.20.2-5.el9_2.tuxcare.els1.i686.rpm 58323698d34cdc49bcee355dfbe34b3d888aadc9df57e389e359ddc4ad884442 LibRaw-0.20.2-5.el9_2.tuxcare.els1.x86_64.rpm 86ffb051f56ae5fcbb364be400bfbf05221484efdf0c390fee5ee0e002a7a02c LibRaw-devel-0.20.2-5.el9_2.tuxcare.els1.i686.rpm 3b378e7eb6ac054464b23ba7937a4e61526b7a1d84a020f85b76dce7bb5d79c8 LibRaw-devel-0.20.2-5.el9_2.tuxcare.els1.x86_64.rpm 1bc2aee5bbcc2870520a0a79beddab969fe9a1a30ead08ace3005b2e341aabbb LibRaw-samples-0.20.2-5.el9_2.tuxcare.els1.x86_64.rpm e8c11038b224c31fe36073b2900ef4be8877e4af5cb117db8f90c7443fcbfad4 LibRaw-static-0.20.2-5.el9_2.tuxcare.els1.x86_64.rpm 313fb08d3fb2731326c82b4beaa3a71bde658b29879218c57ecce9e606883d60 CLSA-2025:1745427668 TuxCare License Agreement 0 - CVE-2023-26768: fix buffer overflow that allows a remote attacker to cause a denial of service Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-26768: fix buffer overflow that allows a remote attacker to cause a denial of service

0 tuxcare-almalinux9.2-esu liblouis-3.16.1-4.el9_2.tuxcare.els1.i686.rpm 75861d7a808eaf21b97865756dab6a7dc1ed2decc7823e75fa9ebfd6a2f77178 liblouis-3.16.1-4.el9_2.tuxcare.els1.x86_64.rpm b3698c74f0d56ef0ffabf5fee8f65d0fecc1f334f82587ee62452b08f8ec98da liblouis-devel-3.16.1-4.el9_2.tuxcare.els1.x86_64.rpm 7d0eaa9a887f77115bafbb617db4ace994bff1b7fc07629aabf720ffad83cb9e liblouis-doc-3.16.1-4.el9_2.tuxcare.els1.noarch.rpm 944a57cfd50af93991cdcc5d3d860334d69b99e7e08fd8bb6758bd178c9a3f87 liblouis-utils-3.16.1-4.el9_2.tuxcare.els1.x86_64.rpm c2ee6e91670f14809568c5f6d91032da0781e5d7c6f9f32ede79f766d14f8610 python3-louis-3.16.1-4.el9_2.tuxcare.els1.noarch.rpm 7dc4b8fe2dde7f19d9d95db550f8b1001eef36725e021daf448ecb331171c945 CLSA-2025:1745529850 TuxCare License Agreement 0 - CVE-2023-43786: fix stack exhaustion from infinite recursion in PutSubImage() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-43786: fix stack exhaustion from infinite recursion in PutSubImage()

0 tuxcare-almalinux9.2-esu libX11-1.7.0-7.el9_2.tuxcare.els3.i686.rpm dcc9a0ffd9ee1a4303d91163bd93b1dd148d0653c7a360e628df1f21dda32fbf libX11-1.7.0-7.el9_2.tuxcare.els3.x86_64.rpm 48b65296fca3e5a19e365f3186d1939a4c6e42ee75ad038f41568c80065431c4 libX11-common-1.7.0-7.el9_2.tuxcare.els3.noarch.rpm 66a780d52f03b7f84cc536c7993f4f50458c137e7b7b5ee3b55bf6644065c212 libX11-devel-1.7.0-7.el9_2.tuxcare.els3.i686.rpm 967f535a22bfb0e42ce9f8a8c1de483e0a53dc0b54557c23b382a966974a5038 libX11-devel-1.7.0-7.el9_2.tuxcare.els3.x86_64.rpm d97248d7c1848685c4b8d83a98e65c7b519198e33608eed07865e72739bb31b7 libX11-xcb-1.7.0-7.el9_2.tuxcare.els3.i686.rpm 9ee3dd53273be9daf7dacc0259cb423d87d5aba4b2aa0aed449588d5e927528c libX11-xcb-1.7.0-7.el9_2.tuxcare.els3.x86_64.rpm e19f953aa383417d284b33a5b80497317cb43f2d11a1f880e3be0c9dffac359a CLSA-2025:1745530363 TuxCare License Agreement 0 - CVE-2024-8176: fix stack overflow vulnerability in the libexpat library due to the way it handles recursive entity expansion in XML documents Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-8176: fix stack overflow vulnerability in the libexpat library due to the way it handles recursive entity expansion in XML documents

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els5.i686.rpm 3e289f55eec726a881aaa2f4e4f0b4756c7c3c9caa4d9f7b78c604c474c97cb5 expat-2.5.0-1.el9.tuxcare.els5.x86_64.rpm 889f9eda2ffe4d39bff2446af61c43caf28d348bd2a486333610df84441b2a34 expat-devel-2.5.0-1.el9.tuxcare.els5.i686.rpm 2b2aa36e06d27a1bec261a6d424e82d893a56a591be1d0d73087faefd030208f expat-devel-2.5.0-1.el9.tuxcare.els5.x86_64.rpm 60ef57a7c794025f2f54bd2803ef8cb3cc4612480aaaf1d19c8ffeaaccac5459 expat-static-2.5.0-1.el9.tuxcare.els5.x86_64.rpm 83977bfcd7cabd21862797a0e8808c201facb03a0334810a486a43d4949a55ad CLSA-2025:1745530844 TuxCare License Agreement 0 - CVE-2024-52530: prevent HTTP request smuggling by properly handling '0' characters at the end of header names Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52530: prevent HTTP request smuggling by properly handling '0' characters at the end of header names

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els1.i686.rpm c1971b5bc2670830caa234f3c072720ea18571f71c61fb878c7048c888a572bc libsoup-2.72.0-8.el9_2.tuxcare.els1.x86_64.rpm a9ab265bff0026c3acf8f87535262aa91d9e7034e4685aad98c4872ba3b77af4 libsoup-devel-2.72.0-8.el9_2.tuxcare.els1.i686.rpm db353cc91cdfccb756e81e47c24db62859a1f73aa45730ee356fbbc20949a670 libsoup-devel-2.72.0-8.el9_2.tuxcare.els1.x86_64.rpm a36709f921a1ba511a72bf55f6be2defc9f7dc9af21971863b1d8f2ff1aacf9b libsoup-doc-2.72.0-8.el9_2.tuxcare.els1.noarch.rpm 16e839116756959d0cf57ef5f1cfd9e54d5d535c2644f4da4543989fcbad5ba8 CLSA-2025:1745531344 TuxCare License Agreement 0 - CVE-2023-40745: prevent integer overflow on hostile images to avoid heap-based buffer overflow and potential code execution - CVE-2023-41175: address integer overflows and bypass in raw2tiff.c to prevent heap-based buffer overflow and potential code execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-40745: prevent integer overflow on hostile images to avoid heap-based buffer overflow and potential code execution - CVE-2023-41175: address integer overflows and bypass in raw2tiff.c to prevent heap-based buffer overflow and potential code execution

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els4.i686.rpm 85de303cee85ab641d351cd3019b95230a093540351b39468aa9684c51d56ce1 libtiff-4.4.0-8.el9_2.tuxcare.els4.x86_64.rpm a10904febf9e540be3536f3c9f1fbdd99d769f4040afd7213909ad66e8a3f6a0 libtiff-devel-4.4.0-8.el9_2.tuxcare.els4.i686.rpm 8c67f00b1f4e0a212af9c0aa485f50206e03d1720b31d758ad6772d06e78b67e libtiff-devel-4.4.0-8.el9_2.tuxcare.els4.x86_64.rpm be040e2aeac1fb4fdc398788ae922c6f78c38c7e38e86d305a1296636042d0da libtiff-static-4.4.0-8.el9_2.tuxcare.els4.x86_64.rpm 6c6bd970b60b796d2102199ce873dc6958aa406f27a43d63c612248a799be102 libtiff-tools-4.4.0-8.el9_2.tuxcare.els4.x86_64.rpm f6cd83c09139a63a9d931c5954f6ae951e60245994bae2001f8d0a45303e2522 CLSA-2025:1745585424 TuxCare License Agreement 0 - CVE-2024-50379: fix inconsistent resource metadata with current GET and PUT/DELETE Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-50379: fix inconsistent resource metadata with current GET and PUT/DELETE

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els11.noarch.rpm e3a9c7d0a9dbb261b4b4f5a40b01c211762dd8fb16ea054505a9a10bd52c6478 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els11.noarch.rpm 69835e0c8353b53421ab1dc192ff5093e60054e9ac7e14059b91e389879cb076 tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els11.noarch.rpm 66147f6b848160cfb9b426ffb2c03ede3d83a91d622ed393aed441bec471574e tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els11.noarch.rpm 9e392101d504713e249454ccec218f8a2133c0567721d78b5599d9bae71e82c6 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els11.noarch.rpm 706865d0392c50931bb1e2c1fdb64f6b817e033a42afed3e13f7dea089fea65c tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els11.noarch.rpm 65b1736153f10f7053d11c883b2ae8251ecdff43360857ddbc936633988edf2c tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els11.noarch.rpm 97fcc963a833b79b88c4f3c13f62489d683b7c0f377ca2b3a47ab4c92c7dfde9 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els11.noarch.rpm 0ee51c68301daae7234d0090606b34059fec36a74e38c12ed5fc75667bbb7bea CLSA-2025:1745586793 TuxCare License Agreement 0 - CVE-2024-47076: cfGetPrinterAttributes5() Validate response attributes before return Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47076: cfGetPrinterAttributes5() Validate response attributes before return

0 tuxcare-almalinux9.2-esu cups-filters-1.28.7-11.el9_2.1.tuxcare.els2.x86_64.rpm 312e4f286e41a0d0d91980d21205abb7469e666a9b298d9f81b357126ff414d0 cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els2.i686.rpm 389c527f194b1fe50711ec9e3b5ee3c542607322966fbfe25fd8a533e3e18b4f cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els2.x86_64.rpm a95ad824a7495cddc680c5b29a227b1b3d43dfa59819fd0a68cfa9050279e085 cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els2.i686.rpm 9cee1dd41956ed9bafdcd31faa23e66227a4896fbbfc070124f488b9d3caf044 cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els2.x86_64.rpm 6b227f21b11db27863a9c6d736b1a5a80e58a8280e35a6dacdbe6491fbe42c20 CLSA-2025:1745587914 TuxCare License Agreement 0 - CVE-2025-24855: fix use-after-free of XPath context node Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24855: fix use-after-free of XPath context node

0 tuxcare-almalinux9.2-esu libxslt-1.1.34-9.el9.tuxcare.els2.i686.rpm a4febbc4871c87f0e6f03510a05f92bab5dc51b0880a97a663cac9e896ab68eb libxslt-1.1.34-9.el9.tuxcare.els2.x86_64.rpm bd4296cfa62f7694d47eadb5396bd03ff256cb21b1478ccb18d28103936c2457 libxslt-devel-1.1.34-9.el9.tuxcare.els2.i686.rpm dccf6992ed6f72afca8f4e17c8a18e1067eef47db8578f0e1da9f47f9e6e24c8 libxslt-devel-1.1.34-9.el9.tuxcare.els2.x86_64.rpm cde118ac5572f9321688625cc90ed5472ac269222ec134e62c4007bb364f7e05 CLSA-2025:1745588411 TuxCare License Agreement 0 - CVE-2023-43785: fix out-of-bounds memory access in _XkbReadKeySyms() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-43785: fix out-of-bounds memory access in _XkbReadKeySyms()

0 tuxcare-almalinux9.2-esu libX11-1.7.0-7.el9_2.tuxcare.els4.i686.rpm 4b82de9ab9ed0c84a4574a0928eecd8cfa0e42d22f3b4a7708b7cc1eafc9b840 libX11-1.7.0-7.el9_2.tuxcare.els4.x86_64.rpm ed89e55bc5f72b948e9bacc49fa3012d8c8965281230ba2c374e6e728a8a26bc libX11-common-1.7.0-7.el9_2.tuxcare.els4.noarch.rpm 6a5b4c6b5762079073c8b1cd30e29db2a824ccd401f7a07d4071e45936f224f4 libX11-devel-1.7.0-7.el9_2.tuxcare.els4.i686.rpm 3727db96ff28cdf05a1c759ddd83547102897009b55d6ba825ca0b597f1d3c8e libX11-devel-1.7.0-7.el9_2.tuxcare.els4.x86_64.rpm db4be4d0e9c34e80cfd83a971b40ff7adfdaae925f7998027c5803d5f9eb9b88 libX11-xcb-1.7.0-7.el9_2.tuxcare.els4.i686.rpm 9ed7b68a0b54e6a76d40504eefa8dab192397a0124d913cb18973e676d174705 libX11-xcb-1.7.0-7.el9_2.tuxcare.els4.x86_64.rpm 171722e98fae27e11b1695266944aded1d739d78c05825e5100da7a86ae02c44 CLSA-2025:1745596088 TuxCare License Agreement 0 - CVE-2023-6186: validate macro permissions to prevent execution without warning Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6186: validate macro permissions to prevent execution without warning

0 tuxcare-almalinux9.2-esu autocorr-af-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm b0227f24ac1e18b41378d13f0eccdf8f23e9057d25682e7d6a313db230d7969d autocorr-bg-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 5dea1f18fe9ce9acc8a06984b503d00185023519e45167cf9c9503af3ab8832e autocorr-ca-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 8960da568ed960cda21612dc8480392fd09facf10b80143fb7f63e7f73d4ea57 autocorr-cs-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 0da0adefb73f8511e2f1d2a65607be173f4b59af53b7aa681be3ce736d4fc177 autocorr-da-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm d73ee5df26b565749e078a0267fd743930ce7e24a75fea2a5efc573a5db6582a autocorr-de-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 8259a943afd96ddaa48026f43881b24ec5e115ca625fcb5a3dc8d77149484408 autocorr-dsb-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm fcc18243075fb15ae30b1deb4fada82a26fcd91cafa363f2d0585ed7beec5061 autocorr-el-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 452340662e61f9e08e5bab8c6cc13156a9febb0cf5382c68f5bad68ddf4e11a5 autocorr-en-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm c4ad53042f29a28754cd2d7ad6037f21c05a04f6be418174353940f77107d01a autocorr-es-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm d312cc48325d7a6c2d8529dc49df16df7c2fabf433107f977875164e083fad8d autocorr-fa-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 8814dd99883157da9c07e6ab5c3775a5844ebef22061f1c7058598be7de625c4 autocorr-fi-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 4b373795d893c2dfce88c7aeafe01397d38b8c453f36999f5a3dc88761f968c3 autocorr-fr-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm f6669d9ca718f7d18eb0b6beb97ccf74adc86eeb0e19f3629ff8c5ee3bc7c03c autocorr-ga-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 35a3566f65f2f290d8dcc0a27a4902406da38f5af94a74cdf25671774a83b595 autocorr-hr-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 56749e1c18257a81e501e251ea3c98820a13a5bc3e76924e0d7cd25404be0adc autocorr-hsb-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm fa12ada18a9c9a501523a0ebd63f0dfd26d020b6a9ce2df6272142b27364dd79 autocorr-hu-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 6975b188704f315ad4f0f3b478070e2c9bce463bc573c947cc7e6c8730ee5a66 autocorr-is-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm c66ba65fa17b13e126376572d8115d55efcb17f71f70e6964dfeec53011cc5fd autocorr-it-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm ef21fe9446d75900dbcc24bf2a502763c23441726f48df5015d568bf7dd7abac autocorr-ja-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 75a34f541ca6d1a118508feb68b1e4a03806379207dc3e2099a38a97a7cb156c autocorr-ko-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm d0dd85b46d6f937bd55c8a5d3c71b13b58ea95b02c84a2ab89e363bfa9a1c5d7 autocorr-lb-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm b39debc9466b4141ce60d0d3a12a593c8199be0b72bdcffa0752f915066b6431 autocorr-lt-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 644677186ceb28c81b7f47c2dd1220fb4b6b22102624b7ea473bb98a3453170a autocorr-mn-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm a4e7d6c0df396a44bc0639b7cf7a5e9fbb56799870d5a25c027b9fb0f1fc7c0e autocorr-nl-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm b5553d8565bcfcf8c428b3a4c51efa9a923892f56e6ccbc4ab76f864c06d7dfb autocorr-pl-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 29d4bc59f70d1a5b186d4a8abe112a6df6e4444b1651f2d87fea3f2659e4e0af autocorr-pt-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 5993ed04408ba6c166ec021e803c55d5a9f326b5123af107da8aa0697ebdd73e autocorr-ro-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm c80cda77b83ca4a4af1685e7ec724bc9f8b11e795c8029f6d3c8a45bd890f653 autocorr-ru-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 31078d5e6efc843af0de90dd3a7b0b9e51ae55db15ae7faebb2bfb1578cb9ea3 autocorr-sk-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 63741163fc8de59b139b22bab7c2a699bd382dc5bd86368e31df34392ac89fb2 autocorr-sl-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 62ebed1cbd5c879eda40533def63473a6aa256c785660cf50873bd3fbcb1b968 autocorr-sr-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 1193f1ee6425ff1adf7f9db7e294a984050deb1d7156f328b64112f2c14b9720 autocorr-sv-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 5571b9e2c0eb7936270dd914d03f65f368012512ecf36e5ef569d9857cdd7c44 autocorr-tr-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 1865bbb73e7d0e1b1c1f29bf145ca857c7ab9bfd6918e63aa2f19eb8a495c1dc autocorr-vi-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 7b2784779f4e7942a6bacdd8b3742492fefe8f8bc217188b56007bc22413144a autocorr-vro-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm dd0f6a730ecb3bdefbbec224c0bb0868c0c7a1a04bed5683f39cad1742ce213e autocorr-zh-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 11d2c3391b9d0feee996fe55ddb486ac87f2a424bcc855ff4d6a229213dc567f libreoffice-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 40f1320860dd6d549b5e8fdbc3c07e5502cb900aecef8cc664d4cc32f8843c71 libreoffice-base-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ac88b3be9960b3ad1fdba66a82815a39aa22a12cdfcc82a00c5dfa7149370af7 libreoffice-calc-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 0d4a50538b0eb4cd05b7232a7b7c79eab823ec94a12523a5a157625b52f533de libreoffice-core-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 152882a15b61dbc3b8631efe0ca525aaa8e029d7576c3d790ca928964e565cc9 libreoffice-data-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 6bf35e04408c9791a61b471ba6edce2087ef3ee601bdfe3d350afa43b4098311 libreoffice-draw-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 2e0016029551ef9618d24b61965193d7793817fd3865b60972ecebf32cf1aa54 libreoffice-emailmerge-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 5c1a82d6887c81a443a9d285b43376f03f08d7c6ff311e5d0f9a23523f329965 libreoffice-filters-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm bdda8177434122cd8fad2fc3e8f1fd5a6405c31fcc0caf19c92957af67e91571 libreoffice-gdb-debug-support-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm c100c98f16ed7e867b176905cf63a96808e124d9c1fbf76f9e017fa386f8e651 libreoffice-glade-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 620a7407b048d31f6c3702ceb905e9ae7a94273c25d0b37a50debffb404bd14b libreoffice-graphicfilter-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 053cbe831e618679e2c1758d8786a71ff2ad860707e3ec5b126b5eca35b79ce9 libreoffice-gtk3-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm e67b041eff32ff8d65cf803acb1c04b5b024bd9b0b21b520dde42b08133867e3 libreoffice-help-ar-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 856954a340a3e4aa6c740a90bf51cfdd7d1e75885459bf3c9e052889da8e9c0e libreoffice-help-bg-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 193cc6bd8b9ae095feb79b2f849bb1389fca3b5d7b47ff8100ce2cce80223e31 libreoffice-help-bn-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm a32421842a1a3bb14a2614fe126913a6e1356182361ffd7871b4dd3617ed751c libreoffice-help-ca-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b4cf240647cba0c574075d4ae9a9e69e1f56a250745cd843756f533b5af36773 libreoffice-help-cs-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 50bfffc3a58a699becfac289c780253b12606b4e05a76b78dd476161f288706a libreoffice-help-da-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 8ade653d52700b9e28fb27d663c709b1a18e55b8fb49758b1fd12b84521952c7 libreoffice-help-de-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 8603cdf7785359ec2c3d0f23abb67b13dca88309eda86b008f0fa73eb2005da7 libreoffice-help-dz-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b942d40532c6eaac7ac596a0ac1c1efc0272dcefb09450ed6af99a2527aeef1a libreoffice-help-el-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ffee0ee075b86c1b8491ef863bb2a7cc736c4c2da46d4eb802e8cfc662e4a320 libreoffice-help-en-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 7500fefdb9d89b009b75a57c1b86c741e580988c652283c42509dade60a7efbd libreoffice-help-eo-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 6de29ed1c8496cd60434c5c0a01ab55243812f067ec87956f2ec63b414fb7942 libreoffice-help-es-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 21b8e216228841582cc6049dc1288d8ffbaa635437361401f731f6e951e94015 libreoffice-help-et-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 1b3b36d06bb26f08c606334c5ef6ebcf3549b45b2c7ab0d7e90e59d93dc86431 libreoffice-help-eu-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 2391d281390a2c06ea89f7c70250949256c84822af07e09a5ac3755c3d77b019 libreoffice-help-fi-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 1779e37cb8445e6f86735e94604d481122acdec5348105e02f02ef84975cd1c1 libreoffice-help-fr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 1b8d3ebdc02a49d294484f1d56fa6f345c31ec8fadb32cb2fdbd15651af3d083 libreoffice-help-gl-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm a9bd59e06e384e67ff63cbe30372eaeab32122dc1a5703934592193fd9e00f89 libreoffice-help-gu-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm f77470644b1bae4570fa0f92abad8bb3a3ddafaca24dd9d50684eba40bdb6168 libreoffice-help-he-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 2b4039a95a60cab9d221ea89935372f496cf94ba42d881e97fc71a6109f8da84 libreoffice-help-hi-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm fda06e2d871d5b2c973c435ae36bdeaf205318b9b09783f41e1313f1c3d0d0ed libreoffice-help-hr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 80f490ea152209026ede6bdbe5c8374d254065f889335b0ea20757c058f5f432 libreoffice-help-hu-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ba8aeaddd836b28c3fdce4eb5afb17dc8a78b46d087e9a1869cf53fdec7dac92 libreoffice-help-id-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 310de696ed8d301f8c303fd0fa9c82a94e1cb505482d3125f58f8086cf79ce39 libreoffice-help-it-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b75d40d3bdafca6e45bc9ce1bcebda5815ed120112dc8697a816700685c15211 libreoffice-help-ja-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 31c3176f7b635cf2b0bbe74be2eaddba1070d483a599e5e2989e6fc620f80655 libreoffice-help-ko-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 4a493588f44dee53e1ed46d7c0f71289b3522648a2346a44406e74ceb2546fc3 libreoffice-help-lt-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 7e7fc8a98f84f3318721758856b81b60653b81a9cabf5663e8f05beca123b751 libreoffice-help-lv-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ea9626e4408da4a6b01bebb678ef5b69624a2a2eb165b4744c78ced50a146779 libreoffice-help-nb-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 5fc3dc1a29088ab125e28d85b6e3bba5d8ba30b553bff7d0ea3083a03bf5ce3b libreoffice-help-nl-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm bb8b5a0d459b89765845c24482950820abaa69529b038a84f8c267734aee573f libreoffice-help-nn-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 5642a310d2eaa19349f81826bad7a90145970da5718a3e067df1026ce8c30281 libreoffice-help-pl-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 7b91f6e026d2e9ca586a91a1bdae6b6659c0cfd296aa72018620b8c530724d17 libreoffice-help-pt-BR-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 54250374316b73c9ddf46fb01781163deed0d1e36ae562d24cbe9c7f77ddf20f libreoffice-help-pt-PT-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm bd2cbc41e17c19d113ba146ce16322e4f80d2704d115d299beaed8cc43233f5c libreoffice-help-ro-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 01bbed23ded4a071851afea7597464fc0359c19f6d26114eb3be68d24059256a libreoffice-help-ru-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 39ec6aa9754c0f510c01ac352cb4e063acf23c87d199aaf2883308bdc4d31a63 libreoffice-help-si-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 141e4ffd2ddaa2b8ca90b531b191ebcc988fcf114b00b1d854173a4cf5d5f7ab libreoffice-help-sk-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 1cccfb2e574550ce434f1264293c0caa049ec1dfa39bf870154ddc88d4da2202 libreoffice-help-sl-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 7d8b9e2381e322da40a78f3701b83b86f8f24fd05c71dcebb6a56424d1086da5 libreoffice-help-sv-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 0be8e47662fe92d5f029342e3e9f0d8245c87ac7e4a0e54212dde6b4cddab003 libreoffice-help-ta-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm a9059a7d93f45fd6ba99e7d0647b3b7006a8a916611105509f4736b5091eba21 libreoffice-help-tr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ddaeabc8547fa231a6e807ad32e0398c90d4f3dc9c1d67db3ac544188f836c14 libreoffice-help-uk-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 01fde1afc3d353a7fe825b2e36645882ad27416b062496f1b4e0835a1e929b3c libreoffice-help-zh-Hans-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 4591804946302db089c4ed43dafcb26cefca83a44fc8398d758019f71378e8aa libreoffice-help-zh-Hant-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm a961a065bd89e3e93627de6cdc667d5947b42c4f74f1007cfbc67304cd6ca0a6 libreoffice-impress-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 5fd38b2fe2bafa80a3481ac7cea4bb5628d2e5c85984cd9a944591f3bc66a226 libreoffice-langpack-af-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 29fdb258e5b10c572a758da430e120bb15a2c0eb98c305ac1b3215062bafa552 libreoffice-langpack-ar-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 71204adb2fb1ac7cf206d7dfe61f4e0d2243fe402b9811a139d26c2f3be71500 libreoffice-langpack-as-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 24d18e101885e8cc325de6b835ef262989064a68681d231333a7c5b3ed34a4b9 libreoffice-langpack-bg-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 2acffc633fbec2b844651ab40e26d30a360b110cfabce72709344d80e16f0b56 libreoffice-langpack-bn-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm e4deae9b236435ee454ebfe80ee1d61cb925f9381d2ad0b2f9c15d750ca94f53 libreoffice-langpack-br-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 7ded261c9e9097b5f9a7abb5d601e7d84f7db72145f44a7d52e762726114335a libreoffice-langpack-ca-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 129ba31f55ca7ecab5b391eeaa97c73deaaec5871c2edcdb39e1bdc9773a072d libreoffice-langpack-cs-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 6d3ee099c2ed3e2ae03a46ce463ad0fab8fa00847ad2e0f07a41e94968f85b6a libreoffice-langpack-cy-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm fb1ad0535ccda00b982d41bf24253fffabbe3abf49e206221f0aac622464e374 libreoffice-langpack-da-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 49d58c8879d1d8cf5b3ada14d373c31dbadb971c2791b0ffd3c5dde020ab1cee libreoffice-langpack-de-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ddca7d78fb0c8f799f3e5080346b78ad34ce138eb50fc567d5fbfc850d758c54 libreoffice-langpack-dz-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 5ea2f917a63e215d6f0cd3c4e4008fb4f2dadc1ba337c95350a8b484ca5b09b6 libreoffice-langpack-el-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 4ad5eecc552f7343003ba3273daf2c40cfaf24b84cd64cd3051c8fbb402683ed libreoffice-langpack-en-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 82a81071f367b441877e039421110b409e1919821fa68b4661291cd1dd3d2855 libreoffice-langpack-eo-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b2cf60e20fcd27dec936886b02c57dbc4070ba9f3e5bbfe790d6a318c3f4a298 libreoffice-langpack-es-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 6b083762baedf35db9594c4b609f40605ae0698a40c21970088bbb7216a5f2f9 libreoffice-langpack-et-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm bc0ad2515f91b10b90ac59c50994d7a9ec718a3092ee005687c19b41460b792a libreoffice-langpack-eu-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm d2763a107c4d7d7baaaa06b22d34b2e1cd2b23beb71faa8bcc3fd5ef04bb516e libreoffice-langpack-fa-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm c2d640ea32bb3be0f06a67117734795cee915c7111559dc015cd14f07dde728c libreoffice-langpack-fi-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm a83746937acda7e7fab5d8e79888003d1d23a3bf6f5826312c2729c1d12fb9e5 libreoffice-langpack-fr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 6250d4360b67205f2c2dec1ae933c3cacb18248c3ea9359d85e13e6e4fbecb2f libreoffice-langpack-fy-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 3473d3d9b4cdbd399c3cfeb4b17024f8fa3f7480d6cf1aaa002be923b3b7b3fb libreoffice-langpack-ga-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 6c239e8a546e61f4371ca971825d345345208e7b3bb1db990ed2cbb82637d53d libreoffice-langpack-gl-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 8e2de5489a44c478ac7e885630243e2402f4aa0d0a43903c052d7d101a4d078c libreoffice-langpack-gu-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 2a20afe484139416bb37dba543eda7eaa12e35986820fd5706a6ba3ca1d673c3 libreoffice-langpack-he-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm c5ab9364cfef8706bcc666ca45701e279befd97495e0c2d2f203ae59371f55d8 libreoffice-langpack-hi-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ac6055e7d37c995c177c2290ba8b1b486383b77bc2ca239e8e6410c210bc9cf3 libreoffice-langpack-hr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 43c64b7d18615d6cf1f62758543af66627fc82b3ae193e8218325296b671067b libreoffice-langpack-hu-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm a91759e5c654caacfc148b404a46cc6f0f5f6a1e359f8a5bbc1a97bcebae76d6 libreoffice-langpack-id-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm dfaf1212257ed293185c8ef1c9d42be89d1b9d20d1307f8887c6d454890b31fd libreoffice-langpack-it-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm f49c237c51affb594ba5e292e7d7e30491743c9f1e8fad0cbfe515efaac54e4f libreoffice-langpack-ja-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 350f8efc84f41ae67daa59a5d37a9d70b05f937d3adf2773e17504b1781ca6b4 libreoffice-langpack-kk-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 294ccbb0441a6fe78617d303ad38e40f277c292f0f469175ed738e1332176ee3 libreoffice-langpack-kn-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm db9576a89b144725101917195ad035af18c99be1b4581547fbd4a1514c55b48f libreoffice-langpack-ko-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b0390f77f62ff5b85f916c7716eaef17dc5c5867cc4b3a371e1f0bb460653df8 libreoffice-langpack-lt-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm f8c0955cec9d1cb577985d7b3c12b8a6eb9948131c128f9987dac02bd3e3a8ea libreoffice-langpack-lv-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 0427d603ebc04ee2ea25806880cf17ba1e187092fc1a364b9fba86107d22a51f libreoffice-langpack-mai-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 562c7c9f8beffaa0800490f897ca64692c52e82bbc0f39498868cfb3fc1a1d9f libreoffice-langpack-ml-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 1f2fba40a23359fe3ef0081a1435ddba4e039eb3018588aadd485e210c9624b5 libreoffice-langpack-mr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 54bbc4612603a9ef38263f797164ff125b752c0ebe232a4aa11f96e62ba14b79 libreoffice-langpack-nb-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm a45307d9f8e2e52d624208206c0e4b02decf857f34303e1f5763fad76198604e libreoffice-langpack-nl-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 3ddb26eca0bacfc312a9bc269f001b5ee92af5f96709fb1525617e793a182eef libreoffice-langpack-nn-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 84731d3de0df03453fc3055809072cc5d4824e9b74ce8779e80de2c716943230 libreoffice-langpack-nr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 0fac355e30fcdc599bfdaf8b15935192c9b30a3c6d8e73766dd174515b06e2ca libreoffice-langpack-nso-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b3c460b9196f35dafcd8ff7342c9bbb0b8cfe1338f96f52c2588f10827af42c4 libreoffice-langpack-or-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm dc48aabcda7c6d330ff169f47212b48a4665888d4ea22279df7ecc6a24c8994c libreoffice-langpack-pa-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 0b38262ed7f4e98ccde1275d4206f013393add2b7156541f0c9aeb5ca2ee4830 libreoffice-langpack-pl-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 698d98aa09c1fbea357c9d675db1fb7b12135e936c480ff5f6f1345e3d773fa7 libreoffice-langpack-pt-BR-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 85e6499e5e096ddb28d5dbff27b1a6013e4421bec17053993ec76bd7304d3279 libreoffice-langpack-pt-PT-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ba410bd0be207c8017b659be134f6c59031b9522dc82da3f6d7321b6d57916f3 libreoffice-langpack-ro-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 1f604f2b586eff03507ad34c2044af3ce55cd47644c95cd43bc4dd256e67a885 libreoffice-langpack-ru-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 6a6950708f94768093776ec9a69e4c8756537bd3021ca036548edb286df196ab libreoffice-langpack-si-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 4407ed50a198cc96bca173142e5b66738066f87ec219e29dcaff051fa6533187 libreoffice-langpack-sk-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 7da911d0d9fd0e3480c6bf2f671ccb006f98da21e8d70a53006864cc52200f90 libreoffice-langpack-sl-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 115ac76e924dc9561155d7e63dd7fdef99e577406ecc9580d7ed63c190dbfd5f libreoffice-langpack-sr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 5d3558a8bfc4bb648966b1f8fc170cc05818d80edc57e84f32d8c01b8c792ca8 libreoffice-langpack-ss-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 4c642c2916790864c43c22ae51dd5dc52ca88cff3504bb20d1d609a14f815999 libreoffice-langpack-st-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 7e801cdc23e1f168641155bdc8295bc1208b47edb1408c28a521385764948d74 libreoffice-langpack-sv-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm cd2e7e98c82b9eb20324e176513d60d308d222ceb812e360d951d6155f6d02a1 libreoffice-langpack-ta-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 0b78460c2a28581a57bc3fa84fde3827ce0ace025889c461b3df62f24c711c16 libreoffice-langpack-te-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 162cbb2bb9bde349a03624dfc2d071ace4cae47596af0caa0b0af3b70d3acb02 libreoffice-langpack-th-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm cb61056381996d41f91c6666f2d38dd7f096f9d24e6e302bd6dad911a043d229 libreoffice-langpack-tn-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b24d1b71ad281672b6c9f638c08f37d5d674b154706c76ff1b7b5b6e4c58b402 libreoffice-langpack-tr-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 05c6f625b78c3a7308f0989cb755c86d51054c4a10e4755a865f5c729fba23a9 libreoffice-langpack-ts-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ac96b4ac06537180193705f0a8f6711964ff13d8276c22e6ce2058467cf101cc libreoffice-langpack-uk-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b981b0ad2ca2f847caa41274bcf97e46d141d0527d6c9ed92dc794dfc3d00dbc libreoffice-langpack-ve-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm b39ece590e3b0a2cd969bfea41f5e718723efcbb908fcd6aa7095624bcbedff5 libreoffice-langpack-xh-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 7816ccb0531c35e2da0f5dd7c6da58a766b6e351e9d3ac0710d66eac43bc53e1 libreoffice-langpack-zh-Hans-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 029d7fd68531bcfec856b62d223829fe135b6a5752ae3251f5a10e84b62d13f3 libreoffice-langpack-zh-Hant-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 367ec90c287d603021f05ccf7e57d05fbd45471a5f450f19862f4e49efcb3bf3 libreoffice-langpack-zu-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm ef90c19a47852c3106d165bf7cc30b05f9e7e3a36b2b7d1deed2c0b01eaef2b1 libreoffice-librelogo-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm d99851843fb0debf3da9d10cea0292a8381ce73b9afd6ef27f62b5e2e8d14fe3 libreoffice-math-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 3463c7743e6e4ef709ff8f4e1bde696ff378d9cbceb00919c45e127ac77163f4 libreoffice-nlpsolver-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm e7e4dc61b52836b042230d05e60fc5db8cdb71bf9c874d7b4dc3255f8ea22050 libreoffice-officebean-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 99f46433226cbbc5e9232caf23d34d65c06f6b0f6541b81057813ab9584d877d libreoffice-officebean-common-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm e8ab29743bbe4e81c215d00950739b1cd908c3ac58dbd43ad3e71afd14e606c3 libreoffice-ogltrans-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 794c02812992b4f14d3401b3b0480b3dc10ac834e92b146703c2f3604d2bfa8a libreoffice-opensymbol-fonts-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 8a1d2ce477ddd37d6f79e887a5c13f39d221569f0d44300354b1b1a8c7d3ea7a libreoffice-pdfimport-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 850d10eff8c3a4beb59f889f7e94f8f2ff0eadd576efebcb5ec2568e86ba51ae libreoffice-postgresql-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 51b46a9214ee12fb7e0d8f20ebaa766cdccc010dc96a9d05b00e1a9f53ef7a89 libreoffice-pyuno-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 6994028b9dc45efe3c6820323c32b59ea80a6a5f96a99cc10ab6f664c83f4d5b libreoffice-sdk-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 1fa5378f042a7cc16b36f42f1e011423ebb6c46736ea3d054d3668ed25413f86 libreoffice-sdk-doc-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm e4864fe7f1bcd9039cbf34caf2900db6fc98b7c1277487298c6974fc0527a710 libreoffice-ure-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 65622a7a4010cb70ddefca7e2531577e39d266d2ff16bc4c92ab1251b0c2733b libreoffice-ure-common-7.1.8.1-8.el9_2.alma.tuxcare.els2.noarch.rpm 6f8e40705f03ab5931ecd964baeb64d61d180e86f89b904ef7b8134fe2508100 libreoffice-wiki-publisher-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 4eb0d6c30d5bb941c334f7682814e1ef96be5689224c723fc58339ccfa171136 libreoffice-writer-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 25ba927b2fe962fe616caad9e554af17c1c15f6260952007b869b193dbe7de50 libreoffice-x11-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm d27e917f608596f53b8e5d0fa2d5a27ebdce493da5066caac9350c28a412e51e libreoffice-xsltfilter-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 0d68b65464cf698444d06fe9daeac7bcc970de84a7db14ffa3c6696de46bc456 libreofficekit-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 6b6283b1e3715fc6cdaba069b5c6cd1488c4a2ac8eb5b900b7bf4e7bc3719ec4 libreofficekit-devel-7.1.8.1-8.el9_2.alma.tuxcare.els2.x86_64.rpm 0b9130fe446649ec260dbbc4cc2a3ab665789f7aaa4d810e225e3a3a636c6bc6 CLSA-2025:1745945082 TuxCare License Agreement 0 - CVE-2023-28625: fix NULL pointer dereference causing segmentation fault Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-28625: fix NULL pointer dereference causing segmentation fault

0 tuxcare-almalinux9.2-esu mod_auth_openidc-2.4.9.4-1.el9.tuxcare.els1.x86_64.rpm c9348fbe8272da4f4b121f02a8d530d0ff0f1d6268af7c20d161e094e7a58fdd CLSA-2025:1745945560 TuxCare License Agreement 0 - CVE-2023-25193: fix O(n^2) growth triggered by consecutive marks during mark attachment Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-25193: fix O(n^2) growth triggered by consecutive marks during mark attachment

0 tuxcare-almalinux9.2-esu harfbuzz-2.7.4-8.el9.tuxcare.els1.i686.rpm cf4ccd991851c09a76b02dd63ae505e9a2c1fb986c70efa1f293383f5375de8d harfbuzz-2.7.4-8.el9.tuxcare.els1.x86_64.rpm 8094049612be2b31f496cbcc2064b5af0e60d52a42042d394bc470854c11d285 harfbuzz-devel-2.7.4-8.el9.tuxcare.els1.i686.rpm bf646e043d009a01b9101808802b3aeafc0ec9bebe0aaa568bc7f299e336877f harfbuzz-devel-2.7.4-8.el9.tuxcare.els1.x86_64.rpm 44ed5230e730725e547c134862afe2da8442508f01258d6075441cde4e27c229 harfbuzz-icu-2.7.4-8.el9.tuxcare.els1.i686.rpm 79e048926e6d2d8ccfbe45c0d8ff89188a18abb47fd7e49798e51dc378bfd656 harfbuzz-icu-2.7.4-8.el9.tuxcare.els1.x86_64.rpm 1d7d6350724ec725f813844af53cb86ab6c23625df25d6338ee1ca61a436a81c CLSA-2025:1745946091 TuxCare License Agreement 0 - CVE-2024-6655: prevent injection of libraries from current working directory Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6655: prevent injection of libraries from current working directory

0 tuxcare-almalinux9.2-esu gtk-update-icon-cache-3.24.31-2.el9.tuxcare.els1.x86_64.rpm 5b5f4459c3b8ec498f4d9595085b65d29263214bcf67abe8b0e2f577269d8277 gtk3-3.24.31-2.el9.tuxcare.els1.i686.rpm 9905b1292fa03fb92891ffe01a1537831fb7b0b135edab1341494788ca79b953 gtk3-3.24.31-2.el9.tuxcare.els1.x86_64.rpm bb40616f1fbdb21fb9e9eb25d98d71d8ac1ce65794eccbdf2d611d279eb22918 gtk3-devel-3.24.31-2.el9.tuxcare.els1.i686.rpm 07c4f44286d86e494b31b61fc79aadd0ba824c0c3ff90689bc1ff619cccb9ab5 gtk3-devel-3.24.31-2.el9.tuxcare.els1.x86_64.rpm 0b23e17b3f923dd4b521854ff4aaf38b6f913fbcb9e552ad29964ec45938871b gtk3-devel-docs-3.24.31-2.el9.tuxcare.els1.x86_64.rpm 9a8ab660553043999efdae8762b2965be793f086889f403ad1358b3d2b602917 gtk3-immodule-xim-3.24.31-2.el9.tuxcare.els1.x86_64.rpm 3ef692f484d447852cdbd6b690e18812b5ddb2bf927686beec9eec860ead4049 gtk3-immodules-3.24.31-2.el9.tuxcare.els1.x86_64.rpm cc31e2234d55b91b840c9b9301d346e01bab8615f1b7dd9d524407e18ed89d15 gtk3-tests-3.24.31-2.el9.tuxcare.els1.x86_64.rpm 62863b22f326c1db0e07df12a070e2c0fe08f0bcd9c89f61fdc4f6f59a61ffcd CLSA-2025:1745955704 TuxCare License Agreement 0 - CVE-2024-52531: fix buffer overflow due to invalid input when parsing params if it decodes to UTF-8 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52531: fix buffer overflow due to invalid input when parsing params if it decodes to UTF-8

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els2.i686.rpm 17947bc6a778043089ee16b3b8084bed134455c6e15616f99badfc53285c9d02 libsoup-2.72.0-8.el9_2.tuxcare.els2.x86_64.rpm 02294cd3bf7bc3cb4362fa20a665035ff64fcb3b3ed3ff5e9661854f21122c98 libsoup-devel-2.72.0-8.el9_2.tuxcare.els2.i686.rpm 3b42c95c7087eb16c912f292814ccd7996c70a760565afed58b2147411cebb90 libsoup-devel-2.72.0-8.el9_2.tuxcare.els2.x86_64.rpm 4ce4c23b3417be05b17a34f7118853f780a9391447177c3ead64e31e0a98066d libsoup-doc-2.72.0-8.el9_2.tuxcare.els2.noarch.rpm f6d28a911540ccaec2e669e03becdd0475fe280671bd6c4dff34229cfd8e5b69 CLSA-2025:1745956171 TuxCare License Agreement 0 - CVE-2025-27363: fix out of bounds write in font subglyph structures parsing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27363: fix out of bounds write in font subglyph structures parsing

0 tuxcare-almalinux9.2-esu freetype-2.10.4-9.el9.tuxcare.els1.i686.rpm feef8c761b607de1a6cf200a14462f8dd1b8b356c9fcd6c489591efbbc32bd11 freetype-2.10.4-9.el9.tuxcare.els1.x86_64.rpm 2ada3995c658fff3a48e0fdadf62a5c453890b24e8f856cf5e9a316eb6292db4 freetype-demos-2.10.4-9.el9.tuxcare.els1.x86_64.rpm 03d3aaca6773e62c3925864010a404be84823750e84a66f5246015a3bbb8353b freetype-devel-2.10.4-9.el9.tuxcare.els1.i686.rpm 9f3ccc74e5229bcc786039468154359bb007d8f2d59365947a2da2c15e9c0a23 freetype-devel-2.10.4-9.el9.tuxcare.els1.x86_64.rpm 03484f573a95eddfc202409ffd26fe962246ac9fe91ce593dc8a409c08df1b30 CLSA-2025:1745956866 TuxCare License Agreement 0 - CVE-2024-11235: Fix use-after-free vulnerability related to __set handler and ??= operator to prevent potential remote code execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-11235: Fix use-after-free vulnerability related to __set handler and ??= operator to prevent potential remote code execution

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 2883ec0f30f24db8b65347e66b2d0d182894dbfa71b0daa6c80d695eebf0bac8 php-bcmath-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 95808b16fbcee4d25e4f50a47b727842e01c18ff82b610b084aeb7772673f93f php-cli-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm f6901c17a031c26f4fec551028d654822f2e07546640d9a652001bf4d3794570 php-common-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm ad55e74132b87fe4cfbea48e2ad23780bbd9ee1836d13eaa49a0c9bbb2c4e0ab php-dba-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm d1293b38b731900530cabc0f1b515ba7deec330f58ed21059debdc0fc5a87bc0 php-dbg-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm f4aa2169623986dbbbdb24663d80c017eefd20a95368ab31d26063f49638591b php-devel-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 48ebca81e8151554cf95955d6daba00b73b91e0b00e4801dfd19d75b67e940b3 php-embedded-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm c145d80ed93c06ab130117004657e20b9d73f0af47c8c8d32d11d9085d303cbb php-enchant-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm fb785dc0587abd7cc402b0381fa5b8053a1271e6e1e95d36c84baa1f0578319e php-ffi-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 11f0224cafc973b011089de01f4effec9043e895b923f252c03b75737416361e php-fpm-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm d02185f69421f576c6a2b9ab4fb4dc8ae564746b0a2ecaef23523569c8d36ef9 php-gd-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 68486915070d8a59e6fe77f91e35f6287f8a0844a34097f060acd8875bc6cbc5 php-gmp-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm df0cb9831f51c0cbe5be7d2169f6e83743db5a1a346a9663bf374da4fc7f8e8b php-intl-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 1bdb6252122d1ffcadc646b3dddce872b69dd97478cba784e59642cf3858226c php-ldap-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm ab0e7c73171b84b5d26e20e71601a85c911c87faf1e7399baccbfe7e50bcb205 php-mbstring-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm f0e692a769bcd7ecf904ffeb7b5eeb4084888f4c6238bc8cc9503a2bb8311b5e php-mysqlnd-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm bc6560c2473b7a12355bc94616861d4b28016dc749220e65fc9592cc65352eb8 php-odbc-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 4b301212504b8d077b58185f85ae3a46bded4639faab5fa308c9f70c9a5f6592 php-opcache-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm b38d29a942bb47b53a78c6b1dd5c3007922832dc4747a6bd9673e96b8c29e0b1 php-pdo-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 058b26b742ba6cecf394ae549dcd762bb80b215fd3067e82a4e7d1410d7b80da php-pgsql-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 2c725515cda0e3d7a30a16b93b547acace97e184e3082b352ec35a3f84c6a5fa php-process-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 23651248094b5ef088c438a05574edcb71b94ced2c3c95adefe7cd666562990d php-snmp-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 6039af9081df9727adf7246ada5983c7e7dbabaf270772142a7bb9313817dbbe php-soap-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 9fcb5b86f2c4b7081d9c3173f13b134099ac629de4b24ca809d0dc5b2a8f5e9c php-xml-8.0.30-1.el9_2.tuxcare.els5.x86_64.rpm 02599c8b0b522c39cb763dd3085c0e161f76fc41753fa6e8a1b8db52c2131b67 CLSA-2025:1746183800 TuxCare License Agreement 0 - CVE-2023-26767: fix buffer overflow in lou_setDataPath function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-26767: fix buffer overflow in lou_setDataPath function

0 tuxcare-almalinux9.2-esu liblouis-3.16.1-4.el9_2.tuxcare.els3.i686.rpm cb09938127f260de71006f157090ebec9c27e5b7b024df669dc9cae62fbc0b5f liblouis-3.16.1-4.el9_2.tuxcare.els3.x86_64.rpm de2a9935eae3df75fd6a39f1dda99b7007435fd9fe9701b071787260590cf8ea liblouis-devel-3.16.1-4.el9_2.tuxcare.els3.x86_64.rpm 6c9eec92bbee247b5aa0ee935b998207820360d24672bf34120e32dca5927f32 liblouis-doc-3.16.1-4.el9_2.tuxcare.els3.noarch.rpm 27684440c21e805c2162ada7c30db796229d8a00e39f8d904fef975df1d1d97e liblouis-utils-3.16.1-4.el9_2.tuxcare.els3.x86_64.rpm f7f2fe6f49dffe1d85dc881e8b036cb3f1dc53bc527623e8a4bba857f38e3977 python3-louis-3.16.1-4.el9_2.tuxcare.els3.noarch.rpm 74ef90b52207333b1692899f4ba7fae4c5e4f3cff38ee4a3c6293aa29c14a02d CLSA-2025:1746187690 TuxCare License Agreement 0 - CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing code Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing code

0 tuxcare-almalinux9.2-esu jasper-2.0.28-3.el9.tuxcare.els1.x86_64.rpm 3ac19e27f4e0e0bc743c0c4a7ac6bac88f597f89aacf4144c033ebe01ea6bd38 jasper-devel-2.0.28-3.el9.tuxcare.els1.i686.rpm 8f80714db8688cd98cf4bdcb8712996a5106f912ab8df1f9e0abc58894eef8f7 jasper-devel-2.0.28-3.el9.tuxcare.els1.x86_64.rpm 9676f5e45bdec09058f5847cbfca60c754ab85b9d73f4fd5d05ea77d77f3300a jasper-libs-2.0.28-3.el9.tuxcare.els1.i686.rpm 3e30a26129e288c1cff8ebb67f77436279364292ca2510888c93cdce3d4d13dc jasper-libs-2.0.28-3.el9.tuxcare.els1.x86_64.rpm aa8fe15174bc3515ccec9683b33ceb1e206705ee902d582b785cb265acea595f jasper-utils-2.0.28-3.el9.tuxcare.els1.x86_64.rpm 070a2e895d5c5e3d8735db7d8ea85b8ae8b2251241b982fa604ccae5daab815f CLSA-2025:1746188134 TuxCare License Agreement 0 - CVE-2024-9341: fix insecure handling of file paths inside vendored c/common Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9341: fix insecure handling of file paths inside vendored c/common

0 tuxcare-almalinux9.2-esu buildah-1.29.1-2.el9_2.tuxcare.els3.x86_64.rpm 3c6383f5e3eb1bd54de4ab1d2730394979fe9f6810771f22f11b0d02eba3baa8 buildah-tests-1.29.1-2.el9_2.tuxcare.els3.x86_64.rpm 7891a2a05d7a097dc36c186070512c34cbc2a44e474eb9b7c25028cb9d7a53c3 CLSA-2025:1746188656 TuxCare License Agreement 0 - CVE-2025-31492: fix vulnerability causing disclosure of protected content to unauthenticated users in mod_auth_openidc Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-31492: fix vulnerability causing disclosure of protected content to unauthenticated users in mod_auth_openidc

0 tuxcare-almalinux9.2-esu mod_auth_openidc-2.4.9.4-1.el9.tuxcare.els2.x86_64.rpm d5f8908c63fc0bdb5a6c399304110512e0e9db32e817e06367920b3d47a6475a CLSA-2025:1746190792 TuxCare License Agreement 0 - CVE-2022-38745: avoid unnecessary empty -Djava.class.path= - CVE-2024-3044: add notify for script execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-38745: avoid unnecessary empty -Djava.class.path= - CVE-2024-3044: add notify for script execution

0 tuxcare-almalinux9.2-esu autocorr-af-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm e8dd3922bb219099a54782b2cf81ea33868096093982e97d1f1e156c92afe1f3 autocorr-bg-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 43b0ba74834b1cb252e0b5a2af2762ca8faab40cbec4677e81b6f274dc96b4b2 autocorr-ca-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm ce63a266975a6810c42f61f56865a3fa27902f591b91ec309d3c7b12206f307c autocorr-cs-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm a0ebac95ca9b432817e370263e02fc690dc9139df6fdd7927443a087bc2421c4 autocorr-da-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 9905845c4b600d6eaf81dc55139757949020b83fa80670f0eccbcf8cb9e58d49 autocorr-de-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 2b12fed91a3c7296c5b7ad1ebe4cc21bd2bd39bd127a47dd73b8646889b725e5 autocorr-dsb-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm b424bafd2950949fbb8a38bdede2b3cf9fd11890f134a64f8686c1737ca18963 autocorr-el-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 94a4e7eb7620653b2ec104320b91b406ce1a1b62f3f6e9048445f8ef2fad327f autocorr-en-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 51f474fb6420c9beef4e84b3645e46e09a924a98e40740e97fcb2132738731b2 autocorr-es-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm d9b7f4d5229bf4229db2cf1b41d2f831e326e0ddda7220524d899aa9fc223170 autocorr-fa-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 0add8cea7f782d284804efc83e385d481978bb9073db9464b9504d298c05ffd4 autocorr-fi-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm dfd46fcb707cb2a00e25b308dac5eff0b674c609fa0278242a15f72d8e6b4f1b autocorr-fr-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 2bcbf2a4fd74d5f029978a8e821c0ae26f5175bf8ddaceed8546b314ab9f5d61 autocorr-ga-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 503437b1593fc51bf1ec18d49ea9934d12ef914a7de11c85993ace24a2c191d0 autocorr-hr-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm a7b44e52bad02d8dff4271f7fffbbc58facf047db67dbbc73ee2dd4c3e9e5c97 autocorr-hsb-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 2a3ce92ce0100d6208a94a5df8d1f49b609d7c7d725385fa4a8cbef59438c108 autocorr-hu-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 2103029ed22ac50259111c9cb49c232dc43fba9adc42675ed1bd571dc49aacf3 autocorr-is-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 054d84320a7ab2b1272ec83e3cf5e9307958a067f6f49c8acf22113c9dc88fdb autocorr-it-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 74a21ff7384d0f1afc32eb378704137ee72d18cf171c58b902c3ba277d9a3402 autocorr-ja-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm ec372bf8cc52fb04cf55e607fd85f4f4dcef30097fb67397d31d7e910dd87de5 autocorr-ko-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm a3ee25374d48659acc50418803052995cf5b2aa49c8e6d5db288c484fd21d3c9 autocorr-lb-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 4dbe51879a5235154dbe714419a215b040a93dcd34ee56f3b6fbd6e2441f3f6e autocorr-lt-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 709e2cf89f7f51bf63f1a3b5d2d707388f01f5e5cbc003d31254f406f023b9a2 autocorr-mn-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 5357ce3ac62819bc2fa04cc7d59e7f6612fb61412028421e3d3db4a00f72757f autocorr-nl-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm ef62f5b079cf511aa2fa9fc65bcecb4388aa03c0dfa667fd4d85e047e11a703a autocorr-pl-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm ba6bf4eb435e91b2c8f1bc8057b327c90a77a4abe8f51339619d44f90d2d8cf4 autocorr-pt-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 0e665c0d9ff56b3f54bf6ff98be33da182629c262bffb1df60102c91b4503295 autocorr-ro-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm ff620db213c70d8a246b9824bf735dfbc619e2a67de9184e25b1f56186bb5e86 autocorr-ru-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm d540cb46d86d9b32de67b55174b9e3aa5022ead084c10a98a2335bca9ecafbe0 autocorr-sk-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm a5e95cf09e98b0365164c4aef6bee8210689e845f42d240e7d4d85b27cbaa306 autocorr-sl-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm eaa5103af95bccf0ebea60efa3eee854fe0a12eb1e547d08fe89e306ffe4f17f autocorr-sr-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 41b14566ee6e412a61eb18cf836482fe7827779127e0e0ce8b3ffe157a022e9d autocorr-sv-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 2ebac25539a3029715d54784adee5e404dd3e494a098341a33ffb04a204c01a8 autocorr-tr-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm cec4cc16f0cc4ba7e669ba01477577033297275669bea2710c2677bcf16b45d2 autocorr-vi-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 9723bc857a0e2710f9dd256cbf8a6e2a74a0c4f7f72636f0fdb544a61ebf99e6 autocorr-vro-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 8bd2677461d4d72570d5fe0a2075b1051d465021d6f8cf4061899b5c143d22e9 autocorr-zh-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm d8d23fd61ae90a278bc8a355bc275151f64a2e3b9fcba78ec4d6dbbfebce8be2 libreoffice-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 6b24b3256ce73d5e7c9159d29d88c6c572812ccde0376a8a29ef4f97ffdf7917 libreoffice-base-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 64b45d137679502d64cc05b6ddd3d07862ee79eef1634d56419b1dd54c1b04dd libreoffice-calc-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm f167c51c82021c681e0209c3eecfbdd5266e7a1264b891c3f8324f0f41e7f856 libreoffice-core-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm be67bd18830b9b6cc5210cf0e04416c2d391aa228373df9150b7bb64e6fdfbe9 libreoffice-data-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 3c546d6ead69fa386563b15c7553c545928abead7e287b0f024639ff89c1f38e libreoffice-draw-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 91f977c45e719d99912b1073495f2e86bb42c84440e484871f0f70f8ac0f1499 libreoffice-emailmerge-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 20caa5b977b583dba5a0a2971f0907d24b5297ce2091fe43e690ddbd79ec8f9e libreoffice-filters-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm c34ebd393de3f45bca50c97864fc460a817bb4231cdf83114dcc86d6979ca3e0 libreoffice-gdb-debug-support-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm a68aa771db80e04a5fa653f46e0dae1bfd97994d2294d42c8dbd0f99327f2957 libreoffice-glade-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm da2cd687e743e24a6c92e2e9849bb2466c43d0366b7a8164b013e751749c1591 libreoffice-graphicfilter-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 7e3dc5a7dad8c53d60eb930ffc88a2b145b8051b767cae584cc7b5942f297b07 libreoffice-gtk3-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm c26e57496f4ffb78bbc61c4148d796a9eb21c78a93c27c980b5c46bb4a2742f1 libreoffice-help-ar-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 673f2fc5e9563df3c04d86ae866e224dc98cd103c7e9c7593f67083d24e61a1f libreoffice-help-bg-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 538ed30a20ef86e02f43818ad5eb2c84819d5b177eec7122351cf215edc08106 libreoffice-help-bn-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm d3a983e3eec2abea2a4356e7e0ea5b9a62fc3c1f4778f53626807f4beb5a77c2 libreoffice-help-ca-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 07d9ece5b5a910d24692db87e4b81ad07a30289cd816ed00c3490ea8008a5556 libreoffice-help-cs-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 03774f6f1a0c6e53b30f3468ab24eb4a5a623395b85f4423f095b33d28a2d6eb libreoffice-help-da-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 85ffe9f33527282185e51b53abd05ebc1483b4ecf54c0948c984f9edb4cd7152 libreoffice-help-de-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 7905885145dafcdf90bc55488a4baf599413ba41cfb0d4829d8f82e95bbdf2b5 libreoffice-help-dz-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm e45ff3b1afea82dd4ed281668d0372c542a4db441424a2ae8e2c97b88154d550 libreoffice-help-el-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1a4f3595c6a9093c53bb72ef75c769df0d84015db6e42a238dc43b517de4c266 libreoffice-help-en-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm cc126e87bdf25ae5a37c1580822d7a4e8a27c629fb5147732fef8c3dbd0f5795 libreoffice-help-eo-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 174f1da7019f2674a27161a7718b50c0bb05fa29547295a5024e0ca7b5637d9e libreoffice-help-es-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 84d9971e93163c8acb43ea6a4859a565f78c859f2a3f63e409b2bcbfd77061b5 libreoffice-help-et-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm d712672498ee39e5ebc75c0a5467fc224e654f2e0ffc1f7bdb1de663439f3d4b libreoffice-help-eu-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b9e01f523fc8e74a3f503982b252574acd57e4ad619a96add94b5018fc141159 libreoffice-help-fi-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 3c9efe0cb049e04003f62dc2d822357da5a2668a46c2ede50ad9e2f2850cbc6c libreoffice-help-fr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 73f2bbca27e0023827010df914e8d81d03509bc3a7e36cdf2215d3e9a1aaed88 libreoffice-help-gl-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 92f23e649b672a35aec628300a41d8e99bad01c76fce693bd455d821bb26637d libreoffice-help-gu-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 40b08a9fe052416065f2cbac568c98ad452b67fb749e04abfb3dfdbb700820ca libreoffice-help-he-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1c1368462dc877220d8b399ee4eaae03682198f8eb2d10d01091acc822a3debf libreoffice-help-hi-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 08284cccdfb61075f4cc4938fd0ceae10a6b9510852fb786e87f5ac0a8de60c0 libreoffice-help-hr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 365472b4c2aa42fc853cf5b4a047ecf307a3e2279813f3bd9369410a6f3ef429 libreoffice-help-hu-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm a325b952a90738104ccdcef4b542df697f7b24a111e90780317ae3005e61562f libreoffice-help-id-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 220f555f11021b55453c460f3f19846e8fab1d359db24a9ba7d67ef009f2e9cf libreoffice-help-it-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 28229bb3a087d4d4e93999b8db95e1aaa767144c1fce2ebd80e988af6ea6886d libreoffice-help-ja-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1f0448fea687648b8311cddbaa605542469fb43159bc054adeb26395607bcf18 libreoffice-help-ko-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 3976c0cd897c3490186a887fd3f5fb6f7bffa3a84a7507f5d7dbd6d814ad5f5e libreoffice-help-lt-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 3b970cd8a69a6bf66f60623e8c106ae4b03824c2a6d88d7b3f8a91e2e3d88c8c libreoffice-help-lv-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b6c965b09b2170bc7042e0a016a3b5bfe1ceae286385ea429624dd61013fd38a libreoffice-help-nb-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 40888118f77047c71486731a0dab70d04aa0714e2914759fa044172e0035ae07 libreoffice-help-nl-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 4f5d70d4b4e061d273d2972cbb609a9fbb5d2dad077dd126f27de741695f18ea libreoffice-help-nn-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm d7b551b3a097b20baabd26330f61752c48a9100f5c1f052d85406b8c2492c9c9 libreoffice-help-pl-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm f219bfdb60a776d5a1c3bb7b64a639d544dea6c8bbea63ecf1aa145513b1a07f libreoffice-help-pt-BR-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 5938d394e3d245bcf46d11b801d7f2b63fe4d79ce4c42cb77c187cbe40977a8c libreoffice-help-pt-PT-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b7516266083a201d02bc7097ee7b94805907f47230611db9edef774550ef74c7 libreoffice-help-ro-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 3510c4edd3af5f6f79c261257c1cd6286c696f71793c4a6e8ed5a49067ef636d libreoffice-help-ru-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 8addf396177c3e07e12057a3e004a03a926f645609073448f1d5fac241d2f25a libreoffice-help-si-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 372182fec0deac738999ca756480ebef68c188817f2650af4c850442d022f8dd libreoffice-help-sk-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1072404101169334909a42a05857fa0ec764a6119d2a57fe92322c43f3429fc1 libreoffice-help-sl-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 4c31fcd77475b432260c3ca51c1c3e7bf82ce630253d60178679548a953a5e79 libreoffice-help-sv-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 2bae97c453603051dfefcd3091469da369f82ed4ef817ea975a36c5c57b128c4 libreoffice-help-ta-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm fbf2f67851a11234d930f9d7c6eb7efc8c9c444c2433da018cdd6836c48b8a90 libreoffice-help-tr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 137a4e69824f7ddcce6860086095fef2756007d07a880a9e1b2d4dce3fe745e2 libreoffice-help-uk-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm e569eceb116ab7f9f49fe80b6691fe32154d43e1d1583516f2e4dd4fef457bae libreoffice-help-zh-Hans-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 86f6e20e3cb34d0f5e7a2a96c2eac039901e891ea9f3cde4776e384fd1f1f773 libreoffice-help-zh-Hant-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 34d0a4212526a01c4b40e444fce6fc0aa2b99ddbedd20d447e3dee7f998c79c9 libreoffice-impress-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 027b0b80927f88fc5bd69e157f14973a50846e0707de116bb02984c19dba6090 libreoffice-langpack-af-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm ea2b029f8e99f12a81247b78ffd3863af57dfa6b5c9699e1617b7aa005c14657 libreoffice-langpack-ar-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm f0271a95e05d1a575d66479b4a894f131f8d8c8af3768a7fbafdf46f71e67e63 libreoffice-langpack-as-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 0359ae5ada2c20741caedf5419fb5653fc9a60017d90d42c618168ab53c7e552 libreoffice-langpack-bg-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 46a6b3087ca64e16a6904c715ef8f7561812778f877986ebcf188b463fb97e0f libreoffice-langpack-bn-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm fe7d2988c38afbda8828d42f00ab6b21003048c1a02d5d3f7eed87c9fef1840d libreoffice-langpack-br-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 97e4f7eae08be762c166266fed1a626ad2f1e4cf9e1eaaf29fd26035edd8e3f3 libreoffice-langpack-ca-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 29b5f7a43f40f9bdb7700614a2d771443bc02c0358730ed50e2642d8e9b0612c libreoffice-langpack-cs-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 7069d0a16782300f70c4f5418bef859bdc8b88a0a6a9ad32a0752eed76a95ef9 libreoffice-langpack-cy-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 36d452273d5d064e7af66c468fcfb35a7eb3b8a5cd33145b60c08e0ffbaa4a30 libreoffice-langpack-da-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 546ac44452b39fb266b61321fc01298c4b6075b25965d5fe31b75a4c1c3431e4 libreoffice-langpack-de-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 0a25a278d4ea9ada999d74d6bef41414c4133cd851547131f48abcab936f22d4 libreoffice-langpack-dz-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 0f0c93badc936171fff41e5b101a74dfa4fd00be334388369e0e45298cbe51f7 libreoffice-langpack-el-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm efd08d9d680b1355e8f32d667b95b0d58abe6baa30b1018dcae6809840b75e67 libreoffice-langpack-en-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 443eafa185ad997e6fc8200fea7de9786e1743f7d9d8abb03bac227d0b87ae60 libreoffice-langpack-eo-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm f52149f7ed46fd16156868939650b66dfd785cf05aedd62ce12dce334dbeb1da libreoffice-langpack-es-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b86e6c91fa5642ab94a37a0db179b898e0f83b0f2ec42c1aa7ee63af8ae13b63 libreoffice-langpack-et-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 641f66c503f2bc316aa9a4438357b98c36684e38a5bbdab1bf7266dd54f7442b libreoffice-langpack-eu-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 3f2160aa5f997c8817687d4d4a2fea362887f3ce39691ddd8c98f3c70b62c1d2 libreoffice-langpack-fa-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b507ca10501a28bf93b427655676df966056d9e1b14ea97418984531cf9221fa libreoffice-langpack-fi-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm cdd209e38545d883b5212740cabdf1025bc150cc28e6cdf47a139d4d2c7bd406 libreoffice-langpack-fr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 42fa0c489e8fd44c9c8338af96c03cc0725de428362e20fb716be0fb890183a5 libreoffice-langpack-fy-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b4a9c81b19da247a0b2aea1d1e3bd0a4705e8f6224648f9798038a04f90743f0 libreoffice-langpack-ga-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 25d3b1e898ea7ce1e349d60e4ee797e74e645364e638a3e89e79af9522c2e761 libreoffice-langpack-gl-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 7848daae4e3464d83ca8b902ee3a934380cd5797d0458b71fdbd6053b9ccd6aa libreoffice-langpack-gu-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 30abfbe8ee7c677fc18c5812d20a63bf44bc988f6692093af53761b4e646036f libreoffice-langpack-he-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 0b8d6c85c3fc4fb95a7459895ce6c28d81ef7bb5aaf384c151389c2d88d6a7f6 libreoffice-langpack-hi-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 4bd1047281919b92cc69f39cc86a34912f9b20f3acf38fda66efd3d847b3e139 libreoffice-langpack-hr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm ef8a828da70f9d66d31a9d70194d46fd6e9c496c4b3ae9d15a64d26f5d376b8b libreoffice-langpack-hu-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 631d55a159adfb37b8a15be722f08002be383eda1cf94dfdd964af350f767a2c libreoffice-langpack-id-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 0474d9e7d4516f63225a4fc0e911523442d27ee7ff8518ea2cde2413d603c2f7 libreoffice-langpack-it-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 159d47a3030499c0f8ce74f17d60dcdba0b92577e52d366852b79b0bf4652304 libreoffice-langpack-ja-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 52d23e491203c0b871a49d6ebcf4fdc97cb9cf0a7718ee079c38c1db3d17543b libreoffice-langpack-kk-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 70051be3fc787bc134bdf6406f81b6b2b683991ccf20f4742bb4ac2fda0cb9bf libreoffice-langpack-kn-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 22f032497efce585d943b0685a1cee80d67353d1f7f2d2ab83c09b6a981f56a8 libreoffice-langpack-ko-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 58726e178c6688906ba2be0e1eb1227dc1d6fe3e65f2414e5c056e3e0a16fe84 libreoffice-langpack-lt-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 23c961edfb5d2769ff0d7b628493b91e696e3828a74d177da7b11d34d2850eaa libreoffice-langpack-lv-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm e878bd9a1153887bd1ada71728b0a333440068c65cd0ce37ae0b036452fdca81 libreoffice-langpack-mai-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 6f924d7b942dc22e84d7f1ce0d8005c4fffc2e162882eb98d50c449edb3e2948 libreoffice-langpack-ml-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 481cfed2963d657f731a30766fb02d3e2df58984e313fbc73e291449922db519 libreoffice-langpack-mr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm ebbd5a557bfdff471ac63ae9be02f39d18fcfd9f14930fe686289db4b4fc22c7 libreoffice-langpack-nb-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 8aa68c5ce96c039245d11a1a11b142366f3b2f9c54e6847d71e37417275ad464 libreoffice-langpack-nl-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 5169afe27ac7bc6217f2375bf140ffb3730688fb0b01838a846bf70917465635 libreoffice-langpack-nn-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 94dd31c619d9ac684dcb0c49724f71aee8160571399c384956901b02f6e6f57d libreoffice-langpack-nr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm d9917937a96029cd9cdfaca2539c3889fc11110a40e272885abbff6b318bf56a libreoffice-langpack-nso-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 7fa5b1c484f09c7569fd710553a490c37c8db7f0640f2b071254bcfee768ef50 libreoffice-langpack-or-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 4d3be0ca8c04dc71a517da82b7beb39782fc0b1a9f0aa41da2ee89c28149bb98 libreoffice-langpack-pa-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 104084a468f10b5e640dffd2dbb89260ddb0db2ce1c5a360878bc00997d8439b libreoffice-langpack-pl-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 49d1c262f901b965d118d9ed2f73ba5e08406e5bb9155847eda67e9f2bb0b061 libreoffice-langpack-pt-BR-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 554bfda0c4cb750a4612452d95df982e21025a1f16a06f96ec9be8ca60c008e6 libreoffice-langpack-pt-PT-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm eaac3c989b28b29644b3156cb29c31cd070858f3c590cfeca4014047acda3d5d libreoffice-langpack-ro-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 0443ac72bc2cc43e1133ac511ca172054c1fc20e81a0e4b33fcc609445d7b98c libreoffice-langpack-ru-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 35a1eb2410a0fed4bf3ce0ae279070847c925a55eeb26318ecc5c3201c85eb63 libreoffice-langpack-si-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 9e90c36e0512bff7c8bbeb2361d421e46bff30c2c98f5f591c1f207fe1f9d1d2 libreoffice-langpack-sk-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1b9af919b8c8488b0465c1f9fc75ad600162eb2e562e63d7c1edc17ef186c305 libreoffice-langpack-sl-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1df8cc7582f2109c87927dc5c9e9325943bb42ae7d72abf99a7277c647a8c295 libreoffice-langpack-sr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 17738a98520d9423aab4d470920ee9b6c4305e8cebfb8516601a6361dd3e67a0 libreoffice-langpack-ss-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 9a7b9724fa3ccf5a0b7f511843acfa6173416f9d97af11380f4fdd1cf7f6fe1c libreoffice-langpack-st-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 58100e03c71a46401a8f09564a410221d9da1d7eb7b369fe0329b7d9b990065f libreoffice-langpack-sv-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 040ba8a5b2c3b769d236ec1db430e75baff2075ff4e8e1dd1a5213012c98f41a libreoffice-langpack-ta-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 708544ba8ed4eaf55276d3d57522051e8bdf2f136d21b549f60e4c5d6df7c5ba libreoffice-langpack-te-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 85d38ad4f97e45a664891d79117224572554dd974ab8c5f21fb26ccc18027345 libreoffice-langpack-th-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b225d4cb36b3d493b13084f1f4ea9ca6e74deae60987c1eccd4f1ae140b25298 libreoffice-langpack-tn-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 95f091e7399ae3633594e985774094474594cce7748972195a4722d861b61c12 libreoffice-langpack-tr-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 30875585603024e6dcb36aa8983265e247205290ecc374a7b5f33b783ee62c9d libreoffice-langpack-ts-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 40d05284c86ac2472be86841c518645e3f8e1c1337397cd9bfe16fe391ac8050 libreoffice-langpack-uk-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 7cf6e3216bf5597af1580a4946f544ef86cd33239e01abecfcb3c91b0b4554f2 libreoffice-langpack-ve-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 20d46e238fe38eea909e323770f448f5642d7a0e8ff5cbd4d84b0d463fe36d96 libreoffice-langpack-xh-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm c4ace1668dd88b2566138030da6bfe43a2f582d55cbede7c0c47d72981d8c17b libreoffice-langpack-zh-Hans-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 75817dfc62a9454699a5f5b0f9bd7bb701fecc617ff02ac1e657a48a597c4cad libreoffice-langpack-zh-Hant-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm f483aca7dec76b31b61dfbc2768e2a138c0a911ea16362a578487b866349df12 libreoffice-langpack-zu-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm c2685844091fb2db9f9952d54b5ac5f54680f873b440f6a572459021028727a9 libreoffice-librelogo-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b9afd5b62185b354d3d0b2113f9770a06a0a916c896f038f9e9e4f0c3c512301 libreoffice-math-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 17a4025417a4244077fa8f55629a64d71a127a8ded3c9df432c03bda4019820e libreoffice-nlpsolver-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm e6b6d5d87a6a1425a6dcbd70480b074565df881b5f448d99e81a6938840a820d libreoffice-officebean-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 70f8b3bad2be3587696ae2810020a04e174481f49cebf8c8fff23f6cecc23362 libreoffice-officebean-common-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 7607c54c017ceca65f5b50230ad7b7b24dbdba69f03b15bb4a404e7b3763abaa libreoffice-ogltrans-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 6f7b165d6c85b460a28a4e52dc7bd998108db9a76d1a04c5979de23edc2cba8d libreoffice-opensymbol-fonts-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 9cdd0a16a6a3b7609ef84aa392996f0519c81a55013f940dc317920c039b6ccf libreoffice-pdfimport-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1eeeba7c155d0921c6686e1970404dd0a59a018894fd61f4a17d38e84a4e2471 libreoffice-postgresql-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm bb90c0568d6904749d74f7137bac4fb3429a760097250f18f08b192e2e488f2b libreoffice-pyuno-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm b65ad34e35d209839de461a2391fe6144ae37bd24a3598d7b834e5da3a60b65d libreoffice-sdk-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1964f2c59031cb1844f8e481a99cd0538457b87edeb95a5d2da6fb8e2b02f61b libreoffice-sdk-doc-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 1e731cabc6a8e7f17a9873f6e6d1e1580e3d6cb49d2921319ed3d088c5f4d0c6 libreoffice-ure-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm a53fffa356238bae87579556e916a24eb474308b107a5a5b3c247a537e83d032 libreoffice-ure-common-7.1.8.1-8.el9_2.alma.tuxcare.els3.noarch.rpm 7be46ec4e7b7da9e46a8fb3e02abdac21a9309da4a375eaafdc9151978654ac3 libreoffice-wiki-publisher-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm de0151904de041226c3b5a1c8c8b085d11bf730087789f36f93a1509d0b54584 libreoffice-writer-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 93dcb87000d9032bab6935dd32fb69a836b9377a21d9067163baa51a71ae7e2d libreoffice-x11-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 36273b4993829b0aa3103c4dcf6366361fb9ff7311f255cf3d68ee055eb5c4ee libreoffice-xsltfilter-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 93d572fe3ac1c3bedfff9b5dd8e3fabd09bb1c8426c9300b0e9afbb23850a379 libreofficekit-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm 138b15ac3a90ccdb8b3372ef8bd8d56464637ae644111bbf1f21aa1e10734b24 libreofficekit-devel-7.1.8.1-8.el9_2.alma.tuxcare.els3.x86_64.rpm d8384fe8bcaf17cf817c03f6781452c86ba8cc367f0773209481e348588b4417 CLSA-2025:1746653856 TuxCare License Agreement 0 - upgrade rexml version to 3.3.3 - CVE-2024-41946: fix DoS vulnerability when parsing many entity expansions with SAX2 or pull parser API - CVE-2024-41123: fix DoS vulnerability when parsing XML with specific characters Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- upgrade rexml version to 3.3.3 - CVE-2024-41946: fix DoS vulnerability when parsing many entity expansions with SAX2 or pull parser API - CVE-2024-41123: fix DoS vulnerability when parsing XML with specific characters

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els4.i686.rpm 8f3ba86edf25c733c832987228410b82aebf6d6794d71f659046f2bb0ffb9150 ruby-3.0.4-160.el9_0.tuxcare.els4.x86_64.rpm a7e4840b30a5c8eeb33589b2111e348dfacde55b67b0ec9c5bcb499e4887d054 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els4.noarch.rpm 0b71c2ccd4a68c6d785aab6b41b811307d479d6f53fc9481e8141e9ea322ce16 ruby-devel-3.0.4-160.el9_0.tuxcare.els4.i686.rpm cd952bb1d135a0031d0e601a76236b4d992aad227746dbe4cdc273a35bbc62c3 ruby-devel-3.0.4-160.el9_0.tuxcare.els4.x86_64.rpm c27ee591daea2ecc7648ba2425030d1b9152281089d74951fb534d7eb041f0a9 ruby-doc-3.0.4-160.el9_0.tuxcare.els4.noarch.rpm 308e0410df126dac4d19aaa42b4679a4c306123a8ab8544e75866109b83e84fe ruby-libs-3.0.4-160.el9_0.tuxcare.els4.i686.rpm 515475445715ad85a54a4e5af18ea27399cec0163bb5034c612a2438826c261b ruby-libs-3.0.4-160.el9_0.tuxcare.els4.x86_64.rpm 744b3b65a5842d19f14d9633bffaed2d36a61a3ff8bb88bd68d4241f64196f14 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els4.i686.rpm c347b4165dc1e43273c340e0081d516a3eb8bcf48e62093b9edf8d5f093c8e89 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els4.x86_64.rpm 72dae4fa9f5b8287bb8982ed349608bf22494430c51c006e5d5c3b19952f2a70 rubygem-bundler-2.2.33-160.el9_0.tuxcare.els4.noarch.rpm e5a609048ef1aaecf0c1d58e323e67da1fb33e80e05c001535c3b47c7c6df318 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els4.i686.rpm ed4777d45ef59de252743a1df7c1c0086bb46fd1d3147705f61198d4539d8a39 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els4.x86_64.rpm 65011bdd38534b4d5283cb1dec3ebe44e344e0f1ccf98db59d482a6e00c5e892 rubygem-irb-1.3.5-160.el9_0.tuxcare.els4.noarch.rpm 5a87b9d5e58f793e61c011fa57f98ecbd5a2879d641af74fae85ef01bc71eabe rubygem-json-2.5.1-160.el9_0.tuxcare.els4.i686.rpm ef282987179dd53763d9ab79a3bfd50a2f485d10f1d8a0b5578112abac97a8cd rubygem-json-2.5.1-160.el9_0.tuxcare.els4.x86_64.rpm ef07d252abfbc6352acf1f10e5fcc13b91597c28ca85ce1c38bc61b330ece6ac rubygem-minitest-5.14.2-160.el9_0.tuxcare.els4.noarch.rpm 7075e8326a10bac8dd13844eb7bdcc31faa1d8e33e2b281b6d7edcf00743add1 rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els4.noarch.rpm 7bf485e5753de4960bb5c811f99ce25c624a52542169b7b05b371c8761581411 rubygem-psych-3.3.2-160.el9_0.tuxcare.els4.i686.rpm 5e013630755b4907f59598f9d9a74d7480fd7d5c8a2b8dc06984c58a3d780de7 rubygem-psych-3.3.2-160.el9_0.tuxcare.els4.x86_64.rpm c1e90b317afb42d135a613672c71af789d0d04b766a057d43468c6bb35ce6730 rubygem-rake-13.0.3-160.el9_0.tuxcare.els4.noarch.rpm ec30345e734a9bb03b2ab3e6e7efdebb00118f6c265447a865a9d226e248e8c8 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els4.noarch.rpm 6f93fbb4bf1f3e698867a225aff3808af3ded0ffa31fd6a7f3b5718920fb45a6 rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els4.noarch.rpm 276c9702c582b689f54ecc474aeb144d2c1e2fde2c1f125e75e8ebf7a147d130 rubygem-rexml-3.3.3-160.el9_0.tuxcare.els4.noarch.rpm 4d0c43e9ffad8ba852509058fc1145de8ec49ca60e5e084eb311b65506c7fa7d rubygem-rss-0.2.9-160.el9_0.tuxcare.els4.noarch.rpm 2dbbfc352fb405262fd34b272b42b3efdae3b9862c0a9b2e2fc2d60be45560e3 rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els4.noarch.rpm ce7aa2e87201ce563a77a082c4c813acb3eb3dbd3288771f97b448f2d6c38dd4 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els4.noarch.rpm 553f2a42a81ba0aae4122cf1735c8e44165e97722e262de2034e21719dc554a2 rubygems-3.2.33-160.el9_0.tuxcare.els4.noarch.rpm ed45f33de3de2c6580daa32b5abce03c8786714691d9be7eaf1fe51159b18069 rubygems-devel-3.2.33-160.el9_0.tuxcare.els4.noarch.rpm 484c97a6c7c1b216496e37b82cccee7cfcfe35aba969c2a06bdc590ad2f4ead8 CLSA-2025:1746654460 TuxCare License Agreement 0 - CVE-2024-52532: websocket process the frame as soon as we read data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52532: websocket process the frame as soon as we read data

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els3.i686.rpm 0414b22cd661e526bae312d1c6fbd93c7cf8824a3c94d7d5f4bae45db821a170 libsoup-2.72.0-8.el9_2.tuxcare.els3.x86_64.rpm 0b1a388158fe54931a0d1715acf66b1959d2989ee1dc78b5f8f0958c87c5cffd libsoup-devel-2.72.0-8.el9_2.tuxcare.els3.i686.rpm a102244ff8956fb0be8d88a5758f213400cb4b200c3b0c6f7e2240585b09cfdd libsoup-devel-2.72.0-8.el9_2.tuxcare.els3.x86_64.rpm db40ef46c0c14e7c95e16d51b0085491d864fa28dc71f76f475fd21bd8f4dd15 libsoup-doc-2.72.0-8.el9_2.tuxcare.els3.noarch.rpm 668f68c56d138869b5a2f02402aac72e01b9f431e35424d4f134dfa610b01640 CLSA-2025:1746655009 TuxCare License Agreement 0 - CVE-2024-24814: fix DoS when `OIDCSessionType client-cookie` is set and a crafted Cookie header is supplied Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-24814: fix DoS when `OIDCSessionType client-cookie` is set and a crafted Cookie header is supplied

0 tuxcare-almalinux9.2-esu mod_auth_openidc-2.4.9.4-1.el9.tuxcare.els3.x86_64.rpm 2d392d4563be33910ef92d37508edfe39a64b146b03a85e8e96ad88750526217 CLSA-2025:1746655592 TuxCare License Agreement 0 - CVE-2025-30204: update golang-jwt/jwt to v4.5.2 to prevent a vulnerability that could lead to excessive memory allocation when parsing untrusted JWT tokens using ParseUnverified Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-30204: update golang-jwt/jwt to v4.5.2 to prevent a vulnerability that could lead to excessive memory allocation when parsing untrusted JWT tokens using ParseUnverified

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els1.x86_64.rpm 22389a14138728472c5423f00a19d37640c7a5249419c772c490adc371ffeef0 CLSA-2025:1746792031 TuxCare License Agreement 0 - CVE-2024-34156: prevent prevents stack exhaustion when attempting to decode a message that contains an extremely deeply nested struct - CVE-2023-45287: replace big.Int for encryption and decryption Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-34156: prevent prevents stack exhaustion when attempting to decode a message that contains an extremely deeply nested struct - CVE-2023-45287: replace big.Int for encryption and decryption

0 tuxcare-almalinux9.2-esu golang-1.19.13-1.el9_2.tuxcare.els1.x86_64.rpm 33c815e22c2ba172adcdab4657c355982aec14fa76486d758e8f666be4d88fbf golang-bin-1.19.13-1.el9_2.tuxcare.els1.x86_64.rpm f628ac9ba126fbd27493381bc5625e9ac6caa3e6b9d0ae15fa0b69029e8a52a3 golang-docs-1.19.13-1.el9_2.tuxcare.els1.noarch.rpm 566106b377e0349b07a41d88dea69623e6f11037dc8ebbd6e9308d4444714bef golang-misc-1.19.13-1.el9_2.tuxcare.els1.noarch.rpm 6eaa9c06e66af9fb4d088006d8d6f5ee24c37dee38b5dbe3360f4ea49d6e5e00 golang-race-1.19.13-1.el9_2.tuxcare.els1.x86_64.rpm e2b738447c36ca5ecfef0486636382199c3c296319ef86636d52a302981f5630 golang-src-1.19.13-1.el9_2.tuxcare.els1.noarch.rpm 138b313da5a7cdd00e52d3a80c880d60dcfa8ef3cf32e96366da55e845a5d8a7 golang-tests-1.19.13-1.el9_2.tuxcare.els1.noarch.rpm 18d838360dfa9023e298e22538a6ed7db5e93b4486ea1428eb3e881d86a70812 CLSA-2025:1747058667 TuxCare License Agreement 0 - CVE-2024-45336: fix potential sending of sensitive headers in chain of redirections - CVE-2023-45289: fix potential sending of sensitive headers and cookies on IPv6 zones Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45336: fix potential sending of sensitive headers in chain of redirections - CVE-2023-45289: fix potential sending of sensitive headers and cookies on IPv6 zones

0 tuxcare-almalinux9.2-esu golang-1.19.13-1.el9_2.tuxcare.els2.x86_64.rpm bdde3217f147a1f0138a285bc8b482d8e0c7cad4451819fcc844270319b9094f golang-bin-1.19.13-1.el9_2.tuxcare.els2.x86_64.rpm 7678669711a3a11c3ae2c31c62b1151dc9c6c7c0656829da8708a639269ff039 golang-docs-1.19.13-1.el9_2.tuxcare.els2.noarch.rpm cbd4b0e0152a6d4ae18ac98abaf085e6b3702da0c6db375e8ea98db3550d031d golang-misc-1.19.13-1.el9_2.tuxcare.els2.noarch.rpm 76d38cba80f5570216d32fc40e1cc4c15d916c4f41ee28279a713e4b8d26d5d3 golang-race-1.19.13-1.el9_2.tuxcare.els2.x86_64.rpm 399bc98c25266566797d130fbe0f5bbf56801d3a94eea8da6f6ef8bed3246475 golang-src-1.19.13-1.el9_2.tuxcare.els2.noarch.rpm cf548cf0091bb4128428dca0788b6f7b34b6f667eaadf0bf2bf898f97ae36e64 golang-tests-1.19.13-1.el9_2.tuxcare.els2.noarch.rpm 43ebc829516eb9fc2fb83c6f579adf4fe3f75897519f62befed821505b63a5ef CLSA-2025:1747251120 TuxCare License Agreement 0 - Rebuild with new golang version to address the following CVEs: - CVE-2023-45287: Timing Side Channel attack in RSA based TLS key exchanges - CVE-2024-34156: panic due to stack exhaustion for Decoder.Decode Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild with new golang version to address the following CVEs: - CVE-2023-45287: Timing Side Channel attack in RSA based TLS key exchanges - CVE-2024-34156: panic due to stack exhaustion for Decoder.Decode

0 tuxcare-almalinux9.2-esu buildah-1.29.5-1.el9_2.tuxcare.els2.x86_64.rpm c6158a6a247d8614f31658da57b4d0e763f68f21d2467ff7a20133204fa6816f buildah-tests-1.29.5-1.el9_2.tuxcare.els2.x86_64.rpm f1ccca4be6e89521ed562476dd318894379fe745350a8c78a4ea188e22daba19 CLSA-2025:1747251688 TuxCare License Agreement 0 - CVE-2025-30472: fix stack-based buffer overflow in orf_token_endian_convert by adding input validation for large UDP packets Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-30472: fix stack-based buffer overflow in orf_token_endian_convert by adding input validation for large UDP packets

0 tuxcare-almalinux9.2-esu corosync-3.1.7-1.el9.tuxcare.els1.x86_64.rpm 7e86e5f90e1eeb6dd3f45230888dd07d602e9377c26992a61615dfc0d0380f80 corosync-vqsim-3.1.7-1.el9.tuxcare.els1.x86_64.rpm 3cf33ca8ff91442c6aaefea3c3b12035487cf2d33bdb604b468ebdf17333f57a corosynclib-3.1.7-1.el9.tuxcare.els1.i686.rpm 2498169bc55ab45b1f1effe1dfbb6a4375064c1cb0f174803bca2ed4fe0d78c0 corosynclib-3.1.7-1.el9.tuxcare.els1.x86_64.rpm d892fd07042920f8ad47c72e0a079e525bcc1bc32bc5cfce63b1af53b65e0bc5 corosynclib-devel-3.1.7-1.el9.tuxcare.els1.i686.rpm baf1d6b98822f9f0560ed15e655e7a0ad092708d8af589501eb38d0e6a2e8712 corosynclib-devel-3.1.7-1.el9.tuxcare.els1.x86_64.rpm 7166d59ca13d7329969eb7cf826d82273f5765c3da53f27870143a1e5df3fde4 CLSA-2025:1747253770 TuxCare License Agreement 0 - CVE-2023-1183: disable script command file dump to prevent arbitrary writes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-1183: disable script command file dump to prevent arbitrary writes

0 tuxcare-almalinux9.2-esu autocorr-af-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm c9f22f0cbeb91a2df5315789c6593b688343497accef1d2f1d266a71fc28762c autocorr-bg-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 30958d08718beaa57a2124fdac029a483fb96f7526cdbf7d171b886d7ecd638d autocorr-ca-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 04aaa8484558cc2c6fa060f34682892647a1305a8a53bf69625cfe8c46eec694 autocorr-cs-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 55db3a588fececaad5a41b4f870546bb5874218d7529b2de10d8667a182fda3f autocorr-da-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 2fa9d69f38d30d297222a1f93e3152caab3bf6d6eae2089ae8a026888b1aa26d autocorr-de-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm b24bf5957b5e63d2120fcb9e24658fbc9251f2051fe780e14d4f95184d1362a0 autocorr-dsb-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm d90fe448ba862d2c712d686cf61678e4a8010c58a43f74711b9d1c8a0ec00419 autocorr-el-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 97e02877a2f96d70fafa646397580f1e00264b89d4838d525060ca7905f3905c autocorr-en-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 535ae130bd16948e25d22da3012bc9c66bb2ef19f5fc32794c4aa2cbe1f5c44f autocorr-es-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 729ca1daef814a185c4e6566813ec97ed0d7b3a860d6f6f06fb9ab571e6e28b2 autocorr-fa-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 1c3272ac93ffa1379f8059c6a623e76ceea83d5059b6c352b9043dac3f3028b2 autocorr-fi-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm bdae7aff712fbc1f120d3233ba6c2785f8592cf61811641d8685d59bf205a925 autocorr-fr-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm f6658951e8786c7651f2becc97c781c4005d27e9715cd06834aefe82f4e0c69a autocorr-ga-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 4c1dc79313c6ef9f047babb186b6c6a900610ca45f1219a935250d59782f6e86 autocorr-hr-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 01038511838cc73fd3edb0a68d70a26c0cacef66c4b5ce6b32ebcb44d2411786 autocorr-hsb-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 6ed73d0171ff7ebe49f240f467f28d720f59551a07811005f187d0a25cbdf477 autocorr-hu-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 588b3daa4f551513e6a73adf510e20fb668a1c36b59ae444f0c714e7f14d00e8 autocorr-is-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm d29c86a33de7a66f67cb6ddccf87ef298a66153dd7ed917e1b8b6c0ab9203892 autocorr-it-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm da97d676dd5b9d050262fe29869456002dc3e0dbf4b190bc0b1ec12c4da3854d autocorr-ja-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 0c76da5c1d2996708ecea6a26e6b2cda3bf8448ad7e24cc5969197e8664c9451 autocorr-ko-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm c491154a59d881b41eba2ee4f4ed9fa2acfefde37216c8192f6d70917f2130ac autocorr-lb-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm f2307de13a1f5dc130b0089d72f247942639acc898fb0f9c6efb0199f88591d1 autocorr-lt-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 8e2de10b10888dc8757dc68129e5edf38bdd9cf0a82319b6df73449951c46f65 autocorr-mn-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 2ec3e3895c838f95dfe51ccc2f4493d2e039d9965ba8151a205dc55e07928f14 autocorr-nl-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm e7f020ddaf18fb9459856e020ea81f85bd2e228b2d1e7211e4613e32b027264f autocorr-pl-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm d3d71928831c3f44b4dd8fab998e0d441b16f16ef8f37aac4dd391fded484078 autocorr-pt-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 205372a274957c0a868682047c2beca24ff90accef6577dd4ee2181873921353 autocorr-ro-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 0ce21e24012086fad65205594028280ca8d5de3c2eb8b10babdcf6d1da2ea7e3 autocorr-ru-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 239a96498905da5e0be70672d561b81dcd41a75924ab6ec746ad8c7858997933 autocorr-sk-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm fc377c0bf8cf9040d3aae24fe4c72511764b9a8ab1b658d68ca036eb9278b3d3 autocorr-sl-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 83c26a9043ad61f060d3e1881714b0977cb1746304181a0ac0acc2818f24c057 autocorr-sr-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 9dcf8845fd191172449a73bbcaf9d1d93d4e2bed89be19574b9234e948907859 autocorr-sv-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 4aefc1989f1f4ec09ed519d0e7f8935ef9eb25a474715ec92c03b16fa7c6150e autocorr-tr-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 6a698d9d6f6887b644fa0adf450e4a22457758d20db5811883902d12e01cd146 autocorr-vi-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 232c670059b24c214aee4201989fa1842e2c98f07795660ea206552ec22cf40c autocorr-vro-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm d72d2fc14291b3a899114f508b5e86793c4a08aa77f65853f4f984a4af760139 autocorr-zh-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 57e22035e00c0968dc65f6ca2989ba314baebd54d323d72d309af5774bd80464 libreoffice-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 54ab365d0cdf684968863f8c304f005194b8508b6c83c9a29b8855d6c73fc2da libreoffice-base-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm eb1de34099943398d5fa76fcf415e9c7ac562b06dca5bbd28701c85e8053ba59 libreoffice-calc-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 21bd001ced932c1739a33a605841f3faf568a4cb963b81518cff29a8b1fdcf3c libreoffice-core-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 98c71c9e1450ddd6bb87c884d3fef09f5daf70fd410288a0bf63bc9cd0d47fd1 libreoffice-data-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 6a1d73aa14109041433d0e27cc7ba8a790cf3f343d3995f3db6490226fd2e20b libreoffice-draw-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 04734a63665e8799ea884300299543af7daf00cb4526ca933878bf3501dc2487 libreoffice-emailmerge-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 3373345d39c5f2ceea63f018e683ea248b366ea5d3c16bd6bb712d709673a10d libreoffice-filters-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 71c16ca77e74553bacfc47a5610945e6075e3ba7305a753b4bd637fd2b3778e4 libreoffice-gdb-debug-support-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm e1ccfffda036f76fd4a590c30662aae8fcf35c19cfe978fd06fe41b06b711a89 libreoffice-glade-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 3fe7788b0d04479f469858cbe011f8f068c1707b8f7133fb63e7a744ac376816 libreoffice-graphicfilter-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm b7089fbd0856faf844abef2b581a925a9e2218e86dcf5dd6d6190a502eab6c0a libreoffice-gtk3-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 655daa794ab48390d84220bce26199d9a8e85b5736f0032877e219b231e2a8bd libreoffice-help-ar-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 05415347a913602e06b9a86547c245ec03e88fa018d2179a93e2237ed8719d1d libreoffice-help-bg-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 77a63ed3e3def76755e65f7e965fdbf15ebb4cb24d4ff8f2807091dd8c7971b4 libreoffice-help-bn-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm e4aecc045763475c56d3c66f77c0145cc2d2cb03a744dedf4b0fcc1d1e5c1055 libreoffice-help-ca-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 25e495e39b88e034809cc8c3b6085f8c986d3e0cf5353f73e54ab4153a970713 libreoffice-help-cs-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm c24708c20caee8eabda8d8a7f520cc2c8c332bee4c68dec60a5a95ece674aacd libreoffice-help-da-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 81e867ce59827908d58c3880b98d9dd52b08f55775751683e9243f32820c8ed6 libreoffice-help-de-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 7f3389ca52f6b46030ef9d4cfaa2014457c569d6af0332ee938a95b8edcf8791 libreoffice-help-dz-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm d04085a5d694978fee146631731466188ae15535a5dc33dc7f11f643ac5cc1c2 libreoffice-help-el-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm ac09e7a433be971dab679d64bd7eed22a596c14b409ee2ee70e710970b5548fe libreoffice-help-en-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm b1b685dc16a82a106669d353390093f66af7a68052cb8236ad09ad26620c61da libreoffice-help-eo-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 84c6568125a6232d19b23636506895f7942768c24ce71e1014a0b255d215b93c libreoffice-help-es-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 32d0d11ea7d2f4c265dc52e5c8e34e14d715f0a7b83a802478884ef522a16893 libreoffice-help-et-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm be78b0e6d82dea30f069604019a48cb3652f16952c4f4123b30c184d6f11147b libreoffice-help-eu-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 4004bcc39138bffc318ecc530a6f0e67bf396fdaf0522aaf7dba6573b406f500 libreoffice-help-fi-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 7ad32b381a0533a6d986903c43980d8c3f8b55bc0ef4a7c501e88254391025c3 libreoffice-help-fr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 594c8fcfb28513fa64259d76ccd1e9eb92bf68f0c107af9e11e9da366adab5ac libreoffice-help-gl-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 038d6122b45fa75a7fb6c09add939bbb29822b97970bed22f28a1e1f0f93db0c libreoffice-help-gu-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm da9a381c9dadfe70454c1f9ec1d29b5ab457ba23c4ccecd6c1a0f7f9d9e49917 libreoffice-help-he-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm e79b03e0e2536fadf06484c48e0b3d635710f33f773ed712132f49ce90f5a250 libreoffice-help-hi-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 5e791b5bf9a5d09b68609e2ebaff8938131416f0e6ff3657049fd24c5829b6dd libreoffice-help-hr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 4df0f7548c6b9a27b84e26d3a4bbb3d04084d1c7fc78846dd597eee0ed619c3b libreoffice-help-hu-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 33b6ffcfc47957459763351d6fdb9664f23333d59df58e7203d7217315438ab4 libreoffice-help-id-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 6871c1b08781d830fadb8fa87c934b102a4271131e21ad48a9a5dc5da0b69840 libreoffice-help-it-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm a3c63daead133f4ac1fbf9d7038e3e4950b7872a13d04511324958b15dfbed38 libreoffice-help-ja-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 7d44959a47ba2159aa2b60d1ded749e49eced01eb117e024d32777cea5370efc libreoffice-help-ko-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 72b719cc09151deec4b97770f72792e2de291e907385e370cecc2dca1ace0cb4 libreoffice-help-lt-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 50fbe68d7a805922927a894116f1b519cda57aa9e02a541be36aba923bda9334 libreoffice-help-lv-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm bd91f05dab9e76f69ae20931767be506853b54dda671d154057149abba57a0df libreoffice-help-nb-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm a1ac74906d9c1e3ff6b5dab2d3ed728840578944110e6303203497b9ba3bc93c libreoffice-help-nl-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm ec875b8ce9410519baf0a12b8aef9106c186e5164d3e056765d2287fcc0358fc libreoffice-help-nn-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 107d8a54191d771a15dd5c8083f093e42c7373e2092b6231aaa34ea22062aabe libreoffice-help-pl-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 64f70ed7badff43c584e2772104f285f746e2b20ae6d54d3a4542c58bd37a9d6 libreoffice-help-pt-BR-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm f1c7e3d7b09cef42e7bb73ffb8e942609a11d728f41a9eb558f4e79fe6855d23 libreoffice-help-pt-PT-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm ab640433a5b79622849c224ac93551341b79ad8e48baf548d151aa80eaba66d5 libreoffice-help-ro-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 8add656c0d3371938f4e792d1bada9e810405b42ea2962f48941d441b0a00055 libreoffice-help-ru-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 850ca36a2611d0e73abdc11ae57cb7fc5519a0525435d11c1886c2edc682c2bf libreoffice-help-si-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm d5ffde502e42d422c469fd0e8eed5931ab4c44e622fdd28d393f144671dee822 libreoffice-help-sk-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm eab7809b5098d1cadb75cde78e68cc9cc8e41e1d5ce123ba879366d4d3e25b62 libreoffice-help-sl-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm e43579c0b4a068daea160fbf4d4581bbe1b379ce39a064bc48a080a7df7f7d49 libreoffice-help-sv-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm f3f6f41321cd97fbac649d5aaba8c50bf6167bc5c4188d217bcf5ab1f49638af libreoffice-help-ta-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 2a973ff575fd47f9243920a0327209586ba9e41d56c53079a2e0c5991932f156 libreoffice-help-tr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm d28448ddd945cc624c3782872f17361ca81617208238665e2f9067d054bd2612 libreoffice-help-uk-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm bee6ff497559307251d109ee28b31421dbf71f1ad66671f04591c345615baddd libreoffice-help-zh-Hans-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 6b023a516a50f5f8b8762d6be167b3786702f48e2c095d65bc65303b46a3e2aa libreoffice-help-zh-Hant-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm aa5cba63598092f547652496aa3a21f5dc8d22e9bd693546e754a9bc2ad5680b libreoffice-impress-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 05637e2f031ab3f2ce25674bb9e022ebc53aee2fdcb98051f573cf900c5ebe96 libreoffice-langpack-af-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm ecb1f76a024bf6fd91b8a937f2ba8b32cd94f11ccf96078c9ad33a49961202fa libreoffice-langpack-ar-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm b1eb6af1f7c827eee9be02f3301f06c931f1baf4c2a352c102d01c711b367d92 libreoffice-langpack-as-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm f0ccd5aeaedc14a1e25ba7c0be42c33788502860e1b0b5a828d622448978b455 libreoffice-langpack-bg-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 43b737b265348644aea3c15687c3f6e4e37a3071bd737f33c180d910124d0ea6 libreoffice-langpack-bn-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 165c6966e1e13443c043d88668f592879822bedfb499317639d6e0c6dc15696f libreoffice-langpack-br-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm f655b03f706e03382caccf59c9eeaa96c5fed3c9bf4b9e644e415f91867d1ae8 libreoffice-langpack-ca-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm f5cb2ea5d1db48effe12d71e8ae5bab6f0f94a0f397c3977f5f5530b7f6a765a libreoffice-langpack-cs-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 308b90756639afae5bd091e6d9edf48f5b36126f3de170f91bb48f0c7c21ff3d libreoffice-langpack-cy-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 90e6c8eee03d07d46807b8a99696663c942263ed3410df74788c458ab7b38660 libreoffice-langpack-da-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 8fdcd4a6a87b96e89796400c3a7f0fbb286342a13da7db5de98bdd5b66093b1a libreoffice-langpack-de-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm bc3cea6bc57c61251312af1251d57737b761cd77c2e0f9172be6c6213cb522f7 libreoffice-langpack-dz-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 6bff8c093a1b22688b6f099f5011111e2fb43d3ee2d8e30ea5dc8016a2b8ebb6 libreoffice-langpack-el-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 1d8647eaef8fe450b2f0f7a289d29d54dcdfa778cc9ccec402fe3d4fb242d3a3 libreoffice-langpack-en-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 0ad1dcea2303815a726d371a09e596b336e38d81f04a15ad1e0cf41e59b9eb4f libreoffice-langpack-eo-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 044777283045fd812c2ee30ed78a0f4517d4ca4da8374e3d4d69aae0ec98acab libreoffice-langpack-es-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm aa7f752b960cfe72ffb53fce2860704333dd6aa82ee7bee4cddc1853a50f0a58 libreoffice-langpack-et-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm d32bb1b1e5c759a7dd03b0a36574a7b121b3994ed7b29dd7d23802a3d434d1ec libreoffice-langpack-eu-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 3a838abf63983eaaef0b47f0ffc48527f6688fce2214945a31c057d0d771146c libreoffice-langpack-fa-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 2d4b5ed3fdbffe631aea1a0d35987b08ae18c71cc0509c7c25268c1e9b5386d7 libreoffice-langpack-fi-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 5ed6f68b99b62da76fc3d1e284691051b7f08bfb5f23321eb671d4c8aea6ce56 libreoffice-langpack-fr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm caad691c6e15f2b2f9d2c0d24b3e6626a579848fd1189c3fb7e2635c065bc3f4 libreoffice-langpack-fy-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 5f17c613b0b9ba14544153e08c81db10f914d8e082907893d61e7c9ecd863d6b libreoffice-langpack-ga-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 2217e3f88138a703e5f5e3c49e8115a6a9e68670b8d8dafce9cc43d4b6f85d7f libreoffice-langpack-gl-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm b9f3864989969e874c62656de04ed165d6c176de7460ac37e566cb9ba19ab06d libreoffice-langpack-gu-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 0d80e0c3eac665c5e537255bd6bb7e9b84962b78077d447a58084784a6b800d6 libreoffice-langpack-he-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm c7b4ab805aaa86103d147e92e7aa855c7a9db8e52542ccdbc622cb938bf2540e libreoffice-langpack-hi-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 1049a56d029b19f2e9cf596721889fc205473e947b52b0776726444d7b890d69 libreoffice-langpack-hr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 675f07d1fdfefc26f8f7fde7dad0a4b1d5dcccf54841ad172dae152fb5966bc9 libreoffice-langpack-hu-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm fd10a79bc8c9790155c7e9845a874f8c10ccfdf683f1d5beccc61e7bc9021c3d libreoffice-langpack-id-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm bdc059ba4281caee7b2e4c2b08c5450828ee8d65407e8d007297c99030917d98 libreoffice-langpack-it-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm a6b2e6c7e67e2ee66de4564f739f550f2b20a246d8f50c2910ba35b640ecbb28 libreoffice-langpack-ja-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 454881466ef143ffa4a9224da16f69add86c427055246b80140b8ef4dd2c0921 libreoffice-langpack-kk-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 710bfee453b11b9a7fc29fca798378e68b330af3522bbcacd64964454f0d89ee libreoffice-langpack-kn-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 7a76855ce388a73e6fdc3f8eb25d1e89811162772ffb39a8ab4996dc508eb1fc libreoffice-langpack-ko-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 347631fbf6bb575fea41316faa611a9b86d3a0481fccb706cff8543a38bf3aee libreoffice-langpack-lt-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 1ca49f3c1e272d37e16a826c9924616ff9f5acadfc38085d83efe7e1dfcb72e7 libreoffice-langpack-lv-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm d4fa8ebb5ccb19e56c734dabf94f8eb48e6f66428a45e2dc116902312e69f08a libreoffice-langpack-mai-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm b9a72bfaacfb5b7c56edf194a38568d60cfe0b9c5b0bf454f0feb447aa94e9ee libreoffice-langpack-ml-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm a20b89b762f3a895b94a7b9c1e607920d0513e28e4d73ad7c9ebd7b992fda386 libreoffice-langpack-mr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 516736ba8af44f2ac9c68732be20d5705b903ad988631b417207bc3c17e7d613 libreoffice-langpack-nb-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 2334298cfc487281d1f49d56385d0db545d66e2841c63c949d6c2e6fae668a1d libreoffice-langpack-nl-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 8a9d32f708ce82f1cdc7f90b3693098219ac3ecda8010b59122db5dbcee59015 libreoffice-langpack-nn-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 34519fddeb8899364c4730300c9ee426fb4233039c41728a2db5b0e28ce8f1f9 libreoffice-langpack-nr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 6bd5b10aad9ccf0556ea61144a37d36602ccd7c4ead85bee138c69831a9724d2 libreoffice-langpack-nso-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm a026f35f215a9856e0ab7863804cb7861d911aebc7d43a76a7f9dcdaec67d77b libreoffice-langpack-or-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm bb789afe989fab629db25eda917989773f053526e795b865801ef8bdf3c8fa6f libreoffice-langpack-pa-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 426c93eff7a55a8082e9af2f69af20f0e44ec46e3d9e579a1d3b628b436491d2 libreoffice-langpack-pl-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm c3fdb9b5a78de79fbf12f3e1761f7d27c0ea81fc16c1286eec5b1a2c5ef70c31 libreoffice-langpack-pt-BR-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 4c66d213fbaba4781dd4d562e2908b1ee4f5958f35dac29378c91b409ac94a0c libreoffice-langpack-pt-PT-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 0d0bc33141fda32aa898543de55285ba9b39088c36331f2db37feb4932bba765 libreoffice-langpack-ro-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm dcb98ff4edf0152c061ac82aa6ab837eba95a395484bfa5292b6f336515784a8 libreoffice-langpack-ru-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 062b5ecee41d0197a40fc037d80d1089c7f621ddccee1f98fe0beecf1f6111eb libreoffice-langpack-si-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 31bf879f26f831bc95bc5ec88d8e8c1bef191f1ea5a68309abc04425d193e746 libreoffice-langpack-sk-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm cc6dfd5a0d714e3f8e873967655b0279accd452572860768568e833a23c8b8c0 libreoffice-langpack-sl-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm a77c8e81c17fae7fdc8345e4a153e7f59923836698afbd8f19d3d723b99aaba5 libreoffice-langpack-sr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 7d52a2c1dc4e85d3e616d4c5e1b96d7306227adf49ec4de0e74ac524ed870a1a libreoffice-langpack-ss-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 92cbaca0a2c7f3be4102a41f05ac61fd5dbf830e7718d6bb68ded04f346e430f libreoffice-langpack-st-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm cd954de91113142d7edc781fc76c0f29267db2e483474c9433be27c6494e3adf libreoffice-langpack-sv-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 9dc1b3e12729e322a4f2914053b1a971b3f830648cd57cd9b1a648bfdd02f636 libreoffice-langpack-ta-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm d8f9eca3f16037dc559ccbce3f1c1fd645e41c233b69522606ee6ebf8decdd5f libreoffice-langpack-te-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 02db28d1ec17f1f497abe314f1a77f1a0e42671e702639cc90d41bb862969c16 libreoffice-langpack-th-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 728a98e6312e1fef21f3ab60cdb5d0ff0bf36d546c59e6ea783a62e1e2fc8674 libreoffice-langpack-tn-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 3647273ee9018ce556fb33ea4c608f7e131eb9f20c06fd6b278be80e6f47d996 libreoffice-langpack-tr-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 68b0e5258cfd14c22cf7789f0e52a87aa6911d3dbd74d5f848d02b87d8d254b5 libreoffice-langpack-ts-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 3842305b4795211b1c4f7e59d601ac0a0f9b47880df01e246755151c8728aa95 libreoffice-langpack-uk-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 2f366dfac2b5e865c383227558fec8a4fe346d7fa07e396f652eab04e7188d9b libreoffice-langpack-ve-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 308365980e0c5a297fcc1bb93e8b067b83d909b644b5c21dd134823ac3fe8236 libreoffice-langpack-xh-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm d465ac42f6ce9bafa874ebb40a606d137984d7edf9facaa08eb5c1de3d870a5b libreoffice-langpack-zh-Hans-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 6f25ce67b80dfde0fc6bf3e73ec18da7a16ce4accf2d9464fac631936472d2a3 libreoffice-langpack-zh-Hant-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 348485733f1ff5048d58a0c7601e8c4290888ac7808dbcd5146b93dae02a1059 libreoffice-langpack-zu-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 30d2c4322c32c44c0684ede3ca329e85bd5e626f635260864f4665f7bc128a61 libreoffice-librelogo-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 99ea4f8ad45ace0bf49fdbfc16fcb4c4242f9228ed236436e6d4672775abd7e2 libreoffice-math-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm beb951fdab54e17e5049eaec0ed6ccf66a524a7169932e313b7dae77a5d120a2 libreoffice-nlpsolver-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm a64794baa052590b0a15b1eaa3ee64a5e9b10727122e6017e53316ee3dbfb89b libreoffice-officebean-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 8dff45ea2efb02b7859d7fd88873ad2e618783d3606420e0ff45b3b79d26f07b libreoffice-officebean-common-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm cbb1f3be39a7bbf149e675c65da0f9aa725b3ccee93a35d6222be90f37b8412a libreoffice-ogltrans-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 88dc24c898f362cce51468837298b7e6312c34148d48b8bedda5047e78542daa libreoffice-opensymbol-fonts-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 0d9309b3c01cd04bb894542b8eb6e9c50affb631a3cbdb6c684ad84a61070ae1 libreoffice-pdfimport-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm e3471806d95dc3a9be18a54cfbed43051c94a9444f51f9ed6ed5d7d3b9b0c647 libreoffice-postgresql-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 792c74e6f5186d7b3ab787c6d33f22c827b6d306f786b4d6de7881bd8a64dfe9 libreoffice-pyuno-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm dce886dd933c7e1e4e410e26468456d04dc262034a23f46043498eb9f8e772e5 libreoffice-sdk-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 5f998598c1f9c47d1ee0202f93405172be0ed0c79b31d6922c0e83be3fe1ca43 libreoffice-sdk-doc-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm c7634584fcea68b0a5221ee66231efa2612cb6bbf0a8b7e129f861b8d4419aff libreoffice-ure-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 32105e8a50c990a5856bdab47e7b0ff114304bc43fa9c61314c0b9c5ee37d43c libreoffice-ure-common-7.1.8.1-8.el9_2.alma.tuxcare.els5.noarch.rpm 338247560ffef56183a9b89637355fec6dbd0217d7eaae2d26972431c2c45011 libreoffice-wiki-publisher-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 66899c706b3c22c4b2b7d3d5c6af244f612521edae35e498dc6bf272c1fc8e73 libreoffice-writer-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 7398acfd93c647374f4c86308ca8fedcb3afc9c7f74e1f8b194432a58a22a547 libreoffice-x11-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm b3c72e71d29f7ff6085908221ca8c5f69c0f73de2df207ba69a7717d5a6a5950 libreoffice-xsltfilter-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm ccfd609cef3e86ba54fd5f28a071bb7b9685c7b1325994f089bac2fec4471b85 libreofficekit-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm 0c53f70095364cb12c02494172c16d1add835ccf18b27dd7e96fae97821bfa67 libreofficekit-devel-7.1.8.1-8.el9_2.alma.tuxcare.els5.x86_64.rpm aa77bcb0112d42d1677b7ce31d62095e4d511ddd2f54d8980aa94598912e8bac CLSA-2025:1747430870 TuxCare License Agreement 0 - CVE-2024-47175: prevent PPD generation based on invalid IPP response - CVE-2024-47850: do not generate PPD for remote raw queues and add system-cups.slice Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47175: prevent PPD generation based on invalid IPP response - CVE-2024-47850: do not generate PPD for remote raw queues and add system-cups.slice

0 tuxcare-almalinux9.2-esu cups-filters-1.28.7-11.el9_2.1.tuxcare.els3.x86_64.rpm 334c1b84137ac6bfc20845888225cfa03692b8bba72299defa57a2795a77ceb1 cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els3.i686.rpm 87d05855fbd3c43845ce5f05fdc17151c3c90cedbb10e7c987f8f53230f9565d cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els3.x86_64.rpm 619e3656de9920f8b9c76c9da033a0c51a692e1b5bd942d9bcf8ace8818dded6 cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els3.i686.rpm 5848e389635482771835d6324ef9daa495dda68c08d7ad28da7447290a31a54f cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els3.x86_64.rpm fa4199ec801820a9f3475465bec37ea671bb195444e2548c2badc4cf7d56bc63 CLSA-2025:1747431414 TuxCare License Agreement 0 - CVE-2025-22869: fix vulnerability in golang.org/x/crypto module by updating podman archive. Fix the same vulnerability in gvisor-tap-vsock by applying patch for crypto/ssh module - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/bdd4a5f) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-22869: fix vulnerability in golang.org/x/crypto module by updating podman archive. Fix the same vulnerability in gvisor-tap-vsock by applying patch for crypto/ssh module - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/bdd4a5f)

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els1.x86_64.rpm a5fb8ee38a26d5df5b7f2b3879b31e7e69ae1b616fe0b32947d32641d61adcaa podman-docker-4.4.1-13.el9_2.tuxcare.els1.noarch.rpm e94179b0cd9434630a14b99b90c87f0735210275fd3e7f606afa6139e116a07d podman-gvproxy-4.4.1-13.el9_2.tuxcare.els1.x86_64.rpm e87792dd4d0acdcffdc86c1fb78d0c363aa70d7a0e340fff74744376ef914aa9 podman-plugins-4.4.1-13.el9_2.tuxcare.els1.x86_64.rpm 2aa0b0a977f5516b21dc9b809c63ea3d21172ea4fa8f04be72e57af03a56d479 podman-remote-4.4.1-13.el9_2.tuxcare.els1.x86_64.rpm 899011858481b1a4ff9d41f8926afad0d561394d7586893ae884d7311709ca48 podman-tests-4.4.1-13.el9_2.tuxcare.els1.x86_64.rpm db062246493d2894bb4cb7f7b30ac88979d63dd34122147df53f965a691fdd2f CLSA-2025:1747432102 TuxCare License Agreement 0 - CVE-2024-10978: fix privilege assignment issue to prevent less-privileged user from viewing or changing unauthorized rows Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-10978: fix privilege assignment issue to prevent less-privileged user from viewing or changing unauthorized rows

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 01b2ea1752b05f3e419ac61f296b043a162d8fc1c9eba81817c0126d59192bda postgresql-contrib-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 1c9f9d74ffbded80f65c1e27d8a65d63003f2d3883c413afc5f6a27f7b027d5a postgresql-docs-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 2ed6aec20f0cf114c7c3b9173bc1eddf8924dbe64addb1f39f611588ba6336fb postgresql-plperl-13.11-1.el9_2.tuxcare.els9.x86_64.rpm ac2bfabbe0cf6e539266fa55cbcf18224ee13cf25b3f5776e17acb64cbf45a59 postgresql-plpython3-13.11-1.el9_2.tuxcare.els9.x86_64.rpm b55d20e76fab0c4bbe4c0dfe3996c03077f5443ad1fe4afe626bbaadb69618d2 postgresql-pltcl-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 67bc7fb994d351982a06874ba550380930ce4bd3819923609ba85ac179b2354d postgresql-private-devel-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 0609c3bde4572a7a0db227b36ec4a37fea3dd6fe7756f5e4e5497cb7df57aec7 postgresql-private-libs-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 6f6f5123dc45b67e2e0d2ef80e2317d4b4e581071768793de2c6386fddc0ea48 postgresql-server-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 08dbc5dd4a204d360a0f40c914bcc83ae24d7d67810a4a4a373a5259efad8f84 postgresql-server-devel-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 9cddba353301ce7ec149c55b02d8795b22a072b63758487c577cab816b704d7a postgresql-static-13.11-1.el9_2.tuxcare.els9.x86_64.rpm b4cfdbaf279da38716be1f506f119af033c6f28760a7346ea9c57373ae71c722 postgresql-test-13.11-1.el9_2.tuxcare.els9.x86_64.rpm f27b63cc99b6adf4ce4c9e3395f0f65d817151e5d7dd41c12a91ee13bca6e0ca postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els9.noarch.rpm 97ccf5d53bc03f6652708d4ee893d1b9f73334f9d0d27ffda2750573a92c43ee postgresql-upgrade-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 8e4b65ca61e68fff37d50c77da02967e76de27a077985703ffe86cb23a6681c3 postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els9.x86_64.rpm 2f4c8a031a190d0fb4e62ddb956612a967b4e00e8724ab0b901272fa6ccdfb70 CLSA-2025:1747725447 TuxCare License Agreement 0 - ext4: fix OOB read when checking dotdot dir {CVE-2025-37785} - wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572} - veth: Fix use after free in XDP_REDIRECT {CVE-2023-53107} - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() {CVE-2024-53068} - arm64/sve: Discard stale CPU state when handling SVE traps {CVE-2024-50275} - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969} - wifi: mt76: mt7921e: fix use-after-free in free_irq() {CVE-2024-26892} - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read {CVE-2024-58069} - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() {CVE-2025-21927} - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - net_sched: sch_fifo: implement lockless __fifo_dump() {CVE-2025-21702} - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993} - vlan: enforce underlying device type {CVE-2025-21920} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - watch_queue: Actually free the watch {CVE-2022-49256} - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - netfilter: nf_set_pipapo: fix initial map fill {CVE-2024-57947} - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations {CVE-2021-47098} - aio: fix use-after-free due to missing POLLFREE handling {CVE-2021-47505} - aio: keep poll requests on waitqueue until completed {CVE-2021-47505} - smb: client: fix potential deadlock when releasing mids {CVE-2023-52757} - cifs: remove useless DeleteMidQEntry() {CVE-2023-52757} - media: uvcvideo: Remove dangling pointers {CVE-2024-58002} - media: uvcvideo: Only save async fh if success {CVE-2024-58002} - media: uvcvideo: Refactor iterators {CVE-2024-58002} - drm: nv04: Fix out of bounds access {CVE-2024-27008} - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780} - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array {CVE-2025-21785} - net: rose: fix timer races against user threads {CVE-2025-21718} - media: uvcvideo: Fix double free in error path {CVE-2024-57980} - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791} - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858} - afs: Increase buffer size in afs_update_volume_status() {CVE-2024-26736} - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664} - bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- ext4: fix OOB read when checking dotdot dir {CVE-2025-37785} - wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572} - veth: Fix use after free in XDP_REDIRECT {CVE-2023-53107} - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() {CVE-2024-53068} - arm64/sve: Discard stale CPU state when handling SVE traps {CVE-2024-50275} - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969} - wifi: mt76: mt7921e: fix use-after-free in free_irq() {CVE-2024-26892} - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read {CVE-2024-58069} - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() {CVE-2025-21927} - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - net_sched: sch_fifo: implement lockless __fifo_dump() {CVE-2025-21702} - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993} - vlan: enforce underlying device type {CVE-2025-21920} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - watch_queue: Actually free the watch {CVE-2022-49256} - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - netfilter: nf_set_pipapo: fix initial map fill {CVE-2024-57947} - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations {CVE-2021-47098} - aio: fix use-after-free due to missing POLLFREE handling {CVE-2021-47505} - aio: keep poll requests on waitqueue until completed {CVE-2021-47505} - smb: client: fix potential deadlock when releasing mids {CVE-2023-52757} - cifs: remove useless DeleteMidQEntry() {CVE-2023-52757} - media: uvcvideo: Remove dangling pointers {CVE-2024-58002} - media: uvcvideo: Only save async fh if success {CVE-2024-58002} - media: uvcvideo: Refactor iterators {CVE-2024-58002} - drm: nv04: Fix out of bounds access {CVE-2024-27008} - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780} - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array {CVE-2025-21785} - net: rose: fix timer races against user threads {CVE-2025-21718} - media: uvcvideo: Fix double free in error path {CVE-2024-57980} - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791} - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858} - afs: Increase buffer size in afs_update_volume_status() {CVE-2024-26736} - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664} - bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099}

0 tuxcare-almalinux9.2-fips bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm bca2f86066a849dc93b74d27213902212a1576011ec6c49323fd5ba4d9f20d1d kernel-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 47bfc57dab6e29a8a5a4f5a518c0ed6040290b0aece7ca21b4271921e2d93a26 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch.rpm d9c080c26e53d2c7e2163925a2a21503a589b2c39e3d43b407df54559fd2a612 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 012a717dfe2685c7cccf28612688ef2cfba02967f82780dad325249a30524e19 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 3550d72baab2dbfc19ed976239797b5e2df41dabac89f63b6a9dd98a665ee595 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm b26984c6bcab339468acc70573d1582316a4403c198cc43d9e029244e48c54f0 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 08271e12b49c9b58ba1b10bba472a4893505b31d676f0450b65362e8ebd095b2 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm e8cbe2d769cd844aa77e37eb40d8b9cf644f9c46b17a68c0f74533d2cc29b8b3 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm d695ebfcd4605c0d2dc9f4d7dfe80e28d975fe34f403bf3dfa2a950a67e68018 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 8c3cb2355bb29c44ce1ccda4a60b7168e0dd5ab4e08b9a29a0f46dc159fba3b0 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 2021585f2911e31216101b4b02dd7e4e93716157618c0b019fa9fcced241f8ad kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm f72fc082bbf176905dfc7f0eed114567d94cfc028a87052b115e69f26a3934ba kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 2692abe57bd726dcb7da6457b93b9c745576546fe379ff41c31c6fb02258604e kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 5b5754301b3f93caccac44fca19dc5834684708c09cdbf8fe7346784e85dc410 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 9e9296dc6bb1ce2273c44ff9e9a836422a327243a18abd069e5f68c42cfa16e2 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm bf5c0b965339600ac3a0cd9152f525b136571a127fe2524f23d8ec5cc534804e kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 98079cb0ab952a7d619e2011b766e597d5499edc2b0831090e58986db9079483 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch.rpm dac775526a0e5e6c29e0373613bc8b06b89e9cf9e9266d1c22a4b6b3497a9292 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 2aebe4a06cda87fe69e4a1b9f6e7300d663328168012e97184cbd02239af109e kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 92f7da9081ae1c70ad4002b67b6e3806b775d73b2396e417e8e3044936aac393 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 6d307d2f3e3011f7b16b27d46bae30714be5bcd962a2bded1cfe1d6d6220245d kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm fc28a5d73109287baf51207042d2d6c45898224515e4d62580bd2d9212364ad0 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm ba286aad101d00d90c8cadcb39f29da2751af937a290edaad7fdcb210a53007d kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 12929ffb509406bcd8b3e78efcadccbbae7ebf89f7985b17d55347f3216a6467 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm af564de135747a34c687a4d79009786d3244153191d2a24810b1681eee25f1e5 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 8adaaf0b4dce9d0e2f3f33c1318d15e0e12e4ebd1459843db5f977ad4e89d997 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 58629236700130d439e2a0c4c622cf80b42f32aad5ec4d723c9673627852ce40 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 3bf2078df8794124c07dc0bce40241032e18727c62e15189650784aff7986bbe kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm a006f2fef8b902a4510ff92223171a917e3b5d254fb68d88565d6000992c9690 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm f48cac7a03df72965697860c80bae3e88b37fe6ab3c8bd11187a104824d01611 libbpf-1.0.0-2.el9_2.tuxcare.7.els13.i686.rpm 6669830c6036dd17fd2dec9deb765adfd526e25e1439e722cf6e0c13f1154480 libbpf-1.0.0-2.el9_2.tuxcare.7.els13.x86_64.rpm 2a39554619185567379d5d7864440b980e05f3e9d91ed87ba0adbfe2712e9623 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els13.i686.rpm 0e3b894b41c27c8ebec5a9f3b0b72fa28114b81cf1b218b728ee87bffa3b861a libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els13.x86_64.rpm 47157df8720f5173b0637cda1d4a8a2c46c2d8f13dd6187b4a93c699171b7cf4 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els13.i686.rpm ca442951edefd50c436acdbce18421d0c8a62bd12a13e8c99418a56f47d85b2f libbpf-static-1.0.0-2.el9_2.tuxcare.7.els13.x86_64.rpm c0d949ae11b4636b1b3578c400152990092f550b650ef7ee2504eb967a9f8b60 perf-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm e33116634ca648df03055b86f4f7efbe708c06d98a731cf4ede873ba48156b7d python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm e32a27f3500eef851d133ed328bdccc103023de1f50ebf856da27959634fa723 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64.rpm 9ddc14932c4be268c7473ac1a98caa63e92f36e426cfe622f63cb4bec8f65092 CLSA-2025:1747739502 TuxCare License Agreement 0 - Remove old firmware versions: 06-8f-04, 06-8f-05, 06-8f-06, 06-ba-08; None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Remove old firmware versions: 06-8f-04, 06-8f-05, 06-8f-06, 06-ba-08;

0 tuxcare-almalinux9.2-esu microcode_ctl-20220809-2.20250211.1.el9_2.tuxcare.els2.noarch.rpm 2d4e47a52ea4c5a8a7df917e85a43b69eedf8ba06ee3374051609916fc5c0cf1 CLSA-2025:1747903049 TuxCare License Agreement 0 - CVE-2023-48161: fix heap-buffer overflow - CVE-2025-31344: fix heap-buffer overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-48161: fix heap-buffer overflow - CVE-2025-31344: fix heap-buffer overflow

0 tuxcare-almalinux9.2-esu giflib-5.2.1-9.el9.tuxcare.els1.i686.rpm 7132572962c8d55a79b783dbcad5669fe2abb12ffc52800a07549bd3bda029f3 giflib-5.2.1-9.el9.tuxcare.els1.x86_64.rpm fe485ae7cdaf8a654ea05817fa8df9275cb51ddd194d0bfcdeeab391142d3d1a giflib-devel-5.2.1-9.el9.tuxcare.els1.i686.rpm 943dbafac19ce6953b233b804acc30ed7690b298e26fd81bf9af64829489ac10 giflib-devel-5.2.1-9.el9.tuxcare.els1.x86_64.rpm 3d0f1bbce56dbe0f1aa6c60affb2856f6fbdd4edaae929c7633ba1ce4b87d19e giflib-utils-5.2.1-9.el9.tuxcare.els1.x86_64.rpm 6c8817d2c4e6e37388dfaba9b42f12cfd119508d79fd90838c77ddd98d140e5c CLSA-2025:1747903683 TuxCare License Agreement 0 - CVE-2024-28834: fix side-channel leak in the deterministic ECDSA - CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-28834: fix side-channel leak in the deterministic ECDSA - CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.3.els2.i686.rpm f9340e73e7be7bccca5e9b3d7513eba8c4e8a68f71f2fe4a7ab9edaac90525ab gnutls-3.7.6-23.el9_2.tuxcare.3.els2.x86_64.rpm 78a66eec949b96dd3a35b8ac4806c4c038dafd56a5902b3a14d231308ac041f7 gnutls-c++-3.7.6-23.el9_2.tuxcare.3.els2.i686.rpm 205224758a486a705ed5399af5642828dd259a429209c1add939dd24a9cf9753 gnutls-c++-3.7.6-23.el9_2.tuxcare.3.els2.x86_64.rpm b7875cb0ef0a64193baff277c7a1614601e5e32d404eff5384a9de93a6d5dc3a gnutls-dane-3.7.6-23.el9_2.tuxcare.3.els2.i686.rpm 4e36f6c92eb4cd7f6b725d63a9c730c79cc200e5a6e5ad021fe261c9e1dd8ff9 gnutls-dane-3.7.6-23.el9_2.tuxcare.3.els2.x86_64.rpm 3fa078f575975507b8b0d50b51c3ebc5b9c6ec976b1fb8af86c181543e34b64d gnutls-devel-3.7.6-23.el9_2.tuxcare.3.els2.i686.rpm 26153ace2442fb87e76dd103b3342a25151cc9fc14c0b624bf52d416af100c9a gnutls-devel-3.7.6-23.el9_2.tuxcare.3.els2.x86_64.rpm b22c92756c889a002aedbd42f2b6671caa9ba2b0dbfb516a36dca80ff4bea959 gnutls-utils-3.7.6-23.el9_2.tuxcare.3.els2.x86_64.rpm d3e377546f1d4aac8498dc97ca31afa1864bdfe2e56cdf7d15d7d19036760b15 CLSA-2025:1747998930 TuxCare License Agreement 0 - CVE-2024-47600: fixed out-of-bounds read in the gst-discoverer-1.0 command-line tool that could cause crashes Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47600: fixed out-of-bounds read in the gst-discoverer-1.0 command-line tool that could cause crashes

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els1.i686.rpm 5b712bb4a9f35c18a679d07e4c732f773da6561453034d7e315be600cdcaa9f8 gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els1.x86_64.rpm edfb1dd2d255d34308513ffd9baeb4914ebb694db46b0bae078eb89cada80a19 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els1.i686.rpm 01fa58fdac6030c106e0e59150ca0677b1a133a387ae8c975663a3b13b369344 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els1.x86_64.rpm 4be2ef0555c492d32d5957d266fd87c6601ca4410a32c2d02d461c83f4a2810e gstreamer1-plugins-base-tools-1.18.4-5.el9.tuxcare.els1.x86_64.rpm 5f02471419f2b9535a676e14bd8abeddda3c08ae8be9bf12cfe01015dd4cb734 CLSA-2025:1748001706 TuxCare License Agreement 0 - CVE-2024-47774: fix an integer overflow in the AVI subtitle parser that can lead to out-of-bounds reads and can cause crashes for certain input files Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47774: fix an integer overflow in the AVI subtitle parser that can lead to out-of-bounds reads and can cause crashes for certain input files

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els1.i686.rpm d6509d4339d90394e3ab2238492e8e16c621695f9a7c7baed118080468166d71 gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els1.x86_64.rpm a4fa08de24c71e49212a7ee23b7df77796cc9738ccfffaf612a48afe0abd2223 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els1.i686.rpm 7bd9ea11742291a38425f9a0b23afb71e6ac513e21cb341f406efeee764ea377 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els1.x86_64.rpm faa98361e8924f17c6a5608813344b51cb9c4241e137fdd5804c16236dd3a2d0 gstreamer1-plugins-good-qt-1.18.4-6.el9.tuxcare.els1.x86_64.rpm 9a8c7fba18778bf47385aa5e6ef140aaf15f93ec20ae7fc84c4124bcad67b833 CLSA-2025:1748002217 TuxCare License Agreement 0 - CVE-2024-24790: fix unexpected behavior from Is methods for IPv4-mapped IPv6 addresses Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-24790: fix unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

0 tuxcare-almalinux9.2-esu golang-1.19.13-1.el9_2.tuxcare.els6.x86_64.rpm 33772ccc33fab88a848c0fbf5554ef165445f22ccd405ace796a53fe7423ace0 golang-bin-1.19.13-1.el9_2.tuxcare.els6.x86_64.rpm b9e67252a9a8f27ab36c0bedac763eff811eb11326301a761d37d2a1dda9d374 golang-docs-1.19.13-1.el9_2.tuxcare.els6.noarch.rpm cd7993b8b13ada924b755b6f686055b80fae93d6698919d341e2947c76a0e314 golang-misc-1.19.13-1.el9_2.tuxcare.els6.noarch.rpm d6b17cec3edaa0826cc6d9e6dd6a2760cd914951d1de43b7f7a8b5df05a1abde golang-race-1.19.13-1.el9_2.tuxcare.els6.x86_64.rpm f0a63b62986395c64d3657991138596b18a873ce44c26d10a6e88ca7ef5f8767 golang-src-1.19.13-1.el9_2.tuxcare.els6.noarch.rpm 6fa2e351d459ca62930c540894ffb2a59b7025c9c472686696e96de47475a280 golang-tests-1.19.13-1.el9_2.tuxcare.els6.noarch.rpm c911714e85bd6d2602015b3c268b3e8f380d745de330b503766dec4fc4f8ea21 CLSA-2025:1748625592 TuxCare License Agreement 0 - Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10(ver:0x08701034), cpuid:0x00860F01(ver:0x0860010D), cpuid:0x00860F81(ver:0x08608108); - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0(ver:0x0A70C005), cpuid:0x00A70F52(ver:0x0A705206), cpuid:0x00A00F82(ver:0x0A00820C), cpuid:0x00A40F41(ver:0x0A404107), cpuid:0x00A70F80(ver:0x0A708007), cpuid:0x00A20F10(ver:0x0A20102D), cpuid:0x00A70F41(ver:0x0A704107), cpuid:0x00A60F12(ver:0x0A601209), cpuid:0x00A10F81(ver:0x0A108108), cpuid:0x00A50F00(ver:0x0A500011), cpuid:0x00A20F12(ver:0x0A201210); - Update AMD CPU microcode for processor family 0x17: cpuid:0x008A0F00(ver:0x08A0000A); None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10(ver:0x08701034), cpuid:0x00860F01(ver:0x0860010D), cpuid:0x00860F81(ver:0x08608108); - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0(ver:0x0A70C005), cpuid:0x00A70F52(ver:0x0A705206), cpuid:0x00A00F82(ver:0x0A00820C), cpuid:0x00A40F41(ver:0x0A404107), cpuid:0x00A70F80(ver:0x0A708007), cpuid:0x00A20F10(ver:0x0A20102D), cpuid:0x00A70F41(ver:0x0A704107), cpuid:0x00A60F12(ver:0x0A601209), cpuid:0x00A10F81(ver:0x0A108108), cpuid:0x00A50F00(ver:0x0A500011), cpuid:0x00A20F12(ver:0x0A201210); - Update AMD CPU microcode for processor family 0x17: cpuid:0x008A0F00(ver:0x08A0000A);

0 tuxcare-almalinux9.2-esu iwl100-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm faf0bb7bf9bd86b5df46bd60f1e66c3d26e305aa74c69d9e01208fa8c3569760 iwl1000-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm e33620e8e01b19676f8bd1121a61115e9cd87856695c3451de80e35cf8071737 iwl105-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm e6c3af95a6dcc1e1732abe8d9adaff7aa0c1d3431b7be0012ed2494c5c73e168 iwl135-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm a84b4de7ec46c8a60a4b9055203f04c9a4235d457de095278292c8e54ca26f47 iwl2000-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 4560b4ad8ec95d43bc816ba3e045d3e0a716bd37e87664176ade28b686d50ab3 iwl2030-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm c933a3ade1c252e438a9c045a7996a40fbfbcd88f60312c50f26ef9c5d438cbf iwl3160-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els6.noarch.rpm e88596fffa7f81065a1e3af4f981a7c9dcb1fe69f0996a9edda321159a231f2f iwl3945-firmware-15.32.2.9-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 86964e16291aaa603bda470a310f429071a700b40830a3a14fa9e93cf42152e7 iwl4965-firmware-228.61.2.24-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 88ce826deb9fffe1f1527d24b6430caf9e693f82ba3ccf86b3e61955e645b7df iwl5000-firmware-8.83.5.1_1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 0df1e09f73cd8b0221edbef066fc8da9bad4276a2491c9f480fe2dd9532edf73 iwl5150-firmware-8.24.2.2-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 4e61daa91edf55a52f04f1c5e975f0cbbde4ed3ddf5d1602fdc69a673d03f46c iwl6000-firmware-9.221.4.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 9c701f43105ba28b653831c647931d9df02c9d934a030e81738bb8c58d23c72e iwl6000g2a-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 66c1e299e4e428253031f5a3024fd65bfb63de694caa686b325df6f174032b30 iwl6000g2b-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm f95031931e7f7d2d30188fe64f2d5c2aaa4e095a61c28bc763b8e555aa99b06d iwl6050-firmware-41.28.5.1-135.el9_2.alma.1.tuxcare.els6.noarch.rpm abaf6ff93e082f02edfd57633ec07063fb9e9555ba69b0363f22c4f74cb44510 iwl7260-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 1b4cda2ffc29cd9652af530be67f26432ff25cde94327a7753681e99a55c51ff libertas-sd8686-firmware-20230310-135.el9_2.alma.1.tuxcare.els6.noarch.rpm f03cc87d4e467a6363c5819811bd7ca95c964ffef92c02518fb4d897f29eff1e libertas-sd8787-firmware-20230310-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 936b4562417ca7c2fbf4190f81007133cd101e555b3b023752dd9dcf03d6b46c libertas-usb8388-firmware-20230310-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 1594a8871322817b3b868ebbf4f201fe030f34f0ce6b0539bf515e4ba84e6bc9 libertas-usb8388-olpc-firmware-20230310-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 03777570a113da8b6b474f7fc95e91d406ef52d504e750de0ee118f40b6a9633 linux-firmware-20230310-135.el9_2.alma.1.tuxcare.els6.noarch.rpm 230561ce456e38757471d6773c767c0b73cb3b33f29a6cbd288b3a7a17bd7de0 linux-firmware-whence-20230310-135.el9_2.alma.1.tuxcare.els6.noarch.rpm b9427bee58ae13ebc698c8a835de34e7afe8fe77051dc03c9df8041e6322f7d7 liquidio-firmware-20230310-135.el9_2.alma.1.tuxcare.els6.noarch.rpm a48c359e2607d805959d516b5b73da90cd06e3faec4a3772d719863fdfde9a6a netronome-firmware-20230310-135.el9_2.alma.1.tuxcare.els6.noarch.rpm e57f72a86e62ab9e0f720a35db1aa4ebaf5c65f5362cc30e485e869ddf71005b CLSA-2025:1748626479 TuxCare License Agreement 0 - CVE-2025-24201: address issue with out-of-bounds write by adding improved checks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24201: address issue with out-of-bounds write by adding improved checks

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.38.5-1.el9.3.tuxcare.els1.i686.rpm 152b73954dc87209ad33b2a6d735c205392e6ab0a29525903fffe6ab3e7bcfb9 webkit2gtk3-2.38.5-1.el9.3.tuxcare.els1.x86_64.rpm a821aa74420e4765598c37d2ba46bc5d88462b1da5b6376d7b7d2cbacbcbaea4 webkit2gtk3-devel-2.38.5-1.el9.3.tuxcare.els1.i686.rpm d9a8049b7329c57a0fcd53378094b80abe5b01cab13f0be00abc5ae0fd7f94a5 webkit2gtk3-devel-2.38.5-1.el9.3.tuxcare.els1.x86_64.rpm eea75fca537ecb7ae5ebe61a2eb3954378b2572bd4c82a850968f030a8c9b11e webkit2gtk3-jsc-2.38.5-1.el9.3.tuxcare.els1.i686.rpm 48876387989a8697ae218ad509945e77c2feb80901c4753208bdac922ad7cd39 webkit2gtk3-jsc-2.38.5-1.el9.3.tuxcare.els1.x86_64.rpm 0f0fc8995a63f7bf5a7ee6782b00ccc69f373b9c0bdc62c8dd26c51b7e9ee31b webkit2gtk3-jsc-devel-2.38.5-1.el9.3.tuxcare.els1.i686.rpm 39ee621eb5004eaea9a6629b580e57d5729c8c2dff500567c568cf72d1a230c3 webkit2gtk3-jsc-devel-2.38.5-1.el9.3.tuxcare.els1.x86_64.rpm cec069b452c6ef9918f26756beefc8c22f29d04cbee69d01bef0d22b2efc7521 CLSA-2025:1748626881 TuxCare License Agreement 0 - CVE-2024-24789: fix zip parsing to reject EOCDR records with truncated comments - CVE-2024-9355: fix HMAC to pass initialized length to EVP_DigestSignFinal, ensuring correct output handling. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-24789: fix zip parsing to reject EOCDR records with truncated comments - CVE-2024-9355: fix HMAC to pass initialized length to EVP_DigestSignFinal, ensuring correct output handling.

0 tuxcare-almalinux9.2-esu golang-1.19.13-1.el9_2.tuxcare.els8.x86_64.rpm 19addf64bb07632129c448fbbcc89c1365121cb23625b696c92dfb7fbba5bd8f golang-bin-1.19.13-1.el9_2.tuxcare.els8.x86_64.rpm 7df93356bbabb52464d17c95b57aeb38e7846313cf62691300b035284670fbf6 golang-docs-1.19.13-1.el9_2.tuxcare.els8.noarch.rpm e7f99a25e45c4e6131634cde46437b0cde1af39fa2894d010b0eaed23ade7a93 golang-misc-1.19.13-1.el9_2.tuxcare.els8.noarch.rpm caab8c15dbbfeeef02ecabd44fd7294d901f0a1b60a27156a8250b7d0b60c600 golang-race-1.19.13-1.el9_2.tuxcare.els8.x86_64.rpm 7ee324887f996ae5ee4e151854f1d431704bda47ad41862d9caac01a0b7096fe golang-src-1.19.13-1.el9_2.tuxcare.els8.noarch.rpm b50a03114e1fbea53d5038ec9ba8e63d0570455cc75834363d275e9e699d60ab golang-tests-1.19.13-1.el9_2.tuxcare.els8.noarch.rpm 2e430eb4558fe123a2c0da7d60071c08e39c9049883b2ca0ca3330d15207ed98 CLSA-2025:1748638280 TuxCare License Agreement 0 - CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778: fix various out-of-bounds reads in the WAV parser that can cause crashes for certain input files Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778: fix various out-of-bounds reads in the WAV parser that can cause crashes for certain input files

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els3.i686.rpm 96d59f8dcd16be89eb8f72e66d4958960314ad032c0bca0489af4c452fccf00f gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els3.x86_64.rpm 00ff0116084b37ac3c71d428841d2fde2fc98b4f61ce49e3a90c3dd634b881da gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els3.i686.rpm 85da4c4548ff48d13dd6c903fe2ae3d766c709457342cdf2b43dc05bb17c0504 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els3.x86_64.rpm 50a723e1b057e556dc569264d7637e8d968463845e59be6951ffa067b11dbdc2 gstreamer1-plugins-good-qt-1.18.4-6.el9.tuxcare.els3.x86_64.rpm 2fb3b3c6502350376873fa69488ba4f9a39ec70c9dd8923464aec97d2a51d6fe CLSA-2025:1748638811 TuxCare License Agreement 0 - CVE-2024-24790: update golang dependency to include fix for CVE-2024-24790 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-24790: update golang dependency to include fix for CVE-2024-24790

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els2.x86_64.rpm 1510cd3a3a96bfb43950ec48f31161937740e44b38c4dae77903729cc4c817b8 CLSA-2025:1748639719 TuxCare License Agreement 0 - CVE-2024-47835: fix NULL-pointer dereference in LRC subtitle parser Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47835: fix NULL-pointer dereference in LRC subtitle parser

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els4.i686.rpm cf0fd8ba1a6452b3c50ae8cf819dbd2b7fd51687a9916251b5415b87a13142e0 gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els4.x86_64.rpm 17856c09c1e007e38a6196e74766cb16f1563430644a1f9b5a060751112cac68 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els4.i686.rpm 3b42b7411f5db2634722c57639107e0be4e168438bf92700cce1ea6d804ab651 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els4.x86_64.rpm fc9f32b600e44c97aa20a78f1fca305fbc053beaf7a4de3e6d2b696bc7caf358 gstreamer1-plugins-base-tools-1.18.4-5.el9.tuxcare.els4.x86_64.rpm cd9a8e3bb941af9ffeb3bf213776fd9104e08536721c082d3c6da33186182632 CLSA-2025:1748945500 TuxCare License Agreement 0 - CVE-2024-45341: properly check for IPv6 hosts in URIs Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45341: properly check for IPv6 hosts in URIs

0 tuxcare-almalinux9.2-esu golang-1.19.13-1.el9_2.tuxcare.els3.x86_64.rpm 022bec3cbd8e79a94349347af1d4a26512e9025233124c3c1ac7e736fc8f28ee golang-bin-1.19.13-1.el9_2.tuxcare.els3.x86_64.rpm 64dd1ac576f4ade97b27e5e95f118c95b130e46831e5eb43415c6ed53b960893 golang-docs-1.19.13-1.el9_2.tuxcare.els3.noarch.rpm d89c6bf721a6cb835986f5cb9ec2410e5d6c63cc79fc1106cf3625570690057b golang-misc-1.19.13-1.el9_2.tuxcare.els3.noarch.rpm ed3f0058b03f4188d5e510566c108a091627cdc4576b2773cbe2a492a9518041 golang-race-1.19.13-1.el9_2.tuxcare.els3.x86_64.rpm b5436afedd47572236f588e217923bf4acd493fbfddbc76cbba36182e8af1e73 golang-src-1.19.13-1.el9_2.tuxcare.els3.noarch.rpm bf38b0613df89a102fc4221ac9c5eea6e8b61fd3ae0551eff242c82d026f5ab4 golang-tests-1.19.13-1.el9_2.tuxcare.els3.noarch.rpm 1283fa23dd4db4329fa68b4bfaa4d62cf48250d961dd95652c9b1ca8669ae789 CLSA-2025:1749478391 TuxCare License Agreement 0 - CVE-2024-47596: fix integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47596: fix integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els6.i686.rpm fbcde64098857a0d055cdf0f5250cae570ff9b1c898af4c84541c0e80b05c392 gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els6.x86_64.rpm 79e2e92743d60043c89f6f619b2c9959b936cb6f8537b82586a9aad04df6ecd3 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els6.i686.rpm c58589ea1ba28a36e3e484fac98f9824ed7f83c849b6da677c8d902e35923190 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els6.x86_64.rpm 5265a373658fe27b9dba26c52d92ed32748b1bdf0b897cce0798773b671b3eba gstreamer1-plugins-good-qt-1.18.4-6.el9.tuxcare.els6.x86_64.rpm 7fc4c499aa1b6e73e49e8209402f6f92835acc430435d8df248c389b3388375b CLSA-2025:1749480611 TuxCare License Agreement 0 - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow {CVE-2024-38577} - tcp: fix mptcp DSS corruption due to large pmtu xmit {CVE-2024-50083} - vsock: Keep the binding until socket destruction {CVE-2025-21756} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020} - drm/i915: Fix potential bit_17 double-free {CVE-2023-52930} - netfilter: nft_tunnel: fix geneve_opt type confusion addition {CVE-2025-22056} - mm: shmem: fix data-race in shmem_getattr() {CVE-2024-46828} - nvmet-auth: assign dh_key to NULL after kfree_sensitive {CVE-2024-50215} - net: explicitly clear the sk pointer, when pf->create fails {CVE-2024-50186} - net: wwan: fix global oob in wwan_rtnl_policy {CVE-2024-50128} - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free {CVE-2024-49983} - vhost_vdpa: assign irq bypass producer token correctly {CVE-2024-47748} - wifi: rtw88: always wait for both firmware loading attempts {CVE-2024-47718} - sched: sch_cake: fix bulk flow accounting logic for host fairness {CVE-2024-46828} - fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF {CVE-2024-46786} - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934} - vhost/vsock: always initialize seqpacket_allow {CVE-2024-43873} - ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305} - nfsd: make sure exp active before svc_export_show {CVE-2024-56558} - SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync {CVE-2024-53208} - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one {CVE-2024-56663} - Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006} - net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow {CVE-2024-38577} - tcp: fix mptcp DSS corruption due to large pmtu xmit {CVE-2024-50083} - vsock: Keep the binding until socket destruction {CVE-2025-21756} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020} - drm/i915: Fix potential bit_17 double-free {CVE-2023-52930} - netfilter: nft_tunnel: fix geneve_opt type confusion addition {CVE-2025-22056} - mm: shmem: fix data-race in shmem_getattr() {CVE-2024-46828} - nvmet-auth: assign dh_key to NULL after kfree_sensitive {CVE-2024-50215} - net: explicitly clear the sk pointer, when pf->create fails {CVE-2024-50186} - net: wwan: fix global oob in wwan_rtnl_policy {CVE-2024-50128} - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free {CVE-2024-49983} - vhost_vdpa: assign irq bypass producer token correctly {CVE-2024-47748} - wifi: rtw88: always wait for both firmware loading attempts {CVE-2024-47718} - sched: sch_cake: fix bulk flow accounting logic for host fairness {CVE-2024-46828} - fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF {CVE-2024-46786} - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934} - vhost/vsock: always initialize seqpacket_allow {CVE-2024-43873} - ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305} - nfsd: make sure exp active before svc_export_show {CVE-2024-56558} - SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync {CVE-2024-53208} - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one {CVE-2024-56663} - Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006} - net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 87af002408bc4cb0748508022af3a8dff87de315b62133c9f28fe416f542b697 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 1aed0b91e42c7c67411b8bf7941230c38afa1e17338b519eb77a8a2dc5ffae24 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els14.noarch.rpm 116a52ba7ba81950a0e118539d4fb552add4d807452d94eb0758c90e904ebcbf kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm e8bc94f05d819babf7e8168ead65e4fad5cb1e9ad6902c32c47fc8013d99b6c1 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm b13c60e7a61c605518b711b8a8f8d9b8fb8bcc13570127e6d1864e5603814ee4 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 3936afc141cc290d1d64c49f2ada2374f22c1c35d5b7092047c97ec0a7c8598d kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 0bcd580d0f093206697fa6e6e3dde04e6870dcd57088365beb437efd6eb262cf kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 83692f60bbd2c52a720f2f90906e6cc48e7f3658ea255c06680670d216dbd68c kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 63624347d6dd828a23ee755925b1e296fed4bb1e2962e8e259205e388bd42a89 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 965b4f66950605fd69e2ad1612bd5389efe147ba67a6096ebbb339dd8af0ad64 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 5ef6f807c372864120d3a7198333fcac25765952869ffbdeb62a0e678c41ac25 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm ca4bff480403122330510de46dd78b2b36e15a7b17823b4e2a38fcf9384a5e0a kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 66728fecae17a947884c2a3d7f04ac76e670f3e308b4811566b32565c91b50d2 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm fdeec4b6e762e7da63c92151c5592075c749f0ea7f253cc38ae7496bebc64f64 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm e21775bbeb1b8931b87561ef97592b06d9d2665949b2afa7319f5689f996aa33 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm f1964904baf538e78b857923753998f53bb454d1cd03c9e073541f985861da57 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 08178a5e911a32e0f24c5bae14c83f044481714603bf65cccca8fba5a956ad99 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els14.noarch.rpm 78295966f0c71ed77cc152b363b2fed35da92df27248682e167ccef59f551746 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm f518a3f368f1807b0f54c69e011f667353bfe8d8c183a9ba11644b37e19929d2 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm e8fef771e8dfc959c4ed1714e44863f99483f6eae4fe5788f3fbb2d8ab2f871c kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm ad4e64f365b82835b8cd9a5dea3da19ca7923df885598bd5dca257066aaa7adc kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 5b5780092b5553b966adfa08be6ce15c247ebcf803e1ce2ef8df29d1f17cbed9 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 4cd2f21703ee02f2cf5555d4c373080b159d3643f70aea06eea8bc58e22bbf56 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 5b1b3b067b686520a564d547d71d723f93a961b5309ad517a33bebd3d393ff61 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 0af034ec38adaa3a64758c95fa0db3244be01c13d60564bd0dd990746e6d44c7 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 11d746043917f065fbbc95e23c6286ddc76a50fd26120019ae01cb56d4536b00 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm d21a7eba3073b247d88fbf999672e6e42ef4877b5250802d70350d8aa83c708e kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 13a53a12ddbd88826124529e4cdffe7f6681fd608d7702f434975050c0a8a58a kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 39dd2423446c7c9ae2ed02660b5480ad40196d4f50e6f31796dfc6127e51f633 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm ec40846edb4d6d39bc8e2c3bd6a88b98a1850bf6f03cef7c8f7da07529155b2e libbpf-1.0.0-2.el9_2.tuxcare.7.els14.i686.rpm 69fd7ef274a1cafda4761152e3c09710f7d1128d3199204feef56b86090cb057 libbpf-1.0.0-2.el9_2.tuxcare.7.els14.x86_64.rpm 312652f6a8b7c7f543485218068af127718a680df1bc906cdf8630446af23c1b libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els14.i686.rpm 31b922f25275cd5de57d5d3eb04ac53ebb0b5c4f4a41e32525e3a4130b3b036c libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els14.x86_64.rpm 2155e8f8028721cebda8974facf50670b805619ec54036769612767ad0895de9 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els14.i686.rpm e5c6b3d57af78665e0a108732b2915ef352c4dc6fe556b80c72640b45103446f libbpf-static-1.0.0-2.el9_2.tuxcare.7.els14.x86_64.rpm e6204e4be9b610f633aa314330492c2eaba84fb8113a81114f93c7b459192bda perf-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm 4d5aa82d82797c9f2d090d44fbb95235c203dd1d2ac4cf79d1ad4a1b11aa745a python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm f46900c95a71eb0e72bdf4ee3e3f5f5a10dcf287478651a87e7c569ca2a1e988 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els14.x86_64.rpm bb912abfa55e9e975e494b41dc6e92267ea6aa5200885df89f67389973556cef CLSA-2025:1749505638 TuxCare License Agreement 0 - CVE-2024-47615: fix out-of-bounds write in Ogg demuxer Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47615: fix out-of-bounds write in Ogg demuxer

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els7.i686.rpm b382bedaef82524b3374d37d97eaeebef3276eb9262ed53627d25f3409fd4608 gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els7.x86_64.rpm dcd7727bc2dab8cc21578fe12578f3569c51dddb04e252ea93b80d6451f38c7f gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els7.i686.rpm d17070994d31b5eb115323231bbb7f02d59a5e24bb0ccb79a757535aba634476 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els7.x86_64.rpm a266c01ce003ff8be9533a95f51c233821dfcdc1dc1bb7fbe0b639416ddbbda4 gstreamer1-plugins-base-tools-1.18.4-5.el9.tuxcare.els7.x86_64.rpm be6dd2609eb18435f532e0afbd96e491aeef59214a52d6b8875b097408f01eec CLSA-2025:1749506165 TuxCare License Agreement 0 - CVE-2024-47544: fix multiple NULL-pointer dereferences in the MP4/MOV demuxer's CENC handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47544: fix multiple NULL-pointer dereferences in the MP4/MOV demuxer's CENC handling

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els8.i686.rpm 9b6999dca21c571937211ee44919b28574bcebf805877597f2a6aabead85ea5d gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els8.x86_64.rpm f83f930ed1e8265e2d319d7ea1f3423fe508fa3fa430a52dc74e301d1441dc1e gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els8.i686.rpm a32876d9dfca4ed7623ae9ff8b7d5e63f1d65a4aa89ced36490e3b762037e796 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els8.x86_64.rpm 97ad98e78031faef7dcfa646de22b47c92c5b1bf8ba5c8e69c8a13087d8a74de gstreamer1-plugins-good-qt-1.18.4-6.el9.tuxcare.els8.x86_64.rpm db18a7b27454a900bb01befa7d3c7e62c8573a8680a625f4493028ac85a1f62b CLSA-2025:1749551514 TuxCare License Agreement 0 - CVE-2024-28835: fix memory leak None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-28835: fix memory leak

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.3.els3.i686.rpm 4c2ef80d253519d8704b98a0236431751e8b56e7a90510da214695077243690f gnutls-3.7.6-23.el9_2.tuxcare.3.els3.x86_64.rpm ba444d21408285a7f0579d05aeaa75ec7888c7265a2459d2f1f56bb5c256255d gnutls-c++-3.7.6-23.el9_2.tuxcare.3.els3.i686.rpm e4da4e360eddf0dda6014c3b7f71fe4181fb4be5eed29e2a12deed4437fd9bd0 gnutls-c++-3.7.6-23.el9_2.tuxcare.3.els3.x86_64.rpm e7c65cc8593d119fc71c936cc48322f98f3da6257b82ecb4546759ceaf653b73 gnutls-dane-3.7.6-23.el9_2.tuxcare.3.els3.i686.rpm cefc0ee2691af7a9af79fcfd6d1b0917cc2d00892e7486a9578fa812367e2254 gnutls-dane-3.7.6-23.el9_2.tuxcare.3.els3.x86_64.rpm 9898de85cad41f4479bb40652fc29fd03e736e57ddcf3935c1263d3df19dff75 gnutls-devel-3.7.6-23.el9_2.tuxcare.3.els3.i686.rpm 1aad3620a3c805805ca8581fe04517e91bd6f09cd2d725343ed652147e212512 gnutls-devel-3.7.6-23.el9_2.tuxcare.3.els3.x86_64.rpm 137775892547660719f8e44048f3b926280441ab6313e5f5e144c2774d9134e6 gnutls-utils-3.7.6-23.el9_2.tuxcare.3.els3.x86_64.rpm a2ce7595e4356013c7dacfb9d3abb823c273e34fae6a19eff78f11992555b597 CLSA-2025:1749569869 TuxCare License Agreement 0 - CVE-2025-46420: fix memory leaks in the soup_header_parse_quality_list() - CVE-2025-32050: fix using int instead of size_t for strcspn return to avoid buffer under-read - CVE-2025-32052: fix heap buffer overflow in soup_content_sniffer_sniff Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-46420: fix memory leaks in the soup_header_parse_quality_list() - CVE-2025-32050: fix using int instead of size_t for strcspn return to avoid buffer under-read - CVE-2025-32052: fix heap buffer overflow in soup_content_sniffer_sniff

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els5.i686.rpm 3c0e383fe6c11a44b1d2428428d75deeef9898332789742ac4f20f84e19f5278 libsoup-2.72.0-8.el9_2.tuxcare.els5.x86_64.rpm 3b510d461163ea7b3574a77e96040d0f154a9c204da8bba8ca85b0f7c8405ea0 libsoup-devel-2.72.0-8.el9_2.tuxcare.els5.i686.rpm c2c047182e5b90556c6e5bcf6250a935525fcb6aff0c4120a44113f63857a884 libsoup-devel-2.72.0-8.el9_2.tuxcare.els5.x86_64.rpm 2159cf9a6454fea2133d585f6a207544ed00514169a482af1c3c17201f85c89f libsoup-doc-2.72.0-8.el9_2.tuxcare.els5.noarch.rpm 2db1ec299a80b830f18112d0218a2da721637cc4dc863700fcf67b8aabf9113a CLSA-2025:1749570526 TuxCare License Agreement 0 - Add a macro to disable portable build - Relax BuildRequires on exact portable versions for compatibility with internal build system - Include missing portable package files as sources - Disable debugsource packages for portable builds to prevent empty debugsourcefiles.list error None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add a macro to disable portable build - Relax BuildRequires on exact portable versions for compatibility with internal build system - Include missing portable package files as sources - Disable debugsource packages for portable builds to prevent empty debugsourcefiles.list error

0 tuxcare-almalinux9.2-esu java-1.8.0-openjdk-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm c20ff893fcd920252dd97b6903c41bdc02d00c0949b9ba81c4c9c11976a2e977 java-1.8.0-openjdk-demo-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 36faea117d891517402e7fac33d9340a1c64d1f89d2bea51b4973d55f731c3a0 java-1.8.0-openjdk-demo-fastdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 9701db15fb91548f8fe21e262aa5d24b2e4e8df4441bf333ecbb7b32ef652402 java-1.8.0-openjdk-demo-slowdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 25ea3ef8799c2a9b6d3b20f94bfe5d35b5b1fd658b4dae96ca915b8b0cfe9a41 java-1.8.0-openjdk-devel-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm ddef281b2ae30600d75d45bf45a1666c90fd95487a1e8906c88021a019947ff6 java-1.8.0-openjdk-devel-fastdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 8f77681579eb4d7e14210204f0e67cf7b002ccf7531fdfffdf699013f3418903 java-1.8.0-openjdk-devel-slowdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 5ca3fd1d24241c6bc85cc1fb6cf3a53abf153f0da902ef28d08784ee793d0afb java-1.8.0-openjdk-fastdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 74b4caa018b0042f49b9dd8a827eac0523832debb5754415cb725a09afe2143f java-1.8.0-openjdk-headless-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm c600754828bb44a9902778428928ec553eb14260d0574c764d487de32e9879e3 java-1.8.0-openjdk-headless-fastdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 0dcdaa8c8e7e9dffd7a034fcea1ed3164590abc20b12ffe0a301a578d6037bcd java-1.8.0-openjdk-headless-slowdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 14375ad3abc8f1b0d90318c20ce175f1bd9f305d0d909697a31c80f8b91b4368 java-1.8.0-openjdk-javadoc-1.8.0.392.b08-3.tuxcare.els1.el9.noarch.rpm e34681f94818f06272c7577b39854d60e470ca559543e6917ad7496768ffd5cf java-1.8.0-openjdk-javadoc-zip-1.8.0.392.b08-3.tuxcare.els1.el9.noarch.rpm b6238db57dd770e7dcf4addab89804379f8790c56ff1e09349aa7095a386f03f java-1.8.0-openjdk-slowdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 86cf16cf544fc76b13f9745243e8bfd885a06742ac4df303e9f7f87a9be3615e java-1.8.0-openjdk-src-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 8a596adc2a655f49cdcfc9692c07c55e09b4bde945a15b01c34fda563e02cc93 java-1.8.0-openjdk-src-fastdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm c3dc109ae2e6cc19f378122a76050b38f4a602f08a3ad8e7b1f37dd875f95551 java-1.8.0-openjdk-src-slowdebug-1.8.0.392.b08-3.tuxcare.els1.el9.x86_64.rpm 89c51eca307570fe92287fc9067c90ebbd5a9dc3d7a35d562b62c76a9a0131b5 CLSA-2025:1749743322 TuxCare License Agreement 0 - CVE-2023-5841: fix heap-based buffer overflow vulnerability Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5841: fix heap-based buffer overflow vulnerability

0 tuxcare-almalinux9.2-esu openexr-3.1.1-2.el9.tuxcare.els1.x86_64.rpm ae68aefb74e59bdf1d1e808c99b897b0abb5f9d2e39a114f9c0682fcdda8241b openexr-devel-3.1.1-2.el9.tuxcare.els1.i686.rpm 9345e347eea81ca10d8909e1352fdc253bf2583fd467227f2b703c4f14cde22e openexr-devel-3.1.1-2.el9.tuxcare.els1.x86_64.rpm 634a1eb5a9fd89b0c2cba9296272e431283edf14589e490b193514fdf10dfad1 openexr-libs-3.1.1-2.el9.tuxcare.els1.i686.rpm 9daa7ec48ea14b7f0a1d1c4503d68feee0bc398d400109fec62f8a5664976143 openexr-libs-3.1.1-2.el9.tuxcare.els1.x86_64.rpm 44d87787efcc7098c5af6d9799d5b47809c58c5f8b67edebfed1cd6f1caae27f CLSA-2025:1749826187 TuxCare License Agreement 0 - CVE-2024-47613: fix NULL-pointer dereference in gdk-pixbuf decoder Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47613: fix NULL-pointer dereference in gdk-pixbuf decoder

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els15.i686.rpm bb966792a556a7300115d8caf57b6dc1b1ffd950173279a6fc66265ec56c875b gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els15.x86_64.rpm 173e4e4c022bb2fe108e25cd6da4bf6e67d07a38e0a689f3ea73b7ac733f4baa gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els15.i686.rpm 09dc07e3925632807be0927cb405c851f5549bba4753033dc25f5edc051b059a gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els15.x86_64.rpm 8475d169a7bafe5fdf668cc3d480c05a6c477d0d9b02982b776de815ab3aa522 gstreamer1-plugins-good-qt-1.18.4-6.el9.tuxcare.els15.x86_64.rpm b79d3976800615c071fb1f47834d4c739bbc6d4ea1f286e4150371a0b1912502 CLSA-2025:1749826758 TuxCare License Agreement 0 - CVE-2024-46956: fix out-of-bounds data access in filenameforall to prevent arbitrary code execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-46956: fix out-of-bounds data access in filenameforall to prevent arbitrary code execution

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els4.i686.rpm 1edf29403436c8028f1c57053a267172ca53cfdddb19a3b65cb269a3050648f3 ghostscript-9.54.0-11.el9_2.tuxcare.els4.x86_64.rpm 0afab548ff6fd496966ab76c9c7fe3fef0b231ad0bc85efe1aa89b70e1df18a4 ghostscript-doc-9.54.0-11.el9_2.tuxcare.els4.noarch.rpm bb2f229a8436c272c47ddbad219c38d41512dcf294daf811bb4aa1b67891c51b ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els4.x86_64.rpm de6f4cb4345fda44d38e7e49db23a5ca44621761addf510c01d7341b5f84b798 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els4.x86_64.rpm 837cd2031c8dcda6f5ea0cd136c4b8d1f151053f8fe0e518b122ca26bc0922a2 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els4.i686.rpm 74e719e2641d6162c1fea587249be3e21b58eaf8d13f780f3e78f7cf4a079f12 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els4.x86_64.rpm d778d41970b23e4fb18eeefc7cafa7809345604af5d176c4255f1f6ecc99ff8a ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els4.i686.rpm 955fee20ebf8b5e49ad1ac7b56ae941803eb6a5446e6bf4fbbc785c805673ebb ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els4.x86_64.rpm b1e70cf9aa4ac5cf9922c05bf49b511cfb51947cbcee7964693d23f11ad00d57 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els4.x86_64.rpm 3befb505e0787f8290a0031a0b41fae6ff534583b87a49217d20fd5fde624f1c libgs-9.54.0-11.el9_2.tuxcare.els4.i686.rpm f907d82982897d58e285b8f94a64d53ce53e656c9f94ea0d135aa30bfba6c41b libgs-9.54.0-11.el9_2.tuxcare.els4.x86_64.rpm 3e9d88b12ea32c33ac21d8b27ed14724353bd0788c9a142652af7f5761b8053b libgs-devel-9.54.0-11.el9_2.tuxcare.els4.i686.rpm 78b9087d9e3e2f94e05343070500ebd16d4ec3c101acbc46edfde5976dceb9b8 libgs-devel-9.54.0-11.el9_2.tuxcare.els4.x86_64.rpm f1e3fcd354eb9858befdb5b1544d2867ef97da4b79b964677bd2c151576cf577 CLSA-2025:1750444475 TuxCare License Agreement 0 - CVE-2023-34058: don't accept tokens with unrelated certs - CVE-2023-34059: fix file descriptor vuln by moving privilege drop from suidWrapper to vmtoolsd Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-34058: don't accept tokens with unrelated certs - CVE-2023-34059: fix file descriptor vuln by moving privilege drop from suidWrapper to vmtoolsd

0 tuxcare-almalinux9.2-esu open-vm-tools-12.1.5-1.el9.3.alma.1.tuxcare.els1.x86_64.rpm 283b1f166442463e710b56454ecc6630936b89060b6825d2cca39be9221bad6f open-vm-tools-desktop-12.1.5-1.el9.3.alma.1.tuxcare.els1.x86_64.rpm b3488acb3d9ec31a1049fdc96a88fd3002284a3e19d6ef346fed6439b1384491 open-vm-tools-devel-12.1.5-1.el9.3.alma.1.tuxcare.els1.x86_64.rpm 27149fdf5558763f8e2a9ce7a68c3c582ce78c3d950403ece3ac51e52cfa0174 open-vm-tools-salt-minion-12.1.5-1.el9.3.alma.1.tuxcare.els1.x86_64.rpm 575721cb258280d1262af0e422d9e0b32b07b6f314e880dd707c501a28ca72f1 open-vm-tools-sdmp-12.1.5-1.el9.3.alma.1.tuxcare.els1.x86_64.rpm a9d14227ea5a395c7fff0bd474d52c5ca3e01189b9bd6f58d6a68d59db61db12 open-vm-tools-test-12.1.5-1.el9.3.alma.1.tuxcare.els1.x86_64.rpm 5f22df3cefda4b9599c0bfdaa9735a6a0b4a2a256a6282d6630cf24f0d4b5f3c CLSA-2025:1750782430 TuxCare License Agreement 0 - CVE-2025-3155: fix execution of arbitrary scripts in help documents, preventing malicious file exfiltration Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-3155: fix execution of arbitrary scripts in help documents, preventing malicious file exfiltration

0 tuxcare-almalinux9.2-esu yelp-40.3-2.el9.tuxcare.els1.x86_64.rpm af753b5b5077f02829cfca25a97f298fde508b6845356e4a79f43e39e7e33f27 yelp-devel-40.3-2.el9.tuxcare.els1.i686.rpm 8cf7f31508b90f8a496c7f6016400bb4b91a2ca9ca36bc9ee7ef50fa305d779b yelp-devel-40.3-2.el9.tuxcare.els1.x86_64.rpm ed4f41ad29e03a33202f0c9ba414c4213dc404c6b7ae484b49e5a4d3b50792cd yelp-libs-40.3-2.el9.tuxcare.els1.i686.rpm e7fb2e8d4d52f9947cb347c47536cd17f389dba2dff596e448d9cf6b32c9f2ef yelp-libs-40.3-2.el9.tuxcare.els1.x86_64.rpm 633d775b37ffeb16e88adf85439ae68e581de161ada8e3dadaa36274250e0d09 CLSA-2025:1750782908 TuxCare License Agreement 0 - CVE-2021-40153: fix directory traversal vulnerability in squashfs_opendir by validating filenames before creating new files Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-40153: fix directory traversal vulnerability in squashfs_opendir by validating filenames before creating new files

0 tuxcare-almalinux9.2-esu squashfs-tools-4.4-8.git1.el9.tuxcare.els1.x86_64.rpm 0b3400b1a984783d48742f28e026925a9350b88d3fa39e0ff03be376b5d6b3b5 CLSA-2025:1750783474 TuxCare License Agreement 0 - CVE-2024-46953: fix integer overflow in parsing filename format string to prevent path truncation and possible code execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-46953: fix integer overflow in parsing filename format string to prevent path truncation and possible code execution

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els8.i686.rpm ba084d13991028a8627783c3990022128a4e5a6a850c6caea00875a91af542d6 ghostscript-9.54.0-11.el9_2.tuxcare.els8.x86_64.rpm f03b8cf38d3b730a3ea3b86984fecd3dd7753658107cf63e7ce5b971052328f5 ghostscript-doc-9.54.0-11.el9_2.tuxcare.els8.noarch.rpm 80ffa0707662ddca0518259eb0460f9219ecc8fa2633bebb21b9f29f94b3460d ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els8.x86_64.rpm af1ca77a089f1e1e03c77f89fc153f6ae78ea1ce56f7555ddd99a28ce4238516 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els8.x86_64.rpm 6a27121078e71d105f27d950c94cbf4bae26a81b4d7de69587c0c6fc2de40cdc ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els8.i686.rpm ef4444fa5d4c159b4514e7757bfaf4ead25db38162cb274a17bbfeaba76e2671 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els8.x86_64.rpm 23d589ba072836e315684ef826a4cc36908423734e086ba30e2a92d3a53a6f1c ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els8.i686.rpm a9fd8c1b2dde358cb26b3812b398ec43de229b6efb8e74bde0569371854a18b4 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els8.x86_64.rpm f9bbf247f8f000a8c06736b55cedf54d16fc704fa5a63a6f96975ecc20395433 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els8.x86_64.rpm be7aba332cbe62dfb1726f9318aa619ea87a8b7e96fc57506ab3c58fc40ac1a6 libgs-9.54.0-11.el9_2.tuxcare.els8.i686.rpm d24e4d9f3958a927808e690886fb5c14cf941857aba4771975552138051621ae libgs-9.54.0-11.el9_2.tuxcare.els8.x86_64.rpm 4b01e9bfc95cb8ae2d2ff2e1e15287ee5ec1bab6364712539155046d99a79cd1 libgs-devel-9.54.0-11.el9_2.tuxcare.els8.i686.rpm a4fd0f8f0ed1dc2bbe8077a0912aed5728151573ead138b5da11d8fc9fe2e5fd libgs-devel-9.54.0-11.el9_2.tuxcare.els8.x86_64.rpm 87795d2a01c2593bcf30a7f1109cf564924194c42040b18e8aad8048bcd98634 CLSA-2025:1750783972 TuxCare License Agreement 0 - CVE-2024-9341: Use securejoin to safely join container paths and prevent symlink-based host escapes. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9341: Use securejoin to safely join container paths and prevent symlink-based host escapes.

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els2.x86_64.rpm 4f99ed5f80f02dc3b4e01ffc9d29520b25bcd8d9bca756b7da3376a798f5b372 podman-docker-4.4.1-13.el9_2.tuxcare.els2.noarch.rpm 47c3daa5c29e11d02071777286f88a96f809573292a47ff239e69f49009b93e6 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els2.x86_64.rpm f3bf2b13ba45226de3e52c1fd0613dbb484060fb051fa77936c5045154399165 podman-plugins-4.4.1-13.el9_2.tuxcare.els2.x86_64.rpm 7f0c3e7a55d0221dd654313a1500749d73b9ca59db9a260c4011f9654209b82f podman-remote-4.4.1-13.el9_2.tuxcare.els2.x86_64.rpm 931f1ab2ae41405cdd768d7e7db552faf1a1b537b638b9444d406bd8226e786b podman-tests-4.4.1-13.el9_2.tuxcare.els2.x86_64.rpm 0a979e24920b80b554fddd8444b4803e9a50bc392b2e5c2056280a866557601f CLSA-2025:1750784473 TuxCare License Agreement 0 - CVE-2025-32911: fix use-after-free vulnerability in soup_message_headers_get_content_disposition() function - CVE-2025-32913: fix NULL pointer dereference in soup_message_headers_get_content_disposition() function Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32911: fix use-after-free vulnerability in soup_message_headers_get_content_disposition() function - CVE-2025-32913: fix NULL pointer dereference in soup_message_headers_get_content_disposition() function

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els7.i686.rpm 83230233d6a3998f7733e3fe72f30d1c60ef2eaebe7fa6890b30e65c9e3fbe4b libsoup-2.72.0-8.el9_2.tuxcare.els7.x86_64.rpm c21f0f9e1d6cb48c3581109793a5e28a8609861f9718d2247ec97adf32923ba2 libsoup-devel-2.72.0-8.el9_2.tuxcare.els7.i686.rpm 344ea4a4ab0da9804483646702e034da3cda9f875e52ee37bab9f659c3be19cc libsoup-devel-2.72.0-8.el9_2.tuxcare.els7.x86_64.rpm 60999ba7e5f309da66d3b91c552188c0469f6dcb6f554a596cd8fed461bae7fc libsoup-doc-2.72.0-8.el9_2.tuxcare.els7.noarch.rpm 0832148a8aa5f9ea2d10d775e76e62c3ca97a8a37b0b847dddbb3bb991ccb020 CLSA-2025:1750785145 TuxCare License Agreement 0 - CVE-2025-31651: enforces rewrite rules to preventing bypass of security constraints in specific configurations Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-31651: enforces rewrite rules to preventing bypass of security constraints in specific configurations

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els12.noarch.rpm 76dc2544d7f8562cc67898bff8d10fa85a3859a639a035b09905ec9dac1e315d tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els12.noarch.rpm d4c10109853eb5fd40348902a78a8036c520afd795fa8870a1c833c71f676c2b tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els12.noarch.rpm 1596864b149b7a0e6a723a304fd5013c691f59614264f465c390a0111c9f470c tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els12.noarch.rpm fcb0218eea5e32846435fe760b41e87db749ffc09d220b6393fe0d026c8cd8ff tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els12.noarch.rpm fdffd46de1f9fdacc539d4f553cb931751b8bfd0200fbbfd73e3a13fffc715f4 tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els12.noarch.rpm b008c2aeec17003baf971de0ed860e2fe18b033adb38481125983d92ce7cbddb tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els12.noarch.rpm d8362f037bcfc6d576d44596a6616b8644909d7a5e04314aa0fd661cad866fdb tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els12.noarch.rpm a911dd372b3225b15d983a28ef202bb584c9ce19312aca1c781191759edb6bea CLSA-2025:1750785864 TuxCare License Agreement 0 - CVE-2025-21605: add output buffer limiting for unauthenticated clients Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-21605: add output buffer limiting for unauthenticated clients

0 tuxcare-almalinux9.2-esu redis-6.2.7-1.el9.tuxcare.els1.x86_64.rpm 3725549e7e35ce258c226da1f9c1bbc950a9dcd808e4181f52d42edc49063628 redis-devel-6.2.7-1.el9.tuxcare.els1.i686.rpm 73d433c0b75fbba3adc9e6a4cd58584d96c02abb7ea567041257af5bb58f7f9e redis-devel-6.2.7-1.el9.tuxcare.els1.x86_64.rpm 9eef5143b30e0af65aca74a9dec53c6dacbc3b190a694e2313ed7cf9d9e7fd48 redis-doc-6.2.7-1.el9.tuxcare.els1.noarch.rpm f67240c4ba1e6c0ad03c6772ad1b3a95868b93e8a187508199fe142eab4d3671 CLSA-2025:1751040454 TuxCare License Agreement 0 - Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to tzdata-2025b - New zone for Aysén Region in Chile which moves from -04/-03 to -03. - Paraguay adopted permanent -03 starting spring 2024. - Improve pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1.

0 tuxcare-almalinux9.2-esu tzdata-2025b-1.el9.tuxcare.els1.noarch.rpm d2c83f50b29948dba7f716d648444a651acc7f29f0875774951363e86f4da5b6 tzdata-java-2025b-1.el9.tuxcare.els1.noarch.rpm 272aaa76d72f60285a1dbb5dc053705da45fde697d1ac3822774419abfaa6379 CLSA-2025:1751133361 TuxCare License Agreement 0 - CVE-2025-22247: prevent usage of illegal characters in user names and file paths Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-22247: prevent usage of illegal characters in user names and file paths

0 tuxcare-almalinux9.2-esu open-vm-tools-12.1.5-1.el9.3.alma.1.tuxcare.els2.x86_64.rpm 71caa84fc099e5a44d3c3bb35cdc650e36c62908f1f527110aeb509b8fc99865 open-vm-tools-desktop-12.1.5-1.el9.3.alma.1.tuxcare.els2.x86_64.rpm f463560885031204ad89e5dcbc84aa057b357b237a7bfe0635772be210a79420 open-vm-tools-devel-12.1.5-1.el9.3.alma.1.tuxcare.els2.x86_64.rpm 90ee9f0e7935c5204752b661308df0e4654fa600c2446dd36f19b2955f8e8c76 open-vm-tools-salt-minion-12.1.5-1.el9.3.alma.1.tuxcare.els2.x86_64.rpm b1a498452ca47b110caba1b2bca9fc4b20f6f69e8fde5187ea122173079aa14d open-vm-tools-sdmp-12.1.5-1.el9.3.alma.1.tuxcare.els2.x86_64.rpm 5023987e0917636e5e6785494bad60ee1ed6497bd23a4acc678b4d1b6e6923d3 open-vm-tools-test-12.1.5-1.el9.3.alma.1.tuxcare.els2.x86_64.rpm c8db23db218e0a7fa6a8bbc3db51b8f92cc98b2f6b24b16e702f3485968d3de9 CLSA-2025:1751133871 TuxCare License Agreement 0 - CVE-2025-32907: fix resource consumption vulnerability in HTTP range requests Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32907: fix resource consumption vulnerability in HTTP range requests

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els9.i686.rpm 49ed9b3db70e1f4365cc01cf1fca11706aaef81f850e09af3b1761d795fc6754 libsoup-2.72.0-8.el9_2.tuxcare.els9.x86_64.rpm d354b9bb023b22071d3824f912e677b7b18dbd4033dfcf3363b482ab76469382 libsoup-devel-2.72.0-8.el9_2.tuxcare.els9.i686.rpm a44d7535152d3d28b34bf25db5cb6bb4cb21977e2f01ce81a55b28f92557fa08 libsoup-devel-2.72.0-8.el9_2.tuxcare.els9.x86_64.rpm 7309b886ff3ad8b94ee92ab8d69db17f0efd9fc0578e9f89c674bf8b097d60f0 libsoup-doc-2.72.0-8.el9_2.tuxcare.els9.noarch.rpm 34956c8a90cf52abb582f4bcbb22484795a8100649f86110f025a02175b665b6 CLSA-2025:1751141320 TuxCare License Agreement 0 - CVE-2024-47613: fix integer overflow in available data check for image tags Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47613: fix integer overflow in available data check for image tags

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els16.i686.rpm 130782b4c7585a90daacaffae3dfaf2734d65852a9be5f89135f66a545cc51a4 gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els16.x86_64.rpm 932e243c14a3adab949731f02e1db16d202f0d59af83e1b73b231ae246c6690f gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els16.i686.rpm 1c46a44bbaead0a239b70691eb63038e215993a786af74bde139b91cf417fbc0 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els16.x86_64.rpm 7f604a71d2980ed3eff1c2bfc1de7795ff200afd33b469e2fd77ee149280c3f2 gstreamer1-plugins-good-qt-1.18.4-6.el9.tuxcare.els16.x86_64.rpm 072bc8f4ada0f8cc7f3c2ed18eda81b480c518d15b8050e28f62f2f8e63a27b3 CLSA-2025:1751141865 TuxCare License Agreement 0 - CVE-2023-37328: fix subrip tag parsing to prevent out-of-bounds access in gstsubparse Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-37328: fix subrip tag parsing to prevent out-of-bounds access in gstsubparse

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els8.i686.rpm 843e848882c93b1a61a6b7a6c1d3326c9fd7e1b55c0f5746c7f442a63b3ac075 gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els8.x86_64.rpm 16340fa2cb0b7645729303427a69c537d9b1d837d218db714602d9a26752e0f2 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els8.i686.rpm 7c265f71971f80d979addcc1c82a04e6d9d26f1a7a54e54e4217666a84f59eb2 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els8.x86_64.rpm 2d2b122954649be67db3e8982fbedcdde65f66eb0bc4f275ac6451d5f613121b gstreamer1-plugins-base-tools-1.18.4-5.el9.tuxcare.els8.x86_64.rpm aa33b1394e41be20bf56354e7cf69534c71e2670168fd668c827052685715075 CLSA-2025:1751142388 TuxCare License Agreement 0 - CVE-2022-31130: fix potential leak of authentication tokens to plugins Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-31130: fix potential leak of authentication tokens to plugins

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els3.x86_64.rpm 589599ffa91cbaffd1731598b86f6e42d2d484ec8551ddcd1c55b34b46de9e60 CLSA-2025:1751142973 TuxCare License Agreement 0 - CVE-2024-52005: add configuration option to sanitize sideband channel payloads Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52005: add configuration option to sanitize sideband channel payloads

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els5.x86_64.rpm 91817285abb08625bcb2c60d333ed22c281299c445074fb4943ca2b23f08bbf2 git-all-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm abedd36aa008c66b1b0ed627b43cd9bc39f315e78b73db1f23106d336fcd1970 git-core-2.39.3-1.el9_2.tuxcare.els5.x86_64.rpm b364dbe9cdae2d90cf0268055bf3036f9baae9c10057bcedb961706eef51437e git-core-doc-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm 60c1a00d6b929047173b79d9f87ea49826fe984228e7b8420bd70904098666d3 git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els5.x86_64.rpm 1d3e1a1d15b215ddb8873aa25e801d1c9fc71d0333f032e59da64da17fe2fabe git-daemon-2.39.3-1.el9_2.tuxcare.els5.x86_64.rpm 6fec94c4ff8337bdbc784d75d0a55dda896852bf6872a61eada398dda0a02dd6 git-email-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm 2cba936beee77c5702f1ec673e6df76e9d8719d8f0ceaaf3b1872a4eb43f2956 git-gui-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm b43f858e6ce1c80e803c30a81b8314bd903fd1df3afab7245cc870039247c37f git-instaweb-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm eb67cdcc020a3fa03917762eab63960bead63631cc1688ab6747eb97e17fa808 git-subtree-2.39.3-1.el9_2.tuxcare.els5.x86_64.rpm 643e05a8cc010526d7fd82919cfb3a24b894450b0ba902ee6e73abff15a54642 git-svn-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm 0c682c2652c5b8e55bf8e117e57cfd831faf9eece7edff6be2d49c812f442a2b gitk-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm 854542f413e3a2d11da6649f2e5b55fbd2e45ca2e4c21025a6b1db370e2f9009 gitweb-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm 8d3a913eaac8bc339d95c0467f47fec7c2573025e8a3e00dd2e41aaeffd5acf0 perl-Git-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm 46b3eb0b77535a640b78ad1de669e3a9facdda5cbfc023a529562b420eac7318 perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els5.noarch.rpm 78de85e37c34ba073e35588ceb400f4a00444a7898ec87672d2a4d2e63697fa6 CLSA-2025:1751143797 TuxCare License Agreement 0 - CVE-2023-3758: fix race condition in ad_gpo Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-3758: fix race condition in ad_gpo

0 tuxcare-almalinux9.2-esu libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els1.i686.rpm a5f94712543c0b87272d45d84ae00706700dd7faaac88d9fec3076c86b1c217a libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 38a4c4ac98a84dd9503eea173add8d763ebe18cc6fbd64252a2f4904734d86dc libipa_hbac-devel-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm fa63ae27ced39f6a6ec1d80dba4e0015b2af932a4a781e4fb34e51d4b4025091 libsss_autofs-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm fea381cf55999842da56fd4b881015a004c525af6b1c57b5aa4ad2079c1507ae libsss_certmap-2.8.2-3.el9_2.alma.tuxcare.els1.i686.rpm 2476204f9a3096577c4a0c4a3e6c4f6f6ce423c259dc874b02d2e27643f82198 libsss_certmap-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm fbb86b2b853b740b329664a1ff210dfe841fa1ec1eeaea5ccf1fe8e6e5056bf2 libsss_certmap-devel-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 62de837a096667d8bea9f7d0d757844109d04adf6b27f8c61cb788aff9c3427e libsss_idmap-2.8.2-3.el9_2.alma.tuxcare.els1.i686.rpm 62bfa51b7bbea40d716780ae3577fa7ccc348fdbddff95c66520b8bc9532cc73 libsss_idmap-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 3dd1bab0e066260bfcc22ade27654d200abdfd07350d3a946b4571b2f6b49346 libsss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 2b8e2a8888be312188841df91947c0f41326500d513c8e13501db118120823c7 libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els1.i686.rpm 629414211073d62205470df1ea26d2039e0bcb7d86f7a421c6b4fe2bb91a8bc0 libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm fac771c79cc1618c44322ed9bf6b516ce110e9bc9cefe52cbc12c47355acbf76 libsss_nss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els1.i686.rpm 6174e4aa655e92f4829c6eb3544e1fc554533c2a883570ee6c3943117133a11d libsss_nss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm e77bfc8ff58409cd9a49d71d849d5996f404f53313f94baa82c0846a3136f117 libsss_simpleifp-2.8.2-3.el9_2.alma.tuxcare.els1.i686.rpm 4c8cfb1526deadebece07ff7d66090a7462d94de9c52fef0b8fd396a060fd6fa libsss_simpleifp-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm fd6d6bd79de4f68e0066eb3f6dbe00a3e418f6bee56e8418eeb2310213fcb43c libsss_simpleifp-devel-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 028021b6cb9df0e94c369dcb11872259e1119954ce8c62116ecd594a0b703bda libsss_sudo-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 0517c379e5a95e5a022514372954f8d417d8ca4e5229cbacf822401255bb17cd python3-libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 703a93773e275cb9649dd5748f2fecb8cb07286296b9acae087acd20aafffae3 python3-libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm b65164323f14fbfc51cd1de9a373a37e23ec9aa3f73547a0de033ba52dd28b68 python3-sss-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 29f71546d966453135f76878779b75c42f0b7868b9803cb7a60b6efeb8470f6b python3-sss-murmur-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm bf105695f78df90fdeabdfd53e2f424c4e9417ab3bb2417b70c174f567562422 python3-sssdconfig-2.8.2-3.el9_2.alma.tuxcare.els1.noarch.rpm a01fc282535c5ff1fffe68c2a638b88cd6664d0bd2c3941b35dc12a6c3d77848 sssd-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm f72e4cbfce872f217a153ea30ae9db79dcb1d51948424ee03fd345f05b8c574e sssd-ad-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 65eb37802c721d1e1ce71cb2ce49d7f67e806a0753134c59c3577331d5a13ad2 sssd-client-2.8.2-3.el9_2.alma.tuxcare.els1.i686.rpm d8af9d853ce4a8e18fd00736de9b20df6c74d0206dbb26ecf4c3f1ee114c5891 sssd-client-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 687701d977780382e11d43cd7ebb95d07468ec74cb1a2050340bb4083d21807e sssd-common-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm fb1a555c793c64321ccfb29393cdcfa78959d3fabc505c7ed8ce47f27ef1264b sssd-common-pac-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm f977cc208ee823d333b1d12b04f066da54308c1cb169905862955da1c335d4f4 sssd-dbus-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 55be3c688eb608c0abb8df24689398cef75a19f13fe691d85860196fe1fb54b9 sssd-idp-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm d20de039072ce58099cb4d2acf38f96ab5cc9e34a0f51db58f52c451a030e9dc sssd-ipa-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm de761f598f8bbdcd7e950a251cbb44c1b0630058b0cf66961bb682a0e2cb26a0 sssd-kcm-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 676914328214fd0d8ad801fe11f70a2ce76bfaca90eaf4b51774f6a773cc37e3 sssd-krb5-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 5388ce7f826dc3c8b67b263e33f757d6a8fbbc037b0b1fa076b2b702c9aba1ee sssd-krb5-common-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 59d46d8d068fbb74505bfea114db5614bb5d8d5300592b536e316ddff89e93b1 sssd-ldap-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm ef5ab83922aa3a199f46fce3dc20a4eca157e05e9b9487ca0dab41cb1a7248b0 sssd-nfs-idmap-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm dcef4eb5ba3d265b211ba01b5164c7a701381feff5987069ad946c809beb25ad sssd-polkit-rules-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm d7bb28685ca7904de133c799c57d8f1184f29a1efe1fbdbdecaf1f77eec818ec sssd-proxy-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 05d135ae5a3eb0f47abace1d09374fa15d2f929761b5a12d953be7751e834006 sssd-tools-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm d3abe65d68a0899f7b92050c54db56ea944fea09564856daf441cc8271015883 sssd-winbind-idmap-2.8.2-3.el9_2.alma.tuxcare.els1.x86_64.rpm 35f0bb12ae768a7abb8408b0738eec658af0b45c49b24ecab0408f0ca2ddb324 CLSA-2025:1751144408 TuxCare License Agreement 0 - CVE-2024-0397: fix memory race condition in ssl module's cert_store_stats() and get_ca_certs() methods by ensuring proper synchronization during certificates loading Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0397: fix memory race condition in ssl module's cert_store_stats() and get_ca_certs() methods by ensuring proper synchronization during certificates loading

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els12.noarch.rpm 892388061f50a1b6cd691b0baeca051cd6d6dadc80df21229023f0681baf5f63 python3-3.9.16-1.el9_2.2.tuxcare.els12.i686.rpm 2b04162135392c4928f36e8e01477c5bb56dd1150f4684fa0fb7406acf615dfe python3-3.9.16-1.el9_2.2.tuxcare.els12.x86_64.rpm d21b001cdd5b78479ad471a632d34aa727c03e72136fef7b21cc2ebbffcf3440 python3-debug-3.9.16-1.el9_2.2.tuxcare.els12.i686.rpm 208ad4fe5b9d95d1e746c0d10ac7884874eaa1b814d1773c391004092ace9754 python3-debug-3.9.16-1.el9_2.2.tuxcare.els12.x86_64.rpm c35b899e3b2f74ebf6738d28f9e8d2c4033c444eacfc583164725f0935bd7059 python3-devel-3.9.16-1.el9_2.2.tuxcare.els12.i686.rpm e7badd40fbf405e99f03ec173a1eea66142042ccc4c05918515631bc2fae00d9 python3-devel-3.9.16-1.el9_2.2.tuxcare.els12.x86_64.rpm 38d5799f75ec6a98b0c97e43c60a0d681ea5577597b3ec36dd8f30fa0bec20a9 python3-idle-3.9.16-1.el9_2.2.tuxcare.els12.i686.rpm 68be4253ebb62107906da89069b5a50becccb982b2aa2b1bd1f0b2adc7e9a8d4 python3-idle-3.9.16-1.el9_2.2.tuxcare.els12.x86_64.rpm 8d7f023bdd0a6f94fd404a9210352cb12b78eda76eaf9e1cd4adf6f3fed3243c python3-libs-3.9.16-1.el9_2.2.tuxcare.els12.i686.rpm 3d2aee9def333e10af07946a33cf8ff72fbcf9485a99a9b4f40948ff252cc34c python3-libs-3.9.16-1.el9_2.2.tuxcare.els12.x86_64.rpm e58f7ed2634cd850b9773b4ca95c5f9dc37b808fada2c7f59c4d3a8837019500 python3-test-3.9.16-1.el9_2.2.tuxcare.els12.i686.rpm 7e69bed3664dff659b07cf0b9ff0b16f36cbd6f1169521a1f2069a6fee7dee14 python3-test-3.9.16-1.el9_2.2.tuxcare.els12.x86_64.rpm a7d94689e5093a70ba0ec4adec1bfe5e8e6ac486761a6dc0863a5cee8de47b0e python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els12.i686.rpm dcb54acc3f49b7d5403850e3a1814a7cfc8f40d714c241e94b76fdadf4a1d718 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els12.x86_64.rpm 7dfd71e6b80efe471c135f4356c520b39878e64c17d1dc4ff4b905cb98789356 CLSA-2025:1751144978 TuxCare License Agreement 0 - CVE-2025-32728: fix logic error in DisableForwarding option Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32728: fix logic error in DisableForwarding option

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els8.x86_64.rpm 686597388e1265bbfb5461567a811d6cd4a0a052ec8b341a23609a9970a45174 openssh-askpass-8.7p1-30.el9_2.tuxcare.els8.x86_64.rpm 04591ac7c17f72b7e6d8ec58719ae77fda4bb6270e9e810a0b889ffa056d0c1e openssh-clients-8.7p1-30.el9_2.tuxcare.els8.x86_64.rpm 6af96ad9b5730453aff20215fded0fb3870549917c2d5ba2980429662741c71a openssh-keycat-8.7p1-30.el9_2.tuxcare.els8.x86_64.rpm 2e1aaf3e9fd82be179fecf829ae1a7f88a4e1027d2ed8c26f782a8e037358ba2 openssh-server-8.7p1-30.el9_2.tuxcare.els8.x86_64.rpm d0155ef352d1529e56a3bc018b21ad40327cdec881c0d1f5b4ffe303b917450b openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els8.x86_64.rpm 8fe769933e6bf19ace4be97b8d2d0155bb599345ae99e73b0587f7f839a03af0 pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els8.x86_64.rpm be562b3d5ae2f448c8311c463429168a5b939dc9e837d90d269030318c28d4bf CLSA-2025:1751145522 TuxCare License Agreement 0 - CVE-2024-0397: fix memory race condition in ssl.SSLContext methods cert_store_stats() and get_ca_certs() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0397: fix memory race condition in ssl.SSLContext methods cert_store_stats() and get_ca_certs()

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els11.i686.rpm cd211260c809041839b68c535d6c1a42a6f4b14a9629293b045573f9a9fae5ab python3.11-3.11.2-2.el9_2.2.tuxcare.els11.x86_64.rpm e409bb68c93bf5a167f7fca2eb2da59e5124837510f4c6e9fa813c6663ff31da python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els11.i686.rpm e30e676786126bafc640fc76aba7300b3711610610c426d71935d202ca05d282 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els11.x86_64.rpm 0475c4540a55933aaeab49ff47976f248be58f0b58a0ca32b007ce0ce21f98a5 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els11.i686.rpm 58b7b970f419df231617661fdb5c3eb3e984d78c1aacd099e2f18e3d9fccb8c2 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els11.x86_64.rpm a54d67c579ddf71fb75968a1124d8654989543512a8e39b9d9b34e7b2d76031e python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els11.i686.rpm 0b669991490e7e37a4f176c7df8a951c1ff20dbf4f83f31b9e76a0a1234cdf4d python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els11.x86_64.rpm 6e6bc3de7615d4fa08b78270ef6cde56a2ce99720cdbbcd2f69300c021f9102c python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els11.i686.rpm 661bf8aaf2d890f515e9ca70a13b021bc6ef0371a4e8698959da887dafbe38b4 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els11.x86_64.rpm 897d3bd9b9e8ce004811b877271f6840abf7b7b02c90644836f461f2ea155994 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els11.i686.rpm 9682f5e83989bfdd7f90f1387e4aac0cb72b6569bb5f6843aa35e9d6ba8d7929 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els11.x86_64.rpm a7a0efb887a4a1c4ca90355b0452f08689c48240fb19f6f2e2dd6e003e8a25c5 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els11.i686.rpm 296bc7b7225775f960b849d2ed0f4ada62d160898a6beeedfa77f19ddd61f8ae python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els11.x86_64.rpm ce9983b063c792c7c64e570fab62851b14d7864f03df1b6302e90ea0bff7d11d CLSA-2025:1751290629 TuxCare License Agreement 0 - Fix depedency linkage None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix depedency linkage

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els1.x86_64.rpm e91e19abe5c63954c001071853be37ac8a010257421b1227145a96ac57df474e ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els1.x86_64.rpm 91e3723656a52ad6c6dc124471d1251fc209e06a09104a9874d32bae624bfe58 ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els1.x86_64.rpm 9bd902bb1dc98de877f5d955a202559ad002cf400e7282e9e148b14bc2f7cb4f ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els1.x86_64.rpm 3018e1b8f510d2f8b226262ad9155c0f7bfff9ed68cee8da22275fdfeafa2a3f ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els1.x86_64.rpm f8a9de8883f38fa751a06555e67992ba5980bcaba2ca272d26464c280f4529c9 ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els1.x86_64.rpm 453b68c8a62cd67d9e111b32dd0defa576a4d6bf8ec806fde84fa33f7948bbc3 ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els1.x86_64.rpm 84c544437a3c52e21b1208d59fc76f447216cbdac752b796ccc9abd05362cc04 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els1.x86_64.rpm dc1ca73643a9e302665efa37ff411279cfc2c47f8e1a015dcb745096ca78ff70 CLSA-2025:1751619853 TuxCare License Agreement 0 - CVE-2023-4156: fix heap out-of-bounds read flaw in builtin.c to prevent potential crash and information leakage Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4156: fix heap out-of-bounds read flaw in builtin.c to prevent potential crash and information leakage

0 tuxcare-almalinux9.2-esu gawk-5.1.0-6.el9.tuxcare.els1.x86_64.rpm 22bd988dc18654f7a929ed2ee1d00ecd977c84ff08a243c99ffa7b0512e66b9d gawk-all-langpacks-5.1.0-6.el9.tuxcare.els1.x86_64.rpm 85b605c04333995ee9593f1be4bc9825382ffee68158fa4f0b456d90b41d021c gawk-devel-5.1.0-6.el9.tuxcare.els1.x86_64.rpm e59a818e940aa06e1e78cc5ac5c0d19bc606db45d7ae3f8c24786f2827e49799 gawk-doc-5.1.0-6.el9.tuxcare.els1.noarch.rpm f99d7ba4a8699b26571294cb6b9d5e1412f15c37e26559e12bde57fbd0be261b CLSA-2025:1751620336 TuxCare License Agreement 0 - CVE-2025-5914: fix double free with over 4 billion nodes Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5914: fix double free with over 4 billion nodes

0 tuxcare-almalinux9.2-esu bsdcat-3.5.3-4.el9.tuxcare.els1.x86_64.rpm 9d8fa64e8bff94d306fbecc8a8d97cefc99b5328bacf6a772cc2eba276da7c08 bsdcpio-3.5.3-4.el9.tuxcare.els1.x86_64.rpm 5e999611ff79073d41afceaaf4fc776e52e219ccc24803d147e201bb79cf9164 bsdtar-3.5.3-4.el9.tuxcare.els1.x86_64.rpm 7b2fa9dce7eb7513dcb2e1c75de36a49f88446b5c4383d53ea4eed79591debf2 libarchive-3.5.3-4.el9.tuxcare.els1.i686.rpm c5754b31dec646ba442644a090864e1a3a8275bfb5501ce4b2900478a34d9fce libarchive-3.5.3-4.el9.tuxcare.els1.x86_64.rpm dd2ee39f9ad8b353fdf027075a15e28e566c3dd3a217170bbf672e8783e862dd libarchive-devel-3.5.3-4.el9.tuxcare.els1.i686.rpm a364952bea2382fe5c191724115401ebb9b0a164e1620b8b4a6113839a68952b libarchive-devel-3.5.3-4.el9.tuxcare.els1.x86_64.rpm 6f072c0705e28e81de9ea6018bcaac964752f80dd5136b37569be1de60afc0ec CLSA-2025:1751888935 TuxCare License Agreement 0 - CVE-2021-41072: fix squashfs_opendir directory traversal vulnerability by restricting unsquashfs write operations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-41072: fix squashfs_opendir directory traversal vulnerability by restricting unsquashfs write operations

0 tuxcare-almalinux9.2-esu squashfs-tools-4.4-8.git1.el9.tuxcare.els2.x86_64.rpm efd6b4f9c1558c6720441f891c21826f7e783021b8fd794a3626b690b97079d0 CLSA-2025:1751889153 TuxCare License Agreement 0 - CVE-2025-32414: fix out-of-bounds memory access in Python API Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32414: fix out-of-bounds memory access in Python API

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els7.i686.rpm ef7e45695211665903accc3672c5a2c899d5862c123b5140962e2da4e0cb0b0a libxml2-2.9.13-3.el9_2.1.tuxcare.els7.x86_64.rpm b1464a756435f50c0fd5f747a69d19ca7b221be640f7ef8fa43250a7fd796df1 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els7.i686.rpm 1c022b4782a45af9f1120007a6b9ff8033f858bab2fbb835c03b84bbe8027dc9 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els7.x86_64.rpm 8e4c500d86e14942753b5fefdcd83072ab6ca6cf69ad1d8e3cea5ec5c96c098c libxml2-static-2.9.13-3.el9_2.1.tuxcare.els7.x86_64.rpm fee4badd040f4eb5623734b96fe9c3e5e82f4947c63152dfc5e625f7fa9538e4 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els7.x86_64.rpm 8afc3690f7e5fbbaaf38b39c00b8363cb8e7b130a9bfe66d9f841784d9f17e0b CLSA-2025:1751889956 TuxCare License Agreement 0 - CVE-2022-39306: fix privilege escalation vulnerability caused by improper input validation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-39306: fix privilege escalation vulnerability caused by improper input validation

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els6.x86_64.rpm e85f74877fa6c667b9325d35ed319c049235bad184b8725faf48622cbf57a75f CLSA-2025:1751891683 TuxCare License Agreement 0 - CVE-2025-4802: fix untrusted LD_LIBRARY_PATH environment variable vulnerability by properly sanitizing the dynamic shared library loading Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4802: fix untrusted LD_LIBRARY_PATH environment variable vulnerability by properly sanitizing the dynamic shared library loading

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 33e69612b9de88e279905f333d35d5406853b70a6d0cb9ed1a87f3aaf9e5e1dc glibc-2.34-60.el9_2.7.tuxcare.els3.i686.rpm 42e3c1ffba7bb9405b5a4dba82a540da73bc64963cf34e4e1d7d8ad46c090925 glibc-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 3595b496367c3e77107543bfdc8efc4fd4cf8d387ae7a37cf942ced26f80a36a glibc-all-langpacks-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm b55b26d99bfc1a891311cc731824714925c093a68bc7450fbfd39c40c4980b30 glibc-benchtests-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 94c2a46640ef8139b2c55f4afd8d83d137900e73f1930a39d9191567cd92dff6 glibc-common-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm f4bd43271b877f1ba320908bb17a335e791473ae0779bdfb121c24d9b20b70e0 glibc-devel-2.34-60.el9_2.7.tuxcare.els3.i686.rpm 1f8da8d60e7b1d0d521d2c4f9c60666c5a2011d5e17b5279bfb3af7f60abf593 glibc-devel-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 3523720311837c766dae4f7f0d0d6707d9215412ef7b39021f7603f234388f11 glibc-doc-2.34-60.el9_2.7.tuxcare.els3.noarch.rpm 7d2a001397326727da1ce023bca11e704e0680fd551f8b5ec7da62aa97c68659 glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els3.i686.rpm e3957d67a9fa586b02db03240ff4782334aa6ea89c8be9de1f2ff7794b5e5b52 glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm cc49d8a7e254d304f73e9bcba428f67b5f7000a77cf14df7a2ecace723b23c2e glibc-headers-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 0b3be1c7bcf3cdc84053ccfa353ef571cbff5086b71464ac3197ca2746b24749 glibc-langpack-aa-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 1b610f99b4fb489ba670ef553963d0906c65ab137fb35cfb2806eb879aaa7110 glibc-langpack-af-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a4ece7bf812f01af9322d78a0cfa62eda32f27701d1f16ecd14f27ddaf8449eb glibc-langpack-agr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 306007685e20b7a370ade4226024b312e5910775cd403e7f837ed9e061ef9404 glibc-langpack-ak-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 46096197f197267b16bb51cad335b586b212a9d306b03956bacf5888e9f8ab0f glibc-langpack-am-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 521fe2196a8ab80279fd90ce504daaff424b9731b8fbb8df1d6d449088b1d04f glibc-langpack-an-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm c02fe257f5677ce9ac7af6565ebead2df07b5827339c4f0403767d09d493b53f glibc-langpack-anp-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 800d07a6623a05e40a0dd65416c64da0b6f43306c8ec481bf5d2d024d275f144 glibc-langpack-ar-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm fc441af9de0aca0bcd8ac117695cbe37c93cf6d4a0eefb37292399988d9a115d glibc-langpack-as-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 6cb64c5346d8f646a9c3c2f8a9d9775cbae91a973a812b41ce3d3613f34583ba glibc-langpack-ast-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a1dcaef2a6382cfc1ca1aa832c83e2fe0bdad257089d4de86710748548720032 glibc-langpack-ayc-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 81993ab5e4798f89d21c86b85bf294ec1c9e3d031662374ee6b785d298a9ea9c glibc-langpack-az-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 4b91f89d014723c850d54ceb0fccd24db78c5204a8ac0f63620dce72fcae2410 glibc-langpack-be-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 13de59e7f6f999764ff6783231a2fe1bdaa528f279663ee50a6a91c45e18b100 glibc-langpack-bem-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 71360dcda08eebf74d68c3caab3bca7e926647889a2eed27e11a5299dad5e6d9 glibc-langpack-ber-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d894ea108b081b17df2b9a6574091f27b8be339e733a7cb6464594620df653e0 glibc-langpack-bg-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 57e361101924636e71136050a17448142e711c2655d6b983163fa49c4b7af9d5 glibc-langpack-bhb-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm cc7e410fdbf9ab493d6aaebd685d01ffca9aac8ae6378ae9f055178038ffadc7 glibc-langpack-bho-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm f249c5c52f31f03884c270b6f07927ebf86b390b34591b33099ab0b1567cd5bd glibc-langpack-bi-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 16d86055353bfdbd59de4ff5a0c5b9ab9ab72c2e2e9145a7fd367e42ab2b5ec6 glibc-langpack-bn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 36d51ecb0f279153a632375622048840a7546a5c5829af27d3e2cac2a4cc33c2 glibc-langpack-bo-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a4604ce55797da263542413334c75f8c28886976d9124ad70cd88207554967c3 glibc-langpack-br-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d2b650cde694bc028e646c028c9ca2383191a14ccbc2fa98546157f422016e33 glibc-langpack-brx-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm c23eb717802fecdfcb9dd40708e36a1ef135c446667543531f03984b9abe8403 glibc-langpack-bs-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e3275ee197ee73694bbba5d9a1b4fb6f484e92c936b9b11061893ab620f3cce4 glibc-langpack-byn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 3db231ff8e61f301def77c45e8ca60ce32f80ce0519a66cae455eff8ebac8a7f glibc-langpack-ca-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 16bb30abb9389f57f87f660d52a015805a899a06b9a2062964cdd17e84f6a473 glibc-langpack-ce-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 763756b40db5aa319fe880deda14f17084d1ca471c9588ef1b1772f8406848b2 glibc-langpack-chr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 7beec17aba27a470d316b790642aad288ba328d5987413fadba5860260a4fef0 glibc-langpack-ckb-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 49f2e2d7f53e95e54afdc6c00dfe0cb03b13273b82c0fbaf881ca5069b08f520 glibc-langpack-cmn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm f1a3410dc35df6da7ee484bc6a04b5e1a2cabbeb7ca0c72d3e690db54abc83c3 glibc-langpack-crh-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d259e59c4b32c74034d2caf97506de0ba0b89d7524bee84be28f628a96dbc8f4 glibc-langpack-cs-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 56e103b8719fd6376163de28b77c991717cfd361314d094d62befdd8d105d008 glibc-langpack-csb-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm c8fe8407ce438fdc73c7b6064b1eaf8715b438b19cef3459fcaeb619d643c7c2 glibc-langpack-cv-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ab9b07d86c7c6049847659a73c8456d73b0b1ec145ec85667bce67f4fdbafec7 glibc-langpack-cy-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 4c028ab805253ce5a69cb878fc87006379887af619daa2baa225264368762bbd glibc-langpack-da-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 7e9a5ae64b94e694f6236653cdee2f4399e7d8f8fb29fe31dcd70243f3cb8649 glibc-langpack-de-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm bc0e1f92be914f712d978dedea240af15a632a19bca18feb30389b28c0faf6e7 glibc-langpack-doi-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 409535e75034f4e677d7c65db80481c20464dd690200bea5aa0ab0aa71b6d337 glibc-langpack-dsb-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 231ba656378cf20ed66ba40b5f164caf3d297c03a6ccbae03545c7227f2a7e1d glibc-langpack-dv-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm cf15c00a29cd99ab4394be48d1cb7193aafc9e1891b7534c2ae5a0383dc3b3a7 glibc-langpack-dz-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 40f57f17fee770c9b7f9122e7d6ab00e33240991adb3fef2944c81ca24eebef8 glibc-langpack-el-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e349b61b68063f1c2bc015966ba784d1229338e1316d27adbcd7ec00ca8e03a8 glibc-langpack-en-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm b6b320cfe3f160c2a00f6d620c5aded46dd0cf0c6ce1bd1cf07b573a8d8fbe10 glibc-langpack-eo-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 5930955a3c349770298e65e84b77f42e03b09f8906b83d9c63dc8f378519af0b glibc-langpack-es-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm f3443edb6f88742a14fd6999d1214adcd190af829346102bf89bec164f478239 glibc-langpack-et-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9fc2e0c8b4bca1de0c22edc3227a46fcaa63b8875c9e39d485aa93eb0c1c4517 glibc-langpack-eu-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9c29e105256feebe427acb6a617318964d76000d0582a105a08882c24ad46be4 glibc-langpack-fa-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ac40a41c51ff0bc96a5f28aee7beea131857defb2e7bf7d6fd8aa2e5ee87e597 glibc-langpack-ff-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm c8795a07c9ae9bb6a1f6c15442608f9e90738924332f01b6dfb26120a948a17e glibc-langpack-fi-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 2a5d30673e6e4c27a29ddbbe729f454ceb98896d5592b99ededd3e906a549392 glibc-langpack-fil-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 019c85dde3a39b6b62eed6deb126da2af2550107702e907ade4a6c2b283b9f85 glibc-langpack-fo-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm fd91df7ef2bbe3eca1f268281468df81a89b989d9b61c5d6b7f0e6f5c3f7c976 glibc-langpack-fr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm b254e839fbcb118f130c5645fcbf1262a1b58ffb92a3b816747314d231b7b1cf glibc-langpack-fur-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d391bc56027560e013981963c5693c87805aae5cab738ceb2d73d9c7c42b3f9f glibc-langpack-fy-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d36b5b45494c7d38ccea177d0c348257102c4ff82b3ff978d8b2f2da8cc5df2f glibc-langpack-ga-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 38018084db63944f36ed084c0b163f2d54404dbc2dd1e407e57e78249a3dde8d glibc-langpack-gd-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 85161615a57b4ece19f37f47627567a8a3763cfd1327fd76f8ed8fd0db338f9b glibc-langpack-gez-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 6faa1eef89a54aeea0c317cdcd8c381e394863919b3f99ec90d1b08def2c4984 glibc-langpack-gl-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 13c7eff7759dd0d7249cd1cacd2d9295e40bd1c0f5fb0e07d04d84040d3e9815 glibc-langpack-gu-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 5fab621df4a14df447b750ab8ee954e34754ba732a0dcddac96ae24eba69d1f1 glibc-langpack-gv-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 40c5c35c3b3b58e5004a2f17c5d2851bd7a6e6432e1d14682b9248fd32257c96 glibc-langpack-ha-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 330e20dbb5aab2b66f7581ee531b8ee4d18bb20091c10254f1e8cdacbb8c61c3 glibc-langpack-hak-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 698d6e48266b5fa486e6aef894c5cffaa27c781c27371fa2c83a1255f60913b5 glibc-langpack-he-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 6ad32008640e4036ddee93322eecf4d180c73dbc02fb0b2719335e68361f7c3f glibc-langpack-hi-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 80110edda133e42656927db0ba2cf608c646f2be3ec247d2379f3e84f278e221 glibc-langpack-hif-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9f0d6386e221406fa3202156baab278a2a1b2d8165070697bfcbf5cb22fe8d3d glibc-langpack-hne-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d041a78cac3a283aef4a0333476a2f4ae8c78d5c6f24a083fd19d412100590fd glibc-langpack-hr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ee1d15921ac42c94795a15f5b6b9284d53a5287db22b37cac0b4b60c96fdc52c glibc-langpack-hsb-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ccd20e34a2612164162e3646e1841f4fe05ffba09001195f0b202ffd31c49074 glibc-langpack-ht-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e19975dcd9ef429dcec2900d1f59e236a3fa12795423df141a0ecdf060098d5f glibc-langpack-hu-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 8c26f5c4c5a63302644adb008a7806b4ce38ed7049cb51069ca3758d8fc7115f glibc-langpack-hy-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 0cb4aec45f71e8ed2b6ea7afdff1376b0177c707b91e4f143a0b2e7466627f26 glibc-langpack-ia-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 0799638a79f840ab8101e48fbe0812653e462ad677433d80c2249e0e1b0ce048 glibc-langpack-id-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 877dd809add564c8c6ff6137df50a6d5c767d2e8b36db404d2905a880a6781f7 glibc-langpack-ig-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 197efa52d8a7940563df3b001668aa84b4497ed23cb57679ce45d5ddeece590b glibc-langpack-ik-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 38b368a4f012edc87891ec9db8b9594c20ffc5bc449042b353d094d44c45f061 glibc-langpack-is-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 0ad21dd26842754cc57e7c99d0935ca29b92a6419c8ff463f5bf8c57ad32240e glibc-langpack-it-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm b7cf76208ffb50e0078f37d000fecce5b488fc3145c2f5382a187b6c7a228589 glibc-langpack-iu-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 1892fd4d357fd74bfec4c066c5f1abd2729668611f0ec69922d99c407eebf605 glibc-langpack-ja-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 8a21ac9ff06f4cb56b91c0eb41e5f3fe3e9944158cf43c20af6029326911566f glibc-langpack-ka-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 6a0ef0e37658e6ff9512dc1fe7a6f1181f979d9f73cd35f2a3677f4cd8b12964 glibc-langpack-kab-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 73e087d8b9745a7b044b21836c238152ab63ad3f332b92d173cf5e1eff4e89e8 glibc-langpack-kk-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 27364e24b22c5183ab49342be6f1b77d92f561de101eb603a2f9c7794ea93259 glibc-langpack-kl-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 473586743174a5f1ceb6f7a33de1bbb7a4a3b3ee7a8cf7c4102239a11b843814 glibc-langpack-km-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 082c08e229f920725e767dbe8e1c65fb192f6660795f8bf06728440adb7007b3 glibc-langpack-kn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e27a054e1d9bf6e1cb59d6ca53949bd27b578c8de1b03657b76e18fa009f353f glibc-langpack-ko-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 134908d79a305297e946a661a0b0526062a03d7c96ef4a7cb05adb4bfe548761 glibc-langpack-kok-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9e478de1dd2f42017b958ac09c7ea5198817090cbbb2f212ecb4b5b4e92e4e0a glibc-langpack-ks-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm aa4b133ba6714b99af90bb7c30a893089bb10bf9b0c63683d97bccc66e1ffa08 glibc-langpack-ku-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 106b95a9e61a2703a64cc0b4180a7c7eb7d570e973a93a13588b535418427f93 glibc-langpack-kw-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 139d7d51079e665218ebc9677998a57a2c69a5001693c99b70db020ca3d579c7 glibc-langpack-ky-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 57aac3f2b55139b6364cb674ee8ac3e7755d90c7e8adadd3ab69db4648394493 glibc-langpack-lb-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 6f2337f830e976085465ecff31d94416edd0dd934e4d18e0bb5effc0fb2cb73a glibc-langpack-lg-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 2b3719d9e2e94d0b041052153abfeac3a66f9606ef0628d57b65b91777b0afc5 glibc-langpack-li-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 3e96dc0b3d681b34b874e35bab31653fcdb304d947b42a38831049bbdc839872 glibc-langpack-lij-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 8eaa6ca526ee18edfb53fb01627dbb4b7210feef1c8eeaae41ff086c69223001 glibc-langpack-ln-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm bc3d5f9ece29bd89f44ccb1da8344daca0e7f8ae17ff13b9df71eb49c19d8a0d glibc-langpack-lo-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm b62a64ba671397d7089b8a5f79e2963e9c52a5cc0116f64f459bf6cb2460d2df glibc-langpack-lt-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 28dde5545623c0087d4a2c5dc952016fc7fde1c481490fcf6869258cddce02e5 glibc-langpack-lv-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm cf339f75c02ea1ef0c5ebb3e43498c1bf4554f513b6440d4469360ad8a778a88 glibc-langpack-lzh-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9b3b0087f55bfa211d6c5670491caae4549d84c053a8bd4b9edfb78e67e9da78 glibc-langpack-mag-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9622bf05b7743dd76645d05ac1cab98f85dc842f7d6a8e691054771f7cd7d596 glibc-langpack-mai-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ec169ba128ae2df3eaef6780a938e0f9376bee1c9999422d119a808369192edb glibc-langpack-mfe-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 352125a41a920a8d220fd94b3f677d99d75597b5dfea17659802355cbea79324 glibc-langpack-mg-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm c1c907de9ed9babc6e8bfaf6a11f365a0427ec7d8f60a0d3b3798a34d6c00e0b glibc-langpack-mhr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 600a43324b9639f007aad1bd7cbe8f08aa5c6dc491680189106240b3b950a5d4 glibc-langpack-mi-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm bbcb38c5c275e68288d14c4d01d62bfb513a1931bfdbf3d6cf9b767d4408684e glibc-langpack-miq-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a08771333c78014a3e22583835b70aa7803ab461295887f30fe0708efb10a34c glibc-langpack-mjw-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 1a73b710dd455304ef281df99085d1a00472031303496685701d9945fda875e3 glibc-langpack-mk-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm c417282b3b1414df6d7546fb537a7eeed6b16a333cdfaec392c5c0f1f9862a60 glibc-langpack-ml-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d38fca5150adeab8b0f20ca930a67d45ff6e1eee099a349ea0ee43185eda2ae6 glibc-langpack-mn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm def2a72b80d05057ac1ef8876009a6740baa153d75d7b86a3f5b60a9346ee2c4 glibc-langpack-mni-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 0ba39fcf388f8096abd4ae4d0de7bcddcd789aca9953dc2daa90f1fe856f9736 glibc-langpack-mnw-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 523469f8c1692d667032a5380b7e990b16d1558fe2fe091aac78b9f9e83a62b3 glibc-langpack-mr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 30b49138491db563db3919220dff9eacdb22bc86ce175a1125c2fa6aec92dade glibc-langpack-ms-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm f933c4153e87b70b3ca89d0db7a02ad04d09f1cc10ca6adfbc695d41f1e43f5e glibc-langpack-mt-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 8a628c1b642489a4bcf471f731a378a980f6503a4930c1754e1030a21c402e79 glibc-langpack-my-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 4901e16b3fc409d0326d79b9ad6ab2e6709e9eab2c76f2e7fbf32249cf28a5ed glibc-langpack-nan-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a8605655e0628438cd69fad93c7079efe6c759a5b4d6644572f52ca9b517fb7c glibc-langpack-nb-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 08a428f9a8feb0497554fc50bb59957bdcae0942f5594d3ed41b574295785b4a glibc-langpack-nds-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 21ed920f856623305b528354840c1fb998b1f4afdfceaaa4f163cabea8da4810 glibc-langpack-ne-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 98853a1c2dc1e3ba8af8b96974b87d77e010c59874c5c388e9947283ab1e4787 glibc-langpack-nhn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 57def37b80170e0bd93bf66ba5c6db7eb7f533c19ecf267171461780b932b54b glibc-langpack-niu-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 4cbf3935b7560488ead73dc041a8ac6467e061cb46847b718328fb3158f42563 glibc-langpack-nl-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 6d71a170b79ff1280d87ad778be3e1bc6530127cbfe97c8986e60690b8b61402 glibc-langpack-nn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 507798b2f2acdb8dd9d2f28dc10069910658e7964c4dbe7bbc08de33d1f6ff79 glibc-langpack-nr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e889574cf02b640891028ca53bd63d45d39e4ad95e894634bddbabf58c802c42 glibc-langpack-nso-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 4b606408f3b111f91baf434d4c8961bb7bb4a64b5fb1ee87ff61b398ad23553d glibc-langpack-oc-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 52429fc1fd75af0d301c6e61792e8e3586f6a082dee6f53789bd52975d55cbce glibc-langpack-om-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 6d9968fb6d21e094ed5ef0a0b01fecaf278cf811432fa57f0022bfdfdb3100df glibc-langpack-or-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 64b7f0299a9cc2d78ffffa2cabd3a48faf79ec9893e60f72d24f7b6638bbcd54 glibc-langpack-os-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9197c476c3b0de5a3bd3c7ffd57c6de6db755ad7650c729bd6f43577bf8942b1 glibc-langpack-pa-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a8ae384bb84937cff0b17163a242424b2f663ab9cdd1d3d7e8e0f77865d74a71 glibc-langpack-pap-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ff816c8783a24498de4e3d3d6cf958798951ac558c48ea076446554d20b26292 glibc-langpack-pl-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a384b39ba1067ab9770584425bf16f03ca425657dd6fbeff75ae6405729fb098 glibc-langpack-ps-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 7befba7878743c863386b934e5dafc7835e26df8368dd222729a647b9635e756 glibc-langpack-pt-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 23d65d124ff090b4682d6fb54b578ddc45c3fb540e417f654931f73f5e252e3f glibc-langpack-quz-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 51947e22f978042d72764ec295d0a42a052166f83d7c8f501b9ce079b89aeb6b glibc-langpack-raj-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm c8e8389a0927839362fff7e99f1632f2932d528c15775b89965798439f8c7d56 glibc-langpack-ro-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 4cf240fed72bca83021356be5f5ae9766f375f89f4574b3228753f205e3d9225 glibc-langpack-ru-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 6dea9bafec3d476510314f28847d616b8c80812b6111cc0ef26e5252b02ea0fe glibc-langpack-rw-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm cb0644364b230ac88c60db7bde9b9acf45da6f6006c6c40b22fb422a834f2af0 glibc-langpack-sa-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a61e19aaa8dbe31512d56631c466aee76a43e2ca08c7650db182444540a679c3 glibc-langpack-sah-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 308663326d619eb4495389c1bef2acff82c7e3e2156dd058ab53935f61ce6048 glibc-langpack-sat-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 5732bde7cf320b1154c3b387ce88f6fd86a64b0f6f60613399eb36e5486a2a0a glibc-langpack-sc-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 03c1786a3ca781c5de7d6c6a67d15c92784d7d68b51e626a76da03fc6c4465da glibc-langpack-sd-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9438b77a4d6ab16c9880067e786d170cd62bbba0d6cb84ea9f8218bcd0ce030d glibc-langpack-se-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ed84da432e39472faacaebc71f34c85e60f9fee6ef642d99b451df4e4ce52206 glibc-langpack-sgs-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm dc6223cdc8b4baba361ae514542015f8616c166964cec42b4e4298feb34eb5b8 glibc-langpack-shn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm c4f01ab5d6f7a7589ab1dbb28726c66a5cc676fff5b8f681502995c431e2a0cf glibc-langpack-shs-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 226da1a3d32c1991159f1088ffb74b5efd7f926f86b5a1a082b0483274553270 glibc-langpack-si-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 36b27d9437ba846477185732b9c6331f35138c5e310fa92630e004bd1608c954 glibc-langpack-sid-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 268e855bc3667dae195488f2922ec85aa0c7da17c6a89bbe40322b38fee53555 glibc-langpack-sk-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm cc380da0e925c339a720836c5716ba65ab09dd81429bcebd66426bc5fc076286 glibc-langpack-sl-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d5d0b96a81954f391140c5520c15e2d630dda9b973b059fa598bf8827ca5783c glibc-langpack-sm-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a2d14a23c9b3ca967383b3d31da31039d1b108cbb4613f33f13925bae97efa0b glibc-langpack-so-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 1f6e2e2ea3cca31e3ce1e465bafca9d5bf977da43ce7f550f6fb3c5cbc6464c3 glibc-langpack-sq-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm b670be6da9bd29d1b509e7370437ad01a36b116722594c51538cd66ced9f5d4a glibc-langpack-sr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 498aac18babd027518ff98ba14224d258b76a71e9f6b3985ca8377bb4e52d582 glibc-langpack-ss-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a545f4fcaac75ac7d3e72dfc858eac96656d19ebe88fd78e81c8379cc9d77536 glibc-langpack-st-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm dfa38ba535b18208f1a150d0e77e026ad184bb5ebcdb60a3898f27c00a3f2754 glibc-langpack-sv-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm dd65bfbd5e111c81b9d0ac613b72f444d3e9ca94577fe20e637a9ce945cea446 glibc-langpack-sw-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 9f458af662189b91f777524123f58761d15f7076e1e609e0cd8e6f4a17a0471f glibc-langpack-szl-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 2fcb1142e47a79dcfc3d9cbefc716f3146531e0fb5472b8979cb843997a00c02 glibc-langpack-ta-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e3f626d40af00a467246960a57f9aa600b525f7d4daf13e0779ffd3769be2b4b glibc-langpack-tcy-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ef9066cb5affb58887151d87bf620b5e54b4ff35b814040b9f59d4a41f67a90e glibc-langpack-te-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 0ad2022e7cc1aec7aab08e75f6b905de4974f3c196d8ec554138a072ed6835f1 glibc-langpack-tg-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 224da27119109b28feb356e46a9975f2d55a9118a0e2b16cafd029957e6a8d04 glibc-langpack-th-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e8bc0d81a7ccb249b8ccae8c749a51143940b8c44d8888ca37c030e72ddc5e28 glibc-langpack-the-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 2109bbf3b5813ea6f798c951b00cfed555d469f0149542d942594187be8b9088 glibc-langpack-ti-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 7cff7dfc674548d533418e20a9d9f05bbc662e71c01a48f6a04886805a32d718 glibc-langpack-tig-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 35221206f8fae14dab939f1439c6f406cc58280391f7a986aed40bbf96a3d015 glibc-langpack-tk-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm bc7f11026c6694897951a0ceb3425d6dd73345c28c09779c8c299349da2cd33b glibc-langpack-tl-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ab3cf7c16277e2af6c30f5bf33e3c5eb8a8b01e89b90238434e105f786c19560 glibc-langpack-tn-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ca88757e643a42a5f63adf0a643c952236838021c02d951a60450157d15e3d23 glibc-langpack-to-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm f380681fd1f4da6159821c4b3aa339042370adec1d7872fef96717f54cc554fe glibc-langpack-tpi-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 66a55b3802e4676976da7c8801fe38f5dbeef2d080d60286fbea45d877352881 glibc-langpack-tr-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e9f748c0bf51160ca04459539d71acbdc4b4783e49107520ebe10715bc2c300f glibc-langpack-ts-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 1e7cb4dc5c5aecfa19a5aa037e8c857d7c9d6030ea5d018e2bd2bec076bd8a9e glibc-langpack-tt-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 2625b1e67ba0c95ff34f8d20fd3aa06c52d979029a68b4a9c44022ecc628649e glibc-langpack-ug-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm aaf8fead24d833c69478ed1d8e8385edc80ce5577860b75c6b943792f9fe20b6 glibc-langpack-uk-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm d2bc03052fd0d45347b7a6e23ba6c92d347ebb6ce9f467a1ee90dbe3d373ed9a glibc-langpack-unm-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 83d4a6b9183f541b90795a681f0c0d72f93e0a966285cc56e3fdf6608242a2c8 glibc-langpack-ur-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ee18528015efde282402c00c9355572689845e1082e6dea21ed0d3a48c347296 glibc-langpack-uz-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e4d0c3eff63a6f730fb0e67a9b705dc27dae6414594dc02e0e8c0be80389deea glibc-langpack-ve-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 47b5d3048003ec27ddbcaca93522a60952a1056fa96eaebdbef0296d0632869e glibc-langpack-vi-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm adb89a2e08131df9d198f4060f3abc76c5e6d393af5d1ba89ce7fdf3257ec566 glibc-langpack-wa-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 750c622449ef9e594ba28e1039f51796ea4f90acd24071abd767eab9b6b82e55 glibc-langpack-wae-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 63fc726623b6adb82d85c77bb9117f7a14472ecaa4013bd9da095c39291daaf6 glibc-langpack-wal-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 139d5ba4d768cebe4187255d278e132d9bcd4cfb8131d4e4d9a8aee95b2fabd8 glibc-langpack-wo-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm a1fd41b5b4575ea5a11af612f816f39a1eb2b399fedf370869a0edf82b6afea1 glibc-langpack-xh-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 876ec7489700ec98329e6c1a4b81c84dfae79fbb799c60609753fd8fb2c5bbfe glibc-langpack-yi-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 04acbbd473dbc557e5dbfc6747703926495c9c0728f521bb6f50645fffe64235 glibc-langpack-yo-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 7a1e0378aeccadcb9d67838c4c545656e27bf42cf3bd524c57e114e1618fe603 glibc-langpack-yue-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 4402f2cc9f57ddb7f279d86460d6e53f618bd254832f8edeabd0d5fb197dc5aa glibc-langpack-yuw-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm ac5d4a30a724418e998d6ee14daa624bddfd057a55f65d41e5a26bd660ceb3e7 glibc-langpack-zh-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 7ff8a6cb38cb56d35cc0a84c6623853a6ab2fe0bb072b33bb2c66e1e011747e6 glibc-langpack-zu-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 7497ff105303a953922b3e56b5b8bd27d78765ea23bc2c27f492ccfa6d3e26e0 glibc-locale-source-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 3bc92ebe970b35c40d1ffedf59f8dff22df11508cf1fbdf0291d8ed3edc52bd3 glibc-minimal-langpack-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 8698241b47151a53c8a80728f75cab28789be9629010c89f5f15edcf8b9085b4 glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els3.i686.rpm ee8f4421cd81ae4723623b009d2f0e054bf0fc88dafd45fd60d835acc878e713 glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm b54e7216adcfd924dfb3bf11c107679522119862ce91de650eed3407de29989d glibc-static-2.34-60.el9_2.7.tuxcare.els3.i686.rpm 683d04c5474fe0dc1d91b0d5ce1fc9c6bd0e3dcf0b9958f423dfd79bd73292f0 glibc-static-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 1b63dc8dd95d8344772e838c30a15add80217b36b2fd037b7484e1e1bcb89a30 glibc-utils-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm e211ef328a714764ad5ea0d5ce4c7ff507d6519a29e35ca5d66840b90564d5fc libnsl-2.34-60.el9_2.7.tuxcare.els3.i686.rpm 4850d9cfb6ab72cd3cfe0dfad36c5fa75d0cb19f1e496ad1ddcd0d7d9d041a8c libnsl-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 7b0f5abdcc04070aa8c870700e476e665527cd19e88f9796d3015a8eb31b07e4 nscd-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 439c7abc6c237f88b34124c4d475ff96b5b4762926df5964acbcaa27a79c42f5 nss_db-2.34-60.el9_2.7.tuxcare.els3.i686.rpm 34ad856b00efd98282bf01048d965913123d80404eefad35cc359b2dfb26b250 nss_db-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 1f12d2b667a45dcf91436a3138224d9ce9efecffb6525c55e6d13fa2a7c08f02 nss_hesiod-2.34-60.el9_2.7.tuxcare.els3.i686.rpm d2a823ebbde4e2f4a44a474ab09ce51b2a295b849f1d2f08052bd0010060578b nss_hesiod-2.34-60.el9_2.7.tuxcare.els3.x86_64.rpm 05139f488549208b1f0648f9b243679ea35bc4ae56c1c75d9684fb01b6ac29f0 sysroot-aarch64-el9-glibc-2.34-60.el9_2.7.tuxcare.els3.noarch.rpm 6bfc9b4b3990c01ebc794894cfb4bb0128190de19ee7854c310c1bbee16c6505 sysroot-i386-el9-glibc-2.34-60.el9_2.7.tuxcare.els3.noarch.rpm 3f1f4b7ef20f0e033e0ddbbcbbc437a1feb038bf02e30e51506be6f4ef2c2974 sysroot-x86_64-el9-glibc-2.34-60.el9_2.7.tuxcare.els3.noarch.rpm 9e75e3c0922492576b2897aacadec8df74e362e96ddd35578f307762dd8b9ac8 CLSA-2025:1751892313 TuxCare License Agreement 0 - CVE-2020-12762: fix out of bounds write vulnerability in printbuf Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-12762: fix out of bounds write vulnerability in printbuf

0 tuxcare-almalinux9.2-esu libfastjson-0.99.9-3.el9.tuxcare.els1.i686.rpm 009eee2f98fa1cd13943d691be591912c638f25e019dbefeb6b8564546a7f5b4 libfastjson-0.99.9-3.el9.tuxcare.els1.x86_64.rpm e3d29dba607a84f5829d8fbddcafa98b2978ac0f6baf1a6d557d6f7f1363c69a libfastjson-devel-0.99.9-3.el9.tuxcare.els1.x86_64.rpm b031681c45402c03c57fb8147729ebcdf034e6172479e7ee4ea97edee25b2ffb CLSA-2025:1751892809 TuxCare License Agreement 0 - CVE-2024-46954: fix decode_utf8 to forbid overlong encodings Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-46954: fix decode_utf8 to forbid overlong encodings

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els9.i686.rpm abec256a32df37ee05362de2358c32ed3e020d879c9fcad21fa778bd1ae9b997 ghostscript-9.54.0-11.el9_2.tuxcare.els9.x86_64.rpm d8098a6ace7232acd21d968705cdda0c7b5eac6de78d410a347dee5cc8ef8641 ghostscript-doc-9.54.0-11.el9_2.tuxcare.els9.noarch.rpm e33699ec57528bed99b680280738e4516be65006111e959b6d129d2360cd369a ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els9.x86_64.rpm bd74dfebbbde47ac2e6fc98a85e6b9b09ea9ded717ec59a6336b2b4b41147816 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els9.x86_64.rpm 93858c772c36020633ec009e4617c06fa21d7fbd21ac9fa21a2d1e50b00dc224 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els9.i686.rpm b416ddb1ee996ad6d4c380b82e49eba4638195b209d14316098e9b089c0f2c22 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els9.x86_64.rpm 6436ffae4a047edc346c4f35c895e4782c20b4b77e3099652ce21e6d494ca764 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els9.i686.rpm b99e34317d2c24b5ab7a7c07463415a161536196f4e9641eaa366813765a3c19 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els9.x86_64.rpm 2688555ef189d553b295cba3c0a1a66b21ee256ae66ebadc6f592a06fcb9cb25 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els9.x86_64.rpm a904b2f080ad7edf2594ded1ac892e2eff7e4df8dae5d304d2f53f5436777cf5 libgs-9.54.0-11.el9_2.tuxcare.els9.i686.rpm 533f8c44d4c2c86fdbd239b615c8b261f6aafaef9ee9b44a01d9cc114fd158f4 libgs-9.54.0-11.el9_2.tuxcare.els9.x86_64.rpm d73bcae6870563b568cd676cadd7de68e7b74d3571fc085adc13d0d664e88469 libgs-devel-9.54.0-11.el9_2.tuxcare.els9.i686.rpm 703556eeaabfc09f3f01cddba12a1f76b9539b947fc7fcd4aa4a2992a33396ed libgs-devel-9.54.0-11.el9_2.tuxcare.els9.x86_64.rpm 2b9f058c57a13972a966f8447d70ff1823c4995551d8cbe82e132f69263d9caa CLSA-2025:1751893277 TuxCare License Agreement 0 - CVE-2023-50967: fix denial of service issue caused by large p2c value Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-50967: fix denial of service issue caused by large p2c value

0 tuxcare-almalinux9.2-esu jose-11-3.el9.tuxcare.els1.x86_64.rpm b6ddd0726adc65b8a4d09b0992a85b0a219cd6f64c614b8ecfab1aedb04d2db7 libjose-11-3.el9.tuxcare.els1.i686.rpm 731c465e09fd5dac1a0464bf391740b66602519565710a524347af549f1ca88d libjose-11-3.el9.tuxcare.els1.x86_64.rpm 86b145c81eb44dd3bee9cb50b138c08147b2d20d7f4580daefc9f5cc77d41425 libjose-devel-11-3.el9.tuxcare.els1.i686.rpm 5bf6037d7d81387f6657f38b93187ed251cf5e9efdc222e37f99951c8d8bbd58 libjose-devel-11-3.el9.tuxcare.els1.x86_64.rpm 50a345e2c3196fb0f29f702afadc44aaaafc414038123395c8ae35368632362a CLSA-2025:1751894976 TuxCare License Agreement 0 - Update to 2.44.4 - CVE-2023-42950: fix a use after free issue - CVE-2024-27851: fix processing maliciously crafted web content may lead to arbitrary code execution - CVE-2024-27820: fix processing web content may lead to arbitrary code execution - CVE-2024-4558: fix use after free in ANGLE Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to 2.44.4 - CVE-2023-42950: fix a use after free issue - CVE-2024-27851: fix processing maliciously crafted web content may lead to arbitrary code execution - CVE-2024-27820: fix processing web content may lead to arbitrary code execution - CVE-2024-4558: fix use after free in ANGLE

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.44.4-1.el9.tuxcare.els1.x86_64.rpm f93945129dcf7479b501e7cea9e3c4634b082485f0371161e4a10fbb8143523f webkit2gtk3-devel-2.44.4-1.el9.tuxcare.els1.x86_64.rpm f387f487239a704b9df1a307015cc84b9e7b74b14dea454c8d64a2ed9eca676e webkit2gtk3-jsc-2.44.4-1.el9.tuxcare.els1.x86_64.rpm ce79852575a070ed7dc5d8c99ce23636eb4ea3a95441b40eb2eed27897d66913 webkit2gtk3-jsc-devel-2.44.4-1.el9.tuxcare.els1.x86_64.rpm c58873c2732a793f7e0ed62870714e218e9d517a07d7e64467c448f904fe7bf5 CLSA-2025:1751912853 TuxCare License Agreement 0 - Update to 1.22.5 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to 1.22.5

0 tuxcare-almalinux9.2-esu go-toolset-1.22.5-1.el9_2.tuxcare.els1.x86_64.rpm e7c6bdb8601f840a5249a87642b2dc0b5735f170a3cb6278b958a95066652c41 golang-1.22.5-1.el9_2.tuxcare.els1.x86_64.rpm 1dbcc129a1918a9acf9387e87514d3adc0e66551c8dcf18a367fbbe75b6c8a78 golang-bin-1.22.5-1.el9_2.tuxcare.els1.x86_64.rpm b93c25c3e0828aff82565e8061d6ed37cf986f37916f859d2c29eb39c14788e2 golang-docs-1.22.5-1.el9_2.tuxcare.els1.noarch.rpm bed212cbdd72be49b4a9c837e07db413f5da232bba47b28ae0c76b239d08a82e golang-misc-1.22.5-1.el9_2.tuxcare.els1.noarch.rpm 7962635a29be64317f5f6843adfab2fba5f0bbfb35933fde9e0793904421eeb8 golang-src-1.22.5-1.el9_2.tuxcare.els1.noarch.rpm 94024f3140079e707dc480e818819ae9fe32a3be5c44de92060af1ea4a345110 golang-tests-1.22.5-1.el9_2.tuxcare.els1.noarch.rpm d8d955fb0f042a2f2aca8dd8917c17ac4f96633f0018b8ab9d1ea027afc815c1 CLSA-2025:1751913634 TuxCare License Agreement 0 - xdg-email: disable special support for Thunderbird to address following vulnerabilities: - CVE-2020-27748: local file inclusion vulnerability - CVE-2022-4055: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- xdg-email: disable special support for Thunderbird to address following vulnerabilities: - CVE-2020-27748: local file inclusion vulnerability - CVE-2022-4055: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments

0 tuxcare-almalinux9.2-esu xdg-utils-1.1.3-11.el9.tuxcare.els1.noarch.rpm 9d60c51af7b92d6f3e784cc40cd2372213580cc85f9ee6c8a1e6102ff6cca4d0 CLSA-2025:1752059462 TuxCare License Agreement 0 - update to CKBI 2.74 from NSS 3.110 - updated certificates: - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Entrust Root Certification Authority" - # Certificate "AffirmTrust Commercial" - # Certificate "AffirmTrust Networking" - # Certificate "AffirmTrust Premium" - # Certificate "AffirmTrust Premium ECC" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "certSIGN ROOT CA" - # Certificate "ACCVRAIZ1" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "Security Communication ECC RootCA1" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - removed certificates: - # Certificate "CCA India 2015 SPL" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - added certificates: - # Certificate "TWCA CYBER Root CA" - # Certificate "TWCA Global Root CA G2" - # Certificate "SecureSign Root CA12" - # Certificate "SecureSign Root CA14" - # Certificate "SecureSign Root CA15" - # Certificate "D-TRUST BR Root CA 2 2023" - # Certificate "D-TRUST EV Root CA 2 2023" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.74 from NSS 3.110 - updated certificates: - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Entrust Root Certification Authority" - # Certificate "AffirmTrust Commercial" - # Certificate "AffirmTrust Networking" - # Certificate "AffirmTrust Premium" - # Certificate "AffirmTrust Premium ECC" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "certSIGN ROOT CA" - # Certificate "ACCVRAIZ1" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "Security Communication ECC RootCA1" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - removed certificates: - # Certificate "CCA India 2015 SPL" - # Certificate "VAS Latvijas Pasts SSI(RCA)" - added certificates: - # Certificate "TWCA CYBER Root CA" - # Certificate "TWCA Global Root CA G2" - # Certificate "SecureSign Root CA12" - # Certificate "SecureSign Root CA14" - # Certificate "SecureSign Root CA15" - # Certificate "D-TRUST BR Root CA 2 2023" - # Certificate "D-TRUST EV Root CA 2 2023"

0 tuxcare-almalinux9.2-esu ca-certificates-2025.2.74_v7.0.306-90.1.el9_2.tuxcare.els1.noarch.rpm 1f4780f2a779728476f59c577776132a0b3fbe417ff2e54bd6283e813ba7a97d CLSA-2025:1751916475 TuxCare License Agreement 0 - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803} - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063} - nfsd: fix possible badness in FREE_STATEID {CVE-2024-50043} - nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open {CVE-2024-46682} - nfsd: fix race between laundromat and free_stateid {CVE-2024-50106} - nfsd: split sc_status out of sc_type {CVE-2024-46682} - net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926} - net: fix geneve_opt length integer overflow {CVE-2025-22055} - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation {CVE-2024-53213} - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths {CVE-2022-48991} - xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803} - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063} - nfsd: fix possible badness in FREE_STATEID {CVE-2024-50043} - nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open {CVE-2024-46682} - nfsd: fix race between laundromat and free_stateid {CVE-2024-50106} - nfsd: split sc_status out of sc_type {CVE-2024-46682} - net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926} - net: fix geneve_opt length integer overflow {CVE-2025-22055} - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation {CVE-2024-53213} - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths {CVE-2022-48991} - xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm f7f061fda8293871dda9bb0104b9ccca16de7f4ec146d9f5082ee542abe80af2 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 83ce7c61ff2598eecdb91128155ee8889d9f7f3d4455feaca69359c90ec0ffb1 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch.rpm fe1546a08a1b52fc61b67772d08843e55622c18976f6f78592b5a959b473e8a6 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm bd85a8e24b0a6ab991bc295c0b0bf1ad1305ae5a4539a6387361e57f8f6a2165 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm ce87209c6595ec9d551c52129a1f9c292d54c1fb7798d211d91f66298c26d222 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 8f7b64057b3dfcefe36dfa6bdd13309a5429ca89dd78c264d7ad372d694d508d kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm c9c65c5d86895a566aa83fe76e8a9cd2109a483cdb056fe0cd6e7d42799d7d29 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 216b263706fd9ab47158868a953692d62dd5c99e24fe46f9f8d90794c352297b kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 7ebd49040ad0ce7a5970da795c6d63b6823120391cc2e6ba8aeb6929f54fe22f kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm fa97e551c938700e9a94833079f32b73cf7a1c9d4758e99aaa45a142c3e95adf kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 290555d7760535a6ec24e0dd688677ce46beba242aa682b287422266d8adb06c kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm a271b56304dc3be792a6f0f43b5caff3dafd7e27f14a3d56f6d455034748ae38 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 489d09fd065237c8fcddaec0b0b8963c14e40dd7fa6197bd17728285b939563a kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 9b3ad2e228de735b7c4691d376ee2159e9149f1d45f111fb83ee474d17911dec kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm e3eba1f3aac1d335e19fae28d5a4b6c111082f88160ccdaa5c8d7ca5a5e8ec9b kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm f3ee76b1510980206b3a7400d4f0d94a78443e0f89588bbb939fdcf7193e916f kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 4f4ce63675000371417502b91bf8720ec1e8a54b73f05daff5c8d178c6404bdb kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch.rpm 34306b9fd96b6e1602d78eeea3a45dfae2efbc1d23e900a12d3f2d057bd6fc09 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 9d1d4dcf4ccb5e26a35f71ce6aee1b60bf5c550483eb2e33395c44351a4d5bc1 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 9c5136ce2e622d4f1ab0838e7cd838a0054aa84350066a0309ce2e921a2be6a6 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 516fde58ad726291997b4f9e578c44108993b1038d1d0849261f4bcc361ad762 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm c760292041cd02028ebf7d2ebda2c03dd63611a1331e526ce473b20afd947881 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm f5d01b0fe0daffca7474e944b62aa12517ad1a23dcc4f19d863a02473a28db69 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm b5bd3fae2b84311c9790382dcd4aef4424cc3dcb639f10ae89294a6c4f61f763 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm ee54f574f3b764a3cabe4e31cccd79ffcf8210175f38a66fae14c557fe0d635b kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 413fff9db8c60cba7f807ef2edbed3fb398596df55e7d34b507c8d1a919a5baa kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 0c766af36a00f8810407900fd1189e1c628539678664559b6b12f96e51ce32ba kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 6db6d0ea0304396ea277fc02c65584daf0a585f5643ffaa105a47e3de01c2835 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 546391e964f4314b1b9ecf97b7154a5ee54d7965812594834a11e28fd62e6bc0 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 6ad45383c6510e62e0e6930a2caafbb76ef6573e819c04bdb634f75c1a698ae5 libbpf-1.0.0-2.el9_2.tuxcare.7.els15.i686.rpm ee15debe93be3225685ea46a3093cee08731dc49c949334a0ba53c43da0c9233 libbpf-1.0.0-2.el9_2.tuxcare.7.els15.x86_64.rpm 9d3ebfac949eedc422eeb2d6871607a947b267a22dc112d185cb7f129f98131d libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els15.i686.rpm 272caf3e2a5c5f36e5503e41207ff0435c9e5488c5da1b59fda3b6b13e357d00 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els15.x86_64.rpm b0b9c1d2539be3d5992e2801aae0aa97ea0bafc4eeea61dc62445b4b36cb5f12 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els15.i686.rpm 6c7586493bbc390000ba7f581a9fcb3d35c70b83dd466618f98a7f8c5932dc35 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els15.x86_64.rpm ffe2b1d95e336559f532210617989f1c128b68b689b05e6d3d7ff5bf0be90ca1 perf-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm e15761fcad0f6fd182460280f73b14fe7b96b390318e5ba54157a2e2f5662daa python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm f20b8035cccb4760c46341327b2d330c86ec25a9d45dd9852606f4ef052a68ff rtla-5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64.rpm 6bf8992ff128d372b58affb8689e655e77796627a5597f55d8cea29f47574642 CLSA-2025:1752087722 TuxCare License Agreement 0 - CVE-2024-54479: fix issue with processing maliciously crafted web content may lead to an unexpected process crash Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-54479: fix issue with processing maliciously crafted web content may lead to an unexpected process crash

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.44.4-1.el9.tuxcare.els5.x86_64.rpm 5904a725bb97a72821350c2ea0e95ae74c97615e8f2792a32fb96560f9591279 webkit2gtk3-devel-2.44.4-1.el9.tuxcare.els5.x86_64.rpm 718549a2e6e9aa49d8f0108ace4f13fba77825fcb0753a1259b061f12f5ae201 webkit2gtk3-jsc-2.44.4-1.el9.tuxcare.els5.x86_64.rpm 8c5a3bf6cea410ea6b8289094227a00970ca6d7a9060e4a341213742be652bb8 webkit2gtk3-jsc-devel-2.44.4-1.el9.tuxcare.els5.x86_64.rpm 329b9c4aa1a99d5a1d830782783bd5038b128822566fe93a7163c9ee0fdcaf5e CLSA-2025:1752088235 TuxCare License Agreement 0 - CVE-2024-39331: fix org-link-expand-abbrev to not expand unsafe link abbreviations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-39331: fix org-link-expand-abbrev to not expand unsafe link abbreviations

0 tuxcare-almalinux9.2-esu emacs-27.2-8.el9_2.1.tuxcare.els3.x86_64.rpm a364b0fad46772f7961a30e74ce773609f5f8a7a2491363f26e7492865e0da53 emacs-common-27.2-8.el9_2.1.tuxcare.els3.x86_64.rpm 9c3fe4d1674da2768cdcc15038a24a71317191da347f697200a55572666832b1 emacs-devel-27.2-8.el9_2.1.tuxcare.els3.x86_64.rpm 86ed1a6a57741b72b1f7446bfff330cb6d28a1e01f0fe85f9cf5c0af6f6bbc11 emacs-filesystem-27.2-8.el9_2.1.tuxcare.els3.noarch.rpm f9f8e33f0549edf90641f23bfa0530934d0e9ff9b55bee47166bdbe728850de9 emacs-lucid-27.2-8.el9_2.1.tuxcare.els3.x86_64.rpm 3940a7b37e2ad4814576b49de599ee616837f64bea4d07cc2b8aa244aa8cfa60 emacs-nox-27.2-8.el9_2.1.tuxcare.els3.x86_64.rpm a90a126b768b5571a7b6db2d204083dff9db9f4deee02e8fae76ddf49005b3e5 emacs-terminal-27.2-8.el9_2.1.tuxcare.els3.noarch.rpm c3acac60412d84c427220d384180f949bc633cccc1dc822b9b2fad98c60703cb CLSA-2025:1752088672 TuxCare License Agreement 0 - CVE-2025-27144: fix vulnerability in go-jose dependency Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27144: fix vulnerability in go-jose dependency

0 tuxcare-almalinux9.2-esu buildah-1.35.4-1.el9_2.tuxcare.els2.x86_64.rpm 2ab11eabff870e0f8bd090e6f3c924393b381de37f42dd58878eca60de7572fd buildah-tests-1.35.4-1.el9_2.tuxcare.els2.x86_64.rpm 2bcfb9634ba03ea9534f099bd2cd83db292ad5e1990bb7be777a69352b29e88d CLSA-2025:1752089153 TuxCare License Agreement 0 - CVE-2024-31449: fix stack buffer overflow in bit library triggered by Lua script execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-31449: fix stack buffer overflow in bit library triggered by Lua script execution

0 tuxcare-almalinux9.2-esu redis-6.2.7-1.el9.tuxcare.els3.x86_64.rpm 3b6ca5fc590c632bb55e07653a15ad1b341c99e3e083afaf15121757affe7edc redis-devel-6.2.7-1.el9.tuxcare.els3.i686.rpm 6e26ca881e1eca0fd65a83c58337b2b98ee38572faa223d2d6048a78e7795322 redis-devel-6.2.7-1.el9.tuxcare.els3.x86_64.rpm 52286316ef76d4412042a4dd0d975b4c6cd1d48864b783bc02aac538e5d03b0e redis-doc-6.2.7-1.el9.tuxcare.els3.noarch.rpm 7a4c792f480492ac00524d9d4eed9075d9c9b7765ec337ec282e7ca69242a1ab CLSA-2025:1752089633 TuxCare License Agreement 0 - CVE-2025-6020: fix potential privilege escalationvia multiple symlink attacks and race conditions Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6020: fix potential privilege escalationvia multiple symlink attacks and race conditions

0 tuxcare-almalinux9.2-esu pam-1.5.1-14.el9.tuxcare.els3.i686.rpm fd7295ab75bcbce12be669f1ff100a6f961ffca7e642ff59b3f8c3efd4077b9e pam-1.5.1-14.el9.tuxcare.els3.x86_64.rpm 7308fe27cb892984d104e4d9181afaed90fd27f4f22442e64972e6f45cc13ec5 pam-devel-1.5.1-14.el9.tuxcare.els3.i686.rpm 0096f1eddd67fc36bb000b88ec876af6be2a5e2403ac7df5ce1b094d15acc23c pam-devel-1.5.1-14.el9.tuxcare.els3.x86_64.rpm e6ccfc8a07c33c0ac3c90c80ce5281fc09f32c46175f827673efd02f219561ac pam-docs-1.5.1-14.el9.tuxcare.els3.x86_64.rpm 899b44efc6217827e7f20ac1bb1d68684a216401de0992628431182f3e766141 CLSA-2025:1752090137 TuxCare License Agreement 0 - Fix incorrect tzdb.dat by harding links None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix incorrect tzdb.dat by harding links

0 tuxcare-almalinux9.2-esu tzdata-2025b-1.el9.tuxcare.els2.noarch.rpm 4691e276c5e186990bea20885a0b93a4240a28fd40ef4e0fd55458a91c693b7f tzdata-java-2025b-1.el9.tuxcare.els2.noarch.rpm 2a0dc15cb730c3eb748f2ee76ada37c8a1b632c3d8c0bc2b1076296d900a8f74 CLSA-2025:1752238368 TuxCare License Agreement 0 - Fix timing side-channel in deterministic ECDSA (RHEL-28958) - Fix potential crash during chain building/verification (RHEL-28953) None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix timing side-channel in deterministic ECDSA (RHEL-28958) - Fix potential crash during chain building/verification (RHEL-28953)

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.4.i686.rpm 3311e0d87297e90c5ab9a1bcb1abc2059f1f1f1a933e875c070e4edf4c5441e5 gnutls-3.7.6-23.el9_2.tuxcare.4.x86_64.rpm 30b7fc54f169fdc64238e1ee6d1b0b7dda8edae5c8cbdb90c8cc103566e9e750 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.i686.rpm 0aaa671a1f5807efaab712f422a7ea06d9598036f0e84cacbe0c8269af3ee4f6 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.x86_64.rpm ddec13f047e592358e49e0d9c4b492519322c31c0faa1994d9d1aa57333ac5bb gnutls-dane-3.7.6-23.el9_2.tuxcare.4.i686.rpm 7004a18a478482c622014c9f1eb206917689062e22f84b183122551fa88f4320 gnutls-dane-3.7.6-23.el9_2.tuxcare.4.x86_64.rpm 55f69da04c27eb2fc1b2981741b36a8d622195e8bf2534c32df13a16132504f6 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.i686.rpm 50e6a8ae803e40fc5e60c0cff1047ece276d28129927eb57db578d98bdb1b6f7 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.x86_64.rpm 9e7ac5bb6ec81cd46de566b2ade56b7568a0c96219ec095f7e8dce89aacf2f89 gnutls-utils-3.7.6-23.el9_2.tuxcare.4.x86_64.rpm d37c0223aef8efce0995b49e856bdc278da1007ee47ed1b096648fa516928831 CLSA-2025:1752247075 TuxCare License Agreement 0 - CVE-2025-3891: fix denial of service issue caused by sending empty POST request when OIDCPreservePost directive is enabled Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-3891: fix denial of service issue caused by sending empty POST request when OIDCPreservePost directive is enabled

0 tuxcare-almalinux9.2-esu mod_auth_openidc-2.4.9.4-1.el9.tuxcare.els4.x86_64.rpm 616a97be9dcb472b4c52a12f9f0fd26218ffbc01c87fe9136d572736ab6b6d29 CLSA-2025:1752247531 TuxCare License Agreement 0 - CVE-2024-12088: fix path traversal vulnerability in symbolic link destinations when using --safe-links option Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12088: fix path traversal vulnerability in symbolic link destinations when using --safe-links option

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9.tuxcare.els2.x86_64.rpm aea2f9696b2900d1b62c6f5dfaa666329a28bb3029d0fa1d88f94fb791225f51 rsync-daemon-3.2.3-19.el9.tuxcare.els2.noarch.rpm 75c9fb0109b39925da077c1116099c13b419b6d5b30cae741a624cf594975d5b CLSA-2025:1752516250 TuxCare License Agreement 0 - CVE-2025-23419: fix issue allowing session resumption to bypass client certificate authentication when multiple server blocks share same IP/port Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-23419: fix issue allowing session resumption to bypass client certificate authentication when multiple server blocks share same IP/port

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9.1.alma.1.tuxcare.els3.x86_64.rpm 8536281c406d602db7126dc7df8a33e3876bdc17c8df0001161666b2f6b1bcd1 nginx-all-modules-1.20.1-14.el9.1.alma.1.tuxcare.els3.noarch.rpm e565f8ed34b95ae7ca7f59683679403479560325fa4874aba6d42207f1480e6f nginx-core-1.20.1-14.el9.1.alma.1.tuxcare.els3.x86_64.rpm 8bb9e8488a924c5c08a68beeca8d6897c9f7b183fb4a8b376a67358e061639f0 nginx-filesystem-1.20.1-14.el9.1.alma.1.tuxcare.els3.noarch.rpm b506c840050186eceb0f4f082bcf15db1bc41d2f3dcb1c22241b5f6d5b05ad8f nginx-mod-devel-1.20.1-14.el9.1.alma.1.tuxcare.els3.x86_64.rpm 76a35d859c577d8088a305a612cabc3e23807fe40f72f8ccad066920fb7c61c3 nginx-mod-http-image-filter-1.20.1-14.el9.1.alma.1.tuxcare.els3.x86_64.rpm 9ac637adf211e277782f817fca255d94699939aba83d83b73c91db87a873df49 nginx-mod-http-perl-1.20.1-14.el9.1.alma.1.tuxcare.els3.x86_64.rpm 1420713d72e62afe3fb1c4111213306b9bcb50de0992c6eb6cbf1532c396805e nginx-mod-http-xslt-filter-1.20.1-14.el9.1.alma.1.tuxcare.els3.x86_64.rpm fa560b3928ec3486fd5645265c46c21d28e58e6a264b23162a307050fcda41b1 nginx-mod-mail-1.20.1-14.el9.1.alma.1.tuxcare.els3.x86_64.rpm 73a7c0717b8dfc42a7391e0f28ad53286bf729af05a6305a6b511958d993bcb2 nginx-mod-stream-1.20.1-14.el9.1.alma.1.tuxcare.els3.x86_64.rpm 506cf028852db52418e42aa709d363306b09025ca0df9c0f405e656a0e7fb2af CLSA-2025:1752655009 TuxCare License Agreement 0 - CVE-2024-20952: remote data access or modification in sandboxed clients - CVE-2024-20932: modify or access sensitive data in sandboxed client environments - CVE-2024-20918: remote data access or modification in sandboxed clients - CVE-2024-20926: remote data access in sandboxed clients - CVE-2024-20945: low-privileged users can access sensitive data - CVE-2024-20921: emote data access via exposed APIs in sandboxed clients - CVE-2024-20919: modify critical data via exposed APIs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-20952: remote data access or modification in sandboxed clients - CVE-2024-20932: modify or access sensitive data in sandboxed client environments - CVE-2024-20918: remote data access or modification in sandboxed clients - CVE-2024-20926: remote data access in sandboxed clients - CVE-2024-20945: low-privileged users can access sensitive data - CVE-2024-20921: emote data access via exposed APIs in sandboxed clients - CVE-2024-20919: modify critical data via exposed APIs

0 tuxcare-almalinux9.2-esu java-1.8.0-openjdk-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm bcab97bff57dc1f127994c94fd4ad3f8ecdf2308f16fae61923bdc71152b7de6 java-1.8.0-openjdk-demo-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm bec1ed249adbb69ce2755f37b097a8dd6b84f7f04772d30849c5ca97da23cb61 java-1.8.0-openjdk-demo-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 82fdcf3bd16b80a118dc7097aee9a6aa42dea14a55f96962f8f6efc1a20971db java-1.8.0-openjdk-demo-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm a57ed7ca91896fb572e89895fa727ed601259728fd04df310445430c82fa2037 java-1.8.0-openjdk-devel-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 641537594d05176bbb916c6d47bea36a2d37700c53a47a9c8ae5f9b704bdf41b java-1.8.0-openjdk-devel-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 0cf4864a8be59886d89f911a5b54f49915925cc5c55025ca257dcda4efe54fe8 java-1.8.0-openjdk-devel-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 35afb167b7bdc0d6c46a010f23138f438206c2d93439a19c3ff0cbda8bd405cd java-1.8.0-openjdk-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 9538bea3694f527d8df42f1bb5d3989ee5351e75b1b694c8f4c30eb406dab46a java-1.8.0-openjdk-headless-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 0d15d53306241f41f7693bf9a3e0954943f8b0055b5ec57f5f03671c32d60048 java-1.8.0-openjdk-headless-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 5ea055c1d786c8fba276875833663e39150f1e902150b66733fa2d62c74f02cc java-1.8.0-openjdk-headless-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm dad21da77004164a9ff3c13d5cf4d6f4d8f7a386e6173e2b0114da1b6ac45988 java-1.8.0-openjdk-javadoc-1.8.0.402.b06-3.tuxcare.els1.el9.noarch.rpm 1113dfb761cb4599a9e5f8c362e0479cef2ed456ce884f2decf19734807f613a java-1.8.0-openjdk-javadoc-zip-1.8.0.402.b06-3.tuxcare.els1.el9.noarch.rpm c934c9bb9f8b22ac0efd9090c2df8af0caa3d6512f64e49f8f260c0a04111269 java-1.8.0-openjdk-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm e65f2caa711c11beeaebabaf4420caec444346b4be064cd9aab16a681ba90108 java-1.8.0-openjdk-src-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 15938c7b4233ac8810f7094c0673957e6e393e8fc3420536f356e4a955e9d08c java-1.8.0-openjdk-src-fastdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 812ebdc63bd6e71e69f6c1573202996046ba41280d6f91c3f4f2f51ef4995703 java-1.8.0-openjdk-src-slowdebug-1.8.0.402.b06-3.tuxcare.els1.el9.x86_64.rpm 4e2ad590bf438830ce083a0eeb530b4392c193ba049c6df05e0fa996a6c0a233 CLSA-2025:1752746954 TuxCare License Agreement 0 - CVE-2025-32462: prevent listed users from executing commands on unintended machines by updating sudoers file validation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32462: prevent listed users from executing commands on unintended machines by updating sudoers file validation

0 tuxcare-almalinux9.2-esu sudo-1.9.5p2-9.el9.tuxcare.els3.x86_64.rpm 72a118d764749bc9c1a83659631eef19a42d4a7f90c6a180124aeee00692d7fe sudo-devel-1.9.5p2-9.el9.tuxcare.els3.x86_64.rpm 90deb73b969bbe4479a286f30992961510d24dea1006987254f2c3712d59b981 sudo-python-plugin-1.9.5p2-9.el9.tuxcare.els3.x86_64.rpm 3886f827f44028cf7c31bff3fd630f183c74769eb9e8250a7b4b4c07c81a0c77 CLSA-2025:1752747463 TuxCare License Agreement 0 - CVE-2025-6021: fix buffer overflow in xmlBuildQName function Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6021: fix buffer overflow in xmlBuildQName function

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els9.i686.rpm 9c9987ce504841a9f1082ab48ab667dff61a05f27b050a448f675d6b193db741 libxml2-2.9.13-3.el9_2.1.tuxcare.els9.x86_64.rpm 6fecf501cce829816a97f6fdfb52e6ed7375e770f23b14a4d302c2029a0418c5 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els9.i686.rpm 86e6edf9fa3e12de9f5edade6668eb74b50d21b5dad6adaa9fc86c61f916939c libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els9.x86_64.rpm c66b5908d4564565e44c1259357c94424cb5f35531ea5a68b310f3da7cb22d01 libxml2-static-2.9.13-3.el9_2.1.tuxcare.els9.x86_64.rpm c2992098dfe14a395973e6a8162291316a855cefa7e33352c31667e83f065feb python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els9.x86_64.rpm 525e2eaf1a1b88dad21641a26016e5acdc72639c552b9a192bc8423f60a30c2e CLSA-2025:1752748693 TuxCare License Agreement 0 - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data")

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els12.i686.rpm 22c88684a0ce5b5fa962931869a48ca090dedbc51273fe85e5794eef553c202e python3.11-3.11.2-2.el9_2.2.tuxcare.els12.x86_64.rpm dac00697e33f25b8a1eecdb92611675ce9eaf483135edff00a4fab322a1ea89d python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els12.i686.rpm 7af1e5365084b51009a9aa622317eb65775d9d509a3649fc3d0ce7ed65a8877a python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els12.x86_64.rpm bad15f3bd01277e0f0f4266e4d454cd27af6481c842f89ea5ae7aeb3a67b6f47 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els12.i686.rpm 4dc18f53cfbcc49eee6a095f36ab5fac7662cfdce0dff2b8090e579e51319787 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els12.x86_64.rpm bda982ed125e0a36f3de8b8900dd7d7ebe391ac1c708cb06f4e134a30dc23465 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els12.i686.rpm b96c396fbb07963779c2ff632cbb708f0c3ce48dd70c39d41746852faf15972b python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els12.x86_64.rpm 3e7fdb124a1caa2f5bffb67effe66ad73a3b8ce79519c15598f2138bafc89c9b python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els12.i686.rpm 1efa937ad3b87b802c5fd1b757220a162341a258aba53fecfdd408abc0688bfa python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els12.x86_64.rpm 1ba86bc82e8d7842fa31de636ac58a9a5fdd43c450b4429ca47bf9f9ef98bef5 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els12.i686.rpm f26d0d7d7e0d3314d2f835ddff12894b062eabbfb30e3332db71e20115a74b08 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els12.x86_64.rpm 0c1d9c9031ac8d16b90242d33e94b6eb4fbfda9c0ba659897da0fff2f68a6b49 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els12.i686.rpm b61a35c26620abef050025558c27c591237572d1f70a0500b869b7123d78dbdd python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els12.x86_64.rpm 19b9c203436294ccfe443d573ca06b5a77261b600bfa823493ab4c4b02e20bbf CLSA-2025:1752749203 TuxCare License Agreement 0 - CVE-2025-48060: fix heap-buffer-overflow in function jv_string_vfmt in jq_fuzz_execute by adding boundary checks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-48060: fix heap-buffer-overflow in function jv_string_vfmt in jq_fuzz_execute by adding boundary checks

0 tuxcare-almalinux9.2-esu jq-1.6-14.el9.tuxcare.els1.i686.rpm bc47ca403dd3ae23fa410adbda20dc0b7acff0798521fe2b0255e658a90cae22 jq-1.6-14.el9.tuxcare.els1.x86_64.rpm 2138a01ff691fe74920bcaaf00158b311688f9037dd6abbbf39b91f26306ec60 jq-devel-1.6-14.el9.tuxcare.els1.i686.rpm 8aba58cd35de2376d666fc8cd90ccf4104168cd214dfd61291bf119592676691 jq-devel-1.6-14.el9.tuxcare.els1.x86_64.rpm 903df2c82d21ca4ad5adc2a6564248f0179e097c70a707c99fb44f28191c6c8b CLSA-2025:1752749664 TuxCare License Agreement 0 - CVE-2024-3652: fix assertion failure and crash caused by requesting AES-GMAC without specifying esp= line Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3652: fix assertion failure and crash caused by requesting AES-GMAC without specifying esp= line

0 tuxcare-almalinux9.2-esu libreswan-4.9-4.el9_2.tuxcare.els1.x86_64.rpm 490fa89d2f199006864acc2757a047c77e0d455afa270e62ba76d02c08902fb1 CLSA-2025:1752750189 TuxCare License Agreement 0 - CVE-2024-30204: disable LaTeX preview for e-mail attachments to protection when untrusted-content is non-nil Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-30204: disable LaTeX preview for e-mail attachments to protection when untrusted-content is non-nil

0 tuxcare-almalinux9.2-esu emacs-27.2-8.el9_2.1.tuxcare.els5.x86_64.rpm 4819ae64fb636b9c896ce31072b3b8e23ae90a69b120b7f42fe5c38c140da8e3 emacs-common-27.2-8.el9_2.1.tuxcare.els5.x86_64.rpm 98788761de1285221a11a49f69bbbc515b655914e934f1c3c594310d3e7dfd48 emacs-devel-27.2-8.el9_2.1.tuxcare.els5.x86_64.rpm a70eb066915e226f31031248bc342ea96cca3d1cea8ae578e12176a78fb55b08 emacs-filesystem-27.2-8.el9_2.1.tuxcare.els5.noarch.rpm ba22ae016118349c88d6279a423118e8297996e92f3fa8c009f631cd4019a1d1 emacs-lucid-27.2-8.el9_2.1.tuxcare.els5.x86_64.rpm 71482b036e25c5bed93eb8df39fa91d06cca37def3338119c5dfcefe0bd4004d emacs-nox-27.2-8.el9_2.1.tuxcare.els5.x86_64.rpm a6be50c006f0593fd551fbd265039ecc3949fafa8cf55f1c4f541789676d2e02 emacs-terminal-27.2-8.el9_2.1.tuxcare.els5.noarch.rpm 1b8b72dd96105ee59df4da7b602255a25e49d802dd7bf9e4754ef9c6d89e5c94 CLSA-2025:1752921642 TuxCare License Agreement 0 - CVE-2025-49175: fix out-of-bounds read in handling of animated cursors Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49175: fix out-of-bounds read in handling of animated cursors

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els18.x86_64.rpm 31a5575dc629b7d264cec446cf8e64dad824b222ab48efb40c38f2518d102d74 tigervnc-icons-1.12.0-13.el9_2.tuxcare.els18.noarch.rpm cabc0a2ac888dd8176b64e0df99148cab9dd3cda7141aad202a19c2ba2ec02b8 tigervnc-license-1.12.0-13.el9_2.tuxcare.els18.noarch.rpm df0ec0abba819beff90d7dbc766d3ffc5017a4b52f85287b9915bc4630f7b775 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els18.noarch.rpm b3ac0c277311c189e8267207086ed09db36b48d3093ab33ddd944c4ef9da6f31 tigervnc-server-1.12.0-13.el9_2.tuxcare.els18.x86_64.rpm 3322eeed4898b49990798444204149194cdac0046cbf8ed9f9bb9c44fc13a7e0 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els18.x86_64.rpm eeef2b040c3181ad420426b9c3f334037dfa859a61df46ff66e2d88626060114 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els18.x86_64.rpm f51716a5aa0940fc590f35b2c0d119cafa35f2827272c8990e7ee7d19e10e761 CLSA-2025:1752922014 TuxCare License Agreement 0 - CVE-2025-31257: fix issue with processing malicious web content can cause a use-after-free issue due to improper memory handling and result in an unexpected crash Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-31257: fix issue with processing malicious web content can cause a use-after-free issue due to improper memory handling and result in an unexpected crash

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.44.4-1.el9.tuxcare.els9.x86_64.rpm f0a73eb5efa9267397551b34a8caeca7b8230ca7b8ac940c3ffe99e31b183a52 webkit2gtk3-devel-2.44.4-1.el9.tuxcare.els9.x86_64.rpm b64628c751bd6bb7049ed1a23086efebbf1dd8ac3e591fa799a9fc10392f6d52 webkit2gtk3-jsc-2.44.4-1.el9.tuxcare.els9.x86_64.rpm 7f2051dde4ab988972249c5b0844a58a2e90c20b92000e8365f8cb9a99b4c566 webkit2gtk3-jsc-devel-2.44.4-1.el9.tuxcare.els9.x86_64.rpm aea2827f7c77a283ec5384766cb0b106e51587e9a905d6d52cc07955066a1634 CLSA-2025:1752922753 TuxCare License Agreement 0 - CVE-2024-27983: ensure to close stream when destroying session to prevent memory leak Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-27983: ensure to close stream when destroying session to prevent memory leak

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9.tuxcare.els1.x86_64.rpm b62ef81c79cc412fc0d93bd9d456360b245186fa6b50a24ee5143267ff021c6d nodejs-devel-16.20.2-3.el9.tuxcare.els1.x86_64.rpm 419b7b3fb6cfb02c4f084e5da020226f8f23e6d7159e3a3560a1129e846d999c nodejs-docs-16.20.2-3.el9.tuxcare.els1.noarch.rpm 413424d1d7e51f4450a111c027226126882daf9828370b904ca23cd77ee8f5ee nodejs-full-i18n-16.20.2-3.el9.tuxcare.els1.x86_64.rpm 13151dcd2b3b1970c19323d9d4cd8fe8ef36fd87750e752bdb79840e9b90d59f nodejs-libs-16.20.2-3.el9.tuxcare.els1.i686.rpm d293f5246cf6871d494ee1b74535b0555690a5053d2bbad364446699db32be54 nodejs-libs-16.20.2-3.el9.tuxcare.els1.x86_64.rpm a32c5e942c0f32caae6460aeac64bb23dccd5ec4e8a02aa9b54355b7c1794a5b npm-8.19.4_1.16.20.2-3.el9.tuxcare.els1.x86_64.rpm f0709123a7dcfd63189be3101d13d31d6bc7348b7cd53881e1054c54dc51b4eb v8-devel-9.4.146.26_1.16.20.2-3.el9.tuxcare.els1.x86_64.rpm baf5ef13e6f2a56cedadf6868f1213471866bb37858b5139b03c5185c7e9bd22 CLSA-2025:1753121138 TuxCare License Agreement 0 - CVE-2024-44309: fix issue with processing maliciously crafted web content may lead to a cross site scripting attack Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-44309: fix issue with processing maliciously crafted web content may lead to a cross site scripting attack

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.44.4-1.el9.tuxcare.els10.x86_64.rpm c5ec2b2157bffb57d730280ea6e7d7d1356fbb3c4cda5b59b18437b3dc809a67 webkit2gtk3-devel-2.44.4-1.el9.tuxcare.els10.x86_64.rpm c6f21792290cfc423c8b23610e41f0183c33b863e1bffc8752101fe267bb0c1a webkit2gtk3-jsc-2.44.4-1.el9.tuxcare.els10.x86_64.rpm 527c861379cf437fd1d938190a78b3a9a040c10d51d63c2421e0ee977a8f211c webkit2gtk3-jsc-devel-2.44.4-1.el9.tuxcare.els10.x86_64.rpm 8b7fe225f5922d04b3a1df5978b0f06c8d5c0ab99a07353588edc0b272c1600e CLSA-2025:1753207126 TuxCare License Agreement 0 - CVE-2022-41741: fix vulnerability in ngx_http_mp4_module leading to potential memory corruption and termination by improving module handling of specially crafted audio/video files - CVE-2022-41742: fix module ngx_http_mp4_module vulnerability to prevent worker process crash and memory disclosure from specially crafted media files Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-41741: fix vulnerability in ngx_http_mp4_module leading to potential memory corruption and termination by improving module handling of specially crafted audio/video files - CVE-2022-41742: fix module ngx_http_mp4_module vulnerability to prevent worker process crash and memory disclosure from specially crafted media files

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9.1.alma.1.tuxcare.els2.x86_64.rpm ff6d614f83762bf36dd42ac9c5cdf87fb188ba7a5f12b0971eef29c31b4a0870 nginx-all-modules-1.20.1-14.el9.1.alma.1.tuxcare.els2.noarch.rpm 5fd84a7928cb694645c4371c0c1934a889a0df7e6a3017c9b27c956fdcf6c69a nginx-core-1.20.1-14.el9.1.alma.1.tuxcare.els2.x86_64.rpm 60912b4114786fe873ce52dabbebb2862bfe10f126181a13b077eb679d3a28a9 nginx-filesystem-1.20.1-14.el9.1.alma.1.tuxcare.els2.noarch.rpm 826775435626fb3bb0bbc6036d690598661458d98f522df7f9a14db2610ee139 nginx-mod-devel-1.20.1-14.el9.1.alma.1.tuxcare.els2.x86_64.rpm f5444673e9353df5a393b420aa516f33be7a70e7e09948700c531a7f77520bf5 nginx-mod-http-image-filter-1.20.1-14.el9.1.alma.1.tuxcare.els2.x86_64.rpm 7d192a1326d0f967c62d871cd5bdbb6186f873d28c8588d9276457a143a757e8 nginx-mod-http-perl-1.20.1-14.el9.1.alma.1.tuxcare.els2.x86_64.rpm e74574e23e0c928cb6b68d18a6618b2ce98d685ea83fb8019af10f39b2192403 nginx-mod-http-xslt-filter-1.20.1-14.el9.1.alma.1.tuxcare.els2.x86_64.rpm aa65472c50ac63120ccee2952b8948781c86d4e99d14aff895f0e23bea6f19dc nginx-mod-mail-1.20.1-14.el9.1.alma.1.tuxcare.els2.x86_64.rpm c1c354c3c2cfa714327ff6764a3e97616f22713fd80648af0ff90db410b5a74e nginx-mod-stream-1.20.1-14.el9.1.alma.1.tuxcare.els2.x86_64.rpm 2271b1763a516c26d31f368cd479b668a9dfaf91b6c97ac2160cde4202881684 CLSA-2025:1753208069 TuxCare License Agreement 0 - CVE-2025-23166: src: fix error handling on async crypto operations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-23166: src: fix error handling on async crypto operations

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els2.x86_64.rpm 33517f6343abe07d5c1229d7008bd144eeebcce7c3415effb2337f82a70831e9 nodejs-devel-16.20.2-3.el9_2.tuxcare.els2.x86_64.rpm b092dcf8d980db5babb9ef87289d7b93ebd69f1147fdc1281b5df1a87463688d nodejs-docs-16.20.2-3.el9_2.tuxcare.els2.noarch.rpm fb2c9fd3865db44a9295d64864097dd45ec001f1c9e92da589973cc4b7af45db nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els2.x86_64.rpm 6fa7e58470467be88103380dc45a399ad4106dbfba462a05f5b54353489beece nodejs-libs-16.20.2-3.el9_2.tuxcare.els2.i686.rpm ffd5930fbdf370c125a87c3886c91e2b0d0cfda231a300da96d33c8c2452a244 nodejs-libs-16.20.2-3.el9_2.tuxcare.els2.x86_64.rpm 7edaf928c4ed08b308defc4c9975cbf4780e1ef4ea68035d2605936062ac9d9c npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els2.x86_64.rpm c51c386ceb3105346ba81b692442de94b1e0768f10d22b561ca07efe293d9666 v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els2.x86_64.rpm 6265486f4469567b1ea40101adeb0e3ab4f9f402f30ad4c7ae68fde375e5ba26 CLSA-2025:1753208636 TuxCare License Agreement 0 - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data")

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els13.noarch.rpm f23090aa05a3a02078fd97860b70ce032cffe167c43684a62c1d17b70f329142 python3-3.9.16-1.el9_2.2.tuxcare.els13.i686.rpm 4759f398e19889c3e2faa3ed83d76eb6599ca8734d1d4c3d2003a0b20ac75e66 python3-3.9.16-1.el9_2.2.tuxcare.els13.x86_64.rpm bf2657b48451ae5841d0c43cc428aef00fdb8d9abf176f82c34ae3f12839bf6c python3-debug-3.9.16-1.el9_2.2.tuxcare.els13.i686.rpm c5fc6b76837fafd2abbd8959fd4ee899f4b8c04afcf5075d18e202956c65b202 python3-debug-3.9.16-1.el9_2.2.tuxcare.els13.x86_64.rpm b0f77ccfe921478bcbe34fe5f95e48a76eb4b5bf461ffe29014d9244a8fc3a54 python3-devel-3.9.16-1.el9_2.2.tuxcare.els13.i686.rpm f6cacabd086783ec87905121aa8cb01e29e161e17d7da1d80e8ab24f0571f707 python3-devel-3.9.16-1.el9_2.2.tuxcare.els13.x86_64.rpm a880b2993b2a4bd8fa006579b3c04580f4c911a13d4013fff37f2847b238e557 python3-idle-3.9.16-1.el9_2.2.tuxcare.els13.i686.rpm afe888a78e710a1326ad8e15e361775d1fb07b416d8567dbe67147043c24443d python3-idle-3.9.16-1.el9_2.2.tuxcare.els13.x86_64.rpm d97ff3aff36d1f8321d8931a47fba10c3ba28fe453e006637d3bc2d07294f470 python3-libs-3.9.16-1.el9_2.2.tuxcare.els13.i686.rpm 36dd8c050e47741133ebe030dfbbfb8c9eb3b55c9f4d9e42322978865df9c053 python3-libs-3.9.16-1.el9_2.2.tuxcare.els13.x86_64.rpm 5c153efdf43138cdaf58787d71107da5b4420b010a9fd66ebe220baad3e5cef4 python3-test-3.9.16-1.el9_2.2.tuxcare.els13.i686.rpm 42f4e2ee931235905fe25af90682ab838a94691bb172f3a9c677a5245ee95780 python3-test-3.9.16-1.el9_2.2.tuxcare.els13.x86_64.rpm ebbb5b0574f16af0382794919c9df4afca10a92b529e6a32b50f3a43187c792a python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els13.i686.rpm a0bf13ac23ef3b914aa56aa3966f5ff6248399dd1f3e7b5af6f3f93ecafb2280 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els13.x86_64.rpm dab62dbc4ebfe8e8252b402aa17d1e8df45e10d50a2a901d2b79a8d8703a2ced CLSA-2025:1753298962 TuxCare License Agreement 0 - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() {CVE-2022-49846} - net: atm: fix use after free in lec_send() {CVE-2025-22004} - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up {CVE-2025-21887} - rcutorture: Fix ksoftirqd boosting timing and iteration {CVE-2022-50177} - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() {CVE-2022-49940} - selinux: Add boundary check in put_entry() {CVE-2022-50200} - Squashfs: fix handling and sanity checking of xattr_ids count {CVE-2023-52933} - net: atlantic: fix aq_vec index out of range error {CVE-2022-50066} - ext4: ignore xattrs past end {CVE-2025-37738} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list {CVE-2025-21919} - md: fix mddev uaf while iterating all_mddevs list {CVE-2025-22126} - ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764} - md: factor out a helper from mddev_put() - Fix "Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd" - ext4: prevent stale extent cache entries caused by concurrent get es_cache Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() {CVE-2022-49846} - net: atm: fix use after free in lec_send() {CVE-2025-22004} - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up {CVE-2025-21887} - rcutorture: Fix ksoftirqd boosting timing and iteration {CVE-2022-50177} - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() {CVE-2022-49940} - selinux: Add boundary check in put_entry() {CVE-2022-50200} - Squashfs: fix handling and sanity checking of xattr_ids count {CVE-2023-52933} - net: atlantic: fix aq_vec index out of range error {CVE-2022-50066} - ext4: ignore xattrs past end {CVE-2025-37738} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list {CVE-2025-21919} - md: fix mddev uaf while iterating all_mddevs list {CVE-2025-22126} - ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764} - md: factor out a helper from mddev_put() - Fix "Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd" - ext4: prevent stale extent cache entries caused by concurrent get es_cache

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 94f580316d451b738f85d24a65f34c9fd67531bc40cf19d771dccbc09de381ed kernel-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 989c4625d6f7a9107a968f108ec2568075a0a2e3f9fa002aab31afff4fc738b6 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els16.noarch.rpm a11b78f802f475faa2ae32de0f43a11bb6e6e529d8725a5058c4ff0875a163c2 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 63dda3496f6f44233a522b12be493ac992ed4282683ea0f04130969ada21a4b8 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 3b678a606490cd702e1030be92a9b2b3c89f9112364aeff46b88a2ab5a560910 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm aee5479c9195ed240867d7fdf21a58e4d9594d841764986b1e87d322974f42c3 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 84398906710ddca0a987a00f10540d715fb6b2f9486f1ec337fa37a03dc78acc kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 0fde9e81dc5fe14026d195426c556586849c17236d2795365d87372c06aaff78 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 0ecb0c4aea26fdd0c917aebd5ea5bd10b40c02a57fb0f485857e7d95e418681a kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 2ccf4c032223832d4ae43dd7e5672b6d73d9ecec7fc31b1c394fc653928636bd kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 732893d3c31ba935ccda8255319f51b61d012a8673954f16bd4545628637e552 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 669c002d52048ce0b96c8740fd6bd3ad11ddf86d0f9e8f853be8bc4aa287d32d kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 1421ad31f16545ab31c51b49244e331c1fb2e0fc226a606821b8bed6a8b78bf2 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 6c31609ed2ecc624b953cb7e35506bbcaf9fee8ffef67062f8912f5672346426 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 2a408ff3497a54551d77d2bf3186745cb65c27b5983959ec68ef1aa15dfbb741 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 9cd5d20bb12678f5e19df91b3398c4a4b70c775322069837ffc079c5161e0738 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm bf90971dd3c23d2698f68dde8804ba42387cb8724e127257b11b68231dd2a237 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els16.noarch.rpm ba146c55ca82c86aaf20fe668897574b78055fe42c859150cf170432f7723ce0 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm ac111bf5c2725c42244466687b0c906a15878cde606abb4a6c2e2f290e0a893d kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 7173fb142a61317fc3c5844353b0ea6a05b6eb9aa81ef913851052362db72871 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 1344d2e0f76efc7758a232aae3bd1d852bdc516f0cf813e27b3cf6f4ff5dee8b kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 4dd0609db6ae4443192587ba37988adcfca808001968c5ec2927c1846997c3aa kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm eee80af3b9d69ec205edd33b203d07840fb7c2f01b132f10a0926f339d8fe205 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 419d85ff265412a1766ba1250e3ea8b8bd1bf2141be9829389c9fd9cd69a396d kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 36976b7243c04ccdd847d95fd7ac6faaffe385b11b33505aaa7cee02142a88d4 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm e02f0760cca612003e425660258bc48382bb6c695374868c11c5a2cf35c9f94b kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm bdea9e6652fc7fdb59495da2e31f8938fd5b40b107fe6dc05b22d3c82f57e339 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 6e4c21e6ac8924112dceb5c84b03538deb363c4f0b31064d50be23a9a885c525 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 57583aa24aef2fa830cc19c1d97525f558c3d50a69a65e21f97fa5c44d50d7e2 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 8ebaa3fd5864209ab70f3088cb0b93e9866ae8b60a9b87db42ff8e6c043d6fed libbpf-1.0.0-2.el9_2.tuxcare.7.els16.i686.rpm ec444c3120a15d559196bc08d05c456202c4d402468b6c23b56483049d0f4652 libbpf-1.0.0-2.el9_2.tuxcare.7.els16.x86_64.rpm 59708715263d717809c72ec429168abe9d2459658acae202f0c8ab72e9013e66 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els16.i686.rpm 9e16308a733c2e13e2cb2ddb5b899b3fe4a1c1fba9d5fee2e9d4d81d1eafb4d4 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els16.x86_64.rpm eecffee1c384f399855c877fe58442b5a400db75b90291f2c92bf51984b81ff0 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els16.i686.rpm 0ffe17a0d0abdca0d8022a08112c8409103ec8d3e0a3a013e4be91cf395a8234 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els16.x86_64.rpm 518bdb9e2ddddb964161e518b4bc19f23c04d599995f74cab9b93007072c0909 perf-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm ec599113b3b62cc5e02d1db107ecfedf17557d8f985b283da6947bb49b89394a python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 7e4705ff7d747f1ce591a9019356d5d2cdd6f0c05a0d27e3e2c5c83d5e37a884 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els16.x86_64.rpm 97290847c9e32fbdec7e913a588e608de3b60551a09474087cd7b50c35d56e6b CLSA-2025:1753299555 TuxCare License Agreement 0 - CVE-2023-46316: parse command lines properly in wrapper scripts Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-46316: parse command lines properly in wrapper scripts

0 tuxcare-almalinux9.2-esu traceroute-2.1.0-16.el9.tuxcare.els1.x86_64.rpm 144596e7d89127f6dae535780bfabce6b7eb319bbae537efd7a03b70045aa4f2 CLSA-2025:1753374470 TuxCare License Agreement 0 - CVE-2024-23184: restrict address headers to mitigate excessive CPU usage and prevent potential DoS attacks Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-23184: restrict address headers to mitigate excessive CPU usage and prevent potential DoS attacks

0 tuxcare-almalinux9.2-esu dovecot-2.3.16-8.el9.tuxcare.els1.i686.rpm df618efacabfcd2c8fc49cccb8d1ff66381450882f8c3424290a1e000b3d4903 dovecot-2.3.16-8.el9.tuxcare.els1.x86_64.rpm 0c66d14bfcbe407add9471f8e51b7df5b6fa8ff7b87d50c28699c91c000221a0 dovecot-devel-2.3.16-8.el9.tuxcare.els1.i686.rpm 9a9c47a1178fb32f27805bdf7ebc69f9a48da3fe7f51a81596af52071873b030 dovecot-devel-2.3.16-8.el9.tuxcare.els1.x86_64.rpm ca22dff40a5e0026b3614b81a9f48c47330282ebde4b626ed76990e0991738f2 dovecot-mysql-2.3.16-8.el9.tuxcare.els1.x86_64.rpm d03c53d16545d3185647ab7316de36b48f2d93927194934c024bb440a0f2b985 dovecot-pgsql-2.3.16-8.el9.tuxcare.els1.x86_64.rpm 73b0af220ef33b26ca5c3b95c9af13b672b42ccbbe18eacddc744b74ecaa6fc6 dovecot-pigeonhole-2.3.16-8.el9.tuxcare.els1.x86_64.rpm 0d5b29f778a0d6bb8b5b3b820c901f194d9edb11058f6cf750fb86894339129d CLSA-2025:1753375058 TuxCare License Agreement 0 - CVE-2024-27281: fix object injection and remote code execution in .rdoc_options and documentation cache loading Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-27281: fix object injection and remote code execution in .rdoc_options and documentation cache loading

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els6.i686.rpm 1422f575be91db1f4a994b8c87f99659ed738df734233ebd79d48a6fb27bda6b ruby-3.0.4-160.el9_0.tuxcare.els6.x86_64.rpm 36aefc65b1c57d7027631d5b88efcc623fbd84b4e144fff6f1486ea2634beb56 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els6.noarch.rpm f8f4597ba960323cf2d866c83512da16bb840e5d7755980f29d28cf11e2c424d ruby-devel-3.0.4-160.el9_0.tuxcare.els6.i686.rpm cc37f96c133092cba2ffd76e52b3f55f8a52bf6855836fb7319b766bec330d42 ruby-devel-3.0.4-160.el9_0.tuxcare.els6.x86_64.rpm 082cba04090170f3499bfefd42ae0ce37f077fbc76bcc16971a374614880c67c ruby-doc-3.0.4-160.el9_0.tuxcare.els6.noarch.rpm 91b72592a5ffeeabadbc6d80b65aa207e4f444fae56f324e39d33312ebfe58df ruby-libs-3.0.4-160.el9_0.tuxcare.els6.i686.rpm 9464fb3df5237212667f008bd8ffdc2476208a84976d84696d4f204d58f0ffab ruby-libs-3.0.4-160.el9_0.tuxcare.els6.x86_64.rpm 5639fbeb8954b75d67f77bda13297bb2f8794f81d6c118b15035389aafd2bc5b rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els6.i686.rpm a6c2e7730ea7ff7fe625c62668afacc8102f80e251530867ada2913022d83f1e rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els6.x86_64.rpm 3656043af6f1f28ee6514f6ec4aebe67d361a1710fe611e81578bfd659094d71 rubygem-bundler-2.2.33-160.el9_0.tuxcare.els6.noarch.rpm 249119d27032b0c95b5729c3c49736baa71bd56566699adfb16900f2e89025fa rubygem-io-console-0.5.7-160.el9_0.tuxcare.els6.i686.rpm 1fa82ad5f6fd8954c041d0f8ab34d7272083c42988f16b85031b7835e2a71517 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els6.x86_64.rpm 566f2ba5318a693c8ca3ee7b2d9364929c977499d4aab42fb6d070250a0a33a8 rubygem-irb-1.3.5-160.el9_0.tuxcare.els6.noarch.rpm 5d83e21d3963b4aa230f025d01c1ae7e1df96a265b97c229fe27e5571d58a708 rubygem-json-2.5.1-160.el9_0.tuxcare.els6.i686.rpm 8b42da159d23baf274f00c8b838429e6a4ef9d50890248e04635bc299ae2bc01 rubygem-json-2.5.1-160.el9_0.tuxcare.els6.x86_64.rpm c5136920b5454b68cf39e9b9ef496ab342d1a343d83a750e1552cbe91722b131 rubygem-minitest-5.14.2-160.el9_0.tuxcare.els6.noarch.rpm c1c23ca25b16fc427c7fb4386bc8981392a43802e0af4f33dd3da7cb419f7550 rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els6.noarch.rpm 86ba4e6bc3ad7f94ba39305720bfbd50a01e1c1fab4b47666b993497eb65faca rubygem-psych-3.3.2-160.el9_0.tuxcare.els6.i686.rpm bfae90319a8e7974871ac9df88f1d60af354785866e0858f1935a6d23d1bb27d rubygem-psych-3.3.2-160.el9_0.tuxcare.els6.x86_64.rpm c94f81c2d8e0904c0dbb53e450ee213c4a3402844c531cbb592735e1d009b84b rubygem-rake-13.0.3-160.el9_0.tuxcare.els6.noarch.rpm 5f61e8b6fc98cf060ef285819251a10e9af9e47ae81efb296c1b70fb2b65d528 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els6.noarch.rpm 687b6ee40b6d82474da6ccf7d54100f152a98c19aa78ec321fcc6856a21b6f58 rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els6.noarch.rpm 77706df2029507b1b32a22913d8e8f8e8519829452fdc13049cd8b87acdbbd3f rubygem-rexml-3.3.3-160.el9_0.tuxcare.els6.noarch.rpm 39c43f8b6662d31732baf21bc7c868a7f8e9746d81c515b0bde252826b1df97f rubygem-rss-0.2.9-160.el9_0.tuxcare.els6.noarch.rpm 48be2523397a644dd01a9859d989a77e8449c04155e3d2d9fcc295f3b8a1e503 rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els6.noarch.rpm e6d6257c8bfa91b941c33c267e60356257904856d4dd745d397952ce5aec71d7 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els6.noarch.rpm 3d89399e17ec67f02d6abf5738fa8d1738528879449487be6044a1947a524eaa rubygems-3.2.33-160.el9_0.tuxcare.els6.noarch.rpm 1791fa8e0de96a918b4d2c7be93cd95fba7188071b9e2fe5b3efe50aacc57b38 rubygems-devel-3.2.33-160.el9_0.tuxcare.els6.noarch.rpm 6dc4a9c78e7f30f660c893f9cb75854fc610a29243ac7fa5bdd395a79a244eef CLSA-2025:1753376162 TuxCare License Agreement 0 - CVE-2023-46045: fix out-of-bounds read via crafted config6a file Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-46045: fix out-of-bounds read via crafted config6a file

0 tuxcare-almalinux9.2-esu graphviz-2.44.0-25.el9.tuxcare.els1.i686.rpm 21d1e7229b9acc9f9e2ddf58ec95f2dfa81819fc2200906eeaac5db44c218fee graphviz-2.44.0-25.el9.tuxcare.els1.x86_64.rpm 7e3d9e8a786a89d6d95bbf093a7f627549288f361270a53e6455f0c29f791140 graphviz-devel-2.44.0-25.el9.tuxcare.els1.i686.rpm 33f787f9ee2ffaed6a157398848763daaa96d31a4752b2ff0c6086a54b60abe5 graphviz-devel-2.44.0-25.el9.tuxcare.els1.x86_64.rpm 795c355f5988a13d416efe169e0f72269e0dddd2e6981c05045e2618743d2167 graphviz-doc-2.44.0-25.el9.tuxcare.els1.x86_64.rpm d37c8eac0a9d6e89a6e9fd613d231e224adab48eb87c9f645de46539ced3e072 graphviz-gd-2.44.0-25.el9.tuxcare.els1.i686.rpm b89d9f0f07ec998461e9f0dba7fc3fa842b72889327d61c7313ac708cdfba215 graphviz-gd-2.44.0-25.el9.tuxcare.els1.x86_64.rpm a18c434f8beb930dbddce8b45a101330cf56b680a8d4f48529d9a950f233efd7 graphviz-graphs-2.44.0-25.el9.tuxcare.els1.x86_64.rpm a7763d0c2d12fd48fe1a0df8cd7fdb93dd4558eb75932b6eb0500adad2c65c2e graphviz-java-2.44.0-25.el9.tuxcare.els1.x86_64.rpm 3fbc7443ed4b8a8a6ad1f343f143fc9f006510eb49d2f94feccad0e7a6c76cf1 graphviz-lua-2.44.0-25.el9.tuxcare.els1.x86_64.rpm ffc5f6395d94fcd114d6c52580587088f5830af20c573cba0d9890a2335099f5 graphviz-ocaml-2.44.0-25.el9.tuxcare.els1.x86_64.rpm d9709b60fca6e9e13fa75cd85d79ed638d633caa94e03c5a507d84c434ff971e graphviz-perl-2.44.0-25.el9.tuxcare.els1.x86_64.rpm ea7fa76c5337114e963bafc87c43947e79fd9c57f5aeeefdc601263f89a85d41 graphviz-python3-2.44.0-25.el9.tuxcare.els1.x86_64.rpm 50494270864ac38599d1ea68780ea9b3632d2a4c7d131a9fe76d04dc4249650c graphviz-ruby-2.44.0-25.el9.tuxcare.els1.x86_64.rpm 9529a5761d58e36b894a29f962a63b536941d5111b1a901bfaf91873b8152f13 graphviz-tcl-2.44.0-25.el9.tuxcare.els1.x86_64.rpm 60d473a84b0c405e043e62e29f3b4bb55d7a1dfc76190fc17d05d24821201ee9 CLSA-2025:1753729385 TuxCare License Agreement 0 - CVE-2025-48385: bundle-uri: fix arbitrary file writes via parameter injection Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-48385: bundle-uri: fix arbitrary file writes via parameter injection

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els7.x86_64.rpm cfe8936e81b96e8b1f1cead260df148900585c48159207dd67d95695d7bd5fb3 git-all-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm 6e427366c146a8021e53e96b774fc93813c26b5d65fda3764c6ce71597b2ed38 git-core-2.39.3-1.el9_2.tuxcare.els7.x86_64.rpm 3d62aa310993826c8dbc4ed40bb20348871209bd1fb5eefa4e11a3b0a1ac2031 git-core-doc-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm a2b036bf1d44d62609cc21649f14cc9fa55da488b0fb0d926160302aa66a36dc git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els7.x86_64.rpm 747699acec0d4bfb3c9bf6897f98d18560211b73052f51c362c0a42678fd118e git-daemon-2.39.3-1.el9_2.tuxcare.els7.x86_64.rpm a9a94fd846923313f78a1ca715f37120e8ef66eff222bc5f0bb8a8e55cd3efa5 git-email-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm 74a14d0789dbeaadcac47ece5b3a58d1e41de087a6ae291db75fab2e1aa2d1e5 git-gui-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm f14d5f7d60f2480f951d8ca48fce150bf409144a56d55011f1ab671d1fd01c9d git-instaweb-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm 0e9a3c86534cd7650cb9f8b2b40d58f3b8081a17e842e42e8eac0ce28f4d8670 git-subtree-2.39.3-1.el9_2.tuxcare.els7.x86_64.rpm 1c3547be33e32b7127d39f1f692f2c2698ebe279ae44f0978812ae71fcda64f0 git-svn-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm 901e4e1b509b1522da17e618a7d7abc1661e88a93ce9cb535c90d79765945feb gitk-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm 2e5be119fb358884c89e225dc9eb26d2382f6368379f6f0068108ef313d54b19 gitweb-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm 6c920781f9af6fbd566e71f43941c6c549176ee17d1673f5c257e60a06b98c43 perl-Git-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm f3c8c7e9667a7247fb3e244a377cee371e7c6f4789f5410403fd94121487e3be perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els7.noarch.rpm 0d61f8f881b1f68ec08b15501870e107f19c214e12f81a9bee500ee72d388ac7 CLSA-2025:1753729945 TuxCare License Agreement 0 - CVE-2025-3887: fix H265 slice header parsing to validate num_long_term_pics and prevent stack overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-3887: fix H265 slice header parsing to validate num_long_term_pics and prevent stack overflow

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els1.i686.rpm 38cdcbfa29e7bbbeb8c87d10aabfede55cb566c5e624778a40c3a0d22b6a7d8a gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els1.x86_64.rpm 059fe6253b4c760b592960802ba92242d41ba9629b9e165f486ddc8a16d0dfb5 gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els1.i686.rpm 7d7d082ef543bef7f618795522e61fd25079842107f32ff4f1bb0b5e90fc2f15 gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els1.x86_64.rpm bd5c9747c36f112eb01cb928aac62d843c798fe52d7950a75238d577e8383059 CLSA-2025:1753730595 TuxCare License Agreement 0 - Update to jdk-17.0.15+6 - Set bundled freetype provide version to 2.13.2 - Set bundled harfbuzz provide version to 8.2.2 - Require tzdata-java 2025a at runtime and for build - CVE-2025-21502: fix Hotspot component vulnerability allowing unauthorized access to resources and exposure of sensitive information - CVE-2025-30698: fix 2D component vulnerability allowing unauthorized data access and partial denial of service - CVE-2025-30691: fix Compiler component vulnerability allowing unauthorized data access and modification (CVSS 4.8 Medium) - CVE-2025-21587: fix JSSE component vulnerability allowing unauthorized creation/deletion/modification of critical data - CVE-2024-20921: fix information disclosure in Hotspot that allows remote attackers to access sensitive data via untrusted input through exposed APIs or sandboxed environments - CVE-2024-21235: fix vulnerability in Hotspot that allows remote attackers to read or modify limited data via untrusted input through exposed APIs or sandboxed code - CVE-2024-21217: fix vulnerability in Serialization that allows remote attackers to trigger partial denial of service via untrusted input through exposed APIs or sandboxed code - CVE-2024-21210: fix vulnerability in Hotspot that allows remote attackers to modify limited data via untrusted input through exposed APIs or sandboxed code. - CVE-2024-21208: fix security vulnerability in OpenJDK component - CVE-2024-21147: fix Hotspot component vulnerability allowing unauthorized data access - CVE-2024-21145: fix 2D component vulnerability allowing unauthorized data access - CVE-2024-21144: fix security vulnerability in OpenJDK component - CVE-2024-21140: fix Hotspot component vulnerability - CVE-2024-21138: fix Hotspot component vulnerability causing partial denial of service - CVE-2024-21131: fix vulnerability in Hotspot that allows remote attackers to modify limited data via untrusted input through exposed APIs or sandboxed code - CVE-2024-21094: fix Hotspot component vulnerability allowing unauthorized data modification - CVE-2024-21085: fix Concurrency component vulnerability causing partial denial of service - CVE-2024-21068: fix Hotspot component vulnerability allowing unauthorized data access - CVE-2024-21011: fix Hotspot component vulnerability causing partial denial of service - CVE-2024-20918: fix information disclosure and data modification in Hotspot via untrusted input - CVE-2024-20952: fix information disclosure and data modification in Security via untrusted input - CVE-2024-20926: fix information disclosure in Scripting via untrusted input - CVE-2023-48161: fix buffer overflow in GifLib’s DumpSCreen2RGB function allowing local attackers to access sensitive information - CVE-2023-22025: fix data modification in Hotspot via untrusted input through exposed APIs or sandboxed code - CVE-2023-25193: fix O(n^2) growth vulnerability in HarfBuzz's hb-ot-layout-gsubgpos.hh when processing consecutive marks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to jdk-17.0.15+6 - Set bundled freetype provide version to 2.13.2 - Set bundled harfbuzz provide version to 8.2.2 - Require tzdata-java 2025a at runtime and for build - CVE-2025-21502: fix Hotspot component vulnerability allowing unauthorized access to resources and exposure of sensitive information - CVE-2025-30698: fix 2D component vulnerability allowing unauthorized data access and partial denial of service - CVE-2025-30691: fix Compiler component vulnerability allowing unauthorized data access and modification (CVSS 4.8 Medium) - CVE-2025-21587: fix JSSE component vulnerability allowing unauthorized creation/deletion/modification of critical data - CVE-2024-20921: fix information disclosure in Hotspot that allows remote attackers to access sensitive data via untrusted input through exposed APIs or sandboxed environments - CVE-2024-21235: fix vulnerability in Hotspot that allows remote attackers to read or modify limited data via untrusted input through exposed APIs or sandboxed code - CVE-2024-21217: fix vulnerability in Serialization that allows remote attackers to trigger partial denial of service via untrusted input through exposed APIs or sandboxed code - CVE-2024-21210: fix vulnerability in Hotspot that allows remote attackers to modify limited data via untrusted input through exposed APIs or sandboxed code. - CVE-2024-21208: fix security vulnerability in OpenJDK component - CVE-2024-21147: fix Hotspot component vulnerability allowing unauthorized data access - CVE-2024-21145: fix 2D component vulnerability allowing unauthorized data access - CVE-2024-21144: fix security vulnerability in OpenJDK component - CVE-2024-21140: fix Hotspot component vulnerability - CVE-2024-21138: fix Hotspot component vulnerability causing partial denial of service - CVE-2024-21131: fix vulnerability in Hotspot that allows remote attackers to modify limited data via untrusted input through exposed APIs or sandboxed code - CVE-2024-21094: fix Hotspot component vulnerability allowing unauthorized data modification - CVE-2024-21085: fix Concurrency component vulnerability causing partial denial of service - CVE-2024-21068: fix Hotspot component vulnerability allowing unauthorized data access - CVE-2024-21011: fix Hotspot component vulnerability causing partial denial of service - CVE-2024-20918: fix information disclosure and data modification in Hotspot via untrusted input - CVE-2024-20952: fix information disclosure and data modification in Security via untrusted input - CVE-2024-20926: fix information disclosure in Scripting via untrusted input - CVE-2023-48161: fix buffer overflow in GifLib’s DumpSCreen2RGB function allowing local attackers to access sensitive information - CVE-2023-22025: fix data modification in Hotspot via untrusted input through exposed APIs or sandboxed code - CVE-2023-25193: fix O(n^2) growth vulnerability in HarfBuzz's hb-ot-layout-gsubgpos.hh when processing consecutive marks

0 tuxcare-almalinux9.2-esu java-17-openjdk-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 5eace55212b931a9b99c60d9166af590e31f45239c1ca8ae0f568bd3e681b453 java-17-openjdk-demo-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 03f6004800214f6e6f6285fded99c2c284b3de186d8fc827e4bf088685130694 java-17-openjdk-demo-fastdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 9243cdf0a892948d190100b905d67b511c1d803cda1e9e14fd37503cb18aa6f2 java-17-openjdk-demo-slowdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm b791e50fdf9540231a25a05f0dbca63fd52f7ae97d9e7be799f067a44df28468 java-17-openjdk-devel-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm d992728035226a89641a566c3b6e717ede45bbd68189821ab1bca37eab3c8573 java-17-openjdk-devel-fastdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 93bbf55de976ad1eff9d49a6d1a7061d56c062eb67dff758dc2cbb0cbb12b1b4 java-17-openjdk-devel-slowdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 35172f2c7654eaef80d12b380d49f8fb973eee633673d5d78fb4401f9f157616 java-17-openjdk-fastdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm cbfc9daa74512f24587ae57d1079c16c7731b9a0f26fc4bfef20447960be4625 java-17-openjdk-headless-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 5a64f590f5d097383d431062223e80de9c692b6e86edac58f77ca8c6fe60ff99 java-17-openjdk-headless-fastdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 7a41090d373e35694132680f5d8cbe4ff6802d70506032c4330358b1dda46198 java-17-openjdk-headless-slowdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm d175876e8dccf05a015156def1dd0662281da1b4d3fe6d43de4160de4f7cccec java-17-openjdk-javadoc-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 0c14bec9acfd72a28794297884e1d7ab3b60d591bea481d3b0a88347515ab0a2 java-17-openjdk-javadoc-zip-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 4ac5516d40f5bfcb05f92ab12013d70eb1d8963e19de061a874fee5a4fbc1f5a java-17-openjdk-jmods-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 16b36a4c1b8dacb9b29d2d1b2f16fa2ffdde296810121f73871cfff1e83de76b java-17-openjdk-jmods-fastdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 5e3c1a49e9d878d5b7891a0d2e6da0120f86ba588364ada0915c489b84661044 java-17-openjdk-jmods-slowdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 0277946c272ba36f0a2ca8e36bad8ae1563225cf57aef1d8aa4b602d2c6a9aae java-17-openjdk-slowdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 0855edfcfef1c51abc1b0b2cd6c84e594fa77f6e3c982ae0a650c18a80f20a51 java-17-openjdk-src-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 6f70578b990e8ab7a39f15b3df8cf1248b56d6ec816ddc77007d5b273e0baf2a java-17-openjdk-src-fastdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 501fdec0766abfa34bc6335dda8c0192a4539b8d0a7cff47492c3f69f73e5c03 java-17-openjdk-src-slowdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 061b0077b677494b743de8c3222e723330d2bdd1a1f0cf3a88f413b1052a9a52 java-17-openjdk-static-libs-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 89ebcc129572c0023497571135f45cc0e8ff6c81600489ad7cffc4a19fdd9a64 java-17-openjdk-static-libs-fastdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 628be707190bb8bb0be9d289246847307bd0d0d225314256e31fb982b0c64f92 java-17-openjdk-static-libs-slowdebug-17.0.15.0.6-1.el9.tuxcare.els1.x86_64.rpm 89f57b033f8e2ab4f6798983a186879283fe47106e550a5968703ce41ffa9f90 CLSA-2025:1753799434 TuxCare License Agreement 0 - Security fixes from OpenJDK 8u452-b09: - CVE-2025-21587: JSSE issue allowing remote access or modification of sensitive data - CVE-2025-30698: allows limited data access and partial DoS via untrusted Java code - CVE-2025-30691: allows limited data access via untrusted code using compiler APIs - Security fixes from OpenJDK 8u442-b06: - CVE-2025-21502: hotspot vulnerability enabling limited data access java clients - Security fixes from OpenJDK 8u432-b06: - CVE-2024-21235: sandbox bypass in java clients via exposed APIs - CVE-2024-21208: network flaw in sandboxed java clients enabling limited DoS - CVE-2024-21210: enabling data modification in sandboxed clients via crafted API input - CVE-2024-21217: serialization flaw may trigger partial DoS in sandboxed environments - Security fixes from OpenJDK 8u422-b05: - CVE-2024-21147: hotspot issue may lead to unauthorized access of sensitive data - CVE-2024-21145: enable limited unauthorized data access via untrusted java code - CVE-2024-21140: expose limited data to unauthorized read/write via sandboxed java code - CVE-2024-21144: allow remote unauthenticated attacker to cause partial DoS - CVE-2024-21131: remote access via API may lead to limited data modification - CVE-2024-21138: remote API calls may trigger partial DoS in sandboxed java environments - Security fixes from OpenJDK 8u412-b08: - CVE-2024-21094: lead to unauthorized data changes in sandboxed java apps - CVE-2024-21085: concurrency flaw may cause partial DoS in sandboxed java environments - CVE-2024-21011: hotspot issue may trigger partial DoS in sandboxed java environments - CVE-2024-21068: lead to limited unauthorized data modification in sandboxed deployments - CVE-2024-21012: networking issue may allow limited data modification Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Security fixes from OpenJDK 8u452-b09: - CVE-2025-21587: JSSE issue allowing remote access or modification of sensitive data - CVE-2025-30698: allows limited data access and partial DoS via untrusted Java code - CVE-2025-30691: allows limited data access via untrusted code using compiler APIs - Security fixes from OpenJDK 8u442-b06: - CVE-2025-21502: hotspot vulnerability enabling limited data access java clients - Security fixes from OpenJDK 8u432-b06: - CVE-2024-21235: sandbox bypass in java clients via exposed APIs - CVE-2024-21208: network flaw in sandboxed java clients enabling limited DoS - CVE-2024-21210: enabling data modification in sandboxed clients via crafted API input - CVE-2024-21217: serialization flaw may trigger partial DoS in sandboxed environments - Security fixes from OpenJDK 8u422-b05: - CVE-2024-21147: hotspot issue may lead to unauthorized access of sensitive data - CVE-2024-21145: enable limited unauthorized data access via untrusted java code - CVE-2024-21140: expose limited data to unauthorized read/write via sandboxed java code - CVE-2024-21144: allow remote unauthenticated attacker to cause partial DoS - CVE-2024-21131: remote access via API may lead to limited data modification - CVE-2024-21138: remote API calls may trigger partial DoS in sandboxed java environments - Security fixes from OpenJDK 8u412-b08: - CVE-2024-21094: lead to unauthorized data changes in sandboxed java apps - CVE-2024-21085: concurrency flaw may cause partial DoS in sandboxed java environments - CVE-2024-21011: hotspot issue may trigger partial DoS in sandboxed java environments - CVE-2024-21068: lead to limited unauthorized data modification in sandboxed deployments - CVE-2024-21012: networking issue may allow limited data modification

0 tuxcare-almalinux9.2-esu java-1.8.0-openjdk-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 9e57b102125886708f4d14b7c3a519e90945b1849dda6a40bb60347a8f5a80b5 java-1.8.0-openjdk-demo-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 806c6daacab6644c99f7aad42d03185f60b4f70a3198c4ce8dabea6342cc452d java-1.8.0-openjdk-demo-fastdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 5e9be2d5e5f8bd57199a2195ac06b28ae4b47fefb32f0986701a0c7bc7d853dd java-1.8.0-openjdk-demo-slowdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 2117021904b9c7bf8fe75320f51444bd6cb96d360132cb789214080a70db38b1 java-1.8.0-openjdk-devel-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 2499b4ae66ea2b8718fc7d21e03a893ca71bb2804c14633a35311c03f3833e55 java-1.8.0-openjdk-devel-fastdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 2c06b7b63f8b709fa238d0df939a263c8aa4a1df0667876dd75fbd09623a7836 java-1.8.0-openjdk-devel-slowdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm adfcb76f2d7b660997c28b57129463555432be4d62790f7af5146ab8fb004896 java-1.8.0-openjdk-fastdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 6092a811c77c693e03d907f1884d180f6ed1d6795dbee9265557896b800e9739 java-1.8.0-openjdk-headless-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 7c216c3be2d37ddd663be70f31c7b25b9b7327276a310a3f5e8d0e3ce6617121 java-1.8.0-openjdk-headless-fastdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 4366a1e336a129791f42a5a63fa44b545e7d6c6f3c1fd81d2a2e5f12fb44a9f5 java-1.8.0-openjdk-headless-slowdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 9972fc8569f0cc6aa068a98c866b0fb01da3e68177e9ff155117465d498c5011 java-1.8.0-openjdk-javadoc-1.8.0.452.b09-3.tuxcare.els1.el9.noarch.rpm e95cfe8e0885e71cff5725385fde5033af1401d75d02dd89583ed841a65efa4f java-1.8.0-openjdk-javadoc-zip-1.8.0.452.b09-3.tuxcare.els1.el9.noarch.rpm 032b8073591fae3281f5e4a854f9cdb64ebb40760fb11e6f94c90b6d0a101442 java-1.8.0-openjdk-slowdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 059a7ca5f2fe1c0a25f42e8d0df7e8abc9b9bcf3d946614230abd2e32976b7a1 java-1.8.0-openjdk-src-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 24ece6c213532ed3cb8c0f92ae51a46537a720d8ee767fdce68a785ab90d7417 java-1.8.0-openjdk-src-fastdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 436ae7cb5719753069b27bb6ed10b899832474671a797a5e77c6b630da416ab6 java-1.8.0-openjdk-src-slowdebug-1.8.0.452.b09-3.tuxcare.els1.el9.x86_64.rpm 81c43b8385bd3778053d5208bfa8d8424c92f59acb364d2b3771d537b8b2f38a CLSA-2025:1753800294 TuxCare License Agreement 0 - CVE-2022-23527: fix open redirect vulnerability caused by improper URL validation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-23527: fix open redirect vulnerability caused by improper URL validation

0 tuxcare-almalinux9.2-esu mod_auth_openidc-2.4.9.4-1.el9.tuxcare.els5.x86_64.rpm 56ef5ca35ff27805b34286b3fa586e756a6e295d5ccfd371f3cade35b77a22b6 CLSA-2025:1753800763 TuxCare License Agreement 0 - CVE-2024-52949: fix stack-based buffer overflow in src/ifaces.c by controlling the size in the strcpy function Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52949: fix stack-based buffer overflow in src/ifaces.c by controlling the size in the strcpy function

0 tuxcare-almalinux9.2-esu iptraf-ng-1.2.1-4.el9.tuxcare.els1.x86_64.rpm b2210662a639f333b1ae6d25a87cd0366ea70c5c0b494bb986dcbfd118444b9b CLSA-2025:1753801232 TuxCare License Agreement 0 - CVE-2024-31228: fix unbounded recursion on supported commands by limiting pattern matching length Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-31228: fix unbounded recursion on supported commands by limiting pattern matching length

0 tuxcare-almalinux9.2-esu redis-6.2.7-1.el9.tuxcare.els4.x86_64.rpm c7ed3ddd4b8f824f33e5e2d1d4b6b47448635b36e4a0698b2b1432e02c6fd84d redis-devel-6.2.7-1.el9.tuxcare.els4.i686.rpm 1dccc93c1fb17b921c53e76c518263196d9fe624b11d825284f51dd900e89ddf redis-devel-6.2.7-1.el9.tuxcare.els4.x86_64.rpm f78efc6d3029678b4c0dceb5cf7bdb324ab0dd1bf18571c78a055f015fe4bcdb redis-doc-6.2.7-1.el9.tuxcare.els4.noarch.rpm 9553b1b1c8d752984be7b8d85a8eed6d0d57c5246b1acb9f13a1a2028bbf8198 CLSA-2025:1753801728 TuxCare License Agreement 0 - CVE-2023-1729: fix heap-buffer-overflow in raw2image_ex() to prevent application crash Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-1729: fix heap-buffer-overflow in raw2image_ex() to prevent application crash

0 tuxcare-almalinux9.2-esu LibRaw-0.20.2-5.el9_2.tuxcare.els2.i686.rpm 884f029603516a7fac77cd0b441ce79f3662d1f91082ba609d715b49e056fd45 LibRaw-0.20.2-5.el9_2.tuxcare.els2.x86_64.rpm 489a95768fd39fbad8aa1dd6a305279ce563397eed45be2137d8e5985dd6afef LibRaw-devel-0.20.2-5.el9_2.tuxcare.els2.i686.rpm 3287b6627f139ccdc4c85ca4fbfb69e7b9ce81c2f69321d4da2fb98fb30002fd LibRaw-devel-0.20.2-5.el9_2.tuxcare.els2.x86_64.rpm 64419c1fa7b46ce5c9e26d0748fbb496e315bf2e61c4dcdaf66487e3e6253c6b LibRaw-samples-0.20.2-5.el9_2.tuxcare.els2.x86_64.rpm 4fefe561ffebff3f397963efebb0d2069f3c0d1120a627c89876ddeaadf672ee LibRaw-static-0.20.2-5.el9_2.tuxcare.els2.x86_64.rpm fe49ab2d1e9368598df718301a3156ad57e418180384799e64f59786f845e2d6 CLSA-2025:1753802388 TuxCare License Agreement 0 - CVE-2023-52160: fix authentication bypass vulnerability by enforcing TLS certificate verification and addressing eap_peap_decrypt vulnerability Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-52160: fix authentication bypass vulnerability by enforcing TLS certificate verification and addressing eap_peap_decrypt vulnerability

0 tuxcare-almalinux9.2-esu wpa_supplicant-2.10-4.el9.tuxcare.els1.x86_64.rpm 86f43c3ff0fc58bd4b2f92232b777c4b162ec5c9fbedf9e90357d0c7cf1e1521 CLSA-2025:1753981054 TuxCare License Agreement 0 - CVE-2025-1244: fix command injection flaw by sanitizing input Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1244: fix command injection flaw by sanitizing input

0 tuxcare-almalinux9.2-esu emacs-27.2-8.el9_2.1.tuxcare.els6.x86_64.rpm f85c36219a7eac4e67e220a2017cf0947c4d2fa4603c516ab8c8cecb7ac72e02 emacs-common-27.2-8.el9_2.1.tuxcare.els6.x86_64.rpm 3b0c5b87025edcd73d11d712b3507db8216fea86518e655b782a2f714c34fa07 emacs-devel-27.2-8.el9_2.1.tuxcare.els6.x86_64.rpm 8643225d4e018c720d1f0272d7ff078af9ba0b675ab65765a24206d132a35618 emacs-filesystem-27.2-8.el9_2.1.tuxcare.els6.noarch.rpm c5e866d28e2a5fcd7f954388581d5d7ede1ed28f4678b005e5cde12baa4872d4 emacs-lucid-27.2-8.el9_2.1.tuxcare.els6.x86_64.rpm 1c720eef262bb19d34b3b24a8cf6c53255ec7f6a975042069524adfc79ff4e8c emacs-nox-27.2-8.el9_2.1.tuxcare.els6.x86_64.rpm 7811e9c31a1bec28c51c6de63d11be1ca2ba317d503e05f5ca0c656d322869f4 emacs-terminal-27.2-8.el9_2.1.tuxcare.els6.noarch.rpm c4e7bb975bf36244adc6cce7826df289f2d4a3c794c1fb59e50cd3d515710bcd CLSA-2025:1753981912 TuxCare License Agreement 0 - CVE-2025-1736: validate end-of-line characters in user-supplied headers to prevent headers from being misinterpreted Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1736: validate end-of-line characters in user-supplied headers to prevent headers from being misinterpreted

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm c5bcd029eeb2b7ef3cffeb610dc61558a05f91c816a13b9ec1bb4369c421bf91 php-bcmath-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 667eef8d69ffe02c7799399f4a268d6b76dada58025ba6cbc079ab3bec6b2abd php-cli-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 8d3255192a3af7020229eaafe9b783cdf15a6da4b6e4217b464ef7eef5a033f6 php-common-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 3e2571f5131fb0880167c33c4f1c109306785ea5fa61e3ec7eaf8fd600288d33 php-dba-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 5364b243bb7237b73bcd0286be68a59d809aeca1409074810a7421cd0701c0d8 php-dbg-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 3475c1345f21326335df2761dc4b7ad0471a44ccad59ca4588a49fa25255616f php-devel-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 1fa699a768c3cccd2510e2da067e4c134ddb38160af033fa9c83b67abd2a5700 php-embedded-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 776e3be439befb05e4f5ee7a9e2dd2282d3c1cf4ce8235ea9498a27d5c68143a php-enchant-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 902fabbb03ddb9c82970d6240313dd9744b3b466567158757a68d053872a4d51 php-ffi-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm c017c9ca83836597b115e3ba432c78bf043040c83b424a0feb23cb9a6862e012 php-fpm-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm b0b584655b84b164d9846b82fcae65296677aca395bfffaa68d7c8f5051708f5 php-gd-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm c2e23e7e21b6ef89c07761d18eb561001b1add8c4211408158ceb86879e43a8a php-gmp-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 316ebe9e67c2d6f06e85a3482e2881a6a13deca0d6de866f1176b9a377817eb2 php-intl-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm be73da79e90c6053d4cc0789a7cf4a009568d888885e11a6b231bf0e90c0c47e php-ldap-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 91e60d1f21655617dbf3e258458e64f88ec53142aaa97010ee6af2b9b48450ae php-mbstring-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 01f093e61a6e65dd77c93fe43112b2165eb4ddefa829a34ee6095a01f1666501 php-mysqlnd-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 3ff1315fbe6cb10c40e8439e2bc46ccae4ce4311dd92e537e7c0c7da3ca684f3 php-odbc-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 6efced20e56e44c9f5b10387cb4783518cdaa447729f2bbc462ec552945346af php-opcache-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 1cc105a11e060ade8991b60fdf395a9cfb643191337cfe8e34eb42a87246def1 php-pdo-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm f8dae5088119f50e6d84c5d4a4f6c77cc2b14a299a12a96075ae3c9c5c06c456 php-pgsql-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 4ba51f82463ab3a1614333fbead3c7fa91bdbc9759f95941893926f1e12be5e7 php-process-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 511f146396b2f5cf31bda1e64b495eb3b783e0d6b2e7575a9c468076af8957e4 php-snmp-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 099cb4e33c05150bca2e7e57bf4bf8d17e34a08d0326f0f1cec11dedca290a95 php-soap-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm ca2cfe284bdd35cebff397cfd40144cba6559acd2ba8813aeae11904ce079088 php-xml-8.0.30-1.el9_2.tuxcare.els7.x86_64.rpm 66273c175413e4f322f07b3e0bbda249a4bfec1d0aa378526174ef4a1d891c79 CLSA-2025:1753987188 TuxCare License Agreement 0 - CVE-2024-23185: fix resource exhaustion caused by very large headers when parsing messages Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-23185: fix resource exhaustion caused by very large headers when parsing messages

0 tuxcare-almalinux9.2-esu dovecot-2.3.16-8.el9.tuxcare.els2.i686.rpm 4a0ac46a2ad214bc69eca05529643a563b6086e3068021585bfe05a19b3e93e9 dovecot-2.3.16-8.el9.tuxcare.els2.x86_64.rpm d271e8375d96258674f699853fdf00d39cc1c75d7d71dd02d14cc49f737ad3c8 dovecot-devel-2.3.16-8.el9.tuxcare.els2.i686.rpm 66bc38901e8b107e719166a77c97a68fdbd850e4ff47cda03c9d46d0da328e0f dovecot-devel-2.3.16-8.el9.tuxcare.els2.x86_64.rpm d38f84c5ed8fad993ce59ac00676f980c111fca7d89fa82332cb9889219ee35a dovecot-mysql-2.3.16-8.el9.tuxcare.els2.x86_64.rpm cef26a2874e27609d145d626ce61b912a788d7079cdb776c1097560d20109a59 dovecot-pgsql-2.3.16-8.el9.tuxcare.els2.x86_64.rpm 2003aaf70ff7cef9a912cfb5b41573e012ca13c1d907e137f9735130fcec3301 dovecot-pigeonhole-2.3.16-8.el9.tuxcare.els2.x86_64.rpm 4a3d833163442b8ff70f197000566418c5c4f22b73eaaff3388b26d89b5ffc6f CLSA-2025:1753987674 TuxCare License Agreement 0 - CVE-2025-47268: fix denial of service caused by signed 64-bit integer overflow in timestamp multiplication in ping Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-47268: fix denial of service caused by signed 64-bit integer overflow in timestamp multiplication in ping

0 tuxcare-almalinux9.2-esu iputils-20210202-8.el9_2.1.tuxcare.els1.x86_64.rpm d63384e9df482da046da010e98ef95e973734f7e3c215fefed0966c3b0d52cf6 iputils-ninfod-20210202-8.el9_2.1.tuxcare.els1.x86_64.rpm c45c26910e97663353713efeb1557c3f40ce36646e45ae3f15947cc4c990ff95 CLSA-2025:1753988282 TuxCare License Agreement 0 - CVE-2024-52616: initialize DNS transaction IDs randomly at each startup to prevent predictability and mitigate DNS spoofing attacks Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52616: initialize DNS transaction IDs randomly at each startup to prevent predictability and mitigate DNS spoofing attacks

0 tuxcare-almalinux9.2-esu avahi-0.8-12.el9_2.1.tuxcare.els2.i686.rpm 27eb3db33ffcc6de846f95bd63c788b21d1b7fd8c09a8f5a24db000233ba7b2d avahi-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm e5c5a5f175fa61f5e53896f6ce493040fc1c60da791be2be65c97d283aed7022 avahi-autoipd-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm ea774fb874827a5c7216b4b18d83da0a248ae13c607bf38851e447c15970f274 avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els2.i686.rpm 13402da69cedfb09c54ef912286bfa434d14496435359be006feac3ecfaa33c8 avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm dbe774eb371a73d5c366f537aa13447c965b88b0ee710ebbc21ecfcf22fcbb00 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els2.i686.rpm 0c7f692c0daecf522374448543241b259e3483888bf1ddfd01388f0507f3fd81 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm f0d1b90f132a6c68b1b0aef7fa9d71c2d405a912adb87d169bf78f8ef045c766 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els2.i686.rpm efde74b1b0b24d93b72d5f991cc27b04c66ec0b55b760dff66d7800d1915d69a avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm b3af8eaa139d1a8d71975ce0181f346030ee6043bab22254b4ee803bf5b1ba4d avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els2.i686.rpm ad4ad7ffd68146a249f5df7ef0c70e27c48807f887761573e4d6f10bed289fbf avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm fee10c84348be27cd28d5074316289c7cffff46f0d74df1a7b757e6535f2b40b avahi-devel-0.8-12.el9_2.1.tuxcare.els2.i686.rpm 5ba1e7147a9205ef8cf57171c2c098da7c045c710f109a3e2fe7301cb5c9cf1c avahi-devel-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm d67333ac4fa12fc24c7c6d0240d29b9d2537ad78909f20c279c8f6ccf246a16a avahi-dnsconfd-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm 5fb7914a26b0698d57f69b9a380d2d076c640742a01fa571588c82602ab95088 avahi-glib-0.8-12.el9_2.1.tuxcare.els2.i686.rpm 93880605232fc493ad692755ffabc7d6a93744741160ccb2eaf56d3ecc3c1427 avahi-glib-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm e2dfe29533354fa57a3f7b0b7fa93b0f7be3f3c711a51d66e05dc54140a47e50 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els2.i686.rpm 1b3e6b48f7e558366fbe6348274fcab14d8b6874d2af065adb644997714eec75 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm 8c1ebf74a84c6d0735d69f53fbd08b3c1b843bbb6a5f8fd2b7cc421b5a15938b avahi-gobject-0.8-12.el9_2.1.tuxcare.els2.i686.rpm a7be8c5a151e5365aa50eea4b95ede1b738083337ccf01ea4df99126e6c2b3de avahi-gobject-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm 928a222a56925c4f2ae4be6fe216152a92fc84a6a75d29618efb798ea72c7fb7 avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els2.i686.rpm 0c4bb22d3500cc47cb88a32cb27dd3124da4808deea47f510c56f7c9a7822b8f avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm 837cbf052277f382cc3a3cdc98e016056cb79cd57023517f010a35047be9f1a9 avahi-libs-0.8-12.el9_2.1.tuxcare.els2.i686.rpm b639700b7d070f92fef5ee29269e024303db7d9d993bd64636c7232d2c8932f9 avahi-libs-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm a76b52b94b95a21a6ce18d82b474ab7ba0c2d55bdaa4cacdf23894953c8064af avahi-tools-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm 7d2da1e1684781b04ef79b8077e6b483f0461822b7af64912d3a4267803e2df4 avahi-ui-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm b61b117cd23a258669ed7d40deadc39faccb32aa8da7c6081813d0079ca0be8c avahi-ui-devel-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm 33b18fb6f14285e3f6cdaefd52f73750ba4e7e7b5dfd92239e8bffa0d5ed8a22 avahi-ui-gtk3-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm 7f0a9f660eba5db12317cff30af782e039304fdfcf7504771d915df5803403d6 avahi-ui-tools-0.8-12.el9_2.1.tuxcare.els2.x86_64.rpm f5460bc19cafdee8750db13d041124a772d50a631b005828cc3d6a12501b60c0 CLSA-2025:1754043770 TuxCare License Agreement 0 - Update to jdk-17.0.16+8 - CVE-2025-50106: fix 2D component vulnerability in Java SE allowing remote attackers to compromise the Java runtime via crafted input - CVE-2025-30749: fix 2D rendering vulnerability in Java SE that could lead to application crash or remote code execution - CVE-2025-30754: fix JSSE component vulnerability allowing unauthorized access to sensitive data over TLS connections - CVE-2025-50059: fix Networking component vulnerability allowing unauthenticated remote attackers to access sensitive data in Java SE and GraalVM environments Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to jdk-17.0.16+8 - CVE-2025-50106: fix 2D component vulnerability in Java SE allowing remote attackers to compromise the Java runtime via crafted input - CVE-2025-30749: fix 2D rendering vulnerability in Java SE that could lead to application crash or remote code execution - CVE-2025-30754: fix JSSE component vulnerability allowing unauthorized access to sensitive data over TLS connections - CVE-2025-50059: fix Networking component vulnerability allowing unauthenticated remote attackers to access sensitive data in Java SE and GraalVM environments

0 tuxcare-almalinux9.2-esu java-17-openjdk-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 4cbdc99563881a6ffd61b233c00b65bbd4d7b6974b977f9f2caa0d70a3f97629 java-17-openjdk-demo-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 06567c977cb8796ced199dc83fa2dbdefdabbb176ad8772f83b43cc33408bf64 java-17-openjdk-demo-fastdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm c9a1d7f6fc704816721bc10e3cc77a0713a07eb2a59c9e75dce27db76c104ed3 java-17-openjdk-demo-slowdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 5ea08e04e252d84ead1e17e847e6559fce7bcde990e820632215a7d12350c57e java-17-openjdk-devel-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 566ef523ef4b939fd7e16beb4229cd9189776534d6c7ca8dcf8692283a28343a java-17-openjdk-devel-fastdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 0f1d44f89d13b6a77af8f1eefa136f13fa1b2a4d4e4d327a5052a19a7aa41b1d java-17-openjdk-devel-slowdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 5561e0d4d419ba8b7e64b2414285a81631320a3eb824e43b71ea062b6f4a5b30 java-17-openjdk-fastdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 84c2aeb237ca98387b88a387914d7120b7ec3b89bec181446d7dc2bea9bcb3f2 java-17-openjdk-headless-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 3ebd787218ab6de631831d9e7154b1184af4141d368a258a6dbfd1e0a71cb20d java-17-openjdk-headless-fastdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 9289b552a8960300df28432b25e3ffd55124b8f7e7bd7efe2ba9e3dc83fef728 java-17-openjdk-headless-slowdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 0afab91d4f934c61c0d214d5fc25e14bfec3c8cfbf4b7fdc4478d05c1b852008 java-17-openjdk-javadoc-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm ed0b39ed76554ce20da4b86004cf06b39c50777647c8ad5c7d1e23f05e187edc java-17-openjdk-javadoc-zip-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 3212577c3381b420540a8aa59e4826c0994ecd83d2457aa20a35d078c7089c79 java-17-openjdk-jmods-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 1f3a46c742c2156a66431c2559fe8c9f305232249002a804773cb8146b2d0ebf java-17-openjdk-jmods-fastdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm a4ad83e58baa5ff7c15475bbef17b7676905d53f6bdae2ab5ee9b0a5a26ea33a java-17-openjdk-jmods-slowdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm fc03bf39e6d606ae5c8e023e52a64cac34851854bba9d84ba0df7b794fd41c06 java-17-openjdk-slowdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 51325b756980b8058f6376ec31bc6b5990818a2b8bdfe0de9c576b03b8c993e5 java-17-openjdk-src-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 58137aa20bed2bc5a92b630a1fe112cba3a4da19e24c2a7c9d6098fbc2f9fd4e java-17-openjdk-src-fastdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm b213160563e0103afca7cdbddb0d4bec9cb5825950eec5703bb50a79db134fea java-17-openjdk-src-slowdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm 13b77eec6ec0e979b626c0fbd699dfd66d5fb1e52457759e8bf64a335592e165 java-17-openjdk-static-libs-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm f2d8f5ed20c372f4a2a119c9d939f292f9e3dfdac23315c5e07725826529e6ac java-17-openjdk-static-libs-fastdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm dee5382397ab10af0c27b049d797a69c0bc7c8c65725d6b43dbbcea8903068b4 java-17-openjdk-static-libs-slowdebug-17.0.16.0.8-1.el9.tuxcare.els1.x86_64.rpm ed7334222d576da3f37306c7ff2e1453492bc10a35c8337a9c46f1004e177507 CLSA-2025:1754338412 TuxCare License Agreement 0 - CVE-2025-25724: fix crash in list_item_verbose on invalid time Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-25724: fix crash in list_item_verbose on invalid time

0 tuxcare-almalinux9.2-esu bsdcat-3.5.3-4.el9.tuxcare.els2.x86_64.rpm 0eec1f38718fd471bbe91f396d1e232bd2bd9c38e7caa49e36ab9cdba4d9e5f8 bsdcpio-3.5.3-4.el9.tuxcare.els2.x86_64.rpm 65630fd7c6c51644e7c81ac6d12d5af041c4d7313aff721e7084fdf8d06443b8 bsdtar-3.5.3-4.el9.tuxcare.els2.x86_64.rpm 4c42cc3174ca58d903d6811fa2855d389547ded41dd6b03e92b27c4a2d1b608a libarchive-3.5.3-4.el9.tuxcare.els2.i686.rpm d3e737d3b1212ca638ef6ba839f7526eac663b770fa44cf5f76af85c2d3c76ab libarchive-3.5.3-4.el9.tuxcare.els2.x86_64.rpm 4cecd24f6953086c37940d79da6f0c7867646f80098f2979b1a44cde58ad5ed3 libarchive-devel-3.5.3-4.el9.tuxcare.els2.i686.rpm 0c16b52716436622771e314d8295ee6a730786b6168bf78f961cc661fafd5eaf libarchive-devel-3.5.3-4.el9.tuxcare.els2.x86_64.rpm 2e1a7427aaf4d12de72e255c849d09da1a9ea3cec8aa4194d93fd9d6f20f2b8a CLSA-2025:1754339372 TuxCare License Agreement 0 - CVE-2025-32023: fix stack/heap out of bounds write on hyperloglog operations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32023: fix stack/heap out of bounds write on hyperloglog operations

0 tuxcare-almalinux9.2-esu redis-6.2.7-1.el9.tuxcare.els5.x86_64.rpm c6ffd3e1d36b0defd36f04bbdb677e3add2f33d37e2f80f31559877ddb6bb5cd redis-devel-6.2.7-1.el9.tuxcare.els5.i686.rpm de3c3b02bf3d48eeb56942db8ba0163fb0bd1f5e4f26c0d8af4ff9ed7d10eb6d redis-devel-6.2.7-1.el9.tuxcare.els5.x86_64.rpm 416a51f5e375370e92ddf4791a89c47279087b77aa5b9bc0a10efd17061df362 redis-doc-6.2.7-1.el9.tuxcare.els5.noarch.rpm 6e08a96829d5b8fc76ed4aba0fdbef4fc7ab5c1fd9a990154cd79b0670a673b5 CLSA-2025:1754340109 TuxCare License Agreement 0 - CVE-2025-6019: fix local privilege escalation vulnerability by updating libblockdev to prevent mounting of user-provided filesystem images with SUID- root shell Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6019: fix local privilege escalation vulnerability by updating libblockdev to prevent mounting of user-provided filesystem images with SUID- root shell

0 tuxcare-almalinux9.2-esu libblockdev-2.28-4.el9.tuxcare.els1.i686.rpm a2e996d3b44a57dd1fd0bbea20eb17b09ba0ebfc42c606255d8b480d69648805 libblockdev-2.28-4.el9.tuxcare.els1.x86_64.rpm d47279f28274fd3fe89ccea39f1825f633448d247b685711204d07f767b3fa37 libblockdev-crypto-2.28-4.el9.tuxcare.els1.i686.rpm 49ed140c0b2f0742dbf905348e9ee708f452acd601d689e6266dba01afe41d72 libblockdev-crypto-2.28-4.el9.tuxcare.els1.x86_64.rpm fcf3706e73ea4eb807e1109e3530e16b1e52cfa8bbcf03b21a6e21c956431e11 libblockdev-crypto-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm a97d883df2a270e151ddda564457ca157e3eb650c2c754d7bbd7834b3f1a21aa libblockdev-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm d2958170e5b60982444774618d8478f614e15312e57747d64219d7daa160f19a libblockdev-dm-2.28-4.el9.tuxcare.els1.i686.rpm 635e03cf335405f8fca0547e49ba4527e058264e35cc9c5b8ba78b39ae7e3b6d libblockdev-dm-2.28-4.el9.tuxcare.els1.x86_64.rpm 0b070887ae36447574760708ddc16065f0c580b909ea46b643e506bd13632d5d libblockdev-dm-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 9168ad907bed4dd4ccbfe226b420edc11d7df774de18dc9a53cc48ebab579bb0 libblockdev-fs-2.28-4.el9.tuxcare.els1.i686.rpm 33ac80a6e8178a272b4370cb3cde18c21c020977f064147fa4b84d3ea914d3ff libblockdev-fs-2.28-4.el9.tuxcare.els1.x86_64.rpm dc648a291f7edbed06f0d8d61a861d2753ada022138c7b177ab050ae736d7f3b libblockdev-fs-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 3ca03212eb729d74e3c7a98c274d81ddb9c561ccf6ac3828168757320ffed0d1 libblockdev-kbd-2.28-4.el9.tuxcare.els1.i686.rpm 03bbce63dd692c0e64675ceac62b0690331cb80fd5bcfa2f93583e70dec0c7f1 libblockdev-kbd-2.28-4.el9.tuxcare.els1.x86_64.rpm 710dd50c4fcf0b06b29e605d047a0bcc2942d714e79e38084c54d2634358e0ba libblockdev-kbd-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 00a409c6b1533d7a17c482d7638a023ee4e22d9d7f350186eb762eea2de9c694 libblockdev-loop-2.28-4.el9.tuxcare.els1.i686.rpm 61f5a03f8d558a87c9c76220b75505cc629d177d0dab56f24eafb855dabc3655 libblockdev-loop-2.28-4.el9.tuxcare.els1.x86_64.rpm ab56e6eaec2be144f0e8000eef53860579b6c7b4b7eb39e06af909b0a2e13f2d libblockdev-loop-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 0a87bac63b4e7c3adb89a06432985d8edd14cf3568f5619882a6ad757862cba0 libblockdev-lvm-2.28-4.el9.tuxcare.els1.i686.rpm 3212538563e012cf5a4e44268dc0fb5b16eb2fda0dfe66d17981c49fbc3cc1df libblockdev-lvm-2.28-4.el9.tuxcare.els1.x86_64.rpm 123e0a3ee4aa361901c6d8a52a615bb9048833e479d51cfb91bd1b51529c3ba6 libblockdev-lvm-dbus-2.28-4.el9.tuxcare.els1.i686.rpm 23e761893ed782b8ee3d4d7104b62b92f4ea5a04ee3163ce3c1df48158c694da libblockdev-lvm-dbus-2.28-4.el9.tuxcare.els1.x86_64.rpm 56c117db9041930557e9f99f42ac9f11d0617da643f38f606cfa4e2cfaba5201 libblockdev-lvm-dbus-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 9a433f9222e936b18a4a1044b9b53143c58c5394d9344dfc90ba9957d2ca7896 libblockdev-lvm-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm b92fff04780aa063f041179f4ed92455e9c9306496590963763f241666da7c3a libblockdev-mdraid-2.28-4.el9.tuxcare.els1.i686.rpm 36638087e6d3c0faf345894dbd094095216756db8866443f038cbc74ca75bf24 libblockdev-mdraid-2.28-4.el9.tuxcare.els1.x86_64.rpm 1819c42f532636cbdcf11abc163418c3a53332cb4f5ccf61cf556ae55dcb8d52 libblockdev-mdraid-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 070f5df8fcbc584b4af1dd5acd7dcca7288cb2be922df0828455bbc478e7fdfe libblockdev-mpath-2.28-4.el9.tuxcare.els1.i686.rpm b3dfd7a1cb6a30c9b9dbb484341dfc952709e2707f66eef50091cacac5eef23c libblockdev-mpath-2.28-4.el9.tuxcare.els1.x86_64.rpm b1403a7dce17f3d3a56b2a60a00a7551640643dd48bed2b7a35deaaf9e86d1de libblockdev-mpath-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 36cb903005bb4ef8c5ab204309f1c9167b998f678c72b8a75e6fd148008a437d libblockdev-nvdimm-2.28-4.el9.tuxcare.els1.i686.rpm 67e2cc072a0c4b07b2f9a3a80c2cfc1e6c282dcdb040520e0101fa532c730fc8 libblockdev-nvdimm-2.28-4.el9.tuxcare.els1.x86_64.rpm 554476a94160fe3847216287a7cb6145f41f2fa64286ba91ae165ac5a103849c libblockdev-nvdimm-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm f40b25027737043d9c6877ca43afdfb4d652a3c4069161a095c7ae91d54ca78c libblockdev-nvme-2.28-4.el9.tuxcare.els1.i686.rpm ce4a59c46a4f0546c257a3f1a121edb641a3f4e821809bfd29dd2e3dc9b00ba0 libblockdev-nvme-2.28-4.el9.tuxcare.els1.x86_64.rpm e16d45e3ac742b7ae8bd5fb35ee5b128bd2447a4428c74c6a547dd7547b026b5 libblockdev-nvme-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm f23179206800ffa718f9cc84e626e9849f0537c3c36a4e8193f57efcd13b6c14 libblockdev-part-2.28-4.el9.tuxcare.els1.i686.rpm ca53cb2d6d0f5651b5d0a6efed26cb2f611758a04b6e4f15feaf7510aedd9888 libblockdev-part-2.28-4.el9.tuxcare.els1.x86_64.rpm 42306fa0e55da6f7f84ca9ef354d09d869afafac6a73da22a1cd1d125c2d3d21 libblockdev-part-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm bb2c331a1340d539b3d44373a9331c3d98dcf801aa3012249a88d8cb7bd20180 libblockdev-plugins-all-2.28-4.el9.tuxcare.els1.x86_64.rpm 2a95a82688e752eaa7cb2cc7f703bad262864db70f862a92e165163f9a28a968 libblockdev-swap-2.28-4.el9.tuxcare.els1.i686.rpm 4f61b36ba255b9c82c8295d456d19d98b4f0ca07f1f23f1f5258a76f128a201d libblockdev-swap-2.28-4.el9.tuxcare.els1.x86_64.rpm 1d9650024b6d11e3647411c013d8fd0166d91b2393490b1cbf9b1b25666938bc libblockdev-swap-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 6208632368868523a53a65c7c3d09bfe315cf4870ae02adadc56f15e816d39d0 libblockdev-tools-2.28-4.el9.tuxcare.els1.x86_64.rpm a26a4a98fae1a429699e21e7c617ea68c81a03be3467a73ed91f1a40c87cbecb libblockdev-utils-2.28-4.el9.tuxcare.els1.i686.rpm d5563b824167083145509da147cc06c946af25cad53e3a366fa6d977c99b2ac9 libblockdev-utils-2.28-4.el9.tuxcare.els1.x86_64.rpm a8a198cc0f90245a939ca8849e50a924577d6c144fb595483a1c95a65a5b3a06 libblockdev-utils-devel-2.28-4.el9.tuxcare.els1.x86_64.rpm 1c18d5f38d6fd55b36cdb72b6fe1282a37f54bfeb09db60a1cf6b76e522a2c7e python3-blockdev-2.28-4.el9.tuxcare.els1.x86_64.rpm 318faa4cde704397739d773a3350a1c4042ca07057ffd66146e1b5f9383ee6e9 CLSA-2025:1754341122 TuxCare License Agreement 0 - Update to shenandoah-jdk8u462-b08 (GA) - Security fixes from OpenJDK 8u462-b08: - CVE-2025-30749: fix 2D vulnerability allowing remote attackers to compromise JVM via network access - CVE-2025-30754: fix JSSE vulnerability allowing unauthorized data access via TLS connections - CVE-2025-30761: fix Scripting vulnerability allowing unauthorized data modification via network access - CVE-2025-50106: fix 2D vulnerability allowing remote attackers to compromise JVM via API exploitation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to shenandoah-jdk8u462-b08 (GA) - Security fixes from OpenJDK 8u462-b08: - CVE-2025-30749: fix 2D vulnerability allowing remote attackers to compromise JVM via network access - CVE-2025-30754: fix JSSE vulnerability allowing unauthorized data access via TLS connections - CVE-2025-30761: fix Scripting vulnerability allowing unauthorized data modification via network access - CVE-2025-50106: fix 2D vulnerability allowing remote attackers to compromise JVM via API exploitation

0 tuxcare-almalinux9.2-esu java-1.8.0-openjdk-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 0ee717f54597c80d9764910409d050c8df00102349d9427f4218d3e68dd901d5 java-1.8.0-openjdk-demo-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 79658840f18bf1d7b16fc230aa3660f4489a2ed13664d2c22eca43745d52d9cc java-1.8.0-openjdk-demo-fastdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 2f63ad8d9d958c09eabb14e51b5ff96f3cdd05dcf5307f17f605192c6eb2d91e java-1.8.0-openjdk-demo-slowdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm bd5c9038e1f1609d05584f58f385f06a1ab11539a528e50eecc8e1bcd4073eaf java-1.8.0-openjdk-devel-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm f8e381e4e5298dced5993f7fbe2c1f3ef6683d8019c54e35c44fd195a41ae1e4 java-1.8.0-openjdk-devel-fastdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 7f6a408e977b133e98bbb2eddebbbdbec77641f666a0eb612e2b8b027598320e java-1.8.0-openjdk-devel-slowdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 38fad51bde82be4c2be5540ff146c227107050f53536e758c6fb72796d66a7be java-1.8.0-openjdk-fastdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 5be29972ebe144b51a34f074828e722ef551e83a16357d435852852a604013ec java-1.8.0-openjdk-headless-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm f62ab19aa15ea9a1e1fb285a6c085f86e7c834fa2dd89b30d3e4b60fbcacab87 java-1.8.0-openjdk-headless-fastdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 2c3894e6efa3929089636ec58380de2845bc11de6bd80594d5e7d0961237d3e9 java-1.8.0-openjdk-headless-slowdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm b6a37ed0c7d352334d49a3f74384340be27b05857bf205fb1db0bf229e8f8c60 java-1.8.0-openjdk-javadoc-1.8.0.462.b08-1.tuxcare.els1.el9.noarch.rpm 46a6831bca8a0486b8637857fb9e48b0f3694a3b359f6d007889001756f78a85 java-1.8.0-openjdk-javadoc-zip-1.8.0.462.b08-1.tuxcare.els1.el9.noarch.rpm 47429d96cd124ff9668044ec065c59a95d7e8838b97f56dbd4acad60c6e659d3 java-1.8.0-openjdk-slowdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 70305c271f464cd9096c43493c4daef46c755b76a2ca041fb368bc4df9fc3cf8 java-1.8.0-openjdk-src-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 5495c87461ba82e8707d3f3b2268fe046b14ca8b061e10e7efa7633ffefe3f1f java-1.8.0-openjdk-src-fastdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 729d4185c5ba1fc18e3005d1a31b3d635bc8c649c267fabc82c96e6c4288428f java-1.8.0-openjdk-src-slowdebug-1.8.0.462.b08-1.tuxcare.els1.el9.x86_64.rpm 849865715b70958553171fc3b0babe49010adec5d91a8f26e16e52d10f8b6065 CLSA-2025:1754382809 TuxCare License Agreement 0 - update to CKBI 2.78 from NSS 3.113 - updated certificates: - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Entrust Root Certification Authority" - # Certificate "AffirmTrust Commercial" - # Certificate "AffirmTrust Networking" - # Certificate "AffirmTrust Premium" - # Certificate "AffirmTrust Premium ECC" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "GLOBALTRUST 2020" - # Certificate "GlobalSign Root CA" - # Certificate "Comodo AAA Services root" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - # Certificate "ePKI Root Certification Authority" - # Certificate "certSIGN ROOT CA" - # Certificate "ACCVRAIZ1" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Security Communication ECC RootCA1" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - removed certificates: - # Certificate "Baltimore CyberTrust Root" - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "Global Chambersign Root - 2008" - # Certificate "E-Tugra Certification Authority" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor ECA-1" - added certificates: - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - # Certificate "TWCA CYBER Root CA" - # Certificate "TWCA Global Root CA G2" - # Certificate "SecureSign Root CA12" - # Certificate "SecureSign Root CA14" - # Certificate "SecureSign Root CA15" - # Certificate "D-TRUST BR Root CA 2 2023" - # Certificate "D-TRUST EV Root CA 2 2023" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.78 from NSS 3.113 - updated certificates: - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Entrust Root Certification Authority" - # Certificate "AffirmTrust Commercial" - # Certificate "AffirmTrust Networking" - # Certificate "AffirmTrust Premium" - # Certificate "AffirmTrust Premium ECC" - # Certificate "Entrust Root Certification Authority - G2" - # Certificate "Entrust Root Certification Authority - EC1" - # Certificate "GLOBALTRUST 2020" - # Certificate "GlobalSign Root CA" - # Certificate "Comodo AAA Services root" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - # Certificate "ePKI Root Certification Authority" - # Certificate "certSIGN ROOT CA" - # Certificate "ACCVRAIZ1" - # Certificate "OISTE WISeKey Global Root GC CA" - # Certificate "Entrust Root Certification Authority - G4" - # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068" - # Certificate "Security Communication ECC RootCA1" - # Certificate "BJCA Global Root CA1" - # Certificate "BJCA Global Root CA2" - removed certificates: - # Certificate "Baltimore CyberTrust Root" - # Certificate "Security Communication Root CA" - # Certificate "Camerfirma Chambers of Commerce Root" - # Certificate "Hongkong Post Root CA 1" - # Certificate "Chambers of Commerce Root - 2008" - # Certificate "Global Chambersign Root - 2008" - # Certificate "E-Tugra Certification Authority" - # Certificate "TrustCor RootCert CA-1" - # Certificate "TrustCor RootCert CA-2" - # Certificate "TrustCor ECA-1" - added certificates: - # Certificate "LAWtrust Root CA2 (4096)" - # Certificate "Sectigo Public Email Protection Root E46" - # Certificate "Sectigo Public Email Protection Root R46" - # Certificate "Sectigo Public Server Authentication Root E46" - # Certificate "Sectigo Public Server Authentication Root R46" - # Certificate "SSL.com TLS RSA Root CA 2022" - # Certificate "SSL.com TLS ECC Root CA 2022" - # Certificate "SSL.com Client ECC Root CA 2022" - # Certificate "SSL.com Client RSA Root CA 2022" - # Certificate "Atos TrustedRoot Root CA ECC G2 2020" - # Certificate "Atos TrustedRoot Root CA RSA G2 2020" - # Certificate "Atos TrustedRoot Root CA ECC TLS 2021" - # Certificate "Atos TrustedRoot Root CA RSA TLS 2021" - # Certificate "TrustAsia Global Root CA G3" - # Certificate "TrustAsia Global Root CA G4" - # Certificate "CommScope Public Trust ECC Root-01" - # Certificate "CommScope Public Trust ECC Root-02" - # Certificate "CommScope Public Trust RSA Root-01" - # Certificate "CommScope Public Trust RSA Root-02" - # Certificate "D-Trust SBR Root CA 1 2022" - # Certificate "D-Trust SBR Root CA 2 2022" - # Certificate "Telekom Security SMIME ECC Root 2021" - # Certificate "Telekom Security TLS ECC Root 2020" - # Certificate "Telekom Security SMIME RSA Root 2023" - # Certificate "Telekom Security TLS RSA Root 2023" - # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB" - # Certificate "TWCA CYBER Root CA" - # Certificate "TWCA Global Root CA G2" - # Certificate "SecureSign Root CA12" - # Certificate "SecureSign Root CA14" - # Certificate "SecureSign Root CA15" - # Certificate "D-TRUST BR Root CA 2 2023" - # Certificate "D-TRUST EV Root CA 2 2023"

0 tuxcare-almalinux9.2-esu nspr-4.35.0-6.el9_2.tuxcare.1.els1.i686.rpm a63e69363230806328f4983b496a9a135090a01fea64ba4ccdae2bdd18dd43b0 nspr-4.35.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 9dbf95b8c9aac6706edf8adb8b21a9d5ffede20ba29f174895ea84ea84319257 nspr-devel-4.35.0-6.el9_2.tuxcare.1.els1.i686.rpm 2fc7a7b0bf1bfbf6b4d5996fc1fb9e08986d2728be5063c0e774bf292c701e35 nspr-devel-4.35.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 65a8fd206658b7637d0ccbcdfc87d99a769066c9f9ef1d96459cc1af93c93942 nss-3.90.0-6.el9_2.tuxcare.1.els1.i686.rpm 6d43d9983ba5c7503d838c7a13730fb70cdf3844da47df525cb87690715fee55 nss-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm c981cd03f02cea00120529f45df41ec4e98e05a2745dd4c15c35e9e0701f4878 nss-devel-3.90.0-6.el9_2.tuxcare.1.els1.i686.rpm edac250439c8faa0421611ab3d7608fe24ae6860de31108e259db92122885f01 nss-devel-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 7cfb772c0c03b7979980e5d790f885bf003918dcc0643db3da32d78389f5e1b8 nss-pkcs11-devel-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 9adde259e4ac264f7875baf1267698f0415310b7b4fae98fb22c497ee1a45a4b nss-softokn-3.90.0-6.el9_2.tuxcare.1.els1.i686.rpm 3e19c4a58ab141b83ab18d43fecdce578d7eab0d15aa9cde460ec07e20313a4d nss-softokn-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 3e7f94ad7a9164daa11f56eb7995f6c50e538df7f8c36aa60efbf9023a1b9e44 nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.els1.i686.rpm ce7f884787987361a309b074f3198128d872b2b8d19d2226404ec2c5083ce9c4 nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 0f5616e53e9846e8c5e419f98a3c78d3080fc5035dd322a5660194dafa4f22f7 nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.els1.i686.rpm d45a1ffaba1215efa44ef56fbd122e6b40f7fce82f10414686f46ed7713e9462 nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 6a4c3fc9b1e6b9661c2b0708dab1c41c774daa2891249c9d63ea773d355c5670 nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.els1.i686.rpm 22ff44f2d31fa703d92179fe5a5680ed541a4502f3844f619e43c91f9f606187 nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm d2f98b3c43ee3321b67fd01f3a518fcc44d46788f87e967dab4b744e8cfb8204 nss-sysinit-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 84f266dff2edca66e284154436026a0566d375e9baad3506683ebfc7404228ad nss-tools-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm 9813577fef224031c1f3ca46e69488de48cae5555ac1c9674289d7342f9fff02 nss-util-3.90.0-6.el9_2.tuxcare.1.els1.i686.rpm d3d8ab4fa4af9b838fae2baecdebec999282579e7eb32777f1ce295dc397573a nss-util-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm adf5b8aec27fcb834185281606aabca3140ae76eb4affa817496c059f8b75ede nss-util-devel-3.90.0-6.el9_2.tuxcare.1.els1.i686.rpm 96303ae756517be37cff6b47ec13b97714873cc801012a6c297624b98d414f6b nss-util-devel-3.90.0-6.el9_2.tuxcare.1.els1.x86_64.rpm aa147d8b0d08973e5c3d34416a392dc22ec564cc1949075a5a0f3afb2f2f3d74 CLSA-2025:1754411369 TuxCare License Agreement 0 - CVE-2025-6965: reject queries with aggregate terms exceeding column limit to prevent memory corruption Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6965: reject queries with aggregate terms exceeding column limit to prevent memory corruption

0 tuxcare-almalinux9.2-esu lemon-3.34.1-6.el9_1.tuxcare.els2.x86_64.rpm 6b56b7ef37f6c565c063672a0c11f04d3d788601ed6dae57b9cbdd696a666d09 sqlite-3.34.1-6.el9_1.tuxcare.els2.i686.rpm 1114b18195e4cb00b782ab02dd7169fdb2d9b2fc58fa808201a0d51a826ed7f5 sqlite-3.34.1-6.el9_1.tuxcare.els2.x86_64.rpm d0ef137f23f059a342a43c46667084f19596dd2515fcde1d375f7147dea46b2c sqlite-analyzer-3.34.1-6.el9_1.tuxcare.els2.x86_64.rpm 1c20efc9fdfcd87656debc94c47fe2721ab58d2260cae1dcb1cd5cc50ff51c2c sqlite-devel-3.34.1-6.el9_1.tuxcare.els2.i686.rpm 306cf145b19e16e5e7224663bac4d2dde24626e3399e328193595f7efdc84b66 sqlite-devel-3.34.1-6.el9_1.tuxcare.els2.x86_64.rpm 8194cb112e73a1c43a95dd58b0cfbc6807f10e0ca7b2b74b236d7a6b4942e1ae sqlite-doc-3.34.1-6.el9_1.tuxcare.els2.noarch.rpm e00a1fd7276d7374afd2c1b6638e0967f967b24c7f5315a7f850d290b7b9a8ce sqlite-libs-3.34.1-6.el9_1.tuxcare.els2.i686.rpm f260c2be8f185a52731a3455bfdedce37d960b84f4298b1fbc253ea7322abdff sqlite-libs-3.34.1-6.el9_1.tuxcare.els2.x86_64.rpm 242949347aa00742475900082b0a99343b4122fc36793499be00fbb5e2cc3091 sqlite-tcl-3.34.1-6.el9_1.tuxcare.els2.x86_64.rpm 1644eed82f8ca09d94033707c88f324747dc3a1d8e1a2f7dbce8ada124b0ad1c sqlite-tools-3.34.1-6.el9_1.tuxcare.els2.x86_64.rpm e6de0fd7dbadad3a11d54473053916eb71c9c141e8a5a5fe2441ee8b9e3e39db CLSA-2025:1754412086 TuxCare License Agreement 0 - CVE-2024-22019: fix resource exhaustion and DoS vulnerability by limiting number of bytes read from a single connection when handling HTTP requests with chunked encoding Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-22019: fix resource exhaustion and DoS vulnerability by limiting number of bytes read from a single connection when handling HTTP requests with chunked encoding

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els3.x86_64.rpm 7b03810223388d955b57db2acae64fa0610561a12eab14382321da5eb27ce84b nodejs-devel-16.20.2-3.el9_2.tuxcare.els3.x86_64.rpm 08a78825b39a81fd1379a26d6d556fab8e324df1f7bcdb6b1ed05d3911bd77f1 nodejs-docs-16.20.2-3.el9_2.tuxcare.els3.noarch.rpm 37c4379a0e614f493eee191f81b6824e318a95a4f562886dd9d3e1873f55ff6f nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els3.x86_64.rpm 3d873176ed7ab166542a527e372fb3854144b57284b42b31ae2776fb18cdf3cc nodejs-libs-16.20.2-3.el9_2.tuxcare.els3.i686.rpm d3325bd530aa408b877245e233090715320db0bc5ad4c1eeabe0033d2956866c nodejs-libs-16.20.2-3.el9_2.tuxcare.els3.x86_64.rpm 19c8253bebe64d85081780c97599ec28550c0ab5d5798f8bebff8a4baa72fe93 npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els3.x86_64.rpm 16aeb3de829a70627ea65c533c488e651f69f6b0731d2fb4f7b0e3743114985c v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els3.x86_64.rpm 6070d3c68c1627e5733e29ff92ab192edcc767a3d5e64082d1280a30c5671ffa CLSA-2025:1754412669 TuxCare License Agreement 0 - CVE-2023-44446: fix use-after-free in MXF demuxer by storing essence tracks in fixed allocations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-44446: fix use-after-free in MXF demuxer by storing essence tracks in fixed allocations

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els4.i686.rpm 5313a8a8dc25b8ad3b78d819c9c3607ff4e07f2b0410dc63ed44a29ddbea2ded gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els4.x86_64.rpm 14f8ec66b6005037b3b9a94640a66546b9bc19749bd5d191b261ff6f49b2ed18 gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els4.i686.rpm 7012b55ac1c72b9ce7a90f4f471d0d56f489d1dafcc38ee77bffa0466d603ad2 gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els4.x86_64.rpm b971b7b42a6c69805d67fab5ff6b8dd74c0b2ea4deed70c4cad0e83f71bb66f5 CLSA-2025:1754552791 TuxCare License Agreement 0 - CVE-2023-47466: Fix segmentation violation and application crash during tag writing via crafted WAV file Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-47466: Fix segmentation violation and application crash during tag writing via crafted WAV file

0 tuxcare-almalinux9.2-esu taglib-1.12-6.el9.tuxcare.els1.i686.rpm 3ce12824d22223b33f870473f4e411a40de54b151fb9a5a9cab8df32841b6054 taglib-1.12-6.el9.tuxcare.els1.x86_64.rpm 3d700d10f863c673292feedbaead61215bfd7496e4acd07cf3a64ddb55408683 taglib-devel-1.12-6.el9.tuxcare.els1.i686.rpm 47719cb580e23735ea050b516fe52e980b6ebe45679c0e104ec6f2c5fdbfcff1 taglib-devel-1.12-6.el9.tuxcare.els1.x86_64.rpm f5225b18ed03dc44a440e7a37b9cd966381e4671ea09a2b48508ba1353ba0936 CLSA-2025:1754649153 TuxCare License Agreement 0 - CVE-2025-5994: fix cache poisoning vulnerability by segregating outgoing queries to accommodate for different outgoing ECS information Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5994: fix cache poisoning vulnerability by segregating outgoing queries to accommodate for different outgoing ECS information

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9.tuxcare.els4.x86_64.rpm 9894eef7088e51fdb843cc0abf2e383533cc65b29cd4b35f535d5ba1fb129791 unbound-1.16.2-3.el9.tuxcare.els4.x86_64.rpm db309b6dcaa26cc80165a6879e80d6115a1f271214ff81ebc51586a7f6b8fa7b unbound-devel-1.16.2-3.el9.tuxcare.els4.i686.rpm f617a4f6bc871787e3f3b8ab38f5909b7537094e6c53c62f63ef743cf866bdda unbound-devel-1.16.2-3.el9.tuxcare.els4.x86_64.rpm 4d280fe3200f3a5bdc282e04000b69a1be6e1b94a37082510ab6adbbed1dbeb5 unbound-libs-1.16.2-3.el9.tuxcare.els4.i686.rpm 0508da1443f654ae744cd7f0752b5d334bbfb9c55b42f024b5d9c57642a7d047 unbound-libs-1.16.2-3.el9.tuxcare.els4.x86_64.rpm 860424215058e2be8f01a8887cb5729cf441c7879be2acb5ff6e0c657f73b4bd CLSA-2025:1754649907 TuxCare License Agreement 0 - CVE-2025-7425: fix attribute type modification in libxslt to prevent memory corruption Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-7425: fix attribute type modification in libxslt to prevent memory corruption

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els10.i686.rpm 7fd2f49e47d209e2890053bb383de2b4e64ec8c73ef134fc6abd95d402d23fe8 libxml2-2.9.13-3.el9_2.1.tuxcare.els10.x86_64.rpm 58bf128020cdb9ace4ef0f361ba89c031ee9985011d8693f4868b3e1f744c474 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els10.i686.rpm 347b0d7c3d62d516b903a42b51033ff135bff1638d5f28435beb79d1b82a60d2 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els10.x86_64.rpm beed6e754dc3d3b5558a742c26179fc2ede1ced5c75d80ad631e3bd21562a0f8 libxml2-static-2.9.13-3.el9_2.1.tuxcare.els10.x86_64.rpm 52905ba734876248301d90cf57bae2cdc70689384a18a56740c1f64c96700405 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els10.x86_64.rpm db7e6a260d9f756f09b7cccbd5a87f63f822389710d38a6de5f3e43f1f3864ff CLSA-2025:1754650455 TuxCare License Agreement 0 - CVE-2024-56337: prevent time-of-check time-of-use (TOCTOU) race condition vulnerability by strengthening file validation logic during request handling and closing the gap left by the partial mitigation in CVE‑2024‑50379 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-56337: prevent time-of-check time-of-use (TOCTOU) race condition vulnerability by strengthening file validation logic during request handling and closing the gap left by the partial mitigation in CVE‑2024‑50379

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els13.noarch.rpm 75f9e394003f0bf9f670dfce5c1a43220e938fdfabea49b93c16bc2b2409b4a2 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els13.noarch.rpm 27091728293b4bb9e7bdb65224ae68845cd70675929cc391414bebedc49bbc98 tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els13.noarch.rpm 76d6eb5e2e36f60cbe8953166c4b9bef2a43736cb18891205b6c72bf497f236b tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els13.noarch.rpm fea19c2d3ef54daa414fdae143a00045a447d0c5902a9804a61ee674e0fcde6b tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els13.noarch.rpm 8245ff32be64b46e1eaac480d748b795088bd1707b609fd0ba4491bc96ccd1b6 tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els13.noarch.rpm 4f7833685760c82377f5f63def93f45cc9fb88290f8282ee4e7b22748d3d099d tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els13.noarch.rpm cb666daaa8d04d080290b00842dace9233453bcdaff05b002f232a60ee4d5330 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els13.noarch.rpm 6ac5032b4a20b042d6d924fe62398040876d8b55c5f99c156e1534db82e1d205 CLSA-2025:1754939879 TuxCare License Agreement 0 - CVE-2023-27349: fix crash while handling unsupported events in avrcp Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-27349: fix crash while handling unsupported events in avrcp

0 tuxcare-almalinux9.2-esu bluez-5.64-2.el9.tuxcare.els1.x86_64.rpm 64440ad4b1488c0371e79a4be942cbe10db2230c94f4089b45937f8c20737e9a bluez-cups-5.64-2.el9.tuxcare.els1.x86_64.rpm d5b3efe1808e977adba003620c2588b86e0b91d971fe43e368ceedec9cef1705 bluez-hid2hci-5.64-2.el9.tuxcare.els1.x86_64.rpm 39fc7244d86ce02bf31796881d5d2877c3390e895ac40879c044fe1d4b47b806 bluez-libs-5.64-2.el9.tuxcare.els1.i686.rpm 69c44982bdb9fa5d4b15a9ccf299795fe3981635ad3c98820fa2ed4ad8e8f807 bluez-libs-5.64-2.el9.tuxcare.els1.x86_64.rpm 738cd85dc44d2370c1cdc2d8344e65e922f71e3a1e54f06a7ee82d639306efd7 bluez-libs-devel-5.64-2.el9.tuxcare.els1.i686.rpm 0a4a41c173c38295e8ecdd3150b54781a6099ddc80abea681c8e1ac65aa416fb bluez-libs-devel-5.64-2.el9.tuxcare.els1.x86_64.rpm 1cf1377a70704bfa7ac6dcf77b1fd8143ebf9e8401e49ff8530cb063768f6a62 bluez-mesh-5.64-2.el9.tuxcare.els1.x86_64.rpm 3791469619dfa24aba7a8a401a7e8d298fbd017a05188b6c518588abc1187456 bluez-obexd-5.64-2.el9.tuxcare.els1.x86_64.rpm 8fd10a4feb0b7910e4349fdaf18038a07bb5bbbf1be63571042c1761b4fe8604 CLSA-2025:1754941300 TuxCare License Agreement 0 - CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths

0 tuxcare-almalinux9.2-esu mod_dav_svn-1.14.1-5.el9.tuxcare.els1.x86_64.rpm 3f3ea929bcc04340bf545d92ac2339a116dc6df6caff07f338ce8fcfff769980 python3-subversion-1.14.1-5.el9.tuxcare.els1.x86_64.rpm 54072ae8b3b64770d0f4052cb3e6d7e9b451f7b9691e17c80661494f62882fa0 subversion-1.14.1-5.el9.tuxcare.els1.x86_64.rpm 4dbc909c5ec10129631906b7767e57fc3acdb57c94058a0ef3261850e9ba11d1 subversion-devel-1.14.1-5.el9.tuxcare.els1.x86_64.rpm cf3066c6c5be0fe7d870e86e5929c049e10d89c78946fcc0e9316e01b6750e3d subversion-gnome-1.14.1-5.el9.tuxcare.els1.x86_64.rpm b672fd32e4abbb0432fab72d08d747311bd04956abd98949e0c2d3504dd2a0df subversion-javahl-1.14.1-5.el9.tuxcare.els1.noarch.rpm 168078e0ebf7d157b2b960bf41c64eccf5ffd596a3292892f63730ed3ec7adeb subversion-libs-1.14.1-5.el9.tuxcare.els1.x86_64.rpm 09899b96b4b0b264d8cc8e34ae1ed2449dc21eb58f4d3065479da07f3de12421 subversion-perl-1.14.1-5.el9.tuxcare.els1.x86_64.rpm 9ae9f6cf41e767e4037f26440672022d4d9ce74a4c97b58e582a089224cecb08 subversion-ruby-1.14.1-5.el9.tuxcare.els1.x86_64.rpm 108e0bee33a3b23f26a287e90c7e0717d6a057160a39f0e86e3b995acca390e2 subversion-tools-1.14.1-5.el9.tuxcare.els1.x86_64.rpm 2b5f2e0ad69ad597e7f592965436ccce24e9b71800b0f0f55494e16ac97e4ae6 CLSA-2025:1755003990 TuxCare License Agreement 0 - CVE-2024-5197: fix integer overflows in image allocation and wrapping logic, validate dimensions and alignment to prevent invalid buffer calculations Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-5197: fix integer overflows in image allocation and wrapping logic, validate dimensions and alignment to prevent invalid buffer calculations

0 tuxcare-almalinux9.2-esu libvpx-1.9.0-7.el9_2.alma.1.tuxcare.els1.i686.rpm a4b50d616879959eab67bb5a0a8df4622503d35af3d35362a3b28a6a65a35046 libvpx-1.9.0-7.el9_2.alma.1.tuxcare.els1.x86_64.rpm 3e9048aa1ab580b84782f6768526b4ca201ecc7389bfbea49eceb704588446fb libvpx-devel-1.9.0-7.el9_2.alma.1.tuxcare.els1.i686.rpm a65b906551b6061f23219028980c53a1ec1c833f4829e90fac0b7b97a3b36963 libvpx-devel-1.9.0-7.el9_2.alma.1.tuxcare.els1.x86_64.rpm 72d77d14a7506a02947b818a1c3f6a629abe661d0fccc0b171952ada895f97b6 libvpx-utils-1.9.0-7.el9_2.alma.1.tuxcare.els1.x86_64.rpm c89d0f9d254b627f5b4a873fe1b8d0f59e71391efaffa51925e7db305eed73c8 CLSA-2025:1755006018 TuxCare License Agreement 0 - CVE-2023-7250: fix flaw to prevent denial of service caused by malicious or malfunctioning client sending incomplete data to server Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-7250: fix flaw to prevent denial of service caused by malicious or malfunctioning client sending incomplete data to server

0 tuxcare-almalinux9.2-esu iperf3-3.9-10.el9.alma.tuxcare.els1.i686.rpm 8750724dd4b957721c0eb084544413a6547c2fa9feadfc451f9cc080bfe2f84c iperf3-3.9-10.el9.alma.tuxcare.els1.x86_64.rpm d6ba5309b4b1f032ed7f18dc40d83cec66fa802467b57f079672df8b61fcfd78 iperf3-devel-3.9-10.el9.alma.tuxcare.els1.x86_64.rpm c1c57c8f1a377fcd202f85ac9863f3b54578794161abce70eecc0ae01a1b9e66 CLSA-2025:1755113613 TuxCare License Agreement 0 - CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary code execution by validating user-supplied data length before copying to buffer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary code execution by validating user-supplied data length before copying to buffer

0 tuxcare-almalinux9.2-esu bluez-5.64-2.el9.tuxcare.els2.x86_64.rpm 67ee1f7ebfc83186e55bbffbe90aeb18edc82dc732738683de1e01c89f5dd749 bluez-cups-5.64-2.el9.tuxcare.els2.x86_64.rpm b4ea55b5043ce74899355664e8389df8d3aee0962894eb4ed2d5e0e61f6f053b bluez-hid2hci-5.64-2.el9.tuxcare.els2.x86_64.rpm b9c96615f37cf4a825e147e843999474409a6ddf352a5aa05d2d3feb59f1212e bluez-libs-5.64-2.el9.tuxcare.els2.i686.rpm 97d2fb0b27be11fa003b903da59a2f0818676787bd3f4a5b17ba56fa0e537eaf bluez-libs-5.64-2.el9.tuxcare.els2.x86_64.rpm 73018d6c2f380e97b00dac45d4fa0908dc4e8f27933d2b9177597e38394549c8 bluez-libs-devel-5.64-2.el9.tuxcare.els2.i686.rpm a6d8035af4249b823c9216fac90dcdf276ccb3b95473a645f4b718b49f1de5d1 bluez-libs-devel-5.64-2.el9.tuxcare.els2.x86_64.rpm f5b654408bffa1bff81eed4058c2bba18817c0063b39c213c35e30b229620cb6 bluez-mesh-5.64-2.el9.tuxcare.els2.x86_64.rpm cdd08d65d228d7f31f5ac6fa9859a08a307c3708e3db69a93b9e5160612fe54a bluez-obexd-5.64-2.el9.tuxcare.els2.x86_64.rpm 995e8a1a7647f921f14c30cd9b8327556e9e8486a5a785fb4dd7c715a16d8d30 CLSA-2025:1755114348 TuxCare License Agreement 0 - CVE-2024-40897: use vasprintf() if available for error messages and otherwise vsnprintf() to allocate as much memory as required and avoid buffer overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-40897: use vasprintf() if available for error messages and otherwise vsnprintf() to allocate as much memory as required and avoid buffer overflow

0 tuxcare-almalinux9.2-esu orc-0.4.31-6.el9.tuxcare.els1.i686.rpm e84dac54d9aa85dc6fc5709f75c9074bdbadc82508476b9219c575b2029d36b1 orc-0.4.31-6.el9.tuxcare.els1.x86_64.rpm 960f66da569b92472280e0a21424ab2e1ad3aa61ae0bf78c7193be3a52315d3b orc-compiler-0.4.31-6.el9.tuxcare.els1.x86_64.rpm 585b63bc354ce6805cac3824993cfc7ed738886aa46c3c0168379e394d5758b7 orc-devel-0.4.31-6.el9.tuxcare.els1.i686.rpm 103bf31e70cb8b5374e4f6ef3997fbec7d962dd934e268f3883c86186d48feff orc-devel-0.4.31-6.el9.tuxcare.els1.x86_64.rpm b336ac72224686fd3b3f77c1ea96efa710692c23ec6e5afe2baca25f09a51ce2 orc-doc-0.4.31-6.el9.tuxcare.els1.noarch.rpm 24c36d61d000993ec013583b871dbd23ce02e3339b17cc5a1fb4518df5805cdd CLSA-2025:1755115606 TuxCare License Agreement 0 - CVE-2025-4673: remove Proxy-Authorization and Proxy-Authenticate headers from cross-origin redirects to prevent sensitive information leakage Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4673: remove Proxy-Authorization and Proxy-Authenticate headers from cross-origin redirects to prevent sensitive information leakage

0 tuxcare-almalinux9.2-esu go-toolset-1.22.5-1.el9_2.tuxcare.els3.x86_64.rpm dbc58380e0d17424055a6518ba088b0a50adff1ae431b45037088ae017880296 golang-1.22.5-1.el9_2.tuxcare.els3.x86_64.rpm e5c3721d466214f7841f3934a998d21f7cfca537f7f249ae443cae7182dea967 golang-bin-1.22.5-1.el9_2.tuxcare.els3.x86_64.rpm 551e255249df44a1e11787d08af29b18141f2c2d46eec64504d3e2ea67f0ea8a golang-docs-1.22.5-1.el9_2.tuxcare.els3.noarch.rpm 4c16d4abd99be7d434a2db518128637bde89a72243d4adfa8ddfcc37d9ebe70c golang-misc-1.22.5-1.el9_2.tuxcare.els3.noarch.rpm 3f324f0a4915f5655310c32f51e1598184046b1664bc3fff6e79f90573bfa627 golang-src-1.22.5-1.el9_2.tuxcare.els3.noarch.rpm 1739201018c1d54c80c7e4aebc99a4e3b999fbd5b3e4ce352a0c3ecad37c7f0b golang-tests-1.22.5-1.el9_2.tuxcare.els3.noarch.rpm f7a39609859b58a60bd75c3426f52a32b411788367435b32b349565bbf520d65 CLSA-2025:1755270846 TuxCare License Agreement 0 - CVE-2022-29458: fix out-of-bounds read and segmentation violation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-29458: fix out-of-bounds read and segmentation violation

0 tuxcare-almalinux9.2-esu ncurses-6.2-8.20210508.el9.tuxcare.els2.x86_64.rpm 4e397e9c41fab1bdeaaba65916fb45910fcfa8d3c363fdb2222db43d57e495e0 ncurses-base-6.2-8.20210508.el9.tuxcare.els2.noarch.rpm fa0b62d0dbb37d6023fd8d707884d97fe0a5bf9127d103fed681decc2841298a ncurses-c++-libs-6.2-8.20210508.el9.tuxcare.els2.i686.rpm 42d7d809d272d9c937552918849379c165f8f5387eaccde8c697241ee088b232 ncurses-c++-libs-6.2-8.20210508.el9.tuxcare.els2.x86_64.rpm 83488fd087cdc5b1f5f80eeea359d3516bc6682c8cb605eceeb444fe8a112a48 ncurses-compat-libs-6.2-8.20210508.el9.tuxcare.els2.x86_64.rpm 92daf51e1459cbd26342c502ea3a3023fc103a0401baaf52f8fa68b9e8f14d5f ncurses-devel-6.2-8.20210508.el9.tuxcare.els2.i686.rpm 39e449dfdfeb89d67d607ec07691f9fb5c9a7997f54b6ef7000d73ed1436aca2 ncurses-devel-6.2-8.20210508.el9.tuxcare.els2.x86_64.rpm 3e8b5bc0922a32a2b73544fa42c4deb06dd14c8872b5655a23b0675b095ce99f ncurses-libs-6.2-8.20210508.el9.tuxcare.els2.i686.rpm 1f25f746ffeac85a0be30cf2f899e887dd4896e4aa5ada594ea4009f98fd2a15 ncurses-libs-6.2-8.20210508.el9.tuxcare.els2.x86_64.rpm ca935dc74838cd4ec47f1475552c2ad6f3326766a8f0bf13202a48dcbc0c0d1a ncurses-static-6.2-8.20210508.el9.tuxcare.els2.x86_64.rpm 515e62124da47fa68dfb340cef38c8dc36eafc5ccd4cb2779c6cb8727be81cae ncurses-term-6.2-8.20210508.el9.tuxcare.els2.noarch.rpm 16ae90caf02cb52e300b3741959aa4c22ffb094577e7c363c840f586390f0e98 CLSA-2025:1755618159 TuxCare License Agreement 0 - Bootstrap for ALmaLinux 9.2 ESU None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bootstrap for ALmaLinux 9.2 ESU

0 tuxcare-almalinux9.2-esu cargo-1.75.0-1.el9.tuxcare.els1.x86_64.rpm 9500150c24107e2d19bb10314364a63ce29c93d7480b9e7b0347a269ba2a2f7a clippy-1.75.0-1.el9.tuxcare.els1.x86_64.rpm 3784598b8d8ee5e83571a248a87447304273f018a936d7681b911e82887b314c rust-1.75.0-1.el9.tuxcare.els1.x86_64.rpm 9e3dc4a56be5d8fd6488bf5f0bfea766273858c2bdd93baf30fea43fad55d993 rust-analyzer-1.75.0-1.el9.tuxcare.els1.x86_64.rpm bc3ba986b53e0b8f40272c4b1769d8bdb77c5652c2f7f3e70b42c30d4652a127 rust-debugger-common-1.75.0-1.el9.tuxcare.els1.noarch.rpm f6d38f84f94deba85e12f317d333b46698176037831cb5fcd1ca681bbb2e5f52 rust-doc-1.75.0-1.el9.tuxcare.els1.x86_64.rpm 03743f22316e245bdfa61fcfa9772f74c10f97f01fe4db17d321849f168a2550 rust-gdb-1.75.0-1.el9.tuxcare.els1.noarch.rpm 18d4920cba87362257a937d2ee6a609a0dec090193f8fd908356d5d529ca2384 rust-lldb-1.75.0-1.el9.tuxcare.els1.noarch.rpm a4a3e37389c75c5f57706889d5ee92fd44929efe1e725d8fd08914a1a764adc3 rust-src-1.75.0-1.el9.tuxcare.els1.noarch.rpm 1b91b8f397eeaf1779abe5c22ab91db9b174e01255f56295862c762d07589e2e rust-std-static-1.75.0-1.el9.tuxcare.els1.i686.rpm 11b2a5302ba7e4c82065840a8780cdd3d3c556b774fa3d4f0bf6cca373f93ac7 rust-std-static-1.75.0-1.el9.tuxcare.els1.x86_64.rpm 153d4410826f6d17530e5be88a7501a229f11abfd092b2ba8ec0f2d774fc6c71 rust-std-static-wasm32-unknown-unknown-1.75.0-1.el9.tuxcare.els1.noarch.rpm d7bcae1270deabe118dab8527fbc8aa05b745362f54678dfa549cb5d9b3dfc3d rust-std-static-wasm32-wasi-1.75.0-1.el9.tuxcare.els1.noarch.rpm aa00e565b71e86cab2c19ecb2ec34cb5c5fcbf72874d072ceee134150327d23d rust-toolset-1.75.0-1.el9.tuxcare.els1.noarch.rpm cb66e89834d45209aa0ec670f9e5bb0709e076cd01baf67d1fd43dac39489368 rustfmt-1.75.0-1.el9.tuxcare.els1.x86_64.rpm 22bb7f0ede3b566f3b1b5c7c976079d4cf7db7b729456736c82ad7b2967c424f CLSA-2025:1755618280 TuxCare License Agreement 0 - Rebuild None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild

0 tuxcare-almalinux9.2-esu cargo-1.75.0-1.el9.tuxcare.els2.x86_64.rpm 194bd3f34122f19eb3ea2e0e28d2b31901a49675390cb5d917c491ba196f80d2 clippy-1.75.0-1.el9.tuxcare.els2.x86_64.rpm 1c42f4d81fba2278d070ccebbf10e700508fbc7cbcb8ba39808438a84717b6e7 rust-1.75.0-1.el9.tuxcare.els2.x86_64.rpm 3ffcc482a107f1ee6e5a08354ea651ccfc61c762fe1edbd300e23f433848f365 rust-analyzer-1.75.0-1.el9.tuxcare.els2.x86_64.rpm 947a698d9415b17a43e2d64a66f465662bd6c4e1a5bc742f1bd9b7057d27b376 rust-debugger-common-1.75.0-1.el9.tuxcare.els2.noarch.rpm a3a6f2273c066b34d0eda138dba5c8eb0a7120c917a8cd9e8f277af8ec5c8f05 rust-doc-1.75.0-1.el9.tuxcare.els2.x86_64.rpm fc35493a7f71e1e4cc0c766c2c4abb2e1b97ad8baf93a6db203082534fb96462 rust-gdb-1.75.0-1.el9.tuxcare.els2.noarch.rpm a4061d824d28ac96fadfbf88cadd204e5308cc5dfa8ea70cddac21116add256b rust-lldb-1.75.0-1.el9.tuxcare.els2.noarch.rpm 777a284bc7cc1a02d93854d06ff301214858f1f4cc0dc72e09f15f2f462469fe rust-src-1.75.0-1.el9.tuxcare.els2.noarch.rpm 71709e86fcb192e716503d0020ee2b19c5e348a76bf30f06f31bd7fedddaf839 rust-std-static-1.75.0-1.el9.tuxcare.els2.i686.rpm 15f2d3ea6999ce724a108cd4f3ee4d3e0b05390ccf4479c5cafc6c20c58b70b5 rust-std-static-1.75.0-1.el9.tuxcare.els2.x86_64.rpm c47beaca818a8985360ba2c4af44c3a07bc7cfd12d873fa663a58889e83a49f8 rust-std-static-wasm32-unknown-unknown-1.75.0-1.el9.tuxcare.els2.noarch.rpm 703beb56d112ec91719b8141f366394bf1b77004bd497db72623419004bc00db rust-std-static-wasm32-wasi-1.75.0-1.el9.tuxcare.els2.noarch.rpm 2f76b1527c01f429953019a21be970a20699574da7385c29c7cce4560f908dff rust-toolset-1.75.0-1.el9.tuxcare.els2.noarch.rpm 8e1fd7cc291ce695e568b1bd1e902d0942340735d48bf275762b679a5b3fb034 rustfmt-1.75.0-1.el9.tuxcare.els2.x86_64.rpm 9e3224aed2a2b0dbcd2a8cb2bb73c849e169742f9990501ef22751e73ce879aa CLSA-2025:1755617966 TuxCare License Agreement 0 - CVE-2023-36617: fix mishandling invalid URLs that have specific characters in URI parser to prevent ReDoS issue Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-36617: fix mishandling invalid URLs that have specific characters in URI parser to prevent ReDoS issue

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els7.i686.rpm 35c84c959c182e19c1a1688b6faaf3b7a37e272f39aa02be830d6bcb2b5c1505 ruby-3.0.4-160.el9_0.tuxcare.els7.x86_64.rpm 89925833c9c9802a9b940a31a5ab53cdc03d52d739bcc7b56a09ffa01026e9e4 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els7.noarch.rpm 58283b204f3da38fbd70d1ed9f25d12a58154afdc0dfdcf1b0489272e296efe4 ruby-devel-3.0.4-160.el9_0.tuxcare.els7.i686.rpm c6b63e704f2a3b48783c4c700d7ba710fbb5d808f489f442c9d779d287157acb ruby-devel-3.0.4-160.el9_0.tuxcare.els7.x86_64.rpm 96bba1824321aa620571047cfb59a3f7991e3b44876691bb86538b5207ed9c0b ruby-doc-3.0.4-160.el9_0.tuxcare.els7.noarch.rpm a9f901dc56f5c1cc950ae00b33626694091f20f689c41dec749fa4e89e6cab87 ruby-libs-3.0.4-160.el9_0.tuxcare.els7.i686.rpm b028fc8459cf753d9f63fd5018c1c3b0543b9370662eb88c5ca731037e68b9a0 ruby-libs-3.0.4-160.el9_0.tuxcare.els7.x86_64.rpm bcc8d959d888519996a69757250da33c2d582b249c01bd8d66c32f41f92ef9be rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els7.i686.rpm 2972765e720845d75780759483069484568c91d28926d6eccd16bf94c6781727 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els7.x86_64.rpm 4d751bf044bba2c58997feefe739afdb84f0452688faae132bb3b158ba71e69a rubygem-bundler-2.2.33-160.el9_0.tuxcare.els7.noarch.rpm e4ccc8cd80afcd44cadec9cd27b52da648b75ddaf1ac614376c18f25c2943670 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els7.i686.rpm bcc6a2fa2eceaf1bea0ed2b4bf9847447d32d6ceb9a75ae271914ebc16816b9d rubygem-io-console-0.5.7-160.el9_0.tuxcare.els7.x86_64.rpm 84e5b742f538050a6e794eefe4248d3ca73aac893a7967b548d7042e76fa0342 rubygem-irb-1.3.5-160.el9_0.tuxcare.els7.noarch.rpm a1c4cbe00c571061cdf974bd0fb1b8a16c39dd2ad93de2cee487ac168c9a4908 rubygem-json-2.5.1-160.el9_0.tuxcare.els7.i686.rpm 63024d461a064b0c4297637faaa43740fa1a00f9dca1cbef67bc91b964e57b4d rubygem-json-2.5.1-160.el9_0.tuxcare.els7.x86_64.rpm 0c47937853383de79ce8175c4ec3520c93a91faafcf646cfa3905ddeb7bd7d66 rubygem-minitest-5.14.2-160.el9_0.tuxcare.els7.noarch.rpm 610751bd0694153cdf5297e9f9a865307f1164784cbb74e19e96751c0c51463c rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els7.noarch.rpm 9bda77107e0de311bee76055199f051dab4f3f4462caf4c258b6fb806aa027c8 rubygem-psych-3.3.2-160.el9_0.tuxcare.els7.i686.rpm c0d9e29cc93b4f1a641f3f76fb78a7cf1457a8e6a007221929864d55c9084208 rubygem-psych-3.3.2-160.el9_0.tuxcare.els7.x86_64.rpm 99ca91cd0889815b495596150b1fc7f3f57d433ce8d8b832320289d1095e73bf rubygem-rake-13.0.3-160.el9_0.tuxcare.els7.noarch.rpm 732da99bbcaab720cd040304e895d68b1a6d83ea6d63e5ab39bcc4fb2fe89899 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els7.noarch.rpm 9a19d2441dd489717e0644e817691e309de9c4fca9e7a37597427e2024c816be rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els7.noarch.rpm 7a3957ea25e26ae347cfea507332b1d83208abb882dd4d89f480b817acac8f1f rubygem-rexml-3.3.3-160.el9_0.tuxcare.els7.noarch.rpm 4fef8cbb0faf84ac0809afbbdeb952a5cccf18fb4830fab94ee39807763e734e rubygem-rss-0.2.9-160.el9_0.tuxcare.els7.noarch.rpm 2b278ac32cca6a6901312643313db90e0c90b26783934828a499b284b8eaf9a2 rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els7.noarch.rpm a29b34dbe5c91af9e9e26be6509576374480a0efa7941c820a7ff37901c231da rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els7.noarch.rpm 7ba13411c456f6a36543d7efd6035b59c9394c63d84714653fe0bae4084c8991 rubygems-3.2.33-160.el9_0.tuxcare.els7.noarch.rpm c683c3ca18a84502da005d4f3dab066ac83d109f6507796fd54510d0041e3e43 rubygems-devel-3.2.33-160.el9_0.tuxcare.els7.noarch.rpm 1d30e09a3c6db77082b8507603948bb331aad5aa5303619013a28dbe56d4dfbe CLSA-2025:1755622959 TuxCare License Agreement 0 - Bump release None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump release

0 tuxcare-almalinux9.2-esu amazon-efs-utils-2.3.0-1.el9.tuxcare.els1.x86_64.rpm 445cfe644e069ad269610fc603e6c1106d59092d762c97afb356cff631664576 CLSA-2025:1755885569 TuxCare License Agreement 0 - CVE-2020-18770: fix denial-of-service issue in zzip_disk_entry_to_file_header function in mmapped.c Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-18770: fix denial-of-service issue in zzip_disk_entry_to_file_header function in mmapped.c

0 tuxcare-almalinux9.2-esu zziplib-0.13.71-9.el9.tuxcare.els1.i686.rpm 0983096381cacd1122576cc1ef2487ac8502920ba76012115ffc523ca609cbdb zziplib-0.13.71-9.el9.tuxcare.els1.x86_64.rpm 0ab90afb359ec171998767151690222063f10a5a8ec92f5ef87170917aa44d22 zziplib-devel-0.13.71-9.el9.tuxcare.els1.i686.rpm 37ca8a2d5905ccf31423d7d7a171cfb1cd4902f00b0abd022148f1433892ec2e zziplib-devel-0.13.71-9.el9.tuxcare.els1.x86_64.rpm a538f178cf47843efd059b76fae759d8ce9501ed45e469b792e35a22b0b2f53e zziplib-utils-0.13.71-9.el9.tuxcare.els1.x86_64.rpm 631581723aac7dad97808356a74ce5cfb71626c166080ad7aa8432288ee6394c CLSA-2025:1755886204 TuxCare License Agreement 0 - CVE-2024-52615: fix issue with Avahi-daemon relying on fixed source ports for wide-area DNS queries to prevent attacks with injected malicious DNS responses Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52615: fix issue with Avahi-daemon relying on fixed source ports for wide-area DNS queries to prevent attacks with injected malicious DNS responses

0 tuxcare-almalinux9.2-esu avahi-0.8-12.el9_2.1.tuxcare.els3.i686.rpm ba95e16e82942743237bb5abdb4abdf260b77868c87c9c9d03577fdfd11585a8 avahi-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 130f7ffc4706ec600ef244d83dbec2b6b995467c5b0ec88284c1615cfdf87759 avahi-autoipd-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 16b62cc87694ec9f9d2c69c79516796cdfdfd912853c5bb8ccc3c08be9d77a9b avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els3.i686.rpm 84b0a0a0a01999e4fbb848d3266d2b543f5ef532e856f197c09f0c0df9775fdf avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm d87ddb0d65cfc69c5ebd392ab3269c81f8f04f0bb9dfdbfd6f35c5fce8cfe570 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els3.i686.rpm 5c50b8874c94b4cad7526f7ea2bd1aed9f12c5549f59fe012cf415f8e6d7a265 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm eef49d66f7646ee9dbc0663ebd49f696b728e0390dcb810553dfe3742a89ea07 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els3.i686.rpm af1c02b80b6a538536176361f5415d0dcb202425b443f0876d85cf5afe43d324 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 12c5a14d93e1894abfcc330fbc6535b7105ced8f9e222e8043798ae66b355439 avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els3.i686.rpm e8dcca721bcb190bff8de68c7ed4833303a4b1bd30c4ed0b82640a5ef83a4e02 avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm fac8febda05ef1a4944a81e7a6893adebdddac9e9e411359b8b705c00cb31372 avahi-devel-0.8-12.el9_2.1.tuxcare.els3.i686.rpm 370491e3bf22c5747bd802cba4d597d59d90659a72cc27c886163596d6f2133e avahi-devel-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 98eb1fc4d4d662199491b1bef3f3a1297f16c3a0044c508f8132588ba7497141 avahi-dnsconfd-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 979bdf07d14235100d812b3e31d070b81b266c6ac7a7a9956adddc75fbd3eeb7 avahi-glib-0.8-12.el9_2.1.tuxcare.els3.i686.rpm 4cb237dfb5b7c18567f22cef6ea671c7f787faf5abc7d13eceb46b134ca1b282 avahi-glib-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm c68dd41c89a0a675df5b06f856311e88decdb955a6917b33b201c22e8d60c603 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els3.i686.rpm e7030ef6c6c9968d7cb2aae2755dbf791237b80cfa31dad024d42b67ce793925 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 862645d75fa324cda3d908023d64fe778ff1f9d755a099d62450b9c9e96acb14 avahi-gobject-0.8-12.el9_2.1.tuxcare.els3.i686.rpm 60d94834b401c92f3e028b8589c70b5a982b7f4d711d323e9b1b5a1be7531489 avahi-gobject-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 178028d2e04d96c757dec4477a13f114e4e02c9d148cf5b77f34ccde5341639c avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els3.i686.rpm 82fcd1533800ee779ba594eeb0736a6fb82386e05e7cd43b6e334156b1d39430 avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm a09c268c20398d8fa7da6f42d631b9099ed4a7801e2f2f71904e3f39e82d4d8d avahi-libs-0.8-12.el9_2.1.tuxcare.els3.i686.rpm 3e5abfee98ac1d58e4287c2307ee31650a1a810ac8d369968f5bcc6dee0efabf avahi-libs-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 95e30c1f2bd5f0b0b4fcbc6b14171a68337c3b7e9b48e68439711ce33742364d avahi-tools-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 75b461dd02976dd42439d344e35d7ee16bc9d50f1a95d7d37ab90c5773d5bf0d avahi-ui-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 34609291b74d504a84126ff8b35b6cfff0d64e5ad15e47d30b9dd4310f3ed70a avahi-ui-devel-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 99d5329c77812215ca721bbb4b05f29cc8b733fe03a976a622042b2b97fad371 avahi-ui-gtk3-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm 01d641edd9deacf716a602cc05e3a18ce41ea0beb122172cd28ed2f61565e47c avahi-ui-tools-0.8-12.el9_2.1.tuxcare.els3.x86_64.rpm c491c09a10c15d630ec2c6d09375b0e441c92627e615b87e251533a281233c2c CLSA-2025:1755886747 TuxCare License Agreement 0 - CVE-2025-48367: prevent unauthenticated connections causing IP protocol errors by implementing authentication checks Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-48367: prevent unauthenticated connections causing IP protocol errors by implementing authentication checks

0 tuxcare-almalinux9.2-esu redis-6.2.7-1.el9.tuxcare.els6.x86_64.rpm de189e156f411adfd7180202faa1a67805c38eadc251687034ecaa3abbab6d95 redis-devel-6.2.7-1.el9.tuxcare.els6.i686.rpm 4d1043cb80878e7c3aa680d90c4ff4102402029035fc8fe5180846a4c6c69cab redis-devel-6.2.7-1.el9.tuxcare.els6.x86_64.rpm 96d2e4ad69ef4088a946503334a4347ee280c7b2cbfb5732ad172b6d37232d9a redis-doc-6.2.7-1.el9.tuxcare.els6.noarch.rpm c208415451676094b7785fc33a47273fbd429ed7e050835a235aab5cf6a9ecd9 CLSA-2025:1756110212 TuxCare License Agreement 0 - CVE-2025-3576: prevent spoofing vulnerability in GSSAPI-protected messages using RC4-HMAC-MD5 due to weaknesses in MD5 checksum design - CVE-2025-24528: prevent overflow when calculating ulog block size Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-3576: prevent spoofing vulnerability in GSSAPI-protected messages using RC4-HMAC-MD5 due to weaknesses in MD5 checksum design - CVE-2025-24528: prevent overflow when calculating ulog block size

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els8.i686.rpm 0c727ad5500eddb701fb21900e364ea7d842c305928dbfaf5437825c35f5c2e2 krb5-devel-1.20.1-9.el9_2.tuxcare.els8.x86_64.rpm d20f1ecb2a59e2a28d69a48e14094bfce835b885bf2de81809b09543f1f72851 krb5-libs-1.20.1-9.el9_2.tuxcare.els8.i686.rpm 804a29f5b7dd5b83e08e6a674d20c476df8fffad08570ad10a5435a495de39a3 krb5-libs-1.20.1-9.el9_2.tuxcare.els8.x86_64.rpm 36ea82a344b5f14da325203e4eae3fc9c77eaecd4a69914862fb1dcb5545fa86 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els8.i686.rpm c95a1937edf7be6f86a138eaabb3ed20506d74e67e5cbc3594f103d561f0a292 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els8.x86_64.rpm 18e1d7d1c3608b10f9cced248e8929b298ff7c36796a22ce5c59d160a6a72941 krb5-server-1.20.1-9.el9_2.tuxcare.els8.i686.rpm 344be7111b34d7f72ebccb835b9a73a6807bee963313f90ccd251ec1b0d2f9a4 krb5-server-1.20.1-9.el9_2.tuxcare.els8.x86_64.rpm d40a0866c41fa387ad2f9bc32d5a5edad5594aa6af434d18c33f8fea0f384dac krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els8.i686.rpm 95c7b63005e078b1742f560fcf27aaa86db70c64ecc3284027e51f454ad72d4e krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els8.x86_64.rpm 718485020f4ef7299dd2c20d4600bca417e11689defc074258e12db6510f997e krb5-workstation-1.20.1-9.el9_2.tuxcare.els8.x86_64.rpm da1693b7e61dea876cdfa23fcc9782efec8d64a3ddae80ee99da15587c345519 libkadm5-1.20.1-9.el9_2.tuxcare.els8.i686.rpm cc270a3fd9300f7b9c768963d15a4f80752dc0f833409c50c4e7d0f290198fa6 libkadm5-1.20.1-9.el9_2.tuxcare.els8.x86_64.rpm 85d2b2346ffb866a0cc222f1c0d139e8a30f91376131706fda1e75b25788d801 CLSA-2025:1756305640 TuxCare License Agreement 0 - CVE-2024-28863: prevent extraction in excessively deep sub-folders to address unlimited sub-folders vulnerability Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-28863: prevent extraction in excessively deep sub-folders to address unlimited sub-folders vulnerability

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els7.x86_64.rpm 9932738608f44b35b5e1948f6f79e897da0e04ae2c12e623bd613e0618a4b183 nodejs-devel-16.20.2-3.el9_2.tuxcare.els7.x86_64.rpm b0b78626dc2eb75e52c296b99f4e739a6ef3fc6a7afb487230ae1a9dfdbc2642 nodejs-docs-16.20.2-3.el9_2.tuxcare.els7.noarch.rpm 5ccf44bbd89c0f1fbfe10254eaaa526a5b1d78ba244e2abdbc8a6d475eb1b4f7 nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els7.x86_64.rpm c7bb6b69ae1c965b107e00af4bc3319d383dcd873df1baaf95eb3a02a04cb3d5 nodejs-libs-16.20.2-3.el9_2.tuxcare.els7.i686.rpm 88818353ac6aef90a1f8c47a08fb86c242cc4fdc419c65acd72e498d4a6cc06e nodejs-libs-16.20.2-3.el9_2.tuxcare.els7.x86_64.rpm 9d9d4aba8d3fb78e59bf123acc09ebb1922ca10bb58204b52657f1dfdc732026 npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els7.x86_64.rpm 97c7a697653b87aec642d96127a812aa3a65c491df7e678587fd8367f976d8f2 v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els7.x86_64.rpm cbd84fcf2e11866a100e8a16fe3148f263f17171e5352c13c32455d7977dd25c CLSA-2025:1756408700 TuxCare License Agreement 0 - CVE-2024-25629: prevent reading before buffer start when parsing config files containing an embedded NULL as the first character of a line by discarding such lines in ares__read_line() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-25629: prevent reading before buffer start when parsing config files containing an embedded NULL as the first character of a line by discarding such lines in ares__read_line()

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els8.x86_64.rpm 4df72e27c71cd0d0f231f582b7d05f701dd45870071997583b17bbd5da3348ec nodejs-devel-16.20.2-3.el9_2.tuxcare.els8.x86_64.rpm 76fb82ece0e53029122c893b17d806c3bc38c18491dceee99bb8842a9c48969c nodejs-docs-16.20.2-3.el9_2.tuxcare.els8.noarch.rpm 53ae377bf96f5816e689178f19c97327d756c2d457df928706039e9b4ebbeb66 nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els8.x86_64.rpm 24be6a0771ec3766174f372710e1bf63a4544495e63b6cd86f831d30f65f9a35 nodejs-libs-16.20.2-3.el9_2.tuxcare.els8.i686.rpm 53cce657de4b212d30cb42c7b2d2a69391bbce90002d5cde2f66318d498455d7 nodejs-libs-16.20.2-3.el9_2.tuxcare.els8.x86_64.rpm 503b3584f7d9015a3bc5cbbd68cf0bc4e5dcbb757aa346282b29a026960405fd npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els8.x86_64.rpm 4ea3469f7faad8289bd65b2da55781f440dd5a768b5d1ee7ac0ad6eeff30c47d v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els8.x86_64.rpm 587076f566cc9fa860f5e88f065b10a1209f3f0461f07e659b0e6b545abfd31f CLSA-2025:1756928002 TuxCare License Agreement 0 - CVE-2024-53580: fix segmentation violation in iperf_exchange_parameters() function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-53580: fix segmentation violation in iperf_exchange_parameters() function

0 tuxcare-almalinux9.2-esu iperf3-3.9-10.el9.alma.tuxcare.els2.i686.rpm 495a0cf4e5084f29a21b766a327f6eef7bf9cc142580eccdbf3e488b969ab4f5 iperf3-3.9-10.el9.alma.tuxcare.els2.x86_64.rpm 29aa3380adf8eaaa5ea52ec4c6e93ccde89b476c3d9be105f1c4ba691556bbd9 iperf3-devel-3.9-10.el9.alma.tuxcare.els2.x86_64.rpm 4c813bf82f508dd835ed8042186aa51a7a640dbcb604f41e9357edda266652b8 CLSA-2025:1756928514 TuxCare License Agreement 0 - CVE-2025-5283: fix use after free vulnerability in libvpx to prevent potential heap corruption via crafted HTML page Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5283: fix use after free vulnerability in libvpx to prevent potential heap corruption via crafted HTML page

0 tuxcare-almalinux9.2-esu libvpx-1.9.0-7.el9_2.alma.1.tuxcare.els2.i686.rpm 726da90d1d08afecdb69fe18121435babf1e8fe1cac71527c9606833dac940d2 libvpx-1.9.0-7.el9_2.alma.1.tuxcare.els2.x86_64.rpm 85c9ad6922d07f7a9b3dab05d8153d73fd7f5428304fbcd140d0db7e799af94a libvpx-devel-1.9.0-7.el9_2.alma.1.tuxcare.els2.i686.rpm 1fadaa6bce334b4b293487f72cd7c83c9be981b3fbae4ace15fcd1c4e8c73e62 libvpx-devel-1.9.0-7.el9_2.alma.1.tuxcare.els2.x86_64.rpm 936646b08d6ef5bc1b4d44dbf6d452937c8e14c12e3d237a3447ad6a122c58ff libvpx-utils-1.9.0-7.el9_2.alma.1.tuxcare.els2.x86_64.rpm 627acc22abd38daa9309dae7679800d5470cde1635e86bc6823a93df4ad776f5 CLSA-2025:1756930773 TuxCare License Agreement 0 - CVE-2025-8058: fix double free vulnerability in regcomp function Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8058: fix double free vulnerability in regcomp function

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 05252478552d4758a8a62615f031796c2d1b7022d4f235ed127170dcb1fec7ad glibc-2.34-60.el9_2.7.tuxcare.els4.i686.rpm 4dfb8c94c829378166cb7bd62fffd453def1b9adf9a283b5b11a57b345560d22 glibc-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm a7dec34884de9b05c63fd9366fb925c9330f47b722a8ac23380b223965974872 glibc-all-langpacks-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 635f83826a992ebb0674e84de36a86a63af7a6445fe8c4ab92080444dc7b246c glibc-benchtests-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 25eb162ce2d5f31a09418d81f5f3cf09d006655f973407547b2eb010d80d874c glibc-common-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ae92cbab1e63a9e8ec81e38cebfacabf5e8e70c4f70ead582258bf45eb091349 glibc-devel-2.34-60.el9_2.7.tuxcare.els4.i686.rpm 61709f31e45d4a3235d9ed798b9b067f18b74dd6a841b4ca6641613a1ca4db41 glibc-devel-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f2813841e4f8026c1aaeb679ecb0a83ac4130722ac1b5350531f33ea95e457a9 glibc-doc-2.34-60.el9_2.7.tuxcare.els4.noarch.rpm 669f572cde1695d14083f658808b12bc5a09a12c991807fe6e35a76c9b578499 glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els4.i686.rpm 889e0e85a6f45625d7133fcb64e21f196f9f828dfeceb9ed444169475b561fa1 glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 7ea29f455819a917160e667cdf6f40a21ac863d2b3530e72a21532d5b18078e1 glibc-headers-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4061b51cc3eac5847edc718d77c763e00936f4aa971f407eec7f95b39925b936 glibc-langpack-aa-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm a527e5fc5dff5be66c6ca1447d7048cbaca11b8287dc1203983d9f69ba0f28b2 glibc-langpack-af-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 807359fa203339d124bd0ce60be9ff48a977111aa602982872f73e69e44c2ed1 glibc-langpack-agr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ea9898149be13c898eecf2fe2ccd66341be8bee4aed5719ef13ca823537fa831 glibc-langpack-ak-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c249abb2a66a6dbf50f63c372c0262afb01f976d4a6aefb6d5808da35dff438c glibc-langpack-am-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 142ba3aba1a34032f3c565fd3c5f2faafc9a0a169e05bfe74c6b9c95cb4b5bca glibc-langpack-an-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 26f56c08d5bcd1a363dc0998707c53fb700c0dd1476018c273fcd8c354963c84 glibc-langpack-anp-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d3b580bdd960de04f8600d205269487cf1e88537a011f30ddbeb54a238f8d914 glibc-langpack-ar-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f289cc32226c16e91afadd3e932b57f7df95e1e709d65b41ceed0924a7744a9d glibc-langpack-as-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm af23e2576f8ab9b91c15dcaa338a5291da569a32347da4fd17e2a6c58295f812 glibc-langpack-ast-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 685c39f012961754b4e8c847738e1bd7bf0045122cecf9f0d93f10a5024fbadb glibc-langpack-ayc-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm b0ba6b80d286e14e8c27fd7d0fd0aa7453b0ae1c7cad17c17103ef9a65703371 glibc-langpack-az-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d303362156267c439a464eb0832721d5e3447a96061ce6468e5feba7e3b05d1c glibc-langpack-be-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm a258b530d1c1d5a95ad8a09f1099c9984406b01671ff653e6af5b3a1780b31ba glibc-langpack-bem-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 9c88fd50f535e334d9bb32d6c9982081f05632229acd93503a11bc82faeeedc9 glibc-langpack-ber-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 60101decce56e055d5a72680225f85d5146a77d5169137ec6f0f9f699c6404c8 glibc-langpack-bg-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f62bb6ece9b1718d24d18a1d0452150420b13cb314e69f2d84483989504d0db8 glibc-langpack-bhb-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm b6463f3df9ac4f80c3512b722d187827b1fb757d4b470930e7d669116e8fae22 glibc-langpack-bho-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2815b6014560e5fa2dbd1793c507a8d95f8a70f7b796f387986dc760addd3644 glibc-langpack-bi-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm bb260cabf6d24eb79e796cda2dc604a70230ef6432c2d72e0a23c7d0ccd47f32 glibc-langpack-bn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 49500c58ee70df45f645b3805740f0b357bed3a94275547d144b30f2b08f3273 glibc-langpack-bo-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2f3c0b1fe4b2a4960542f17a5b46ae7fcc754f4b5c09910e26bd07bad62e402c glibc-langpack-br-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 7843d6dc35f193bd559db3d25096300ac7e50e481c08574e03c449e5835245e6 glibc-langpack-brx-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6ab201f530bbaa17b7d15838eb236c0459bc33b440af2ce94a5f93d455d264c5 glibc-langpack-bs-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d0478abf546794357bf185406112f7269766ea635e861cedcfa7b6a2edf8c001 glibc-langpack-byn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm fd61580772af39f5c034b0fdc7d9b2931d41b09715a04f8388ffa8215a482ecf glibc-langpack-ca-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8924d9774967ea195fbc9e3acebf9cabd0fa1d16b8dac5292d5e97d4921b04a1 glibc-langpack-ce-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4af955f28f0af5a66d74c67c7770ea4ec3f4963045f6971b1147858480a1d8e2 glibc-langpack-chr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 734ecdd732c421084386ea67b77de5462fb8131f21237619ac19eaff57b10fb2 glibc-langpack-ckb-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2da164af8ff48770a3a8941a8506ab807604722629f6b43c62c6652e6c5832eb glibc-langpack-cmn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2bcaf23fdfb80aa46c9650039c7175facf81b3ad49902330836c2a2b07a6709e glibc-langpack-crh-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8c33ec52dd46fce4ec206aecc12ab36f19621e45bd69d53763d45fd572877fa4 glibc-langpack-cs-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm deef207fd884e59a51d7b09d9eec6a1606362c9d4c552e33d4fdc189e9714450 glibc-langpack-csb-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 012a353504d822f74ab582b0ecf4d7d9a506c126255451c8b652455d68e4f4f7 glibc-langpack-cv-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm cdac8dc9bb647c07932805a84a45cc9b4f8c8d7bef24b95f676ddc5376628d70 glibc-langpack-cy-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 10994dd2b430b0b0f2578e6a3c608b45980a2c1d4e67c86bb1420b4f60962451 glibc-langpack-da-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c2a45368421bd6d617a5fa1013ee9c2b6e01771111c9ef9ce4b2225a32abbe89 glibc-langpack-de-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c0a8d135907e52bc9bd5074d639db66cd53fe6ceb6c24204c3964225ca61fcd1 glibc-langpack-doi-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f41f2e1889066b1306f20ed9448af1016795e14b14b5fcff4fb2d72991adc191 glibc-langpack-dsb-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 1bca7e8b5fdba7b1938ffb13dd0e2758fb064cacad97562d01f7adedc9342646 glibc-langpack-dv-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4163c109f8d940772003caaea208312440a1cf3be7ecd9fe5c294e16d6ea314d glibc-langpack-dz-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 28b0a0cce2c9b00145edf172703d3523b82f0fe6bfea1407e08d31275920ca72 glibc-langpack-el-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 7eb12ab0e5d84a91d8d4547e78d3ff01c1c4d1363939dadaaebef91afe3d6d9b glibc-langpack-en-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 58d87d463553398f505219aad62357ef0b3bff4bd63db43daef0621407db19d8 glibc-langpack-eo-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm b2b6aac92ce0c32a0f846882e535c7353f2311e72735d84e784e3637e2600dd3 glibc-langpack-es-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 3d2a1218565a7de0da1d9630fdf2997c8c205e8bc4afce172f50028d10ab482b glibc-langpack-et-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 22f1fbb6fe871ef40f039a4f4b3a15c6b84086451773b62bc30e00340a21809c glibc-langpack-eu-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 14fadd9c73240b3a35f47c1ad081ea5f1a282c1f5fc8adf15a6ce7df17b7313f glibc-langpack-fa-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 5659c7c8c12a65162cde4f936159ea75e407d6c467d03737d2e8a8fee83f5d56 glibc-langpack-ff-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f592a20bb89822b314bde54230168017521685b63c304cd5b02e4cd50f739713 glibc-langpack-fi-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 49019181b8c4e9aff092344a3d08f2822a87c0249f4a963c5a1099cd327513cc glibc-langpack-fil-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6b3af1a3aa60321131fd9bc71065cdf2158f9fc7899110cb93e17be8a9d4574d glibc-langpack-fo-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm cfd66d4cfacdf95411476670fd8c41939a17f5816eefb88352b6afce947bb231 glibc-langpack-fr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2965ad4a5ec70ddeb4b2e154f8c4681e6bea3ee63055ec0f6bef04f84f3d5083 glibc-langpack-fur-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c2ce703374f3631adccf3a3f1e4315fdd331b7e936c83d29628fd93a6f9798a9 glibc-langpack-fy-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d89d87bb495813b66059efcbed3cc614d32327d87a06733d34a6bc4b8d00d6a0 glibc-langpack-ga-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c9ada950156980565175538ea2197ba1238dbc3ac1aebfc965684c46653dd25c glibc-langpack-gd-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 194b13f829777980033fcb1399e223a41376cb0fccb8f2430aa71474728350ad glibc-langpack-gez-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 378c6e26f0330de092fa4f922c300c2923b36935b4ed9e9fa89e40e33011fd79 glibc-langpack-gl-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm a1265a06b952cb339714f7d0cc590e1ef05f517a25f9595d30d1cfd61fd44b15 glibc-langpack-gu-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm dfa11c3655d8cf14e0a774b5e26517f0bb5e5a82896eeef64e20f71068514a57 glibc-langpack-gv-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 0b7ebf7e28735e53a4b896899a2f1c99f59581092e6b103354d956e4db56859b glibc-langpack-ha-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm fd0f53e917e1136de19c0f0847d1857c27c21a720e8e051f640f7e04fa20a493 glibc-langpack-hak-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e14854875365462cf7cc5cefab755743963f134b59c81fcbd6ddc1c0fa004e74 glibc-langpack-he-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f30e6cf9ca4249d16f2d756cd345168f8e6fc73eda884bf7f76af1f76bd2b4fb glibc-langpack-hi-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 7317fbf86d0f790a3fda208bec941fdfd386b112e01022e015fa9fc0c1ffef2a glibc-langpack-hif-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 267d6a1d058f8576ef5a626ee07c2645f1b0f123c39bde2470b9002a40f52e9c glibc-langpack-hne-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 5c7c501b6125e9d0aba37444dfe69b0a8c771b347777c68295b3607662dd7baf glibc-langpack-hr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 38fd1a996474a4500d53a4c8d83716cd9720ec55b4fba0eb12582d0e88407d0b glibc-langpack-hsb-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f143a445e63dd3bb403646103b5e6b0461b283c4f803740c67e24a66a8d93053 glibc-langpack-ht-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 0236788f5ce4f1c58a64853369bed0218a4660ebe07c825ab5c5ea7094e82322 glibc-langpack-hu-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 1758cfaad4b3554186e165752b3707b0e552b640eef1aa5963a8ac02ef8da4bc glibc-langpack-hy-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4eb69372d77f34554acba362f0fdf4f8c4cccaf550b7d7db3ebd443196ee14df glibc-langpack-ia-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 624cdd3e789dd47d35df20972509b097a100429e9d9c3d551b7f97ac60c42d07 glibc-langpack-id-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e142c88d4b3ebc10b3b9598f3b14515a5abce22e59ca3f14ff3c1dda7e254393 glibc-langpack-ig-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ab5eedfd24a8b50287a0f9bbc56d61bbd0340038fc091ec4f1f1c540f466361d glibc-langpack-ik-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c61ce843f2ff24ea97f2de76953a50249c7e42b2940b42aea6c27b69270a0020 glibc-langpack-is-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f25b00e00cc51101eff6cdf9311e1ca62d777d697c54efbdda5ef57fc60dbaf5 glibc-langpack-it-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4bc8a2fde7d78e3cf58059476a966f96020bf0cc172417e30b094f8e69ff43d3 glibc-langpack-iu-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 63663fdff469ad4fba24b4eb38049418644e5d71a0d49f075871514e584341f8 glibc-langpack-ja-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c3db03a5a5f85c093f7b3821c9f96fdf016865f86192558d299bcb592a8b2d4c glibc-langpack-ka-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 48a2ee9f0fd7e75e63ddcbb5e3582c587fbbd467a075740d92287659f3a9f247 glibc-langpack-kab-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d3a415706ea68ac531edaf5f304dda0d167ad53ca67dd90df83b23187b67e0ed glibc-langpack-kk-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6a876f75967870a3de608413ada6df94366da095442c96b285c1316fb878af9f glibc-langpack-kl-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 48683a91ac1d7a4bab874d907c8400b9c88739283d203a1243e3872bf33bc40e glibc-langpack-km-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8b099febbc661d5b67f6d22e35b50313ee9a00e390375468c3ccbd3de4d81cb6 glibc-langpack-kn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 337556ae3da134208d9c34a319d1c24930baf7d28f017d964f084300062ace3f glibc-langpack-ko-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8647112ddfc095b4875d23a8c870e693f841bafa0b9e241913cdb35537047eaf glibc-langpack-kok-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 41d90ec371773098a08964568ee0a855258b3fbf1e52475c13022ec8473d2c08 glibc-langpack-ks-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e79d85822cf7f45a7f34b97b08880ec1a3ee933eefb016c34ffb51ff213652fc glibc-langpack-ku-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4f268acff79fd6e4a64f5558e910b88ade6f792b3e377eb678871b3c7894d18e glibc-langpack-kw-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm b400dff1887f67b0e313f5289dd34c19f56255cf90fe23869a1581c68676bc8d glibc-langpack-ky-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 0d93beea880abef58302f13fed99a922c39c95b71c4c7b6da81afdfe066551c7 glibc-langpack-lb-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 3136357e8735642defe85c185f3ab8e363de5a492b1fc32d52ab4248c2b381e0 glibc-langpack-lg-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f04c4808f9d567e9d2bd08482e7f24b542044828c1f6dbd1ade25f36fbe8f7a3 glibc-langpack-li-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 29dfa4ade34caeec512222bc71411cc0275ac77903bfae8259419da8f4f38436 glibc-langpack-lij-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 89f537d015b9dbfa2544ab86469dfb3f4a6e766ea871270bf189b8a8e0e6fe5e glibc-langpack-ln-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm fe8a7c53f6220ea9502fb0921a3a52e410addd5fe391c9be3cba0cbb69adc1bb glibc-langpack-lo-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 5dd8d309d7d81d1632895e02e5c0a1e778b89632ce9a5f2fa372dad7a355e5c8 glibc-langpack-lt-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 49c73b9098f9448d3ae37280b7877190270980896dc71e9a2ddd5169f30d0b24 glibc-langpack-lv-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 53b1ac2bc852b2758e3a3c38e8c3ebd5bee816020583f6fc6d03ff153d21bb75 glibc-langpack-lzh-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e68322c464e2971be9e0e027141e46dcfd072bc35e4c393fa6d952724a74cf17 glibc-langpack-mag-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e6e29d30722d57e845f9cd44f4240d6b661036eb69c9d36b0cf998f7e80c4f7a glibc-langpack-mai-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm b827dc088b83f52a82709e6a1d90655dd585098b7acde2e8ae66912286ba8758 glibc-langpack-mfe-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 38d53b8decd974a33396497f784f594ff5a7da90377bbdb56dbdee74223709c6 glibc-langpack-mg-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d0a3704c776b6fb67f0972b864ca4fdeb0e9f435d44c2eddb893daae181caf3c glibc-langpack-mhr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 7ed2552caa8d112a9ed97ad5180c9ea6b26e7d2738da0fbbb456d33a7ffda6b6 glibc-langpack-mi-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm a2b5ca67183d7048e8597d430d03d417711db26220e447ccc2b430438dc518f0 glibc-langpack-miq-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 95142186a04b36ab60ca8402a4cca20fc714116b9bfe6652de7d0a31ea9195c6 glibc-langpack-mjw-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm bf0edca2845a9ab82b422973117d9198c4f5d3c15e0e12a6daf34bc145d198f2 glibc-langpack-mk-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 351d0c44d72b05b402b8789f3be4960bfa68989a54a91df212a76c8bc33751be glibc-langpack-ml-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 0a10121b0898f3706098048e804c95565e0f9a3bf58af17bec3e4e3c5c413ccd glibc-langpack-mn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6e6c118a4c427814f4bbb5df2366bb6616a46e40dbc154180dc3a439ead1f535 glibc-langpack-mni-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ca5014bff66d4ae0e62442405808e66d2bba7e2fd708113a6ea13a0ff4a26ce0 glibc-langpack-mnw-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d2508ddc93a6d4aefb2420546972c275fd1a9dd8619610b772947423e9edca1d glibc-langpack-mr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 9491289bff7c40d7504b7ecd7881f5005479073972e0e7ff507366168ed5c6bc glibc-langpack-ms-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm cfee7d9287c1f222fb9ed5036e0898da7b4be28fd5014380787ba741efa486a2 glibc-langpack-mt-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2342c947dac8526c1b990b12f8c8c61d19cec52f2b554797e5391db81e985c79 glibc-langpack-my-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 29fa6a49c9c6dc30df64bae65f666553ef3d04535ea3c05bc0df09d309dd4aa5 glibc-langpack-nan-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 92dd37d7c7872d129a1d9dc04a9dff650edb08a53b44eff623a6b9a3b0db82a3 glibc-langpack-nb-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c27a46a8015b749852464d4969a58dcc04d9ff47a62677627ae2002472177f98 glibc-langpack-nds-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ce33089b2eef7d61f03d46cfbbabff19da6600a7a039bdf75d2f4dc0905ed470 glibc-langpack-ne-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ea1382f8368adeb030a05f939fefe5ece3796f749c0ae765e3bd912945f094c8 glibc-langpack-nhn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 51828e78502928b3440f2efb83d64cd195d3b3ab8f3d2ed7d85dae2e8f0c2f11 glibc-langpack-niu-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm bc2b501fb76a74b96d70d7ebcd10cdb8de3f75d582106243477e3210b76a6d9b glibc-langpack-nl-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 3d6a0b331a08a7d9f4bfc64a0e800b8dc30ec92fc17c5943278ef15089694dff glibc-langpack-nn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2069677c01a68411946b5bac09e4c7be7af2fa46cdc409502be2892912b4fc54 glibc-langpack-nr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm b972bd08808bfc9b7c6d9229ed13627d93957ed11c56f8473efe7bd0db0a350d glibc-langpack-nso-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e5c06eef58c54e9ab1aafdd6053892e19d2c8781135c1a1f6f12592f1e684249 glibc-langpack-oc-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 592355eb188d2f6708b2395ac8afb1c624d2585ed647643bd59895a9a1cc005d glibc-langpack-om-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm a3c376cb0417335675415b2ef5657cd31f4548e429a2ea6f57cc8b0558f47ba5 glibc-langpack-or-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e1e987c92b0de643e96f9048661578659fde188bf3edcd21d19066a7b8a8c1ce glibc-langpack-os-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2289cada336d11c95af83c0218c315af17d7ff7b6351c4a5e9584ac4cbd7cda0 glibc-langpack-pa-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 18471c6be736f3976c330f20c95d1ae8cbd13b6dccbec0340324106906ec6e64 glibc-langpack-pap-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8e07b265bbeaf47840b7dfb169a83447bd5a995a9c309877310f570e6165de67 glibc-langpack-pl-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm aa757a9539a8ab51c1c030e0d33e7f36a367de47afe72739272fc73098a1da70 glibc-langpack-ps-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4c270d073efcf01869c124e90e1bd6b2d98e6818ba43a5f1be6407fd557e19ba glibc-langpack-pt-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 28f227bfa02c204cc8e881c7acd9b1ec3c3b49e93c69507ec57e00aa8708ce3f glibc-langpack-quz-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 86ecf1912a94be9114227f5b5a793836aa5a0539a04950adc678ab1d25cd1bdc glibc-langpack-raj-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8ca241aef6af381a05dd621f6d85a4bfba1c6b175b07febce16003a8f8c8c4fc glibc-langpack-ro-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 04a18679cb75638c23acb31d6ac9984deabe10d3140164aac89a80137e00347d glibc-langpack-ru-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ae413802a5d09fef21417d504a1027330895b9bf27715bd122f96ef199bb9847 glibc-langpack-rw-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 87f9cabf19029ff01172a677f339f9a626f39e24e6fb275577c9d8fb4bbf2880 glibc-langpack-sa-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 7159409ed3d9a656aec164362eb5820b6fd574e879fa2b22ccf2be0821ef61b5 glibc-langpack-sah-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e4742eb904d750d48a92e4e0c786d07802dea12030d4726d7d8d0fbbdc6bcc17 glibc-langpack-sat-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 5b12f2dc759b19752b70121668fbbe6c92b24aff614c605771437f99b318cc0f glibc-langpack-sc-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 3da2e89c3b371cf0d6d42c9fd4c1eb0e6ec55452d73d670df10ac3e5151b7fa1 glibc-langpack-sd-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm df95d905656b856f16a9a9fb871394fb5c47de31ef262d9025ac77907ccb39b0 glibc-langpack-se-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 66faf8525157f9b6640de3eb31d2fb755f67d3058052d6ba45a929af03ee2f7b glibc-langpack-sgs-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d5bb482191827f0f570e6b989071cb066f0a694ed355017387fc28b6612a981a glibc-langpack-shn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2bf8dee18df24073ec2089088d78ceaa69c226e111b707588ef4d52442758b4b glibc-langpack-shs-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6ae88b6478ff52d075999f4a448d657509680a6deb5e506247ee2618bb8b0cf0 glibc-langpack-si-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 10d792a87b217590002a741270caa52fbae69279eaa2cb6279e5b7acb04c96e4 glibc-langpack-sid-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 101f4b096bc37084502658a5fc61c623887bc06758261fdbefcdfaa4c291bb3c glibc-langpack-sk-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4f59f4a462789a408322dc0bfc9f99a3a58c824b0b444742345f1f9aa0e4c974 glibc-langpack-sl-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6855ff13f94e0100faffe3210a95361eebae09e1b266118f07af70095b5c3545 glibc-langpack-sm-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 65c5979e82f6f3a0fef3dfd62f2c594adecbfa4382582db34fe91b540ad371d9 glibc-langpack-so-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e7b04c2e056b5bbfa9f8e6dae1b9349c9f7bb0042e4eae1a565c17f9e1b7c1f2 glibc-langpack-sq-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 730188d6038c31127e26fbbcc41d13ea2317b9894642bee28ed919dca4c3807f glibc-langpack-sr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e50da31f41d58ae6186365f164e3bbaad58fcee10b066897f9dc4e51b34eaec8 glibc-langpack-ss-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 009bfcab0c1a50f745fd995e32d51811e5ea4f593f5d38e13241b3914e82603c glibc-langpack-st-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ad820ef0e11ba019cabce302c457d3f9c981d84c6627930f92a277cff8c446d4 glibc-langpack-sv-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm bc7ab8962d1e2f77ed2a6a07dd17237ad12a06119cc478b2ab7abd63aa090b11 glibc-langpack-sw-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 69cbfd4499fa82dc3153d549584ee97faf636d8d28cf96a160c9933085ca36ae glibc-langpack-szl-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 820dd459eba7ac28584fba4c1a83aa4cbc49bf926a4996c271640bf76e9e8055 glibc-langpack-ta-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm c9ac7897df2f42d31a749fddde32ff492399049162b744546c7d1ecae5d812ac glibc-langpack-tcy-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e2c07cb1f6c12b94e62e85d26a40b105bcdf8c3fee426f0221de72cf4fa64f8f glibc-langpack-te-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm b355d5470c4fcd6fa654c3c370ba03a08a54eaf28fddabf61d628c129e1b1e2a glibc-langpack-tg-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 798aaad5dd091589eee5a4b96d689fd5f3696ebc73f66b53dbc8f927766af7f6 glibc-langpack-th-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 15cd7263c6230b08c7b032f57fe8f6b6ef4769e61a87f10500a7553f5d5458ca glibc-langpack-the-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8e44104bcf651fe8a0b88d0552f3e3cca251e7b5523d64960d31a4a3095b0871 glibc-langpack-ti-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 3cd873ba99e61716c989ce461944fc6730ff54c8457f864b8ef79e85ef9a3d8e glibc-langpack-tig-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 32eb16996f7beac45a59339ace4db5953f79426240ebe92e143fb5c8fe94ee72 glibc-langpack-tk-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm b7012ce162b6e103416b01b89fdf344e915b667cdd8a985a3b9ff5a541d1673f glibc-langpack-tl-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6e6069c4d655af171de7792fc0384b237834269b671a1c7bf7fdf4d49ce23ae2 glibc-langpack-tn-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm a818ebe7d27901bac83297e43957020dea40d28f95e3c21b14fc223599ee1584 glibc-langpack-to-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8c92e31a483ca34e5c4a4e7d79d9af2a89c0aa8a308fc159f61e5ee023f82cc2 glibc-langpack-tpi-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 07d8a65064e1ccd88d699bc94b0e5b863e62382439b5c920a8eadad3ccfdfec0 glibc-langpack-tr-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm d377f0cac3697809190de0b1f68574460afd5617a07b4f9f86edfd36fef86c88 glibc-langpack-ts-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 78d5ee9335a30719c0322840948907b813ec2e6e5c128111ca5908113d1361aa glibc-langpack-tt-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm afc171002bc33379e095bec2ad40cf33e958fcbb777dcc38f292721c0c8926b9 glibc-langpack-ug-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm dc1ca5ac5cb0b80858f196750b334aa70de5d6291644329af6e1371372699c33 glibc-langpack-uk-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm ab7913a0353d770e641ca514d3a4a47118f2440cecabb49f691356e01d2097b5 glibc-langpack-unm-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e5e2f8b01f09fa8c234883249940817674bc15da86a07cc0f7e453882267f524 glibc-langpack-ur-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 7ae5841d9042f608a552c5bd120e2709957c9ea1851e292ca9454492b478c308 glibc-langpack-uz-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6eb6b112e082eb72f1b47147f7341c95259bc96f6cfba2f6a673401bac87c27d glibc-langpack-ve-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 877473c5f9ac545f825ad017e7a72ed19bcfff179e5bf384c4739d7286627efb glibc-langpack-vi-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 30c9a1b41ad5463bc04859f252c97864d0763f4747e4f21744c06813c6df59f0 glibc-langpack-wa-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 6b55a2717319eba8ef57135fa24241c7a56c0874b42ad8f1842f69f66a48eff7 glibc-langpack-wae-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 5c2bec775dd854b8711e091b234967f639193ddd68f63fb224f1b7ea2bc4a94b glibc-langpack-wal-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 28c5693570777879b174c0d07332de12f86bb30aa0d636d179b795acf995b99e glibc-langpack-wo-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm e3c6aae1b4ad32491b33decc7a139faf5320fe6edbcd145e82ea9de149579053 glibc-langpack-xh-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f4eda24c5514f4a2acfda80acd82c4f97dc3c09f98cbaa49f01ca6657e7ad04f glibc-langpack-yi-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8bd1ac4999ec81243b5f49a329570de77a014d343cdace2e9f9390e4574c316b glibc-langpack-yo-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2a1962ae94800f78421a483df9b728e2065fdbfefedc3f6c5c78e54c5fcc93ea glibc-langpack-yue-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm cb91305b1b0d5c3cf58d2477a456ade485e82b750adb3e3d378082ede6fc4567 glibc-langpack-yuw-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 17b4491139a3071f990bdf0bf8969922b0d45f034d5ed61375ec94241693c170 glibc-langpack-zh-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 12cbb01e4c4919079ccfaf6eb5886461dee572ec614c2c9f9ddb891632dbe348 glibc-langpack-zu-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 28eae8958dec09b0c80e740e7afc43a849111891641e8de22c64ac7a03099f1f glibc-locale-source-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 7fcd0e8c0a82898a41c927b1df8985ffd984debc9b155af6f389b5ef5eb45975 glibc-minimal-langpack-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 0d3e16fd36fa9e803df4fc852340f20b160b385602c0fbd097026a2e6474f505 glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els4.i686.rpm 68fc81a2c90e30e517a13bf978a69e62e91b11c99ee8e77611f1599af67f098a glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm f3b282d84d59429e8fb6bc7b6f85e1ebd97f27ed0f17b1f4a6aebcf6952e77ba glibc-static-2.34-60.el9_2.7.tuxcare.els4.i686.rpm 266bbea027c9e6f5f9bdbacee44df91ea7f15a1ad91e21dd885b223cd1abf93a glibc-static-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 2698e128067e626da07b617753327ffb447cf77a88ae973de41bbcbade587400 glibc-utils-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 05c50da68d4140b37c288900cc2b84e56d78e513c1191dfcb8cd29ec90886667 libnsl-2.34-60.el9_2.7.tuxcare.els4.i686.rpm 5b0da5a0eb9b9a76c3b7fd3eee0e6d27366dd321c7e961285ff09976872c6b19 libnsl-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 82d547ce03c6e3fa5cc9708b3fbb502a5820cb2a29351495f057b7f16fa9c396 nscd-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm a188668508f2e4d1fea7606663a0f539e5a28cf3fcd113ec1a97fdb82c8e1a16 nss_db-2.34-60.el9_2.7.tuxcare.els4.i686.rpm c0f935f50318c0b130485122941d0f18639caf54a6c51ac5dfcabc58313baabd nss_db-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 8e43c89c4cff85872767113877f2e5082e23776d248c7b78e01f688934a9f2a5 nss_hesiod-2.34-60.el9_2.7.tuxcare.els4.i686.rpm e524436dde7c9687a938bc8f1dd79acab94ae4bd894f71ba83062904f372f583 nss_hesiod-2.34-60.el9_2.7.tuxcare.els4.x86_64.rpm 4dc4f76099e090a33ffe64c1487f81171c6144a39a500e7c3419494c69768cf0 sysroot-aarch64-el9-glibc-2.34-60.el9_2.7.tuxcare.els4.noarch.rpm 8b52f6abbfb3041068be25ae114f1bc6cab978627d0053148bcbfeb1e710c5dc sysroot-i386-el9-glibc-2.34-60.el9_2.7.tuxcare.els4.noarch.rpm d0b811a052289b696524c2a29a07fd300a46d4109cc9c17d3217eacac719b3ff sysroot-x86_64-el9-glibc-2.34-60.el9_2.7.tuxcare.els4.noarch.rpm 2a656aafa6b35f3815572588e02750a3be14c11cd17f93d26d0ccfff268e0300 CLSA-2025:1756931716 TuxCare License Agreement 0 - CVE-2025-4674: disallow multiple VCS metadata dirs in one module to prevent VCS injection attacks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4674: disallow multiple VCS metadata dirs in one module to prevent VCS injection attacks

0 tuxcare-almalinux9.2-esu go-toolset-1.22.5-1.el9_2.tuxcare.els6.x86_64.rpm d252103966ed0b91a841f8d81cf3f0889287b43f659374a1df542dea11bb022b golang-1.22.5-1.el9_2.tuxcare.els6.x86_64.rpm 4a1ba8eab7a68f00fd2ac95a7df3159eb0a25e57eb904c17d96ddaffb8474198 golang-bin-1.22.5-1.el9_2.tuxcare.els6.x86_64.rpm de25d7dddeae744e4143091a4447a8626d435a982fd50803d1db52b43c9e6d10 golang-docs-1.22.5-1.el9_2.tuxcare.els6.noarch.rpm 299e33b80948f65187572c5241b8063077d895025a80e225a4d095584fe10318 golang-misc-1.22.5-1.el9_2.tuxcare.els6.noarch.rpm 264f2b6448e1f58314491ac404cfb72a636de48472521e3f8c0b60f00dac6834 golang-src-1.22.5-1.el9_2.tuxcare.els6.noarch.rpm 5e7c09cad2db5fd70223f4152e468268c7cce8ad3c76dd24e576b10e7ecd0f5f golang-tests-1.22.5-1.el9_2.tuxcare.els6.noarch.rpm 8e0cd0ac08f89d74d9a9aecd50d1fc032f7bbc51312919f94cac0bff78c086c0 CLSA-2025:1756932191 TuxCare License Agreement 0 - CVE-2024-9407: validate input for bind-propagation option in Dockerfile RUN --mount instruction to prevent arbitrary parameter passing and potential file modification Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9407: validate input for bind-propagation option in Dockerfile RUN --mount instruction to prevent arbitrary parameter passing and potential file modification

0 tuxcare-almalinux9.2-esu buildah-1.35.4-1.el9_2.tuxcare.els3.x86_64.rpm 50bd2c38f4631a0bc993dedf4bd08ed91807565ebce6c83a23ef9b545ed2e54f buildah-tests-1.35.4-1.el9_2.tuxcare.els3.x86_64.rpm a34e806664448b237dcea7a3cdff903124d15c31d90ec2b9c38d9a355927a327 CLSA-2025:1756932817 TuxCare License Agreement 0 - CVE-2024-22020: forbid data URLs in network imports to mitigate security flaw allowing bypass of network import restrictions Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-22020: forbid data URLs in network imports to mitigate security flaw allowing bypass of network import restrictions

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm 2f993483c08114246d52743fd35ac82190121f75eb53bdb91df8a92dd2cffa06 nodejs-devel-16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm fb1d0aaa9a4aae1d29677dda8b942d0e738efd1965b293873ad48ed6d7b91d6d nodejs-docs-16.20.2-3.el9_2.tuxcare.els5.noarch.rpm dad918a294d60c594831563578369ce3227fbc2647c89fbb8c087e3457c881c4 nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm 0040b958be5a0506b0938090a7ae99b22663f5e0fb4320bb9c56473500c13883 nodejs-libs-16.20.2-3.el9_2.tuxcare.els5.i686.rpm 839d799b45e2cb247fd1c6845073130e9bcede63e9115849106e1dc83a82e130 nodejs-libs-16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm f6697ee5a4604e3eff02ebc24d7b81ffc167e375103e57f9d01e4fbb3f073039 npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm f69b82a01b66c01bf5263b867cdff8aa55c7846f73312dca6a86b5b6b4dd514d v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els5.x86_64.rpm 1ff61b3a3aec1b6519f39cd911ce5c39c3bde5abb5e9d62a1f96d95c62f6c58e CLSA-2025:1756961235 TuxCare License Agreement 0 - CVE-2023-5388: fix timing attack against RSA decryption (in TLS) r=jschanck Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5388: fix timing attack against RSA decryption (in TLS) r=jschanck

0 tuxcare-almalinux9.2-esu nspr-4.35.0-3.el9_2.tuxcare.els6.i686.rpm 4a77c36d9111d0457ced3ad5d425616d21c5b8a987b75197624b332bef99efd5 nspr-4.35.0-3.el9_2.tuxcare.els6.x86_64.rpm 1bce82cb3c64f07c498a63ad9f8f3c4513a3f48535568fbaa5bee538a13a6d67 nspr-devel-4.35.0-3.el9_2.tuxcare.els6.i686.rpm 5791aa2c0ce87feace7992bdf83f46addf85cdfbe0557496729af88b3ac0835a nspr-devel-4.35.0-3.el9_2.tuxcare.els6.x86_64.rpm 5186f39a53d726fdf93ed40c952fcc4bbfa210b635c826092a5cc2aba2cfc0d1 nss-3.90.0-3.el9_2.tuxcare.els7.i686.rpm 9278a45711571a7d70226abaa9a5e40ac2f407240851c132fd6c507975b7ca64 nss-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm b0b79162ac6ad0542f73f559624a73544d50dd085f677db68b801b9be2e45f10 nss-devel-3.90.0-3.el9_2.tuxcare.els7.i686.rpm 1d51cbc0196203bf23d66ab101d0636cb240359f3269c96848bbaa1b21eaad7f nss-devel-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm e24da44399dbb877fd80e28e32da4f504833f254bace43dbcaab8326c4ef6edc nss-pkcs11-devel-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm 0a6c13854f195ad893046b1534235119049ca4d6c1386c9fd2b1c17a5bab6a06 nss-softokn-3.90.0-3.el9_2.tuxcare.els7.i686.rpm 3488c9cd79c0e4e4c01aebf015e5c8aaf5eb99ffd8bb57821a6a52de97a7f5c2 nss-softokn-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm 24b54c5871959abc8ff994d8f61da1bcdfb96c64baadc66a357434c09bae372f nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els7.i686.rpm ac9c861b93ef1323b71040633e3bfc305fa9d3c75bb820f1afeaa6a8e632b960 nss-softokn-devel-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm 359369c9c16e6b1430d10805711058bfaa7964b33f3ccfa40b1c95c4c5df6c09 nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els7.i686.rpm e32b7c562438fa9111c551bf10ceff24f1fe8f088ca1b1e6e8236ee3bb5cbaee nss-softokn-freebl-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm d60ffb78152e0a15eeb6fffb1ee5b1c957311cf6db0c218a5eca3c2cfffb2009 nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els7.i686.rpm ec2b7ca4b890ddc044a1eb7b645222f0a1b73180ba095db986aaab1dd767865b nss-softokn-freebl-devel-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm d5491c84457dfdc267ed7f2f1adc369fd48dfeff1b590ea701396b3899704bfc nss-sysinit-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm a635b6b566cfa09b66f7b2b7c4742872a4db895dfd5f6bfd661deafa854f546b nss-tools-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm 9b26dd4c7874cd7c15ec83d4da8d05225a41e841450aed3ffc4991b9f6818704 nss-util-3.90.0-3.el9_2.tuxcare.els7.i686.rpm 256b1a033ce51561d16832ca05cf98dc1b811517c5b5d1eea4b23846f792cb2c nss-util-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm ae8d6f60e14d3698cceb65c3a84a0c59fa6ebff5dc065773386583abcbf59492 nss-util-devel-3.90.0-3.el9_2.tuxcare.els7.i686.rpm 10845932aec6f0118684d52b336933752a0d91b20b70b8e92b0ea1db5b6b3d96 nss-util-devel-3.90.0-3.el9_2.tuxcare.els7.x86_64.rpm 36250e4665ab1da5dbb389c9bff2f5d539e1ff4cb6ac69ec8d4493dfec74112c CLSA-2025:1756929133 TuxCare License Agreement 0 - CVE-2025-27613: fix issue with file creation and truncation when running gitk without additional command arguments from untrusted repositories Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27613: fix issue with file creation and truncation when running gitk without additional command arguments from untrusted repositories

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els8.x86_64.rpm 84ac2e481da8fa0d7be7dc852d3ee7e6b80539501ce62ed7ae7fd1cefc38f1b7 git-all-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm 5577f081bb0dade980ea71890ceb80367754598e1b918f602446f8c4b1fb13d0 git-core-2.39.3-1.el9_2.tuxcare.els8.x86_64.rpm c6993f674951c2484be33a0d930cc16fe71a15cc8e467dfd461b84aef5fc31ac git-core-doc-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm 96a17fcc11af06d189823f5180bbcedfbe23a578db8a09baca4bbd933d27cc23 git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els8.x86_64.rpm 2fd23b5fc02f36d654d67a5c742e1632a07bba20767fef15cba7773a6deb7e65 git-daemon-2.39.3-1.el9_2.tuxcare.els8.x86_64.rpm 7240a23c1b85c3dc28bfdc39117fa404793452407f17988bf996e2db04e123a5 git-email-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm a57b9707c359abab1c563ede26d1fce49e3d306868f9e6acdaa55f67f9a92998 git-gui-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm cc587d275a5ea523b94db05f87f8dfda246a1f8d08c74f9b8dec1832ae571e9c git-instaweb-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm 4f7aeea2289aa069fd148b38d9a5fea12dc36476f1c0e8fa1e7fbe3acf6b1576 git-subtree-2.39.3-1.el9_2.tuxcare.els8.x86_64.rpm 1d37a8cc6b331020b0bde9b9aba34739527add4ba1bc71ab515ca40e65ce7c9d git-svn-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm 254bb502eb8209ca3587f9553a38015a6cd57e34d165fd30311e6841aa77833e gitk-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm 70e4f16aee7fdee801e952b0af6c554d2820431e8d56a65cafde2e48909d6b1d gitweb-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm c9d9760434d5c13f2af61ea1929869a9e209e3a7dde00eb4d5659afcb2883216 perl-Git-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm ef383cd3e19fc294353b48f5ca147ba078f3711dd5458f3013a9260f33432e3a perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els8.noarch.rpm 70dc9727e90ab64afff14193651b878c297200ddbbe7f817936e5f8b08cda3a1 CLSA-2025:1757011448 TuxCare License Agreement 0 - CVE-2025-48989: fix improper resource shutdown vulnerability to prevent reset attack Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-48989: fix improper resource shutdown vulnerability to prevent reset attack

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els14.noarch.rpm ee75e3d8a7cda9c02216091d68bfa38e3680ac4e6a5fbb97dd69cb656b108328 tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els14.noarch.rpm bffb8a35c562983ff803a6a795311f03ef9c86daa9584834099c22f477814104 tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els14.noarch.rpm c79be753869855608a9bc44655da8e6291d386fe5b9722b4a768c54b16490eb5 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els14.noarch.rpm a19349ce1d6c60fa37d49fd9efe37492c8bad2df68096659f6c7201d9aaa4a08 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els14.noarch.rpm 47da2b47d545612ab11d89aaf29d5be8edcd3b13f4ba0780fb85d0cbd5222ebd tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els14.noarch.rpm d54f9747fa854b8493150581220de26b28f3888733810a12e5f5ced1310d9741 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els14.noarch.rpm 4dc2b75dfda42476754c23d6d0b8537e62abfd38c86df2aed51557822f84935a tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els14.noarch.rpm f103e289744472b080eea9e9623de72a092da8b684ca7a0ad9818f6406979b04 CLSA-2025:1757017511 TuxCare License Agreement 0 - CVE-2024-7254: prevent stack overflow by limiting recursion depth when parsing nested Protocol Buffers data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-7254: prevent stack overflow by limiting recursion depth when parsing nested Protocol Buffers data

0 tuxcare-almalinux9.2-esu protobuf-3.14.0-13.el9.tuxcare.els1.i686.rpm c2801c81d809af63dbb3f6ada0cb8c6dc29678d030d2ab03f20799d3f6e29302 protobuf-3.14.0-13.el9.tuxcare.els1.x86_64.rpm 0f916dd5aaa9077d75e039e9668182472a85c08838c89f7bfd2e30d7f98224bc protobuf-compiler-3.14.0-13.el9.tuxcare.els1.i686.rpm dd41103b0878532716a735e72c58ebd2e02dbf85fe4088c132f3ef9e9d887303 protobuf-compiler-3.14.0-13.el9.tuxcare.els1.x86_64.rpm 0ec32d3299132135d312edcd10dad3eae04c1af388e158ffc2267824281c4aa9 protobuf-devel-3.14.0-13.el9.tuxcare.els1.i686.rpm c408631477c25b61d6be6b0b5bd543643fd8677278277bf905be32bb4e1a75e5 protobuf-devel-3.14.0-13.el9.tuxcare.els1.x86_64.rpm 7f5eabeaa0418910585a1ce6909bdef29707829162b3b2e570456a521508eb5a protobuf-emacs-3.14.0-13.el9.tuxcare.els1.noarch.rpm 33dbf9d0a6682bf0a00ee0cea26688950665094c15bc1b1e353ec01806dd17b0 protobuf-lite-3.14.0-13.el9.tuxcare.els1.i686.rpm ee9113824a8e60fe7f540495cb89aae20c31a5041c048564b9d638931acc50fd protobuf-lite-3.14.0-13.el9.tuxcare.els1.x86_64.rpm fc226f91c33ffe9ed6f30235e5bb9399edb3edd712dff9508cda345b68894717 protobuf-lite-devel-3.14.0-13.el9.tuxcare.els1.i686.rpm 95f576b3650a0d9cd3987d904c7aa0b4ee3761d28fd813eecd3e3080d47c9455 protobuf-lite-devel-3.14.0-13.el9.tuxcare.els1.x86_64.rpm 82afb748399055601ba02f200c12376929fe85e443a90a2a2f6fb4811b350115 protobuf-lite-static-3.14.0-13.el9.tuxcare.els1.x86_64.rpm 579197c1bf52b84fab6edc56d6df203b531379e7ff7131062c43cdc070408782 protobuf-static-3.14.0-13.el9.tuxcare.els1.x86_64.rpm 6f7b8b941cf6ecffc5d13489212b4efa5063fdc7a30685f32abc56c65f794ebf protobuf-vim-3.14.0-13.el9.tuxcare.els1.noarch.rpm 3607cc9ceae2a43a6ff380fd9f606726bb655126a32d00967abf630e050feda6 python3-protobuf-3.14.0-13.el9.tuxcare.els1.noarch.rpm 70c6aba4f8e3331fbe4adde98b4516671bb2d8faaa868acde8209df5ea121b39 CLSA-2025:1757427057 TuxCare License Agreement 0 - CVE-2022-23552: sanitize SVG inputs in GeoMap by adding a dompurify preprocessor step, preventing stored XSS where malicious SVG could execute arbitrary JavaScript Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-23552: sanitize SVG inputs in GeoMap by adding a dompurify preprocessor step, preventing stored XSS where malicious SVG could execute arbitrary JavaScript

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els9.x86_64.rpm 9a2ab6bd1ddfab6b7808d14bbbd29ccb79ef3aad090e9719916624265bc400fa CLSA-2025:1757500267 TuxCare License Agreement 0 - CVE-2025-8194: fix tarfile deadlock/infinite loop by rejecting negative member offsets Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8194: fix tarfile deadlock/infinite loop by rejecting negative member offsets

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els14.noarch.rpm bead8a75b2382e27ea056c1eeab1609163a8f4fba2c9479d713ef23cbab0b800 python3-3.9.16-1.el9_2.2.tuxcare.els14.i686.rpm 4db6e8987a0e431e44c1fa80e6fe4aff604d58ab0745c20f70301ad095c5ae65 python3-3.9.16-1.el9_2.2.tuxcare.els14.x86_64.rpm 1a4a7bdf14e69c91c87415cb54cbc57b299fafc9059b42a237a21fce9d828d17 python3-debug-3.9.16-1.el9_2.2.tuxcare.els14.i686.rpm b08cccf3cdf37578ddc0f749ad6084fbf777819147dcb37b982a19a77a600118 python3-debug-3.9.16-1.el9_2.2.tuxcare.els14.x86_64.rpm 48cf4d4976f13725c88d728df01e13417cef4d46243b4e5af85d5f5719f06b2b python3-devel-3.9.16-1.el9_2.2.tuxcare.els14.i686.rpm 4cb8e7c6ac67009cd5c6bda15954fb80db6d3652c586c60a91feb1f528724340 python3-devel-3.9.16-1.el9_2.2.tuxcare.els14.x86_64.rpm 2c1c299af43174eb9f70dceb967977c8ce2870dff1d13658d75be3226124b4ba python3-idle-3.9.16-1.el9_2.2.tuxcare.els14.i686.rpm ae2953166526b68931d652f4a4459d88bc023f32bc042e20f3a1e51ce2d62fbb python3-idle-3.9.16-1.el9_2.2.tuxcare.els14.x86_64.rpm d995bbb077b87edfa1327a1d1e91945ce12af88aa658a4c2ce1ae9cef3792dc1 python3-libs-3.9.16-1.el9_2.2.tuxcare.els14.i686.rpm 1c9f33eb0e63817a3da83da6ac79216db76f9f9ce5ebb0493e901b66ee8c90d5 python3-libs-3.9.16-1.el9_2.2.tuxcare.els14.x86_64.rpm 89b4ede0e5e503434359796f0250381f6a3f8d19d8d24b21e63e6507ca69a257 python3-test-3.9.16-1.el9_2.2.tuxcare.els14.i686.rpm 65c95575dec2758c9e16ab4f18840aaed00ab1cff1890aedd9cee52d276dff10 python3-test-3.9.16-1.el9_2.2.tuxcare.els14.x86_64.rpm 51e4fa02593c514d480359a74c20d29aed4e4428ce3089b581ab02244ade2cfe python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els14.i686.rpm 9c50c280b083c18e0ba1bc9d112da7893105525278e6262fc3e01685731b6173 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els14.x86_64.rpm 0194afd42076db76c9d291bbb57624ed9ee3b31c7c6b7abfc51fbcce8bd02265 CLSA-2025:1757501175 TuxCare License Agreement 0 - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attacks in mod_ssl configurations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attacks in mod_ssl configurations

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm dd0db42ac5d252fa86b04d2bcfbe0cda3236b067d17b83203c89b22718e8c19b httpd-core-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm 055647ad083719a4adaa8f8e682d9d4e8272f66ffde47c136f7d690761a490f4 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm c6c6a436fa58f0c6005d9fddddd076fca9b323d7b0dbe2ae946364d707d58063 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els8.noarch.rpm b4c750afeef0313ce2bad04893407f9b2e1a56ef842f5082acdbe4df803ac672 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els8.noarch.rpm ac12b0772dc0cd354e93af7a2cd058419d47a0efec23b1c1969f5f0eff2b271a httpd-tools-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm 39957b0c57be5e18fe7b675838e74f825f257a03d4044d6b98dc2beb4353968b mod_ldap-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm 88f847498d235d77bf3907ff2a7ca92d760486dd9d877dcb966757003954578d mod_lua-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm 2c3da38bda227fef42e10175fc897b2178572790d49ef9c84674c9f2b4f05c54 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm c095cc6c730e826b59c1a83343c4c15cf454378c4a5a7329cc4dab2466272f04 mod_session-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm ac36f1ac539a5dec4fdd8c17d57adb1459b745284f99758d37c4a9ba9461b425 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els8.x86_64.rpm 20a5d34b0071c80bdbacee4819c2ea284b19031668e15f1f0b5d83b640e999ad CLSA-2025:1757608663 TuxCare License Agreement 0 - CVE-2024-12087: fix a path traversal issue in --inc-recursive mode that let a malicious server escape the destination directory Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12087: fix a path traversal issue in --inc-recursive mode that let a malicious server escape the destination directory

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9.tuxcare.els3.x86_64.rpm eab16cfb561b98125d50095ff5b76c9c65de1918313d98b2c6e647d22b01b39f rsync-daemon-3.2.3-19.el9.tuxcare.els3.noarch.rpm 2a7d0b04c707cd82b3ea69bb22fdd4723a1f7309f6c68cecc2457b8d14647165 CLSA-2025:1757609292 TuxCare License Agreement 0 - CVE-2024-22025: fix resource exhaustion DoS vulnerability in fetch() function Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-22025: fix resource exhaustion DoS vulnerability in fetch() function

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els9.x86_64.rpm b31dcbd0946f7438ff02d8fa1705623509b595a3254ec3a93b301dd5079985fd nodejs-devel-16.20.2-3.el9_2.tuxcare.els9.x86_64.rpm b13a7a89e7011c3cd8cdf5adcb087b8529acd24eaee1ed9b7e466dbeb2a44f2e nodejs-docs-16.20.2-3.el9_2.tuxcare.els9.noarch.rpm 737275bf8e6f880f94efb5f1b6ccc7da86d11c78a4a82f5ac1a5196876067d61 nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els9.x86_64.rpm b44c6b422bde293b1bdedb541a4b9644cd115c19d563543e83eae702b266dfcc nodejs-libs-16.20.2-3.el9_2.tuxcare.els9.i686.rpm a451ce0d321a4f63ce06051a2155869cb74c7da5de5d1b57b9ebf55f60078d50 nodejs-libs-16.20.2-3.el9_2.tuxcare.els9.x86_64.rpm 2671837cfefaae2198d8f3521d7c748644c628ebcd1903e99a1d37bfa25d94c3 npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els9.x86_64.rpm f09c7ffb7e1a831fecdaeeb67d21e9c0381e54a0d182066509d1e1df73d5fd70 v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els9.x86_64.rpm 9ada45852b2eef0b894f0717dbe9e9a8de0d0fcd6fecaeb67202ecc5386abf05 CLSA-2025:1757663183 TuxCare License Agreement 0 - CVE-2023-44441: fix heap-based buffer overflow vulnerability in DDS file parsing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-44441: fix heap-based buffer overflow vulnerability in DDS file parsing

0 tuxcare-almalinux9.2-esu gimp-2.99.8-3.el9.tuxcare.els1.x86_64.rpm f6462e67573e59aeb6d59713fb809b9fa4a153e645985aa28811f8938592c369 gimp-devel-2.99.8-3.el9.tuxcare.els1.x86_64.rpm 0a5a5b823b6cc32e14298806d9377204b670800c2443e3722b309022bd9780c7 gimp-devel-tools-2.99.8-3.el9.tuxcare.els1.x86_64.rpm a44f97f0984f29a870f03e949d9cf5a33127fadbfee5e9327899f81c7515e66e gimp-libs-2.99.8-3.el9.tuxcare.els1.i686.rpm 9158f24984352c17d04759b9e23b6aac85ceb20b2f56964100dd976f870eb618 gimp-libs-2.99.8-3.el9.tuxcare.els1.x86_64.rpm 2c7ace7547a45d8c60119805d80bb278c3b3a96de7ab5b2b4dfa4ef3d1b7dbcc CLSA-2025:1757691233 TuxCare License Agreement 0 - CVE-2025-5318: fix out-of-bounds read in sftp_handle function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5318: fix out-of-bounds read in sftp_handle function

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els4.i686.rpm 77969bfac62c01d755b14ad7685707575f799c52978de5e19dd96dbab4ab4dbc libssh-0.10.4-8.el9.tuxcare.els4.x86_64.rpm 6d180dbae5d14a8ab4398f486bf2a8133b76a0270c2be6a1632bffd359a9e0cf libssh-config-0.10.4-8.el9.tuxcare.els4.noarch.rpm 16ecc660b39554941512e76d4807581109e0cf2b33ceb98fdfd5a97052714526 libssh-devel-0.10.4-8.el9.tuxcare.els4.i686.rpm af5459ea5f573e680ba11aab9a62832061eb32414aafc3aa2d2c67bda57ab41e libssh-devel-0.10.4-8.el9.tuxcare.els4.x86_64.rpm cb6507a27cb2b9e20ea5c44884740b95fd33d4957e3abd25cef2fd5535f5de87 CLSA-2025:1757691801 TuxCare License Agreement 0 - CVE-2023-44444: fix off-by-one error in PSP file parsing to prevent remote code execution (ZDI-CAN-22097) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-44444: fix off-by-one error in PSP file parsing to prevent remote code execution (ZDI-CAN-22097)

0 tuxcare-almalinux9.2-esu gimp-2.99.8-3.el9.tuxcare.els4.x86_64.rpm 9dc2489ffd0c4f236e4ec1e459e28218bb0e7fe820cab8ee9fb6953568ebe323 gimp-devel-2.99.8-3.el9.tuxcare.els4.x86_64.rpm 9e39dcc24a41d419694339127fd4122c079625e2e3469846b147fece61426531 gimp-devel-tools-2.99.8-3.el9.tuxcare.els4.x86_64.rpm 6d9ba49c02e50ab5c91d7a078cf645421adaf6871571d1d963dc1686c82fb519 gimp-libs-2.99.8-3.el9.tuxcare.els4.i686.rpm aa69ecd1e340addd50a46480c0da2b1d8cdf9183fa2cfa3bf65cf403beac7a24 gimp-libs-2.99.8-3.el9.tuxcare.els4.x86_64.rpm 69adba4dfa5cecf1654a4a02d655a3efa43b2a7f6cf015b943d51292c7a62601 CLSA-2025:1757692387 TuxCare License Agreement 0 - CVE-2020-27827: fix memory allocation issue caused by specially crafted LLDP packets Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-27827: fix memory allocation issue caused by specially crafted LLDP packets

0 tuxcare-almalinux9.2-esu lldpd-1.0.4-10.el9.tuxcare.els1.i686.rpm 35802649fb2ccab7979df0b7aa3b315b457d9c0bd52943409b636bff0009b749 lldpd-1.0.4-10.el9.tuxcare.els1.x86_64.rpm 979d612d9900454769245710eccc1a6139e18a3c2f21f50f4f87ae119780bd06 lldpd-devel-1.0.4-10.el9.tuxcare.els1.i686.rpm e6fc1957f1f831a566c44ee993861ed3f9c4b98b657edd277bd2e49b9e98a5b2 lldpd-devel-1.0.4-10.el9.tuxcare.els1.x86_64.rpm a3b37db010ac8f5206f886dff09771fbc256921732dfb39a070b1d4755cee84d CLSA-2025:1757692837 TuxCare License Agreement 0 - Update Intel CPU microcode to 20250812, addresses: CVE-2024-28047, CVE-2024-31157, CVE-2024-39279, CVE-2024-28956, CVE-2024-43420, CVE-2024-45332, CVE-2025-24495, CVE-2025-20623, CVE-2025-20012 - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa000100; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003d0; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x123; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000410; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002e0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x25; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000362; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002b3; Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update Intel CPU microcode to 20250812, addresses: CVE-2024-28047, CVE-2024-31157, CVE-2024-39279, CVE-2024-28956, CVE-2024-43420, CVE-2024-45332, CVE-2025-24495, CVE-2025-20623, CVE-2025-20012 - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa000100; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003d0; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x123; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000410; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002e0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x25; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000362; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002b3;

0 tuxcare-almalinux9.2-esu microcode_ctl-20220809-2.20250812.1.el9_2.tuxcare.els1.noarch.rpm 4eae57e0ec887f59f3438a5f33cbcd6871ad45be61fccb7fe33e572667564502 CLSA-2025:1757698525 TuxCare License Agreement 0 - CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdk_pixbuf__jpeg_image_load_increment() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdk_pixbuf__jpeg_image_load_increment()

0 tuxcare-almalinux9.2-esu gdk-pixbuf2-2.42.6-3.el9.tuxcare.els1.i686.rpm 6762f5abcd8d4e268f2c2aff6042528cad314ca15e521d7abee4b4b515f09590 gdk-pixbuf2-2.42.6-3.el9.tuxcare.els1.x86_64.rpm cf88bb1db080ea69df70396c13e74a54c7069438d27bb9c8979e10d50f6c86e1 gdk-pixbuf2-devel-2.42.6-3.el9.tuxcare.els1.i686.rpm 28fda0423c6e335a72955a7f54ca87d9133ec74798ab8812f36fb3070f3afdb0 gdk-pixbuf2-devel-2.42.6-3.el9.tuxcare.els1.x86_64.rpm 0d335335aa8ddcf41b76a70a501401006ef41c76606abf6355520d91bcb5cb34 gdk-pixbuf2-modules-2.42.6-3.el9.tuxcare.els1.i686.rpm 39785d87cea9e056ff62c63e3c63925acd739ccc52497fef5edbc5df75f9a814 gdk-pixbuf2-modules-2.42.6-3.el9.tuxcare.els1.x86_64.rpm e9bec998984b1e3fd1737ee5446f816bc2eb68e770259143cd7d3e06179635e4 gdk-pixbuf2-tests-2.42.6-3.el9.tuxcare.els1.x86_64.rpm aeb5949b21bb838d8262888ed21223c0a2cf64cf3b21def6b73333a03ce1e0a5 CLSA-2025:1757699471 TuxCare License Agreement 0 - mm/hugetlb: unshare page tables during VMA split, not before {CVE-2025-38084} - hugetlb: unshare some PMDs when splitting VMAs {CVE-2025-38084} - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464} - vsock: Fix transport_* TOCTOU {CVE-2025-38461} - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200} - net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-37914} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - udp: Fix memory accounting leak. {CVE-2025-22058} - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177} - sch_htb: make htb_deactivate() idempotent {CVE-2025-38177} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177} - sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - net: fix udp gso skb_segment after pull from frag_list {CVE-2025-38124} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- mm/hugetlb: unshare page tables during VMA split, not before {CVE-2025-38084} - hugetlb: unshare some PMDs when splitting VMAs {CVE-2025-38084} - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464} - vsock: Fix transport_* TOCTOU {CVE-2025-38461} - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200} - net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-37914} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - udp: Fix memory accounting leak. {CVE-2025-22058} - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177} - sch_htb: make htb_deactivate() idempotent {CVE-2025-38177} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177} - sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - net: fix udp gso skb_segment after pull from frag_list {CVE-2025-38124}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 8a21b52638a0037fa9db6fa901c8621dea91f10a4c855eb7c9f26a66d2c23ee3 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 5b38d7b67f023a46fa244fced3c90c3cad96656e4dafba9ee294ea2d7176a36b kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch.rpm 07c4fa1632d8ff303db8c9069404dc25b4ab13293d8b93de0b288fa6e2c735df kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 9e379bbb6774125e01e9d2a75d22ed140a3d6de00af6dc4ef7fb923efaf79b87 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 45317010d83834fad9b03ca283d98d225d7d61015aad6886469a79409abe1412 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 2fb755aa5221bcc4756e3a02ea7829c0caafcb2670eda6088e3060c197ab7617 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 95b6a34116861812d6345da0f77d7949d801586ec006642f143dc60e5e4e8edc kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 8818c5fb87b7b081f7f5cabaa772112c77cc34176c320c05f98dea19c2ebe1c6 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 1dff0d87701e46f326289d61f53ea2afa6e721cb8d69032910f8931ee8607bbc kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 5e40e64338549e670db2ac7f9637c35a039d894fae1bff8abca227bae8f67c59 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm bb63df3129aec47effad23a2e670785439b2dbb21d93648e00f98643608b7cc5 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 4dfe8868fd92ec13ba139b80930597d80cd4f5137cb55b61633d5b93abdc1778 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm de2245a1af33cc279ac56c6a2ef8fd4b5bed026a28941797c6a809a7f7c63f14 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm a65c7098aad0c81d3aa42ccdc40aad6bd0c7fc7d5496e859c49642a395f8208a kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 8908d23bed34507afb942ae847b86a186e3f1fcf2ec6a9d15d0503f9bf231343 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 35c7c27f362f6d3e3615a40d83ebdc2258be54565942a4d552fcf9ff13f94aa9 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 6b4b1562dd7bf97b0f81e4ae4026f959aa99b18846a779fc004dd76ee3cfe24b kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch.rpm d2556ca34021b4db7463e4c1b531564758e5f497c103a5d232a16005cee057a8 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 10ac01186232332d1d23bfb7fa3808dac0b4c90a366b0972b63abdb07ebe0ba4 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 522a6f656df53335929353ede6b6acc6b29e4b89c0406a2976095f7e696b0d80 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 03fd154650e4f5a7d00470544adcaae7b720a6c9e9f905197dba75b78f6f10a1 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 12175560e93fb9710c0d0f9761efc2421638f3e58d51e647fa971e884e70a89c kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm b0171a45a09f71aeb5570291f6e1868961b76ee87ae6edfa03b14536ae93353f kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm d4c5798256a650c900b6a9368d7cd29ba82145a3ce3a8f982b678992114937bb kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm b5abfd8ebe6689a028c541924b4e9e42f27f90ed4cedfdcaf40ca79e4e1e1ae7 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 6f4b5e6a1ebb7326f338d4e90ed0656169c27756da809c5350bd8da0f20620b9 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm ed736c87e74a70a881a96326442e8fce0ea93737237a703b4fd64471aeca4729 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 42e238d37020c656b0272d574f31f5123cb8eab3c53bd91e753a7c70573c5e96 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 50cc804a0b18f433ddd04ed1243ec4996f109255e92e6f63c8b3a38fde1b6f43 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 7db415630fc44cfc03de8ced35865313ef43145a0fa371e5bdae373d514b02e1 libbpf-1.0.0-2.el9_2.tuxcare.7.els19.i686.rpm e9b7d1341cd00f4c2ffff6c4a6d744e2d5560b2f344cc17f23422d7b1df24ae6 libbpf-1.0.0-2.el9_2.tuxcare.7.els19.x86_64.rpm 9123ee875ec17f4ddcae482d5877a778de1f9c48c4d75e337d711a8c730e6f94 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els19.i686.rpm 684f94068c4ee98fe8330cdc421d8b1d7755cb13924091bf56e8e9055122897b libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els19.x86_64.rpm 52f05f282da57020235309d819d940d37b6c99359f4373be846847529a0dfe6c libbpf-static-1.0.0-2.el9_2.tuxcare.7.els19.i686.rpm 0956977bc867cf59f84433cc8dfdf65300935f50f7cdac6f6216527b4dda02bd libbpf-static-1.0.0-2.el9_2.tuxcare.7.els19.x86_64.rpm a7673db5c8ebc50c1a47eac30944b8b2511a670e563e8a133452fd7366750d90 perf-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 25bec800a2d483567c814ab87c3343220cbe13f90099903f2d17d40c46123fdd python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm 6dff47df468d40c337cb2c51e53a24f7b8c401711ed43031754d0d9301f063ae rtla-5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64.rpm b317ca0dd3bbc13843372fe0676e17b80c673c6b0b75d640ca2d3757ecff184c CLSA-2025:1756751564 TuxCare License Agreement 0 - Update to 2.48.5. The following CVEs were fixed: - CVE-2025-6558: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-31273: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-31278: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-43212: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-43216: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-43228: fix issue with visiting a malicious website which may lead to address bar spoofing - CVE-2025-24189: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-31205: fix issue with a malicious website which may exfiltrate data cross-origin - CVE-2025-24208: fix loading a malicious iframe which may lead to a cross-site scripting attack - CVE-2024-54551: fix processing web content which may lead to a denial-of-service - CVE-2024-44192: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-54467: fix issue with a malicious website which may exfiltrate data cross-origin - CVE-2025-24162: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-54502: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44244: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44185: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44187: fix issue wit a malicious website may exfiltrate data cross-origin - CVE-2024-40866: fix issue with visiting a malicious website which may lead to address bar spoofing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to 2.48.5. The following CVEs were fixed: - CVE-2025-6558: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-31273: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-31278: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-43212: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-43216: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-43228: fix issue with visiting a malicious website which may lead to address bar spoofing - CVE-2025-24189: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-31205: fix issue with a malicious website which may exfiltrate data cross-origin - CVE-2025-24208: fix loading a malicious iframe which may lead to a cross-site scripting attack - CVE-2024-54551: fix processing web content which may lead to a denial-of-service - CVE-2024-44192: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-54467: fix issue with a malicious website which may exfiltrate data cross-origin - CVE-2025-24162: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-54502: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44244: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44185: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44187: fix issue wit a malicious website may exfiltrate data cross-origin - CVE-2024-40866: fix issue with visiting a malicious website which may lead to address bar spoofing

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.48.5-1.el9.tuxcare.els1.x86_64.rpm 4a8658d3500e94650f859656764f5ad85a82822bfe4f720c7d8c66811144cc80 webkit2gtk3-devel-2.48.5-1.el9.tuxcare.els1.x86_64.rpm a8cd4e26aa73f9072cc633a28e162a9d8e32a017fe9f86cbed8ea829c3d85383 webkit2gtk3-jsc-2.48.5-1.el9.tuxcare.els1.x86_64.rpm 1f8aa84579fa5ecc50aa06b13388823fa9720fe9c6c96935be878afac7f972bf webkit2gtk3-jsc-devel-2.48.5-1.el9.tuxcare.els1.x86_64.rpm a4a3c10abc147ba1a25654a81ea275cdd06bf88eb3be44aaec445185b9fedd70 CLSA-2025:1757945157 TuxCare License Agreement 0 - CVE-2025-8194: fix defect in 'TarFile' extraction and entry enumeration APIs to prevent infinite loop and deadlock when processing tar archives with negative offsets Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8194: fix defect in 'TarFile' extraction and entry enumeration APIs to prevent infinite loop and deadlock when processing tar archives with negative offsets

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els13.i686.rpm 7b5250558a1710387732ffdf68a57db60bd06d9f4b93b1f606336e8f5f30c906 python3.11-3.11.2-2.el9_2.2.tuxcare.els13.x86_64.rpm 8e8475559c58b07b082ed4b712237252ea5839c01d0482cf3801a67781ec45f7 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els13.i686.rpm aafbe5ad62ea32fecee3c2c9a3f8bbcbdd1c07643e7a21ac07d22d7cb6813e05 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els13.x86_64.rpm 553574b2c2e505c9f6143c87ead12ea82084d673610ea12a806fb1c341b749eb python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els13.i686.rpm 3f5e6654a52ac64220b9ac63757dc1fa948817e8edcd254af30037b2d527d1a4 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els13.x86_64.rpm 15b4a3ae9e012e90d40ba5f373fe5c111463aa117d95891b3a18976a92febb19 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els13.i686.rpm c3cc2ec5155c7fc6bf03ee3121b5eca8017517be56c5e309d4951049268555c3 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els13.x86_64.rpm 6c0aa10d1a9408e416ad845b7750cc5846a5090f8de1f0a73bdd571cf47e6f3d python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els13.i686.rpm 362af06edc962eac3464e0730e4b77ab09fd5210ec4a8560cad0ca00b2cfc93a python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els13.x86_64.rpm ba4f8f87a4278bbfbaaf0b3c28162d8da4897c6d76b31646b640aa38a7e63fef python3.11-test-3.11.2-2.el9_2.2.tuxcare.els13.i686.rpm b0b2166915bc0fa586cd0122eb0570b88fbdb52b697bb58ffb531790e06ba396 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els13.x86_64.rpm 9ce8c6aa5fc43500b589176e9f36bbf8ae1b84bfdf6518de7451e13986e8546b python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els13.i686.rpm 00ab8b94a9a1c2f34fdc4817e3d66ffff20e7943e68884be5906fc493e7c5952 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els13.x86_64.rpm 4617770f4ab5c56b00a9a6269e5703bad279661bc5238a4f55561ade87e460f8 CLSA-2025:1757946824 TuxCare License Agreement 0 - CVE-2024-8929: Security fix for heap buffer over-read in mysqlnd leading to possible information disclosure (GHSA-h35g-vwh6-m678) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-8929: Security fix for heap buffer over-read in mysqlnd leading to possible information disclosure (GHSA-h35g-vwh6-m678)

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 2c0357c6acf78ecba5e6fe3ef745fab9ae869978aab8ecf02840cf370f97359a php-bcmath-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm a38d89e3357bee92a8309a8a1069d7f900aa21a59622a18952bc515806fc70a7 php-cli-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 5c386ecf5d34f7569e3128f87fef6f50a8b45c731565d8230e79181c974b8214 php-common-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm bda983132bfe1fecdbea24a08117ada526bee149a1ececd1787b640c751b7ff5 php-dba-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 528f28f32ea8705bb77da414d6de4f6310a03c7a4a98bec08b021563fd1ea998 php-dbg-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 320e198971054870c0efcf6d74e298a4ba3a9c84e0c1f82fd3496d05f2bedd7f php-devel-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 9be00999cfe53f1ec4e9258d3e37883882acdca37d392dfb60118f3526be4dfb php-embedded-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 26d3a392f01a17ae66bab00d379e516d13f95537a97942af0c8e6310add0e2f5 php-enchant-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 33c5e53658497464afda79d426806e7707968b47bb2295c8f5169ebd79105849 php-ffi-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 95dba7927e7aaa8ce83d09ac25604a26fdf130dab8d32f9ffc4fced0b812817c php-fpm-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 1d6e9d73ac2e8c6cd7c2be86e0516d7f40f8a8f94758bcb6adaa6789ca704923 php-gd-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 5b812e2629d6fa02b87ba3f5e3ada2991d8b8994d41c8ceae8f0b9e79d871da0 php-gmp-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm e12f96ab8ad2835e57bab3aa1ecd9fdc379b4d6e02276cc56651207a4b2c70ca php-intl-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 3a578869857ec048772889723c7430d4ca06e127737989c149cf9edf14d73444 php-ldap-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm ec2424b74ad6a73bc2ea8362d82401ab646af62d45e88d284db6b294142c667e php-mbstring-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm a645deec0fb758ea62a2bca08b649f53d282ce1e49d3c93a44c36feb7a5ba1e5 php-mysqlnd-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm abd51c3e4e1490c03fe3e4fd08e0d958713f988b788832d7cfe4fa738205aed1 php-odbc-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 2887a680c6139a712d92bafe815a5b03ab4454b31f5c25f4511c1ef4c53da231 php-opcache-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm c2410bfa26e02f2a0ac968adcbcf0616048fbcdb64c555aa7c0b8c0f6c9448cf php-pdo-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 74705162f8d5bc2b5463f6e907a055bebe6a17f794311bb367eb585734f31092 php-pgsql-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 98ad15d4201b49077ccd1513e3c8220a62d294119729514f282f7835a433c617 php-process-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm e81afd858658a194c56db80e0342463453cb24ec725f4b6a633f33007f64bec8 php-snmp-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm 445b3b9e82ca48a29dbe0c251766b09a3e390213936651b2fc8b6d1e202f802a php-soap-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm c66d46d51aef06eeb2ab782ea1df7d4d87aafef008ee7a88f24cf004cfd53d4b php-xml-8.0.30-1.el9_2.tuxcare.els8.x86_64.rpm e514f98fa37b37a3f4903aace13e33db697c751593d77eb3c8ea530b0cb82f81 CLSA-2025:1757962152 TuxCare License Agreement 0 - CVE-2023-38712: fix a NULL pointer dereference caused by a duplicated Delete/Notify message which causes the pluto daemon to crash and restart Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-38712: fix a NULL pointer dereference caused by a duplicated Delete/Notify message which causes the pluto daemon to crash and restart

0 tuxcare-almalinux9.2-esu libreswan-4.9-4.el9_2.tuxcare.els4.x86_64.rpm a3fd9f079135f8d75301fffc06d61798050e7feec141c67aca6636b450ac94f1 CLSA-2025:1757962664 TuxCare License Agreement 0 - CVE-2023-33460: fix memory leak in yajl_tree_parse function Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-33460: fix memory leak in yajl_tree_parse function

0 tuxcare-almalinux9.2-esu yajl-2.1.0-21.el9.tuxcare.els1.i686.rpm c0d2d713cd51feffa303991879798eca5020e9622ec95e8879ba27aae616f839 yajl-2.1.0-21.el9.tuxcare.els1.x86_64.rpm 1f338688c7f8f742f99b3cf2c6dc5a80a0e8bf7e8d5f55b0636d5c463a6635ba yajl-devel-2.1.0-21.el9.tuxcare.els1.i686.rpm 9ab2649047af96e45ae32553524124685c73066e11d351f900f29e0cf562049f yajl-devel-2.1.0-21.el9.tuxcare.els1.x86_64.rpm 41775adb42c3b542de3ea59b38691d3ce4758742852f505f77b30c33efcc1ec1 CLSA-2025:1758022908 TuxCare License Agreement 0 - CVE-2024-39908: fix performance issue caused by using repeated characters to avoid DoS vulnerabilities when it parses an XML - CVE-2024-43398: improve namespace conflicted attribute check to avoid DoS vulnerability when it parses an XML Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-39908: fix performance issue caused by using repeated characters to avoid DoS vulnerabilities when it parses an XML - CVE-2024-43398: improve namespace conflicted attribute check to avoid DoS vulnerability when it parses an XML

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els8.i686.rpm 313d846854b29e10253e5b3f00a76f4ac5f603bedb919e7c7079a07633044416 ruby-3.0.4-160.el9_0.tuxcare.els8.x86_64.rpm ce139d60f377f9fe2814a71ad85e0b51c8702f2c1b2717525575605e699c87d5 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els8.noarch.rpm 6a5c2c8551d0621c8b7ba64b5a988d4d5eb50240e266ec5af2c1c4457d6eac76 ruby-devel-3.0.4-160.el9_0.tuxcare.els8.i686.rpm 44abb93b924a3c877799a1e58dc7ddbcf80eeb5a5b50e6b392a980d17c52767f ruby-devel-3.0.4-160.el9_0.tuxcare.els8.x86_64.rpm 6675278b9318aa8a60b84ef0499ce39aea859efa480362f2ade19d5dc76e174b ruby-doc-3.0.4-160.el9_0.tuxcare.els8.noarch.rpm 307fcbc5e0c85248183cc8197cf535a1cc78a9cd5a21f41dea3a9a1306fe8974 ruby-libs-3.0.4-160.el9_0.tuxcare.els8.i686.rpm fec837357d48e33cb587f9d297abfea13194e9595b3145b72cb7b7eeded37f6c ruby-libs-3.0.4-160.el9_0.tuxcare.els8.x86_64.rpm cce12fe5934535ad122ad0058bdbfe92a8cfd3b068a616afc4cd5ffe0035f904 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els8.i686.rpm 0d7d77514a6c7f457a8796b6d286af721c6efbb65684a0363be9aedebee07f1e rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els8.x86_64.rpm b6d65a6df1cb06fdda22654d6f23e8b3e016b9fd94999a56bd4311248b7cb71f rubygem-bundler-2.2.33-160.el9_0.tuxcare.els8.noarch.rpm 3dc4f5f40a7e59d4000448feb32d910554aa6371178cee4c6316d088c30699f0 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els8.i686.rpm 72da8ff36cf2d1232c44ff2690aa2f18a93464af6d8052dfdaf6ac35768a611c rubygem-io-console-0.5.7-160.el9_0.tuxcare.els8.x86_64.rpm 9c0193f2bb413ea36ea193a56dc490eb47679fc70a8fb39beee4ed26544e6989 rubygem-irb-1.3.5-160.el9_0.tuxcare.els8.noarch.rpm a65d7bdc47ad88a81025324b030de9b9975a544f03fb0c680c38196ba90f4e4e rubygem-json-2.5.1-160.el9_0.tuxcare.els8.i686.rpm 17353523ad540fde18288cf70ee8ff48cb092eee1440011f5b0b7d14cc9b9bef rubygem-json-2.5.1-160.el9_0.tuxcare.els8.x86_64.rpm 41bd77ac39b1c8316c2ea3dd2b9d1f0a5e0ad76b557ac900db33a78309a7ee63 rubygem-minitest-5.14.2-160.el9_0.tuxcare.els8.noarch.rpm b3e007d097cc514cd1d1fb70cfb0302f115e3c002357b7774f4d309aa48aba50 rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els8.noarch.rpm e6cdb05c1a7dfd7e123107c360a25c72e43313fb2a852afffe3e7a3ad992df3b rubygem-psych-3.3.2-160.el9_0.tuxcare.els8.i686.rpm aa148eb00002f01f6f631723e29a3b92ad482f804ca51e63b2c377ac99df86fa rubygem-psych-3.3.2-160.el9_0.tuxcare.els8.x86_64.rpm 4f4cad6b391241ff24437955862441b6e34d1cfd4205b2493ef113f37fe31a37 rubygem-rake-13.0.3-160.el9_0.tuxcare.els8.noarch.rpm d7b7049ab16169b6a72f57544ff1855900a51ae19d93e93d8063234475547020 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els8.noarch.rpm 607d1cc30492ddd900ad66b87752586b6048b3e0026d2b531416320e43d10102 rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els8.noarch.rpm e0c9d0c8861dac3ab57a7bdbee34a33f6c598c508fb7f428846b107feddcf8b1 rubygem-rexml-3.3.3-160.el9_0.tuxcare.els8.noarch.rpm 586411de9d61c6b7594fefc84ebbec0a8f0af5089b0df442050984924129c64a rubygem-rss-0.2.9-160.el9_0.tuxcare.els8.noarch.rpm 52754cacc036d8490f6d6e45eef3d1464e3479b7eb57e37f4d78fed2a56e262c rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els8.noarch.rpm 02d845f0115aa85f0de8e8b5947541d87ae46fd3bfeaaf15d80fec3d2f5b65e7 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els8.noarch.rpm 2c7dd6fedffe61f035fac15686ab872a769f1369523521ba8de5d4907e524f45 rubygems-3.2.33-160.el9_0.tuxcare.els8.noarch.rpm bd69e5255fedc3e3aa303a3531232ecfd268176eb40a5b958fdb196e2106f8cd rubygems-devel-3.2.33-160.el9_0.tuxcare.els8.noarch.rpm 559473056fbc01835d7ecd1c058e1f47ff5193200020f1f84627196156950a4a CLSA-2025:1758034087 TuxCare License Agreement 0 - tls: always refresh the queue when reading sock {CVE-2025-38471} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - i2c/designware: Fix an initialization issue {CVE-2025-38380} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() {CVE-2025-21867} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - ext4: avoid journaling sb update on error if journal is destroying {CVE-2025-22113} - ext4: define ext4_journal_destroy wrapper - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013} - Bluetooth: Remove BT_HS {CVE-2024-38620} - block, bfq: fix bfqq uaf in bfq_limit_depth() {CVE-2024-53166} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - bpf: Fix helper writes to read-only maps (alt version) {CVE-2024-49861} - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers {CVE-2023-52621} - netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556} - net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890} - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - padata: fix UAF in padata_reorder {CVE-2025-21727} - RDMA/mlx5: Fix page_size variable overflow {CVE-2025-22091} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- tls: always refresh the queue when reading sock {CVE-2025-38471} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - i2c/designware: Fix an initialization issue {CVE-2025-38380} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() {CVE-2025-21867} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - ext4: avoid journaling sb update on error if journal is destroying {CVE-2025-22113} - ext4: define ext4_journal_destroy wrapper - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013} - Bluetooth: Remove BT_HS {CVE-2024-38620} - block, bfq: fix bfqq uaf in bfq_limit_depth() {CVE-2024-53166} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - bpf: Fix helper writes to read-only maps (alt version) {CVE-2024-49861} - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers {CVE-2023-52621} - netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556} - net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890} - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - padata: fix UAF in padata_reorder {CVE-2025-21727} - RDMA/mlx5: Fix page_size variable overflow {CVE-2025-22091}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 294733410891703250004990eec094fc12ffd1797537b453e865f0ec978000a3 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 3c7c9a1c8a8952534a8fee13d18efb4654e7d680095137d60d3a345c26a80948 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch.rpm a078c722f49dd3b9134e42dbdb0f6b4614d33ebc44ddb760435483e419797df8 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm d8278847f1792e815af4d791cc8bd67051fb1d94359e83263631f465957b6305 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 28c1c7e2073b444194a01b8b1e3daf16795a4748e1f59d25ee302bb0d5ff9896 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm b68a28c7cd4cffb33c6dbb4e53ab74b668c42134049c70403971154d9a0ff4e4 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 7d608ae8d8a13dea21be5cd41ac144dcacda236e8b9759298d65791d4461f7e6 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm c6ee5248bafa7a1ca0301324668593e06a331b45ead5ac09394e501f0ac5126e kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 12fc0b5f5565ac023e23c002d7adcc629ff3e9c507d9e7bd244d32ffe013a8c2 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm d68792384f9f566b3322e5cf518abf80efc24fd1f318b1167856c9cfd1b8765f kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm eeb02df5bb9316add2215d16bce483076d9f6377029bbb2699e0bea1eb480569 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm ff58a82ebb1c0e5af937dfb083f3e4bb2d0a4e37709c10e7f83ce56643b064d5 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm e2b697fadc9a3d0fc3d1a8d3798e5af769b9b5abb2f32a9592229157daf46e97 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm d15f4968192549a8034a6ecdb8da6737b81d2c16f34218dfd8efcb73adf5f398 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm fabd3675cb2b989b48ce4cd0a007b73a2c2a8f0bc5675a5665a344decd0badc4 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 9006ad6d2b5e407f7798f86de0ed37c0b736e781ebcc77ef941cdd56d04fc0cf kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 1815a7e10410052ad18d337f196076d7b45ea9e651b88f86d52e4d4743d5bc8c kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch.rpm c36bddfc394be3718cfb98627938cb76b4fc4c96a65e15810fee58f1c23029bb kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm c3288e5be93109ca3eee8986368e649898d38174161b774adcdb3a2f7abd68c5 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 84c2a98667fbd19b885531a54b6a8013059e33f4157b702d25790c3bcf65231b kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 6aac57f77904d788f9953e1daf45da6d32d2f16b4f7f8e43c25bba75b52f6e78 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 1897ff15594ca333165757b2c56dfd8fad7cca368de39563d71cc29e0da8f7bf kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm bbc960731dd586643e9e97cca310ee5edb509982e31d7c128da52f1c8aa8dcb8 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 7decf6638f7394f43c26f8d0f0c824af962b33e9232347c941cc6aa3bf31c2be kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm d7185e1399e78fcca3685ce647c2edccdd749c3cac9118e5a04c211a6d094f27 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 80a6dd4c49f5625aa4713a9302a97d303b1e14f72d8ec956b48fda2d59bc5d84 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 52d1c089d9ea5c619b3384e3be1b7a08749f32a8132208fe3af7f8fc3ca908c4 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 6aa0b0219c4dab3b9f2a1476b6b07e09a49baf6243468e7936f9b32c79d8717e kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm b0bef3b632edfdbca44cbf01ed59951f742ca2aa5a36288463b64c3436bf61ae kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm c4b959d15fee1065f2106f90fcba6510bbd8293a36a5cecf17481cc718ad27a7 libbpf-1.0.0-2.el9_2.tuxcare.7.els18.i686.rpm 3733a5af1cb8d55773a08bc2371a3d83901d94727f2e70de466ba26ec5da2a62 libbpf-1.0.0-2.el9_2.tuxcare.7.els18.x86_64.rpm 9aee8e43748e337853c256ec91766edcb3bb5dafdec170fd9af8f2b1f1c1de00 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els18.i686.rpm 8eb461f29f8d847cfd3c4f7af7743ff0eb01b8710d10564a78e85128eaacf46d libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els18.x86_64.rpm eb87df3424a0f0634fff30fa30ea668774e5b365778bc4e84faf922b48829d85 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els18.i686.rpm 9cf39d32fc70653108f467cc5b86beb6a9650cd64f72b9eb63c642899143b736 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els18.x86_64.rpm eae3f09cf01935f4230b8f5d07a433254bed0d89f6e19d553d0c2ba1a80e2307 perf-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 2165479335a2e9e9e43a3f9d924b098bc563f6bbe2ac1c3f44a1a5d0ac91a729 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm b62d3fd479b29bb09db94464c08a341bd2a991dadafa3af4d7213aec61aeed65 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64.rpm 0c6eefc574d93513022cc737a01492c256b06d30b88e66eb2d2ec3d4f4b2e59b CLSA-2025:1758039948 TuxCare License Agreement 0 - CVE-2022-1941: fix parsing vulnerability in MessageSet type to prevent out of memory failures and DoS attacks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-1941: fix parsing vulnerability in MessageSet type to prevent out of memory failures and DoS attacks

0 tuxcare-almalinux9.2-esu protobuf-3.14.0-13.el9.tuxcare.els2.i686.rpm cd115bfd628b62a6dfcb4aa285dc6d450f6219af517d32e197c3e5d5dbc97926 protobuf-3.14.0-13.el9.tuxcare.els2.x86_64.rpm 74d60738749d4d07b6c269f26ba7222bbf25e5469675e9de4601ea6dd7dfe41b protobuf-compiler-3.14.0-13.el9.tuxcare.els2.i686.rpm e226b7610d262ca7085c5306e530956c531f8cbf16b3f930e8024062fb7a0147 protobuf-compiler-3.14.0-13.el9.tuxcare.els2.x86_64.rpm c185a9b538c5650f3445d2b513c7842309759b7275dd92990f4670ce2c510f2c protobuf-devel-3.14.0-13.el9.tuxcare.els2.i686.rpm ec21bf24fd411e89a427453f64a9a37b72682901fe42c892d0ae8e4e2f975d55 protobuf-devel-3.14.0-13.el9.tuxcare.els2.x86_64.rpm 574febae4f692586f7f06dc5731b08c9bbffdaf8016433a300f39f5e8df3f0ee protobuf-emacs-3.14.0-13.el9.tuxcare.els2.noarch.rpm f7d8ca1b87a8f5863ff4781dab5f6c3be213e2083b3b936c164933e9b37ccfc1 protobuf-lite-3.14.0-13.el9.tuxcare.els2.i686.rpm b733163b7c18ac0e9cd007d89ad43ec19ebe08c9e84e4a9d167fd21a18e587fe protobuf-lite-3.14.0-13.el9.tuxcare.els2.x86_64.rpm 1ab460bb3326bbd67ab7144f3067828d5cef93636a772e0762d2bbf3ca50c6a1 protobuf-lite-devel-3.14.0-13.el9.tuxcare.els2.i686.rpm aa463ce4397a0b093c3b7a00fdb8af646c3b9fde010605804028d10f4861b118 protobuf-lite-devel-3.14.0-13.el9.tuxcare.els2.x86_64.rpm 8273a9de1747bdf1ac5f8ec1811512f5bb9f8381e38dbb10d5c884b4a6938535 protobuf-lite-static-3.14.0-13.el9.tuxcare.els2.x86_64.rpm da23d6c4ff2aa9cbf1e7119268a4b3c45367110881a9472b2161ad23dbaba51b protobuf-static-3.14.0-13.el9.tuxcare.els2.x86_64.rpm d65f3f95168e2975ebdd744c0df6e6bfb09038a7eba792142027f8266ec212af protobuf-vim-3.14.0-13.el9.tuxcare.els2.noarch.rpm 48322ab3cf8501a1ce208195296179ca7bac883d92007321a92e9aec9c3e54ec python3-protobuf-3.14.0-13.el9.tuxcare.els2.noarch.rpm 99b651a040bbd4d101a01fcb17485bcd27be47a28f2480541ed5ffa9dcd2cf2b CLSA-2025:1758040547 TuxCare License Agreement 0 - CVE-2024-52006: fix issue where single Carriage Return characters could be interpreted as newlines by some ecosystems in Git's line-based protocol Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52006: fix issue where single Carriage Return characters could be interpreted as newlines by some ecosystems in Git's line-based protocol

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els9.x86_64.rpm 3aae6b4026f86eeca96ba9cb00e1ded75c51512aafac5bf48c9f4ca10f4a13ec git-all-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm a1eb362c638dc4f98edc48e59273a209ed8c888ce3d70b6c8b409f2dbd92680c git-core-2.39.3-1.el9_2.tuxcare.els9.x86_64.rpm cd2caaf91c8dad5df9a06fc02c134825d216e803c7eacafc71e3ecabfff904b6 git-core-doc-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm 925f1f14910aec6c654ddabdf9e5ad62f70b193450b7919806aa5f7c63d531ef git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els9.x86_64.rpm e2a9708da9b47305f017e5b8535cfac6bf48765ab9806f8bfb7ec621db3904c5 git-daemon-2.39.3-1.el9_2.tuxcare.els9.x86_64.rpm 632fc6603533b4d5c5e4342a9b08c48cdc5fd9106b5cdfb1f7d714f0e7aa6c2b git-email-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm 98cf5f8dd95312a0e088733f0e3973ed39b5cab5bba6c3de14c9a54290e84474 git-gui-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm 8e09ef923fd181cbf0e6a9bbae99b446ced96e9a92c3cca13afcdeebdc9108eb git-instaweb-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm cced034d40e265856e35df41f707b538afde0832f61f8005b8c86a6b82159524 git-subtree-2.39.3-1.el9_2.tuxcare.els9.x86_64.rpm a47f247f73a49f53c9a7d5dad108276e8bc0ee01bb26f61bbb0eb7ff7d22a079 git-svn-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm c374c2d54ef926d435889f376bc1b51d3f0a2bda71190fe4f81e8504036a36da gitk-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm 7b106d1a37a8b2672b9d73c8e8746cd55d108511c07b2ec852c8fdf0aa60c5e7 gitweb-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm 9ff1571d2fc1910ac57f364b2c77979afb756c186ceca7337cb84e7bbb6f13d7 perl-Git-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm 05cbdece236d86a3aefdeee2b3cb94f37b45a09914b7b6e7b7ba77feaf1fb339 perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els9.noarch.rpm 5b9fe7f07b45701e9d8ed8e3a30f8bf8531e562ad0b47903f553199895b4c3a9 CLSA-2025:1758041082 TuxCare License Agreement 0 - CVE-2024-50612: fix out-of-bounds read in vorbis_analysis_wrote in ogg_vorbis.c Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-50612: fix out-of-bounds read in vorbis_analysis_wrote in ogg_vorbis.c

0 tuxcare-almalinux9.2-esu libsndfile-1.0.31-7.el9.tuxcare.els2.i686.rpm f3a37e50b2be143b2e389b4f3de3a5f75cb7e644d0cac5eb05af410c75744965 libsndfile-1.0.31-7.el9.tuxcare.els2.x86_64.rpm 7500c63abc934ea47e8f9866f67212689145a79711bf595faefe00486c5646c7 libsndfile-devel-1.0.31-7.el9.tuxcare.els2.i686.rpm f42a1b37597b0eb278bcdd82e3c3dd14422cb35505a17446e3e601159e2709b3 libsndfile-devel-1.0.31-7.el9.tuxcare.els2.x86_64.rpm 79e315435123512ee3551b60e94d30437a529416c7887ce5d1ea0c4924dca37f libsndfile-utils-1.0.31-7.el9.tuxcare.els2.x86_64.rpm 3b1c44bb987f41fc247d8d7ac855dd06955421e0a7547de67e934c4a18330eb7 CLSA-2025:1758102713 TuxCare License Agreement 0 - CVE-2025-22150: fix issue where undici used Math.random() to choose boundary for multipart/form-data request, now uses secure random number generator Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-22150: fix issue where undici used Math.random() to choose boundary for multipart/form-data request, now uses secure random number generator

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els10.x86_64.rpm be85eb6828101bb30cf606744295ec637d9fdaddac52a50e54b538e95a510fe6 nodejs-devel-16.20.2-3.el9_2.tuxcare.els10.x86_64.rpm 9627c11e231e80f4277bc9f8aecc5ed3d4a1f891eab258c42c1405f5350a5c94 nodejs-docs-16.20.2-3.el9_2.tuxcare.els10.noarch.rpm e192f716d1a6f27327266af0c65460377869985dcc2c10b40d97146249da4f1f nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els10.x86_64.rpm ac36458b984ddbdaaa34f88530105bfae022b1045d2ee2e9fd41ce1d3ef00c66 nodejs-libs-16.20.2-3.el9_2.tuxcare.els10.i686.rpm a665e9ab5f3b573e22d786011d776a5508300158fafa0f0374dc62128c253d7a nodejs-libs-16.20.2-3.el9_2.tuxcare.els10.x86_64.rpm 0daaf8a7a634e14ed45e6e13974455f1648dda32b06038d1cd377d865fc825a2 npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els10.x86_64.rpm c6426736885bb982ab490faf1062e05426916a070262188a2403926395b82a75 v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els10.x86_64.rpm 46146ce3421da9ccd5491ac33b1d1a93690dc41f3ce6aaf4d493bd680e6ba013 CLSA-2025:1758135826 TuxCare License Agreement 0 - CVE-2022-39307: fix omit error from http response when user does not exist Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-39307: fix omit error from http response when user does not exist

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els10.x86_64.rpm 8033238f1c386fd2e98f2ecc320c6e631ee3cbe004f01f8eabd4f7aab2e8c0c1 CLSA-2025:1758293394 TuxCare License Agreement 0 - CVE-2025-8714: prevent execution of unsafe meta-commands in plain-text dumps (pg_dump/pg_restore/pg_dumpall, psql restricted mode) - CVE-2025-8715: sanitize newlines in object names to avoid unsafe SQL comments in dumps Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8714: prevent execution of unsafe meta-commands in plain-text dumps (pg_dump/pg_restore/pg_dumpall, psql restricted mode) - CVE-2025-8715: sanitize newlines in object names to avoid unsafe SQL comments in dumps

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els11.x86_64.rpm a6ca1708b25931836e5661034bf4593c3d58aaca7649ded9da7d6bbc6d21c301 postgresql-contrib-13.11-1.el9_2.tuxcare.els11.x86_64.rpm cb287803fe3809e7f5ba37cb37b5fdef51658d41b5021512ac13602295f75678 postgresql-docs-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 88a015075878c1271888cd81fdd185a408815717100de4f04581ca792393e9ea postgresql-plperl-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 0cbc478889009b3e6f2c50299367594bd5fbb2b3dc920567561ef3e76d3a5390 postgresql-plpython3-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 911d17eff4581cbcc941470972b6c976ad964b29c5d8a1a00c48ad3399e2974a postgresql-pltcl-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 7313ae54038e2ed775a968a73ed081c0abdafd47f5b9cfe8aae6ca41c72d5bd8 postgresql-private-devel-13.11-1.el9_2.tuxcare.els11.x86_64.rpm a80fb4f375191bc7560b640e183f6a0f36de454cb9c6c82f60876940214bac7a postgresql-private-libs-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 5ec3bdb82fabd0a0a0fa3f623a665e650d0841c5815048005982812f77eed5fd postgresql-server-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 79b0a49adef6e1760f235250e1e4516dd2c6e8a17702c32bb67a21bec7c08c66 postgresql-server-devel-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 69a44993dc24073cc4ed4932cc0f5da5bf7d1cc90f4e00b51172927e81b5be37 postgresql-static-13.11-1.el9_2.tuxcare.els11.x86_64.rpm afdf8ebda552289d31921b1483b1757baaf2944843f2ce976eeac78a45485b34 postgresql-test-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 8732a130e071306ed37e5a016348faf8c6fbb77a3b7a43c34d9823cc98f2a73f postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els11.noarch.rpm bd1a4cb822bc374e966dd525a6782eef501f19581ac9a0004f02cb7bbae091a3 postgresql-upgrade-13.11-1.el9_2.tuxcare.els11.x86_64.rpm fc30887b44ce34bcffa30a4a7b26c690571f18d6f49a215d77d69723e37b3607 postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els11.x86_64.rpm 4ea0c27d2815ca2cadc0f2f435fedd6f7e39e19d8e0cd227fd49c50602a1dae6 CLSA-2025:1758294053 TuxCare License Agreement 0 - CVE-2024-27982: prevent HTTP request smuggling by properly interpreting content-length header Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-27982: prevent HTTP request smuggling by properly interpreting content-length header

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els12.x86_64.rpm 8880c51063dd61c712b680f623850830d151af7816ebe38cb8cf27c2ccf7d4e7 nodejs-devel-16.20.2-3.el9_2.tuxcare.els12.x86_64.rpm f813f37470f30cdf7272ab257a3eff1124b035776b19fbf18b8089ff79ac2a48 nodejs-docs-16.20.2-3.el9_2.tuxcare.els12.noarch.rpm 17604a56507289728e234ba765e36d23a263b4a2272ab838ddf401490ed52159 nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els12.x86_64.rpm 27f66b6c1270510546d0f2fc0ec23faf6262d3504d39a3c3532f7de376e6f9f1 nodejs-libs-16.20.2-3.el9_2.tuxcare.els12.i686.rpm 771e01b9aa698ea420b87e89059587bcfffc0fbcd320134385a2c9ea0960af3b nodejs-libs-16.20.2-3.el9_2.tuxcare.els12.x86_64.rpm 4855a608373b219c7c09613662d5d0b51ae8b62082eed35d5265e3e72300fe52 npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els12.x86_64.rpm 115f3710ad10f805201aa3ad54b847dfd500dc5a2a6648c3c576ae6c320d5b92 v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els12.x86_64.rpm bc2f42f16d7af300be1d3d8ce85703039bf0f36a2914261e5210b81711c2da35 CLSA-2025:1758709744 TuxCare License Agreement 0 - CVE-2025-5473: fix parsing integer overflow issue in ICO file to prevent remote code execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5473: fix parsing integer overflow issue in ICO file to prevent remote code execution

0 tuxcare-almalinux9.2-esu gimp-2.99.8-3.el9.tuxcare.els5.x86_64.rpm 88d866e7318684cc1d94c6d06c4eedaceb858b2769eaa181fd048e039070b7a9 gimp-devel-2.99.8-3.el9.tuxcare.els5.x86_64.rpm bf535e37acfa89ba215f8155029c375bf8102bf59d06e2eb8292593a9256d581 gimp-devel-tools-2.99.8-3.el9.tuxcare.els5.x86_64.rpm 3d2266c0ec1c6a4ff1e0074b78ae50cae975411d6848a4838d9bc8c439eab7f5 gimp-libs-2.99.8-3.el9.tuxcare.els5.i686.rpm e9885dd756b8974356a58c15320178662c7272f6360ca0735618008f9445ca5a gimp-libs-2.99.8-3.el9.tuxcare.els5.x86_64.rpm 46e5234d25b975d006b92c00df6736bb271c11a864b8a4a699de1e31c1e8c1c0 CLSA-2025:1758729003 TuxCare License Agreement 0 - CVE-2023-41910: fix out-of-bounds read on heap memory in cdp_decode Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-41910: fix out-of-bounds read on heap memory in cdp_decode

0 tuxcare-almalinux9.2-esu lldpd-1.0.4-10.el9.tuxcare.els2.i686.rpm ac228e2742dbaa656cb9ee0fd845251c47fca6e703a4da6a1db80232c3951bb0 lldpd-1.0.4-10.el9.tuxcare.els2.x86_64.rpm 503a810265403505a7ae0325d1cacc0ffde055d98b0091c2d42f0af0506f1c4f lldpd-devel-1.0.4-10.el9.tuxcare.els2.i686.rpm e1115b8af2088a7cdc5abcd8d12aac654f5c73e3c56f480b040fa69313251098 lldpd-devel-1.0.4-10.el9.tuxcare.els2.x86_64.rpm 94d5c45dd80e1e1c3d2502d2b0c635fc9e321f84b34dec54b4d36c31bf0cdf12 CLSA-2025:1758744098 TuxCare License Agreement 0 - CVE-2025-48797: fix TGA loader buffer overflows by validating colormap alpha, color IDs, bytes-per-pixel, and limiting error messages Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-48797: fix TGA loader buffer overflows by validating colormap alpha, color IDs, bytes-per-pixel, and limiting error messages

0 tuxcare-almalinux9.2-esu gimp-2.99.8-3.el9.tuxcare.els6.x86_64.rpm 0bcc4ae73ebc4a1c18af6a21f270f94145048d9fcce18676e471ff3d50fcbc98 gimp-devel-2.99.8-3.el9.tuxcare.els6.x86_64.rpm ddc5cd0e02dba4d34fc339363c90adde7a209af693af8b5e6aad83153177ae71 gimp-devel-tools-2.99.8-3.el9.tuxcare.els6.x86_64.rpm 68e191736156859a446de9cb39fb879642783d960ca88afe04832e5a58437b09 gimp-libs-2.99.8-3.el9.tuxcare.els6.i686.rpm b785749ced1e1e93e3b4be59d37cbc97b2cbe544c25c34f2aa55be8d0730d274 gimp-libs-2.99.8-3.el9.tuxcare.els6.x86_64.rpm 90f499e7caf7f57662af5e3ddf55d5f3bf0d96443537cdb4f511a8bacd54ead7 CLSA-2025:1758796886 TuxCare License Agreement 0 - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 - proc: fix a dentry lock race between release_task and lookup - scsi: aacraid: Stop using PCI_IRQ_AFFINITY - scsi: aacraid: Remove useless code - scsi: aacraid: Remove unused aac_check_health() - scsi: aacraid: struct {user,}sgmap{,64,raw}: Replace 1-element arrays with flexible arrays - scsi: aacraid: Rearrange order of struct aac_srb_unit - scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with flexible array - scsi: aacraid: union aac_init: Replace 1-element array with flexible array - scsi: aacraid: aachba: Replace snprintf() with the safer scnprintf() variant - Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" - scsi: aacraid: Avoid -Warray-bounds warning - scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity - scsi: aacraid: Replace all non-returning strlcpy with strscpy - scsi: aacraid: Declare SCSI host template const - scsi: aacraid: Drop redundant pci_enable_pcie_error_reporting() - scsi: aacraid: Allocate cmd_priv with scsicmd - scsi: aacraid: Remove redundant "the" - scsi: aacraid: Fix undefined behavior due to shift overflowing the constant - scsi: aacraid: Clean up some inconsistent indenting - scsi: aacraid: Move the SCSI pointer to private command data - scsi: aacraid: Fix spelling of "its" - scsi: aacraid: Call scsi_done() directly - scsi: aacraid: Introduce aac_scsi_done() - scsi: aacraid: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: aacraid: Remove an unused include - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler {CVE-2024-25743} - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() {CVE-2025-38550} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - PM: hibernate: defer device probing when resuming from hibernation {CVE-2022-50202} - net: fix UaF in netns ops registration error path {CVE-2023-52999} - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed {CVE-2023-52999} - usb: typec: fix potential array underflow in ucsi_ccg_sync_control() {CVE-2024-53203} - soundwire: cadence: fix invalid PDI offset {CVE-2024-38635} - drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939} - netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} - wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() {CVE-2022-48632} - net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv {CVE-2021-47459} - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg {CVE-2021-47596} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974} - crypto: qat - fix double free during reset - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - fs/smb/client: Reset password pointer to NULL {CVE-2023-5345} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 - proc: fix a dentry lock race between release_task and lookup - scsi: aacraid: Stop using PCI_IRQ_AFFINITY - scsi: aacraid: Remove useless code - scsi: aacraid: Remove unused aac_check_health() - scsi: aacraid: struct {user,}sgmap{,64,raw}: Replace 1-element arrays with flexible arrays - scsi: aacraid: Rearrange order of struct aac_srb_unit - scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with flexible array - scsi: aacraid: union aac_init: Replace 1-element array with flexible array - scsi: aacraid: aachba: Replace snprintf() with the safer scnprintf() variant - Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" - scsi: aacraid: Avoid -Warray-bounds warning - scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity - scsi: aacraid: Replace all non-returning strlcpy with strscpy - scsi: aacraid: Declare SCSI host template const - scsi: aacraid: Drop redundant pci_enable_pcie_error_reporting() - scsi: aacraid: Allocate cmd_priv with scsicmd - scsi: aacraid: Remove redundant "the" - scsi: aacraid: Fix undefined behavior due to shift overflowing the constant - scsi: aacraid: Clean up some inconsistent indenting - scsi: aacraid: Move the SCSI pointer to private command data - scsi: aacraid: Fix spelling of "its" - scsi: aacraid: Call scsi_done() directly - scsi: aacraid: Introduce aac_scsi_done() - scsi: aacraid: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: aacraid: Remove an unused include - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler {CVE-2024-25743} - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() {CVE-2025-38550} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - PM: hibernate: defer device probing when resuming from hibernation {CVE-2022-50202} - net: fix UaF in netns ops registration error path {CVE-2023-52999} - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed {CVE-2023-52999} - usb: typec: fix potential array underflow in ucsi_ccg_sync_control() {CVE-2024-53203} - soundwire: cadence: fix invalid PDI offset {CVE-2024-38635} - drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939} - netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} - wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() {CVE-2022-48632} - net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv {CVE-2021-47459} - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg {CVE-2021-47596} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974} - crypto: qat - fix double free during reset - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - fs/smb/client: Reset password pointer to NULL {CVE-2023-5345}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 39dc761d71334a02ece9a7491d5ce8c898dda159dbb6235adcee1ad3e49aaa13 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm ea7feae0518265e37ce3abbd6edea4ce47e143a29536574d084d41a29b751e8d kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els20.noarch.rpm f79512053e055fe6808d4545993d6d74b7e3731232a293af2af1e9b5918ee419 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm fdacee84fb9064a5a44b919302169bdc6d18666924c73b6bfc1ef8d7545ef0f3 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 3fe86648a53fefce7addf575c18196f890c6f7b34e69c9195732bdedb5d03950 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 00c7499368f581d521b8363ce95aef74ff0c949a8d760599c62331c9c437d59f kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 8e5a45620ba45ee1ab5d0f75f1418306061c2010234b81b7161543d8fe4780d7 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 6087325a76ed5e3eb5127cfc9ee21907bfdc3847f5af26fd85d241ac7fc39896 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm dbd087c53dffa324b6fbe1f258a3f12a1094cb621519f7744222c29018669e13 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 161d1ef669d3275fcc5795257be17861b74da3e66175652cc8fed7defbb59e2f kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 34a9a56696bc5d01191c17642260698eb197e916cc7952d8160d9c1730154387 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 21c256849039a7953ff2e2be9b2541c63015f33523351200b088b70876f0e0a6 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm d0e5e31f9f0707364c0b6dd4c1ac86aa6ba65f095e2fedf618de855550c4e61b kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm f71dbdc3cd192b737f8d9a19d116af10a49559200457f1545f4cb2f57ac827c1 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 07f7b2004ff3fe0e59e68a84d83ca3cf0c236df0f3f03c4db7c17136b5ec5ee5 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm fd86caa4a08167ab96b65a2a8d8603298524acf9ed28c703b6983fcfc672634b kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm a35d555b44f70a0a0e6e918456c2365bb77b51d33b80aff325af5c8e85d54601 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els20.noarch.rpm bf93f17dc4d2ffef47e50ec883ef40e9343dd27bdb8a0e77892e153a736784b6 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 4d8b9fe1426673d8154e9d7b628c1f36c08d9692ae6aa28855d964797d57039b kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 90d38739e853faa6c515b4bd309c2e3b3dd2112ae8816bb80481fbde7ebe67a8 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 7cdb298748d9cbcaf34be33fb2a74ae6caadadb1eb6f6f32089027961b075c66 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm a4bae28b9a86231d09b8fe945cf37e872677a42b54d6358c9c6194d6032fc35b kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm f6f39b8d1aff3f673c93765140b9f8e1c6a3eefea8b4ee507ebb960d63987b43 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm d6b44ad9e9a1824e0c3bab76b5263810adf057ef253ffe776bb4a55e8140b8c8 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 5b718d5718a8dcf628be2032fed8e315a05c534dd003161fcafb7cbceaf73453 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 2f59e037aa47043068da27050be1ba6df2406e90385130e7819c7c20ce268f0d kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm f40f7255b637f0c6020f9f0cc15c47cead73ad6972f0abf3dbe584e507658fa6 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 9f9dd3f4e766870a8754286482e90bf07066120e78acf91c9ee5e10fd8f2cc94 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 93eeb8eae382b05ff5d7e2abb68162f9618153e557e8bfe5efa9e85997672bb5 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm ee3fe741741fe1594373183e021fba308ec3708c2b5c6e8b728fbd34665c97a5 libbpf-1.0.0-2.el9_2.tuxcare.7.els20.i686.rpm 08bd792de134c9a0c8cc46348c6777bf55d59d758d009658af7a3b74c7ab39e8 libbpf-1.0.0-2.el9_2.tuxcare.7.els20.x86_64.rpm 7b0ee526605f598fdc0505e0b41823718a20437a08b548b5ee142ac0b3995d9e libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els20.i686.rpm 40d29e3d16e4252e9d638498346f0d84de693100f6ea6c121964e0ae9a5ed86e libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els20.x86_64.rpm 5391fcb2a278ad95a0b351ec75d0c258b8e267f5e3ea7dba3a5a6761ad5b81c0 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els20.i686.rpm 13c95f4ee10cfcef2576e318a13fabdf9b68d6307d1bdff26a9d6d84bd768aaf libbpf-static-1.0.0-2.el9_2.tuxcare.7.els20.x86_64.rpm ef1fe4bbe5d8e6e39912c4e767b4443cfb6e52a2bad3b49273c6e7807241638d perf-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm eb3e78a66ce61a8e64018410c4b037dc41e7754830d1f6db6686f58a9d838fd5 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm 6810b4c88777b6d121b87ca955006531586a5deaa8d11660d8ac9dab7582d51c rtla-5.14.0-284.1101.el9_2.tuxcare.7.els20.x86_64.rpm aa41fadd4f7c0f4b40c641de45e9355b0a0d3251782936d06d28fa5cb622f6fa CLSA-2025:1758823373 TuxCare License Agreement 0 - CVE-2025-8176: fix use after free vulnerability in get_histogram function that prevents proper scanline reading and processing in tools/tiffmedian.c - CVE-2025-8177: fix array overflow in thumbnail generation that could cause buffer overflow when processing malformed TIFF files in tools/thumbnail.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8176: fix use after free vulnerability in get_histogram function that prevents proper scanline reading and processing in tools/tiffmedian.c - CVE-2025-8177: fix array overflow in thumbnail generation that could cause buffer overflow when processing malformed TIFF files in tools/thumbnail.c

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els5.i686.rpm 7b5d40f6da94b2174046c9cb30a7597a3b125ef01ca440b6625f46b17ceee52b libtiff-4.4.0-8.el9_2.tuxcare.els5.x86_64.rpm 4b5493b50cc0e7f49c0275abd52fd7bf727c6f3b5466083fff2cbccec5942e92 libtiff-devel-4.4.0-8.el9_2.tuxcare.els5.i686.rpm b6f858744feb3b5e2fca41adff8dc91bb609c9ddf0cb6fcfde8831e28a2a4cff libtiff-devel-4.4.0-8.el9_2.tuxcare.els5.x86_64.rpm 476821ef9fcd09c6e8f54b471981dd2f378cffc60eea31dd792ef2daf28af9c6 libtiff-static-4.4.0-8.el9_2.tuxcare.els5.x86_64.rpm 84219491fef450f5e5716bd46e6bf12cd27242858be9b66d60e214996188414d libtiff-tools-4.4.0-8.el9_2.tuxcare.els5.x86_64.rpm 22407bd2ab4afd0b49612da2a3616985e36e750d49b844fbce9905803166f457 CLSA-2025:1758823952 TuxCare License Agreement 0 - CVE-2021-43612: fix out-of-bounds heap read in sonmp_decode function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-43612: fix out-of-bounds heap read in sonmp_decode function

0 tuxcare-almalinux9.2-esu lldpd-1.0.4-10.el9.tuxcare.els3.i686.rpm 8a89929a113a33baeab8ccd17063692421842e68a8da85432b12ceba146d442c lldpd-1.0.4-10.el9.tuxcare.els3.x86_64.rpm 53c75ae372cea75e61c96ad635196efc3c3ba78b2269e3366f6850cfae4b3ba8 lldpd-devel-1.0.4-10.el9.tuxcare.els3.i686.rpm ae75b448a81e4adb1270bf97070d3775c43f5c466ecb7ad2162c9479ce0f38aa lldpd-devel-1.0.4-10.el9.tuxcare.els3.x86_64.rpm c286e177e685b817b4539698d83df2bdad2517e2080f5874760b4c76ef7397b9 CLSA-2025:1758824659 TuxCare License Agreement 0 - CVE-2022-48622: fix heap memory corruption issue in ANI decoder to prevent denial of service or code execution attack Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-48622: fix heap memory corruption issue in ANI decoder to prevent denial of service or code execution attack

0 tuxcare-almalinux9.2-esu gdk-pixbuf2-2.42.6-3.el9.tuxcare.els2.i686.rpm d676e76730564555160fc58e6f758728a9f602b2778df9ad17217756ac3882ab gdk-pixbuf2-2.42.6-3.el9.tuxcare.els2.x86_64.rpm 0d6a4bf0b9c9881b5c2acfd3ad53b772d22064750df7656cf15dcaee2a4dd2a3 gdk-pixbuf2-devel-2.42.6-3.el9.tuxcare.els2.i686.rpm 99cbc1d18b06c8a255c86c056bbd0231024421a325516cb7559d9c97ad9d99fb gdk-pixbuf2-devel-2.42.6-3.el9.tuxcare.els2.x86_64.rpm 252982ec6b953005a9da9bfabd4301d3ee5112f69a62045b50a68177e32a6a67 gdk-pixbuf2-modules-2.42.6-3.el9.tuxcare.els2.i686.rpm 7dd5992898bb2a9ed4a87541cc5e41dd0550d90f1c1c4970fb618ef15fdcdfb9 gdk-pixbuf2-modules-2.42.6-3.el9.tuxcare.els2.x86_64.rpm 69832edfd2ba65de3dd2adb4b35ca52a1974507f8e3e61962fb041c323b94838 gdk-pixbuf2-tests-2.42.6-3.el9.tuxcare.els2.x86_64.rpm 6bbbfc71ab52ad3b5278b77cff9babee2f14b09b84085365fff066dd67b8945a CLSA-2025:1758825546 TuxCare License Agreement 0 - CVE-2025-48798: fix XCF loader use-after-free issues by properly managing layer/channel resources and ensuring safe cleanup during parsing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-48798: fix XCF loader use-after-free issues by properly managing layer/channel resources and ensuring safe cleanup during parsing

0 tuxcare-almalinux9.2-esu gimp-2.99.8-3.el9.tuxcare.els7.x86_64.rpm 0aacd6d0f451fa47b24b5998800768359525dfd3a650da14298eeb4675aaa6da gimp-devel-2.99.8-3.el9.tuxcare.els7.x86_64.rpm b582c469a455cf2f8868b957b2aec3237bf8c18704a732b67cd43c909216c57c gimp-devel-tools-2.99.8-3.el9.tuxcare.els7.x86_64.rpm b0e963eef5f37dedf6836eacbc6da045bea190545142b2bb8b8d9ee80dc5f570 gimp-libs-2.99.8-3.el9.tuxcare.els7.i686.rpm d76c548ef39c81818bd61857d82ec8285d33df0ccf2a2745ef2298f232c1f079 gimp-libs-2.99.8-3.el9.tuxcare.els7.x86_64.rpm 4a0af54e2e5b7cf00cde2e80d00bf34c8f0d2b953c12486bdf7919162071800f CLSA-2025:1758916320 TuxCare License Agreement 0 - CVE-2025-58060: fix authentication bypass with AuthType Negotiate Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58060: fix authentication bypass with AuthType Negotiate

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els6.x86_64.rpm ba6e1a4670837de8fc766808c39d095c3e24d353a9789ee73defec6b238a3ca6 cups-client-2.3.3op2-16.el9_2.1.tuxcare.els6.x86_64.rpm ac0618159e0445c1a19f17395e08e05c36c8e096253047c5cdabe745eb144f32 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els6.i686.rpm 1d0cdab0375c1f9b2d90534a923166226bbf6a2752e638b9c1e9a884aa7faa21 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els6.x86_64.rpm 7ef9fadfe6ce002bc4c9c408bdec96b538d2c5c3db5781bcba81a2906d27a464 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els6.noarch.rpm 51f9855607c56e0b998a7ea2f68681fd668f88e4ca9b31f6b08239c566d023d5 cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els6.x86_64.rpm ce54e61cb064a1124d53f5dc2601b0e9c5fc649e5b8d77914f96db809abeb161 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els6.i686.rpm 1e9e40e737db922f27649781abeef4454f472fdab28d224f05a2db8eafacb6c3 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els6.x86_64.rpm 50d678e596f18604a97053aae08d49f0d3f6e7ca2403e80580ff13b540e1b533 cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els6.x86_64.rpm 23df6472ce34b75f932d70eec4dd81d866def948a7b7d23db0ea0daf289d5f3e cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els6.x86_64.rpm ace329586edc5948d1611c0cb34b1356dd2a2f97543c100d10aabc2e51cd91b8 CLSA-2025:1759247437 TuxCare License Agreement 0 - CVE-2025-32990: fix memory corruption in when parsing a template file - CVE-2025-32988: fix double-free vulnerability in export logic of Subject Alternative Name (SAN) entries containing an otherName Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32990: fix memory corruption in when parsing a template file - CVE-2025-32988: fix double-free vulnerability in export logic of Subject Alternative Name (SAN) entries containing an otherName

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.4.els1.i686.rpm 5e64ab6369c2e77d51982f7284dafedeb4e100fdb52b6033c14eb73a0a34583a gnutls-3.7.6-23.el9_2.tuxcare.4.els1.x86_64.rpm 3ec4fce8430c7c00cb36b6ddebe69386a6360b12d2f9c5832e54a8dc09de8553 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els1.i686.rpm 131942208042e99822d470f4ef0c49438f925447a391081f9a1ffb462b97df65 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els1.x86_64.rpm 706b3e0173bf7b4ed9f7a409394a602a9793d1762c795e635d99616c48b9fc8e gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els1.i686.rpm bdaf0448ea44f1d0f04af75f83428ac22d9b029565d553b16257a0626d3d408e gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els1.x86_64.rpm 2e9eebb89ff641b37b6ac35ba4387cb319d2f04d8748fccfa05f3ae44f4acdf6 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els1.i686.rpm 15a3570c2de03c50c4c0b14b4f6b53e670bb385fcdb3f94a33d741a7b30c0bf3 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els1.x86_64.rpm fc1b6c9f36b97a1d0143a2f44cb6eb363cfca7afafc7f8c8a72f1bbdab34e458 gnutls-utils-3.7.6-23.el9_2.tuxcare.4.els1.x86_64.rpm f4c58d88ac2febe60d73bd2bfdce53babe8c2019f184a5bb26c0d0f6fb3ff2ab CLSA-2025:1759411642 TuxCare License Agreement 0 - CVE-2025-9714: preserve recursion depth across recursive calls to prevent stack overflow in XPath evaluation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-9714: preserve recursion depth across recursive calls to prevent stack overflow in XPath evaluation

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els11.i686.rpm 7530df8bb3de25f1a5551b66b53fb9ff523a6c518f0b7607b01027847bf76143 libxml2-2.9.13-3.el9_2.1.tuxcare.els11.x86_64.rpm cc2790e433cc8c8cd8a4c9489799db85f41ec5be7223b65711da72d7b7fb8a79 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els11.i686.rpm 9c8d544ae8bf075acbc0cff897bb7a4fcaaaf39a2499c385f9971dc2fd04c8b6 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els11.x86_64.rpm a248012600b5721d53757865a3f1a0eb090754c7156fb6b7c73732895c086f76 libxml2-static-2.9.13-3.el9_2.1.tuxcare.els11.x86_64.rpm ffac763ac71ff6b24edb9ac265afe6427a36ae356900a52a5e30f54cde9ccc44 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els11.x86_64.rpm 21bf015dea2904118ed04372e50b095615569938bc6077541bd0f447e0ea87e0 CLSA-2025:1759413150 TuxCare License Agreement 0 - CVE-2024-31047: fix denial of service issue in convert function of exrmultipart.cpp Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-31047: fix denial of service issue in convert function of exrmultipart.cpp

0 tuxcare-almalinux9.2-esu openexr-3.1.1-2.el9.tuxcare.els2.x86_64.rpm 6b1450065d00623324b96166ec8f019a3a87ab9ee2e1e3c49a4d658103779768 openexr-devel-3.1.1-2.el9.tuxcare.els2.i686.rpm eedfd40acf862131a5807735f8842a50f9befe5c89d34071a18559c2412a3aa5 openexr-devel-3.1.1-2.el9.tuxcare.els2.x86_64.rpm 15f6bc0853e90b6c48de3839686faff40b589af8cba0f4a34b510754d7eb2a0d openexr-libs-3.1.1-2.el9.tuxcare.els2.i686.rpm 9e878611282832da34be76163fd5e562186b72c4158da008c27a8ec14ce38c43 openexr-libs-3.1.1-2.el9.tuxcare.els2.x86_64.rpm cb61c0682bb1c48a5af7a71f5bed2c1e5a35c0a18b07d91536c2f8ead840d149 CLSA-2025:1759496747 TuxCare License Agreement 0 - CVE-2023-31486: fix insecure default TLS configuration Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-31486: fix insecure default TLS configuration

0 tuxcare-almalinux9.2-esu perl-HTTP-Tiny-0.076-460.el9.tuxcare.els1.noarch.rpm 102e6a67e5b22950aea371d997809bb3a50f7c5c3136de92e133950091f4670a CLSA-2025:1759497192 TuxCare License Agreement 0 - CVE-2023-31484: verify TLS certificates when downloading distributions over HTTPS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-31484: verify TLS certificates when downloading distributions over HTTPS

0 tuxcare-almalinux9.2-esu perl-CPAN-2.29-2.el9.tuxcare.els1.noarch.rpm 642464dee0d8375cddfaf6148533ccde8c4fcde915b221168ba21e08e4b6dcd2 perl-CPAN-tests-2.29-2.el9.tuxcare.els1.noarch.rpm 5192f61bc659dbc9348d94da8611d270b3db3af74c3c698d78d619b2aaa08c98 CLSA-2025:1759498325 TuxCare License Agreement 0 - CVE-2025-8837: fix use after free vulnerability in jpc_dec_dump function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8837: fix use after free vulnerability in jpc_dec_dump function

0 tuxcare-almalinux9.2-esu jasper-2.0.28-3.el9.tuxcare.els2.x86_64.rpm 86daba8547d8aa95e2912c33fd1d02682810f3dab7e3a39f479ae807ea2b1152 jasper-devel-2.0.28-3.el9.tuxcare.els2.i686.rpm a84edd2134484c2e4adcfb8c116ae3de69566f6ecb922d469a0ad51ef5825780 jasper-devel-2.0.28-3.el9.tuxcare.els2.x86_64.rpm 3530f543c8d1fda65ea9150517373382aab74fbba5feadd6afa1aa1219ee2f38 jasper-libs-2.0.28-3.el9.tuxcare.els2.i686.rpm 5604be3071a1bac98ca94b0e2d1661a545ee38d97443bbd3efdb97708d56cd65 jasper-libs-2.0.28-3.el9.tuxcare.els2.x86_64.rpm b0f63736ea581a4157de96192a7c659ceb6adb0c0eb14d0a447949535551eb07 jasper-utils-2.0.28-3.el9.tuxcare.els2.x86_64.rpm 693401d55ee017863e71c5653c0062d6e5a59f48fe64c787d1d7e6e2c7991069 CLSA-2025:1759505734 TuxCare License Agreement 0 - CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els4.x86_64.rpm 3d96da52c57ab8be36e0e3bb0f89fb2e6d26698df236ee5922c3aa199da1b7af podman-docker-4.4.1-13.el9_2.tuxcare.els4.noarch.rpm 492935d7c69ef0aab5a132fef8b140e4dc5b0693930e71e8d1986d85c6019a44 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els4.x86_64.rpm 2d789b659ac39eb9bfe4b1dacf25659205a4f71c7e387dfa96dc5bbb24087f53 podman-plugins-4.4.1-13.el9_2.tuxcare.els4.x86_64.rpm 204989ef83b51e16af139297818079500326a21b401bd74af3d65d1ddc00802e podman-remote-4.4.1-13.el9_2.tuxcare.els4.x86_64.rpm 484c7a3e2101cbc5709ad9ba0218b2ca2f3ff8d5b5487f411b24b87ca034cb40 podman-tests-4.4.1-13.el9_2.tuxcare.els4.x86_64.rpm 4c67f3786aefb4030f213fb628dd0e060991860985ad7851baa0492661d7eec5 CLSA-2025:1759784438 TuxCare License Agreement 0 - CVE-2025-4207: fix buffer over-read in GB18030 encoding validation to prevent temporary denial of service Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4207: fix buffer over-read in GB18030 encoding validation to prevent temporary denial of service

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els12.x86_64.rpm a46cc74198e25ebf109f7905858ba88a540c58a4566066ac73bcc85c83066e8f postgresql-contrib-13.11-1.el9_2.tuxcare.els12.x86_64.rpm 7b9e20f68e17a80082828a3be6faddd2e3b0fcf6a6bd62a60a373f8df74626f1 postgresql-docs-13.11-1.el9_2.tuxcare.els12.x86_64.rpm 2f8efbc8ebd35ea5a14a9160c01bb6276473e91f37da819cf71e14b9114ab184 postgresql-plperl-13.11-1.el9_2.tuxcare.els12.x86_64.rpm f8f5554d70aa0d3f69406a329f5d9351458cd75f8acf2a71f3eca268f4f07785 postgresql-plpython3-13.11-1.el9_2.tuxcare.els12.x86_64.rpm c11435cb71f181aa936826c2138693157e03dfc721d0e693cc42f389375cb6f0 postgresql-pltcl-13.11-1.el9_2.tuxcare.els12.x86_64.rpm 49f3f5784fe232853dcdfad36a1d80b57c02c5fa2363e795cf1fb48f3567ce89 postgresql-private-devel-13.11-1.el9_2.tuxcare.els12.x86_64.rpm f0e4931807ddbf8ad5dc39f5e875469f7d6be434930547ae84e42d672c9f30fa postgresql-private-libs-13.11-1.el9_2.tuxcare.els12.x86_64.rpm eb6ceb89e2b949bd2842cabbd7c83d1d143d600d954d5d724dad109b11a1fb06 postgresql-server-13.11-1.el9_2.tuxcare.els12.x86_64.rpm 68bac846a103e29890d7cf5d84a8cd074dbcd638d8620145105a4db28b3eac98 postgresql-server-devel-13.11-1.el9_2.tuxcare.els12.x86_64.rpm 297a5c5d58b507f5b73149429e1ff48cbad231345d261c70e653a49381022b60 postgresql-static-13.11-1.el9_2.tuxcare.els12.x86_64.rpm 5a1d6a462112d341f6616f06a23eb9b8063752b5a8f574cfb0e9689fc9d26e10 postgresql-test-13.11-1.el9_2.tuxcare.els12.x86_64.rpm 2013da4b3cc1b8a018e16114b02361feba146d1a7210ac3b98f6b4692ce703da postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els12.noarch.rpm 73d053580bf094813eb00388d3475f4287fa322918e754b29e96bf3bb506ee45 postgresql-upgrade-13.11-1.el9_2.tuxcare.els12.x86_64.rpm 9c1c18df0ef13b02b46fba1fd3ee5c7460093f43b7d394d9b01ece9e875a334b postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els12.x86_64.rpm d7705860ab518fdbfe528da305add34a6fd3bc5e1d8def712d20f86a4ad3904d CLSA-2025:1759865335 TuxCare License Agreement 0 - CVE-2024-13176: fix timing side-channel in ECDSA signature computation vulnerability Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-13176: fix timing side-channel in ECDSA signature computation vulnerability

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els3.x86_64.rpm b0a034a12d8934a493e5c691830d34fa86d0cb4f8ddadba4cfa3b54fae875076 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els3.i686.rpm 0edea2fdbb3a6f2c1e7e93f9ccb1fe8556c405784427a7769b4be5c4c9e4dd66 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els3.x86_64.rpm 759b131913c16c03bca01cd0dc720bf8083a765236a94e14965fe437c9e6f0af openssl-libs-3.0.7-20.el9_2.tuxcare.1.els3.i686.rpm 3b7147e81742f6818d1360990f6693d9faeaa7ed9f504cc0edaabee034b3babd openssl-libs-3.0.7-20.el9_2.tuxcare.1.els3.x86_64.rpm 6162e98ff2b7d569ba97e97e3dd23849f88ee9f1a68fdba36aae73f5510e35fb openssl-perl-3.0.7-20.el9_2.tuxcare.1.els3.x86_64.rpm 5ae53f1392bc0c3e1eb0e303d19341cb8a709ae034ea5852542b8e25d67fe024 CLSA-2025:1759866837 TuxCare License Agreement 0 - mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832} - mm: fix zswap writeback race condition {CVE-2023-53178} - dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - gpio: davinci: Validate the obtained number of IRQs {CVE-2024-42092} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - Bluetooth: hci_sock: Fix not validating setsockopt user input {CVE-2024-35963} - Bluetooth: ISO: Fix not validating setsockopt user input {CVE-2024-35964} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} - wifi: mwifiex: avoid possible NULL skb pointer dereference {CVE-2023-53384} - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request {CVE-2023-53380} - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343} - thermal: core: prevent potential string overflow {CVE-2023-52868} - drm/amdkfd: Fix shift out-of-bounds issue {CVE-2023-52816} - drm/vkms: Fix null-ptr-deref in vkms_release() {CVE-2022-50369} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail {CVE-2024-40940} - ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - platform/x86: wmi: remove unnecessary initializations - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - kobject_uevent: Fix OOB access within zap_modalias_env() {CVE-2024-42292} - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() {CVE-2023-53401} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - drm/radeon: possible buffer overflow {CVE-2023-52867} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - wifi: mac80211_hwsim: Fix possible NULL dereference {CVE-2023-53209} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - wifi: iwlwifi: fw: fix memory leak in debugfs {CVE-2023-53422} - drm/amdgpu: fix memory leak in mes self test {CVE-2023-53370} - skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354} - md/raid10: fix leak of 'r10bio->remaining' for recovery {CVE-2023-53299} - nfsd: call op_release, even when op_func returns an error {CVE-2023-53241} - ppdev: Add an error check in register_device {CVE-2024-36015} - wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields {CVE-2024-26882} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832} - mm: fix zswap writeback race condition {CVE-2023-53178} - dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - gpio: davinci: Validate the obtained number of IRQs {CVE-2024-42092} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - Bluetooth: hci_sock: Fix not validating setsockopt user input {CVE-2024-35963} - Bluetooth: ISO: Fix not validating setsockopt user input {CVE-2024-35964} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} - wifi: mwifiex: avoid possible NULL skb pointer dereference {CVE-2023-53384} - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request {CVE-2023-53380} - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343} - thermal: core: prevent potential string overflow {CVE-2023-52868} - drm/amdkfd: Fix shift out-of-bounds issue {CVE-2023-52816} - drm/vkms: Fix null-ptr-deref in vkms_release() {CVE-2022-50369} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail {CVE-2024-40940} - ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - platform/x86: wmi: remove unnecessary initializations - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - kobject_uevent: Fix OOB access within zap_modalias_env() {CVE-2024-42292} - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() {CVE-2023-53401} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - drm/radeon: possible buffer overflow {CVE-2023-52867} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - wifi: mac80211_hwsim: Fix possible NULL dereference {CVE-2023-53209} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - wifi: iwlwifi: fw: fix memory leak in debugfs {CVE-2023-53422} - drm/amdgpu: fix memory leak in mes self test {CVE-2023-53370} - skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354} - md/raid10: fix leak of 'r10bio->remaining' for recovery {CVE-2023-53299} - nfsd: call op_release, even when op_func returns an error {CVE-2023-53241} - ppdev: Add an error check in register_device {CVE-2024-36015} - wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields {CVE-2024-26882}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm ea9cc09a961585ff2a9dc9e7d6d3e7a88b9b004ca9e6c8f289de3211761fafa7 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 5280d6077ffe415ece5c8ce09daaa48944c7579c6bc816884ad71a4c6154ec12 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els21.noarch.rpm 5a20ecf3cf2d0e526b27fbc016cfb81ec2ee860096a4c7a7e5013f5d7dd330f8 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm ca6ef396168a1098d1ba822fe01bda343d37b32fbba3bf8948fe4d73a71b7746 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 91cda85b71ceb37144138b14c82a423d7d4e994e781c61fdbb79e431264e1692 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm fb77f48d478a4235b6aba50bd00ecc3b6f008f48742662ca53d76d9272bf2e18 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm c9db1792ef319199c3c05b0e918cece59286e6d778d94bf70269c137d31cbfad kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 988994ea38e2df82b3b67aa385dbeafbe1fdc13e7176ebae72f54adde2158e35 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 5f573beb6a2e5b2b794424e78e54c9744494fc0917ea329d4cdc3c5cf3942b69 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 0fc83fb7e122f25f38bdcde8bbedcef1a064b7ff1370bf4bf605ab19ef786d33 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm eee6db15c52917f428911a545a33555649bc0d6329834b2295321863ecbd4318 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 9f788d7b628097d01d8788f5e6f8e552a18dd4863f809748d6b7676cac7acaef kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm d03a1ac35b091fd9fa600f9200900024c477760e229d04fd7da974031789373c kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm aa77b110f5332bdfc71ae543f7d2775d990f3b48abf5a117e51bf29151e196d9 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 644aad4974223f461cf6bae0d497e9ca1139c8771fcb420c469ad81485dfdfe7 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 4adec118587ced8299942d32d5548ca9641a6666f63c7048e313c46b08c8e1b4 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 650d9cf08222964f90ab31f381064750a0dab0625f5ab6027dc2f0e9639e8551 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els21.noarch.rpm bd1cd0de304f206f1ceb43f63ca5ff8da69f37d7d6c102853aaf872a4ce962a9 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm f747b1a71b288c2e395f77c9b44e77693d7db621a6a56c907da149c74112d6f2 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 515386f66afd23e1b47697e1f9a79fe667f011c6c29e5eff9a53bf1eea120ed4 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm e254951f22373cfe8447ebde9ade545d37a1bb3a5708fb94865905b7fbef7856 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 41ce36e91731499baa904997c5ee9389fdcfbd051000c6bdb4590b2253fffad0 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 184d1daa29c0126775233a81f087505ebc5eaa56b5dd067c00afdb2a6847677a kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm a940a976852b07915dbd7b35f0ed4ad2be9293007945b63770849bf710f11073 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm d983004ceb1b02d5ff8157eba7d337977be2a7d04d5550d0e02d34d8083e8b84 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 7bc503cef9c11748f5d309bde97040956ab9a511f8ff0313b6a3156c822492dc kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm cc897cd354f0f6972fb1f3dfde5a3c02a22b65fe966cca8d604c9a4191ca3639 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 605263b2dd48a068aadf948709b22d894e5191ffd44abc1245f0666908e44c13 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 7cbf2f017164c98c4c74d3828c64f56b1a2df4a2ca7d07bbefdd097296f00c15 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm ba6af4f960933ea2a2e1ca5cd1ef283e7658e0e5ed9a3255bc4218297769629a libbpf-1.0.0-2.el9_2.tuxcare.7.els21.i686.rpm 7ebbde2c95ef0578fbd4c3eb1c265aa9ae51229178b5abcf9a6f72214a1540ec libbpf-1.0.0-2.el9_2.tuxcare.7.els21.x86_64.rpm e5fe7d56761d10d9633b622f78d77af9edc387e5b468542d64efa63ad2a078ab libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els21.i686.rpm fbc7e5859412f0de0963a46ce3cd20d8594968236dd0effdc7c667e2274d49cf libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els21.x86_64.rpm 801f28e850173a3a223bb1947fcb9c88aef700bd531c3ffb23e80c127c0732dc libbpf-static-1.0.0-2.el9_2.tuxcare.7.els21.i686.rpm 6d5e77345a16ad80cb8a30314f638b93a8f291664a6db300a4f80e4d2b5bee38 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els21.x86_64.rpm 89ef5b337c63eb1888772429294c06fd6335a44af310a53d56f6986469ac6005 perf-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm a5d2f24360f7e1abe70f7bb43f08266d4ddd30c911cde074a7a7a95d299eee37 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 355e4a8c96a7796006e6ff7aae28dd2dc72ea071f59e06c1026f982107e768d8 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els21.x86_64.rpm 49c779d92eeeea269d5108798ecbf365e167214a9c1489d9d5ad2a25c21c4914 CLSA-2025:1760018787 TuxCare License Agreement 0 - CVE-2024-11584: fix systemd socket unit permission vulnerability to prevent unprivileged user from triggering hotplug-hook commands Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-11584: fix systemd socket unit permission vulnerability to prevent unprivileged user from triggering hotplug-hook commands

0 tuxcare-almalinux9.2-esu cloud-init-22.1-10.el9.alma.tuxcare.els2.noarch.rpm f3384f9dcff817b22f18cb728cfa1bc882dac4ea24564b56b0dbf8e98f946c43 CLSA-2025:1760019942 TuxCare License Agreement 0 - CVE-2025-8836: fix manipulation in function jpc_floorlog2 to prevent reachable assertion Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8836: fix manipulation in function jpc_floorlog2 to prevent reachable assertion

0 tuxcare-almalinux9.2-esu jasper-2.0.28-3.el9.tuxcare.els4.x86_64.rpm 6e58993001cd55d29be46d743679e35fe34f1d0f13f73ff438d0e5d6dd7bc33c jasper-devel-2.0.28-3.el9.tuxcare.els4.i686.rpm 9d4ab599b0b952b14d4d50bbc1d416648b2768f60c2f8a0c298a73979310662d jasper-devel-2.0.28-3.el9.tuxcare.els4.x86_64.rpm 1f4bcfefc7039ddce1f47a0e6d9d25aec81ae48a97200d82a5d1df60b5ed4ef6 jasper-libs-2.0.28-3.el9.tuxcare.els4.i686.rpm f92448f1dc03ef160a9ac64fc4d7b409b6381e89dc131fa4dbc1af78eed418e4 jasper-libs-2.0.28-3.el9.tuxcare.els4.x86_64.rpm 1a6f5f90d5eecabe5766cf8873d59f349060c57a68bba4ae04b1c8e45923cfec jasper-utils-2.0.28-3.el9.tuxcare.els4.x86_64.rpm 2e60acf3726b65e291b6bca81cae55ce4a0b088aca4ecbd42e8a2d89c5683f68 CLSA-2025:1760021057 TuxCare License Agreement 0 - CVE-2023-22745: fix out-of-bounds access in tss2_rc layer handler Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-22745: fix out-of-bounds access in tss2_rc layer handler

0 tuxcare-almalinux9.2-esu tpm2-tss-3.0.3-8.el9.tuxcare.els1.i686.rpm 8fb6c2f22109ed2de3b96f90ef1816d2ce8908ca18b7015949a83092797ebdbd tpm2-tss-3.0.3-8.el9.tuxcare.els1.x86_64.rpm 70a1527f7d4262c4028318ef2908816d2a6c4c685801e14028a676fdb35e2d42 tpm2-tss-devel-3.0.3-8.el9.tuxcare.els1.i686.rpm 0fbe19f01a4f68103eca78e0f1c73988e0c8333531c81a73cb9836a43d6bb6e0 tpm2-tss-devel-3.0.3-8.el9.tuxcare.els1.x86_64.rpm f764409a78036c4a522ce7344419fbc0c5a7ab8ec6a86b16c511656c89d3c408 CLSA-2025:1760021660 TuxCare License Agreement 0 - CVE-2021-3750: fix for DMA reentrancy use-after-free - CVE-2023-2680: final fix for CVE-2021-3750 - CVE-2023-0330: fix reentrancy in LSI53c895a SCSI controller Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3750: fix for DMA reentrancy use-after-free - CVE-2023-2680: final fix for CVE-2021-3750 - CVE-2023-0330: fix reentrancy in LSI53c895a SCSI controller

0 tuxcare-almalinux9.2-esu qemu-guest-agent-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 91fe53215b3e86262c26a338ed56e45f90833ebbbb35316f8d4e51831fec591f qemu-img-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm d177e7fb8087a6a1d57dd4135be9634f60aa4ca511e01c3037964796d275d7da qemu-kvm-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 42638e2289a76c81d5140503e0bce38679721b2ddf581166094528264b4d87dd qemu-kvm-audio-pa-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm a3b7c76d6c846b0c62e3b43720b910835ca2f41f9747916470a7afa73f7bb22b qemu-kvm-block-curl-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 716e01896193a76232f2936735f2a4bbc922d6e6181c0ab70e02f0f766158bf5 qemu-kvm-block-rbd-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm da67511915029db455d716e9dc4cf8b6d407622a026caa5b9f673768e9f259dd qemu-kvm-common-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 33ad5d1d81f0d3a324fd7c73c3114d5c2b5b393871eba85c115fec17e09e5690 qemu-kvm-core-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 4625db1462bb85e83b3bf679091855c31ddacd9159cbd1cc3ebbef63d27ed7b6 qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 6ffc099c02af8350a2ee7259c7326af313ec7e8f6495883813df10aa577daca5 qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm ea39c1af900a9bee0efb528e2a96629e513292d5b0f7dd63c657c94be59286b1 qemu-kvm-device-display-virtio-vga-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 7aef3aa8925c3d17be91aa68bdb1c4e548a2c6038be28998ede7ac21a6bd6ae1 qemu-kvm-device-usb-host-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 202a8628b9213d0bc650a2f20022cca1d6ae350394f9775d51cb5892d149f019 qemu-kvm-device-usb-redirect-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 25efb96d78fb29a4286dd93295d26e940da93d6f54d9a68c523dd7ea905853b4 qemu-kvm-docs-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 8a18e45ec353896717a61575d3736485a44c5b1432be9b09d28e3238fad3f089 qemu-kvm-tests-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 5fbb5247ae0d626b65eb87a8a87aa5e34b7dae03bd8ba6f068fa8741686a18ae qemu-kvm-tools-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm c40202ef843b084274d5c2d79250004ce5f3cff97bda4885f300da0740bb3a0e qemu-kvm-ui-egl-headless-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm abc49da8dbe822d67c9a2ab93225eb9f2789aba2a6becfd2fd5b5e9759c277e7 qemu-kvm-ui-opengl-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 379d7335d4502140a73902708311dddc926c63fe527d7b3e749c4ce03443dac7 qemu-pr-helper-7.2.0-14.el9.5.alma.1.tuxcare.els1.x86_64.rpm 291703b4341709aa11774ba2f08d3def0f3552184e4ab16280d45cf881663e91 CLSA-2025:1760022476 TuxCare License Agreement 0 - CVE-2023-2977: correct left length calculation to fix buffer overrun bug Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-2977: correct left length calculation to fix buffer overrun bug

0 tuxcare-almalinux9.2-esu opensc-0.22.0-2.el9.tuxcare.els1.i686.rpm f37e03bf8dcab742463af0133fbdf6045eb5e1993afa3a6857e0285758b70567 opensc-0.22.0-2.el9.tuxcare.els1.x86_64.rpm 66e75e0989d3dfb4a634a927c8703f02b0d0093f845529ebe3df78f1cc3bfea8 CLSA-2025:1760025490 TuxCare License Agreement 0 - CVE-2023-1786: fix leak of sensitive user/vendor data and enforce 640 perms on cloud-init.log Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-1786: fix leak of sensitive user/vendor data and enforce 640 perms on cloud-init.log

0 tuxcare-almalinux9.2-esu cloud-init-22.1-10.el9.alma.tuxcare.els3.noarch.rpm a320a0b17cebb83ca1792a2f7000b405507f87c3471a3ac8462ad7e07fb08faa CLSA-2025:1760026053 TuxCare License Agreement 0 - CVE-2023-27371: Fix improper parsing of multipart/form-data boundary in MHD_create_post_processor() to prevent remote DoS vulnerability Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-27371: Fix improper parsing of multipart/form-data boundary in MHD_create_post_processor() to prevent remote DoS vulnerability

0 tuxcare-almalinux9.2-esu libmicrohttpd-0.9.72-4.el9.tuxcare.els1.i686.rpm c84c4cf97e43f481c8b0859b1be96c687ce0278b56c65cc0851558952d5aa6e0 libmicrohttpd-0.9.72-4.el9.tuxcare.els1.x86_64.rpm eb16736e4ca52367325bad41b9cb317a4e9e37adfd3b8a3369ab22bcb1e1cab4 libmicrohttpd-devel-0.9.72-4.el9.tuxcare.els1.i686.rpm 55361fb60ce117262d5c7fea3daf35f9133a4ef7d292fa51cd57e43ae5f93d23 libmicrohttpd-devel-0.9.72-4.el9.tuxcare.els1.x86_64.rpm 8c431f9116ed2e9240d7981753eaf8f8ab966b5b5a018667bad13a9eb6ccc580 libmicrohttpd-doc-0.9.72-4.el9.tuxcare.els1.noarch.rpm cb22a57cb9294916d7390bffa5046a7b3b350f5b0f8368a71a05d0932dd31c18 CLSA-2025:1760106873 TuxCare License Agreement 0 - CVE-2025-55304: add new method appendIccProfile to fix quadratic performance issue Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-55304: add new method appendIccProfile to fix quadratic performance issue

0 tuxcare-almalinux9.2-esu exiv2-0.27.5-2.el9.tuxcare.els1.x86_64.rpm aae433e06c5852778ba5362db5ae14de96fc1b40594790d0d217d48c962f0661 exiv2-devel-0.27.5-2.el9.tuxcare.els1.i686.rpm bd400187e9e96135ed6e6e72b4a3b2c829be0f8166d7a06b5362338cce7aae86 exiv2-devel-0.27.5-2.el9.tuxcare.els1.x86_64.rpm 85e6fb101c829d2adb5e3a8a1ffbeaf6df519de9f5b5e2d61971612c0379fbbe exiv2-doc-0.27.5-2.el9.tuxcare.els1.noarch.rpm 06b9b441e28152b3083525f30fdaa7ee297e4cc609d0234fa4fd41a3ce851b13 exiv2-libs-0.27.5-2.el9.tuxcare.els1.i686.rpm 883f9c9b10434a28fb951d9e98ea3bddc0c9710a9d98a2bf513293e208166f96 exiv2-libs-0.27.5-2.el9.tuxcare.els1.x86_64.rpm 8635fcdd11652957140f31ce3047a7ece9769c8c4012e826a196ddc8cf966b1b CLSA-2025:1760107506 TuxCare License Agreement 0 - CVE-2025-49844: prevent authenticated users from manipulating the garbage collector and triggering a use-after-free Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49844: prevent authenticated users from manipulating the garbage collector and triggering a use-after-free

0 tuxcare-almalinux9.2-esu redis-6.2.7-1.el9.tuxcare.els7.x86_64.rpm 3e489da05af122fe947e6eb4ab1f5fc45db73dc0ee51a72231853b999c66f094 redis-devel-6.2.7-1.el9.tuxcare.els7.i686.rpm eb591b2a4b514c5f2a9f019efdea9af4d40309ca00ba65594580d619d2309158 redis-devel-6.2.7-1.el9.tuxcare.els7.x86_64.rpm 8d489a81367fc7248821954045ef5cf0d6dedfe99ede37c883a7a2efb2acb890 redis-doc-6.2.7-1.el9.tuxcare.els7.noarch.rpm d55c293032b1eb1812d71161609c9690e0a02dc7e103b9a240ccfc7d4766e225 CLSA-2025:1760373685 TuxCare License Agreement 0 - CVE-2025-0395: fix underallocation of abort_msg_s struct that could lead to buffer overflow when printing assertion failures Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0395: fix underallocation of abort_msg_s struct that could lead to buffer overflow when printing assertion failures

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm f0790fa42dc579e593359d09440c80b111d34ee098fbb941bf639a8b912a2924 glibc-2.34-60.el9_2.7.tuxcare.els5.i686.rpm 00dc258ad3188b1fc639efbaeceaacbbe59ddc6c074a3e27ab39e5cf7b955d84 glibc-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0fec39b0678db09486cb9bebec280a81c5d6a4c9e9bb71d204ebe939820b69d5 glibc-all-langpacks-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm c716c32b7d0679119ac0a491ecd9953372e98315a6868fee3a27c68b1ff05df4 glibc-benchtests-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1994c8bda85ab970217fe4b2a82066ef70caf6ac6813448d862662800bab8c09 glibc-common-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 85c790036900ddaea1587cea966ee91adf329499a9db69a433465341b5ea0c09 glibc-devel-2.34-60.el9_2.7.tuxcare.els5.i686.rpm 3e03ab7e997807b601fc096bccf5b2b20351233fca04781a3760eab03f9badba glibc-devel-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ef4e467319f6a26f0791e18e193feb71de0526347c62fec0355c7810218bc534 glibc-doc-2.34-60.el9_2.7.tuxcare.els5.noarch.rpm dacc98e9e008da6d920827f6a6006741626dd0e25e7b64c8778a7c56b75b4982 glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els5.i686.rpm 6cf88707fbf623a83c3ced2338b3abd020215c93a444bd88de5ad8de0316a4ac glibc-gconv-extra-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fb1351da1ebaf30af8901a812563ee13e958c6a9f1da92b7db7b724ec6a9ea5c glibc-headers-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm cfe4f1c503308d7b6d7ede1b6d89bd1026046a51fe05967a7658f74210e54323 glibc-langpack-aa-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 4c0ab66805874396f125b66ce941188b1bcfb5a6e5f2f9f753d3fdb2a1a6f6e7 glibc-langpack-af-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d93bbee5d9e811a9659c536bc08b45b3d86b4636c6da3d63dee6f745a11fc078 glibc-langpack-agr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm bdd9fa18ae5f4307b3b173c9dc026cd1d73b2e2c07ee155d154e44ffaedb237f glibc-langpack-ak-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1e5068a09fa6d5bdb7e91d0e9427be437b28b0dfc415f1884c5263ac6e8a37d3 glibc-langpack-am-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 4773f1b5db29b9c703d9d98cc64f34adae4ab74bedee8a4afad12e004a97182c glibc-langpack-an-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 47b43dfa2c138908060bd82758b197b86c6a0ce49106b1052228fcb17abca479 glibc-langpack-anp-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 617a1eb567ce7d34f93b6f98b5669a65db71c4ad81026b256e4e8b569fa3a4e5 glibc-langpack-ar-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 41cf5c0a5e8443d2f4b958457ad5722d023dcb3817df3b910585d51215e94058 glibc-langpack-as-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3d77999ec0bda702b8c1f538ad76f6bb05bcb946e6dd4613c968e4a8323427db glibc-langpack-ast-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 010f17fb1ffdc9993a628d4f0ff0837e398f8148b34f929c507187c345fa8360 glibc-langpack-ayc-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 726a44bba8dda2b6624584b331afeb5d9ac0216d7a8f00de0c6e2cf765779091 glibc-langpack-az-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1a2cb8bb62d7d2365d14546c1742cb23cab0628e55e89dc2864f248ae7528048 glibc-langpack-be-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm dd39abe9badc05616022e173ee39b5b57126a1543cc367f96f9206840509b890 glibc-langpack-bem-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 812ac0be97900f7d7467d0e1e6b3480a588c09996a565da0c46f75848a5bd107 glibc-langpack-ber-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm df94444f0f27cc0fd07f22a2d091c6f4cd18503c4813043e713da5006a013451 glibc-langpack-bg-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 8fad831ca35a54a26eb2b694865e5c25cbb489b268e0e2db4a1825fd3cfdde30 glibc-langpack-bhb-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fa5585c5597cc4ae9fdd5a3fcc5ae96f911a1e37981052f57b9ea25b62b985a0 glibc-langpack-bho-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm af1828c6c03bb1ffe31e0c50d921a6ef564116148124e5de36d61f691c0f10b8 glibc-langpack-bi-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 8b902715030ff9dd2045dddd92195565db26e525f1189fdee4b75674086d1f1d glibc-langpack-bn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 806ec036d8cc5b6ccaf6a2a6b5f12651b152cf437676df86bc27ba87e71005ba glibc-langpack-bo-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d309d8ed308bcd04365970501781207362533ed66d1d612b122db3ae547a1df3 glibc-langpack-br-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d57912eeb94ef37222fd06d7a23abdc2829c89562663866e6c4d1246a3b8147d glibc-langpack-brx-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3cd71395abda3578af29117d550d793cd901cf8bcfa7e21472fabaa8a972d34e glibc-langpack-bs-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 2967d10a69e38f0d9bb3a4346ac2ccf1b0c5b31c527bb93cb0642049884d85db glibc-langpack-byn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 14d408e3a2aaf73df6072aea06c2d217ce0719d4a951bf9ba609a4e1fd435fa2 glibc-langpack-ca-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm acfe086f21c1ff515e91b5affc9c2256b70b7738a87d77d424190fdbd6e2d3b6 glibc-langpack-ce-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm dcffbcbf56228d3420b6ea9106a9613de3f34a4f3678f7b0d0371924d9d83c9c glibc-langpack-chr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d60b8106df188dbf42eb73181d91e50f2f9dc99030ff84ad5d61e03edda1adc1 glibc-langpack-ckb-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7c2468e5eced5395cb88041a271269093a7e6b2b656ff4f61bd6393614244ae7 glibc-langpack-cmn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1a7c70cebec5abbd555bc874891307adaf8b475a64b0216776c93f1822014f5c glibc-langpack-crh-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d063f6df802e47a8f3db4d104cdc2653b51a1b423e35acd7d6f915e6d1c01cf9 glibc-langpack-cs-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0b65a2e2b3871437b06b2440662c0256762c76216bbc7a7197c2347c70fd0ba6 glibc-langpack-csb-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 24eceb69b66868bf5963fd435e41dedc6224ef47e875a6171957e409b2cbd343 glibc-langpack-cv-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm e0e08249902ff808f7b0bd788b8d2e1c7299ad420127863fcb2b7be45c6c8986 glibc-langpack-cy-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1d3c423560a38f3d0a2662516adb7af9c39ec74a46f6a960b298a6f5d74b3517 glibc-langpack-da-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm a5a33a29fe6d381ae31149ad133a5418e9d76944f9b04880645f4da005a6c642 glibc-langpack-de-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 6629ae836ac88d6deb8e9922ec25c339c6301f2478b49e9e8595cfc479c3b2e4 glibc-langpack-doi-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3edd7b9142eb7dcb70c1c5b92f2515bc6280a8f4832ffd0822e535da5df07daf glibc-langpack-dsb-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 6ce99db320db3459acbd3f9ecec8be81c0c479d775b84515029574a7341048c6 glibc-langpack-dv-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 6a740ef9b63153a8d427f1037bfd2089c619e5e1549e87471004e33915cbaee3 glibc-langpack-dz-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 6a7778180f17a5622ad8f15c47ffafaaff156247a5f324ca20fd40bd771d1209 glibc-langpack-el-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 13df45eb3399c2545aadff2a1affe8b60baf24711737e1e74c7da844923ec723 glibc-langpack-en-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 54723a6604e67af26652a55f4acb1a5982a8feb9113ac60ffe34b0bc016858de glibc-langpack-eo-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 376cfba8d853310643c34c63ec767361264ac3cbd505eb84a5e44956e0412a38 glibc-langpack-es-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0919e0c909900c44514ca084e596628590ead5fe9f99b964a2320f589db14f75 glibc-langpack-et-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm b49c5e47ede96c91311ce90d98f2f50f7b9e9cbccb92b40f49dfbea781a65092 glibc-langpack-eu-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm cd19059597c2b59ebde2ae941a7f45126843846860f809a06ccda989f4e81108 glibc-langpack-fa-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 84573c9d0e6435a925619a060deb21d88a830693b7de3c6bfd8899f6056f94ae glibc-langpack-ff-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 71c6c84bfde34a65dabd3740494bf67d582d720c8db2b85259dcc5c8abdf5212 glibc-langpack-fi-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 9faa433063a973d11783ce0599d04ebfd7d088128ae44bda5e6ff62f37f5082f glibc-langpack-fil-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3c9016acb40302ded1145fbaae006cdd24175467819565c97ca8f621864adcb2 glibc-langpack-fo-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 01ce0256d42a0beb133aec78c966de5778c50d3d681c63304899d63cf154d63d glibc-langpack-fr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 576277c76768dac4401f1a024d7eab2f0191f8902b3e93f23198a5952113bca5 glibc-langpack-fur-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ab4b3da35acc7ee30b4ef3a8909a184cce2cf2a0c7077358268c94daf90db358 glibc-langpack-fy-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 603876f4593c46ac9c9acd56ab72b7cc97adcaa6907ee4c4d8b0ce922796a0dc glibc-langpack-ga-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fd29b8c0e77092cc03f58b7104581b178c1af08d449cf6f390247919c67a3cd4 glibc-langpack-gd-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm b8162a2d58fa0b33df8f709a72e9e1998f70ebc8e0b16fc458a378c6ae0a9379 glibc-langpack-gez-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 25bdd82d82d684b1cbc63489504a21c5040fd74fee9511bd33c809230c2c1a4a glibc-langpack-gl-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 91a8b1c06a7b208452098d00f2b40789d0397c5ae57b6878a0c67b330c02bc9f glibc-langpack-gu-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ca6e503d65349c7e60ce38c7a3efd7009f269451be60ecca107e49438b36270d glibc-langpack-gv-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 91de2f6cd2c02d7be6d820b8ff03bd4fc6459f57593ed6d1028f38cb8f0524c0 glibc-langpack-ha-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm b31ece3e1ece5715a852575070de6606e9a20992dee478519b6bd33ffcff20fa glibc-langpack-hak-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 2a6f4d559b746717a891345bf63a7f3c551645824ab24a8796354fb224fb3507 glibc-langpack-he-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d08d86cd7748b7c82593763ff065e207ef42988cc8fe61decd430a1483f2417f glibc-langpack-hi-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d5f07e10d816f6283af947a68123454364db569eb666dbc5529c79e4f7ce3cf1 glibc-langpack-hif-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm f73b83b9d9bc97ee914b587ee5a9064dce6d16466f3bf4c6258e92e6a738fdf9 glibc-langpack-hne-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 5d724d9246a1f0c9c4ae8b548990e483647970d579af06a51c3d045cc04378dd glibc-langpack-hr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 930375ea1da66a61019fb7bc48a526983a0828c127e53fcfcf2aa4756b4e9450 glibc-langpack-hsb-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fc179004d4aace4904deab3d25a5abe12697be9eea6e69026e5cead280c30a3e glibc-langpack-ht-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 769a7aa090b1618c5e8173211920273465419436b4d1521ab1c2d2878595c588 glibc-langpack-hu-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm b4be9d5da7cf93b5fdcc5d86f2f30fdb736e5675057766387e035af28c78d2c7 glibc-langpack-hy-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d246064c4ba364ee55e8c67af520a2696996fbee1b9d69af82f036c5473e6e48 glibc-langpack-ia-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 33ba3ec0b20fead340b310fd9f2abf4ee8992afe0485cff16547f1f892fd31ba glibc-langpack-id-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm f94873a5a4895ab3b1f5c8bda652a2e9efca397ef96a6f57ca5cf1ce645146b4 glibc-langpack-ig-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1d0af08f295e115c196b90ca0097f84e66d28772a296b90c466d46841e4b95a5 glibc-langpack-ik-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 61f175ba62cf5658edc8d1fb6537f7381267a11dedebd7ba1aab620504d24315 glibc-langpack-is-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 36db4736fdc7b8d330f8ef12149ff3e66173f25c6301f1c5c02b46c95b36ebaa glibc-langpack-it-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm f32b6883acfa196f84af6b96f92802e32fa04e436079ed82f1fb4fc7746e3149 glibc-langpack-iu-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 667a596c666685a11a8347e0b2358e48fa3839d8163ccd9b8cfd3d6edeef66df glibc-langpack-ja-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d109293450573e014c2a6289c8a0794faf969771180c01bd784a44bfc95915e2 glibc-langpack-ka-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ff04571ee58ea5b53f877a50ddb9f28e9ff867015d1a523250bde209044dfdde glibc-langpack-kab-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm c98d1f82294ce44ad904509fc5c942100d23b06939e2084346023e0c5d2946aa glibc-langpack-kk-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 67645bed3d9c3ce126f9cb5f33a7e84ebdfbb8a71565ea5873ec5beb8d19f8dc glibc-langpack-kl-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 5ec6d0610697a5d88cfb309f91e0879f230031f33123da0066261b609a56644a glibc-langpack-km-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ef5df6c52ed2afcb8931fd58d49bbd7ea47f297d79d12672a151406c5c78b342 glibc-langpack-kn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm bf214ff3b80d28fab5caaad8c87e3eb2ce268ff1c3220e0580723ee38fbe39a0 glibc-langpack-ko-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 439694346cbbf9f1f473beed6a22aab44aa26167e0e5ac979ce962062b82e4a9 glibc-langpack-kok-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 54606d5983ea4e2cc36faf05a8b3af468c037c6e1e5f775288fae2a9bde646ba glibc-langpack-ks-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fb14167d3e62a6e0283d2eb0a414fc24eb2f56ae229d696c1f909bfd699f5e43 glibc-langpack-ku-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 5f52ea9dfe0ac98c0dc2e59469f5a2adff79188b9a546afec67e1eaaef301e07 glibc-langpack-kw-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 2444f97cc1829a7d9d5fba9aafc8fe728e78c662c3bae5d997843cf68319536c glibc-langpack-ky-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3768effa51548d514d96af4115109b3fe87db4977d159b2160f777680f53386f glibc-langpack-lb-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 9c038a552c0b77681fd8244bd7d64e2a46288112a65bc8db699f2c174a57d801 glibc-langpack-lg-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 912f9bf816b48df1f41f3e57bae65c1b7931bb93eb0f0a5dcddf30dbaf19e8ec glibc-langpack-li-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ae8a26959ecf275ebaf9708f6dae070de4815211b23fc9f0187bb832d69b1445 glibc-langpack-lij-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7688f97594206b3b980d62f645bb9f3c4c341b6acd7b5e578c2c4034633bc70b glibc-langpack-ln-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 81d583687f45e888480b4a2e8cde8b37240d426142ddccae62e15208c93cdf2e glibc-langpack-lo-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 255b449c3ab0b61db6e11bcc2030cc3a3188f40ac5dd83fb807b3c2e374df244 glibc-langpack-lt-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm c259d3c8234ff4d640ddefbb483ad32a7261b44d049291690b42258f42dc9d63 glibc-langpack-lv-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7082e461a3e8309deb22c33a29c87875026866b3b26e1189782243cfcdf76bc9 glibc-langpack-lzh-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 09aaea5575a4e37cdb626d94bb6b0216c521c889cf6ae94e5176781463864914 glibc-langpack-mag-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 88fb07888ff55427fe37538ba2d7e63b0e932a5a8300e2cddc1b6336331333f3 glibc-langpack-mai-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0da4b752595bf1840fcb93cdc45a7331f3ec01d8e7b8684cfe2d8a6a6047478a glibc-langpack-mfe-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 31be43ee17b391286865fa28ee9069992a74262288a1f1797a669d175ce7864e glibc-langpack-mg-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm da302a90a3a7e4f7b3e811673a805fe9b3dc4b649da7e5b5e8e70da997417e22 glibc-langpack-mhr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 59dd0d6c02f4bbb31ee4d533f97f695ced107f4d725bbec1f88e3d8906035ade glibc-langpack-mi-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 2df0efdaa9b3ad71c3bd51f460d50d333d6c685db5146996e2fbb1b66cbb5d25 glibc-langpack-miq-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 30c434d1aa70fd837a64205a4f45a95ec93b2d2d326afddf81df69dd536d086e glibc-langpack-mjw-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ab834433eddaabd28dca4bed17ce0630b7db10912b2254140dca446c8f438d0f glibc-langpack-mk-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 2a5710e7fc5720bd3433c32731d33b448ba8aa508f1cbab00ad5960deecd98b5 glibc-langpack-ml-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm b8620d9c12fad9cd81f1762097308d0966f103d805f9391389f890d05e47b393 glibc-langpack-mn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 6e361a0045451bdb8fcf81054bf6a1e12c96ebbdbaa03cb2cacc7b66ec67f165 glibc-langpack-mni-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 4ecefb5d76bf322eeaf61930d50cfa04ff38ee1e4c80868d437798cacd86d6dc glibc-langpack-mnw-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fbcb2571ec9b0e05d42b21ac9b60a1a7d165c362d69cc22393443dc9aa3b7e07 glibc-langpack-mr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm b1dadf5b7cb783d4ab387cab08b81c0aaae6eca6fcd050763fcae8cd86e455bf glibc-langpack-ms-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm afb674e102bde19d129bacfb262b2e1ffccef3b61864cb981fb3a46e349a7b75 glibc-langpack-mt-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d56776eb58e7d1ae2b08caec549382653380ed981e45db9dd655a2dfe052bf96 glibc-langpack-my-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 11decaf3b5483db872570d07b3ce0a5a8bedcb4d86004fa8fd98d47c4407a3e9 glibc-langpack-nan-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 12fe2be06f69e74bb36119181aa9ede1a0724524cfe451466db653994760ced9 glibc-langpack-nb-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3b4ac2e9b0e1a65e29dc25b49819514e19019b6b3c7bfde3ed6b1ef0c737a004 glibc-langpack-nds-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fe7d7687d83b1dbf443f9761d32aaeb3b2f82b9001c2c10422dc3d1f9056b500 glibc-langpack-ne-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7da045c72191828972b55d53f67b7a3b536c5419110ce6c3e0f551e2e2e6418a glibc-langpack-nhn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 11129ae049f95f068c96cfcbcb8c0bb842e3aa8cbc993a159c56ac93d885505d glibc-langpack-niu-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 77c6075bde1a54630a7dbb9b93eeb9686bf4d96f18e0617bbd67924b7e518bff glibc-langpack-nl-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm c382ed58e941f2f5dddacd27a9430107744c703c2b847aefe2d475cd06962a2e glibc-langpack-nn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 9278c14263a32749dc252d144015fea6f95b9b14eabf9e1552f7ae5382041166 glibc-langpack-nr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ec9e9c0bd4d684f2b2e17fc7ec4a5d248f695b24c974d25d3cfca6a554d39a84 glibc-langpack-nso-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0a48fb1fb7da95db245937b6d85e2dfe35ba5ae841d84fbac20eceb8b1eea1fb glibc-langpack-oc-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 80b8a73c255dbbc5e783e721f5673c00d3225aebc35b5871624a9969a66e2811 glibc-langpack-om-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 64a1e8c9a663b6429bd613d64a43ec474310a0049287675362c1ab835c1496cf glibc-langpack-or-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0a480ea03544675597f4e70f7655a04d2713f96fbb3ec59b450cc95053581955 glibc-langpack-os-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1db9028e904cd0008a7000f426aa6c52ebdbf5624281a74ad081cdc7c34ec157 glibc-langpack-pa-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm b7a9b1a607a2aed75af46f8e14ce69321ee5533062fc902ddc0c01f51f9f0bb7 glibc-langpack-pap-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm dafc962538ccf4d99d323253a8b2f0daf6828c0e8ba662965f452d152a07497f glibc-langpack-pl-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 632b7f5f645997c44f9582403e1d5d805d4a798d43b73be80169a99e99be9d16 glibc-langpack-ps-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0a1e9e7cddca36ce17dd599ee613b03a7b98e93012526b8b37f1b4a8347abc91 glibc-langpack-pt-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 586b3b3675e3d8c880c814412a7e0d80cf0ba1dd5a0383d43ac1f85f04c441d3 glibc-langpack-quz-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 14819373e066a1edaa27eaefb57786e6b4a48bdc6a39e363542c611777faf497 glibc-langpack-raj-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 45c2bba01b9f91908b5e41aab30c21a25938a7c163e54c6610c2b2a2364d7c7a glibc-langpack-ro-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 432aa6d60b566bf5ccde7bf758d03474c8ef4686ed639ac433e3362301183257 glibc-langpack-ru-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm f133e70b4ae726e506ce9fdca7b21a35bd4005e90dd9e7cfec5707a1fcf07ec2 glibc-langpack-rw-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm bb57257e0df9a050c8f11b7220ba0edf069882d4186e37abefddb73a292fb74b glibc-langpack-sa-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3d87791fd3054dd045301b79f81424223b0b9affc9ef83faa7fec6f8ae6ebdea glibc-langpack-sah-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 23ebf7ec6dfb9ec9bac0f21a41c687a76761d24202b2908e38fe090aa58aa553 glibc-langpack-sat-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm cc6dee1420b8bdd9348a5b17fbc87905d603b91e905eaba5781da99fda169c86 glibc-langpack-sc-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm e38aa046eaef6e85c43766576c7725a81cf84f9be499d1fbd53f4785f80213ec glibc-langpack-sd-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 45ba54c5eca83d98a81049b99f157c8db4f843c71e350591db80546aa9929f82 glibc-langpack-se-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 5d72fca97f765b846618809a6c481768a5bc23b48bd3cdbcb6d05a496e8161c7 glibc-langpack-sgs-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fc843bc000bc779b3f3b22af5bcadfb906798f0fbad479d3745c4c8660626b59 glibc-langpack-shn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm cb9d1e4a956e0eb71c0c62731b1bbe4105a43e934f033ebe5df040c691c7296f glibc-langpack-shs-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 62bed89c0e2ba14990e3ff14b0415069e6aac0b8cf048ac5b6757a47f15ab1dd glibc-langpack-si-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 9dd2de9f338d3ba853da76aec1a88c5e92dab2c828c8eca61ac8680835201e49 glibc-langpack-sid-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 4ed4c0723ddd5de81e91d00307049ca7b812c87456a6713adb13ab877ef50191 glibc-langpack-sk-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 668ee242cb276e866f6cda4c169c8ed5363275fe852e89e5f9c8192d9a3b793a glibc-langpack-sl-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm e152bf28ec77a79941c2cdbb14b00bfa0bc1a728b6328973dcf5e6cd3c13ec21 glibc-langpack-sm-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1a85bb41bf57bf6448d9f604c111f59972cf90464aac15e514941b3a06102115 glibc-langpack-so-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm dcd279f6c989c16a3a910da0c209909d2f46a7100b7321a31020b787a2c40cad glibc-langpack-sq-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 10412d10cbd092912f31ffdbe224f8d2f840da156db78f7f38ba9a207814a4bf glibc-langpack-sr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0daf54f22e340b1d5548a25a1259e812252515843676ef1bd2f0632320a56e4e glibc-langpack-ss-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d2b94e272caed2b02731c03b38de0d66b9936d4ae318cea30de430caecb7a885 glibc-langpack-st-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 92d6a1508c005f701db3da8d638c3ee70c5c1bd80f1f3271aa1dce2455ae765d glibc-langpack-sv-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7ea0094675ceb3883a63e87072f64a131976f1be30cc308a0d513f5d0f29e140 glibc-langpack-sw-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ecc85af7a16c4e00bece9a449cd5aeaa481e127140aa309704e122f2ccf0a6b8 glibc-langpack-szl-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 690f3e383666790fe4f204e1c431d8ac0ab9921a297c53f703ae65ed2a8ebb00 glibc-langpack-ta-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm d77343ea15f3420b33b7d5c9e89295bd2e327c22c1d27447db37ce06333f39dd glibc-langpack-tcy-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm a5b8511bf6075cb0929006ca3d506729d85b72bd6dce28f305df4fd1e46954a9 glibc-langpack-te-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 9d3a93b22ba12871af9f5125dd1473b00dce026e89aae1e4da3ef2db48319250 glibc-langpack-tg-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 8f84c6544bf0b2f99c024a42beedf78095c27a73e1e1f9ecc0f654eb330a88bd glibc-langpack-th-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 27aeb7287953d281be52810cbd409459916173522cc9550f66f4df7b38b56d52 glibc-langpack-the-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm e66327dbf762e769823cb515a74269df23e2c745ba8374b3058745ca79431de8 glibc-langpack-ti-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm cdddb0403fc68170442b9e5239cb9a0fbb79aecbec743c1c3ff58143ddb81e99 glibc-langpack-tig-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7623488bca306d3c8b93559c1ca26acbb69842e0b47523bbdb996cccd79e24d5 glibc-langpack-tk-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3fe38fefbb0d3e2375a1504aeae861d361243e10231dc75cd9105605db3cb7b1 glibc-langpack-tl-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7604088c3d586b9c356892b70b4bac9c4ecdb5047b14383f21d27a1527d8bb6a glibc-langpack-tn-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm c85c95ed89ed4c0490f7c61f4eae69d1a06487832708680dd3a0250ca9a7ccbe glibc-langpack-to-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm fe33d4739830e3d52f259b9922ed6efb55e5dc4ead4a4f2a9946cc64e6b0628a glibc-langpack-tpi-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 35e052c069d0e72f803b7019b7b58cff37d994ac28b1c42208083e061a2c78cd glibc-langpack-tr-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm bd73992503ccd59deaa21ddafb9fd4c52505d7ade3680f85a0b4ffd8be6eaf72 glibc-langpack-ts-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 91a62c8e44890dcfbc1d9eae89fa4cee654cafab3d3e749553274a66a8ae00d1 glibc-langpack-tt-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7c23e27ca837fe9899a69bd84ad488490863e9642fbb7b98e7f114589f738aa1 glibc-langpack-ug-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 87ef29cc0aa06c3da292b903ba7b22b16b123d80e154ba72f0151e0318bc0923 glibc-langpack-uk-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 617c98dbbc29bfdc542d856200873ae7dc1aeca4a720b6eab7da2f242233d42b glibc-langpack-unm-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 2a7e411e058946dca2910c622dbb049d8a0f25e222e4afd94d0a82f26de1f36a glibc-langpack-ur-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 1f27730b128f465f9a1a0292c7a370758bbb4cea5662f3c4708c8fe62409cf6f glibc-langpack-uz-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ed5fc349cc36d172d87b8bdce264b3e46cc3d8100ee177d57b444c94651273db glibc-langpack-ve-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 561735eb636ea1c68bf483d3966c9c05e8fbf569f01f2dd60a7dd739c2286844 glibc-langpack-vi-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 134a9c6b2bab236dbf62d5b446d71e8dbb61c165f3c0afb8e65eb88d9f1ba282 glibc-langpack-wa-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm da05954a0e7bf42f2b0c1246486eb3e9b535d9643d4861b82791a2dea682a8aa glibc-langpack-wae-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm c7f58b780cd5a06adcf1d27209d0b9b43fcaa163b80ab8e819a4fb331f1d440b glibc-langpack-wal-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0caaf45153524561425290955bafc7683cf115c53447bc220b92e16372ed35b4 glibc-langpack-wo-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm b71d73e9f51db71fa7082e71da74566b0e22dd57b551f06b57a6c004a3604b10 glibc-langpack-xh-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 65a996fe38692ca5089c80d725ac1fe821bbcd8976c61c37fe4b759731c14a7a glibc-langpack-yi-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 0882df679d7093f596482b8e3067252ce622ec204da620436e36a258a3239bb6 glibc-langpack-yo-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 2185a2b0acc76f590aaf17bb318e7e570de6fe9378bd423223d9ef982269f556 glibc-langpack-yue-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm bfeca49b048386ef0bae3416787004bc79c87673c51db46e143e8c0bb9adb373 glibc-langpack-yuw-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 67f533192a9e2ac320ce9d2838affe43853c4a3d1b2009be85004538222c8fb9 glibc-langpack-zh-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 462847e2cea6734fcb0d9bb4ea8dc55ad74c611beee924ab461ea51d5641865b glibc-langpack-zu-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 9a89a17dcdfd5c3d37fe48c56e388e61ff656db6b1d66f688a3b82e5c28e03c6 glibc-locale-source-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 5c74c949f2c70ac224ab5b9605bb25d84761dc0b816dfcdae4370205914bee67 glibc-minimal-langpack-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7dfbccaf2a0eb702928cccedb7126af154b00ff8477a9933420d4a7114fed989 glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els5.i686.rpm 5f3252a7a088d7feca1f23c88809a3b2bf7f533c62640a93ae5ca76af422bd27 glibc-nss-devel-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 4ee10abc6d5f9b16b1c4c55cf0f4a3ce1af3ef72a2c4d50a74965ab03a3d853a glibc-static-2.34-60.el9_2.7.tuxcare.els5.i686.rpm 9b26f9a7c67b2a0c3fb21235802018a087423ea3cf1a21a1274caa1d5d087b9a glibc-static-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm f4150d398c26323fd8ff7e0f9bfb2837c0745484baa0fecd03bf190010e42c77 glibc-utils-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 7de67a8537581446c3b4815e3ebab314e08a7c8fa9460007c04cbcc882ca0150 libnsl-2.34-60.el9_2.7.tuxcare.els5.i686.rpm 6a62e95ae6a3accedbd663d3c50b41f3912d07c56998d5ebf41ebb1d9be20f9c libnsl-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 9e70a395edb7f3384c83ff380fa0541f74605b8fff4a35c15c335fcb76e2c0cd nscd-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 22fe4971c9f18f7082ca8cf1c87ed654478f277f11b4b85b5ee86ac575474c50 nss_db-2.34-60.el9_2.7.tuxcare.els5.i686.rpm e9fd02aa3c4b3e07e3ee5dc88274018e57a9da345868833782e7424d66e479c5 nss_db-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm 3bde1e0c4ec65ba9b42ab1eb2d15003b840a037c4583297e136feba09407b271 nss_hesiod-2.34-60.el9_2.7.tuxcare.els5.i686.rpm a5fd0b6122426c8a10ae05e007bed887c113419eda2316e7001e3d2e8015f7e5 nss_hesiod-2.34-60.el9_2.7.tuxcare.els5.x86_64.rpm ae8b726231c063fd1814fef673e0543116c92f3305bd71b100e37a78ec82b963 sysroot-aarch64-el9-glibc-2.34-60.el9_2.7.tuxcare.els5.noarch.rpm c1412608e7b043ef26ef88681f90a3326a2f173155b267714b88675ccb0f3b38 sysroot-i386-el9-glibc-2.34-60.el9_2.7.tuxcare.els5.noarch.rpm d94dac9db17734ed08e9a181ce46f33c08bb6100151ef6d3857c51fc7c4ef8fc sysroot-x86_64-el9-glibc-2.34-60.el9_2.7.tuxcare.els5.noarch.rpm 0a286c670f26b725efee4c6f27df02045f2a05c448e5595b61faae5d441a096b CLSA-2025:1760543414 TuxCare License Agreement 0 - CVE-2025-41244: fix local privilege escalation in the SDMP plugin by disabling execution of the get-versions.sh script (disabled by default) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-41244: fix local privilege escalation in the SDMP plugin by disabling execution of the get-versions.sh script (disabled by default)

0 tuxcare-almalinux9.2-esu open-vm-tools-12.1.5-1.el9.3.alma.1.tuxcare.els3.x86_64.rpm 9f946890bea646671a8aa2c4b1a9e478dd30095ba65be3251bb0a072bddb08b7 open-vm-tools-desktop-12.1.5-1.el9.3.alma.1.tuxcare.els3.x86_64.rpm a1a4e107d419b4594bcc6ec58c9270816888af5dd9347fdc55da3363af3362dd open-vm-tools-devel-12.1.5-1.el9.3.alma.1.tuxcare.els3.x86_64.rpm 82bf0159f3f1e27b45a4c51c5aaedd8f74eb5b24552bfaae08c571ece624d142 open-vm-tools-salt-minion-12.1.5-1.el9.3.alma.1.tuxcare.els3.x86_64.rpm e8917e0dee26b07fce2177e0a0ce46daeaa38731ac57c9e622a26f8dc47594de open-vm-tools-sdmp-12.1.5-1.el9.3.alma.1.tuxcare.els3.x86_64.rpm 8df825f84101f7c92a614e175d44d6804e5ae58904672b5770a331ca8cead95c open-vm-tools-test-12.1.5-1.el9.3.alma.1.tuxcare.els3.x86_64.rpm 8b08a4be90ec5e54f6e2b49e92c948434e780b48d5db9f87ff1365be5d8e4a74 CLSA-2025:1760546935 TuxCare License Agreement 0 - locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836} - netfilter: ipset: Fix suspicious rcu_dereference_protected() {CVE-2024-40993} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type {CVE-2024-39503} - netfilter: ipset: Missing gc cancellations fixed {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc {CVE-2024-39503} - netfilter: ipset: fix performance regression in swap operation {CVE-2024-26910} - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test {CVE-2024-26910} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - scsi: mpt3sas: Fix a memory leak {CVE-2023-53512} - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() {CVE-2023-53464} - wifi: ath11k: fix deinitialization of firmware resources {CVE-2023-53532} - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() {CVE-2022-50464} - ionic: catch failure from devlink_alloc {CVE-2023-53470} - enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} - gpiolib: cdev: fix uninitialised kfifo {CVE-2024-36898} - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync {CVE-2022-50447} - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP {CVE-2024-36974} - ext4: Fix function prototype mismatch for ext4_feat_ktype {CVE-2023-53224} - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation {CVE-2023-53477} - netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042} - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry {CVE-2025-38472} - Bluetooth: qca: add missing firmware sanity checks {CVE-2024-36880} - Bluetooth: qca: fix info leak when fetching fw build id {CVE-2024-36032} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} - drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} - drm/vc4: don't check if plane->state->fb == state->fb {CVE-2024-35932} - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create {CVE-2023-53263} - cifs: fix oops during encryption {CVE-2022-50341} - smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} - smb: client: fix race with concurrent opens in rename(2) {CVE-2025-39825} - ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL {CVE-2023-52697} - blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none {CVE-2023-53292} - mlx5: fix possible ptp queue fifo use-after-free {CVE-2023-53398} - sctp: check send stream number after wait_for_sndbuf {CVE-2023-53296} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - scsi: mpi3mr: Use number of bits to manage bitmap sizes {CVE-2023-53376} - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue {CVE-2023-53280} - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data {CVE-2023-53232} - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185} - fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731} - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395} - ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value {CVE-2022-50327} - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() {CVE-2023-53220} - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() {CVE-2022-50272} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836} - netfilter: ipset: Fix suspicious rcu_dereference_protected() {CVE-2024-40993} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type {CVE-2024-39503} - netfilter: ipset: Missing gc cancellations fixed {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc {CVE-2024-39503} - netfilter: ipset: fix performance regression in swap operation {CVE-2024-26910} - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test {CVE-2024-26910} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - scsi: mpt3sas: Fix a memory leak {CVE-2023-53512} - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() {CVE-2023-53464} - wifi: ath11k: fix deinitialization of firmware resources {CVE-2023-53532} - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() {CVE-2022-50464} - ionic: catch failure from devlink_alloc {CVE-2023-53470} - enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} - gpiolib: cdev: fix uninitialised kfifo {CVE-2024-36898} - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync {CVE-2022-50447} - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP {CVE-2024-36974} - ext4: Fix function prototype mismatch for ext4_feat_ktype {CVE-2023-53224} - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation {CVE-2023-53477} - netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042} - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry {CVE-2025-38472} - Bluetooth: qca: add missing firmware sanity checks {CVE-2024-36880} - Bluetooth: qca: fix info leak when fetching fw build id {CVE-2024-36032} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} - drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} - drm/vc4: don't check if plane->state->fb == state->fb {CVE-2024-35932} - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create {CVE-2023-53263} - cifs: fix oops during encryption {CVE-2022-50341} - smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} - smb: client: fix race with concurrent opens in rename(2) {CVE-2025-39825} - ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL {CVE-2023-52697} - blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none {CVE-2023-53292} - mlx5: fix possible ptp queue fifo use-after-free {CVE-2023-53398} - sctp: check send stream number after wait_for_sndbuf {CVE-2023-53296} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - scsi: mpi3mr: Use number of bits to manage bitmap sizes {CVE-2023-53376} - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue {CVE-2023-53280} - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data {CVE-2023-53232} - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185} - fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731} - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395} - ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value {CVE-2022-50327} - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() {CVE-2023-53220} - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() {CVE-2022-50272}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm ed04137c0ec8dc78a71ba647e57b540fec4b90dad625233a606e927af2788570 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm ec9b795f0ead599b230fa1214efe4898131ac7c51e03033c732cb4cbf7c505a4 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els22.noarch.rpm aa5c8a76965010f83df708e3f0640376e6e2d8fab86179fcc06fe45fa92b7409 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 140b9a856ab4fb09695563d5ddcb304609c7df9672c92f25ffb4f53e4549abb0 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm cfa70cede1bb3e63c426b105b8c4ab85c8747db0cd4a8554b45b679eb4d7afac kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm c5e1e3b0b563f0700d3866b78f77e0851b3ca1bf94f63064da3b4ca401b8ffb8 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm b1bd851edce69e36ddfe09f8a40ab49ac044abe6d6b07a067f8bc3b2b975f4dc kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 72efd72058c8fb46e28bed7aca37c5f12d54f483e1a10b04366dae8cac3d31c0 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 0b6c68378556992c473ac4ba67b853c9048c969d50e141fa3ca0985845faf33a kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm d7fb3a23cf4892ab394c8bbde09801d6e0383064ae29c9533ef7f07784162186 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 34e3012b67bdb1bf00f8f9f6a09786eb6c5ee973260439af548588d36c414bed kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm fbb94965edfd7cb77abf6ebfd141b7fbe7706cf575e31f002e1ff1c9fca7eef7 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 60b50f866679b8e7f93322d4990c52dd1ed9d53430a6dd6c0559f7aeb1b1a393 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm ba56185de8f299430af4d75effdb7c5a2398fe20ee871e65b0bd6b501b68d1a7 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm b7b312e9e20dbb11283fad0ca77cebfce3b99d4d2d0283d60e06b40887ef7159 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm eca377982bbae7e8a6d347ee1c2898cddc9d72cf4033ef405f099868f48e2a8a kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm c0d2ea7d648ec3b850b785d73261dcf3705159822cde1cb1ea9043216b3de9d6 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els22.noarch.rpm eeefc2d626794f68de00432ea68d1678f0aa4820a84645a8a96e9490172f8129 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 8d69b3087e12008a7a6a34d6659c34acbe9d5e27a36ed89103f5e3bdbd5c9639 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 8339c7ce62d072df3cf73f7665f90963ffd6417165013a90cae544175d2bba90 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm c2a388431fa4330b5b2603997269d373a2082abe8914331eaa6de7bcbad02682 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 2ca9031cd308f723d9737188540207f3095c59d9b46a42f8528df6220fe727d8 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 217436c1adec29749ab30e159c0de7a2ed6fd64e54d8edb5f2cd7c83fac50201 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 233701de2d4d46ba4bdd5a1ffbfc3194aa9da14dd7f6bf9805fa3b1f40589f6c kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm e5c95054ba733bac08e563c23181a99999bf00ce177b8c16084f0d55fae339fc kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm ef2a2ab336a66c223e3a84aadbb12975fbb3a81132363b863bf55dc622daefd9 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm da78460d5541e73d289e6829781a118804044b3facbb0cd5aa8b73b1678e8fab kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm e655cc663fae3fd18ec178e3ec4fea6f7d9a483729d2af700024cb2d46585579 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 81494f0191cda1beccf1fa5a979cd9371108a25cf19987a089e08b94f51c256c kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 84fa6ddc1ab364bd785b1efa29728290a00ece528e0ca421a19b5435b3747387 libbpf-1.0.0-2.el9_2.tuxcare.7.els22.i686.rpm 65791e04287cac6d5c59de3a48a6de7f36e273287a1df2f9123e2d8d15f51e42 libbpf-1.0.0-2.el9_2.tuxcare.7.els22.x86_64.rpm dfcfd4b411231b5c7bd6d7a6e36549d745e5a307091b1e1be10a09cde869d7b1 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els22.i686.rpm 11a74afc35290b4a8fa7476458e03a2502df572a6e83c3e611df4c497855edf2 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els22.x86_64.rpm eac16e9fe84bc0ab9f2776c929979f52286fffde52d48d488c1fed694920613a libbpf-static-1.0.0-2.el9_2.tuxcare.7.els22.i686.rpm 61e1a03f2cf7cc83d7d0081bd9eadd79e85ae577a2e288d6d77cdc68bd3e9f72 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els22.x86_64.rpm b01a0b54b703f22525cdd15d6ed94585ffa0ecc659ffa1587dc4782fe8876f0d perf-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm f8b13794d1d59285d490ab25bce2e246ce7d05219d1045927d632152ec542111 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 3d225086df45f6f0da2ffe21d96efad069b2f7248d91ef0690643378488ccf9b rtla-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm 9275564e728e721fa913546604120cb8122d2e23725c5bf90a6088131b3b2dcf CLSA-2025:1760548275 TuxCare License Agreement 0 - CVE-2022-48468: fix unsigned integer overflow in parse_required_member Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-48468: fix unsigned integer overflow in parse_required_member

0 tuxcare-almalinux9.2-esu protobuf-c-1.3.3-12.el9.tuxcare.els1.i686.rpm 9c47dac4c3bcfb3789ee6154dc96f040e5cf87f2aa977bb89bc3e618647646dc protobuf-c-1.3.3-12.el9.tuxcare.els1.x86_64.rpm e9f3bd648e2a4bc702bd1c3a1b3d63efea41ee2a8cdcac6122d74cfef01b1174 protobuf-c-compiler-1.3.3-12.el9.tuxcare.els1.i686.rpm cba05c2a5fda9bf9dc85d604f521c45281da881aea1605b036799edbaebfbfb9 protobuf-c-compiler-1.3.3-12.el9.tuxcare.els1.x86_64.rpm 10091825e1fb643b67f76e943530b28131aa317165a5dfb97d15e0f99df0aaa5 protobuf-c-devel-1.3.3-12.el9.tuxcare.els1.i686.rpm 71498f0425bb91d04421a46ab4bac1969f078070be46b7e24206a37c188c4e8c protobuf-c-devel-1.3.3-12.el9.tuxcare.els1.x86_64.rpm b98d819e8ab20cc5fa2db775edef5dbfb5236c7e53f953b0e4c160454ad80a55 CLSA-2025:1760984077 TuxCare License Agreement 0 - CVE-2025-58364: fix handling of extension tag in ipp_read_io() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58364: fix handling of extension tag in ipp_read_io()

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els7.x86_64.rpm b2097a50ce4b75cc158420c2617fc3c2ef2f207d360618260c245aedcacbf060 cups-client-2.3.3op2-16.el9_2.1.tuxcare.els7.x86_64.rpm 6048cbeb932d28e72e1c575ecbd0f6297787a400476363895c747b9d2ce2f3c0 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els7.i686.rpm b0a6b4050da4697b8cdafa569df354ea0847ad47f4b8bdf8432127698fd5a3de cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els7.x86_64.rpm fde7e85049163f6306700298535cb28a6aa9e7e4fbeadac75a7f598002b3fcd7 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els7.noarch.rpm 1650b07c215222c9c4c9c0c599c3eb482fdaa7371225363bdc522e2a4ff971be cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els7.x86_64.rpm b5623939def028587487f618ac701db739f96ff58a463f06886475e7bd8e9df1 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els7.i686.rpm 9ce55c52b533e87942f015eace8e28697a9ff26555139301c5068475d7d97526 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els7.x86_64.rpm feae4d4902e2854914d98f12f3280e3e286267ae9ec85e985719dcb4b699c34f cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els7.x86_64.rpm c23ba55c2793466a23c380d96d4c68d7d896515b919c98d3173cffbe32b276c9 cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els7.x86_64.rpm 523d17dfc6ec6fd791f4f6f4aab809634534eadf046d7ba71533890970c1a72e CLSA-2025:1761084810 TuxCare License Agreement 0 - CVE-2023-38552: use tamper-proof integrity check function to prevent tampering with Hash class internals in policy mechanism Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-38552: use tamper-proof integrity check function to prevent tampering with Hash class internals in policy mechanism

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els13.x86_64.rpm 5164a1eeb033cbb1e11409cf12b7b406c519d0c19510b06ec6dd122df3472bef nodejs-devel-16.20.2-3.el9_2.tuxcare.els13.x86_64.rpm 3f2d415b3a60dd87873e91b2d48fb4b650b26b22baeb96d8133480b0bc8d5a74 nodejs-docs-16.20.2-3.el9_2.tuxcare.els13.noarch.rpm f8f1ad341275391cad32153fbdb0a6463aa88627b2ac41edb19badf4a0fb7b46 nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els13.x86_64.rpm a7489d1730d8f76c2fb64e7298a3f6c94b7748bf3dc8fed4459556f514c165a4 nodejs-libs-16.20.2-3.el9_2.tuxcare.els13.i686.rpm 8a2cf117f39846b7ccd7f2116b99e30bd2fab2257cf08ee4cf6c446e7d1491c0 nodejs-libs-16.20.2-3.el9_2.tuxcare.els13.x86_64.rpm a43f8d9b6ce70d686aebe45187826cb48506b69bceca476be163fd0969e3b852 npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els13.x86_64.rpm 5c4818e576cf347e2b159a7c147265d3d123011e200c7eae0241b7720b4ad54f v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els13.x86_64.rpm 6fd21d3310730a9ab38d2e518ad0ca06048b4939ab747700531180557bce2093 CLSA-2025:1761214095 TuxCare License Agreement 0 - CVE-2023-5088: fix incorrect guest I/O redirection to offset 0 that could allow data overwrite at LBA 0 and potential VM escape Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5088: fix incorrect guest I/O redirection to offset 0 that could allow data overwrite at LBA 0 and potential VM escape

0 tuxcare-almalinux9.2-esu qemu-guest-agent-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 82c85c5662d7715261eb011e09ef6368c517876738b4f1dd3db12587d78a6a38 qemu-img-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 45644af91a8512109f8e2ae11843a92265e587b05609f96eb1191cfe96f21065 qemu-kvm-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm b153c1d8273a0a106ff32928c1c93d52811ebfccd16b2c76a3510e5a7a3bdbe3 qemu-kvm-audio-pa-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 525b030d08f88995420aa3b833ab530a59c0043cbfffce5c6a472b03b1df9ead qemu-kvm-block-curl-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 04fda858183f34bc60476e3ef4b40bc1e8ced57f81a6b663b617675bd2c98b90 qemu-kvm-block-rbd-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 3a47dfe8ef030b87a044d889d5f08e0be6b56fb9443a865d052389a06b809b27 qemu-kvm-common-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm a91f39842203e566abb36d53dd12e8c5926949a4e6e6830b4a024428d3a10bea qemu-kvm-core-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 875bdffe15bdd27a74bedeb3c8b7ea840eb52279e1ce5e5143a920e764750b22 qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm e4316047d0c0c6539c6546ae3155751a1954e6f5045e9f6f2e7f3c71f46f882b qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 24d57c25653ee48980ad9c459ba5a25e185624ef2911d697a103356f39a88dff qemu-kvm-device-display-virtio-vga-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 703cc0b984e6c2b1e21745edda72b1432d00753d26738dd80b35d2903333198b qemu-kvm-device-usb-host-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 2e402b9fe4ef365f6820167f9b0c535337656ba5fb7763aeccf22e5fe3d57c21 qemu-kvm-device-usb-redirect-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm e69850c4110095fa05c8cfcb53b92c4c2732cc64260f27d8dbb9d32929af9c44 qemu-kvm-docs-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 014a310eed0e132effab629494354ddc6d527f9067f9ea8bf459ea59bb33842d qemu-kvm-tests-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 0d32af90df000ea4a4a2a60d003792dccb4410d8440eafcdb8eb7b550b0fccf8 qemu-kvm-tools-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 0e657eb1bdc933b94410badfa1a91f62cbe41b6d4dd2ef583f447daa3efd6e47 qemu-kvm-ui-egl-headless-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 94e3c065b24ae64505db2be2697e620d3ce9791b275680cd8c41fa95cb185d11 qemu-kvm-ui-opengl-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm 0572ec58e2288a89c79d39538300c26d5ecceb7b00433ae09e130cbc703321d2 qemu-pr-helper-7.2.0-14.el9.5.alma.1.tuxcare.els2.x86_64.rpm baab747faed30cc4cefbfb5a8bfa0c7c51a324af6f97adb54f2cd6096fc72d06 CLSA-2025:1761261363 TuxCare License Agreement 0 - CVE-2025-32365: prevent out-of-bounds reads in JBIG2Bitmap::combine function in JBIG2Stream.cc Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32365: prevent out-of-bounds reads in JBIG2Bitmap::combine function in JBIG2Stream.cc

0 tuxcare-almalinux9.2-esu poppler-21.01.0-14.el9.tuxcare.els2.i686.rpm 285f8ca208e8302652012e9984b896b3cb74592adca640a27df13f6fe17b5b14 poppler-21.01.0-14.el9.tuxcare.els2.x86_64.rpm 0ac732eeccdc55e3bcbfd470be75e0defed62d1c61ac35cf686de117646123f3 poppler-cpp-21.01.0-14.el9.tuxcare.els2.i686.rpm 1f908d9d9ead0003a7c764799181eef69e72a70132e2aa70a24ce59f5d4d7fad poppler-cpp-21.01.0-14.el9.tuxcare.els2.x86_64.rpm d537b8db02dc3fd11fb032a6781dbd0abce3708df137633841e26981ebbb6b46 poppler-cpp-devel-21.01.0-14.el9.tuxcare.els2.i686.rpm b96404fe7797949b066f7a424989def3d929e6d63fb1755ec4838bbca88dffa1 poppler-cpp-devel-21.01.0-14.el9.tuxcare.els2.x86_64.rpm e1fad88e8b4d16cd897b3267feabf0257f72306b4eaf6481e404c15d0ee29b43 poppler-devel-21.01.0-14.el9.tuxcare.els2.i686.rpm 3ea16762dce04f03d1df956bfedfe180a49d3bfb1da7c801d1b3aa8d610a874d poppler-devel-21.01.0-14.el9.tuxcare.els2.x86_64.rpm 6a72c06e93049e4d51950cf459de502398b5caefec359b76ee03dfa37faf6ad9 poppler-glib-21.01.0-14.el9.tuxcare.els2.i686.rpm e46c6e13f1e81a2b5fefac26de186bfbc8474754b6d5ef39405b2bb77945c87f poppler-glib-21.01.0-14.el9.tuxcare.els2.x86_64.rpm b41ff668373d009a0937b5ded55bdf240b99e09b4bfee2253bf4c838ed54eb88 poppler-glib-devel-21.01.0-14.el9.tuxcare.els2.i686.rpm 1697e9d324ef779692bd2cee9e9abe69ca90e4c8ba0c56168da536075e178b7e poppler-glib-devel-21.01.0-14.el9.tuxcare.els2.x86_64.rpm d251edbc2d254815e1de1cda20cb3c63e0cb79ee761777f8a9d778cb169c6eef poppler-glib-doc-21.01.0-14.el9.tuxcare.els2.noarch.rpm 5653ba2c0e7c665d41bcbf16f787c260d01f30e140a9224f970c91dc1c1c02d8 poppler-qt5-21.01.0-14.el9.tuxcare.els2.i686.rpm 464662a3aa1c2b1d3d3b48e8377d5b30b3c693db5440c0a0c5f890f6b70ce1eb poppler-qt5-21.01.0-14.el9.tuxcare.els2.x86_64.rpm 98ea84c6ef7bbeca85a17c18f49e06bb00057e8ca5dfc9756a84ebef0579429e poppler-qt5-devel-21.01.0-14.el9.tuxcare.els2.i686.rpm 84e8cf7fcff987ac1ed53b619fe8fd7781298efc3c795ef9304f0597308b021c poppler-qt5-devel-21.01.0-14.el9.tuxcare.els2.x86_64.rpm e63b8d4b5036c92f6669fc180b51c9a709e4bbf19aaab79b22a83b5f1c3b59c0 poppler-utils-21.01.0-14.el9.tuxcare.els2.x86_64.rpm 8e4a9b461959aca14e878ace50003cf63802967f54ff31f280c63f8a86ff5ba6 CLSA-2025:1761323193 TuxCare License Agreement 0 - CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions

0 tuxcare-almalinux9.2-esu libpq-13.5-1.el9.tuxcare.els1.i686.rpm 696bd9a8918aa68c403eeed2f24fa87621e9b7bc3efdb25abd05417abab72dd0 libpq-13.5-1.el9.tuxcare.els1.x86_64.rpm 19c538b505fc1628c1066969156d354d85956f55856983b6bbbb8e385c896837 libpq-devel-13.5-1.el9.tuxcare.els1.i686.rpm 6d862b85a1701d762fe86bc6fbe4d5cdba10401a74966efd7093a143fbdc7696 libpq-devel-13.5-1.el9.tuxcare.els1.x86_64.rpm 1622348cf7dc56c5118fe9b3d54be6bc0a960ff00b7c6b435c3945fe4c500d59 CLSA-2025:1761325428 TuxCare License Agreement 0 - CVE-2025-47907: avoid closing Rows in database/sql while scanning is in progress Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-47907: avoid closing Rows in database/sql while scanning is in progress

0 tuxcare-almalinux9.2-esu go-toolset-1.22.5-1.el9_2.tuxcare.els7.x86_64.rpm 0e496f7ace2c69c1c0b86594379df70f8c7c6f62b93a5e82e2ace4f8c28b4d76 golang-1.22.5-1.el9_2.tuxcare.els7.x86_64.rpm f15f14837d95e5f4ac3a4991eef201f5c8e5463d3611f68cc0a4e779c87f7630 golang-bin-1.22.5-1.el9_2.tuxcare.els7.x86_64.rpm 0a5794ae5d981b68dd3ce3eefd1d00f9de85b4dc0ec9cb7d1c066cc8e81d6b16 golang-docs-1.22.5-1.el9_2.tuxcare.els7.noarch.rpm 6b5d1adeecbfdc54d9379c24273306cc147d14fb409da9c498d763e1d979a832 golang-misc-1.22.5-1.el9_2.tuxcare.els7.noarch.rpm 706d18ad22f75372c770af4a876b5d1c341a113cb915804b82befcde7e6d13ea golang-src-1.22.5-1.el9_2.tuxcare.els7.noarch.rpm 0b04937e239903eace67060f072c72772bf85a0ccd51055ab83a01bb45adb503 golang-tests-1.22.5-1.el9_2.tuxcare.els7.noarch.rpm d66b0df7ae5409350a01041fce7f445303d5fc1bf85c83b4f269f872f961b0cf CLSA-2025:1761673460 TuxCare License Agreement 0 - CVE-2024-7409: fix improper synchronization during socket closure to prevent DoS attack Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-7409: fix improper synchronization during socket closure to prevent DoS attack

0 tuxcare-almalinux9.2-esu qemu-guest-agent-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 47db74b04bd4eacb7f89638c3d6020b9100d5ffed09b6a0ef8db03aec554b81f qemu-img-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm fe2de79128cc478ef2590170e3d0239b2d00a959fc0757d748d566996892a522 qemu-kvm-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 06a09d3818b55cb12a8b82a18221b2e7773b2ee306fcb737483b1006adebbf40 qemu-kvm-audio-pa-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 9d0aeeaebcf7fc7a8e4a3ef824c75cccee3511e9abc76b5a077fb7ee85d9d057 qemu-kvm-block-curl-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 40b2390ebff55852dc49439f3a53fbb1b7ab6e47852b019c3fe485541720e3ec qemu-kvm-block-rbd-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm e016ce8b7a9e0c3814749dc50428a678bf670dc1306803824eab835e0df17c7e qemu-kvm-common-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm e86245483a6641bc19238bddcd3bf0693b074af98dec5fc8ceb1be92249ec78a qemu-kvm-core-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 35dace4971114caf68deb5bf3199d44ad5c11e7404c796403da2dcef3759480e qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm f40cad569fe2c74345d3ee72844e92160c1ec23cc6b82d7c2454bdebfe92fcc0 qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm e9d3e798f9495c2af3b9a1cf14d48be24fc6d1a57f5ca3420244498ec596e72e qemu-kvm-device-display-virtio-vga-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm b1599553653505c3c4b80ef519cf01c19f2eb9d8daabed8896085f59e4d180b0 qemu-kvm-device-usb-host-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 65d2f5cc250575b2ca4755c43e92403189a548b1f9c705ab40a4591581831b6e qemu-kvm-device-usb-redirect-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm cef25439a32ccecf6b33cf091ec81040c45c5435ef5d42b4bd7cb0937c8b58b3 qemu-kvm-docs-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 2531b80fbe8b108479e00663b574761e1653fb114cfe3566802206005282ea5d qemu-kvm-tests-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 04e91d725f2797bfe17f9053cda04f0b7c9c143df5078bdad2088beb9a1d767a qemu-kvm-tools-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm c0d3f1de6306df42ef8d7f24142d3917ef1a0005135578319d1f06e90ccde6c8 qemu-kvm-ui-egl-headless-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 936db18f27f4c46ce5367ebc98acf7ad272200ba6293910bd936c026b48d228c qemu-kvm-ui-opengl-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm 59692012e03170315a4e6fee0a67af3eddf30d960044612cb22c2287df64d2f8 qemu-pr-helper-7.2.0-14.el9.5.alma.1.tuxcare.els5.x86_64.rpm fd07723cf9aa6136a05df6667b8471f79556e76d2fd9da136e4216c4944e15db CLSA-2025:1761744708 TuxCare License Agreement 0 - CVE-2024-50349: fix issue where URLs can obfuscate the host asking for credentials, by using strbuf_add_percentencode to sanitise the host name and port Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-50349: fix issue where URLs can obfuscate the host asking for credentials, by using strbuf_add_percentencode to sanitise the host name and port

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els10.x86_64.rpm 6ee0d17eb6077a08b1d03db8fe3ab47a99b63ede44925e58330e55cb79c8bcd8 git-all-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm db85fd07b272cc1bcdffa885739c0aaecf786b26f30c1f2d173f329fe8178337 git-core-2.39.3-1.el9_2.tuxcare.els10.x86_64.rpm d6e3f60ab3332e7202e0dbb9b5d8961d0656952032fa8ae23adcebd2a6ce8e3d git-core-doc-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm 7d7ac1830076a72917a76f60e56c1c4e2e41ca91896e38d450d92edbd87abcd9 git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els10.x86_64.rpm 530671059d42439e4b0cd0cbb4cd44a3ba34200b055a4b9a468ca5e1cb7415d7 git-daemon-2.39.3-1.el9_2.tuxcare.els10.x86_64.rpm f5dedb0b17f12313a49e245047f6d383814f358700a7cd1ac848ec7b999619ed git-email-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm c9a5b51183b9d20a5e0d9fefa51850fe7172a1e8063a307a596e9e2805fbec76 git-gui-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm 47af7158143c8bee773949f59e444df1837fa621efaafd720f16790c4a3e61fc git-instaweb-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm 3837d052bf08aa21df3a7b42659bfcfde392b969880b6a478275f128c428764e git-subtree-2.39.3-1.el9_2.tuxcare.els10.x86_64.rpm a982ed4c3bca99fb104f9c183265de0e1a9e46cc1b5de0f917176c6c339ebabe git-svn-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm 84f6329f48d9f74cf2eb20315c3a8b59d2509f65683a3015a2c69f7630d52d79 gitk-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm 157185692962af58dc944242c5a1774a28fff1b960454b27fc72cc42a7c1a543 gitweb-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm 701b1136992437d7d8cdb94250b925702d56f5fd58f62f5d4a5eb9b7218a6464 perl-Git-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm 8fde278619d8dd3f69c925427f636b0217c7cf7383ccb1791acf88394224604a perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els10.noarch.rpm bee74f7c17e7d06a53c894f9e5dfe868aa2c25fa3b471490848a1bda3d45f178 CLSA-2025:1762171389 TuxCare License Agreement 0 - nfs: fix possible null-ptr-deref when parsing param {CVE-2022-50455} - KVM: arm64: Disassociate vcpus from redistributor region on teardown {CVE-2024-40989} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg {CVE-2024-56633} - ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} - ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() {CVE-2023-53483} - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} - KVM: nSVM: Check instead of asserting on nested TSC scaling support {CVE-2023-53663} - ice: Don't tx before switchdev is fully configured {CVE-2023-53657} - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed {CVE-2023-53655} - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() {CVE-2023-53623} - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50485} - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode {CVE-2022-50485} - ext4: add helper to check quota inums {CVE-2022-50485} - ext4: fix bug_on in __es_tree_search caused by bad quota inode {CVE-2022-50485} - swiotlb: Fix double-allocation of slots due to broken alignment handling {CVE-2024-35814} - swiotlb: fix a braino in the alignment check fix {CVE-2024-35814} - swiotlb: fix slot alignment checks {CVE-2024-35814} - swiotlb: fix the deadlock in swiotlb_do_find_slots - drm/radeon: free iio for atombios when driver shutdown {CVE-2023-53453} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- nfs: fix possible null-ptr-deref when parsing param {CVE-2022-50455} - KVM: arm64: Disassociate vcpus from redistributor region on teardown {CVE-2024-40989} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg {CVE-2024-56633} - ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} - ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() {CVE-2023-53483} - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} - KVM: nSVM: Check instead of asserting on nested TSC scaling support {CVE-2023-53663} - ice: Don't tx before switchdev is fully configured {CVE-2023-53657} - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed {CVE-2023-53655} - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() {CVE-2023-53623} - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50485} - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode {CVE-2022-50485} - ext4: add helper to check quota inums {CVE-2022-50485} - ext4: fix bug_on in __es_tree_search caused by bad quota inode {CVE-2022-50485} - swiotlb: Fix double-allocation of slots due to broken alignment handling {CVE-2024-35814} - swiotlb: fix a braino in the alignment check fix {CVE-2024-35814} - swiotlb: fix slot alignment checks {CVE-2024-35814} - swiotlb: fix the deadlock in swiotlb_do_find_slots - drm/radeon: free iio for atombios when driver shutdown {CVE-2023-53453}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 135101808ec8a098d4393b894f97dbac3233ba61fa7045d88405ae7ecef8625c kernel-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm f5867cda3ba8481dec99d50eea6cc04859e7b5bde61e6ca4e276c89369f40396 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els23.noarch.rpm e596ecfd18ab47ce93231e40ad2a4f2f139b30df4bbcb88951f0d9f59244b81d kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 687a0c63eb1b2a69d2d72800cfefb87a6b4add4b82ad07bdbbbd1be428e634bf kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm aa1b60882e95ce061fa3660844d7d7643329880e2ff35f0c1ba2beb487ea619c kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm eef30adf4df041f92dafd522f98c66be623cd1d387e2a8209482beb19b51bb24 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 1477acfda7b0bbe44556543a3a18a6e6b5a26797eee4f770374f831b34a6294e kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 9b0b2d831b17948aac2d5faa1f65867c96b08f4171577fb6d1611ac17388ce77 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm f2c2f4be1f327836a144bdd7639c2977ea5fb4cb19556a8afa552fcabc40be60 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm fa57cd1e27ff1c5916a102f193470a3a2070e7305d8b0ecca9c01a7071b545c1 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 39ba84834c41aa9eb920ed022ebc762b25399a05219cf3479a565823b1486c6f kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 319f14969d0c916aa6ee5e4f8a95263ab4d319bd6a41224a02fd6fd21ef15bd6 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm ea8df4ecd4046b61c1e397eb24b5b3a5d4f4d876bdb84d54bcde7740b3761699 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm c9874d7d51849fa0af0de1538a83dba9cdd95f180a44d672d0e3fb5e396f0bf8 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 5a37a10637df6f12b2484670135cd7b899574989e9e815a1e336515ea1c8c8f0 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 1816ff37f8eff54514459049b0b4b6f8867498b76241f100dbfac91921e26941 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 10d40536a969ee680dc6a7c4cb448a0a2959cc58ad21c54d5dbb0ccd5392881d kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els23.noarch.rpm a9697de9ffd2196bc81f71358b3a331ed7e36a0966c4dc8be2efdd8ac618b976 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 44b21c1928ec7e00d7951d8d39c8454f62029e5371988b55cfa0a308c519901f kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 5f56075fdf5fb749c4dafc3ae5ce4b1bbcd548025f8e923eccd0fb35be626209 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 7883170b0b0b8c7c280ff9f57009116e30db3ad2dfd229b1001cddef16a04570 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 25f1a4938e09c4e6a2374b230875c075ebfed37a90aa9d26816c3ab763fc33f6 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 1c008775d1ff2c571792d1dbd8343a84861aaa06066322b1fc6a0dea96e1709b kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 6e61fed5197a664f3e6ee772bc3733d130a8ec030bd33b738d7a116502de1f9a kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 5d507c155edef2a487ca72bdfa7bf66eb1cd433ca33d57580a073f29f9e08a0e kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 02fb00314f04069b2203ab3a11ddd0984c1b371f320c503705f1b3881c664ab7 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 2ab5ec533386234d23b97c1117362adf024e1835ac39cb667ab1bcd6fe0f757c kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm ce9cb94804d2db44c3bc225bcc2d58845fbe767f83c6d77fec360d4d8999c81e kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 70f906d9ecdf58439a054f032e28749c6e0e22e6a7de877a9ea1b8e31ec82ac9 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 9fe269e345949065eacf2ca0194f06efec4b6178192cc9b0eb3213a739e532fb libbpf-1.0.0-2.el9_2.tuxcare.7.els23.i686.rpm 7156f6dafb1947f4cef651cb01b83240b4346ab358b499e63ec45e3daa2c36c8 libbpf-1.0.0-2.el9_2.tuxcare.7.els23.x86_64.rpm 21e7eec7df6144f8a74be674f04e8d17a4eb771177a2230b57e3fdb8cbd2978b libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els23.i686.rpm 5bdb25862964477564424870ef9ae7baca6ac81f7c0e7ef7b5b28540cb1a99d0 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els23.x86_64.rpm ce17887a1c1b9fb14fd8bca32dcac571ab0e190a1262a76ffc81680e5a9ad1a9 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els23.i686.rpm bb754fbb05bc4f2a0f36bdd7b8a651d58160855dd66b80f9d47904a5cc6dbc5d libbpf-static-1.0.0-2.el9_2.tuxcare.7.els23.x86_64.rpm 1258183d290f407ddab3f02d960ed939b5031ee08f7d24e3dee9399b2283ca3c perf-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 60827b76d9d699256d8070434449ab0af705d1f61d6a8d5065ce9cd532ad5757 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm c2d89bbab230aa5c95753d1da209c7d47674c98e585c4cdd5f0b4c99dedf68af rtla-5.14.0-284.1101.el9_2.tuxcare.7.els23.x86_64.rpm 561f186fa49b9fa756fd3fd9483063164d71d8ee6e76cf8fe4b45d65d89ce231 CLSA-2025:1762180294 TuxCare License Agreement 0 - CVE-2024-9676: fix symlink traversal vulnerability in containers/storage library to prevent hanging and denial of service when running malicious images via automatically assigned user namespace Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9676: fix symlink traversal vulnerability in containers/storage library to prevent hanging and denial of service when running malicious images via automatically assigned user namespace

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els5.x86_64.rpm b1df8137a72585672ef7a9035e2cde8d5c0a42894d80d9c4e1b18e2df5a8d568 podman-docker-4.4.1-13.el9_2.tuxcare.els5.noarch.rpm 270e294c556366904952d4920abd3c87028e747aefdad4810cd3690b858e7c89 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els5.x86_64.rpm 337a969746a063c5eee4f2497b0a091b272a13f72b07a26b1236e80b3d73d729 podman-plugins-4.4.1-13.el9_2.tuxcare.els5.x86_64.rpm cf74fb490f8e5ba7e8eb06f7e0dfa8d3c4502a7e2f4b2221936092c0d04b07aa podman-remote-4.4.1-13.el9_2.tuxcare.els5.x86_64.rpm d5a3d93a60cf6e28faa540d95084f5989cb9cd797fceadf4ffb8b9ff85e9befb podman-tests-4.4.1-13.el9_2.tuxcare.els5.x86_64.rpm 830de69b9b18131669475279721f2ad52a40690d2ba2eef310a0b4a7d33e9920 CLSA-2025:1762181347 TuxCare License Agreement 0 - rebuild with newer golang to fix CVE-2023-24540 (sanitize templates with whitespace outside the allowed character set in JavaScript contexts) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang to fix CVE-2023-24540 (sanitize templates with whitespace outside the allowed character set in JavaScript contexts)

0 tuxcare-almalinux9.2-esu containernetworking-plugins-1.2.0-1.el9.tuxcare.els1.x86_64.rpm 615ec66ba8c1304f370850084de9f6e7e8a6609965b9e31feda9d733099cad13 CLSA-2025:1762181946 TuxCare License Agreement 0 - CVE-2023-38406: fix BGP Flowspec NLRI overflow vulnerability where zero-length packets could cause packet processing errors Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-38406: fix BGP Flowspec NLRI overflow vulnerability where zero-length packets could cause packet processing errors

0 tuxcare-almalinux9.2-esu frr-8.3.1-5.el9.2.alma.tuxcare.els1.x86_64.rpm 49c7e096f6236b64216e96b094aac21ea1bd966fa2907bbe8ff75e439e735a32 frr-selinux-8.3.1-5.el9.2.alma.tuxcare.els1.noarch.rpm bfee8688afe18e9f353119624be0cd05efe505a7902bff234e1ef657d79d395d CLSA-2025:1762182516 TuxCare License Agreement 0 - CVE-2023-39976: Fix buffer overflow in log_blackbox.c by correctly limiting log message length Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-39976: Fix buffer overflow in log_blackbox.c by correctly limiting log message length

0 tuxcare-almalinux9.2-esu doxygen2man-2.0.6-2.el9.tuxcare.els1.x86_64.rpm 0241949c650d992c198abf107f9d0a7880fef8e43950395e1b948d7a3fc7b250 libqb-2.0.6-2.el9.tuxcare.els1.i686.rpm 61120412b1cc328c57e7a79fd372a79d8a8f35c2e0f5d2a3613c0b8f422e788f libqb-2.0.6-2.el9.tuxcare.els1.x86_64.rpm f92d05b757277618f127fe0c48ba7f45a50a5eab51b7851de227a49bd6cad370 libqb-devel-2.0.6-2.el9.tuxcare.els1.i686.rpm b00f8eaba562d3b11f1b775cf6d31736a4b54b4beb140c248f6bd92aff67db5d libqb-devel-2.0.6-2.el9.tuxcare.els1.x86_64.rpm 988e7f5eaea83f1d6eb4cadfa3815994a44e89ca37de75e809c8ed529171b6ba libqb-tests-2.0.6-2.el9.tuxcare.els1.x86_64.rpm dbe0ae0c00f71fbed33219761cef35b2af016afc7d8346ebfb2b984235c064fe CLSA-2025:1762191563 TuxCare License Agreement 0 - CVE-2023-51714: fix incorrect HPack integer overflow check in hpacktable.cpp Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-51714: fix incorrect HPack integer overflow check in hpacktable.cpp

0 tuxcare-almalinux9.2-esu qt5-qtbase-5.15.3-1.el9.tuxcare.els1.i686.rpm 0f4418c6758d3fd8875d6f3eeaece794a5d3848b5b6368e2a07201a9a5bedfbe qt5-qtbase-5.15.3-1.el9.tuxcare.els1.x86_64.rpm 8fd8c3d699804fb20e749f2c27212bf2f1b4570ae871619efd9fa88a29925f19 qt5-qtbase-common-5.15.3-1.el9.tuxcare.els1.noarch.rpm 76f00d100cc00f5419676d8325ecda10045b8fba0746687e9d19efaec0ca6ac7 qt5-qtbase-devel-5.15.3-1.el9.tuxcare.els1.i686.rpm ab2f49748375f2527ea2283d979708c340accbe86e1d5eba4058d86f9cc8f0f6 qt5-qtbase-devel-5.15.3-1.el9.tuxcare.els1.x86_64.rpm b6dad98ec38501cb16426d2028395b48f553c3b6d98c30091e582fe92a630154 qt5-qtbase-examples-5.15.3-1.el9.tuxcare.els1.i686.rpm ff2ec08e58481fd7802c5af454e0c17e0b5b1bb74b0c7342119bf6b31267532e qt5-qtbase-examples-5.15.3-1.el9.tuxcare.els1.x86_64.rpm 89a3664763f5eccab7746389ed09a71a8d9fbb9deb76d6de570c39b05eb55df1 qt5-qtbase-gui-5.15.3-1.el9.tuxcare.els1.i686.rpm 19234d4015103863a3d711e43d8e2240966141c56c5f0a0dcdee8b40685d86e1 qt5-qtbase-gui-5.15.3-1.el9.tuxcare.els1.x86_64.rpm 2a814ad974022620396f5428ade0cad25e345aa902ac36a48616fee38f724fb5 qt5-qtbase-mysql-5.15.3-1.el9.tuxcare.els1.i686.rpm 335b3b94e46839fd273640a052a31422ef50c19752b41e0db2490bcff8398668 qt5-qtbase-mysql-5.15.3-1.el9.tuxcare.els1.x86_64.rpm 321f1f8c1176ce5e07d44243251f4edb41a385a3dfefe85c694e0a00bd1bf717 qt5-qtbase-odbc-5.15.3-1.el9.tuxcare.els1.i686.rpm 4d330e83c1c2b461f06da8549352b524b5184fc3efdc6a6475ed47d364bde330 qt5-qtbase-odbc-5.15.3-1.el9.tuxcare.els1.x86_64.rpm ea881ffa9027937932d544d1f5313e50a7080386da326aa02757f0d08d3dc22f qt5-qtbase-postgresql-5.15.3-1.el9.tuxcare.els1.i686.rpm f669d73defc03d8b27450f494e3ab39942492a858250259b24197c80b9c18d92 qt5-qtbase-postgresql-5.15.3-1.el9.tuxcare.els1.x86_64.rpm af51d3f046efb601d2beb05f7b80dd0577fde6356f6d44cec255761f54e32c31 qt5-qtbase-private-devel-5.15.3-1.el9.tuxcare.els1.i686.rpm 5b0a0e10dea6073378dd36f1aaa39360d4814b83e1b7012c2b3a11d2d3b4e71c qt5-qtbase-private-devel-5.15.3-1.el9.tuxcare.els1.x86_64.rpm 2c5698037ed895a7af131e831b59068e407ebd41d674fa6d9f391620659d0d1e qt5-qtbase-static-5.15.3-1.el9.tuxcare.els1.i686.rpm a78787fde2134fc91a321658b934436150da886135f62f6e5694f2fc57f1c12f qt5-qtbase-static-5.15.3-1.el9.tuxcare.els1.x86_64.rpm 9ab2e26ee76637dbf9471f351a7f1e45f717a325af3fbb73d15baf55962ea197 qt5-qtbase-tests-5.15.3-1.el9.tuxcare.els1.x86_64.rpm 22ba0465a83e0b3ae115de5dad372e0650902eb9a9bc09f8b484dc7fd8c2bc01 CLSA-2025:1762243790 TuxCare License Agreement 0 - update to 42.2.28 - CVE-2024-1597: fix SQL injection in PostgreSQL JDBC simple query mode Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to 42.2.28 - CVE-2024-1597: fix SQL injection in PostgreSQL JDBC simple query mode

0 tuxcare-almalinux9.2-esu postgresql-jdbc-42.2.28-1.el9.tuxcare.els1.noarch.rpm f01186769eff547557ba88e1f7794b0e735884c6c12a1a32948ba8de70c0eea8 postgresql-jdbc-javadoc-42.2.28-1.el9.tuxcare.els1.noarch.rpm 46a2852f17060489537932d224933e30db35486641e05b7184c60d2779bf2e90 CLSA-2025:1762244363 TuxCare License Agreement 0 - CVE-2025-46817: fix integer overflow vulnerability in Lua scripting Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-46817: fix integer overflow vulnerability in Lua scripting

0 tuxcare-almalinux9.2-esu redis-6.2.7-1.el9.tuxcare.els8.x86_64.rpm 1b4ecf6a3986b02893d31663f2d5d4e387e770726e412c749ea76503af292597 redis-devel-6.2.7-1.el9.tuxcare.els8.i686.rpm e8754e89b8bfa41c509e45af3f018b0e2c82129d63b0ac05fac64b13bf75b828 redis-devel-6.2.7-1.el9.tuxcare.els8.x86_64.rpm 41cb46ebb8383dd90f0d6fa8befd48fff82419c22c47f7e0925b7b9156e0b8b6 redis-doc-6.2.7-1.el9.tuxcare.els8.noarch.rpm 5de97505311ad8c726d886f8de12761552072a4a1bbbc8f64ccec46aef72f4aa CLSA-2025:1762338135 TuxCare License Agreement 0 - CVE-2022-24963: Fix integer overflow in apr_encode functions that could lead to out-of-bounds write Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-24963: Fix integer overflow in apr_encode functions that could lead to out-of-bounds write

0 tuxcare-almalinux9.2-esu apr-1.7.0-11.el9.tuxcare.els1.i686.rpm 9381707dd84fbe2c2d2efabc27a6f466274ea9fad98a8849589dccf51de7f3b8 apr-1.7.0-11.el9.tuxcare.els1.x86_64.rpm 9c9abaf2de4f9c7a8fe1f945135106d1ac4bbfb4bfccac0da8af9374f274c97e apr-devel-1.7.0-11.el9.tuxcare.els1.i686.rpm 509fb3e30fe0a951ee71cf70ec881c07abcafbab7a960a2038728c7f4ada7b90 apr-devel-1.7.0-11.el9.tuxcare.els1.x86_64.rpm b8b54e25cee7e28049cdd43e6dbceac5130b38c09768eb965029b1a601b70fe9 CLSA-2025:1762361016 TuxCare License Agreement 0 - CVE-2025-5987: fix missing error detection in ChaCha20 initialization that could leave cipher context partially uninitialized Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5987: fix missing error detection in ChaCha20 initialization that could leave cipher context partially uninitialized

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els6.i686.rpm 1349750faddc8e74052063dc615dca412009892631456fdfa056d7d56beedc20 libssh-0.10.4-8.el9.tuxcare.els6.x86_64.rpm bf5eaa090749429ab5f03528808a4dbfa4b0451f9195b2c3f1e521221d9ecd08 libssh-config-0.10.4-8.el9.tuxcare.els6.noarch.rpm c633d4145b9fb509426be22bf71aa1787937c112c190409769fa57e658e19530 libssh-devel-0.10.4-8.el9.tuxcare.els6.i686.rpm 75bd5afde2c67eeabbbd106d1371ececc0adc1a82ad606b3404d464aa18c6466 libssh-devel-0.10.4-8.el9.tuxcare.els6.x86_64.rpm c31acc6db022f6c0c6812e96d9c13f454ce6ff7311c614a646af135ab5502bee CLSA-2025:1762361695 TuxCare License Agreement 0 - CVE-2023-39333: fix maliciously crafted export names injection of JavaScript code Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-39333: fix maliciously crafted export names injection of JavaScript code

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els14.x86_64.rpm 417a8b4270ef6693d1489bc75df440eeeda061f9f506bb8bcef5826655111dbf nodejs-devel-16.20.2-3.el9_2.tuxcare.els14.x86_64.rpm c1ac5289dc459e3fecdd375d6084dc989ef3b2b99dbb926ce1fcf7d0c34464b8 nodejs-docs-16.20.2-3.el9_2.tuxcare.els14.noarch.rpm 6d0f48e1f207017378d2a201fa296b24c1323e09e659da433433c59bb3367c64 nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els14.x86_64.rpm c08cad3606f00befcfcc471535831de23d61789a2e0d72a82f526413fdff526a nodejs-libs-16.20.2-3.el9_2.tuxcare.els14.i686.rpm 7a2d1e7c4a962588124f67610c616cbe008299f3059e7a24e6722d88608df6c8 nodejs-libs-16.20.2-3.el9_2.tuxcare.els14.x86_64.rpm da7da6dbe4da4852d3ebe67c3f05ea119e82f8a7d27bab665a4f8b854f7c6209 npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els14.x86_64.rpm 18f4695927e3d9cca953deace5a660076ec02a40e9bbd3080982446e99050a82 v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els14.x86_64.rpm 7a4720005448d7568fe3af6c88bf230329044d1c6ed22371e9f617fab6d7f15b CLSA-2025:1762362132 TuxCare License Agreement 0 - Update to 2.48.7. The following CVEs were fixed: - CVE-2025-43272: fix processing maliciously crafted web content which may lead to an unexpected process/Safari crash - CVE-2025-43342: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2025-43356: fix where a website may access sensor information without user consent - CVE-2025-43368: fix processing maliciously crafted web content which may lead to an unexpected crash Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to 2.48.7. The following CVEs were fixed: - CVE-2025-43272: fix processing maliciously crafted web content which may lead to an unexpected process/Safari crash - CVE-2025-43342: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2025-43356: fix where a website may access sensor information without user consent - CVE-2025-43368: fix processing maliciously crafted web content which may lead to an unexpected crash

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.48.7-1.el9.tuxcare.els1.x86_64.rpm 6ce32fb0479034789b965b8a935c20e6ca5e3d7805ecbee92efb61ce7bc882a3 webkit2gtk3-devel-2.48.7-1.el9.tuxcare.els1.x86_64.rpm 1fc91875d8610c994178e94f81a48664314b9e50b5d8c7dc2347285214b1c131 webkit2gtk3-jsc-2.48.7-1.el9.tuxcare.els1.x86_64.rpm 1464aa7069881fbb43a7db476ca37cf6d5e43ba87aafef076a77f9f36700251a webkit2gtk3-jsc-devel-2.48.7-1.el9.tuxcare.els1.x86_64.rpm 0d1f2a4607be71680b3889445e3b19463f0496730bd23d00d02eda8d814952b4 CLSA-2025:1762362716 TuxCare License Agreement 0 - CVE-2024-24258: fix memory leak in glutAddSubMenu function - CVE-2024-24259: fix memory leak in glutAddMenuEntry function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-24258: fix memory leak in glutAddSubMenu function - CVE-2024-24259: fix memory leak in glutAddMenuEntry function

0 tuxcare-almalinux9.2-esu freeglut-3.2.1-9.el9.tuxcare.els1.i686.rpm dca4ca6c24b925cf7f8f6fc6f64ba6be82bc4ea90b1dc544ec43b076ab19b855 freeglut-3.2.1-9.el9.tuxcare.els1.x86_64.rpm aa9a907578105eed7ddc8e9fcb85d9821ce1449ecd71613eb3bacf7b2ec2d76c freeglut-devel-3.2.1-9.el9.tuxcare.els1.i686.rpm bc9fd326fd0e4ea178735df55df3f29bda97e880a7d4485cc17d67153a295ae8 freeglut-devel-3.2.1-9.el9.tuxcare.els1.x86_64.rpm 08a90725282b774160577dbc6cca01e8cb6c044f8fdc063eac7e8d66d1eea13f CLSA-2025:1762363302 TuxCare License Agreement 0 - CVE-2022-36440: fix heap-buffer-overflow in peek_for_as4_capability when reading BGP OPEN extended optional parameters - CVE-2023-31490: fix insufficient stream data validation in BGP prefix SID attributes processing - CVE-2023-38407: fix out-of-bounds read in BGP labeled unicast parsing - CVE-2023-41909: fix implicit withdrawal handling for BGP flowspec without attributes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-36440: fix heap-buffer-overflow in peek_for_as4_capability when reading BGP OPEN extended optional parameters - CVE-2023-31490: fix insufficient stream data validation in BGP prefix SID attributes processing - CVE-2023-38407: fix out-of-bounds read in BGP labeled unicast parsing - CVE-2023-41909: fix implicit withdrawal handling for BGP flowspec without attributes

0 tuxcare-almalinux9.2-esu frr-8.3.1-5.el9.2.alma.tuxcare.els2.x86_64.rpm 3e083c219b41b59b90a8a806caa05474e3694a267ab6e1147952d7357b6f7eba frr-selinux-8.3.1-5.el9.2.alma.tuxcare.els2.noarch.rpm a81ffb52274421a6b10d848c8fa15a72550bb032eeaa9bdd16c5e02f6b1bc051 CLSA-2025:1762363908 TuxCare License Agreement 0 - CVE-2024-24806: fix issue where uv_getaddrinfo function truncates hostnames, potentially allowing crafted payloads to resolve to unintended IP addresses, by handling hostname_ascii variable properly in uv_getaddrinfo and uv__idna_toascii functions Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-24806: fix issue where uv_getaddrinfo function truncates hostnames, potentially allowing crafted payloads to resolve to unintended IP addresses, by handling hostname_ascii variable properly in uv_getaddrinfo and uv__idna_toascii functions

0 tuxcare-almalinux9.2-esu libuv-1.42.0-1.el9.tuxcare.els1.i686.rpm 5ac85580fc301137465a2c3a6fc0e6b32d7feb7eb868c32888164dd92b046389 libuv-1.42.0-1.el9.tuxcare.els1.x86_64.rpm aa1838880751c7577d423146e320131a903a9cee208a0eafc1b312e99e03c7f5 libuv-devel-1.42.0-1.el9.tuxcare.els1.i686.rpm 3335b16c11a74af4e7f2076f06dda3c0acc3f88bae68aa30091b170ac21a37fe libuv-devel-1.42.0-1.el9.tuxcare.els1.x86_64.rpm e9d54e9434468ed507fdb8f91245d16f66dc428bed154cfa3c25e9588e2370a1 libuv-static-1.42.0-1.el9.tuxcare.els1.x86_64.rpm c226e71ed0475c86cf37f1a9af67e7c605fdff3644d8a2c53a41d71d9d311e03 CLSA-2025:1762420153 TuxCare License Agreement 0 - rebuild with newer golang to fix CVE-2024-34156 (stack exhaustion in encoding/gob when decoding deeply nested structures) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang to fix CVE-2024-34156 (stack exhaustion in encoding/gob when decoding deeply nested structures)

0 tuxcare-almalinux9.2-esu delve-1.9.1-1.el9.tuxcare.els1.x86_64.rpm d67588020ca3c2be91c170b40a95d6db336589b667bc928725c2d792ca75d493 CLSA-2025:1762420748 TuxCare License Agreement 0 - CVE-2023-41358: fix crash when processing NLRIs with zero attribute length - CVE-2023-47235: fix EOR handling to avoid unwanted processing of malformed attributes - CVE-2023-46753: fix mandatory attributes check for UPDATE messages with unknown transit attributes - CVE-2023-47234: fix handling NLRIs when MP_UNREACH_NLRI received without mandatory attributes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-41358: fix crash when processing NLRIs with zero attribute length - CVE-2023-47235: fix EOR handling to avoid unwanted processing of malformed attributes - CVE-2023-46753: fix mandatory attributes check for UPDATE messages with unknown transit attributes - CVE-2023-47234: fix handling NLRIs when MP_UNREACH_NLRI received without mandatory attributes

0 tuxcare-almalinux9.2-esu frr-8.3.1-5.el9.2.alma.tuxcare.els3.x86_64.rpm 82badefda4b7bfb37de2cfdbfaf554bd9303cd45f799a570434365b34aeedf3a frr-selinux-8.3.1-5.el9.2.alma.tuxcare.els3.noarch.rpm 7c84bbadff714f32ea6ce29a1245517fab04db11622c32aaf2b19b1865867873 CLSA-2025:1762421346 TuxCare License Agreement 0 - CVE-2025-47947: fix potential DoS by adding ARGS to the sanitize list only if it's not added yet Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-47947: fix potential DoS by adding ARGS to the sanitize list only if it's not added yet

0 tuxcare-almalinux9.2-esu mod_security-2.9.6-1.el9.tuxcare.els1.x86_64.rpm 731df063440cc954bcfb7918889dac5e0c6acef431210df1c1667ce890971ed9 mod_security-mlogc-2.9.6-1.el9.tuxcare.els1.x86_64.rpm ca482b89eedfad5ea4e2803d8d658523db2cd615450012826b1d23d98a5cb1bc CLSA-2025:1762421840 TuxCare License Agreement 0 - CVE-2024-3727: fix path traversal vulnerability with full digest validation in all containers/image transports - CVE-2025-27144: fix excessive memory consumption vulnerability in github.com/go-jose/go-jose/v3 library Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3727: fix path traversal vulnerability with full digest validation in all containers/image transports - CVE-2025-27144: fix excessive memory consumption vulnerability in github.com/go-jose/go-jose/v3 library

0 tuxcare-almalinux9.2-esu skopeo-1.11.2-0.1.el9.tuxcare.els1.x86_64.rpm 6e134f321cd0690494d87533d6ad835e4564d38a5ac32fe347fe3afb80051fc8 skopeo-tests-1.11.2-0.1.el9.tuxcare.els1.x86_64.rpm 1736bf0f53d7ce092af6468ce256a4d152d83cfbcbfff543a680ed3f34166031 CLSA-2025:1762422500 TuxCare License Agreement 0 - CVE-2022-3064: prevent excessive CPU and memory consumption when parsing YAML documents Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-3064: prevent excessive CPU and memory consumption when parsing YAML documents

0 tuxcare-almalinux9.2-esu toolbox-0.0.99.3-10.el9.tuxcare.els1.x86_64.rpm f7c4c85e3cc024acb99a35ee4febe411e3efa183fb837933070d9714f292543b toolbox-tests-0.0.99.3-10.el9.tuxcare.els1.x86_64.rpm 56d9712f3a69c346270615dd3ad867520cf4b5701ad8bd2dc3410a680486a377 CLSA-2025:1762538077 TuxCare License Agreement 0 - CVE-2024-11614: add bounds check in vhost_dequeue_offload to prevent checksum computation overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-11614: add bounds check in vhost_dequeue_offload to prevent checksum computation overflow

0 tuxcare-almalinux9.2-esu dpdk-22.11-3.el9.tuxcare.els1.x86_64.rpm 0ea47d52df3e411b4d13981530c24780048ce1557870165ddea0c1bb9f0a2218 dpdk-devel-22.11-3.el9.tuxcare.els1.x86_64.rpm edffc12e6fab08a02756f03ba587bb41dd9bd89844db1ddb5a840a4c11bf4ccb dpdk-doc-22.11-3.el9.tuxcare.els1.noarch.rpm 4eecbc3eca0f4443aef41a4ebc3fe1c5f7410d037dd3660270f3eab9acfb8b67 dpdk-tools-22.11-3.el9.tuxcare.els1.x86_64.rpm a9596c1a1bbd59cee9bb4a4e633df27c597bcfbdd92a4678f3e30231ce80af25 CLSA-2025:1762539123 TuxCare License Agreement 0 - Rebuild with golang >= 1.22.5.tuxcare.els7 to fix CVE-2024-24790, CVE-2024-34156, CVE-2023-45288, CVE-2023-39322, CVE-2023-39321, CVE-2024-24788 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild with golang >= 1.22.5.tuxcare.els7 to fix CVE-2024-24790, CVE-2024-34156, CVE-2023-45288, CVE-2023-39322, CVE-2023-39321, CVE-2024-24788

0 tuxcare-almalinux9.2-esu git-lfs-3.2.0-1.el9.tuxcare.els1.x86_64.rpm a6edb4af20523dae2db9a37aee9dd6a12a36d292c87cb90c531a2296e6bc7540 CLSA-2025:1762539763 TuxCare License Agreement 0 - CVE-2025-5222: fix stack buffer overflow in genrb binary by properly handling 'subtag' struct in SRBRoot::addTag function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5222: fix stack buffer overflow in genrb binary by properly handling 'subtag' struct in SRBRoot::addTag function

0 tuxcare-almalinux9.2-esu icu-67.1-9.el9.tuxcare.els1.x86_64.rpm fa292a781cc2ce71880a1276450bd1cd1f8944445c3026b175f8308fb7492930 libicu-67.1-9.el9.tuxcare.els1.i686.rpm 5a6d4ca6264152e2b526b082e92520d928b1c9a5bb4b93ef8c46b11cb7e90dcb libicu-67.1-9.el9.tuxcare.els1.x86_64.rpm 50922fc3f6ddb78dd7b44832e2dd25cc51d8ca838c46071d77ad77f696f7ebc0 libicu-devel-67.1-9.el9.tuxcare.els1.i686.rpm 76c63b4276c0ce68b39365f19afd5efa58be19fbb422307b37eb6aa39369379b libicu-devel-67.1-9.el9.tuxcare.els1.x86_64.rpm f88f0e2363e16235e051c3bc4fbed02812f13cb2f224b8f9742dda4ac6071a52 libicu-doc-67.1-9.el9.tuxcare.els1.noarch.rpm 814098eb778c57e9fcf184299a928d3381ad9b7f8d59b14877abc1e29063d228 CLSA-2025:1762784415 TuxCare License Agreement 0 - CVE-2025-49630: prevent denial of service attack by fixing assertion issue in mod_proxy_http2 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49630: prevent denial of service attack by fixing assertion issue in mod_proxy_http2

0 tuxcare-almalinux9.2-esu mod_http2-1.15.19-4.el9.4.tuxcare.els2.x86_64.rpm 359c7563b5e38f32632dae2001976904a0a85991c975c7e1a5e86a125aba4336 CLSA-2025:1762867058 TuxCare License Agreement 0 - CVE-2024-3657: fix buffer overflow in audit logging preventing DoS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3657: fix buffer overflow in audit logging preventing DoS

0 tuxcare-almalinux9.2-esu 389-ds-base-2.2.4-5.el9.tuxcare.els2.x86_64.rpm 122082c74fb0b854a9850b14e2d72be5f27e78358e7cf64f55bc5724897bf1d1 389-ds-base-devel-2.2.4-5.el9.tuxcare.els2.x86_64.rpm dc7966fbdae3fc007c3b38d8bb027702a4d108431668d7f60fae7345fb5676e5 389-ds-base-libs-2.2.4-5.el9.tuxcare.els2.x86_64.rpm 7a05c26a13c888572d34c5b42317bbbe30a467507440982792c78c670e8cf674 389-ds-base-snmp-2.2.4-5.el9.tuxcare.els2.x86_64.rpm 3f78c8a5a511fda929cfd9ee2083df2c1bec2c31577712a3785bbe331f1d3855 python3-lib389-2.2.4-5.el9.tuxcare.els2.noarch.rpm f7e2a3e078793881dc01be6278571cd72c2e2d80cc93882ebfde11d0c57c7c14 CLSA-2025:1762867600 TuxCare License Agreement 0 - CVE-2024-53263: fix issue where Git LFS could expose user credentials via URL- encoded control characters in host's URL Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-53263: fix issue where Git LFS could expose user credentials via URL- encoded control characters in host's URL

0 tuxcare-almalinux9.2-esu git-lfs-3.2.0-1.el9.tuxcare.els2.x86_64.rpm 00a8e72c4e0892692709e2b9bd484d4ca0c1c6ba0d2de1d4d4d8c9dc179e4ac0 CLSA-2025:1762868093 TuxCare License Agreement 0 - rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els7 - CVE-2024-34156: fix stack exhaustion in Decoder.Decode in golang Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els7 - CVE-2024-34156: fix stack exhaustion in Decoder.Decode in golang

0 tuxcare-almalinux9.2-esu grafana-pcp-5.1.1-1.el9_2.tuxcare.els1.x86_64.rpm 42cd47d49ac2a2838bb16cb4475e03927d3939d33d5eedf57281563be10f976d CLSA-2025:1762868654 TuxCare License Agreement 0 - CVE-2025-9900: fix write-what-where vulnerability by enforcing bounds checking on image height metadata Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-9900: fix write-what-where vulnerability by enforcing bounds checking on image height metadata

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els6.i686.rpm 5c1fdf2ab2c0277df879ce0a637bb9040cdfd80de611be8cce05aebc1eb02c0d libtiff-4.4.0-8.el9_2.tuxcare.els6.x86_64.rpm bd07a7663907795e5ec399736bb1ce839326b4b5ad6871d773cf346bab88b04b libtiff-devel-4.4.0-8.el9_2.tuxcare.els6.i686.rpm 11858352e0b5b0d286169ba18905e74f54ee4147b08b1044f143776b1c129eb1 libtiff-devel-4.4.0-8.el9_2.tuxcare.els6.x86_64.rpm 6aa29e4ccc6b4d5afabc6b60bf447b1556b246872e5889ad2f23b918dffae8c2 libtiff-static-4.4.0-8.el9_2.tuxcare.els6.x86_64.rpm 22d9e408c2732f4f7a91fc140b80be0e4f35c67f50e06ccd1ec3d0c5a3a0b978 libtiff-tools-4.4.0-8.el9_2.tuxcare.els6.x86_64.rpm c125376510bfd4d5036355376b38b7ef31aadb194be4b1990c9e731babaf5c0e CLSA-2025:1762957887 TuxCare License Agreement 0 - CVE-2024-45321: patch the code to use https instead of http Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45321: patch the code to use https instead of http

0 tuxcare-almalinux9.2-esu perl-App-cpanminus-1.7044-14.el9.tuxcare.els1.noarch.rpm 998f39652b0bce635cfb6675c2a6ddd6997f6efc5e40f56458fd31ca393dd34c perl-App-cpanminus-tests-1.7044-14.el9.tuxcare.els1.noarch.rpm eafeb1a97d69cb8ca523868ba01f128bd89ce96ac86c91d2e1ae67e72082dc65 CLSA-2025:1762958433 TuxCare License Agreement 0 - CVE-2025-40907: fix integer overflow when parsng FastCGI parameters Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-40907: fix integer overflow when parsng FastCGI parameters

0 tuxcare-almalinux9.2-esu perl-FCGI-0.79-8.el9.tuxcare.els1.x86_64.rpm c2040b329ad04484fc6f5a68dee85bb0e0fc7b22d62312d31ee0b2da4c9d042c CLSA-2025:1762785221 TuxCare License Agreement 0 - update tarball to 6.2.21 - CVE‑2025‑46818: fix Lua scripting vulnerability allowing code execution by authenticated users - CVE‑2025‑46819: fix Lua scripting vulnerability causing out-of-bounds memory access or server crash Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update tarball to 6.2.21 - CVE‑2025‑46818: fix Lua scripting vulnerability allowing code execution by authenticated users - CVE‑2025‑46819: fix Lua scripting vulnerability causing out-of-bounds memory access or server crash

0 tuxcare-almalinux9.2-esu redis-6.2.21-1.el9.tuxcare.els1.x86_64.rpm c505032a803dd85e943445a99232b75d4b96adfe04d3438e10bae67f50547959 redis-devel-6.2.21-1.el9.tuxcare.els1.i686.rpm 1f881bf0eb3962a2fd745c0be6b1cdb09ad35fd5f81da3ac14998b3e81926a0b redis-devel-6.2.21-1.el9.tuxcare.els1.x86_64.rpm 500d863bc2e989d71409d85614ec14eb543080a00ffb865a74af308f7876b102 redis-doc-6.2.21-1.el9.tuxcare.els1.noarch.rpm 47e2051746ffa035f97a92c8ce951c58088a2ecf11195426ab5fd20fc198de58 CLSA-2025:1763025415 TuxCare License Agreement 0 - CVE-2024-12133: fix inefficient handling of specific certificate data in libtasn1 to prevent denial of service attacks Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12133: fix inefficient handling of specific certificate data in libtasn1 to prevent denial of service attacks

0 tuxcare-almalinux9.2-esu libtasn1-4.16.0-9.el9.tuxcare.els1.i686.rpm 4a3bb58786a571b91544abe856d385a24f2aca3c7841311577d0c558d8501de2 libtasn1-4.16.0-9.el9.tuxcare.els1.x86_64.rpm 9e064a2e3a35a1ca3452ac79e8afa2617bcd6f23d79403f5a637b2047f303f44 libtasn1-devel-4.16.0-9.el9.tuxcare.els1.i686.rpm 26b0e0ef70984fc62473b033d2ca99f7ff56a04caf5e0cbe7b5e9e9e50f2d5f2 libtasn1-devel-4.16.0-9.el9.tuxcare.els1.x86_64.rpm b8dab52b3476951139a69ceaa30bdfdd105d6cc6e902f89346e5c3fc6e8c5975 libtasn1-tools-4.16.0-9.el9.tuxcare.els1.x86_64.rpm 0898beacdca3825bc8176597621278b31b572b4d4278446011fa2b6eb79de00a CLSA-2025:1763031616 TuxCare License Agreement 0 - CVE-2023-27349: fix crash while handling unsupported events in avrcp - CVE-2023-44431: fix Stack-based buffer overflow and remote code execution vulnerability - CVE-2023-45866: restrict HID connections to avoid unauthorized input injection - CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary code execution by validating user-supplied data length before copying to buffer - CVE-2023-51580: validate AVRCP attribute list data to prevent out-of-bounds reads and information disclosure - CVE-2023-51589: validate AVRCP media element data to prevent out-of-bounds reads and information disclosure - CVE-2023-51592: validate AVRCP media folder data to prevent out-of-bounds reads and information disclosure - CVE-2023-51594: validate OBEX protocol parameters to prevent out-of-bounds reads and information disclosure - CVE-2023-51596: validate PBAP data length to prevent heap overflow and remote code execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-27349: fix crash while handling unsupported events in avrcp - CVE-2023-44431: fix Stack-based buffer overflow and remote code execution vulnerability - CVE-2023-45866: restrict HID connections to avoid unauthorized input injection - CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary code execution by validating user-supplied data length before copying to buffer - CVE-2023-51580: validate AVRCP attribute list data to prevent out-of-bounds reads and information disclosure - CVE-2023-51589: validate AVRCP media element data to prevent out-of-bounds reads and information disclosure - CVE-2023-51592: validate AVRCP media folder data to prevent out-of-bounds reads and information disclosure - CVE-2023-51594: validate OBEX protocol parameters to prevent out-of-bounds reads and information disclosure - CVE-2023-51596: validate PBAP data length to prevent heap overflow and remote code execution

0 tuxcare-almalinux9.2-esu bluez-5.72-4.el9.tuxcare.els1.x86_64.rpm 663ac621d63aaeff55a6a394dfc699276eea413761970339d2f79c15c91ad38c bluez-cups-5.72-4.el9.tuxcare.els1.x86_64.rpm f37ea1439bedef509187ea61f59bb101af884b90f41694980530dc6acda3f1a9 bluez-hid2hci-5.72-4.el9.tuxcare.els1.x86_64.rpm 995b25360fb5a159a9daca6d8793f3cf565ad8bd8c0bde8c4b720263e3bebb68 bluez-libs-5.72-4.el9.tuxcare.els1.i686.rpm 52fec3b33c828fdb4be825e25866cf59f336ba9c0842e600ab7cb154537671a5 bluez-libs-5.72-4.el9.tuxcare.els1.x86_64.rpm 6b6b0a3908d823c13f3088373c85b4863ecaea4c53ce2f24e6de79afe6d7326f bluez-libs-devel-5.72-4.el9.tuxcare.els1.i686.rpm dd56ce6e4b50f782743c3e9edd99d2e2004d7f7337a96878684dae8f35748f05 bluez-libs-devel-5.72-4.el9.tuxcare.els1.x86_64.rpm 984527ac591e90fb66c817cadaa510f25c72b7a99528187b403f2fb4b03b205b bluez-mesh-5.72-4.el9.tuxcare.els1.x86_64.rpm a56044c74b58f9e3d1d05eff282efc6a064cf8a7b676231629a77953f020b0dd bluez-obexd-5.72-4.el9.tuxcare.els1.x86_64.rpm e4836adcce82fd6b7fd66c0d50510fc2a3de2ed941b35384a01f77e0bfb0954e CLSA-2025:1763032400 TuxCare License Agreement 0 - CVE-2023-41081: fix authentication bypass by removing implicit mapping functionality in mod_jk Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-41081: fix authentication bypass by removing implicit mapping functionality in mod_jk

0 tuxcare-almalinux9.2-esu mod_jk-1.2.48-23.el9.tuxcare.els1.x86_64.rpm 8c9fb5d25ea0fd22ff243d5a867a4d956d5436756b5fdde399cc0af872bfe489 CLSA-2025:1763032859 TuxCare License Agreement 0 - CVE-2023-43804: fix issue to properly handle Cookie header to prevent information leakage via HTTP redirects Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-43804: fix issue to properly handle Cookie header to prevent information leakage via HTTP redirects

0 tuxcare-almalinux9.2-esu python3.11-urllib3-1.26.12-1.el9.tuxcare.els1.noarch.rpm 84ff40cf6ea4c780aed90f20bccc1eac66429075e987d4ea381083b1b3e4e396 CLSA-2025:1763033515 TuxCare License Agreement 0 - CVE-2025-3159: fix heap-based buffer overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices function of ASE File Handler Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-3159: fix heap-based buffer overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices function of ASE File Handler

0 tuxcare-almalinux9.2-esu qt5-qt3d-5.15.3-1.el9.tuxcare.els2.i686.rpm f1fad57df52028b34bb67969ac2a3c14b9486f982b349185ccb49427fddb8ec2 qt5-qt3d-5.15.3-1.el9.tuxcare.els2.x86_64.rpm 5e912321aa640faeba1c77c326a7f1338c6c5ec3b0782e62f0ddef38f567d12c qt5-qt3d-devel-5.15.3-1.el9.tuxcare.els2.i686.rpm 30dada2fbb074e695bd49e6cdd450a2e58dbf5e66ba46cf61cc5febd7f08e76d qt5-qt3d-devel-5.15.3-1.el9.tuxcare.els2.x86_64.rpm 26356e86476b98e05e76099a842a92874987043c3edc3eb91ae0bb3dbbdb6b47 qt5-qt3d-examples-5.15.3-1.el9.tuxcare.els2.x86_64.rpm 2bc3f2baf3a50561002ad80dec0934a8f5a01fdeacbd2c96415c27535fbf93f7 qt5-qt3d-tests-5.15.3-1.el9.tuxcare.els2.x86_64.rpm 5cdde55885ed076d5a3be1a7f477a72fae403fde3b0b37dde7bf745dcf508e5c CLSA-2025:1763122640 TuxCare License Agreement 0 - CVE-2022-36763: fix heap buffer overflow in TPM2 measure boot library when processing GPT partition tables - CVE-2022-36764: fix heap buffer overflow in TPM measure boot library when calculating PE image event size - CVE-2022-36765: fix integer overflow in CreateHob() function that could lead to undersized HOB allocation and out-of-bounds memory access - Refactoring: fix symbol collision between TPM libraries introduced by CVE-2022-36763 and CVE-2022-36764 patches Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-36763: fix heap buffer overflow in TPM2 measure boot library when processing GPT partition tables - CVE-2022-36764: fix heap buffer overflow in TPM measure boot library when calculating PE image event size - CVE-2022-36765: fix integer overflow in CreateHob() function that could lead to undersized HOB allocation and out-of-bounds memory access - Refactoring: fix symbol collision between TPM libraries introduced by CVE-2022-36763 and CVE-2022-36764 patches

0 tuxcare-almalinux9.2-esu edk2-aarch64-20221207gitfff6d81270b5-9.el9_2.tuxcare.els1.noarch.rpm b1703f3dd0bb8815e40b1f5f512f08412714d9eb3b5fc1e9620de5490b05c9a3 edk2-ovmf-20221207gitfff6d81270b5-9.el9_2.tuxcare.els1.noarch.rpm 2f8920542ef6aaedafaf11b7076b89744a5fc6306d1d8797d39160ccdac65c0e edk2-tools-20221207gitfff6d81270b5-9.el9_2.tuxcare.els1.x86_64.rpm a42689aa135adacedb5bbbe77870582641630c43ac7f2964b897f2ad1fcd48da edk2-tools-doc-20221207gitfff6d81270b5-9.el9_2.tuxcare.els1.noarch.rpm d995fdbb513686f1d7b05052286f6dc927dce44c1ddad9fbf10ac5608aa57833 CLSA-2025:1763123299 TuxCare License Agreement 0 - CVE-2023-41915: prevent attackers from obtaining ownership of arbitrary files by fixing race condition during execution of library code with UID 0 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-41915: prevent attackers from obtaining ownership of arbitrary files by fixing race condition during execution of library code with UID 0

0 tuxcare-almalinux9.2-esu pmix-3.2.3-3.el9.tuxcare.els1.i686.rpm 63a5f5bfa74c3eb8c670a37b5e0aee00501a29727ce6ed7e14dfc1c30815a789 pmix-3.2.3-3.el9.tuxcare.els1.x86_64.rpm 48154357a165d33b35a279ce0ddc1a0c017424ace98cd256202e1899d4b8521e pmix-devel-3.2.3-3.el9.tuxcare.els1.i686.rpm eb7125c728a29955d6860a8843b194ff20cc05a26f51b0a5b4c1b259c4893d4a pmix-devel-3.2.3-3.el9.tuxcare.els1.x86_64.rpm ab964e0dbd5413ce70a323835803cfa1f8be2e33a77a9f65a50e4df39e3b6d90 pmix-pmi-3.2.3-3.el9.tuxcare.els1.i686.rpm 97c4a3e4a10d163a1eca74dec504381d6cd1bbbf6285fee3652afab51b82c682 pmix-pmi-3.2.3-3.el9.tuxcare.els1.x86_64.rpm a52e9b6e36fd430d65640f4333d3afb7fe230ae6e19c6ff07a6e8d84f8e52822 pmix-pmi-devel-3.2.3-3.el9.tuxcare.els1.i686.rpm 3bc26a59a52b30bb7aa51e592a6203742daa1581ac0dc0545dbbdc162d4d8e52 pmix-pmi-devel-3.2.3-3.el9.tuxcare.els1.x86_64.rpm 5467e5f6d6af5b67b343845f811ce31330ae10502345eb49d235400d87d7dc35 pmix-tools-3.2.3-3.el9.tuxcare.els1.x86_64.rpm f2a8a137fc62fb5d21b462baf3a8d6260d7ea4785e8a6c8268ed019652f5cdc2 CLSA-2025:1763123915 TuxCare License Agreement 0 - CVE-2025-8067: fix issue allowing unprivileged users to create loop devices by validating lower bound of index parameter in loop device handler function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8067: fix issue allowing unprivileged users to create loop devices by validating lower bound of index parameter in loop device handler function

0 tuxcare-almalinux9.2-esu libudisks2-2.9.4-7.el9.tuxcare.els1.i686.rpm 2bf294ea6fa724ec8b9858d0aacd63829738f4025fa9a6474b17820e866d88e6 libudisks2-2.9.4-7.el9.tuxcare.els1.x86_64.rpm 3c482748985547c9ceae253cbdf95c01a1389601583ef5ae6f729974faece37a libudisks2-devel-2.9.4-7.el9.tuxcare.els1.i686.rpm 8a3d890a50927d7489c07a0c1766c735b6e5344f4d0a822db16c2c181c19ea9b libudisks2-devel-2.9.4-7.el9.tuxcare.els1.x86_64.rpm 3857cf396eb18a29cb643aedc91cc389e26feb54db5340227d78a5b4e009b690 udisks2-2.9.4-7.el9.tuxcare.els1.x86_64.rpm 723d88ba3f60f9eaf9f92fdf29b1eb7383594b9ec9669b6d39fa91b6c365ded8 udisks2-iscsi-2.9.4-7.el9.tuxcare.els1.x86_64.rpm 3a26c2fd3f345315d0f94fc077dbf416dcd7efa93ea8872375c83f2767207c05 udisks2-lsm-2.9.4-7.el9.tuxcare.els1.x86_64.rpm 766df3f26dcd9328684302150a6b69d63bfccc29e6b3258c184a7b754c62d765 udisks2-lvm2-2.9.4-7.el9.tuxcare.els1.x86_64.rpm a4328b4fb0faa643da9c5bdefc99e6399dd5b01e36fa66679217199bd7f76a7d CLSA-2025:1763124505 TuxCare License Agreement 0 - CVE-2023-6816: fix heap buffer overflow in logical button map allocation, allocate sufficient space for maximum button mappings (up to 255) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6816: fix heap buffer overflow in logical button map allocation, allocate sufficient space for maximum button mappings (up to 255)

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els1.i686.rpm b9f34f5f7e8f333c9ece858e44e9553540aca72c1703aa24ff9c47c428cb05a5 xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els1.x86_64.rpm d6ed0596bc678ade2d0620c86df71d1fc5695199ad3bd79c722913c9d8ee86f5 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els1.i686.rpm f7d3ace86245b0f7b545e9b5120946a335f7d569a6760848669467fd17ea90a4 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els1.x86_64.rpm 18495fef5075a44bd66f296e5e43fbeacea1e9e7e3270ef4d8102ac8f0a63553 CLSA-2025:1763125295 TuxCare License Agreement 0 - CVE-2025-62230: fix use-after-free vulnerability in XKB resource handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-62230: fix use-after-free vulnerability in XKB resource handling

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els19.x86_64.rpm 1d9edfb1e00c4d411b391ee23d8a6e80918a16b553f89a1bb17bfbb3ac33485c tigervnc-icons-1.12.0-13.el9_2.tuxcare.els19.noarch.rpm e2d2b4ffd6176095039f7e64353fed8ebbab4397af03f6fdbb991dca55f0eb8d tigervnc-license-1.12.0-13.el9_2.tuxcare.els19.noarch.rpm 0fd25fa81f04be0de0315cf9fdf530c22d3cf2d3066b0c95ba43aefa850140d5 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els19.noarch.rpm c6ca6cf4cc83b2c23fdbbdf17a19252fac134b1905750056e5e710222619b03f tigervnc-server-1.12.0-13.el9_2.tuxcare.els19.x86_64.rpm 091e6e3f174b8493f77b5af46268fe4db59ed24101fc0dc37d1d1d5349db0819 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els19.x86_64.rpm 1ceec075af3fc7f89e3c0808d0dd5319dada270894dabc04f5f63dc09ee3068a tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els19.x86_64.rpm c21c2a69784be7a6a69bb56cb56a0140ddf452c963eef2f4c11fd25db6f25acd CLSA-2025:1763137741 TuxCare License Agreement 0 - CVE-2023-49083: fix crash when loading PKCS#7 bundle with no certificates - Fix RUSTFLAGS macro expansion in build process Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-49083: fix crash when loading PKCS#7 bundle with no certificates - Fix RUSTFLAGS macro expansion in build process

0 tuxcare-almalinux9.2-esu python3.11-cryptography-37.0.2-5.el9.tuxcare.els1.x86_64.rpm ceb7bddd51f3d376b9c8433b0184a4ebf796c50cd5d6d26575fb0f415a1bf3a9 CLSA-2025:1763138343 TuxCare License Agreement 0 - CVE-2025-62231: fix improper bounds checking in XkbSetCompatMap() function to prevent unsigned short overflow and potential memory corruption or crash Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-62231: fix improper bounds checking in XkbSetCompatMap() function to prevent unsigned short overflow and potential memory corruption or crash

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els21.x86_64.rpm aa928100e454db485d17d8e6eaab672c7a8a7936efb78be06de6c656a3287d5c tigervnc-icons-1.12.0-13.el9_2.tuxcare.els21.noarch.rpm 7c240cb102c6395c9cc52ac2036fa21a4923e7d67deaa25c0025d3c8e03825ea tigervnc-license-1.12.0-13.el9_2.tuxcare.els21.noarch.rpm 2f18f77c9f217f21f975e1237c6792e2b51787109bd4d4e398affd3fd99996d1 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els21.noarch.rpm 017ab0e702ec87d5f21ef2b7dc95980aed1323ebeb5af0768a56a276241eb762 tigervnc-server-1.12.0-13.el9_2.tuxcare.els21.x86_64.rpm 4571a465e3099ba02a8718dbc2856ad70536b180e892c8108e001948f7be8312 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els21.x86_64.rpm 766265b7fa3c0a866d7faf20ac1382154ea44452592d83e643f2c855f9cd81a9 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els21.x86_64.rpm 70a96aaea2f92e2871857f17238d93cb3548baba138c69e64b41c131498b284d CLSA-2025:1763374645 TuxCare License Agreement 0 - CVE-2024-30156: fix HTTP/2 flow control vulnerability allowing window credit exhaustion (Broke Window Attack) causing potential denial of service - CVE-2025-47905: fix client-side request smuggling via malformed HTTP/1 chunked requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-30156: fix HTTP/2 flow control vulnerability allowing window credit exhaustion (Broke Window Attack) causing potential denial of service - CVE-2025-47905: fix client-side request smuggling via malformed HTTP/1 chunked requests

0 tuxcare-almalinux9.2-esu varnish-6.6.2-3.el9_2.1.tuxcare.els1.i686.rpm 07917b962ec50795ab80c382839d891dee62412fbb1b1f90e1f6e09b47c5edc8 varnish-6.6.2-3.el9_2.1.tuxcare.els1.x86_64.rpm 29644965438ffc183995453eca6b7e85abfa8c7b835e3f061863b0d8786c3a85 varnish-devel-6.6.2-3.el9_2.1.tuxcare.els1.i686.rpm 6f8cc46998482b799dc0840f0661b6d7cef16edef874f230299fe8123f5fbab2 varnish-devel-6.6.2-3.el9_2.1.tuxcare.els1.x86_64.rpm e7769177690817bf0c74d07860a1b5cd433fa074e3af9f3e70085c5fd305c494 varnish-docs-6.6.2-3.el9_2.1.tuxcare.els1.x86_64.rpm 0672e4fea9bd7db3a0419d8bf40fa348f36dfb297d7b90a307fdfa6ead1fe63f CLSA-2025:1763391572 TuxCare License Agreement 0 - CVE-2025-7493: fix privilege escalation, validate krbCanonicalName to prevent host-to-realm admin escalation, blocks unauthorized admin actions and data exfiltration Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-7493: fix privilege escalation, validate krbCanonicalName to prevent host-to-realm admin escalation, blocks unauthorized admin actions and data exfiltration

0 tuxcare-almalinux9.2-esu ipa-client-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm a2df0373b0cf9f673a36d0a3f87e180b2d88fad1982b8913e1c6ea2b35de36d8 ipa-client-common-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 055aef5e3f3d3e2b9011e2257df66d6b58013fb26be932d15c12cf10cf389091 ipa-client-epn-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm 25b775bb8ce986134c9c8f8d464fea261409f985ad407a1bb7c5e5ba47bdcc57 ipa-client-samba-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm eb485085ce2c6d4e75631ae703e70c5e29902b1f26868ab1ef8a1535c88c2ee3 ipa-common-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 57a6a2d77cd22d05880eb0dd2d077705e4627b69ad9425cabc0a7708e78f6972 ipa-python-compat-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 947fe21d259b913df3558461ca9c1d099c66c849b15c409ed281243c8d9c165d ipa-selinux-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 2362ee4e7893202a970c0cc340198e92d94375dc780ef0d7e3bd6e25b0e2f4d8 ipa-server-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm 30be9b4eebe4e3fd14238f500a941cfee9420dd46e92b87886dcc22be731708d ipa-server-common-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 3e4942312291b33cb59b5306240308a5dfd977a1458dd4ff88365bf56c12d570 ipa-server-dns-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 4db8b4a5f18756653bd1facb266aea16ff48ef51c7de6883d1a3e7930a27038c ipa-server-trust-ad-4.10.1-9.el9_2.alma.1.tuxcare.els2.x86_64.rpm 84a74054aac1b631592b3e6d672e6d885f0733f3dc787cb06059cd033ee320e5 python3-ipaclient-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 29dccc38ebe65beb094fd1ed078a1e9460b2799c6e25b523738ab455d0180778 python3-ipalib-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm f9ffab5a7bbb7fae0df1bba2eab186d4e9adea6de49f9d5fff3e021cc06bd5fb python3-ipaserver-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 1033a5f7f167e8b777b0750f2515dc673aec8a5ba85d9ac5d9d3365d0b5ff65d python3-ipatests-4.10.1-9.el9_2.alma.1.tuxcare.els2.noarch.rpm 7b9706910c00ad95e16f8ce0502ff1bb4ff9626fa7cdbdab9c909146d0a52af8 CLSA-2025:1763418416 TuxCare License Agreement 0 - CVE-2024-12243: fix inefficient algorithm in libtasn1 for decoding certain DER-encoded certificate data to prevent denial-of-service condition Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12243: fix inefficient algorithm in libtasn1 for decoding certain DER-encoded certificate data to prevent denial-of-service condition

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.4.els2.i686.rpm cc4d54df244095e2d7ba7ed2152a5370bd2c855457c1107bcf35073908272d00 gnutls-3.7.6-23.el9_2.tuxcare.4.els2.x86_64.rpm cfb169ca95079e0398d8685829ed787e6adedf4ee1a8bd67f4eb1d158aa88799 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els2.i686.rpm 13e4d4af515397588cd2af48316c51d7ebc6c77be537777ec668c6cf0a717cb1 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els2.x86_64.rpm 882744f318d32357b4f1eaaeb9481766fe7c182cab2de53e0652846b72926ff6 gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els2.i686.rpm 06771f85f6788edd31f06bfe23bb4b81b0f630bb693a3f55e0d96b2ff97a0bde gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els2.x86_64.rpm f2e116517a40cd766bbbea37d53f205f5d2ea83acb53de656a275ee49526de46 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els2.i686.rpm 3892be675bb862ccf4791c2000a0eaba2b32b9db4af91fa641519105b0b8203f gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els2.x86_64.rpm 64cc9a30bda9f801a18b7259a35ce2fd6490cc366d2f39eaff4c6a4ec97a29a7 gnutls-utils-3.7.6-23.el9_2.tuxcare.4.els2.x86_64.rpm ce497e66ffd183c8e2eb874bfeb8646b5e9a24c0a11bf014690492f230cec5b8 CLSA-2025:1763419211 TuxCare License Agreement 0 - CVE-2024-9050: sanitize VPN configuration input to prevent local privilege escalation via malicious 'leftupdown' key value Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9050: sanitize VPN configuration input to prevent local privilege escalation via malicious 'leftupdown' key value

0 tuxcare-almalinux9.2-esu NetworkManager-libreswan-1.2.14-1.el9.3.tuxcare.els1.x86_64.rpm cddb0f4256028e11aa8b55e16d6c258c713ed47829edbbe884c9fb8064337fba NetworkManager-libreswan-gnome-1.2.14-1.el9.3.tuxcare.els1.x86_64.rpm a8c06b3e7a434bbf209c2565bb30af0e19df9b146841b9aa4ea6ec2bf02b188a CLSA-2025:1763489872 TuxCare License Agreement 0 - rebuild with newer golang to fix security vulnerabilities: - CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability - CVE-2024-24788: fix DNS resolver infinite loop causing denial of service - CVE-2023-39321: fix QUIC post-handshake message processing causing panic and denial of service Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang to fix security vulnerabilities: - CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability - CVE-2024-24788: fix DNS resolver infinite loop causing denial of service - CVE-2023-39321: fix QUIC post-handshake message processing causing panic and denial of service

0 tuxcare-almalinux9.2-esu runc-1.1.4-1.el9_1.tuxcare.els2.x86_64.rpm 585bc408c5f3a936b5459d7013b4e63ab76aa3c92f1a30e4233cdcb072698d0b CLSA-2025:1763558418 TuxCare License Agreement 0 - CVE-2023-6377: fix buffer overwrite caused by allocating too few XkbActions for device buttons, preventing writes past the intended action array Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6377: fix buffer overwrite caused by allocating too few XkbActions for device buttons, preventing writes past the intended action array

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els5.i686.rpm bc893f14ef821ce4c891896642774a05a95b8b6717fe7538a857ff8b8e599494 xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els5.x86_64.rpm dad51002b2d0562e71e07495a62b207491fccae35e11f29a9e5c76b4d5c32e9b xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els5.i686.rpm 2bbb785cbb7f6fa44dcaa79ae72eff7e6b5da8816b4ed19b9766d34be73149db xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els5.x86_64.rpm b358459bbd270399e219247669b7b7d62991e137ed413b8210c5bf61670bbcae CLSA-2025:1763639786 TuxCare License Agreement 0 - fix store_client memory leak causing OOM - fix PeerDigest lifetime management to prevent leaks None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix store_client memory leak causing OOM - fix PeerDigest lifetime management to prevent leaks

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els9.x86_64.rpm 81c3c0a91bb79c8ac63b2b753d4052691a12e118017181fa7c341ec1d73af3de CLSA-2025:1763647564 TuxCare License Agreement 0 - CVE-2024-0409: fix incorrect cursor private key usage in Xwayland/Xephyr that caused XSELINUX devPrivates corruption - CVE-2025-26597: fix buffer overflow in XkbChangeTypesOfKey() by properly resizing key syms and actions when nGroups is zero - CVE-2025-26594: fix root cursor lifetime handling to prevent use-after-free and stale references Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0409: fix incorrect cursor private key usage in Xwayland/Xephyr that caused XSELINUX devPrivates corruption - CVE-2025-26597: fix buffer overflow in XkbChangeTypesOfKey() by properly resizing key syms and actions when nGroups is zero - CVE-2025-26594: fix root cursor lifetime handling to prevent use-after-free and stale references

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els7.i686.rpm 5c9e9ddc154f7a147369e81911b709912f746fdbe458cf3d31c2df4893500c81 xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els7.x86_64.rpm 528bb72730a5f3f60ee73ffdc85e63e186f3e2af45db24f753d7446e3d20657d xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els7.i686.rpm 560d308270e2b4aa055c421f8fe9f74c7fe52f35ce626dc1e82e32501d72d8fc xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els7.x86_64.rpm 6d1110df5e2e70fdaa5f7d25d1281a68e6649545df4ddfe3b4cf956576138755 CLSA-2025:1763648370 TuxCare License Agreement 0 - CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els10.i686.rpm 02b6b5f8b8325c245f280b2254467979b6d3a3c3a25f885ea5c997b60c80cb86 libsoup-2.72.0-8.el9_2.tuxcare.els10.x86_64.rpm 99d57a2a33e77bbc50330f531610c2498f173647568ecd06cbae2f24d8f2e5b8 libsoup-devel-2.72.0-8.el9_2.tuxcare.els10.i686.rpm d478f80845214c88c606e80d80e31fc271042f23faebf8041b419d402fa0eb49 libsoup-devel-2.72.0-8.el9_2.tuxcare.els10.x86_64.rpm eefc66aa9893ba3dfef7c5b0a986d59aeb9baeb49cd517d5795003a20edfb371 libsoup-doc-2.72.0-8.el9_2.tuxcare.els10.noarch.rpm 66fabd3285a8824785eee5b92fce169b6a34f253f387ff03392b2b05ff0feaf3 CLSA-2025:1763648873 TuxCare License Agreement 0 - upgrade to runc 1.2.8 to fix multiple critical security vulnerabilities: - CVE-2024-21626: fix file descriptor leak vulnerability allowing container escape - CVE-2025-52565: fix container escape with malicious config due to /dev/console mount races - CVE-2025-31133: fix container escape and denial of service due to masked path abuse - CVE-2025-52881: fix container escape and denial of service due to procfs write redirects - remove obsolete CVE-2023-27561_CVE-2023-28642.patch (fixes included in 1.2.8) - add no_openssl build tag to prevent use of vendored crypto libraries - add runc_dmz_selinux_nocompat build tag for SELinux DMZ feature support - add container-selinux >= 2.224.0 dependency for DMZ SELinux feature Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- upgrade to runc 1.2.8 to fix multiple critical security vulnerabilities: - CVE-2024-21626: fix file descriptor leak vulnerability allowing container escape - CVE-2025-52565: fix container escape with malicious config due to /dev/console mount races - CVE-2025-31133: fix container escape and denial of service due to masked path abuse - CVE-2025-52881: fix container escape and denial of service due to procfs write redirects - remove obsolete CVE-2023-27561_CVE-2023-28642.patch (fixes included in 1.2.8) - add no_openssl build tag to prevent use of vendored crypto libraries - add runc_dmz_selinux_nocompat build tag for SELinux DMZ feature support - add container-selinux >= 2.224.0 dependency for DMZ SELinux feature

0 tuxcare-almalinux9.2-esu runc-1.2.8-1.el9_1.tuxcare.els1.x86_64.rpm 01968758429c4f11f99681f724a0e0cfa17b07615e81a1502ab9121736958b35 CLSA-2025:1763651916 TuxCare License Agreement 0 - CVE-2023-1393: fix use-after-free in compositor overlay window by clearing dangling COW pointer - CVE-2024-31080: prevent heap over-read in ProcXIGetSelectedEvents() caused by using byte-swapped length values in replies. - CVE-2024-31081: fix buffer over-read in ProcXIPassiveGrabDevice by using correct unswapped length for replies - CVE-2025-26600: fix use-after-free by clearing pending events when removing a frozen device Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-1393: fix use-after-free in compositor overlay window by clearing dangling COW pointer - CVE-2024-31080: prevent heap over-read in ProcXIGetSelectedEvents() caused by using byte-swapped length values in replies. - CVE-2024-31081: fix buffer over-read in ProcXIPassiveGrabDevice by using correct unswapped length for replies - CVE-2025-26600: fix use-after-free by clearing pending events when removing a frozen device

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els9.i686.rpm 37e146480213a98956ce61c4926d34ef68b9ce5f2369cf17b050d4e9582646a7 xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els9.x86_64.rpm a70a3c04f32d5b977148b3f11638fb5c7b7319cc8b463dbcd6e763bbf21cc2c6 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els9.i686.rpm c2cb3225d9a05a8f1c7bed85353e1e9a3ea0b480f4c6e47c72861e742a95841f xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els9.x86_64.rpm 0a881238d381c9b0af140a8414d5cbf9b10ae8551825fcdd8ed9282a59665658 CLSA-2025:1763716672 TuxCare License Agreement 0 - CVE-2023-45229: fix IPv6 malformed option handling to prevent parsing loop - CVE-2023-45230: fix DHCPv6 ServerID length validation to prevent buffer overflow - CVE-2023-45231: fix IPv6 Redirect bounds checks to avoid out-of-bounds access - CVE-2023-45232: fix IPv6 destination option parsing to prevent infinite loop - CVE-2023-45233: fix PadN option handling in IPv6 PXE processing to prevent loop - CVE-2023-45234: fix DHCPv6 Advertise DNS Servers option parsing to prevent buffer overflow - CVE-2023-45235: fix DHCPv6 proxy Advertise ServerID option parsing to prevent buffer overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-45229: fix IPv6 malformed option handling to prevent parsing loop - CVE-2023-45230: fix DHCPv6 ServerID length validation to prevent buffer overflow - CVE-2023-45231: fix IPv6 Redirect bounds checks to avoid out-of-bounds access - CVE-2023-45232: fix IPv6 destination option parsing to prevent infinite loop - CVE-2023-45233: fix PadN option handling in IPv6 PXE processing to prevent loop - CVE-2023-45234: fix DHCPv6 Advertise DNS Servers option parsing to prevent buffer overflow - CVE-2023-45235: fix DHCPv6 proxy Advertise ServerID option parsing to prevent buffer overflow

0 tuxcare-almalinux9.2-esu edk2-aarch64-20221207gitfff6d81270b5-9.el9_2.tuxcare.els2.noarch.rpm 8e2b31c55d99628098432c238dc603fb34258dfa0b3f00dccd45a85f26e5d3d3 edk2-ovmf-20221207gitfff6d81270b5-9.el9_2.tuxcare.els2.noarch.rpm 052ef45b37b4a06c390de14a9887373b751cc53d471806b1bac82d6eccc89345 edk2-tools-20221207gitfff6d81270b5-9.el9_2.tuxcare.els2.x86_64.rpm 1bac215134f555b6d7c282f3fcfc11b67e049658502985a3f53a5087597aabf7 edk2-tools-doc-20221207gitfff6d81270b5-9.el9_2.tuxcare.els2.noarch.rpm 528aaa026d8dedcb9071494f5e82cb19e5866c74a9629850bc433b281bb509f4 CLSA-2025:1763717278 TuxCare License Agreement 0 - CVE-2025-62168: fix redaction failure to prevent information disclosure in error handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-62168: fix redaction failure to prevent information disclosure in error handling

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els10.x86_64.rpm 3f470e6e60276cd185f2becf4a95ed148e31e90e6ae39d0e1a8699e753227ee3 CLSA-2025:1764026530 TuxCare License Agreement 0 - CVE-2023-38197: fix infinite loops in recursive entity expansion Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-38197: fix infinite loops in recursive entity expansion

0 tuxcare-almalinux9.2-esu qt5-qtbase-5.15.3-1.el9.tuxcare.els3.i686.rpm c6b07e4656287b056a76db0cfb0fb1d7178e04d20c2203b800678a9e00517c6c qt5-qtbase-5.15.3-1.el9.tuxcare.els3.x86_64.rpm ff0264f3a068e14955dd64fbf201de60395edbf1ab0d003d8a84e1b5626237bd qt5-qtbase-common-5.15.3-1.el9.tuxcare.els3.noarch.rpm 11c3988e8818f8e798643f4309081897e5a581ed4f35ceee20b797239e8ec757 qt5-qtbase-devel-5.15.3-1.el9.tuxcare.els3.i686.rpm 615892f55de417849e7ed81f40ee459d0f5b5fe836174a893f7a4ed06fb3fde7 qt5-qtbase-devel-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 2dbd713409ea8129904fedcd69aaaf658784e206b8c5f4e6797d9678f64f02dd qt5-qtbase-examples-5.15.3-1.el9.tuxcare.els3.i686.rpm 5613e38d8f4107b847a003b0e9246aea00fb7a4bc494ede1483000e3c37193bd qt5-qtbase-examples-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 5ab47e56497b6c956ab3b7d6f16944c0d3aa004f396eef9c9c02426b4a308c0d qt5-qtbase-gui-5.15.3-1.el9.tuxcare.els3.i686.rpm 5b41585ebc566c629515edf725f82de95e073c5c9c245e66cc900aad93d52b90 qt5-qtbase-gui-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 14e0dca864d57e11e09a4bebed62cadde204f899a204b795933cd69d6a1dbcd3 qt5-qtbase-mysql-5.15.3-1.el9.tuxcare.els3.i686.rpm 264b284950beb09444226d0dd3b42e3c18e283351528d205d0462fb796322bcd qt5-qtbase-mysql-5.15.3-1.el9.tuxcare.els3.x86_64.rpm ecccaa06b24a8cf23a3d39fe90b929898bfa8c6180c5fca8ae7eefbece8c0a78 qt5-qtbase-odbc-5.15.3-1.el9.tuxcare.els3.i686.rpm c6c8847275681ff2e9c3d1d8723aa595c299555fe1e7984012b70bb9e6d43505 qt5-qtbase-odbc-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 22870852cd553c5fdc3e0d5daeecb245ac114608acadbd4ea52472fec246e26f qt5-qtbase-postgresql-5.15.3-1.el9.tuxcare.els3.i686.rpm bf61823f56042d682e9d9f82719b0e1003fbc76e7f157c88bfe1f5a2fddb1ca7 qt5-qtbase-postgresql-5.15.3-1.el9.tuxcare.els3.x86_64.rpm d2465be373085e16125ae1b6c6f85a8584966ad8c940cb66f35e4db49eaed32c qt5-qtbase-private-devel-5.15.3-1.el9.tuxcare.els3.i686.rpm d337f3677b68b1ed43bae297943682cc2a3e8205477f225bdc8944946c7e4bfc qt5-qtbase-private-devel-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 5472939ca2f380155d3fa793cad64933748371585659b25a56c05ae2d4308d58 qt5-qtbase-static-5.15.3-1.el9.tuxcare.els3.i686.rpm 8b22777ab5a2dceb9930819fdae7e2811d8d5f0b2c6f60da9c3bbed1fa6849e4 qt5-qtbase-static-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 8e7014a4dcda5dd8c21a22affbdbdfa9344f67496c95c74659bf66c5c594362a qt5-qtbase-tests-5.15.3-1.el9.tuxcare.els3.x86_64.rpm a8fbad9a9f8e8dfeb9791de36815fc7e65f0ee0a2f414fb60cb351c37081f0f6 CLSA-2025:1764027165 TuxCare License Agreement 0 - CVE-2024-21886: fix heap overflow caused by incorrect DisableDevice() recursion - CVE-2024-31083: fix use-after-free caused by incorrect glyph reuse handling - CVE-2023-5367: fix out-of-bounds write in property append/prepend handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-21886: fix heap overflow caused by incorrect DisableDevice() recursion - CVE-2024-31083: fix use-after-free caused by incorrect glyph reuse handling - CVE-2023-5367: fix out-of-bounds write in property append/prepend handling

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els11.i686.rpm e5e8ebdb8404a595248a0a061b443576449e3b6190e96adb5546b339f59dcf8e xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els11.x86_64.rpm d1dab8f04680e279fd65d7d8e00ad6e81d2af34894b1258ad84c4bfbb949c182 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els11.i686.rpm 39ef8df18ae50464df6eaf5c7e1b79115e8b0a4aa5e76569ed9760f5ffd22d7d xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els11.x86_64.rpm b28e2823aec3fff6cc87063467a27f8ef938899b5145eea72f0fe9ad705f692d CLSA-2025:1764028069 TuxCare License Agreement 0 - CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal

0 tuxcare-almalinux9.2-esu libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els2.i686.rpm 466497a0d93ec6655a3c9f75cf4437491d6a2013b419ebe8138b6b6d82a975f3 libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm dd8aec064bdf9c79ef89d3cf6ecbb5cdaca9266d9ac9692724810f27e76461a7 libipa_hbac-devel-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 755dd40878f496e4664e585ab92a2a9e944fd37725dbc535fba2e23447bda460 libsss_autofs-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm c7da5342e57fe04d2f6d28632ea673efb68c3b6ec1f4a3ad9ca7fd1a70ea9119 libsss_certmap-2.8.2-3.el9_2.alma.tuxcare.els2.i686.rpm a20fe80307f6b3c423e68e627d62361fddeb9af2c5bd5a1d1287f103ba13b9ee libsss_certmap-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 2184d2d58c85e5371cfb5b8017ff68e977dc92d8f06f970b4c137325a4d95b59 libsss_certmap-devel-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 5ed1240d5e04a1efe56aad436229676a4bb02b3bd1fb97ac10980c59a909e6b6 libsss_idmap-2.8.2-3.el9_2.alma.tuxcare.els2.i686.rpm 34071b0ffb08430692bd582554dc9a8bd3e1dd2471f4f803d4971e438f20d91a libsss_idmap-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 7df521ece96f06331d605ac1e5aa2c0fc925a1c44d630f7f60550a9d563e0b94 libsss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 85ca5cf4ec2dba1895e8bbef6f596bccc097749ea34cb708a2475ba408776b3d libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els2.i686.rpm f2ff782ed5e520c6f8b927ba72cdcaeda63f451d185032be4cd2611d8d78ef1e libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 5230f80fb38a384103a82ee336999b942c527ff6c43d656f10d4988a01909d4c libsss_nss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els2.i686.rpm 61ce1c7f6c5aedc77bc4c31cf85609aca18462c1d48ed3fba58bded47530a7b4 libsss_nss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm a468ef4d3a15778fad71c50efdd5975fd2ef003f13d62a8bf1a110a0cc8daf7e libsss_simpleifp-2.8.2-3.el9_2.alma.tuxcare.els2.i686.rpm ee85e2330aa4dbd70140e991fdacd22c08a106a1f0cf0b8d55f1016afab88ba2 libsss_simpleifp-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 03c364325b74532bc5554aa267dc916ba24c9134bff691b6de20a147daee16f4 libsss_simpleifp-devel-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 2671ae8f73d7467d6d4bc7c4823284a3834d1d829fe5b9a93fd3e9d0478175a6 libsss_sudo-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm c4b544304d4ee21f9f2efd69185b7fdf16fbc321faff9984551be101daaa5aa7 python3-libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 401882ff5da23f4c20957a3cb2f0d4ff2dc20658e587ee371ad4b8b672b2bd67 python3-libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm c028e02d853b2f43119eaf6c9e3bbee554df73a1175da7c26a65d97d3641c23e python3-sss-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 7401edfaf053c8eb6044f0ce57b6919ec2b36c3b21697c0a1d5a4475042d7668 python3-sss-murmur-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 6105bfd908a73a83aaca1023d890dea8bb570985eacf3097419dd123d4d9e8cb python3-sssdconfig-2.8.2-3.el9_2.alma.tuxcare.els2.noarch.rpm b4eabd011f3802059edadd7216b1bdf8b4d68f7e48367f9e618ddbfe42eb7522 sssd-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm e21d1f1f32d8f0b5f94072a490b2abe56c031d27a896c05da2f394aa25705233 sssd-ad-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm adace34642f49dc7cffb1b7e8b242cd9837a03cdbe2a5bb1e0b928e1c703c85b sssd-client-2.8.2-3.el9_2.alma.tuxcare.els2.i686.rpm f77b0e4234b53319d7d2dddb42658d58ab4d457c82a2e9d641ec2350cf95dd76 sssd-client-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm e0db190ed9a24231e9b2f5ce90f66e4f0ccd4d105e34272d433e79348a8814c2 sssd-common-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 4297dfe40e22964a08334a621522598648fac38fdedd98c9939e99cf7bb3231b sssd-common-pac-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 3f13b74a6bf867218ec63a826cc903b2fcf1e54c9937200404f9e1bc6b1013c3 sssd-dbus-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 95b9d4640ede82edc63e79db684c10bdb4db43c1970e194665eb5e55f759517b sssd-idp-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 15b8b23973621e38816095cf8f35efeff934fefa8a7741ab0e9e8edcf386be59 sssd-ipa-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 049a58ef36e0f92b169ba37b8b6da3f07d872f0ff0909d87d42851110376ea12 sssd-kcm-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm f4024aeb9e552ba5cfa19236a1f16914a6ca3b7ac01cbe63d4670b311e165367 sssd-krb5-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm bacb2e369fc7238bce21883218e9206b9730efe874e5b657524b0e1dcb9adad5 sssd-krb5-common-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 928dceb93f4fb18e7e322a78aeade3346e20028ddfcfd85f966d98e7696ae12b sssd-ldap-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 536e7a6fd6361ba900c3361a7b89da262ddf79fe6727343f7f2cecd3531b763c sssd-nfs-idmap-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 8634f9468c2ee2881b0cfeb29de5e77c781e0d8f365c83fdb6e0955d27300294 sssd-polkit-rules-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm d731ac3eac92fd5a3a5d773c0a0e31fb92abf3e2dd3caf57c48c42672e4ee63f sssd-proxy-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 3ae976a97a939536411de7ef40f8c1439478b5a657f475685a21127209f9705c sssd-tools-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm f83fcddf2a63f9e3301dd7e996109af68bcb7bb2d0e5e6582588573a91d09bb0 sssd-winbind-idmap-2.8.2-3.el9_2.alma.tuxcare.els2.x86_64.rpm 38fe95da2b7102b60c5df38bcb830f93148214fe9656b6c37430c9f8276bd874 CLSA-2025:1764028726 TuxCare License Agreement 0 - CVE-2025-54349: fix off-by-one error and heap-based buffer overflow in iperf_auth.c - CVE-2025-54350: prevent crash due to assertion failures on malformed authentication attempt in iperf_auth.c Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-54349: fix off-by-one error and heap-based buffer overflow in iperf_auth.c - CVE-2025-54350: prevent crash due to assertion failures on malformed authentication attempt in iperf_auth.c

0 tuxcare-almalinux9.2-esu iperf3-3.9-10.el9_2.alma.tuxcare.els3.i686.rpm e36234eb036a649befbec8a2b534b78d2192c86b77d8d1b9201b3936ed6df974 iperf3-3.9-10.el9_2.alma.tuxcare.els3.x86_64.rpm 39606b35b1a9344a45ae2f4e8dfa5e778076aca1dc7cb53a08de88711b4d011b iperf3-devel-3.9-10.el9_2.alma.tuxcare.els3.x86_64.rpm 011225a9a4f8abecbed4fb4fdeaba580b3da6af8e4c631d700320bfe261a9a95 CLSA-2025:1764029592 TuxCare License Agreement 0 - CVE-2025-0167: fix password leakage issue when using .netrc file with no login or password in default entry and following HTTP redirects Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0167: fix password leakage issue when using .netrc file with no login or password in default entry and following HTTP redirects

0 tuxcare-almalinux9.2-esu curl-7.76.1-23.el9_2.4.tuxcare.els4.x86_64.rpm d6754a9f43dc5b3821ca36d9d0ef459aa4cbb2651e78c3241e09362f2ba88869 curl-minimal-7.76.1-23.el9_2.4.tuxcare.els4.x86_64.rpm 113fbe33a4979e698a2978c4ab7767287afa4a21c119abc37811127cd0f8fed6 libcurl-7.76.1-23.el9_2.4.tuxcare.els4.i686.rpm b0eccc6c055443530cbfcf1a603cb468996b8af944554e839d8e932edced8a6e libcurl-7.76.1-23.el9_2.4.tuxcare.els4.x86_64.rpm 8059719bab84fc4a987fa31fedded38a59cb1c6b8377e1d4a95b377a652cd25d libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els4.i686.rpm 1b0ecd346139a9e70fe6759570e3b79dde622db5a91882f413282f6185250456 libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els4.x86_64.rpm 61a87cd7b2b593387079acddf064fb73ea55b49c8210b309b20d845038f4bab5 libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els4.i686.rpm b129a230b265b861b8f0449c45e45ae827a260630cc1e15eac9f95278c584cab libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els4.x86_64.rpm 3951fd2059bc6642fccdf88ac68f4df6ac84170c941a5ac561b8b0b5b3ac7b7c CLSA-2025:1764062286 TuxCare License Agreement 0 - CVE-2023-45236: fix TCP Initial Sequence Number generation in NetworkPkg to prevent predictable sequence numbers - CVE-2023-45237: fix weak pseudo-random number generator in NetworkPkg to prevent predictable TCP sequence numbers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-45236: fix TCP Initial Sequence Number generation in NetworkPkg to prevent predictable sequence numbers - CVE-2023-45237: fix weak pseudo-random number generator in NetworkPkg to prevent predictable TCP sequence numbers

0 tuxcare-almalinux9.2-esu edk2-aarch64-20221207gitfff6d81270b5-9.el9_2.tuxcare.els3.noarch.rpm 323e3f75435d7c17d83eb90a45e8010b08402edb40e10d2b4cb6a85c23d32fc7 edk2-ovmf-20221207gitfff6d81270b5-9.el9_2.tuxcare.els3.noarch.rpm 5633be329b15c74e9dca53af0352a716a80802ce5f6b78ba94132b00a8628634 edk2-tools-20221207gitfff6d81270b5-9.el9_2.tuxcare.els3.x86_64.rpm dbcc43a2c135ca603e370e456c56b351786a46f39f9abee1fcd1ddaab7d35e63 edk2-tools-doc-20221207gitfff6d81270b5-9.el9_2.tuxcare.els3.noarch.rpm 5651b4827dea0780b96e5682d74db56e9f8216e5fb2a96e503c7097b1c4a1cea CLSA-2025:1764080949 TuxCare License Agreement 0 - CVE-2024-3019: Fix default pmproxy configuration to restrict access to Redis server backend, preventing remote command execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3019: Fix default pmproxy configuration to restrict access to Redis server backend, preventing remote command execution

0 tuxcare-almalinux9.2-esu pcp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm e51f04209d4a795acff02e56ea46d9827f0ed5b664e0a818922b103811955461 pcp-conf-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm f85541736b9b60eb937b68667ecd2788bcb550ed5dc4301b673d21dbd3b8d730 pcp-devel-6.0.1-5.el9_2.alma.tuxcare.els1.i686.rpm 4b568aebecc8a5e4180a761bc15fa7b16a3c812f59210153ef16621506e2e115 pcp-devel-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm b2af0402e1c4561cde295fdc33c91227f4c1cd4cc39b6baab23cbbe18af4c3cb pcp-doc-6.0.1-5.el9_2.alma.tuxcare.els1.noarch.rpm 7f4ecf9255e1217b4ec7d9c43a8ffde5916fc706cafa820fa5baf4d3523eb84e pcp-export-pcp2elasticsearch-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm c6b76ac4d63df9248c084a0dcaa8ea3149c98d61d7074e0d2640197fafea0e02 pcp-export-pcp2graphite-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 5d1f361a259c12e8c5d40f82e8e024b21f5b90408af2b1cdc0cc8310ee4c0310 pcp-export-pcp2influxdb-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm fef20d6ece7d7442c7103d4514edc6671ad8d3694142175412a674b31504cdec pcp-export-pcp2json-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 0526be4d935e87bc6478505a9947ec8435013d8b04286c236ddc89c46dc903d1 pcp-export-pcp2spark-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm b4c0db369e632306d0af66ffe17f646b7f367c92e067cbdbc07c01aad6522e4e pcp-export-pcp2xml-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm a21f0056ac65dffae39c24a9e4a9c2900f8ff2598c6016b256103f31c3b10946 pcp-export-pcp2zabbix-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 7611c80469f8a899411400430b547d901e7b930f367777dfd7794ef8bf24af31 pcp-export-zabbix-agent-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 85b7f994be158f6ea3ebed4a9005e1fe3657a06e9a78f6566e1179b6cb9987a2 pcp-gui-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 26e10dc460c21fc74ec68a459d0fe34c3c1a1199c2c137512ab6053f9191290f pcp-import-collectl2pcp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 4717cc548701213f4b4f077c76a175ba9d45128abd7ddb1346bff692fcee180e pcp-import-ganglia2pcp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 503717056698a9c739b105931e78a1237fe465bdb0bd3f114a604d9a6bb7f39b pcp-import-iostat2pcp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 6a49f1ff21df682fb9d8111fc8b521b8b1e6a6ff9b21cc54aac32fb617cf8f15 pcp-import-mrtg2pcp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm b31fe0a184d372567c7a688fc1c037c485dcff6f3e17069250d2124d6ad209c0 pcp-import-sar2pcp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 45ad2edb4bb4a12519fac3f982b787a1916503eac539bb802073e81f5672fce8 pcp-libs-6.0.1-5.el9_2.alma.tuxcare.els1.i686.rpm 9cf66df49dd68298a17700b32f1697af376f7c1a28029ba89122290746955cd8 pcp-libs-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 55ba512eed57b99758121cd7a1ade310e7c099e96ba6ce027a45b6849fc01403 pcp-libs-devel-6.0.1-5.el9_2.alma.tuxcare.els1.i686.rpm d53aecfff0d889ae354f165ef1771182043be46ed78b555f6049df589514c82a pcp-libs-devel-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 29e95b442635c65f5404a084579a9c466629e846c167415242c15e0c28becf71 pcp-pmda-activemq-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 0353aea93fa012c5275b317c3d8b99d744047ae2d798ef4ae2900e362d547161 pcp-pmda-apache-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 7153c37c78548a1f6a1ca2a69494282b1b1d3fa53487571e461ba1f6fa378fa8 pcp-pmda-bash-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm bdffb723ca4c51a90230fd174eac24e6f0fabd2efde9d61a996779dc2213de49 pcp-pmda-bcc-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm dfb2844af276818b6020ee7d11179b82121aaf1eb181111733ab71c374ea3540 pcp-pmda-bind2-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm fc828a3eb43c87840ab788404a02c11bbfd803943cf9c660f20061410ebaf100 pcp-pmda-bonding-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 0537c42168eac70dc21f251ddc9fb6ae2b198f41fbe54cc617dfa80625d965aa pcp-pmda-bpf-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 6c278ed97d2640ee7fa5e8174f8aec7af20de2a3be85b5437b5c35ef2abc1899 pcp-pmda-bpftrace-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm fd20c48f50021e4f75fe639edb554e89b848b9b4b584682d821a416b950f4d92 pcp-pmda-cifs-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 68efbc059f995fb09345e585fab37335d957860895a1b4cf1ac428790ee6d161 pcp-pmda-cisco-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm a6ed31b7bc387aea05fd3456bd6da617602fdfa3b3a0e2e527136155a5111067 pcp-pmda-dbping-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 2800a07a6be874cef57651ad0843182c83dc5226243df1ab3d170f57b6715ffa pcp-pmda-denki-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 3597052385e2b24e6a87056117b34da6b87682de37c9d3053bd87e78e7b24c75 pcp-pmda-dm-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm ec7d95b1d3f806466b9e404d7001b5df47933004a3e439b7e577dfa5e28a4e80 pcp-pmda-docker-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 0f3ced3be5a0436d27bc9774e0c92d04cfef49b99d454737352ffff61835e961 pcp-pmda-ds389-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 3e7d42e4d23fa2064aa377512c064e2c4bee372018267ed8d547878ee1b6c526 pcp-pmda-ds389log-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 6d3eac51c84ec1e6a19231a4585c5597067cd0363f109bc1e23e9b08f4bbd802 pcp-pmda-elasticsearch-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 995bf2e28d9a209ef81082a2b6dc24167286b55fd39e9594edbee060aac5db10 pcp-pmda-gfs2-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 8c50dfa194cf67adfef4036c4dc52fb1a2b85d8c37b47daa7f444b64283c9a97 pcp-pmda-gluster-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm d7026234f3ad642915cb04b2e1b3a46c85cf7e65efe370bbb113d41013d3b32d pcp-pmda-gpfs-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm dd4d12c69d17fba939acfe42c4380abff3da9b4dd5cc33830d63c20039be59be pcp-pmda-gpsd-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 4fd63bbd8863ff9bf714cde4aa2e257340a528c3840f1bdb73b6fef313d66e83 pcp-pmda-hacluster-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm c31b35582377901a8f944f7387795093aff86396528b68825c3b5c36d501440a pcp-pmda-haproxy-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 9cb919f3886179f595097fec6bf13a439616ffbd33138f6ec97bb0f357cc4441 pcp-pmda-infiniband-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm f547dda29b077d77c5874bd990fe3dc903d9e4f88b514cb6a3418ca92767be84 pcp-pmda-json-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm bd3e551e45a70631e14e08937a4894cda59eea4576951eb14c6de1bb74b55269 pcp-pmda-libvirt-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 7d42aa45dd6884182fe43d9be4d882f5fb01607a821b32c84d45b16e1d1a03d8 pcp-pmda-lio-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 0d6388f9ea38cdd38ffa66c796f17a976d892d5ef3f28959d2758521cd7944f3 pcp-pmda-lmsensors-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 27fef057a30017c3b95ea800c491d8b98a2944964f52086fa1090c0f1d1971ab pcp-pmda-logger-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 6116bf9a6daf6a01b0b7976c5d67b3e8cb125f0bcb0693b069705997448705af pcp-pmda-lustre-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 1c08a7d7cf422e62e336511060e6f6dc1a358e39c223a5c50f1229471e121ba8 pcp-pmda-lustrecomm-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm a830f2ba54089a5c2c5245509ab9398470011d1a39451500959a200e7fc26335 pcp-pmda-mailq-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 57178a03999d7ac81b9a387a755971a1017e4aa8f3f72d7c09b499830c404f92 pcp-pmda-memcache-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm fdde4e9b7224deddafa8eeaee291ec15f60ccf086e1b10178fae52ab276440ed pcp-pmda-mic-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 8e8f275cd5c069ce80430d891c1127f624aacd3c908e6ec7262bae0847573150 pcp-pmda-mongodb-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 62a363613b1bdc66e72681ec36f540c63b91e1b4b8ee1057266e6a61030b20d9 pcp-pmda-mounts-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm af3ab0b8701f85868b3634758eebbb19adec5412891334bf0dd5bbf2542e6ccc pcp-pmda-mssql-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm c7ec7af0035ef4a574fdeabc2f13b182d37febfa265e1d83b9043a73d97d5eea pcp-pmda-mysql-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm e1114140ed7eeb9847bd30f32488b335369a8c5e8bc8ab1f44909e3a12fbf078 pcp-pmda-named-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 586146c5c2ee8c7b57de60d44f8a26dde43007b4c2dfbe8fbfea662f9c7ef90a pcp-pmda-netcheck-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 3ce119c1c1d41b136757a0c14855ae0d56a7502733cbcb6ddbfa94060d6c1d54 pcp-pmda-netfilter-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 58e703958d168f4ff35edda7fce178fce4a363305f9ffc8dea597b869f8a23df pcp-pmda-news-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm a57de75451419733b80e546295de8374287d5f801f243db7d6effcbca2b7cedd pcp-pmda-nfsclient-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 15c8741754c7827962a2908fcc95ea02b44a4c57255d17af3882c09c10793df1 pcp-pmda-nginx-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 6d3a23d71535cb5176fb703995508ec15dbc409f3ff854c161d6f59eb00eee25 pcp-pmda-nvidia-gpu-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 5279fb5e720e3375fecc4b15d9e9b0198cdae16fe5ac1a759b67b21f42ca0335 pcp-pmda-openmetrics-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 6b1063e896f5ef94b040ebd5ee8c2a3c6121bc44c204fd84040042b75369cc3f pcp-pmda-openvswitch-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 600c0be0b8ea367696a7da41a708b13219e7d714b91c29a09dd77bfdf54c767f pcp-pmda-oracle-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 0fa3f60134126f62533d8e171b400d099f39ca30185654552d3a1e09036be29d pcp-pmda-pdns-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 59c8b03604f21f5e8de607422f0870f6a388685271ad030104934802e4b7134f pcp-pmda-perfevent-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm c862bad886c70440059d77f3f2d70468bce0a80293849f0718230e0f7a2ee809 pcp-pmda-podman-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm a3bf0a3d5ab921be635bb5e658e7fb3b1f01a033f793cc77b6a597fa7694b0e0 pcp-pmda-postfix-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 423312d76f73f5c3abd770ab10693f55de6aec5080bc13d9428627e29c0cc57d pcp-pmda-postgresql-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm ee594576dc60294e01a7804fb685637c04ce148714c9a9af477d3527d72bb57c pcp-pmda-rabbitmq-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm fba9c2dc4a2296a7d50cc82e864fc4a7bfb661ab50c79c7c525f86fd565fbdef pcp-pmda-redis-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 7d6c73ffe1c82a6ee49a0b6d35a6f3c9057356690de06ed310f6e6bfde1fafbd pcp-pmda-roomtemp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm c88204008d6a0862150b327af8ec1de28bea2d64cb1ab02b86bb8aa7932d2496 pcp-pmda-rsyslog-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 5c854a9ff0d70e420054a91c9ca0aba6b4ca3fa5e4d1533d987b6d93b62b2fca pcp-pmda-samba-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 3488299fc4ec57b44a2fbafdd5e01a9abfb9572f0b384a871b9db3e1adf3b9c8 pcp-pmda-sendmail-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 6f82086434a9347b20344966543c9aac668659544eabbf7fb29644c1c2b4e219 pcp-pmda-shping-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm ffb0bde81d295b6654f96e89232422da15af43b6b7fd1473f9c30439a4a18407 pcp-pmda-slurm-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 5f8dd64dff6d988a700e3a32109d6a46524fcf7e846ad717952ead6875cc50d1 pcp-pmda-smart-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 0e02fe1220ad321d19b88ebdf9155db9806d888c16c8f1d826509baf61c41099 pcp-pmda-snmp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm bb0e160a7ce8c22c41da2d539f9dcc04da00f80a3cfdde53b39d501643d89b84 pcp-pmda-sockets-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm bc39565c5d7ada588d25dae90b82b2e255187d3e14f752e53d5dcc0fd2de0e74 pcp-pmda-statsd-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm fddfe3d0f12ee0d1e9d46139c4f4cd4ff399d5068c5e999edeb2e13bf91db88b pcp-pmda-summary-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm c59cce5f62beeafc14503937cb91aefcdda6229657afabc7e8b39463561fa24c pcp-pmda-systemd-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 02e84b54c68d7ce67a65629b7512a2d43866bfcfe8ce4cc3efe88af20c82db71 pcp-pmda-trace-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 3bb6b07217f59def0bdc605aa942cd027620632eff8d29a0dfd84f2ce7a91431 pcp-pmda-unbound-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 94515bf97fb472e76a23e38855b1c183edcf287efaacb96124cff286cc406d1c pcp-pmda-weblog-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 9b2ddbcfdb99dca2d1872357e1719671f1884f3b878831e3201532679da1809f pcp-pmda-zimbra-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm ee9c892ac7ca52e57034a318f84db2a5f9bdd5933573fdfb841deb3019b6f009 pcp-pmda-zswap-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 90a845b8e1a1ccff25819ce648bb791aeee4dc2e111f0a80c29b7de40541a742 pcp-selinux-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 8fb3ee28ea6592d79e6a847ccbade5ce54f59fe127fd79e2e88e62c18f714c88 pcp-system-tools-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 625fb8912d732e390989dc8b415f259b4afdb2cf5acb03e07a80af50b8521f28 pcp-testsuite-6.0.1-5.el9_2.alma.tuxcare.els1.i686.rpm eb91286b873eef33352d0c16db2aa69630df393201060919677846cc51d4e3c9 pcp-testsuite-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 8c843e3d2a2eb235768f2d31ab15e1c1e87ecd473f3f516700c6c29fb58891b1 pcp-zeroconf-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm f65a600a79df63cf44032bbbd80e31925d13d6ea74c076215e9b80209185dcca perl-PCP-LogImport-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 721434c3b1f18d3033ee1a5b95e453550713539bcee277a61d94b9b3160a9bcf perl-PCP-LogSummary-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 8f42cc413ee541484f0ff81949d28f634856b45d87a85f832e4e8c2f4450457c perl-PCP-MMV-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm 6f7dac639b28e0bd9c5631f0f663911db1c0173032abe43f13b99bcf44645de6 perl-PCP-PMDA-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm abc4d0cbf9d7f8dd1caa914bcca6d0a0b6b2b0df5b169d46ed052334c488c80f python3-pcp-6.0.1-5.el9_2.alma.tuxcare.els1.x86_64.rpm c934db5e4ffac1b798ac1753166c897c5768ce134aa0a123ecf0c5370e98d1dc CLSA-2025:1764081820 TuxCare License Agreement 0 - CVE-2025-62229: fix use-after-free caused by incorrect error cleanup in present notify handling - CVE-2025-62230: fix use-after-free caused by improper XKB resource cleanup - CVE-2025-62231: fix overflow caused by improper bounds checking in XkbSetCompatMap() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-62229: fix use-after-free caused by incorrect error cleanup in present notify handling - CVE-2025-62230: fix use-after-free caused by improper XKB resource cleanup - CVE-2025-62231: fix overflow caused by improper bounds checking in XkbSetCompatMap()

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els13.i686.rpm 37de67987d2fa364df21b283bfbf35e6960df0b61767af83c3511fe120fcb14a xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els13.x86_64.rpm 89edd4a3604c7eb1e67c8e5750c0bb12cd89f435c8379c523c19bbf644333b89 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els13.i686.rpm f31dbd23cc0996c270fa32a4919f2180093dae8c4b1d4c6ae8a119c778d4b78c xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els13.x86_64.rpm 2fdd881d22674352654e493feb650aa59fb84626f5cdd89698df7e2a51e682ad CLSA-2025:1764082387 TuxCare License Agreement 0 - Rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els6 to address CVE-2025-47907 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els6 to address CVE-2025-47907

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els6.x86_64.rpm 65e0e507c2b350fa58d27e8a08a96b04b9ec01aba0cd63bc9fe0c32ff950e735 podman-docker-4.4.1-13.el9_2.tuxcare.els6.noarch.rpm 010b50c6abef15cf6b1f02ae50b5524b7783c445e13298f16d9a74863a8d068b podman-gvproxy-4.4.1-13.el9_2.tuxcare.els6.x86_64.rpm 09b03cd1e7929ed6b30a2f715c871d18fe12e0570f65cc5a802df09bf14ae947 podman-plugins-4.4.1-13.el9_2.tuxcare.els6.x86_64.rpm 6029e9cbda3db2767caf3a30cad1399b4f4a675a8bc2358e138378a6d87dd49f podman-remote-4.4.1-13.el9_2.tuxcare.els6.x86_64.rpm 0dddb38fc2a1808c1c2ae972a3ec7e5ecd0a97a73c0706cb2e8e601e8c2e4ed1 podman-tests-4.4.1-13.el9_2.tuxcare.els6.x86_64.rpm 24a37b3306e909c9fc59fc2d6f220ae064c1f769cd5a532c102beffbd4d79e03 CLSA-2025:1764083719 TuxCare License Agreement 0 - CVE-2025-11277: fix heap-based buffer overflow in Q3DImporter::InternReadFile function of Q3DLoader.cpp Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11277: fix heap-based buffer overflow in Q3DImporter::InternReadFile function of Q3DLoader.cpp

0 tuxcare-almalinux9.2-esu qt5-qt3d-5.15.3-1.el9.tuxcare.els3.i686.rpm b7b832520f8c04da7a91461ec67dbe7191bf433ded3d202e1960150fbf9dc016 qt5-qt3d-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 9e790ba1bed9bdd90cd829621235d44d3fc57aacad7dfe8acc2daaef9ab6c6e3 qt5-qt3d-devel-5.15.3-1.el9.tuxcare.els3.i686.rpm 7108e3c0844e77397eb27ebb90fbdf4229ea579d5127c04f100023633b1b3ba5 qt5-qt3d-devel-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 9babda6b5de20efcf69afd71f30614179968748d32d24d519cc0e2b17bd9287b qt5-qt3d-examples-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 359591b21af877fe4a6d705822b83090f9bec7394fb5b85c0388cb0abb954c1b qt5-qt3d-tests-5.15.3-1.el9.tuxcare.els3.x86_64.rpm 3d1157212f8e1ced6b1683ec00519df2334fa671af93802fbd711b64e47646fa CLSA-2025:1764084458 TuxCare License Agreement 0 - CVE-2025-40780: fix randomness sources, drop obsolete PRNG test - CVE-2025-40778: fix NS caching, DNAME/referral handling, restore IPv6 TCP tests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-40780: fix randomness sources, drop obsolete PRNG test - CVE-2025-40778: fix NS caching, DNAME/referral handling, restore IPv6 TCP tests

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els8.x86_64.rpm fdeb7cf8d34f5b135b34e7ab2aa3ed9c093d995aa6da36114b8fb5f8cbd1bd12 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els8.x86_64.rpm 584f8ba48f1f99dadc23436e43b9fcf8d044bf31513289e8739a31227a70cf73 bind-devel-9.16.23-11.el9_2.2.tuxcare.els8.i686.rpm fd78278ef5a46036e2c0845a2e3fa3e890ff1724cf8d0ab5c06b830b35f57803 bind-devel-9.16.23-11.el9_2.2.tuxcare.els8.x86_64.rpm 6c33e2b646c3e21b652e9a106ada2cf37519eb783b552a7c8e43eb0efefd30d8 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els8.noarch.rpm bdbd0b1aefa65d54f0bd8ce800338fc26e6a508c7c9e920166a0427871362ef3 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els8.x86_64.rpm 8324f4d27a8a209f28e7420558e7118724c4519d94ec0f6ec3482fe26da3c443 bind-doc-9.16.23-11.el9_2.2.tuxcare.els8.noarch.rpm 6a454f6469fa265848a9f3c480f07debb12945d36337e6e7c43d7365e35e3eb6 bind-libs-9.16.23-11.el9_2.2.tuxcare.els8.i686.rpm cb73f6fb3ff7893972896d848007bdc326d33a793a93506d09b15460ade15578 bind-libs-9.16.23-11.el9_2.2.tuxcare.els8.x86_64.rpm cac67a8e94401c1d512c206d6a34c3d66eda1b872a572fe9900363d850d7af62 bind-license-9.16.23-11.el9_2.2.tuxcare.els8.noarch.rpm 9fdb88f111a185c699adc5a9cd91be3149957eff1ccbc4b68fd1ecebcbc98c7c bind-utils-9.16.23-11.el9_2.2.tuxcare.els8.x86_64.rpm def20a8b60295ce8fcf248c0bdf74cf4731d6554535f3dffc2506d1a314c1aa3 python3-bind-9.16.23-11.el9_2.2.tuxcare.els8.noarch.rpm e9ad68de336a8c4f44a06e161f87e6eb5a1a6b80da7115f275395efa97467f0d CLSA-2025:1764085222 TuxCare License Agreement 0 - CVE-2024-2947: fix command injection vulnerability by sanitizing sosreport names during deletion Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2947: fix command injection vulnerability by sanitizing sosreport names during deletion

0 tuxcare-almalinux9.2-esu cockpit-286.2-1.el9_2.tuxcare.els1.x86_64.rpm 0165f10e0eb9ddef14d0f7de44a494419819a55fde9677b868f1b45508939109 cockpit-bridge-286.2-1.el9_2.tuxcare.els1.x86_64.rpm 749aa749668db542431f224d96c00fdf76f9a9f486393831d7df151d3e00e8b3 cockpit-doc-286.2-1.el9_2.tuxcare.els1.noarch.rpm ed11cf2b03c1a8f9ede925b2c9ca9f2fc29b30360f080ac64df55bc2b383d1be cockpit-packagekit-286.2-1.el9_2.tuxcare.els1.noarch.rpm f70353da3b8a211e43e36810995a15929467d75491d7f5791b0191efbfb39e2a cockpit-pcp-286.2-1.el9_2.tuxcare.els1.x86_64.rpm 151509de313a7b1633f839cf269897b57ca8d82ab5d5cca9f07cabd8e6bf0e96 cockpit-storaged-286.2-1.el9_2.tuxcare.els1.noarch.rpm 0db20b9631f3098cd9342e12eb393abf389959de73ca5a0104d0e3af4bedcd79 cockpit-system-286.2-1.el9_2.tuxcare.els1.noarch.rpm a934c2f23ddea4a9ac32128c64c266cec91903b1faf94c3dbcd4c47906babef0 cockpit-tests-286.2-1.el9_2.tuxcare.els1.x86_64.rpm 3e6a45fa52c5e973d4662f7df845617b6c75f9aa8e645b57fb1faecff18726d4 cockpit-ws-286.2-1.el9_2.tuxcare.els1.x86_64.rpm e26c91002782a4b1458f1580a5c7926f71db292192ff3a947dc7c603f9a2a83c CLSA-2025:1764234735 TuxCare License Agreement 0 - Update to 2.50.1. The following CVE was fixed: - CVE-2025-43343: fix memory handling issue causing unexpected process crashes with malicious web content (RHSA-2025:19919) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to 2.50.1. The following CVE was fixed: - CVE-2025-43343: fix memory handling issue causing unexpected process crashes with malicious web content (RHSA-2025:19919)

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.50.1-1.el9.tuxcare.els1.x86_64.rpm fc34dc347e50e7ec4c18bedbf5fbbc644bd190f8baf4361bfe0cae3c3d927c8c webkit2gtk3-devel-2.50.1-1.el9.tuxcare.els1.x86_64.rpm be61eed50e278b5b1f49392bf102f0b51e6a6354f0c776c0939500b6ff1de882 webkit2gtk3-jsc-2.50.1-1.el9.tuxcare.els1.x86_64.rpm 14ede41ce70ebbe7979ae13230a42e001d2ce8f6ba53cc97c9ab068de8219a36 webkit2gtk3-jsc-devel-2.50.1-1.el9.tuxcare.els1.x86_64.rpm 48944977c1631bb86a462d3175f359e19638040fa50200c8b6e7f3f5846b4919 CLSA-2025:1764235184 TuxCare License Agreement 0 - CVE-2025-52999: add StreamReadConstraints to protect against DoS attacks via deeply nested structures and oversized inputs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-52999: add StreamReadConstraints to protect against DoS attacks via deeply nested structures and oversized inputs

0 tuxcare-almalinux9.2-esu pki-jackson-core-2.14.1-2.el9.tuxcare.els1.noarch.rpm 8babe30a18afc71fd77171c5e8ddc93db4d859b29acc86591331eac6db0bd2ad CLSA-2025:1764151168 TuxCare License Agreement 0 - perf/aux: Fix AUX buffer serialization {CVE-2024-46713} - block: fix uaf for flush rq while iterating tags {CVE-2024-53170} - zram: fix potential UAF of zram table {CVE-2025-21671} - sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647} - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675} - net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789} - isofs: Prevent the use of too small fid {CVE-2025-37780} - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142} - ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702} - RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539} - crypto: xts - Handle EBUSY correctly {CVE-2023-53494} - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252} - af_unix: Fix data-races around user->unix_inflight. {CVE-2023-53204} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} - wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} - wifi: rtlwifi: remove unused dualmac control leftovers - wifi: rtlwifi: remove unused timer and related code - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019} - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730} - net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581} - null_blk: Always check queue mode setting from configfs {CVE-2023-53576} - ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559} - rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() {CVE-2023-53558} - pstore/ram: Check start of empty przs during init {CVE-2023-53331} - wifi: ath11k: fix memory leak in WMI firmware stats {CVE-2023-53602} - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229} - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() {CVE-2022-50486} - RDMA/core: Make sure "ib_port" is valid when access sysfs node {CVE-2022-50475} - RDMA/rxe: Fix mr->map double free {CVE-2022-50543} - scsi: qla2xxx: Fix end of loop test - scsi: qla2xxx: Fix mem access after free - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} - scsi: target: Fix multiple LUN_RESET handling {CVE-2023-53586} - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses {CVE-2023-53675} - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() {CVE-2023-53675} - scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841} - nbd: fix incomplete validation of ioctl arg {CVE-2023-53513} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} - bnxt: avoid overflow in bnxt_get_nvram_directory() {CVE-2023-53661} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- perf/aux: Fix AUX buffer serialization {CVE-2024-46713} - block: fix uaf for flush rq while iterating tags {CVE-2024-53170} - zram: fix potential UAF of zram table {CVE-2025-21671} - sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647} - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675} - net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789} - isofs: Prevent the use of too small fid {CVE-2025-37780} - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142} - ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702} - RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539} - crypto: xts - Handle EBUSY correctly {CVE-2023-53494} - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252} - af_unix: Fix data-races around user->unix_inflight. {CVE-2023-53204} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} - wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} - wifi: rtlwifi: remove unused dualmac control leftovers - wifi: rtlwifi: remove unused timer and related code - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019} - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730} - net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581} - null_blk: Always check queue mode setting from configfs {CVE-2023-53576} - ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559} - rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() {CVE-2023-53558} - pstore/ram: Check start of empty przs during init {CVE-2023-53331} - wifi: ath11k: fix memory leak in WMI firmware stats {CVE-2023-53602} - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229} - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() {CVE-2022-50486} - RDMA/core: Make sure "ib_port" is valid when access sysfs node {CVE-2022-50475} - RDMA/rxe: Fix mr->map double free {CVE-2022-50543} - scsi: qla2xxx: Fix end of loop test - scsi: qla2xxx: Fix mem access after free - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} - scsi: target: Fix multiple LUN_RESET handling {CVE-2023-53586} - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses {CVE-2023-53675} - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() {CVE-2023-53675} - scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841} - nbd: fix incomplete validation of ioctl arg {CVE-2023-53513} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} - bnxt: avoid overflow in bnxt_get_nvram_directory() {CVE-2023-53661}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 685966f315ee86e81d9feb28b05f01286e00ff24e8002afb585081c4b21a5a7e kernel-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm a032e996d2a31cca3128b5502db8574c188863695430a303a1da94a9fadac3c0 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els24.noarch.rpm bf18a2d450050efd94f77c8eefe3b5e8e95384b2fee62ea11ad66912f05301f0 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm fc1b1b5738caf34831891b0494b46826aa37aafc46724639fb5dd2fad858eb29 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm de7662e6dbf6abbdc48b7095b743f8a1966e7159010f8b2cd98062c43acec059 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 4fa88889e9146f614bfcdd5c584d220a9baba2827095fd83e38a3c2bd1ba3ba7 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm ecdd0f19f7e6cf5a6b19bccae01bc2adb608826674fb0a9bc368caa638730fb1 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 5aad67c497aafee7b61cec08427df1fc03df2e519b7b2b506768f84d208384de kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 37f590cdeac369beab1252b752c7874560ba26bc88a6768ec766e287d9c45224 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 9269de1c60d206c92d5b91b51f805e77b7181d3ce786acee014196ea692c326e kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 4eab84a14c703b71150da3486ecae7f63e932eaba76ce23bd49453effed853a0 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm c8e80c2b9a39dd79b0d3e0a00fc0ea69518fe96983ff1d7a034c83d2a66b6cf6 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 321b3e519d84981563af9774484bea3f5699ed951ab81b803f2b7ecbf5f02c3f kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm fc67ded22dbe3edb772895d724a1fd97c94b6b7d4d36e9220d49be004b0754f9 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 02753b58650e56b1aa7e87ca48fd3bbc461ea3870957270bba1d4fcabe4db8f9 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 01a1ee99dbfb586b8e3afd1ba5f7a909f12f29d14657a6359ffd05016db9f572 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm e63562bd7ce847171e9143936064610385f9001bd835e72a316559af609827a4 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els24.noarch.rpm 285d118ac8690adcbf9fb13e127cb7b1da85fabae734cf00e720366d0a8e9f8b kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 056931e534a6577bf48f983be11ce04ee3e530fa8fce53db11eebe0b1e4b7b45 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm c92fc041b915003e60350c7dcc3339ed6adc454a35a62871b5234c2e87307f78 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 7e320c3e1a9efdba159586627827ebdb3bd6cd19ff548d009914e27e5ac1a91f kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 0c6fe53cbc8172460f7a55704d46edc3e845360131cb8b29a5303f638e6c96fe kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 1f34d7bdd4813331319977eeaf6cc9250a93c842f16eb62240b8ef6fd86785fe kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 645e6cd2b5662ce9fa31f14683d01c4dd927f206cfc09763bfef827386d3fb47 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 4c58ab1778ef376221c4c5328d9ebe35282f2e38fc80c98d67379c7d7e6423dd kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 37b37f6eb30b1064667c5a2c4e51cae5d13d03a50e4866ce4daaa4025dcdeafa kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 0a37e4296ce4edd03642319b72cb63ce164ccea425352cdb5360318a66df1324 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm bbce6041fa0ce679a4717b74865f9f0a09e1a2d05109b48fe97c214594d76b83 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm f605f46555f24be277aac9f82a9955e508607b058a842daee2e9ab56af584944 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 68a0070e229c3de7e38bf2554351562769fb2223662de7b2e228f0959527cf7b libbpf-1.0.0-2.el9_2.tuxcare.7.els24.i686.rpm 4b4a6c9f83a0a6982219b1f98c8ac7747f64543e092e599f508230863070bf17 libbpf-1.0.0-2.el9_2.tuxcare.7.els24.x86_64.rpm cd3bc6fa7dd737814271e53197d714f6a844a4e5b67312b16b837c2161957f66 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els24.i686.rpm 8d3d42adaf9c0eb617d8e39380d6a93ee7d28670a71b91aa3cae2c1d169cd087 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els24.x86_64.rpm 0a70d4d46c545b71ae9e524f09ebedc97dff54f2dd9f69a5ab8ac2abd9983171 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els24.i686.rpm e182f155cae14a3594e91f7a66313161c0f15694906b35789cdca43ef609c55a libbpf-static-1.0.0-2.el9_2.tuxcare.7.els24.x86_64.rpm 8a99d4b1e56080ae830d63f3e8637baf5095a2d3171d137da88425e89f1afe30 perf-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 84c22fcab59deb16805e1d3b247f93b7f6d5b98c11cdf3070d112785ba308302 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm fbc3ae1aa2e692d919ce10ea0f4a9379717366f62edeb51f77332a18a7bb62d4 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els24.x86_64.rpm 80e1a5d3409e9712eb501edd6bf13c0d5d50941bbd1d18e11dc95b6f35f26da4 CLSA-2025:1764322970 TuxCare License Agreement 0 - CVE-2024-3661: fix TunnelVision vulnerability by preventing DHCP option 121 route manipulation that could bypass VPN encryption and leak traffic Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3661: fix TunnelVision vulnerability by preventing DHCP option 121 route manipulation that could bypass VPN encryption and leak traffic

0 tuxcare-almalinux9.2-esu NetworkManager-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 85280847992fc8b1996539fdd70865e64f35658925d811b860b8171ff226f079 NetworkManager-adsl-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 80c4a294243aba4c4d407b375c512a39a8485df0e7aa6afbecb3a4f090031856 NetworkManager-bluetooth-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 261118a53d88722f9c5165e1e6ac567267465382d66897daeb69bd73de322527 NetworkManager-cloud-setup-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm f5ba197bb91dcbfd1fd4cf4624e7eee64b9a3da8950b846d439c1dd22966c4c0 NetworkManager-config-connectivity-redhat-1.42.2-8.el9_2.tuxcare.els1.noarch.rpm 57cc88df7944fa04b03f084a78d41f39e10c532636fb158bd5cce589233226d1 NetworkManager-config-server-1.42.2-8.el9_2.tuxcare.els1.noarch.rpm 69319e6e2f73ac8e1400486abca30c047af456fb5f065ab988b4988c01ac81fc NetworkManager-dispatcher-routing-rules-1.42.2-8.el9_2.tuxcare.els1.noarch.rpm 6bc4eba11002cb1a6055ae4bed01eaca51b2cbbce6d6eb737fc0aca27bbd1066 NetworkManager-initscripts-updown-1.42.2-8.el9_2.tuxcare.els1.noarch.rpm 419add0ecc7e8510c46cbdf12f4d71554dfc4cfbbfdc8c489273d9e778ea2b1e NetworkManager-libnm-1.42.2-8.el9_2.tuxcare.els1.i686.rpm 36bdd63f94c7fd574cd4ca65a5de54ee3d7692c1cdfb1de072f98d2e66a2f087 NetworkManager-libnm-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 9f3a9acb68c230343cfc2df2b6ebea266e2c427a275264bd23f3d24bc99a82f2 NetworkManager-libnm-devel-1.42.2-8.el9_2.tuxcare.els1.i686.rpm e9b8ddce405bd1bad31dc26a16fcde26d751fe700c85ccb8779c53c5082ef7db NetworkManager-libnm-devel-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 2b66d993830c4efc8d37931cfa05d11ad552f525cc75da88ae16aec238ce657b NetworkManager-ovs-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 6af1d835f91c898f6d4d5e8e3b18335bd0408c6a294202a2ba5681bb6661a509 NetworkManager-ppp-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm bab55d8378d65b5992017609b04c578bc3d3223aa84f63d7f30b25bd69f72f0a NetworkManager-team-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 225cd3ac33b100f7d6959388646379dd5a2031aa574d0d6cd26c40274ad0d863 NetworkManager-tui-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 675396ca1171586ddc06afe59971ef4ff831f87f31619965d734d33757ec6512 NetworkManager-wifi-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm c62692833825509509ac1924587437eb6493df20bc013d481d63af67dfc2cf31 NetworkManager-wwan-1.42.2-8.el9_2.tuxcare.els1.x86_64.rpm 62ade39480c1598e0eb1a7fd747e6795eb8790296db30ebac548f75cdbb89cff CLSA-2025:1764324159 TuxCare License Agreement 0 - CVE-2025-11230: fix denial of service vulnerability in mjson library by optimizing exponent calculation to prevent CPU exhaustion from crafted JSON requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11230: fix denial of service vulnerability in mjson library by optimizing exponent calculation to prevent CPU exhaustion from crafted JSON requests

0 tuxcare-almalinux9.2-esu haproxy-2.4.17-6.el9.tuxcare.els4.x86_64.rpm 15eba9520b229e940c498f447ee15eb3e66409cc7bdf4e59c4486208bd7da2bb CLSA-2025:1764331947 TuxCare License Agreement 0 - CVE-2025-58183: fix unbounded memory consumption when reading GNU pax 1.0 sparse files Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58183: fix unbounded memory consumption when reading GNU pax 1.0 sparse files

0 tuxcare-almalinux9.2-esu go-toolset-1.22.5-1.el9_2.tuxcare.els8.x86_64.rpm 118d8fc7efdaa3be4120d2a8de4debc86e8d590d3f1908f14fa6f8da2c50ee04 golang-1.22.5-1.el9_2.tuxcare.els8.x86_64.rpm 70a05c64e1573f9a95e975059851e536a8d96d02dcaa77b637026999489b424f golang-bin-1.22.5-1.el9_2.tuxcare.els8.x86_64.rpm 330660dcf9cf69ff1254f472ede16a1dcb0872c9043b2e77c7e2ed9e527ecae4 golang-docs-1.22.5-1.el9_2.tuxcare.els8.noarch.rpm b03a52afaa6ebd15b3643f4fff98b19217ea8009f21b292f562652063cb8a3d6 golang-misc-1.22.5-1.el9_2.tuxcare.els8.noarch.rpm db2a64be6cf1551e79f961c957a98bbc86123d1c3c6b19719c34f2c2eae3bd49 golang-src-1.22.5-1.el9_2.tuxcare.els8.noarch.rpm 003f3e2630a0ed32ff6419ef32c959ac467668fd4a93ff2d7c0ad855a306330d golang-tests-1.22.5-1.el9_2.tuxcare.els8.noarch.rpm bbf85f0803af4063ce82b94f135e4bfa6a8ba354bcb2459cd3a83789bcee3f4d CLSA-2025:1764615000 TuxCare License Agreement 0 - CVE-2024-6345: Fix code injection vulnerability in package download functions None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6345: Fix code injection vulnerability in package download functions

0 tuxcare-almalinux9.2-esu python3.11-setuptools-65.5.1-2.el9.tuxcare.els1.noarch.rpm 41cce1a490bb19b81bb3e98af5d7e86a3135917a2eea2d7c8dc62e32d0e0cd04 python3.11-setuptools-wheel-65.5.1-2.el9.tuxcare.els1.noarch.rpm 8f49f74c6a789e70c94006ff9af051483840235fbf65886648facc1e066c4115 CLSA-2025:1764615456 TuxCare License Agreement 0 - CVE:2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE:2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write

0 tuxcare-almalinux9.2-esu python3.11-setuptools-65.5.1-2.el9.tuxcare.els2.noarch.rpm b58de072319673f5ba422c6e5a199e2a30525c7cdd887b61978b15e597f98b22 python3.11-setuptools-wheel-65.5.1-2.el9.tuxcare.els2.noarch.rpm 03c4b6c49011d5d258d5679a991f5be0d8dab7defeba0aa36db99250207db963 CLSA-2025:1764580671 TuxCare License Agreement 0 - CVE-2024-50379: fix TOCTOU vulnerability in JSP compilation to prevent RCE on case insensitive file systems - CVE-2024-38286: fix issue of resource allocation without limits or throttling vulnerability in TLS handshake process - Apply skip-common-daemon patch to remove the commons-daemon.jar copy in build.xml, as Alma/RHEL cannot ship bundled JARs and must use the system commons-daemon The ELS-provided source archive requires this adaptation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-50379: fix TOCTOU vulnerability in JSP compilation to prevent RCE on case insensitive file systems - CVE-2024-38286: fix issue of resource allocation without limits or throttling vulnerability in TLS handshake process - Apply skip-common-daemon patch to remove the commons-daemon.jar copy in build.xml, as Alma/RHEL cannot ship bundled JARs and must use the system commons-daemon The ELS-provided source archive requires this adaptation

0 tuxcare-almalinux9.2-esu pki-servlet-4.0-api-9.0.50-1.el9.tuxcare.els1.noarch.rpm 3736c8d1c9e88c5b5d2ca37a4141adced80dba4c2ef3794a0c50c991c8e63662 pki-servlet-engine-9.0.50-1.el9.tuxcare.els1.noarch.rpm 4b23ef49664973caa63eea9675d92bf9e028159a8113281ecfd675aa9b30f62b CLSA-2025:1764614196 TuxCare License Agreement 0 - CVE-2024-29039: add comparison of pcr selection to prevent misleading picture of the TPM state Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-29039: add comparison of pcr selection to prevent misleading picture of the TPM state

0 tuxcare-almalinux9.2-esu tpm2-tools-5.2-2.el9_1.tuxcare.els1.x86_64.rpm ae31c93d635d368161814857b54d8c8273b82d6d9bcbe0f67e0782a7fafb2977 CLSA-2025:1764677738 TuxCare License Agreement 0 - CVE-2025-47151: fix type confusion vulnerability in the lasso_node_impl_init_from_xml functionality Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-47151: fix type confusion vulnerability in the lasso_node_impl_init_from_xml functionality

0 tuxcare-almalinux9.2-esu lasso-2.7.0-11.el9.tuxcare.els1.i686.rpm 71fbf0c6f9feffaf8409486de0868fd97ad6f61c008b816feb1d1ec145a1755e lasso-2.7.0-11.el9.tuxcare.els1.x86_64.rpm a04932f11e2c58f3dac31c0b8a78abe1e2d0babaca0a48bda448a5cc925df87d lasso-devel-2.7.0-11.el9.tuxcare.els1.i686.rpm 51fefc425e2c7d5f828a342400c78e21d700eebb9c6c9658587aab00b058703e lasso-devel-2.7.0-11.el9.tuxcare.els1.x86_64.rpm d837339576db46572f8a309ea74e8872467624638475eb91af7f61cc275de994 perl-lasso-2.7.0-11.el9.tuxcare.els1.x86_64.rpm e2cfb6dfd384f051779918bca90b781a57c2ae837cd544658d2510d195783b45 python3-lasso-2.7.0-11.el9.tuxcare.els1.x86_64.rpm de73889e749c3496d9fce037effe08315b6641a8eccffe6c47d7e3a608c4da71 CLSA-2025:1764692266 TuxCare License Agreement 0 - Update buildah to 1.39.6 - CVE-2025-52881: fix runc vulnerability by updating to runc v1.2.8 - Update golang dependency to 1.22.9.tuxcare.els1 - Remove patches for fixes included in upstream (CVE-2024-9341, CVE-2024-9407, CVE-2025-27144) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update buildah to 1.39.6 - CVE-2025-52881: fix runc vulnerability by updating to runc v1.2.8 - Update golang dependency to 1.22.9.tuxcare.els1 - Remove patches for fixes included in upstream (CVE-2024-9341, CVE-2024-9407, CVE-2025-27144)

0 tuxcare-almalinux9.2-esu buildah-1.39.6-1.el9_2.tuxcare.els1.x86_64.rpm 2345ce6f8ff67fb959c6e5a7b0f7e4346b5f9229a2e3398a83eab497f18c2187 buildah-tests-1.39.6-1.el9_2.tuxcare.els1.x86_64.rpm dc1aa56e645a5d91ffb252456b2dc1c9f7a1332ff7b80b89145980bcd04d465d CLSA-2025:1764692769 TuxCare License Agreement 0 - CVE-2023-0286: fix X.400 address type confusion in X.509 GeneralName Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-0286: fix X.400 address type confusion in X.509 GeneralName

0 tuxcare-almalinux9.2-esu compat-openssl11-1.1.1k-4.el9_0.tuxcare.els1.i686.rpm 8a0336f380d90b254d5decdcaa833d40dfd5aa035ad916b538dea89fb9ec1e56 compat-openssl11-1.1.1k-4.el9_0.tuxcare.els1.x86_64.rpm 32c750247f1d6677d2d5b23bbee806c68944a0d5877ae98b721222a1ad8cedc0 CLSA-2025:1764152728 TuxCare License Agreement 0 - CVE-2025-27144: fix memory exhaustion vulnerability when parsing compact JWS or JWE input by updating the code to split JWT tokens Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27144: fix memory exhaustion vulnerability when parsing compact JWS or JWE input by updating the code to split JWT tokens

0 tuxcare-almalinux9.2-esu osbuild-composer-76-2.el9_2.2.alma.tuxcare.els1.x86_64.rpm 0f91e7b2743db7374b841f57aa096e022ba9aa66801f175199d633afc7396ff0 osbuild-composer-core-76-2.el9_2.2.alma.tuxcare.els1.x86_64.rpm aaf5f892ecd139269e2892024c6fb266b0c82b41f80ec78211e4dff983938c6f osbuild-composer-dnf-json-76-2.el9_2.2.alma.tuxcare.els1.x86_64.rpm f9e13086ee1165aa51516678b789f7bd1a50248954934f34f9432d46daffb60f osbuild-composer-tests-76-2.el9_2.2.alma.tuxcare.els1.x86_64.rpm f9c1360446fd5c3de19c5971b56aa59ec42ee616c1876ff9bc12c05ab2e394b6 osbuild-composer-worker-76-2.el9_2.2.alma.tuxcare.els1.x86_64.rpm 71f00c194dbe2a2f72a13b4566a8e227ab912932ef729cae48463e9267628a93 CLSA-2025:1764771605 TuxCare License Agreement 0 - Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: replaced missing packages with a patch for PackageVersion Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: replaced missing packages with a patch for PackageVersion

0 tuxcare-almalinux9.2-esu pki-jackson-jaxrs-json-provider-2.14.1-2.el9.tuxcare.els1.noarch.rpm 61b8034e06e1345fe0711045d04c01c08416074ee6279920d891c2d73daca659 pki-jackson-jaxrs-providers-2.14.1-2.el9.tuxcare.els1.noarch.rpm 25c3a30666fad597cd15336222ee291019608042806cf00d506737c809d9e2a2 pki-jackson-jaxrs-providers-datatypes-2.14.1-2.el9.tuxcare.els1.noarch.rpm f63641c08608283b9af7580108fa6b1968cbd449db8f89cedef72cad36cc4fec pki-jackson-jaxrs-providers-javadoc-2.14.1-2.el9.tuxcare.els1.noarch.rpm 239e4f74b1d022a3750f05f3ff402e4b0b91c60d75f4a9a790ad430094743c17 pki-jackson-jaxrs-providers-parent-2.14.1-2.el9.tuxcare.els1.noarch.rpm 914be42af52d8e933adb761e48423717ee74be6cf350e63da5ccfa214f1ee6c6 CLSA-2025:1764772111 TuxCare License Agreement 0 - Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: replaced missing packages with a patch for PackageVersion Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: replaced missing packages with a patch for PackageVersion

0 tuxcare-almalinux9.2-esu pki-jackson-module-jaxb-annotations-2.14.1-2.el9.tuxcare.els1.noarch.rpm 01ba66e985e85b3c78276b38fdccccb6ad52339a4c4e0038208051dbbef2ea40 pki-jackson-modules-base-2.14.1-2.el9.tuxcare.els1.noarch.rpm 34d6f86847139ba94c2f50eaa0049cc1abef4a06a14a7e1bec8f228ca5e37e22 CLSA-2025:1764772736 TuxCare License Agreement 0 - CVE-2024-7383: verify NBD server's certificate to prevent man-in-the-middle attack on NBD traffic Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-7383: verify NBD server's certificate to prevent man-in-the-middle attack on NBD traffic

0 tuxcare-almalinux9.2-esu libnbd-1.14.2-1.el9.tuxcare.els1.i686.rpm a2b8b55f901eb025999dc6d342441b93086deaaf0be72c4baaf8db034989dffe libnbd-1.14.2-1.el9.tuxcare.els1.x86_64.rpm 1a737d41e342bbe6b700ddc3177d34ffb8f591fd4b0898bee18ac0a893d7a9d6 libnbd-bash-completion-1.14.2-1.el9.tuxcare.els1.noarch.rpm 8b5fdf2dba02a0046a41f47909e891b67306e84d2cf0b82644adae50f5dc8d67 libnbd-devel-1.14.2-1.el9.tuxcare.els1.i686.rpm 059c7f6655ae63a18a47ed0c26f8856680c40dc0f97e2e4060e7fd72565b47ce libnbd-devel-1.14.2-1.el9.tuxcare.els1.x86_64.rpm 3b4d98392d6cef6c41a50eddeab8d5cb6a7bcabe9e06ef07377773e32d4f631c nbdfuse-1.14.2-1.el9.tuxcare.els1.x86_64.rpm 0eacd4713dc965f6fd6bc505b393f78872680cf557af5ea6fbd39f942b602d6d ocaml-libnbd-1.14.2-1.el9.tuxcare.els1.x86_64.rpm 1c4c90ac351e5dcaffa87169ce9a520c3f592c2262191a91dd194084a156ca73 ocaml-libnbd-devel-1.14.2-1.el9.tuxcare.els1.x86_64.rpm 584823edbc8a4e78cad5a1ac4fea20218902579f7b407b185545162359806a11 python3-libnbd-1.14.2-1.el9.tuxcare.els1.x86_64.rpm 0f34e734a866ce67cc88816ba56b925720b5288bced08db3459f341d2e8b52f2 CLSA-2025:1764773365 TuxCare License Agreement 0 - CVE-2024-9681: improve HSTS subdomain handling to prevent incorrectly overriding parent domain entries Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9681: improve HSTS subdomain handling to prevent incorrectly overriding parent domain entries

0 tuxcare-almalinux9.2-esu curl-7.76.1-23.el9_2.4.tuxcare.els5.x86_64.rpm 7624e17d4ce59f20234c3a492a89c0c0be1dc236cff1744d9daa484fdad4d56b curl-minimal-7.76.1-23.el9_2.4.tuxcare.els5.x86_64.rpm 4afe9d1cbd7a4d6a4d3d749dcc0720572f86c74468e8c035f2cef6098005e83a libcurl-7.76.1-23.el9_2.4.tuxcare.els5.i686.rpm 36a1f36eeee3e603970fdc371bf8394eeaf29a68b6d488234bd507d7365a2215 libcurl-7.76.1-23.el9_2.4.tuxcare.els5.x86_64.rpm f8bf570f97d3ed65af93438ba6d1af2e59f6b864c75224422e074665525e17c3 libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els5.i686.rpm 21d42e937e22824b4396a647e05e03a329fb6686e0f46be2fa7d40fa2afccb76 libcurl-devel-7.76.1-23.el9_2.4.tuxcare.els5.x86_64.rpm af9a6913e2de6223bce19f6bafc16d2e49929b6420708b19e9747899545b7dbc libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els5.i686.rpm 2444298a084ddde987ef94617cccfc5417330dae40892751b52223f25b06b682 libcurl-minimal-7.76.1-23.el9_2.4.tuxcare.els5.x86_64.rpm c7149562dafe2d063be3d057865a338e10f9224bae9913d18553e109641bb0c0 CLSA-2025:1764774571 TuxCare License Agreement 0 - CVE-2024-47606: fix integer overflow when allocating sysmem and avoid integer overflow in qtdemux theora extension parsing Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47606: fix integer overflow when allocating sysmem and avoid integer overflow in qtdemux theora extension parsing

0 tuxcare-almalinux9.2-esu gstreamer1-1.18.4-4.el9.tuxcare.els1.i686.rpm 8f5d19680095224cd6bb28367b4705dc0f7b60d70e8a4f058ce67cefad3c9779 gstreamer1-1.18.4-4.el9.tuxcare.els1.x86_64.rpm 8cdd5f1b5c7ce544a85546077daa4c9baf5cad18ecf590d08738097655c0bdfc gstreamer1-devel-1.18.4-4.el9.tuxcare.els1.i686.rpm ace1bdea5564518a1b13fbaa7043e8bbda43439f98e88b694db0d3f96c4d44f8 gstreamer1-devel-1.18.4-4.el9.tuxcare.els1.x86_64.rpm 28766b8c2311e227516d599c5997f8cd552ca3e24387a0ece80636c229cb77ba CLSA-2025:1764847045 TuxCare License Agreement 0 - Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: removed unavailable jackson-parent dependencies Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: removed unavailable jackson-parent dependencies

0 tuxcare-almalinux9.2-esu pki-jackson-annotations-2.14.1-1.el9.tuxcare.els1.noarch.rpm 61d6f376f9c694df280d751e85e412ed475d950373af708783f8fc271e486438 pki-jackson-annotations-javadoc-2.14.1-1.el9.tuxcare.els1.noarch.rpm 66a0e9677f0b25fd7d101a6c4ee081798c6d24580aef2e5155ed891bb8daa797 CLSA-2025:1764858279 TuxCare License Agreement 0 - Removed CVE-2020-36518.patch: jackson-databind 2.14.1-1 is not affected - Rebuilt with the CVE-2025-52999: fixed jackson-core version Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Removed CVE-2020-36518.patch: jackson-databind 2.14.1-1 is not affected - Rebuilt with the CVE-2025-52999: fixed jackson-core version

0 tuxcare-almalinux9.2-esu pki-jackson-databind-2.14.1-2.el9.tuxcare.els2.noarch.rpm 7af48cded1f00df7ce1a75b2c5c7b6c8bf3300d66db977d24aec01b661de5402 CLSA-2025:1764956967 TuxCare License Agreement 0 - CVE-2025-59375: fix memory amplification and add allocation tracker Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-59375: fix memory amplification and add allocation tracker

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els6.i686.rpm 3abb46e90fe0ba7e0de576f74446d6d40f1c6f5be631fa4ebfbb803ad32c8eba expat-2.5.0-1.el9.tuxcare.els6.x86_64.rpm 5bc15e1d2e3edaba43cd35b5c24d7fe8277ab5d4bcb9a9d282ddf83422734778 expat-devel-2.5.0-1.el9.tuxcare.els6.i686.rpm 09a000cf17e36824b55dd5c845321a0e51f615a2b9b12bee0594b3e11800b187 expat-devel-2.5.0-1.el9.tuxcare.els6.x86_64.rpm 68dfd968392cb9479b2102d2a1019df0b7b9e0ffedcb2a50d95157f173e19cfb expat-static-2.5.0-1.el9.tuxcare.els6.x86_64.rpm 59988c016dac66af20302fe10bafaa4483ef1efae8f1d15c4bf082deceb56f9d CLSA-2025:1764957598 TuxCare License Agreement 0 - Update libreswan to 4.12-2 to include not compatible CVE fix CVE-2024-2357 after the version 4.9 - CVE-2024-2357: fix crash in IKEv2 when a missing PreSharedKey triggers repeated pluto restarts Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update libreswan to 4.12-2 to include not compatible CVE fix CVE-2024-2357 after the version 4.9 - CVE-2024-2357: fix crash in IKEv2 when a missing PreSharedKey triggers repeated pluto restarts

0 tuxcare-almalinux9.2-esu libreswan-4.12-2.el9_2.tuxcare.els1.x86_64.rpm 9c73bf7d509d37252732d71e922cde8e407b23f39282ee0a8b0d77e3690fcf7e CLSA-2025:1765012494 TuxCare License Agreement 0 - CVE-2025-10922: fix heap-based buffer overflow in DCM file parser by adding safety checks and proper GError handling to prevent potential RCE - CVE-2025-10934: fix heap-based buffer overflow in XWD file parser by validating colormap offsets to prevent potential RCE Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-10922: fix heap-based buffer overflow in DCM file parser by adding safety checks and proper GError handling to prevent potential RCE - CVE-2025-10934: fix heap-based buffer overflow in XWD file parser by validating colormap offsets to prevent potential RCE

0 tuxcare-almalinux9.2-esu gimp-2.99.8-3.el9.tuxcare.els8.x86_64.rpm 8eb7c5482faa4d9234875ffff9c56525a83a81e0125f96e1f90419b165f2e95b gimp-devel-2.99.8-3.el9.tuxcare.els8.x86_64.rpm e93f40a8c8aaaf7c96d73201bd4a951717718fcec4f5ebf18ee0e95bedc670e3 gimp-devel-tools-2.99.8-3.el9.tuxcare.els8.x86_64.rpm 3f70172f5d60d328cffadf55d3e044ce80723226c99e3eaec6ff5d36bcffc4f0 gimp-libs-2.99.8-3.el9.tuxcare.els8.i686.rpm 02983f26423134de4720de9b8fd3bd449852afb0a724eddee496bfa2c80744d2 gimp-libs-2.99.8-3.el9.tuxcare.els8.x86_64.rpm 63338da88f0fd4b597b86bec8a981fa81f6f02446712a93094451a397c1ee7dc CLSA-2025:1765208529 TuxCare License Agreement 0 - CVE-2025-53906: drop leading ../ on write of zipfiles, don't forcefully overwrite existing files - CVE-2025-29768: use glob '[-]' to protect filenames starting with '-' Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-53906: drop leading ../ on write of zipfiles, don't forcefully overwrite existing files - CVE-2025-29768: use glob '[-]' to protect filenames starting with '-'

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els11.x86_64.rpm cf7393d325730395d25de672db936cf15b9e2fad4c60cb090969bab4afa3a1a4 vim-common-8.2.2637-20.el9_1.tuxcare.els11.x86_64.rpm b17bc0f76e778a93f8b8369611f7010b7e4293fd20d7c68472c404e36086f388 vim-enhanced-8.2.2637-20.el9_1.tuxcare.els11.x86_64.rpm c221f4ed761ebcf91ca270f59bad50d55f43658ae1012ab5ebffa0ef43d29a62 vim-filesystem-8.2.2637-20.el9_1.tuxcare.els11.noarch.rpm 0572581792753bb768ead81a4702506f3fe1f2e8e73b79fa9abddac55ad0c361 vim-minimal-8.2.2637-20.el9_1.tuxcare.els11.x86_64.rpm 5afe29694c788ac2175e743eced0dc018a3b529e45976e465a15a10d950cddaa CLSA-2025:1765231763 TuxCare License Agreement 0 - Update to Go 1.22.9 - Remove CVE-2024-34155, CVE-2024-34156, and CVE-2024-34158 patches - Remove fix-standard-crypto-panic.patch (no longer needed) - Add disable_static_tests_part1.patch and disable_static_tests_part2.patch to disable OpenSSL backend for static builds - Add skip_TestCrashDumpsAllThreads.patch to skip flaky test on s390x architecture None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to Go 1.22.9 - Remove CVE-2024-34155, CVE-2024-34156, and CVE-2024-34158 patches - Remove fix-standard-crypto-panic.patch (no longer needed) - Add disable_static_tests_part1.patch and disable_static_tests_part2.patch to disable OpenSSL backend for static builds - Add skip_TestCrashDumpsAllThreads.patch to skip flaky test on s390x architecture

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els1.x86_64.rpm 04dff677c717ac72dfe0f9b74715008c11234093aa2b076ebb7764f750d9bc80 golang-1.22.9-1.el9_2.tuxcare.els1.x86_64.rpm dd65b27d8e5a6fb2efcaebf91dfd011334ad264ee2cff3baa6eaee5a2ec997a2 golang-bin-1.22.9-1.el9_2.tuxcare.els1.x86_64.rpm e2bdcacf7ccbe1fdb4526cf7b548e50c6f20a9cd406c5305537bdf67266d2cff golang-docs-1.22.9-1.el9_2.tuxcare.els1.noarch.rpm 095faf2d0982632f291800f52e6a632a19d9f690ee86bb7e6bd0909978b2d8c2 golang-misc-1.22.9-1.el9_2.tuxcare.els1.noarch.rpm 64e62decff7c01e88ef11555fbad08b7a0657d3b8b9c26c97004933d776a957c golang-src-1.22.9-1.el9_2.tuxcare.els1.noarch.rpm 668fa46440fa7dc5fb1663e504827681ec995cc620da9d6917fbd26ee8659539 golang-tests-1.22.9-1.el9_2.tuxcare.els1.noarch.rpm eff86f9d30902bb3a2b95a94fa861b326603d78be7d140985763a11099e55eca CLSA-2025:1765286622 TuxCare License Agreement 0 - CVE-2025-5024: add connection throttling to prevent resource exhaustion. Fixes unauthenticated resource exhaustion and DoS attacks via connection flooding Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5024: add connection throttling to prevent resource exhaustion. Fixes unauthenticated resource exhaustion and DoS attacks via connection flooding

0 tuxcare-almalinux9.2-esu gnome-remote-desktop-40.0-7.el9.tuxcare.els1.x86_64.rpm 494466b625df755af4941169339d92e29cf116efa4e003b47afb722ffa0f6445 CLSA-2025:1765287210 TuxCare License Agreement 0 - CVE-2023-5557: fix seccomp rules, backport fix for CVE-2023-5557 added improvements from upstream regards seccomp Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5557: fix seccomp rules, backport fix for CVE-2023-5557 added improvements from upstream regards seccomp

0 tuxcare-almalinux9.2-esu tracker-miners-3.1.2-3.el9_2.tuxcare.els1.x86_64.rpm 3d83f89d62bb06cd001bac4c78e11622405e8b522b0f27a2b069da31f852ff1c CLSA-2025:1765288864 TuxCare License Agreement 0 - CVE-2025-64505: fix heap buffer over-read vulnerability in png_do_quantize function Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-64505: fix heap buffer over-read vulnerability in png_do_quantize function

0 tuxcare-almalinux9.2-esu libpng-1.6.37-12.el9.tuxcare.els1.i686.rpm d83bebf41fbfb12f0c28202e84268c0a342fc2426aa3ebcad8790cc4bdbf5525 libpng-1.6.37-12.el9.tuxcare.els1.x86_64.rpm 496432612da297c5b372d51e719746db96ecb8b67271c0919750b6a482a2573c libpng-devel-1.6.37-12.el9.tuxcare.els1.i686.rpm 71d1042540ef3ea5433dfce30226d62ad58102473f0a9ee6cf82c37c305bc8ad libpng-devel-1.6.37-12.el9.tuxcare.els1.x86_64.rpm e645f5eefd86cedac2c8279ebcc4f85e19274198c34d54a73137427f613da1e4 libpng-static-1.6.37-12.el9.tuxcare.els1.x86_64.rpm 2c01de037a3dfa9654ab931daefc306906b2fc32051d603e0aa3eac2b70e390a libpng-tools-1.6.37-12.el9.tuxcare.els1.x86_64.rpm fafec140ecb87bfd8211fe88d7be912dc667d92cfb53caafeb0f5145357a1ea6 CLSA-2025:1765293700 TuxCare License Agreement 0 - CVE-2025-58183: fix cap GNU tar pax 1.0 sparse region size to prevent unbounded memory allocation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58183: fix cap GNU tar pax 1.0 sparse region size to prevent unbounded memory allocation

0 tuxcare-almalinux9.2-esu buildah-1.39.6-1.el9_2.tuxcare.els2.x86_64.rpm d418f49954cb90d5778ecc1b8b790bb03a5ff5739f7bdc76fee74537c4023ede buildah-tests-1.39.6-1.el9_2.tuxcare.els2.x86_64.rpm d3d935a7cb9a54b9deef57386dbf847f23a5868e2cdc3cb4b23053d25d24413d CLSA-2025:1765376235 TuxCare License Agreement 0 - CVE-2007-4559: fix for tarfile directory traversal vulnarability Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2007-4559: fix for tarfile directory traversal vulnarability

0 tuxcare-almalinux9.2-esu python3.11-pip-22.3.1-2.el9.tuxcare.els1.noarch.rpm 726e85caa948f3cd6301d99f0f9acd46f62b9c7cdfe87fbe4d24553ab8102bc3 python3.11-pip-wheel-22.3.1-2.el9.tuxcare.els1.noarch.rpm edd647f95408b87a5f4bc66f5219620167209e2b719b4be5c72c79a25a376047 CLSA-2025:1765377802 TuxCare License Agreement 0 - CVE-2025-52886: limit amount of annotations per page/document to mitigate out-of-memory Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-52886: limit amount of annotations per page/document to mitigate out-of-memory

0 tuxcare-almalinux9.2-esu poppler-21.01.0-14.el9.tuxcare.els3.i686.rpm 08713be778f267419bf1e7d963c5a7fb6d71af3b7a970292375a500c12f1760e poppler-21.01.0-14.el9.tuxcare.els3.x86_64.rpm f823bb746fcc9ce1e5508ba3abd8e91202eea0bdee4398e8cfbe0919f5e0adbb poppler-cpp-21.01.0-14.el9.tuxcare.els3.i686.rpm a9d32282c8fcd9e76ce6ef34b361af3a18a308eeccbc2be2b69c3b654f6f0671 poppler-cpp-21.01.0-14.el9.tuxcare.els3.x86_64.rpm 6fb828a1bd3864a8edf8fcbc1c73a754f9f0c569334a5e0aa71341460e3b998a poppler-cpp-devel-21.01.0-14.el9.tuxcare.els3.i686.rpm 7b94ad3f38062d06fec811d4845c8a7afa339cdd86b6f9e5679bc15e815d6e63 poppler-cpp-devel-21.01.0-14.el9.tuxcare.els3.x86_64.rpm bf1e0bf046b10473166800a9b4c441e94ff1d3512410ee3fca86609aa1d1707a poppler-devel-21.01.0-14.el9.tuxcare.els3.i686.rpm 1dac292ceb113ea1dd899157f34fc61073133ac355a55919763096c155be1b58 poppler-devel-21.01.0-14.el9.tuxcare.els3.x86_64.rpm 708f952bc36004fead0ea9226771bbe774123c9d8ebdf213be5b2e78e48e6570 poppler-glib-21.01.0-14.el9.tuxcare.els3.i686.rpm 2e01d0b8956df6a29c31bdd80da494c24bcd62c94c5af8a929fdbf9bc49cd86d poppler-glib-21.01.0-14.el9.tuxcare.els3.x86_64.rpm fa1733341ae6fcfcc1192345136142af0a6256a8b897ef9c0499f7b8f2129185 poppler-glib-devel-21.01.0-14.el9.tuxcare.els3.i686.rpm 4ffab1e612dbf247aec710413f4bcf0bfe4ade8e4368b101d5defd77f374dfc7 poppler-glib-devel-21.01.0-14.el9.tuxcare.els3.x86_64.rpm 64f2d04d0ae0f1c10e57e61d9d431d0adef3f2ce97769f08d93321f3b35c24b3 poppler-glib-doc-21.01.0-14.el9.tuxcare.els3.noarch.rpm eca4022cc730337bf6f8f2f432551f9d58425d78d61d456cb5f792fd97409ad3 poppler-qt5-21.01.0-14.el9.tuxcare.els3.i686.rpm a423e61606f0f819ed387bc23a3eee907b74c268a2bc7c8dce26ae64cf0eff47 poppler-qt5-21.01.0-14.el9.tuxcare.els3.x86_64.rpm 13cc18731a8b8e9db7f1459c66eba82dc69f706fbda3bf167b083a459bc74dea poppler-qt5-devel-21.01.0-14.el9.tuxcare.els3.i686.rpm dffb04b5e6aa0920f3f0157c36aa5e7a5dec5a2a3aecadaba8ff8327cb10c546 poppler-qt5-devel-21.01.0-14.el9.tuxcare.els3.x86_64.rpm 3759cadd72f9964e2c1b28740a7c3425ddf3c937dd9b424ecedc70258ef9a16f poppler-utils-21.01.0-14.el9.tuxcare.els3.x86_64.rpm 3ab83e26c2076657e2955fb145a191bc755d65298b839eedd93e279ccc5de0cf CLSA-2025:1765379145 TuxCare License Agreement 0 - CVE-2025-47906: fix issue where certain strings could cause executables in PATH variable to be returned by LookPath function Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-47906: fix issue where certain strings could cause executables in PATH variable to be returned by LookPath function

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els2.x86_64.rpm 0ce2118bf2baea87d7c94997d689911ff3a4b5713ce7e7be0707b4215ed05954 golang-1.22.9-1.el9_2.tuxcare.els2.x86_64.rpm 5520cbd1b89a3c81dd4abb98ba0fe173be2b0a43357d33fa85f5846b8223d873 golang-bin-1.22.9-1.el9_2.tuxcare.els2.x86_64.rpm 5511b763691c2e994ee6ec095626cbbfbd8ea52b1a49086c933baa041e785143 golang-docs-1.22.9-1.el9_2.tuxcare.els2.noarch.rpm 8215d12dde6bdaae9e486e44ce3389fa526d8cb4fdd2e664d206ce8da1787fd4 golang-misc-1.22.9-1.el9_2.tuxcare.els2.noarch.rpm 46ca56b395adc6df0c4b2d214ce4b11e21d5719edcd83e9fc23b59fb0bbde95b golang-src-1.22.9-1.el9_2.tuxcare.els2.noarch.rpm 4d0a930a48bbc88e6094279f1685c898a69c01ba419e97f3c851f8e7f96d9b43 golang-tests-1.22.9-1.el9_2.tuxcare.els2.noarch.rpm 37c1c86829399da977c474368061d20ba0d3975fe8b44a08db2d2c37a2318b7d CLSA-2025:1765379708 TuxCare License Agreement 0 - Rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els8 to address CVE-2025-58183 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els8 to address CVE-2025-58183

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els7.x86_64.rpm b0eebeadcbbc571fbf581ecf6122d0b4410ba27d5e6a026f6fad19dcc5c2e565 podman-docker-4.4.1-13.el9_2.tuxcare.els7.noarch.rpm 23a123ab87ea7af8fb47a4253699d1083f3f6a8cf975e1b4207b6cf4943af9f9 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els7.x86_64.rpm 45b71e43ee09797be16a5887f3593879c92bef8c4403159132c19004340dd64e podman-plugins-4.4.1-13.el9_2.tuxcare.els7.x86_64.rpm bc07b421144f1a53d385c9d7725cf6600094493846ef929e8819a7a0c6d6b4d8 podman-remote-4.4.1-13.el9_2.tuxcare.els7.x86_64.rpm f30ff6805b5e3191e77f0f72f0f9d29b2ea6c9160cd38ee5d5842e1fa72ed8da podman-tests-4.4.1-13.el9_2.tuxcare.els7.x86_64.rpm a950ff972061ddfe9dce0de1653cdb17af8c2fbbc6250d5ad81ec5cccaabb4f1 CLSA-2025:1765381441 TuxCare License Agreement 0 - CVE-2024-28182: fix continuation frame floods via frame count limiting Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-28182: fix continuation frame floods via frame count limiting

0 tuxcare-almalinux9.2-esu libnghttp2-1.43.0-5.el9_2.1.tuxcare.els1.i686.rpm 5135801af41462d9983fee41290239ae151f2198b66da515d25df53fa45235be libnghttp2-1.43.0-5.el9_2.1.tuxcare.els1.x86_64.rpm 926f4e5e715a0c341d64d1cae151f48a7fbe8af003e336c4f6570e4006770e6a libnghttp2-devel-1.43.0-5.el9_2.1.tuxcare.els1.i686.rpm 6148475903ac9819ea2731f5198b7a6774da4026111615091508e84a3da7d425 libnghttp2-devel-1.43.0-5.el9_2.1.tuxcare.els1.x86_64.rpm 12b4ce2cb04566703a7c09b9ed543acf8b6ef6f5a85329bb8a30d7c814236f17 nghttp2-1.43.0-5.el9_2.1.tuxcare.els1.x86_64.rpm be49513510638408e7cc2a5568006c4e8bfad14a6ec80151aa565e7c35b627db CLSA-2025:1765382050 TuxCare License Agreement 0 - CVE-2024-45618: fix insufficient or missing checking of return values of functions Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45618: fix insufficient or missing checking of return values of functions

0 tuxcare-almalinux9.2-esu opensc-0.22.0-2.el9_2.tuxcare.els2.i686.rpm a1b0b5d405f6f08cea4bcda9bc4565742885fe6af2e017c9c2fb4f334454e13d opensc-0.22.0-2.el9_2.tuxcare.els2.x86_64.rpm aef204d5b5a1f14bae640d5a7c6bce34e98180dffd2c7b4eb605ab00bacb3c3f CLSA-2025:1765801059 TuxCare License Agreement 0 - CVE-2024-6345: fix code injection vulnerability in package download functions - CVE-2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6345: fix code injection vulnerability in package download functions - CVE-2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write

0 tuxcare-almalinux9.2-esu python3-setuptools-53.0.0-12.el9.tuxcare.els1.noarch.rpm 3edde557c692f13e39e2c541858a3b98616fdd0b8e5f4725e251a570057d323e python3-setuptools-wheel-53.0.0-12.el9.tuxcare.els1.noarch.rpm 78e6fc1c91aef7203319438a5ae0d929144155d8af4cbe35533b44ff27831901 CLSA-2025:1765804754 TuxCare License Agreement 0 - CVE-2025-9230: fix out-of-bounds read of unwrapped key size that may trigger a crash Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-9230: fix out-of-bounds read of unwrapped key size that may trigger a crash

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els4.x86_64.rpm 6a4fd0c744890bc2c9a70f033aa9876876354594aa5889ea370c1c1a960cf412 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els4.i686.rpm bea403471cdf534e3fe5ccd47858f2d0fd7b01eca1110c84c2875a8875d6b72c openssl-devel-3.0.7-20.el9_2.tuxcare.1.els4.x86_64.rpm 105cda01f3962863e4eb28ef488420c94e24bfefca31368d9a03095e3d1ce6bb openssl-libs-3.0.7-20.el9_2.tuxcare.1.els4.i686.rpm d0682bce170096c1b46b1895350ad1adfcebe522db5294f5f32b89f00bea3208 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els4.x86_64.rpm 5ffac387d57dbf12e392722d9c5c8a29d1f2eaf139ec6e9a899fbefeb31351ae openssl-perl-3.0.7-20.el9_2.tuxcare.1.els4.x86_64.rpm 81ef8cf531126051a1d3188c9a10157e307e858dfaa0424d04810d924cda1263 CLSA-2025:1765824979 TuxCare License Agreement 0 - Rebuild with golang >= 1.22.9-1.el9_2.tuxcare.els2 to address CVE-2025-47906 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild with golang >= 1.22.9-1.el9_2.tuxcare.els2 to address CVE-2025-47906

0 tuxcare-almalinux9.2-esu go-filesystem-3.2.0-1.el9_2.tuxcare.els1.x86_64.rpm b849ef5ee3941a089e219ff4630699a2b38c9ec15e7ebd8858140de44892b15d go-rpm-macros-3.2.0-1.el9_2.tuxcare.els1.x86_64.rpm 8843ada630de1120c9177218aa628d571652361639dfa16c23b1e1ebe4ed08cf go-rpm-templates-3.2.0-1.el9_2.tuxcare.els1.noarch.rpm a88c1b4e3fc60a5425ddab1c55728d7d29d38a0b71f6ef74bb7747999f4cc567 go-srpm-macros-3.2.0-1.el9_2.tuxcare.els1.noarch.rpm 50ee766ecdac3f10a2e5f4e7571a8b54628a7eb681b74035c03faef206185a96 CLSA-2025:1765902200 TuxCare License Agreement 0 - CVE-2024-45619: fix insufficient certificate and key length validation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45619: fix insufficient certificate and key length validation

0 tuxcare-almalinux9.2-esu opensc-0.22.0-2.el9_2.tuxcare.els3.i686.rpm 98481507363cd9115330eb592e41499c8b0d883a2b2280f116caf1b32e91c7bd opensc-0.22.0-2.el9_2.tuxcare.els3.x86_64.rpm 7f62921df660df83dedba13853ca7db34e54a156c106ed4440b4e9daea502e4f CLSA-2025:1765903038 TuxCare License Agreement 0 - CVE-2025-55752: fix relative path traversal vulnerability by normalizing rewritten URLs before decoding to prevent bypassing security constraints and potential remote code execution via PUT requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-55752: fix relative path traversal vulnerability by normalizing rewritten URLs before decoding to prevent bypassing security constraints and potential remote code execution via PUT requests

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els15.noarch.rpm 2b20009d0d95936779bba9df5660365baa92e4958bc995a5440f7625ccc51ddd tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els15.noarch.rpm b950c84925dc9ffcf9c9058e2b23b71cac1aaa5de6e8858d4c47808ea6212601 tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els15.noarch.rpm 475de73d656893fa654ae5e4ecc55728339d6370a22dbe6f629e3a48c2940d24 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els15.noarch.rpm 50b2c266869090fc9fe02385b12b786735e497aef844d338e309adfc5e45e617 tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els15.noarch.rpm 61e65b7eb07ef3c3a1d25c2787fc4df42b2be631f0780ffccf47b929327c375e tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els15.noarch.rpm 1eaaaa79a19d73323a3bf945bfda1e05bb20eba5aed5b6a084eb62abad15fd8d tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els15.noarch.rpm 4c6450d1054ce7ec6f8bf6ba1c96697c1067d481cdea92a8f672e4cb3db0d1f1 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els15.noarch.rpm 1ee41064f9aadd696edf01feffdabfcaaa3aec97befd70f947e88b7eab181940 CLSA-2025:1765984777 TuxCare License Agreement 0 - CVE-2023-2906: fix for potential crash in cp2179 dissector (packet-cp2179.c) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-2906: fix for potential crash in cp2179 dissector (packet-cp2179.c)

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9.tuxcare.els1.x86_64.rpm 269cf367eae50ba60822a5b61b88dbfcdd28141e3325f274155aaa904a130f17 wireshark-cli-3.4.10-4.el9.tuxcare.els1.i686.rpm a805685662f35678cd3bd72dc039ebd1f57d1a9135d525254c7942d1ea86f266 wireshark-cli-3.4.10-4.el9.tuxcare.els1.x86_64.rpm ae90cc54de96098c716cac8094c15381b410722985305526db6d0842da9495dc wireshark-devel-3.4.10-4.el9.tuxcare.els1.i686.rpm 3599c53ae7d043fce6de52c99c5beafc3868faad08c2be91328c23bb980db43a wireshark-devel-3.4.10-4.el9.tuxcare.els1.x86_64.rpm c65e818143592e3870614b179a62eaedd28dc1d3ba8d05a2028ed27496ca3c12 CLSA-2025:1765985189 TuxCare License Agreement 0 - rebuild with newer golang to fix CVE-2025-58183 (fix unbounded memory consumption when reading GNU pax 1.0 sparse files) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang to fix CVE-2025-58183 (fix unbounded memory consumption when reading GNU pax 1.0 sparse files)

0 tuxcare-almalinux9.2-esu delve-1.9.1-1.el9.tuxcare.els2.x86_64.rpm 9d1f216260105ebc224ccfe28d563d17cebd94d4a067f817ab67c1bc836abca9 CLSA-2025:1765986482 TuxCare License Agreement 0 - CVE-2025-13502: fix out of bounds read and integer underflow by adding bounds checking and validating message delimiters - CVE-2025-43430: fix bbq jit compiler writing to wrong stack slots in wasm try/catch blocks - CVE-2025-43421: fix memory handling issues that cause unexpected process crashes by disabling array allocation sinking in JS JIT - CVE-2025-66287: fix process crash from malicious png/apng files with excessive data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13502: fix out of bounds read and integer underflow by adding bounds checking and validating message delimiters - CVE-2025-43430: fix bbq jit compiler writing to wrong stack slots in wasm try/catch blocks - CVE-2025-43421: fix memory handling issues that cause unexpected process crashes by disabling array allocation sinking in JS JIT - CVE-2025-66287: fix process crash from malicious png/apng files with excessive data

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.50.1-1.el9.tuxcare.els4.x86_64.rpm fc1b4d6ae54a16512f1eaf4ddcaf54e7df171952439e81d600f826520c904ffa webkit2gtk3-devel-2.50.1-1.el9.tuxcare.els4.x86_64.rpm a6b0ac3fe22a99419c8a640503c73d6349969607c08e1de45e5c708a81a267a2 webkit2gtk3-jsc-2.50.1-1.el9.tuxcare.els4.x86_64.rpm fdbab60112ccf921d14e5ca2fbbc043fa3ce0ccece276abd7cdaaed815e1661f webkit2gtk3-jsc-devel-2.50.1-1.el9.tuxcare.els4.x86_64.rpm bace2c5bc3340c01152d58d975c7c08ce624735355dadbc030ad6dafdf9b342e CLSA-2025:1765987793 TuxCare License Agreement 0 - rebuild with newer golang to fix CVE-2025-58183 (fix unbounded memory consumption when reading GNU pax 1.0 sparse files) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang to fix CVE-2025-58183 (fix unbounded memory consumption when reading GNU pax 1.0 sparse files)

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els11.x86_64.rpm de96c9f3bd170915524b0818fefc286a3734651d7bfc2e29892b23f228ccb37c CLSA-2025:1765988423 TuxCare License Agreement 0 - CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability

0 tuxcare-almalinux9.2-esu gegl04-0.4.34-2.el9.tuxcare.els1.i686.rpm 661efef0aa63e29d6e3b41ccdab9aab8f0ed450f26adbf1983ef85ecdd822026 gegl04-0.4.34-2.el9.tuxcare.els1.x86_64.rpm b0451df361c6ed308ada61c30616e563cec4dd1da5db7ce99a00c66812fb942b gegl04-devel-0.4.34-2.el9.tuxcare.els1.i686.rpm e78cf20470254977c2e742f03235251b86c6257311edc70f4edcc7d93e9a93b2 gegl04-devel-0.4.34-2.el9.tuxcare.els1.x86_64.rpm fe3452f8aa3ec00a3314cdfacb04c7f7f357c426946e7a9c56fc9eea04fc7cd1 gegl04-devel-docs-0.4.34-2.el9.tuxcare.els1.x86_64.rpm 088d6ce60e65c9f20862d33b078b9316bb17eae3c50fb9247e846de98da625e1 gegl04-tools-0.4.34-2.el9.tuxcare.els1.x86_64.rpm 94dc3cde9a1fa654019f39ac25585448b2f147d484284ca615d9eec288d21f61 CLSA-2025:1766050574 TuxCare License Agreement 0 - CVE-2025-52881: fix security vulnerability in /proc file handle operations - Partial backport: add pathrs-lite library from runc v1.2.8 vendor directory Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-52881: fix security vulnerability in /proc file handle operations - Partial backport: add pathrs-lite library from runc v1.2.8 vendor directory

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els8.x86_64.rpm 58613f556058a09c0507146a0d68bef3b1344b80671fc0ed5b926f4fff2b277c podman-docker-4.4.1-13.el9_2.tuxcare.els8.noarch.rpm d151f87fa7bbe8c1b9365514df6460c0b9740a606d101999ff97e998d284e2e6 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els8.x86_64.rpm 832d1f4708f8c163ce7df934b5521848d3d4727118d97a3b2d7733c4b366e41d podman-plugins-4.4.1-13.el9_2.tuxcare.els8.x86_64.rpm 18e2c6678f6006724e45b58001132a68fbd93a7436239ed68cebca70e086519c podman-remote-4.4.1-13.el9_2.tuxcare.els8.x86_64.rpm 4e2950776f5543cc3762f3cfbc8e0b8ff4b3ec3581a2f92f33fe9b2fe5c55f2f podman-tests-4.4.1-13.el9_2.tuxcare.els8.x86_64.rpm bc6ec547c9e1431883a0a1cfc6967294c4de00ae3a3e6a7441a5dff282c2daab CLSA-2025:1766079368 TuxCare License Agreement 0 - CVE-2025-4598: fixed race condition in systemd-coredump that exposes privileged core dump data Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4598: fixed race condition in systemd-coredump that exposes privileged core dump data

0 tuxcare-almalinux9.2-esu systemd-252-14.el9_2.3.tuxcare.els2.i686.rpm dee60f1204dbfe889c0d90de516271f328ad3a54ea78ae03f62c7fb83c317f8a systemd-252-14.el9_2.3.tuxcare.els2.x86_64.rpm dd77127ecab1480690861d9ab2df4132393c4384ffb53935d5b397033a168079 systemd-boot-unsigned-252-14.el9_2.3.tuxcare.els2.x86_64.rpm 17a8883e0456f375af878fa0faf20f4dc351a7335441acb5d777db8bef8bb61a systemd-container-252-14.el9_2.3.tuxcare.els2.i686.rpm 6fd24bf0d2a1b39e37c4c97a273cdbfecb73d0f48814fe7ad49a80fd2db788db systemd-container-252-14.el9_2.3.tuxcare.els2.x86_64.rpm 40e45ce8af2e99f9c4a958414277fd44b9a81f1c13606445ec72bc5e11ff14f8 systemd-devel-252-14.el9_2.3.tuxcare.els2.i686.rpm 14ceb05cb15bec3dd564dc6ede67d61b0eb4f7a3de6baae029c7cf3847582992 systemd-devel-252-14.el9_2.3.tuxcare.els2.x86_64.rpm 2ac25065de33e7a88c19d7d944f78cb4fa5e9d83624824ed1437ca12fb859f66 systemd-journal-remote-252-14.el9_2.3.tuxcare.els2.x86_64.rpm 357cb4d1aa0d2779fc36475fe7a344619d429b62eba699393b9e1cc1e0698834 systemd-libs-252-14.el9_2.3.tuxcare.els2.i686.rpm 2b686dc9f402144d3c3b301b3154b2d2c41c7cfa14a5cdc145d69cb65782d1ae systemd-libs-252-14.el9_2.3.tuxcare.els2.x86_64.rpm dcf649eb3633f41b82f077c8e595faee9f7ad4ba22d8db39cafc93ac2a5dee06 systemd-oomd-252-14.el9_2.3.tuxcare.els2.x86_64.rpm fa081a6c1c8a8b2fa3d40a0c27474359b598da0140309a52e686f409920027bd systemd-pam-252-14.el9_2.3.tuxcare.els2.x86_64.rpm 89488387f4fafe880728acd00605c944d0170d94a1432b7d8d15b5b4df45f3dc systemd-resolved-252-14.el9_2.3.tuxcare.els2.x86_64.rpm 95142b990e8fdd34401c98c6360d7156e2fb1aab75edf5f7f51f49c0d12b5475 systemd-rpm-macros-252-14.el9_2.3.tuxcare.els2.noarch.rpm 518889e39ea6e7ca7985ba17693ecdcc8a93c02a2c27d17a593ddfd6ae6f75be systemd-standalone-sysusers-252-14.el9_2.3.tuxcare.els2.x86_64.rpm 547c6628e98ec7d278f235b019391dfb463e7bfc810f177fe40578f11621ed53 systemd-standalone-tmpfiles-252-14.el9_2.3.tuxcare.els2.x86_64.rpm 2eb7fa3b966f91e0d7b0e6ab70a42d3b2e01a7d0a9d79f65adb9fa9d8b6d5660 systemd-udev-252-14.el9_2.3.tuxcare.els2.x86_64.rpm a4749c58255259767b822d8897df4690ecf19b17c4d85706ae20fb5049c207a9 CLSA-2025:1766409829 TuxCare License Agreement 0 - Update to MySQL 8.0.44 CVE-2025-53069 CVE-2025-53042 CVE-2025-53053 CVE-2025-53062 CVE-2025-53044 CVE-2025-53040 CVE-2025-53054 CVE-2025-53045 - MySQL 8.0.43 CVE-2025-50078 CVE-2025-50082 CVE-2025-50083 CVE-2025-50085 CVE-2025-50077 CVE-2025-50088 CVE-2025-50092 CVE-2025-50099 CVE-2025-50086 CVE-2025-50093 CVE-2025-50094 CVE-2025-50079 CVE-2025-50084 CVE-2025-50087 CVE-2025-50091 CVE-2025-50101 CVE-2025-50102 CVE-2025-53023 CVE-2025-50097 CVE-2025-50080 CVE-2025-50096 CVE-2025-5399 CVE-2025-50104 CVE-2025-50098 CVE-2025-50100 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to MySQL 8.0.44 CVE-2025-53069 CVE-2025-53042 CVE-2025-53053 CVE-2025-53062 CVE-2025-53044 CVE-2025-53040 CVE-2025-53054 CVE-2025-53045 - MySQL 8.0.43 CVE-2025-50078 CVE-2025-50082 CVE-2025-50083 CVE-2025-50085 CVE-2025-50077 CVE-2025-50088 CVE-2025-50092 CVE-2025-50099 CVE-2025-50086 CVE-2025-50093 CVE-2025-50094 CVE-2025-50079 CVE-2025-50084 CVE-2025-50087 CVE-2025-50091 CVE-2025-50101 CVE-2025-50102 CVE-2025-53023 CVE-2025-50097 CVE-2025-50080 CVE-2025-50096 CVE-2025-5399 CVE-2025-50104 CVE-2025-50098 CVE-2025-50100

0 tuxcare-almalinux9.2-esu mysql-8.0.44-1.el9_2.tuxcare.els1.x86_64.rpm 65e211dccdc5c50c50a0c6b6dc312e838e223b1d5eb5ae2ddd95096248ee3937 mysql-common-8.0.44-1.el9_2.tuxcare.els1.x86_64.rpm a8614a8d506dab1b5cc428fe9c6a5e0287707ae5fb43200246d13b0d7cf26c32 mysql-devel-8.0.44-1.el9_2.tuxcare.els1.x86_64.rpm ededa94f75bbb7abf25890f80f772278376200f82fea84fe8dd96a38c355cd08 mysql-errmsg-8.0.44-1.el9_2.tuxcare.els1.x86_64.rpm 6daaabbd1b4903a1a2654affb237c0bd90842f2896d34406252cbf2e4690f258 mysql-libs-8.0.44-1.el9_2.tuxcare.els1.x86_64.rpm a79e8a59a5b031a28951c7fcdecc2857f8d93681249b0a15bee73b29252da91e mysql-server-8.0.44-1.el9_2.tuxcare.els1.x86_64.rpm 481c33e701d327c8c889eb6ab217441fd06d8d313354e9f13291a56c07df9901 mysql-test-8.0.44-1.el9_2.tuxcare.els1.x86_64.rpm e72ca140bb09822948dad465ac293038834d14c800c666726bde8ace68a3ee88 CLSA-2025:1766499581 TuxCare License Agreement 0 - CVE-2025-54080: fix insufficient bounds checking Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-54080: fix insufficient bounds checking

0 tuxcare-almalinux9.2-esu exiv2-0.27.5-2.el9.tuxcare.els2.x86_64.rpm 985b19006aa7eeacafb16f2d381a108181288c2f4e7113d771deb83a7aeab587 exiv2-devel-0.27.5-2.el9.tuxcare.els2.i686.rpm b0755d8f6db0de980076aa662efd33ff1dd15db71ad24d09bf4b198140e53636 exiv2-devel-0.27.5-2.el9.tuxcare.els2.x86_64.rpm 2a98184f4cf94ee5ee4e824c3e1e05be637d604c9fd8ec6fc82e32b16e2c8e68 exiv2-doc-0.27.5-2.el9.tuxcare.els2.noarch.rpm 7b1ea3f42cae7ac8314c98b93deac8a9a0c1bc40ea71c1e748498df85bb03c79 exiv2-libs-0.27.5-2.el9.tuxcare.els2.i686.rpm ddc685ed0fc27b3ac398cdf56340dd26117cb80efb3df95e786438a30e33f507 exiv2-libs-0.27.5-2.el9.tuxcare.els2.x86_64.rpm ed7ec84befcd8b0adfade15cf6a26553dea19c21fbf513aeaf833d8596a9b234 CLSA-2025:1766501828 TuxCare License Agreement 0 - CVE-2025-13499: fix crash in Kafka dissector Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13499: fix crash in Kafka dissector

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9.tuxcare.els2.x86_64.rpm 57e5bf9de8fe05f43ca89f733c73541059ec96844adefb891e72b5ce30bec03f wireshark-cli-3.4.10-4.el9.tuxcare.els2.i686.rpm 00d61e5e984ba613a303d8fac3874c5195d46bf02cae4afc765ffd8db125f49e wireshark-cli-3.4.10-4.el9.tuxcare.els2.x86_64.rpm 28aa4440a3e1b2d46f3dca9ea2387efde1016f10c7e5bf065cc5b754b8667283 wireshark-devel-3.4.10-4.el9.tuxcare.els2.i686.rpm 3dbb6f86cd4283ecce3d7df657e1d20ac2a8b45d535a335edca553571cc0c341 wireshark-devel-3.4.10-4.el9.tuxcare.els2.x86_64.rpm 1354fcb7652d1db89b81791e6660486657bf1e3689cd0533260ceeb956fa080f CLSA-2025:1766502382 TuxCare License Agreement 0 - CVE-2025-13609: enforce TPM identity immutability for agent UUIDs in registrar, add shared memory for multiprocess synchronization Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13609: enforce TPM identity immutability for agent UUIDs in registrar, add shared memory for multiprocess synchronization

0 tuxcare-almalinux9.2-esu keylime-6.5.2-6.el9_2.alma.1.tuxcare.els1.x86_64.rpm 579f0dfc1931722dafda59c6887e9dd2e811894e90d6c030022298b3ee54f758 keylime-base-6.5.2-6.el9_2.alma.1.tuxcare.els1.x86_64.rpm acbb90d1b1a056b50672e1752791ba2921f49b03358c1479331f308b2f41fea4 keylime-registrar-6.5.2-6.el9_2.alma.1.tuxcare.els1.x86_64.rpm 96f493f9299c1cebebc5d57512253091af635f7ca984ea02b0be38ce2a89f569 keylime-selinux-6.5.2-6.el9_2.alma.1.tuxcare.els1.noarch.rpm 4804394a5cf7faf1792ef2af00c83606415997b1edb7fccac2c40525d5929026 keylime-tenant-6.5.2-6.el9_2.alma.1.tuxcare.els1.x86_64.rpm ae8026ed228bc7e9f91626e0a49448231f0e72b1eeef3313b64491638ce29710 keylime-verifier-6.5.2-6.el9_2.alma.1.tuxcare.els1.x86_64.rpm b560fb698858055ae49ef7f8a2923e68b2a4f8a73a70e1ac7b0db964a0917a06 python3-keylime-6.5.2-6.el9_2.alma.1.tuxcare.els1.x86_64.rpm 2741601fd339a954702dc64917e5998a764d543667497a411d40bfecb48918b5 CLSA-2025:1766502928 TuxCare License Agreement 0 - CVE-2025-58183: fix unbounded memory consumption when reading GNU pax 1.0 sparse files by rebuilding with golang 1.22.5 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58183: fix unbounded memory consumption when reading GNU pax 1.0 sparse files by rebuilding with golang 1.22.5

0 tuxcare-almalinux9.2-esu skopeo-1.11.2-0.1.el9.tuxcare.els2.x86_64.rpm 14d8d6ff573d5d7c109ade2095795b54b9ab0dd15ffeefdaa8d737a826f2ca30 skopeo-tests-1.11.2-0.1.el9.tuxcare.els2.x86_64.rpm f075fe0bd6f6bdaebde22b11dbc9d224a4f15dbb09fdfc6215a221cddc7ad147 CLSA-2025:1766597554 TuxCare License Agreement 0 - CVE-2025-53905: fix Vim path traversal issue in tar.vim Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-53905: fix Vim path traversal issue in tar.vim

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-20.el9_1.tuxcare.els12.x86_64.rpm 645ae59a3d8d23b4729bba189eb03798371e4902194f29b885c04d5400d08173 vim-common-8.2.2637-20.el9_1.tuxcare.els12.x86_64.rpm 074e0b97def3e95f94d9734fa57fd28da6515f397b8abddf96a17433a22f162f vim-enhanced-8.2.2637-20.el9_1.tuxcare.els12.x86_64.rpm c8e68db1c75b33f5f37988998cdd04754810d4447828e0d751a1898f799d9d61 vim-filesystem-8.2.2637-20.el9_1.tuxcare.els12.noarch.rpm 480a05552c7880213b0825abf57fc89d82c3b07a51c2d37fc6b97b21890435d2 vim-minimal-8.2.2637-20.el9_1.tuxcare.els12.x86_64.rpm b8e56d9311c06c5aeff64d0501b3fd15c291faa6ca1aba612a25f2c44a502be9 CLSA-2025:1766598218 TuxCare License Agreement 0 - CVE-2024-45616: fix insufficient control of APDU buffer and its length - CVE-2024-45615: initialize uninitialized variables - CVE-2024-45617: fix insufficient or missing checking of return values - CVE-2024-45620: fix incorrect handling length of buffers or files in pkcs15init Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45616: fix insufficient control of APDU buffer and its length - CVE-2024-45615: initialize uninitialized variables - CVE-2024-45617: fix insufficient or missing checking of return values - CVE-2024-45620: fix incorrect handling length of buffers or files in pkcs15init

0 tuxcare-almalinux9.2-esu opensc-0.22.0-2.el9_2.tuxcare.els4.i686.rpm f78daaae82489eb51a06257accbb7dab9cc2fb8427efb2d4adf3f0cead41bc52 opensc-0.22.0-2.el9_2.tuxcare.els4.x86_64.rpm afe0dfe5e4eb35f70144b9ddd7ae1fbafeeb57b537c197bca4019cbdf89816e1 CLSA-2025:1766596893 TuxCare License Agreement 0 - CVE-2025-27144: fix vulnerability in go-jose dependency leading to memory exhaustion and a Denial of Service Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27144: fix vulnerability in go-jose dependency leading to memory exhaustion and a Denial of Service

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els9.x86_64.rpm 562f393f53bc3289bb0ead7683ccbca4a0db729280224d1076090ceb7e341087 podman-docker-4.4.1-13.el9_2.tuxcare.els9.noarch.rpm 1182e560c3834f1703c7f0765bc778451c23f5a19b280b09784a3f1574e98cb8 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els9.x86_64.rpm 5b555a054508b75958d32dcfaffd0e813c99fbe40ae93c6bb53a4b0598710982 podman-plugins-4.4.1-13.el9_2.tuxcare.els9.x86_64.rpm 264f73a279f92b5462d9cfe8a3032b7b7dd1a50d7f1efda543f4bc53f5118487 podman-remote-4.4.1-13.el9_2.tuxcare.els9.x86_64.rpm 134e139c1d789e9f6a58c2e8d0c48e6d8979b0ddcc03034cc35631f0502810db podman-tests-4.4.1-13.el9_2.tuxcare.els9.x86_64.rpm 15c28a0f227f6c52a37d47009dc2e617dc018bb3bd5bbb3329d473a7211742e9 CLSA-2025:1766568231 TuxCare License Agreement 0 - CVE-2025-43392: fix cross-origin image data leak by correctly tainting OffscreenCanvas when transferring a cross-origin ImageBitmap Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-43392: fix cross-origin image data leak by correctly tainting OffscreenCanvas when transferring a cross-origin ImageBitmap

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.50.1-1.el9.tuxcare.els5.x86_64.rpm 62c61ff4add0895ec7110606783a7e7fd1567330f1a6bafc2b4aef4c4bf86469 webkit2gtk3-devel-2.50.1-1.el9.tuxcare.els5.x86_64.rpm 7aed1c4b490a9afa57fc8a607d2e9df3947dcaeed6704cc87b9d9e7bb733a6a5 webkit2gtk3-jsc-2.50.1-1.el9.tuxcare.els5.x86_64.rpm 0b3f2bf17c7dbc4c840bbc6ab75e15bd475bebf5d57414f46f9277119ef8a020 webkit2gtk3-jsc-devel-2.50.1-1.el9.tuxcare.els5.x86_64.rpm 8ccde403dcf15183f95c01aa9dbd9186851ccd68e277e74514cc110837d2d472 CLSA-2025:1767000167 TuxCare License Agreement 0 - CVE-2025-1735: add error checks to prevent crashes and improperly escaped data when PostgreSQL rejects invalid strings Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1735: add error checks to prevent crashes and improperly escaped data when PostgreSQL rejects invalid strings

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm a80fb0bd46fe22c6ae88fffd8c23b5789239dce06e56592a466dcb6604c2c7fc php-bcmath-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 4301572bf3301f10a9ded5729ccac400d2c8d8945c4670264d75db6091613ceb php-cli-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 00bfda50e034e440c6cfa97fe74759a157ee8b3e0f7f7509f5de6361284f254a php-common-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm f41670a337b9aa5dbee00a0ff70fc514dff1da0b2d8b65fb14f413c72bd92b53 php-dba-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm e6fc17ebbb0fcfd6828107fb83f1b50fb94cf86939887d36c1fa2867c283df03 php-dbg-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 384ce12ddde5112451d455803d37ed822ed6571f65a66197d2af6f0316a456b0 php-devel-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 161a5733f754a71467a3509be17284e5c2ecc7929e57874de48d53b407c687b6 php-embedded-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 44a8c10e98b682440ea2ecdb4804ffea6c26e56cca5720bff10ba8dc3b430a08 php-enchant-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm d7426fbd45f9885f79afdd08483a41d6110459c3f132e63dc1537c2ae236e069 php-ffi-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm f4691b5960e163f70e0f23e7fc72307270aa76ad3de523df52e6e5054405d4ef php-fpm-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 0be8777be74fa4ece214949648c01cbb2533f303ad6823a8d2cbc09054bc9164 php-gd-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 3bf5f7599383d14a4a1e751aeeb697b27fa799b5c6cb7d002461aaef1470e59d php-gmp-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm ef9cdec131244c510615135ed7f77d67fa380f077daf2653ec33c5a37e0bd777 php-intl-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 147297dac849799182f5cbdfed4d341bd0e1b5f316c2ab8ad108774b6c6cda8d php-ldap-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 281951a8c468b280e4d294af4bd7b2e989270113155ad2084ff8f1b8210a8b40 php-mbstring-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 20c8d5dada0744f059f42318e856738afbc42188dc4e0a8f7b86222a237dca3e php-mysqlnd-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 01e52288f2ffb9fc7eb07b002f3bccb2c231a5ad2634c8cb3d396cf63d7aff75 php-odbc-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 2bf8778e2c9448a88d6e262a236989bd63dfb8d24d9e5c200f4bd2712862a3ce php-opcache-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 8721b4846c19bef89006576f05b7cd9dfd08261b656d0baef53ea4ab3d28d67a php-pdo-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm fa42449b9d47c09888868ad424ab0735e76b27110630d7e873aac5b01482c154 php-pgsql-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 71a7fa42a68f71de29df9bc3ec0fe62cca068effa43986e09d4bd99706f323b5 php-process-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm ad958546ed73afa17ecbe143cae5c9e7830aeb01ba7d821cd956d7a5df58948e php-snmp-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm cad446c5be33ecad67aa81a534265df1830a481f6232cb69308f5dfc94d38e7b php-soap-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 85f2e0e91ac78febee5b75d2899b2ff6ce5596fcfa7e8ac43c755a5e2d7e946b php-xml-8.0.30-1.el9_2.tuxcare.els9.x86_64.rpm 9ce650de5e8f93aaff27205ad2d2d475d21ea0a755e3daefc613ba8d7cb5cd12 CLSA-2025:1767001153 TuxCare License Agreement 0 - CVE-2025-8941: fix additiinally potential privilege escalationvia multiple symlink attacks and race conditions Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8941: fix additiinally potential privilege escalationvia multiple symlink attacks and race conditions

0 tuxcare-almalinux9.2-esu pam-1.5.1-14.el9.tuxcare.els4.i686.rpm fcde1f4323f67a906f2e0170a3d886436c03f8ba4fddef5bfc5ba69afc23f1ff pam-1.5.1-14.el9.tuxcare.els4.x86_64.rpm 4545603982228d35dee8112a22659acfca0ac1fd6d62e23b4df0b7a6ec48485b pam-devel-1.5.1-14.el9.tuxcare.els4.i686.rpm 9fdcd6cd206e11854257a4dffdc457ae616a8d75ce39c82b772222de4484f615 pam-devel-1.5.1-14.el9.tuxcare.els4.x86_64.rpm a7679a3250503b95ae6897a0fee8028166588427958b7f53727137a2ef83daf9 pam-docs-1.5.1-14.el9.tuxcare.els4.x86_64.rpm 7cfd87af3398034fa3ec77e58637a0a97f207fc97c12f0272f5cb47246d3e73f CLSA-2025:1767002772 TuxCare License Agreement 0 - CVE-2025-11083: fix crash in linker for corrupt ELF input Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11083: fix crash in linker for corrupt ELF input

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els3.i686.rpm ac54f20418325c5b72a583ef150c424618f5a2040f72fca31de405001aa92e2a binutils-2.35.2-37.el9.tuxcare.els3.x86_64.rpm 239281de159517ea92bbfd7aac48d99ccb28f944a318f6c3856463a3afd4bd02 binutils-devel-2.35.2-37.el9.tuxcare.els3.i686.rpm 0d7649590dfc52e76cbf959f3472870b49efe2d6804d568c752a083da0aef339 binutils-devel-2.35.2-37.el9.tuxcare.els3.x86_64.rpm fc87c551280ec48c011ef3f8337f52ce0ded4619644ba8a4264147353ab01b92 binutils-gold-2.35.2-37.el9.tuxcare.els3.x86_64.rpm 06e9abaff7891930ff65fd87db58b92e83ff31bebb3b1a4b1908fd13c21ec57f cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els3.x86_64.rpm ef25d55cbd81db237ac8add1dcef6815b1f010ca29e506191a36a047ae2daf38 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els3.x86_64.rpm a6f7cddb808daa805c3b07c2b6cb498876ae38a7a3fa77313dd1e78b603dc6b3 cross-binutils-s390x-2.35.2-37.el9.tuxcare.els3.x86_64.rpm 972c1209be5b46ace59055f4fab334078177718f561ab82e9de3c5c7ac361fbb CLSA-2025:1767004508 TuxCare License Agreement 0 - CVE-2025-58098: prevent command injection in mod_cgid via shell-escaped SSI query strings Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58098: prevent command injection in mod_cgid via shell-escaped SSI query strings

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm 3b9586dd079381c81995fafb6f2b0d03a24baa5365f59053cb83c132f3da2859 httpd-core-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm d0c77fd13279e90013e29acfbb1d7c9186f95a74c5c34830a4cad4eca8eec4eb httpd-devel-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm ce69ab3e051e4474ccedb8263df763940eedc98b1ca30e3f7b0159f5ab55e566 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els9.noarch.rpm f7b1527e0d2b4b60e85cc74fe583d1faded2d2bc53da6281c018c9862584d2f5 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els9.noarch.rpm 8a5ac5bbef2a95ca3e080d7c003e88a153a1468bbc15cd6406c433656119076c httpd-tools-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm ec637c838b64b0a6a8dfd32bf077c6bbe6bcd63bfbd654d52ac3f71dcd6db0f1 mod_ldap-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm e4f30d9ecd3ae36812ba47f8a610091a310c5db937ede6af3927fc105ec10f01 mod_lua-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm 8ea8c2005ecce21ef83873e0b5684624274e29acd6745d1eaeb95760cec5e2b5 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm 23ac4fc00920885fc2ba0b08bb4657db8a4b594717b8d70c0d41d8fac6ecb222 mod_session-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm 74a96458ca48d669ed0221b4d5b818befba9be7707acc5ed4121e55aaffc2694 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els9.x86_64.rpm ecd3f19824efde3aaa7b0988a74c81f72f4947c7bef56cc4323a12297a0f4fbb CLSA-2025:1767025227 TuxCare License Agreement 0 - CVE-2025-10921: fix vulnerability by updating gegl04 dependency requirement to gegl04 >= 0.4.34-2.el9.tuxcare.els1 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-10921: fix vulnerability by updating gegl04 dependency requirement to gegl04 >= 0.4.34-2.el9.tuxcare.els1

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els2.x86_64.rpm 40d38ed7d2bef5898efc6d98f92669b4cbd9832ae44e977f51ba7dfd453e288f gimp-devel-2.99.8-4.el9.2.tuxcare.els2.x86_64.rpm f4d6c75dae7b1d55a45876f55070d6a61a1909ac552f4d2f22962da6ad652861 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els2.x86_64.rpm 4d2ab586f3bfd90066cc89779fbe4c61776d6f7d55d4b4973c9ce906ea3c2e6a gimp-libs-2.99.8-4.el9.2.tuxcare.els2.i686.rpm e83d85c4ae2308ef743da79887e2bd13559fb659bcd7b08045e1d1a5ee3dee63 gimp-libs-2.99.8-4.el9.2.tuxcare.els2.x86_64.rpm fca6b82b374ec9659b673cf6cc6381eeabda86680914d9c08eac9ef0f333f62c CLSA-2025:1767026442 TuxCare License Agreement 0 - CVE-2025-55753: fix exponential error retry back-off to prevent delay overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-55753: fix exponential error retry back-off to prevent delay overflow

0 tuxcare-almalinux9.2-esu mod_md-2.4.19-1.el9.tuxcare.els1.x86_64.rpm fafe6cef688e73ac95911e13a9e1f958a5e9f42c091a16a21d478bf2f75fd3c9 CLSA-2026:1767864313 TuxCare License Agreement 0 - mm: hugetlb: fix UAF in hugetlb_handle_userfault {CVE-2022-50630} - drm/amdkfd: fix potential kgd_mem UAFs {CVE-2023-53816} - net/mlx5e: Fix deadlock in tc route query code {CVE-2023-53591} - PCI: Fix pci_device_is_present() for VFs by checking PF {CVE-2022-50636} - wifi: ath11k: fix monitor mode bringup crash {CVE-2022-50627} - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321} - scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075} - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va {CVE-2023-53819} - dmaengine: ptdma: check for null desc before calling pt_cmd_callback {CVE-2023-53755} - wifi: mt7601u: fix an integer underflow {CVE-2023-53679} - Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087} - tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176} - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499} - net: openvswitch: reject negative ifindex {CVE-2023-53843} - drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833} - iommu/amd: Improve page fault error reporting {CVE-2023-53789} - media: v4l2-mem2mem: add lock to protect parameter num_rdy {CVE-2023-53519} - Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386} - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} - ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673} - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254} - rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218} - ip6_vti: fix slab-use-after-free in decode_session6 {CVE-2023-53821} - vxlan: Fix nexthop hash size {CVE-2023-53192} - wifi: mac80211: check S1G action frame size {CVE-2023-53257} - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279} - dm flakey: fix a crash with invalid table line {CVE-2023-53786} - md/raid10: fix null-ptr-deref in raid10_sync_request {CVE-2023-53832} - md: don't dereference mddev after export_rdev() {CVE-2023-53665} - md: fix 'delete_mutex' deadlock - md: fix duplicate filename for rdev {CVE-2023-53665} - kernfs: Fix UAF in polling when open file is released {CVE-2025-39881} - mptcp: pm: avoid possible UaF when selecting endp {CVE-2024-44974} - mptcp: fix UaF in listener shutdown {CVE-2023-53088} - Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition - Bluetooth: MGMT: Fix possible deadlocks {CVE-2024-53207} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186} - e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898} - wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216} - NFS: Fix a race when updating an existing write {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests - drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- mm: hugetlb: fix UAF in hugetlb_handle_userfault {CVE-2022-50630} - drm/amdkfd: fix potential kgd_mem UAFs {CVE-2023-53816} - net/mlx5e: Fix deadlock in tc route query code {CVE-2023-53591} - PCI: Fix pci_device_is_present() for VFs by checking PF {CVE-2022-50636} - wifi: ath11k: fix monitor mode bringup crash {CVE-2022-50627} - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321} - scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075} - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va {CVE-2023-53819} - dmaengine: ptdma: check for null desc before calling pt_cmd_callback {CVE-2023-53755} - wifi: mt7601u: fix an integer underflow {CVE-2023-53679} - Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087} - tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176} - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499} - net: openvswitch: reject negative ifindex {CVE-2023-53843} - drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833} - iommu/amd: Improve page fault error reporting {CVE-2023-53789} - media: v4l2-mem2mem: add lock to protect parameter num_rdy {CVE-2023-53519} - Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386} - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} - ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673} - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254} - rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218} - ip6_vti: fix slab-use-after-free in decode_session6 {CVE-2023-53821} - vxlan: Fix nexthop hash size {CVE-2023-53192} - wifi: mac80211: check S1G action frame size {CVE-2023-53257} - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279} - dm flakey: fix a crash with invalid table line {CVE-2023-53786} - md/raid10: fix null-ptr-deref in raid10_sync_request {CVE-2023-53832} - md: don't dereference mddev after export_rdev() {CVE-2023-53665} - md: fix 'delete_mutex' deadlock - md: fix duplicate filename for rdev {CVE-2023-53665} - kernfs: Fix UAF in polling when open file is released {CVE-2025-39881} - mptcp: pm: avoid possible UaF when selecting endp {CVE-2024-44974} - mptcp: fix UaF in listener shutdown {CVE-2023-53088} - Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition - Bluetooth: MGMT: Fix possible deadlocks {CVE-2024-53207} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186} - e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898} - wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216} - NFS: Fix a race when updating an existing write {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests - drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm eca0da3adec44889d3aed980922255ca1e2d26d9056828f8de60b4e3b012dcff kernel-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm d2219fc553044e16107cf3de8a6a1d60e3d85953c61da7be910d256daaea3fd1 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els26.noarch.rpm 181abeb9a1285202a61e00a5902092cb282afc173cfad02c996a01d25700d313 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 1d58baffd18da11c474835e4ac0c6ed924a55bf149cca824975689f0914f146e kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 5817510bced4d3e3aba6c3754b09a418b4583c84802f7090789551de95f6b206 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 99b9d602ded72d0860ebe7a51ff0525e95d4d40ccd40fe638536ed27ebbcd3c1 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm f4e69533abaf9cf9195041a2a213dda8da1546c284d7733a1484727dfae32a85 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 39f1e7ed86ec7ce67a26356aa388a5168eedea42d2275266b49b78f8ab9a5f67 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 48da73d9ab9f60b0facb71546e83df3b0a1b132986895c34e60153b44c245dd9 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm fe10ff507abde718f6f7ddde44d516e9ebf5394bf80124d16cd79d7302431814 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 6691b560c46c900b1dd1df1b0caf5016a3976fe03e0406a10591256f6cb8c8fa kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm d9742998541a9fd58ebd74275d7ddb8ff2b210457d707b70d845bac0b7c00bdc kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 4c42a26ce0724b87f320a3f0054839ba2d63d89f064a50959dbf09c181c67807 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm c8c49d515c6c60a46b85b680953b8e681ba7154ae8751dfadbb080a426e295aa kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm bee647cf96bb5edaead8b0c346030282b87f3bfc35debea54652744f85fcf88d kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 1e1b2bccaf58449030e3d2138d28e1465b529e711adf56f22c72ef7fde25712e kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm d99a8a6792bc4d9ca3073cd9a58008493f585b802c5426307ba2a34080e58ea0 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els26.noarch.rpm d77b38955601f83f97aad287af2d6fccac5d30e3860d6b154e7a3288a44507f7 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm c2d90034dd27235a8871fc0fcda828cbbc7b90f20989844c9e5db7cc86646260 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm bfaddb46e2b51fe418c78465583eec3f904e36fbdee9cd2c701024cbe5d3856c kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm d41923165b1c8f34f4e919bd89092471eb92fa2adc933036cc937d22aa27d3db kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 0d1296b68fe04205d87f35118f6445e0a1226c68ca7962cb9ac195a68f79b8b1 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 29b3c92f8898d7230b4d6b7ddd485d3a2154c472a363cc01bdf9edab05124c82 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm c3d7c5c7d4f71fe53c7f1e7dbf7b796ecacbb71e81fbe59324f750b7568d0624 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm eda97e20c5717126d1c896d5d655e05d31ad19691f06b2cc3f9a507b19b3204d kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 6b1100ba27dd1851e526fa7984e2fc477f9e385b4beba37e58f2b17311d778b2 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm cccf2345de4f19e500fffaf862bf5c7ab891b3be6d6c2dc7a10f4929b6d59743 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm ec6d88ad593b1f36eb9f211ae9eb8640e6a346fe586929e08712a6a1b0e83850 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 11bfadeb373a1132c71ff316eb38b5682fcbf533b1d55910f5e7c1a86ae8b906 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm ad8809faba531eb1a96ba58bb73a3e411d31602d8538b28db576d00801b918fb libbpf-1.0.0-2.el9_2.tuxcare.7.els26.i686.rpm bd9b222a28bbdeb15d17bb1850e02c108500260098ba3005106a17505e72dccd libbpf-1.0.0-2.el9_2.tuxcare.7.els26.x86_64.rpm 9a5dcb310c7f7a74de9c8619363d009f548e85e86e2e79c04c11b05703692fcb libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els26.i686.rpm ac7e4d54ec2649f9a3a8b17eeb0c11fbfbfdb9c069ba7ac5f41e2406112b9326 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els26.x86_64.rpm 6945087387725d038a0abd81e57bbe6db2427e24092bfd872170962674662083 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els26.i686.rpm 00d0b2aa17afba3535f1cc4abf923647d65962b3e4172ab1a6a88723f0a720ef libbpf-static-1.0.0-2.el9_2.tuxcare.7.els26.x86_64.rpm d687de3ba1c0dacb44fecf7ca33604a60e6dd59308367226216c2eeefc30c7d5 perf-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm a6fc8db50f3a847805c3277c600c6c76fa850d6e9d1af5ac56fe73e0c1426f17 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm 3c4480bf099462e64821fe3ec6bc2faee7a5187add46d2bc32fbd535135336d0 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els26.x86_64.rpm e08fdbb252b28f87f612a0c515b8fc094cf71ae3d1ae813736386163763c1982 CLSA-2026:1767954480 TuxCare License Agreement 0 - CVE-2025-61984: fix username handling by rejecting control characters from untrusted sources to prevent ProxyCommand code execution - CVE-2025-61985: disallowed NUL characters in ssh:// URI parsing to prevent ProxyCommand-based code execution Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61984: fix username handling by rejecting control characters from untrusted sources to prevent ProxyCommand code execution - CVE-2025-61985: disallowed NUL characters in ssh:// URI parsing to prevent ProxyCommand-based code execution

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els9.x86_64.rpm 05830da3577723d245e97f275217dc36ac0fdde2c14e1cd01e49142076e0540d openssh-askpass-8.7p1-30.el9_2.tuxcare.els9.x86_64.rpm 487084fbd5f893d62a03d617d0b4f0cd649493959629c776a4ae397e0c95a85d openssh-clients-8.7p1-30.el9_2.tuxcare.els9.x86_64.rpm b39ae860880dcc1cf4d34cb15bef0237240be43f8f19bd635b00195ed6dbbb11 openssh-keycat-8.7p1-30.el9_2.tuxcare.els9.x86_64.rpm d14d13c355f6e0319be8e50a6ed416d9cc0d8f0deef1b7216442a05b73dfde14 openssh-server-8.7p1-30.el9_2.tuxcare.els9.x86_64.rpm b68083d17d1abe370b3230a8850115dbddea9ee5fa742e252722cd241b125df7 openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els9.x86_64.rpm a734923e56f377602bb1963a0f9136c8df71d5c4dd2f32caa47c1cf2e4d8c423 pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els9.x86_64.rpm a708cdd94018de6665b35727943f451854d39e6927d681fa2588c39bd7398b0f CLSA-2026:1768209702 TuxCare License Agreement 0 - CVE-2025-24294: fix decompressed name length limit in DNS resolver to prevent exceeding RFC 1035's 255-octet maximum Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24294: fix decompressed name length limit in DNS resolver to prevent exceeding RFC 1035's 255-octet maximum

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els9.i686.rpm 1be794128c3bf64185a97138497bc0de46c3d70482e9b3513fec92f520e142ee ruby-3.0.4-160.el9_0.tuxcare.els9.x86_64.rpm 6d2db378a848175c4483212e9728330387cf9c196560b556b774b1d5d0d3e7c2 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els9.noarch.rpm a063194b819533237aef0fec4a4e534b71bcd3ee594ee79858bc36a5a467217f ruby-devel-3.0.4-160.el9_0.tuxcare.els9.i686.rpm b7df570576ac5beb5d3edb09ff8f2657fb67d88a269082f40fb1af74c65dd879 ruby-devel-3.0.4-160.el9_0.tuxcare.els9.x86_64.rpm 91a892ff3c786248722c391187f99939beafbe514ba27bc7970e096cab690776 ruby-doc-3.0.4-160.el9_0.tuxcare.els9.noarch.rpm 686a0f2fb36da3c0d703f9c7e2fadf0b6e1c747f90f57deeaa381c8059913842 ruby-libs-3.0.4-160.el9_0.tuxcare.els9.i686.rpm 7120bf6d9e05c5e1a54dba76ee6015dadcdec616810c998476ae6e3c116e8bff ruby-libs-3.0.4-160.el9_0.tuxcare.els9.x86_64.rpm 12083d604c33698d9363586d751538ef143ff5f90f1c311a63a621413ce2d13b rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els9.i686.rpm 8238d744f25390226b8f1c4b611f6958095ffc7fe10a92368ef1feb0233ce147 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els9.x86_64.rpm 3009edb3b94aab05bd94f76f103838ecd674452bdc20471b8595dcbe4070a486 rubygem-bundler-2.2.33-160.el9_0.tuxcare.els9.noarch.rpm a246dae0d47abd6ab5491eac4d2fd8cd9e5bd88e3aa2591ad8f41eb76abe464a rubygem-io-console-0.5.7-160.el9_0.tuxcare.els9.i686.rpm a7b25a4707a07445d66499aabe34aa420826fd3773514c259eaa7109f3a37973 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els9.x86_64.rpm 57229589e642a73bf534e8cc4ac468fc11033dfbb7b5fbfbf1c51a4f14d3c5ee rubygem-irb-1.3.5-160.el9_0.tuxcare.els9.noarch.rpm 0aa8d33cb3771027328bb30d82c03046cd1ebe6bc2e73f459d9002652e6efd43 rubygem-json-2.5.1-160.el9_0.tuxcare.els9.i686.rpm ba18a55cbfc681f5bda096a41387416b31d0dc8c79bfb48fda238d160eb09d37 rubygem-json-2.5.1-160.el9_0.tuxcare.els9.x86_64.rpm 178fc898fbccebb341b02b793e36bd21c5f613e395cc40d3a1e0b78a1a57ee3d rubygem-minitest-5.14.2-160.el9_0.tuxcare.els9.noarch.rpm 57788f0772b0acb40e153023c47f4137ca3b55036a2e826cf5b2b5f6eb89fb39 rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els9.noarch.rpm 20f8def8c287799c014128db2b1fe06dd6a6f72c3d8fafe498dd0da895e9f937 rubygem-psych-3.3.2-160.el9_0.tuxcare.els9.i686.rpm dc73fd32ec1e03be48954952dda3beace19e348ed9f7b6672da52f73c51cf0ca rubygem-psych-3.3.2-160.el9_0.tuxcare.els9.x86_64.rpm c184fe76417ab2020b0cd20905447248fe69654be6e38d74fa1d0cda43355390 rubygem-rake-13.0.3-160.el9_0.tuxcare.els9.noarch.rpm 1f155e01734311046053796da1e1c2b5a856e4ee34de0c912b22b64a3d013294 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els9.noarch.rpm 25a6b6be5966ee000bbaf256bfe55d8c4b27bb3a63614a8b294fcfc241c96c8a rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els9.noarch.rpm de76f9578eb41d28fb674536cafdea53ca1925d62188a4d10fc0a76bca49085a rubygem-rexml-3.3.3-160.el9_0.tuxcare.els9.noarch.rpm 0bf68a66b9dc868e2a3f5b0cf8595e5c4de137860682196884ca41a18b26c2c8 rubygem-rss-0.2.9-160.el9_0.tuxcare.els9.noarch.rpm 5c432d1627e5e0290952a75719d1bd244759a3215c7b7ceef25a97e02f8c2265 rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els9.noarch.rpm fb451efc92b77a58a489d21058672c45b6dd93706800e45c2f7d5313bb7bc6a9 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els9.noarch.rpm caa6644bb0f4f2693710bf15544c06ffdabd34b9a04f90b8fb3ad23b0492d9aa rubygems-3.2.33-160.el9_0.tuxcare.els9.noarch.rpm b16ece0f2621b6fe2584bce846d50cce3cfb8ea11762e53a28d59e3dfb011a4b rubygems-devel-3.2.33-160.el9_0.tuxcare.els9.noarch.rpm 9a8dc498645fbd508ea942c59200522a5dfa44d596fd950310b1551048e91106 CLSA-2026:1768210495 TuxCare License Agreement 0 - CVE-2025-64524: fix heap buffer overflow and infinite loop in rastertopclx when processing maliciously crafted raster input Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-64524: fix heap buffer overflow and infinite loop in rastertopclx when processing maliciously crafted raster input

0 tuxcare-almalinux9.2-esu cups-filters-1.28.7-11.el9_2.1.tuxcare.els4.x86_64.rpm d997aad77fb3c300b335c849240ebdc5ce0589c35c8bc3a62c46d6cc7ca404f0 cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els4.i686.rpm ef0e7fc3303edca3e1f52836a30d3fd96d2d37d589af8d694bbbca8a89abd7c4 cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els4.x86_64.rpm e4781696ae4c5f6e7bf4fabdd7ea3f64e4aeed8644067ff9dd00a6822aa27c43 cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els4.i686.rpm b688df4bd209fd7ca99305bc38ac5e742cfb089735924df89b9e2813631dd4f0 cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els4.x86_64.rpm bc1b40d70506f9bf1725ac4fbdb1477418eeda8f37ef56db9dabe3391d27cc10 CLSA-2026:1768213076 TuxCare License Agreement 0 - CVE-2025-65082: fix CGI environment variable injection by preventing HTTP headers from overriding server-set variables - CVE-2025-66200: prevent suexec bypass by removing request notes usage and rejecting the undocumented RequestHeader note option Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-65082: fix CGI environment variable injection by preventing HTTP headers from overriding server-set variables - CVE-2025-66200: prevent suexec bypass by removing request notes usage and rejecting the undocumented RequestHeader note option

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm 70cb4c4886edb0be629550c24281e7aad52d990c3b3f25b940e400878f673787 httpd-core-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm fe28657bb5337a33878c2e5616d6d264181f601d1991df96e0f33d424b860d09 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm cd98ac1659ed7197df932e1de833b79eaa364380106e1fdc57d87cd5be45dbd9 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els10.noarch.rpm 41e0657b1d3d084b3799c762dbe8c9f92d749493bcb6f7993ef6e807702b31ee httpd-manual-2.4.53-11.el9_2.5.tuxcare.els10.noarch.rpm aec671ec35f04d4ac5c72b1f47281e20fbadda59ed15e3ce653ea6be861211e7 httpd-tools-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm bac18d3a7fdad04d0e4c863186007b1063455ca6be7b1eba8b5bfd3ac0c404d1 mod_ldap-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm 2370dba3a402e7f99829fb629e269a0e37406db2e10b72d7d0fbbcf5ffcc6041 mod_lua-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm f03621aa6834b733bf6cc46f0857ccb3ac873c4ae442070c67ea476708ff85b7 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm d817a392b99d162b49adbe6b85b4b1ef0deac6d17d6961340f6dd29e9aea29d5 mod_session-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm 9672037d5c1bef9cb8ece213e359addb21f9ecac54834440f1ec3c8677a7df6c mod_ssl-2.4.53-11.el9_2.5.tuxcare.els10.x86_64.rpm 302805bd04da7e454d72ba8b1bb6e2310d62e49adf1bc6a94539ae3f8755ffc8 CLSA-2026:1768212418 TuxCare License Agreement 0 - CVE-2025-66293: fix out-of-bounds read in png_image_read_composite Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-66293: fix out-of-bounds read in png_image_read_composite

0 tuxcare-almalinux9.2-esu libpng-1.6.37-12.el9.tuxcare.els2.i686.rpm 059d3637fc6178dad87ec247f954c5226403bbe3127b66a2fc0e0e94978d1f99 libpng-1.6.37-12.el9.tuxcare.els2.x86_64.rpm d1d2e96a65b512af1d64b7df43a01a3c863fec997521977878a701d8bd29fcf4 libpng-devel-1.6.37-12.el9.tuxcare.els2.i686.rpm b8842b255ee2e847ede296cf009b7bacfb4a5026d05436a8dd6508788d4d839b libpng-devel-1.6.37-12.el9.tuxcare.els2.x86_64.rpm 30e32bc6cb89bdebd2bd9a06a8b4dd77eef7a89306364498319bce5a7a29b648 libpng-static-1.6.37-12.el9.tuxcare.els2.x86_64.rpm 4c25780faab4cffeec5b542547b372bad9af13c689b50428bfee9b642cc56353 libpng-tools-1.6.37-12.el9.tuxcare.els2.x86_64.rpm 4da4f8235a768991b940a15e9f37d1f03d3258db4b8a9dc1969c4a6e96664d90 CLSA-2026:1768394334 TuxCare License Agreement 0 - CVE-2025-65018: fixed buffer overflow vulnerability in png_image_finish_read function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-65018: fixed buffer overflow vulnerability in png_image_finish_read function

0 tuxcare-almalinux9.2-esu libpng-1.6.37-12.el9.tuxcare.els4.i686.rpm cd278cb9795896ccd45100dda23897e6953d02299f30a980654238e554ff28bf libpng-1.6.37-12.el9.tuxcare.els4.x86_64.rpm d656ce13b189b2cd56ae127547d83665a260a1822f53cd4e43d8ade33307de90 libpng-devel-1.6.37-12.el9.tuxcare.els4.i686.rpm 857e420e4f67151070ad0dfb1ad931c7a2e3c5294d28c0d31b86d454dd187460 libpng-devel-1.6.37-12.el9.tuxcare.els4.x86_64.rpm 4c0e03d621cc7bc50dc33c92a8adc2425e45fa5f36cedf8f1badc7eeca50b2d4 libpng-static-1.6.37-12.el9.tuxcare.els4.x86_64.rpm 122319a7e8eccceedd196870a6314910f1af8b10d0189531fad9c61518acf44a libpng-tools-1.6.37-12.el9.tuxcare.els4.x86_64.rpm 273962bc31945c0fb8401e819767f0a19e485a0bd8bba3e849d6d00ffd76fd87 CLSA-2026:1768412660 TuxCare License Agreement 0 - CVE-2025-13836: fixed memory exhaustion vulnerability when reading HTTP responses with malicious Content-Length headers Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13836: fixed memory exhaustion vulnerability when reading HTTP responses with malicious Content-Length headers

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els14.i686.rpm 6b85a00a61ce683f333ce49c75318e98a600a39a017cb3fe45e48f7b04968130 python3.11-3.11.2-2.el9_2.2.tuxcare.els14.x86_64.rpm 7d13240fad14092d2e85f5a40599393c5b9de1c12448018c01831d718ea599c2 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els14.i686.rpm 27df53326253c2837cc1d79fc2bbbf4fc1d6704815b7b349cd6dcdee82f1bd78 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els14.x86_64.rpm 6ec26572a108df213e152667807a08b595c50b69d28edb0a8b756047b7622d67 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els14.i686.rpm 6f66b78e0dc48cf51d2da51125f58fe7248a610aaffdc897311dc444e4f6d461 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els14.x86_64.rpm c8686f1b02c6c41e9ba6e71240dbcd0c1f953371c062e2a55005ccaf4fdb4c82 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els14.i686.rpm 27cd02842741199d2cdfc4569b504a5a744c3439daeea930e2ef294634658357 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els14.x86_64.rpm bb028ad0f96520704c92861cdcfc64a5adb192b4c524db83fd9f0158b706364a python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els14.i686.rpm 5cc0ac20a06c90982b73b69604380b230b583492b8a0b82bb1b0c8c68ef9cf5e python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els14.x86_64.rpm cf001f863ec4f602049df28042cd88d03ced1746a47cb7d13bd9b4b69d273c6a python3.11-test-3.11.2-2.el9_2.2.tuxcare.els14.i686.rpm 1f00d89073a2aefebe30e49ab3caecfc94893d63181ed5a8f98210c9d0f2aba3 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els14.x86_64.rpm 150f2ba713eb6709b5937bfabcb6e7163e71e2ce1a211e5ad55bb8626bc4e69d python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els14.i686.rpm 1625b3b32e390ec01c7754a87202439d8660f1d893b2415697506658147c61d8 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els14.x86_64.rpm ef07b26afe203668ca7fe236336caecf17b5c1085dabb55a7188d4c889bb9bcc CLSA-2026:1768413370 TuxCare License Agreement 0 - CVE-2025-12818: fix integer overflow in libpq size calculations to prevent undersized allocations and potential out-of-bounds writes from untrusted inputs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-12818: fix integer overflow in libpq size calculations to prevent undersized allocations and potential out-of-bounds writes from untrusted inputs

0 tuxcare-almalinux9.2-esu libpq-13.5-1.el9.tuxcare.els2.i686.rpm 99184d986fd22dda051f29de911a184ea7d560f5839ee2312cec170918c2ee5d libpq-13.5-1.el9.tuxcare.els2.x86_64.rpm b381024335a4a70e231f0d55fcc5e905197a49756428c57bd6cbd6823f294cb8 libpq-devel-13.5-1.el9.tuxcare.els2.i686.rpm c2df0e76ee7438b2fbded030c4b9b62787ae0f3b4ba7c1f9dba51a3063f74640 libpq-devel-13.5-1.el9.tuxcare.els2.x86_64.rpm dae2a5bd82ebaafc5047f1c42d58a8770151d3267add75ccf49126aef97fede0 CLSA-2026:1768566531 TuxCare License Agreement 0 - CVE-2025-14523: reject requests with duplicate Host headers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14523: reject requests with duplicate Host headers

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els11.i686.rpm 77c5aedd342e41bb798eadf0bd5d8c2ce3c83285ce307a1a8afa973e0285e3f1 libsoup-2.72.0-8.el9_2.tuxcare.els11.x86_64.rpm ff70382dcf1995e8f692663b457d097cb4b560f47eea5abb8c3c43101dddcfc3 libsoup-devel-2.72.0-8.el9_2.tuxcare.els11.i686.rpm 7b502739abd032b973001ab0091a03d0b4a1f7ab2c9c9648219e862a6201aa16 libsoup-devel-2.72.0-8.el9_2.tuxcare.els11.x86_64.rpm 4674c7c65101493eee1f3a007cdc9c543757af7d2ca442a4e2557053cd39879b libsoup-doc-2.72.0-8.el9_2.tuxcare.els11.noarch.rpm d721e2be8668e36b0e7ee940b369758938dcee0ba7756b6c962ef7ba6014b2a0 CLSA-2026:1768663754 TuxCare License Agreement 0 - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - drm/i915/gt: Fix timeline left held on VMA alloc error {CVE-2025-38389} - md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - bpf: Avoid __bpf_prog_ret0_warn when jit fails {CVE-2025-38280} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - netfilter: nf_tables: do not compare internal table flags on updates {CVE-2024-27065} - init/main.c: Fix potential static_command_line memory overflow {CVE-2024-26988} - wireguard: netlink: check for dangling peer via is_dead instead of empty list {CVE-2024-26951} - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() {CVE-2025-38077} - exfat: fix double free in delayed_free {CVE-2025-38206} - net: openvswitch: Fix the dead loop of MPLS parse {CVE-2025-38146} - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write {CVE-2023-54286} - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198} - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - software node: Correct a OOB check in {CVE-2025-38342} - nbd: fix uaf in nbd_genl_connect() error path {CVE-2025-38443} - USB: usbtmc: Fix direction for 0-length ioctl control messages {CVE-2023-53761} - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname {CVE-2023-53751} - cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427} - PCI/ASPM: Fix link state exit during switch upstream function removal {CVE-2024-58093} - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446} - sctp: fix a potential overflow in sctp_ifwdtsn_skip {CVE-2023-53372} - md/raid10: fix wrong setting of max_corr_read_errors {CVE-2023-53313} - md/raid10: fix overflow of md/safe_mode_delay - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357} - lwt: Fix return values of BPF xmit ops {CVE-2023-53338} - net: fec: Better handle pm_runtime_get() failing in .remove() {CVE-2023-53308} - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307} - ice: set tx_tstamps when creating new Tx rings via ethtool {CVE-2022-50710} - RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286} - RDMA/mlx5: Handle DCT QP logic separately from low level QP interface - net/mlx5e: Use correct encap attribute during invalidation {CVE-2023-54074} - net/mlx5: Nullify qp->dbg pointer post destruction - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282} - net: ena: fix shift-out-of-bounds in exponential backoff {CVE-2023-53272} - ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265} - sched/fair: Don't balance task to its current running CPU {CVE-2023-53215} - netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927} - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() {CVE-2022-50881} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - drm/i915/gt: Fix timeline left held on VMA alloc error {CVE-2025-38389} - md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - bpf: Avoid __bpf_prog_ret0_warn when jit fails {CVE-2025-38280} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - netfilter: nf_tables: do not compare internal table flags on updates {CVE-2024-27065} - init/main.c: Fix potential static_command_line memory overflow {CVE-2024-26988} - wireguard: netlink: check for dangling peer via is_dead instead of empty list {CVE-2024-26951} - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() {CVE-2025-38077} - exfat: fix double free in delayed_free {CVE-2025-38206} - net: openvswitch: Fix the dead loop of MPLS parse {CVE-2025-38146} - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write {CVE-2023-54286} - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198} - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - software node: Correct a OOB check in {CVE-2025-38342} - nbd: fix uaf in nbd_genl_connect() error path {CVE-2025-38443} - USB: usbtmc: Fix direction for 0-length ioctl control messages {CVE-2023-53761} - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname {CVE-2023-53751} - cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427} - PCI/ASPM: Fix link state exit during switch upstream function removal {CVE-2024-58093} - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446} - sctp: fix a potential overflow in sctp_ifwdtsn_skip {CVE-2023-53372} - md/raid10: fix wrong setting of max_corr_read_errors {CVE-2023-53313} - md/raid10: fix overflow of md/safe_mode_delay - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357} - lwt: Fix return values of BPF xmit ops {CVE-2023-53338} - net: fec: Better handle pm_runtime_get() failing in .remove() {CVE-2023-53308} - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307} - ice: set tx_tstamps when creating new Tx rings via ethtool {CVE-2022-50710} - RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286} - RDMA/mlx5: Handle DCT QP logic separately from low level QP interface - net/mlx5e: Use correct encap attribute during invalidation {CVE-2023-54074} - net/mlx5: Nullify qp->dbg pointer post destruction - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282} - net: ena: fix shift-out-of-bounds in exponential backoff {CVE-2023-53272} - ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265} - sched/fair: Don't balance task to its current running CPU {CVE-2023-53215} - netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927} - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() {CVE-2022-50881}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm d12232f004d209ec5b10e4f5a379ac3ea568c6dbcc4f88bd0d5423ce9ed6d16e kernel-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 10d8324bdc65e6928ecad84766ae9d88e91eb25c4f71abcdfdf578030ce9d235 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els27.noarch.rpm e1457863b9c2773d119e0d8edca5c0ec37dd584081376b09be8b2f5e51d9f524 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 194ec30b64a497e51a6a3cba5654d88352826be9790156c881d3f8e4332a4781 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm dd1bee0b806000e311b8e51e470ca6d002cf1cbc1d1f6673cdb2de4f1892aa98 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 49ba2a00ac87111764aea27453735635188499ca0f631eceec6ff17f0a798d33 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 92a2640819ce9b483c787c2d3256aca10d9b39a1c9c35e2a31e8073d1eda47af kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 417b76f746cd7a570becb11194973111ce12efbcb976730efb2faf516399380d kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 1ce33b0210f442d8bb362f6c1e014b06d65787564fc46d324f3207ebcff7e403 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 3e9cafbb27d665be7be39d31cef51b4983c55ed819ac5ef817dc038984691812 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 2366873a0fa7aef3c280b95a3b03dd8cfa3c5ec6f8a108cbf90bb90d4f7b9593 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 6e916507758ee106977e1aa79b1d9173fd8f43c107b811cc5dc2351742e92549 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 0a19b51dd8e9e100e34d082c0a57b2ff2abf138a7da9a801d4b23d204a55963f kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm dabacfd5360edee2a933ce4ecf8be4355c1a069252c4e28bf9daaf6cacec7228 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 5fb9f3205665514573aa348729a02f88f6e8391c999b831a5fc95dd25d27d78a kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 25d59c7966c2cd25f44aeadf609d9d393d4014b677976dbe3a096330b9ca3ff6 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 4a36b900aa9615eb709db238964fbaf80306d6974abdf89dd5d048cc702a74c4 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els27.noarch.rpm 142ed4a314b4ed9c6f0e182a852cb0defca34cab6d61dfdb1d47c8129a578091 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 6e6b3e822bed05dfab190ca4fe358bc14eba52532d55e8e8733e659fa91f1500 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 4ca6ffb2b0b78cdeeb755ee907779ac5470e2bec86f0b22d41be39216c8f5165 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm efd4438e7a4a1cf23bed9d50478d14b2307a94c1b1d105db464743b52de2750b kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm d593bf553b8e50dcaee1440fcb448bbb4407d2ecc593ddaee3ff237fc3a44a97 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm d0dee1f636d2081aad90bba0df2004266412365f09df79d017a085cc554602eb kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 9bb88ab636b35236da327687a58a05676035ad25a16c856dcb8e0254ed3b2cac kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm c73dd63eb0bbce43abd9a74e2d9ae338046cdb7aef6c55c1cc3d26252ece4dee kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 3b771c50f97a59c2bedb558af7e07825336e931728189e9c79a72aa5aebe76a3 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 189d604d953d50d0f1859351d9e62ddc71c43779e94b82f1bd9ab65919597136 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm def00a8bc35000fa184c354966782da047c892a62d39b045b19f0ab1b4580f2f kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 397995f400ee7d436e529f5d5a1a573dd09086e5ef064394689ea8452da46e6b kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 31dc19651954614b7b6b835334a718fc79be0bb7e09551ccbe9cadf17ce4875b libbpf-1.0.0-2.el9_2.tuxcare.7.els27.i686.rpm e388a43ad46b6eb7df1d96504345a72f52f5db75dfd7b0d99d5ed4d243d63a67 libbpf-1.0.0-2.el9_2.tuxcare.7.els27.x86_64.rpm 109c2673035a7ce7c0c0e097ccbc58535bf3453bb8fd940ead74b2d313ef77e0 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els27.i686.rpm d4088dcf00ded62fe18bf9c44f6f4382ff23c5214dcfbee6fd7e640467923304 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els27.x86_64.rpm 0fd128078fafe3d219bdd5de4b252e82aae58310ade1c01cf2493409a43b2e13 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els27.i686.rpm e9b17397fa6782d9a5074f415ccedf2a96e6e2fd5f550710e50f819ea7d08bfe libbpf-static-1.0.0-2.el9_2.tuxcare.7.els27.x86_64.rpm 5a87b9d874066873129883e385d3470d056147296d702fafcc2c7d25e9f6bda0 perf-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm 9aa637e76d26f98dca0d50c4bfb1d6b7cb9d34dd9ac7851b0bdddd1a9ede5bc7 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm e3e36f9972f9bc4b736acfbc90c2a810bc9280decd8717f1378d8e7f70fda6dc rtla-5.14.0-284.1101.el9_2.tuxcare.7.els27.x86_64.rpm e5ed279e3088633e1ee914901c932937ffa3fe8f53786ec2b9f1d844489cc1a5 CLSA-2026:1768580474 TuxCare License Agreement 0 - CVE-2025-14178: fix integer overflow in array_merge() to prevent potential denial of service when merging arrays with total elements exceeding HT_MAX_SIZE Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14178: fix integer overflow in array_merge() to prevent potential denial of service when merging arrays with total elements exceeding HT_MAX_SIZE

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm c37bbb331599779535d619f92fea0e2766e5af6d51005d8541a14dc398c16a29 php-bcmath-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 2d78ae6761435b5172d433d362e80b3678a40b9d3a3921124c8018949e1f0da4 php-cli-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 3b16d72fa68e8a946300996843c64bc871ba372d4d86c052804ef80c3c1bcc78 php-common-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm ffb44fdceb06da6b2d322747e6f1efb52c9a25665c3cedc0f0135ce9f5686abc php-dba-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 1315e6aed62f4d9bdce91121c049e5bf55ce703c23e4835d3132175a3423942e php-dbg-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm aea1b2dda768585aff6c2f85c46edefb8a95e220a2d152e0d15cf6d3d9a561d3 php-devel-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 867098b27bdaaa116fed4f6417fcc29bcd9f6eacd990d334e2a6511d2e85b203 php-embedded-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 56a524f13db4becfebdecd5e4f989edb2623a8929c4d11786f8f9753f721907e php-enchant-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm db34a6ff7e2d3a535792136e7d3e15ba6be8a65060b4aa85f58c2afd83b7868d php-ffi-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm dec324646e88e981e015b0024c88cabaa5b3d1de43f37344add04c3aff87efe2 php-fpm-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm b614e09222eedf50632fcfae246a9d969738b85668afbdef27acd194dd948f1c php-gd-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 529b21b8823b6b548abe4bcd5d4973fd37ea30665e63c9a7c5b60bd037e6f06c php-gmp-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 80326372d54b1611ea2006cb0bd920a3ca2886d73e5a6c7ba6ee7312e3e2807d php-intl-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 44f4090d526277d2702f72cbe8a331aae41aaf1509058ab824d137e5285d585f php-ldap-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 34fe0a9272776d6e936cce891b683774f25bc45268204751ec3b1429cfb13230 php-mbstring-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 3ebcff70e50c8bb80622418fc8af9ed77778de5b6fa84f82c55cbf6c5d812e7b php-mysqlnd-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm d068677c3edec5009188931a115031542e60d6068132d9719790543795f955b5 php-odbc-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm e1c8a0992c8dcd81549fd656e2c4a0aa2be5b21da70a598f60b32a289c576cb2 php-opcache-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 24eb06f8249cdee674f5faf4f6f8d65fa5be20f2026b6cb6a735236e629f0404 php-pdo-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 64c7d7f24cb8e9f3732132b7ce96fc6cc0739df4ecb0747735d74b05257933c4 php-pgsql-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 3b5628a77123b4f4bb33db8aa125246c2fa5c1a5cca5e82658a1d8fb6ac16947 php-process-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 3599e9929003dfca8f3121565335c869d68d9aee7ed53b38025e5e4b1d82c1c3 php-snmp-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 1af75703015b71de9538d24e9db9363bdd63d3d886c23219c8874f7b1d408c4f php-soap-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm 33b57ae5e570c19fd132b14f6f717bf40394e04a8c4c5e4eda0f7550c0d92713 php-xml-8.0.30-1.el9_2.tuxcare.els10.x86_64.rpm b49da9b6936f1436a33df3a9e24781d1d89054718e03c76938908fe1a8314695 CLSA-2026:1768814484 TuxCare License Agreement 0 - CVE-2025-58767: fixed REXML to reject duplicate XML declarations and validate declaration attributes to protect from DoS Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58767: fixed REXML to reject duplicate XML declarations and validate declaration attributes to protect from DoS

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els10.i686.rpm bafc211f67a1b9b876ccffbe5f576fd4f3f9aad62562420e659800750e70dc42 ruby-3.0.4-160.el9_0.tuxcare.els10.x86_64.rpm b11d5fd5b03b22a1764af8e4c7ff3241f7d882f73d51cea29312fda17a853d79 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els10.noarch.rpm 54949b7951d6a3724514993699800627724521c888a6976ad5ae4531167773e5 ruby-devel-3.0.4-160.el9_0.tuxcare.els10.i686.rpm 8c2c62ebaa5b20860d8aa2f6719564207de4327715d830c7c210794729067249 ruby-devel-3.0.4-160.el9_0.tuxcare.els10.x86_64.rpm d592713d56699a2754ee858b002c32ae4cca68d7f54658963b4013ecb5b519b9 ruby-doc-3.0.4-160.el9_0.tuxcare.els10.noarch.rpm be1690f1c016dc0beb33fe731435aa1f4e81f7089dcd3f1a5780d52c18f8e6c2 ruby-libs-3.0.4-160.el9_0.tuxcare.els10.i686.rpm bba59e72767d4509ca59a1080c10f64dc8d5dbde2f554517370d110afd807f5d ruby-libs-3.0.4-160.el9_0.tuxcare.els10.x86_64.rpm 583fe275029a34f6a9c5c94c9d5ba12cf8b4968eff04f4f3ebf61fcb82c63ed1 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els10.i686.rpm 7c5f46d09ada4e80cdc5d47b445ec3f186a197efd59b3525177083fdc76e99f3 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els10.x86_64.rpm a2351093110c11ba72e9a8d942e5178b85d32badbcac3e974b3073ece62551e6 rubygem-bundler-2.2.33-160.el9_0.tuxcare.els10.noarch.rpm 74d304216cc0a1262271be93f9d6f7e99f0919eed8a6149be8c85b3aa90348a5 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els10.i686.rpm f1e53636c80b9bc66ae5aa3d2cdcddee042d6c7441f90579767f76141631cb6c rubygem-io-console-0.5.7-160.el9_0.tuxcare.els10.x86_64.rpm c0c8d76507f9307734ec15131987ddd675a6789c9fb2bf28a42c92f0a484e2dd rubygem-irb-1.3.5-160.el9_0.tuxcare.els10.noarch.rpm 93fade0edb149e447ff6da730a2e26d4e1771e83da6b91cb0a61916751b631fd rubygem-json-2.5.1-160.el9_0.tuxcare.els10.i686.rpm be81b31c5c3f1d90a619a3d7f7dd15bbb29aaa273d52593dfce1ec19fdb152c5 rubygem-json-2.5.1-160.el9_0.tuxcare.els10.x86_64.rpm 011fcf12817f5238bf0d3b53fdda96cf5ea7801d767c1aad6da738c227bf0347 rubygem-minitest-5.14.2-160.el9_0.tuxcare.els10.noarch.rpm 1a726cddf0144b24e523920f86677f4d080da144994203109dfb73db4900bc0d rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els10.noarch.rpm 524baa4ee54e7769fea82f3a10ebf83f0bbfe6f4a8d803f9e2069094c4c39a4d rubygem-psych-3.3.2-160.el9_0.tuxcare.els10.i686.rpm 53a0993e0c565dee83a0077092004c423ce6b4f646e46bffffbab458c543717e rubygem-psych-3.3.2-160.el9_0.tuxcare.els10.x86_64.rpm 0d8105c08d0604d69440e033a62f0afe79f58b22308117fd8b1f1263aa121786 rubygem-rake-13.0.3-160.el9_0.tuxcare.els10.noarch.rpm 1eaaf0f7abb77d34f3348bb6f7a32a1d14764d72198730f39e6b97d6dfc0468a rubygem-rbs-1.4.0-160.el9_0.tuxcare.els10.noarch.rpm 92844110009cf9663390583b22d0e7db38ebfac2ff35acae92959ebbb50cc27f rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els10.noarch.rpm ffa6dbe5b85ed40d88d09ead1cf5c1c38b092530f4ec46754c277ddc7984b450 rubygem-rexml-3.3.3-160.el9_0.tuxcare.els10.noarch.rpm 58e8287579e1654e35eaa13059f696e85f30d4f82e33517dc41323b6cec157fe rubygem-rss-0.2.9-160.el9_0.tuxcare.els10.noarch.rpm fcb22a8bb289e4d3e43ce09e211e87fe066c2edf605a01cbb8ea9429abdd904b rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els10.noarch.rpm 7eebe2599647f7ed5675951707d5f94151e55d68eee06030a9862b7547612850 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els10.noarch.rpm 39cc508ce52c94483cfcdfbc4583e8d6cd501a022809d2b32c9bac8967d49154 rubygems-3.2.33-160.el9_0.tuxcare.els10.noarch.rpm eae1f388540d9d5c68e581f650a194415c4c9fed3fde198a94b826235e0de0f6 rubygems-devel-3.2.33-160.el9_0.tuxcare.els10.noarch.rpm 81c0e858e7757f4de719dbffd8079d0702fcd9e7d5c69315fafb2e4c1a92f6cf CLSA-2026:1768815310 TuxCare License Agreement 0 - timezone-test-to-cet: change the timezone to CET to fix the test failure - CVE-2025-13699: fix directory traversal in mariadb-dump --tab by safely converting table and view names when generating output file paths Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- timezone-test-to-cet: change the timezone to CET to fix the test failure - CVE-2025-13699: fix directory traversal in mariadb-dump --tab by safely converting table and view names when generating output file paths

0 tuxcare-almalinux9.2-esu mariadb-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm b29ea24d5673c0598aa3ae7948b58b7d56cc20dfd434a175f3f111f9d974811e mariadb-backup-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm cbf5bdd3cb4fac95e8853bf1082878c00f52485b5c6f99c1ef35282d36822932 mariadb-common-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 3ce3b042d495a5874c10029ec749c1c3bbd574ce71a012cafc6014502faced7a mariadb-devel-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 28c5467f38e9e62f7b1fec9365e17e2c5c546efab0ebba34074ffd9272245702 mariadb-embedded-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm cd810492fb7e6d86b634ceade0422a01eb20470daafa271c621ba9f2bd66e0ab mariadb-embedded-devel-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 96e031dbff5375e40d558b39613213d6992791a7349fede9e54e62b6f7d6d7d0 mariadb-errmsg-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 49b1f74066776cbbd6f540e75f4c0b21a6e6251aababd5c0b4cd1dfe166a7a8a mariadb-gssapi-server-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 61b7a97bf6a24dea68f68fda6190d11a4d2524c6d640df137f2f695e0b5cd187 mariadb-oqgraph-engine-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 9bafdb447e0dee9aa58e61afe31f6ec853ec46587fee9db4dffdfe938f677e43 mariadb-pam-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm e0a81c3f0a527e5deb9ca6a9053ce1a59503e0f20859bc577f1cb4bef263262b mariadb-server-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 53dc1e3dd80a5fc67048c39ee8f41ddc1716bca2986aa60565e6c2b9dff36e84 mariadb-server-galera-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 06603fd3b743a90e5ec52e788c22ae8fefaf3c0459e01cbe6c2f5e73d81ce4da mariadb-server-utils-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm f4f7de94e2685084968ae67dfe80694125692576dfb2dac97ae72648a9224f62 mariadb-test-10.5.22-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm fa3ff3b3db603f2a96754078e31107f936b01c125fa9d1bb05d90045e2375454 CLSA-2026:1768815869 TuxCare License Agreement 0 - CVE-2025-47913: prevent ssh-agent panic by rejecting unexpected message types and returning a descriptive error instead Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-47913: prevent ssh-agent panic by rejecting unexpected message types and returning a descriptive error instead

0 tuxcare-almalinux9.2-esu buildah-1.39.6-1.el9_2.tuxcare.els4.x86_64.rpm eac11770ac60b315daeb782f339a0554a749da486e6fd534ba46d01a7285bab8 buildah-tests-1.39.6-1.el9_2.tuxcare.els4.x86_64.rpm ac3986c6ef60a51aa7b9197a9ce561baea2859b1a487f19ac362e9c980ba6a8a CLSA-2026:1768834296 TuxCare License Agreement 0 - CVE-2025-47913: fix ssh/agent client panic on unexpected message types Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-47913: fix ssh/agent client panic on unexpected message types

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els10.x86_64.rpm a79688d104a6947ec671e311779927a12beabd91c1675a144b2efdb4f1f0cf2f podman-docker-4.4.1-13.el9_2.tuxcare.els10.noarch.rpm f85457c28e8f8aca66d3d2172facc8a4969c620fc4ca8bfabdea139bc3177102 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els10.x86_64.rpm 31dd0e0250420a622b569661e0cb94205625e10e505fc2ac649712fbb35339e6 podman-plugins-4.4.1-13.el9_2.tuxcare.els10.x86_64.rpm 06baef413011d6249942843425514e7b3b2ae5c497a28028dc9e2c673a7ad612 podman-remote-4.4.1-13.el9_2.tuxcare.els10.x86_64.rpm 772ea4d4e14725d3381a9a3b159e9cca431b56a6352e715a07d95440a91868de podman-tests-4.4.1-13.el9_2.tuxcare.els10.x86_64.rpm ed985f11ccc5734a635c8913e5db9250bd5c8662d4a5182aa5c9fdc9d3682b06 CLSA-2026:1768925986 TuxCare License Agreement 0 - CVE-2025-32049: fix Denial of Service attack to websocket server Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32049: fix Denial of Service attack to websocket server

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els12.i686.rpm 3a8b77f2908d5990a472fa0f3364b028265cc857cc733fb25de6457747e86e20 libsoup-2.72.0-8.el9_2.tuxcare.els12.x86_64.rpm 2bf15f16bde6d9567ae75e75faf2ff40e5e705337cca8609098906f5a8015c44 libsoup-devel-2.72.0-8.el9_2.tuxcare.els12.i686.rpm 87f4c4796603daf5a9d67516d1fd7084d72f06fdd8d3f935e0af86aad08ba8ef libsoup-devel-2.72.0-8.el9_2.tuxcare.els12.x86_64.rpm 9608c0797e18cb48f5afeca03748fdfee71759f035cc44e2bb455634c82e410e libsoup-doc-2.72.0-8.el9_2.tuxcare.els12.noarch.rpm 64b8e24994e54bd8e381f3eec5e18aecc4af0297b8ec1145818dd48a1d44a87e CLSA-2026:1768988530 TuxCare License Agreement 0 - CVE-2025-58436: fix unresponsive cupsd process caused by a slow client Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58436: fix unresponsive cupsd process caused by a slow client

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els8.x86_64.rpm e81d53c93146cb7b520ee845d94fc6d68c663ffbb2c6be038d5661145c179f1a cups-client-2.3.3op2-16.el9_2.1.tuxcare.els8.x86_64.rpm a4ed37c5d8093541cdffb208988ee8c80a129e701849790058ac14d68091af9a cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els8.i686.rpm 13d2ac03e17e58b0b4d33c25b8f5e986499e6b2a1f0f15662014d290a0215cee cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els8.x86_64.rpm 75e7ef25b3f6ee14d1e9cb3b1d73eff83931bfa41e863140b563fae8a8c6dd43 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els8.noarch.rpm 9f7dfba9ad807cebcacfc070b1f1a12cf9d9b982c32d5dfc68c64d46a3d84c11 cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els8.x86_64.rpm cf9917df491b4ed2fe100f3546d7431469ddb695d2a100d968c0985d5b3b4001 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els8.i686.rpm 8df69b3c49a436272a9e2ae96a7a4613359c7e7662c79281cc9c2fca0e758828 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els8.x86_64.rpm a305fcc946ce6653d0823586eb66ef31f3a4e789a812bc3fb144ed45296f9fab cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els8.x86_64.rpm 53086c77561af1171473b3ae57d12b0cd1cac592d1b26ff2958942ea4577cc40 cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els8.x86_64.rpm 1b1496f7d4dbedde84e043eb7866abf973ff0cd44bbd0fa7308b5792e531e9c7 CLSA-2026:1768989206 TuxCare License Agreement 0 - CVE-2025-55752: fix improper normalization in RewriteValve to prevent path traversal attacks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-55752: fix improper normalization in RewriteValve to prevent path traversal attacks

0 tuxcare-almalinux9.2-esu pki-servlet-4.0-api-9.0.50-1.el9.tuxcare.els2.noarch.rpm 087815ab93d561a299af62b73f1583a21543a5009922c87c062c669443f98097 pki-servlet-engine-9.0.50-1.el9.tuxcare.els2.noarch.rpm e24f1a0a7bad76718b52e2d353d523a0cd3b4c9e1a2e760f831c39bf552fcf9d CLSA-2026:1769084608 TuxCare License Agreement 0 - Updated to the 10.5.29 tarball - CVE-2025-30722: fix mariadb-dump wrong quoting character by using ' not " and using quote_for_equal() - CVE-2025-30693: fix incorrect undo logging for indexes on virtual columns by properly encoding/decoding large index IDs in InnoDB undo log records - CVE-2025-21490: fix assertion failure on cascade by skipping virtual columns in the update vector of the parent table during foreign key cascade operations - CVE-2023-52969: fix INSERT..SELECT crash when target table appears in a derived table within the SELECT clause - CVE-2023-52970: fix crash in SHOW GRANTS when user has column-level privileges on a table that has been dropped - mariadb-mtr.patch: fix MTR port allocation to avoid port conflicts during parallel tests Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Updated to the 10.5.29 tarball - CVE-2025-30722: fix mariadb-dump wrong quoting character by using ' not " and using quote_for_equal() - CVE-2025-30693: fix incorrect undo logging for indexes on virtual columns by properly encoding/decoding large index IDs in InnoDB undo log records - CVE-2025-21490: fix assertion failure on cascade by skipping virtual columns in the update vector of the parent table during foreign key cascade operations - CVE-2023-52969: fix INSERT..SELECT crash when target table appears in a derived table within the SELECT clause - CVE-2023-52970: fix crash in SHOW GRANTS when user has column-level privileges on a table that has been dropped - mariadb-mtr.patch: fix MTR port allocation to avoid port conflicts during parallel tests

0 tuxcare-almalinux9.2-esu mariadb-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 344d37eaa946244894d0b3a6c2707124a976ce22dc048172f587b319e6ac01a9 mariadb-backup-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm c3a43ed21a1a70cdcb622a681ddf118eec0d39ab05df3a41affb3db1314d2cb0 mariadb-common-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 662f9a15b073161491348414e91189c275fee257edb314037cc52044efd95d45 mariadb-devel-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 6ff2ceaaab7a2a705a214913386fb4929d86ba62142b1e871b6ce441800c841e mariadb-embedded-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 9d7398a7868b9745f7be927ea412750f3a4db864cec862aee7c04b75ef89a653 mariadb-embedded-devel-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm be0197b68fd4f1f6d16a18af9e0344498f81c8eb1ad5981fb13787d70e6babbe mariadb-errmsg-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 289e175ee104bda0703ea94cc3eb744897d0e47b6b51a290783ef44437bcfd83 mariadb-gssapi-server-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 90462ddd478b72c6bd93ad747cfb75623cdb1827ef9ec3dc18757c5d4c317622 mariadb-oqgraph-engine-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 4d5ebf11818d7bb96ca55b820a447cb64cddf21d499a2a049d9a4d5003b9c15a mariadb-pam-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm ab6270b5f6a165810ca8717d97ee8c3a09eea4155eb69971a159369b5dc2ac82 mariadb-server-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 772cc0fbf04a0bfb3a582a171c5b71b983c6dab41aacc85fa4c0d0a98f461502 mariadb-server-galera-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm e552681eeb52e3ba0ca4c1583cc399312a06ce617cf79783b7cf1d87765ddeea mariadb-server-utils-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 03f81f0fd10170624343da78b6dcf4e3e8acf78657679a2eab540974c5514017 mariadb-test-10.5.29-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 7785f338af53466e9b5863d43dbc06906fa67b357993e30bc0aa226dd5cd6e82 CLSA-2026:1769084959 TuxCare License Agreement 0 - CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els15.i686.rpm e08aac79d963982fc353d6bc1b19f89a3f9e21820218b35ca06130674381c178 python3.11-3.11.2-2.el9_2.2.tuxcare.els15.x86_64.rpm d8e466558f9a4b963ca32ad58ad13223b98ca225808b48d82d3cda578b138350 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els15.i686.rpm 16abf41a9678140201a205af47d371d23ee836d9b1cc9e68803689ef0e40a29f python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els15.x86_64.rpm 49843ff4b44a1868f248d463a9f81c65e08ac83308f486edd90e0306103e46b8 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els15.i686.rpm 28e4fbc9553a8fd6296744084e94e2c0ee9936693f4668d803c306050ac2e139 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els15.x86_64.rpm e8599d17548638b15b3beac35eea2a291b5d4053bf2faae3e337cc0f1235d8f9 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els15.i686.rpm 6b0d47c405b603f1dbafdfd70dfca0251769a81127e4ca9364ba952f661cbdba python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els15.x86_64.rpm 5b334e997ebb8fedb778ccd59413e7d7f9d8e93fff72f5031386ce9bd0630077 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els15.i686.rpm 508904f2312542cee96503185ea9d9f0e60ccd366d71b1d1e46c44b793f52c2c python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els15.x86_64.rpm cdc5349b4570ce3bde071c90e0dc56087de7e909be5c856363797e53c7904161 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els15.i686.rpm 00c80fb08c0d4d5b811916a589be0643603b9d46e397ec1503c7b0bcdd96f718 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els15.x86_64.rpm e7ac38f67720a5fab9db3637523a4b3e278edbab55e3cb3c6e0a08f4b47ce5b2 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els15.i686.rpm e8dde5cfb2592c8b46ec56823c7ad59c0aae57ef3744294312e92b44e478478d python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els15.x86_64.rpm 1c4af01ce0aa4fddb87125b33d272d99f6744f80cd8edf0116e43c4e09d49513 CLSA-2026:1769509482 TuxCare License Agreement 0 - CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els15.noarch.rpm e88b9bb4191027280a7f070ed5a947326ffc8d68943772ed9f659c1104292661 python3-3.9.16-1.el9_2.2.tuxcare.els15.i686.rpm daabed777d8ad7f0a63d6411da5506b8067fdceae115272f54166836b272c1c9 python3-3.9.16-1.el9_2.2.tuxcare.els15.x86_64.rpm 91562c78ad292c298ca35bd6780e401e7b12fa2e2e9c83a66c6d93a96bb1b782 python3-debug-3.9.16-1.el9_2.2.tuxcare.els15.i686.rpm cfaa05f71f41c90a5bbc99b181de78772657b48e934f2f66174bc82f6fe2cc1e python3-debug-3.9.16-1.el9_2.2.tuxcare.els15.x86_64.rpm e0267272a25f5382fd65be69c7d17ca8249d0d6333640f8fcdd9e32742db5bc4 python3-devel-3.9.16-1.el9_2.2.tuxcare.els15.i686.rpm b6cc26af299e0ec6873733bceca29b89e232a9e7b390f7664554a56f5a136f8f python3-devel-3.9.16-1.el9_2.2.tuxcare.els15.x86_64.rpm 2caa1bf83d266585a2f16b452d7124f0ae5e3665bc3e1c9bd5a229b43eee6b14 python3-idle-3.9.16-1.el9_2.2.tuxcare.els15.i686.rpm 4984be7a8ce50fe8cf25b1175ac22faf81a03c1a4dc1a8ce274eade0b9cf4217 python3-idle-3.9.16-1.el9_2.2.tuxcare.els15.x86_64.rpm 3dfe96ec7561b59d6b5f79d1139c26d6367366ea872c0ead349fd12b32c49c3e python3-libs-3.9.16-1.el9_2.2.tuxcare.els15.i686.rpm b069a39dde0e7bd3da11b716f5def535eacefc015eb1e66e7bf6169a52368128 python3-libs-3.9.16-1.el9_2.2.tuxcare.els15.x86_64.rpm 454c4b5e62ea61839b5644dfb8e61fa39ead203e03ce759d1e382296e49acf66 python3-test-3.9.16-1.el9_2.2.tuxcare.els15.i686.rpm 175ce9fcd1278d95377a3fd2da1a4f7e6cadcd01b9d7de7dfbfab4883381aa19 python3-test-3.9.16-1.el9_2.2.tuxcare.els15.x86_64.rpm a7aad2d3c6429874b496200ff0b80e4829dd73030401feae85ffaf1b8f076013 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els15.i686.rpm f4f105d18b9943d1c9d5ea7836fa69486de8e8688da741cbfbb21ea29e9340e7 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els15.x86_64.rpm 29b1de56a33070e672ae010900316e7e9d1bd61961ea7d1b7ed112f3e462ba67 CLSA-2026:1769511237 TuxCare License Agreement 0 - CVE-2025-61594: fix incomplete fix for CVE-2025-27221 which allowed credential leaks to persist in URI#+ CVE-2025-27221: fix credential leak by correctly truncating userinfo Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61594: fix incomplete fix for CVE-2025-27221 which allowed credential leaks to persist in URI#+ CVE-2025-27221: fix credential leak by correctly truncating userinfo

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els11.i686.rpm f83be0c3d7a5c1e471f546870f27c64e4d9d6b77f672598a439050c2d5cdbc3b ruby-3.0.4-160.el9_0.tuxcare.els11.x86_64.rpm 91bee7edf2d5ae2eeec38bcab3a01f37269d51413e9141289f43b9bfb627a915 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els11.noarch.rpm cacfffaf25ee476c0465888388a8850a6f5e35e0a9b3183b839858fd480f2477 ruby-devel-3.0.4-160.el9_0.tuxcare.els11.i686.rpm 666451b1adca5e515540466a8077bac2a92783d86e28c0029819468109bd0e03 ruby-devel-3.0.4-160.el9_0.tuxcare.els11.x86_64.rpm 4bbc7366defa21daf1600fb9bc57e5ef56ff8356d62b47755668c3211815a067 ruby-doc-3.0.4-160.el9_0.tuxcare.els11.noarch.rpm a8775e6a07fae3ed428f18d7074b78b339d97382650d3454dadcb3adfea7d547 ruby-libs-3.0.4-160.el9_0.tuxcare.els11.i686.rpm 47f5ba28e72b3959c3f504a1da2d87a27b39847d90da8422e71b4b3a454bf3a6 ruby-libs-3.0.4-160.el9_0.tuxcare.els11.x86_64.rpm 29c404722b3037cda6b1acf774bd1c994def66d122f25a38c20c4f6dd859e938 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els11.i686.rpm 79055caebac9100bca9ce609dc3ac1c392186268ae29803565f9f0b094e39ec7 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els11.x86_64.rpm 611809b9aebb22236593f71bc12b1c5e4c91c8361923212f06e3e4f29a5f324c rubygem-bundler-2.2.33-160.el9_0.tuxcare.els11.noarch.rpm c30f0f6c9af68d333451ebe6b1a6a9ae9467eeea5b84e62223ea7ff9b98bccf2 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els11.i686.rpm fb17a8320e1e798c21a80bd5c1e8b7e3bf78221c57b950fa6cc5eefdeced92c8 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els11.x86_64.rpm 8b708acb11a110113bca0626dd4a0cc315070c72571d88e1df0221a3a222d45b rubygem-irb-1.3.5-160.el9_0.tuxcare.els11.noarch.rpm 9b6e22492cbd6c8e09d559ae6407dc2775c58e104df91f68a3ad20741509fc71 rubygem-json-2.5.1-160.el9_0.tuxcare.els11.i686.rpm 46e5273b1fe03c472a654f2dcb34c04bc80805cc1fbdfa177d46efb15cc4a111 rubygem-json-2.5.1-160.el9_0.tuxcare.els11.x86_64.rpm dc9c86e592448ef16f133a0982682f8c8a2f4a66f55ae783c8dc3e027192ed21 rubygem-minitest-5.14.2-160.el9_0.tuxcare.els11.noarch.rpm 72ce1c485300c404c4a35875d2e2481c823a8dfb0b56ec2d921d04a4fc420c23 rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els11.noarch.rpm ebe483ada99280a0ee06542ff7082d4798419e64e5c1ed013b9e6c194774e1a2 rubygem-psych-3.3.2-160.el9_0.tuxcare.els11.i686.rpm 35c0642001f58b8cc83727afd9fa921739aa701111d8843c61df8bc7421fb7e9 rubygem-psych-3.3.2-160.el9_0.tuxcare.els11.x86_64.rpm 67fc9093e3a09466ade3b932f90b6273797d293d613707bf6656cb1d0512475c rubygem-rake-13.0.3-160.el9_0.tuxcare.els11.noarch.rpm 83f3cb2e2fc8259e440351e780585c56744d971fb504e34418cf9008826c09f7 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els11.noarch.rpm e0b8b13201330df9f7d85badfb9bbb660daa553dfa251373ccba9e4e04aebdcd rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els11.noarch.rpm 8b91ba54f282b48c2bad614e60df4f64c5e63c803329017fb467c25495912718 rubygem-rexml-3.3.3-160.el9_0.tuxcare.els11.noarch.rpm 546cf618647c09698474154fa2b74e2f63815d0a537196f97119f74e1bb8b7f7 rubygem-rss-0.2.9-160.el9_0.tuxcare.els11.noarch.rpm 4f4e8dacac8322d9a5be6b9bd23d05b7c74c86cfe0089094809ab9cd6e2231d1 rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els11.noarch.rpm c851724513b6d59a17549cd67039c3f115d81beb59ffb2ab8298845547251309 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els11.noarch.rpm b073de9329ba78f2909c29402575f019b88d6dc2870edf7b518ec560491c0fe3 rubygems-3.2.33-160.el9_0.tuxcare.els11.noarch.rpm ad5c5378e6e1a5ef67d9222cd0ef3528638cbb2b3ada66b48e3ce6a1582f19c5 rubygems-devel-3.2.33-160.el9_0.tuxcare.els11.noarch.rpm 3285b1c2e6df7171f3a9891cf79a68ca1e58a8cdac7a7cc64a1e22e764ba7a5a CLSA-2026:1769515411 TuxCare License Agreement 0 - CVE-2025-61915: fix out-of-bound write issue caused by inserting malicious line in cups web UI config Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61915: fix out-of-bound write issue caused by inserting malicious line in cups web UI config

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els9.x86_64.rpm c2ed7b94bed6119e9d22ebb85ba796e3192547f49292e2486c402fb8cae9e2e5 cups-client-2.3.3op2-16.el9_2.1.tuxcare.els9.x86_64.rpm 68e22837f44217b4e9cdfc1d1b375b84a042ffeb5b46c52732cebd6f044f2df2 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els9.i686.rpm 6840017874cfd8c86f3bb0cc69eb0f0a6d5bd911f5ce8b24ca7387f9dccfe479 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els9.x86_64.rpm b3b358cbce3fe633af64e1c6ec7f4932e443ccdeaa77aeda73e4bbf76386a602 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els9.noarch.rpm 56a915548fdbf863fd2eee67e23634b3a8c819246135ed6adb45820ec26038b9 cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els9.x86_64.rpm 0b8baf8fc165cd586ff0ef62f01c21b8e7b048bd5ca5ef7c016c69a9d0f282bc cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els9.i686.rpm 2cf0891d0f43c0d8fe104a95747b1b1ef8bb66d3afc8685c4b997409a30a9ef5 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els9.x86_64.rpm d3cf4e602a3b5e087191fa3dcd8c7db4d61624d208cb42915d4e8ba23eb16366 cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els9.x86_64.rpm 3763af354b0df3ebc2635b0b6d80170a04f44f021ebab95c0731c9f60ccc1f3d cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els9.x86_64.rpm 2f9415ea1bd52cbe677459b0874b2388202726763be3ee51b668f83046cc53c9 CLSA-2026:1769516785 TuxCare License Agreement 0 - CVE-2025-12817: fix missing CREATE privilege check on target schema in CREATE STATISTICS, preventing unauthorized statistics creation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-12817: fix missing CREATE privilege check on target schema in CREATE STATISTICS, preventing unauthorized statistics creation

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els14.x86_64.rpm ffd5874753bdd9d20b01867532522aa7ccc206caf7a7ba530ee2ecb1c48b7f88 postgresql-contrib-13.11-1.el9_2.tuxcare.els14.x86_64.rpm 8c27883ac2a5258568890d9aca54c0df7d9e42b578869972d97cdbdec8f26b16 postgresql-docs-13.11-1.el9_2.tuxcare.els14.x86_64.rpm 6dd9f37423164543e277f666e49cd63e9abb1b22492a889020973c84d8ab09e2 postgresql-plperl-13.11-1.el9_2.tuxcare.els14.x86_64.rpm 7e434d0898699fe8173ad7f057fa4f9fe0df83367dfb0d05484dffac5e8755c6 postgresql-plpython3-13.11-1.el9_2.tuxcare.els14.x86_64.rpm 15084c7ec32bee131a05a05f83046a62869c0141440a602214ae2b67148378df postgresql-pltcl-13.11-1.el9_2.tuxcare.els14.x86_64.rpm b1c9307db58e544d3780d027e9094f1dcc09ee6890be25a8c7ecc4bbc18e00a7 postgresql-private-devel-13.11-1.el9_2.tuxcare.els14.x86_64.rpm e70692e38f93e6dcf1cf23191e843ed366dfa00c176c0be1e27e266fea9961c4 postgresql-private-libs-13.11-1.el9_2.tuxcare.els14.x86_64.rpm f8e3ed9362f9b78f11ef4cc4b32b7d6eafc13ef55a097c7de3cb29554df9bdef postgresql-server-13.11-1.el9_2.tuxcare.els14.x86_64.rpm db04f994ab690f7625459d87b63943601292fc4639720f25b8b86440aaaa1c0a postgresql-server-devel-13.11-1.el9_2.tuxcare.els14.x86_64.rpm bdd477ce3e5c11e9132d61a233f21527eb80e4ea07231ef6c793f7e4645cbae4 postgresql-static-13.11-1.el9_2.tuxcare.els14.x86_64.rpm a770a35fc7779460d19b7c2be3de21982fb45c6535f3d25c512f65d0c6de2ee9 postgresql-test-13.11-1.el9_2.tuxcare.els14.x86_64.rpm d02051305c2bfeba0a4302b629592d9f16c99b97c00e9e31b29af1e3fcfc4d4e postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els14.noarch.rpm eb01d0a7be4746d5afdd52042dc9f12569563e69a181b8877449b4a2fc149908 postgresql-upgrade-13.11-1.el9_2.tuxcare.els14.x86_64.rpm 1878846bd85142a7512757891a611a805ec1fad01708bcca73532845dd98002f postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els14.x86_64.rpm 4721c714f9b4a0b4a89316fe868935648a070b1106bf39d350a591cc4a00f746 CLSA-2026:1769593159 TuxCare License Agreement 0 - CVE-2025-67268: fix heap-based out-of-bounds write in NMEA2000 Driver - CVE-2025-67269: fix integer underflow leading to DoS in NAVCOM packet parsing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-67268: fix heap-based out-of-bounds write in NMEA2000 Driver - CVE-2025-67269: fix integer underflow leading to DoS in NAVCOM packet parsing

0 tuxcare-almalinux9.2-esu gpsd-minimal-3.25-1.el9.3.tuxcare.els1.x86_64.rpm 142d1be31f16b15e7f7b58457ad8b13010ceaa3dc022ffee2f4002cc85eb6d7a gpsd-minimal-clients-3.25-1.el9.3.tuxcare.els1.x86_64.rpm a27695ef2b537ebb1e33565cb3c25783c01690514c80f63cbacbbf2dbe803b92 CLSA-2026:1769598463 TuxCare License Agreement 0 - CVE-2025-45582: fixed path traversal vulnerability using malicious archive extraction Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-45582: fixed path traversal vulnerability using malicious archive extraction

0 tuxcare-almalinux9.2-esu tar-1.34-7.el9.tuxcare.els1.x86_64.rpm cd9d899be3fd0bf051997f0b8252d68c9fd68f18e42d9dbf1d8d55574aaea1e5 CLSA-2026:1769679566 TuxCare License Agreement 0 - CVE-2025-68973: fix out-of-bounds write in armor_filter function by correcting index variable increments Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68973: fix out-of-bounds write in armor_filter function by correcting index variable increments

0 tuxcare-almalinux9.2-esu gnupg2-2.3.3-2.el9_0.tuxcare.els1.x86_64.rpm 99ee3c4a294bda1b93e8a9cd3697141708ac17dc05d978e3512f150fc0c5b18e gnupg2-smime-2.3.3-2.el9_0.tuxcare.els1.x86_64.rpm 6c19f1400e297dfb6d2b53b26a5ad0d71c8ea7a4cb490198116c6a3dadc14d47 CLSA-2026:1769686676 TuxCare License Agreement 0 - CVE-2025-1220: add null byte validation and fix hostname formatting to prevent null byte truncation that could bypass hostname access checks - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP Extension via Large XML namespace prefix Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1220: add null byte validation and fix hostname formatting to prevent null byte truncation that could bypass hostname access checks - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP Extension via Large XML namespace prefix

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 9fd71daef010c744deeea4e4bf9bda6e99310521af67baeddaaf221419d94e65 php-bcmath-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 847c22618c7bcc699384a0503159b278ebb4c39565778277e8fb24d4e4fadc87 php-cli-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm e525d7fa373570f3d54bf7114c2c42bd32e0a6062c71631d67bbe2bda9230bca php-common-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 97872575f67bd3a1b864334b771a64673a8f91fff34800e171c0b4b385cd6175 php-dba-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 50245643c87037bf70c480d697d1ec6adcc6f58dd38d0cf6fd59c7e499059e27 php-dbg-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 72d7ffceb6cdc7107609bf3ddbcecc3b4ee7d760d2e481a39c65d415cb455599 php-devel-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 863fd296c38111af799cb43381a9a38057200599ca9ab3d4ce2a163517254c16 php-embedded-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 5d7d441e9ac4d200a62c6e11de35a7e3361134aef07816f7e8412a620828f1f7 php-enchant-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm d750d0fbfacd56c57b1e986480f3a995563b8c58e9c24c905157c2a063b8abea php-ffi-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 0726a4b70688df4d3c11417a5e215a9bfd66880efdca0beb029bd047042257af php-fpm-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm af8f4badb169b3b48c4d0b73d35b0075aaeb29ce58295c337ca674c520c49cfd php-gd-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm f5b3cc01e6dcf81d5e406468715c4c0498201eca853910c015f707fcb8511c7e php-gmp-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm bc575f198cebfabc952ecb316a04005cab7d0dc1449ea425ca98e2ffb3de16a9 php-intl-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm ef88e18a9fb1987672f87c5653a3b2799e164bbd8092f3ac0bf726e30d138798 php-ldap-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm c90ecb977c6fa9ad142df414467975a708ce5374982ad32ebfa3249412e3f399 php-mbstring-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 70da855d4419d5d0a9499e13fbd644d87f5ac7ecca654f57e71bb0660bab0d7b php-mysqlnd-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm b07aed8a37e23f4667223b18d5012482d275408c472f0a2a35093a04123ec5d4 php-odbc-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 0592d42b2ce1e5fac4e77c62a98ac43993814567e15d57f1416a6fab39cc3a7a php-opcache-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm fff9e2a8b06d54505c5addd5e6fcfc05658fd07ebf6046f3786589a37f6e2c9c php-pdo-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm b5157fecbf1724a5cfda40526a7a151d2544f4d2087f345dbc967aee8181fa1d php-pgsql-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 0a2db9c8f170ebb3c46d55b44c7af8f88b11ffa00b555e60d373c126318e6290 php-process-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 87f99e84a241b6e9f3e97b4bc2e38daa5ea15392e319de4b0544f54cdb30b9b4 php-snmp-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 4bd0886a9e47cd3e2dde684b12c0b00c20b5dce7fcd6d5f64b6599a10b5f86d7 php-soap-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 592a938c9aee8a112ce917eca01f673ddeea9f66a70264972d998ce383b9034a php-xml-8.0.30-1.el9_2.tuxcare.els11.x86_64.rpm 774e7ad090504603cfba27ad482b5cd34eed7e9549f2a96a2aa4d7c32d6a2b03 CLSA-2026:1769701085 TuxCare License Agreement 0 - CVE-2025-31651: fix improper neutralization of escape, meta or control sequences to avoid bypassing rewrite rules Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-31651: fix improper neutralization of escape, meta or control sequences to avoid bypassing rewrite rules

0 tuxcare-almalinux9.2-esu pki-servlet-4.0-api-9.0.50-1.el9.tuxcare.els3.noarch.rpm 76f0e60ebb15ad861fdd8ff3bbcf17ff563aff4a789cf9bc3decd9952786cb9a pki-servlet-engine-9.0.50-1.el9.tuxcare.els3.noarch.rpm fe97b06a43f56535088f1db607dcef10f2a1e0a20672fb78205a0e0d3252b822 CLSA-2026:1769701814 TuxCare License Agreement 0 - CVE-2025-14425: fix JP2 image loader buffer overflow by validating pixel buffer size calculation to prevent potential remote code execution - CVE-2025-14422: fix parsing of PNM files to prevent integer overflow leading to remote code execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14425: fix JP2 image loader buffer overflow by validating pixel buffer size calculation to prevent potential remote code execution - CVE-2025-14422: fix parsing of PNM files to prevent integer overflow leading to remote code execution

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els3.x86_64.rpm 7572c7acc639fd12b0a55c18327969d66d81519f8ddf1926cad4ddab94e0bcc9 gimp-devel-2.99.8-4.el9.2.tuxcare.els3.x86_64.rpm 484c42646bc5987376a74cc6fe4c46cfe5154dd66535f91bb4a5ababa728c808 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els3.x86_64.rpm 5d43c7c344573c53e4d6c75a6a897cd3e97488d8c6af4af01f50ec163673dadf gimp-libs-2.99.8-4.el9.2.tuxcare.els3.i686.rpm 0593edfeb76e3bc00f1925970b23f598401b79bbeb642d5b7b1f7d2088d635d9 gimp-libs-2.99.8-4.el9.2.tuxcare.els3.x86_64.rpm 5d953a82f2f1fe76067835c63829210319d33edd1d8c4d5c5bf496184cd76eb4 CLSA-2026:1769775296 TuxCare License Agreement 0 - CVE-2025-59465: add default error handler to TLSSocket to prevent server crash when connection is abruptly destroyed during initialization - CVE-2025-59466: fix stack overflow exception handling in async_hooks to allow catching with try-catch instead of requiring uncaughtException handlers - CVE-2025-55131: refactor unsafe buffer creation to remove zero-fill toggle Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-59465: add default error handler to TLSSocket to prevent server crash when connection is abruptly destroyed during initialization - CVE-2025-59466: fix stack overflow exception handling in async_hooks to allow catching with try-catch instead of requiring uncaughtException handlers - CVE-2025-55131: refactor unsafe buffer creation to remove zero-fill toggle

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els15.x86_64.rpm eb4c1c12420bf6193058d35e3d85aa19f0d94003a001e010eecfcff3d6fa6c23 nodejs-devel-16.20.2-3.el9_2.tuxcare.els15.x86_64.rpm fe1beb1b489e27ec84928541b4f90cd0f81b93d23770c8c4660db6044b8074db nodejs-docs-16.20.2-3.el9_2.tuxcare.els15.noarch.rpm ad47240299037ee4c02243e688e16aa434192e953aa362cf8ac3ff88e1dfa09b nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els15.x86_64.rpm 5ca6e2aefdae3853758cbd0e6c6d6ce740d7b2e46bda89afe96547b60ef9b3e4 nodejs-libs-16.20.2-3.el9_2.tuxcare.els15.i686.rpm 755b48a56aa2ec8c0b2d2128706951e275508825fc95fd512c7679f3bbcb4321 nodejs-libs-16.20.2-3.el9_2.tuxcare.els15.x86_64.rpm ba8c3bf102f6b58fdc608d6cdc35f1946e409801f6503337c97a21550344148d npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els15.x86_64.rpm 82a0ea805ff2b74df14b98ba0ccaab23f6927f1580b7d7ea40f79be328515336 v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els15.x86_64.rpm 598bd850bd4f312b7af9dd42fd220fc202be938d95241436d9686844de773edd CLSA-2026:1769794805 TuxCare License Agreement 0 - CVE-2025-68615: fix buffer overflow in snmptrapd daemon Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68615: fix buffer overflow in snmptrapd daemon

0 tuxcare-almalinux9.2-esu net-snmp-5.9.1-11.el9_2.tuxcare.els2.x86_64.rpm 2247161c5894d331b2f5be91525ec5a913e630a137e86e3474ba37e255f3d311 net-snmp-agent-libs-5.9.1-11.el9_2.tuxcare.els2.i686.rpm e61e50ef5b30e18620b1a4ca139b703dfcce11959695eec63593211a09ff1f6d net-snmp-agent-libs-5.9.1-11.el9_2.tuxcare.els2.x86_64.rpm b2c30259b9fab74445275b757d169e97dda10f1a6e6bc9142e6ad9106040aeaf net-snmp-devel-5.9.1-11.el9_2.tuxcare.els2.i686.rpm dc9b8895d83570425d5ced4b6c8f15c7afe6e38ef637c3ee7d9c2442d51e63f8 net-snmp-devel-5.9.1-11.el9_2.tuxcare.els2.x86_64.rpm 49979e861392469fff2b4d465258951e166693044992e18fdde0dc587c189a95 net-snmp-gui-5.9.1-11.el9_2.tuxcare.els2.x86_64.rpm aa68f23b66b25cbf28a38b569500725c0486c33fe73067c7e566047932a149dc net-snmp-libs-5.9.1-11.el9_2.tuxcare.els2.i686.rpm 2279bdc4b787dd5ffac77d69d07d351a9ce2a2441b45f3ec7f6412560d9f5de5 net-snmp-libs-5.9.1-11.el9_2.tuxcare.els2.x86_64.rpm 124c4ce1d1abf74544ccd24163fc9653320e2db98d43cb2e87d150c9d916e5f5 net-snmp-perl-5.9.1-11.el9_2.tuxcare.els2.x86_64.rpm e6355d4d6956a37165285f18e29ccfdcd0beeb4b68e58de34fb2996946d53a73 net-snmp-utils-5.9.1-11.el9_2.tuxcare.els2.x86_64.rpm 0064f89673a407d564d1bbd8c74bd25113dfde2ad90082532c340837a6aeb694 python3-net-snmp-5.9.1-11.el9_2.tuxcare.els2.x86_64.rpm 54b4d60493ed2493cea71d72c44bef94afa8642b0b6c947a705d1aa793bba668 CLSA-2026:1770035896 TuxCare License Agreement 0 - CVE-2025-66471: fix improper handling of highly compressed data in the Streaming API Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-66471: fix improper handling of highly compressed data in the Streaming API

0 tuxcare-almalinux9.2-esu python3.11-urllib3-1.26.12-5.el9.tuxcare.els2.noarch.rpm b54552d889801afea6ccc90cd7018f37f8e397498f9a3bb6b0290e5a7fad0486 CLSA-2026:1770111651 TuxCare License Agreement 0 - CVE-2025-13601: Fixed incorrect buffer size calculation in g_escape_uri_string() and added fuzz tests - 4-0001-fix-gdatetime-test: fixes gdatetime test failing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13601: Fixed incorrect buffer size calculation in g_escape_uri_string() and added fuzz tests - 4-0001-fix-gdatetime-test: fixes gdatetime test failing

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els4.i686.rpm 05ff397bdce88f26c4f9414b50753fa05de4cdb44d173a6fb9ad3b7fc533a546 glib2-2.68.4-6.el9.tuxcare.els4.x86_64.rpm 485eaefb8fd0013cbbdaa82bf02903f31a49eb86416d31d28d30ae0757271927 glib2-devel-2.68.4-6.el9.tuxcare.els4.i686.rpm 6f0bb873cad6a043d71d81f3b152d97999f614a547a737845516b735997b9f23 glib2-devel-2.68.4-6.el9.tuxcare.els4.x86_64.rpm 4ebed84aeba5574bb42ec7b19cebe9959a1908df52e2e3016ce29f87744e27a6 glib2-doc-2.68.4-6.el9.tuxcare.els4.noarch.rpm cabd4ee68c8ab45bf1e0973bde9cc5f58b382a0aeb3c583ff2068783001b1be1 glib2-static-2.68.4-6.el9.tuxcare.els4.i686.rpm 97a47b5980758579ce434dcc5875a60816b62fee15f8a9d11764733bf9c2c6b0 glib2-static-2.68.4-6.el9.tuxcare.els4.x86_64.rpm 1084c90939a23396bd00cc0c6b26fb80f3e829c3cb44d9a3cc487886ec69579b glib2-tests-2.68.4-6.el9.tuxcare.els4.x86_64.rpm 4bef7d8c8230055944a4ce5308168cd7a0f9e4b4740078dd89e4e3201edf47a2 CLSA-2026:1770112258 TuxCare License Agreement 0 - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els3.x86_64.rpm 5406d2fef545104e7719ae8b7ba36bc93ed935300ad3b85f41c912a33a3fd8a3 golang-1.22.9-1.el9_2.tuxcare.els3.x86_64.rpm e8d91ebfdad94a2dfc8066d5c019619e54662bf017be9d54963b122dccf36e1e golang-bin-1.22.9-1.el9_2.tuxcare.els3.x86_64.rpm 1de33db423adbc9c854ae71cedb2e238c71ba6e333207cc2de861671a7ce99a0 golang-docs-1.22.9-1.el9_2.tuxcare.els3.noarch.rpm 6cc74c19b4696c288c22557ba8006ec2f3b1b2108c5bdb48d2ecdae17a738abc golang-misc-1.22.9-1.el9_2.tuxcare.els3.noarch.rpm e93068ddf465fd0c8c5866c6b3a68be3bd5984bf5276b93df7f69f431241df82 golang-src-1.22.9-1.el9_2.tuxcare.els3.noarch.rpm ece9fd55059c3ed3fb93c125a4175ea9ab0bf55847bfb4c8290119069796a20a golang-tests-1.22.9-1.el9_2.tuxcare.els3.noarch.rpm c0e56f511a816d6ec35b5fcd881c7f9b792333b20a8d68eb75048ad6be3e3b17 CLSA-2026:1770215200 TuxCare License Agreement 0 - Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000410; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000650; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3d; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x43a; - Addition of cpuid:A06E1/0x97 microcode (in microcode.dat) at revision 0x1000273; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x132; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x6133; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x11a; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002c0; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Removal of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0xa up to 0xb; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x437 up to 0x43a; - Update of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) from revision 0xa000100 up to 0xa000124; - Update of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) from revision 0x10003d0 up to 0x10003f0; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000362 up to 0x3000382; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12f up to 0x132; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4129 up to 0x6133; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4129 up to 0x6133; - Update of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) from revision 0x123 up to 0x125; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1d up to 0x1e; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C0664/0x82 microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C06A2/0x82 microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x210002b3 up to 0x210002c0; None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000410; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000650; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3d; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x43a; - Addition of cpuid:A06E1/0x97 microcode (in microcode.dat) at revision 0x1000273; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x132; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x6133; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x11a; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002c0; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Removal of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0xa up to 0xb; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x437 up to 0x43a; - Update of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) from revision 0xa000100 up to 0xa000124; - Update of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) from revision 0x10003d0 up to 0x10003f0; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000362 up to 0x3000382; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12f up to 0x132; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4129 up to 0x6133; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4129 up to 0x6133; - Update of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) from revision 0x123 up to 0x125; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1d up to 0x1e; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C0664/0x82 microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C06A2/0x82 microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x210002b3 up to 0x210002c0;

0 tuxcare-almalinux9.2-esu microcode_ctl-20250211-1.20251111.1.el9_2.tuxcare.els1.noarch.rpm fd4e2676d4e3430d417f1d9fd32ce0aef6221e770151a65e1bfc7ff72aef19ac CLSA-2026:1770219452 TuxCare License Agreement 0 - Fix CVE-2022-47673 patch None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2022-47673 patch

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els5.i686.rpm c6f31245da7b31eb099fddf9927dab60a68633ebd2efa2023e51b96329d5331d binutils-2.35.2-37.el9.tuxcare.els5.x86_64.rpm ff293c175e7533a456d8be60ac00b54e1d0d2302aed7a4e9219d33f2cdd67a70 binutils-devel-2.35.2-37.el9.tuxcare.els5.i686.rpm 423520332062e484eaae1cc8ad9fb2b7c8a94a11c8bc9cdb53ebfd243c17f19e binutils-devel-2.35.2-37.el9.tuxcare.els5.x86_64.rpm 9657491dc19feb4a3170421c6c783173e7814709563bc493e5cbaec9644cfff2 binutils-gold-2.35.2-37.el9.tuxcare.els5.x86_64.rpm 5138470db09b9d1e864548a11e4d962e0b80e136f55fa50bd2a0a0aa937211b3 cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els5.x86_64.rpm a359cd5f01ebe09f4cc038b3bfe0ae157070c8e05f095eaef9862754a7a0ddf9 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els5.x86_64.rpm 15f80f1639f0ee0422b2ea7fcc17d0d43086a548d5251c8816312b8c16a592fe cross-binutils-s390x-2.35.2-37.el9.tuxcare.els5.x86_64.rpm a6a82f57313e32cc2fa5091843df87bfdbb0c715c84f472d0cdb7a9ecbf680f5 CLSA-2026:1770668132 TuxCare License Agreement 0 - CVE-2025-69418: fix OCB AES-NI/HW stream path leaving trailing bytes unauthenticated/unencrypted by advancing pointers after stream processing - CVE-2025-69420: fix missing ASN1_TYPE validation in TS_RESP_verify_response for signing certificate attributes Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-69418: fix OCB AES-NI/HW stream path leaving trailing bytes unauthenticated/unencrypted by advancing pointers after stream processing - CVE-2025-69420: fix missing ASN1_TYPE validation in TS_RESP_verify_response for signing certificate attributes

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els8.x86_64.rpm 7effa956073636bf8a3bdb6c618e82faf04bec21ccc19d9ca3eb35a1dec12786 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els8.i686.rpm 38e5c5800bdf107189f92356c3048ff59247296a2ad5c2847f2ded5c5d75eed4 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els8.x86_64.rpm 8511a7044a49353978058f9346a74b24113827c5ff6f29549a593a85aede3228 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els8.i686.rpm 508714d11f5a42ef0d3dd14b104f83acc60da99f29ffb34fb55897310be94f18 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els8.x86_64.rpm 717875d8a0cb2c25f9be42c9445ed940eeff1f78b49f340eaf2f3df3676fb4e9 openssl-perl-3.0.7-20.el9_2.tuxcare.1.els8.x86_64.rpm 9443ab174f3e0d8a8809d785e507e3e2e0c6cf4fceb5370f487d925dfae06fd1 CLSA-2026:1770741587 TuxCare License Agreement 0 - CVE-2026-24515: fix NULL pointer dereference in XML_ExternalEntityParserCreate Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-24515: fix NULL pointer dereference in XML_ExternalEntityParserCreate

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els7.i686.rpm 1045448d1a2da50d90b2ca6a6954f3de9441cc5bc22d779966948332024f9a65 expat-2.5.0-1.el9.tuxcare.els7.x86_64.rpm 345c374d4add8b312e04b6c8af765c50360d71cf8d0d3b3f84c7ad9314dd9b56 expat-devel-2.5.0-1.el9.tuxcare.els7.i686.rpm 403039af5c5a3c4aa008803bb8c9f5c819e8f67492b7768dfa26ada575b27ef6 expat-devel-2.5.0-1.el9.tuxcare.els7.x86_64.rpm 69de91ce518994d9b1497698ddab88d3c5b4ffff340848aed80d8d797aa1dc24 expat-static-2.5.0-1.el9.tuxcare.els7.x86_64.rpm 1965b90dacabaa101378c29142a4c2806af8056d1fb12c37e33b3740448413fe CLSA-2026:1770911059 TuxCare License Agreement 0 - CVE-2025-6176: fix excessive resource consumption during brotli decompression Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6176: fix excessive resource consumption during brotli decompression

0 tuxcare-almalinux9.2-esu brotli-1.0.9-7.el9_2.tuxcare.els1.i686.rpm a03674cf26db07647a05a933a9438bf48173008a721f45df1ff663ca0a5a0f94 brotli-1.0.9-7.el9_2.tuxcare.els1.x86_64.rpm c4c33a0779bc511543a0293693064efdd50da0c9e869a62fb8f517d2da9e5959 brotli-devel-1.0.9-7.el9_2.tuxcare.els1.i686.rpm f8c2f7e857f02b6bc60db6e058b7549e327a2d8741a169c44239d7b58d8e5f00 brotli-devel-1.0.9-7.el9_2.tuxcare.els1.x86_64.rpm c233f2e027f5a07479d9b8d81d6f2e7c2b5264f93ed77f7af531e3a5463f464c libbrotli-1.0.9-7.el9_2.tuxcare.els1.i686.rpm f49013d9722b6b5fd2f85679ba6f22f2fc239b834dbc7cfd0db592bc19e5c77f libbrotli-1.0.9-7.el9_2.tuxcare.els1.x86_64.rpm 0c2eb50fb703737a52bfc05b07c08b0add1f094ae665db1bfc024f841a5089c5 python3-brotli-1.0.9-7.el9_2.tuxcare.els1.x86_64.rpm 61131d1d1bbb7d67ef3cc9d371b8522839cf4e29e7abcbbc26ca3e9925392369 CLSA-2026:1771000442 TuxCare License Agreement 0 - CVE-2026-0719 fix integer overflow in NTLM authentication when processing excessively long passwords Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0719 fix integer overflow in NTLM authentication when processing excessively long passwords

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-8.el9_2.tuxcare.els14.i686.rpm c11bbd23ddb8f97e4d714042af34df34f8f55605c6c9d8c0f877f7093f4a72a3 libsoup-2.72.0-8.el9_2.tuxcare.els14.x86_64.rpm 9243f67679577fbb4915f7b630ab31a040c6c186886231fdf741905da8e70f61 libsoup-devel-2.72.0-8.el9_2.tuxcare.els14.i686.rpm 6870c8133a8bb0f111374d78a584f83e957c5e14ff6b8aaef369313fb2078a9b libsoup-devel-2.72.0-8.el9_2.tuxcare.els14.x86_64.rpm a9ac668a4e40f6745ba42d7d08124825efcf5d185022a98a065634b268d5351f libsoup-doc-2.72.0-8.el9_2.tuxcare.els14.noarch.rpm 1e236d22e0a00933cefbf92164450fc714ee2532d0e230d6653804d35a65803c CLSA-2026:1771001650 TuxCare License Agreement 0 - CVE-2026-22801: fix heap buffer over-read in png_image_write_* Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-22801: fix heap buffer over-read in png_image_write_*

0 tuxcare-almalinux9.2-esu libpng-1.6.37-12.el9_2.tuxcare.els5.i686.rpm d9eb0fd0c30e627e5e0ab21dd775f9a3d46310455460634e4c805092b5b218fe libpng-1.6.37-12.el9_2.tuxcare.els5.x86_64.rpm bc3fdbd83e529912002f0c90db003e2dbdf64c5c876609331984eb5d9876cc39 libpng-devel-1.6.37-12.el9_2.tuxcare.els5.i686.rpm 16099cac415e9114f83209020d580d4911413f32b6beaf5fef0a46f58829477c libpng-devel-1.6.37-12.el9_2.tuxcare.els5.x86_64.rpm 48b2e65f0bca0ad0ba823b2533527dcca7b5eec37aa4d5ff8c008fb593df01a0 libpng-static-1.6.37-12.el9_2.tuxcare.els5.x86_64.rpm a156c368c25c6a0e16593b2955fd9b9b8984e4bc9f17890d6e4c263239961cca libpng-tools-1.6.37-12.el9_2.tuxcare.els5.x86_64.rpm 9356e0accdc13669ee004a1a0045bf33bb7130ed1e9e01cd4533567b344ee9be CLSA-2026:1771010063 TuxCare License Agreement 0 - update to CKBI 2.82 from NSS 3.120 - updated certificates: - # Certificate "ePKI Root Certification Authority" - added certificates: - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate " OISTE Server Root RSA G1" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.82 from NSS 3.120 - updated certificates: - # Certificate "ePKI Root Certification Authority" - added certificates: - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate " OISTE Server Root RSA G1"

0 tuxcare-almalinux9.2-esu nspr-4.35.0-6.el9_2.tuxcare.1.els2.i686.rpm ade0136fcd7a42888fbb926411980c5b48df16747f6a15e90858427fea6102f6 nspr-4.35.0-6.el9_2.tuxcare.1.els2.x86_64.rpm b857b347aff92ac8114f17b030d6a562f1f9cd6d66fe36c12015ecb31c50eff9 nspr-devel-4.35.0-6.el9_2.tuxcare.1.els2.i686.rpm 5b36437825b62e703e0b97bcdad753136f546beaafab85382320ca506bec594a nspr-devel-4.35.0-6.el9_2.tuxcare.1.els2.x86_64.rpm df222d8e913cba3d8fa843e3959a7e01b8c1985c264f75624392d4e95421942f nss-3.90.0-6.el9_2.tuxcare.1.els2.i686.rpm f719cf827e4f8fa2e0edce8c2868a53ad96e4e46504f2bf850248ac659941f86 nss-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm 89376035e5e789ea40e1de54cf66dd54fca031ab6798b9b94f1290784bf56891 nss-devel-3.90.0-6.el9_2.tuxcare.1.els2.i686.rpm b93e7165752ba8cb8a41404ea4320192bc72a0077d7dd08efad81020683928d9 nss-devel-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm d338c4f1868bf204f12d6bdcc80abe0d9f20130043ebb3b29d8b8ff587bdff88 nss-pkcs11-devel-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm b80fb6dfefcea7faf83f467d7b3cae66e0154f68f897d1f3a2cf26e41d9a00b2 nss-softokn-3.90.0-6.el9_2.tuxcare.1.els2.i686.rpm 831bca3264692cf9759463920acb8b61efc2504b1cda7b8aa283158c13e74914 nss-softokn-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm 75b3cdc535e874e71d7562ea9b95f8ccd5a0bdc6a135a9c1a2406837d6a97d49 nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.els2.i686.rpm fb0a43c1e09c1f0f1a13db08128b4470a9831785f8583bc68bc46e989a397bdb nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm 590fdc36bdf3ae88ab5ac3a82604fc90dac9d85f4269a5da3e33196406bd19b9 nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.els2.i686.rpm 3ad66d887719c667b61a8762961b38902e9e83d079615fbf4bff6a636d363aa3 nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm a374f2e79c5574c88b165573c65c52c76380b9307ded5a8fe5f732da7152eaad nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.els2.i686.rpm b6cb2b61e3b1a8e3e6bc64d1295f3f5d23f966fdc4c50e38ec89b9cbff048d4b nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm 70fe0b72f640f0f9cc378e3540fd1571ea6de2e79878e2016728e8ef255101c1 nss-sysinit-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm a6b25d08b11b5604afd4510ddbca7a1cde16dbe7e8f769cf106d990bc5524d02 nss-tools-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm fa2b73fab732ab1f3f4ca8fb023708a410d017ed0a7bcafde86e9d36e31a527f nss-util-3.90.0-6.el9_2.tuxcare.1.els2.i686.rpm 28a515a61f358b9d9272179fdefcc13ef490cb5d038ff91f73fe3b18c98780d7 nss-util-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm 6cfb07fcdeb5564ff9063d053da3c3ad0dbb26073218e5cbced9faed5936eeb4 nss-util-devel-3.90.0-6.el9_2.tuxcare.1.els2.i686.rpm 5174a29a10f7f71b2c569af101a8356ac379b4f478d95668eb61082d3266e0e1 nss-util-devel-3.90.0-6.el9_2.tuxcare.1.els2.x86_64.rpm d4ff6b2b40a6a6ace8496d3a683e59ce775bdd8139875d363fe9ec7825a3a0ef CLSA-2026:1771010755 TuxCare License Agreement 0 - CVE-2025-69204: fix integer overflow in WriteSVGImage Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-69204: fix integer overflow in WriteSVGImage

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els2.x86_64.rpm d8d706aa2a2d6516b7632b79ab1eb0c3c5f1f6b266617ecffed683271a7e8195 ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els2.x86_64.rpm 1aee75c0dcf74eeb3ce353519713c99a93eb47a6b72cc8099e2fb97e01c9961f ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els2.x86_64.rpm c3c9f7702de5fea8423684d2329153e229ac652c60cc83ec21b83448fd45fcb6 ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els2.x86_64.rpm a76ad89284694574036ce6316ce8fbf6458bb4a208eb0a3e8f646d9046ed5902 ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els2.x86_64.rpm 6f379202fa208b49b096ba581fbd97b75f857a49b4b65e8e67db358fe78ff5a7 ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els2.x86_64.rpm b4dd8ff10461a22e3f2f6b965ff8b1e7a4d600463dee7775ed2ef68aa5754053 ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els2.x86_64.rpm d4e260a2d7d70559a2a9b447a01c295bdb599f21caf94aeb6da85ca2125c7081 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els2.x86_64.rpm 108786565a51c35cd648d602c7b2c94fa23bf416257fa52c257721a884e6f07c CLSA-2026:1771236630 TuxCare License Agreement 0 - CVE-2026-21637: route callback exceptions through error handlers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-21637: route callback exceptions through error handlers

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-3.el9_2.tuxcare.els16.x86_64.rpm 5eb058cf4dea40fd3ea7d475b01d066f35cced27177caab48fdffead3218e9ae nodejs-devel-16.20.2-3.el9_2.tuxcare.els16.x86_64.rpm 9f16f1c7a402f6d156157db9b1ce2792ecd83f37276177d78f0f31c663b4ddb7 nodejs-docs-16.20.2-3.el9_2.tuxcare.els16.noarch.rpm 1c51099098cdbcb560dc6ec1d8f641b483468dec65217e729410e5753edde0b4 nodejs-full-i18n-16.20.2-3.el9_2.tuxcare.els16.x86_64.rpm e5404a958241b70eada0b6aea44135215f561b4728d1dc3f36894b75a8363c42 nodejs-libs-16.20.2-3.el9_2.tuxcare.els16.i686.rpm 652432380ac4c7a945212dd585e1e6e00e1050c497d9b80894826391a2aca582 nodejs-libs-16.20.2-3.el9_2.tuxcare.els16.x86_64.rpm 9ab896fa55e6bd3f0057e20e446bc4cd6cdc532431e203bd358993e1eb674d0a npm-8.19.4_1.16.20.2-3.el9_2.tuxcare.els16.x86_64.rpm 2b7153221167740bc4353c3fd06ca006d4b59e56ad64d7ec12e1655c38a1d928 v8-devel-9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els16.x86_64.rpm 7d0a03f310fcd01fd751ee3606e862ead362aed6aacac05dc081bbe60875013b CLSA-2026:1771239384 TuxCare License Agreement 0 - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit {CVE-2025-39766} - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680} - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} - KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823} - ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689} - ext4: improve error handling from ext4_dirhash() {CVE-2023-53473} - rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749} - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269} - Bluetooth: ISO: Fix possible UAF on iso_conn_free {CVE-2025-40141} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - libceph: fix invalid accesses to ceph_connection_v1_info {CVE-2025-39880} - bus: mhi: host: Detect events pointing to unexpected TREs {CVE-2025-39790} - nvmet: fix out-of-bounds access in nvmet_enable_port {CVE-2025-37825} - net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() {CVE-2023-54155} - wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device {CVE-2023-54015} - x86/sev: Make enc_dec_hypercall() accept a size instead of npages {CVE-2023-53996} - page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129} - page_pool: fix inconsistency for page_pool_ring_[un]lock() - net: page_pool: use in_softirq() instead {CVE-2025-38129} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - vsock: avoid to close connected socket after the timeout {CVE-2025-40248} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933} - net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905} - i40e: validate ring_len parameter against hardware-specific values - i40e: add validation for ring_len param {CVE-2025-39973} - i40e: increase max descriptors for XL710 - i40e: remove read access to debugfs files {CVE-2025-39901} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - i2c: tegra: check msg length in SMBUS block read {CVE-2025-38425} - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods {CVE-2025-38395} - virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375} - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004} - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow {CVE-2023-54102} - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() {CVE-2022-50865} - block, bfq: fix uaf for bfqq in bic_set_bfqq() {CVE-2023-52983} - block, bfq: replace 0/1 with false/true in bic apis - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq {CVE-2022-50329} - block, bfq: fix possible uaf for 'bfqq->bic' {CVE-2022-50488} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346} - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - net/mdiobus: Fix potential out-of-bounds read/write access {CVE-2025-38111} - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - net: atm: add lec_mutex {CVE-2025-38323} - Bluetooth: hci_sync: always check if connection is alive before deleting - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete {CVE-2025-38118} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync {CVE-2024-58013} - net_sched: remove qdisc_tree_flush_backlog() - net_sched: ets: fix a race in ets_qdisc_change() {CVE-2025-38107} - net_sched: tbf: fix a race in tbf_change() - net_sched: prio: fix a race in prio_tune() {CVE-2025-38083} - net_sched: red: fix a race in __red_change() {CVE-2025-38108} - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request {CVE-2025-38013} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} - mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} - wifi: ath10k: Delay the unmapping of the buffer {CVE-2022-50700} - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305} - ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072} - drm/amd/display: fix FCLK pstate change underflow {CVE-2023-53780} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit {CVE-2025-39766} - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680} - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} - KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823} - ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689} - ext4: improve error handling from ext4_dirhash() {CVE-2023-53473} - rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749} - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269} - Bluetooth: ISO: Fix possible UAF on iso_conn_free {CVE-2025-40141} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - libceph: fix invalid accesses to ceph_connection_v1_info {CVE-2025-39880} - bus: mhi: host: Detect events pointing to unexpected TREs {CVE-2025-39790} - nvmet: fix out-of-bounds access in nvmet_enable_port {CVE-2025-37825} - net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() {CVE-2023-54155} - wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device {CVE-2023-54015} - x86/sev: Make enc_dec_hypercall() accept a size instead of npages {CVE-2023-53996} - page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129} - page_pool: fix inconsistency for page_pool_ring_[un]lock() - net: page_pool: use in_softirq() instead {CVE-2025-38129} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - vsock: avoid to close connected socket after the timeout {CVE-2025-40248} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933} - net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905} - i40e: validate ring_len parameter against hardware-specific values - i40e: add validation for ring_len param {CVE-2025-39973} - i40e: increase max descriptors for XL710 - i40e: remove read access to debugfs files {CVE-2025-39901} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - i2c: tegra: check msg length in SMBUS block read {CVE-2025-38425} - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods {CVE-2025-38395} - virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375} - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004} - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow {CVE-2023-54102} - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() {CVE-2022-50865} - block, bfq: fix uaf for bfqq in bic_set_bfqq() {CVE-2023-52983} - block, bfq: replace 0/1 with false/true in bic apis - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq {CVE-2022-50329} - block, bfq: fix possible uaf for 'bfqq->bic' {CVE-2022-50488} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346} - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - net/mdiobus: Fix potential out-of-bounds read/write access {CVE-2025-38111} - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - net: atm: add lec_mutex {CVE-2025-38323} - Bluetooth: hci_sync: always check if connection is alive before deleting - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete {CVE-2025-38118} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync {CVE-2024-58013} - net_sched: remove qdisc_tree_flush_backlog() - net_sched: ets: fix a race in ets_qdisc_change() {CVE-2025-38107} - net_sched: tbf: fix a race in tbf_change() - net_sched: prio: fix a race in prio_tune() {CVE-2025-38083} - net_sched: red: fix a race in __red_change() {CVE-2025-38108} - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request {CVE-2025-38013} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} - mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} - wifi: ath10k: Delay the unmapping of the buffer {CVE-2022-50700} - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305} - ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072} - drm/amd/display: fix FCLK pstate change underflow {CVE-2023-53780} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 9d0dec11305496885ebfe98245d87a806e44fd2b918acc2928fe63155fb31961 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm b929e93d68449142e5cd2b7ae0056cd3d13d9f50e795a20550c78cdcc3e32117 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch.rpm c43afd3b7c4c5624120d2c0f13cfd083b0bf51d1e104bde4869c5c5abb508c8c kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm ab00bed954a28a91a629098a6ff862a9015fb34767b04378218e82c989ed3059 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 9c54361cf1478262c441e0f3bf36cccf213598160021bc104808910fd402cb93 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 8d431e7241c7d00b8466aa31690e94e1fab43be93fab22451910b325a5cc8457 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 5f5326dc5682c5ca89b67df6727b83cdaff30e8326696ef7bf563d2e392367b7 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm b586595de3caf978118c743735c08d51b07c96eaaf46c0e6faae927ea151b6ae kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 88e4084e9521708d61a5c687eb7d34760e684a39a54e5dafc7e819d345297f47 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 5c7067a3bf037de53bac3be8441186db178869904658c74a1f9a7ea9cd2fb54a kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 2d19b5be4bae379c5e500d3e95bdb06ddbc842fe4e65e0929127c42c1ea47dac kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 008f5fc9ebc938d2d100e54108ec7c4af1055a764433c5957acdb99fa5a494ce kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 8e71690aa484b63eb9a82c253f7e03070ee54154cc8f72a0d0f0595cbfd56eae kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 6d84efe1aebcc636825874b382cd73a9de9398a5de03d12c4ae67de5ab0b79e6 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 87ebfee2036c1b7517f1df5c115e46f5dbd010eedac27d30c9f7182563ecc427 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 0a1a9089ecb76617b50c9e40793bcbf0b161a5c458fd544376284657f60147e4 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm c4c4f576db809e514e90a81ff435f815c79ba2bdb166d610d99de5364e91eac0 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch.rpm e4662fb7c6b13aaa8e09c261b0fbfc0766166711e2810bb611c535c086084210 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 0beebf253eb36a59869203433396cdd429f2af6c06e6b54c7f26d030c3468177 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 00c8846c7ca6aa14bdf122b164fb82d50d2caf52facd5fb70e923cfcfe6928e2 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 1652cfa0f3b07ce661dbefe8f9db02a9e2b3ba6ec1299be3ef26942193419c50 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 388f2f3829f874c159cbe028062b4cdbf94d21c89748477847b9681af42e7b47 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 60ba3d4194e25ea3ebe36d42f94749447810ba20ee8b9c8e75da6f8cd8f2b0c9 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm efa1acc2745e708c8477ff25b1e0ae30d70feb76eaf266d36946aae030f5d590 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 2ae2b55bc6d0047df13f5da9df69fec8963afdf6e369ab04f0d9fe3933c37eed kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm da1c51bc0441408b3b4a8c100bcba11281290b66131a647fe67a45ff26274495 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 8c56f466d482d358bb85b50952122bb6dc18b3d005b890fba82fce77adda2523 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 988a0c8a85a95e9eb23fc9b8b058821a20e20093abcba839e9a608c199ce991f kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 7cd650acc6fbf347a0bfc95519093d4d6a0ec85b662df698993942cfe2fd3351 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 3af5ef8b11abf6ac87c6ebdc95f056b23ab9097efff41a3588ae0ce3b1352d64 libbpf-1.0.0-2.el9_2.tuxcare.7.els28.i686.rpm fd953dc8ba41e89f4891f7bfc4b8d82bbcd1f6bcd0e00cfed5bc5cd2f87005cb libbpf-1.0.0-2.el9_2.tuxcare.7.els28.x86_64.rpm d79f7bad5468a3757fbce48c8799cb39e3e9f6370c29e51c1ebd57d8a2bd5634 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els28.i686.rpm a19267b6c9aa1a92cc31ffae6c20eebc66fa4db618bd47252212068997ba723f libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els28.x86_64.rpm a0f50d4cf424992f5a396cf67427a2a5b7f1836dcdcb598ffb800003aa12f924 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els28.i686.rpm fa490cf0483cd0b8f2c6624b9f0805dc4b62ba258c22d75cf509cf829edd41c3 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els28.x86_64.rpm 22c3f3d3602e095ec7e525d1bec0c0f0362ede51b1a1026dac8cbb46deec015d perf-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 82d5dfa84d67ba1864ad9a2519d77410981b1cb0499da2f4b5e0f17c63bd8060 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 9ae771097ea9d895e16e96e6b34c0cff476287382d74ae1c94388134a61ae874 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64.rpm 8e975968b04e7d18fdb58e6aa4d310afe914cfc23bee3a08507cd430ef2cb99a CLSA-2026:1771409383 TuxCare License Agreement 0 - CVE-2025-61662: gettext: Use-after-free due to gettext command not being unregistered on module unload Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61662: gettext: Use-after-free due to gettext command not being unregistered on module unload

0 tuxcare-almalinux9.2-esu grub2-common-2.06-61.el9_2.1.alma.tuxcare.els9.noarch.rpm 7ddfc6d27b97961a02476d7b507018c01ea7d554d068f35f9061b3aa6c00c754 grub2-efi-aa64-modules-2.06-61.el9_2.1.alma.tuxcare.els9.noarch.rpm 622d9e27e3505f3324a40ca94e292d39b806afea7c8ee8336306a2a678d55977 grub2-efi-x64-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm 6b0bfeaff017b8b7edf5521bfb758663af5c42a11f61e498c34c166ec2e8983e grub2-efi-x64-cdboot-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm fb0590f3043e8dc7ca8deff2e3b2ef9bae5f07245f3e3dc38196c9ba7fb28984 grub2-efi-x64-modules-2.06-61.el9_2.1.alma.tuxcare.els9.noarch.rpm 257bbada813101806908d07a3778006b2372cd25d90e4ab56612487efaeecea8 grub2-emu-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm 8db3579628664dc2900d8eeb66ec42336df8e391f8406cf3f072a89ee19c88cc grub2-emu-modules-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm 42ed9f013c8d882d7505571b6d50e4c2ebe0d71d93f3b2e0bb6cbf4aa0d36b7b grub2-pc-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm a78d510b233db325aaf5df812efb0824a9497fa39f6f1fc3c96973088a857c40 grub2-pc-modules-2.06-61.el9_2.1.alma.tuxcare.els9.noarch.rpm 49efa96fab4d447282664bd312cd0cd4a21d9c1bcbbcecf875e2a69e62675a2e grub2-tools-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm 51827201ff5fc3adeb4131c56478ee76e7ec2557eafab0263c28c24a0a4812ad grub2-tools-efi-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm 824de04945647b94e1461b87d555b001a31d40d3a539a89b1470969b0c89d4c4 grub2-tools-extra-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm 9987f3078730e7c1fcf1acc78c32ccb970fad6e093c119370169d2b4bebacf85 grub2-tools-minimal-2.06-61.el9_2.1.alma.tuxcare.els9.x86_64.rpm 80656426105f59f5a7fbe1bde77b541e4337288c5817f69723c111d97a3c73c9 CLSA-2026:1771497630 TuxCare License Agreement 0 - CVE-2025-68618: added recursion depth check in MSL and SVG coders - Check that image exists before we destroy it Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68618: added recursion depth check in MSL and SVG coders - Check that image exists before we destroy it

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els3.x86_64.rpm 2c7fa2331e3c588b77983956bb3ec1eb43eb8195b881355b2b188fa2dec6f9b8 ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els3.x86_64.rpm 7fea205ac91e081f1d9a025ae1101330a686084dea06c28a1897ccd7402117de ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els3.x86_64.rpm d3374bce08670b9ea9d3e1e02f954a98d697124f44d20a99b7084d243ff8739e ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els3.x86_64.rpm d6a2726a06b85f51a9de01d9a49dab00eb81d03180f1a74ae72d9dbf77ad31d4 ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els3.x86_64.rpm 410fb51232b401a1b135fd725a3b4bb6613e584811c3911f58bbce602a4f4892 ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els3.x86_64.rpm 272e6d37161d28276884fcfcd047a1726145adc339231beec8d06ac1fc10f97f ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els3.x86_64.rpm bab54388eeea4a9591d4179d482eacce390c043854a5d971dd7fcfbb4f5126d5 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els3.x86_64.rpm 2accbc9cae0bbd501a59222a296bbfe8d07d1fc6b755229e95a1b67b7cedb639 CLSA-2026:1771501223 TuxCare License Agreement 0 - CVE-2025-15079: fix accepting hosts not present in the specified known_hosts during SSH-based SCP/SFTP transfers when global known_hosts contained them restrict host verification to the specified known_hosts file Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15079: fix accepting hosts not present in the specified known_hosts during SSH-based SCP/SFTP transfers when global known_hosts contained them restrict host verification to the specified known_hosts file

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm 1449165f912d6e5206d50b3a8ebf127e00ab732a337c524ccb6f65a10cb7f551 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm d7059654af8789dd5371a1c0c1fa88c547ba5c503a72727632fd07f8fe950d3e libcurl-7.76.1-31.el9_2.1.tuxcare.els4.i686.rpm e5cfd5d5a3c0ae9b5ea6af45917d410568f85332c2fecc18c902a0c87d49b9bb libcurl-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm 70f6154bc5c5a269245222a081b1b682f220e3560b7a80d02382d99e9b1b50ff libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els4.i686.rpm 7b0e0d834b8fcc2f6e382918ee46ab64c4af1e7918e0fdb6f4cbd102feea0834 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm afd93d7bad684a2c01e7d4a51b73b7460f517ea50d24241555a68b3c3d80ad2f libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els4.i686.rpm bd1907f9a5880ca116831b799be8b225075a46729843d8377a8480857857e1df libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els4.x86_64.rpm 9f740407fa4217402edfc3bd166281609c13813ed2afaf4249a0aca492401a9b CLSA-2026:1771663697 TuxCare License Agreement 0 - CVE-2025-14524: fix OAuth2 bearer token leak on cross-protocol redirect - CVE-2025-15224: fix libssh public-key auth fallback to SSH agent Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14524: fix OAuth2 bearer token leak on cross-protocol redirect - CVE-2025-15224: fix libssh public-key auth fallback to SSH agent

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els5.x86_64.rpm f660ebcf4e0631c27207d6620efd0fc57780f5001829b71dc0fbdf69b5696ed5 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els5.x86_64.rpm 7aa1d6e56fa7b0d9b749a3c6fdc3fc42dea5e86d883edd79293aa7eff1af3678 libcurl-7.76.1-31.el9_2.1.tuxcare.els5.i686.rpm 9791bda3bc1aed8e22408717bbd85c3f307299ea9729c7ddd77f77b01e457b13 libcurl-7.76.1-31.el9_2.1.tuxcare.els5.x86_64.rpm bee094e547abb590663bdae1b5d09922275f811e040b77a0d5925cfea62f6018 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els5.i686.rpm e64ca965eebdb9c19859c241d2a9a2f812d64cd7e455d8b07be3d3be18af7425 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els5.x86_64.rpm 7b05d3908764e08e36cc1d4d714961337f7a09bb49e7f7de7627c2dd9afc7592 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els5.i686.rpm 18963518488a67e1a3bdd06b8b8b9b4c127a4ba7d792e64b4b4b3d14be3e6db4 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els5.x86_64.rpm 8ff3c0bf52499df521cdb7eed71e6a5d9880f1e380bbef222ef271c7dc56740a CLSA-2026:1771665151 TuxCare License Agreement 0 - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els4.x86_64.rpm f017b63aea08cf9c0a2631b6754f949c98f4a91954d214aa23142de27c6b15bf golang-1.22.9-1.el9_2.tuxcare.els4.x86_64.rpm 3a63036adef61d071ee54f48aea3ad990063a07026305a3d4db33ab7f8f6e1fb golang-bin-1.22.9-1.el9_2.tuxcare.els4.x86_64.rpm ab48a04d2a44cc0e66b0166b62b44e3d159b92c722e221bbae2be928fcf35bd9 golang-docs-1.22.9-1.el9_2.tuxcare.els4.noarch.rpm dadfc4ab974e1a569e036bb53a71c532bb58f3e3e4c6369a8033e42ea473297a golang-misc-1.22.9-1.el9_2.tuxcare.els4.noarch.rpm 80205b5f371769fe24b120ed7ca6e6fbef334012d99e1ee1d43224e1d293a2c6 golang-src-1.22.9-1.el9_2.tuxcare.els4.noarch.rpm 1e3d2b692bf34f93e53a6fd7e4cbbe0c79bcc321e9db6f1013224ed149393024 golang-tests-1.22.9-1.el9_2.tuxcare.els4.noarch.rpm 9c3069ebaf4a21e1b85325f1399c4e91843c3f7fa26fc23258419a06bcc0b80a CLSA-2026:1771840259 TuxCare License Agreement 0 - CVE-2026-25646: fix out-of-bounds read and potential heap buffer overflow in png_set_quantize() caused by stale palette indices during color pruning Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25646: fix out-of-bounds read and potential heap buffer overflow in png_set_quantize() caused by stale palette indices during color pruning

0 tuxcare-almalinux9.2-esu libpng-1.6.37-12.el9_2.tuxcare.els6.i686.rpm 607bc5820ebda4e56818b112c320e53b1cb0a2e0359c0afa57d5174e76e0d49e libpng-1.6.37-12.el9_2.tuxcare.els6.x86_64.rpm 0debfd9da77438a0c1683458ac84b71c8a451dca289f9681de61c8ba07f584b2 libpng-devel-1.6.37-12.el9_2.tuxcare.els6.i686.rpm be5003c70cb899d0723b613dd2d5115d316500efa10ba06302c5e2d112f3f1c7 libpng-devel-1.6.37-12.el9_2.tuxcare.els6.x86_64.rpm b5af3229cddabc941784d9d78d9e76f6a33a41a467489ad1535e56743f48fe92 libpng-static-1.6.37-12.el9_2.tuxcare.els6.x86_64.rpm c9f9c613fef3846bd442229a525af7a8243f7d2c70eae4ee761ee4b8f83cc66a libpng-tools-1.6.37-12.el9_2.tuxcare.els6.x86_64.rpm d3bd158cd70c817691a886440a4ca821a6fd9b119bdfb0e9da897704f031046b CLSA-2026:1771951235 TuxCare License Agreement 0 - CVE-2025-68950: fix DOS due to circular references between two MVGs, leading to a stack overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68950: fix DOS due to circular references between two MVGs, leading to a stack overflow

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els4.x86_64.rpm c2bce3e6e47f48791d871a897da7f91f2bea7fccb314142d7afca0175874c4e5 ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els4.x86_64.rpm 1d7332ee28ca9877605351957d00f0e3ae87b871a86e0ea4106be5bdc20ee847 ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els4.x86_64.rpm 2c30c138f33d0375981a6e333756f958495fa4d7fee51f149192a691103fc380 ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els4.x86_64.rpm cff1e794b4ee523fde6a5aac2ea3c66f8d6ac45006bd100b47fa86e247627b4a ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els4.x86_64.rpm 1bdd48bc719cca77303a07ab1579e4880134f4a4aee2ab570a91d63f40c27812 ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els4.x86_64.rpm d656d092f617f79cfcc1686d7064a39d02246489beefeb2c8af107035601d886 ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els4.x86_64.rpm d3933e86f5db86daa909c8b5f9c3b70bd89e0f4eb2c140df427f2897a2d41280 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els4.x86_64.rpm 71d7b314e11e54f9118e3e70403e176261bafa822f63080e2a947391c90513ba CLSA-2026:1771956748 TuxCare License Agreement 0 - CVE-2025-15059: fix PSP file loader to validate channel types for grayscale images, preventing invalid memory access from incorrect offset computation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15059: fix PSP file loader to validate channel types for grayscale images, preventing invalid memory access from incorrect offset computation

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els4.x86_64.rpm 9b7c7a4becadd236fe1bfd2ef75a205a18741761e3f5f228491df004e6687ffd gimp-devel-2.99.8-4.el9.2.tuxcare.els4.x86_64.rpm 8d1850c0e7b43bb425b3a440dc3a90f50c7d977753068fb856642b58af1fcc21 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els4.x86_64.rpm 34b03ce88fb8e22322d085ffd3a8236a498c41d0534f2bdf3211964f475697b0 gimp-libs-2.99.8-4.el9.2.tuxcare.els4.i686.rpm 86c4a2d2040923827bcb53ff419244ce15b5d9769815ddc09009049d9961061c gimp-libs-2.99.8-4.el9.2.tuxcare.els4.x86_64.rpm d0ebbd869fc37a7b356ebed5ca1058dd08eb11bdbf635ddb070026d5eeb4400a CLSA-2026:1772039226 TuxCare License Agreement 0 - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61732: prevent cgo code smuggling by removing user-controlled content from documentation strings in generated ASTs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61732: prevent cgo code smuggling by removing user-controlled content from documentation strings in generated ASTs

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els5.x86_64.rpm 2a83bce81daa8dd4ac283816ef238d297b05f1bb36d7254d48716356a9b0ff97 golang-1.22.9-1.el9_2.tuxcare.els5.x86_64.rpm 1a522ceecd2b4af1c75114d1ea596b6461b133aa16c12af1a7b146026228ce33 golang-bin-1.22.9-1.el9_2.tuxcare.els5.x86_64.rpm f58738b623d66e2cfef11f9f94d6ad6d2d3b4bb4a3fb88fde570d34870d10a1c golang-docs-1.22.9-1.el9_2.tuxcare.els5.noarch.rpm 11c3a6e947c7a61c8c03636d2a15244cd82f0145a4ebf6c94841c45db4a1f93f golang-misc-1.22.9-1.el9_2.tuxcare.els5.noarch.rpm 88a3b7cc473f563d2f296a51c1da91ee86406ccb9c0536bd1661f42f6d1fcf82 golang-src-1.22.9-1.el9_2.tuxcare.els5.noarch.rpm 3ce54b96a76c9b958e65dbf39ced7da4b8d9992641d1f6f7c22b75326ff7d147 golang-tests-1.22.9-1.el9_2.tuxcare.els5.noarch.rpm 7c39fddd50a3c67fe7e7e1acf4307d2b3d5e6587a4bb38bc04c2946483ed4565 CLSA-2026:1772040065 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els5 to fix the following CVE's - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els5 to fix the following CVE's - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs

0 tuxcare-almalinux9.2-esu grafana-pcp-5.1.1-1.el9_2.tuxcare.els2.x86_64.rpm 459da96930db0121b39a130f587445bacb935f93ea39eccac3df8ac5e3d69f40 CLSA-2026:1772041183 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els5 to fix the following CVE's - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els5 to fix the following CVE's - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els12.x86_64.rpm c3c74f4958608d6eec274baba1bc669ca91ba8dbf82f6b87327e94baa7c3726f CLSA-2026:1772110471 TuxCare License Agreement 0 - CVE-2025-14087: Fix integer overflows in GVariant text format parser and escape_byte_string() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14087: Fix integer overflows in GVariant text format parser and escape_byte_string()

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els5.i686.rpm 5d970dbee8c4898a23450be7c782394b36dd6200a4dbac2d35d813c049d352a6 glib2-2.68.4-6.el9.tuxcare.els5.x86_64.rpm 51425e0f385ebebedb6a59018beb8183a279a67d812d8f4e82c55677c6917167 glib2-devel-2.68.4-6.el9.tuxcare.els5.i686.rpm 374e415ba8260192043626292af1d1790ec3e7a362a8c16fc72988f3fd48173c glib2-devel-2.68.4-6.el9.tuxcare.els5.x86_64.rpm e536cf5e7e2286887820c718844b44df086e558c025d0de8926290bd17be1012 glib2-doc-2.68.4-6.el9.tuxcare.els5.noarch.rpm ff8c9a0ae765746a18a2349102db7a7ad14e77f43c58977a3ca2d3ff0bcb4831 glib2-static-2.68.4-6.el9.tuxcare.els5.i686.rpm 3cac7d026f5830ddd1c26abecede5ea58e03989ba78ebdafbfe57a2de9dfeff6 glib2-static-2.68.4-6.el9.tuxcare.els5.x86_64.rpm a2bc2092bf705791baf775a7304b4ee96233fa5878d24fa1334ba08b6b5479fc glib2-tests-2.68.4-6.el9.tuxcare.els5.x86_64.rpm 539c089add337ae2191dfb8ee27d3b4974f52914db9a3138fffe5af8076f5cac CLSA-2026:1772114900 TuxCare License Agreement 0 - CVE-2026-0915: fix leak of stack contents to configured DNS resolver when resolving a zero-valued network via getnetbyaddr/getnetbyaddr_r with DNS NSS backend; sanitize network value and avoid passing uninitialized stack data to resolver Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0915: fix leak of stack contents to configured DNS resolver when resolving a zero-valued network via getnetbyaddr/getnetbyaddr_r with DNS NSS backend; sanitize network value and avoid passing uninitialized stack data to resolver

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 018bf506d861e99ac3b17095cee69a2146da3b0a3a9033659c66b3c9e577135a glibc-2.34-60.el9.7.tuxcare.els7.i686.rpm 10fa30166f05500076e65559faca042de88ee1bbb794a795e0513685bbe88569 glibc-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0b51de40c81b7fb5bed54bd4d6bb80963952d0abf38459cd009a36368d79eba3 glibc-all-langpacks-2.34-60.el9.7.tuxcare.els7.x86_64.rpm df971fe5531bad1cebda2e082927c7593f623503f6e58dfcc4ce96372b087d68 glibc-benchtests-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b35f36ce0a65f2a65fe7d789740143fe1c12b52088eb995747adb7153b5e93f1 glibc-common-2.34-60.el9.7.tuxcare.els7.x86_64.rpm eeecd131b2865adbd172f0fadf6cee1ee4fc43ce105f6464877e91a89521cbec glibc-devel-2.34-60.el9.7.tuxcare.els7.i686.rpm 2d68f5c5764fa55a577b3323268b9f43a76466e3bfcb8ed31b9b7fc8849c6597 glibc-devel-2.34-60.el9.7.tuxcare.els7.x86_64.rpm a362b906b6aaee721603204f563a979382f58bf4236f93395131186cfd6fef98 glibc-doc-2.34-60.el9.7.tuxcare.els7.noarch.rpm fc8034879c3cbb73e92ce7d253238489e7385fd3ef9c6712f5c2d983f6c6ff44 glibc-gconv-extra-2.34-60.el9.7.tuxcare.els7.i686.rpm a933c6ae8198a6531f3c0fa8eabbcb255f7f32646cb000d48febe31458147db2 glibc-gconv-extra-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6a376a0f0a893a91f37ebeaad8026f333ac0ed2bd8900a704f772461f225059e glibc-headers-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 154cba0e7ad8f3e61d8aea78c009911e4bce075f283c67dcf68f6492080ace67 glibc-langpack-aa-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ceaf65e312fbc93fd538fa0e54678e7a90391b4f088e9a972729a9f7ea0cd5d5 glibc-langpack-af-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 314756c386f838be7c5cd83861b1ef16d8c646a45baefc200eae36011a43f816 glibc-langpack-agr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 029f1cee622a480ccd8090d1a49f0b391f65b43d7a2ee6165b9c53cf3c2394bb glibc-langpack-ak-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 39ef595bd98c6606c465ce6e8a56e69edaa74e9b87e68559aa361fce0398a0f3 glibc-langpack-am-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 7a1f6f82960ddd2d6f590737da8b8d2b372a81f769e103baf511259042343f11 glibc-langpack-an-2.34-60.el9.7.tuxcare.els7.x86_64.rpm f9255db2d4df639142cf33e079bb017f2107ae7c131d6f6b742061a1cc55dc00 glibc-langpack-anp-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 1edb67bcec0672a01fe1c5fad7a47e3845c8f8290d87a31a67247c5562dd8d9c glibc-langpack-ar-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 01f4bcf83248847b9afc36d4cefa0d6e6174b2ad2497a0ef136d516cfcc4e2f2 glibc-langpack-as-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5d87afea7a4f63771e858ef8ac3e5044abdaa1f791a1e5067651a29e1f114d8c glibc-langpack-ast-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4078337bc74a55ceab87752f833f3d5d42123c98cd1623528a864d52ce1f9997 glibc-langpack-ayc-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 3b54ce18dbef34d4422519d5008fca0c725bc8b5d21b9c72e18b2d2238689896 glibc-langpack-az-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 9140b04318353f69449a238c506259b67d642dced0fcc1f063cdf793e3eb02ec glibc-langpack-be-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 3310e8b9bfb2ddce0512cb9d4817735abc5e276aa7dc923075157d6a6bb6f9af glibc-langpack-bem-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 19db92f927d260eee0804ee824a052f0ab1b9bbf49664c18f6a1efc20df96c7d glibc-langpack-ber-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6d03b3fd5b1010a2c9e416acb0dd140179752a5ccb2e892f234c1168392cf551 glibc-langpack-bg-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c55fb3db69798a5bda3b8a6a651b3fa2bda0b193f910a866a34142abe9accf95 glibc-langpack-bhb-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c3e67ef1c03b89a1cbcd4cde6cb8007e469519042f11585366969d30298659e2 glibc-langpack-bho-2.34-60.el9.7.tuxcare.els7.x86_64.rpm dd44e729b5b103b84727f8dbaa7d5061c0479d992348d1935cd6e755585ca483 glibc-langpack-bi-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 53f746c108eccf996a6a56e15a16d2f5f59578f0f99e6aee729d9d8d59fcbe17 glibc-langpack-bn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm a866e2573bcf0962df9f6d14c084fb58eec8e80d83b6fb43444bc27201c6da10 glibc-langpack-bo-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ba76c131bc6a68c070acacd05ee4b1f5e211f84efe3564406b4306f1c4332ba7 glibc-langpack-br-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 163419f135c3c7fb4247ea258748192cd132a547c6a6eb6d18abdffdef502dd0 glibc-langpack-brx-2.34-60.el9.7.tuxcare.els7.x86_64.rpm a4d139cde6428fe5c32ed6721f23347d47283aaa47a1bcde05566d7c5e3fedcd glibc-langpack-bs-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 2e64604ae583a82fe551ea2e617195f812b7790d809ede8228d9e0caaf39f6a7 glibc-langpack-byn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 9182f4470924a52438a2e53932cd707e3af4cc5fed49f6c5b4d44a4d0c1cb2c6 glibc-langpack-ca-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 119f4cba4a8097df394925f1d7932d5922712c705db8f03a5f77a9523c2d9e96 glibc-langpack-ce-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0aec3d84c2e275a9530e72445896869049a31936eb8e50fadc4b228b58ce5740 glibc-langpack-chr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0cc78e5fced0df865e6a300a58d389e28c12ae083e2e5d4752cfc2fb9b099fac glibc-langpack-ckb-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 71f6ec11a0370ae395f7cf8236f4c500859856bb95f87783035e40a1c628b271 glibc-langpack-cmn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c76f983936db5c2e8bbee706dec98c3b9de33a99cdcc433c7f60787ebcb7ed31 glibc-langpack-crh-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 40f6acf9c87ebb527a24325e0ab6944800c10ccad01a8a43e9ea8862c69dc418 glibc-langpack-cs-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6409503eb2f5e3c027d9f55415729e38f442b00d3271013c2a9cb08378af7400 glibc-langpack-csb-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0dfe1f6e5f6961c1b000551c66097fe8ea7076530fb5830f69037f720499e63e glibc-langpack-cv-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 96db13f0c7e0c594bef895438999891cc9d96e545ea1cb6ea338ffbdcdc938c6 glibc-langpack-cy-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 695c2da0cae1b51a461f3432411012d1c6ce23ec7e4f5d5e716f915bb8d18b65 glibc-langpack-da-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c42b201e509f01d2480c3c8a31a48f9f8e3fce8805dda05a50e84102b5d83918 glibc-langpack-de-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 12ab6c92bd4f0546c998c32e6ce9b1af610e4bfdb246d4e3948ac1ca631dacc2 glibc-langpack-doi-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 947f11ca349dc68752f1d3d2118f9c5067ee56e6019b4bcd13d7f416f34f3b48 glibc-langpack-dsb-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 48a91339d481c3529af1c17d0a6c3b4bba2817d6dcc9f23bb3eab124086d6999 glibc-langpack-dv-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c3e7eba290e3bfa4e2bec0210c7c79a09520241abe152b59caac54a6535c6af6 glibc-langpack-dz-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c129b4e5ed86d1568d20d6e3a5f40e4cc8492207f82bb7a26f1237edd1bfecfe glibc-langpack-el-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ad2106fe22ffa36ce0af94717359853996396e31c800776d0bc1f40e7b3b1fb3 glibc-langpack-en-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 2a2f9d84f144a6c73a227c8db465445a7f810742d1fbf747b3866bc885bbdb26 glibc-langpack-eo-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ad648528b773c6fde221616c3ccc0493f69d854123f88aa2e1221aa234ccbef3 glibc-langpack-es-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 9fa0545a6ddda39da47b826c900cf6d07dff478101682bfdc89d0dac213bc148 glibc-langpack-et-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 9815d20d3dbd44b3c3c8e02e688d64cc44cffffbee7a3cc94c7e702953a6935c glibc-langpack-eu-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c828dce2c13658429e3c7a38250f85f29273cf56027a217bb2d131c8109681a5 glibc-langpack-fa-2.34-60.el9.7.tuxcare.els7.x86_64.rpm eb8bbb6f6519cb122b8755ed6096bbb42c523374a5f61c2c87864462c9bfc095 glibc-langpack-ff-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 1f97261f8826c4bb7eb12df5ea75d6e6fe0a5367a594893972be6b1071fff1ad glibc-langpack-fi-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 500612dc9f3e073b828fd3c1cda428fa8d9a8f89aaedbd4d3e8df910aacc4e8d glibc-langpack-fil-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b25de6cbc721986f3026ff7d48b1af4028115d4b33fa92bb4308574bde699995 glibc-langpack-fo-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 8a8840d96f98a8d862af2507b7e3b5be64e07b0362dc6bb8ab184fdf37ec56e5 glibc-langpack-fr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c84c6ed37b60c42bacd6e915f114f56c9297f951d428667097052f20292a876f glibc-langpack-fur-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 2e810ef53a2d8b699e731c226cd9308fc2ce690a85ae935cd04865d58f0d00ea glibc-langpack-fy-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b3557fdc1745fcc25862d47df96e609b9fceb620227745c3d02176d7ab9405b9 glibc-langpack-ga-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 1b9ab27dd8d2d71eeb96bd3d7b43f3c1480a9dd49f4c241c32adb3a8b2cd5190 glibc-langpack-gd-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b0a85cac7eddc9ef24867a694bfc723483d4454bbca8d32b39a188c99752c3cd glibc-langpack-gez-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 07a3dffee0700ade54359f33a6c5d3d7316cf1162034ac611b0b004b56d76b4a glibc-langpack-gl-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 847f4ec84a86b0159e488cd486529c087199334396f204a04ed01c8cde9f5f69 glibc-langpack-gu-2.34-60.el9.7.tuxcare.els7.x86_64.rpm d1aab491d016d105cddfaecbbf10f1ea08b3331d9a5c6cf3fe89d6fd3e53fe85 glibc-langpack-gv-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4f46c4d100a87dd4c56f4a7123d7e842d6324149623cb82d170104cec25c9d9e glibc-langpack-ha-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5932f7a91fffada268605ef5621a558e409f62ad36c50106794a0dfa68823c6b glibc-langpack-hak-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b0f5f8f9a2c145d24fa70c116427df57efc3bb5b44ecc570110eb2c13b613b44 glibc-langpack-he-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5c6bd18ea0d6be943dc991285170a05033918be42c3abd5a4a0d14d0541d4c4c glibc-langpack-hi-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 2f0643052553e3f5b3471620b1666ddb145920c2dbf7ae7301aad80ca0e20e4f glibc-langpack-hif-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 043a8af6116748cd9f859222abdffc2ea2a3e2ff8db06c8621e8d423c572a163 glibc-langpack-hne-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 239e8f85fb4d46b6a6e60bf98d4eedf18792afa6ea94bb85ebc8411e16f262c1 glibc-langpack-hr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm d482d6f0a271ebe6432ee17b7d181f60ca2a24f9ae2cdb43f9e8cfd4f220ea80 glibc-langpack-hsb-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 2de630c54dc90f2a27b44e32a952912af32f2c010f69d810112fee3c0810b071 glibc-langpack-ht-2.34-60.el9.7.tuxcare.els7.x86_64.rpm bcc0dfb28f9aad00008d4907f14ac41756efde48ddd8e20abd611f84220a15c2 glibc-langpack-hu-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 31ae020a2340f98aa676c71f6ce252695f5152c4974fd14e03d0c6c3a968417d glibc-langpack-hy-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 005d38e8e0845449fb03d22193386e6cb20e8d20d428a36607db721eaa0ff4b9 glibc-langpack-ia-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 46ef2aa53a12325a644bb2d9f8e91d10a313a2d76be24ce6f8bc1b75c8126aa9 glibc-langpack-id-2.34-60.el9.7.tuxcare.els7.x86_64.rpm e0a9c3bdfd5868cef9506fa69f574957c524c019cc25e969ac010f6268474cd3 glibc-langpack-ig-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 90fd6f8ef57ab483945b54347ed1ab9486de64d369162ea5d1d01666b3fc8431 glibc-langpack-ik-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 8042c06fada37e06399c472369a5d5be1613f4a74cc632a2adf80cf275e3cf0d glibc-langpack-is-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b6b9d4e187c7100316b50e0f6571fb01d984a2629f6cc7cf9ad14eeb241f2944 glibc-langpack-it-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6e91a778feb0425f31cea1afd80a93e2a1802fbbaffaf1eb6cf566f7ffc0e71b glibc-langpack-iu-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c6ae7828b3a4946914c3a49a545d8ca65609b94267debb6ff52556aab85c2e69 glibc-langpack-ja-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 8c4a93d3aeab451a52f2e3d3dcb7f5b01b8304dfdfceeafafc0c5d885269b129 glibc-langpack-ka-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0a284561ad854838933bb0364984b9ac7d0238d158da312b737e8dc58c801470 glibc-langpack-kab-2.34-60.el9.7.tuxcare.els7.x86_64.rpm f5680b080d4d889606360312ad6c6f530fd6d9aa3995b49775ac5cae90957a23 glibc-langpack-kk-2.34-60.el9.7.tuxcare.els7.x86_64.rpm a5b746ac41c7ba2396993e488ad10c538371cb2261eace642d3499445c59e575 glibc-langpack-kl-2.34-60.el9.7.tuxcare.els7.x86_64.rpm af1d27b5666588ba1617b8ca06f84c2c476af35c94a2c384ebbf028d8677e50c glibc-langpack-km-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ff5a02c4a2318600532d163fd59e56b0f20517d26aef6f8bcc1a476a4daa328a glibc-langpack-kn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 52b5f9c0a21482a1572f563f3a1a2251b71e8355090f330fb360364d39227a5f glibc-langpack-ko-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 41eae92a28ddb72c8a31e675abee7e97554e181c0f0b99fab1d213e874cc56e1 glibc-langpack-kok-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 8830c2331596631cf83057f07ef2e7f8de39b39cf7df518cd974144ef59f755a glibc-langpack-ks-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0dbbefb076cd3c399953078c117a68371cde0ab75ef8b5fb4e1c956ee972915c glibc-langpack-ku-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 1aa98428f2f35b4714e50926b32491d327e0de66a0983fb194c1e7c041b056a5 glibc-langpack-kw-2.34-60.el9.7.tuxcare.els7.x86_64.rpm f6b69cadc077ead2c12f38022c79ca6e599c8e7e6cc187288bacb0df2dbeca2e glibc-langpack-ky-2.34-60.el9.7.tuxcare.els7.x86_64.rpm e9ff62a6d1f9fcb06b5aabf993acdba1d6768bd78a38e0ae827f57fd352821e9 glibc-langpack-lb-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 727e6994d44f22fa8bcf8b6950a9237c9aa6ca12bcc449f7920c527df71daa95 glibc-langpack-lg-2.34-60.el9.7.tuxcare.els7.x86_64.rpm be779db9e2ce7939dcd560390819d41d4cc22dcc1c01167de7c1ff7842ee6bd0 glibc-langpack-li-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ecbf24ee7d6fe0cb6eea9f6a7097ec3a4c9c8883822780de899955d86ee59691 glibc-langpack-lij-2.34-60.el9.7.tuxcare.els7.x86_64.rpm a9ce4f8e7b182702ec6131fa7320c74df2bdcf928c8acac3731746b2d0b59d87 glibc-langpack-ln-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6cdd56cf8b9950d8abfe29fcb9e472173ac665b4367197bcf624e5ead1b767aa glibc-langpack-lo-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 67500892fb1f739a7577da0150bb9d7470685bb88c1515f5dffc58e3f875fcb3 glibc-langpack-lt-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0451a9d80d6492493d983c2cd8db2180be8a885bc25dc804d0cc036c4dfd494b glibc-langpack-lv-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 87aa44f87ae67af5aaa83234fb5fc318c1266809012bde200f96378b6784ede1 glibc-langpack-lzh-2.34-60.el9.7.tuxcare.els7.x86_64.rpm d6db34f9bab428ee9a35e9d6277ae2e87085f20214f08048d478c9f0614ae1c6 glibc-langpack-mag-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 08e804c21e927ca40a7bdcff67b59d41330c6d513043751a78c26990be7c78f0 glibc-langpack-mai-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ff97cf887355e6770dc156f36b94bf407e001e1265c7e3c8cea52e6dadda6436 glibc-langpack-mfe-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 835407c1fcb5017636334fad80848833202cd80e059d75be0bce48a60d3d2eb4 glibc-langpack-mg-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 35a7bd0e2b8b60809dfc054d43af2e4736808e2c77f3b186b67638f1e62f2236 glibc-langpack-mhr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 7fb6d7a551646cf37497fc8fd717b7ab10cb875e016997daa7f02e9d921d9bb0 glibc-langpack-mi-2.34-60.el9.7.tuxcare.els7.x86_64.rpm e15d4dca2f427d4d4b689c89be6a0c5881f0446f0887a1f5b2e8819ca4121b3e glibc-langpack-miq-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 55c81bd9e792803f5085c82bac868d81a70c4f493326c19c79d3b3b6c3d8c766 glibc-langpack-mjw-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 23db5136de73e169fc6a823e80776ccc7091f0155ef783dfc8a9aef081b75d40 glibc-langpack-mk-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4b0f0a629ff7115bf3915a77b049364fc7e97239d6f98f8e379bb0b1a3d6d225 glibc-langpack-ml-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 98469afa78c7f7630538274231f0cbfc967e5cac8e99a0d7cb31cc1a4b7428e3 glibc-langpack-mn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 98b562546e9b753821f7bfc8146313e10e4abb68443006eaa34175f23340970f glibc-langpack-mni-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 19713e4e2c1cd820ded97bc02384d087310c8c6ef73a49a75f035b033a413fd6 glibc-langpack-mnw-2.34-60.el9.7.tuxcare.els7.x86_64.rpm eb98b6bdd69ee9c25f3ecfe188249b0ba7f45a554aed6d20f306fb5faacb9f9d glibc-langpack-mr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0bfad5ad25b6f2a4b0b74387978b0240a32526ebc0a01a5914641bbdf30ff7d8 glibc-langpack-ms-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 71a57160dd721080a74259cab0c15c7dbe719b6a7a908508c8f9f197d43b169c glibc-langpack-mt-2.34-60.el9.7.tuxcare.els7.x86_64.rpm cc6bec46696bf35c8421727d700a5a14b36196a2d12da8d891a2962b5f76cb72 glibc-langpack-my-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c6e1ee160188021f20d1f61fcf78cb9d2f163b87dc39d7b93b54ba079040c660 glibc-langpack-nan-2.34-60.el9.7.tuxcare.els7.x86_64.rpm fedefc6e7796e0db31e5f39ac9837c133906e0e596a0e73df7c3ebd008e4aab2 glibc-langpack-nb-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 8272ea422f25d4b03ec7523c5d4902c0c420334629d4a6fa369109108ab6676b glibc-langpack-nds-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 05e90eb82281e3299e2b0d5138b33b425990e147794d18652360a68b19e0d32f glibc-langpack-ne-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 9445f11020cbe6864b021dab74a02269a0d82518f16fa951b1e34b5e42e9d37b glibc-langpack-nhn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 40b29d16a8699eb24d23195f1203e3e014d0460ee6522579385c41ac71ea165c glibc-langpack-niu-2.34-60.el9.7.tuxcare.els7.x86_64.rpm e4fd98ebabdb59ad20a4318a8bc896f79f8d963d4de47a16bb1ec987ed435c66 glibc-langpack-nl-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 8888218890dabc63488c0473ecd400009cb5d04786fa6244d0699da9697c5778 glibc-langpack-nn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm da1cf1f19a2ef7bb3dc91bcadc16518c15f3b794e0db5df46cda7144495f9281 glibc-langpack-nr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 2c5c60d3545161592de578c6e9c6f87f862f8db91374ef3c152361a10397a78e glibc-langpack-nso-2.34-60.el9.7.tuxcare.els7.x86_64.rpm f6e2547454eba2ff987616c5eca10170858730d960aaefb0c073895de958b4c4 glibc-langpack-oc-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 3c5d57d41287c875019d94921d8575fa5ee4af1a3b2250ae61d72a27efd1dfe8 glibc-langpack-om-2.34-60.el9.7.tuxcare.els7.x86_64.rpm a327dbf8204e1422b820cba1cb9b490e9f5b22048f78056fcf27a1bfba518858 glibc-langpack-or-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 9bf8d4c8ec8f624dbd99466f0b0b79fc9540e7ed7fba5fce05628ebf27781d99 glibc-langpack-os-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 1908cc74848bf8cc6df435211f900d2b6053b6072182f5c38acb6680f33ab00f glibc-langpack-pa-2.34-60.el9.7.tuxcare.els7.x86_64.rpm e3b079eab215a9dce7d434542e21107d6426b23a75e97b06919df55c81bd84bb glibc-langpack-pap-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 460ceffa41f405385db20f535250edca4b4e19bd2f115ecb3552f78efd09c800 glibc-langpack-pl-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 27caedf1e1a21ef552f72ae9186ccfea037cd00dd50a7282096fee269bf5f5a7 glibc-langpack-ps-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6fc8a78e9e9dc8328f9daaa023ded85724deb9f793f826d1c5e7b90464b2c7db glibc-langpack-pt-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4d94aa174a9c3c4af1ec227bf16c1004a5d6d6fea2aef5a9bd9c46018da8fcc3 glibc-langpack-quz-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 3b03a627bdab214e8e05a977e23571905c1ffe02b848df803b36342cae33ed25 glibc-langpack-raj-2.34-60.el9.7.tuxcare.els7.x86_64.rpm e1599efcff090a7332b830fbc6d206113fee31e5f69dc024073eaf1c303419f4 glibc-langpack-ro-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b065aeb54ad6c8b9ea9152f1d044474e29e6e828b0113f6dafb7059dea1e3ba3 glibc-langpack-ru-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ae978103baafe2ca1d81c4ffd0a1d9e316bc1655fe8e865b1e6032dccb2c43f5 glibc-langpack-rw-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 9038e5355e17da74ff3c5a4e471070454b7a12328c682dd7da9d83352a60626c glibc-langpack-sa-2.34-60.el9.7.tuxcare.els7.x86_64.rpm e22b22f863708fd5ee5488fe3b25eed685f54724ab75f81770598243caab7cb5 glibc-langpack-sah-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 681b9b7b1bec1b0fc00051f7d5098c0f9c128ff6190007870f20e89c64b075de glibc-langpack-sat-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c576b5965886314b46cd317ac529d8b1d2b9f631dbff4f190f61c1e7db3d2805 glibc-langpack-sc-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0d705f59a612c55bc35101014f8d9bc80930d684ee0f736dfa222d7b73590475 glibc-langpack-sd-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b105e99817298810e521c2d22231792c8114e8c539b1cdfe2408795e69bf3a42 glibc-langpack-se-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 0b0f755125074c45294f2dfd88a7c40554e509a2c06c712570afb7338c40bd26 glibc-langpack-sgs-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 8e12b477b96d1a8edda57f0e82abde7276d5ef79b737a8f7b8e55c01a060d36a glibc-langpack-shn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4b61a83c8acb2f2ab77408428d1f94f24b8bf804b76b69bb9202f1a4f10bfef4 glibc-langpack-shs-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4171cfb8cbb6d30a5a08d74f8d2cd9f4861121e413b459bc61cda93781df0df5 glibc-langpack-si-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 1c96acfd462a3dd3f54a106aed57557248a4c3b06773e3203eb9848169fe08d7 glibc-langpack-sid-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 57b7f588c8577cadbaeb52d49e7fdf63ad1085670c0196a3bef38b22fc58c18e glibc-langpack-sk-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 71d52c5de5be3ab82d8341b513a0a57fd6b4d92c18eecdcdcd47bfff81f18596 glibc-langpack-sl-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ba106799a76d0e8fee2249f4ed326a54b72c5226dcfcfafa7aee45fe3325e120 glibc-langpack-sm-2.34-60.el9.7.tuxcare.els7.x86_64.rpm ace4786206b8a94a31214bac9864d279748394e4484fe03fd82483b42287c655 glibc-langpack-so-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 73c21e5ecda536eb2e6568cf2c7caf3e0e43c6392efc757a7173fa3df3738dba glibc-langpack-sq-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4de455281534338f1f0454bc6e2f9df17a1e9f4a6a71273c48fbb8716b41cd84 glibc-langpack-sr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 96a0e97f14d70491e775119fbbebbeddbbe7ba24ccb0d35da65d607b9598aef3 glibc-langpack-ss-2.34-60.el9.7.tuxcare.els7.x86_64.rpm a8b9403440a9eb4de9125a6b114b69c183808d3a7a2d823a583ce176096fe586 glibc-langpack-st-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6656bd8fd145db3b9315a085f97918d4a0744bc0c06e2ebfb9f50701f9efd1b2 glibc-langpack-sv-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 83a68348d5c02dd60aaebbf60c859fefeb3ff07f13116039c6f28baf7b3e9108 glibc-langpack-sw-2.34-60.el9.7.tuxcare.els7.x86_64.rpm f21f1400dcdbe40dc65875de791777045f222596a01a42e6435c42f01c175216 glibc-langpack-szl-2.34-60.el9.7.tuxcare.els7.x86_64.rpm d9acb92cd0ef71dc0362d0723d9c2f291f281e3cbd287b32dae58013c378cf68 glibc-langpack-ta-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5c62ace89362890ace3d9fe02d520a3527eb47d9589705dcbabfd2eaeff2f5ef glibc-langpack-tcy-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6c07f5917028599cb75588db91ee9c5b9da4d8e7a11cbf5c4282cca157988c5e glibc-langpack-te-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5a30d161103f0ff375603db7f835ad2859e5f891934f796f5f9856022737003c glibc-langpack-tg-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 937c318705526fd81ddb72b06acc6b44487a73a26fa9f00b4049109d57a88072 glibc-langpack-th-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 7a870b212a3f0e40d1a33186d1d103cac929a6b5de225fa0f44e5b43a1026a21 glibc-langpack-the-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4643186b49c2d886d506fb77b745f1ed4a3875fe1f98d9de3dd33a75702c43d4 glibc-langpack-ti-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5c345ddeb173bb01b52a307e9024fc5452103eded3143218e86ec608164fd979 glibc-langpack-tig-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 096ce2ca38ef7a5be58d25a85efc914ed883038fd7ea693e8e52211207a8ad25 glibc-langpack-tk-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 7e1f3639080ea87c876cee79dc1eb9c1329895e1ef3864200fa3325de381ef38 glibc-langpack-tl-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 39be304f1596729a844f769958ef24530dd7cdae715b8ea6b031aa53f9b2bd85 glibc-langpack-tn-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 65944b1bfbee5b96fdae038ec7c43618ce4a41bbb27fd7ecffe319a96123a97d glibc-langpack-to-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 9fd5138190a27f8d2932baa01d59025cfcb0da0becd062e775dc74ec179b2c14 glibc-langpack-tpi-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 76cbc8d0031dbfeb1680397ff2664d85d388129d585f1a4f5afd3fd96889393b glibc-langpack-tr-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 45478c8b77077bb3d352113cc69514faae1ca54c9bab64a9ea02abad999fac24 glibc-langpack-ts-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5ec6af84c20f81c6e1a6be146c6b27cca5a27721fbd969c86862f9fa3b0fc041 glibc-langpack-tt-2.34-60.el9.7.tuxcare.els7.x86_64.rpm bd6b1c88dc4ac5fce2fca9d93cfb7ee55630e8e833de80bab087db17f54f78ac glibc-langpack-ug-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 3c3fa9b0c274b2aba525f2cf3e968df78b57f3252943e173b17a80c1bbc10e1a glibc-langpack-uk-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 818a107f80899b4ccd77bc41c7cbcb34e3de932d4fa26e07b81e9367ccf47d9b glibc-langpack-unm-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6ae32abee01362d1805010e42b9e11321a12fb5bd1620411f7e06a88a0812332 glibc-langpack-ur-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5acbe44a9846568a5a2dff5a50740ef4bcdceeb446191147de14afa72dcd8e30 glibc-langpack-uz-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5456e3e32cda415301d737771bf267cf6fabad0e5a2cf8f6fb6c2f1372390bd5 glibc-langpack-ve-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 54c4caf05734ae049ede45a3202c90c70673a0eaf940be9a75b354bfde41f0fd glibc-langpack-vi-2.34-60.el9.7.tuxcare.els7.x86_64.rpm b46085f887ad8651d833171fe22f2cf3934983cb0bd3c5a0bb101b5a1c1585a8 glibc-langpack-wa-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 82e5e99c11887560b1f95ad1c03948e80362aa34652813d0ac61e9c5ea8027d1 glibc-langpack-wae-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 6364fb7649e3314a0265f08d136e8efdfc417c98157be82c28fa7badfd5b554e glibc-langpack-wal-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 4925a4bccd1edeb395166c2c7e0c24aaa19f0b8e16a28085e45fff372843e07f glibc-langpack-wo-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 2f32d3564eb219290abcb300e792b3bab46b42f7e5980eb06bf25aac305b1881 glibc-langpack-xh-2.34-60.el9.7.tuxcare.els7.x86_64.rpm c577677c9f5ff9e3051497c3c28e0c5aa131a705790da6bdec0520f10424d5df glibc-langpack-yi-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 2888d2df5ab1694e5c76213d5a54b63e83abe2d2ee79a65f80320ea059e310df glibc-langpack-yo-2.34-60.el9.7.tuxcare.els7.x86_64.rpm be5eb9aca4ea030b4f70f49ee64ff7b7ed2586a07121222768f129b4203e864a glibc-langpack-yue-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 1672e36fe725eb361ed335d924d5ea75b0ca63cf993fb82fa51e6572e62754ef glibc-langpack-yuw-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 1c0e993fd3f6721b9d7952933250274984aea743e5613d7a6c0b8035227edd3e glibc-langpack-zh-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 8189562e7dccbb9445de6d90c56bb0e9911868daa5b47ed31c5e4366d0eba790 glibc-langpack-zu-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 18386df9abcd27826aca11d46063ec66e282e3516be6eb5f452da7c12337a070 glibc-locale-source-2.34-60.el9.7.tuxcare.els7.x86_64.rpm d46ee6a8e6f9d17ccc445564b8160835cba9de622d9ccedba1139fbfc6ebe3a1 glibc-minimal-langpack-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 777430c4065d3958cc01dab06de1c6a4c1fd0675678818ae39f0560ef9f569ee glibc-nss-devel-2.34-60.el9.7.tuxcare.els7.i686.rpm f25c2b06d799cc4a7cd2febc8ddc88997caa14954c3727f6ac12ef6b711b31bb glibc-nss-devel-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 3bf4593998bcff52e7a6b8715e93013429c0a30ff9c6996c1e950745fc954994 glibc-static-2.34-60.el9.7.tuxcare.els7.i686.rpm 957756489014e84736a03896cd3da51aa095675da778b0596d09af78bb97f42f glibc-static-2.34-60.el9.7.tuxcare.els7.x86_64.rpm f1a371283a0add12bad2ef69dbcec51fe3fd2c507faa95fce960c3b53cbd15bc glibc-utils-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 3b974ca5cba9b23b26012ce0852d0458280fa903636868d4f20d2651595ed4a4 libnsl-2.34-60.el9.7.tuxcare.els7.i686.rpm 1736f2204d028ce89e0e7a4efa4c9e29a8cc2ba1e550bc8c812e9f68e0874526 libnsl-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 3b76afbc849a60623bbed760f8f665c596b97786305aa4cbe4a7ceb399e15d84 nscd-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 23f4047d061dbd3eb35b05fa8c1817d2cf5c54e0b0615f1f0fdcc03849914fcd nss_db-2.34-60.el9.7.tuxcare.els7.i686.rpm dc319ac35cbe63635d6853608bcfa21eee69a264603b5fe43312362a6daaa212 nss_db-2.34-60.el9.7.tuxcare.els7.x86_64.rpm 5bedb472f32dc7c27d5642ec8dec54dfa4c7a5c910c8703b1c19e0bd859766a3 nss_hesiod-2.34-60.el9.7.tuxcare.els7.i686.rpm 737e90630657f2c14302edde9039aad37e0dc1f0096f465872939c6e6cab46d1 nss_hesiod-2.34-60.el9.7.tuxcare.els7.x86_64.rpm fc9d505be5a7852dfd1821fe9a26002cd450868a1e0fffbe964d710c70864d89 sysroot-aarch64-el9-glibc-2.34-60.el9.7.tuxcare.els7.noarch.rpm 524806d21523e2c89cc3e27fa15238029d05f7b22d5256daa26740c50e8689e2 sysroot-i386-el9-glibc-2.34-60.el9.7.tuxcare.els7.noarch.rpm a0ceeeb8a7626c653743394704e823b7552b3ff1c51ec538a7088132cf1191f5 sysroot-x86_64-el9-glibc-2.34-60.el9.7.tuxcare.els7.noarch.rpm 8828b4f162161340ca1d4e5f289c9e1e519046319525b0f21660338fa080265e CLSA-2026:1772123920 TuxCare License Agreement 0 - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els6.x86_64.rpm 2bd5d9a3b4d90edd555484abfe52b68c92a94b0bac589f464572926c3bec6196 golang-1.22.9-1.el9_2.tuxcare.els6.x86_64.rpm 45a7a394f111de9e5f15f2b74a938193615346094caad3a7a9cbb4ad6f595310 golang-bin-1.22.9-1.el9_2.tuxcare.els6.x86_64.rpm 80ccffe96b1ea40b0a4e9c3cf3cf8d016d73becc45e26e531e1390ce71a2c1e8 golang-docs-1.22.9-1.el9_2.tuxcare.els6.noarch.rpm 49a81c4a9b314bc254f011ffe5f123a7c63ffea26d0380942e397f65ed1ad6b0 golang-misc-1.22.9-1.el9_2.tuxcare.els6.noarch.rpm c3f16e866761cee0daad5f7e0e9b8df698bb5c02c9ef97cc4c66f1fcbae0f7ba golang-src-1.22.9-1.el9_2.tuxcare.els6.noarch.rpm 363eb7d6209e7b501524e8b2c55434739750b967a290961403b379474d38ebd3 golang-tests-1.22.9-1.el9_2.tuxcare.els6.noarch.rpm f6ba951e8bd93dcc305b2d4fe4b37d73507e39e180e1369d38f863e9645d626c CLSA-2026:1772449504 TuxCare License Agreement 0 - CVE-2026-25646: fix heap buffer overflow in png_set_quantize caused by stale palette indices in the color distance hash table Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25646: fix heap buffer overflow in png_set_quantize caused by stale palette indices in the color distance hash table

0 tuxcare-almalinux9.2-esu libpng15-1.5.30-14.el9.tuxcare.els1.i686.rpm 0527c3a226d82df1553b7e534bdf33eff6834f8d06d344940f6da63617137585 libpng15-1.5.30-14.el9.tuxcare.els1.x86_64.rpm 0f9cb5240ac05ddbbc0e07dc89089327358744c90f098b4276477e292fe89f78 CLSA-2026:1772453362 TuxCare License Agreement 0 - CVE-2026-0994: recursion depth bypass in json_format.ParseDict Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0994: recursion depth bypass in json_format.ParseDict

0 tuxcare-almalinux9.2-esu protobuf-3.14.0-16.el9.tuxcare.els2.i686.rpm 8c6408dfa72adfe8c81328d322e324f264c916739b2f45733753494f6be6fd76 protobuf-3.14.0-16.el9.tuxcare.els2.x86_64.rpm 9bff4338b20d8d0adbcfd5ddd084996a4f738b0b77abd3861ce2147cc60fe8d5 protobuf-compiler-3.14.0-16.el9.tuxcare.els2.i686.rpm e659eb11984cd8f2cbf14ef7c8bd7c3f1b3119e32800cd3cd1c82befa6c77411 protobuf-compiler-3.14.0-16.el9.tuxcare.els2.x86_64.rpm 080fec20cfd583a7796b2c8a527e07c8a66b38d967e98d1d08dfcdf79ac99b5c protobuf-devel-3.14.0-16.el9.tuxcare.els2.i686.rpm 379a72a19a47dd99739ddab22cef3671d0fdb1f9fe70f419c6707e7a1ef8e4f3 protobuf-devel-3.14.0-16.el9.tuxcare.els2.x86_64.rpm 270007fde9b496596a7d76b4477910c3a7b2fe34ad877a8143ebb6dcea18ba76 protobuf-emacs-3.14.0-16.el9.tuxcare.els2.noarch.rpm 21abc590a7ee213c6bf759e86e3703fef5175e90fb8edbd593dc3121b1d15e66 protobuf-lite-3.14.0-16.el9.tuxcare.els2.i686.rpm 5e13d0bd9959de40f88c83cfed61bf30493e2d1556581d61175bf5791129a097 protobuf-lite-3.14.0-16.el9.tuxcare.els2.x86_64.rpm dee4f1a703f94edb0d359ba2c7c9b0f6b4f66d8ac52250a764cb63aa794990d7 protobuf-lite-devel-3.14.0-16.el9.tuxcare.els2.i686.rpm 800c6a64132541989fb2004095bdb1c87b9c7939cdf4acd542bda548f217e747 protobuf-lite-devel-3.14.0-16.el9.tuxcare.els2.x86_64.rpm 8bfce79236b7982e6801e0f7411f0569ecb5d1684d0c562d105108ea80b06b2b protobuf-lite-static-3.14.0-16.el9.tuxcare.els2.x86_64.rpm 9265a722762acb461bb4d83fb2bafecdd198fd4be07bed3157c7713d385f4fe2 protobuf-static-3.14.0-16.el9.tuxcare.els2.x86_64.rpm f6d57c83e25e5dbc5a24141f44c26cd98ba9afdf2aed8a5dd8148deb329b4ed0 protobuf-vim-3.14.0-16.el9.tuxcare.els2.noarch.rpm eb7304a0321818646c7677c8c85d4d75e6406dc3ec81f0fa064905d38061ccc4 python3-protobuf-3.14.0-16.el9.tuxcare.els2.noarch.rpm 75bb31938e3d2709b949f8c29175d9acbfe5027f49cc6c8731490d284a1978dd CLSA-2026:1772455449 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs

0 tuxcare-almalinux9.2-esu buildah-1.39.6-1.el9_2.tuxcare.els5.x86_64.rpm 0d3521e774c6c5bc27fe5b582debb6ef423c032ac5649a95f7931ff734c215a5 buildah-tests-1.39.6-1.el9_2.tuxcare.els5.x86_64.rpm 8dfbb7483050817afde6e707b7a13034cf828f06cd2513221851679fb3bde3b3 CLSA-2026:1772456031 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs

0 tuxcare-almalinux9.2-esu runc-1.2.8-1.el9_1.tuxcare.els2.x86_64.rpm e36122fdf114d7b4b70eb89e6d681113d8589709e23605ee39f4fec7663cbbff CLSA-2026:1772456640 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els11.x86_64.rpm 19f6158dc9c43d06f9b3c4b034aa3f187836b6507f7062a7890778d2a3259d21 podman-docker-4.4.1-13.el9_2.tuxcare.els11.noarch.rpm 025c02fd801d22af03cc49c1e2751352c1bdd66b0e741c4ee81aa01f85772cf6 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els11.x86_64.rpm 0fc58def5cad64deee2a14ba7cde347c81f197d4bd71884b829eab495e5119d8 podman-plugins-4.4.1-13.el9_2.tuxcare.els11.x86_64.rpm c4d567095e3cfb49d7f68fdcc464222832227e3a86c1fca49eaed104131971b7 podman-remote-4.4.1-13.el9_2.tuxcare.els11.x86_64.rpm c7ba5e2bce298b78608ec03cf3bc14075a375bcbd38be7fb2df98b9d89a1502f podman-tests-4.4.1-13.el9_2.tuxcare.els11.x86_64.rpm 5587e40a47719f939ef1b59795be22ce37aeebee6927baf1aded80fb2bb3dfd2 CLSA-2026:1772464786 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els13.x86_64.rpm 846d004cc6919eb400a780ac5c810a7c6852e92c406e21e0270316a12473e105 CLSA-2026:1772466351 TuxCare License Agreement 0 - CVE-2026-26269: fix buffer overflow in netbeans interface Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-26269: fix buffer overflow in netbeans interface

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_1.1.tuxcare.els3.x86_64.rpm 78857d4a17eb673ac237a50fa1a37e69bf883ddf71ac5e62ac846b55363651bb vim-common-8.2.2637-22.el9_1.1.tuxcare.els3.x86_64.rpm 49f3bd94e08c74ec56bea1262fe9006fef3bc2ff1a2a87b2f640709eec1e1833 vim-enhanced-8.2.2637-22.el9_1.1.tuxcare.els3.x86_64.rpm 2b84b208578e2112de9a401a89ffc5e824d5670f8e43763d3c9928fb0f6739ec vim-filesystem-8.2.2637-22.el9_1.1.tuxcare.els3.noarch.rpm d8b83704b6e8a93caebb1d2b4c80f3285a9723b15c5087b16a4a7c25bcea203f vim-minimal-8.2.2637-22.el9_1.1.tuxcare.els3.x86_64.rpm 800bf23390d1d2ea152c313b849f0f99c10d2368afb5a170f4fe0c44c4f2a56a CLSA-2026:1772571803 TuxCare License Agreement 0 - CVE-2026-25506: fix buffer overflow in message parsing and add bounds checks and input validation for address length; prevent leak of cryptographic MAC subkey and forging of arbitrary credentials Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25506: fix buffer overflow in message parsing and add bounds checks and input validation for address length; prevent leak of cryptographic MAC subkey and forging of arbitrary credentials

0 tuxcare-almalinux9.2-esu munge-0.5.13-13.el9_2.tuxcare.els1.x86_64.rpm 618c75855d7cbc2263988e2ba663d385145096f13114b5d37241b445dfbb2592 munge-devel-0.5.13-13.el9_2.tuxcare.els1.i686.rpm 8ee2fa6eb42ed9cc7b41f4496095941ea60f9cf9ca986a375bf43cfa8d6dc2a1 munge-devel-0.5.13-13.el9_2.tuxcare.els1.x86_64.rpm 79a8eb38d6cb4c04ea1fb79961692592e9c19faa2c738c0b0dc3a983f90ab3e1 munge-libs-0.5.13-13.el9_2.tuxcare.els1.i686.rpm ab0df88f13402b35511911d1515f59f12a507b48bda7bf01f43cdebd15a74f5a munge-libs-0.5.13-13.el9_2.tuxcare.els1.x86_64.rpm 033689533d5194ef3592bdb0c24f21fb86eb3ae6384bc2d8a51c9437ad3a3b5f CLSA-2026:1772573644 TuxCare License Agreement 0 - CVE-2025-14905: fix heap buffer overflow in schema.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14905: fix heap buffer overflow in schema.c

0 tuxcare-almalinux9.2-esu 389-ds-base-2.2.4-5.el9_2.tuxcare.els3.x86_64.rpm 705e2f17331fdf179ef4f9479a24f8361b992c2aadbc828f1b350a4e962dfee4 389-ds-base-devel-2.2.4-5.el9_2.tuxcare.els3.x86_64.rpm 4eeda7ec0e0127b5d45d97111c79fdb193f2eb3a958ba72089f417a477132123 389-ds-base-libs-2.2.4-5.el9_2.tuxcare.els3.x86_64.rpm 32ef45c65c2321e95b5a228e5cf4439385e90485cebbb183f70d0048fa938d2f 389-ds-base-snmp-2.2.4-5.el9_2.tuxcare.els3.x86_64.rpm 593f54cba9d4884cfc5f3c87c77b006df94b0a18a89c0133bed0888f24d07e38 python3-lib389-2.2.4-5.el9_2.tuxcare.els3.noarch.rpm 8098475d4264921fb8be5c8d9c7e26f389ee42faf8f9762748804a41ae6b5c48 CLSA-2026:1772622084 TuxCare License Agreement 0 - CVE-2025-61144: add MAX_SAMPLES bounds check in combineSeparateSamplesBytes to prevent stack-based buffer overflow when spp exceeds MAX_SAMPLES in tiffcrop Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61144: add MAX_SAMPLES bounds check in combineSeparateSamplesBytes to prevent stack-based buffer overflow when spp exceeds MAX_SAMPLES in tiffcrop

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els7.i686.rpm d4cc664c01881e202d3d1c667a4bda4b2637377daa0716163d8e4329be77f46f libtiff-4.4.0-8.el9_2.tuxcare.els7.x86_64.rpm 1cb371947ddc6b05231fe657c3f3c4191d4f14480c819342e3f9ef6fdf2e8cf1 libtiff-devel-4.4.0-8.el9_2.tuxcare.els7.i686.rpm 062359d0e6ed2972228fb37c6fb826fb7a5d8e9a6e19938962961e1860b9a3eb libtiff-devel-4.4.0-8.el9_2.tuxcare.els7.x86_64.rpm 819a81f62698f8fd814aadfabd522c0fe46e9fbb24e96939a64639996bf5db0c libtiff-static-4.4.0-8.el9_2.tuxcare.els7.x86_64.rpm 01208cf9770b0502715b6201d31142fdae3032fe0899b7ca458d84002a43f54d libtiff-tools-4.4.0-8.el9_2.tuxcare.els7.x86_64.rpm 30f645b72af4337eafc452bec6438de9a0d51cb9509a77a130030abc16016959 CLSA-2026:1772624338 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry

0 tuxcare-almalinux9.2-esu grafana-pcp-5.1.1-1.el9_2.tuxcare.els3.x86_64.rpm acb7fed0b8661704046872583dfba97a7a5d8d0f4b05d7b583ff76209b9a8883 CLSA-2026:1772646645 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61729: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61729: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing

0 tuxcare-almalinux9.2-esu butane-0.17.0-1.el9.tuxcare.els1.x86_64.rpm 11c9349bae746926f0310a8efa72860cbad719b0fcbcd6abc7512f84b266167f butane-redistributable-0.17.0-1.el9.tuxcare.els1.noarch.rpm 7b983798776c28a8cec68029b4fd9478e6b3e20de492ea3f87a20e9984cde576 CLSA-2026:1772812991 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVEs - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVEs - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry

0 tuxcare-almalinux9.2-esu skopeo-1.11.2-0.1.el9.tuxcare.els3.x86_64.rpm ee54e983e59cab1759bb40249082d86d7e392bca74a958b7e4422626eb1306da skopeo-tests-1.11.2-0.1.el9.tuxcare.els3.x86_64.rpm ae05595aac455e2a58a061b85189b8a41f52d96b2b630410f665aa39517da1b7 CLSA-2026:1773136115 TuxCare License Agreement 0 - CVE-2025-13837: fix a potential denial of service in plistlib (GH-119343) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13837: fix a potential denial of service in plistlib (GH-119343)

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els17.noarch.rpm 7eb7e2e0683edbf74c6c63d02f5542d3e41cca72b85d8d3106425e8b99b63a9c python3-3.9.16-1.el9_2.2.tuxcare.els17.i686.rpm 26ad90be471cde2ffa41fdf66e86e9a860f646684afedea9cc164dc0bcabdf1f python3-3.9.16-1.el9_2.2.tuxcare.els17.x86_64.rpm 86869a08c655a5c38223b9e59b24130b81c31e9e224b2659358706f48b18514e python3-debug-3.9.16-1.el9_2.2.tuxcare.els17.i686.rpm a25fa1862be41cf1a6fefb59e90b5bc3303512571e4a61c855a4a1730caaa83a python3-debug-3.9.16-1.el9_2.2.tuxcare.els17.x86_64.rpm 0b5c6bd8e6cc6517403e61dcd654d626fabc64c29818579604dc93280f42ec81 python3-devel-3.9.16-1.el9_2.2.tuxcare.els17.i686.rpm b198a3991d207f9bb3af77b5f81cec8dd4b5efc12499c042ec7d146eeed83e56 python3-devel-3.9.16-1.el9_2.2.tuxcare.els17.x86_64.rpm 7f3e92b9e2d1798fd6824a8e6083b14bc717ec67843952d300f26c9a29f46c43 python3-idle-3.9.16-1.el9_2.2.tuxcare.els17.i686.rpm f711514b61c057d23180256c448db7cab91c1c01f1e5302d754b86fbbcf9df7b python3-idle-3.9.16-1.el9_2.2.tuxcare.els17.x86_64.rpm 2ffc02b9457d7b97c1cccf7b9ab13fa5a0d0c008ae73ead4aa5397b1c82630a4 python3-libs-3.9.16-1.el9_2.2.tuxcare.els17.i686.rpm b25902013c91aad62fa94e70707776b062921d99ec972791f92f3276d567bdd9 python3-libs-3.9.16-1.el9_2.2.tuxcare.els17.x86_64.rpm a1fb518acf396b8fee24b6c25ac4ff688426c55b4557b9c3a558509da85f1b77 python3-test-3.9.16-1.el9_2.2.tuxcare.els17.i686.rpm 57122f0c6172b63a9dce329842924b510d29fdf046d674512634f54b1cdb95e5 python3-test-3.9.16-1.el9_2.2.tuxcare.els17.x86_64.rpm 4c13a7e0ff66dd2e2d9cdda45f6757698250074c112fd5a7cc2642385c4a0bb1 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els17.i686.rpm 7b526853e2d72c9f6aee922e5e7314d8fc5c3ece1f3faa4d6cbbd7b1e2241ff6 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els17.x86_64.rpm 0695d3dd9704cd1435888a1b8424c35a8d17afee2a5c29939fc495567d9b0b62 CLSA-2026:1773137907 TuxCare License Agreement 0 - CVE-2026-1642: fix upstream TLS proxy vulnerability allowing MITM inject plaintext into proxied responses; enforce strict upstream TLS verification and reject injected plaintext Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1642: fix upstream TLS proxy vulnerability allowing MITM inject plaintext into proxied responses; enforce strict upstream TLS verification and reject injected plaintext

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.x86_64.rpm 30bbd7bcd725db3a95a0574924bef0a3673b721b1c78d856e553675e2c82016d nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.noarch.rpm fe15b9e06911d6ad5d957a9b91105fa8c12d97ed4a05318afdaf882c50e69f46 nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.x86_64.rpm 814d30d4dcaf2efe7ce74f2edec2c061405024dee62605d261617c154c315bf4 nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.noarch.rpm ef5911b129315608c92fcc19ad687a3e379b4d366dffd7926606d45417188161 nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.x86_64.rpm af177ce9afd12a8f95416322f77aa941cbcd7d91fb50e0574c612ca0e5875299 nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.x86_64.rpm 45a25b7759a2e08fb2925d0598ecf190d074e9366f299ebe5c4a8ea4ede99c4e nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.x86_64.rpm 6242ce8673ec1d27b8b9b554ef577ef4bb4e02c7930a90e371112c697fab8bdb nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.x86_64.rpm 9cd049938646d615d277a5ad131da7eb734c2e9099c0c05319308d4dc8b27691 nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.x86_64.rpm 03ffa65284f0cb5d957b4b3042dda8f402ca45e0fc3e5fbb5a56f818ce1a94e0 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els4.x86_64.rpm cf2dc8dabfc8ba6480d2808bf8dfcb97d0b66677cc963b76417166e1dcf6b235 CLSA-2026:1773139548 TuxCare License Agreement 0 - fix: fbdev: fix potential buffer overflow in do_register_framebuffer() - qed: Don't collect too many protection override GRC elements {CVE-2025-39949} - drm/amd/display: Avoid a NULL pointer dereference {CVE-2025-39693} - pNFS: Fix uninited ptr deref in block/scsi layout {CVE-2025-38691} - netfilter: nf_reject: don't leak dst refcount for loopback packets {CVE-2025-38732} - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085} - fs: dlm: fix use after free in midcomms commit {CVE-2023-53629} - svcrdma: use rc_pageoff for memcpy byte offset {CVE-2025-68811} - bpf: Disable preemption in bpf_perf_event_output {CVE-2023-54303} - scsi: target: iscsit: Free cmds before session free {CVE-2023-54184} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022} - memcg: protect concurrent access to mem_cgroup_idr {CVE-2024-43892} - ACPI: EC: Fix oops when removing custom query handlers {CVE-2023-54244} - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration {CVE-2023-54296} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() {CVE-2023-54114} - net: tls: avoid hanging tasks on the tx_lock {CVE-2023-54306} - usb: typec: bus: verify partner exists in typec_altmode_attention {CVE-2023-54299} - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization {CVE-2023-54234} - rxrpc: Fix timeout of a call that hasn't yet been granted a channel {CVE-2023-54195} - block, bfq: Fix division by zero error on zero wsum {CVE-2023-54242} - wifi: cfg80211: reject auth/assoc to AP with our address {CVE-2023-53540} - wifi: iwlwifi: mvm: don't trust firmware n_channels {CVE-2023-53589} - wifi: mac80211: check for station first in client probe {CVE-2023-53588} - bonding: do not assume skb mac_header is set {CVE-2023-53601} - drm/i915: Make intel_get_crtc_new_encoder() less oopsy {CVE-2023-53571} - wifi: rtw88: delete timer and free skb queue when unloading {CVE-2023-53574} - net: bcmgenet: Add a check for oversized packets {CVE-2023-53535} - media: uvcvideo: Fix memory leak in uvc_gpio_parse {CVE-2022-50882} - md/raid10: fix memleak of md thread {CVE-2023-54294} - usb: typec: altmodes/displayport: fix pin_assignment_show {CVE-2023-54186} - scsi: qedf: Fix NULL dereference in error handling {CVE-2023-54289} - HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020} - driver core: fix potential null-ptr-deref in device_add() {CVE-2023-54321} - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull {CVE-2023-53125} - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() {CVE-2023-54246} - bpf: Address KCSAN report on bpf_lru_list {CVE-2023-54283} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998} - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl {CVE-2023-54202} - mmc: via-sdmmc: fix return value check of mmc_add_host() {CVE-2022-50846} - bpf: Disable preemption in bpf_event_output {CVE-2023-54173} - net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148} - net/mlx5: Handle pairing of E-switch via uplink un/load APIs {CVE-2023-53347} - net/mlx5e: Fix cleanup null-ptr deref on encap lock {CVE-2023-53105} - smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728} - perf/core: Exit early on perf_mmap() fail {CVE-2025-38565} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - HID: core: ensure __hid_request reserves the report ID as the first byte - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495} - HID: intel-ish-hid: Fix kernel panic during warm reset {CVE-2023-53392} - xfs: do not propagate ENODATA disk errors into xattr code {CVE-2025-39835} - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode {CVE-2025-38535} - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf {CVE-2023-53524} - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201} - xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500} - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras {CVE-2023-53471} - drm/edid: fix info leak when failing to get panel id {CVE-2023-53085} - xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470} - vdpa: Add features attr to vdpa_nl_policy for nlattr length check {CVE-2023-53652} - virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515} - virtio_net: fix xdp_rxq_info bug after suspend/resume {CVE-2022-49687} - drivers: net: prevent tun_build_skb() to exceed the packet size limit - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy {CVE-2025-40251} - tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454} - HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824} - udf: Do not bother merging very long extents {CVE-2023-53506} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866} - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. {CVE-2025-39913} - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} - tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600} - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604} - tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - iavf: Fix use-after-free in free_netdev {CVE-2023-53556} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix: fbdev: fix potential buffer overflow in do_register_framebuffer() - qed: Don't collect too many protection override GRC elements {CVE-2025-39949} - drm/amd/display: Avoid a NULL pointer dereference {CVE-2025-39693} - pNFS: Fix uninited ptr deref in block/scsi layout {CVE-2025-38691} - netfilter: nf_reject: don't leak dst refcount for loopback packets {CVE-2025-38732} - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085} - fs: dlm: fix use after free in midcomms commit {CVE-2023-53629} - svcrdma: use rc_pageoff for memcpy byte offset {CVE-2025-68811} - bpf: Disable preemption in bpf_perf_event_output {CVE-2023-54303} - scsi: target: iscsit: Free cmds before session free {CVE-2023-54184} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022} - memcg: protect concurrent access to mem_cgroup_idr {CVE-2024-43892} - ACPI: EC: Fix oops when removing custom query handlers {CVE-2023-54244} - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration {CVE-2023-54296} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() {CVE-2023-54114} - net: tls: avoid hanging tasks on the tx_lock {CVE-2023-54306} - usb: typec: bus: verify partner exists in typec_altmode_attention {CVE-2023-54299} - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization {CVE-2023-54234} - rxrpc: Fix timeout of a call that hasn't yet been granted a channel {CVE-2023-54195} - block, bfq: Fix division by zero error on zero wsum {CVE-2023-54242} - wifi: cfg80211: reject auth/assoc to AP with our address {CVE-2023-53540} - wifi: iwlwifi: mvm: don't trust firmware n_channels {CVE-2023-53589} - wifi: mac80211: check for station first in client probe {CVE-2023-53588} - bonding: do not assume skb mac_header is set {CVE-2023-53601} - drm/i915: Make intel_get_crtc_new_encoder() less oopsy {CVE-2023-53571} - wifi: rtw88: delete timer and free skb queue when unloading {CVE-2023-53574} - net: bcmgenet: Add a check for oversized packets {CVE-2023-53535} - media: uvcvideo: Fix memory leak in uvc_gpio_parse {CVE-2022-50882} - md/raid10: fix memleak of md thread {CVE-2023-54294} - usb: typec: altmodes/displayport: fix pin_assignment_show {CVE-2023-54186} - scsi: qedf: Fix NULL dereference in error handling {CVE-2023-54289} - HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020} - driver core: fix potential null-ptr-deref in device_add() {CVE-2023-54321} - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull {CVE-2023-53125} - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() {CVE-2023-54246} - bpf: Address KCSAN report on bpf_lru_list {CVE-2023-54283} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998} - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl {CVE-2023-54202} - mmc: via-sdmmc: fix return value check of mmc_add_host() {CVE-2022-50846} - bpf: Disable preemption in bpf_event_output {CVE-2023-54173} - net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148} - net/mlx5: Handle pairing of E-switch via uplink un/load APIs {CVE-2023-53347} - net/mlx5e: Fix cleanup null-ptr deref on encap lock {CVE-2023-53105} - smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728} - perf/core: Exit early on perf_mmap() fail {CVE-2025-38565} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - HID: core: ensure __hid_request reserves the report ID as the first byte - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495} - HID: intel-ish-hid: Fix kernel panic during warm reset {CVE-2023-53392} - xfs: do not propagate ENODATA disk errors into xattr code {CVE-2025-39835} - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode {CVE-2025-38535} - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf {CVE-2023-53524} - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201} - xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500} - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras {CVE-2023-53471} - drm/edid: fix info leak when failing to get panel id {CVE-2023-53085} - xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470} - vdpa: Add features attr to vdpa_nl_policy for nlattr length check {CVE-2023-53652} - virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515} - virtio_net: fix xdp_rxq_info bug after suspend/resume {CVE-2022-49687} - drivers: net: prevent tun_build_skb() to exceed the packet size limit - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy {CVE-2025-40251} - tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454} - HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824} - udf: Do not bother merging very long extents {CVE-2023-53506} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866} - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. {CVE-2025-39913} - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} - tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600} - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604} - tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - iavf: Fix use-after-free in free_netdev {CVE-2023-53556}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm ff59ca9a12ef857d84bfd06f93162c0bca456aabe03b413898101d81fb09021c kernel-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 108bf0ba07a7f398230c0e1af19a9c359afe32f5c0142eab3c5915e92173b572 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els29.noarch.rpm 4ea89424a29c597277f0ef1d6d805e8dc2dfeec0e5c3cf91632ad664f917a0fd kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm aba2b6e0bfd2d01ea39722a6658700aacbc2376596ae253ff6c54e4dff1a046a kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 8403f7c4afb2dda7e2ba5ce91803a21bad609fab575351fc2e4cbb944905ad0b kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 5ecf77c53bb5c4afaf9747662c3c026ecf3929ee7ea50bfc535f45b0b89a98a9 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 6429b01f41de1e0abf18f17572014f8d838c781c13bfd1ddf7001f93634bc4aa kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 940f0ec0285cbd7401c8008889429e1232bf4fe0a1b5731bde30351cc91ba566 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 75da25ee53eb84341da3a5dbe15e611f187323c561b4b0427a9e759024f0614d kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm def7312b4e60ba4839de2a176008647c29f0533115405d8f4b53d00a5c927015 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 01c06b7a28e0fd5f25c3002404a0431d1f83340d0786e3732415bc9d6d2c903d kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm e8c85fce7c8fc57beaf4e33c98789187d0f28f7a5bfd43805cffa2a0db8208f5 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 1632428300c401658d4eeeef2f1d329a54ba053d7c50906523d95c6a63e1704e kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm c346d51c58077ff782ebdc3f34e4389d5dbab301074c10fddaff81bc84855efd kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 93206b77bb5b46b8c8f25d01efa90af00bd17e3c0867359400924207a80efed8 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 46f78ed6527c9f256d154cd8aa6ac4d8d5f3e02d26809fc1ddc69c65a531d98b kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm f7555fdc0abd0a15d8beb766aebd4e9e3c8f5872b53f32b6b255697a90af0d2a kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els29.noarch.rpm bc7af6065e699b04ffa41b3f98cd5b18f2a639c0663f53dc421379ef47008539 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 97da50f2f8140aebe8f768a897f8162bd57c8b3665bb6c9df5e8a6fbb2ce565d kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm b99b4b8b0d8a9d2faf415b15398bf4c3696633221a9ca3626a7d8ea582e1d34a kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 3a29251ea0db6e0ee3cb0a47ff9d869dcea0cd466c68fc6020e44e4e686f1386 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 3773a0a1df337c33d487b1acaf26f19638951142a1778c654142f87bc2e1584c kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm a76f9eec964ea8d5888750c8bdfe6f229e918fef5c01de92ac9129aef0b221fd kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 8d644e5d4e72a001fb2033a3d9b9057e7965be5008cb8093daea63ce1f6b0aeb kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 829f1c0ec04d5022f8b3e522988654d97b1938354a8b56beccb917ac3925bbcf kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 526f0e401b60b17497c299527a35e0ceed048f33c9287b560a17381798332468 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 84f7a3fc5bce1c23e92ce563a18b91abc0dd0a069e827ed88bf48ceff76ee9d6 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm b6f91ddfd1e6b51570695c3940e75924c44917d837a130f6e32350aad1c326a4 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 898e71b5b42cb0c2c6ec1384ec51865598c57566cedbd8a27af6712ebcdaf3c9 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm d9ef0b41ef0d4410feffc5ff09b2cb0b68938d57314241677d24a9371ed5393e libbpf-1.0.0-2.el9_2.tuxcare.7.els29.i686.rpm be2b1a84a2cea8d48cff0067a2c1c7a842706c43f209fb20a90356217ad56874 libbpf-1.0.0-2.el9_2.tuxcare.7.els29.x86_64.rpm f541d6a9144b902e56d974789b7660088544b91bce44c37064c1e2e8d8eb9956 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els29.i686.rpm dd5ed0c130ab7367dff30587b4d96efa82f2fa0ba04039353deb8b7ff4102baa libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els29.x86_64.rpm 6f78daf4bd69b2cfd34f31a7cce2bc993d37801335eab1af532223e0cc7d23e2 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els29.i686.rpm 5b2b81b7c89553f60152eb2a4168208d7a4f33b5b5ea40e7f828d515e6299bd6 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els29.x86_64.rpm 16d00169e3abbd64edd41f879fda4d8fdce0128572389250fd2c31ba9b0bcf7a perf-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm 1205e5c73bd0a84e3e944f2fae00733de3ba37b040ee8e36c7baf0dcc14cc41f python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm afb928ae4cea58198d8920c52221fd0c45ed0552204d3b620a2cc7486fb70ed6 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els29.x86_64.rpm dc2a81972ea1493bcd262192473a93922c3d1d815bd60a45e8beee31734e23ec CLSA-2026:1773160910 TuxCare License Agreement 0 - CVE-2026-2004: require superuser to install non-built-in selectivity estimators and harden intarray _int_matchsel() against wrong operator type - CVE-2026-2005: fix heap buffer overflow in pgcrypto PGP public-key decryption by validating session key length - CVE-2026-2006: fix multibyte character handling vulnerabilities in wchar conversion, EUC_CN encoding length, and replace pg_mblen() with bounds-checked versions across all call sites Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2004: require superuser to install non-built-in selectivity estimators and harden intarray _int_matchsel() against wrong operator type - CVE-2026-2005: fix heap buffer overflow in pgcrypto PGP public-key decryption by validating session key length - CVE-2026-2006: fix multibyte character handling vulnerabilities in wchar conversion, EUC_CN encoding length, and replace pg_mblen() with bounds-checked versions across all call sites

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els15.x86_64.rpm 7ac2ee2981fde02f2c2e2a59a10f4a1efd38074a4c0fba811ec70cdaab3ef37f postgresql-contrib-13.11-1.el9_2.tuxcare.els15.x86_64.rpm 8c3e45115cd2ab97dd409c28249fecd0dd240b2cb85dccbf3f55d8ed9639e6a1 postgresql-docs-13.11-1.el9_2.tuxcare.els15.x86_64.rpm 4a1fd24ef8e9dd30e7cc91c7b12cc75336d2d37270c62e864e149eae4649b33c postgresql-plperl-13.11-1.el9_2.tuxcare.els15.x86_64.rpm 8ab8d09bd841aed28c7e337ff98bbbbda457b86bd3fca0fd75e598f55905f2ff postgresql-plpython3-13.11-1.el9_2.tuxcare.els15.x86_64.rpm fad6d64e222dcd166c3c9967f725e37f0e140e16f6e79c83a5f95b4a8045167e postgresql-pltcl-13.11-1.el9_2.tuxcare.els15.x86_64.rpm 11d555a321de0bce4050d36ec0d678d1ab6c0c54c62c4cc3ac2c28eaf59a33a2 postgresql-private-devel-13.11-1.el9_2.tuxcare.els15.x86_64.rpm cfeb9701582d4979c1afd22acb0ae202b7a7c27099ff0f3b89b34722f11200d2 postgresql-private-libs-13.11-1.el9_2.tuxcare.els15.x86_64.rpm 5145bc9873dfaac9abfec42daeb993dd1b262a057e8cb050d47584b70c9c1a68 postgresql-server-13.11-1.el9_2.tuxcare.els15.x86_64.rpm a1a81d5cdfa0ff97d77b5e4cd7114832cced2e434ccc694f9e99b637ca890a41 postgresql-server-devel-13.11-1.el9_2.tuxcare.els15.x86_64.rpm d2c802cc0d35410c4aa6a668c2de41adf2aa830cc9088276aaf9b6ce4a64950e postgresql-static-13.11-1.el9_2.tuxcare.els15.x86_64.rpm 3b7c3a78c92eb076029f475e22b03a05c4444ddebd50edd790a6c629d208dd71 postgresql-test-13.11-1.el9_2.tuxcare.els15.x86_64.rpm efdae0259a4437192fd7a0b877444bfb0bbf49c1d0a1ec86dcd1eb4de8a94159 postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els15.noarch.rpm aa084e49d04adf6118ca48e83fae73ea820ca5d6fa10f1a74e1f520f007d1598 postgresql-upgrade-13.11-1.el9_2.tuxcare.els15.x86_64.rpm b8a679a49925dacabd7ee91d35ac156193f1902c4f018308e6845f3a0f791418 postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els15.x86_64.rpm b7107eccf613f78dae066eb91808560060b7e00730ccd95b3eac93d6c8e1c06a CLSA-2026:1773308416 TuxCare License Agreement 0 - CVE-2025-64503: fix out-of-bounds write in pdftoraster filter caused by integer overflow when processing PDFs with large MediaBox values - CVE-2025-57812: fix out-of-bounds read/write in imagetoraster TIFF processing caused by incorrect buffer size calculation in cupsImageLut Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-64503: fix out-of-bounds write in pdftoraster filter caused by integer overflow when processing PDFs with large MediaBox values - CVE-2025-57812: fix out-of-bounds read/write in imagetoraster TIFF processing caused by incorrect buffer size calculation in cupsImageLut

0 tuxcare-almalinux9.2-esu cups-filters-1.28.7-11.el9_2.1.tuxcare.els5.x86_64.rpm 203a6e10af452e4ddfce0e5cfbba61f5b671a43f89ccdb41d0d6e3149040cc0d cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els5.i686.rpm 4241e78552b61bcb836830ea5307be4857f5eeb206f176127ea29c60f4ca67bc cups-filters-devel-1.28.7-11.el9_2.1.tuxcare.els5.x86_64.rpm 75b99ff263c35f0fea5506320703f264c57e92b81fdf03a017067244e7f73ed2 cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els5.i686.rpm d97be9786a84c86ebc5fbd2a5e1284922205ecddb2efdc20d0fde6485a65fecf cups-filters-libs-1.28.7-11.el9_2.1.tuxcare.els5.x86_64.rpm 73bbb70a4b18d0d9c5beeed0a7be667f6ded55fc0dad70a04fd9889a8e7a061a CLSA-2026:1773311565 TuxCare License Agreement 0 - CVE-2025-12801: fix rpc.mountd privilege escalation allowing NFSv3 clients to bypass root_squash and all_squash when mounting subdirectories Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-12801: fix rpc.mountd privilege escalation allowing NFSv3 clients to bypass root_squash and all_squash when mounting subdirectories

0 tuxcare-almalinux9.2-esu libnfsidmap-2.5.4-18.el9_2.tuxcare.els1.i686.rpm d87d0f4eb96d15eabcb3c3ff5936666e9f344af642c1dc7a8f949a42a57c49d4 libnfsidmap-2.5.4-18.el9_2.tuxcare.els1.x86_64.rpm 6fe6c3c75a45fe02c74e8593cacf33b3f5b07648e6c286299af67a61a52d3337 libnfsidmap-devel-2.5.4-18.el9_2.tuxcare.els1.i686.rpm c6944da60a530fd8bfe4a0ed180281c35cfb445c4d57467a21cf51bacb68a8fc libnfsidmap-devel-2.5.4-18.el9_2.tuxcare.els1.x86_64.rpm 0c99110aa77c1c49e486724990feb6c315bff521c56e3d797bccc05411a2b756 nfs-stats-utils-2.5.4-18.el9_2.tuxcare.els1.x86_64.rpm a9d6ca0432f41f9037a36774b01afe847d8b7d6a6576ad0a221a3304d83eabe3 nfs-utils-2.5.4-18.el9_2.tuxcare.els1.x86_64.rpm 8baee0cdf0e63c8012f655f570746b3cc6979eff557450f1b758817d8158efd3 nfs-utils-coreos-2.5.4-18.el9_2.tuxcare.els1.x86_64.rpm 6eb7fb7eb4e7eb163b9b7189c711982f583457bae3a0f2fa01d5c8edc2f0e854 nfsv4-client-utils-2.5.4-18.el9_2.tuxcare.els1.x86_64.rpm c4c0248a690a1bf6ca306a42111c8c71624c455af5d1b0e6322e9bfe3ed87e03 CLSA-2026:1773313831 TuxCare License Agreement 0 - Rebuild with golang 1.22.9-1.el9_2.tuxcare.els6 to fix CVE-2025-68121 - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild with golang 1.22.9-1.el9_2.tuxcare.els6 to fix CVE-2025-68121 - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry

0 tuxcare-almalinux9.2-esu delve-1.9.1-1.el9.tuxcare.els3.x86_64.rpm 035d72c2d245643fd8358f0afc4b27e9214a501f8f90e83e9a103ccc12aad20a CLSA-2026:1773314910 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs

0 tuxcare-almalinux9.2-esu git-lfs-3.2.0-1.el9.tuxcare.els3.x86_64.rpm 1219bb482b359158d02bb1ed7af5712f05d85108aefe06c6b0247abb474dda18 CLSA-2026:1773315820 TuxCare License Agreement 0 - CVE-2026-2003: guard against unexpected dimensions of oidvector/int2vector Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2003: guard against unexpected dimensions of oidvector/int2vector

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 28a5038fdd1cfb6cda5b8da5c5fa71047781dbfdaa17ff4cc877b87af29214b6 postgresql-contrib-13.11-1.el9_2.tuxcare.els16.x86_64.rpm aa6ab7f6b41e726f1e67fbd3b7f8b5f9ff214d95172b79a308288c7b9de5a8c4 postgresql-docs-13.11-1.el9_2.tuxcare.els16.x86_64.rpm d3e4c363f0900ae399a1e28bb64e2ba6f6a43808310aad501125cf8f55cd484a postgresql-plperl-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 419550facfaf824377801ac230f3fb558662d7aa7c641c6816ade32556fc9dcf postgresql-plpython3-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 66212345d65a19ba64c6f8f16658614e3efd15f5ff5c8d97e503d88ccd573e1a postgresql-pltcl-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 30fe67d4520222033f8635c1a5d5774c66e17e4e9ea2159cfba99db2ac38ef49 postgresql-private-devel-13.11-1.el9_2.tuxcare.els16.x86_64.rpm f8dc4ce8ecbe522767d16716e84f08d5179cde4d5168a13236ec2eca22ae644e postgresql-private-libs-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 1227f95b37bcc208091b652c2ab40ec9b19e7c39369d3bffe9d625a8bc202b9b postgresql-server-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 85dd0b4a360c8a9ce8e26e78f9a44446e0f8c099f6bd4dfceb9f3223f7065aa6 postgresql-server-devel-13.11-1.el9_2.tuxcare.els16.x86_64.rpm b0535adeea22193583f25d1cb4919241588abac1d242ed584c4fbc36abc38453 postgresql-static-13.11-1.el9_2.tuxcare.els16.x86_64.rpm fe60cb83a61b0093a9024e3048e48bb65d7675216b9fcbb1ace35c0a10cd62f4 postgresql-test-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 6e23a5f709d235ef68012829ea8294a45103f426a9616dca97506add22855479 postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els16.noarch.rpm f4d52673840398524ff42f37ac6ab43de77f4cebe864346b93798430f3cd32cb postgresql-upgrade-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 07d97a75983972de29b2f24b02db2f711c8123c0a88eedaf81fb89e68139ad96 postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els16.x86_64.rpm 5abbc25896172ccdd1179188a01bdd5a7c2881117e40034d744722d4702a7fe0 CLSA-2026:1773323311 TuxCare License Agreement 0 - CVE-2025-6075: fix quadratic complexity in os.path.expandvars() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6075: fix quadratic complexity in os.path.expandvars()

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els18.i686.rpm 2c2a2f31f07742edfe6d1ff6bef2248415c1a8d759075d83c290e1b404a0c2ea python3.11-3.11.2-2.el9_2.2.tuxcare.els18.x86_64.rpm f2b75903a59b0f9bb8bd842d0ae34480bdde3a75bde7b91b0f89baf81bbdecec python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els18.i686.rpm e90fb802b4e2e10ff94a6c1284d5aaf38f749b160a41efaa74bc4fc9367c5503 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els18.x86_64.rpm 2a25d9bafcb2490f1bef4aedf2a9a94952af8a87fc547980e9f075c58382e50c python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els18.i686.rpm 2108d46814c925fc6dc086892071c89c477076c5da95b6675f0947886d76e86b python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els18.x86_64.rpm 8f4cc5457dae33792d7b3974daf65b86866aa3d9892cb920e74ff73747742565 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els18.i686.rpm 6616e74062aef2454f854409437084e2460feb115556e042b0fe7064b8f61c9e python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els18.x86_64.rpm 685fb8f46c8b718c6ea402ee58ccb922d07c5ab2c30d7e72046320e04fcb3cef python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els18.i686.rpm fa8fac654215bb34611113d18df1689769816f84520dc6b44491124943da371d python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els18.x86_64.rpm 26a7aad764b53235b6ea342f6e668abb0b846103d640b51982739e5c0163f240 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els18.i686.rpm 52ace82a65a9e838c0771497a23cad70da35fe4fb4162d4c352d0986061e39c5 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els18.x86_64.rpm ecf6726988adc1e26251b44973a493e905fc23b1a80e0ce4f15ec193ccdb9164 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els18.i686.rpm 815f05efb7cf9940a012ec81a0f2ddc2c942fb7ed41f897d6443a040c454a70e python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els18.x86_64.rpm 1979c3e80e538f33249fb5b902d389c7b7ce6a9a30f49020606fefa208775881 CLSA-2026:1773323876 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing

0 tuxcare-almalinux9.2-esu go-filesystem-3.2.0-1.el9_2.tuxcare.els2.x86_64.rpm fca64407c8bac330c7c06a8257224b9ee5fc10832d8c0c6fc3d748504ba6c93b go-rpm-macros-3.2.0-1.el9_2.tuxcare.els2.x86_64.rpm c1a02405247a3a0b2c84ae4e065aec3999075a51220c6411ad390c05520eb375 go-rpm-templates-3.2.0-1.el9_2.tuxcare.els2.noarch.rpm b5d42f44b15b85c4fa2e35fbe03d0bac71b16573c2657ed361ab76cb1944b317 go-srpm-macros-3.2.0-1.el9_2.tuxcare.els2.noarch.rpm c7a756c9baf7b493e9bc16c14124fe266247d1d2f52849ce64e85acdb2e523f8 CLSA-2026:1773309522 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVEs - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-61728: reduce CPU usage in index construction - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVEs - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-61728: reduce CPU usage in index construction - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry

0 tuxcare-almalinux9.2-esu osbuild-composer-76-2.el9_2.2.alma.tuxcare.els2.x86_64.rpm fc82dbb413892d9f25f245077ab88e711e17bcaafb265ea99c3c882d9a35172e osbuild-composer-core-76-2.el9_2.2.alma.tuxcare.els2.x86_64.rpm 47112bbb6818eb8f634a91c90373b376d3183dc6084ee0c82b92c0401edbf4bb osbuild-composer-dnf-json-76-2.el9_2.2.alma.tuxcare.els2.x86_64.rpm 2971f85779ccbffb3d4c0fcdad301d583f58f623d778edfd81ca6f22541ff11b osbuild-composer-tests-76-2.el9_2.2.alma.tuxcare.els2.x86_64.rpm 453f3a34b2563e6405557676cce2faf764270cab9110a7f92e95c4cacd46218f osbuild-composer-worker-76-2.el9_2.2.alma.tuxcare.els2.x86_64.rpm 4fac77d85a14508c80a4bef8ffced04f39bda44c714b84b06f7caaecd81d99da CLSA-2026:1773480954 TuxCare License Agreement 0 - CVE-2025-6075: fix quadratic complexity in os.path.expandvars() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6075: fix quadratic complexity in os.path.expandvars()

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els18.noarch.rpm fcc8e337dbc0981ee743144b471dd09c9b7db7f592fc4db68163551f5d413f8c python3-3.9.16-1.el9_2.2.tuxcare.els18.i686.rpm 39dc62822366e8cfaf76a51786739c91e044e90e38e8a4330206de5c923d0a61 python3-3.9.16-1.el9_2.2.tuxcare.els18.x86_64.rpm d19dfecd588d17b9d712a46af63699c66e15ebaaf7a362237a94e913262818e2 python3-debug-3.9.16-1.el9_2.2.tuxcare.els18.i686.rpm 4e14ac28e3fda46ead3bf49c0cc07164f6aec1a0b7d35eb64dcc1fdb0d9910a3 python3-debug-3.9.16-1.el9_2.2.tuxcare.els18.x86_64.rpm 07e953a34ee60a59ddd4356525596e227771b81af5c943766416a92e0948c3e2 python3-devel-3.9.16-1.el9_2.2.tuxcare.els18.i686.rpm c8b23606d7f0c5769bda2b85fae4c39d9842c2282727a2b950096b8c353ff7d5 python3-devel-3.9.16-1.el9_2.2.tuxcare.els18.x86_64.rpm 79d4f8efde75fc3ef33426c41276f07bb5bb0e72acdd801f5eb77421aa807c13 python3-idle-3.9.16-1.el9_2.2.tuxcare.els18.i686.rpm 9867c4187dd1e7f5fc2c3f54fe1bd5d16fede795d7349002633ab262c5c0e586 python3-idle-3.9.16-1.el9_2.2.tuxcare.els18.x86_64.rpm 275907b0fe4a207e04d41f3f8da4723c0a17217487f2c599b5a96a771822e916 python3-libs-3.9.16-1.el9_2.2.tuxcare.els18.i686.rpm d982602a2a0004c819c564ca9e3e39a58505ad8607a16f9eebf4807606ff9099 python3-libs-3.9.16-1.el9_2.2.tuxcare.els18.x86_64.rpm 79a44b27ad2dee467e44f15b970229f45ddbaa752abaa64a13a735355b00f92e python3-test-3.9.16-1.el9_2.2.tuxcare.els18.i686.rpm 6a520d1ffabf6c10c4ff2e6560d0ee584267fcb24182f0db8eecb85d1fb1c870 python3-test-3.9.16-1.el9_2.2.tuxcare.els18.x86_64.rpm 41dddbb51da66f7885cd5983cdf43766471182aedced3be7c7cad98855700318 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els18.i686.rpm 400e09fc2d461e0d3d92e6fecbfce600bda12c38d19ac9f4f1421fe97b86db25 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els18.x86_64.rpm 8d88c59aa3e5fb68e0ee152c17112f56ecc41852e5178cdaf33e70fdb46f1dca CLSA-2026:1773669005 TuxCare License Agreement 0 - CVE-2025-69419: fix heap buffer overflow in OPENSSL_uni2utf8 via bmp_to_utf8 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-69419: fix heap buffer overflow in OPENSSL_uni2utf8 via bmp_to_utf8

0 tuxcare-almalinux9.2-esu compat-openssl11-1.1.1k-4.el9_0.tuxcare.els2.i686.rpm 3bdca3a9244b89a091d52d3218b7aad42c95603321d8c520fd7614007ee7b87f compat-openssl11-1.1.1k-4.el9_0.tuxcare.els2.x86_64.rpm 575180f96f1ef9cf7848781ce4b6654e67df864c94ad31a05a45bc4107ce638a CLSA-2026:1773683117 TuxCare License Agreement 0 - CVE-2026-2044: fix uninitialized memory read in PGM file parser - CVE-2026-2045: fix heap buffer overflow in XWD file loader - CVE-2026-2048: fix out-of-bounds write in XWD file loader - CVE-2026-0797: fix missing fread return value checks in ICO file loader Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2044: fix uninitialized memory read in PGM file parser - CVE-2026-2045: fix heap buffer overflow in XWD file loader - CVE-2026-2048: fix out-of-bounds write in XWD file loader - CVE-2026-0797: fix missing fread return value checks in ICO file loader

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els5.x86_64.rpm 6f9e546b577fb6a2db3e4351115ab0ba0be01b95218b194c2e710cc41bcac5f4 gimp-devel-2.99.8-4.el9.2.tuxcare.els5.x86_64.rpm 9275c2ccd0bcda3e26c2151c50146cf94d5b3026c351d1a387a0d8d5bbabdc20 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els5.x86_64.rpm bbcd0265252385cfcfd6a3af59a210361969c340b46d0a586f667b88ba8d4b26 gimp-libs-2.99.8-4.el9.2.tuxcare.els5.i686.rpm 6cbc8b3993b0e9b1d90c3b0b8110d0f41e9ad280a84fe8b10b90864a7d07a98f gimp-libs-2.99.8-4.el9.2.tuxcare.els5.x86_64.rpm adba17b20e17a8967cddc0bc07a1a03790d6fb9cb88a12910ba85db5fd385cbe CLSA-2026:1773684091 TuxCare License Agreement 0 - update to CKBI 2.84 from NSS 3.121 - updated certificates: - # Certificate "ePKI Root Certification Authority" - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Comodo AAA Services root" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - removed certificates: - # Certificate "Baltimore CyberTrust Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Swisscom Root CA 1" - # Certificate "A-Trust-nQual-03" - # Certificate "KISA RootCA 1" - added certificates: - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate "OISTE Server Root RSA G1" - # Certificate "e-Szigno TLS Root CA 2023" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.84 from NSS 3.121 - updated certificates: - # Certificate "ePKI Root Certification Authority" - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Comodo AAA Services root" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - removed certificates: - # Certificate "Baltimore CyberTrust Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Swisscom Root CA 1" - # Certificate "A-Trust-nQual-03" - # Certificate "KISA RootCA 1" - added certificates: - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate "OISTE Server Root RSA G1" - # Certificate "e-Szigno TLS Root CA 2023"

0 tuxcare-almalinux9.2-esu ca-certificates-2026.2.84_v7.0.306-90.1.el9_2.tuxcare.els1.noarch.rpm 18a2614349cd2abff7f2c8e918c9839337e75cf46f58eee100a1fba7ff415655 CLSA-2026:1773827924 TuxCare License Agreement 0 - CVE-2025-15281: fix process crash in wordexp() when attempting to reuse and append to previous expansion results due to uninitialized memory access Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15281: fix process crash in wordexp() when attempting to reuse and append to previous expansion results due to uninitialized memory access

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f9567aa62feeb397e214ceb7337cf159e7ca79e5a05fc356c72668495095af61 glibc-2.34-60.el9.7.tuxcare.els8.i686.rpm 438aea62260e1aba05b49fbd8eda91f48d84c43e5dde82d832c30a7ffed35b88 glibc-2.34-60.el9.7.tuxcare.els8.x86_64.rpm b54887aa0a783a29d90fdb03a7f6dab190d23e312b32693cc2693f6bd5639e27 glibc-all-langpacks-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 11ac9c843856ca569c1000fa9eb524df20e04a911becd10c784c810a13af7a6e glibc-benchtests-2.34-60.el9.7.tuxcare.els8.x86_64.rpm de1534cbf6744763c71381cf2fa63c4423268a443853cb81168268cecb0a1e22 glibc-common-2.34-60.el9.7.tuxcare.els8.x86_64.rpm a067bfb1e3a42555c0dbf51ce94c1816f409f0ee5b85a456c1e058afb55d22b2 glibc-devel-2.34-60.el9.7.tuxcare.els8.i686.rpm fb0edb9cbe0611ad62083e4324e05ade23af4f5c8233315a85eb7df0f1469db6 glibc-devel-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 52b9792ac8c8021c13e7c43e2a6edf8008799de76601338e4364ed426ee0b392 glibc-doc-2.34-60.el9.7.tuxcare.els8.noarch.rpm 02b93cd22ccd2830fe5062d5ea0d279dc9cfe5781c9c3981c0e9343f59988c90 glibc-gconv-extra-2.34-60.el9.7.tuxcare.els8.i686.rpm a02f3b9c31bc179ee15c0bd5fd4c3e408b23f86ce383ee5e5f811728033e30fa glibc-gconv-extra-2.34-60.el9.7.tuxcare.els8.x86_64.rpm dae44dbe19a5ce9afcf21355607793ba5c2a1adc9f2e57fc4fc3a04c73e94c37 glibc-headers-2.34-60.el9.7.tuxcare.els8.x86_64.rpm bee6e7bee6ac580bf8984425247e7ddcb821063d59fea674dff78934ba3e4262 glibc-langpack-aa-2.34-60.el9.7.tuxcare.els8.x86_64.rpm bbc4946fc6580b6b87741bae1b634c3f1de988988c058777456217ca55c316e9 glibc-langpack-af-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 801d02df864376887ae0479bb0867d4070e2c63bf90a7f459046143a3de4ea5c glibc-langpack-agr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm b164769703154d795f1f99cc19db345095cfab45a3e5adcdd4af7af23ab20a3c glibc-langpack-ak-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 885206c8682011a3d95a171a2bc3fe27f1dfad27a17e4f4fddfc7f83fe29ea4d glibc-langpack-am-2.34-60.el9.7.tuxcare.els8.x86_64.rpm cfd53a30736625ceb65a8ff95802b27b9b709348562c7930edbefe04b56dbb29 glibc-langpack-an-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 966b034448f6289af172aa113319603ea382f2300641812970ac8a19c62788e5 glibc-langpack-anp-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 45cf6d188dd8027568f84ab8e71b763ff8f97b24ad8837b275fb69b3d8884289 glibc-langpack-ar-2.34-60.el9.7.tuxcare.els8.x86_64.rpm fbfe22522dca74593ffed88553daf105d0fa64951ae26efce4fb15d7c0dde018 glibc-langpack-as-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 4da49beab405fc42db0e242bc16fedd1fa97e6eee2c0ab517838dede8a9ae85b glibc-langpack-ast-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f9629de0cab6bea15aaaae6414ac7b494543bb6eaa4dd6430e88051bcf7a9b9a glibc-langpack-ayc-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e460e9404a6b511c6059501ea4e38fc6afaa2fe5152493b98690ba1df09af7ee glibc-langpack-az-2.34-60.el9.7.tuxcare.els8.x86_64.rpm a06d0514d1c9f7ece80cc8869c8e05eaad3a76ac83c9d5cf4f08c9f883e7fef0 glibc-langpack-be-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e2365e59f273002dc02a0240f8ee7dfba6a358f16e529d409d0f5f801beca359 glibc-langpack-bem-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 38c791eb92dda03c6a14e5d2ea39b5ace69cf31e40810a6df9601429aaf23b33 glibc-langpack-ber-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0b305c966fec724de4d43e4d602a114a95817ab444c1ab01ea28494149c2dc21 glibc-langpack-bg-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f24e16cede17b2e8e8df9a4bcac22c2ab2b8a7576669c3db2df73f04111c979f glibc-langpack-bhb-2.34-60.el9.7.tuxcare.els8.x86_64.rpm efb08bed47ea075ac5f7a90474db31083bf5466d6eac68e0c2a74b39ecca55c8 glibc-langpack-bho-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 7f70d3b972511a3e202b33afb5e74f9229b90b6eb88f09bcf62c94378872db05 glibc-langpack-bi-2.34-60.el9.7.tuxcare.els8.x86_64.rpm a4d2538a51650d668471054d713810f574416ddbd96939718a9f737f53f99a07 glibc-langpack-bn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm dd1bee6680cffc7b64e275ab8a6495e1a39bb9ae599be6c0b65cb8df6ab86657 glibc-langpack-bo-2.34-60.el9.7.tuxcare.els8.x86_64.rpm cbed1b47d13c4f576b1e5f5c87fd3c63de412d4a6ec49ff60654a068e3543e60 glibc-langpack-br-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 5a349f14332f35ac023dce19eb876532835c630d49dc3f1aa92d2171fc13f927 glibc-langpack-brx-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6daa62cdee3e33a5ca84ccc052c2eb9dde31707acac05b47882de05de30bae01 glibc-langpack-bs-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 7d5950f63fa384689b28b319219f56fb2189ec898c89ff7fd3ee568e1d27824a glibc-langpack-byn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 54fa346e46f94bbae0669677995dfb69cdf396a641df4cc10b51e6163bf3156f glibc-langpack-ca-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 8dce8cbdf28b8d90fdaf233956261af8af29fefd7a7179c7ea319b34d89312ef glibc-langpack-ce-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 62b35e224117b51c24a74bd1917b3ef0de9ea42024d2e209a61d90b4350c5081 glibc-langpack-chr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 64888df2eac92acf34af0318df72447b0558d734d6ab78b0d667e8ca5304c8bd glibc-langpack-ckb-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 83570dcd4fac7f6ec48a71338e4a11cd023538e6b9caa1714ba69e781b75ef9a glibc-langpack-cmn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm dca77a319f4e5eef88162b8fc8f78914d8df77d12521f3d96e837f5798f6e4c8 glibc-langpack-crh-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6dd8fe726c2dd0148665682876fb737a2a5bae497543e650dc9fb304069e3a16 glibc-langpack-cs-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 261bc44d4d872e82996820f14ddb9c2f0253a6b6ed9536de0acd0e81a62ecb54 glibc-langpack-csb-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 7621d070a1f1390472777f0053873648ac4bb106551460332a0ff6d36774d91f glibc-langpack-cv-2.34-60.el9.7.tuxcare.els8.x86_64.rpm bc096d045e7c9aecf4e04f481b2a4a7af8c8518fcc20dd2d57182d331923702d glibc-langpack-cy-2.34-60.el9.7.tuxcare.els8.x86_64.rpm c8f831ab4c516cb791b94d9f7a2774f878abf7bc20a8218b3b5a296fd19e1e63 glibc-langpack-da-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 75567f26ecfe64eae3cabfa38b77016785db103ed9ac97f30846ff2c9fd84319 glibc-langpack-de-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 06394fe184bd03ce133db5287826f869a6f29201d7c90cc33e0d5005b2b0fcf1 glibc-langpack-doi-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 587ede43fef4f6f8c846a7d66d7e135a6d6ceb41be52669a2706c5a81d30bc8e glibc-langpack-dsb-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f43803bdfdd71b4e6a336e185babf0028331848a245a39d1207c91ad3ddd121f glibc-langpack-dv-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 98da5d36b0eecc53e643a5bd69407ba77e1dc91cbeea4cc902d79087a3e1975a glibc-langpack-dz-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 4d7adaddbe9696a266ddac05ac358624bf888b87c6fcb28852408e606e9a23ba glibc-langpack-el-2.34-60.el9.7.tuxcare.els8.x86_64.rpm efd5c291d0405104c5ffad153e5694ef13ba2a576ee351dc43e5bab2c75fd2a3 glibc-langpack-en-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 82393cc4653ea3012f809e3a6492a3f40da87f70bbbacab52c5d20d196b61c73 glibc-langpack-eo-2.34-60.el9.7.tuxcare.els8.x86_64.rpm fef0ed2d07aea1c3be7a6dc184308644a50e855da98bf428a8cd3aabe98a8b32 glibc-langpack-es-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 2d979699387fd8d59c4a08465ec64e02f95b696de33e142c0dabe0c6fdde4bef glibc-langpack-et-2.34-60.el9.7.tuxcare.els8.x86_64.rpm ff5a25e4a0de4bb525718e759ae870dba159a8824f02081990cf36731856aece glibc-langpack-eu-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 71553ec4005c308683cd7f1e615aeb5f3efcb88f05ea30a4a647d4ca2123f20c glibc-langpack-fa-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6c26c3a23f88e8bc3396b5806f3cd64b7590f5f7a13b3ba1dee4b34ce1394df0 glibc-langpack-ff-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 563aef42e1244b6d839b78757afa36e6a553723f7aa9e0d9da993044ea6042ff glibc-langpack-fi-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 21992b8c890cdaf66b3511adbb33245910680e1f4b62305feb40c082d4337302 glibc-langpack-fil-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f2d00b7d5f62d8b7b03f5e405cfda3f5ce121e0725d80b89a0c2a910ee134dec glibc-langpack-fo-2.34-60.el9.7.tuxcare.els8.x86_64.rpm d83baf103ebff1bf0258cec04c6e3be0f9129f32eaf71c8931684fcb22a99e37 glibc-langpack-fr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 972e80f71a78a1dcd592e40ac0746aeb673cea66a5636231d54c2d0edec160f1 glibc-langpack-fur-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 9319e2e07703aebd93c9262be2b3ba33b000940c456b87d1e78cf5f8c6a0121e glibc-langpack-fy-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0fa489187e0f416e5c3da764d448304606a31f2222d3ac685a117b869814b17d glibc-langpack-ga-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 882b7c83001c877f93b8e5563205173fc9653ee8804ca36ba229aad56ee9b9c7 glibc-langpack-gd-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 9456db92f379fb65fefe181e9e7e4ec534765c37196103d66fa0872baa40881e glibc-langpack-gez-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 9aa84749d0371d88b7186c71347e2d24572747377361a09e5015ffa187012d39 glibc-langpack-gl-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f2a821a5d868ace775d90e1c53b235afb36d0ecf880e775215037e5d36374a2a glibc-langpack-gu-2.34-60.el9.7.tuxcare.els8.x86_64.rpm b369d207fe3693e91f3566dfdbae2f5bffc90c1fcb6dfe05543851e7888e973f glibc-langpack-gv-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 452f329151781425e2892a33f485cc438a304ea3bf33c871763d21ce478a3fd7 glibc-langpack-ha-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 5f48441f6118ef024d39b8c6e7598d11e6e70f97e783e8717b1ea2ed19437692 glibc-langpack-hak-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0091b432ab8c4fad2c67bf1d0586d975ecd92ec7bea4ebb1b656f1732a1e2d9e glibc-langpack-he-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6db4476e01490e65da375c76efe8bea8f18607ec2ccd45f1eb675e51b5ad3332 glibc-langpack-hi-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 684e8e4c3e3bccd58fe87ff8358e5c848db5f600669b0ee2f5316c5e509730d4 glibc-langpack-hif-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f735787c9ea85bab0b9802331eb8cadf3204036ffa7133ada500b7086b184b0f glibc-langpack-hne-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 668efc0f0b3ea03625a4fdcc54bb22558c0c679b3d097a153eaa3916f25eb23c glibc-langpack-hr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 314f44a78180fe386e0b9f7ecc0ff3eef2a0c0cc093599697b5f5f936012ef5d glibc-langpack-hsb-2.34-60.el9.7.tuxcare.els8.x86_64.rpm dd5e691f0fc986019a4f25ef05d25a378617e1e5186951e087cc0ce570732ab0 glibc-langpack-ht-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 392d89b481a6bf0dabac9e3a1c75cbe442a6b9eb816223e52db341ba75e8b7ff glibc-langpack-hu-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 7440f672b988999708fdc8d823c8d97f07e28e2c3c3b71c431c2d61730aba271 glibc-langpack-hy-2.34-60.el9.7.tuxcare.els8.x86_64.rpm c08748e77a077cbee3366003128129d326186dc0d361887aeac8bbfa9e7f603e glibc-langpack-ia-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 45cf9e61aafd79f7e81ffd46ab94e4122e9e569ff552ac949382271b954122fe glibc-langpack-id-2.34-60.el9.7.tuxcare.els8.x86_64.rpm b63e8106329f6cb0015d64a88ba5bfde14bac99c070fdd93aa7fe8ed9483da68 glibc-langpack-ig-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 70c0380dcb8e1caefe57e1dcc3593348cd91ac4ec354b00d983cd9c98c7b09a9 glibc-langpack-ik-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 4bc1e86a50b71c4af9ac8134f2f2484bc361874d571a0f2285289b4c562f00dc glibc-langpack-is-2.34-60.el9.7.tuxcare.els8.x86_64.rpm d29bd0a4339a75c40a2b432fd6ef1171d22a6d7394caeb141319886311213709 glibc-langpack-it-2.34-60.el9.7.tuxcare.els8.x86_64.rpm ad9abf1d43fb7367eeab96fc12599e3d32febc7e7efa8a24706c4cd44beed481 glibc-langpack-iu-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 58c192e6d905c6aa1bd6cf37c5c3fbc9bb73277da0e7f8747121368f83b26308 glibc-langpack-ja-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f14901e80e9a3f05cf7de658b6f6fce3cc49cd84ef01b405afdcb83f3593b7e2 glibc-langpack-ka-2.34-60.el9.7.tuxcare.els8.x86_64.rpm ddcf654ea23e84d24619c265fbed405a733cc4982da4614c8c501a38f9a7394f glibc-langpack-kab-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 7a45a556a8e8492e8f9b3ff9ffc36d2780a9016164a0b6d0a6a514cf9c458199 glibc-langpack-kk-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0b6e4f241f75ad8c3563dae556c7a7f3e0d36e19461bf601974bc06f09d6db5b glibc-langpack-kl-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0172ff5ec1fed600c53cf99618def80c80368c3125a5020071ebd8ee3000781d glibc-langpack-km-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 15044dc23f9282a23adea497659e2fc111c36ac3378a1b5e28f6785d0d346171 glibc-langpack-kn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 45c9f077d788ea367968403d7c5c67ae51016485ad7d9436b7208f2e6c3637e8 glibc-langpack-ko-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 64a1c5abd2ab560c2bf4f43111cfc32f511fa09ef402b9a6caa9f3bf68975a88 glibc-langpack-kok-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0150ae2d20809efedb44fbc8fcbdca0611ff03b17badb80cc050a2fbce662612 glibc-langpack-ks-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f1765048df596585c105d8c96408d62e01a49ce0441feaff7e1c4f60d24fcff6 glibc-langpack-ku-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 8bd49af9f360b2d035e79bb07dcbbc70ba72bb6acbe4c5946cb2b73a366d7f3c glibc-langpack-kw-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 61880f01ec00850d1b4310172a47350d96416e3d84449650c60832462a38f1b7 glibc-langpack-ky-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 9157c58220140595a0bbd485a702b04640d912ca11287effff08896a54cbb8fe glibc-langpack-lb-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e86e9e4104657aee8c54b2448cadb5b3be2849ec61f2c85135faaa93ef170b8b glibc-langpack-lg-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 3452d2cd95cf84e075ce21cbb2b92cd6cdf1744b0edbf3bae6aa749929042b60 glibc-langpack-li-2.34-60.el9.7.tuxcare.els8.x86_64.rpm a47049138bde87ba615d18c5c2747bbec6c77f48accfd2375fb1ed1b963b595a glibc-langpack-lij-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6357112a38142447690977f2adfa7731e2f2a9fa5a864d61bdf2d19bedb30814 glibc-langpack-ln-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 8ec4e983679be6b25d31b7b2c1b60faed42285e4065ebb89c9a21622cdaa7250 glibc-langpack-lo-2.34-60.el9.7.tuxcare.els8.x86_64.rpm d644ca36389eab34a4e833d2909e8fcafa328c93faf084e839a058f4efe751e8 glibc-langpack-lt-2.34-60.el9.7.tuxcare.els8.x86_64.rpm eed84a2049825a513255ee7d746a2ce7a5ea25b4dfc51fd3316364f55fbf4fe5 glibc-langpack-lv-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 185632775b1ebe4905d65807095cc6e6d774d2b51560a92f718705c8e9cda402 glibc-langpack-lzh-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 4bc6b735cab529b938359275cf3a332edf06e2509312c5d2c18feb798e3ac5df glibc-langpack-mag-2.34-60.el9.7.tuxcare.els8.x86_64.rpm fbafbeb0bbab9f6c72da6b33e147ad540e738b44aa925831b640c98ac24de047 glibc-langpack-mai-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e28752dbd1a47b5ebc826b87b594a5a39f47d52df05c3a93a0a8336278e86ea8 glibc-langpack-mfe-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0c579fc74e10db2a5b1cf4474175d37165603cf8271598362e0ae51065880f81 glibc-langpack-mg-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 2e8a5faa2bba4cc4b9d708f7fe0b97ab8f44c09da3e5f60c6b16d2d2cd716146 glibc-langpack-mhr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm adfa5060808925bcd92ff40a83beb14485dbca00e175200c57d45532eac6b06b glibc-langpack-mi-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6d30ca7ed8c804c1fd002f0d98f801743a8af726c0de2a750d7f90c134eaf4c2 glibc-langpack-miq-2.34-60.el9.7.tuxcare.els8.x86_64.rpm d5b4b77980a9c747af5d71a7c07e274c444d52a1b954e624c5f5b81ee839f8fa glibc-langpack-mjw-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6cdb3f6a1ce36af0e1c9ff6315c198c4ff1d91d264af0b5ae97323a01d52d662 glibc-langpack-mk-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 91a19f5d855ecce1642bb93bf2f9aed2614f180505e75c7009bdc3ac01a6214b glibc-langpack-ml-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f9c2989e81323fb65903c2b3d1560d5c5acc16e0bccc3f688d9cac24b467fae6 glibc-langpack-mn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 657a74a486588e9604d04c7f479cd6e5005417ded0497e5e463d0945d2165c68 glibc-langpack-mni-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 1ad0ebe4692af92b34e23c93858cf9d30253bce7c75aa18e82f2a6ffd5ae29e5 glibc-langpack-mnw-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 969ababf2ebbbfee6889908672369878ae3a9c81938a01f941127a48d7ea69bd glibc-langpack-mr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f2edb0573b8f84c3101080e74dde4caca451230437f6f0718b8be1106e670d12 glibc-langpack-ms-2.34-60.el9.7.tuxcare.els8.x86_64.rpm ae88656b3854eac75925efbaca91336cd02dd7a493181849e08103374ed7ebd5 glibc-langpack-mt-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 08b70739013d296483ea06cd8c55876778b801817cfe86dfab77a0f114488233 glibc-langpack-my-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 038d65b2f71f6aee5a05de47fa165a0c44be7454c1fb9b45d6c4e40e0b5a77fb glibc-langpack-nan-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 75e64082e0a7ec014c7d1d3081681a48e6fad6f1aa653e5a0480bb3d0d03ba9b glibc-langpack-nb-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 86e0b69ff9446b954e56dba041cb0ef623403c2c01a87d302e0365ae3a0cf51f glibc-langpack-nds-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 4c6fab60d7f4f8312f6e647a51b63ca1d560196576564cc47a5f23d63c504bbd glibc-langpack-ne-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e625922288304966b142a01be3b75ff636f523fc41e43a9f0e6eecc66aa28d70 glibc-langpack-nhn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 635f1587a9031442f626379ea6ad261aca33b6eaa6dc19390a70bc40eecd734d glibc-langpack-niu-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 074d6094a3ff53046ee47de6435055adf9ede00da23cadd13518f137f45cb446 glibc-langpack-nl-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 7d1e338c375b9d5a466d135291b24c890a1d182355bfdbbfc617924c345b656f glibc-langpack-nn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 8a3e21f653c154598c9754654b1d5f6de130ab92ad7ec7ff296784936ef05062 glibc-langpack-nr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm a110f28dac8e62e72f08fe92aa79782d3482f339de5f30080dc1ae152db5f716 glibc-langpack-nso-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f9bbe20c002d2cbf4a6b7f22b072b3e15db1205d92dea48279ab9c84291f5240 glibc-langpack-oc-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 3da9a4e22f380fc6f82743163341fc1f92e1e0bb1b60ddff82efe6f90117209a glibc-langpack-om-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 91972ad89fdfc6f52025326f58fde0dd267f1f613290722501d722be08a302fc glibc-langpack-or-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6e94e6357301b2493a81d639136b1d5d57e22feac8a297d8a11654a83a7ada29 glibc-langpack-os-2.34-60.el9.7.tuxcare.els8.x86_64.rpm bb124ffc5751fc44d535b773874bee730a34a429da14ecfa4745eedac7b42c6b glibc-langpack-pa-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 097ac1b6e9a55f52e87a900c3481c88c75c965ecde326b105d7679654df65bcb glibc-langpack-pap-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 360ac7a4dafe485da98b0b358e90c963f2e7a7f748b63130d0a993aa73a8fc78 glibc-langpack-pl-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 31e5875ed26d782951da3f54be515b19e050b87e8d29abc087eb8569e9a64d47 glibc-langpack-ps-2.34-60.el9.7.tuxcare.els8.x86_64.rpm b496c2c33038f715384e688b581d34323587d88a41e5f8aa8440dea044913c15 glibc-langpack-pt-2.34-60.el9.7.tuxcare.els8.x86_64.rpm c312db55ca08e7fc97a7b26165ccdc85b37b2aceea1fe914cd70e01757bd4184 glibc-langpack-quz-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 96bb6b5d73730542cb142d900b85436b00d618279e337e226264cf9b1406f34c glibc-langpack-raj-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 3d4400fd54dc6df9c4e02c1b122f521292d01d636e8ec796d8d012daaa4cc84b glibc-langpack-ro-2.34-60.el9.7.tuxcare.els8.x86_64.rpm faa4ac7fb20bd557b0fd1dd6e5042c99e1853ef8d707d942057ca4540814bb47 glibc-langpack-ru-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 58ab8ce0bada80693b2ed1ee216529fce61f2aba0f6745996226148979d2b17a glibc-langpack-rw-2.34-60.el9.7.tuxcare.els8.x86_64.rpm b62a57b9979ff64abddd731ead7ef379b0b1fcf4409f9bf022c6636f5ef5553e glibc-langpack-sa-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 853cb63743d970c4aa028ea4337c2c2393ac5ebb8f25a1d37b48ab1361b1ba47 glibc-langpack-sah-2.34-60.el9.7.tuxcare.els8.x86_64.rpm db5ac937d8d242303f9d3937ae283c5f399f97f70237530a121bd235b89da271 glibc-langpack-sat-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 69b9f33761143a071d59425403204f4e142135d9dcb14e1a68d616bd0326181c glibc-langpack-sc-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 35d685e3156a6bc2bf2f6263a76fa00a9e0ea0511c74dbb16a5c960b90c93fcb glibc-langpack-sd-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0d0e6264fe45611cedf867bfd216b7e0c43d472269134fbce82953a6b3c5b80a glibc-langpack-se-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 963458c0836372470df1fcf22b5674a8db364cab933bcd1ba403e9827b5d38ec glibc-langpack-sgs-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 34a77fe94b63fd28f944cd269b6d6ca15677b298bcee63c30be5eb4d5d09a67a glibc-langpack-shn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 25c1b58a629aeb5a0a34734e9c1531a6d91d49e797e1e5b1d9579b437d3e9bd9 glibc-langpack-shs-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 937728cd9186360703c7eee9b7808d4642da867d3843da1f05818fb9380fc670 glibc-langpack-si-2.34-60.el9.7.tuxcare.els8.x86_64.rpm fc7773902fa84751e9603781167570bd68a54f839c45f6aefd76f316d5a1aa7a glibc-langpack-sid-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0b4681156e935333792030449ac3dc440b885843abf65994e368b082b0cfe7ce glibc-langpack-sk-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 3b57b128fdb9f1c58022845ae182fce8ba04f3dcd37d7368155c92c91b06f51f glibc-langpack-sl-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 325c70c06dfd2e9af36dd234499ceb30ca23e081f6a04d477434a24ece4257b3 glibc-langpack-sm-2.34-60.el9.7.tuxcare.els8.x86_64.rpm d6206a55de915536e97fb9581c598e6391928ed9d86ba905c1a18b09da4d88b4 glibc-langpack-so-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 1a4853c57a8d83961c6e38142b6eaea5e105ca11a78e588510ddb03d17fa76ac glibc-langpack-sq-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f0049a61f64e36c38885e88bc1391ab79757c49304f6a6fd79aa4dd10d330799 glibc-langpack-sr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 25179ca722bedf2edb3a6accee54453c71cc93815a10c3f78f4edda2ee86efb4 glibc-langpack-ss-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 6d87cae49a27d7e48b1067b3a895c82a16a40ab4a9c291ca304545edc277b666 glibc-langpack-st-2.34-60.el9.7.tuxcare.els8.x86_64.rpm c138218541ba5e59afed3c4df787356a73261f7880fbc7a77ab6e609d0e0e251 glibc-langpack-sv-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 18bea084742c975c38ae4cb254f9da2ab0c7777a0fd80993583f82cc9f3a13d7 glibc-langpack-sw-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 24ae4d6ee7456a2231a4a66f7475f7c8dbb7163e941f8240a001cf30f6883dc9 glibc-langpack-szl-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 8d3f50bc40c3cf4f3f92dc5b5e2511b40e57832578d2c536540425999297c772 glibc-langpack-ta-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 417b859f9e4b077a72d425edf7e8ebc01fed12ee521942035089f6f5bdf53d9f glibc-langpack-tcy-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 50cf8155e18f7ddc30fe4f5d708deb29567023b33daabcc7963496571e9421e8 glibc-langpack-te-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 04390b93063544928dce3960783e2cf398eab4a5a2d4cd08b499f6543ba97fbc glibc-langpack-tg-2.34-60.el9.7.tuxcare.els8.x86_64.rpm da564c0e14e75d3ebab75c94dd08c1a4f7934a4fac3a1c16b83c4aa798c9fa55 glibc-langpack-th-2.34-60.el9.7.tuxcare.els8.x86_64.rpm a9e9b5472cc6e2a7b05fd2451f85de377a2b5a00fb23f0dc1695cd767d4ee834 glibc-langpack-the-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 495e02f93b9ce98c0adf759aa02f0e292cab97c4fe85e25cc2331787d874abdc glibc-langpack-ti-2.34-60.el9.7.tuxcare.els8.x86_64.rpm ef89fed52a8f6e425c8d179ff0574bb8098d27d008fe95c5bbdad4aeb4ce0847 glibc-langpack-tig-2.34-60.el9.7.tuxcare.els8.x86_64.rpm ed0b38661261610ff7d2ea4cfbdf728ff916e2f84bf32df9d41cd16dfc14223b glibc-langpack-tk-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 161e4c8b4ff7c4e32f307fc870b79656a5bd77c78a57c4f3b819b9dd6c141d25 glibc-langpack-tl-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 5f977bac9a550e247c86a0e6b70f8b88f47ab8760be7d02f0a59f475d24ddb50 glibc-langpack-tn-2.34-60.el9.7.tuxcare.els8.x86_64.rpm b722624d6b09b65aa5ecb90f9c78d46754efff0f23b841eaaaa93c5e2a57ee8d glibc-langpack-to-2.34-60.el9.7.tuxcare.els8.x86_64.rpm ab007fb76728cf2fccfccce7cd0ffc869c81d2aa73347e8ba1324a8ec28e03e1 glibc-langpack-tpi-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 210ab62ea861cbbf680ace987dabf5f20d0981ebc09f3fd06402a1815236a5d5 glibc-langpack-tr-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 26b362fcb8a1ff8559e3b208fed8b888f3fee4599804faa1ded2ad3cdb5a0574 glibc-langpack-ts-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e4667bef3eaa57b5198e44d92994f524f4af6fc2c5c835fad87716c1d2c3c1f6 glibc-langpack-tt-2.34-60.el9.7.tuxcare.els8.x86_64.rpm d4643238d4d068218a43c103bcbccf4f4e439cd9471d468913c1af6a40e00981 glibc-langpack-ug-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 3e10466d93e5cd1ffe2840490ec7881a62da1b8818caa8ac34377509ab877f0d glibc-langpack-uk-2.34-60.el9.7.tuxcare.els8.x86_64.rpm bf50a0e64ef7f7849e1eca2c3d7fb9af5def3663bbabaa433649b6c9e1d623bb glibc-langpack-unm-2.34-60.el9.7.tuxcare.els8.x86_64.rpm a1a2e8bf4f220c9ff5bb5b48c0f8fe4353be7d9e384089799cf7bb48dc8eacf5 glibc-langpack-ur-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e11bc3c83524d396b1026c14d6360d54aa9f3d10a287d6c4affbb91e6b6d81eb glibc-langpack-uz-2.34-60.el9.7.tuxcare.els8.x86_64.rpm cbf4e8f92a84180162e0eff0455cb1afa2f05f6e968f5916849208d4e00eba34 glibc-langpack-ve-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 13abb0c0359f186bea3b2788bbbd308185d11d277f45671e077913af4fe6f63e glibc-langpack-vi-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f1adfe0c04fd3a75420b3f3c395cb3ee6a67816ffd19aa519b4da3619bc09fed glibc-langpack-wa-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 4345566ffcf4d1857e7971091cc7dd153edaa897ed824bab05470c56461dd89b glibc-langpack-wae-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e5cc7db69d6dac9e9a5578ba2b2208278fcd565609196e7bf91448a1a7991d84 glibc-langpack-wal-2.34-60.el9.7.tuxcare.els8.x86_64.rpm f257e83f88d5b58e26bf72dcaf21cbf9f4a663236ed1e692c4e426bd4cd4a9cd glibc-langpack-wo-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 02ea4627477dd615e92b39c19781633454264e869d39a38a9e16404a280bba26 glibc-langpack-xh-2.34-60.el9.7.tuxcare.els8.x86_64.rpm d4e88090fb9163f5793b980e71cdb237e2a1649d9a9c88b06677995b16766900 glibc-langpack-yi-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 42f1811061d27705031a5ef79fae3c209d7f1a48c696e752b714ca850504926a glibc-langpack-yo-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 77909d54b68ac4e8f6e8201f54bff39c5355d97cc75bc3386ea236e1165e4e9c glibc-langpack-yue-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 0f572448cfeb97ce15be2ffa0afa96d847f5319c819c97253197f2cc72de1ef2 glibc-langpack-yuw-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 5d54ec3c77027c8fe245267bfe04e51daecf4d94b05d27ca09413fe94c55b546 glibc-langpack-zh-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 45821ace2af9e9d450e45d14dab19018d1e0ba36ed54e3c6a7cee0e4e041f512 glibc-langpack-zu-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 12de55c17309d4a6498a5e795a7e1f1f3e8240b1d91edf31b6eba196e2f6d79e glibc-locale-source-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 31c287a4ee5b8a95a99490315e63623adcdfff9a0cf76d369879847da810f957 glibc-minimal-langpack-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 099d482d580d98d3fb5a655fb8ce3ce8a9c258714b28c56897d079b26994e8af glibc-nss-devel-2.34-60.el9.7.tuxcare.els8.i686.rpm 7064ed43fd57730db54f0a0a52cdc704198f2682d05776f2b8d82b5c2091053a glibc-nss-devel-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 786cdab0779bcfb49bd8683d59fbf31931a6097d4cca67e396550c7326ff7a54 glibc-static-2.34-60.el9.7.tuxcare.els8.i686.rpm 18a70683c48776db3f88c8c757d8968ce7d468f8a6187a03cb760f3cd11f778a glibc-static-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 4930492da2e7f7680b841a634f740f949b490e0500daa6c77389060b392eaf78 glibc-utils-2.34-60.el9.7.tuxcare.els8.x86_64.rpm e523b25fba4c2301169a37d0f56119fe267ca02ab8a5c159cb3349a7ea5b9547 libnsl-2.34-60.el9.7.tuxcare.els8.i686.rpm d4e716d6425d708d94d4a6b81f7e8b42af1c0e50463ccac33bfcb05a16d3e743 libnsl-2.34-60.el9.7.tuxcare.els8.x86_64.rpm b4b35d222361889d818c36d3166592d2341be847e5c729874f3ef915e1f26072 nscd-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 2c6703a32893813229e9a85dd3ac88e309b213abcd7403015c5b0b37336652d8 nss_db-2.34-60.el9.7.tuxcare.els8.i686.rpm 301815cad57c1d1a181986456c4b1b1446033e8537f3b618bfdf7d806c612611 nss_db-2.34-60.el9.7.tuxcare.els8.x86_64.rpm a71f86b161720d133b5f4fcf0c053d01efbf11578ae6093fd13e4e9fc49e823d nss_hesiod-2.34-60.el9.7.tuxcare.els8.i686.rpm 5bd193665244200a13c613ca038db19c9f8450112e9bd688f3e354226fb2a4c9 nss_hesiod-2.34-60.el9.7.tuxcare.els8.x86_64.rpm 4a1114ea94f5be84f2bd164f2dc06a76a81c1fe5940c642e771352ced6d16bf2 sysroot-aarch64-el9-glibc-2.34-60.el9.7.tuxcare.els8.noarch.rpm a5ce47d4e66401410a7065745f11b788ef9f2febaad3f235ab54e189e19aa07f sysroot-i386-el9-glibc-2.34-60.el9.7.tuxcare.els8.noarch.rpm 6edf07d1b53861a75b069557ec9582550fe708cbfdc73b87bae5f922eb9ed929 sysroot-x86_64-el9-glibc-2.34-60.el9.7.tuxcare.els8.noarch.rpm ac1856ab1554113aaa7ee5073ab9f64d270dc2b3c7b45741ce4f654f303916b1 CLSA-2026:1773829377 TuxCare License Agreement 0 - CVE-2025-61145: fix double-free and memory leak in tiffcrop, avoid dangling pointer in loadImage by clearing *read_ptr after free Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61145: fix double-free and memory leak in tiffcrop, avoid dangling pointer in loadImage by clearing *read_ptr after free

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els8.i686.rpm 883ba75249fdf817210f16f3b70fe359921b07cc19c6db28a2b74e1b71c3fcef libtiff-4.4.0-8.el9_2.tuxcare.els8.x86_64.rpm f69a955ba58514b5f1b97854905de6bc1410a885f1b9255a06a8bf1d4affed3a libtiff-devel-4.4.0-8.el9_2.tuxcare.els8.i686.rpm d0239df2eac6c1f32efb1ce7cc67b81ae54abe35f69220c6d091e5d6f21a5ed9 libtiff-devel-4.4.0-8.el9_2.tuxcare.els8.x86_64.rpm 87bd322ec0454c3ea9c516f1c0301ec95df05ea1468188460fee845c91935be6 libtiff-static-4.4.0-8.el9_2.tuxcare.els8.x86_64.rpm d23593c1a55c82c582062e3059fe152bd6ddc72792c161287cd8e85aa604b50a libtiff-tools-4.4.0-8.el9_2.tuxcare.els8.x86_64.rpm 704711a88ed64b301608652e4e56e3b75c8565c2a1d53490aa935f5fb48f4a4c CLSA-2026:1773830081 TuxCare License Agreement 0 - CVE-2026-2447: fix heap buffer overflow in write_superframe_index Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2447: fix heap buffer overflow in write_superframe_index

0 tuxcare-almalinux9.2-esu libvpx-1.9.0-7.el9_2.alma.1.tuxcare.els3.i686.rpm cf2633ae88863f1d393d3773af3feeacbd0c060d9b9b382f80d3661c8a13b2f9 libvpx-1.9.0-7.el9_2.alma.1.tuxcare.els3.x86_64.rpm 777ef42bfec705ef1765f49783264a62a7d00ac98cc47719e93be64cc68c8d84 libvpx-devel-1.9.0-7.el9_2.alma.1.tuxcare.els3.i686.rpm 9906b1cf9d4829fa344c65b8e331c8a89cc8b5e48a60fd072b80545b1ad7ed62 libvpx-devel-1.9.0-7.el9_2.alma.1.tuxcare.els3.x86_64.rpm 6949a11664ce5cc266b021f914be36f5fccce1322d27392a1ba126be10b803d7 libvpx-utils-1.9.0-7.el9_2.alma.1.tuxcare.els3.x86_64.rpm d54243924564e88869ed2522879ebe5ae8613d7fefc56a065f64bc2b522ea414 CLSA-2026:1773830791 TuxCare License Agreement 0 - CVE-2026-3731: fix out-of-bounds read in sftp_extensions_get_name and sftp_extensions_get_data when idx equals the extension count Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3731: fix out-of-bounds read in sftp_extensions_get_name and sftp_extensions_get_data when idx equals the extension count

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els7.i686.rpm 7e26668a08e60994930dd38df9d6989163cbb9ccc4c5b8d40e5ed2568aa6b86b libssh-0.10.4-8.el9.tuxcare.els7.x86_64.rpm 3b24bd2f42ca61a3a8d203ae2920b54df67126353533044cbe8bce82075e084b libssh-config-0.10.4-8.el9.tuxcare.els7.noarch.rpm 550be02af7107695f9d77c367eb36a7a2fbaa87c19d0ad3cf3696dc19bea0d58 libssh-devel-0.10.4-8.el9.tuxcare.els7.i686.rpm 9b91fdd708207d3da904204a668213943aa293f899be3a09c09b63f627704f1b libssh-devel-0.10.4-8.el9.tuxcare.els7.x86_64.rpm 30568ae0b06bbeb4f1eede9d76d14160f98e33f8eda5538665e33fb12a76a6c2 CLSA-2026:1773938530 TuxCare License Agreement 0 - CVE-2026-3783: prevent bearer token leak on HTTP(S) redirect when .netrc contains entries for the redirected host Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3783: prevent bearer token leak on HTTP(S) redirect when .netrc contains entries for the redirected host

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els7.x86_64.rpm 5365699e77fa4698ff0fc8ddf2579c6c531d47bd0a2227cb549fd297d4875da9 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els7.x86_64.rpm c459820b2b00b1e976777de9428dc56e9bf1f9909b9fc9a55192dab8902d1e70 libcurl-7.76.1-31.el9_2.1.tuxcare.els7.i686.rpm 77964b41e9f55c015591aa4390262af20170dd1140bd1f1cca16fa4d43b22f2b libcurl-7.76.1-31.el9_2.1.tuxcare.els7.x86_64.rpm 4cd8d3d0d452f8fa92a6f0ee29e0b888f3d9a269a524ef5aff673e7e64702ace libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els7.i686.rpm 49811930da5b339ce0b846c6740fd3416b6291cbd5dfbac2ea6707a6c81fb18b libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els7.x86_64.rpm a22c626d52e8e5d1b32477e85ab8a8caed67a911ac14703ddb75bc7a71a03750 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els7.i686.rpm 8fcac03ef664ebe2618304a5c4a49375fd1ea15a34c611bd7d1033398aa8c971 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els7.x86_64.rpm 4984d4350dbba240c8dbf9ea0dff7262766f98c7d3fb2242e71d8e5fd9dec382 CLSA-2026:1774006814 TuxCare License Agreement 0 - CVE-2026-25210: fix integer overflow in tag buffer reallocation in doContent Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25210: fix integer overflow in tag buffer reallocation in doContent

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els8.i686.rpm d55b3f884988485552ba370c2d8a56a05d607766e9d6f319e6607cbaf99150f9 expat-2.5.0-1.el9.tuxcare.els8.x86_64.rpm 6a9c2681186ea6e370de14246d5ac9dd4141ebf4287a4654814fba9c85c25650 expat-devel-2.5.0-1.el9.tuxcare.els8.i686.rpm 9a111e5b71e860d1391e5bad198d8ea959b5e73bc2052e69f7c53a8cd5708f79 expat-devel-2.5.0-1.el9.tuxcare.els8.x86_64.rpm 3f5ca271b52019690166f114c94bd15c28836ded4dc83f6f9f1d9732c5229e35 expat-static-2.5.0-1.el9.tuxcare.els8.x86_64.rpm 5d6778645c13f53b69d8e1fd8ec8f6265e4f703dbc2c0136f474e57afce5546f CLSA-2026:1774023753 TuxCare License Agreement 0 - Addition AMD CPU microcode for processor family 0x1a: cpuid:0x00B00F21(ver:0x0B002161), cpuid:0x00B00F81(ver:0x0B008121), cpuid:0x00B10F10(ver:0x0B101058), cpuid:0x00B20F40(ver:0x0B204037), cpuid:0x00B40F40(ver:0x0B404035), cpuid:0x00B40F41(ver:0x0B404108), cpuid:0x00B60F00(ver:0x0B600037), cpuid:0x00B60F80(ver:0x0B608038), cpuid:0x00B70F00(ver:0x0B700037); - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F11(ver:0x0A0011DE), cpuid:0x00A00F12(ver:0x0A001247), cpuid:0x00A00F82(ver:0x0A00820D), cpuid:0x00A10F11(ver:0x0A101158), cpuid:0x00A10F12(ver:0x0A101253), cpuid:0x00A10F81(ver:0x0A108109), cpuid:0x00A20F10(ver:0x0A20102E), cpuid:0x00A20F12(ver:0x0A201211), cpuid:0x00A40F41(ver:0x0A404108), cpuid:0x00A50F00(ver:0x0A500012), cpuid:0x00A60F12(ver:0x0A60120A), cpuid:0x00A70F41(ver:0x0A704108), cpuid:0x00A70F52(ver:0x0A705208), cpuid:0x00A70F80(ver:0x0A708008), cpuid:0x00A70FC0(ver:0x0A70C008), cpuid:0x00AA0F02(ver:0x0AA0021C); None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Addition AMD CPU microcode for processor family 0x1a: cpuid:0x00B00F21(ver:0x0B002161), cpuid:0x00B00F81(ver:0x0B008121), cpuid:0x00B10F10(ver:0x0B101058), cpuid:0x00B20F40(ver:0x0B204037), cpuid:0x00B40F40(ver:0x0B404035), cpuid:0x00B40F41(ver:0x0B404108), cpuid:0x00B60F00(ver:0x0B600037), cpuid:0x00B60F80(ver:0x0B608038), cpuid:0x00B70F00(ver:0x0B700037); - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F11(ver:0x0A0011DE), cpuid:0x00A00F12(ver:0x0A001247), cpuid:0x00A00F82(ver:0x0A00820D), cpuid:0x00A10F11(ver:0x0A101158), cpuid:0x00A10F12(ver:0x0A101253), cpuid:0x00A10F81(ver:0x0A108109), cpuid:0x00A20F10(ver:0x0A20102E), cpuid:0x00A20F12(ver:0x0A201211), cpuid:0x00A40F41(ver:0x0A404108), cpuid:0x00A50F00(ver:0x0A500012), cpuid:0x00A60F12(ver:0x0A60120A), cpuid:0x00A70F41(ver:0x0A704108), cpuid:0x00A70F52(ver:0x0A705208), cpuid:0x00A70F80(ver:0x0A708008), cpuid:0x00A70FC0(ver:0x0A70C008), cpuid:0x00AA0F02(ver:0x0AA0021C);

0 tuxcare-almalinux9.2-esu iwl100-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm c2fd408fa34f0d796ee83f5d639ab7060d63823d50eb81e52b5faea151cc4e86 iwl1000-firmware-39.31.5.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm bffba73f2621e4c8a96db58466fac634da2433dbc2388a275d900cea7459375f iwl105-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm c8d2a95eb59305953719729a785b6952092c1871c5251f389f057d176dc23a52 iwl135-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 27d28ae75f8527a5014c7f51de362ef7d24e54a068fb67549c8d42d62997c49d iwl2000-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 89f0b1459d9566e2fce98cca34fcdddc0b39d4922a3336d97a9bae1a0c44efa0 iwl2030-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 76cb22eb975ece7dc64246dd17cfcb1be9a59d906129ec5522ba01960b629ae5 iwl3160-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 2feff132d2ee1111b7ebb43741a775205e1058b9c5a4af5ac1e09b3154f86c3b iwl3945-firmware-15.32.2.9-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 3e7f0e9f492d240f3140afe655fa13f2360dcf00a28509cb630c56fa72bba4a9 iwl4965-firmware-228.61.2.24-135.el9_2.alma.1.tuxcare.els7.noarch.rpm b8ef13df2b7a1cbaded33f92bcf5f22447a92fcd6e122c7f3869fd12ae8b225b iwl5000-firmware-8.83.5.1_1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm a27fac255317f9001061d9efe12441014d24ea11559d618bbc5afdceb82527be iwl5150-firmware-8.24.2.2-135.el9_2.alma.1.tuxcare.els7.noarch.rpm ebcb2d5c7660238520c7c828a4edc8453dc48cb46bdc663e8c276a506aebf4c7 iwl6000-firmware-9.221.4.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm c3c6e6040bf336c19f39464ebff8402f46e88e4d6e2e9a3b4b3ff0f2c3058ff6 iwl6000g2a-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm aef5018f72221b1b1a6a23f5baf9b06d37753bd37c6ca0184d9d6327c4195adb iwl6000g2b-firmware-18.168.6.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm cf2b3228d64b731bcac3112087fd6dafc6efb27379d6ec8549c1dea2750c9c60 iwl6050-firmware-41.28.5.1-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 050f75d03d034b4f7a3d4169b239c25f7bb652decf80b6eea86b6e6c8ee335f6 iwl7260-firmware-25.30.13.0-135.el9_2.alma.1.tuxcare.els7.noarch.rpm a7570e44c99fdd45b01091266378d800bd72fee7306189daee999413288a570b libertas-sd8686-firmware-20230310-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 0aac080c80ebf1c5178aa0e2a72bd6279bb3397c5fd819abd48911cbaf88fb87 libertas-sd8787-firmware-20230310-135.el9_2.alma.1.tuxcare.els7.noarch.rpm f83c416bbc65f28f37894efaa9a41e7c11147cf51e2da9a3e6acd4a27381d573 libertas-usb8388-firmware-20230310-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 267d63bcbba6a764dc6ddf51c61658f2fa0f61954c16773ca6865d622475690d libertas-usb8388-olpc-firmware-20230310-135.el9_2.alma.1.tuxcare.els7.noarch.rpm c10b51e84540fb7da4e9af18209dc6dc090c4e63a1d2d7b4631ff534f2781c7a linux-firmware-20230310-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 75d4c99731bba3f3ca9a051d8886212ffc3b595f49c995f28963217a583a1739 linux-firmware-whence-20230310-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 36e6b8f55cb0d3b17d1e05c051fc8b23f498dbcbdcaa84999c1031ed0fc7e7ef liquidio-firmware-20230310-135.el9_2.alma.1.tuxcare.els7.noarch.rpm 6947578134e630909785aa32dcd4f3d6b2d831d9fdffe00d1e21fb074073b879 netronome-firmware-20230310-135.el9_2.alma.1.tuxcare.els7.noarch.rpm c4dd0d8ada832042ae81e0d1fb82197409f9135f100be74fb24d305201ad48db CLSA-2026:1774261018 TuxCare License Agreement 0 - CVE-2026-0865: Prevent HTTP header injection: validate and reject user- controlled header names and values containing newlines. - CVE-2025-15367: Reject control characters in POP3 commands - CVE-2026-1299: Reject incorrectly folded LiteralHeader values and quote newlines during BytesGenerator serialization; prevent header injection Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0865: Prevent HTTP header injection: validate and reject user- controlled header names and values containing newlines. - CVE-2025-15367: Reject control characters in POP3 commands - CVE-2026-1299: Reject incorrectly folded LiteralHeader values and quote newlines during BytesGenerator serialization; prevent header injection

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els19.noarch.rpm 1a8e921257d02b9a6facf86c500bff150872218a28394c8fa9ab18be49081814 python3-3.9.16-1.el9_2.2.tuxcare.els19.i686.rpm d710ca9b406a368fb58e20b672e7465e0352aefaf90ee9f2fd8c2626ece61eca python3-3.9.16-1.el9_2.2.tuxcare.els19.x86_64.rpm c88892f73c00d991b5f7210de5a030c4159b31f125c7c76977f19d5f4ce41f0e python3-debug-3.9.16-1.el9_2.2.tuxcare.els19.i686.rpm 7acdb9e9fb0cf8e4aa9d2c1b194afe4bd55218edd30c53452b574d88529779d4 python3-debug-3.9.16-1.el9_2.2.tuxcare.els19.x86_64.rpm 6c5e3e106078578d2c986c6b403acd6d41db8ec6f4f86823e5638d8fc30ce7b3 python3-devel-3.9.16-1.el9_2.2.tuxcare.els19.i686.rpm 0970f24c4766d1ecac1d11c3843b21e12395db0ae7148fcc05e65d08e3b41b5c python3-devel-3.9.16-1.el9_2.2.tuxcare.els19.x86_64.rpm d73a71e7715d18c281ea81e850b8ab3ece22bfae8c8039ecfb5a5ff84decfae9 python3-idle-3.9.16-1.el9_2.2.tuxcare.els19.i686.rpm ab7afa5fb2df91fe49de9f0c93232785955f2e160ccb0ca12fb15425d3c344d3 python3-idle-3.9.16-1.el9_2.2.tuxcare.els19.x86_64.rpm 49b83cf0171cbbb44a3925abc8a67b52644477262f1866264f3784c3d0229e78 python3-libs-3.9.16-1.el9_2.2.tuxcare.els19.i686.rpm 294d83a9d3db904adb5ae950579fe514e3bbc21d38c56780037579d923ea888c python3-libs-3.9.16-1.el9_2.2.tuxcare.els19.x86_64.rpm c2ae8ae76833b9eabbb6c8789d8e2226608c37ec3056a660a96394bf7e0f7997 python3-test-3.9.16-1.el9_2.2.tuxcare.els19.i686.rpm 3dafe357e307b86df796e6d3028b910414a7c136fa6a38912a2a23683983202f python3-test-3.9.16-1.el9_2.2.tuxcare.els19.x86_64.rpm 9793b0ce12c8e6c38c11bb012ea5298f0b3423d1f8b377adb33c45f72c53abea python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els19.i686.rpm 1572e386573b517278b498eb62c9e72d41c093e2033c2c28d34ffb1ba8f405ac python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els19.x86_64.rpm b7aca0010892421d8633fff37b5391f59854f000364e351765c46d713bb3c36b CLSA-2026:1774266713 TuxCare License Agreement 0 - CVE-2026-25884: fix out-of-bounds read in CRW image parser - CVE-2026-27596: fix integer underflow in preview component Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25884: fix out-of-bounds read in CRW image parser - CVE-2026-27596: fix integer underflow in preview component

0 tuxcare-almalinux9.2-esu exiv2-0.27.5-2.el9.tuxcare.els3.x86_64.rpm c36062a2dcaf2688281dbf570217f48044287786ab407ccc84ebb4bfafa297bf exiv2-devel-0.27.5-2.el9.tuxcare.els3.i686.rpm 1ff4c3387bb8854c6d92a338156dfe6e965ef91cd991dfafdefcbed41662027a exiv2-devel-0.27.5-2.el9.tuxcare.els3.x86_64.rpm daed6d1460999be6c43caf6e4ba9ee04f75c6535ca38bf028628dc771053344a exiv2-doc-0.27.5-2.el9.tuxcare.els3.noarch.rpm 569780abe43bf969666b793c279eb28dd7929a4824421142b312dadfb23c0c82 exiv2-libs-0.27.5-2.el9.tuxcare.els3.i686.rpm 699ddd59380a249d65c3e90e47247d7b4e1bf11697d384815d64797c4a0864cb exiv2-libs-0.27.5-2.el9.tuxcare.els3.x86_64.rpm f17ee56a092c713f0438a57216858547938165ba047a46ca32ec3f9b9ad14cb4 CLSA-2026:1774273237 TuxCare License Agreement 0 - CVE-2025-61143: fix NULL pointer dereference in tiffcrop add null checks and pointer validation, prevent crash Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61143: fix NULL pointer dereference in tiffcrop add null checks and pointer validation, prevent crash

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els9.i686.rpm 0da6381e5a8d3abd426f57bd4aabce959b39c509cbe954f209f1f76b28cb9c91 libtiff-4.4.0-8.el9_2.tuxcare.els9.x86_64.rpm 9d88829530c9d618c4ba3bf258443676f7db71a1ed2916c4e14621437b81c121 libtiff-devel-4.4.0-8.el9_2.tuxcare.els9.i686.rpm 550563a3aaf9f21ff4f82792af655c489f5cc3a21908fda3a986e9eb5b6da30c libtiff-devel-4.4.0-8.el9_2.tuxcare.els9.x86_64.rpm eedfaefcba118f93e9333699d39501c8b6371ecc09d881e376074dfd53597548 libtiff-static-4.4.0-8.el9_2.tuxcare.els9.x86_64.rpm 34677823cb13d98153c46d894833a9579438161f46785f0db4029a95d597e37d libtiff-tools-4.4.0-8.el9_2.tuxcare.els9.x86_64.rpm ae047c5c967f72e296f92742596e2d1eeb70d6f9ca16726c1d97d54326e5c3b3 CLSA-2026:1774346288 TuxCare License Agreement 0 - CVE-2026-28417: fix OS command injection via shell metacharacters in netrw URI hostname and port - CVE-2026-28421: fix heap-buffer-overflow and SEGV in swap file recovery due to unvalidated pointer block fields Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28417: fix OS command injection via shell metacharacters in netrw URI hostname and port - CVE-2026-28421: fix heap-buffer-overflow and SEGV in swap file recovery due to unvalidated pointer block fields

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_1.1.tuxcare.els4.x86_64.rpm 06f57cef8cab5ef03f690b6f3c908877310ae9e607dfdb419dc9ba1de6369652 vim-common-8.2.2637-22.el9_1.1.tuxcare.els4.x86_64.rpm 0165782eda972192259c5ea4966aaf96b6176a0101cc97fb1fc43602a3b375b7 vim-enhanced-8.2.2637-22.el9_1.1.tuxcare.els4.x86_64.rpm 52fb6f0d70cd709f3c23fae6a478a10c1924f32cb475ba35d7f5f55c984aa80d vim-filesystem-8.2.2637-22.el9_1.1.tuxcare.els4.noarch.rpm 6b8e62e7f97bdb2b544f31187d66418cf39bfa9aee8b00cb6214e03e8ed26090 vim-minimal-8.2.2637-22.el9_1.1.tuxcare.els4.x86_64.rpm edcbf3d1d36c8a1b0629b2b9afbf24ee34077be27081afd1528343bc23901307 CLSA-2026:1774352914 TuxCare License Agreement 0 - CVE-2025-68114: fix stack buffer underflow/overflow in SStream_concat() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68114: fix stack buffer underflow/overflow in SStream_concat()

0 tuxcare-almalinux9.2-esu capstone-4.0.2-10.el9.tuxcare.els1.i686.rpm fc6d5ee3d305099e45eda9a2d840aa550c725cfd625f358a11c7b1dd8145832f capstone-4.0.2-10.el9.tuxcare.els1.x86_64.rpm f241127cb0074e78cf6b72927b5e525d08545d5ca5418f6594271c1c25871db4 capstone-devel-4.0.2-10.el9.tuxcare.els1.i686.rpm fb0eaed0923e474420a5cf265727857435caf45de2b67ed3fcee855b6a4b6e9c capstone-devel-4.0.2-10.el9.tuxcare.els1.x86_64.rpm 3841ea20c196dd5a649581d2978442bd6da232f9ed71fcb179379dc0680d20d6 capstone-java-4.0.2-10.el9.tuxcare.els1.noarch.rpm 22c440e781a88f4a04ff549a3a203aa2b03c0e751af18553fa81cddab836b1ec python3-capstone-4.0.2-10.el9.tuxcare.els1.x86_64.rpm 0aba3e2da5a6ea98740480d428d49e1d1bb70e1166312f6da1926acc001b95de CLSA-2026:1774375084 TuxCare License Agreement 0 - CVE-2026-4111: Fix infinite loop in RAR5 decompression caused by block_length exceeding half the window size, leading to CPU-consuming denial-of-service Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4111: Fix infinite loop in RAR5 decompression caused by block_length exceeding half the window size, leading to CPU-consuming denial-of-service

0 tuxcare-almalinux9.2-esu bsdcat-3.5.3-6.el9_2.tuxcare.els2.x86_64.rpm b20f2d264e3dd7a950de711c4fca2fc07c7a3d8d18da8026cf8c289f7ff0bdb9 bsdcpio-3.5.3-6.el9_2.tuxcare.els2.x86_64.rpm abf72f3da6a3a3ee96974c837f7fb2f9ee490d930716b74987485ffc5c900e9c bsdtar-3.5.3-6.el9_2.tuxcare.els2.x86_64.rpm eb93dc01782f821172d8943c01b4dce04b70c000cdbf67b53387377f1a61ae67 libarchive-3.5.3-6.el9_2.tuxcare.els2.i686.rpm a980ed347ef551d899090d34e3522802cb8f6470639c1a73a519bdf3f2663323 libarchive-3.5.3-6.el9_2.tuxcare.els2.x86_64.rpm 11c92ff50304f7a998acf6b58eaec44cbdc2f655377da6d90b9045a3ef4ced11 libarchive-devel-3.5.3-6.el9_2.tuxcare.els2.i686.rpm c37acd883b4cd8b8ff4601617dba1be5c0d24f0d66e300b4407813acff5e6c85 libarchive-devel-3.5.3-6.el9_2.tuxcare.els2.x86_64.rpm 146f39ceb9224739d7ecc21f3995f7b0c23997e5ec26098457035bde3baa70fb CLSA-2026:1774431936 TuxCare License Agreement 0 - CVE-2025-66614: enforce SNI and HTTP Host header matching to prevent bypass of client certificate authentication when multiple virtual hosts are configured Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-66614: enforce SNI and HTTP Host header matching to prevent bypass of client certificate authentication when multiple virtual hosts are configured

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els16.noarch.rpm c1fbee5f2dd11bb2101928322aa07db7db4d760c632d28a8e9eceaa20fdf9bbd tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els16.noarch.rpm 0e7f6d34ee31b1047b8f4a8ceae5e1f1bb7647c832d9291f181c9b225cbc103b tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els16.noarch.rpm bb259c29687b176f3e8ffaf4aceea2eac2ab890cc01ad2d9b00d052a3c828bc7 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els16.noarch.rpm d4033abe978a089845edee9f9b3e65d8af48f14a9716be769ea845ea6b1c755e tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els16.noarch.rpm 760e01765012ff8d809be3cb7fb24f044428f1dc8f06c8e0516e0cee8e0f27cc tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els16.noarch.rpm 2973a824033df7579a1bbcce669ee3379d61291369d5af61540e1cbc860c53a1 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els16.noarch.rpm 52eb3a8d5a9d010e78f42ad3e0cd303aaf2e50389bb22c6b9c2b7b2e808b0033 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els16.noarch.rpm 3e9c59e910fbb1fee4ef8775d5c356c24981b9a6730e744659096577d56654fd CLSA-2026:1774433526 TuxCare License Agreement 0 - CVE-2026-32776: fix NULL pointer dereference in storeEntityValue() with empty external parameter entity content Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32776: fix NULL pointer dereference in storeEntityValue() with empty external parameter entity content

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els9.i686.rpm 3ecf9c430983a791a7fd5dfdede33b813797a11ceec94f520730ddfeae197d16 expat-2.5.0-1.el9.tuxcare.els9.x86_64.rpm 79108e7ccbfe0424d5a49c0b8d803978f883e438ae86b276301172da1845c90c expat-devel-2.5.0-1.el9.tuxcare.els9.i686.rpm 0a09c9941504efcffd2cbbf21c3791154dd130ecd23f0f7e00752db87b87f9f2 expat-devel-2.5.0-1.el9.tuxcare.els9.x86_64.rpm 5c0c07c09f5a5c1a8354bdbf139e807a52330e3bb2f3199d7b2133088f7ed7cf expat-static-2.5.0-1.el9.tuxcare.els9.x86_64.rpm 0aca6b99da9439837afcb10f78c55c9b00c57df926f38919e8b0bdaf2c9986bf CLSA-2026:1774438452 TuxCare License Agreement 0 - CVE-2026-1299: Fix header injection; quote newlines in email headers and reject incorrectly folded LiteralHeader values during serialization with BytesGenerator. - CVE-2026-0865: Fix header injection via user-controlled header names and values containing newlines; sanitize and reject header names and values containing newline characters. - CVE-2025-15367: Reject control characters in POP3 commands to prevent command injection via newlines in user-controlled input Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1299: Fix header injection; quote newlines in email headers and reject incorrectly folded LiteralHeader values during serialization with BytesGenerator. - CVE-2026-0865: Fix header injection via user-controlled header names and values containing newlines; sanitize and reject header names and values containing newline characters. - CVE-2025-15367: Reject control characters in POP3 commands to prevent command injection via newlines in user-controlled input

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els19.i686.rpm a03ecd2077d442857c189b912ece3009d4fb6adee46c70f5ec739c7f46fb9581 python3.11-3.11.2-2.el9_2.2.tuxcare.els19.x86_64.rpm 76c7ae5ef0c0f35d3e6902fb9aad92181c3171c3e5df64c6c20dce35ac40d4f4 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els19.i686.rpm b052551d8fa8d1dc959f17201e03f7813e98415cc2c0f246cb5793edd5c67751 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els19.x86_64.rpm db9f3b643f9d10ad934ce884f3d6389e37f8d73c0552e4d021f4b90fb85973e8 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els19.i686.rpm 43fc017b8b8a49ffe804789c105f5a1b7a208ac00b0a5ba9bbec029be0213aff python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els19.x86_64.rpm c8527211c9161368a0f0675ed84b0621d24e00a5204d3842106955efb1f74111 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els19.i686.rpm ccfdc0e7d6ca9d26816b74ba779edfb71ab701fc8fe5be2409cd321a9381f10b python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els19.x86_64.rpm a506ea6f7c1b733685e1217ce0e4ecbfc48fd373a16dadf98ff1916e76ef2d36 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els19.i686.rpm 31e1da4df0f2ec075c89dd77e4cff1a0f9b87a94b2d2005a667605df2c784ef5 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els19.x86_64.rpm a2e0e9a552e274558178276f1e9190a16cc4319799080d674447ae43012c10fd python3.11-test-3.11.2-2.el9_2.2.tuxcare.els19.i686.rpm 8d79189b606da1464fdea1f822c0fc59c01d5c2d0596f3b2bee323d91da847f1 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els19.x86_64.rpm cd65bbb84706e8ea416974dcefdff4006c983cd0d14819bdc93a13ceec8a6b75 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els19.i686.rpm 657ba0e2f3234961d1dc1c5e5c77756d9391c3cb7c40338a2bb429a28a31d99f python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els19.x86_64.rpm 1e59620084bfd2d5624bf730ac833a5138217c4e7bda6c4bd4da1f1c98edb38f CLSA-2026:1774518355 TuxCare License Agreement 0 - CVE-2025-15366: reject control characters in IMAP commands Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15366: reject control characters in IMAP commands

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els20.i686.rpm c7f10c866965af938d2b64494f4794ebc6288f57d38915121364d59bb47fa137 python3.11-3.11.2-2.el9_2.2.tuxcare.els20.x86_64.rpm 348e89b1e23559152230b013f26897378fae0cb25ff5839eebaa57b9715a1d5b python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els20.i686.rpm d144dc9d54a739ca41f0e366a173b396e440ee1f6f259bd7f9c004088644d96a python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els20.x86_64.rpm 1a530e81052f6e171532ed9e84f0b7c44347db3b43b362249735a80c9a893a46 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els20.i686.rpm 0e0d675d905934acf377b1f73207081167c4f7183325fbc96589904338c8d5e9 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els20.x86_64.rpm 8709edfc40c94d6783888482e352d0dfa6d87bc80c5ab5ccd23c22311b504200 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els20.i686.rpm 212c033901f7bc4436d55f245ccb8f1a57ad45710ce2c16fcabf5c1fbd348d9a python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els20.x86_64.rpm 64ec375252b9ca2e2cce29f88ce1544afe9415e4bd29a480e5481341258c9a1a python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els20.i686.rpm 895617a9e685b9f5b480f0c9a2be4294bdd2dce36d29b2363f45516e9daea0af python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els20.x86_64.rpm 9b73b5a0f3679309d4d48b5419f2de6888508a4925fcb6b429c3e1124973f928 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els20.i686.rpm 099c54c08685b6ebfb869c8e05729b65d19d37d18277dcbeb84bafe2c6cf0c31 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els20.x86_64.rpm f478e37df5547d1cbb7ef2efb41b6bd15af53fd54be95bb6e9a02ba229f91a6a python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els20.i686.rpm c48177d08e88d3299e1df7ac9d0532883b1558ea8474a49f3eed4ea9eb968478 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els20.x86_64.rpm a694cf62ed5bbadfddcb596071cd11b30e661760c93ab1e23bfc7d47abe2a5cb CLSA-2026:1774519941 TuxCare License Agreement 0 - CVE-2025-43441: fix macro scratch register spilling in OMG tail calls to prevent memory corruption via crafted web content Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-43441: fix macro scratch register spilling in OMG tail calls to prevent memory corruption via crafted web content

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.50.1-1.el9.tuxcare.els6.x86_64.rpm 376161f786f1f25618dba38d5644ba082fd627fa3d3605695def3f365ec41693 webkit2gtk3-devel-2.50.1-1.el9.tuxcare.els6.x86_64.rpm 859f009df2abf952e981f1782c2de47722fe10f29081211b9800573d46255379 webkit2gtk3-jsc-2.50.1-1.el9.tuxcare.els6.x86_64.rpm 9b9c5ff4bae3a88c35492a787de52f0755f32280e816271d2ffd50a10c4a0e1d webkit2gtk3-jsc-devel-2.50.1-1.el9.tuxcare.els6.x86_64.rpm 01132e4fa751ac304ecf20fe02774c8336b6fcbfd5754e9da28e368f32e8b8d7 CLSA-2026:1774437715 TuxCare License Agreement 0 - CVE-2025-67873: fix heap buffer overflow in cs_insn.bytes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-67873: fix heap buffer overflow in cs_insn.bytes

0 tuxcare-almalinux9.2-esu capstone-4.0.2-10.el9.tuxcare.els2.i686.rpm 1aa240da2e3e859da1a0b5c8516c4ef0cfdee0811684052e851309711c922ef2 capstone-4.0.2-10.el9.tuxcare.els2.x86_64.rpm 4014d9b6aaf68f4d27c2418784ae926d75b89d2e935d39f13ae9d83098e73b38 capstone-devel-4.0.2-10.el9.tuxcare.els2.i686.rpm f55fb3d4bf131e9ad752ba697798b970ce79e8a7338931994959ca845ea46fcd capstone-devel-4.0.2-10.el9.tuxcare.els2.x86_64.rpm 75a488ab31be40eea88016e4301a94c9b416b6020a4b116824123a20940caf16 capstone-java-4.0.2-10.el9.tuxcare.els2.noarch.rpm 1bf2ef65b83d2d80bfe400bd1f68753821a28c240bf853b3031503f3d7a7f519 python3-capstone-4.0.2-10.el9.tuxcare.els2.x86_64.rpm 6adba8de0afebfb1c79a757236bc052ca9eacb8a50389f9c8913ad50d1c59d1b CLSA-2026:1774604404 TuxCare License Agreement 0 - CVE-2026-27622: fix integer overflow in CompositeDeepScanLine leading to heap buffer overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27622: fix integer overflow in CompositeDeepScanLine leading to heap buffer overflow

0 tuxcare-almalinux9.2-esu openexr-3.1.1-2.el9.tuxcare.els3.x86_64.rpm fa37f4e133d352e04a4aa402ca02d99ba5b8b586c1936df971b1ee4b880e3966 openexr-devel-3.1.1-2.el9.tuxcare.els3.i686.rpm cd81408eab396655d91686d070676ddb38e911d9410148c5ae73d5663666b799 openexr-devel-3.1.1-2.el9.tuxcare.els3.x86_64.rpm b749551b2c6e37e7602e41772a0ed9342d58e8404d7245e0efd4c10d8bba3742 openexr-libs-3.1.1-2.el9.tuxcare.els3.i686.rpm 84b0bae4a388fa475512a9ed995e2713a46b61a23a9789fba0164949cfb930b9 openexr-libs-3.1.1-2.el9.tuxcare.els3.x86_64.rpm 97fe8ec1290729712e3b917cb6cd56ad2328bb7a3d412ef4a4e8661e77405c89 CLSA-2026:1774605210 TuxCare License Agreement 0 - CVE-2026-32777: fix infinite loop while parsing DTD content - CVE-2026-32778: fix NULL pointer dereference in setContext on retry after OOM Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32777: fix infinite loop while parsing DTD content - CVE-2026-32778: fix NULL pointer dereference in setContext on retry after OOM

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els10.i686.rpm 99d05882e20315a2ec30c126128f8fad4d04d413cb4fd0cc9991b56c8069b73d expat-2.5.0-1.el9.tuxcare.els10.x86_64.rpm 3226e022eda186add8a770e5687bb8e82f5afe8edcf1decef75697029fb2c5fd expat-devel-2.5.0-1.el9.tuxcare.els10.i686.rpm 98b4ab498c4ecb54c2d822c72daf58e35e3dd21ccced8abc56be2d651c87cb62 expat-devel-2.5.0-1.el9.tuxcare.els10.x86_64.rpm fd5545f66817f646a72ac8835c6f4b7201753e22045dae587cd7659a5aefc58b expat-static-2.5.0-1.el9.tuxcare.els10.x86_64.rpm 1d2c9acc8327e9fcbe71fab0dd4f81a4f60fbc2091118540647e7e84bf5751c3 CLSA-2026:1774612633 TuxCare License Agreement 0 - CVE-2025-30258: fix verification DoS due to a malicious subkey in the keyring Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-30258: fix verification DoS due to a malicious subkey in the keyring

0 tuxcare-almalinux9.2-esu gnupg2-2.3.3-2.el9_0.tuxcare.els2.x86_64.rpm 67c473b47a4d2d600594e19a0dce6f12f2dd6b282deba82413304a2b0efc7d7f gnupg2-smime-2.3.3-2.el9_0.tuxcare.els2.x86_64.rpm 30e740cbd4a9c39e07f91fef3db8e883f76c120486745c243d1ba6b264977fe5 CLSA-2026:1774622460 TuxCare License Agreement 0 - CVE-2025-59362: fix ASN.1 encoding of long SNMP OIDs - CVE-2026-33526: do not escape malformed URI twice when sending ICP errors - CVE-2026-33515: fix validation of ICP packet sizes and URLs Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-59362: fix ASN.1 encoding of long SNMP OIDs - CVE-2026-33526: do not escape malformed URI twice when sending ICP errors - CVE-2026-33515: fix validation of ICP packet sizes and URLs

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els11.x86_64.rpm dddd9ef5e85e52cb6a1c724948803a378015c745eb07c8e414351e8a9159d17d CLSA-2026:1774625950 TuxCare License Agreement 0 - CVE-2025-43438: introduce distinct SpecMapIteratorObject/SpecSetIteratorObject types replacing shared SpecObjectOther in JSC DFG/FTL JIT type speculation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-43438: introduce distinct SpecMapIteratorObject/SpecSetIteratorObject types replacing shared SpecObjectOther in JSC DFG/FTL JIT type speculation

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.50.1-1.el9.tuxcare.els7.x86_64.rpm 672c25061fe2c54f33b853ed56fff70bdbc63e3e0c6977015d6281f61585a301 webkit2gtk3-devel-2.50.1-1.el9.tuxcare.els7.x86_64.rpm b874be5fdc8bcd893eae51bf12c4c7746fe89dda5ede30dc3e02ef4f419497ef webkit2gtk3-jsc-2.50.1-1.el9.tuxcare.els7.x86_64.rpm 7882258b2c411c2f3fb96e43467597f6176077951c4cc6a0d4fd30b64b5af87e webkit2gtk3-jsc-devel-2.50.1-1.el9.tuxcare.els7.x86_64.rpm c9e100bdbd6de80494a71168ae532a743ca4c2a641171254198dfb9f147a2d5f CLSA-2026:1774952276 TuxCare License Agreement 0 - CVE-2026-23893: fix symlink-following vulnerabilities in privileged contexts Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-23893: fix symlink-following vulnerabilities in privileged contexts

0 tuxcare-almalinux9.2-esu opencryptoki-3.19.0-2.el9.tuxcare.els1.x86_64.rpm 15cbd6fb2a3e1db00ed12310a8d09d8020643ab40eb89abdacce1b929cc1ba22 opencryptoki-devel-3.19.0-2.el9.tuxcare.els1.i686.rpm 6fbf5c3baf4ee584242697e7242c774e05a2f41ad8e2bc8d9c87dec1979d10d8 opencryptoki-devel-3.19.0-2.el9.tuxcare.els1.x86_64.rpm 9a37201aa97ae2097991dc9ee204c9b1e22d8cb44afa8797bb3a72472add33df opencryptoki-icsftok-3.19.0-2.el9.tuxcare.els1.x86_64.rpm 2c35037d0b44ae60571cc9f4fe993fc102302b2781035aeccd1786a80e041461 opencryptoki-libs-3.19.0-2.el9.tuxcare.els1.i686.rpm a47998ed007fa117c8afd633604683e8fc66744f5cf660923ea8be5eff560b10 opencryptoki-libs-3.19.0-2.el9.tuxcare.els1.x86_64.rpm 9d94c99e39c1fca3e710f9f3cd6dedeed920b89eb9d43e272ab8dc1f98e9bb7c opencryptoki-swtok-3.19.0-2.el9.tuxcare.els1.x86_64.rpm 1a1abf43d7263d8cb92ab443e0abae65107cf47b010e3fe0659b4a33d2075138 CLSA-2026:1775039763 TuxCare License Agreement 0 - CVE-2023-6175: fix heap buffer overflow in NetScreen file parser - CVE-2024-0208: fix crash in GVCP dissector due to NULL string - CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors - CVE-2024-0211: fix infinite loop in DOCSIS dissector - CVE-2024-2955: fix use-after-free in T.38 dissector - CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector - CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors - CVE-2024-11596: fix buffer overflow in ECMP dissector - CVE-2024-24476: fix heap buffer overflow in address resolution - CVE-2024-24478: fix integer overflow in BGP dissector - CVE-2025-5601: fix crash in column prepend fence handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6175: fix heap buffer overflow in NetScreen file parser - CVE-2024-0208: fix crash in GVCP dissector due to NULL string - CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors - CVE-2024-0211: fix infinite loop in DOCSIS dissector - CVE-2024-2955: fix use-after-free in T.38 dissector - CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector - CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors - CVE-2024-11596: fix buffer overflow in ECMP dissector - CVE-2024-24476: fix heap buffer overflow in address resolution - CVE-2024-24478: fix integer overflow in BGP dissector - CVE-2025-5601: fix crash in column prepend fence handling

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9.tuxcare.els3.x86_64.rpm 05a40840e3354a8e5f01aeee07c8ea4e3722679f0df9bbc36f42becb8fa0eb55 wireshark-cli-3.4.10-4.el9.tuxcare.els3.i686.rpm 56b43be6c79dfccef8bf3470b1e1ee52addd1ed8ec6ee810ed247868a9543405 wireshark-cli-3.4.10-4.el9.tuxcare.els3.x86_64.rpm ecd8168d4fbc7e4b849e11d6159aca9c3f80c3353b0e875b046acc8d0c022ba3 wireshark-devel-3.4.10-4.el9.tuxcare.els3.i686.rpm d643fbfde17e40d4847e356f934d56fea82b9ff8466f878b387c9a03d10bf060 wireshark-devel-3.4.10-4.el9.tuxcare.els3.x86_64.rpm 58f3eac53465405086f57bbd424a6331a8e3b699cde1f12af58e9f5b5a4c2418 CLSA-2026:1775040191 TuxCare License Agreement 0 - CVE-2026-32748: fix HttpRequest lifetime for ICP v3 queries Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32748: fix HttpRequest lifetime for ICP v3 queries

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els12.x86_64.rpm 4fd9a0116bb1b0842426e0763d82e257d5aa0149fff5d27b08ee4c389dd5d005 CLSA-2026:1775040432 TuxCare License Agreement 0 - CVE-2025-61731: fix pkg-config --log-file argument injection via #cgo pkg-config directive Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61731: fix pkg-config --log-file argument injection via #cgo pkg-config directive

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els7.x86_64.rpm a68216027b32828196e0ed94620cce3836835a7ffc224bb841c606e0ee94f5ee golang-1.22.9-1.el9_2.tuxcare.els7.x86_64.rpm 9586d5935a91a6e87c740ade446fae6c207ca6cdfb68f4a0449b4db00988a072 golang-bin-1.22.9-1.el9_2.tuxcare.els7.x86_64.rpm 34157712eb4a4643ec91d237843f95012cc76c3018e825f8ee685e4bd2e5a063 golang-docs-1.22.9-1.el9_2.tuxcare.els7.noarch.rpm 82930289fc331e289e8ffba2e80c0fed52b5625a43b3d5a1ad51d528ed9373d3 golang-misc-1.22.9-1.el9_2.tuxcare.els7.noarch.rpm d9e15524ea209f5c0265a6a1b061b5294a0216074f85fe1d1df1b3e58af19ae0 golang-src-1.22.9-1.el9_2.tuxcare.els7.noarch.rpm a64913cdde8ed80c4a5083a99832c6cd49bb7ca3dd1252174457dc74164cfca7 golang-tests-1.22.9-1.el9_2.tuxcare.els7.noarch.rpm 48bb818e4366dddf87f353b6e3951935c1a3e7f1eebcc5536369b7c83acb64b0 CLSA-2026:1774607944 TuxCare License Agreement 0 - CVE-2026-25749: fix buffer overflow in 'helpfile' option handling in get_tagfname() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25749: fix buffer overflow in 'helpfile' option handling in get_tagfname()

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_1.1.tuxcare.els6.x86_64.rpm 54621e3145b53010c5a9db3d2443ecfd77d29112fe786f316ea77ea4cabd6b1e vim-common-8.2.2637-22.el9_1.1.tuxcare.els6.x86_64.rpm d70446333a7f94aa651d3f3acff63e383487d3141a052967d9806138f1c7c13e vim-enhanced-8.2.2637-22.el9_1.1.tuxcare.els6.x86_64.rpm 5d5fe5ff2a7ab3c6758be149f5b850eeaa2d994707972ba9b00aca748bd06bd8 vim-filesystem-8.2.2637-22.el9_1.1.tuxcare.els6.noarch.rpm 21ad55aae38cc3e8b2033f8702fe19c92e2b022f0de84d1f7d5dd934c360b9e9 vim-minimal-8.2.2637-22.el9_1.1.tuxcare.els6.x86_64.rpm d84e95554805d3431714319aa6c9ab852323b7f80c7f2117b18e741b5ba26634 CLSA-2026:1774999144 TuxCare License Agreement 0 - CVE-2026-28494: fix stack buffer overflow in morphology kernel parsing - CVE-2026-28691: fix uninitialized pointer dereference in JBIG decoder - CVE-2026-25989: fix off-by-one boundary check in CastDouble functions - CVE-2026-25985: fix memory allocation without limits in SVG decoder - CVE-2026-24485: fix infinite loop in PCD decoder - CVE-2025-66628: fix integer overflow in TIM decoder on 32-bit systems - CVE-2026-28693: fix integer overflow in DIB/BMP coder Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28494: fix stack buffer overflow in morphology kernel parsing - CVE-2026-28691: fix uninitialized pointer dereference in JBIG decoder - CVE-2026-25989: fix off-by-one boundary check in CastDouble functions - CVE-2026-25985: fix memory allocation without limits in SVG decoder - CVE-2026-24485: fix infinite loop in PCD decoder - CVE-2025-66628: fix integer overflow in TIM decoder on 32-bit systems - CVE-2026-28693: fix integer overflow in DIB/BMP coder

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els5.x86_64.rpm 079d390561438a7d54816ba47a91b2bfc8f09a1e3a4949bd67197aca438fd355 ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els5.x86_64.rpm 661a984c441981c1845518af7e5a766834083bd390c3cba100bc98e31c6a8102 ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els5.x86_64.rpm 0944cd9ddce8081a50180b22b038a4b79c7cf9c417d16683c4e0697845081836 ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els5.x86_64.rpm 109cdd1a17061b28846ee864b6ce2b7f198efc12b0e9fc4ed7726f3cc19b15b3 ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els5.x86_64.rpm 6752c62c1d7642da068a7cc907df42e1ef1641e329740dbc8675f7a6777b96fd ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els5.x86_64.rpm 4de296bb0171fecdd1f682a92199a201f78452e6a98e98367f8332ac060e7df6 ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els5.x86_64.rpm 732c8338e696e33ddc34afb63b31afd753850e1134d50fd69b83510b6d53fc09 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els5.x86_64.rpm ff3475e4cc1bb5384457c51095768b14a0afd3da1f607682d732b845b5d89067 CLSA-2026:1775120182 TuxCare License Agreement 0 - CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print buffer overflow in BJ10V device Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print buffer overflow in BJ10V device

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els10.i686.rpm 8f30b3e013d68a663db506085dfadaed9588e3d5aa2b17af1fa11e3b9d8cf744 ghostscript-9.54.0-11.el9_2.tuxcare.els10.x86_64.rpm 124148ef29946c066eeb5512e5954aa4448e8d3d1294e750835f1b4a05b54666 ghostscript-doc-9.54.0-11.el9_2.tuxcare.els10.noarch.rpm 1a6a11e018956c2f1fbbf0034929d3cbb884e4993041124f5396566ddbf7456d ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els10.x86_64.rpm c4dd11521dab1d26ca66e96d6ab7058eaf5419ecaa4a3cea7717410657a1880f ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els10.x86_64.rpm 0156b623cf29c875c1817d4c913bd411920dd474671af0f6dbe6c238ef315797 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els10.i686.rpm b7f3c5b3ea3554b6f088099c05ff35f5607308d7e932aed090e7f7609d2f1c86 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els10.x86_64.rpm cc2f19eb6694f29accb9ca8682dce99d0ea45754c89db21d8b4b25f8518356cc ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els10.i686.rpm c4981aa3f6f617dbb1c5531bbb436c7aa926f8c3edd0a8c61f73ccdb5d50e447 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els10.x86_64.rpm 4de19f756e78c5f1ba6fc7a3b05083084e01848d3ee6ebc1b8ddab6bcd49c723 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els10.x86_64.rpm 9baa458353a2c2fde00110e04967d2b84b353f8d65eae1061dcfa04369865284 libgs-9.54.0-11.el9_2.tuxcare.els10.i686.rpm 703ffa82b3c805865882d3632475e9baf8ba70bf998fa5941a49641bed0d40d2 libgs-9.54.0-11.el9_2.tuxcare.els10.x86_64.rpm 1cde4573d63f0cee4ba9c28561409026272f59ebb803b8df3334222b8d2f4b61 libgs-devel-9.54.0-11.el9_2.tuxcare.els10.i686.rpm 8fb9eb05dbcf2aa613031f84c1f7fe7a392f90025a91de5e3a0e1702590c2a5c libgs-devel-9.54.0-11.el9_2.tuxcare.els10.x86_64.rpm e6211b2fe95f619418300962cfbb54d3ab8e64f5649d04845100a4773246180e CLSA-2026:1775145256 TuxCare License Agreement 0 - CVE-2025-2761: fix out-of-bounds write in FLI plug-in (ZDI-CAN-25100) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-2761: fix out-of-bounds write in FLI plug-in (ZDI-CAN-25100)

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els6.x86_64.rpm 9d2d2a16918051acc34c1155b77ef92ab725dcc8a21a87d8e255e229c194cfb5 gimp-devel-2.99.8-4.el9.2.tuxcare.els6.x86_64.rpm 36ad438b9125977de9b3281b663a5774d95ddbb4f85067641f08a82b27f1df8f gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els6.x86_64.rpm d723e03e106ebef089348c74d74428e91c3a8e5fcd84c3a46de946269a4b1f20 gimp-libs-2.99.8-4.el9.2.tuxcare.els6.i686.rpm f330c0dda0fe40e97bb1f3ff2b448f932b52c20d168d77c29e0e10928e690c59 gimp-libs-2.99.8-4.el9.2.tuxcare.els6.x86_64.rpm f733dd334d721709ed57fd0cb62f7654d966c292ed6bc51a7e2409e2c636ed58 CLSA-2026:1775234419 TuxCare License Agreement 0 - Bump release Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump release

0 tuxcare-almalinux9.2-esu openexr-3.1.1-3.el9.tuxcare.els3.x86_64.rpm cc63cdf574022091b10b35623292f257587a906a316ae8f96a57682076b0ca7e openexr-devel-3.1.1-3.el9.tuxcare.els3.i686.rpm 495f36036c8929fde648e5a1f1219616872f32bba03b1866684ad10ddce15610 openexr-devel-3.1.1-3.el9.tuxcare.els3.x86_64.rpm 2260554feb92613f0b421f7dcefd68b3c5c593dc99da3c074c4f82776e601c47 openexr-libs-3.1.1-3.el9.tuxcare.els3.i686.rpm 22e12dcb306efed5ec44e336605fbbcc988f4cf29579b798ef46b34bbdf20e25 openexr-libs-3.1.1-3.el9.tuxcare.els3.x86_64.rpm bec426203a454886ef0169d708efae86516479ed7ea1e15657f7d863c60feb69 CLSA-2026:1775654402 TuxCare License Agreement 0 - CVE-2026-4519: fix webbrowser.open() leading dash injection Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4519: fix webbrowser.open() leading dash injection

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els20.noarch.rpm 41512ae8373acfdf28108f3d609c56b9346c70dd568405dbb7e677b5b6641e9e python3-3.9.16-1.el9_2.2.tuxcare.els20.i686.rpm ab79500b5aa38309c6e3b8c3f1524f6443dc8291d53869563cd68b90cc99b118 python3-3.9.16-1.el9_2.2.tuxcare.els20.x86_64.rpm f10d98392ba1343368ce9814f5bc8bb84a9f90734d77df3ae8bc808eb0617bcd python3-debug-3.9.16-1.el9_2.2.tuxcare.els20.i686.rpm 47f19684aea64d850fa53f3caa7d1850568ffb37a9c988dbdd9a3db0f0a040c3 python3-debug-3.9.16-1.el9_2.2.tuxcare.els20.x86_64.rpm 4aef6d6b2c01f24aa06ca4e9782978e9054fa0e4be57e63cf46311338a636a07 python3-devel-3.9.16-1.el9_2.2.tuxcare.els20.i686.rpm ee3edcf9b8a648329f460e957ee8c7bc967cbae1eaa5fb0a363b6a0b5af3f906 python3-devel-3.9.16-1.el9_2.2.tuxcare.els20.x86_64.rpm 1b51fffa2e3fe94f81dcc9636fd04d9877bf0f368ef75f2e0cfc7012a4dc0fef python3-idle-3.9.16-1.el9_2.2.tuxcare.els20.i686.rpm 6968c313eecc46b57706664d939a39c2cb3f0af3f218877943b810aa64c15e37 python3-idle-3.9.16-1.el9_2.2.tuxcare.els20.x86_64.rpm 7a1f6f54cbcc27c32d62734f3ba338777cd0ecf31ef17296cfdc4afc4a6a9a23 python3-libs-3.9.16-1.el9_2.2.tuxcare.els20.i686.rpm 5423aed3c77ab6f7177b561615ba474fffc152575019ebc945d899fd6a0e6906 python3-libs-3.9.16-1.el9_2.2.tuxcare.els20.x86_64.rpm ed7ccdb41b6d16f04968f7e75e7375715b719c8c18af94be8518e580dcdb8fb0 python3-test-3.9.16-1.el9_2.2.tuxcare.els20.i686.rpm 661b9e33f7b693e28f5c5c30aca21b17d8d204c33b28fe5e7e9a59065aab0f3e python3-test-3.9.16-1.el9_2.2.tuxcare.els20.x86_64.rpm f17b864747cde82988073146e156d06255de137786498705317bd1026fe706d8 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els20.i686.rpm cc5fb9c4904e92a3ea7d2b60e1127658d8b1ed0098031975fc17e208e9e361a4 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els20.x86_64.rpm 57514220dc4ac928fdfc506d7ac54e5f9c28ca2d921a052e67abba1cb50a0b59 CLSA-2026:1775646020 TuxCare License Agreement 0 - Bump release Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump release

0 tuxcare-almalinux9.2-esu pki-servlet-4.0-api-9.0.50-1.el9.2.tuxcare.els3.noarch.rpm e98aecfe459c2b69173d87cb4d3a301e3e30d3ea85a57d8c48c1a6bae5e32e7e pki-servlet-engine-9.0.50-1.el9.2.tuxcare.els3.noarch.rpm a2e03baf197fde94bc3b005bc82c78c9ec8dbea72e1ac22d76126156eb24071c CLSA-2026:1775649722 TuxCare License Agreement 0 - CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint - CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries - CVE-2026-0989: add RelaxNG include recursion limit - CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI - CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing - CVE-2026-1757: fix memory leak in xmllint interactive shell Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint - CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries - CVE-2026-0989: add RelaxNG include recursion limit - CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI - CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing - CVE-2026-1757: fix memory leak in xmllint interactive shell

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els12.i686.rpm ac115aac128c8a2db0238b10259118d930faa975a5da244db489df7167304d2d libxml2-2.9.13-3.el9_2.1.tuxcare.els12.x86_64.rpm 534207371316d33605e3c16f5cc9fdcbfd6da6d17bad6a83567e9db4267a41d3 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els12.i686.rpm fc1986f376051b5c1cf669b00facc13830a162418cf793fb2dd26d178b15ca67 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els12.x86_64.rpm b442df8f534351586898a23d0686d64a9c832c3bf21c6a76f2841f8fb737d4d9 libxml2-static-2.9.13-3.el9_2.1.tuxcare.els12.x86_64.rpm 2b1f66d225c6791f620e1e1c7c34db513e7c8da530c5d69ca2306057e0758a94 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els12.x86_64.rpm 99a6e854fafe682286a0b7b3e462f3fda554b3220ac0723a70c9bffbc7318315 CLSA-2026:1775647149 TuxCare License Agreement 0 - CVE-2024-20696: fix heap buffer overflow via negative copy length in RAR4 reader Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-20696: fix heap buffer overflow via negative copy length in RAR4 reader

0 tuxcare-almalinux9.2-esu bsdcat-3.5.3-6.el9_2.tuxcare.els3.x86_64.rpm f82bed39c9d01937ce015c41909c5ae700afefa7bed2226aa4393bb7ed9efe30 bsdcpio-3.5.3-6.el9_2.tuxcare.els3.x86_64.rpm b9cc8fd7a24805c056a9d9da19725763ce1984d66421f8835b1bc3447ca9d1ea bsdtar-3.5.3-6.el9_2.tuxcare.els3.x86_64.rpm 177184b1622ea314537d598288d4f1dfcd45a9c850ff3f64701a8bb993e847ac libarchive-3.5.3-6.el9_2.tuxcare.els3.i686.rpm e95a6753ca81616f00f67e46f4da94fbbdedd0372652fabf7f522aa0509cb929 libarchive-3.5.3-6.el9_2.tuxcare.els3.x86_64.rpm 9a25a4a0d7f122aa8a546cd5421738d7ab566f349f04a275bddb9a08a7fc07f5 libarchive-devel-3.5.3-6.el9_2.tuxcare.els3.i686.rpm 71ef3bfab8afdca8dcc3a1d917a9b0ee2ad940530de3aa4f8af7d27b94c30552 libarchive-devel-3.5.3-6.el9_2.tuxcare.els3.x86_64.rpm da1d981eea03dfc4bf4e252f4ecb3bc9e6cc965599264072497784ce8837788c CLSA-2026:1775825437 TuxCare License Agreement 0 - CVE-2026-21720: fix denial of service by preventing goroutine leaks and memory exhaustion triggered by unauthenticated avatar cache requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-21720: fix denial of service by preventing goroutine leaks and memory exhaustion triggered by unauthenticated avatar cache requests

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els14.x86_64.rpm 7b03d41a296fb38c488e30b4f1e4e0a00438a8e5926820bf4859e4f12a3cc915 CLSA-2026:1776078299 TuxCare License Agreement 0 - CVE-2023-41056: fix possible corruption in sdsResize due to incorrect alloc_already_optimal logic skipping sds type header update Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-41056: fix possible corruption in sdsResize due to incorrect alloc_already_optimal logic skipping sds type header update

0 tuxcare-almalinux9.2-esu redis-6.2.21-1.el9_2.tuxcare.els2.x86_64.rpm 662272e70a17061187e31d84eb2df5c904654cff902860a1413370b9d7fa32d2 redis-devel-6.2.21-1.el9_2.tuxcare.els2.i686.rpm 34a2c86f5318b53213bf784b754bf9e8ede8ec6a4a22ce788a7eaa0d925e403d redis-devel-6.2.21-1.el9_2.tuxcare.els2.x86_64.rpm 56a0c4d6421a07fb2c3573f82fca2f234c8d484a824896a9c9802c34c55d6843 redis-doc-6.2.21-1.el9_2.tuxcare.els2.noarch.rpm 8c58eb972250da93aa8e9dbc9dc8716ef5a59557afdb23779205f339a7919ac6 CLSA-2026:1776098295 TuxCare License Agreement 0 - CVE-2026-27448: fix fail-open in set_tlsext_servername_callback when callback raises exception Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27448: fix fail-open in set_tlsext_servername_callback when callback raises exception

0 tuxcare-almalinux9.2-esu pyOpenSSL-doc-21.0.0-1.el9.tuxcare.els1.noarch.rpm 04fc4fb5e1438edd18044213b3f7f73a37edf285957f56626b2fb41e0294c56b python3-pyOpenSSL-21.0.0-1.el9.tuxcare.els1.noarch.rpm bb428d1987cd87936d5dd90b5d89ae0129f8d71974f11800fb3981fce0f6cd3f CLSA-2026:1776099155 TuxCare License Agreement 0 - CVE-2026-29111: validate input cgroup path in GetUnitByControlGroup to prevent PID 1 assert/freeze on spurious IPC API calls - CVE-2026-4105: reject invalid class types when registering machines in systemd-machined to prevent privilege escalation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-29111: validate input cgroup path in GetUnitByControlGroup to prevent PID 1 assert/freeze on spurious IPC API calls - CVE-2026-4105: reject invalid class types when registering machines in systemd-machined to prevent privilege escalation

0 tuxcare-almalinux9.2-esu systemd-252-14.el9_2.3.tuxcare.els3.i686.rpm a84a4fec23699ef6e0f3a4957525e8dc72ce79a6a817c324f9843fbc00dec6c4 systemd-252-14.el9_2.3.tuxcare.els3.x86_64.rpm d5d19c2eae20dd2ada3b64a4fd1c8a36e3b6239cdd1b5ccb272ef01c413979ea systemd-boot-unsigned-252-14.el9_2.3.tuxcare.els3.x86_64.rpm 1b7c989d68968837d8ec542770150894644144a7b7472ba8f2174d9bf2f82d2c systemd-container-252-14.el9_2.3.tuxcare.els3.i686.rpm 53be10b80f09edcdb9d6c1056b6f672120dbd7f1fad525598bc4855a8a053f4c systemd-container-252-14.el9_2.3.tuxcare.els3.x86_64.rpm 1bad9665053ccd71f07e36564662c957215531e07ff7344470fc0a4c30231dc2 systemd-devel-252-14.el9_2.3.tuxcare.els3.i686.rpm a62d8cde9c1ae7ea4b68e0bb87c862201e1b69394037c92ddedf9f8e07af2f4d systemd-devel-252-14.el9_2.3.tuxcare.els3.x86_64.rpm e302aab61ff74471a0ba04006566c66bfe8961d6c3725214ef6e05acbd7cb368 systemd-journal-remote-252-14.el9_2.3.tuxcare.els3.x86_64.rpm f12a21a5fde11e6bd8be3640a9da4e52f644c9d5d0ff86f85c37c726729dd469 systemd-libs-252-14.el9_2.3.tuxcare.els3.i686.rpm 8220da74db89b3cbd9479bd346806a72bc79241982d8075307d123823c7fa9e9 systemd-libs-252-14.el9_2.3.tuxcare.els3.x86_64.rpm 6c4da360e8b37309a58f0d92a94c086fb7ac8aa4d702bb8a12d708cc94f246b4 systemd-oomd-252-14.el9_2.3.tuxcare.els3.x86_64.rpm 22a02792885543198b2dae31a72de22f386bbc2196b32b3fd99111e7eb2053dc systemd-pam-252-14.el9_2.3.tuxcare.els3.x86_64.rpm 47452681de0b5f2b0d3b6ba76fc857be2db13aa6266f9c6192aff7b007a8ea17 systemd-resolved-252-14.el9_2.3.tuxcare.els3.x86_64.rpm 47fbb2bb7cb2ebe20e4572b7447c5341cc03a98e929a2dc23ac2a9aeeb645e6b systemd-rpm-macros-252-14.el9_2.3.tuxcare.els3.noarch.rpm f7d0bb2f393b6925cd5c1aef8435d9318abd52ad18ab787cc9a16bd1177b4157 systemd-standalone-sysusers-252-14.el9_2.3.tuxcare.els3.x86_64.rpm b3e43aafbacdc7639d5d87836d6effd82088c913dff85cac64e5b0b469e9001d systemd-standalone-tmpfiles-252-14.el9_2.3.tuxcare.els3.x86_64.rpm 4cd78cb1f199e0150ea531d40a2aea465d7c0d52984503307047b20c7943dc88 systemd-udev-252-14.el9_2.3.tuxcare.els3.x86_64.rpm 9542b59f3a7808ab18def1c44a06cc5a60a4462ce325eec4e83c6a059bf5eca2 CLSA-2025:1757947429 TuxCare License Agreement 0 - CVE-2023-38711: fix a NULL pointer dereference in IKEv1 Quick Mode with ID_IPV4_ADDR/ID_IPV6_ADDR that causes a crash and restart of the pluto daemon when it receives an IDcr payload with ID_FQDN Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-38711: fix a NULL pointer dereference in IKEv1 Quick Mode with ID_IPV4_ADDR/ID_IPV6_ADDR that causes a crash and restart of the pluto daemon when it receives an IDcr payload with ID_FQDN

0 tuxcare-almalinux9.2-esu libreswan-4.9-4.el9_2.tuxcare.els3.x86_64.rpm 7744217726261c9e5c24079a2ae53a1dc005e5e6dd5cb50ab484d47115d7ea48 CLSA-2026:1776181240 TuxCare License Agreement 0 - Fix CVE-2026-0968 - sftp_parse_longname out-of-bounds access Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2026-0968 - sftp_parse_longname out-of-bounds access

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els8.i686.rpm 4ad2e88507ecd42434a4bd7feead2707162ef2183f56d83a9e9b52b21a2af1be libssh-0.10.4-8.el9.tuxcare.els8.x86_64.rpm 05049155c98a209418f77c82537635ce50c8187c73eb77425d905743ab414e68 libssh-config-0.10.4-8.el9.tuxcare.els8.noarch.rpm c8eb3b94d857df377c3eb34974078310b74da30e5d3df86ddfe1c7b2ecfd10fd libssh-devel-0.10.4-8.el9.tuxcare.els8.i686.rpm acbed1fc3f1604eb0dcee1aa4e144ca35f5755534ea6a923dffd233b0e7cec11 libssh-devel-0.10.4-8.el9.tuxcare.els8.x86_64.rpm 55e8b53845754257f078bbb2f30c78d9ce085ded551a094b10e63d15b2a6dbe4 CLSA-2026:1776184861 TuxCare License Agreement 0 - CVE-2025-13151: fix stack-based buffer overflow in asn1_expand_octet_string, _asn1_expand_object_id Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13151: fix stack-based buffer overflow in asn1_expand_octet_string, _asn1_expand_object_id

0 tuxcare-almalinux9.2-esu libtasn1-4.16.0-9.el9.tuxcare.els2.i686.rpm 23539f44943e14f889983452575fffa7eec6b2e20772563bcec93b18083fcb19 libtasn1-4.16.0-9.el9.tuxcare.els2.x86_64.rpm 24b0c5b2ed9066edb05c62d7d06e2e58456e8cef79c7d9a32aad82811c88ccb1 libtasn1-devel-4.16.0-9.el9.tuxcare.els2.i686.rpm e33e9cd1d8c5b38c6c6c5caf90f3d306587560219246845c8de133e7941f3831 libtasn1-devel-4.16.0-9.el9.tuxcare.els2.x86_64.rpm d52e9239ae83ec6e20ba619d6f0b6ff067eadde1eae4d0ad2539fcc8e9968487 libtasn1-tools-4.16.0-9.el9.tuxcare.els2.x86_64.rpm b5666eb732f2b9047ac25444b41055f2a7c2f77b8f4356bae9f7b8d91c1f1c28 CLSA-2026:1776329620 TuxCare License Agreement 0 - CVE-2026-1489: fix integer overflow in Unicode case conversion functions - CVE-2026-1484: fix integer overflow in GLib Base64 encoding - CVE-2025-14512: fix integer overflow in escape_byte_string() for byte strings with many invalid characters - CVE-2026-1485: fix buffer underflow in content type treemagic parsing - CVE-2026-0988: fix integer overflow in g_buffered_input_stream_peek() - CVE-2025-7039: fix integer overflow in temporary file creation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1489: fix integer overflow in Unicode case conversion functions - CVE-2026-1484: fix integer overflow in GLib Base64 encoding - CVE-2025-14512: fix integer overflow in escape_byte_string() for byte strings with many invalid characters - CVE-2026-1485: fix buffer underflow in content type treemagic parsing - CVE-2026-0988: fix integer overflow in g_buffered_input_stream_peek() - CVE-2025-7039: fix integer overflow in temporary file creation

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els6.i686.rpm ad529aa0eee34baf34439c6babbea0e4bbc019bf4ad73dc3c8cb2586d18b744b glib2-2.68.4-6.el9.tuxcare.els6.x86_64.rpm 28528f5ae1368a7b686b7d8995089c4c8c892855f3f2fbce1868eb98454860fb glib2-devel-2.68.4-6.el9.tuxcare.els6.i686.rpm 220a9651e6b3525258daa6f7c698bb3aceeeaedad32dfaf7c8a94a486c8a6875 glib2-devel-2.68.4-6.el9.tuxcare.els6.x86_64.rpm b1d70db0d144aca858c9938bb507fb098346e153b95238e19abc4d4fb98ced77 glib2-doc-2.68.4-6.el9.tuxcare.els6.noarch.rpm 3eb97a1a4970943c3730248803f3483e91f1b1c753541bdf7f31d83096439667 glib2-static-2.68.4-6.el9.tuxcare.els6.i686.rpm cc83afedf9d7f3c23e89795bffceecca50efed7145019c0ebe8de77b662a4272 glib2-static-2.68.4-6.el9.tuxcare.els6.x86_64.rpm 8731c5e2cb2f102c2f79e6b40837d583b1db3630d19286848f03d50372ab9e2a glib2-tests-2.68.4-6.el9.tuxcare.els6.x86_64.rpm a73e257fae3b9bc3011a55363b0a9008c4dd98585827b2e4e1e2cc78f31aa085 CLSA-2026:1776330599 TuxCare License Agreement 0 - CVE-2025-8291: fix zipfile ZIP64 EOCD Locator offset validation - CVE-2025-6069: fix quadratic complexity in HTMLParser - CVE-2025-4516: fix use-after-free in unicode-escape decoder with error handler - CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code - CVE-2026-3479: reject invalid resource arguments in pkgutil.get_data() - CVE-2025-1795: fix email header list separator incorrectly encoded during folding - CVE-2026-0672: reject control characters in http cookies - CVE-2025-15282: reject control characters in data URL mediatypes - CVE-2026-3644: reject control characters in http.cookies.Morsel.update(), |=, unpickling, and js_output() - CVE-2026-4224: avoid unbound C recursion in conv_content_model in pyexpat.c - CVE-2025-11468: preserve parens when folding email comments to prevent header injection Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8291: fix zipfile ZIP64 EOCD Locator offset validation - CVE-2025-6069: fix quadratic complexity in HTMLParser - CVE-2025-4516: fix use-after-free in unicode-escape decoder with error handler - CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code - CVE-2026-3479: reject invalid resource arguments in pkgutil.get_data() - CVE-2025-1795: fix email header list separator incorrectly encoded during folding - CVE-2026-0672: reject control characters in http cookies - CVE-2025-15282: reject control characters in data URL mediatypes - CVE-2026-3644: reject control characters in http.cookies.Morsel.update(), |=, unpickling, and js_output() - CVE-2026-4224: avoid unbound C recursion in conv_content_model in pyexpat.c - CVE-2025-11468: preserve parens when folding email comments to prevent header injection

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els22.noarch.rpm f4d636c91aef985ea797249b94d8e88429c0b9f021adc6af9b26ce8518652148 python3-3.9.16-1.el9_2.2.tuxcare.els22.i686.rpm 530b4ca93b385d2f0ae0a483f3820d5acb75913f124f1c7475ed634030ea6678 python3-3.9.16-1.el9_2.2.tuxcare.els22.x86_64.rpm 27f70346dc4a6564ad51f4bdba9011de32b99facc9b0b9e093261c90b5c24204 python3-debug-3.9.16-1.el9_2.2.tuxcare.els22.i686.rpm ea11c700cd2e677bc563a3ee8b1e8b988e0f0aaa6524abfabb9d570419b70f80 python3-debug-3.9.16-1.el9_2.2.tuxcare.els22.x86_64.rpm 66da0617507edd2c48031374f707e09ad047b1617f2b1a20b6babcaa1f605159 python3-devel-3.9.16-1.el9_2.2.tuxcare.els22.i686.rpm c0efa264d71c5feb0e764b0e5d789fb2ecc537565ce6239fab73b42bb833b9b1 python3-devel-3.9.16-1.el9_2.2.tuxcare.els22.x86_64.rpm f2dfe6587fbd08dc262d16f9f089bcae90e2c976f1ec10fef4def9b8c6335561 python3-idle-3.9.16-1.el9_2.2.tuxcare.els22.i686.rpm db990565314d3dded10117425464e3d9e8050631d6a19ae3ba9f19bd575bf3e7 python3-idle-3.9.16-1.el9_2.2.tuxcare.els22.x86_64.rpm 88866e79d59f3aed5bb5a706cce3ab9b010eceee2c181a83f1fd367137b63ab4 python3-libs-3.9.16-1.el9_2.2.tuxcare.els22.i686.rpm a2510b6867eb46b9971e34465e19efc0bf1c18de0f4e25c47f6bbbd456d55bf8 python3-libs-3.9.16-1.el9_2.2.tuxcare.els22.x86_64.rpm 737de80202b18ffe962196ef5ce32712f86c19dce870187502d291537420a9f0 python3-test-3.9.16-1.el9_2.2.tuxcare.els22.i686.rpm aff2f832a462aae828ab61fd0cec0a42ee647b818ff1a9d5224cccb52b6d1644 python3-test-3.9.16-1.el9_2.2.tuxcare.els22.x86_64.rpm da1ee06648a20374bd512e3f849899e48532fc082a31229d01d427ed947e724b python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els22.i686.rpm 3b271245293a0e221400dd6d294d21480013d9d1f22aa562a83a7ef447ae42dc python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els22.x86_64.rpm e7622de80546ff71e1477b9780b8f001e2022a0cda8f0d477e4672c0b6ce1528 CLSA-2026:1776091275 TuxCare License Agreement 0 - CVE-2025-15366: reject control characters in IMAP commands Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15366: reject control characters in IMAP commands

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els21.noarch.rpm a9800cd750513c297f178045152cb6ca492bfc0c0d341ac0c29f32d365c9e209 python3-3.9.16-1.el9_2.2.tuxcare.els21.i686.rpm 583b88b87e773a8f6153bec15dfd9616fb5b01e0fa84898ae550964b2e27769b python3-3.9.16-1.el9_2.2.tuxcare.els21.x86_64.rpm e5f330828dfddc2688d18a7f5ddd49529b1aa97d07e227d2512ce83f22c874c2 python3-debug-3.9.16-1.el9_2.2.tuxcare.els21.i686.rpm 235e2a6d50666d13d9ed49f0145af3efb118528408968dd4c77f8e24436ac910 python3-debug-3.9.16-1.el9_2.2.tuxcare.els21.x86_64.rpm 5a14a84a544853079e9082b8d37d128cd5493f796ddeaaff390021bbf57b9e94 python3-devel-3.9.16-1.el9_2.2.tuxcare.els21.i686.rpm 04cd130a31007afdff5b7be2b62695a3ccc4c91e76c9fe00346df864f2fc682c python3-devel-3.9.16-1.el9_2.2.tuxcare.els21.x86_64.rpm 2066ad903ac582588d4642ef7af51219d2f2d460ef9dd37c0a68320ffd32e91b python3-idle-3.9.16-1.el9_2.2.tuxcare.els21.i686.rpm 9e168650adfff3dfe88a148d7eb18c9a7903d0f16cbfc36629adc923c7fe8fc7 python3-idle-3.9.16-1.el9_2.2.tuxcare.els21.x86_64.rpm 76a62cac0f9e53e5e1f7bb274146882dc4e8326376932c695be0b8199bee0729 python3-libs-3.9.16-1.el9_2.2.tuxcare.els21.i686.rpm bbbd1773be2da3038fcf7b7174dca36645a31d09a39bf7c935a928ff983aa8e7 python3-libs-3.9.16-1.el9_2.2.tuxcare.els21.x86_64.rpm e2e5e59e5157bd8bca0790e16e3622fdeaeaee444c2693f5bdf05525b29e80f6 python3-test-3.9.16-1.el9_2.2.tuxcare.els21.i686.rpm de93968bf2536459ab2b37cfcff663e776f26a73d1509270be5897674ef9f5d1 python3-test-3.9.16-1.el9_2.2.tuxcare.els21.x86_64.rpm 2d24f595963435135755bff3aefacecb006f0aa7c38b5569179c84f1f8f2c57f python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els21.i686.rpm 276b186a669d452cb0caf943a915e38120b318fd19af07e53e9d4552f3ed646c python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els21.x86_64.rpm 091366ae49e580f778ab3e307eb603af9ddd3996ca31268db9455d3d36168ed4 CLSA-2026:1776354546 TuxCare License Agreement 0 - CVE-2024-23337: fix signed integer overflow in jvp_array_write and jvp_object_rehash that could lead to SEGV on growing arrays and objects Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-23337: fix signed integer overflow in jvp_array_write and jvp_object_rehash that could lead to SEGV on growing arrays and objects

0 tuxcare-almalinux9.2-esu jq-1.6-14.el9.tuxcare.els2.i686.rpm d4255d67d0af3227297f62b1cdb699ab846331adabed18d06fd342fe491c58d6 jq-1.6-14.el9.tuxcare.els2.x86_64.rpm 915c64d64e870721bba66039049b11dfaef0bfd76e28673c779ea7b1aa60de53 jq-devel-1.6-14.el9.tuxcare.els2.i686.rpm ce3d9c207a1e16e708cf13b83205bde9a73669492b7b2bc927d9ae3b07c379ec jq-devel-1.6-14.el9.tuxcare.els2.x86_64.rpm 52141a79ac2b5e06abcb2f42f517166bad5ea5d5d2c28a33c6be9e11e0adc728 CLSA-2026:1776427525 TuxCare License Agreement 0 - CVE-2025-61723: fix non-linear processing time when parsing invalid PEM inputs that could lead to denial of service - CVE-2025-58187: fix quadratic complexity when checking name constraints in crypto/x509 certificate validation - CVE-2025-58188: fix panic when validating certificates with DSA public keys in crypto/x509 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61723: fix non-linear processing time when parsing invalid PEM inputs that could lead to denial of service - CVE-2025-58187: fix quadratic complexity when checking name constraints in crypto/x509 certificate validation - CVE-2025-58188: fix panic when validating certificates with DSA public keys in crypto/x509

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els8.x86_64.rpm 82e8acbe98d093594ec84d33ed566d239e41edfe7228fb167d5e4274fab15ae0 golang-1.22.9-1.el9_2.tuxcare.els8.x86_64.rpm f4a47c859c362ee95e33b6292a431a2629e6bce99ab1e7557c132f522594acc5 golang-bin-1.22.9-1.el9_2.tuxcare.els8.x86_64.rpm c5e5e72d27b0f3d522fe9d7e96ad7ad13b5d40a29f594e1cf07223da56f0e097 golang-docs-1.22.9-1.el9_2.tuxcare.els8.noarch.rpm c9d1f25f7c93a708c19aa30bfc551b85fb1ee8fe271e0554812dfd4bd54c3995 golang-misc-1.22.9-1.el9_2.tuxcare.els8.noarch.rpm ee5e076672e446fd95b9889b7b90c60b8c90fa7c5386c9612a3b87d45b0a44c1 golang-src-1.22.9-1.el9_2.tuxcare.els8.noarch.rpm 3fbd9959b6df596af5486255a807701b006b539414adaadc51935e3f80282a5c golang-tests-1.22.9-1.el9_2.tuxcare.els8.noarch.rpm 847573dedb518b1112aa470f8480dfc4a984ef9eceadb4c99391d3637f99a68d CLSA-2026:1776428482 TuxCare License Agreement 0 - CVE-2026-35387: correctly match ECDSA signature algorithms against HostKeyAlgorithms, PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms - CVE-2026-35388: add missing askpass check when using ControlMaster=ask/autoask and "ssh -O proxy ..." - CVE-2026-35414: fix authorized_keys principals option matching to compare comma-separated entries individually instead of using match_list Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35387: correctly match ECDSA signature algorithms against HostKeyAlgorithms, PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms - CVE-2026-35388: add missing askpass check when using ControlMaster=ask/autoask and "ssh -O proxy ..." - CVE-2026-35414: fix authorized_keys principals option matching to compare comma-separated entries individually instead of using match_list

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els10.x86_64.rpm 01a137b694897f1592f09a9c090b5fb760c845feff5d93c4b2d6597e61353d49 openssh-askpass-8.7p1-30.el9_2.tuxcare.els10.x86_64.rpm 345bcfb64551a248e1500793ffabeaf988bcc7a3db38a56d774ec12b5d73361b openssh-clients-8.7p1-30.el9_2.tuxcare.els10.x86_64.rpm a81339d0061a61ef02ba74086fc25b88f30d1daa336dd98f53549f405cb463b5 openssh-keycat-8.7p1-30.el9_2.tuxcare.els10.x86_64.rpm 313475da22972b514fa2ab94c82afd9b1443b8aec963587d208c69fed4a05ace openssh-server-8.7p1-30.el9_2.tuxcare.els10.x86_64.rpm f1a9cfa2b6a61adb3b3ca9a46038df199126e817b7c21eba52f9f2e350931a3a openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els10.x86_64.rpm 1d3a0aa5444aaf6e72e458c41db42a9f9ea47a13b9c16cc05c89d7c6baee9c7a pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els10.x86_64.rpm cee2ac0c27d912d45f1ae7fff477a2e786a2784c3e49427c4bf28eeff8ed3fee CLSA-2026:1776430169 TuxCare License Agreement 0 - CVE-2026-5745: fix NULL pointer dereference in ACL parsing in archive_acl_from_text_w() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5745: fix NULL pointer dereference in ACL parsing in archive_acl_from_text_w()

0 tuxcare-almalinux9.2-esu bsdcat-3.5.3-6.el9_2.tuxcare.els4.x86_64.rpm fabebc5f952bad187a9e5d37e9bda450bd7afebd055eca8c1f4de07ac15780bb bsdcpio-3.5.3-6.el9_2.tuxcare.els4.x86_64.rpm fd61f2e6de7191f251d5fd29369cfe075dd3a6048fe5c0a9890bac8d137b935a bsdtar-3.5.3-6.el9_2.tuxcare.els4.x86_64.rpm a2a287750320c4edbcd75409c8493f55e238f88cb59fe17fa9e04fcb8286cf40 libarchive-3.5.3-6.el9_2.tuxcare.els4.i686.rpm d44408f42c639a9d3e93d8f3b6425f300b11e9c1333aeb674f8735e6356e05e8 libarchive-3.5.3-6.el9_2.tuxcare.els4.x86_64.rpm a53c616ecfc5851f68bc67b1cf625a238b03ab3a36d045102ac54aaed696062d libarchive-devel-3.5.3-6.el9_2.tuxcare.els4.i686.rpm 517741c252a4fbaa6b078ec1ee7671c246281bf3b9774cd7a30173f2b830e40a libarchive-devel-3.5.3-6.el9_2.tuxcare.els4.x86_64.rpm 02a0118ff343ec914443907bc012764e72866441caec4f49fea8def125572a3c CLSA-2025:1760018305 TuxCare License Agreement 0 - CVE-2020-36518: fix denial of service via a large depth of nested objects Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-36518: fix denial of service via a large depth of nested objects

0 tuxcare-almalinux9.2-esu pki-jackson-databind-2.14.1-2.el9.tuxcare.els1.noarch.rpm dea6176b571b7e89e9174d61e3680025b0f4e80e7fa010fbdeeb5b65135bd061 CLSA-2026:1776435617 TuxCare License Agreement 0 - CVE-2026-35091: fix incorrect return value in check_memb_commit_token_sanity allowing DoS via crafted memb_commit_token packet - CVE-2026-35092: fix integer overflow in check_memb_join_sanity allowing bypass of length validation via crafted memb_join packet Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35091: fix incorrect return value in check_memb_commit_token_sanity allowing DoS via crafted memb_commit_token packet - CVE-2026-35092: fix integer overflow in check_memb_join_sanity allowing bypass of length validation via crafted memb_join packet

0 tuxcare-almalinux9.2-esu corosync-3.1.7-1.el9.tuxcare.els2.x86_64.rpm 8a0e3a57d56a82963adc3f40db538e165df1d96fcee0c28a67c37f3cd4363e8d corosync-vqsim-3.1.7-1.el9.tuxcare.els2.x86_64.rpm c20dcebdbfbc208749df25c2da9683561ce87fe5a8abdf2f38b916707eb3ce2c corosynclib-3.1.7-1.el9.tuxcare.els2.i686.rpm 604e93d78689d5276c286261759d94ee91652fe234c197ab71304b724bb47a48 corosynclib-3.1.7-1.el9.tuxcare.els2.x86_64.rpm 22fc4fb4f767022ef72d2c5c975792d856718fafbfd663a0b58b2e1b302ba91f corosynclib-devel-3.1.7-1.el9.tuxcare.els2.i686.rpm f85a8ebcb24bc7bd17703fdd9b0b0bcc67fab241e3db775d40551a7e5fb91069 corosynclib-devel-3.1.7-1.el9.tuxcare.els2.x86_64.rpm 3c643e996b1bc313223e92644809ea0cd0cfb71dfb39d7df36ec9154833bb992 CLSA-2026:1776438517 TuxCare License Agreement 0 - CVE-2026-3082: fix heap-based buffer overflow in JPEG parser READ_BYTES macro by adding sizeof(buf) bounds check Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3082: fix heap-based buffer overflow in JPEG parser READ_BYTES macro by adding sizeof(buf) bounds check

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els5.i686.rpm cd467742dd5651314c69142a78b88a60c0b2997e7dabf43be43db1f6e58eb875 gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els5.x86_64.rpm d640dc8264c10bfa2d46bbc7f4466657393dc29c052f88b6cba6c2fee7be7a60 gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els5.i686.rpm c52ed8dccd41975e2d44f9670e127253c8302275d000682f8e70de9e6b704d7e gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els5.x86_64.rpm 1d8566f66be368188a364821968069f09ce18e9d76d6899c3843761e29e3041a CLSA-2026:1776445382 TuxCare License Agreement 0 - Fix CVE-2021-40145: double-free in gdImageGd2Ptr() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2021-40145: double-free in gdImageGd2Ptr()

0 tuxcare-almalinux9.2-esu gd-2.3.2-3.el9.tuxcare.els1.i686.rpm be47299e6ba892e1f633ee4aca093d31a5f72fdc7697b4975d85e37db7969d12 gd-2.3.2-3.el9.tuxcare.els1.x86_64.rpm b7bd6f4dc21a836ed3c883197e68735dd23fd3e2bd8a817f7fd999f76954d91b gd-devel-2.3.2-3.el9.tuxcare.els1.i686.rpm 47c674801e7165a61da37c14c5ba8485352ee45ea3e224278652b5238c40c335 gd-devel-2.3.2-3.el9.tuxcare.els1.x86_64.rpm cd050620a2425f135fb535b220ae69f68d6efc95575c5066ad857f62b964a512 gd-progs-2.3.2-3.el9.tuxcare.els1.x86_64.rpm 811d21f1ca537c7972a0cd2a2bc5e5f904208c21f8879e6c2f432206a10939ad CLSA-2026:1776424888 TuxCare License Agreement 0 - CVE-2026-33416: fix use-after-free in png_set_tRNS and png_set_PLTE due to aliased heap buffers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33416: fix use-after-free in png_set_tRNS and png_set_PLTE due to aliased heap buffers

0 tuxcare-almalinux9.2-esu libpng15-1.5.30-14.el9.tuxcare.els2.i686.rpm 9326be1861e2c8ea2c8d181c4eda12957076b39eed492143e2d0f3a83cd8b83d libpng15-1.5.30-14.el9.tuxcare.els2.x86_64.rpm c0fbf306d142a76af450d7f36c7c1f8db6dfa9dfc6d39265cdd797433509af53 CLSA-2026:1776599416 TuxCare License Agreement 0 - CVE-2024-7264: fix ASN.1 GTime2str() heap buffer over-read caused by off-by-one in fractional seconds length calculation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-7264: fix ASN.1 GTime2str() heap buffer over-read caused by off-by-one in fractional seconds length calculation

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els9.x86_64.rpm 6b3d6bd3c785d27ae95a972c6bdd947dfbe77a7df1eff6f3482246ea4f2f4925 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els9.x86_64.rpm ed9c997f2b7b0dcddb479b60941f21c2b1dce6de199178004909fa773d489564 libcurl-7.76.1-31.el9_2.1.tuxcare.els9.i686.rpm edc6adbfc095d608236007b4915fa05fb2b4612e59a1e2870deea647bb01afff libcurl-7.76.1-31.el9_2.1.tuxcare.els9.x86_64.rpm e9b66fc627aa335c44ed6c20d5d635b1f57b3df459fe2addf9d79a80baf4a1f7 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els9.i686.rpm 77e27800003650b15e9a5581876867d871bb00aac94a032bace45f4f9b1fd736 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els9.x86_64.rpm aaabc9b86c3109fd005026fd3653299f95cb25318b04e162ab1506184cbced49 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els9.i686.rpm 5fa8f3e99eba9125e0735cb8e964d14f666b03cf1d69eebefafd3423458cdd49 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els9.x86_64.rpm c375b3c8f69592a4ffa0466ff013105b23eb90e74d46845812b97eeccf166604 CLSA-2026:1776681849 TuxCare License Agreement 0 - CVE-2026-5119: fix cleartext transmission of cookies to HTTP proxy in tunnel_connect() CONNECT request for HTTPS targets Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5119: fix cleartext transmission of cookies to HTTP proxy in tunnel_connect() CONNECT request for HTTPS targets

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-10.el9_2.3.tuxcare.els3.i686.rpm 427296857f6751fd4c1117b50cb3cfa6b3f841323d3530cf21c9a83b0c58a6c2 libsoup-2.72.0-10.el9_2.3.tuxcare.els3.x86_64.rpm 38df25c525c03ec65a9a97b47c84f6e46e4827ad08b455573c05648a428f7719 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els3.i686.rpm b5d9cc60fbd86bbc02d5396d52e602b0d9cb028e5c5175500a8c9939dfbb3b00 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els3.x86_64.rpm 2748d58ca21baaf88ee8f78bad4f6b423baeffcb1b326d3d38c4c26d50b72d31 libsoup-doc-2.72.0-10.el9_2.3.tuxcare.els3.noarch.rpm 7abc6824e7f08fdd9ee42f894f8a979892d4436687ba8610cca967cb8c600263 CLSA-2026:1776761965 TuxCare License Agreement 0 - CVE-2021-42523: fix memory leak in cd_device_db_load() and cd_profile_db_load() where sqlite3_exec() error_msg output was allocated but never freed Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-42523: fix memory leak in cd_device_db_load() and cd_profile_db_load() where sqlite3_exec() error_msg output was allocated but never freed

0 tuxcare-almalinux9.2-esu colord-1.4.5-4.el9.tuxcare.els1.x86_64.rpm e2b6e5f4a0e83c664fd0b7045af9e270d8da76c7e3542073b499fb7377d0d779 colord-devel-1.4.5-4.el9.tuxcare.els1.i686.rpm 8f3d3457b97adf441111a94e603f1f1a7a61a298144be7952cfc7a44050415de colord-devel-1.4.5-4.el9.tuxcare.els1.x86_64.rpm aa59d82825cb09b01599650b4b5c4e57257912a39b358bd9c9c3ac36b9ea597e colord-devel-docs-1.4.5-4.el9.tuxcare.els1.noarch.rpm de8e3b15c2fb82ea01c017777c4df7f7e3d83d8a651dbad27aaa76be776a73ed colord-extra-profiles-1.4.5-4.el9.tuxcare.els1.noarch.rpm f60213df90dca226265416111a2bae5e0eea8ecb63f4a20b1ebdaebe1fc5516b colord-libs-1.4.5-4.el9.tuxcare.els1.i686.rpm a0654cf8bb1bf2edc0724ec2c38cd5491ebc3ad2be261169e66d75993e0c7535 colord-libs-1.4.5-4.el9.tuxcare.els1.x86_64.rpm 8f8feba9f94fa920950db7d383b4a8382f666dccdd5019d13560161956a682fa colord-tests-1.4.5-4.el9.tuxcare.els1.x86_64.rpm 7c576f329a4e7a3c22ea6e559385b1ee8727f9bbf685ac8c90d2a1a567f4f6ba CLSA-2026:1776763201 TuxCare License Agreement 0 - CVE-2026-1467: validate URI host characters when checking if a URI is valid - CVE-2026-1539: fix proxy credentials leak on cross-origin HTTP redirect Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1467: validate URI host characters when checking if a URI is valid - CVE-2026-1539: fix proxy credentials leak on cross-origin HTTP redirect

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-10.el9_2.3.tuxcare.els4.i686.rpm 79923a429ece10498c789652a5cbffa7f04237173fca86ebb11ef07446da4985 libsoup-2.72.0-10.el9_2.3.tuxcare.els4.x86_64.rpm 9dc934d0a499296ef801ae343bd2b4b787518f7057df3060b98ee2fed6a02ce9 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els4.i686.rpm fa6036a01023e7ed494fa9c91002a08606c1223471100b5a2cd3a36c9777e62d libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els4.x86_64.rpm 7088dbeb13927a141e03aa68a61d8a92dbce4604b43c8b7929bb9a626a0b4412 libsoup-doc-2.72.0-10.el9_2.3.tuxcare.els4.noarch.rpm 7b98c841e3b7896efc0d287ec1ebb3701a46bbd7dd89ce85cbe8fc6c52d95a81 CLSA-2026:1776764746 TuxCare License Agreement 0 - CVE-2021-30560: fix use-after-free in xsltApplyTemplates Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-30560: fix use-after-free in xsltApplyTemplates

0 tuxcare-almalinux9.2-esu libxslt-1.1.34-9.el9.tuxcare.els3.i686.rpm f73afd0c7cd1880bf1bb254c3d2699e957b5e71372e7f863a4181a0c0ac01754 libxslt-1.1.34-9.el9.tuxcare.els3.x86_64.rpm 8459253d216b75d22064cc3e546724cde2eb353966151845f4915c03e0a8f424 libxslt-devel-1.1.34-9.el9.tuxcare.els3.i686.rpm 78f9ea6687b00c5ff4db53d65fcdaedb45dc2fa22f08e177abc40619de1787db libxslt-devel-1.1.34-9.el9.tuxcare.els3.x86_64.rpm c60c287b4fb7c11beaabcd700a1ba62a68fd31b5587392c3daae4b8422c267b1 CLSA-2026:1776766448 TuxCare License Agreement 0 - CVE-2026-27654: fix heap-based buffer overflow in ngx_http_dav_module triggered by destination URI shorter than alias length in COPY/MOVE requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27654: fix heap-based buffer overflow in ngx_http_dav_module triggered by destination URI shorter than alias length in COPY/MOVE requests

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.x86_64.rpm a4399f24b6006caa6440791c40dbba38b9e8e4e99140d0cf384acff636a21b16 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.noarch.rpm 54e04ad900179cc315eceba23f2305d265b57282249198faeefaef2349d909c7 nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.x86_64.rpm 2e1d834efc00ba2aeb6eec668cdadc3d133d50911c7f77f193f0785a017c0e8b nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.noarch.rpm e855622c65a8d0c23a3a85f82078beabe2bbaf37c166a04a134d64fb9e24510c nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.x86_64.rpm 36ab44f6ba925fb729355a24f75cbb0ddb0d113da4cc3be265f6240da0c241dd nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.x86_64.rpm ebffe18361e13d32cdd975e6c7143b7ad576310a2fd50913c91b91b3a460df78 nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.x86_64.rpm 47f819de5fbf00a65badb773f2f5ee00ea144a885f80ffc9b31844976856b00a nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.x86_64.rpm 8ce659d05d73cd952e2a51f043b2d4da50d3cfa282cf7806d1a5ebda93c8c0c4 nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.x86_64.rpm 5aa0f211868d19b1836e47bd2635d699cf70061c3ef5b88e93a6b78554d8a863 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els5.x86_64.rpm 863b8ac34efd307459de12fe6e472fb40eb4b6e92f63fe66a8bb6f8c926a309c CLSA-2026:1776767380 TuxCare License Agreement 0 - CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job - CVE-2026-39314: range check job-password-supported to prevent integer underflow in _ppdCreateFromIPP - CVE-2026-39316: expire per-printer subscriptions before deleting the printer to prevent use-after-free in cupsdDeleteTemporaryPrinters Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job - CVE-2026-39314: range check job-password-supported to prevent integer underflow in _ppdCreateFromIPP - CVE-2026-39316: expire per-printer subscriptions before deleting the printer to prevent use-after-free in cupsdDeleteTemporaryPrinters

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els10.x86_64.rpm 6199cfcb576dfaaf0fe8cc0286bd9f224d7a5e17ec3175bbac42ea1e233f3f27 cups-client-2.3.3op2-16.el9_2.1.tuxcare.els10.x86_64.rpm f91b4801b5324c30191817d324dfca7af5dfd01a4660941b93cf2c6e9022a33d cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els10.i686.rpm 947e621604aa02a1f8616b7f9c37d3abcc970503ac229a0afb68ce9057d9883e cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els10.x86_64.rpm 407ae6c477414fc8dbcc6db71a809022b188bd58f4693d666248a5b93298dbe4 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els10.noarch.rpm 64f4cdaf830b6f62f99f811cd5a92202234a1b7ea52a907a51cb17573c95d824 cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els10.x86_64.rpm f10ecd8a638b6c23f201a95ca6d393a310b20232bf9708890e96130a835c420f cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els10.i686.rpm fc591b28d5f9cb0e3dfb969e5f39d7f3a839c0504bf09b886f71f9845c4fdadf cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els10.x86_64.rpm 660ad42a03bbf49e1bcece05d2f94d8f2479e295545f84c796bfd052b42da1b6 cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els10.x86_64.rpm 0e5df0fb2c2b54c1121458de6adc0bcd0a81617ce5a215af565b720e6ef0a58b cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els10.x86_64.rpm a4e5491377c75602dd0aa845f64972a3154a2c7ddc2f4b83dd8fbbe4e7071236 CLSA-2026:1776768816 TuxCare License Agreement 0 - CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks

0 tuxcare-almalinux9.2-esu libexif-0.6.22-6.el9.tuxcare.els1.i686.rpm 12c31a1a0224e3fe49e26b663c6d27830d86f48ef0feb477ceb72f4f855defb3 libexif-0.6.22-6.el9.tuxcare.els1.x86_64.rpm 3e070438d5a17449794887017a047c0a10d14238554670c2ccb21849d7bb69f8 libexif-devel-0.6.22-6.el9.tuxcare.els1.i686.rpm 77fdf02d84c4816b2ee4b9ffd4dbe29f02401ee3bf18bbbae00e3bab1dee48e6 libexif-devel-0.6.22-6.el9.tuxcare.els1.x86_64.rpm 2f0d11028a6c62d5d68f23b738231f171e0710f403c8489f786bb45b3625a1ab libexif-doc-0.6.22-6.el9.tuxcare.els1.x86_64.rpm 9e78f12545e4d8a6858bdc78cd494fa5908c8207132cc8044357432c0818919a CLSA-2026:1776777715 TuxCare License Agreement 0 - CVE-2026-3083, CVE-2026-3085: disable rtpqdm2depay element to fix heap buffer overflow and out-of-bounds write via crafted RTP payloads Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3083, CVE-2026-3085: disable rtpqdm2depay element to fix heap buffer overflow and out-of-bounds write via crafted RTP payloads

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els17.i686.rpm c4842fd08959a2a0e1a4c7d62619da301e438a5472f8f236e1849c99fafaefc3 gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els17.x86_64.rpm 3ce32ea9a5e9de5e3addb008232bdd0083be00822796993c2a478a3024158b9b gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els17.i686.rpm a46d09e9bfa7232cfc279b88ad0f4567b0f0d98fe777d9ecf0336e1961636d1a gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els17.x86_64.rpm ecdb2f5cd07e73a2ab3ac7266040395a5357312a849feada2579b67d91690207 gstreamer1-plugins-good-qt-1.18.4-6.el9.tuxcare.els17.x86_64.rpm dae40e5769a3ecadd2998ca29cd45bb87d82ce6bcd67048d10b97340371aa9e6 CLSA-2026:1776778859 TuxCare License Agreement 0 - CVE-2026-2921: fix integer overflow in RIFF palette handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2921: fix integer overflow in RIFF palette handling

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els9.i686.rpm a91d5dceba6d7890c2c4662e4984c523502d03e47cfe59800c596e3dfdb053c2 gstreamer1-plugins-base-1.18.4-5.el9.tuxcare.els9.x86_64.rpm 410a3995410a37797a5165bd6c266069508e655a91bd5d035c80d407c75db4c3 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els9.i686.rpm 467ae236553b25685cbd11099b8e14dfdb4cc03b51917dc1cc0b9caf61c34868 gstreamer1-plugins-base-devel-1.18.4-5.el9.tuxcare.els9.x86_64.rpm af2eed023aae00fb59325e6b449daae469f84c7c7cb0ce590efc49b3ec88ea16 gstreamer1-plugins-base-tools-1.18.4-5.el9.tuxcare.els9.x86_64.rpm 65494095b0df68b55b15bef49fb6811575d2795930a01af7082a8d3492ae5af5 CLSA-2026:1776782592 TuxCare License Agreement 0 - CVE-2026-26996: fix ReDoS in bundled minimatch caused by consecutive non-globstar * characters, by coalescing them during pattern compilation - CVE-2026-27904: fix ReDoS in bundled minimatch from nested extglobs and multiple non-adjacent ** wildcards, by limiting globstar recursion Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-26996: fix ReDoS in bundled minimatch caused by consecutive non-globstar * characters, by coalescing them during pattern compilation - CVE-2026-27904: fix ReDoS in bundled minimatch from nested extglobs and multiple non-adjacent ** wildcards, by limiting globstar recursion

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-8.el9_2.tuxcare.els11.x86_64.rpm 5dd9fc6d7e1042001fdc1569e92b2a79371b7cc5d19c594cfc354857d99311db nodejs-devel-16.20.2-8.el9_2.tuxcare.els11.x86_64.rpm f4985091c489cf5582d3b07dba94dc73fd9eed49e382a17bd87b868a7f6079b8 nodejs-docs-16.20.2-8.el9_2.tuxcare.els11.noarch.rpm 63cd7f7a5387ceabb7c547e7cc7e07bb5da3ccab24d379d52a0175830d47b27a nodejs-full-i18n-16.20.2-8.el9_2.tuxcare.els11.x86_64.rpm 95dd774d74aee6a468dd5cce45390e96cc928a531337c10567160fbbfc5e1b05 nodejs-libs-16.20.2-8.el9_2.tuxcare.els11.i686.rpm 1b0766d93f4f974c645f882e272786ae8a739e0eac94c4502a6a8644deea8745 nodejs-libs-16.20.2-8.el9_2.tuxcare.els11.x86_64.rpm a0cbe43323658563f939795624391222fb2ca6ddde9a54c8c974bc14e30ecd87 npm-8.19.4_1.16.20.2-8.el9_2.tuxcare.els11.x86_64.rpm 4a4ab8d03e9331cb520c809b672484b59691b73efaa93f2d0c654a908d303951 v8-devel-9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els11.x86_64.rpm aacbf9083d8f630bc1c168de40ae9c365336b3e957f095f4ed925fe803fc7dd0 CLSA-2026:1776848113 TuxCare License Agreement 0 - CVE-2026-2239: fix heap-buffer-overflow in fread_pascal_string when processing PSD files and a follow-up NULL pointer dereference in load_resource_1006 alpha names handling - CVE-2026-2272: fix integer overflow in ICO file loading Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2239: fix heap-buffer-overflow in fread_pascal_string when processing PSD files and a follow-up NULL pointer dereference in load_resource_1006 alpha names handling - CVE-2026-2272: fix integer overflow in ICO file loading

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els7.x86_64.rpm 97e24e836a0b90dc8a887f6058af98a8722caf6487f3dd43686cf60551729843 gimp-devel-2.99.8-4.el9.2.tuxcare.els7.x86_64.rpm 3d0ab67ade2181c0219acb423df8233317d4b9299f4188a4c43d13761414d097 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els7.x86_64.rpm 0f33e69ad75493a398aca3be0d2894fc9f0bfd310a6c11b7fb30df1d24c2ffa4 gimp-libs-2.99.8-4.el9.2.tuxcare.els7.i686.rpm c647d7f1a24aaea17f7c063f1c16e1f2184f837e1d769c1920ab779525372b2d gimp-libs-2.99.8-4.el9.2.tuxcare.els7.x86_64.rpm 8ae0f956612aa1f255409ac9c3d964aa33f0bea62913f2adbfb9b5443e9d5fb2 CLSA-2026:1776854729 TuxCare License Agreement 0 - CVE-2026-1801: use CRLF as line boundary when parsing chunked encoding data to prevent HTTP request smuggling via lone LF - CVE-2026-2443: reject Range header ends exceeding content length to prevent out-of-bounds read in byte range handling Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1801: use CRLF as line boundary when parsing chunked encoding data to prevent HTTP request smuggling via lone LF - CVE-2026-2443: reject Range header ends exceeding content length to prevent out-of-bounds read in byte range handling

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-10.el9_2.3.tuxcare.els5.i686.rpm 56d8be68e559fa44467f8171ffb59243a52230839440b8938acd1f763837814c libsoup-2.72.0-10.el9_2.3.tuxcare.els5.x86_64.rpm f439d5b062ccee63ab76a331c56877b8187054dbb3f3f663c274c52e01766389 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els5.i686.rpm 17b12c077efd7bf8ef66fb3095fd63eef7719f061bf84be9f0fe297be2695ed8 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els5.x86_64.rpm 692930b19cbbef7e7a9f1a0c25f307fe419348c453c6d97d35c57922245b66d6 libsoup-doc-2.72.0-10.el9_2.3.tuxcare.els5.noarch.rpm 9bffd2d28990f98b2fd146fda467f18b1dbaa80bc87fc6c45e3c22dc57987862 CLSA-2026:1776857230 TuxCare License Agreement 0 - CVE-2026-27784: fix possible integer overflow on 32-bit platforms in ngx_http_mp4_module Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27784: fix possible integer overflow on 32-bit platforms in ngx_http_mp4_module

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.x86_64.rpm 177f4a6f1826d4c9f2f3c1bb8cfa601fe9286f6c6dc628f4264f098d289ebbe8 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.noarch.rpm f9c33e69d5505c9a99ed4f553018c51a8cc566739f3e2abcaa0de02f5f44f2db nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.x86_64.rpm f577e129b5e74c8fcdf23656c5f6cf4b71695008cda254ace95c0ec95733bd00 nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.noarch.rpm 94c252e84268dae325121e36d51b39c8765bc81d03ba1f2582e27642c29438a8 nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.x86_64.rpm 32a35bf14b7b4fa8c6aa8bfb8e533660320f1e62ab1aec1d0771d724306b5dac nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.x86_64.rpm 529ca9c47030ebf6d657930c35d13c75dfc7da0d9c840f29e67c8e452a61f5e0 nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.x86_64.rpm 972a29037513c95cda11cc36b7dbf37ffb593c630e95d776694a3f823622fd5b nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.x86_64.rpm 914d8599ef2cb5b53830e105f953f74930289a11ee587c0da440621986731d41 nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.x86_64.rpm eca0038d5df9f634dbb849046b4158cf71d586a72c33ac5813c949bad56c66ac nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els6.x86_64.rpm 69f16eab7fbb9a8bc615dee1ca67547c205025d59893a48c2bb9d57268a18b80 CLSA-2026:1776872469 TuxCare License Agreement 0 - CVE-2026-4424: fix heap out-of-bounds read in RAR reader due to LZSS window size mismatch after PPMd block Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4424: fix heap out-of-bounds read in RAR reader due to LZSS window size mismatch after PPMd block

0 tuxcare-almalinux9.2-esu bsdcat-3.5.3-6.el9_2.tuxcare.els5.x86_64.rpm 6e58f77ada82c3f6d0c7f68da15e4f3a2103aca38dda02260ffabde447a58db8 bsdcpio-3.5.3-6.el9_2.tuxcare.els5.x86_64.rpm 608fb90f7804a13170b9fa6f43ca75ca66c39044a54b5909e3c462adf879f38b bsdtar-3.5.3-6.el9_2.tuxcare.els5.x86_64.rpm ad0267f68cef2e26373c1309a8161a72b25ff6bd71ebc98775d1e4bb2a97f9b0 libarchive-3.5.3-6.el9_2.tuxcare.els5.i686.rpm 51555eea87738621dc57c862cd4d55ac7213815bd8f35f10b55e30a8dffbbd45 libarchive-3.5.3-6.el9_2.tuxcare.els5.x86_64.rpm 15190c790daad38910c9a68c7c2d951497352e733455e8c4c9efbc6d087da19f libarchive-devel-3.5.3-6.el9_2.tuxcare.els5.i686.rpm 3ace1324830f1cccb39eb79c871a407a6f580f7e185500aa90ceb4e41d9f3be3 libarchive-devel-3.5.3-6.el9_2.tuxcare.els5.x86_64.rpm 9b0606bad18b561fd30a9b3abb7266a4a793a38e7716032f65a9675b64e43a95 CLSA-2026:1776936280 TuxCare License Agreement 0 - CVE-2026-23868: fix double-free in GifMakeSavedImage Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-23868: fix double-free in GifMakeSavedImage

0 tuxcare-almalinux9.2-esu giflib-5.2.1-9.el9.tuxcare.els3.i686.rpm c9b0b221d5dc412436ed8102689dfe5951519f063abb7dc0c7da09b35abfa1cc giflib-5.2.1-9.el9.tuxcare.els3.x86_64.rpm 0139232c062a26ed6c6d84107ca725277b9e888b6930e230573e8dca5bd280c8 giflib-devel-5.2.1-9.el9.tuxcare.els3.i686.rpm ce705e22ff7068c5c67106c91c4355650ea5d2d2f74a8e70255660000d055a30 giflib-devel-5.2.1-9.el9.tuxcare.els3.x86_64.rpm 18e5c3ff2f4dbe0cc985d8a11689e7aded57caf31da471da75fafbcf032b93a4 giflib-utils-5.2.1-9.el9.tuxcare.els3.x86_64.rpm fd9e67edfbdc082384427c30f9700518dfe557be387dd4f5078db94544715246 CLSA-2026:1776940444 TuxCare License Agreement 0 - CVE-2006-10003: fix off-by-one heap buffer overflow in st_serial_stack growth check in Expat/Expat.xs startElement(); also backport upstream follow-up 2abd177 to initialize st_serial_stacksize=1024 after allocation Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2006-10003: fix off-by-one heap buffer overflow in st_serial_stack growth check in Expat/Expat.xs startElement(); also backport upstream follow-up 2abd177 to initialize st_serial_stacksize=1024 after allocation

0 tuxcare-almalinux9.2-esu perl-XML-Parser-2.46-9.el9.tuxcare.els1.x86_64.rpm 13acf810df9428d7106a2de44d9fff5c37587eba01988007c7d5d35117852ac5 CLSA-2026:1776941944 TuxCare License Agreement 0 - CVE-2026-34352: fix world-accessible SHM segment in x0vncserver by changing shmget() mode from 0777 to 0600 in ShmImage::Init() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34352: fix world-accessible SHM segment in x0vncserver by changing shmget() mode from 0777 to 0600 in ShmImage::Init()

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els22.x86_64.rpm d521c87947aa167eedae844cec6b19fb000b57e1876bf4d1070259ced283c92d tigervnc-icons-1.12.0-13.el9_2.tuxcare.els22.noarch.rpm fa8e76f052ef94e4ad7caafeb6150c7e4b08863294c35e479ba2c109c1bb1f2a tigervnc-license-1.12.0-13.el9_2.tuxcare.els22.noarch.rpm 5dac4b2256c2727241b349a572ba2ed60d8accc0967732eb3f415939a9350785 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els22.noarch.rpm fbaf386036deea57d2c456a1d6407951085ee2b4b6d1dc308c34387184d9e0f1 tigervnc-server-1.12.0-13.el9_2.tuxcare.els22.x86_64.rpm 6331cc79e4a8c529d1da9e391b690b19d04552d03659a35bdb593fa2b2296309 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els22.x86_64.rpm 8e81ad7907dce19a7279c45cb36f103351726ae4d8281c797eb4d83c573b86e4 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els22.x86_64.rpm 973b93858b474465cd9a14c1d210c8cb937be73d077de8b5a3b82007fb174d35 CLSA-2026:1776948287 TuxCare License Agreement 0 - CVE-2022-3234 fix heap buffer overflow in op_replace() when replacing NUL after Tab in virtualedit mode Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-3234 fix heap buffer overflow in op_replace() when replacing NUL after Tab in virtualedit mode

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_1.1.tuxcare.els7.x86_64.rpm 2c78ebb357654cf071185907914b2f2ca437612f92a39180baa01eefd463fe5b vim-common-8.2.2637-22.el9_1.1.tuxcare.els7.x86_64.rpm 0e2e0fa355c5c12435d72a602f0e6dc0793bfcba3526b5b2de8a3ac6dac8ef11 vim-enhanced-8.2.2637-22.el9_1.1.tuxcare.els7.x86_64.rpm 5697f21558cec2a621a47484d0549c63d0234240fb94c230b77661bfbabe2f7e vim-filesystem-8.2.2637-22.el9_1.1.tuxcare.els7.noarch.rpm 3b8d5bc8936745c3b417c53b45f1d434fe5bd61d773b3165359df9bb3516ce10 vim-minimal-8.2.2637-22.el9_1.1.tuxcare.els7.x86_64.rpm 31f25f9e81add408d86d985d6e555ba67c126e7ca651452799b760c97ff8e02f CLSA-2026:1776949031 TuxCare License Agreement 0 - CVE-2026-34079: restrict cached-file removal to alphanumeric targets in flatpak_switch_symlink_and_remove to prevent path-traversal unlink via a sandboxed-app-controlled symlink Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34079: restrict cached-file removal to alphanumeric targets in flatpak_switch_symlink_and_remove to prevent path-traversal unlink via a sandboxed-app-controlled symlink

0 tuxcare-almalinux9.2-esu flatpak-1.12.7-2.el9.tuxcare.els5.i686.rpm f1c83660c15fcfa85890b9f53decc48bb93cbb13dd78e7c2a0d265fc631532c0 flatpak-1.12.7-2.el9.tuxcare.els5.x86_64.rpm 4606cb393a2fca2ebc9486178378b2ebe1dfc27b90e3a444b4160c13fc70af39 flatpak-devel-1.12.7-2.el9.tuxcare.els5.i686.rpm 25be35f3849b28801fe58dd8e33fb26126c0e6bc20803d027cad6fcd06601418 flatpak-devel-1.12.7-2.el9.tuxcare.els5.x86_64.rpm 9447e33c807271652d3f16a572ce6f2c44ecee9e2df65ac7d6bda0a25c2f1235 flatpak-libs-1.12.7-2.el9.tuxcare.els5.i686.rpm 9d68bb1fbc1ca46f39848648e57b64a548006f09a49a8b17a9294f34d26e4451 flatpak-libs-1.12.7-2.el9.tuxcare.els5.x86_64.rpm dedad476f63ac1f3057ee6369ff37fc82215a4c7695a2c6c270887392691e304 flatpak-selinux-1.12.7-2.el9.tuxcare.els5.noarch.rpm 512e6f9e08063bce34d968786d6279351881cba087a8b17c7900ccfe591ebe0e flatpak-session-helper-1.12.7-2.el9.tuxcare.els5.i686.rpm 8d7461379d14b5556a69a7fbd370aa18cb08ba7a573f6081d5f105cc0321bd04 flatpak-session-helper-1.12.7-2.el9.tuxcare.els5.x86_64.rpm 3890855eed13e736a4058ac14237d004ad3e11c04796fe2b62f63b2b91ab7156 flatpak-tests-1.12.7-2.el9.tuxcare.els5.x86_64.rpm a5c6d4db9550240d630d93c55eb76b6d77e5096d36d0bf711b3fcda319a91587 CLSA-2026:1776950014 TuxCare License Agreement 0 - CVE-2026-34588 fix signed 32-bit integer overflow in PIZ decoder wavelet buffer arithmetic leading to out-of-bounds read/write Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34588 fix signed 32-bit integer overflow in PIZ decoder wavelet buffer arithmetic leading to out-of-bounds read/write

0 tuxcare-almalinux9.2-esu openexr-3.1.1-3.el9.tuxcare.els4.x86_64.rpm fa2e8c3411cf3498371055ce106e9ae1b100fc2d51601edd03a0dc5fd541307b openexr-devel-3.1.1-3.el9.tuxcare.els4.i686.rpm b0af01bef37bc7a9e9d4215947f2b3bfd846f70c4bb2f57173244e47b5061317 openexr-devel-3.1.1-3.el9.tuxcare.els4.x86_64.rpm f326106732774e9f77fdef5b64a079e72b3dc59e72a44cb50dcff19183444841 openexr-libs-3.1.1-3.el9.tuxcare.els4.i686.rpm 83f0ce482c92af35304ff9e23b26964d2e56f0c56075ce57d0140dafa51a7664 openexr-libs-3.1.1-3.el9.tuxcare.els4.x86_64.rpm 7e89ebc5b8ee3be0ec9d867dd21d9644927e56f02df3b635cb53a19478597a8b CLSA-2026:1776953969 TuxCare License Agreement 0 - CVE-2022-2889: fix use-after-free with multiple line breaks in Vim9 expression by deferring the free of evalarg->eval_tofree Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2889: fix use-after-free with multiple line breaks in Vim9 expression by deferring the free of evalarg->eval_tofree

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_1.1.tuxcare.els9.x86_64.rpm 84d5c7abb83f369a3969553e9a72ba732ec90e9ca6140d938b3da4e17babe165 vim-common-8.2.2637-22.el9_1.1.tuxcare.els9.x86_64.rpm dbee4f2e5a7e3a91dd02d9de6bc002d8049eadcc90ce35adc18851f90588a832 vim-enhanced-8.2.2637-22.el9_1.1.tuxcare.els9.x86_64.rpm 6264205eb68386d11c10ad6b4037db516f03c280f0e82c770684d9e1be104ac6 vim-filesystem-8.2.2637-22.el9_1.1.tuxcare.els9.noarch.rpm 3be9d61f3ea4e3bf2c14bb5a193b33e5742c08c97573ee69ae7dfaa28bea8780 vim-minimal-8.2.2637-22.el9_1.1.tuxcare.els9.x86_64.rpm 0a858dc0bbee3f524558da77c7c32b1c87b9a4cf914bd5a54eabbd95903a2ea0 CLSA-2026:1777022242 TuxCare License Agreement 0 - CVE-2026-32647: fix buffer over-read/over-write in ngx_http_mp4_module via integer overflow, off-by-one boundary checks, and zero sync sample validation in stss atom - CVE-2026-27651: fix NULL pointer dereference in ngx_mail_auth_http_module when using CRAM-MD5 or APOP authentication with Auth-Wait response Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32647: fix buffer over-read/over-write in ngx_http_mp4_module via integer overflow, off-by-one boundary checks, and zero sync sample validation in stss atom - CVE-2026-27651: fix NULL pointer dereference in ngx_mail_auth_http_module when using CRAM-MD5 or APOP authentication with Auth-Wait response

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.x86_64.rpm 1948b65b71885472bd579d2ef26deca26dbab467ab2f2a6ef5f3be1fe6e34e92 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.noarch.rpm 416a6ef4a14212a24183dac3508610e8c0c02dad76c77607a0acfc2e168bae3f nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.x86_64.rpm 4f383579344c2e3e53f4300feccf2e3a46bfff08add331e7bad927da59cf9699 nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.noarch.rpm 3c654f661e7473d74392fe4040713e3c97d72a26a6982bf2f92fcdc8ad189e71 nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.x86_64.rpm b2b61bf23fbfca573977c792f64ea93b5958f1f5e1ac0572a958317e96b8ed42 nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.x86_64.rpm 8925bec57d7c4889423ea3f4caf2d36754ee1cf3bde5f5c24af61c3104756467 nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.x86_64.rpm 6b0c74a1cbe4bc290628b092cda262e562ec295e1939ea9bc27c14d53d385100 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.x86_64.rpm a8cdbfde52182c45078755b1d10097975444b6fa44768b2822b4bf0710a34f2b nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.x86_64.rpm 26e32577ad62d83a15ea28b85c6dc84b7ccb52039a9c1108be939d91505caac5 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els7.x86_64.rpm 1ea7c379f2399b345199255b3aeb41e680da75562297589010d3262aa4682984 CLSA-2026:1777038119 TuxCare License Agreement 0 - CVE-2025-67030 fix zip slip via canonical path check in Expand Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-67030 fix zip slip via canonical path check in Expand

0 tuxcare-almalinux9.2-esu plexus-utils-3.3.0-10.el9.tuxcare.els1.noarch.rpm d698d47f4129c26f6e42cadef3ab914eb62727dc908110150741212b5b7fa5fb plexus-utils-javadoc-3.3.0-10.el9.tuxcare.els1.noarch.rpm 1f54ae820fd028d300dc96311d04a9799d7d7778a3f9223391a8cffe5421793b CLSA-2026:1777042213 TuxCare License Agreement 0 - Fix CVE-2023-3255 (qemu-kvm: VNC inflate_buffer infinite loop) [ELSCVE-57519] - Fix CVE-2023-6683 (qemu-kvm: VNC clipboard NULL pointer dereference) [ELSCVE-57516] Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2023-3255 (qemu-kvm: VNC inflate_buffer infinite loop) [ELSCVE-57519] - Fix CVE-2023-6683 (qemu-kvm: VNC clipboard NULL pointer dereference) [ELSCVE-57516]

0 tuxcare-almalinux9.2-esu qemu-guest-agent-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm f1d8b62db38f3b11f73be52ad13a376a4d57440f7c07dcaee6fa609c8be23666 qemu-img-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 70ec85563e9d883f0fdeed9d573fabc1bae0af0516735f35cfb5d273d8c4428f qemu-kvm-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 0d220308edf7f981a4e03938b384791d1d61671fc8440e7116a6566da318aac8 qemu-kvm-audio-pa-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm d8c321669ad66a469b05de8ad80cd8204d2a2a56ab9cb08b2595172724c2bc7d qemu-kvm-block-curl-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 00b7041a80450975d6bf2522671ada270189d9dc460b9d0953da4bb392915f30 qemu-kvm-block-rbd-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 22540e02925d6e81f51bf84551cefcf1108ad263379151dfaf5458c2a568ed63 qemu-kvm-common-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm dfa8bea030883b79aa3f9279cf2d5837c9a7a76b18c6eca31a83e4d7ae07cef2 qemu-kvm-core-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm ff731aa6437da61f988419a6d102a716ecf73989aca0f86b184956314900542a qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm a33d685cc8a0a127d9f847bfa5c3da923f22eb618606793b02752b5c1165a814 qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm df98273d7cf13cf239ef2b4488748ec0b227c71e430bd3932013e28eb3377dae qemu-kvm-device-display-virtio-vga-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm b749b293803fd4b243a26cb921b596ad8d05351cf8d68323c9a6872fc453f9f6 qemu-kvm-device-usb-host-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm ccfac25be7113eed5d305c18d4cbbab26f5013218ffb8b727e47bea5592968ea qemu-kvm-device-usb-redirect-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 31fad7354cd775a4e2d5540e3fee277597b96e3f74881c66457f2197e6d3565b qemu-kvm-docs-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 569a6a0efe0ab39cca298ffe7d9f1c6fabbcaa7f41bd73db16ed4d3d9ae538fe qemu-kvm-tests-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 4c2a0ba7a664c5442ee2fff877f901edfe003fc5c343743fd966097e5bb5e843 qemu-kvm-tools-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm cf2c7e47544c605bfeabe2829e2107304ad599da148f960e1b81b769343353c3 qemu-kvm-ui-egl-headless-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm ac5bea54ded1eebbb67affe7a432dd771ae1c4af560932df690cc84d529e3ce2 qemu-kvm-ui-opengl-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 985b921a9cea39310d57fa13ea84b63b18173c796ed7973ab2b0a6e950d841ba qemu-pr-helper-7.2.0-14.el9.5.alma.1.tuxcare.els6.x86_64.rpm 358ff329153dbf2a32edd6550d7b4523ade51f8bf045df913955a3ebcb778e3c CLSA-2026:1777301041 TuxCare License Agreement 0 - Fix CVE-2021-38115: out-of-bounds read in read_header_tga() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2021-38115: out-of-bounds read in read_header_tga()

0 tuxcare-almalinux9.2-esu gd-2.3.2-3.el9.tuxcare.els2.i686.rpm 8d72a9848a24c8fd08b191e56390e115397edd8068950bd19006c55ca2abbc2e gd-2.3.2-3.el9.tuxcare.els2.x86_64.rpm e15c03439df361db69e4953ac2268b336c4e3cb1ac8b7d66ca7d010bc3e36767 gd-devel-2.3.2-3.el9.tuxcare.els2.i686.rpm 309d011d8baf8e9a57136c8c1c3dd00c21a5141ac4a25f6f2aa16bde11094377 gd-devel-2.3.2-3.el9.tuxcare.els2.x86_64.rpm 76b663beaa7f2538f88c728787c5a622c6fef546716b287f51baad618518232e gd-progs-2.3.2-3.el9.tuxcare.els2.x86_64.rpm 8d52bbfd58f8b491f80e285acf61a0bc15f26248f48fbcb62331ce97e2360794 CLSA-2026:1777308424 TuxCare License Agreement 0 - CVE-2022-41409 diagnose negative repeat value in pcre2test subject line (upstream 94e1c001) and change pcre2grep length variables from int to size_t to reject negative --buffer-size / --max-buffer-size (upstream 7549fdca) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-41409 diagnose negative repeat value in pcre2test subject line (upstream 94e1c001) and change pcre2grep length variables from int to size_t to reject negative --buffer-size / --max-buffer-size (upstream 7549fdca)

0 tuxcare-almalinux9.2-esu pcre2-10.40-2.el9.tuxcare.els1.i686.rpm a7882011f2bb36ad39c3cacd549b6ca1bb6600bd340367bf3e4c353e89fb4f14 pcre2-10.40-2.el9.tuxcare.els1.x86_64.rpm 5fecc83dcd7f30e4cc3585f242b56a1755a311b100bfc1bf80e6b1f97a54adf7 pcre2-devel-10.40-2.el9.tuxcare.els1.i686.rpm 67d899022bf63ffde24850f7c4bcab41eb3bd57dec3641974540607683c401be pcre2-devel-10.40-2.el9.tuxcare.els1.x86_64.rpm 57c279006a424d1456aa11ff3e33e7ba3b55a0efa8ada3b8e4ec8f64696db58f pcre2-static-10.40-2.el9.tuxcare.els1.x86_64.rpm adfede06e62fba32037d1855738bbca468447e54429543e009835137fe2005c1 pcre2-syntax-10.40-2.el9.tuxcare.els1.noarch.rpm 13624b3873e85c225f281a76be9c85df1c698e1b010b45cfdb73eaf157fbfb1a pcre2-tools-10.40-2.el9.tuxcare.els1.x86_64.rpm ca553ed253f6618cc6d2bddd4ddac5ac885f7f8239021652be91c54cd63c6b4d pcre2-utf16-10.40-2.el9.tuxcare.els1.i686.rpm 2141736fd15481c8aa2597ddc8e2307c90feca8c721234660f7acbe32e282eb4 pcre2-utf16-10.40-2.el9.tuxcare.els1.x86_64.rpm 5b0761bfa0330b0b7b899d3e31918733bb0486c8fd5d36d3001a688b1d5c57d8 pcre2-utf32-10.40-2.el9.tuxcare.els1.i686.rpm e5e67be6083c78afec2025eab2fe2fe4d9e8b4dea904f9a8832aa6a8891be655 pcre2-utf32-10.40-2.el9.tuxcare.els1.x86_64.rpm d7521b7026e646b2555a7af54e3c90dbdf30a8f98616e87e13e7eefb0e7f5a4b CLSA-2026:1777312619 TuxCare License Agreement 0 - CVE-2021-4185: fix infinite loop in RTMPT dissector on TCP sequence wraparound Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-4185: fix infinite loop in RTMPT dissector on TCP sequence wraparound

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9.tuxcare.els6.x86_64.rpm 2731d44b2280e51fda0ed15e4eb2bf5ad8ee17a206c74b3ce31198f30d012413 wireshark-cli-3.4.10-4.el9.tuxcare.els6.i686.rpm 53321fce6252e00137cd890398d69897875f53ae5282fa64a0151ba50b52c8dc wireshark-cli-3.4.10-4.el9.tuxcare.els6.x86_64.rpm 70eb4e576680df28015538816207f61b4c4b0da4a67c8dc2b68dd8ede0b6dfda wireshark-devel-3.4.10-4.el9.tuxcare.els6.i686.rpm 8be050b3c038466fc8c891246cda794fde2c7594777548ccbec477ecf77de966 wireshark-devel-3.4.10-4.el9.tuxcare.els6.x86_64.rpm d5986c0448b2243626fddfcab3966d1580f523021430d1e0093bf5297b8c88dd CLSA-2026:1777322146 TuxCare License Agreement 0 - CVE-2026-32316: fix heap buffer overflow in jvp_string_append and jvp_string_copy_replace_bad caused by uint32_t overflow in size calculations for strings exceeding INT_MAX bytes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32316: fix heap buffer overflow in jvp_string_append and jvp_string_copy_replace_bad caused by uint32_t overflow in size calculations for strings exceeding INT_MAX bytes

0 tuxcare-almalinux9.2-esu jq-1.6-14.el9.tuxcare.els3.i686.rpm a0c533861f957bc666a43319a369b630f9b7ead1e0d1e7f55a90be45e855739e jq-1.6-14.el9.tuxcare.els3.x86_64.rpm 3b93fa932a2b82313e4beb699eb527e04e8ff903658e7ae520e0bf1a66c46b57 jq-devel-1.6-14.el9.tuxcare.els3.i686.rpm 780548fe509b284908fb6cd0c3a782b9e3f5e88a3b54ee846a5999523dc6c38a jq-devel-1.6-14.el9.tuxcare.els3.x86_64.rpm 813237af873a5a7d18b6499c4a90232db0bc1eefe9d8ccac94ae02f46ca30b7a CLSA-2026:1777323039 TuxCare License Agreement 0 - CVE-2021-4173: fix double free in Vim9 nested :def function definition - CVE-2022-3352: fix use-after-free when SpellFileMissing autocmd deletes the current buffer during spell file loading - CVE-2022-2343: fix heap buffer overflow in ins_compl_add_infercase() when completing a long line with 'infercase' set Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-4173: fix double free in Vim9 nested :def function definition - CVE-2022-3352: fix use-after-free when SpellFileMissing autocmd deletes the current buffer during spell file loading - CVE-2022-2343: fix heap buffer overflow in ins_compl_add_infercase() when completing a long line with 'infercase' set

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_1.1.tuxcare.els11.x86_64.rpm 403e1d53f99dd8b3213c28c21a3d608c444017d60f03c1b82801d82d8af481b8 vim-common-8.2.2637-22.el9_1.1.tuxcare.els11.x86_64.rpm 98b56701ecd2c8477b6c18aba7ec8ad8aedfb4a599d81f8f4ca31081e1f824c0 vim-enhanced-8.2.2637-22.el9_1.1.tuxcare.els11.x86_64.rpm 78a1e4cdff5aff94870eacc7661132e765d298f04a9b785a2edd91aef9abe356 vim-filesystem-8.2.2637-22.el9_1.1.tuxcare.els11.noarch.rpm d5b658c508572b359fed78f315bc35ff702a9f89109bde64c244f5b41f3ed8f2 vim-minimal-8.2.2637-22.el9_1.1.tuxcare.els11.x86_64.rpm 18d7ccc5f6340e5bdde61945448fbe79e1bdb2b2cd9537b67f1111f1f72761e7 CLSA-2026:1777370059 TuxCare License Agreement 0 - CVE-2021-4181: sysdig event dissector SIGSEGV fix - CVE-2021-4182: rfc7468 file parser infinite loop fix - CVE-2021-4184: bt-dht endless loop fix - CVE-2021-4186: gryphon NULL pkt_info dereference fix - CVE-2021-4190: kafka dissector varint strictness fix - CVE-2022-0581: cms dissector globals-scoping fix - CVE-2022-0583: pvfs2 heap overflow OOB read fix Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-4181: sysdig event dissector SIGSEGV fix - CVE-2021-4182: rfc7468 file parser infinite loop fix - CVE-2021-4184: bt-dht endless loop fix - CVE-2021-4186: gryphon NULL pkt_info dereference fix - CVE-2021-4190: kafka dissector varint strictness fix - CVE-2022-0581: cms dissector globals-scoping fix - CVE-2022-0583: pvfs2 heap overflow OOB read fix

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9.tuxcare.els7.x86_64.rpm 661d4357ff34d6f40d11ab6122d685f54b1cad5c8741d02a95cb88cbc0fca653 wireshark-cli-3.4.10-4.el9.tuxcare.els7.i686.rpm 248da684f0298337a9ab0c9c7a2a4139a078b0acffa9281a2ba1daa1fa8bf2e8 wireshark-cli-3.4.10-4.el9.tuxcare.els7.x86_64.rpm dce5270e6551c7a43274192a9cb8b5c996e000889d45b8a9695260a1dec53c94 wireshark-devel-3.4.10-4.el9.tuxcare.els7.i686.rpm 6b63be66872b57e42ef442427f5eb8f8f31625a8519019c0a83776f93dfe8185 wireshark-devel-3.4.10-4.el9.tuxcare.els7.x86_64.rpm 5687b643d305f4826eb4f5500e57c86ab87f842812fd723400ca6ec587f54286 CLSA-2026:1777387432 TuxCare License Agreement 0 - CVE-2026-34986: fix go-jose panic on JWE decryption when encrypted_key field is empty Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34986: fix go-jose panic on JWE decryption when encrypted_key field is empty

0 tuxcare-almalinux9.2-esu buildah-1.39.6-1.el9_2.tuxcare.els6.x86_64.rpm ec5b98300faeb79bf568f9575b0c6c8cc5656ef7a55b0327199fe3bc8bf3206b buildah-tests-1.39.6-1.el9_2.tuxcare.els6.x86_64.rpm ddeb33463217d993c5f931a2fe5515fce3908aec0413bb972eb03fb2a732a289 CLSA-2026:1777391151 TuxCare License Agreement 0 - CVE-2022-3520: fix heap buffer overflow in do_put() when Visual-block put causes the end-column to underflow to a negative value Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-3520: fix heap buffer overflow in do_put() when Visual-block put causes the end-column to underflow to a negative value

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_1.1.tuxcare.els15.x86_64.rpm 3afbb29d11e23628cd1391b1f61b900d104ba2e2c08206234f6b4c79c531bc65 vim-common-8.2.2637-22.el9_1.1.tuxcare.els15.x86_64.rpm 62a80c5abc145b560e666b346deb67000acd64ea67520fc077083c45dcb9ded3 vim-enhanced-8.2.2637-22.el9_1.1.tuxcare.els15.x86_64.rpm ba1bbc52ea7706d39d9ec4a1bc7b415b0c07034be5468330be7c475f0b78fe5e vim-filesystem-8.2.2637-22.el9_1.1.tuxcare.els15.noarch.rpm c12757df256bf2a537f5898534409abb6834529bbc32c93e00193104b2fb9362 vim-minimal-8.2.2637-22.el9_1.1.tuxcare.els15.x86_64.rpm 5ecfa10e2fdc844365a92a3836e703f82b22a897d38e91043965d491b489bbec CLSA-2026:1777392820 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.30+7 (GA). The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 - CVE-2025-65018: update libpng to 1.6.51 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.30+7 (GA). The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 - CVE-2025-65018: update libpng to 1.6.51

0 tuxcare-almalinux9.2-esu java-11-openjdk-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm aceb808880dd7be5b5d0607990571aca8bbe578a787053624643273e0d9a70f0 java-11-openjdk-demo-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm 7ad3f119468f4e3c38d028ee8565ddfd3ee50350ff20ef1afa8404b613bce711 java-11-openjdk-devel-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm 6d07a3d6f12ffa244b8ed86ac682eb6f05e7ac38ff65daf9b6cd2b9f48b03599 java-11-openjdk-headless-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm 26d652104fc9d26a3357fdfa0e332d7fa7f99ec22cd345cc1623f61414285b39 java-11-openjdk-javadoc-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm 1fcec6ff64e38c6530a545342d5625be18014c7b960b4cb7eb9912a0e4ef2eca java-11-openjdk-javadoc-zip-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm 8ea0d2a93f7e0391ca30f6e9e53cf36c2575277457ed353f8cd611047ac8adff java-11-openjdk-jmods-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm 15c991dc120e8d2285073bad86515f8ec4ae04bb6a08a3b16e205d753c676a8c java-11-openjdk-src-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm 0a88ca362b68f0d87daa465ca539e3e1f4176a245615f4a698aa2316878b1c94 java-11-openjdk-static-libs-11.0.30.0.7-1.el9.tuxcare.els1.x86_64.rpm 89b695673f23e489374c0e0b8815f05fca0759ff14cf2552959925cab0c15933 CLSA-2026:1777394614 TuxCare License Agreement 0 - CVE-2022-25883: fix ReDoS in bundled npm semver new Range and parseComparator caused by unbounded whitespace expansion in version ranges - CVE-2026-21710: fix HTTP prototype pollution in http.get/request via headersDistinct option by using null-prototype objects for header storage - CVE-2026-27135: fix bundled nghttp2 IGN_ALL flag bypass that allowed attackers to ignore header validation and smuggle malformed HTTP/2 requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-25883: fix ReDoS in bundled npm semver new Range and parseComparator caused by unbounded whitespace expansion in version ranges - CVE-2026-21710: fix HTTP prototype pollution in http.get/request via headersDistinct option by using null-prototype objects for header storage - CVE-2026-27135: fix bundled nghttp2 IGN_ALL flag bypass that allowed attackers to ignore header validation and smuggle malformed HTTP/2 requests

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-8.el9_2.tuxcare.els13.x86_64.rpm a2976faee8d9f1023a2a3aae1e78500eb7fa3b5bfa0fbc6c9f93889cf1c8b123 nodejs-devel-16.20.2-8.el9_2.tuxcare.els13.x86_64.rpm 259063e5afc4614897f8b01d732b1910b80938130f87d496da524a737f562bf1 nodejs-docs-16.20.2-8.el9_2.tuxcare.els13.noarch.rpm 6e6165d62b640e58906bc39395f56e6529c66fce30505a756bddaff3a4aaaaf4 nodejs-full-i18n-16.20.2-8.el9_2.tuxcare.els13.x86_64.rpm b6d8de00162d7a168cba5f928c9b6c4bea76bdd5f268710eace6beaaec1ad3b7 nodejs-libs-16.20.2-8.el9_2.tuxcare.els13.i686.rpm a06c12970a943b3237fbd7db52c4728df0b32ae968716854c69e21fd0e08eab6 nodejs-libs-16.20.2-8.el9_2.tuxcare.els13.x86_64.rpm cd83ddeae5e46cc7855dd6e93f9482a3c48eb722eeb5d7d9b2d2cde1f95c638f npm-8.19.4_1.16.20.2-8.el9_2.tuxcare.els13.x86_64.rpm 31913aca9896e829a52d6903ca2251eb76640248297681b60768a982f697db11 v8-devel-9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els13.x86_64.rpm c2bd8800052e61ba84ff007b36bf035657b131a9ff8cab9663cfe62bda9d12c5 CLSA-2026:1777396783 TuxCare License Agreement 0 - CVE-2022-29885: fix documentation stating EncryptInterceptor does not protect against DoS on an untrusted network Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-29885: fix documentation stating EncryptInterceptor does not protect against DoS on an untrusted network

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9.3.tuxcare.els18.noarch.rpm 1fc621982a91088a55e5537f706eb3510955206b14ff80904601360b456b9f00 tomcat-admin-webapps-9.0.62-11.el9.3.tuxcare.els18.noarch.rpm 5479f2a1f7ebd9a4f7b90b06fe5e5dfd778c0f9e90e46c56e89b3461e4a64188 tomcat-docs-webapp-9.0.62-11.el9.3.tuxcare.els18.noarch.rpm a71a0b0e800f3c99a066130d3e37d0f951170b37ce4d9880d139f4db28333f13 tomcat-el-3.0-api-9.0.62-11.el9.3.tuxcare.els18.noarch.rpm 9641cc981b98fac1a3552ae63ba86c291bf5d7380b456e5a823fd68057aa78ee tomcat-jsp-2.3-api-9.0.62-11.el9.3.tuxcare.els18.noarch.rpm 19baffcb3f55cfc0488269b84f8e8e469f6b4746adb6b6ca6a306504a015f193 tomcat-lib-9.0.62-11.el9.3.tuxcare.els18.noarch.rpm 8fe017d5f5e8f5e93e0758a762af9f07dca05d83a0a36d0beadd0f5cd37d1e1c tomcat-servlet-4.0-api-9.0.62-11.el9.3.tuxcare.els18.noarch.rpm 1ef93d1be124fd83c627a8caff331279beb74221d4d17512dcd0ed459fcbd7a8 tomcat-webapps-9.0.62-11.el9.3.tuxcare.els18.noarch.rpm 317d304d2cdd5b6d1b2fc9d8623730e02745eac09e30e543b34faa1eb28e5f24 CLSA-2026:1777397602 TuxCare License Agreement 0 - CVE-2026-4887 fix heap buffer over-read in PCX file loader by adding bpp validation, tolerating off-by-one bytesperline values, and allocating one extra byte for line buffers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4887 fix heap buffer over-read in PCX file loader by adding bpp validation, tolerating off-by-one bytesperline values, and allocating one extra byte for line buffers

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els8.x86_64.rpm a02254fe5bdae432dfeb5f60c98639de963a5714458d9091b40f85343826f8e1 gimp-devel-2.99.8-4.el9.2.tuxcare.els8.x86_64.rpm 9eb3b9aec95ba6091bed3df1423a2247006380e9b55bbbb7a61bedbc23b22dca gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els8.x86_64.rpm de626ec6fc32927bc9fe069b6065a41c336bfabb9e735075c5bd270805e20887 gimp-libs-2.99.8-4.el9.2.tuxcare.els8.i686.rpm cd894b21367e8a30538cff903048e69394c927a49897451d7e719133cb97677d gimp-libs-2.99.8-4.el9.2.tuxcare.els8.x86_64.rpm a23616e4443b34d24e4a36e9c02235d89a737065a6930d83f0511e8bd9f301e7 CLSA-2025:1737465408 TuxCare License Agreement 0 - CVE-2024-8927: fix bypass of cgi.force_redirect configuration - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter - CVE-2024-11234: fix HTTP fulluri CRLF injection Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-8927: fix bypass of cgi.force_redirect configuration - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter - CVE-2024-11234: fix HTTP fulluri CRLF injection

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 542ae037d0f878c1b1c8f494af3c4a79ac0bc62362ddc5b0fea5d3f70a9cf29c php-bcmath-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 2e34e677e78c6da23786cabcd059307bf129db5646fe483e12e0a457152c885b php-cli-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 694d7ac66f3d30a069ec4b313c1f997ae0d260458f109724f9409c7dd2be2b5e php-common-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 8f9dfeeaf286ef308da237ec4e147dd3f18af7f0556af4278b3fd32e86be1eee php-dba-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 6209d6099a2ec5dede858073378f615286ada3ef5a0884798e5ceca26029d019 php-dbg-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm df0e8c9a5a8d7a9ffd3b66dc56b00dfeede341fa7fbd4413051cba113c08e675 php-devel-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 79b87fcd68b507dd55f1283d81953ff5f6adce044b63806238304c359c339465 php-embedded-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm b476c9c7268ad0c0c3a9d3cd0268d614475ba4eee5617c3a85800d09618fd6f1 php-enchant-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm fa844de4a59b182295855ab4f8e566270033797cf103638005f721305510b15c php-ffi-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 0e354505f335fcf91f07a08de321954a175ebdbf0c2da0df580c01d38cdfe427 php-fpm-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm b2e3bea770f60ea83a08dfb2a9e59ab613c236fe8389f941db4e5bbd43dd0a53 php-gd-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 860fbcd2f953c504521c2a943f4b32f71c9304bacbaea9cfdd0498682de19650 php-gmp-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm c84552773b22af1157f8589563dfeaee12768c118b42b9d7f456f1191ff094f2 php-intl-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm bb3d39b65e8258f5089b3dacc6a8ea191bb9b35f648fdc77176c1ac551841db6 php-ldap-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 9a1741eaf89d301b3e60f9581fa1f1d5913faa29b25665aa9d52171cf967ab11 php-mbstring-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm b902b4eefa016543f91e91541aa5199de4820df4e72504c06ffe38f626675972 php-mysqlnd-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 1d50a480dc04babe294dd0b4175c5b098a62bc22bf344b9c19e10d2d03fd9295 php-odbc-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm f2478af93744a0a1f44bcfc623044eebca709a464e028066ea023ebb4321d810 php-opcache-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 3afc33d9c86d496ca170301f6abca83ae6c370f042444fecfacac5fed59b0e48 php-pdo-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm b2732032d9680d6144c68d9bfc97856fba7f556a0f9153e1799aff3eb5ea1393 php-pgsql-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm e72690ee478037c7a1d42c1e0148a4b3decf63827827fd218b5c3888e23654bf php-process-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm ed68bb7cbe6fbae857eeff0f2ae45c300193dced7ee17c2d204f5be0abe46814 php-snmp-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm fd34284439e824c7d07c0272a771463c949326b662a08ba9b0bfe631ce1ef58f php-soap-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm 5b5383366f2100f8b93ff43313ecf408f448eac865b4a6de6433606f8d53bf82 php-xml-8.0.30-1.el9_2.tuxcare.els1.x86_64.rpm a81678abf311179088b2c8dc62719189a0f91f4d09305f4df850bfced83fe6b6 CLSA-2026:1777455968 TuxCare License Agreement 0 - CVE-2026-27631: fix integer overflow in preview component of PSD image parser Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27631: fix integer overflow in preview component of PSD image parser

0 tuxcare-almalinux9.2-esu exiv2-0.27.5-2.el9.tuxcare.els4.x86_64.rpm 473347069b9544521e025a3b058784b6516ab01cb0921cc5da475ccd0b7a099e exiv2-devel-0.27.5-2.el9.tuxcare.els4.i686.rpm ba5c0024b0395ca22f1db2d1510d7b27b17cebdbff01de95852a6083667100de exiv2-devel-0.27.5-2.el9.tuxcare.els4.x86_64.rpm d37dd801994a26807bbb01000e868c0a83c0bc54c3ca2768a4ab574355988679 exiv2-doc-0.27.5-2.el9.tuxcare.els4.noarch.rpm 295882d2985c16814f77ce2b35037f8f658b56f68adaa1b3b140f968dfbb8f93 exiv2-libs-0.27.5-2.el9.tuxcare.els4.i686.rpm 0e94fc5e1f4c99c4fa56fd3e2aa91e776d3a6e8996b33643115e0bb449a1068e exiv2-libs-0.27.5-2.el9.tuxcare.els4.x86_64.rpm 66ea082162a074342476d947c94d877dbe04a4916fe9c09a600c9b8ec8f894e3 CLSA-2026:1777460138 TuxCare License Agreement 0 - CVE-2022-2183: fix out-of-bounds read in get_lisp_indent() (src/indent.c) by guarding the `that++; amount++;` advance with `if (*that != NUL)` so the lisp auto-indent pointer does not walk past the line's NUL terminator Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2183: fix out-of-bounds read in get_lisp_indent() (src/indent.c) by guarding the `that++; amount++;` advance with `if (*that != NUL)` so the lisp auto-indent pointer does not walk past the line's NUL terminator

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els16.x86_64.rpm 65ce00de301f3daaaa58362d382963f84f861bb73ea4164e92c2fdfe1f5d008a vim-common-8.2.2637-22.el9_2.1.tuxcare.els16.x86_64.rpm 56cfc3c921f17ec19c37f79a62672c78790a964f7ea51ffb4191ddb5ab43c062 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els16.x86_64.rpm 2cd0e8732628b329ca4d815cd4511bd39407af5a9a5862e61022c66cca062bc2 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els16.noarch.rpm b8f8ee774f07ec59e4d1e0ae73b822063c37a2a3a3e2ba01ac40bacd5ce58688 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els16.x86_64.rpm ca8329d5f4bbe9ec77f246fd9b41fb325d9f6dee5141b30228166467da643df1 CLSA-2026:1777477457 TuxCare License Agreement 0 - CVE-2026-40169: fix out-of-bounds heap write in JSON encoder montageDirectory loop Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40169: fix out-of-bounds heap write in JSON encoder montageDirectory loop

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els6.x86_64.rpm 827255661509365856c9aa4d191d633cd8fe04388c7e264ca919a189bc1aa240 ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els6.x86_64.rpm 3f53da14c0318f6a404a46981818f59a8e5315d194dc88bf33fcfd9e902133d8 ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els6.x86_64.rpm 5d4f6367b1d4555ac433d0473242889158aa890d8c6110bdb523f247e155505f ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els6.x86_64.rpm 628cd7c7e768bd924f0230bef32cd285367d84685e16d8001352af1beec21135 ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els6.x86_64.rpm 3805d53a6fb33d9fc415f463ad5a143e53b180d2893a9bfbb04cfe437503f1fc ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els6.x86_64.rpm e55a3fae9b9b8f5d1c32ac79f7266072cac88731a1825bdfe6152f7064556cbf ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els6.x86_64.rpm a99dcfc0878b1adf0beb49c1f933b42b7d304f3ad80095cfd9d6fe54eceeee05 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els6.x86_64.rpm 42da9c93ca8668bdc470d6df533f28b8e341e663da9ea831a3707f130224b2a2 CLSA-2026:1777479123 TuxCare License Agreement 0 - CVE-2026-35385: scp legacy -O mode privilege escalation via umask bypass Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35385: scp legacy -O mode privilege escalation via umask bypass

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els11.x86_64.rpm 529fb56107d2d1b0f6ccb1ded79841e3030124c30d1ea716ceef307bbe16fe9d openssh-askpass-8.7p1-30.el9_2.tuxcare.els11.x86_64.rpm 15482c774f0382c8aae892ee442d6ee2e8de73f0856389f118551ef3435a157e openssh-clients-8.7p1-30.el9_2.tuxcare.els11.x86_64.rpm f7b748b2b73526cb1a1261290a0a24a62bfb6910cbb60873a041b3554dbd5f4e openssh-keycat-8.7p1-30.el9_2.tuxcare.els11.x86_64.rpm 4e4fda6a55dcf9cc881aaec5eed34af101b72547fe4f22d60cb34fa3998e22c8 openssh-server-8.7p1-30.el9_2.tuxcare.els11.x86_64.rpm 935017464b992ae90b8f598bdce9c5a09d6501131d45da21a8845dbb5e21b163 openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els11.x86_64.rpm f231a3a38783b1e99c3f7a1dcfd7bb0575141aaa0f6f44a43d5ab34230129d99 pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els11.x86_64.rpm cf2ef73f6ba942ee4bf60578d23900c39fc47f5598b4903a67bdd49557cb2f06 CLSA-2026:1777544437 TuxCare License Agreement 0 - Rebase to webkitgtk 2.52.3 to address WebKitGTK security advisories WSA-2026-0001 and WSA-2026-0002 (matches RHSA-2026:9692). - Drop all CVE-2025-* backport patches (Patch100..Patch112); the fixes are included in 2.52.3 upstream. - Drop fix-missing-typename.patch: target source file was removed upstream. - Adapt fix-compositemode-init.patch, fix-renderelement-binding.patch, and fix-renderflexbox-typename.patch to 2.52.3 line offsets (same semantic clang15 / libstdc++ compat fix). - Refresh all CentOS Stream 9-derived patches to the versions that ship with c9s webkit2gtk3-2.52.3 (glib-2-68, libsoup2, icu-67, g-ir-scanner-nonfatal, evolution-sandbox-warning, aarch64-build) and reorder them to match c9s so they apply with rpm's --fuzz=0 --strict mode. Our previously-carried versions targeted the 2.50.1 source tree and broke when applied against 2.52.3. - Switch build toolchain from Clang 15 to gcc-toolset-12 (GCC 12). AlmaLinux 9.2 ESU ships Clang 15 as its system compiler, but Clang 15 does not implement C++20 P0634R3 ("implicit typename") nor the `requires`-clause name-lookup fix needed to compile WebKit 2.52+. GCC 12 implements both and is fully supported upstream. %global toolchain is now gcc; BuildRequires updated accordingly; gcc-toolset-12 is enabled in %build via /opt/rh/gcc-toolset-12/enable. - Drop tarball signature/hash verification from %prep. Upstream's 2.52.3 .asc was signed with an expired DSA key (key expired 2026-04-14, signature made 2026-04-16), so gpgv 2.3.x refuses it. The tarball lives in Gerrit under change control, so the per-build verify step is redundant. Source1 (.asc) and Source2 (keyring) are removed along with their files. - CVEs resolved by this rebase (30 total): WSA-2026-0001 (fixed upstream in 2.50.5 / 2.50.6): CVE-2025-43433, CVE-2025-43438, CVE-2025-43441, CVE-2025-43457, CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635, CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676 WSA-2026-0002 (fixed in 2.52.1): CVE-2026-20643, CVE-2026-20664, CVE-2026-20665, CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28871 Older Apple waves superseded by this rebase (from WSA-2025-0008/0009/0010, previously tracked by WIP Gerrit change 245288): CVE-2025-13947, CVE-2025-14174, CVE-2025-43431, CVE-2025-43443, CVE-2025-43458, CVE-2025-43501, CVE-2025-43529, CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541 CVEs from these advisories that were already fixed in 2.50.1 (no action needed): CVE-2023-43010 (2.44.0), CVE-2025-31223 / CVE-2025-31277 (2.50.0), CVE-2025-43213 / CVE-2025-43214 (cherry-picked onto the webkitglib/2.50 branch before the 2.50.0 tag). Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to webkitgtk 2.52.3 to address WebKitGTK security advisories WSA-2026-0001 and WSA-2026-0002 (matches RHSA-2026:9692). - Drop all CVE-2025-* backport patches (Patch100..Patch112); the fixes are included in 2.52.3 upstream. - Drop fix-missing-typename.patch: target source file was removed upstream. - Adapt fix-compositemode-init.patch, fix-renderelement-binding.patch, and fix-renderflexbox-typename.patch to 2.52.3 line offsets (same semantic clang15 / libstdc++ compat fix). - Refresh all CentOS Stream 9-derived patches to the versions that ship with c9s webkit2gtk3-2.52.3 (glib-2-68, libsoup2, icu-67, g-ir-scanner-nonfatal, evolution-sandbox-warning, aarch64-build) and reorder them to match c9s so they apply with rpm's --fuzz=0 --strict mode. Our previously-carried versions targeted the 2.50.1 source tree and broke when applied against 2.52.3. - Switch build toolchain from Clang 15 to gcc-toolset-12 (GCC 12). AlmaLinux 9.2 ESU ships Clang 15 as its system compiler, but Clang 15 does not implement C++20 P0634R3 ("implicit typename") nor the `requires`-clause name-lookup fix needed to compile WebKit 2.52+. GCC 12 implements both and is fully supported upstream. %global toolchain is now gcc; BuildRequires updated accordingly; gcc-toolset-12 is enabled in %build via /opt/rh/gcc-toolset-12/enable. - Drop tarball signature/hash verification from %prep. Upstream's 2.52.3 .asc was signed with an expired DSA key (key expired 2026-04-14, signature made 2026-04-16), so gpgv 2.3.x refuses it. The tarball lives in Gerrit under change control, so the per-build verify step is redundant. Source1 (.asc) and Source2 (keyring) are removed along with their files. - CVEs resolved by this rebase (30 total): WSA-2026-0001 (fixed upstream in 2.50.5 / 2.50.6): CVE-2025-43433, CVE-2025-43438, CVE-2025-43441, CVE-2025-43457, CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635, CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676 WSA-2026-0002 (fixed in 2.52.1): CVE-2026-20643, CVE-2026-20664, CVE-2026-20665, CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28871 Older Apple waves superseded by this rebase (from WSA-2025-0008/0009/0010, previously tracked by WIP Gerrit change 245288): CVE-2025-13947, CVE-2025-14174, CVE-2025-43431, CVE-2025-43443, CVE-2025-43458, CVE-2025-43501, CVE-2025-43529, CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541 CVEs from these advisories that were already fixed in 2.50.1 (no action needed): CVE-2023-43010 (2.44.0), CVE-2025-31223 / CVE-2025-31277 (2.50.0), CVE-2025-43213 / CVE-2025-43214 (cherry-picked onto the webkitglib/2.50 branch before the 2.50.0 tag).

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.52.3-1.el9.tuxcare.els8.x86_64.rpm feecb22cfb32826d583f3b104bce67dea37b4fb936c8117ac4a96520e46d30cf webkit2gtk3-devel-2.52.3-1.el9.tuxcare.els8.x86_64.rpm f43c70757e74a3835c6bf10eca44bcf7f47b65709c4b8b2df0a3b47e0da013ea webkit2gtk3-jsc-2.52.3-1.el9.tuxcare.els8.x86_64.rpm 786a3f1b41d5418ae83a84fccef95f889093ffc32ea41e9e5c910577f3a4a95e webkit2gtk3-jsc-devel-2.52.3-1.el9.tuxcare.els8.x86_64.rpm 6e692b3a8c97c3a2d123a8f15f10b6d27bf139fbd7fd682391da8341caa47ed2 CLSA-2026:1777546646 TuxCare License Agreement 0 - CVE-2026-5201: jpeg loader rejects unsupported component counts in the non-incremental code path Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5201: jpeg loader rejects unsupported component counts in the non-incremental code path

0 tuxcare-almalinux9.2-esu gdk-pixbuf2-2.42.6-3.el9.tuxcare.els3.i686.rpm ac6a6eb6695b153b01b9eeab096644382a7af586c696b62d8097794e5a3472c1 gdk-pixbuf2-2.42.6-3.el9.tuxcare.els3.x86_64.rpm 33479790a3f2dfc1c97dca67e1a4fb12a265ff05298894f192798698b460e66e gdk-pixbuf2-devel-2.42.6-3.el9.tuxcare.els3.i686.rpm dffb81311e17aa4501b5e386b0e0a73f6b1353fc4eca0e09f00564f38ec395ba gdk-pixbuf2-devel-2.42.6-3.el9.tuxcare.els3.x86_64.rpm 6ee1d05b212b4d372826383cc804d6d11c6c61e3e566c488e2655fcd0e21075a gdk-pixbuf2-modules-2.42.6-3.el9.tuxcare.els3.i686.rpm 91cf960d813f13c9c8bd96bfa440c63d70f9e2c94a7b6fb7c00348b1ca650328 gdk-pixbuf2-modules-2.42.6-3.el9.tuxcare.els3.x86_64.rpm 84391dd148852821d542bd7f1f8b4e22d1f96c8b8c04e2544df2a88c4f97dc04 gdk-pixbuf2-tests-2.42.6-3.el9.tuxcare.els3.x86_64.rpm 50da50b5a3058206a24bb2494e539e1a5fb587db7acad80a957e04243a80459a CLSA-2026:1777569045 TuxCare License Agreement 0 - CVE-2026-2369: fix integer underflow in sniff_unknown() on zero-length buffer that caused an out-of-bounds read in the content sniffer Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2369: fix integer underflow in sniff_unknown() on zero-length buffer that caused an out-of-bounds read in the content sniffer

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-10.el9_2.3.tuxcare.els6.i686.rpm 18bbc951e0b6ecf80fa8265e6766d86fc096a82da9315a5922b71386f1aeccff libsoup-2.72.0-10.el9_2.3.tuxcare.els6.x86_64.rpm 30b4ed86d5d2154cbc0cccefe2ab1653a1382409b0b3c5ba1dc96587edfb3386 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els6.i686.rpm 376dd8c2027632da30f5ccc943f8ffbcad05013f9efec0fdce0da43f64d9c236 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els6.x86_64.rpm e0dbace4b4c7137fb09cd93e8bca93e0b573a5e434e5dd3ae52f6a9be39d0e69 libsoup-doc-2.72.0-10.el9_2.3.tuxcare.els6.noarch.rpm 3094fcb6ed616ee27d9cef4cf869fa4efea1021c5dfbb77fe7249add769db603 CLSA-2026:1777565595 TuxCare License Agreement 0 - CVE-2026-33412: fix OS command injection via newline in glob() by adding \n to SHELL_SPECIAL in src/os_unix.c so newlines are escaped before the pattern is passed to the user's shell Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33412: fix OS command injection via newline in glob() by adding \n to SHELL_SPECIAL in src/os_unix.c so newlines are escaped before the pattern is passed to the user's shell

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els17.x86_64.rpm 9ba3432bfc44a1fd717b63e8ec35983cec8827fbaecfb92912d8a1d7a2fca16f vim-common-8.2.2637-22.el9_2.1.tuxcare.els17.x86_64.rpm 91e96559ce17d365d126d8c970ea486c5b00b6aa8d17e488e9ad1a441fe9161a vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els17.x86_64.rpm aa6dd6713a367bfc796322605267dbdcdfe7d5d4a80b4cb1c88c79656269b980 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els17.noarch.rpm 809bc9ceaa7c59ffd2215768edfe410a81cf4484cb3d4ede5594656cb7457741 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els17.x86_64.rpm 1307f9b27d6c6a7cc1cb8e84d83c549c4ee9b57f8e629b88a996c0d713d4cf37 CLSA-2026:1777660095 TuxCare License Agreement 0 - CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els24.noarch.rpm 8a786ea51be2425900d58fcfa0f71e0f008027723467d6b0a0f8db6a16fcfa1d python3-3.9.16-1.el9_2.2.tuxcare.els24.i686.rpm cf88c997cdc478b48e1d763d19649c541cf84a95a762926140e08a4f1ed276a6 python3-3.9.16-1.el9_2.2.tuxcare.els24.x86_64.rpm ff821ed026c523f44f01f67cd83c5b13380808ce828997851a62eb848460e6cd python3-debug-3.9.16-1.el9_2.2.tuxcare.els24.i686.rpm 716567b79cd052fd924406cc2fdabf7fc4dcf28b53241ccc03db3ceacc1d2149 python3-debug-3.9.16-1.el9_2.2.tuxcare.els24.x86_64.rpm d77b03d2a9cc513cc02cecfaaa6aa4495ff518f8605c1533c7cd0decb7a22c92 python3-devel-3.9.16-1.el9_2.2.tuxcare.els24.i686.rpm 4ed5c36c53a7d50169e630d46a305cf505303a91e4eabc78b13af100181a41f1 python3-devel-3.9.16-1.el9_2.2.tuxcare.els24.x86_64.rpm 375de4786519497469653c69ce64ea225ec2de6c54d090a40f82584022974a22 python3-idle-3.9.16-1.el9_2.2.tuxcare.els24.i686.rpm b6e2101833c204932ca4f007f2846cd1186d0692ba61a7a1c9df3e23bae2c87e python3-idle-3.9.16-1.el9_2.2.tuxcare.els24.x86_64.rpm a8c2c23ae66bc7f23da43fa47b2cf7a01bdf3bfd2bb20a106e8114cbd40166eb python3-libs-3.9.16-1.el9_2.2.tuxcare.els24.i686.rpm 439573faa6757dd60ede285d8ff9bc7796a873c9b673f8e1225857ee49be2c0f python3-libs-3.9.16-1.el9_2.2.tuxcare.els24.x86_64.rpm 953e109834442b2db24d03e8d61e0dea2cc10ad03787b937fe247d238bfae905 python3-test-3.9.16-1.el9_2.2.tuxcare.els24.i686.rpm b26f30927378a19d82ebd00bbb077f41a72b5c69cb83cb4f6fd047e7f57f486b python3-test-3.9.16-1.el9_2.2.tuxcare.els24.x86_64.rpm 30e7c856b6043e0129c3100333d7c93db470a7e5c17cd16bd08db655d8765a94 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els24.i686.rpm d26da6a9e7e6dc02534428adfa2ff6b8e2b1126013a126e0b1446e45b6889248 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els24.x86_64.rpm 0e3a81032a7e7e141959b9c0cbf0852516e1b897558484e1e678a6b1f73250ed CLSA-2026:1777660524 TuxCare License Agreement 0 - CVE-2026-6100 fix use-after-free in lzma/bz2 decompressor by clearing the dangling next_in pointer after MemoryError so a re-used decompressor cannot read or write through a stale buffer pointer Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6100 fix use-after-free in lzma/bz2 decompressor by clearing the dangling next_in pointer after MemoryError so a re-used decompressor cannot read or write through a stale buffer pointer

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els21.i686.rpm 7e90face0083a50f7dfd12a0198d897bb7813dc1b274a546a1db3d2a73e5c4f9 python3.11-3.11.2-2.el9_2.2.tuxcare.els21.x86_64.rpm 6ecb94de4b5a3f3d381ff22595e2e2249420f6d93745a5bec67fa41d21d81936 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els21.i686.rpm 55314fc24ae774dc4d82ea13ec6e6f32401fa4bb86f5f5e538a67d5165d9160d python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els21.x86_64.rpm 1a814f47bf263fedc2f1a2a51b3d3ae4c68915ff24a4337d094bf7471d932681 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els21.i686.rpm 414d3466d10a653ec87ea70c742097b9e3f77cc6763495427d9de1ba2fe9e2f7 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els21.x86_64.rpm 6c16a0cfc5ea70a337333bd56821c5f563f7f189ba0fdfab08d55ab1388bd94f python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els21.i686.rpm 237a596be7dd6ebb4f5607642e20c4ef2c86cc705cda6e7693754dd05787b773 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els21.x86_64.rpm 73e6cf43ccfcd2380b9f65c1a7521b414d64f3795bcd5ca15fb77049d2b4bf99 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els21.i686.rpm 5956b32d2a123deadba91bdd7a1dad0f2c560f32aca1e3054830101bf461ba90 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els21.x86_64.rpm c61f7297456531d5ad01ab352817267640d51a0721e3c2e3e92349d196cdf494 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els21.i686.rpm 21457a450deda2780fa2be729dc48be6a64246fed403620cfa5d92fb7c6f4e63 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els21.x86_64.rpm b73cc8a63df5a6fcb5f5c9d7b902d68f2837bb9069b67b46956f5187cf00b777 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els21.i686.rpm 39cb397b3d4257fd8a432cfb7be479fae1e164abbdf92207150935ee0632f172 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els21.x86_64.rpm e8af012bbf42f4b959755ab75b9bdf5168fb3ead1926037e2bb5d99bfd06d569 CLSA-2026:1776163133 TuxCare License Agreement 0 - CVE-2024-52316: fix unchecked error condition in Jakarta Authentication (JASPIC) ServerAuthContext - CVE-2025-46701: fix case sensitivity bypass in CGI servlet pathInfo - CVE-2025-55754: add escaping to logging output for ANSI sequences Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52316: fix unchecked error condition in Jakarta Authentication (JASPIC) ServerAuthContext - CVE-2025-46701: fix case sensitivity bypass in CGI servlet pathInfo - CVE-2025-55754: add escaping to logging output for ANSI sequences

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-11.el9_2.3.tuxcare.els17.noarch.rpm 4ed5f7a00c56dc6f272e41342868fc7b9c66836b5b57302195fa4d70779fe09a tomcat-admin-webapps-9.0.62-11.el9_2.3.tuxcare.els17.noarch.rpm d9cb5a34a7dadfdb19c39d6a4561a346090a6f3c12c311295246fb3ffe503cfd tomcat-docs-webapp-9.0.62-11.el9_2.3.tuxcare.els17.noarch.rpm 92639c9c6fd1da29bf58452ce342b09deba29047d2afc2c62dba0f007804a801 tomcat-el-3.0-api-9.0.62-11.el9_2.3.tuxcare.els17.noarch.rpm 20c93e3c71f5fb70ea02eeaf1fbadb212f53346bf38d7819b39473c4a0609dbf tomcat-jsp-2.3-api-9.0.62-11.el9_2.3.tuxcare.els17.noarch.rpm d130b0ad08552528ad91f84e23a65dc9b96a84dd8a3f8ea66a3e7a722bb77429 tomcat-lib-9.0.62-11.el9_2.3.tuxcare.els17.noarch.rpm 9e751b4b903f797412f135066a641078fcb180dd6e2b778304f9db1c4db1c546 tomcat-servlet-4.0-api-9.0.62-11.el9_2.3.tuxcare.els17.noarch.rpm 1f00edce2e3c874759a6a6037be49b02293178a354b2813cad90e70fdf2357a5 tomcat-webapps-9.0.62-11.el9_2.3.tuxcare.els17.noarch.rpm 72f36215695c42f5eb0fe7b87b770447f3756e23d47411c59c9fb340d246737a CLSA-2026:1777883384 TuxCare License Agreement 0 - CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check by validating url after %action expansion and reordering replace() calls so the dash-prefix check sees the final argument Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check by validating url after %action expansion and reordering replace() calls so the dash-prefix check sees the final argument

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els22.i686.rpm e17251d4e40a646cb954b9fa49ef6400f6a1bf9968a023d8044855137b5b5164 python3.11-3.11.2-2.el9_2.2.tuxcare.els22.x86_64.rpm b66898b501bd3d58b301be88f7a8d22aca44002ffc4bb11d0718c5eca7512b27 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els22.i686.rpm 279ab4a6e18d39b3d9981dfd9604827c57a39f0628d6792319f1580c810aaafc python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els22.x86_64.rpm ad53def0c1d0c533e668cb68193bc8c2b848fccc9f49b63335582e31dd9cf84d python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els22.i686.rpm e250e4804b236401a305ac021e02496731eb0d941775f5b65d1f76534a95679c python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els22.x86_64.rpm 93cd83ce0780348b899efd65a3931b546ddb17cfbdb7bc52d44df470114f08b6 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els22.i686.rpm 5ff75856df1af1de5088c532dbe0fa17fcb27c7514baece770cee185b6554796 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els22.x86_64.rpm b8b5da152d7663270aa77bcb542172a4397e50a51946a1a400c48c9c39a5c70f python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els22.i686.rpm 4ce9f3fbf952305e05d5679e6c528bfbc57ca7d13018183a8699a9cb8bb47014 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els22.x86_64.rpm dff95189930409f06b2cd5ae0f613846c1b93cae786c6c0a5d62c9191d867fae python3.11-test-3.11.2-2.el9_2.2.tuxcare.els22.i686.rpm b6792676fbb6268b083d5059f84906b6f7cfd9da593588fc26260633a23f5bcc python3.11-test-3.11.2-2.el9_2.2.tuxcare.els22.x86_64.rpm 27938ab81359a5f95b56245f0d04528ab3b2c222ef42335798b7d2972acf893c python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els22.i686.rpm da348b68969a8f5494a0d262e9f2d02c9e936cce424923d0724a0757bc35057c python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els22.x86_64.rpm b4899dc300579b5ae97137143c823e573c3066a24c4216e7ddcf3425cc68ffe6 CLSA-2026:1777885651 TuxCare License Agreement 0 - CVE-2026-33999: fix buffer re-use in _XkbSetCompatMap() (ELSCVE-122668) - CVE-2026-34001: fix use-after-free in miSyncTriggerFence() (ELSCVE-122664) - CVE-2026-34003: add bounds checking in CheckKeyTypes() and companion helpers (ELSCVE-122672) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33999: fix buffer re-use in _XkbSetCompatMap() (ELSCVE-122668) - CVE-2026-34001: fix use-after-free in miSyncTriggerFence() (ELSCVE-122664) - CVE-2026-34003: add bounds checking in CheckKeyTypes() and companion helpers (ELSCVE-122672)

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els23.x86_64.rpm a6a7e1d6e090497f14354702dac215312d162a29c8961d51838ccda24dc97651 tigervnc-icons-1.12.0-13.el9_2.tuxcare.els23.noarch.rpm 5db52c309d5962c77b6987faa2e9e084ed8159b7392afed1e65105efbfa3ddca tigervnc-license-1.12.0-13.el9_2.tuxcare.els23.noarch.rpm c3d7410ca5855ee33cd98959baa050bfb41d8eb0c145d691c10615a71fa76384 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els23.noarch.rpm 66542408a9676a33f4c3613ce10e484552979d41eb08d054d2327e95ef277afc tigervnc-server-1.12.0-13.el9_2.tuxcare.els23.x86_64.rpm fec78dbea884f99532edd6f86d6e56baf4d87dc52332d50b3dda3e3261294446 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els23.x86_64.rpm c1ee1a827d753de89c121b1b26aab5784c7bcba6445ca702d2a122e92126a844 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els23.x86_64.rpm b54b4d9b5962a34d81471484784d620282b53ca50fa60f30c0c67c1caacc6c23 CLSA-2026:1777886414 TuxCare License Agreement 0 - CVE-2026-33999: fix buffer re-use in _XkbSetCompatMap() (ELSCVE-122736) - CVE-2026-34001: fix use-after-free in miSyncTriggerFence() (ELSCVE-122732) - CVE-2026-34003: add bounds checking in CheckKeyTypes() and companion helpers (ELSCVE-122740) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33999: fix buffer re-use in _XkbSetCompatMap() (ELSCVE-122736) - CVE-2026-34001: fix use-after-free in miSyncTriggerFence() (ELSCVE-122732) - CVE-2026-34003: add bounds checking in CheckKeyTypes() and companion helpers (ELSCVE-122740)

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els14.i686.rpm b91923d28e57336c4886e0aabe7a9f87753d618e3ca50703150cc097951e414a xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els14.x86_64.rpm e52bc676910c8ca25d9d35ca73657a9602a51ee6b45d423b11a8af25b24d939b xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els14.i686.rpm a35bc9bffc8dc2a47f8b61ade75bb27679ba2602e93f817fb601a5e752c61c9d xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els14.x86_64.rpm f669f498470bb40be32543bd5509e1e9eb9e60b43d92be9d1613bdb869f40f61 CLSA-2026:1777306004 TuxCare License Agreement 0 - CVE-2022-0586: fix infinite loop in RTMPT dissector rtmpt_get_amf_length Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-0586: fix infinite loop in RTMPT dissector rtmpt_get_amf_length

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9.tuxcare.els5.x86_64.rpm 029f128013952423cb469980f1424296608f290c5f2e10b7ec789b4ca1b2c4ea wireshark-cli-3.4.10-4.el9.tuxcare.els5.i686.rpm f53e162de2c334b56d7ae448c7177325b191b08cd0ad8952211e0e80b104314f wireshark-cli-3.4.10-4.el9.tuxcare.els5.x86_64.rpm d490a702239e6db770953d5b96147feed5770c7ae4fcd816bd7d6b49498facbb wireshark-devel-3.4.10-4.el9.tuxcare.els5.i686.rpm 5830db383a55ed51c756b163f6f978c00b871ed36d45f7d7514045a29e43fd1f wireshark-devel-3.4.10-4.el9.tuxcare.els5.x86_64.rpm 05897851739c20f53ef5e9be30f56038792740861b4bf5d1b240fad6b26ca4de CLSA-2026:1777889999 TuxCare License Agreement 0 - CVE-2026-21413: fix heap-based buffer overflow in lossless_jpeg_load_raw() by adding col bounds check (ELSCVE-122352) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-21413: fix heap-based buffer overflow in lossless_jpeg_load_raw() by adding col bounds check (ELSCVE-122352)

0 tuxcare-almalinux9.2-esu LibRaw-0.20.2-5.el9_2.tuxcare.els3.i686.rpm 8668ad9c4c58045dd0911d9fc19f2a4b5510b27933fadae08a24b0c05a4c91e9 LibRaw-0.20.2-5.el9_2.tuxcare.els3.x86_64.rpm d3ba99bd05d43eb6de28ef628a770bb835f66cbb86fe55d79c8b77048ef02f68 LibRaw-devel-0.20.2-5.el9_2.tuxcare.els3.i686.rpm e5ec325f94b49b4376a17b2be89d0f0eb5f1a031bc9ad9724b0b67fe37cf8cf0 LibRaw-devel-0.20.2-5.el9_2.tuxcare.els3.x86_64.rpm 196f3209bc5cc71bb9c5bd3cfc0416b68c9c92ba1a2d09b090af19f13907c0e0 LibRaw-samples-0.20.2-5.el9_2.tuxcare.els3.x86_64.rpm 3c05d04235f2830711f3280c41ecdbbbdbbf5c57c29a0235133186c71c26083e LibRaw-static-0.20.2-5.el9_2.tuxcare.els3.x86_64.rpm 769290522f08828ca49b0b234b0ec73a73df6aeaae76bbf6413c92bc6127e6cc CLSA-2026:1777943581 TuxCare License Agreement 0 - CVE-2026-35177: fix path traversal bypass in zip.vim by using simplify() to detect attacks that circumvent the previous regex-only check - CVE-2026-39881: fix command injection in netbeans interface via unsanitized defineAnnoType and specialKeys parameters Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35177: fix path traversal bypass in zip.vim by using simplify() to detect attacks that circumvent the previous regex-only check - CVE-2026-39881: fix command injection in netbeans interface via unsanitized defineAnnoType and specialKeys parameters

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els18.x86_64.rpm baaa3326aadd8cf57014beda02356488ffe5ccd46ee7b292cc0cbc9322a65218 vim-common-8.2.2637-22.el9_2.1.tuxcare.els18.x86_64.rpm d162b3515d337fe00e86545f3a526d22bb33d3c6d4f5646d947e8fab78254563 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els18.x86_64.rpm 3594802a99fa97cbcef214b35857f93a0c711a2820e47af5b18a91bb25fd9394 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els18.noarch.rpm 7765f04d97ce7c9034f98580fafbb4a6ec3ef337267aba50f0da79114665e3aa vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els18.x86_64.rpm ccd177528c9efc0d9eede8ab1a539654974682919581497e350cfa7fea16fafc CLSA-2026:1777945456 TuxCare License Agreement 0 - CVE-2024-42516: fix HTTP response splitting in core httpd via header merging refactor in modules/http/http_filters.c - CVE-2024-43204: fix SSRF in mod_proxy when mod_headers is configured to modify Content-Type from request input Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-42516: fix HTTP response splitting in core httpd via header merging refactor in modules/http/http_filters.c - CVE-2024-43204: fix SSRF in mod_proxy when mod_headers is configured to modify Content-Type from request input

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm b9376bcd61aef67085c26aafe3c516f87aa4b4bff79b4d8ed0bba94c586de734 httpd-core-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm 07c6169c3663e70a16fcfaae83120e6614d924af79e88dc608e2452aa17326c1 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm 54ed7919583d288b58006c3c62260bcfcc335653688312f8e11568cdd94480a5 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els11.noarch.rpm 132aaa008a8b0bcea4fe6fc86110781ae4f29ea4e8e69a6491ce9f8125b1c07b httpd-manual-2.4.53-11.el9_2.5.tuxcare.els11.noarch.rpm 264025dcd40483f8958b679425ebebfafdc5de7249956056fec79a2481ef3b43 httpd-tools-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm c082f6d92f210e83d7033ae473f938f0374963701d509b5507df95a9b13ee2be mod_ldap-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm 46bc8e429cca82eaf0d9dae941cfe3848bf71c4aaa490cde4f1f9a8a7321b32c mod_lua-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm 5c8b15ab732a572f1ba076af856bf68668faa900a87cf4ef6535a321b2fefd73 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm 42785dcaa8c7efb14a3692a8bc80d71659e7f747c093264d8fcb5e95d5af01a9 mod_session-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm 1571cb78bd770e4d05fa8e804ce961f8595bff14786056fedb33af52d97777dc mod_ssl-2.4.53-11.el9_2.5.tuxcare.els11.x86_64.rpm 8e0c0a54f94b11a1b90ac1d8f4b87ba75e717301593d4d62c9cd53cd2336d3e7 CLSA-2026:1777949670 TuxCare License Agreement 0 - CVE-2025-11412: fix out-of-bounds read in bfd_elf_gc_record_vtentry - CVE-2025-11413: fix out-of-bounds read in elf_link_add_object_symbols - CVE-2025-11839: fix abort in tg_tag_type with fuzzed input - CVE-2025-11840: fix SEGV from NULL howto name in coff reloc processing - CVE-2025-3198: fix memory leak in objdump display_info - CVE-2026-4647: fix out-of-bounds read in XCOFF relocation processing - CVE-2025-69645: fix abort in byte_get_little_endian from malformed DWARF - CVE-2025-69652: fix abort in readelf from malformed DWARF debug info Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11412: fix out-of-bounds read in bfd_elf_gc_record_vtentry - CVE-2025-11413: fix out-of-bounds read in elf_link_add_object_symbols - CVE-2025-11839: fix abort in tg_tag_type with fuzzed input - CVE-2025-11840: fix SEGV from NULL howto name in coff reloc processing - CVE-2025-3198: fix memory leak in objdump display_info - CVE-2026-4647: fix out-of-bounds read in XCOFF relocation processing - CVE-2025-69645: fix abort in byte_get_little_endian from malformed DWARF - CVE-2025-69652: fix abort in readelf from malformed DWARF debug info

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els6.i686.rpm 114db9c1401c0f958b7146aff887fe5cf8f9f55ff0f22c806dcea5b0d60440fe binutils-2.35.2-37.el9.tuxcare.els6.x86_64.rpm 40555dda7e2b3b8eb151eb37bdaaf2821506b72ad7c6d63434ba9287d63004eb binutils-devel-2.35.2-37.el9.tuxcare.els6.i686.rpm b5a85ab596a0ed1d63e6b057ad5f5d1ac27b238797173883deff313ac3b182e0 binutils-devel-2.35.2-37.el9.tuxcare.els6.x86_64.rpm a6e32f590f53b433301893f5f0ad12bc6b226e47d45d5f7aeda0cafcd0a2369f binutils-gold-2.35.2-37.el9.tuxcare.els6.x86_64.rpm edc409a45a91d8e42d23e6cc088f55d5f2a2f99661161a3aead1984cadb32e3a cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els6.x86_64.rpm aa8f011b3c06ce69ae8b6318fe1c46d409d1d75173c7898dd73b19af6b2ee211 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els6.x86_64.rpm dae221f13b16236e585196805dff9232f276865c784b74c9f865f14057e4809b cross-binutils-s390x-2.35.2-37.el9.tuxcare.els6.x86_64.rpm f1f9b4173c7ea489be82ade5028a81f905401cd4daf8bfe7e935a21d2ddac65d CLSA-2026:1777950533 TuxCare License Agreement 0 - CVE-2026-3497: fix information disclosure / DoS in GSSAPI key exchange by initialising gssbuf, recv_tok, msg_tok to GSS_C_EMPTY_BUFFER and replacing non-terminating sshpkt_disconnect() with ssh_packet_disconnect() in kexgssc.c / kexgsss.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3497: fix information disclosure / DoS in GSSAPI key exchange by initialising gssbuf, recv_tok, msg_tok to GSS_C_EMPTY_BUFFER and replacing non-terminating sshpkt_disconnect() with ssh_packet_disconnect() in kexgssc.c / kexgsss.c

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els12.x86_64.rpm a6627d0aedee3bfe6f8db3d7f346cd38db305146986cfbb894b7f748ad4a3201 openssh-askpass-8.7p1-30.el9_2.tuxcare.els12.x86_64.rpm 320140a62d3e21a90a3424f6a57b08c3b49eed715eb346f29050c3262a33903d openssh-clients-8.7p1-30.el9_2.tuxcare.els12.x86_64.rpm 445251446c19ee1a21e02d3ce0ff8b867ee9018f95eb0e65b3bf1f0da1824dee openssh-keycat-8.7p1-30.el9_2.tuxcare.els12.x86_64.rpm 36f2dad23b3d1c23fde403213cb4729e8d86d4b36cb14a0be5c0be67c4c02479 openssh-server-8.7p1-30.el9_2.tuxcare.els12.x86_64.rpm 84409db4b70fa15f51f8339325490d2ea3e618c37400c0c3a9fa3eda64bd937f openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els12.x86_64.rpm e2903909684047f00b5b52c965cb7d9434404075130afe287cfcc3a7d9625dfd pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els12.x86_64.rpm c5cbd54611ba2b193b4a325090fba0fa64ed1db837837a99855f8b730b2e98f0 CLSA-2026:1777984435 TuxCare License Agreement 0 - CVE-2026-33416: fix use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE - CVE-2026-33636: fix out-of-bounds read/write in ARM NEON palette expansion Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33416: fix use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE - CVE-2026-33636: fix out-of-bounds read/write in ARM NEON palette expansion

0 tuxcare-almalinux9.2-esu libpng-1.6.37-12.el9_2.tuxcare.els7.i686.rpm 091ccf9896d10fcc63a70431d52ed6cdb33895950a8387165906c8ea7e5638e1 libpng-1.6.37-12.el9_2.tuxcare.els7.x86_64.rpm 64c99d697233e2d497a4b10c6f146b8eeeec3dc0e596de6e3e26c9f93829e43d libpng-devel-1.6.37-12.el9_2.tuxcare.els7.i686.rpm d4648f008f8daf4169978e3ba1d1af3184b313b0e1a34368506817077b26f92b libpng-devel-1.6.37-12.el9_2.tuxcare.els7.x86_64.rpm 1f4f09c0a9a8651b545283ab6fa1c23eb1e7fef70d1ea61f51ecc018c42af73d libpng-static-1.6.37-12.el9_2.tuxcare.els7.x86_64.rpm 0faf2b6980e634145f5a3629f274ce72bf02629019ef233b50c552eed7dbef65 libpng-tools-1.6.37-12.el9_2.tuxcare.els7.x86_64.rpm 13582d27efa682523dd8b33fd5386f059918b92191cc717a1603f44da1af2e2b CLSA-2026:1778004214 TuxCare License Agreement 0 - CVE-2022-2124: fix out-of-bounds read in current_quote() when searching for quotes goes over the end of the line (textobject.c, upstream patch 8.2.5120) - CVE-2022-2126: fix invalid index use in suggest_trie_walk() when ts_fidx is zero (spellsuggest.c, upstream patch 8.2.5123) - CVE-2022-2207: fix read before start of line with BS in Replace mode (edit.c, upstream patch 8.2.5162) - CVE-2022-1720: fix read past end of line with "gf" in Visual block mode (normal.c, upstream patch 8.2.4956) - CVE-2022-2042: fix uninitialized value and use-after-free in spell command (spell.c, upstream patch 8.2.5072) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2124: fix out-of-bounds read in current_quote() when searching for quotes goes over the end of the line (textobject.c, upstream patch 8.2.5120) - CVE-2022-2126: fix invalid index use in suggest_trie_walk() when ts_fidx is zero (spellsuggest.c, upstream patch 8.2.5123) - CVE-2022-2207: fix read before start of line with BS in Replace mode (edit.c, upstream patch 8.2.5162) - CVE-2022-1720: fix read past end of line with "gf" in Visual block mode (normal.c, upstream patch 8.2.4956) - CVE-2022-2042: fix uninitialized value and use-after-free in spell command (spell.c, upstream patch 8.2.5072)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els20.x86_64.rpm 09626c01b8281bd447417322989810e17966b84e4f069e632bb4ce878752557f vim-common-8.2.2637-22.el9_2.1.tuxcare.els20.x86_64.rpm 28eff99142422ba0ceadd3d3cf695ee359f8a80dbd3c7746961c3ac5435768c4 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els20.x86_64.rpm 4cda985fe9bce61a30fe829f88b98ab5d22c23cbfb23156f04967110bea45896 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els20.noarch.rpm b29191e2c408a59f8a33d647b040483297fb089f1e93fe38850fcb9fa033e4cc vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els20.x86_64.rpm 277a7b7a9a9d0fc75c08aeb172008ef9c2974bc8544c9fc5a515a18651d6df25 CLSA-2026:1778005006 TuxCare License Agreement 0 - CVE-2026-35535: failure to drop privileges before running mailer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35535: failure to drop privileges before running mailer

0 tuxcare-almalinux9.2-esu sudo-1.9.5p2-9.el9.tuxcare.els4.x86_64.rpm 762d1d853d871d0b54c35baa1f32540b234044d20e9a46c27b443f792e79e3ff sudo-devel-1.9.5p2-9.el9.tuxcare.els4.x86_64.rpm 4b29864ed39dd69bf6cb2b6d17391c65257b9b094bd0173cb4bb2f511d22d2f7 sudo-python-plugin-1.9.5p2-9.el9.tuxcare.els4.x86_64.rpm 7362c63670406734e41870777b33cade4de814e1cf0e5c01c76e397fd2165359 CLSA-2026:1778005827 TuxCare License Agreement 0 - CVE-2025-46835: fix Git GUI from creating and overwriting arbitrary files when editing a file in a maliciously crafted repository directory Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-46835: fix Git GUI from creating and overwriting arbitrary files when editing a file in a maliciously crafted repository directory

0 tuxcare-almalinux9.2-esu git-2.39.3-1.el9_2.tuxcare.els11.x86_64.rpm f9ac551afbc62a6c6ad2d250ae0754432792721c604afba94c7779440733d78d git-all-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm f3950d2dd0b4ec53d5890c4417179527117c18309aba4075c89941dfc958c704 git-core-2.39.3-1.el9_2.tuxcare.els11.x86_64.rpm c6dd3e26fd99d97570cdd1a7de445b59ae3d02dafe6e6a9c773395b7b2061b9e git-core-doc-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm 317d9963df19a764fe3d7972ea62da5d8d0ea71f6df453b64cf427f4c6c06f91 git-credential-libsecret-2.39.3-1.el9_2.tuxcare.els11.x86_64.rpm c450520fd740b2cfeb6ac48982cf30931d12b78e6b033f64339eff279982528d git-daemon-2.39.3-1.el9_2.tuxcare.els11.x86_64.rpm cf1db51db42023d648bd67ad2b7a09a3b93b92beb6957681bed09b3d7d4b96a9 git-email-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm 98b99af541c4ec27373673948757fcaa0e150c8b5d418058854b46f8fb1430de git-gui-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm 943e2565e1190ab9856f89f06be9afad6b045ef5a7c2afb67ff384e3d3aaef01 git-instaweb-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm 4316eac0f681b52278423f586f288b521c149745347e2e30f41582ccd3d9baa5 git-subtree-2.39.3-1.el9_2.tuxcare.els11.x86_64.rpm 63c0b1177ea9a2ee38802269eb6ad4a8dba4fff35cc71bd77f2a17a3a36a4fc4 git-svn-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm ba810ffa51a4efc93ba30fc7abc2342c1c2359ed6670ed8dc15b141dc457688d gitk-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm 7d503ef085a520b827d98a6ebe99b5d4d504b6a8f26b9a364f8685c9de1176bd gitweb-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm 76041b457609395f626374e5f51442a9ca330325b52b87bb4807677000c20d25 perl-Git-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm 7131c0a30886b539affb3e442fa0cef47d25956d1edec609cb100b0671b444ee perl-Git-SVN-2.39.3-1.el9_2.tuxcare.els11.noarch.rpm ee32e6a7b24059145b12f98ebb7c92597fd018edecb5b24bafaf90cdc6bcb08a CLSA-2026:1778006676 TuxCare License Agreement 0 - CVE-2025-6170: fix potential buffer overflows in xmllint interactive shell Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6170: fix potential buffer overflows in xmllint interactive shell

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els13.i686.rpm 891088edc3372ef25765d5ff7531ada9822f10800cf18aa6036553e87a3772bb libxml2-2.9.13-3.el9_2.1.tuxcare.els13.x86_64.rpm c80c2d7c1734a678e1b84d309ab25ed43c96e9c6235105c04fd054e93a363d88 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els13.i686.rpm 36cd4077f078b3a28895f143a9b9b4f5a2cd6ab9614b93592f16a8d297793e2e libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els13.x86_64.rpm cc0e0b1f4112008df4171cf547f2189ba27b4baa662bc5b1881e1c8ada0d2845 libxml2-static-2.9.13-3.el9_2.1.tuxcare.els13.x86_64.rpm a25af9a3096580bcfcd2bca010ef6750c92ef1c6d79296a3f1914af621a5c122 python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els13.x86_64.rpm 2ba05bb18151b4780505773560c68e7bd1ac238173aebd3eb299bc1952b55a22 CLSA-2026:1778007485 TuxCare License Agreement 0 - CVE-2023-5215: fix nbd_get_size returning negative value for sizes larger than INT64_MAX Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5215: fix nbd_get_size returning negative value for sizes larger than INT64_MAX

0 tuxcare-almalinux9.2-esu libnbd-1.14.2-1.el9.tuxcare.els2.i686.rpm a06c086bd0a55751e46e772e848080a8ce6990e5a32469cd7df92a0ed730ca21 libnbd-1.14.2-1.el9.tuxcare.els2.x86_64.rpm 67004c8dc78a1ea25d59acada6357381c9a093870ab64152275774697c808499 libnbd-bash-completion-1.14.2-1.el9.tuxcare.els2.noarch.rpm a8f28d6178ddcfed384f4ae98e81f612065fdcbde96a300ea7aa18465aeaf803 libnbd-devel-1.14.2-1.el9.tuxcare.els2.i686.rpm fc5a49bb98fad7526511fb9bae85b990d0d130515bc010dedbe2bf44e336232c libnbd-devel-1.14.2-1.el9.tuxcare.els2.x86_64.rpm 20fa8b50bb67d205d71edd6de2533dc222cbc0994c78c2df53007713704b4d87 nbdfuse-1.14.2-1.el9.tuxcare.els2.x86_64.rpm 98c5e2bff0777582a5d25dcfa666b46f47841915ce04ee24f6c909dca5873b1f ocaml-libnbd-1.14.2-1.el9.tuxcare.els2.x86_64.rpm c0dc9872b404de082bda987e2982c28ca73aea33d2e519926232e48d33edde96 ocaml-libnbd-devel-1.14.2-1.el9.tuxcare.els2.x86_64.rpm 659b4f18e428eb7a958e80b24c3739255daa4c81b99f126504fe3965d221a566 python3-libnbd-1.14.2-1.el9.tuxcare.els2.x86_64.rpm abb312ae14f1c5bd11660fc37cca5329d03aeb5e61056248a413ead2916fee4e CLSA-2026:1778020045 TuxCare License Agreement 0 - CVE-2021-3826: fix heap/stack buffer overflow in dlang_lname (libiberty d-demangle.c) via missing length check in dlang_symbol_backref Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3826: fix heap/stack buffer overflow in dlang_lname (libiberty d-demangle.c) via missing length check in dlang_symbol_backref

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els7.i686.rpm 95638a6350224fc1445335d6aa20234580ea8cdd5989cc6f3563c14ab828e5c4 binutils-2.35.2-37.el9.tuxcare.els7.x86_64.rpm 1658b1b6a04cdf769801dd7736962e6bd6d23f346ad35807320a4402c13ed15e binutils-devel-2.35.2-37.el9.tuxcare.els7.i686.rpm e27355f62cefe540577f8e21f5f8190f33e51ef5507663437e03c2c6d7d20576 binutils-devel-2.35.2-37.el9.tuxcare.els7.x86_64.rpm 616dba3652007c36ec47868f9b3d36f5ca952eb12cb2bc0640850cea3a9623f4 binutils-gold-2.35.2-37.el9.tuxcare.els7.x86_64.rpm d7ae60540148b27abe1adedc504bf3765bee8b08e3ef76e74f18f2e47df09c35 cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els7.x86_64.rpm 7db9b4ccdd3f6788d3baa882af261f39b84eabc2a9973d47aef3cfedd3086b12 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els7.x86_64.rpm 165cf66f41cb4222cd5163e68d1eb1f0eb235e1d1898d01da27430734c670c99 cross-binutils-s390x-2.35.2-37.el9.tuxcare.els7.x86_64.rpm e8eeaef80f540d78d711f31c08951adc39c480327c3b9531c1c29c61715d16cb CLSA-2026:1778022490 TuxCare License Agreement 0 - CVE-2026-27857: limit number of open IMAP parser lists in imap-login to prevent excessive memory usage DoS via deeply-nested parentheses Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27857: limit number of open IMAP parser lists in imap-login to prevent excessive memory usage DoS via deeply-nested parentheses

0 tuxcare-almalinux9.2-esu dovecot-2.3.16-8.el9.tuxcare.els3.i686.rpm 02cace47289c2c5f39b5fc670280d090611589d661e9e0569452d8838c7597a4 dovecot-2.3.16-8.el9.tuxcare.els3.x86_64.rpm c1a118bc8f10de937262cf5a659badcd95dd87500a95b7de64ae46ffcda41b15 dovecot-devel-2.3.16-8.el9.tuxcare.els3.i686.rpm e50beaacbd0ce1a84cbea5b9c1e3a8136bd66ce5444bcbf4a29c9c7c867c5595 dovecot-devel-2.3.16-8.el9.tuxcare.els3.x86_64.rpm 934fe84986777622b784d881b22bbf6d4bef3e78d0a5633681d29010efa3d799 dovecot-mysql-2.3.16-8.el9.tuxcare.els3.x86_64.rpm e28bce761ea2369993ca0c0c3396a263605e8b22862b84e6c2a9bf6568d528e4 dovecot-pgsql-2.3.16-8.el9.tuxcare.els3.x86_64.rpm ca221a0faf69d1966cb49388f5ddfd2514aa26ed76c6103b5ad4c01197572e32 dovecot-pigeonhole-2.3.16-8.el9.tuxcare.els3.x86_64.rpm 1b53ca80e2e10db4a1b06a4b08aec2e2be07607a9131480c724aeedb14860d91 CLSA-2026:1772575666 TuxCare License Agreement 0 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry

0 tuxcare-almalinux9.2-esu containernetworking-plugins-1.2.0-1.el9.tuxcare.els3.x86_64.rpm fba76a9dd40d16984c75dac05027fbf4cda321fe1ceeeefc81accfec28286d82 CLSA-2026:1778009078 TuxCare License Agreement 0 - CVE-2022-2125: fix out-of-bounds read in get_lisp_indent(); break out of the inner loop on NUL byte (indent.c, upstream patch 8.2.5122) - CVE-2021-3974: fix use-after-free in nfa_regmatch() when a substitute callback frees the regline during a mark comparison; save col and re-fetch rex.line via reg_getline() after getmark_buf() (regexp.c + regexp_nfa.c, upstream patch 8.2.3612) - CVE-2022-2206: fix OOB read after terminal resize lowers Rows below cmdline_row / msg_row; clamp both to Rows - 1 in check_shellsize() (term.c, upstream patch 8.2.5160) - CVE-2022-2946: fix use-after-free in do_tag() when 'tagfunc' deletes the buffer; make a vim_strsave copy of the tagstack tagname before calling user code (tag.c, upstream patch 9.0.0246) - CVE-2022-2286: fix heap-buffer-overflow in the Ctrl-E completion-stop path when the completion leader shrinks below the original text; bounds-check compl_len against replacement string length before ins_bytes_len() (insexpand.c, upstream patch 9.0.0020) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2125: fix out-of-bounds read in get_lisp_indent(); break out of the inner loop on NUL byte (indent.c, upstream patch 8.2.5122) - CVE-2021-3974: fix use-after-free in nfa_regmatch() when a substitute callback frees the regline during a mark comparison; save col and re-fetch rex.line via reg_getline() after getmark_buf() (regexp.c + regexp_nfa.c, upstream patch 8.2.3612) - CVE-2022-2206: fix OOB read after terminal resize lowers Rows below cmdline_row / msg_row; clamp both to Rows - 1 in check_shellsize() (term.c, upstream patch 8.2.5160) - CVE-2022-2946: fix use-after-free in do_tag() when 'tagfunc' deletes the buffer; make a vim_strsave copy of the tagstack tagname before calling user code (tag.c, upstream patch 9.0.0246) - CVE-2022-2286: fix heap-buffer-overflow in the Ctrl-E completion-stop path when the completion leader shrinks below the original text; bounds-check compl_len against replacement string length before ins_bytes_len() (insexpand.c, upstream patch 9.0.0020)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els22.x86_64.rpm 4e2e309674eda52f5ed343d156ac018eb2abb7aefa07a7e2878e4871be80a7cf vim-common-8.2.2637-22.el9_2.1.tuxcare.els22.x86_64.rpm 54de019222e7edd5bd51cea2c5fba5586a9bc54a37f6c042851deec7edb9c66b vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els22.x86_64.rpm 8d8da9c331123bbf6630dec2c530ad2c56dce45541a81026588f738a9c48f3a3 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els22.noarch.rpm d4e53e88785042c00f7c22a8c77923eaff3414be81c0c67fa274600783512bfe vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els22.x86_64.rpm 447c1fb0a55a6f43076ae369e908895f511b726d15131143624baf53780d74fb CLSA-2026:1778071148 TuxCare License Agreement 0 - CVE-2026-28387: fix use of OPENSSL_free instead of X509_free on dane->mcert in dane_match() (X509 reference-count bypass / UAF) - CVE-2026-28388: fix NULL deref in check_delta_base when a delta CRL carries the Delta CRL Indicator extension but lacks a CRL Number - CVE-2026-28389: fix NULL deref in dh_cms_set_shared_info / ecdh_cms_set_shared_info on absent CMS KARI parameters - CVE-2026-31789: fix integer overflow in OPENSSL_buf2hexstr causing heap OOB write when converting > SIZE_MAX/3 bytes (32-bit builds) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28387: fix use of OPENSSL_free instead of X509_free on dane->mcert in dane_match() (X509 reference-count bypass / UAF) - CVE-2026-28388: fix NULL deref in check_delta_base when a delta CRL carries the Delta CRL Indicator extension but lacks a CRL Number - CVE-2026-28389: fix NULL deref in dh_cms_set_shared_info / ecdh_cms_set_shared_info on absent CMS KARI parameters - CVE-2026-31789: fix integer overflow in OPENSSL_buf2hexstr causing heap OOB write when converting > SIZE_MAX/3 bytes (32-bit builds)

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els11.x86_64.rpm 3ac3e097cf0a5683e73cec38b376f2e36dd0db333d5fe36c0947ed82573e1065 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els11.i686.rpm 15a3e2cabc6b1fad07c34f0764294ad567808b20a52d4c1d3c37425503f73390 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els11.x86_64.rpm a2edb2308433d4af222ceee05f821d438bf162f0045341ab3bc5bd704b9f1468 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els11.i686.rpm 8f147558bc02a3bf8ef37438cbd249ad72dfa05c6c4c4a29b910dc5dbd9bbbc0 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els11.x86_64.rpm cc5a787dcc1eb7f5280d640bffe4c53fdc4499abbd35ed510761153aa8547f80 openssl-perl-3.0.7-20.el9_2.tuxcare.1.els11.x86_64.rpm 65cb3be1b43626973b9bb59004efb2077b0cb538d20f21a30c8ebe55204b12df CLSA-2026:1778072039 TuxCare License Agreement 0 - CVE-2026-31790: fix RSA KEM RSASVE encapsulation memory leak by validating RSA_public_encrypt() return value and cleansing secret on failure Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-31790: fix RSA KEM RSASVE encapsulation memory leak by validating RSA_public_encrypt() return value and cleansing secret on failure

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els10.x86_64.rpm 0692afffa55ac518db4353be9834ad95a3bb086b48a6291f5226389b150c1d19 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els10.i686.rpm 6ef8563aceb592c692303eaa5e48f34f285ab92b873f0067072ce285f1fecaa2 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els10.x86_64.rpm 042544d067eb539c33169163a4affe993e7db4cfc9fa936c540326ba3dab626e openssl-libs-3.0.7-20.el9_2.tuxcare.1.els10.i686.rpm 4cd8dfd4d3f57edf1a25a7da9d2999ea24cf0c11a3c2a4ad6eb2036c7613acd6 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els10.x86_64.rpm adc2c99411bb734fc811e45f80f2a16f9ea0be6140933a21d1bea2f4c8021501 openssl-perl-3.0.7-20.el9_2.tuxcare.1.els10.x86_64.rpm b38472b97025398b298653dc778018714f7d420d1a19ed3a9087500f2e3ea7dc CLSA-2026:1778080357 TuxCare License Agreement 0 - CVE-2024-2313: Prevent bpftrace from loading compromised Linux headers when extracting kernel headers from temporary directory Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2313: Prevent bpftrace from loading compromised Linux headers when extracting kernel headers from temporary directory

0 tuxcare-almalinux9.2-esu bpftrace-0.16.0-2.el9.tuxcare.els1.x86_64.rpm 52c855ae4f86f146a7cde315f16e627114e7acb361c6632529d0c1e9270ae39c CLSA-2026:1778082886 TuxCare License Agreement 0 - CVE-2026-0966: avoid 1-byte heap buffer underflow in ssh_get_hexa() on NULL/zero-length input Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0966: avoid 1-byte heap buffer underflow in ssh_get_hexa() on NULL/zero-length input

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els9.i686.rpm a8daf24a80a070c3a8f6e9695004244727d27f178acd82f81394c53e7e713a11 libssh-0.10.4-8.el9.tuxcare.els9.x86_64.rpm 51e847ef44824ce7380cc3fe144abc1336a7f6c9feaa304412ea31eb826f6c9a libssh-config-0.10.4-8.el9.tuxcare.els9.noarch.rpm 5cc6adec7bf818b7f6ba76750204a542ab0b1593607e87a1567a334ee337d50a libssh-devel-0.10.4-8.el9.tuxcare.els9.i686.rpm 001f509cbff44b1a277cadfa006153e093f38e2eab6af3020d62a180eba70d78 libssh-devel-0.10.4-8.el9.tuxcare.els9.x86_64.rpm d4124e1e9e375a447bf8eb31e3359fcf6134bee8ddfb95867326943f656fa37f CLSA-2026:1778107793 TuxCare License Agreement 0 - CVE-2025-5455: fix qDecodeDataUrl crash on malformed data URL with charset - CVE-2024-25580: fix KTX file reading buffer overflow - CVE-2024-39936: delay HTTP/2 communication until encrypted() can be responded to (includes prerequisite to emit encrypted() on H2 path) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5455: fix qDecodeDataUrl crash on malformed data URL with charset - CVE-2024-25580: fix KTX file reading buffer overflow - CVE-2024-39936: delay HTTP/2 communication until encrypted() can be responded to (includes prerequisite to emit encrypted() on H2 path)

0 tuxcare-almalinux9.2-esu qt5-qtbase-5.15.3-1.el9.tuxcare.els4.i686.rpm fab2cccb820f98251e5b0224648e2b35f4b2a3df79a95cdae0396f5278489bbb qt5-qtbase-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 4a4a2958628dd3e839a77b86a06e28331f0d090f843084ed539e9f6d0e3e169e qt5-qtbase-common-5.15.3-1.el9.tuxcare.els4.noarch.rpm 722753c7157fb6be148ca251610029f98e856ce7013457bdef2c74312f40b148 qt5-qtbase-devel-5.15.3-1.el9.tuxcare.els4.i686.rpm 4aa8c75baf3a4cdc286d33f58f24c2b541daebfe52610f6346e67b8e961fd765 qt5-qtbase-devel-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 39417f8cfa606a455115752f06bb936d88dde38a9fd740249d9c93b2cf5473e7 qt5-qtbase-examples-5.15.3-1.el9.tuxcare.els4.i686.rpm 5fd16f0b2dd1b697883d79bcfea37965275b7a963bafea350e9d9543bfcf95f1 qt5-qtbase-examples-5.15.3-1.el9.tuxcare.els4.x86_64.rpm f4116f67f6a1a6d366c02a5733519ee13b94a2670f217fd0caa1a8fd1130f399 qt5-qtbase-gui-5.15.3-1.el9.tuxcare.els4.i686.rpm 8b805994a58a8b336ac707987c3e8e840580a37d9d4bff78af93d00cd1f9a9f7 qt5-qtbase-gui-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 1306e45ff7f0caa79cbc9806a6af594329a18196ed9879507ff43d14358cb896 qt5-qtbase-mysql-5.15.3-1.el9.tuxcare.els4.i686.rpm fd7195d01e14bef044eb6999a963b1643646f11743d7bff26afd8b44fdf8da93 qt5-qtbase-mysql-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 0cfbe35fb6b7e4cb03f9a71bb8e203d636cdb65ce74ecad29eb10fa0c1b16167 qt5-qtbase-odbc-5.15.3-1.el9.tuxcare.els4.i686.rpm 760c20fe514e3db083026df71691566b25ddfa76a08b86b0f9fd9f1a09afaea2 qt5-qtbase-odbc-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 7129d822f55b5a4a29e2ea11249caa70c87d6af17e4b476589cec8826e116731 qt5-qtbase-postgresql-5.15.3-1.el9.tuxcare.els4.i686.rpm 150340a020489a01770d0f962b69170c790ddd32348ced5e5d05ec35b499b75d qt5-qtbase-postgresql-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 4e7b6dc1b85090b042362fd634062a73d2f6c0bd454ce25d6046204540774b01 qt5-qtbase-private-devel-5.15.3-1.el9.tuxcare.els4.i686.rpm ec7fd788faeaa50d1f7e661c343db1c5c5528fa12846506ca3b93ef2be400a1a qt5-qtbase-private-devel-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 1e7f8fd958df702ed2e96f1ba57736d15e3b3b81e27a0f07a9eb5cd9cad3d7fb qt5-qtbase-static-5.15.3-1.el9.tuxcare.els4.i686.rpm 1e3a763d352aa8b66006894af0c560ed4d77408b24674737f2e0a829a64a83d6 qt5-qtbase-static-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 9ff2ca2ae342e80a06fdc32bbaf59243b0a23b39968149f9ec41d3c0c17b07f8 qt5-qtbase-tests-5.15.3-1.el9.tuxcare.els4.x86_64.rpm 837d41f2fca61def1722edd3794b7c2f1f7a1a087006f9bc35fd36d7e270ca9a CLSA-2026:1778109988 TuxCare License Agreement 0 - Rebuild with golang >= 1.22.5 to fix CVE-2022-1705, CVE-2022-41717, CVE-2023-29406, CVE-2023-39318, CVE-2023-39319, CVE-2023-39326, CVE-2023-45290, CVE-2024-24785, CVE-2024-24791 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild with golang >= 1.22.5 to fix CVE-2022-1705, CVE-2022-41717, CVE-2023-29406, CVE-2023-39318, CVE-2023-39319, CVE-2023-39326, CVE-2023-45290, CVE-2024-24785, CVE-2024-24791

0 tuxcare-almalinux9.2-esu toolbox-0.0.99.3-10.el9_2.tuxcare.els2.x86_64.rpm d04a260b9ce990a8a2963ad88e6be07618d654a3b43bdc1fe415a1d679f67cad toolbox-tests-0.0.99.3-10.el9_2.tuxcare.els2.x86_64.rpm 00dafab422e5623745cf34687be8ee33af49baec153bceda2e5328e9850b2efd CLSA-2026:1778110872 TuxCare License Agreement 0 - CVE-2024-0408: fix XSELinux crash by calling XACE hooks when creating GLX buffers - CVE-2025-49175: fix out-of-bounds read in animated cursor creation when client provides zero cursors - CVE-2025-49178: fix possible client request hang caused by leftover bytes-to-ignore when sharing input buffer Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0408: fix XSELinux crash by calling XACE hooks when creating GLX buffers - CVE-2025-49175: fix out-of-bounds read in animated cursor creation when client provides zero cursors - CVE-2025-49178: fix possible client request hang caused by leftover bytes-to-ignore when sharing input buffer

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els15.i686.rpm 132407eac8a853722c5141bb946edd4ca5d8e28accbbb8cbdfde36cf7459c2a2 xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els15.x86_64.rpm 4d8157fcd0189f025099b4b8784ecafc5b4b06d710bd859d14db3398879a6e78 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els15.i686.rpm f8e7075e35edbe4b54837d3592a99d202ae4e4d2a50030b3a6a637dd7b152f45 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els15.x86_64.rpm 997a8632df1a14d4d592d742068b2479d9f25f039dffa6506534069a8e4253a0 CLSA-2026:1778112033 TuxCare License Agreement 0 - CVE-2026-24401: fix avahi-daemon crash on receipt of unsolicited mDNS responses containing self-referencing CNAME records by detecting CNAME loops in lookup_handle_cname() to prevent uncontrolled recursion and stack exhaustion; also includes two related DoS fixes in the same lookup path from upstream PR #682 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-24401: fix avahi-daemon crash on receipt of unsolicited mDNS responses containing self-referencing CNAME records by detecting CNAME loops in lookup_handle_cname() to prevent uncontrolled recursion and stack exhaustion; also includes two related DoS fixes in the same lookup path from upstream PR #682

0 tuxcare-almalinux9.2-esu avahi-0.8-12.el9_2.1.tuxcare.els4.i686.rpm 22ca0e55acc22e89220f55ffdd8708a6acd5a9eb60c981c4e343aa21c64e8aec avahi-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 4389ddfaaad49abde485e30227d14baa3c31f38b8484f645011f90c27a4812ca avahi-autoipd-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm cc86aee086c78f7d472f7a481267980d2a71b9eeda4edb6ea019a4c823137641 avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els4.i686.rpm d3ad28f6da79ee72e5b837612a7e8534f13810a39e870adf76f9f5d5e2914180 avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 9d713881700f6b8380e773241ba44ba5899c373b94077f43997957e0cf165e85 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els4.i686.rpm 2ee7a43c60246836a2ba519988ca16f98a67cf38dfa4c312da2453c85674b09c avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm dedfda1a1a64a1fc7295df4b5974eabd400de0cd69dc7887ceafee86c47b7840 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els4.i686.rpm 1370f76a02372ac68035e46030c6a3c17ad99ec1def45fa90f81702912bce4b5 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 0f2755dab60e855b0d1a8da706786a788d06161155c0e58358b5f472848b04ca avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els4.i686.rpm 97db59597ae22df30c1cc6509bbaef281fda5cef4e31984c6694b4bc8d8b9171 avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 3ec6419d32d17200a79bb3cd56937bf85a9d382bd3455e7c40160721f9560c3b avahi-devel-0.8-12.el9_2.1.tuxcare.els4.i686.rpm b562eb1fdc1e61f906ee41ef4899911a562a2a32a08a8311c5425647f60f8eed avahi-devel-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 96943f3e836f64e5d81bb3275e36f8795495bb9eca4f23c8c9478c6d0c01d5c0 avahi-dnsconfd-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 05dc1f8176aa10d0054730047a66422b5e64245d26640783cdb87d296c517420 avahi-glib-0.8-12.el9_2.1.tuxcare.els4.i686.rpm 0510c6485d6a57cd4d06e6ec19bc9eec9d00a172713b4b8f2860e8f37f39d4b1 avahi-glib-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 63c22dcb522ab5fdacf33559fe3f54f1bfbf81e674edc006606b34e1636c2e97 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els4.i686.rpm f8ffc1b6701d64c61d5b89b75756087440977700dd89c043f73555ebd4250665 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm babcf32287204502743818259351c0e57d19ae093ee155508fae0f304e063b07 avahi-gobject-0.8-12.el9_2.1.tuxcare.els4.i686.rpm 4440f51d6295f3dd69e0487f8a8cf6f099e0c9aad59e283e8cd7358270d1e68d avahi-gobject-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 7bd8859e025c2508b31158361616d5743f0cb1c97769b31c13f56613f5e7d308 avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els4.i686.rpm 97a05ac95252bf6564c56e383adf3be0bf2cf2c6fdc9fb360500321eab36437c avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm e724a7e737a27703d0d7db6e65420ead51bbb0d7706efe3862a180872889d505 avahi-libs-0.8-12.el9_2.1.tuxcare.els4.i686.rpm f22da889b9e6df95511baf4f8496bba9ca65c479ffae2d8f7ef483a11f963b8f avahi-libs-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm cdadbd73d09bede01e759ba5d656b92151382cd0370d3c2e44c177e59749306b avahi-tools-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm f625960ce215a53249867c6b21a976bb5dc598685da70d57fc2b5e29eee31ddc avahi-ui-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm 13dca656a2cef14815f47793b100f3101624e8b0121c04b6fadc3e355214ee6e avahi-ui-devel-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm f87911508c67d930d36a00dde5f141abf17b236baccc341795fb3d8d0e1eec6d avahi-ui-gtk3-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm d1519fc994d50bf445d7b88cca017027ba3b637055b07780ce8cfbd798d3ef5f avahi-ui-tools-0.8-12.el9_2.1.tuxcare.els4.x86_64.rpm b3b1107e9a9ecb59a39ce7009e489e478bd9ed6bc9d3e27c32f587c0b9c4b975 CLSA-2026:1778125769 TuxCare License Agreement 0 - CVE-2023-3019: net: improper synchronization in net device backends - CVE-2023-42467: scsi-disk: division by zero in scsi_disk_emulate_mode_select - CVE-2024-26327: pcie_sriov: NumVFs validation buffer overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-3019: net: improper synchronization in net device backends - CVE-2023-42467: scsi-disk: division by zero in scsi_disk_emulate_mode_select - CVE-2024-26327: pcie_sriov: NumVFs validation buffer overflow

0 tuxcare-almalinux9.2-esu qemu-guest-agent-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm b708c4ecc4ebccf592de21a787d81124af46fedb4f261cc6e75bb2efe41a33c8 qemu-img-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 08cd004e8caafba2d168d84f7a70b98ee26bb235732772c0a006c0ffad2c97dc qemu-kvm-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm bcbf3bd9845c552f7e84f9382a6f139ad18704a8d3c7fd18b1e56fbe047fa244 qemu-kvm-audio-pa-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm f6f8ab02f600aee6c5b386bd77f5a9319f41a3baba30a65f10b99079249d9933 qemu-kvm-block-curl-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 5c2e8fcde987c64375fba05e7c145ad8912ed207f638044223bdd98865c1a7d6 qemu-kvm-block-rbd-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 364818b724a7964312f7100645d2b6ff823b721e354b387012c14bc0fdd18ee1 qemu-kvm-common-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 90cde38aa7ce3b5795816e1b348a93be0bc0e0e584eba2974f3a0cefdd22a929 qemu-kvm-core-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm bba401e09b07250f19128f76d066fbb2e0d0b87633b2ae26b15c9179c1e3af28 qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 651bc6663137ce08f8fa7ecedebfb5f5baaf208780246e91af1db00b6aebac13 qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 5783acdd494a14010c551fe1eaff010b8a02bdb7c24caa6b91ea158abbc43600 qemu-kvm-device-display-virtio-vga-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 4289ecd9480e69cc40fd8ef7e5a788472563a57f1dec8499ebb54daed2d98330 qemu-kvm-device-usb-host-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 0c5c201ce36dc97f224764ad50b5b933714f4765bcc85cfee561c3ea041d7893 qemu-kvm-device-usb-redirect-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 4617659487ebf8fcc4c4c0a2f6bbfa4ac264222c58bf4479afce571b9708606a qemu-kvm-docs-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm ce21506d1dc352d5d4fe59e62903282261ecc7e4e3494350ad4fa273089500b7 qemu-kvm-tests-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 7a66e4fc826595c6f82414d96da4b878785657b2ce9d7fa19c4f525ed57662d6 qemu-kvm-tools-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 97d662fa45d120dbaf0a8edff57dbf250957d4840e01863960a501daf7e201a4 qemu-kvm-ui-egl-headless-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm bdc36a76cea50faefd4e49d93f2c4fdb839ef622b708dbfe6d5b909702120e05 qemu-kvm-ui-opengl-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 790359a7295be1a14dc1e12ca2b7cfdb772694b749614e40d8380ca51eec3e02 qemu-pr-helper-7.2.0-14.el9.5.alma.1.tuxcare.els7.x86_64.rpm 9d3d296a2a53dd41e161b58cafffbfcbc5006759b04c21bd3725853f439946d4 CLSA-2026:1778127227 TuxCare License Agreement 0 - CVE-2024-45770: guard pmpost against symlink attacks on $PCP_LOG_DIR/NOTICES - CVE-2024-45769: harden libpcp __pmDecodeValueSet to prevent heap corruption from crafted PDUs Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45770: guard pmpost against symlink attacks on $PCP_LOG_DIR/NOTICES - CVE-2024-45769: harden libpcp __pmDecodeValueSet to prevent heap corruption from crafted PDUs

0 tuxcare-almalinux9.2-esu pcp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm b2208276212c8215dcfacf5847b3329f39eda5dd6340d12e951f830da2a775c3 pcp-conf-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 36955d5cb8a230a0c184e476653e131506bc6a6d2f4391d24e44195cfa6edd9a pcp-devel-6.0.1-5.el9_2.alma.tuxcare.els2.i686.rpm beaf0f8a6f54e0b314c6f5dfa020cb8814e698c045f30e7c77b605853804c223 pcp-devel-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm f3d22d3e8ae75cbde475cd03708912068e7542cbbd9aaf747668439433e2eb12 pcp-doc-6.0.1-5.el9_2.alma.tuxcare.els2.noarch.rpm 1663eb5017e0b1ec37b809764c064d52a4ec841a84864e0789f436c1132e92dc pcp-export-pcp2elasticsearch-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 23231e007ca1d551b60ffba1374bc3ea6b1feb5bd961a4f13806781dfa6bf52f pcp-export-pcp2graphite-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm d725a149e151ecc97016c533ed39700f729c1f6dd0a6f2624eebf503fa6b7e36 pcp-export-pcp2influxdb-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 084278e5e56823e3f2e668b6cabeb65bafc16cef5a67f320fcf59f1c18d63b97 pcp-export-pcp2json-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm c3858603abb7794e08b8107bc934456bf79adceda0db4cb52926d0f34d25f8fb pcp-export-pcp2spark-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ddb3e37231753341c28d85a875ea58324cd22fb05f32a4966de3960e3d4b9172 pcp-export-pcp2xml-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 89c9d0db8d113fc5e8415f0d13c58d8e4e56ff5658e96ce34f40b6ade63f881c pcp-export-pcp2zabbix-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm c849e265d82b495354a53d19247532a5395ac66db4f950ca48f4164a69a2d2a5 pcp-export-zabbix-agent-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ca21b226c4f5fef08f3f285a50f738341e79158e518b4d6b703469cc975af9d2 pcp-gui-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 425b0f3e701065eb261acb3c6365b4854c2994c5b2a72f4bea74d35127ea3559 pcp-import-collectl2pcp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm a8e777fb6ed41b2bbcd7c30e901d29ee64c67c9867ef5f7febfd33b05bf83bbb pcp-import-ganglia2pcp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 1507e8563277010e88041ae6d7b79d1985d3979a016ba2b4a1f01d1ffde5b44c pcp-import-iostat2pcp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm c98a614f718fcdc28277d1e6523c302b3e4c4af79df9d8c778cdc08e49238dda pcp-import-mrtg2pcp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm af0a49a04ca60873705aba7f70d2a780a2a0538e19bad73d6dbc70eae18c9861 pcp-import-sar2pcp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 1d63d9f86bd16bc31db32d709a8bd56050602ecd386335aefc83fc149bd3c875 pcp-libs-6.0.1-5.el9_2.alma.tuxcare.els2.i686.rpm 3e9b25637a5069f76992d771e6ce017d14245e62221befcbf64eddbfe63652ed pcp-libs-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm e5b609d43a9aba3f289fb1c07648f68b6e45774df9c1ae8bdaf9c88c591b990a pcp-libs-devel-6.0.1-5.el9_2.alma.tuxcare.els2.i686.rpm da07228a6c4ad9ce72453a0ed84603323317e48d591c176221db0caec69e0688 pcp-libs-devel-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 6a40c231d5eb95617c99fb60c6b3f467a362706660fb30e7047957f5111eceb1 pcp-pmda-activemq-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 6355e4a2c8a46da78f9130ae5d89b47ec48c1fd3b7ae4a822f5f22e5efc6fa1b pcp-pmda-apache-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm e39aca3ae9b77bb56e4c71c1834765b8f1c406b74e7a571f1e9ad862c44bc1bc pcp-pmda-bash-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm e272dbb42e652e0e8dbcfe06abc23b76f58116d027bb0d3aafd869a4d83f34b9 pcp-pmda-bcc-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 22c121bf689031084a343a35e96c854caa45c7ec00127f817da6aff7e4e8fa69 pcp-pmda-bind2-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 11ea11cddd687042c3b693ecca4932f881855290b66e63bb699eb8b039ff47d1 pcp-pmda-bonding-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm a979215a8db20d7d7ae8b3c1e2fbf4f51dc5a52fb2fd1def8554baff56c0e031 pcp-pmda-bpf-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 48b6f05d905f0d2bc05228acc27d0b60a58c5aec2e9306740bbbdeec0926cb5d pcp-pmda-bpftrace-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm f015fa13e180e6ed2a60c83efd0c48b56a1cae99926982416b721b73912dd367 pcp-pmda-cifs-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ef32eaafca01c9cc9fda587ceac80c6945a0ef296cb73eb904cac4821f357fd6 pcp-pmda-cisco-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm f55170e62a01dfdfd07e3e936bb244db7c011dbd3609ea3160327b446a310105 pcp-pmda-dbping-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm de5d085d2296114cb24b455fb846e313a6ffaccd63ae19b0962b8516cfd5d129 pcp-pmda-denki-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm b65c9329e8da0fa699e44a0356c66b0e26dd1821669a23cb08b51dd0719ef6ac pcp-pmda-dm-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 2c188218b604202b26968bd82cccea53f30ba83d2611f8449de91852749a2899 pcp-pmda-docker-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 65a97a185acadf5eab9247ac1cbb53e8843f69b21adc7a250d50a80f9d15d1ff pcp-pmda-ds389-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 948b9039ae3d08d18cc186089df65b095d291eca89fff72751ad4adfc4b02eb4 pcp-pmda-ds389log-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 2da447b901d0f4f17641c471b582fcd8a431aed3dd82cd7dc86bd43e432b2672 pcp-pmda-elasticsearch-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm d6d4276805beb4ac3000368c36b5f945c700ec1d2aca5e62287d71fdded04400 pcp-pmda-gfs2-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm e6b9edb24ba8d63a0a5eafcbc0427c19d546ddc02df249903855efefa76ec783 pcp-pmda-gluster-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ec5f7754bd536f12dead0e5a7d7e67d3eb1f2441d0e5ea9371c5e688ab0f3441 pcp-pmda-gpfs-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ba50e5e5cb3c4357e8b13d28a46b7b4bfe76d06fafc5d6c28d776f8141e275b5 pcp-pmda-gpsd-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 4913f6ee43941d6857ee963af6b311a46b94f5a22af65089188d50eff1336d60 pcp-pmda-hacluster-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm f0e92393fc4d87157206aef95996509a5805e22e8c958bc614e7752bd9355b01 pcp-pmda-haproxy-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm d4201c7e252fe5d316099e170c64e36f284eb51d226cef71e0b692ae577155a5 pcp-pmda-infiniband-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm af6eca978deea459e7afd947fbe54bb7a0e9b2dd33ca1f5953afc08680c57106 pcp-pmda-json-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ee90933e83bb470f3c85b9b60347cac2600d6c958e0970a7d2b205ec38d445c3 pcp-pmda-libvirt-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 1ca526683375bd602ec9439ba50638ef0f5c0a7c7b2c4f50ecf97dab4b85fd98 pcp-pmda-lio-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm cb262ecad196d3384590bf586599396b21ae696445aaeaa92342c4e9da9059d7 pcp-pmda-lmsensors-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 48e06142142044f8a83e092115655a1c9594a120f4d768165ba3336b2096bbd0 pcp-pmda-logger-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 2479cd8e3dea1c6cef348486e8d3f2a6f12fb0fe4c38aefffe4f2f250c2e3340 pcp-pmda-lustre-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm b40a61ca2552e8074bc7f1247cf0a2802687228c3f31efe579ca342ee529e8d8 pcp-pmda-lustrecomm-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 19315a007d72b33e1140dd6bb58355107aea01194b2473f43c6792184a668e17 pcp-pmda-mailq-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 4c0742cf098b3e3ac4fa591dcb9b62671ab2d964628af602841c5244c28de3d1 pcp-pmda-memcache-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 97b9282fa4e2aa26a38d48b14e854d38dc0f3558abe7ecf9b764a2fe0aa1ed13 pcp-pmda-mic-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm d36b12f73ee882fcbbb0e70822bb902aa84701edf364d9ef3dd5af54a094ca18 pcp-pmda-mongodb-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm c037b1b9a247c534be2a4f40ee3ff2e67dc02b0c0f7d521893487627bedec0ba pcp-pmda-mounts-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm d734362b92b44dfed05c5e5c644ccea0b06bd4fe01277a0c34f70a5479b1b6ca pcp-pmda-mssql-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 7025148472f5a9a8fd1669d48975abb5e192fb8cce0e318d2f0e12423bc0c2e0 pcp-pmda-mysql-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ce662b185a45cf03cc91426867b0885c600acd63b88ddec7c8e24713c4913588 pcp-pmda-named-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 3422f0cea511219831a866c33e4dbee4811be7256f2e2695273c203f30f10691 pcp-pmda-netcheck-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm a5089551a36b38b07ed814f6c7dce56bbee2157b50d6a2a5261faeb4e3728fde pcp-pmda-netfilter-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 600b4ad62eb32f537cd0cf2c0200986f4bab33f953bc26cac5c194700074f1c1 pcp-pmda-news-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm f6530b81f689cf5ad280fcf72412b4f6b34fad3edd4a76c00ab8ea5b3e0bace0 pcp-pmda-nfsclient-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 6aa69f9ef9022f24f0935f23bd775dfbb7a9b0b1bba818799940a233c6e56866 pcp-pmda-nginx-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm a10fb34eafc55616d52ccdfc4f942cb3c390183b0379489e57834c1ed38f120e pcp-pmda-nvidia-gpu-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 3c78332f878c9b944da0c490473f39bd01f2a00f5532732f15e5b4ce90ea2f6a pcp-pmda-openmetrics-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm c390ae34255251870b28d6d81e3e44800cdd7735400152a8125cd3e8f4505554 pcp-pmda-openvswitch-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 49c36fc0e7add2663bbbde17248ed58a6e97a19f4a4eddbe7310c45d3d8a60a8 pcp-pmda-oracle-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm c0d6497fce964bdf4d0a650f46809f8303a25d29429aa9f15d0099f01c4d2e5b pcp-pmda-pdns-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 5f4d2151f47d24ff00208d67ab2422a1c1a1bdd9cc296ec75aa6e8dc9ce43b6a pcp-pmda-perfevent-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 0f6c425981f4a20e006215eb8e089e0aab771304758ec1192a4ab6ac449abbfb pcp-pmda-podman-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm fd4becbf76c57ee67c80c181c033c5f8d3d17ae1454cbb88ce8cd8fde4fbb020 pcp-pmda-postfix-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm c1267496660d3dd247ccdc2f4cbf7896e743eac3533b7590c18e60d33473929d pcp-pmda-postgresql-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 4e8be3c92fbf0dea061361700c5e7b3a91f8197687d7f07b6dffc8e2789985e1 pcp-pmda-rabbitmq-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 89c370b47f6f6fb9f66f153a00820814991ecf8a017e8cf9d0c9955837f943df pcp-pmda-redis-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm e00c2fbf01a02dc68e46420430d1c905850b00b4e773d31da132bb2667649ef6 pcp-pmda-roomtemp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 1a03c153157450974d1e62b82f3e58601bd3e660f0c1797c00c684cfd2bad026 pcp-pmda-rsyslog-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm e13db397c9aa2921d2fd1b218a1a436211c5d6c6fb7738ca1cd7464a3e659f8f pcp-pmda-samba-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 9108c8e2ba4d3ab883f18e0f8be614c52ced87118e373129516e55338560a93f pcp-pmda-sendmail-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm e9de68acc09075641149adeabcd199a64056591dd0e760b9698d6c4b7ba9db33 pcp-pmda-shping-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm d19f3b8faf1c3b0b65313ba4a0d048a2ac66eed266c6be4392e119ff1eede2c8 pcp-pmda-slurm-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 030bc1b2303226d3a96268197ed8e66369f98f10a509f2d44e72c88bae4eaff3 pcp-pmda-smart-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 8cc888018269eebd4ff8d3339298ea9b812f516fe500b368a5415ea522a1d5e5 pcp-pmda-snmp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ad59912165d8ea2c3a0c9c3b51e065748f4b7d4ed6ee97bb7661788257f2f359 pcp-pmda-sockets-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 4e5e3c0bb9ca69ec94c6a93fc6a049da8593316fa1215ce431ee781aebfda0cd pcp-pmda-statsd-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm bd74bd5f5b657097367a4095ef38df9598c9de483429d44525abc6dad7d922ad pcp-pmda-summary-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm d99a54341bf22c89364b751b93117a0264d4c3094a4890dda67aeb7e4f9f9610 pcp-pmda-systemd-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 416427b861507946067118e7a3702b0515d93293f5547fe737c8e6ebf8672cdc pcp-pmda-trace-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 9c2cbeb33a06d1999d70ac665181c82e8e5157a91ef24efc82cbfb5c37b7bb25 pcp-pmda-unbound-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm f932ba7d19a4846441a3a50451e8ec7a338c5fec5abe90bcdc7272f1749faece pcp-pmda-weblog-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 81c43655479e993d556e1d24b195c3769e317df8c17df755b1293422f133a5a1 pcp-pmda-zimbra-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm ca665b6148d1799f2b1040b67d4be4cc82f53c700d75f59499372ab5a5e26aed pcp-pmda-zswap-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 0389c636b40317d0fbda24ffefee1c5ebe6e9b9cebb529cb3c0f461042c988dd pcp-selinux-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 81a2d9a7f7deca9fb90cbf54b2c616632c1eb29f46c588db7fdc098030588633 pcp-system-tools-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 30615d86742744339687dce19d950947261eef68b20f3dccb89f528006f612ff pcp-testsuite-6.0.1-5.el9_2.alma.tuxcare.els2.i686.rpm 700f030ca9be486e2b70bdebf5de039c8d963d759ddf6071f509aef50b6e9ef2 pcp-testsuite-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 3df59f1440b59eeeb85bb459aaaeba53649208c4b726f5bda5205ad44dcea3e1 pcp-zeroconf-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 858e463df2585183f916aa21c431d102405abc1a597a3a3396d1627eb27ab6f2 perl-PCP-LogImport-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 36b4c18e5d378b20bb11ecc953442612ca84fd282824a09150326167a88dfe7c perl-PCP-LogSummary-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm bfe22bdf4a097e93adcb1a80f59c6c7cc1044e2fdd23b27e443d25c0b4d558bf perl-PCP-MMV-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 7c42d94b64a12af47135166bc1bb1cab311dd8ad3d4d203d0aa7e1df229924ee perl-PCP-PMDA-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm e16b47b9e9406c33c7ac8c7cabd48a0d4fe7e8fda029c3c53fa45dbbcf9d35d3 python3-pcp-6.0.1-5.el9_2.alma.tuxcare.els2.x86_64.rpm 3a88b9217fb8b69c429a88efc758e203f084671e5bf090ff471d47331e790202 CLSA-2026:1778128255 TuxCare License Agreement 0 - CVE-2022-0585: fix large/infinite loops in multiple dissectors (AMP, ATN-ULCS, BP, GDSDB, P_MUL, WAP, ZigBee ZCL, OpenFlow v5/v6, IPDC, TDS, ASN.1 PER, FT_UINT_BYTES/STRING) - CVE-2022-4344: fix Kafka dissector memory exhaustion via decompression/loop bounds - CVE-2023-0666: fix RTPS dissector heap-based buffer overflow in g_strlcpy dest_size - CVE-2023-0668: fix synphasor dissector heap-based out-of-bounds read via val_to_str_const - CVE-2023-2855: fix candump file parser stack buffer overflow on too-long frame length - CVE-2023-2856: fix VMS TCPIPtrace file parser stack overflow in packet length search - CVE-2023-2858: fix NetScaler nstrace v10 file parser heap buffer overflow - CVE-2023-2952: fix XRA dissector infinite loop via integer overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-0585: fix large/infinite loops in multiple dissectors (AMP, ATN-ULCS, BP, GDSDB, P_MUL, WAP, ZigBee ZCL, OpenFlow v5/v6, IPDC, TDS, ASN.1 PER, FT_UINT_BYTES/STRING) - CVE-2022-4344: fix Kafka dissector memory exhaustion via decompression/loop bounds - CVE-2023-0666: fix RTPS dissector heap-based buffer overflow in g_strlcpy dest_size - CVE-2023-0668: fix synphasor dissector heap-based out-of-bounds read via val_to_str_const - CVE-2023-2855: fix candump file parser stack buffer overflow on too-long frame length - CVE-2023-2856: fix VMS TCPIPtrace file parser stack overflow in packet length search - CVE-2023-2858: fix NetScaler nstrace v10 file parser heap buffer overflow - CVE-2023-2952: fix XRA dissector infinite loop via integer overflow

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9.tuxcare.els8.x86_64.rpm fe6e3a45450c5e12bd00fcf60d2c7a73c0f122ab55889b0e30561fd7a1135678 wireshark-cli-3.4.10-4.el9.tuxcare.els8.i686.rpm 456eb03d5ddef25f0623f0ba7052edf0e4204c04614c71d38496c2ee95a26a6d wireshark-cli-3.4.10-4.el9.tuxcare.els8.x86_64.rpm ee90beb2184588d8aa82d96dfe0abe4cac2296337c8bc774e03a43068fb588fc wireshark-devel-3.4.10-4.el9.tuxcare.els8.i686.rpm 0e1917695c927c5ea9b9cda822bfa5345a64a98a061e8280bad3a9994ffc5d52 wireshark-devel-3.4.10-4.el9.tuxcare.els8.x86_64.rpm dde45839abfa86891d265aaba3271d275eccf5598a3aebb997d9c32233a6d076 CLSA-2026:1778129164 TuxCare License Agreement 0 - CVE-2023-35945: fix memory leak on RST_STREAM followed by GOAWAY - CVE-2026-27135: fix iframe state validation to prevent assertion failure Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-35945: fix memory leak on RST_STREAM followed by GOAWAY - CVE-2026-27135: fix iframe state validation to prevent assertion failure

0 tuxcare-almalinux9.2-esu libnghttp2-1.43.0-5.el9_2.1.tuxcare.els2.i686.rpm cf8c0e07099eaf1a1ebab3664a9fe9aa868d855fd45df0895fff4d27857480da libnghttp2-1.43.0-5.el9_2.1.tuxcare.els2.x86_64.rpm b650a4360c348b93c532f6b1718babba2bf3861a30e7dc6e9ea76869623528a8 libnghttp2-devel-1.43.0-5.el9_2.1.tuxcare.els2.i686.rpm 22c2bb5f950e4a1c19a316feb102397e1fc0df90da83689f715bdbcb6ab35501 libnghttp2-devel-1.43.0-5.el9_2.1.tuxcare.els2.x86_64.rpm 5252e59ad016655217cfe2071cb28160f310bd92faac00d0a2bebd9e9ff2546e nghttp2-1.43.0-5.el9_2.1.tuxcare.els2.x86_64.rpm 3c65b8301ab628f2a677d60fad5859ad1814227240e6155ac91fea93701bbb92 CLSA-2026:1778129970 TuxCare License Agreement 0 - CVE-2026-0672: reject control characters in http.cookies cookie names, values, and parameters to prevent header injection - CVE-2026-3644: reject control characters in Morsel.update(), |= operator, and unpickling paths missed by CVE-2026-0672; add output validation to BaseCookie.js_output() - CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code so sys.audit handlers fire for legacy .pyc imports - CVE-2025-8291: validate ZIP64 End of Central Directory locator offset to prevent ZIP archive parser confusion - CVE-2025-6069: fix quadratic complexity in html.parser.HTMLParser when processing crafted malformed inputs - CVE-2025-4516: fix use-after-free in unicode-escape decoder when an error handler is invoked - CVE-2025-1795: stop incorrectly RFC 2047 encoding the comma separator when an address list is folded Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0672: reject control characters in http.cookies cookie names, values, and parameters to prevent header injection - CVE-2026-3644: reject control characters in Morsel.update(), |= operator, and unpickling paths missed by CVE-2026-0672; add output validation to BaseCookie.js_output() - CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code so sys.audit handlers fire for legacy .pyc imports - CVE-2025-8291: validate ZIP64 End of Central Directory locator offset to prevent ZIP archive parser confusion - CVE-2025-6069: fix quadratic complexity in html.parser.HTMLParser when processing crafted malformed inputs - CVE-2025-4516: fix use-after-free in unicode-escape decoder when an error handler is invoked - CVE-2025-1795: stop incorrectly RFC 2047 encoding the comma separator when an address list is folded

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els23.i686.rpm c645e10fa747a0526636db8bca3b9c1673d6807c98681656737c4f03aaab0de9 python3.11-3.11.2-2.el9_2.2.tuxcare.els23.x86_64.rpm 21345ffd3a2710e57fe2e30d2dcc192ed6b9a9637203bedcb091b61a6f63a6e8 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els23.i686.rpm d32526a0cec971aceecc16a12784fa062d438c0b7163b30d6dfeb7720364525a python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els23.x86_64.rpm 833524d8990bc2d9f18323175e4e7d64b393df1a5fa2132ac60c0d66bd4082c6 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els23.i686.rpm 526b6ff8f2f116cdf4560597af17128a4d6ff93e9b9ae0a36c3037a613cd3809 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els23.x86_64.rpm d0c5dc82eab57c7677551f3954bfb6e2dea95abc8f0f3078075efbf479270390 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els23.i686.rpm 6ca3506f239249ea1ce935582ce2805a9b0bdde7798f1b4a064cb21f18d1b616 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els23.x86_64.rpm bdd64c5f98af5dc0ac49c6b3871c09b2186712be51da358222eb21c8d891dca7 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els23.i686.rpm a26760308a744b00e23327a9dc15c59ba75b727d95f8c27d43615972d07d2300 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els23.x86_64.rpm 8d4680343bf39c93f3e2ae0dbabd9b9c52214887e1e1b400e19ef121d300dde2 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els23.i686.rpm 40f942185b394a32471c3705216c480e20daf7a6edba22282cde57b54ca6b464 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els23.x86_64.rpm 186516bc00119760025cfec4fe60b5e8ba7e1ddfe70ff3220ab82c29c1a2bba6 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els23.i686.rpm 08d2d8614291050448b43863ff9eb8d980b59dbeb3c521b3d77fb5a525f61f52 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els23.x86_64.rpm da0c54a9b87ff30549cc8786901edd0d8d7bcc0626bc675f8c22fcc1a9fdeb5e CLSA-2026:1778131952 TuxCare License Agreement 0 - CVE-2021-4217: fix null pointer dereference in EF_UNIPATH extra field handling - CVE-2022-0529: fix heap-based buffer overflow in wide_to_local_string - CVE-2022-0530: fix null pointer dereference on invalid UTF-8 input Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-4217: fix null pointer dereference in EF_UNIPATH extra field handling - CVE-2022-0529: fix heap-based buffer overflow in wide_to_local_string - CVE-2022-0530: fix null pointer dereference on invalid UTF-8 input

0 tuxcare-almalinux9.2-esu unzip-6.0-56.el9_2.tuxcare.els1.x86_64.rpm 4dbef2e14e924980bdfe0d59709bdebf3029af11bdb5b1111f17101a18e0e088 CLSA-2026:1778133583 TuxCare License Agreement 0 - CVE-2022-0158: fix Vim9 reading before start of line with single $ - CVE-2022-0696: fix crash when switching tabpage in cmdline window - CVE-2022-1674: fix crash when matching buffer with invalid pattern - CVE-2022-1725: fix using NULL regexp program in buffer matching - CVE-2022-1771: fix recursive command line crash by limiting getcmdline depth - CVE-2022-2208: fix crash when deleting buffers in diff mode - CVE-2022-2598: fix invalid memory access in diff mode with dp and undo - CVE-2022-2874: fix NULL pointer when skipping compiled Vim9 code - CVE-2022-2923: fix crash with mkspell on empty dictionary file - CVE-2022-2980: fix crash with mouse click when TabPageIdxs not initialized Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-0158: fix Vim9 reading before start of line with single $ - CVE-2022-0696: fix crash when switching tabpage in cmdline window - CVE-2022-1674: fix crash when matching buffer with invalid pattern - CVE-2022-1725: fix using NULL regexp program in buffer matching - CVE-2022-1771: fix recursive command line crash by limiting getcmdline depth - CVE-2022-2208: fix crash when deleting buffers in diff mode - CVE-2022-2598: fix invalid memory access in diff mode with dp and undo - CVE-2022-2874: fix NULL pointer when skipping compiled Vim9 code - CVE-2022-2923: fix crash with mkspell on empty dictionary file - CVE-2022-2980: fix crash with mouse click when TabPageIdxs not initialized

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els23.x86_64.rpm 5c9f239405e01bdb41facc3a328f48ff85c14c68b3e3722f15360f33ef75b252 vim-common-8.2.2637-22.el9_2.1.tuxcare.els23.x86_64.rpm 5deddb010d0e6cbbae7a2d84f66a45a02ef455aaa3993a18d6198d5873890087 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els23.x86_64.rpm 4a8be1cf7e3c7ad1130ecaa14c373c63b90e079b91d0d84d4d4126e3ae0760b7 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els23.noarch.rpm 83bb7c1979284a47bdb041a302cf8f759c15f0fcbad522864ed4beb084efa3c6 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els23.x86_64.rpm 0a59aa2b3fbb195ee33241d92199d762e5c3d64e4b646a9e2c6d9985a55997b5 CLSA-2026:1778142360 TuxCare License Agreement 0 - CVE-2026-33947: limit path depth in jv_setpath, jv_getpath, and jv_delpaths to prevent stack overflow from deep path arrays - CVE-2026-33948: remove strlen-based length calculation that truncated JSON input at embedded NUL bytes, preventing parser-differential attacks Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33947: limit path depth in jv_setpath, jv_getpath, and jv_delpaths to prevent stack overflow from deep path arrays - CVE-2026-33948: remove strlen-based length calculation that truncated JSON input at embedded NUL bytes, preventing parser-differential attacks

0 tuxcare-almalinux9.2-esu jq-1.6-14.el9.tuxcare.els4.i686.rpm 772ce1089584f5aa216bffe7c309b255da440510baa60e355650fe9080e03042 jq-1.6-14.el9.tuxcare.els4.x86_64.rpm f060a2f6a6dba1b7905504a76ef4903bbfd79bbd93679ddf111fce34387f731b jq-devel-1.6-14.el9.tuxcare.els4.i686.rpm f958a5415d7464f2d1bd04d68fb59324c1f5a0c039a002b0fbee258f29d82b3f jq-devel-1.6-14.el9.tuxcare.els4.x86_64.rpm 347fe1eb5fad744e5735abc921ddfdeefcf7f65330f7b19d48178bb9b55d28ac CLSA-2026:1778166747 TuxCare License Agreement 0 - CVE-2026-4775: signed integer overflow in YCbCr tile decoders leading to heap overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4775: signed integer overflow in YCbCr tile decoders leading to heap overflow

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els12.i686.rpm 7ead9a24a1f6f6b1368dac4fd13e9f54fa7c2055be87642942830dae75c264fb libtiff-4.4.0-8.el9_2.tuxcare.els12.x86_64.rpm 5645b69c0650fb60d564963960de50d1f06c86d15518786ee05445b0a1e088f9 libtiff-devel-4.4.0-8.el9_2.tuxcare.els12.i686.rpm bd2235a7b9247d2cc92f87198d5b2884f30ee16400e2e2f1ea7a2ead5c052c00 libtiff-devel-4.4.0-8.el9_2.tuxcare.els12.x86_64.rpm a5fbb79f0babc62c0f89a33cde5ea43c61ec40715a285e1039658ad62814ea31 libtiff-static-4.4.0-8.el9_2.tuxcare.els12.x86_64.rpm 2eaab048e9390cf3b9632bf7124ccf3e859d6a1f0e6c7108862e3394e9f0b7f0 libtiff-tools-4.4.0-8.el9_2.tuxcare.els12.x86_64.rpm 850d839c04a0f03b96f0878fae6c4dca60b7fb5b18ddc493a48700f100562827 CLSA-2026:1778167813 TuxCare License Agreement 0 - CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789: out of bounds read on XPM with corrupted colormap Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789: out of bounds read on XPM with corrupted colormap

0 tuxcare-almalinux9.2-esu libXpm-3.5.13-8.el9_1.tuxcare.els1.i686.rpm 6150d9a4d8ae5a8a61401d17f0a7392ae52dc3d141ec3040dc26133ecb22ca2d libXpm-3.5.13-8.el9_1.tuxcare.els1.x86_64.rpm df7003a308e014eee857b7478ddce5852e10d544d6208d6bf30bc770c454bcf2 libXpm-devel-3.5.13-8.el9_1.tuxcare.els1.i686.rpm 0d369f03b40d7d8296fadfb33cd8a38eac3e96a4237a53ca84dd60e1449f85c6 libXpm-devel-3.5.13-8.el9_1.tuxcare.els1.x86_64.rpm 4b1e345c2393e803981a27d967b208f30fe9916e98cf65ce63fd4ed85597a0b5 CLSA-2026:1778219103 TuxCare License Agreement 0 - CVE-2025-4373 fix buffer underflow in g_string_insert_unichar() and other GString APIs by carefully handling gssize parameters in glib/gstring.c Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4373 fix buffer underflow in g_string_insert_unichar() and other GString APIs by carefully handling gssize parameters in glib/gstring.c

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els7.i686.rpm 54268a97740abc0c8b36ed91359f6a0982cdcf8ce44a66830ac29e5637662a01 glib2-2.68.4-6.el9.tuxcare.els7.x86_64.rpm 03f3b0e640b39c0f34f56db57568217f063203c4ccfec6453b3053fb74835297 glib2-devel-2.68.4-6.el9.tuxcare.els7.i686.rpm 0863dcdfe574a0355fccd2cfee454803520da1c9954685b59d4b4b4b038ac584 glib2-devel-2.68.4-6.el9.tuxcare.els7.x86_64.rpm 66f7e1b0213ee19834e3f9089fc42b599e76e7ab07252dedd8ec4d2bdd410192 glib2-doc-2.68.4-6.el9.tuxcare.els7.noarch.rpm 4080658f47c7f7acab8582c56a5ffced204e1b80b746af886803fd8db5235d0f glib2-static-2.68.4-6.el9.tuxcare.els7.i686.rpm aff525152db924f0d3c5a3d7d2f5537e6912c1e8e91f37636bc3d649c10e3a48 glib2-static-2.68.4-6.el9.tuxcare.els7.x86_64.rpm 4cb418106c85f95583c2743de0941f003096eb8220cfec39c3c796e120b5e811 glib2-tests-2.68.4-6.el9.tuxcare.els7.x86_64.rpm ac3418c4babdcbf46eb63bdf5b0a9f24c5996169556215aad9f62865d69f3a91 CLSA-2026:1778234216 TuxCare License Agreement 0 - CVE-2026-41079: limit num_bytes for SNMP string values to prevent out-of-bounds read in asn1_decode_snmp Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41079: limit num_bytes for SNMP string values to prevent out-of-bounds read in asn1_decode_snmp

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els11.x86_64.rpm 9b1f7c54f1eb89ea734f05ecd0ac77360a32386699ed74fe010ab583e59c2024 cups-client-2.3.3op2-16.el9_2.1.tuxcare.els11.x86_64.rpm fbba6a8f11d592c9e859c6e5f1409c9dc1b97fc19d39b8f53af9b83518b3bad0 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els11.i686.rpm 32aadcf846427253fa5b335572800abecd7709e9025184131bb884076431322d cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els11.x86_64.rpm 72ae0d9d3f1c717f507de6b17ed00ca7233b5b004348ff3db0774e036056c4e9 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els11.noarch.rpm 8f5fa453264dbd2fd506fd9776c470e01e390ad04cbff5e42eab9da726526090 cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els11.x86_64.rpm 02fc79c840061e05db9505c9be618484c7c8bcf7c4227fbf00303bc76f5e9a97 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els11.i686.rpm 2ec2343724921a5954e8723cf64f77d6f0fd7b8e3faee16021930730b4f61983 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els11.x86_64.rpm f884ef04a7285221cb53ee5e65a40ec684b1b425a1563034017ad810fc85606c cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els11.x86_64.rpm 225f6c8d08cef7f9010ad53306f13a4ef51a5e5609ad524ccca54400f037e8bf cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els11.x86_64.rpm 49fbb9eca3e80befb59446571368e66999d84df3ffb565558b6965c5bfb948cb CLSA-2026:1778236507 TuxCare License Agreement 0 - CVE-2025-10158: fix invalid access to files array in sender - CVE-2024-12747: fix symlink race condition in sender - CVE-2024-12086: fix server leak of arbitrary client files via crafted checksums and fuzzy basis Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-10158: fix invalid access to files array in sender - CVE-2024-12747: fix symlink race condition in sender - CVE-2024-12086: fix server leak of arbitrary client files via crafted checksums and fuzzy basis

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9.tuxcare.els4.x86_64.rpm 72160bb0c68868dd58d7e30bb03a03eff3b974b3ab33586324e7c22c9065f49e rsync-daemon-3.2.3-19.el9.tuxcare.els4.noarch.rpm 7567e303808ea747c909c9b622fa0c95d9774e9d5b341002d5126e34e407e6c5 CLSA-2026:1778237316 TuxCare License Agreement 0 - CVE-2026-0964: reject invalid filenames in ssh_scp_pull_request to prevent path traversal via SCP Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0964: reject invalid filenames in ssh_scp_pull_request to prevent path traversal via SCP

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9.tuxcare.els11.i686.rpm b4985124fe42ee230586e4e3625f594479b73b33a521dd50dbaf9fe09d71b7aa libssh-0.10.4-8.el9.tuxcare.els11.x86_64.rpm b864d12d8cc0d1036cf57fa8be559d31950abdc360203c5e1d236d05bfc28596 libssh-config-0.10.4-8.el9.tuxcare.els11.noarch.rpm 0f0c678cf8f62b75a4fa240aa32cf53023404ca204743bb8404ef4efc3f2e398 libssh-devel-0.10.4-8.el9.tuxcare.els11.i686.rpm 98059f2def94fb897d006f223f730639ad5253bc48f84d464d217a459ffc708a libssh-devel-0.10.4-8.el9.tuxcare.els11.x86_64.rpm 398bcf70a1fb691aadb3c1b3917b08eb122c0d555debb73f7c768182d391c4bc CLSA-2026:1778238289 TuxCare License Agreement 0 - CVE-2022-43681: fix bgpd crash on malformed BGP OPEN messages with insufficient data - CVE-2022-40318: fix out-of-bounds read in bgp_open_option_parse with extended option params - CVE-2023-31489: fix out-of-bounds read in BGP Long-lived Graceful-Restart capability parsing - CVE-2023-46752: fix bgpd crash on malformed MP_REACH_NLRI packets Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-43681: fix bgpd crash on malformed BGP OPEN messages with insufficient data - CVE-2022-40318: fix out-of-bounds read in bgp_open_option_parse with extended option params - CVE-2023-31489: fix out-of-bounds read in BGP Long-lived Graceful-Restart capability parsing - CVE-2023-46752: fix bgpd crash on malformed MP_REACH_NLRI packets

0 tuxcare-almalinux9.2-esu frr-8.3.1-5.el9_2.2.alma.tuxcare.els4.x86_64.rpm 53d1b6c30f03ef3293e6ac370a3c7424a6d1acba288b42fe8cac1509f656ba4e frr-selinux-8.3.1-5.el9_2.2.alma.tuxcare.els4.noarch.rpm 2fe7f43975a160f748707183cb67c6a04834b40f3f90fe2bbc6b1f30990bd9b0 CLSA-2026:1778239845 TuxCare License Agreement 0 - CVE-2024-6104: backport go-retryablehttp URL redaction so basic-auth credentials embedded in request URLs are not written to logs/errors - CVE-2024-28180: backport go-jose decompression-bomb fix to both vendored major versions (github.com/go-jose/go-jose/v3 and gopkg.in/square/go-jose.v2) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6104: backport go-retryablehttp URL redaction so basic-auth credentials embedded in request URLs are not written to logs/errors - CVE-2024-28180: backport go-jose decompression-bomb fix to both vendored major versions (github.com/go-jose/go-jose/v3 and gopkg.in/square/go-jose.v2)

0 tuxcare-almalinux9.2-esu skopeo-1.11.2-0.1.el9.tuxcare.els4.x86_64.rpm f6eec06d973b67d4c04d69b9d8ec72fb7de0e2c7d37cb37cc85c7b4e9e145fe0 skopeo-tests-1.11.2-0.1.el9.tuxcare.els4.x86_64.rpm d7b1559b9d245250f1298c66a52c26a2e5faccdfd1493a3ee07256823738cb25 CLSA-2026:1778240943 TuxCare License Agreement 0 - CVE-2025-1219: fix wrong content-type header on libxml streams redirect Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1219: fix wrong content-type header on libxml streams redirect

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 9c28e0b2c05830940a1689cd403470369edbfde056c1115678609b8b37686a40 php-bcmath-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm b4dc9f009ddea24703b7ff5723fd836037fc8b67515252ebb2b6c6c06a323120 php-cli-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 902b062bfb9cc27ea69b8203d2a2597d496710fea0d00b09e49cd4203829c202 php-common-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 85d9236b8e47c7a825e71e482bc5218d61516a5a7aae0c36b068ff5b740043b4 php-dba-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 71fbaef819d41bacdfdd5f0bd2a3540f7d95a055cbaec1a03f8e6018c90dc4ba php-dbg-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 8027911444bdb34573e9d1ee5f17d0c65c9043c6e0f4d5a2240c5c0ccea37b41 php-devel-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm abfb2d1d68b9825496b0177b2dc5ef0a608a551552a8f04848dde21e56b07e37 php-embedded-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 8f0ddca99aeed8e0aafdc1a61b092e4cc44a41347a618254283e8bbef1955773 php-enchant-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm d12e7bc66bc43213d5de5a91f7cbc58ae4585d9ae42d78d366526f1c9fdd9559 php-ffi-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm c005ad694905c5821e6c029b16796653d427bdf7fc3d5ece65e37978ce077046 php-fpm-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm b0ca5ee8f9a02088a6d73adb86aa378267cc3fc29fdbb83c1e702d22e739e8a3 php-gd-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 3b5612f8710fef6ca002bf287e1252fe57935a32aae6e20dc0ef80d71e8f9548 php-gmp-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 938cadc431926483e94857511ebf1188399b40d73b0e6b466b8755dbde7ee5c0 php-intl-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 766397c37f59671d047a925f3397d312b25dd0ce9b85193cbb7cd67d26a05d66 php-ldap-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 82daea0548112af709f8f68b50b403b27be6dde727acda0e92d2eaed401cb159 php-mbstring-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 824aac32c9301bec20a599faecb73cc9b1326dd845f1a0b4b1f91de0fe177115 php-mysqlnd-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 00401bf8e9508bb749f67b53052687b6a15267093d7852f2a5eb5b2432d344f0 php-odbc-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 81942bcb8d250d9bf9e88e6e46db96c77bb1dca32ce9c0ca9ea4828026073843 php-opcache-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 56b9580afc19d2479a855a0e5a9e4c7d412f32a5b0374946eb03f3f786028629 php-pdo-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm b5d5f2b8b6efba9122b4f689e006db88b26e5843b518f6306494a8a09ec0b722 php-pgsql-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 789a113077a64f3ca398aca8adb8512c646b4bfdac81172d4d1d16709f1814e3 php-process-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 637b881d47e9a716fe23b05908096afd13248fc8adbd16244b3cb35e821d5f3c php-snmp-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 335ad5ae4688758bd8585f8792b8048e35d0132fe47d90426c272bb34642c82a php-soap-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm ea33e9682235130cf82580ab5c0d54a355694b92a0d24937654b5c4f58c21690 php-xml-8.0.30-1.el9_2.tuxcare.els12.x86_64.rpm 34f54432654e310b9c5896910b735f4b5e0b28532a5820d067d978823aab2020 CLSA-2026:1773654558 TuxCare License Agreement 0 - Update to MySQL 8.0.45 (January 2026 CPU) CVE-2026-21968 CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21964 CVE-2025-9230 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to MySQL 8.0.45 (January 2026 CPU) CVE-2026-21968 CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21964 CVE-2025-9230

0 tuxcare-almalinux9.2-esu mysql-8.0.45-1.el9_2.tuxcare.els1.x86_64.rpm 2dae32a22c225c0fa1e60d5c5423e2bbbe13b26e129c89ebaf2cbda981917e06 mysql-common-8.0.45-1.el9_2.tuxcare.els1.x86_64.rpm 62ab57b93e309e18e71a70379a8769a4a6abf68ba99c764c3acfa32f71436818 mysql-devel-8.0.45-1.el9_2.tuxcare.els1.x86_64.rpm 29af3df09489e6bf20fbaf0c6c2a5caff55b480837940dc5a89c1abd7537a765 mysql-errmsg-8.0.45-1.el9_2.tuxcare.els1.x86_64.rpm c45d42700182260ef6a7937fb943bb834369346b7fc521ee3f4b30b7531ea36c mysql-libs-8.0.45-1.el9_2.tuxcare.els1.x86_64.rpm 9ae953f8bf9b3863b2d57349f0491e2b3aa244cf76c187477d67d1ebf863a5a0 mysql-server-8.0.45-1.el9_2.tuxcare.els1.x86_64.rpm 36c0bdd86ad29c1cff34c1c14e570414b8c8144fa0c5364ac8ccd1184c0541b6 mysql-test-8.0.45-1.el9_2.tuxcare.els1.x86_64.rpm 7c15bcf322470571b4869cff42df718b28a4432c12059ac04170bc4cbacac995 CLSA-2026:1778259521 TuxCare License Agreement 0 - CVE-2022-3278: fix crash when using NUL in buffer that uses :source; don't get a next line when skipping over NL in eval_next_non_blank() (eval.c, upstream patch 9.0.0552) - CVE-2023-48234: fix overflow when getting count for normal z command; break out of nv_zet() count loop when n > LONG_MAX/10 (normal.c, upstream patch 9.0.2109) - CVE-2023-48236: fix overflow in get_number() when using z= with a large count; return 0 when n > INT_MAX/10 (misc1.c, upstream patch 9.0.2111) - CVE-2025-26603: fix use-after-free in str_to_reg() when redirecting :display to a clipboard register; skip the active redir register including the * and + clipboard fallbacks to register 0 (register.c, upstream patch 9.1.1115) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-3278: fix crash when using NUL in buffer that uses :source; don't get a next line when skipping over NL in eval_next_non_blank() (eval.c, upstream patch 9.0.0552) - CVE-2023-48234: fix overflow when getting count for normal z command; break out of nv_zet() count loop when n > LONG_MAX/10 (normal.c, upstream patch 9.0.2109) - CVE-2023-48236: fix overflow in get_number() when using z= with a large count; return 0 when n > INT_MAX/10 (misc1.c, upstream patch 9.0.2111) - CVE-2025-26603: fix use-after-free in str_to_reg() when redirecting :display to a clipboard register; skip the active redir register including the * and + clipboard fallbacks to register 0 (register.c, upstream patch 9.1.1115)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els25.x86_64.rpm 472fd3893e4320e6289695a2a8cb0d25142039689ef95624f495b9105300a10d vim-common-8.2.2637-22.el9_2.1.tuxcare.els25.x86_64.rpm ddaf9360c5a8adb2d946dedeeebe6b557a7d484ece89dac4ca721f4327e6fc89 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els25.x86_64.rpm bea6d2564f5dbb22c2680e348e5b592c06bd85ce5b77bef392caec391382bb36 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els25.noarch.rpm b73fff40b844e2e4679d0b7d4af8d4e63082ccee5198f48566b8ece9ed87c814 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els25.x86_64.rpm 9b7294c643d7bb8f2cfb8274cbee8d045c551c2713c33161d8f6cb22b9868508 CLSA-2026:1778252773 TuxCare License Agreement 0 - CVE-2022-41317: fix exposure of sensitive cache manager information via non-HTTP URI schemes due to typo in default manager ACL regex Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-41317: fix exposure of sensitive cache manager information via non-HTTP URI schemes due to typo in default manager ACL regex

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els13.x86_64.rpm ac4a3b08526869949c1e5574c195ee4c36ac55cdf649155855699f4f33b92c0c CLSA-2026:1778255734 TuxCare License Agreement 0 - CVE-2026-27858: bound managesieve-login AUTHENTICATE initial response size to prevent memory exhaustion DoS before authentication - CVE-2025-59032: fix managesieve-login crash when AUTHENTICATE command did not finish on the first call due to literal SASL initial response Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27858: bound managesieve-login AUTHENTICATE initial response size to prevent memory exhaustion DoS before authentication - CVE-2025-59032: fix managesieve-login crash when AUTHENTICATE command did not finish on the first call due to literal SASL initial response

0 tuxcare-almalinux9.2-esu dovecot-2.3.16-8.el9.tuxcare.els4.i686.rpm 737fa65eb10adaaa64f0d794df26778e6e569c5541091a5d1e475ecb0d13db39 dovecot-2.3.16-8.el9.tuxcare.els4.x86_64.rpm 4efdab7c17b8477c8b363e0b39be63a0a3e971d4d87a6ced2836070b12e19a3d dovecot-devel-2.3.16-8.el9.tuxcare.els4.i686.rpm 0874d0d72bc3f4638efb953b5488f140d77ec22d1760335064bda4f29c1f45f6 dovecot-devel-2.3.16-8.el9.tuxcare.els4.x86_64.rpm 74cbf6e9e128a7eb5cbead71d52f0e8a12c61206addb0ae4699e0653b066107b dovecot-mysql-2.3.16-8.el9.tuxcare.els4.x86_64.rpm c4befe1ea00128a84dc24790278c5f08c4be88493207b09dd1f3bbff361eb880 dovecot-pgsql-2.3.16-8.el9.tuxcare.els4.x86_64.rpm 4517d4fc5cbe8dca4419d37c2262a2a7862abb3743a13bcaab1e824c0b93d92d dovecot-pigeonhole-2.3.16-8.el9.tuxcare.els4.x86_64.rpm 846619f5a831d82eb87d0c3ef9810ae60815c48b90dda15596412a6b734066df CLSA-2026:1778297730 TuxCare License Agreement 0 - CVE-2026-40685: dewrap() OOB read/write on trailing backslash in JSON header - CVE-2026-40687: SPA authenticator OOB read/write and base64 decode infoleak - Refresh Exim-Maintainers-Keyring.asc to verify the 4.99.x release tarball signature Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40685: dewrap() OOB read/write on trailing backslash in JSON header - CVE-2026-40687: SPA authenticator OOB read/write and base64 decode infoleak - Refresh Exim-Maintainers-Keyring.asc to verify the 4.99.x release tarball signature

0 tuxcare-almalinux9.2-esu exim-4.99.1-1.el9_2.tuxcare.els1.x86_64.rpm c0d58603acd8080f724cde75c150a631e17d04be283d604e2115acabc1ab0db3 exim-greylist-4.99.1-1.el9_2.tuxcare.els1.x86_64.rpm 99f2b84446aa86b257e31fa333d24b3a27202344869624815f9584d6e5313f98 exim-mon-4.99.1-1.el9_2.tuxcare.els1.x86_64.rpm 644b43cd62e3f7324d32a3576d2e063ddca88e3450567701a2c2545808a35ce5 exim-mysql-4.99.1-1.el9_2.tuxcare.els1.x86_64.rpm 0e6fff8b69c403a477cf915f2d1857f3ca732eca31e60840f83363c24e0cf27b exim-pgsql-4.99.1-1.el9_2.tuxcare.els1.x86_64.rpm 4daeb8a8e6ccbd3266da8cf1f536f4d8d54d5740bd7b91fbbcfdb26af1f61927 CLSA-2026:1778492641 TuxCare License Agreement 0 - CVE-2023-47038: fix write past buffer end via illegal user-defined Unicode property, for almalinux9.2esu - CVE-2025-40909: clone dirhandles without fchdir, for almalinux9.2esu Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-47038: fix write past buffer end via illegal user-defined Unicode property, for almalinux9.2esu - CVE-2025-40909: clone dirhandles without fchdir, for almalinux9.2esu

0 tuxcare-almalinux9.2-esu perl-5.32.1-481.1.el9.tuxcare.els1.x86_64.rpm b285c38eeef92859cf7e68fe4c9cfc03f384b982cbdb1454425129bdc5adb2b1 perl-Attribute-Handlers-1.01-481.1.el9.tuxcare.els1.noarch.rpm 0cd51de217fde932f02a23ba7fb38b6c3c399fe9b70e74585e1f14554b90b6c7 perl-AutoLoader-5.74-481.1.el9.tuxcare.els1.noarch.rpm 67913bca31254b0ef9c3d3144ddf3b3f8db38950b981d02873d8603f0c993ea6 perl-AutoSplit-5.74-481.1.el9.tuxcare.els1.noarch.rpm 0205a27d74bc4f1c2ccb813e24ed94547f734b55fa43a1fe7927ff59b66380aa perl-B-1.80-481.1.el9.tuxcare.els1.x86_64.rpm e0b524b837cd31d012fd54ad743bc3567f2298e269abcc0dd011a5e0918a8371 perl-Benchmark-1.23-481.1.el9.tuxcare.els1.noarch.rpm 4d7f68fcd478f6dec4d93c0927bf912831dfdd6565f4a0023cf6859d15097863 perl-Class-Struct-0.66-481.1.el9.tuxcare.els1.noarch.rpm 85ada7f04fae14ac439e11ed647896880d90e20e6fdbf1c26b3cf65082acde41 perl-Config-Extensions-0.03-481.1.el9.tuxcare.els1.noarch.rpm 7e3afaa2e62d871c197f105087d373a2826cdf6b355ce5245071681c1054348b perl-DBM_Filter-0.06-481.1.el9.tuxcare.els1.noarch.rpm 3c8ef5337d6569ff74c8a13783d3464e8f53af326b6887466c9be416daea531f perl-Devel-Peek-1.28-481.1.el9.tuxcare.els1.x86_64.rpm a41359f101ef70deccfce4224e5f7e4cfd423a23d3394c282765a7aa94d4fa38 perl-Devel-SelfStubber-1.06-481.1.el9.tuxcare.els1.noarch.rpm cb9647bbe99c02107956d4d68b5e395477a508a5223eef85a40c5863ff3247d3 perl-DirHandle-1.05-481.1.el9.tuxcare.els1.noarch.rpm e6ef08e4d993fc8f44a9c3fc37cc373b7358a3313a3356a6360fc45fbba8fa0f perl-Dumpvalue-2.27-481.1.el9.tuxcare.els1.noarch.rpm c4afdceff953dd3ed05dfb4e5ef80c6c395e35491ea9d5917d5595d290d085c2 perl-DynaLoader-1.47-481.1.el9.tuxcare.els1.x86_64.rpm 5166f7c06702c97e7acee1f7b227c989409a3c6f05a130a74ed7b19e566bec09 perl-English-1.11-481.1.el9.tuxcare.els1.noarch.rpm ab2d58c368c5da8640cfe9f4f4d852cdcb11fefdb2d059305c1a976bdecafdd1 perl-Errno-1.30-481.1.el9.tuxcare.els1.x86_64.rpm ff154549708ea9d90c7a68413db42f5e7e20b598304d86255bca1659c4ce22aa perl-ExtUtils-Constant-0.25-481.1.el9.tuxcare.els1.noarch.rpm b3d488dad67264c00e65731585308f9048f4ae26d287218d7bff30fed60228ec perl-ExtUtils-Embed-1.35-481.1.el9.tuxcare.els1.noarch.rpm b1633d7afce7933cc96b7c4373ada32d5eb26bfeb034f0e089bf32b3b717c930 perl-ExtUtils-Miniperl-1.09-481.1.el9.tuxcare.els1.noarch.rpm dece60dbe6118a6bf9d19a739624c1973c0ec07f080a800315ba1e9045220b9b perl-Fcntl-1.13-481.1.el9.tuxcare.els1.x86_64.rpm c9db370d5792fc64856c06eeac477452d0f8fa154d5e6494896d875c38fc9976 perl-File-Basename-2.85-481.1.el9.tuxcare.els1.noarch.rpm 0865cad3534ecf2ea178a4de5cd7a8ca6d78655cc6938959d70c72492fc5aa13 perl-File-Compare-1.100.600-481.1.el9.tuxcare.els1.noarch.rpm c6d559e70908dfd520dfd4bb2ebf465fa9e0d6decc3b9a6f2920076e16566be3 perl-File-Copy-2.34-481.1.el9.tuxcare.els1.noarch.rpm 49e361597fc966fefc5da278d0aa058eb13d820f3454244d44d26eb52581f03d perl-File-DosGlob-1.12-481.1.el9.tuxcare.els1.x86_64.rpm a4744afb50e876e134d6b0f91ac5c363d5c46c77cf6021c0c010e7ac5a40d0c0 perl-File-Find-1.37-481.1.el9.tuxcare.els1.noarch.rpm c2cce75fffb7be2b033338475fa3bc7b2166bf7fd54dcb110f72e4c655297956 perl-File-stat-1.09-481.1.el9.tuxcare.els1.noarch.rpm 1c2e2840542917a7614f8358d5fec26a71e89f00d5d76eafa7d4cbacfc8a703f perl-FileCache-1.10-481.1.el9.tuxcare.els1.noarch.rpm 2244b8ffb207cdfda04ad8af821092bd7837e54c9eb5934ccc54de61c329d885 perl-FileHandle-2.03-481.1.el9.tuxcare.els1.noarch.rpm 5802e041faef54685db8f1b9341a30a288d65333a9e3e01ed5cdb8694660b682 perl-FindBin-1.51-481.1.el9.tuxcare.els1.noarch.rpm 1a1229425ef9c88a3d9ae9052f5e81f7163b651fa225a30a5027fbd488695f8c perl-GDBM_File-1.18-481.1.el9.tuxcare.els1.x86_64.rpm c18930e03c855b98937c245c48ff9373a6a34332eded083318b1400d81dc5eec perl-Getopt-Std-1.12-481.1.el9.tuxcare.els1.noarch.rpm bf9398cb75bb15a78a0e4dee5839e9f0fdb4a08f248b76f25bb52c4589092713 perl-Hash-Util-0.23-481.1.el9.tuxcare.els1.x86_64.rpm 76b1cec8a2e2563db84166aa7b0aaa108a9c167e211ac3820253331122c0aa17 perl-Hash-Util-FieldHash-1.20-481.1.el9.tuxcare.els1.x86_64.rpm acbedd5dd243327e5b462433c840fae5a2158ef296b2e654c6dcde6fde520e1a perl-I18N-Collate-1.02-481.1.el9.tuxcare.els1.noarch.rpm 37897d6acdc87fbc84db1b796470bb5c1095851d3d3d5c6577eef517f7bc74b0 perl-I18N-LangTags-0.44-481.1.el9.tuxcare.els1.noarch.rpm 929a644f8922c3496292943f22790c8993e8d8f46bfd3ddec49c785a8152a4ef perl-I18N-Langinfo-0.19-481.1.el9.tuxcare.els1.x86_64.rpm 6b9f55fd8d99d1d974cffbce3c80a3bd854976bc65efa32cbc7e59cf75eb1a43 perl-IO-1.43-481.1.el9.tuxcare.els1.x86_64.rpm cdd82f8f076617143d855c2fd88a35da44c4ede8f8cd2756fd1ab9143802301e perl-IPC-Open3-1.21-481.1.el9.tuxcare.els1.noarch.rpm 02872cd1491ceaf142a169af3f505289e998624f9f166d2b43d57dd1c38abb01 perl-Locale-Maketext-Simple-0.21-481.1.el9.tuxcare.els1.noarch.rpm aed8ca8317cd17cfdd33d9744a67ddd6c0223b7edd88bb3ebfbdde555010a0b1 perl-Math-Complex-1.59-481.1.el9.tuxcare.els1.noarch.rpm f79f6794b20e50c08d3f2a9ba2affbeff4f9633e03413b0abac757bbc081921f perl-Memoize-1.03-481.1.el9.tuxcare.els1.noarch.rpm b6496a23c7978d45a7538594b757b1751908d580e5c2b489cb357114f334bb68 perl-Module-Loaded-0.08-481.1.el9.tuxcare.els1.noarch.rpm 8594773ceec9eaf6e0ef51d3a19533f9e100f72dbcc9ec53e60e9a465f3d14da perl-NDBM_File-1.15-481.1.el9.tuxcare.els1.x86_64.rpm 1b7c0e1ec0192bc9f9fac29e71e4bc9ede10968dd315d2f36af059f233ccaeaa perl-NEXT-0.67-481.1.el9.tuxcare.els1.noarch.rpm 29d3755228707a9d2268571a11ffd18d8e22bdced1818cec4f718e165a4b8cfd perl-Net-1.02-481.1.el9.tuxcare.els1.noarch.rpm 773f5b3f0d1ce68843481c8a1ade77de4c01b9afd0a8234dcddfeb790f868304 perl-ODBM_File-1.16-481.1.el9.tuxcare.els1.x86_64.rpm d85567f3f1c23bcbebbf59eda44e25c5cc13cde438d6a09579d8819758373a8a perl-Opcode-1.48-481.1.el9.tuxcare.els1.x86_64.rpm cdfe8b34cb4ecfb10376a5aaf62eb8372475ef2333e5bec21d40c3d9636e77c2 perl-POSIX-1.94-481.1.el9.tuxcare.els1.x86_64.rpm d4d862384e6601bf4023a0b66dd84f36a6cbeb536eb09eee4517f5558d1279b8 perl-Pod-Functions-1.13-481.1.el9.tuxcare.els1.noarch.rpm c8eaf3ed0f97cc99ce07ad07473f29e41fa8e52e874d854f5f557d17d67dfadb perl-Pod-Html-1.25-481.1.el9.tuxcare.els1.noarch.rpm f5dd26c61ae7f20d928bc9f14e66b5e82a0949ea356f234fa8ccc551b4a6d0c1 perl-Safe-2.41-481.1.el9.tuxcare.els1.noarch.rpm 4b6f4ccd1139e761aa139a0398e973cade5aecaaf3c3fa356f3780525eb4a09a perl-Search-Dict-1.07-481.1.el9.tuxcare.els1.noarch.rpm 7c783be039358466bda7bdab03dcbf17f5233e54c0c9afc74975f1c494b26b63 perl-SelectSaver-1.02-481.1.el9.tuxcare.els1.noarch.rpm 168dbed4377f684b3ed96382425672e9da917eb8a6c55e178d45a2f51956fa9f perl-SelfLoader-1.26-481.1.el9.tuxcare.els1.noarch.rpm 67aa1d19943323592565fc1e0e01dcfd8608ec64c383bca52e2c4132cc762ec1 perl-Symbol-1.08-481.1.el9.tuxcare.els1.noarch.rpm 304d249878481450b64607b44fab77ee761e36cb0f0dcde700abd44a958bb2d1 perl-Sys-Hostname-1.23-481.1.el9.tuxcare.els1.x86_64.rpm bd6c78cf5ef3d2da569a4d04582580c845d7fcb88eb395ebbfc9abf981d7975a perl-Term-Complete-1.403-481.1.el9.tuxcare.els1.noarch.rpm cb2c81b8ee5f1f5088d3c98b39a2adee3df0aa1611fc6ecf217ee43c077bd06f perl-Term-ReadLine-1.17-481.1.el9.tuxcare.els1.noarch.rpm 54c1434e096ba08101049e2d8758f6ec9fe76faef72e5921efa35d15393961ef perl-Test-1.31-481.1.el9.tuxcare.els1.noarch.rpm e8931d96e67e4eff6f2aa30e8339ec9030b6b8f546aa8300c99199021b1231e1 perl-Text-Abbrev-1.02-481.1.el9.tuxcare.els1.noarch.rpm 5b77b316fb11ce1206fbbad70e220d6e1176a61088f4b84760a64c067c36d5db perl-Thread-3.05-481.1.el9.tuxcare.els1.noarch.rpm 951f9ad6b836745a81f512d9537c8079fcedb883b8f6bf37a0eb3b3797e67ef6 perl-Thread-Semaphore-2.13-481.1.el9.tuxcare.els1.noarch.rpm 7dce8133d7e06b3dcd61336aef458a454b94926c603ccad2752b3507e4a96fa6 perl-Tie-4.6-481.1.el9.tuxcare.els1.noarch.rpm c7f814b09bfc4ea7090cb8ff0b59760d0846d10ae2933586844c2ca9dcb2c77a perl-Tie-File-1.06-481.1.el9.tuxcare.els1.noarch.rpm 42985cbc8835593644b70eaa8f07d46e57b1d94062de462602cc635a7b6e925e perl-Tie-Memoize-1.1-481.1.el9.tuxcare.els1.noarch.rpm 6c9216bc3d4d46323afb2bf62af2e60806eb354768befe81401173f8ed0efeb8 perl-Time-1.03-481.1.el9.tuxcare.els1.noarch.rpm 2bf0eab8378cc1d7774ec455f59dd51669b4dd37d073ae48e59f224f194a49a3 perl-Time-Piece-1.3401-481.1.el9.tuxcare.els1.x86_64.rpm fdaef78e10a91f82342341684ffd15a7ba33baa54af2754e53bba66f211f9a53 perl-Unicode-UCD-0.75-481.1.el9.tuxcare.els1.noarch.rpm 1fcac6bc1a0ca4b6b91886e87c61d2a5a667599885396479f1b8c1a59dea8054 perl-User-pwent-1.03-481.1.el9.tuxcare.els1.noarch.rpm 7e07b273be70251135b1641ffbd8b08ed6b4bd97e9715728bbd6661a659c7b6c perl-autouse-1.11-481.1.el9.tuxcare.els1.noarch.rpm 56a8d6a05b435066d9fae50ed0ee0a7d1255d7e67760b23da9dc4634e512dcdf perl-base-2.27-481.1.el9.tuxcare.els1.noarch.rpm 404e40225770faefe6801b815bac60fd3cb6b47e937c0d1a143c131bcef5898f perl-blib-1.07-481.1.el9.tuxcare.els1.noarch.rpm bb2873857c773c242e7feeab0fa826678b1b45edac8b62f618ed814559266106 perl-debugger-1.56-481.1.el9.tuxcare.els1.noarch.rpm 6a077393909e0cb2caff0fc678bb472b6350524455cc24fd2b6b6ae866297996 perl-deprecate-0.04-481.1.el9.tuxcare.els1.noarch.rpm 5c6f67a3706574f574ea8638a136b367530400dd342cbf71fa6007df90284636 perl-devel-5.32.1-481.1.el9.tuxcare.els1.i686.rpm d6e63d6f8918a570c423486c3b613b91c11f70d7c8aa887c46147b47643dd509 perl-devel-5.32.1-481.1.el9.tuxcare.els1.x86_64.rpm 610efdf6d04da820e395f8cf885f727e92e7dabf288ef59a8b2d1c8e98946342 perl-diagnostics-1.37-481.1.el9.tuxcare.els1.noarch.rpm 1b164e8f307f2d19d60cc0eb9e71133c477660d756ee0768dc7e443e63d7265a perl-doc-5.32.1-481.1.el9.tuxcare.els1.noarch.rpm 181d5f9241c10afb2a53737f0d812b25c12efaf7558a2e7adb5f3f0603551f9c perl-encoding-warnings-0.13-481.1.el9.tuxcare.els1.noarch.rpm 0c23bb6100221a8700476d37fc32d57376c721770a224598f7d37f0c9cad16b5 perl-fields-2.27-481.1.el9.tuxcare.els1.noarch.rpm 512b2c61ddd2f185a2b9e8b628ea16a0adb182679467d5335be48b54cb95bab3 perl-filetest-1.03-481.1.el9.tuxcare.els1.noarch.rpm 3d683a90bdb77d2d8aa2e224fe471639d4f3d7dd3b318c856b489608fdeaaaa8 perl-if-0.60.800-481.1.el9.tuxcare.els1.noarch.rpm 903a591b83aabc95ec1f93f11ca972b3d075875053a412bfd4272c6af3c68116 perl-interpreter-5.32.1-481.1.el9.tuxcare.els1.x86_64.rpm 45b02db274dfac282aa39cc4c7f58f5457d7b398aee3275dbb4aa5fbf52cf5bc perl-less-0.03-481.1.el9.tuxcare.els1.noarch.rpm ec85be334e865a0a8bec76267fdbdbcfbbbc4001ba09c149bb347c73ef86b45f perl-lib-0.65-481.1.el9.tuxcare.els1.x86_64.rpm a160980cc42e7b72eab35e392e44d238f3df80b25c8178189ad4a60d2942d914 perl-libnetcfg-5.32.1-481.1.el9.tuxcare.els1.noarch.rpm d37059ac3afee3e7c5a61dcbb24939294f84896307fb915920b93d6cc308dbaf perl-libs-5.32.1-481.1.el9.tuxcare.els1.i686.rpm 31ec36f2e99e6e3047cadc83b415e4ef1f94966b96bc1ee4fc2e6935c8d40b3a perl-libs-5.32.1-481.1.el9.tuxcare.els1.x86_64.rpm 79dcbecab579b6f973d409cfb7c548cac2706fb0a01967bae2e024b70817ef4f perl-locale-1.09-481.1.el9.tuxcare.els1.noarch.rpm 1ae54307f14ccbecaa650cc9e45d595ba952b7ec5740ebcf8f070aff090017be perl-macros-5.32.1-481.1.el9.tuxcare.els1.noarch.rpm 3c5da5a2b88b1cba11cc88f47fe579bd09fb692d42b759ff2c36c0e37a083245 perl-meta-notation-5.32.1-481.1.el9.tuxcare.els1.noarch.rpm 4ff92ef340e7384dbb1e9abbe4f9aa87c5a84d8f2265ed278329e53124c791e0 perl-mro-1.23-481.1.el9.tuxcare.els1.x86_64.rpm cb764a96e0ee5376a151a4a5113cf7f2c4f9c7cce55903bb47f374b8e4f6c276 perl-open-1.12-481.1.el9.tuxcare.els1.noarch.rpm 3170d3638deaf82c6f034d028d55d147c870486f4ab046d46043d424d3bfe36e perl-overload-1.31-481.1.el9.tuxcare.els1.noarch.rpm a48e729084ea5975bcb68ea6a23c55b4bd6686c790ec46d814fe1b2fc9620aa1 perl-overloading-0.02-481.1.el9.tuxcare.els1.noarch.rpm 75a46afc627dbef09b4ae8b6cc462f9600f9eb3fd8087a49ed727d23a286fd25 perl-ph-5.32.1-481.1.el9.tuxcare.els1.x86_64.rpm 7e9fce2679493b12e481a7907edaa2bcab3fe09cae91b616fe055aaf5237cd60 perl-sigtrap-1.09-481.1.el9.tuxcare.els1.noarch.rpm 6ffa5550e948ee39583d179916128a40fba7ad10e3ce2d2ba30c0320f1f890d9 perl-sort-2.04-481.1.el9.tuxcare.els1.noarch.rpm 04a077eeb6c6b556d97130da100135d91f2d1b01ba0a6987c0a25ed0b552fb0a perl-subs-1.03-481.1.el9.tuxcare.els1.noarch.rpm 60bf7759ae2b5b6c7320abe7aec0a38ba9ddb044dd133185f846bb5148942306 perl-tests-5.32.1-481.1.el9.tuxcare.els1.x86_64.rpm eb8b5bef7a05450d5f3707dceacc32c1fb64a65f880e2f77386fbfbed6565aa2 perl-utils-5.32.1-481.1.el9.tuxcare.els1.noarch.rpm 92bad560e31d5fa997fc688c443f03c78dca835b4c1b80f7f511e05ead1b17f2 perl-vars-1.05-481.1.el9.tuxcare.els1.noarch.rpm 8ddbb24aa16b30d572e5c348833526720c3513678ae27a2243b5af77014ab951 perl-vmsish-1.04-481.1.el9.tuxcare.els1.noarch.rpm 0dbeb21e0c1582530719593d87282e809290a00f346fa4b9cf0ca8150486e9d8 CLSA-2025:1751461369 TuxCare License Agreement 0 - Update to MySQL 8.0.42 - CVEs fixed: CVE-2025-21574 CVE-2025-21577 CVE-2025-21579 CVE-2025-21581 CVE-2025-21584 CVE-2025-21585 CVE-2025-30681 CVE-2025-30682 CVE-2025-30683 CVE-2025-30684 CVE-2025-30688 CVE-2025-30689 CVE-2025-30695 CVE-2025-30703 CVE-2025-30705 CVE-2025-30710 CVE-2025-30715 CVE-2025-30721 CVE-2025-30722 CVE-2025-21575 CVE-2025-30687 CVE-2025-30685 CVE-2025-21580 CVE-2025-30693 CVE-2025-30704 CVE-2025-30696 CVE-2025-30699 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to MySQL 8.0.42 - CVEs fixed: CVE-2025-21574 CVE-2025-21577 CVE-2025-21579 CVE-2025-21581 CVE-2025-21584 CVE-2025-21585 CVE-2025-30681 CVE-2025-30682 CVE-2025-30683 CVE-2025-30684 CVE-2025-30688 CVE-2025-30689 CVE-2025-30695 CVE-2025-30703 CVE-2025-30705 CVE-2025-30710 CVE-2025-30715 CVE-2025-30721 CVE-2025-30722 CVE-2025-21575 CVE-2025-30687 CVE-2025-30685 CVE-2025-21580 CVE-2025-30693 CVE-2025-30704 CVE-2025-30696 CVE-2025-30699

0 tuxcare-almalinux9.2-esu mysql-8.0.42-1.el9_2.tuxcare.els1.x86_64.rpm e1fda98a3671797c76b1ce2ff0f90b468ea45a9786264deebb1fbc61ab99d087 mysql-common-8.0.42-1.el9_2.tuxcare.els1.x86_64.rpm 17b1955be49d00bfc2755c52194e47b51a3cb170dbf95b3575048004d008ef2b mysql-devel-8.0.42-1.el9_2.tuxcare.els1.x86_64.rpm 4c32614404f158f648600c0b515063683ac25a1d95ec0d33e8bc96998299474a mysql-errmsg-8.0.42-1.el9_2.tuxcare.els1.x86_64.rpm e4195d3df38f2a4c69f33fffac7a05ac83e03776f0bc54e9e7d34b5b9b1bf6cc mysql-libs-8.0.42-1.el9_2.tuxcare.els1.x86_64.rpm 8c9c4cf78a29e5643fc5e38de6441a1c0ab6cc57f21f66d312c60da0dcb397b5 mysql-server-8.0.42-1.el9_2.tuxcare.els1.x86_64.rpm bb9c49d74df0486d20bbf240e9b026277ac7f68868e7e067972c92f163d3d000 mysql-test-8.0.42-1.el9_2.tuxcare.els1.x86_64.rpm 3b8f5e4fc920d6b38bec65683fae1c989dead7bb4a0143df9d7422d120967fa1 CLSA-2026:1778573628 TuxCare License Agreement 0 - CVE-2026-27855: use translated username in auth_cache_remove() to prevent OTP authentication replay attack - CVE-2026-27856: use timing-safe credential comparison in doveadm HTTP and TCP authentication paths Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27855: use translated username in auth_cache_remove() to prevent OTP authentication replay attack - CVE-2026-27856: use timing-safe credential comparison in doveadm HTTP and TCP authentication paths

0 tuxcare-almalinux9.2-esu dovecot-2.3.16-8.el9.tuxcare.els5.i686.rpm 61d86d1af5e07bd028316ce7743f9f9ec62467c74d7c07cc0cdb5e6e121551db dovecot-2.3.16-8.el9.tuxcare.els5.x86_64.rpm a90ca46ef0b0a5a0fe4d06f8efea61a18a4ada3f252e3824c063e80f535db3b2 dovecot-devel-2.3.16-8.el9.tuxcare.els5.i686.rpm dcaf0ec40687873becc6b48e430ef6de15f8bc2c4bf1221cc34eb2b7fcd5b6fd dovecot-devel-2.3.16-8.el9.tuxcare.els5.x86_64.rpm 28d3b93d0c5cb4f9777eb9037a0a1c218b876b5c1a32e2ca4c9aac3ee1feb8bb dovecot-mysql-2.3.16-8.el9.tuxcare.els5.x86_64.rpm fa5a01a9233ae1748d70285234e9603542f6321edce2e59094f9f4af4efcedcb dovecot-pgsql-2.3.16-8.el9.tuxcare.els5.x86_64.rpm 2829acad64f133f6cedaa7c05ae9909eab078f0ec046c3088f28c8c5d8f23f60 dovecot-pigeonhole-2.3.16-8.el9.tuxcare.els5.x86_64.rpm b8a04782a4a2e5d22a37ce5b6cff840cc41a0e13a31b9efd5131a7a1ac414cdd CLSA-2026:1778602862 TuxCare License Agreement 0 - CVE-2022-2175: fix invalid memory access in cmdline_insert_reg() when using an expression on the command line; save/restore new_cmdpos around the expression evaluation (ex_getln.c, upstream patch 8.2.5148; hunk 3 context adjusted for 8.2.2637) - CVE-2022-3256: fix use-after-free in movemark() when an autocommand changes the mark; make a local copy of the fmark before potentially triggering buffer autocommands (mark.c, upstream patch 9.0.0530) - CVE-2022-4292: fix use-after-free in did_set_spelllang() when a SpellFileMissing autocommand uses :bwipe to close the current window; also bail out when the window is no longer valid (spell.c, upstream patch 9.0.0882) - CVE-2022-3324: fix negative-index buffer access caused by negative window width; clamp next_curwin_size in win_equal_rec() and clamp wp->w_width in win_new_width() (window.c, upstream patch 9.0.0598) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2175: fix invalid memory access in cmdline_insert_reg() when using an expression on the command line; save/restore new_cmdpos around the expression evaluation (ex_getln.c, upstream patch 8.2.5148; hunk 3 context adjusted for 8.2.2637) - CVE-2022-3256: fix use-after-free in movemark() when an autocommand changes the mark; make a local copy of the fmark before potentially triggering buffer autocommands (mark.c, upstream patch 9.0.0530) - CVE-2022-4292: fix use-after-free in did_set_spelllang() when a SpellFileMissing autocommand uses :bwipe to close the current window; also bail out when the window is no longer valid (spell.c, upstream patch 9.0.0882) - CVE-2022-3324: fix negative-index buffer access caused by negative window width; clamp next_curwin_size in win_equal_rec() and clamp wp->w_width in win_new_width() (window.c, upstream patch 9.0.0598)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els21.x86_64.rpm 42ed903b1b8ad31d3802cf87e70701529222f1fcc7eb5b4eea187b8157f3592f vim-common-8.2.2637-22.el9_2.1.tuxcare.els21.x86_64.rpm b09f737883b39c041746f1eddc79a1bb039688f6823cdb115ee0982937338604 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els21.x86_64.rpm 22cc06abb1d1407181f20c762a93cae1bf1125e1c99b4635e51540a01c6f9826 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els21.noarch.rpm 97f1036e13818a81dae86bef128a8875f41e1e5373611f457450ad74ff0eecef vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els21.x86_64.rpm a3ea8fc1ac9b757604f4e4913f5de8b7c3407ed6ea255bbc38298cd797d96f5c CLSA-2026:1778611387 TuxCare License Agreement 0 - CVE-2022-2257: fix out-of-bounds read in str2special() when advancing past the trailing NUL of a menu item with only a modifier (message.c, upstream patch 9.0.0009) - CVE-2022-2182: fix heap buffer overflow in parse_cmd_address() when address line 0 is used with the ";" separator (":0;/PATTERN/"); clamp cursor column via check_cursor_col() for line 0 (ex_docmd.c, upstream patch 8.2.5150) - CVE-2022-2849: return zero byte length for NUL in latin_ptr2len() and dbcs_ptr2len() so iterating past the end of a null string cannot dereference an invalid address (mbyte.c, upstream patch 9.0.0220; minimal form — only the functional changes backported) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2257: fix out-of-bounds read in str2special() when advancing past the trailing NUL of a menu item with only a modifier (message.c, upstream patch 9.0.0009) - CVE-2022-2182: fix heap buffer overflow in parse_cmd_address() when address line 0 is used with the ";" separator (":0;/PATTERN/"); clamp cursor column via check_cursor_col() for line 0 (ex_docmd.c, upstream patch 8.2.5150) - CVE-2022-2849: return zero byte length for NUL in latin_ptr2len() and dbcs_ptr2len() so iterating past the end of a null string cannot dereference an invalid address (mbyte.c, upstream patch 9.0.0220; minimal form — only the functional changes backported)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els26.x86_64.rpm f8ae615c735b70e9d435524fabf04d5028840bab79128007178cf8b05d96a739 vim-common-8.2.2637-22.el9_2.1.tuxcare.els26.x86_64.rpm 2f2a876da98413617387bf42a62010348b6905467c825b9621351e55f6926867 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els26.x86_64.rpm dfdbcaa2bb224d78b2db8d5ab672f22b8dd2fb0a08c67c573ae6348fd49944b1 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els26.noarch.rpm a5ca97c0ca3c32290066b2d7ab486456c2459b160d00d9beb1abc354fee96a8b vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els26.x86_64.rpm fe981eef97b24cd08c9831eb3c8f7ab4494e976f823a56b6cdce43fe7faa152e CLSA-2026:1778612609 TuxCare License Agreement 0 - CVE-2026-24072: use AP_EXPR_FLAG_RESTRICTED in htaccess - CVE-2026-29169: mod_dav_lock: use the right dav_lock_discovery - CVE-2026-33006: mod_auth_digest: use apr_crypto_equals - CVE-2026-33007: mod_authn_socache: validate URL earlier - CVE-2026-33523: scan outgoing status line for newlines and controls - CVE-2026-33857: fix length checks in AJP msg_get functions - CVE-2026-34032: fix ajp_msg_get_string buffer checks - CVE-2026-34059: fix ajp_parse_data message len check Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-24072: use AP_EXPR_FLAG_RESTRICTED in htaccess - CVE-2026-29169: mod_dav_lock: use the right dav_lock_discovery - CVE-2026-33006: mod_auth_digest: use apr_crypto_equals - CVE-2026-33007: mod_authn_socache: validate URL earlier - CVE-2026-33523: scan outgoing status line for newlines and controls - CVE-2026-33857: fix length checks in AJP msg_get functions - CVE-2026-34032: fix ajp_msg_get_string buffer checks - CVE-2026-34059: fix ajp_parse_data message len check

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm e6056b34db4cc15caf80d7a56bb0fbc5fd665d97044ded3268f988a2995cf558 httpd-core-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm fef30a6534dbce227ca16e93251743484819e469fd76277c21a7599e1a17e828 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm 2012274115ca339d623a51dd0d0e93326135e41db1e4e42cd1074c72527675dd httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els12.noarch.rpm c5f15820f0704983d0cc5223dff49a9898f362b13abaa877b5b08cabb310523d httpd-manual-2.4.53-11.el9_2.5.tuxcare.els12.noarch.rpm 1d5067703e96d6d617024cb1ff912a0f51a48d92712ee2e0d5edc277320930fb httpd-tools-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm bc5d0301ef0521dfd02b0147afbb632d99978819afe5d1f072e8ccd19518353b mod_ldap-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm 6332844a301f26e934fb42ff050c16d22699ad2cf59c445497c85fb40825e108 mod_lua-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm edf6964784829b52b75831963ada65f9f5de535ac1c3ce1e1d04d807877b3bfc mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm 57e2b739863ebe13ae50c6847d3e64c0c4a36ff58796f5d79a0a538bd06031dd mod_session-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm 517bbf8f80d07899d26d460d9c946b7f6d0594c42e375d8271629ce58d90da87 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els12.x86_64.rpm dc0f80b74b45d9aacfa6a2ad4b16374898b9895a412c11812fb72a81d5cb9aa5 CLSA-2026:1778613560 TuxCare License Agreement 0 - CVE-2025-15282: reject control characters in data: URL mediatypes - CVE-2025-11468: preserve parens when folding email comments to prevent header injection Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15282: reject control characters in data: URL mediatypes - CVE-2025-11468: preserve parens when folding email comments to prevent header injection

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els24.i686.rpm 2c4719ae0545d4ba825343bf2eb6c4a96086880b31b024f6b9d9130b23bbb123 python3.11-3.11.2-2.el9_2.2.tuxcare.els24.x86_64.rpm 026338d15f6216d25f3556a7e02c025c5f745fad264092d1cdd04abbef6b9f1a python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els24.i686.rpm 628af1422a8e77d6bedab8a6ce9aa89b164fbce45099c3467e7a3663156a2a0d python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els24.x86_64.rpm 0b278e51c0ed2ea4b414c62b25a1989b370b70dba14c8a691af1bbd97e47d9ea python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els24.i686.rpm 8413c874d426f9e8a83e29c4d68a36479089f6df3f496fe711d127b55ff33fc1 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els24.x86_64.rpm ed9414c7076753385ca4a1230d64fcaa38fcfbeee64149c1a9f6baacfee0c6d2 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els24.i686.rpm 14c8e4692667410e94491bd333209c6da18468e8ce35bba7701a7b4d0f78828e python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els24.x86_64.rpm 06df2f46b081a38c6e9b2fe12f48725136169333bb44a28af06ddf12b2ecf23b python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els24.i686.rpm aa014d80c4885e1cb965f3f590482fa5ce625a1b0463171597481aa23ad0d7fc python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els24.x86_64.rpm 77eb6c572ff8d1cc046fba6be376eaa9e660c51c8fb1c06abe459e271d4285e2 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els24.i686.rpm f72a1ed488d0759506d0aaa7318eae459dcb8dec41b7a7151a82454d802c3d37 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els24.x86_64.rpm c114e43a79060c0f038a1f682843e9091b0795b4996bd9b276fc3eb26fd1cbdc python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els24.i686.rpm 5bd1494fe45cd4ceeb23f79ad7f2e1ddc06fb713d4ee3ffedf80b3b1ef0e8f31 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els24.x86_64.rpm fd416a015d1f4c170769d3635a51480442707c038fdd81fcce4858ee924da5f4 CLSA-2026:1778617167 TuxCare License Agreement 0 - CVE-2026-33554: fix buffer overflows in ipmi-oem response handling for dell get-last-post-code, supermicro extra-firmware-info, and wistron read-proprietary-string subcommands Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33554: fix buffer overflows in ipmi-oem response handling for dell get-last-post-code, supermicro extra-firmware-info, and wistron read-proprietary-string subcommands

0 tuxcare-almalinux9.2-esu freeipmi-1.6.9-1.el9.tuxcare.els1.i686.rpm 71b0b7ed8b53b34ab0dd200a7a54b6c658c65c7132ca6a6a5713b780f5375725 freeipmi-1.6.9-1.el9.tuxcare.els1.x86_64.rpm a5bf9c80b0bd5773f27d37afd08a12722fa2816f4f998c75f0cf09a92b5c0bdd freeipmi-bmc-watchdog-1.6.9-1.el9.tuxcare.els1.x86_64.rpm 2efe2e7a0cb6a2572fec88d4b8e9dd86302d14833435f03df01de2b4d3181da4 freeipmi-devel-1.6.9-1.el9.tuxcare.els1.i686.rpm 0811fdb94a069a2fe4829d5973498012ceacf13b181d2f59255577d339e59adb freeipmi-devel-1.6.9-1.el9.tuxcare.els1.x86_64.rpm a52755282b586ce55faaa739d6f4d912bd044788bdec2443b258e7905e763157 freeipmi-ipmidetectd-1.6.9-1.el9.tuxcare.els1.x86_64.rpm 4e0771dd04cf5ae08ef5757405d663afa31ae2a03160b4e4e8ad73dbcdf5790b freeipmi-ipmiseld-1.6.9-1.el9.tuxcare.els1.x86_64.rpm 09feb736ead613cd142b30fbca1a97e281cfc09004a1b18875e2d2b055258751 CLSA-2026:1778660100 TuxCare License Agreement 0 - CVE-2022-48063: fix excessive memory allocation in load_specific_debug_section for corrupt ELF Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-48063: fix excessive memory allocation in load_specific_debug_section for corrupt ELF

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els8.i686.rpm fbd9092c968f27c26fec79b546e495e35595a1f9438a9aeb8219cb3a2a621fba binutils-2.35.2-37.el9.tuxcare.els8.x86_64.rpm 750bee689d7ab1f13e0b15bb498e130cdbb644c4ce2eee725636933d72de4bb9 binutils-devel-2.35.2-37.el9.tuxcare.els8.i686.rpm c626fc70313ebcb9fa9b1c0a22e9a40836ab9d76d64bac596840a84795940773 binutils-devel-2.35.2-37.el9.tuxcare.els8.x86_64.rpm 46b48b1053b61ba9bdc50ce8a0d2b0f096b0f5cacdcbaad45cbf4298ec40361d binutils-gold-2.35.2-37.el9.tuxcare.els8.x86_64.rpm a2f8f6a2ca7eddd2d7e0fbfa44643d655879c5960016e9c9dd3da031db4ca324 cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els8.x86_64.rpm a5f8a1f7c619368066d73b5ea8f05f46a6064b92ecfb926817afb48569fb6250 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els8.x86_64.rpm 74ecd02521cfaaff7127b5138c55cdfb0fbacc09811904be6da35f7f761ed76b cross-binutils-s390x-2.35.2-37.el9.tuxcare.els8.x86_64.rpm 54ecd07420957dff6bde71581978e4cb11095c045d63e3ee504f6f4a098ade93 CLSA-2026:1778661102 TuxCare License Agreement 0 - CVE-2023-28756: fix ReDoS in Time.rfc2822 by linearizing the RFC2822 parser regex in lib/time.rb to prevent quadratic backtracking on crafted invalid input Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-28756: fix ReDoS in Time.rfc2822 by linearizing the RFC2822 parser regex in lib/time.rb to prevent quadratic backtracking on crafted invalid input

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els12.i686.rpm cb3e502bd08b30b37cec81fdad9f429f11fa599a20ea1645553f3610ac479aec ruby-3.0.4-160.el9_0.tuxcare.els12.x86_64.rpm 22cdb0e7432da185808225d8eef8858f1f65af5bc19321dbc67a71997543cd09 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els12.noarch.rpm 3f7d97ca9acc4d9b94d1d776e60a0b337d2594026f06237665507bf4f6469ab2 ruby-devel-3.0.4-160.el9_0.tuxcare.els12.i686.rpm 43014f8da2e394eebd64c570561a6f00b6d410f766ea30bb75578dd7b88e4f40 ruby-devel-3.0.4-160.el9_0.tuxcare.els12.x86_64.rpm d174d0c610196fec20f317b951a9ff4c6b98b902dda50e27fb4c9a4005a634e7 ruby-doc-3.0.4-160.el9_0.tuxcare.els12.noarch.rpm ad899d538748a9a7dad608d247007c7ee702f6ebe843496742e419de7ee2572f ruby-libs-3.0.4-160.el9_0.tuxcare.els12.i686.rpm 8c8dae10663b4ba67a69857064cbe411ec7ff043696db642d4702b0713e4b82b ruby-libs-3.0.4-160.el9_0.tuxcare.els12.x86_64.rpm 11d18f1dacbea5e7372996ea7390df98d1a8efba046e6a6a1b7db89863c9ae26 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els12.i686.rpm 562e3d0f8fc3cc5e017fdefd0ee220711e205a169b0f53ea830809ac0e9cfbbf rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els12.x86_64.rpm 0fc3dc10b4caed24bdb51fdf5189e056a666c841e82f9d1e0a4ba9e8cddceb17 rubygem-bundler-2.2.33-160.el9_0.tuxcare.els12.noarch.rpm 2d2b67325f97c55236d363fc8c2ee3bee8e648b3e506bee090935668d0096f1e rubygem-io-console-0.5.7-160.el9_0.tuxcare.els12.i686.rpm c5121b1f8f8804aec6502a88cad3c1b63a51652fcdcd4bee7d2ae082f5f133c4 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els12.x86_64.rpm e3c38a9a8a1463bf2b6b18395c488dbd94a6df4f25735abb82b80f68b6df82ac rubygem-irb-1.3.5-160.el9_0.tuxcare.els12.noarch.rpm fed2214d5eb5f1f125f58f3381d4bb9b91b98efa6fae99142687270626c25795 rubygem-json-2.5.1-160.el9_0.tuxcare.els12.i686.rpm 93b62d65bd692a35ab3121b50d669f2154c1be4580a63d4a2c1335df54651430 rubygem-json-2.5.1-160.el9_0.tuxcare.els12.x86_64.rpm 442f84144c4eef739f4d5779c417442c429bc5d9d8b8909db552fada0eab3146 rubygem-minitest-5.14.2-160.el9_0.tuxcare.els12.noarch.rpm f9384e97b920f8d8e100ff7c8eb5e5aa8af76eeb1083965be867e843f8c08cf1 rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els12.noarch.rpm 97acc24874bd9a8d1f5735d1a73b58237fcfe6d05055705bf2b6145824c9ec04 rubygem-psych-3.3.2-160.el9_0.tuxcare.els12.i686.rpm 0cf8b714bb8da9a7795af7e51da1f377557b281b2fc19368457b7f039e21633c rubygem-psych-3.3.2-160.el9_0.tuxcare.els12.x86_64.rpm 2a42297144337cba517de0f403ff6d96cc3d1f8e55a6d03926297f1fa3062bcc rubygem-rake-13.0.3-160.el9_0.tuxcare.els12.noarch.rpm e3cc606de67e42722025efa924806cc7e45900c424794bb0557965502f468ee2 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els12.noarch.rpm 21a6b1310e2ba772c471da9f50f12b58fd76ad9fcdb04b575ffd23d593776e8c rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els12.noarch.rpm 63ec83936bcaea5db87a22090e86fb377a5c923e412cdf4efa3d412f4bbc3fb5 rubygem-rexml-3.3.3-160.el9_0.tuxcare.els12.noarch.rpm 87dc52ee2685365976b992220259e7af348dc62303d2f974eb37039e30b34955 rubygem-rss-0.2.9-160.el9_0.tuxcare.els12.noarch.rpm a5d27a1e1acdba02b7b58f927dd8e6d7a8d4e6bdf19b3b93bf6f10f75d0f4b46 rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els12.noarch.rpm b3f1792240d3ab5eeb4c0752526c913806e6df381373514d58f106a68fedb773 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els12.noarch.rpm 3b2341e80440954366fcd71afbb8c34167a56b520b7e9999174067f1300c9b44 rubygems-3.2.33-160.el9_0.tuxcare.els12.noarch.rpm 915beb56abbbc70b454a892db0ca6fc7830ae251eb2c1f46dcc5b9795daf4a7d rubygems-devel-3.2.33-160.el9_0.tuxcare.els12.noarch.rpm 88ec86f3f1dbc17c800fa8b3f85a239fb731218eadfd2142c66cd021a38fea7f CLSA-2026:1778661840 TuxCare License Agreement 0 - CVE-2024-24786: fix infinite loop in vendored google.golang.org/protobuf protojson.Unmarshal on malformed JSON by handling EOF in skipJSONValue and rejecting ObjectClose after a Name token in Decoder.Read Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-24786: fix infinite loop in vendored google.golang.org/protobuf protojson.Unmarshal on malformed JSON by handling EOF in skipJSONValue and rejecting ObjectClose after a Name token in Decoder.Read

0 tuxcare-almalinux9.2-esu skopeo-1.11.2-0.1.el9.tuxcare.els5.x86_64.rpm f52edc49556c9d4715c66383d89b4b2677838ec09826d72f85ab0eadcb286837 skopeo-tests-1.11.2-0.1.el9.tuxcare.els5.x86_64.rpm 00af9d09192b3c755cd36f3894e61e8b594ddfe45c7d5a6eec815acc28a34fbd CLSA-2026:1778662651 TuxCare License Agreement 0 - CVE-2026-4878: cap_set_file() TOCTOU race via path-based xattr operations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4878: cap_set_file() TOCTOU race via path-based xattr operations

0 tuxcare-almalinux9.2-esu libcap-2.48-9.el9_2.tuxcare.els1.i686.rpm 7271c76faa58a3273563b6c8e8b1247db216a84d97395a7f81ca3ab57cda14b6 libcap-2.48-9.el9_2.tuxcare.els1.x86_64.rpm 634274b6179d42c95ce07a311fde4fee2709b27cc94c4caa1fc7f8eeb0a2f8cd libcap-devel-2.48-9.el9_2.tuxcare.els1.i686.rpm 3f65f4cadc0f5e7e4e6c6e172382c50296917bce97bc3e4c4b60d19b2427e8d3 libcap-devel-2.48-9.el9_2.tuxcare.els1.x86_64.rpm 52cf2b2a1f3745562dc01af4d71fff3748a7d79cb6765ac47330d98d121cbd6f libcap-static-2.48-9.el9_2.tuxcare.els1.x86_64.rpm ae5d9cfc6abc5d3d7bdf29967b29ea9cdf11d9ab3af479c9ba5e27b3ad4bd821 CLSA-2025:1762538558 TuxCare License Agreement 0 - rebuild with newer golang to fix multiple security vulnerabilities: - CVE-2023-24534: fix HTTP/2 rapid reset attack leading to denial of service - CVE-2023-29400: fix HTTP/2 frame processing panic leading to denial of service - CVE-2022-41725: fix HTTP/2 server connection handling causing premature closure - CVE-2022-41724: fix HTTP/2 server connection misuse causing resource exhaustion - CVE-2023-24538: fix HTTP/2 request handling causing denial of service - CVE-2023-39322: fix HTTP/2 connection resource exhaustion and denial of service - CVE-2023-24539: fix HTTP/2 request handling causing excessive memory consumption - CVE-2023-39321: fix HTTP/2 frame processing causing panic and denial of service - CVE-2024-24788: fix HTTP/2 connection handling causing denial of service - CVE-2022-41723: fix HTTP/2 server connection handling causing resource exhaustion - CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability - CVE-2024-34156: fix HTTP/2 connection resource exhaustion and denial of service - CVE-2023-24536: fix HTTP/2 request handling causing denial of service Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebuild with newer golang to fix multiple security vulnerabilities: - CVE-2023-24534: fix HTTP/2 rapid reset attack leading to denial of service - CVE-2023-29400: fix HTTP/2 frame processing panic leading to denial of service - CVE-2022-41725: fix HTTP/2 server connection handling causing premature closure - CVE-2022-41724: fix HTTP/2 server connection misuse causing resource exhaustion - CVE-2023-24538: fix HTTP/2 request handling causing denial of service - CVE-2023-39322: fix HTTP/2 connection resource exhaustion and denial of service - CVE-2023-24539: fix HTTP/2 request handling causing excessive memory consumption - CVE-2023-39321: fix HTTP/2 frame processing causing panic and denial of service - CVE-2024-24788: fix HTTP/2 connection handling causing denial of service - CVE-2022-41723: fix HTTP/2 server connection handling causing resource exhaustion - CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability - CVE-2024-34156: fix HTTP/2 connection resource exhaustion and denial of service - CVE-2023-24536: fix HTTP/2 request handling causing denial of service

0 tuxcare-almalinux9.2-esu containernetworking-plugins-1.2.0-1.el9.tuxcare.els2.x86_64.rpm e78995b99ec02f9778042da880d1c749ab1f037d2b45c7b4ac324e689e992494 CLSA-2026:1778749215 TuxCare License Agreement 0 - CVE-2024-29508: heap pointer disclosure in pdf_base_font_alloc via synthesized BaseFont name - CVE-2025-48708: argument sanitisation missed '#' separator, leaking -sUserPassword#secret values into output PDF metadata Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-29508: heap pointer disclosure in pdf_base_font_alloc via synthesized BaseFont name - CVE-2025-48708: argument sanitisation missed '#' separator, leaking -sUserPassword#secret values into output PDF metadata

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els11.i686.rpm 5ec895085fc20d31c6615cb2dcab9154326cd2574c2b5c571467a5edf21921f1 ghostscript-9.54.0-11.el9_2.tuxcare.els11.x86_64.rpm b33475274f6f5ddbd981d1cc8ef6a85e295a375d688656a414830d3ad68bb70b ghostscript-doc-9.54.0-11.el9_2.tuxcare.els11.noarch.rpm 36f1e030b52a71c7d7036155e68f6a59bbd0e8f7025620e656656625188aa4fb ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els11.x86_64.rpm 17451b211fd8d067134d514e20c20a088471c7f860ea1cb8102732da451e14f2 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els11.x86_64.rpm 3aa0335d2161c603ec7299991f85294f355f39ba962e08e22fffb6c84a0fa200 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els11.i686.rpm fa8eadd04b566c0e4c76d327bd97cc7cfd94fc9b81eaf95800554b0d3bcf3f91 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els11.x86_64.rpm b387edf0410151c1f064117f8831e678b59315b3187f83d1233424d74ad19100 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els11.i686.rpm a854feeb7d00032632df728e1a193014b14eb267c3841c957b2f184d1ea79fd5 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els11.x86_64.rpm dcd8340bcda926cb2008a601db2a02d63450c9aa9e573c78a8b8e3c1ea3d3d86 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els11.x86_64.rpm bbd20594fcea0090e316f8c6b8055c0392ace3e5853c5fbd734bf33a7473f4a5 libgs-9.54.0-11.el9_2.tuxcare.els11.i686.rpm 86308e3058df7ba22c37bb3e6067f191e91c99fecf9623f255075bcdf5af6fd5 libgs-9.54.0-11.el9_2.tuxcare.els11.x86_64.rpm 4ffcf53d574e2b3ceef47ced6e8f109fb9cd00d6f33cbf8350e881448d1ca0f5 libgs-devel-9.54.0-11.el9_2.tuxcare.els11.i686.rpm 6b65ea42679d73de7f83dafc25684535435baf9bb43406c28f460a8b468d271b libgs-devel-9.54.0-11.el9_2.tuxcare.els11.x86_64.rpm c79406c4be74c7b69ef88b44bd520d1326c7ce05f6922417c76a38e6f426f75d CLSA-2026:1777365744 TuxCare License Agreement 0 - Fix CVE-2026-5121: heap buffer overflow in ISO9660 reader via invalid pz_log2_bs value in Rock Ridge ZF extension Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2026-5121: heap buffer overflow in ISO9660 reader via invalid pz_log2_bs value in Rock Ridge ZF extension

0 tuxcare-almalinux9.2-esu bsdcat-3.5.3-6.el9_2.tuxcare.els6.x86_64.rpm dadda8cf85d706cc08b3b6f577310ee66729077940404183ab0c62e610adf566 bsdcpio-3.5.3-6.el9_2.tuxcare.els6.x86_64.rpm 76b9d8411c5c0bcfb3f68039d0476f88c3778120e47f9073c806b934232a9e7f bsdtar-3.5.3-6.el9_2.tuxcare.els6.x86_64.rpm c10147295a9a4f0d6fd5fd0a8388c4c94badeb9298314e25679d90796b905f35 libarchive-3.5.3-6.el9_2.tuxcare.els6.i686.rpm dd45685c5d3104107f0f9992922749de7502cc32dc3f8dc2f129f3fe18518348 libarchive-3.5.3-6.el9_2.tuxcare.els6.x86_64.rpm f1565629d9200642e73a293d1ba04bd2c05867c90af1b6cfa44ceb4f5037daed libarchive-devel-3.5.3-6.el9_2.tuxcare.els6.i686.rpm 9a1e527744666a24765b9547a75e6d028b82e73b134c1726040bf74a103602ae libarchive-devel-3.5.3-6.el9_2.tuxcare.els6.x86_64.rpm db7284de24ae31b30f398cad1f706c22868a7d393e41ec34e2c861ad483af5b3 CLSA-2026:1778762233 TuxCare License Agreement 0 - CVE-2026-33845: fix integer underflow in DTLS handshake reassembly that allowed a remote heap overrun via crafted zero-length fragments Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33845: fix integer underflow in DTLS handshake reassembly that allowed a remote heap overrun via crafted zero-length fragments

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.4.els3.i686.rpm f66db04f9628005cb98d641683408ca6add14e96a1d20b3a4408792e966e783e gnutls-3.7.6-23.el9_2.tuxcare.4.els3.x86_64.rpm e6879d2832870eec4ac26fc3ae39eead0f57d6596ae330107c2a3a24323f16f2 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els3.i686.rpm b2772e301dba2e2fb01d5365468fc473a56a81eb717d656e96e590825436ddaa gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els3.x86_64.rpm fa8250b388bccdc9b1905718b337b8e11adfafcf85b2fb0e53aa4be4aa2eb776 gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els3.i686.rpm de5b48b150b2f29bd504eb6ccceff28943a4c032cb7559e62f2035b930a0a1dc gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els3.x86_64.rpm 190d9a1706ca773eb48d2386c117456f8a885a4cc64bafd8394dbd421e29b48e gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els3.i686.rpm 39a9d0fd3f6e55b45bd054f2697c45c58b2bd36031c5e5c75d39f7416f308792 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els3.x86_64.rpm 26067eb347cd037aca61d617a66d7d2904b878697ce6193e9642f69b3fa202e9 gnutls-utils-3.7.6-23.el9_2.tuxcare.4.els3.x86_64.rpm 434127f8e420a9226e48651d441173f73fd2f20a527172b1b58705076ee3b36d CLSA-2026:1778756042 TuxCare License Agreement 0 - CVE-2026-41142: fix integer overflow in ImageChannel::resize() pixel count computation leading to heap out-of-bounds write via the OpenEXRUtil public API Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41142: fix integer overflow in ImageChannel::resize() pixel count computation leading to heap out-of-bounds write via the OpenEXRUtil public API

0 tuxcare-almalinux9.2-esu openexr-3.1.1-3.el9.tuxcare.els6.x86_64.rpm 910bb1e1eecaa6791c131a78866c7c30e5d4c9a42004cbcd9ebc50b13c48b5c0 openexr-devel-3.1.1-3.el9.tuxcare.els6.i686.rpm 01f698de9e923ca41d06b4f04cbbeb8c26139fddcd66fb598f600110e7ea4715 openexr-devel-3.1.1-3.el9.tuxcare.els6.x86_64.rpm 46267d8d0a0cfc2b5626258042a5dfad6b4a4898a66e2c02f347f6ef60fa0fd3 openexr-libs-3.1.1-3.el9.tuxcare.els6.i686.rpm 0ba8ec4d8eb594c120b3db7855f00c8c92de331aaafbd9d79aebaec635a09397 openexr-libs-3.1.1-3.el9.tuxcare.els6.x86_64.rpm 174a46e32462f173576277471e65f7a719d813e565995b7ecd10d4bb6b3ffb10 CLSA-2026:1778769697 TuxCare License Agreement 0 - net: skbuff: propagate shared-frag marker through pskb_copy() - HID: ignore non-functional sensor in HP 5MP Camera {CVE-2025-21992} - net: fix crash when config small gso_max_size/gso_ipv4_max_size {CVE-2024-50258} - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() {CVE-2024-53042} - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - serial: imx: Add missing .thaw_noirq hook {CVE-2022-49841} - module: ensure that kobject_put() is safe for module type kobjects {CVE-2025-37995} - udf: Fix uninitialized array access for some pathnames {CVE-2023-53165} - ACPICA: Avoid undefined behavior: applying zero offset to null pointer {CVE-2023-53182} - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381} - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data {CVE-2026-23370} - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382} - icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398} - net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379} - ice: Fix memory leak in ice_set_ringparam() {CVE-2026-23389} - wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367} - HID: asus: avoid memory leak in asus_report_fixup() {CVE-2026-31524} - xprtrdma: treat all calls not a bcall when bc_serv is NULL {CVE-2022-49321} - mm/mempolicy: fix uninit-value in mpol_rebind_policy() {CVE-2022-49567} - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails {CVE-2022-49549} - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). {CVE-2022-49344} - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data {CVE-2022-50536} - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() {CVE-2023-53578} - wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() {CVE-2023-53570} - mptcp: fix race on unaccepted mptcp sockets {CVE-2022-49669} - ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318} - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() {CVE-2026-23315} - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check {CVE-2026-23447} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - apparmor: Fix double free of ns_name in aa_replace_profiles() {CVE-2026-23408} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - i2c: piix4: Fix a memory leak in the EFCH MMIO support {CVE-2022-49653} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- net: skbuff: propagate shared-frag marker through pskb_copy() - HID: ignore non-functional sensor in HP 5MP Camera {CVE-2025-21992} - net: fix crash when config small gso_max_size/gso_ipv4_max_size {CVE-2024-50258} - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() {CVE-2024-53042} - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - serial: imx: Add missing .thaw_noirq hook {CVE-2022-49841} - module: ensure that kobject_put() is safe for module type kobjects {CVE-2025-37995} - udf: Fix uninitialized array access for some pathnames {CVE-2023-53165} - ACPICA: Avoid undefined behavior: applying zero offset to null pointer {CVE-2023-53182} - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381} - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data {CVE-2026-23370} - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382} - icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398} - net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379} - ice: Fix memory leak in ice_set_ringparam() {CVE-2026-23389} - wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367} - HID: asus: avoid memory leak in asus_report_fixup() {CVE-2026-31524} - xprtrdma: treat all calls not a bcall when bc_serv is NULL {CVE-2022-49321} - mm/mempolicy: fix uninit-value in mpol_rebind_policy() {CVE-2022-49567} - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails {CVE-2022-49549} - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). {CVE-2022-49344} - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data {CVE-2022-50536} - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() {CVE-2023-53578} - wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() {CVE-2023-53570} - mptcp: fix race on unaccepted mptcp sockets {CVE-2022-49669} - ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318} - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() {CVE-2026-23315} - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check {CVE-2026-23447} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - apparmor: Fix double free of ns_name in aa_replace_profiles() {CVE-2026-23408} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - i2c: piix4: Fix a memory leak in the EFCH MMIO support {CVE-2022-49653}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 5bb7378f25a3e99223b5fb793790034e5705cb4e63efac8ef1126210f0253ab0 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 36c96a382aec8f24239930fe5028eebb251c2ee79d2686408ac99020f85434ac kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els32.noarch.rpm 110ce45b6b9a1c7d1f7d5f1157e52d1342d70acf50f2b3fbbfec186478598a80 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm bae2246a17510eb358425e654dcdef70e62fb5e3659a54a281b29a0a1697c10d kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm f2c4cac96d62ae3851e0e5f2d81da61c88994941c7403a5ad8a8e5adf1980e0d kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 4bf3400abb8282b7c5c7f06c9f501325f8a5ae5da897c5891f57b07220832268 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 96c5b4430837c387707feb22b6ccd6247b5d9343e399cbbedef608f6c0cec50a kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm bed88ddbec49aa013bc59eaa2d07dc331d5b00395a55035cddf937e9cea0e48d kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm e17144567f06d585fd6445d8d50815ab797735c33292569fb8598eb30227c089 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm f648d7385857ca42c2c328664df3db7cb5e0d10875485ecbd6cd89c65e360c47 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 1b7c2855867eab20f671fc5e616d9018669b91b0914abd8d927de7a8bc8e74ff kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 8e977f6b9c6f794ee0dce819f5f085bd7ed54dc5e87ba9dbe6363b7158f00ead kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 2f2839ada8bae4206bc94e482916a8c5f76eef4d2a243b231c8fac96bfbc21c1 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 861d9f23dcb92d3b039b98465d1bc053079e2e01f8ad38f4aa1bb18c6c5d573e kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm b7954d529aef89953a73aaad50f176afe4ae8d48d3bddd0ebc55677b23092340 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 9fc6e596ba1b43fae8c3f15383052439a36b47db387e3973ddc2fbba1956b642 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 6e7863b49ec79be212c082c6b28033f0f78bdeb805296921eebd05abfef14c8a kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els32.noarch.rpm 09ba7fff16e48244f7954bc85a7f59662fd15007468e3fb2e4a46e5e085495e2 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm b9f05faa247c250187d8636199256152629c5492e2785d83440b922bbcc9ebb2 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 9808bcffc5a7fe5a9ad66ed932e9bac91b4afc8091910e93bf8e1910cb433963 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 8bcdd08057ddbe4387e16ba7f7fa33a42810646c8b1e34534531f78c0da6d674 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 41caa60b47ea54bab5328170a0ef2b40e7d9515700bcfabb8a5cf7d970808b60 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 83a102426557b628c03e5d419ebe4f98d1bc9593f6b3db4e9b259350bec52dc2 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 58f9095a1e5dd891f1cbe57bb3ab544eb7fbf75ba537cced7058b7532f292f3a kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 5efdbb05bdf401835ea7638ab86720accfcec99561a2fe32f6a36cc58b201a14 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm e71a58d4b6b230d86edf8f365173cbee61ef92b99fc8717c3205f14bbf0a26d4 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 337cb98b7ddc925897c18a02aa5a64ca6f2de4f36108faefecf51c3673e51672 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 3862cb52e8656ed3c93f6a245cbb4b0628401162e1b3b4e917a8794310c10d84 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 0db527adb2e4047f9274ef671dcd333d9529e88dfaedacb146cb62995083fd04 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 148f76e0ba4b848799c170e491ac11c358a0ea71dc87c1eb4d54d434f1ada4fc libbpf-1.0.0-2.el9_2.tuxcare.7.els32.i686.rpm a4200292a20f0034b339f309451b32b784af82fde05731c84a10df5f8df26379 libbpf-1.0.0-2.el9_2.tuxcare.7.els32.x86_64.rpm b13f4f1ba7bb1938d48f2ca90a9642158be457eda970ed40d92a8a3aad2480dc libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els32.i686.rpm 06bd37bf96d4e4adc0a9fe962ea15880c8875b9c5d93bae9935e3b1122453c34 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els32.x86_64.rpm bc88630c530e92ce7c862e990a69f0e16d8000f3da60cfe44635fa4407aacf0f libbpf-static-1.0.0-2.el9_2.tuxcare.7.els32.i686.rpm 36b405b98941e855dc0e60324b300fd2cfb1970b5b40a1a11e3f3a57d9c81272 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els32.x86_64.rpm db3daf70aee72fbbd9dfaa5da918989925326717947b17ee56495c12fd67631c perf-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 79399090d4178794727637a9bad2a726799ac697a2e422f20054e7d07d638f5c python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 275977211291e0209269188aa188166b267e1144aaaa4151d535fca78b97346e rtla-5.14.0-284.1101.el9_2.tuxcare.7.els32.x86_64.rpm 7754f036c672c2a7a5ccc6a2713b70b0024e6eca66c56850be56bbcbb1ffcebb CLSA-2026:1778766810 TuxCare License Agreement 0 - CVE-2023-0922: set default ldap client sasl wrapping to seal - Refresh samba-pubkey_AA99442FB680B620.gpg (expiry extended to 2027-12-12) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-0922: set default ldap client sasl wrapping to seal - Refresh samba-pubkey_AA99442FB680B620.gpg (expiry extended to 2027-12-12)

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 1e9344c9b1dd60a4c849ee6e2a14bbabca4fb56781d075cd8bbdf3d209361e9d libnetapi-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm d7b33bfdba2467e5c41b4a0620326fa17e43a3926c453cfd4048b86471debe69 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 1f78b4ea8dec6662ed348ce58ed53294884644e3fabae84792e6a965945d55e7 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm b4de1cc54944ce700a8f28de8eb1d48cedfd16c6326f256a7f9cb0845a000df6 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm b0a71aadc90cc8036d353b039f28b85bbd947471e3914262156e324ebde161e6 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm 5e734cb61e83d0e3749ca52f66d4c742543751b154b24aac74d9308a1c04e482 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 6f6ae57483f0b784ca595200518e9578734a6cf59c36e8df64f5371a9f094614 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm 4a96c27ae94b0bf3160a440659a5eca41ff51a550ea268f2f74ed429e00c0c4f libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 1d7c3eef6d55ebdc9318fd1f4a4e4eaa786a6084a536a9bc8504faf02238c800 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm c4a8e99a2622ef685feb2f6146fa95a30e75f8ca73e9077016aa92f2a692e13b libwbclient-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 3a61ebea2cda96c2d7005bae93cbe5976b1ecccd15d1a27bb0d83b4c1d559ab3 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm 966a5383a6b4e81c20b47a343412e591d85f0293c7fff61bf8d334911d9437ba libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm bb3e39de9b88d9367c2b42147de93b3636d0e390a1c861063a8ab8521148de9c python3-samba-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm 2a8663ddac27d3243d2410e6f857baba0799c22ed41201cda92c75d0c168b8a2 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 410964b6bcad24e37c63d7c5655582530ef673bdf37e6db567bec241fe8ea6fc python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm ef6aeee00b64c2f850623ef171756ef0b457b80324edd6d00c2963f9303c9d88 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm dad3ae0f9381e990b3d8f9023e039822ec435c59880d1194f4b17d8ed70d1efc python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm e53387293438bb52191105626ba47c04a968ac428d2d3069a5ca0dfb51f0c810 python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm b1f828b23352ae6f561ca84077b28cb138c33ebf8fec76f54304e872bf20faae samba-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm ba1fab13145e7df9b0ad09d92150ae5e74903dd960f716f3a489d2410918a418 samba-client-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 3a45d946d6391437ecbdf5bd054d0ec20429f14aa167161485d5f79abc8476ce samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm b5a3d86a884e9650be2e4fa76c993d8200b6de2e563ae68efc4ee5b6b5e6e6ff samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm c0b1987902ca89b7ad61d6898dc548b930c09f57d324eb550bb027423c0fdf9b samba-common-4.17.5-103.el9_2.alma.tuxcare.els7.noarch.rpm 5c42e2f9cc41b4e867780336ddfd44c57c109767816413efc8be0666393bcb6d samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm e1c4dcb5b161c8e19d02fec23eae3d4baf4208b3e18c3d74bab6b899487f0ede samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 8b6f2322817dacf5f88f6e93c72082891f63c41253be99c09405ca1a331a3423 samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 4072ffad666cbae975c635f5fd72cae24b2a2c168f62dc7f5e8edf68b73a2f2d samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm 9db322bed748b8e025e7afa909cb3f9cdbf117860d27392a769bdb191240c077 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 3d72e7f5213ca3ae05eff0265659f9ed44a05e165a88e8bb5b81bf4306f0fe91 samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm a6220fd4067ed203b47b29fc62281e58230f8c2a8c27744ca0c377d5bb13460d samba-devel-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm f2714c80bc61c0f1e9c2ef59659293d510050b11c61331f6503e9b9d85496716 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 5f334b5fe5e00726aeb03448d9bb4935583fd066a95b5084e477828f8f82d9aa samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 867b568fa2f8867de2792dddcf96dcf34b1fccd40280643805b56a41f02ba5fe samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 8b5ecd3adf51f96634fe64a43cfb4cdb61c4c1412d438a2a22d96d38953a5ceb samba-libs-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm 8675774aff8c6ae1dcd2d15bea4ae90fc848d93c25f13f2d8d0d0c1f2dd3e415 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 6d5b419616f951e173d4c7cd8dae8d9ff8a21a35ff98e54bc4c160972f05d3db samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els7.noarch.rpm c285a1dc170723211e02151c2d6d48d1f69668eaa74a5a60aaffe946159b64c9 samba-test-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 3dc26d049afb7abf66c552f632ebbfd6058aab0fa9ced49764d9973147ad4330 samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 483d59d211a341cb29192250924bcfc903cbd43c0df9cb10b74d3890b6896c47 samba-tools-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 037d9e91ac26bf78ac2a362e9836aaaa968b4a5ac00d13775d9d941f77ada676 samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm e4c13a6c57820d3f4b55927e7467efcdcc1713bf89469927ad03ba0d173979be samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 0bbc3221cde2951f689468cc65d115e47cb3a7bbdf83344aa574bb2c1c845084 samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 50a7edb301f2860125e742f4e5141549f766bd2718def2f37afd8f8362bdaaed samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 2a372680973e04670fb44b0bff60ca19973d0b7a27a6b9d36c26f832d987a604 samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm f65bffe5c6eb6dfd5ce9f61f1f9f46977c85f31b03101702eb6852d62726892b samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els7.i686.rpm b0f1efc0bc15389045c13acff4c338caf8e98a5b03e77cc815398e74433ae463 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm 7fcb7d1fd20f10e3a40ec6cb8dbe24a51dc5bdddef9b49241920cd524f2b9e87 samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els7.x86_64.rpm e5b64acb10b8ba655dad220bf48bd6d7834a18f736d9086af8b78c165e71c086 CLSA-2026:1778811697 TuxCare License Agreement 0 - CVE-2021-31879: do not propagate Authorization/Cookie headers across HTTP 3xx redirects (openSUSE patch) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-31879: do not propagate Authorization/Cookie headers across HTTP 3xx redirects (openSUSE patch)

0 tuxcare-almalinux9.2-esu wget-1.21.1-7.el9.tuxcare.els2.x86_64.rpm 9ff2b5caf728e7a69a1c5921958ec0b77987a2f5ff9444ef5541f63d83e393e6 CLSA-2026:1778798046 TuxCare License Agreement 0 - CVE-2022-48065: Fix memory leak in function find_abstract_instance in dwarf2.c and free allocated memory. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-48065: Fix memory leak in function find_abstract_instance in dwarf2.c and free allocated memory.

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els10.i686.rpm e964b13fc2defc3c1a9cdd281d870eb143c373da617395fca5dd6595a096803d binutils-2.35.2-37.el9.tuxcare.els10.x86_64.rpm 18237a50bd506cda6d596b152cea2952c979aa1c856774edb5bb9f4e6209ad12 binutils-devel-2.35.2-37.el9.tuxcare.els10.i686.rpm d4dd6935cee5bf47f888bd8fc897f95e99715142216066066b142a097fed3363 binutils-devel-2.35.2-37.el9.tuxcare.els10.x86_64.rpm 6c1dcc3d67c93673f3d0343b897d99c8e5648092247e379348e19ca1e060441f binutils-gold-2.35.2-37.el9.tuxcare.els10.x86_64.rpm de9ef7fd2ec904c44e5cc758d540b44dd59b5f21b102e579964a71ec4e4d24ca cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els10.x86_64.rpm 78b6ce1ac05ea2ed7ddfe95b76de0295487cc947859b2833fec1fac7ed072013 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els10.x86_64.rpm ed14c40dfc7773be8b20b3d63296a901142f6a0ca2ce034315dc12f73f727468 cross-binutils-s390x-2.35.2-37.el9.tuxcare.els10.x86_64.rpm b3a0f7f3cd5a16cc158741a38a3af5aa1948c1d4d68d75296d7741592351044f CLSA-2026:1778820779 TuxCare License Agreement 0 - CVE-2023-39804: fix crash on PAX archive with malformed extended header attributes in locate_handler and xattr_decoder Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-39804: fix crash on PAX archive with malformed extended header attributes in locate_handler and xattr_decoder

0 tuxcare-almalinux9.2-esu tar-1.34-7.el9.tuxcare.els2.x86_64.rpm c2c28fa45d3f7362021f4bb7db8e95f9378de31310d5821cf1d81539f2590fb8 CLSA-2026:1778843906 TuxCare License Agreement 0 - CVE-2026-42945: fix heap buffer overflow in ngx_http_rewrite_module when an unnamed PCRE capture group with '?' in the replacement is followed by another rewrite, if, or set directive; clear stale is_args flag in regex end code to prevent buffer overrun and possible worker crash or code execution Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42945: fix heap buffer overflow in ngx_http_rewrite_module when an unnamed PCRE capture group with '?' in the replacement is followed by another rewrite, if, or set directive; clear stale is_args flag in regex end code to prevent buffer overrun and possible worker crash or code execution

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.x86_64.rpm 023dd0b53fd2fb3a8c931e98c468e2a88b6877b91a115bbe1b79be11edef30c3 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.noarch.rpm e7b4853a891ba0a4c7c7d841f1822f3d7b12155252576a85eaa7fe08dbf35ecd nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.x86_64.rpm 9f571baf2ac7480c1d305ac3f23751be01fa45b223d5b9ef23e5be22257702fb nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.noarch.rpm b68b07c45c76e89f49dd642f41ca6dfb4320ee76af50d29037fc5d01778c12a3 nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.x86_64.rpm 6df9b148016651f0ed55f122b8ea1b85bc061aa83e11b6ced5d5f68111efc4a7 nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.x86_64.rpm 1c57e7e744219fa57d88bb8efec58f2758585d1ba03774df1b6a07654cfe49cc nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.x86_64.rpm 6f449a68727dc1ec8b8c49b4a14c85d0280749e3b6291760fabf4a29b2422f66 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.x86_64.rpm f0c2c8f83b3002a377b35444e26538eb00698ccac0a794d204cca0c59a690aab nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.x86_64.rpm 4d4006bffac8904062a0b1ba88aac088ae10c3630098efa3e7584ee092383f67 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els8.x86_64.rpm 05c7c4637f45e40524f035a904f5869de5f37d14e7dd9270d0e939c414f11fe8 CLSA-2026:1778845249 TuxCare License Agreement 0 - CVE-2026-23631: fix use-after-free in readSyncBulkPayload when fullsync happens while a Lua script is timed out on the replica - CVE-2026-25243: fix invalid memory access in RESTORE on crafted zipmap, listpack and stream PEL payloads Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-23631: fix use-after-free in readSyncBulkPayload when fullsync happens while a Lua script is timed out on the replica - CVE-2026-25243: fix invalid memory access in RESTORE on crafted zipmap, listpack and stream PEL payloads

0 tuxcare-almalinux9.2-esu redis-6.2.21-1.el9_2.tuxcare.els3.x86_64.rpm 1d9c66cc8cf42856c61a99800501b992e549e605df99e920644356ba243a3735 redis-devel-6.2.21-1.el9_2.tuxcare.els3.i686.rpm bf97e5d416f13d76ac3e30d35d353307f33d97bc5ae662d7a0dee55af5e2fee5 redis-devel-6.2.21-1.el9_2.tuxcare.els3.x86_64.rpm e8f8bba5debba3270aec9a133e2471654da7a2afb0c9c15fe392a9775c71f86e redis-doc-6.2.21-1.el9_2.tuxcare.els3.noarch.rpm 0fe0f91282426c0472a86f7b30372bd8c59ba30c28f40146ca647ac1e1cfcb8b CLSA-2026:1778858288 TuxCare License Agreement 0 - CVE-2026-34982: fix vim modeline sandbox bypass via complete/guitabtooltip/printheader options and mapset() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34982: fix vim modeline sandbox bypass via complete/guitabtooltip/printheader options and mapset()

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els27.x86_64.rpm 1723584ebad32730d7c307702ef6b7257ce611b9259518a845b43de6c9732d28 vim-common-8.2.2637-22.el9_2.1.tuxcare.els27.x86_64.rpm 043b7ad7099be9407df583483c343d6591d89728b2b1c854f7327c5dbe13b820 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els27.x86_64.rpm 20fdfd65553b512fb72e1431639e3b20c911dc0173863978a737695b0390128e vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els27.noarch.rpm a6563f73dce820dad52bf09530ac67ec462f6827024c3b8b08a6e44e453364e7 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els27.x86_64.rpm f53be8559ca485dcd12d7483f54d3e46221cfced0b14ed8386c63e867b599454 CLSA-2026:1778858907 TuxCare License Agreement 0 - CVE-2023-6710: stored XSS in mod_cluster-manager HTML output via virtual host and context names rendered without HTML escaping - CVE-2024-10306: unauthorized MCMP requests due to <Directory> directive being ignored for protocol-handler filtering; runtime guard now refuses <Directory> siblings of EnableMCPMReceive, and the shipped conf.sample uses <Location> Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6710: stored XSS in mod_cluster-manager HTML output via virtual host and context names rendered without HTML escaping - CVE-2024-10306: unauthorized MCMP requests due to <Directory> directive being ignored for protocol-handler filtering; runtime guard now refuses <Directory> siblings of EnableMCPMReceive, and the shipped conf.sample uses <Location>

0 tuxcare-almalinux9.2-esu mod_proxy_cluster-1.3.18-1.el9.tuxcare.els1.x86_64.rpm 9aac458b75534506a3e75acf4cc68de52d3ac448e5db412dc3ecba2be361f836 CLSA-2026:1778847162 TuxCare License Agreement 0 - CVE-2026-28780: heap-based buffer overflow in ajp_msg_check_header() in mod_proxy_ajp when proxying to a malicious AJP backend that returns an oversized response, allowing a 4-byte out-of-bounds write past the heap buffer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28780: heap-based buffer overflow in ajp_msg_check_header() in mod_proxy_ajp when proxying to a malicious AJP backend that returns an oversized response, allowing a 4-byte out-of-bounds write past the heap buffer

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm 54f96f8f8d50b3bf2efe2f45827f05947274f13b35bbd81a20014e403703e6f6 httpd-core-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm 3350292414dbc60a370c1168ca938c8ba352673f3990cacd385519bc4f75592c httpd-devel-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm 0da01afbe371d8b883dd7985573085a80b15fd4b4bd98ea24c83c08a215d3fa8 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els13.noarch.rpm ebaa9f452adbcf05b1b65bcd6db8b90b7423897972146ec89b1eb458b8714244 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els13.noarch.rpm 07b120845e7a2ae5e13da66abb69c23fc7673f5a9ce25b90525a5979dc73b864 httpd-tools-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm 37c06429733831093450ee73b003cb25961453fbac44c95acbb0e93534e505d3 mod_ldap-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm 44627a25419b96bbdd35b0c616bde0ac8bc90d57a8e0f168af74f53a6e073f91 mod_lua-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm 6f9ecc79d4aba14d71ccf4fbe575d83659a6bb69407b3570f35faed6aea96988 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm cfde59cef420831ecf4d2775a2d95942eac39ae02de82942b815d4b69287331a mod_session-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm 921f9105f5de75c659541c4f2f32938477168c06d0b92f57fbdef990e4f80ba1 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els13.x86_64.rpm bcd62c4f63e141e39deaf37ac924d75c8d75de3c0927294f6ad8ec3c5919c424 CLSA-2026:1778873714 TuxCare License Agreement 0 - CVE-2023-45802: fix deferred memory reclaim of reset HTTP/2 streams Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-45802: fix deferred memory reclaim of reset HTTP/2 streams

0 tuxcare-almalinux9.2-esu mod_http2-1.15.19-4.el9.4.tuxcare.els3.x86_64.rpm 37f0e10f779960f4a0716d256bbf5c6734de6d37d219f0e6a583fc6b4ee71680 CLSA-2026:1778874422 TuxCare License Agreement 0 - CVE-2026-43964: fix buffer over-read in dsn_split() when an enhanced status code is not followed by other text Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43964: fix buffer over-read in dsn_split() when an enhanced status code is not followed by other text

0 tuxcare-almalinux9.2-esu postfix-3.5.9-19.el9.tuxcare.els2.x86_64.rpm 0743917dd3a29d00ca4701b0142ced7782f2eff4af228e6454c104b05f52178b postfix-cdb-3.5.9-19.el9.tuxcare.els2.x86_64.rpm 425b50b393439c3165e1daee9e9a61315849834f666483817538fccc909aa348 postfix-ldap-3.5.9-19.el9.tuxcare.els2.x86_64.rpm c3c6b89458c9c668f4bc5fb67550a7a90b9f38f5c061af9568d68633b084391b postfix-lmdb-3.5.9-19.el9.tuxcare.els2.x86_64.rpm 0adefaf54d12b510aed744d6ac62a8101b33c8fc97c2bd4452fa1d1f5d9ec7a5 postfix-mysql-3.5.9-19.el9.tuxcare.els2.x86_64.rpm 25ebeecf003d442502eb1112360c8e4db1c07fdc1a69e0b173ae4eb609a4a574 postfix-pcre-3.5.9-19.el9.tuxcare.els2.x86_64.rpm 5cb9db1dbf8ea048a3f2659118fd4c9ba369b5d4843c18c4848ee0dab59f61d6 postfix-perl-scripts-3.5.9-19.el9.tuxcare.els2.x86_64.rpm 20d3958ebef9c1cf86e6042d752f1172b46ee81b7f9fc17a26199fac861393a4 postfix-pgsql-3.5.9-19.el9.tuxcare.els2.x86_64.rpm 3016c95438384eaca241cffb925b564e08e62d7f236cedeaab24b475beffd4a1 postfix-sqlite-3.5.9-19.el9.tuxcare.els2.x86_64.rpm 8a55a2c01027295b385602634bf6af12a7a9f370907c234b4e819ff9102eb6ba CLSA-2026:1778881463 TuxCare License Agreement 0 - CVE-2023-5455: fix CSRF vulnerability by adding Referer header check to all session endpoints - CVE-2024-1481: validate Kerberos principal name before kinit and pass it with -- separator to prevent option injection - CVE-2024-11029: scrub administrative passwords from process command line and pass OIDC client secret via stdin Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5455: fix CSRF vulnerability by adding Referer header check to all session endpoints - CVE-2024-1481: validate Kerberos principal name before kinit and pass it with -- separator to prevent option injection - CVE-2024-11029: scrub administrative passwords from process command line and pass OIDC client secret via stdin

0 tuxcare-almalinux9.2-esu ipa-client-4.10.1-9.el9_2.alma.1.tuxcare.els3.x86_64.rpm ddbe846a2399896dd27c1b309d1c8676341e058cb5b3211141dd1b4b488f63d4 ipa-client-common-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm 3824d37db616b3173db39c80e77a38228cd4c7f47662be0e314e07335389f7c4 ipa-client-epn-4.10.1-9.el9_2.alma.1.tuxcare.els3.x86_64.rpm d3c18c82684b0432a90793ea5dc007cc52c8341ce62ec8d8f524eef4d16d9459 ipa-client-samba-4.10.1-9.el9_2.alma.1.tuxcare.els3.x86_64.rpm e99fcdff81cc160dd808b33084429b71c26d0d3d8828b2b3625588fad6c593ec ipa-common-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm 43046b92a1f3218cccd10482a55345c2bdd5f3fa9b863f595ea6103ba60926c6 ipa-python-compat-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm 90964f8f178d0a57cbacc6770af777de8264e5e91740e9e822decf098f45425f ipa-selinux-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm 04a86e632b30e89bb2969814c7432071d6f33a1516524998bae285bc367410e3 ipa-server-4.10.1-9.el9_2.alma.1.tuxcare.els3.x86_64.rpm 1a46986dc9dbe89c82f0563b03c49ec86894a059d8caeedf3bc225e8f149fba9 ipa-server-common-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm b5dfa8de4ed29d3e9ce4c7f5b4d9acb45960719c630a05f9b3331d00253c5ff7 ipa-server-dns-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm 2ed7e9003b68b9327d8ab37c95a1e5e539f0e3378bd0910dc34184505a989864 ipa-server-trust-ad-4.10.1-9.el9_2.alma.1.tuxcare.els3.x86_64.rpm 886d3268cad79b85c989fa19a3917721799f431659087e8fa903b7915a34da35 python3-ipaclient-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm 61c4667bb99ae352fdbb8d257828925cb2ad75713e9471d83d2ec39090a01e84 python3-ipalib-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm b7d07966ce8e392603831fa092bd629448c11663d4426e5e143acafd43490c6f python3-ipaserver-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm 6a1332ae5e1db12cbbb6df0620e38cb293e6b264f23b4653df502818048d2741 python3-ipatests-4.10.1-9.el9_2.alma.1.tuxcare.els3.noarch.rpm 484c54f8e3b595ab269e69918be2c0090b146bfffec8507869f83b357881eeac CLSA-2026:1778887961 TuxCare License Agreement 0 - CVE-2026-4948: use PK_ACTION_CONFIG for setZoneSettings2/setPolicySettings to require write authorization Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4948: use PK_ACTION_CONFIG for setZoneSettings2/setPolicySettings to require write authorization

0 tuxcare-almalinux9.2-esu firewall-applet-1.2.1-1.el9_2.tuxcare.els1.noarch.rpm 05dad3bc1779cfa77500f1f6e669f1a92437cff323695b5fdde98ee1fbf1fa14 firewall-config-1.2.1-1.el9_2.tuxcare.els1.noarch.rpm 8ac60c66814db01f1089b7ddcecdd84974cd4be422f55557165ae4d17182b5d2 firewalld-1.2.1-1.el9_2.tuxcare.els1.noarch.rpm 771a492c9c7c819e7cf1856ea8f9325504a6093581b1f4d4e1114af5a7f53a00 firewalld-filesystem-1.2.1-1.el9_2.tuxcare.els1.noarch.rpm ede78a6874faac6e3be89788621068ec3438762ca0a5615aa2a207addaa75bd1 python3-firewall-1.2.1-1.el9_2.tuxcare.els1.noarch.rpm 9a1ea03fc259089e21360aa9fbaf6af42834a8c4234c0329f58f0a9a25dfe95d CLSA-2026:1778890582 TuxCare License Agreement 0 - CVE-2026-5545: wrong reuse of HTTP Negotiate connection; only allow an existing connection to be reused and "upgraded" to NTLM when neither NTLM nor Negotiate authentication is in flight on it Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5545: wrong reuse of HTTP Negotiate connection; only allow an existing connection to be reused and "upgraded" to NTLM when neither NTLM nor Negotiate authentication is in flight on it

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els10.x86_64.rpm 5ebd36efd2254973b389736f4f1373d765da11391f488dd166c32e3578574336 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els10.x86_64.rpm 36c3e67fa78ed6410939f5e927bbd3c92e6d9f39d9188d1a6c6ac150591e7e4d libcurl-7.76.1-31.el9_2.1.tuxcare.els10.i686.rpm a1f74b355ea88a80c21862507f3ac626246d3da9a092e26ddf1fcb16f03e68e8 libcurl-7.76.1-31.el9_2.1.tuxcare.els10.x86_64.rpm 28b96a057b1d23f9b40c0892a5525249f6f2ff7ec2a38225d5379af1cf9c76fe libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els10.i686.rpm b52407faef36e19de4f0e5183089e5d171c80b1bc2c2aed5299204e837f4c01b libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els10.x86_64.rpm 2e9f71cd427a42463c0f2cfe3ee05eaea54f5c180ce9c950e29feca3f8c4c21a libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els10.i686.rpm 7e3e1919b3bff02afb346d6e09973a57e1f76804273588e28a91507713918167 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els10.x86_64.rpm fc91db41ba01ddee17c5e71d7475dcf0231c3dc6f770b4227e85a6bff833784f CLSA-2026:1778891359 TuxCare License Agreement 0 - CVE-2026-34757: use-after-free in png_set_PLTE, png_set_tRNS, png_set_hIST, png_set_text, png_set_sPLT and png_set_unknown_chunks when the caller passes the pointer returned by the corresponding getter back to the setter Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34757: use-after-free in png_set_PLTE, png_set_tRNS, png_set_hIST, png_set_text, png_set_sPLT and png_set_unknown_chunks when the caller passes the pointer returned by the corresponding getter back to the setter

0 tuxcare-almalinux9.2-esu libpng-1.6.37-12.el9_2.tuxcare.els8.i686.rpm d4b8dbec04dfd0d359cee052421efebc5b414d4b18594bed31bd53275de01709 libpng-1.6.37-12.el9_2.tuxcare.els8.x86_64.rpm 41e84690f357ad31eaffca176fe0f38afd6ef13f1f747d6f3117f860a4fd8188 libpng-devel-1.6.37-12.el9_2.tuxcare.els8.i686.rpm c8eefc5c6aa6062d5a1a9fcc77e469034d571a93ead430db8ef056984906b71c libpng-devel-1.6.37-12.el9_2.tuxcare.els8.x86_64.rpm 8bb33ead43b99a05afec89300219fb3458cab4344638ff699442816d2bb5722c libpng-static-1.6.37-12.el9_2.tuxcare.els8.x86_64.rpm 7a590b0dccd8586a76dbbe45cd27f1e2df15ea40d67a0368b4eefe306c73ae1a libpng-tools-1.6.37-12.el9_2.tuxcare.els8.x86_64.rpm 4417120329dc48ac3616da3e11d083ceee0d5e01f846c71613ddafb42b4ca1f9 CLSA-2026:1778892584 TuxCare License Agreement 0 - CVE-2024-5953: fix DoS via malformed password hash on bind - CVE-2024-2199: fix DoS via malformed userPassword modify - CVE-2025-2487: fix NULL pointer deref on failed MODDN operations Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-5953: fix DoS via malformed password hash on bind - CVE-2024-2199: fix DoS via malformed userPassword modify - CVE-2025-2487: fix NULL pointer deref on failed MODDN operations

0 tuxcare-almalinux9.2-esu 389-ds-base-2.2.4-5.el9_2.tuxcare.els4.x86_64.rpm 39366ecddb85ad3dcc7c466ed3d4c21c39ee8f592de3ddf497df0be657651a21 389-ds-base-devel-2.2.4-5.el9_2.tuxcare.els4.x86_64.rpm ff65b1209471cd12313f026d8773a83cbca968a5eda0e27315a24437080478d1 389-ds-base-libs-2.2.4-5.el9_2.tuxcare.els4.x86_64.rpm 78cdf7fe0fa156f79d65faef49ac19a6df29b9995b41bd29c7f871315cfde0ca 389-ds-base-snmp-2.2.4-5.el9_2.tuxcare.els4.x86_64.rpm 23d7fe2f7c8c44ce94a40b2eb5425c2fbf77c7571c736cf8e1276c715d8204a0 python3-lib389-2.2.4-5.el9_2.tuxcare.els4.noarch.rpm 2b846495e9f1757c4c989678bf2b216e18bbab94bb91c5b9e62bfa4fdf18a882 CLSA-2026:1778893359 TuxCare License Agreement 0 - CVE-2025-60753: denial of service in bsdtar -s substitution when the regular expression matches a zero-length string, causing an infinite loop in apply_substitution Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-60753: denial of service in bsdtar -s substitution when the regular expression matches a zero-length string, causing an infinite loop in apply_substitution

0 tuxcare-almalinux9.2-esu bsdcat-3.5.3-6.el9_2.tuxcare.els7.x86_64.rpm 2b1c8a65a565be66c13d3ffc452c1bca434900b27655e136b1482a7dd1621def bsdcpio-3.5.3-6.el9_2.tuxcare.els7.x86_64.rpm 55f3f1129fffaa4234c56b794b7f64d26dde2248c6989a3ba7e6f7c171a1975d bsdtar-3.5.3-6.el9_2.tuxcare.els7.x86_64.rpm 213c9d61ac9dfe047509cd2b71a8d05c8de6232889c5292514c8e27758104b7a libarchive-3.5.3-6.el9_2.tuxcare.els7.i686.rpm 8c953541434e0510f17ab25781e58506169313f9cb3e30cab9324fbe386bb72b libarchive-3.5.3-6.el9_2.tuxcare.els7.x86_64.rpm 7290578a93a8c096d691b3290885fa5ce399822e73397ce0d7cf4aa9c4eaca8b libarchive-devel-3.5.3-6.el9_2.tuxcare.els7.i686.rpm b59c33f20895b315cbcacc21c8fcd01b4bc3154b35dc1dec7a1cd36efeafa654 libarchive-devel-3.5.3-6.el9_2.tuxcare.els7.x86_64.rpm eb4d2fbcc112ea54538c2ea348a0daa2fede598f75416bdac8d637d34b1fbada CLSA-2026:1778894989 TuxCare License Agreement 0 - CVE-2021-28544: fix authz copyfrom path information leak in svn log -v Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-28544: fix authz copyfrom path information leak in svn log -v

0 tuxcare-almalinux9.2-esu mod_dav_svn-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm e758bc0572d0d68a8208ce745aac9c9d15bd74d847ad37848dcda8a14d3c7fba python3-subversion-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm db4a70af110f52a5d78c2824d544268fbb64fd244ce44e72fc7a3a218bcbfa72 subversion-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm 0a54fb93e3f9ce15ddcfed516474bbc197640d6e909bdbaf1e379fa0d0dc838c subversion-devel-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm d68e053d4caa1919eb68d1b933003f4df73c1eca289d8aece7b3a3239f39809f subversion-gnome-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm 178e60230b50f88654aab323a318058414018fcfa4521a5e122ae1e13bd4b000 subversion-javahl-1.14.1-5.el9_2.tuxcare.els2.noarch.rpm 8f20ad524a1e6612b858f9c9adc62c120320ebdf833d6a9ca569e41d7c646285 subversion-libs-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm 24a358c5958eb59ee1f409e4253f47e6512427d17799c9d55f4af68f7bf7a86c subversion-perl-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm d17d74cef4daf41234b3a82e62f6f7524052d4465151eeed51e647d563fb6874 subversion-ruby-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm b8c0e567b53c214f2eb8a23cd5ad7df4c7fd7e19f968fbbb97e06477756dba6c subversion-tools-1.14.1-5.el9_2.tuxcare.els2.x86_64.rpm 357561a1c9bdca704f06207ee23e198a551e0c35333a1f732c7de19f8b382c69 CLSA-2026:1778898606 TuxCare License Agreement 0 - CVE-2023-40403: make generate-id() deterministic to prevent memory layout leak Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-40403: make generate-id() deterministic to prevent memory layout leak

0 tuxcare-almalinux9.2-esu libxslt-1.1.34-9.el9.tuxcare.els4.i686.rpm e39ba1f7091aa16de4ad41c9007e43c65646e175b8c77d18cfaf7728b2a9fe9d libxslt-1.1.34-9.el9.tuxcare.els4.x86_64.rpm 6a3fd7f4363fca545c523762964789631537249cfc28e949d357e372ade1ffed libxslt-devel-1.1.34-9.el9.tuxcare.els4.i686.rpm ba982823c7cfa69fd53df82f18a636f67dc4ccd25d1fe3a1bd40395e22d7ac5f libxslt-devel-1.1.34-9.el9.tuxcare.els4.x86_64.rpm ee707b7277b1705481f7dc90d7f73daa634c6311f0c3b911ebc851db09c2e99e CLSA-2026:1778896895 TuxCare License Agreement 0 - ptrace: require CAP_SYS_PTRACE when task has no mm - net: udp_offload: propagate SKBFL_SHARED_FRAG in skb_gro_receive_list {CVE-2026-46300} - can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- ptrace: require CAP_SYS_PTRACE when task has no mm - net: udp_offload: propagate SKBFL_SHARED_FRAG in skb_gro_receive_list {CVE-2026-46300} - can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 7d269987326c8cb5da8b40e5044f45799ed699f5f13cb3065c6d49073e641ead kernel-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 19ec2cdb1e3af35dfcb1a5b56bf0f6d07e0222e12b87682411e63f6e4cd82f7f kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els35.noarch.rpm 4f8133ba6666e0e0055b3965ef4840b3a85661743215628ec5f8289df4580721 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 9668455b189b3cb69b00624d19ffc7cd10fecb9b983ab20d54917b38f757426c kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm a0858f8f281d9fc3679a098adea3a58c907c09c20f8a6725c955b91bdafc946b kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm a04a3963134fc506bcebebbabdbd2f93f9cbd952057daa02718fd4142da41e10 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm f13c9989fe4a925576307f94935daf4f7df5e0b31f8a6e585ac02bed22769ed6 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm e5a2bbe005a4567955cf175ee251e11582895f304c2e7fdb49675372df1febac kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm a933a96600e626f01036bea4f09e463dd0fcc00bb33094904bc655c408dc520b kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 0de6d3702845fdcfde59ea29a3537e8cf05e448d9aea04894cc14abeca7930f0 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm d554bb03235903f3362579ba89d9c6d8f3775cac6304d450ea09de61821779aa kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 44c4d0a5f1be8ff5c7f01aee928046acd3b8061e8a0343fe30416226cdc07a00 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm d212ca109724e6adeea77ab8de7512755ab2be3ec96050cbe1473cd479cc05b1 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 6d0f9ea023c291a5f501f567988195ece7ee51de44fbc118dec54666079c01b4 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm a1bdca143bdeefd09c7be3b467a339662e53e6cb460ec03ebe68403b96db7235 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm d161de05518593593b3dafd2562b0f6d2352a72b86916ef54dc58c85b92a457e kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 2daf682b25c54181a6dc4afe2d5534920f1d2002250ac74023d02094edcf4fa6 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els35.noarch.rpm 58f27a29da5b8f9c2cd6b1fb1fb2b4dd59a0ffc1680bad978385241d373fd9cb kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 1738863e67d8bea5c3bc924db2516689ae11e66c0133cd6caae92f376e15d5fd kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm cfafb3b0f0487160fa3c700de94dd7645f71c3635f639b571350cc22d921421c kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm c8be41aea1535c8d0fa3fc33711a125bff50995868a7a78b38b33668d2b6d7d5 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 7d3faaffebc0c93baa49cc6401dd301918161fcece3f174b0d2dddba898935fc kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm b933698abbb66a01c1fce5334f172a73faee2f51311428f794b39f0ceb7cebe3 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm b7caba9e9b08bcf16d0ad616db33c8ad739f275e6817124c0102e731533bcbd0 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm f1aa1687e9217d7ddd256d47a0fcf53fcfb887fdb7f00abeb3cae6fd78145cfa kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 8c126eb0256802e22b9f4c9fa4b47e9c4c302d49b8a875536e9c91358e279c45 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 21a3eeb1f22e31b732aa0f3734dcb119b1d6b74d92650e9e4c6d00c40b3a0184 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 8bb88f7ebf63b5af4e08a52986e8efea0838e75984501aa9e99dbc1411a9e5a6 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 091ffe0c5261c0a1575c69ef96ffcf02ba0ff982c5fe5c52462f53549a34e028 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 10c55845eafdbd77b23248918cb1a3f79aade0233e6a305afb4be2cc686be726 libbpf-1.0.0-2.el9_2.tuxcare.7.els35.i686.rpm 9a267ce3d48d6a070a1c23ffcc91fdca83b7691f229e4d55a76569f7c8e1cfc8 libbpf-1.0.0-2.el9_2.tuxcare.7.els35.x86_64.rpm 5740a735050f43bd2ae54ec1a28117c8b83998e7572183dd4d6f5588e8ee915c libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els35.i686.rpm 58fdf66916988ba4a634366a1d66abee26dfe48593953adecd33f8fe72f65928 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els35.x86_64.rpm 7d079a6de3a094c9bdc240802e24c81b169a0a6edda448609867b94518e4325b libbpf-static-1.0.0-2.el9_2.tuxcare.7.els35.i686.rpm 07535e4cea27d5cf6e0a8b64da697518c81b04fe6dbaed8c807e4f5207cf0563 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els35.x86_64.rpm 8c9ea1eed89c4fe739cbc53443024aeaa498cbc5054cc3de572f17398ab893e6 perf-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 95e775a9a2e1cb0d39d6bc145c1c394623d07e3fb93392a8d728776e97d6ff24 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 097c356fb8cb09399577571f52c0cdad02663c85d889d673766f3c233acd2840 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els35.x86_64.rpm 58cee33e283d84464a89456e163b005b7e8ecbce680a1658e1d0628ceab7a1c1 CLSA-2026:1778756991 TuxCare License Agreement 0 - CVE-2026-2708: reject duplicate Content-Length headers with different values to prevent HTTP request smuggling per RFC 9110 section 7.7 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2708: reject duplicate Content-Length headers with different values to prevent HTTP request smuggling per RFC 9110 section 7.7

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-10.el9_2.3.tuxcare.els7.i686.rpm 4feba3cd3704d242d96d55fc3326eeca997d965b31ba3604d8eed12f75a2bcb1 libsoup-2.72.0-10.el9_2.3.tuxcare.els7.x86_64.rpm 7b942b55bb3f75ac7a8d4352e41f6dec599920ef050e2f50650c9c26e574c309 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els7.i686.rpm 9bafcdc9b48ede5467e49648000c2179594c6a5c32ccdf961c7fc39c0ff01ac0 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els7.x86_64.rpm a8030a43563396eba4af73fdb113fe04f9630c12002c6234a8fac10eba746a50 libsoup-doc-2.72.0-10.el9_2.3.tuxcare.els7.noarch.rpm 199c5304e633de73a66ae1bdd30aafac4865c7d56f1f03349326b62375fc0780 CLSA-2026:1779093100 TuxCare License Agreement 0 - CVE-2022-38533: fix heap buffer overflow in bfd_getl32 from strip_main with crafted COFF file - CVE-2022-47007: fix memory leak in stab_demangle_v3_arg in stabs.c - CVE-2022-47008: fix memory leak in make_tempdir and make_tempname in bucomm.c - CVE-2022-47010: fix memory leak in pr_function_type in prdbg.c - CVE-2022-48064: fix excessive memory consumption in bfd_dwarf2_find_nearest_line_with_alt - CVE-2023-1972: fix heap buffer overflow in _bfd_elf_slurp_version_tables Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-38533: fix heap buffer overflow in bfd_getl32 from strip_main with crafted COFF file - CVE-2022-47007: fix memory leak in stab_demangle_v3_arg in stabs.c - CVE-2022-47008: fix memory leak in make_tempdir and make_tempname in bucomm.c - CVE-2022-47010: fix memory leak in pr_function_type in prdbg.c - CVE-2022-48064: fix excessive memory consumption in bfd_dwarf2_find_nearest_line_with_alt - CVE-2023-1972: fix heap buffer overflow in _bfd_elf_slurp_version_tables

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els11.i686.rpm 8634c128bb750a44da913f7d76fad52508331cd50539e89a6b802f7482e0a875 binutils-2.35.2-37.el9.tuxcare.els11.x86_64.rpm 280305e868cfb6adee9a496020c985f01b3780bb2664bdc448b4ab20263c6d4a binutils-devel-2.35.2-37.el9.tuxcare.els11.i686.rpm 5b3818369d627f526a0d85c5ba1f14e8031c70b29df015d478dcc9a856e59c15 binutils-devel-2.35.2-37.el9.tuxcare.els11.x86_64.rpm bda3baf3042a86530d713f026effb90423af1d8d7fb03af2b660b8a13eb659de binutils-gold-2.35.2-37.el9.tuxcare.els11.x86_64.rpm 8be722f055de3544c36ea71b3a1093a282047dcc661507ea90f5317454304b23 cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els11.x86_64.rpm 2404a363094e269b37e5c519f4219af00af62810a212220dabaf8932706c57ae cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els11.x86_64.rpm a5db4c93a7c190f51a2e5fe71f57841d1f6730ff0e4015f834b116262d9e08d8 cross-binutils-s390x-2.35.2-37.el9.tuxcare.els11.x86_64.rpm 3c008c128e12e7516535ccdfe90880075dbb3e4fbfe70fac3bb55eb3493b302c CLSA-2026:1779095842 TuxCare License Agreement 0 - CVE-2021-37519: heap buffer overflow in authfile_load() when the auth file lacks a trailing newline; missing bounds check on fgets() and missing NUL check in the user-entry parse loop allow local DoS via a crafted --auth-file. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-37519: heap buffer overflow in authfile_load() when the auth file lacks a trailing newline; missing bounds check on fgets() and missing NUL check in the user-entry parse loop allow local DoS via a crafted --auth-file.

0 tuxcare-almalinux9.2-esu memcached-1.6.9-7.el9.tuxcare.els1.x86_64.rpm 39373c24f0ed97a3a8567c5fa1613b4f7e7650fc2b3d9b781ed9dfa9e76b9c1a memcached-devel-1.6.9-7.el9.tuxcare.els1.x86_64.rpm 61488507ce757e5294bda8a28f66780fb863ad2092b1b3ce3fe4d5160dd46ae7 memcached-selinux-1.6.9-7.el9.tuxcare.els1.x86_64.rpm 20f7952ce49ee916df79f7f89843f06ec4b7b7f306527937165f5c81bf577535 CLSA-2026:1779097389 TuxCare License Agreement 0 - fix CVE-2023-6693: virtio-net stack overflow via large guest_hdr_len Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix CVE-2023-6693: virtio-net stack overflow via large guest_hdr_len

0 tuxcare-almalinux9.2-esu qemu-guest-agent-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm c47b2d43aa18c549b762ee35709e6be48c59628bcd831991b3f710d4424fc440 qemu-img-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm b45a7a869d34b58cad953b93335c3b712160552f2253c95c6ad618eb763559bb qemu-kvm-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 39a3e13064cccfe3b9e81a6e9f33e2bae7bb5eb0637ddb05c7504fcd47324a31 qemu-kvm-audio-pa-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 5431b9f9bb7f9e8e7bdd2a52ca67bbf6c1ef057ef9f2f21d0a389b17b929b124 qemu-kvm-block-curl-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm ef3c666ba762acb7947daf7ce91a336108ed5e75591bce467b6ab0a8b13e136a qemu-kvm-block-rbd-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 69b784e65960e83108e1444ac167bc7f48d9786a9df6294a9a27b4b44716d8ad qemu-kvm-common-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm d52af92ffe8767da132caf5d72e6f0259e3b03d61b8b5abc113eb149b0cd196a qemu-kvm-core-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 51f48e284a8db548e0f6815b8521295f60afb2a89ddcee6ccdf9fa741de069d3 qemu-kvm-device-display-virtio-gpu-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 76d741dcf9dae97d7c34bf18ec48ba27fec8e862af583c701eb8e06753f4d53a qemu-kvm-device-display-virtio-gpu-pci-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 6f84cd3ed2a826292a2f130040d948eb03b2c064c66b56b8d0c5be5846a83dcf qemu-kvm-device-display-virtio-vga-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm a1ec2e17b121caa3dd16b0caa8865f4f591798ce8ede1200ccb6179415cbe7bf qemu-kvm-device-usb-host-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 77570518e51d4743a76a95e7887a89d0ea272536acd905de02a4b41b0875bda9 qemu-kvm-device-usb-redirect-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 8ea2feae3f7ef6bf18465abf5875c39610051933034d14b9b6572406cfc52edf qemu-kvm-docs-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm d1a05e771d9b2ab481c4f5def27c02242c8516c0749cf35676736eb6d54804e6 qemu-kvm-tests-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm d545b2b19f8d1ce1bb84b9da29ea82bc3e7090e3d1cab99b9c104fdc5bab26fc qemu-kvm-tools-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm b886a7513191cf10e312d6d3eb3bc3bed71f4f0297df7458e144b8079160e571 qemu-kvm-ui-egl-headless-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm b87746b0760b1fb9c4e7f26e8a185304dc764e8d0e292c5a161d548411651e3f qemu-kvm-ui-opengl-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 07b6b3da2615dab8fdbaa01159bb0f51b0bc0b21a1524a9f5ef0306a2686bcbb qemu-pr-helper-7.2.0-14.el9.5.alma.1.tuxcare.els8.x86_64.rpm 336258debbde0f09560d9324b34ddab703fdebab12b3d45b36a0fe8cf2250476 CLSA-2026:1779122132 TuxCare License Agreement 0 - CVE-2026-45186: fix quadratic runtime behavior in attribute collision detection Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45186: fix quadratic runtime behavior in attribute collision detection

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9.tuxcare.els11.i686.rpm 14921318ab2242942dff1acf983dac3929c422a327e496e834ce185e8df429b0 expat-2.5.0-1.el9.tuxcare.els11.x86_64.rpm bc31e0a6b5f1b4ab9e0e26b6abd1226128fb8aedf4be88c19c61f73d344a8288 expat-devel-2.5.0-1.el9.tuxcare.els11.i686.rpm 547e3207f52e4dba2670736238a369e6659d084ac4759946a8239cda86308b9c expat-devel-2.5.0-1.el9.tuxcare.els11.x86_64.rpm 5e43d8b66fe61e4e1caeafbaaf538643a72a8167dfb493ce4dacb7de55a288a8 expat-static-2.5.0-1.el9.tuxcare.els11.x86_64.rpm 9bc767ce211ec0ba7b6c04f609de9b1965668a1483dfde67d94d1cb0957accf8 CLSA-2026:1779122764 TuxCare License Agreement 0 - CVE-2024-5742: emergency_save() applied chmod/chown to a path after the descriptor was closed, allowing a symlink swap to redirect the ownership change to an attacker-controlled file - Backport of upstream commit 5e7a3c2e from nano v8.0, adapted to the 5.6.1 codebase (write_file signature predates the SPECIAL/NONOTES refactor) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-5742: emergency_save() applied chmod/chown to a path after the descriptor was closed, allowing a symlink swap to redirect the ownership change to an attacker-controlled file - Backport of upstream commit 5e7a3c2e from nano v8.0, adapted to the 5.6.1 codebase (write_file signature predates the SPECIAL/NONOTES refactor)

0 tuxcare-almalinux9.2-esu nano-5.6.1-5.el9.tuxcare.els1.x86_64.rpm cd1761f315df60dc65f69124f221e92bd36bdf95edc4fc113a1e17b601e25111 CLSA-2026:1779123410 TuxCare License Agreement 0 - CVE-2026-40164: randomize hash seed to mitigate hash collision DoS - CVE-2026-40612: limit containment check depth - CVE-2026-41256: fix NUL truncation in program files loaded with -f - CVE-2026-41257: fix signed-int overflow in stack_reallocate - CVE-2026-43894: cap numeric literal length to DEC_MAX_DIGITS - CVE-2026-43895: reject embedded NUL bytes in module import paths - CVE-2026-43896: limit recursive object merge depth - CVE-2026-44777: detect circular module imports Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40164: randomize hash seed to mitigate hash collision DoS - CVE-2026-40612: limit containment check depth - CVE-2026-41256: fix NUL truncation in program files loaded with -f - CVE-2026-41257: fix signed-int overflow in stack_reallocate - CVE-2026-43894: cap numeric literal length to DEC_MAX_DIGITS - CVE-2026-43895: reject embedded NUL bytes in module import paths - CVE-2026-43896: limit recursive object merge depth - CVE-2026-44777: detect circular module imports

0 tuxcare-almalinux9.2-esu jq-1.6-14.el9.tuxcare.els6.i686.rpm fd0044ca728a3346aa0516d7d8f791fc6a3b33080c8ac202d0b4ae906cc86e16 jq-1.6-14.el9.tuxcare.els6.x86_64.rpm 6f8f2996606d780c67eaff791c8ef79888a57d6a44dbc1c950b5de2f9f04382b jq-devel-1.6-14.el9.tuxcare.els6.i686.rpm 381d1ff79c39260e15752bdbe3957149cf64a575270741a1136e0f326d21ae12 jq-devel-1.6-14.el9.tuxcare.els6.x86_64.rpm be962ecce93fcd099f5a720510e95f070f33a4b38172b4ce3fa05e568ad8ca9a CLSA-2026:1779129500 TuxCare License Agreement 0 - CVE-2026-34757: Use snapshot-before-free and defer-free patterns to prevent use-after-free when a caller passes a pointer obtained from png_get_PLTE, png_get_tRNS, png_get_hIST, png_get_text, png_get_sPLT, or png_get_unknown_chunks back into the corresponding setter (issues 836 and 837) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34757: Use snapshot-before-free and defer-free patterns to prevent use-after-free when a caller passes a pointer obtained from png_get_PLTE, png_get_tRNS, png_get_hIST, png_get_text, png_get_sPLT, or png_get_unknown_chunks back into the corresponding setter (issues 836 and 837)

0 tuxcare-almalinux9.2-esu libpng15-1.5.30-14.el9.tuxcare.els3.i686.rpm c803941e8067485ef9c5e713fa3212732d2f8d47a8af83b27cf33f989a8d7a9d libpng15-1.5.30-14.el9.tuxcare.els3.x86_64.rpm 94829ee06c172965f4ced5cf92b677df4b3483b7e109fe22d62cc8f922d34fe6 CLSA-2026:1779136540 TuxCare License Agreement 0 - CVE-2024-0747: Document::Open inheriting CSP from a different window - CVE-2025-5268: Memory safety bugs (gfxFont mHasSpaceFeatures atomicity, PresShell event-handler UAF, wasm uncheckedReadValType missing types) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0747: Document::Open inheriting CSP from a different window - CVE-2025-5268: Memory safety bugs (gfxFont mHasSpaceFeatures atomicity, PresShell event-handler UAF, wasm uncheckedReadValType missing types)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els1.x86_64.rpm f2eb20b2e8b86eaa0d11c6da00079c7eb2fd73f4f56ea686121a9033ad8e5332 CLSA-2026:1779099998 TuxCare License Agreement 0 - CVE-2023-28755: fix ReDoS in URI parser by converting greedy quantifiers to possessive quantifiers in RFC3986_URI and RFC3986_relative_ref Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-28755: fix ReDoS in URI parser by converting greedy quantifiers to possessive quantifiers in RFC3986_URI and RFC3986_relative_ref

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_0.tuxcare.els13.i686.rpm 5ad6b1682fd73b453bd2ca8c32299c23638b03b4f0fbfaeea43aa742e1a98f29 ruby-3.0.4-160.el9_0.tuxcare.els13.x86_64.rpm 66c08dbcbd84565f83457384cbf27aaace61803678ae97040ec8d07565e59eb1 ruby-default-gems-3.0.4-160.el9_0.tuxcare.els13.noarch.rpm 84ea659e48c8794d69d26c8874ad5ffeb6de9d78af74dc5162e280a376ec50d2 ruby-devel-3.0.4-160.el9_0.tuxcare.els13.i686.rpm b98996bd5e886ae4fa7b1b79768702e0a99aeb0a3ab576f3dea12deef7619c5d ruby-devel-3.0.4-160.el9_0.tuxcare.els13.x86_64.rpm 0056ab2fa2b711c773856949c7541f7790356830bccfd72c90c626d7248af8c2 ruby-doc-3.0.4-160.el9_0.tuxcare.els13.noarch.rpm a77d33a0ee51c82a87e948f3023cabdba25e5b15014ceb3f6cbbb25d6803a575 ruby-libs-3.0.4-160.el9_0.tuxcare.els13.i686.rpm 2401bedf664dbc04f2da3bbe0daffdd35ed75302b7658a156b7ebc73b6e99ba4 ruby-libs-3.0.4-160.el9_0.tuxcare.els13.x86_64.rpm 95b826b7599d3fe8c5f29090af19f607181cae402cae05e6fb0b396033f49af0 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els13.i686.rpm 3f5fc4d0c94c53d59e15eac84e969255d807bdb4f9d40fa5d89994bce946bc84 rubygem-bigdecimal-3.0.0-160.el9_0.tuxcare.els13.x86_64.rpm e7e67ef4f04169f459f251df0959fbf73d90eeddb91e274e53089dc8539495d0 rubygem-bundler-2.2.33-160.el9_0.tuxcare.els13.noarch.rpm e3a225d40f2fe24a8df5c7235bd4c781f8af2895dd2649469fc24006f093d7b1 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els13.i686.rpm 452febeb2c947ed9a33ce83ac4c9f8c4672d0b6d236247d7b9fd5ede2075d971 rubygem-io-console-0.5.7-160.el9_0.tuxcare.els13.x86_64.rpm 88a4ec4d963768a152ac9c7bfc70f53b516f23cfc7375ba17bac4ce6b83043de rubygem-irb-1.3.5-160.el9_0.tuxcare.els13.noarch.rpm 735764b85028f800c845c93d5a8165179c7b2fbfb54ac330cadd643d890744d0 rubygem-json-2.5.1-160.el9_0.tuxcare.els13.i686.rpm 5e053ec77d38313d9e5ba8cfa9704775f50f12b3e85bbca41bcf40fb7a5f41e2 rubygem-json-2.5.1-160.el9_0.tuxcare.els13.x86_64.rpm 01abca26318369d842d6c75f51d869feeb5165cc38322fd57f137c525350f320 rubygem-minitest-5.14.2-160.el9_0.tuxcare.els13.noarch.rpm 1ddee39cd36fe6bd1d27e9c3d2c29dd63a62cb6f05f39ba40a00672edcb97cab rubygem-power_assert-1.2.0-160.el9_0.tuxcare.els13.noarch.rpm 61b522e8a85d3f6cdb11240dc7752cc507af7a8fcc8f071e4baa8fb59d08cf1f rubygem-psych-3.3.2-160.el9_0.tuxcare.els13.i686.rpm 9b80f72599df556ec150e1f8d0692f26aedda974d1f1dd9614fda7b0e0e24833 rubygem-psych-3.3.2-160.el9_0.tuxcare.els13.x86_64.rpm c4086c6739dcb01d9115bbe8c0d78f3582985e36a6dd7befdfe55be0c2c1c879 rubygem-rake-13.0.3-160.el9_0.tuxcare.els13.noarch.rpm d35b7a012ad66648c3980274146cad41681e73fb3b7fba85389ec3e196964706 rubygem-rbs-1.4.0-160.el9_0.tuxcare.els13.noarch.rpm e58b7ea2141dcdc9fec7a60631629191acbdba3c9fcbb776901ad8bd99f273ec rubygem-rdoc-6.3.3-160.el9_0.tuxcare.els13.noarch.rpm b654b550f74a1feedc93405b7493e398ad5e30bee2fea8007213c7039c9616e9 rubygem-rexml-3.3.3-160.el9_0.tuxcare.els13.noarch.rpm 5343d74f761b082ebe3f4ccaeba4ee080f8e08c094692196b993687689b8e49c rubygem-rss-0.2.9-160.el9_0.tuxcare.els13.noarch.rpm aa1fd11283591494817335521cca2d2fdba546410bbde6e34ab4561cb99337c1 rubygem-test-unit-3.3.7-160.el9_0.tuxcare.els13.noarch.rpm af7ae15274a28e93277bde92b071a097e6fd59643ceb14752097189900d34716 rubygem-typeprof-0.15.2-160.el9_0.tuxcare.els13.noarch.rpm ff725ee23b2f320401744e36387b51503855bdd795a0564d6222a3c2db52834a rubygems-3.2.33-160.el9_0.tuxcare.els13.noarch.rpm 207658b8cc40d613355c10f862b95d8047603c0c7888288c94ecec653e09bda9 rubygems-devel-3.2.33-160.el9_0.tuxcare.els13.noarch.rpm 112ed96c25fac6b0fc8d4cc4fe3e6907cb86e506dc3d42ad5ead88bb1f8c9207 CLSA-2026:1779101894 TuxCare License Agreement 0 - CVE-2023-40661: fix multiple smartcard pkcs15init buffer overflows, underflows and out-of-bounds writes (sc_pkcs15init_rmdir, setcos_create_key, cosm_new_file, cosm_create_key, sc_pkcs15_get_lastupdate, iasecc-sdo, entersafe, epass2003 keygen) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-40661: fix multiple smartcard pkcs15init buffer overflows, underflows and out-of-bounds writes (sc_pkcs15init_rmdir, setcos_create_key, cosm_new_file, cosm_create_key, sc_pkcs15_get_lastupdate, iasecc-sdo, entersafe, epass2003 keygen)

0 tuxcare-almalinux9.2-esu opensc-0.22.0-2.el9_2.tuxcare.els6.i686.rpm ee05b9628385acb5c7cfd3e1f54def66fff5924eb931d6fc9b652f9e8d6d08e2 opensc-0.22.0-2.el9_2.tuxcare.els6.x86_64.rpm d6b8c5205af92cbdd9fcd991408e43026c35e2e946618ac80c92b1b66b66fc6e CLSA-2026:1779119949 TuxCare License Agreement 0 - fix CVE-2024-34055: denial of service via memory exhaustion using oversized IMAP literals and command arguments - disable cassandane test runner on x86_64 and aarch64 due to multiple unrelated mock-environment issues (imaptest binary SIGSEGV, slow file I/O, alarm scheduling races); cunit which exercises the CVE fix continues to run on all arches Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix CVE-2024-34055: denial of service via memory exhaustion using oversized IMAP literals and command arguments - disable cassandane test runner on x86_64 and aarch64 due to multiple unrelated mock-environment issues (imaptest binary SIGSEGV, slow file I/O, alarm scheduling races); cunit which exercises the CVE fix continues to run on all arches

0 tuxcare-almalinux9.2-esu cyrus-imapd-3.4.1-7.el9.tuxcare.els1.x86_64.rpm 2050d6f0bff3a0ca691935a6e10154ed4d8a00c9185e7deba1818e5a47ed99b7 cyrus-imapd-devel-3.4.1-7.el9.tuxcare.els1.x86_64.rpm e20674922ab4aa4e51caca2755e620524b6ebf5aefe12184b6fb49636a6fd967 cyrus-imapd-doc-extra-3.4.1-7.el9.tuxcare.els1.noarch.rpm dec5a2c3b7aed99ecfcdb59c45761cc73f7137cae014bd2ba58d3534e774006e cyrus-imapd-libs-3.4.1-7.el9.tuxcare.els1.i686.rpm 6405f091c1506b843b49c2ffefd8b9613cd64df01ff29642944c109d742e62c8 cyrus-imapd-libs-3.4.1-7.el9.tuxcare.els1.x86_64.rpm 14a47b95d2b6cb8cc5db5fd34e990f27ac9c4ffbd7cb41cac4cf5a90258e9aa0 cyrus-imapd-utils-3.4.1-7.el9.tuxcare.els1.x86_64.rpm 63ebc594c74de7848e8637c5b1556fef7176bc37daf602e77df833e0d25a865f cyrus-imapd-virusscan-3.4.1-7.el9.tuxcare.els1.x86_64.rpm 4fd87b9ae4e71002cfaf04664f3043ad5eac24c7d2415beb4a9d768d1f2b61cf perl-Cyrus-3.4.1-7.el9.tuxcare.els1.x86_64.rpm 66e32ba73b7a4881ab1815502348cbc153bd61191ce08a30474b99a8a95fa680 CLSA-2026:1779120195 TuxCare License Agreement 0 - CVE-2020-11023: fix XSS by removing bundled jQuery from Doxygen-generated tbb-doc HTML Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-11023: fix XSS by removing bundled jQuery from Doxygen-generated tbb-doc HTML

0 tuxcare-almalinux9.2-esu python3-tbb-2020.3-8.el9.tuxcare.els1.x86_64.rpm cdc6d80e53e3a349cfd33c726f1f4526952ec49e017a7d129f5b81e0e70fa745 tbb-2020.3-8.el9.tuxcare.els1.i686.rpm a82be6b10a8642454dfc2b578428ba585f140402f92a2121168e91250dabc09b tbb-2020.3-8.el9.tuxcare.els1.x86_64.rpm ff9f74b51e326c2740c337525dfa5b3cae3b71b5e0ee882c19e8dec228b82902 tbb-devel-2020.3-8.el9.tuxcare.els1.i686.rpm 2e5890732b833fd00bdeb81a4eb1804cbc9278333f80e6b01594c1701db291b1 tbb-devel-2020.3-8.el9.tuxcare.els1.x86_64.rpm 8e626835d9372e9a81b099b36e18b8769f7ff8d671389cf8439accc131cdce54 tbb-doc-2020.3-8.el9.tuxcare.els1.x86_64.rpm f96ca7bfbad3defb4039f542ccbbfd83d87c10308d289586e1bdd62de99c159f CLSA-2026:1779153233 TuxCare License Agreement 0 - CVE-2026-32280: Limit processing of attacker-supplied intermediate certificates during chain building and introduce bound on number of intermediates, preventing uncontrolled work and denial of service Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32280: Limit processing of attacker-supplied intermediate certificates during chain building and introduce bound on number of intermediates, preventing uncontrolled work and denial of service

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els9.x86_64.rpm 6a5742da48427b2d9e0279048be83b07ede50f78475854eca972e1c802d4a639 golang-1.22.9-1.el9_2.tuxcare.els9.x86_64.rpm a7a4b305f7713854ddc5f236c3313b91facc035047d81800f6060fb5aa0703c5 golang-bin-1.22.9-1.el9_2.tuxcare.els9.x86_64.rpm 2fd480c50099468ed764cc2ea2168001805d82471dc076d2919da86fcf71f535 golang-docs-1.22.9-1.el9_2.tuxcare.els9.noarch.rpm 99e4d5ee111983690d60fc26317a75d677005f42d9954e9d4454450f247ce49f golang-misc-1.22.9-1.el9_2.tuxcare.els9.noarch.rpm d5c733ba5fa782268c75beef815eb04c79b4d7839f416fae4af01b7efc26bcf0 golang-src-1.22.9-1.el9_2.tuxcare.els9.noarch.rpm a5dd02b7f71fc4106e93725011be1202faf5ad743c73dffa1cd9ed214ec72dd3 golang-tests-1.22.9-1.el9_2.tuxcare.els9.noarch.rpm c794fb10d79464a264784435a0edb0ba12ae479aa87e0703d821fcdad8198a36 CLSA-2026:1779190223 TuxCare License Agreement 0 - CVE-2023-5992: implement constant-time PKCS#1 v1.5 depadding to prevent Bleichenbacher/Marvin-style timing attacks - CVE-2025-49010: fix stack buffer overflow write in iso7816 GET RESPONSE - CVE-2025-66037: fix out-of-bounds heap read in sc_pkcs15_pubkey_from_spki_fields - CVE-2025-66038: fix buffer over-read in sc_compacttlv_find_tag - CVE-2025-66215: fix stack buffer overflow write in card-oberthur auth_compute_signature and auth_read_record Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5992: implement constant-time PKCS#1 v1.5 depadding to prevent Bleichenbacher/Marvin-style timing attacks - CVE-2025-49010: fix stack buffer overflow write in iso7816 GET RESPONSE - CVE-2025-66037: fix out-of-bounds heap read in sc_pkcs15_pubkey_from_spki_fields - CVE-2025-66038: fix buffer over-read in sc_compacttlv_find_tag - CVE-2025-66215: fix stack buffer overflow write in card-oberthur auth_compute_signature and auth_read_record

0 tuxcare-almalinux9.2-esu opensc-0.22.0-2.el9_2.tuxcare.els5.i686.rpm 2f3fd3517015239c2cdc7f25bf8c106d755062aa2ca24888f5145e0057ae46e7 opensc-0.22.0-2.el9_2.tuxcare.els5.x86_64.rpm 844c30b0f2540213ad3ba760bc9126332b7f36e329ff0e7279b595de1047651d CLSA-2026:1779204030 TuxCare License Agreement 0 - CVE-2024-46544: fix insecure file permissions on shared memory and lock files Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-46544: fix insecure file permissions on shared memory and lock files

0 tuxcare-almalinux9.2-esu mod_jk-1.2.48-23.el9.tuxcare.els2.x86_64.rpm ba39691c961577350da11d972e11538c2fd57e9fd0ffda717c0e6260672ab956 CLSA-2026:1779214855 TuxCare License Agreement 0 - CVE-2026-1519: fix unbounded NSEC3 iterations when validating referrals to unsigned delegations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1519: fix unbounded NSEC3 iterations when validating referrals to unsigned delegations

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els9.x86_64.rpm 80c18fc7e3c6e4dd1763d912c57628b1415b2b526b0d7251b7f98da6fc03b65c bind-chroot-9.16.23-11.el9_2.2.tuxcare.els9.x86_64.rpm c3c9f5e75084137de85c69805826aff0c0d9693a0ae5cd8f803e7ff81ecf65e3 bind-devel-9.16.23-11.el9_2.2.tuxcare.els9.i686.rpm 6047adc4605a3e01d6757ac637b9a9c2506f29558a99bf9d8c2bf57d24ffdf3f bind-devel-9.16.23-11.el9_2.2.tuxcare.els9.x86_64.rpm d7b70b158098b46aa523558db2fd2c4b32a58b7b482006658c59738d5593bf58 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els9.noarch.rpm e5871f6c83e0f33eca0d8baf63d6c864a0fe2b6dcb79f62644c0d9249ae7e421 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els9.x86_64.rpm b0f78d093e6f2a025b7e27991aff7cdb7244152e93510d9306574438f65bf3cb bind-doc-9.16.23-11.el9_2.2.tuxcare.els9.noarch.rpm a5bab211f54d2708b571808136d8646169dccc1044db3391a39eb5f2f5f9b225 bind-libs-9.16.23-11.el9_2.2.tuxcare.els9.i686.rpm 97b2741b9e9da44eb839a10aece70224b991a24df3c95d3ce3b4be40e912c423 bind-libs-9.16.23-11.el9_2.2.tuxcare.els9.x86_64.rpm 7d8b96faa46e431e553eb98ffba6a9081f16854cd4511fb32a4b3cf38535c390 bind-license-9.16.23-11.el9_2.2.tuxcare.els9.noarch.rpm 4cfa38d7a728fdf20f87b7bdbead629e81d44920df9a43fd17da49923d5835e7 bind-utils-9.16.23-11.el9_2.2.tuxcare.els9.x86_64.rpm 462b838a3fcd628763a672c4244c33b80c0db63c25e6769e11742a35e7299276 python3-bind-9.16.23-11.el9_2.2.tuxcare.els9.noarch.rpm 710ea9ebc0b4cc00a70f99b2753b9d896af1e4f3f238870ddc33718b7c002850 CLSA-2026:1779266445 TuxCare License Agreement 0 - CVE-2026-3441: XCOFF linker XTY_LD x_scnlen out-of-bounds read - CVE-2026-3442: XCOFF linker r_symndx out-of-bounds read in obj_xcoff_sym_hashes - CVE-2025-7545: objcopy heap buffer overflow on --interleave with crafted small input - CVE-2025-5245: objdump SEGV / NULL deref in debug_type_samep and debug_write_type Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3441: XCOFF linker XTY_LD x_scnlen out-of-bounds read - CVE-2026-3442: XCOFF linker r_symndx out-of-bounds read in obj_xcoff_sym_hashes - CVE-2025-7545: objcopy heap buffer overflow on --interleave with crafted small input - CVE-2025-5245: objdump SEGV / NULL deref in debug_type_samep and debug_write_type

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els12.i686.rpm 9aad2c71ad118350aa2edf68b6444f057e60c64228f91273384cd98271e2931f binutils-2.35.2-37.el9.tuxcare.els12.x86_64.rpm 6b48007b7566e5f54defed6112c52a16638c70bdcf3400139382e18d2223f8eb binutils-devel-2.35.2-37.el9.tuxcare.els12.i686.rpm f4ca6b6deebdface81f2f0375811786e119da6421f281e7c24267929bdcafd19 binutils-devel-2.35.2-37.el9.tuxcare.els12.x86_64.rpm 4e040c6706dfae17d4009a3de407ee607d5762ada2b471e796f8cf0f808556a2 binutils-gold-2.35.2-37.el9.tuxcare.els12.x86_64.rpm 51b861bc285c7cb1060ada98b8c832198bb1b9e8ff50aa044f6267f15ca847b1 cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els12.x86_64.rpm abfb359ea499772a460ec92c9ff0ed5cb48c1dbbb14fd42c98c78b30d1791976 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els12.x86_64.rpm a7d602ccaef51a668ee7fc34a3eafffc4a6fc5b5645321dd8e82a27ccc023fa9 cross-binutils-s390x-2.35.2-37.el9.tuxcare.els12.x86_64.rpm 51e3b94a7780ac5cbe49cfeeffd8714aad41902d1eb600b069cb7809e35d0da2 CLSA-2026:1779272835 TuxCare License Agreement 0 - CVE-2026-42010: fix RSA-PSK identity truncation allowing authentication bypass via NUL byte in client-supplied username Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42010: fix RSA-PSK identity truncation allowing authentication bypass via NUL byte in client-supplied username

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.4.els4.i686.rpm 26e8584382f802db91229dfa87f2104e0ce86276bde5c56a5eb72da6e174ee92 gnutls-3.7.6-23.el9_2.tuxcare.4.els4.x86_64.rpm 9f4f6ce5de51ae0506464104c3dab0c459133df2919e730d123be37f1bfc6ba0 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els4.i686.rpm 160863959342f65b87affbdab4ba8b221b1f3138e016bcc86fdf41f2fa4ccb9b gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els4.x86_64.rpm 6b05736793567c3e71c5629e677cd0663ca7e3c4885829e247a5782b281de91d gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els4.i686.rpm 859c2d07f80f09550e01dfd7857d134b77c6ab54a33adf95149071b260224fbb gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els4.x86_64.rpm 7065daea8aede5d9602acd3a952b17f2e8b199fe04a0f608e31d34ed6505ff69 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els4.i686.rpm 28cd93aa37f2662d11a56fc6ad41b1236e460235608f0d7bfe32bd9c274ab78e gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els4.x86_64.rpm c088051f8be6772295b5939e8e1e723140c753e7b88bfd269722ce9a97e78850 gnutls-utils-3.7.6-23.el9_2.tuxcare.4.els4.x86_64.rpm 4be0140bdfcd3712a8ddd9f2a2ce06f1d685b96ff153dd444b286d4a2013da10 CLSA-2026:1779121308 TuxCare License Agreement 0 - CVE-2026-7258: fix signed-char passing to ctype.h functions in urldecode and url parsing (GHSA-m8rr-4c36-8gq4) - CVE-2026-7262: fix NULL check in to_zval_map() using wrong variable xmlKey instead of xmlValue, causing crash in SOAP typemap decoding (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7568: fix signed integer overflow in metaphone() by switching w_idx/idx/how_far from int to size_t in ext/standard/metaphone.c Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7258: fix signed-char passing to ctype.h functions in urldecode and url parsing (GHSA-m8rr-4c36-8gq4) - CVE-2026-7262: fix NULL check in to_zval_map() using wrong variable xmlKey instead of xmlValue, causing crash in SOAP typemap decoding (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7568: fix signed integer overflow in metaphone() by switching w_idx/idx/how_far from int to size_t in ext/standard/metaphone.c

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 6e0b3eb5223a9931585282953353a823e132dac984931d42f77d3f8719b0e4ae php-bcmath-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 981bcef9e8b730eb320ca1be21320a0a67fcf77d87e638af4dd75397307701b5 php-cli-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm aa5e229fe0dace152253e8107ab0249a5c4d6bafde44f52b6eda3e16b7ad3b97 php-common-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 0e444d1563c36ef43c74ab99baa57ae8853ff79c1ce974a544850ca8f3da436e php-dba-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm dac883eb1e09a6821e9da3b5e2a506c1393019a0f84a36655e5e8e36c19d4b00 php-dbg-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm d3d0dabefbbe3b862e49ac6ccbba6ffadbc911784963cb51aa290a12f26a9614 php-devel-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 3c0482c6dd788cbcabf6f602c98aa70b1b6dacb2619a48da333649e3dd4dad13 php-embedded-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm e06ca5b8e15cd6a18c2260dfe4c960b95cbe7fe0e6197570ae1b405ad09e052f php-enchant-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 3ee6b4b32edb455ead36b84dfc70602022856db284b86e912e58f96c4c713e6c php-ffi-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 9ee5dcd7d2e495feab6b79f9c6ace1ea0f02ec5f8658f4c1216381850bfdbd1e php-fpm-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 6deab6c8a72db348c05e165efba73a2fa0771e1cc4880ea767d5b3080951aee0 php-gd-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 23ff003b2f8b08028a9202807982738c32178d1909151e684f86a1dcbeb93673 php-gmp-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 8214b3efd3726648cf31ac429a16b309cb65ca4b57deb2fde58d29ff016a9474 php-intl-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 0e63e80742b8853ebadac4f1c8d937d978a3347dde8a2d3f462d063ef2a6dfd8 php-ldap-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 8ab8d3109b2959201279353bf598e1031379df5b8bb74d23a6b3b1ffbc62bba0 php-mbstring-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 624eea15ae801f0e4caaf840d738b9d586906b27170c683e0e6d477c7855142d php-mysqlnd-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 05c5244f67749b4db2bf4e2af0f3dd39fa0d839e212e409e14f69b97ea5f5eca php-odbc-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 63fb2247eadf049e79e2d5db086b10a9312a82840f8c3a9d60ab6cfea9f47b17 php-opcache-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 9303d0c56ceb16146af3dcb5a28b68f3f40d00cb0558b53106a498a7b2fcd22f php-pdo-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 7d23776efd552b8d310be15831704571c78126fed8bf5515443f32945308cd8b php-pgsql-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 078679bb6cc13e7a9ffd49eb4b1e3b0d699cfe1e57c5becc8ff1e908e58dfd80 php-process-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 7db64d61d56bcfb9a91f2c756b9a5900c5f82fe7d2475c023d40f60b01f8baac php-snmp-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 533b44db6d8d8f7053ab0d4a644291eecdf562462429bd4f7edb7bd3c0f92eeb php-soap-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm a32f72d498e1e6768698520d47b49d38781ca3f3414594622688f49ee2e72924 php-xml-8.0.30-1.el9_2.tuxcare.els14.x86_64.rpm 342375aaeed674e5141103cdd09fd581ac01f94390ed5bf3d21d6d80712570bf CLSA-2026:1779290839 TuxCare License Agreement 0 - CVE-2026-26740: fix heap OOB write when rewriting truncated GCE in EGifGCBToSavedExtension Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-26740: fix heap OOB write when rewriting truncated GCE in EGifGCBToSavedExtension

0 tuxcare-almalinux9.2-esu giflib-5.2.1-9.el9.tuxcare.els4.i686.rpm 94b27677d6bf48c0ee5be2374fc639762a322917cef25f573919e2fe5c0cff93 giflib-5.2.1-9.el9.tuxcare.els4.x86_64.rpm 853903be21b76a2ca7359592c57f935a3a9efdbe96c6b9c0889945bfbca01391 giflib-devel-5.2.1-9.el9.tuxcare.els4.i686.rpm 8921673ea1e03f1dc6219e9c767d54dbeb7828a939f3782671beb129d43f0f8e giflib-devel-5.2.1-9.el9.tuxcare.els4.x86_64.rpm ccf9157e8339d1b053323ba6019324648cb38833437708b31d4ad08d0cbacc8e giflib-utils-5.2.1-9.el9.tuxcare.els4.x86_64.rpm fd04c1b657e7622a92f8ca876816920522b8957f3ffba9096f0188f467cbbc6b CLSA-2026:1779293372 TuxCare License Agreement 0 - New FIPS build for lab review incorporating the els13..35 patches and CVE references None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- New FIPS build for lab review incorporating the els13..35 patches and CVE references

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.x86_64.rpm d7b695d6648beffc4f1f8e1c8d6f6cf2d842a4613238967b1feaab573a45750c kernel-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm e7765232d3ccfcac98b6ec3077d286293605e0449b93cbd7f92f688f96f0cbd8 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.noarch.rpm f3f1a43be1b1257eff9d9860707e4164b9c48e10bed74aaeb5aef0abe9075703 kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 6e8b20cf86dfe515b6c2de3a3eb587c3757c813ddb8856483e418178d697f476 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm a499185a43c385471a235e33d938e6b1d7637a9f874078023f60b54fab3b2e9f kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 14164ef5b11550e32dd5eb9db99ad4a10a3447d22b204463e9bcace49e893769 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 6f812d6f1a0808cb0aac0f41bd023254f8fd9c4ef146df57394209305f61272a kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 9de199f3f7c8918ff7b03cbac4dba49dec84f3902e78e91860e30bfe1ba583dc kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 7af0a5cd155473f168745becc8a1e2f8027a63643e847f31cd1b04958e11c22c kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm a4fb8a7342176d1621955149fbd49431c8835811d0998ad9cf0dc5373ba1f9f7 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 6f32bf24ca2cc58c2eb5553aae7bfd68d7bd6f4012e027b22df30b491dc1c8ce kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 3798a0a5a35a77fab0fca0129280ae379f32d4210f0e72080f341cafdaad748a kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 2f786b67da898bc396f3746b856dd6a12b1d9c6c67ab84493796ef1e92aa9721 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 956152c381af144fe23cba04ed9e216edb90a38c66c9d81a6ff8a2fc62dcbf2c kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm a614f3b6d38118a20cc95bd9acde06f5a3c4719890ecd276b275c30868f94f82 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 7dcbd22c20e9a202435b2bfc8dbf14e9ccaae90fa524cda7eaf41ae6c0537bcb kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 5796a4c18c6eff430081265bf573c70afdf9dfc2b0dd8f9553d98fc95c36d4bb kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.noarch.rpm 34bccfde924a9c572ef13094f926b31aa6c461ff551c76caf90a9be8998b550c kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm e6b72f5197aa05b5041848c6411bec6a1a9f3d0002c3be9772a215102e4f946a kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 1c9772e2f979851900da70b2cb1ea4a2b62dcb12968b39b375f270f85aa6e423 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 41a0d1c930a74ec7d036ed0d6c4186f3fa3d0cfc5ae7905d8a0aa923f78277ce kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 021e65e6ba6e4bf26254fe9d35f00dcde3301694f39331bdf0f873095ea74bd9 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 193eb79f9e3b0f2e68c54be7fe01f94d06e7ab5255063c8e6b910a4bbee8493d kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 6f29187b9cd2f5fb62cdc6c86ddbc4a144a6da603728626a2c5e0e331e35082a kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 67ed2f9ed85c0119fcffebc5ff1467e2d2ab96291fee5a962f1eee4c573392c9 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm cd529016255512cf75ce8190e138830d2e10ffbc175704ea8e578773386ba540 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 9d5946daadcdd5bc2dfcf2ed8e5d54a669eab2598245b2516c3014070f349478 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 03ff467212850cbcbf4123c34b8000e71a985756b6dfe553afc9f9517cd7518a kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 04f8444fc0551503b2b958c608655b8e660768070a161da56095c7ee7ccae7f7 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 2cd56055736eabf83fa631304f0a936ff9111141505fed405a382ec623b4a6c4 perf-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm 9b78ff7a89131e756bbd105eaf2165b92439e5b1e45d9b2dfa44fe8a85a228e2 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm e69512853e5ad6e2324704dff4cb43f5749b8d6af7b9c9df73d578c1b1ba0560 rtla-5.14.0-284.1101.el9_2.tuxcare.11.x86_64.rpm b787d3286fc0ea532a9404f887acfee0da43022a1a7131c90fd7ef2dce29c0b0 CLSA-2026:1779368985 TuxCare License Agreement 0 - CVE-2023-40660: fix potential PIN bypass when card tracks its own login state Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-40660: fix potential PIN bypass when card tracks its own login state

0 tuxcare-almalinux9.2-esu opensc-0.22.0-2.el9_2.tuxcare.els7.i686.rpm eea35179092bf116850b5380a303a25195ed734d20f1ea98c6310d33ae303f73 opensc-0.22.0-2.el9_2.tuxcare.els7.x86_64.rpm 7d047091454d4df5a25554560ee4f585c3a25c5a20a601d9e7e34b572273aaa9 CLSA-2026:1779370563 TuxCare License Agreement 0 - CVE-2025-0677: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0677: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks

0 tuxcare-almalinux9.2-esu grub2-common-2.06-61.el9_2.1.alma.tuxcare.els10.noarch.rpm b6081cc4cd7a50bc224de8a739edfc9fa1d9cce979b2480cb86d4c1107b10dda grub2-efi-aa64-modules-2.06-61.el9_2.1.alma.tuxcare.els10.noarch.rpm db130c2be62bcee3c478ba8d981319a4e4faff5caa70dc6036c290e5c2ff8b34 grub2-efi-x64-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm 62eeae931a103f1110831a476aedcb6cadec9c85c02344509792ea19d1774723 grub2-efi-x64-cdboot-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm e75aefac1b9053b0d8a64f56a86e159a5585b18622c6fa8d04f3c42bac6b448a grub2-efi-x64-modules-2.06-61.el9_2.1.alma.tuxcare.els10.noarch.rpm 8902b697adb8c50efd6e21bd3d770a73a2fd1d0c2e75cf368f628e3a725de216 grub2-emu-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm 50ebe90e0d59efb004df77931161b5899e39b8e83332e0e59313df462e8e62cc grub2-emu-modules-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm 98a9545b72aea4125458b05fe9ed5e5866a0d5173ad7e94e43f986d0cfba972e grub2-pc-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm d3e022798495eb0a38cb19c8fc47d8b51d3c2a92aedb6b2db8106adaa490d111 grub2-pc-modules-2.06-61.el9_2.1.alma.tuxcare.els10.noarch.rpm 0cd2545478078908350c005b1f1b0ba22de4a9c34acdb7c64fa0d020bf3385fa grub2-tools-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm 74687f3f4e7810a119d3d2c1552d027f0d72fea6a2a503cc526c0ad0ef89a73b grub2-tools-efi-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm 7ccde6c9c212a2b5ba276b44787526cce7cfd325103b73dc2727e38c9604b43a grub2-tools-extra-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm fe7442d166bcbc215d6a8e1023cd8ecb1fff228968acc8a49cec67ff016cc20e grub2-tools-minimal-2.06-61.el9_2.1.alma.tuxcare.els10.x86_64.rpm a66f77c943bd73110fe00deb7267ed6ffc2b33c0bad1aa8288a710cdfe78fd13 CLSA-2026:1779373661 TuxCare License Agreement 0 - CVE-2024-26306: use OAEP padding instead of PKCS1 padding for OpenSSL to address timing side-channel in RSA authentication. Note: peers running patched and unpatched iperf3 will fail to authenticate unless the legacy behavior is explicitly opted into via --use-pkcs1-padding on both ends. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-26306: use OAEP padding instead of PKCS1 padding for OpenSSL to address timing side-channel in RSA authentication. Note: peers running patched and unpatched iperf3 will fail to authenticate unless the legacy behavior is explicitly opted into via --use-pkcs1-padding on both ends.

0 tuxcare-almalinux9.2-esu iperf3-3.9-10.el9_2.alma.tuxcare.els4.i686.rpm 0d1649e9fd4f56b1029413f59416e9777227027b88011abd20761063193215d0 iperf3-3.9-10.el9_2.alma.tuxcare.els4.x86_64.rpm 0a02f29af94b1a5a25bc6ec81c2e75b61de61135813095073912ed9375da382e iperf3-devel-3.9-10.el9_2.alma.tuxcare.els4.x86_64.rpm c88bb3e186bfea4bbf870508f8b9202509f5c8efef222aca0362907538287788 CLSA-2026:1779358660 TuxCare License Agreement 0 - CVE-2026-5773: wrong reuse of SMB connection; disable connection reuse for SMB(S) so a subsequent transfer cannot wrongfully reuse a pooled connection to a different share - CVE-2026-6276: clear stale custom-Host cookiehost between requests on the same easy handle (cookie leak across origins) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5773: wrong reuse of SMB connection; disable connection reuse for SMB(S) so a subsequent transfer cannot wrongfully reuse a pooled connection to a different share - CVE-2026-6276: clear stale custom-Host cookiehost between requests on the same easy handle (cookie leak across origins)

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els11.x86_64.rpm e38848f331a0f620216d73955e071b9d1d9e033069373cde05cd52ed31129bc9 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els11.x86_64.rpm 9691528f3d976d44e31cbec7acdbd3cc7f67138c4bda57502e14b9b39452f4e4 libcurl-7.76.1-31.el9_2.1.tuxcare.els11.i686.rpm 04d50ccf369ab000924f2c1e987d8893b42ea0c36386881c77e488ee24a7c2f5 libcurl-7.76.1-31.el9_2.1.tuxcare.els11.x86_64.rpm b7a2b91f9426a5d9bfe86ed2089f1010270e7f01102a46884d73b9c88457869c libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els11.i686.rpm 36b33bde9510b8e9ed82b9b1ee68fba7a9a2c6b90dc3a1448a14bd32d7a41711 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els11.x86_64.rpm f7d1b665cf78cecd1bf5c8a90457496dd1314da29871bff68656016f9b8de3bd libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els11.i686.rpm f5f2a7e6d17fffbeeb8f88f729a986a2b07d6bc5f9eb6ca4f98f5b793826d65d libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els11.x86_64.rpm c4a9817647e113de2b379264ae36ea886d6aa98567d9eecc3ed04e385283a47d CLSA-2026:1779438231 TuxCare License Agreement 0 - CVE-2026-43618: fix integer overflow in compressed-token decoder allowing memory disclosure via crafted compressed stream Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43618: fix integer overflow in compressed-token decoder allowing memory disclosure via crafted compressed stream

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9_2.tuxcare.els5.x86_64.rpm 32efab2faff2a18c0836455251c99091d443a3467d554ffcbe0ba953433a85bf rsync-daemon-3.2.3-19.el9_2.tuxcare.els5.noarch.rpm 182f7c66506e4595e32d39a30a381b26469a62d60b86bc24db3bc2b60dbb7a07 CLSA-2026:1779455055 TuxCare License Agreement 0 - CVE-2026-2291: heap OOB write via undersized union bigname buffer - CVE-2026-4890: dnssec NSEC bitmap parsing infinite loop - CVE-2026-4891: dnssec missing rdlen validation in RRSIG records - CVE-2026-4892: helper buffer overflow with large DHCPv6 CLIDs - CVE-2026-4893: broken client subnet validation in process_reply Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2291: heap OOB write via undersized union bigname buffer - CVE-2026-4890: dnssec NSEC bitmap parsing infinite loop - CVE-2026-4891: dnssec missing rdlen validation in RRSIG records - CVE-2026-4892: helper buffer overflow with large DHCPv6 CLIDs - CVE-2026-4893: broken client subnet validation in process_reply

0 tuxcare-almalinux9.2-esu dnsmasq-2.85-6.el9_2.tuxcare.els3.x86_64.rpm c4c0f1bf15a079643a5bfa7283cd9dbbae84af58bc57cfba2a2204d66a213644 dnsmasq-utils-2.85-6.el9_2.tuxcare.els3.x86_64.rpm 05c7521d94855940de09198ff0bf842ba9e48f84e3dcf762f23297e69f91b588 CLSA-2026:1779462894 TuxCare License Agreement 0 - CVE-2026-43620: prevent client-side out-of-bounds read in receiver when a malicious server sends a crafted file-list with parent_ndx<0 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43620: prevent client-side out-of-bounds read in receiver when a malicious server sends a crafted file-list with parent_ndx<0

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9_2.tuxcare.els6.x86_64.rpm a15b8ca272f64aeaa61c931428a63494826a80b3aa0134c2f9a56d2b65063c43 rsync-daemon-3.2.3-19.el9_2.tuxcare.els6.noarch.rpm b4b0690d1ef18edbe02431aae87401417bed3119601622152336caa7167d46c5 CLSA-2026:1778860714 TuxCare License Agreement 0 - CVE-2026-4153: fix heap-based buffer overflow in PSP file parser by computing proper line_width for bit depths 1 and 4 with small widths - CVE-2026-4154: fix integer overflow and buffer overflow in XPM file parser by adding GIMP_MAX_IMAGE_SIZE bounds checks and using g_try_new Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4153: fix heap-based buffer overflow in PSP file parser by computing proper line_width for bit depths 1 and 4 with small widths - CVE-2026-4154: fix integer overflow and buffer overflow in XPM file parser by adding GIMP_MAX_IMAGE_SIZE bounds checks and using g_try_new

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els11.x86_64.rpm 074badc1ea5673767eb074dac25191bf6a7f785e8cf50d5790a66ea0663a39a9 gimp-devel-2.99.8-4.el9.2.tuxcare.els11.x86_64.rpm ca5a06c3bc0661ea0f06eb47c374d0527c688a17aa5ae5a3691c5e4441aa6592 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els11.x86_64.rpm bc2826a5734c597620326a6483ca975864974512c5bad0c9929461749fb09e40 gimp-libs-2.99.8-4.el9.2.tuxcare.els11.i686.rpm 7c091ed18f3161470b50e69594076143a58816a38459b118510653db36439a4b gimp-libs-2.99.8-4.el9.2.tuxcare.els11.x86_64.rpm ac0a22aec79e48f58bdc03d592736ece4ec2e270c109c5e01ec2c274f9f324eb CLSA-2026:1779372929 TuxCare License Agreement 0 - CVE-2026-7168: clear proxy Digest auth state when CURLOPT_PROXY is reassigned to a different proxy host on the same easy handle so a stale Proxy-Authorization header is not replayed to the new proxy None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7168: clear proxy Digest auth state when CURLOPT_PROXY is reassigned to a different proxy host on the same easy handle so a stale Proxy-Authorization header is not replayed to the new proxy

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els12.x86_64.rpm 89552f23dc03b42a14ad342b7e4378ce138ad86dedc35fc7e54b7e2bcd581dfb curl-minimal-7.76.1-31.el9_2.1.tuxcare.els12.x86_64.rpm 3cdc05caa2028cfc38312c94f65df560e2f7e4ec1af87e879de896c9a7ce2b9b libcurl-7.76.1-31.el9_2.1.tuxcare.els12.i686.rpm fb94ea961a5a2381ad3fa79c07ed0b212cc4fa6e6decfe15bd80fa7bf1158df4 libcurl-7.76.1-31.el9_2.1.tuxcare.els12.x86_64.rpm 54786d840d57b55bc890c8b644ecdec462a89eead446fef529b0e238181946f0 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els12.i686.rpm 36016bb3d11df19d92979f46e1469ccd4893b96e510aa690b9b30c782079e8ff libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els12.x86_64.rpm cd591063d0e29ffcd1d7c602f56566f9793472572a201f01643014ac53f8120e libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els12.i686.rpm 38c4e19e6a450d2c6c1e3e82ba6d0de6352e3074ea26a54c79a4706ba7d8bc25 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els12.x86_64.rpm a98c382b60af0673064a93d295ca5a5d5d407b6452eb293b8cd65cc725108923 CLSA-2026:1779496075 TuxCare License Agreement 0 - CVE-2026-45130: fix heap buffer overflow in read_compound() in src/spellfile.c Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45130: fix heap buffer overflow in read_compound() in src/spellfile.c

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els30.x86_64.rpm c6ad4f975769935e88a7629de3b053cb9d687c97cb07c1237eff59872dc779cb vim-common-8.2.2637-22.el9_2.1.tuxcare.els30.x86_64.rpm e68eda18680b15bc0a3da34cae7239eba761fd36ae677eb8a0d536acf5588252 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els30.x86_64.rpm 707109097204c82029cf54793c0a1b8094d15c58bdff423ac8b9dac7779d5a8e vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els30.noarch.rpm 0b7e6ea0b3b5d6d6858f137b3b6221a471c9fa03d12827a517a518a45752eb5f vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els30.x86_64.rpm 871b0aedfc9fc8cd00a62443a9a0c0cad76643dad03986711eab5a92981c4055 CLSA-2026:1779532464 TuxCare License Agreement 0 - CVE-2022-39324: build snapshot originalUrl on the backend with a UID check and warn through a confirm modal before navigating to a cross-origin snapshot URL Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-39324: build snapshot originalUrl on the backend with a UID check and warn through a confirm modal before navigating to a cross-origin snapshot URL

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els15.x86_64.rpm 6279371e384cda468d944dcd25b93130eb6f6330eae144e5d196d2b842cb7710 CLSA-2026:1779533209 TuxCare License Agreement 0 - CVE-2024-6501: NULL pointer dereference of n->lldp_rx in nm_lldp_neighbor_parse() when DEBUG logging is enabled, leading to denial-of-service on malformed LLDP packets Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-6501: NULL pointer dereference of n->lldp_rx in nm_lldp_neighbor_parse() when DEBUG logging is enabled, leading to denial-of-service on malformed LLDP packets

0 tuxcare-almalinux9.2-esu NetworkManager-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm eb02d219d39737fe4da370e0e2fb63e4b499ec9928b4637c8799933f350aeea8 NetworkManager-adsl-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 197e5e8777507acb47c5a2a8575c8c3dd70799c213593ef47611d0192c85748e NetworkManager-bluetooth-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 927d5e49cb157650dd04c12ce982db4bc6bd8b0e20625bdd305027a3c243c407 NetworkManager-cloud-setup-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm f24420aa7a908af09a8f11a8fd1d0a6951017d6257eecaccdef1a6bc55da9e97 NetworkManager-config-connectivity-redhat-1.42.2-8.el9_2.tuxcare.els2.noarch.rpm 47dcb5c8f6fe2850a2fd3a79cb97677dcb2f38808c04bfca0013c0be533aea7f NetworkManager-config-server-1.42.2-8.el9_2.tuxcare.els2.noarch.rpm cd0f0f2f6a60f43f3e1261ab003989e76142a46d399f7a36b76395790df3477a NetworkManager-dispatcher-routing-rules-1.42.2-8.el9_2.tuxcare.els2.noarch.rpm bb809666f9830386b6bef8cac64957982656a0d5e60d38b2dcc523eaa292766a NetworkManager-initscripts-updown-1.42.2-8.el9_2.tuxcare.els2.noarch.rpm 4c68913a1769f353b3b4ba25260e447a53bdff86afebd99129a87c22bf1524b6 NetworkManager-libnm-1.42.2-8.el9_2.tuxcare.els2.i686.rpm 4c645f23c09f4d15dfeab79690af2a9b9d78527a97048d99c41933e57a7592aa NetworkManager-libnm-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 65f987ea3cbd6b39b398507ab7e6db8b779eaf178652afd54a9cdb738218b728 NetworkManager-libnm-devel-1.42.2-8.el9_2.tuxcare.els2.i686.rpm 46e3733de2a748e7c9da6b8e2ad8a0676484ac0c4da2e89cb8e166b74aa3e153 NetworkManager-libnm-devel-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 9a801d4e205ec360276fc396acbf20eb4493aa44041aa38844da96a2097e084b NetworkManager-ovs-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 7b3b5457ec17da625837c0f0c6b6d26b7394a0678541540dcab7c5736019c162 NetworkManager-ppp-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 14eedcc3231965640481289af5dc6c0789302445e4bb0660e66186e3428d7177 NetworkManager-team-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm a85ea8a24752439ad9ec62b71ada9ad5bc051d4aae608abf784e752a0bac9825 NetworkManager-tui-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 8f3cbc1c9c109710f0ee9588ecc06f81f9481f460640a074a688c5bd68485193 NetworkManager-wifi-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 14c5d487594c43a31d242d7d51935df106bce8a72f155dd85b88aaa55ada8573 NetworkManager-wwan-1.42.2-8.el9_2.tuxcare.els2.x86_64.rpm 9db6716ced5cf7f37c2c17eb3064902bdce40ad1c979f729507b88ade7a83d1b CLSA-2026:1779533909 TuxCare License Agreement 0 - CVE-2026-33278: dangling pointer dereference in dns_msg_deepcopy_region() during DS sub-query suspend/resume; the previously-backported CVE-2023-50387-CVE-2023-50868.patch dragged the vulnerable '*res->rep = *origin->rep;' struct-assignment into our 1.16.2 tree. Save the destination rrsets pointer, sized-memcpy with rrset_ref excluded, restore the pointer. Adds defense-in-depth param_set_same() NSEC3 parameter consistency check called from all five nsec3_prove_* entry points. Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33278: dangling pointer dereference in dns_msg_deepcopy_region() during DS sub-query suspend/resume; the previously-backported CVE-2023-50387-CVE-2023-50868.patch dragged the vulnerable '*res->rep = *origin->rep;' struct-assignment into our 1.16.2 tree. Save the destination rrsets pointer, sized-memcpy with rrset_ref excluded, restore the pointer. Adds defense-in-depth param_set_same() NSEC3 parameter consistency check called from all five nsec3_prove_* entry points.

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9_2.tuxcare.els5.x86_64.rpm 04b324809cd179f94b00524a9bcd2e85a0269de17031f9d52b4ce75975c722ea unbound-1.16.2-3.el9_2.tuxcare.els5.x86_64.rpm 1d625a6328c5b20ae80a463e89cae6a7a8e669c939ce3a8fcf5772052fbf6c3f unbound-devel-1.16.2-3.el9_2.tuxcare.els5.i686.rpm f5464b8a831280c4b732afece726ae706893796b85676a2868ac19a9002c2d67 unbound-devel-1.16.2-3.el9_2.tuxcare.els5.x86_64.rpm a2eaad5a97f949d546a7d9047479395de4c64dea83b98997e26699dd5469ebb3 unbound-libs-1.16.2-3.el9_2.tuxcare.els5.i686.rpm c961012005db668ab41b492da1e97c10e667ae82af86c103474b78033b9ba8b1 unbound-libs-1.16.2-3.el9_2.tuxcare.els5.x86_64.rpm c3b814d8d73afeecfb2668c17091df06bd3b534164c690fc3950fb4749179953 CLSA-2026:1779580341 TuxCare License Agreement 0 - CVE-2025-11234: io: use-after-free in websocket handshake code - Bump leading release 14 -> 15 to overcome rpm-version-rank trap: previously released wrong-dist builds tagged .el9 outrank the correctly-tagged .el9_2 builds, blocking the proper release to stable. No source/code changes vs els9. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11234: io: use-after-free in websocket handshake code - Bump leading release 14 -> 15 to overcome rpm-version-rank trap: previously released wrong-dist builds tagged .el9 outrank the correctly-tagged .el9_2 builds, blocking the proper release to stable. No source/code changes vs els9.

0 tuxcare-almalinux9.2-esu qemu-guest-agent-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 23bb734dcae06173a1cd5461a2a15a60cad347f6398427a9bded1306fbcb0978 qemu-img-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm c06e29deda7cd16a28eb0cc3f81b48ec2d9220a787e000fbbf709889a1970cb2 qemu-kvm-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 6f63f9d957c4b54b9d83307811bef96957f1ce7df6cd97f8a9555a73419563a0 qemu-kvm-audio-pa-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 20d7b661d5226835a526f4301f575f5052c6933fe863a1f42124442c6e46c153 qemu-kvm-block-curl-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 4c73854ed6a933a5aff399d4628167c9704de2c117350f2195a13ec78eac096c qemu-kvm-block-rbd-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 21be849f523f9203c24b65eefc5d3288548bc0703328fed1b90e4c35f2a9ca86 qemu-kvm-common-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm cab1aade012802f0e98547c4b8378f3b6855cd9ea1cafa0a6eed98b378c5737e qemu-kvm-core-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm eab4168917961f6c77f6caaa1ed85df4219247272773c7a4623681c017e674f8 qemu-kvm-device-display-virtio-gpu-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 979db4e6ed49fc0b92fc1d3ee640ff6f748e9fb9c45d014a5ed8479837e51e45 qemu-kvm-device-display-virtio-gpu-pci-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 866f59f79bc1b57ce536f7aa41ff9b6fc4f7cc001618b60d9bf6f95459944413 qemu-kvm-device-display-virtio-vga-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 338c03b620fcd88486d7603fa260f580f1fd8f392b71d227c43b4725d79adc20 qemu-kvm-device-usb-host-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 3e3c3baace8046407d25878496c891542533abf2e046bf2b24b60c4663c5f817 qemu-kvm-device-usb-redirect-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 59576a9f7822cb6df3e7f1d0822111f453976b9959edd956f87fac5ee46ffcb0 qemu-kvm-docs-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm e68f0c08131e68867ebb36280698bf57be1e225858d3635fe1a7f870adf59c4f qemu-kvm-tests-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 9c752c879f9d44c2b7f279b76b53722f1944604be40d1433569ee3127730110a qemu-kvm-tools-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 3e6834e6ce38c1e987ea0bc42359d01b540a3f61b8d8cd5aba347e89684db1d4 qemu-kvm-ui-egl-headless-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 829640bf5b3f176be0293fd27db6615a2f3b32ca692dfd1a05906f0e598237ac qemu-kvm-ui-opengl-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm 31a7a9bc5cbee2271da767593758dc226933fed6ebf247f5e48201da99e4c3c9 qemu-pr-helper-7.2.0-15.el9_2.1.alma.1.tuxcare.els1.x86_64.rpm fd37f1d135b5a547085380cee7ce2b2d06a47060f305747a3583d7d77031134e CLSA-2026:1779581754 TuxCare License Agreement 0 - CVE-2026-34000: widen bounds check in _CheckSetGeom() to cover both key alias names (2 * XkbKeyNameLength) and prevent out-of-bounds read of uninitialized memory in XkbAddGeomKeyAlias() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34000: widen bounds check in _CheckSetGeom() to cover both key alias names (2 * XkbKeyNameLength) and prevent out-of-bounds read of uninitialized memory in XkbAddGeomKeyAlias()

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els24.x86_64.rpm 8eddb22c37f572995a9f15e7f4060cf04a51ff267f1bb6175a70a605458fc2ff tigervnc-icons-1.12.0-13.el9_2.tuxcare.els24.noarch.rpm 8f57a00df2ddbee49dfd1ada5fd137f8276e711885ab510b61cc507a10d448a5 tigervnc-license-1.12.0-13.el9_2.tuxcare.els24.noarch.rpm e8a6420cd6fa249532307c3dc9083512fb72141ccb80ffb4a94b90d803c14210 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els24.noarch.rpm b140da2a5ab9a56ed29db5f620fc436d5bd4b1176505f8aaf662eb43944c7baa tigervnc-server-1.12.0-13.el9_2.tuxcare.els24.x86_64.rpm 40dc3ebb21c47441c829c5dbb042a9192014a525ec5e90ad0707a931a2f7e365 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els24.x86_64.rpm 68281e115f71ce810af796883d0324c1ae7112022d87b170dcc5bf358beb9727 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els24.x86_64.rpm 9fab35165e8e55ae955165be01bbee4eb00c2668aff41c59972d42b02551351e CLSA-2026:1779694248 TuxCare License Agreement 0 - CVE-2024-10573: Out-of-bounds write during PCM decoding of crafted streams could lead to heap corruption and potential arbitrary code execution; decode the MPEG header into a temporary copy that is only applied to the live handle after the frame body is validated (upstream svn-r5442, main fix), and gate decode_the_frame() behind a FRAME_DECODER_LIVE state bit so it cannot run with stale state when decode_update() failed (upstream svn-r4991 plus the bug-324 precedence fix from 1.29.2, follow-up safeguard). Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-10573: Out-of-bounds write during PCM decoding of crafted streams could lead to heap corruption and potential arbitrary code execution; decode the MPEG header into a temporary copy that is only applied to the live handle after the frame body is validated (upstream svn-r5442, main fix), and gate decode_the_frame() behind a FRAME_DECODER_LIVE state bit so it cannot run with stale state when decode_update() failed (upstream svn-r4991 plus the bug-324 precedence fix from 1.29.2, follow-up safeguard).

0 tuxcare-almalinux9.2-esu mpg123-1.26.2-5.el9_2.tuxcare.els1.x86_64.rpm c12cb2deadd7f9b499b7a4b13aa95413903c5332d5a6adc987433ffddb4f0b01 mpg123-devel-1.26.2-5.el9_2.tuxcare.els1.i686.rpm 1757e94a5ac70e9c57d656a59c5c9db1636c0e98669441c3c77e15448e24311f mpg123-devel-1.26.2-5.el9_2.tuxcare.els1.x86_64.rpm 0e8f7f181764ed0b987221ee41d62450683647f8e35f58c1b15296efbd145028 mpg123-libs-1.26.2-5.el9_2.tuxcare.els1.i686.rpm 59b166a7eaa453166962ddf21fdc89fcbd240bc8dad8d9228f4b910b95a05bcf mpg123-libs-1.26.2-5.el9_2.tuxcare.els1.x86_64.rpm e8b07da351c248bb98c0599c81112fa9c4894fa337ba5a7a2760c11a85751dec mpg123-plugins-pulseaudio-1.26.2-5.el9_2.tuxcare.els1.x86_64.rpm dfcc96a6356cff4ece775970ce07dddd8343969cac49440623f363365ffe1146 CLSA-2026:1779579653 TuxCare License Agreement 0 - CVE-2024-0742: assertion failure in nsPresContext::UserInputEventsAllowed (Document::SetIsInitialDocument sticky-bit) - CVE-2025-2830: path traversal via malformed attachment filename in multipart message (directory guard in MimePart._fetchAttachment + mimedrft.cpp) - CVE-2025-3909: predictable tempfile path enables JavaScript execution from attachment opened in file:/// context (per-PID tempdir, 0o700) - CVE-2025-3932: tracking links in attachments bypass remote-content blocking (scheme allowlist + FeedMsg http(s) carve-out in AttachmentInfo.isEmpty) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0742: assertion failure in nsPresContext::UserInputEventsAllowed (Document::SetIsInitialDocument sticky-bit) - CVE-2025-2830: path traversal via malformed attachment filename in multipart message (directory guard in MimePart._fetchAttachment + mimedrft.cpp) - CVE-2025-3909: predictable tempfile path enables JavaScript execution from attachment opened in file:/// context (per-PID tempdir, 0o700) - CVE-2025-3932: tracking links in attachments bypass remote-content blocking (scheme allowlist + FeedMsg http(s) carve-out in AttachmentInfo.isEmpty)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els3.x86_64.rpm 23698637255e25a43ea9201816498ee8a5c13ea63e609cbfd3c9dded82b895d9 CLSA-2026:1779700361 TuxCare License Agreement 0 - CVE-2026-42307: fix shell injection in netrw via the tempfile suffix when reading sftp:// or file:// URLs by escaping the tempfile and restricting the suffix regex to word characters Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42307: fix shell injection in netrw via the tempfile suffix when reading sftp:// or file:// URLs by escaping the tempfile and restricting the suffix regex to word characters

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els29.x86_64.rpm f6562e3030405a1010db6acdd2d8cf46eeb209350d010b0627bf0335c2ec649c vim-common-8.2.2637-22.el9_2.1.tuxcare.els29.x86_64.rpm 9de26524723fb75cc29b7df0a153f6567cb7f360aa1480f49916526cdcf7c00c vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els29.x86_64.rpm 1a7c853ba0a3f51e959ed88e134f26850580483c90481ffae2ec2bf88bfc2640 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els29.noarch.rpm 6e7cc918e79d189327a0be5a1475d1ba3bc35f04d876a943f291dfd40dad3df5 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els29.x86_64.rpm a39719ac55b3547488131abc69a648c8f0d693ddac80790101abbe4a9c8cb0f2 CLSA-2026:1779708964 TuxCare License Agreement 0 - Rebuild with golang 1.22.9-1.el9_2.tuxcare.els9 and patch go-jose to fix CVE-2026-32280, CVE-2026-34986 - CVE-2026-32280: limit processing of attacker-supplied intermediate certificates during chain building and introduce bound on number of intermediates, preventing uncontrolled work and denial of service - CVE-2026-34986: reject too-short ciphertext in vendored go-jose cipher.KeyUnwrap to prevent a denial-of-service panic when decrypting a JWE with an attacker-controlled Encrypted Key Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebuild with golang 1.22.9-1.el9_2.tuxcare.els9 and patch go-jose to fix CVE-2026-32280, CVE-2026-34986 - CVE-2026-32280: limit processing of attacker-supplied intermediate certificates during chain building and introduce bound on number of intermediates, preventing uncontrolled work and denial of service - CVE-2026-34986: reject too-short ciphertext in vendored go-jose cipher.KeyUnwrap to prevent a denial-of-service panic when decrypting a JWE with an attacker-controlled Encrypted Key

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els12.x86_64.rpm c033fd95d454e9c536eea6ef0735749d6387a0154d6bdf7557992049ec91d7f5 podman-docker-4.4.1-13.el9_2.tuxcare.els12.noarch.rpm fdde041cb2f7ae7641447482ee9a6c995373d306eaed8a6b7bbedf7aded21659 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els12.x86_64.rpm 363cf4bda23531856d4177bb5921ab08f264c6bf7e48e69f600c2941f97d2c04 podman-plugins-4.4.1-13.el9_2.tuxcare.els12.x86_64.rpm f8b7f3c005a8793f5c3e5450dfabce3963a9290145df9eb39782f735f99aa041 podman-remote-4.4.1-13.el9_2.tuxcare.els12.x86_64.rpm 55f23759d002a306fa8c4fe01d9215bc11a7378532307e00ea38d11e0a10e324 podman-tests-4.4.1-13.el9_2.tuxcare.els12.x86_64.rpm e8e54a9ad09de0916317ad35fa72fd08e96e81bdb362531b325139f9ff5ca4fa CLSA-2026:1779709803 TuxCare License Agreement 0 - CVE-2025-12748: enforce ACL before parsing user-supplied domain XML Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-12748: enforce ACL before parsing user-supplied domain XML

0 tuxcare-almalinux9.2-esu libvirt-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 15a43042bcba95bc71c7d303e69ffe61b18a5fce7fd48d5d0ab5d57a7415f0d4 libvirt-client-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 342220036308971ced3d72e993f0b445bd507153005405c1a8682d7a3fc46049 libvirt-client-qemu-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 90c1cb456d80d3da33ce430cefde6f9d3e2344975182e696079b1c2f1b8d32d0 libvirt-daemon-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm f0dfe879c461350c088c5b231a37889d0a3a220f3ed08ee0ac05ead34584bbe5 libvirt-daemon-config-network-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 8075df262de9dafcf725235aa3d13e815edfb3947d2c4a401a84b38193a853a6 libvirt-daemon-config-nwfilter-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm dc6c319c68e24b0423aa20a938c25f9e8b7d9d8c75251d2a6a0806f7f39c6aea libvirt-daemon-driver-interface-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 06544af9dde842b37fb442ee9e366aa5cf38250586a19d37d79ad27a38ca5545 libvirt-daemon-driver-network-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm c3e67100748d1ccc7235d31e4604b5229ce0216f862260713e99afc71c8f2ff7 libvirt-daemon-driver-nodedev-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 08bc4b4f7ce40d4aefad9983f2c79a86c193967796b64866225f6cf7206a773b libvirt-daemon-driver-nwfilter-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm b63fdec29d3d2bd73c4594042dc0971579994c9619cb2de42bef77625ce990ce libvirt-daemon-driver-qemu-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm d9562942c25db0ca84a1ba54c80f137600785a4b20fcdeeae328aa7d23e68bd1 libvirt-daemon-driver-secret-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm d6797ec885bfeff465e1a9b94e018b71bb278752010b7b36b522f3f481513fb9 libvirt-daemon-driver-storage-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 1906e6a64202da4907d6f3f045beb8365172a7975dd0c5399964111184b9fd8e libvirt-daemon-driver-storage-core-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm f079eef28e8c95b1f7e1d184e1e5945542de335b3d212c46e5b4103ec600d2ed libvirt-daemon-driver-storage-disk-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm aa433e311b2d7a0f8c44ec0b7f0e00cc11a91ef8604b75a5128b852ab020edb3 libvirt-daemon-driver-storage-iscsi-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 2ed70db25b9a71e1d2a6ad049468ce41f294c1d86c80fed06993dc6bd10b5785 libvirt-daemon-driver-storage-logical-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm eb71d74702a5fe0af5a03faa11dc7632b9ffcbe01a7cce7dcd32666f3c9e5c93 libvirt-daemon-driver-storage-mpath-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 64e4e464d967e9ac6b95488e84f60e34814200ca83d75d7fed6f5fa4ca679996 libvirt-daemon-driver-storage-rbd-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 01b040fe1d749f37f12094bdb5d8526a797b735912aad94e9f1a84d9fa738059 libvirt-daemon-driver-storage-scsi-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 5a2c7f034c006d56fed1e427bbfeb5ce836a91285e79494b386f862f2ddfd9e9 libvirt-daemon-kvm-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 70000197439cc53fa890114b5090346001cc36d745c5886ff1fff86b078a7b62 libvirt-devel-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 5104b5daafd56395c4d209b52a51178438b9516786af0bec1c8855716742f1b9 libvirt-docs-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 7784daa23967508ebb97fc09d69b38f20082012037d36833d09ea7f5ba7f0ebc libvirt-libs-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm 7d0fc9fea962e4776ac7a6d414594ad2258832261e37d5b201306824f0f0f87f libvirt-lock-sanlock-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm a6dcc2ac71db53af901f45d092850ce7a437a48ab029c58eda5b20c9dbbbfcfd libvirt-nss-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm ea4bdc4940db66b23f1923b7fbfe0f081787857759fac7967fdc244073abfc3b libvirt-wireshark-9.0.0-10.3.el9_2.alma.1.tuxcare.els4.x86_64.rpm ffa58487f7f03630d8b123f7a8af5ccdb3c924c75cfc8a90451a61dac31a7edf CLSA-2026:1779711412 TuxCare License Agreement 0 - CVE-2026-41651: Fix TOCTOU race on transaction flags that allowed unprivileged users to install arbitrary RPMs and execute scriptlets as root; prevent unconditional flag overwrite, enforce state-transition validation, and read cached flags at authorization time rather than at dispatch. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41651: Fix TOCTOU race on transaction flags that allowed unprivileged users to install arbitrary RPMs and execute scriptlets as root; prevent unconditional flag overwrite, enforce state-transition validation, and read cached flags at authorization time rather than at dispatch.

0 tuxcare-almalinux9.2-esu PackageKit-1.2.4-2.el9_2.tuxcare.els1.x86_64.rpm 11a7e6b789b0d9acf2f813ac04912892c0de33f9918a87402c94b8c0f95f758c PackageKit-command-not-found-1.2.4-2.el9_2.tuxcare.els1.x86_64.rpm 3f5807157befe11a2ebdceb8824a39f7f31bd0ab8ca87de6c477ff3f9dd27b0c PackageKit-cron-1.2.4-2.el9_2.tuxcare.els1.x86_64.rpm 3a9f66a1c921e6ff3ef3554835791e0cc351e1422ca3bbd01a75ee501b6d8448 PackageKit-glib-1.2.4-2.el9_2.tuxcare.els1.i686.rpm 6fb9dd33263dd7e14d871111c31a91697344d227b5d3ea1e9ca1c54b8e9c7c93 PackageKit-glib-1.2.4-2.el9_2.tuxcare.els1.x86_64.rpm 9bba882e1c3a407d065dbe7dc4d89a26cf4e8c5f6400e40d7acf1c19e672d490 PackageKit-glib-devel-1.2.4-2.el9_2.tuxcare.els1.i686.rpm c4c5ab33836d0f55c21692c142dedd67d329e04f70b98cb77c9c37b752cc9197 PackageKit-glib-devel-1.2.4-2.el9_2.tuxcare.els1.x86_64.rpm fdac44b42ade69e386ecc6ca547db8028025e08b5fa8ee74504fe4c7afa4671a PackageKit-gstreamer-plugin-1.2.4-2.el9_2.tuxcare.els1.x86_64.rpm 11b0d4589e73d18e0917fcc26a1fc3cb607b4ae622c2c81be4fa8f6fe13aaf23 PackageKit-gtk3-module-1.2.4-2.el9_2.tuxcare.els1.x86_64.rpm d0fcb91999fa9210f6cd8879be1a3e2ea87cbafd2202a0df2f21750d71eb949b CLSA-2026:1779712426 TuxCare License Agreement 0 - CVE-2026-9256: heap buffer overflow in ngx_http_script_regex_start_code() when a rewrite replacement contains overlapping captures with the redirect parameter or argument string; the per-capture length accumulation is refactored to also account for escape-uri expansion per capture region, preventing under-allocation of the rewrite output buffer Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9256: heap buffer overflow in ngx_http_script_regex_start_code() when a rewrite replacement contains overlapping captures with the redirect parameter or argument string; the per-capture length accumulation is refactored to also account for escape-uri expansion per capture region, preventing under-allocation of the rewrite output buffer

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.x86_64.rpm 4f431cfe4998f286516bdbe28961f7b0c5b88288948b74a480e078541bf578b0 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.noarch.rpm 4427cb9492bcf57e83e31d9b9d03413183a92809a7b22ccda8ce6d7dba021c80 nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.x86_64.rpm 981f263b2e3f7e9d3cde7f3a03c591389c3bd3b69b16ce9cf4f5b13806304e97 nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.noarch.rpm 3af764bbe55f38fbf9deeacf6248db557281b147586d6a285444b02f8c836395 nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.x86_64.rpm 6168849b7ee3bdf808bd2675fd1d191cf433786c116477356bc7126f70ce1dd1 nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.x86_64.rpm 7b306cf43e416585c4c7cc43b65cdf2f608ec43f767def6d048b8dc349cc400d nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.x86_64.rpm 3f15384123cdaf9ee3e8b8ad612ad49883563308a753f263cf0784781579fb57 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.x86_64.rpm a71bbb9c56f75bc5c0b10609ee86c581cbf30e4c5d77f5c03d57a6bcda6cbf1f nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.x86_64.rpm fa5738ad2cb5b1597c37a09fb88ac119e63acef9ec9e5e2164f4eab68fbe1e5a nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els9.x86_64.rpm 18c5bb58d2bf471b25a01b043e8a212e1df0757e3bcec4db9d574a366698c80f CLSA-2026:1779745996 TuxCare License Agreement 0 - CVE-2026-41316: prohibit ERB#def_method on marshal-loaded ERB instances by extending the @_init singleton-class guard to def_method (and transitively def_module/def_class), preventing RCE via Marshal.load gadgets Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41316: prohibit ERB#def_method on marshal-loaded ERB instances by extending the @_init singleton-class guard to def_method (and transitively def_module/def_class), preventing RCE via Marshal.load gadgets

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_2.tuxcare.els14.i686.rpm cd6a8ac03e0c6073d74703f14d7b596666a21c38530ad3ca0b1bac831dbd4d76 ruby-3.0.4-160.el9_2.tuxcare.els14.x86_64.rpm 966912a6dae65b3e9f6e6949dac51cdb1d915f54a2c37448d7e8cd5f2e309e18 ruby-default-gems-3.0.4-160.el9_2.tuxcare.els14.noarch.rpm fa2340d293949f7e5b2723aa69689c57908368963308bbfdca0c0aeabbcf71ca ruby-devel-3.0.4-160.el9_2.tuxcare.els14.i686.rpm 2ff606445413e920559b0cfe606564c60d378ffbf1ff64045cbb967c5c07c3df ruby-devel-3.0.4-160.el9_2.tuxcare.els14.x86_64.rpm d35a4d7730fe11ed47782b921e7f2e8f88501dff6d6e4d640067edfa9dd07d87 ruby-doc-3.0.4-160.el9_2.tuxcare.els14.noarch.rpm 13337bf7b9a7c2909253a5259d64745d000bcdbeb62d49dbb151281538041e71 ruby-libs-3.0.4-160.el9_2.tuxcare.els14.i686.rpm cbe99779b7440d5bd9cd38180c9d128f41262b6e9c668ce9ea24402ee8fe7104 ruby-libs-3.0.4-160.el9_2.tuxcare.els14.x86_64.rpm 21f98c9a945b331518c3a2014949b2dfb58c2ec3059edd6e98b5e60a8192cc47 rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els14.i686.rpm bfa411b57e2cbdb8a2519bc7c3f4f28ed6f291aa3f1080e924c3747181a606a7 rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els14.x86_64.rpm 3c9ebc92c0abce08371d82d373788e2631a6413bdcb806f641448c14d585e835 rubygem-bundler-2.2.33-160.el9_2.tuxcare.els14.noarch.rpm 53e28fda4cb9c83f0cc0302be3ad50613f06d1a86c4f1626505872c953497c06 rubygem-io-console-0.5.7-160.el9_2.tuxcare.els14.i686.rpm 181bc653a6b00e38fbb6b1219e19795bc4afe0bf8e3dd4f372a5f1ab74493272 rubygem-io-console-0.5.7-160.el9_2.tuxcare.els14.x86_64.rpm 43eba0a252fb38d442413b4759358c93e0a402a30df88f2040c5667434427b13 rubygem-irb-1.3.5-160.el9_2.tuxcare.els14.noarch.rpm 1ac58d5c67185f9756bb70cba9fc87176ee6579b43c640484577943a82547861 rubygem-json-2.5.1-160.el9_2.tuxcare.els14.i686.rpm ca91a3f8167950d7ca80a5d14b78c4f6a5a815bb1795acc34d5e5f27c321f0e2 rubygem-json-2.5.1-160.el9_2.tuxcare.els14.x86_64.rpm bde7779cd4b9d9e6e574a3b1f52273e40304d7592d2eb5c62712689eec446d6a rubygem-minitest-5.14.2-160.el9_2.tuxcare.els14.noarch.rpm 270b7177371fe365d0523c2a3753608113e38cc2d0b57498c02ed07046952154 rubygem-power_assert-1.2.0-160.el9_2.tuxcare.els14.noarch.rpm 3af6995f23ab8a73e4c09a26d5964e7ace44bb41da186142f263129fdef7e281 rubygem-psych-3.3.2-160.el9_2.tuxcare.els14.i686.rpm 4c463c76e8536951acbb009766bf9173f17d2e65a58a7e22a9f0068fe4f332d1 rubygem-psych-3.3.2-160.el9_2.tuxcare.els14.x86_64.rpm c8a67bad9c632cb5eeea5be5ea44233793ccd3def503acdcb7fb22a927c34be4 rubygem-rake-13.0.3-160.el9_2.tuxcare.els14.noarch.rpm 31cc85912b0b5672579a0d372fb24a6169907f8f8024a93b24fc332a6c85c0ad rubygem-rbs-1.4.0-160.el9_2.tuxcare.els14.noarch.rpm cd00734048dca6f7d7030b6dbf3cc2c61dfaeb6691dfbd95f7e2c2c363014656 rubygem-rdoc-6.3.3-160.el9_2.tuxcare.els14.noarch.rpm e54a548111082a5a9807ae1b622c71b1388095a369ee97f255332a567694492e rubygem-rexml-3.3.3-160.el9_2.tuxcare.els14.noarch.rpm 8d83fbd1858db9add78371eec797014cf871acd7ddcf2aaa28c12881555a5832 rubygem-rss-0.2.9-160.el9_2.tuxcare.els14.noarch.rpm fd09ed3f2272c87068bcac3e56f6dc13546496ff217415ccb6d03cd8452e33c6 rubygem-test-unit-3.3.7-160.el9_2.tuxcare.els14.noarch.rpm a7b3e87cbdc471f3970ad1332dfa18805fdadb16e81f804ff8e54491e32987ed rubygem-typeprof-0.15.2-160.el9_2.tuxcare.els14.noarch.rpm 3c633039695be1b0f15bea3e3895d6259c7147cd342cf80c0c0195582cf63004 rubygems-3.2.33-160.el9_2.tuxcare.els14.noarch.rpm d78d41a983778157b9689a5f7cb30c122d15b5a5f02778414cf5925962cede40 rubygems-devel-3.2.33-160.el9_2.tuxcare.els14.noarch.rpm 3a823cb932c8b4c6089d4d9ad04c5b100682217a54fff82d0b46c1ce3451f971 CLSA-2026:1779782518 TuxCare License Agreement 0 - CVE-2023-3446: fix DH_check() excessive time with over sized modulus - CVE-2024-4603: fix DSA parameter check excessive time with very large keys - CVE-2024-4741: fix use-after-free in SSL_free_buffers Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-3446: fix DH_check() excessive time with over sized modulus - CVE-2024-4603: fix DSA parameter check excessive time with very large keys - CVE-2024-4741: fix use-after-free in SSL_free_buffers

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els13.x86_64.rpm 54f2fdf11ab67855ef3d629fd14f00ab1dcdd245929c8b2eaf2a3ccade806bc9 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els13.i686.rpm 49cf9c6b63561ee7397ae8076ceeecc8c7c605c015ea69ee906b1be3db8f0186 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els13.x86_64.rpm a24e95b2b9b2697b45dd7285e8cd0734b083e14613605f01a0892aee3db68fdb openssl-libs-3.0.7-20.el9_2.tuxcare.1.els13.i686.rpm c354f2745d1945bae4293e66de29f003b18f2a402e59b7d100f7f1a559b6e512 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els13.x86_64.rpm 7a5363f3dffd6a68d2e451baa0667704fde097efb7c15360bad0b39e05fd6d11 openssl-perl-3.0.7-20.el9_2.tuxcare.1.els13.x86_64.rpm 729f906179838483ebd96b744fc2daf3c240a706b675709ea0fcad0f36288b9a CLSA-2026:1779748834 TuxCare License Agreement 0 - CVE-2026-1502: reject CR/LF in HTTP proxy tunnel host and headers Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1502: reject CR/LF in HTTP proxy tunnel host and headers

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els25.noarch.rpm bdf9d11ffb1807c0e99e3596bd40a2488975f27a33b725dc77d8dcd9b84d911c python3-3.9.16-1.el9_2.2.tuxcare.els25.i686.rpm 3ad3ab7f9254123cb12954a169ceb2059ca5e8824bb2eefc53573cfe0aab5753 python3-3.9.16-1.el9_2.2.tuxcare.els25.x86_64.rpm 6f2c57b21630176aeedbdefc64173e2a579afb5d97e7f1bc115ebf0accf56639 python3-debug-3.9.16-1.el9_2.2.tuxcare.els25.i686.rpm 111e02020f41ffb475c958e1ea0c64fb11a780687d22cf89e2bc0e09c559ae50 python3-debug-3.9.16-1.el9_2.2.tuxcare.els25.x86_64.rpm b74689d42fd004cf9279d94abe4dbc7227010a0f3a011c1e00964405378c4547 python3-devel-3.9.16-1.el9_2.2.tuxcare.els25.i686.rpm d78cad65018f5226683e9c669d3b110c93df4794540cb2b3ffc2ccb69fc928aa python3-devel-3.9.16-1.el9_2.2.tuxcare.els25.x86_64.rpm b796de500b7d8c3a0d5091e7c5bf7da183be92a374923a13ee8fa0efb0e64a00 python3-idle-3.9.16-1.el9_2.2.tuxcare.els25.i686.rpm 57cafdcc1d3c3888de0b6cfe6947e327d3ecaaa7aec294b0b4327696ef90b9a2 python3-idle-3.9.16-1.el9_2.2.tuxcare.els25.x86_64.rpm 46a2bc051a915036060f1c5737553e37d8c056275059b92a1a627219dab5d260 python3-libs-3.9.16-1.el9_2.2.tuxcare.els25.i686.rpm 6f526b50ddd73a7e376339c5abd2c2893a6093a8eaa8ace242375cf6e19f5665 python3-libs-3.9.16-1.el9_2.2.tuxcare.els25.x86_64.rpm 90af134b252c7177125f5a2b0d8d9c91e8edeaf32e42bdbc08406b0f8346c438 python3-test-3.9.16-1.el9_2.2.tuxcare.els25.i686.rpm 9cd0b2c5acdabf55689a827bc9fec07c7d3ad7b6a823fc4cb8c6cb3f2cb58ed6 python3-test-3.9.16-1.el9_2.2.tuxcare.els25.x86_64.rpm f91b648eb6416b089aaccde50d256448aff56092fcb402e2e42bb04f5826c342 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els25.i686.rpm 2eedc6f2aaf616f1d317f108f4c700e1c6e17d2c2c0364eea4e2bd75b1842b56 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els25.x86_64.rpm 4a928511d2f262ae163896c16d712092091cca5a66d7183ffcb1a78ba1ce7ea2 CLSA-2026:1779785882 TuxCare License Agreement 0 - CVE-2024-1298: fix potential UINT32 overflow in S3 ResumeCount that could DoS firmware on resume (EDK2) - CVE-2024-38796: fix integer overflow in PeCoffLoaderRelocateImage() that could lead to memory corruption (EDK2) - CVE-2023-2650: fix DoS in OBJ_obj2txt() when parsing OBJECT IDENTIFIERs with very large sub-identifiers (bundled OpenSSL) - CVE-2023-3446: fix excessive runtime in DH_check() when supplied with over-sized modulus (bundled OpenSSL) - CVE-2024-0727: fix NULL pointer dereference in PKCS12 ContentInfo handling that could crash applications (bundled OpenSSL) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-1298: fix potential UINT32 overflow in S3 ResumeCount that could DoS firmware on resume (EDK2) - CVE-2024-38796: fix integer overflow in PeCoffLoaderRelocateImage() that could lead to memory corruption (EDK2) - CVE-2023-2650: fix DoS in OBJ_obj2txt() when parsing OBJECT IDENTIFIERs with very large sub-identifiers (bundled OpenSSL) - CVE-2023-3446: fix excessive runtime in DH_check() when supplied with over-sized modulus (bundled OpenSSL) - CVE-2024-0727: fix NULL pointer dereference in PKCS12 ContentInfo handling that could crash applications (bundled OpenSSL)

0 tuxcare-almalinux9.2-esu edk2-aarch64-20221207gitfff6d81270b5-9.el9_2.tuxcare.els4.noarch.rpm 37f787096dd7f14594c201542d511eae9de60ddeef15072ac8688321a84ad259 edk2-ovmf-20221207gitfff6d81270b5-9.el9_2.tuxcare.els4.noarch.rpm fcda08364cd2d870a0b654c9792104c1f6f008b4f401fbdcb076c9dbaef0fda5 edk2-tools-20221207gitfff6d81270b5-9.el9_2.tuxcare.els4.x86_64.rpm 8eeb0afc3bbf05b41c9dc9bae32ffe37fe42291dea1a35c146c56674ebc08cbb edk2-tools-doc-20221207gitfff6d81270b5-9.el9_2.tuxcare.els4.noarch.rpm 54f091157acdc4a76414756a00baeb2663fc73b8fcc4ad3b59426e8eec840cd1 CLSA-2026:1779786876 TuxCare License Agreement 0 - CVE-2023-5388: NSS MPI RSA decryption timing side-channel (Marvin attack); backport upstream NSS_3_90 commit 196716d8 to security/nss/lib/freebl - CVE-2024-0741: ANGLE VariablePacker int32 overflow leading to heap out-of-bounds write in WebGL shader compilation - CVE-2024-0753: PSM HSTS superdomain walk did not honor ancestor includeSubDomains policy (RFC 6797 conformance) - CVE-2025-3523: attachment URL UI misrepresentation in displayAttachmentsForExpandedViewExternal; mouseover/focus showed last URL for all rows Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-5388: NSS MPI RSA decryption timing side-channel (Marvin attack); backport upstream NSS_3_90 commit 196716d8 to security/nss/lib/freebl - CVE-2024-0741: ANGLE VariablePacker int32 overflow leading to heap out-of-bounds write in WebGL shader compilation - CVE-2024-0753: PSM HSTS superdomain walk did not honor ancestor includeSubDomains policy (RFC 6797 conformance) - CVE-2025-3523: attachment URL UI misrepresentation in displayAttachmentsForExpandedViewExternal; mouseover/focus showed last URL for all rows

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els4.x86_64.rpm 9edc6e5266b9921f7c0bd27b7803d376df3001f6994d72efeb897d7b72c567d7 CLSA-2026:1779801095 TuxCare License Agreement 0 - CVE-2024-0690: Fix information disclosure caused by failure to respect NO_LOG configuration, which allowed inclusion of sensitive data such as loop items and decrypted secret values in task output; ensure NO_LOG is honored. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0690: Fix information disclosure caused by failure to respect NO_LOG configuration, which allowed inclusion of sensitive data such as loop items and decrypted secret values in task output; ensure NO_LOG is honored.

0 tuxcare-almalinux9.2-esu ansible-core-2.14.2-5.el9_2.tuxcare.els1.x86_64.rpm 9ccd3c7a05c30c7ed32098d335da37963b67a139c824e2b2b45cf5d24f9cbe6c ansible-test-2.14.2-5.el9_2.tuxcare.els1.x86_64.rpm 5e683e0a1e663dfa28f25f868af1d7b1b3fc1e810bf0c82c3f329b9ea25daff3 CLSA-2026:1779805268 TuxCare License Agreement 0 - CVE-2025-52434: fix race condition in APR/native connector that could cause JVM crash on connection close Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-52434: fix race condition in APR/native connector that could cause JVM crash on connection close

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-12.el9_2.1.tuxcare.els2.noarch.rpm a6c57992d04864b9d09c6708178f8359624dd8dd1ae7ba5c889821c383791270 tomcat-admin-webapps-9.0.62-12.el9_2.1.tuxcare.els2.noarch.rpm 11ea492350ac1f9d7b530341335f7e7dc22fca5b5e764d0292554b993909c944 tomcat-docs-webapp-9.0.62-12.el9_2.1.tuxcare.els2.noarch.rpm 32ac6a15c723cd9f2872379b2ce744da09746d81d4b72c2b0ac8ce14a2f941e9 tomcat-el-3.0-api-9.0.62-12.el9_2.1.tuxcare.els2.noarch.rpm d9d9e2fcd7d9f4f384744280b245502c4d2f9d81f543356977a978af20dcea26 tomcat-jsp-2.3-api-9.0.62-12.el9_2.1.tuxcare.els2.noarch.rpm 7741cd1015eab15a66de3c22967f55745e353d9ff96cd961cd2e1a3731899f02 tomcat-lib-9.0.62-12.el9_2.1.tuxcare.els2.noarch.rpm f092dc8157f07ffa2d76c67450ae1d9af6a306196e0c6a8129df24c25b9b6f6f tomcat-servlet-4.0-api-9.0.62-12.el9_2.1.tuxcare.els2.noarch.rpm 94a33c0de05482749a85dde02ef15296957b2196ac24e38e2a382d4851442ee3 tomcat-webapps-9.0.62-12.el9_2.1.tuxcare.els2.noarch.rpm 98d776ae9245f09e1669a2ef67ef93e2ff1ffa522444f052204f0499b2b8f6c9 CLSA-2026:1779821440 TuxCare License Agreement 0 - CVE-2026-44656: fix shell command execution via backticks in 'path' option during file completion by skipping backtick entries in expand_path_option() (findfile.c, upstream patches 9.2.0435 and 9.2.0444; the P_SECURE-on-'path' portion of 9.2.0435 was reverted by 9.2.0444 and is intentionally not backported) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-44656: fix shell command execution via backticks in 'path' option during file completion by skipping backtick entries in expand_path_option() (findfile.c, upstream patches 9.2.0435 and 9.2.0444; the P_SECURE-on-'path' portion of 9.2.0435 was reverted by 9.2.0444 and is intentionally not backported)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els32.x86_64.rpm d7cbf951780b12e3fbdb5bdab98dd152af0052dc0478d3c42285ff5c3cffbea7 vim-common-8.2.2637-22.el9_2.1.tuxcare.els32.x86_64.rpm 595dd84af169903aa54e174bb817767157908be00aaed1b644f1124f686b6402 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els32.x86_64.rpm 4249a4a0675195a6e1cdfb10754f6a9e261eea4e411be99e7b5178dfe201f5bf vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els32.noarch.rpm dbba53675f1ca86156aa0e3d3b5ea7aa8c09b849df073e6ef8aca9d8db5d9577 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els32.x86_64.rpm e31e910bfcda3aea456c895742046fd130176dcade6aabe7936bae096956bf59 CLSA-2026:1779823076 TuxCare License Agreement 0 - CVE-2023-43788: fix out of bounds read in XpmCreateXpmImageFromBuffer - CVE-2023-43789: fix out of bounds read on XPM with corrupted colormap Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-43788: fix out of bounds read in XpmCreateXpmImageFromBuffer - CVE-2023-43789: fix out of bounds read on XPM with corrupted colormap

0 tuxcare-almalinux9.2-esu motif-2.3.4-27.el9_2.tuxcare.els1.i686.rpm 9b625ba22b0a0affb9c4c40ef7d65d17db2c324710044e600952c3888629d4d3 motif-2.3.4-27.el9_2.tuxcare.els1.x86_64.rpm 455a81bafbd8cd317e144a9a3297402132260a17c5bf98207fa8695c0fe4e8b2 motif-devel-2.3.4-27.el9_2.tuxcare.els1.i686.rpm 27eee9b8a1eb9575cdf2022340c77f639d0ba3c62f72ad464b8dd28644960611 motif-devel-2.3.4-27.el9_2.tuxcare.els1.x86_64.rpm b3c8aeefd87adafed5ca7de5a7a52b8f53039a1bd33f70fa9b42e4242e021271 motif-static-2.3.4-27.el9_2.tuxcare.els1.x86_64.rpm 0765de298cb9278e1203a9f33b5ab2762deca3627191694da954b617cf2163a9 CLSA-2026:1779823719 TuxCare License Agreement 0 - CVE-2021-40812: out-of-bounds read in BMP/WebP output due to unchecked gdPutBuf return values Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-40812: out-of-bounds read in BMP/WebP output due to unchecked gdPutBuf return values

0 tuxcare-almalinux9.2-esu gd-2.3.2-3.el9_2.tuxcare.els3.i686.rpm a7b9fd5317ec27a7b217dce8417bcaa03e63bb9a53a0ad975ef61d35da4a9521 gd-2.3.2-3.el9_2.tuxcare.els3.x86_64.rpm 48ed01b36d2336a044807d59f423c4bbfaaf0e10663f396b4f65430ee447a576 gd-devel-2.3.2-3.el9_2.tuxcare.els3.i686.rpm 6c07b92901223a6f27f30f349d8ac8ab6bc665fd12b5ac49fa842169cf31af78 gd-devel-2.3.2-3.el9_2.tuxcare.els3.x86_64.rpm 77bdd1c93e6ed2b16c9586e7773a60acee0f5faf609d51b7a2a70c4c1416d246 gd-progs-2.3.2-3.el9_2.tuxcare.els3.x86_64.rpm 106e6408371f7d71bb7617bbe5a9cbba8f436448abbab0264baf58cca5e8e005 CLSA-2026:1779825075 TuxCare License Agreement 0 - CVE-2023-4874: fix NULL pointer dereference in write_one_header() - CVE-2023-4875: fix NULL pointer dereference in userhdrs handling Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4874: fix NULL pointer dereference in write_one_header() - CVE-2023-4875: fix NULL pointer dereference in userhdrs handling

0 tuxcare-almalinux9.2-esu mutt-2.2.6-1.el9_2.tuxcare.els1.x86_64.rpm 4a3a362a51d4a231696586a8ebefe806e796eec34e21598c892d526f31d3e271 CLSA-2026:1779825752 TuxCare License Agreement 0 - CVE-2024-56826: fix out-of-bounds read in sycc422_to_rgb()/sycc420_to_rgb() - CVE-2024-56827: validate tile-part number in opj_j2k_add_tlmarker() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-56826: fix out-of-bounds read in sycc422_to_rgb()/sycc420_to_rgb() - CVE-2024-56827: validate tile-part number in opj_j2k_add_tlmarker()

0 tuxcare-almalinux9.2-esu openjpeg2-2.4.0-7.el9_2.tuxcare.els1.i686.rpm 08d0e4b7644c35aaf2d39eb2bd49857f30662cda27d07ba8959a7d5df60d46f9 openjpeg2-2.4.0-7.el9_2.tuxcare.els1.x86_64.rpm 90d1a38a15b9edf4ff707cb59370e03ff0cdd2425f5ea317d883424315b7e734 openjpeg2-devel-2.4.0-7.el9_2.tuxcare.els1.i686.rpm fa0b51e4566bf5ba07384c4004294e903c0f4e81a35d36b02347476a1bb2299f openjpeg2-devel-2.4.0-7.el9_2.tuxcare.els1.x86_64.rpm c670d8e26dde5654d06bac7b04688f8a4dc3347e31521016cddc9d3058eedcc4 openjpeg2-devel-docs-2.4.0-7.el9_2.tuxcare.els1.noarch.rpm ddc6befd93c5f06f07dea52926e18ee4d4e956c893a83f9b84e1803ce452d18a openjpeg2-tools-2.4.0-7.el9_2.tuxcare.els1.i686.rpm a4b8921908b6548f58433d34f39d4d35388fd71627a2d8101e2d9e880e5c8a10 openjpeg2-tools-2.4.0-7.el9_2.tuxcare.els1.x86_64.rpm 4fca5d258587d65d835a06d1838b314128c28177a2562eb8934d69832e376c3c CLSA-2026:1779875599 TuxCare License Agreement 0 - CVE-2026-1502: reject CR/LF control characters in http.client._tunnel() host and request headers to prevent HTTP header injection Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1502: reject CR/LF control characters in http.client._tunnel() host and request headers to prevent HTTP header injection

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els25.i686.rpm c53af5ff05a837bd25447096c5ff920cd2bc21cba5db4798a94eae6c75e56333 python3.11-3.11.2-2.el9_2.2.tuxcare.els25.x86_64.rpm 3795252b40c1002e55ffa02c4d0d0f1dd56c363ffe95130d0b619463da57e0c4 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els25.i686.rpm 721022c6fc9dec3cabfece8312942cbb42f3eb80d4d831ebf5dff5dcc2f6e51c python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els25.x86_64.rpm d2de0fad7ea1e44c91b9edec0d81b47077fa4b3215c7cb823ec5c662d26cf714 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els25.i686.rpm cfa7e5b37baa4d6e41149f3ae7bf2a2f692feea38b5672d78b66324b3f4379bb python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els25.x86_64.rpm a606382ac6df0d62990897f351c86129fd3362645045e8e59f33edd06c74b03e python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els25.i686.rpm 6256a3581617325ded50c7de7e7f967fd31f1979f992e5bdefba0b4066d08251 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els25.x86_64.rpm 0b2766f722b2cac793d296925597fa7e07c6622b9c60286d6e3eafbec3e81a36 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els25.i686.rpm 5bcb7d123cc102f241dc2283047efe6df88b527cf39e91a11f65b8a9935096a7 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els25.x86_64.rpm 301a7686dc6ecfbd3be3361a9e8aa68f550112eb3b6baf970636fd6d6c49cb47 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els25.i686.rpm c3c54f976d494643f7e217d2c159a9b3b3d86c8d9997a79cb0bd1da460566b5a python3.11-test-3.11.2-2.el9_2.2.tuxcare.els25.x86_64.rpm 96bcf2b5fe4e5ca14b1bb553303537cff380f2638253e6becf3ff0772514aff5 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els25.i686.rpm da3663049eaaa52fa22fab611d7d5ff89fc6845fd52322e4e60ebb0b28171853 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els25.x86_64.rpm 976cde6d779910ac60be20f47b1bdcd3d50af6143749c1372111681ae4d0d933 CLSA-2026:1779807614 TuxCare License Agreement 0 - CVE-2023-32573: Fixed undefined behavior from using uninitialized variable in QSvgFont None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-32573: Fixed undefined behavior from using uninitialized variable in QSvgFont

0 tuxcare-almalinux9.2-esu qt5-qtsvg-5.15.3-1.tuxcare.els1.el9_2.i686.rpm 9f61ec60ecaa2f887cb70b0ea012eaad0741b416e2dd95f7b1f50254ef7726b2 qt5-qtsvg-5.15.3-1.tuxcare.els1.el9_2.x86_64.rpm 7a5918de3b513f6a2e75259dacb386440ed4d591c5e17c0284e630e5791d334a qt5-qtsvg-devel-5.15.3-1.tuxcare.els1.el9_2.i686.rpm d1df1686cff27a9f87eeaa13c4e76ed8154233182c470c5687348f29b6d4e4ec qt5-qtsvg-devel-5.15.3-1.tuxcare.els1.el9_2.x86_64.rpm 8bfc975fce1eb084d0b38d4cfd83b118486b46011e64d983fdfb365380419604 qt5-qtsvg-examples-5.15.3-1.tuxcare.els1.el9_2.x86_64.rpm f55b16b70f157f03dc2a877ac443e3697719b5c43bf149da4a9b4b8494d67f64 qt5-qtsvg-tests-5.15.3-1.tuxcare.els1.el9_2.x86_64.rpm 005cce91dd09583216e70ac61641ab02af67e2618b821b95a8829ee178d9e27d CLSA-2026:1779888685 TuxCare License Agreement 0 - CVE-2025-4877: prevent integer overflow and potential out-of-bounds write in base64 decoder by capping input length to 256MB - CVE-2025-8277: adjust packet filter to work correctly when DH-GEX is guessed wrongly - CVE-2026-0965: refuse non-regular and over-sized configuration files in libssh config and known_hosts readers Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4877: prevent integer overflow and potential out-of-bounds write in base64 decoder by capping input length to 256MB - CVE-2025-8277: adjust packet filter to work correctly when DH-GEX is guessed wrongly - CVE-2026-0965: refuse non-regular and over-sized configuration files in libssh config and known_hosts readers

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9_2.tuxcare.els12.i686.rpm d78e57a7447fcaa0154275715987831850d91baa7440f344a5e208c6b708e39d libssh-0.10.4-8.el9_2.tuxcare.els12.x86_64.rpm f431fedab8185ceccabe0fd0b20f9d358389b74653320a614c57ac99d4bdaa5e libssh-config-0.10.4-8.el9_2.tuxcare.els12.noarch.rpm d8f53bb3ea7f2ebdc8db295e37246914c3891ca733a785999a3eca8781c762de libssh-devel-0.10.4-8.el9_2.tuxcare.els12.i686.rpm 848b0c42594d9180e79f550ce93862fa45e1fee547f433b4260dbe8e22330664 libssh-devel-0.10.4-8.el9_2.tuxcare.els12.x86_64.rpm 68853b2a1581c0ff7076862defdd7deb277627f4f7788be1571f13c88fc9245b CLSA-2026:1779895093 TuxCare License Agreement 0 - CVE-2023-45897: fix out-of-bounds write in read_file_dentry_set when SecondaryCount exceeds the maximum number of File Name entries Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-45897: fix out-of-bounds write in read_file_dentry_set when SecondaryCount exceeds the maximum number of File Name entries

0 tuxcare-almalinux9.2-esu exfatprogs-1.1.3-3.el9_2.tuxcare.els1.x86_64.rpm d4dbc9c64ea35cd7244e780cc2cf007dd3c57cdffa78a9d9123e8cfda53cadd8 CLSA-2026:1779894244 TuxCare License Agreement 0 - CVE-2026-34743: fix buffer overflow in lzma_index_append Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34743: fix buffer overflow in lzma_index_append

0 tuxcare-almalinux9.2-esu xz-5.2.5-8.tuxcare.els1.x86_64.rpm df7daca47e5025c9ce87d74da94e8078f056462fbe786b4d7a0bb06b244a2b44 xz-devel-5.2.5-8.tuxcare.els1.i686.rpm 44e972667b8f3658fbbc40812e282147b21bd685b483674e38c78934f80d59da xz-devel-5.2.5-8.tuxcare.els1.x86_64.rpm 780d1515c5270145965181ebeca1d1e4df5ce0ba2604d5f8fc0dcfcb284c4cf8 xz-libs-5.2.5-8.tuxcare.els1.i686.rpm ef9f088d6ee63faf8f1a75e0f3dbc3aaa9af2000e24a2ec7f42a5e7fbcf03c27 xz-libs-5.2.5-8.tuxcare.els1.x86_64.rpm f1520e7129f84da4a721a674fe7e16e5122f36ea11a111f1a17ad8eb36dd19f8 xz-lzma-compat-5.2.5-8.tuxcare.els1.x86_64.rpm c7d213b0949c36cb43f35d7c0898ef1abff00774f9ba33cd236dab0388b9ce99 xz-static-5.2.5-8.tuxcare.els1.x86_64.rpm 6e10ce77d41f47309c61b77d21fb72e605c0febc23ab15dc85df983a6eee3040 CLSA-2026:1779898961 TuxCare License Agreement 0 - CVE-2025-54389: escape control characters in report and log output to prevent terminal escape sequence injection via crafted filenames, extended attribute key names, and symbolic link targets Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-54389: escape control characters in report and log output to prevent terminal escape sequence injection via crafted filenames, extended attribute key names, and symbolic link targets

0 tuxcare-almalinux9.2-esu aide-0.16-100.el9_2.tuxcare.els1.x86_64.rpm e58d1076abf4031999fb4a162abd3cf9da8994d8c7c83f10a806a6378ac82e42 CLSA-2026:1779963183 TuxCare License Agreement 0 - CVE-2026-3833: fix case-sensitive nameConstraints comparison of DNS names and e-mail domains in lib/x509/name_constraints.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3833: fix case-sensitive nameConstraints comparison of DNS names and e-mail domains in lib/x509/name_constraints.c

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.4.els5.i686.rpm e940ac2cc40e87557dc177fbac78c236c03ac05ba70a3d2a1eaa5120cc2e5dec gnutls-3.7.6-23.el9_2.tuxcare.4.els5.x86_64.rpm 4327b2867be05bfc24904de4ba2f5bc3ebfe7cd0cdff683e5318cd629997e99b gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els5.i686.rpm 760e02a284ccef0785cb72cc4d92fb1c97ff24176218b96319b1251dffa6ec44 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els5.x86_64.rpm bb2e44e12564dd2f254c2784e43aca50ee2c631cf35a9c3d079c90f01f010b3f gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els5.i686.rpm 900a1dad56eb119b9a5f76943f01571423624ca9024a79254a47392ef1674b17 gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els5.x86_64.rpm 1532e3a1011c30b5ef3d1c00aebfee28c08e413c79d6949ebdfd41fb742fdd07 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els5.i686.rpm e445d5352e74b1bb441dfd9f8943edb85aa4f0f42ed4382d8b69b1fa2930b0f6 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els5.x86_64.rpm c78764a947dd858e04dbdb8f2e10638853bd490d2c9155f7511977f62fb1bd05 gnutls-utils-3.7.6-23.el9_2.tuxcare.4.els5.x86_64.rpm 216330b02c8af9e89b782f71051ec2616f5871076af7ff248da8ac56572aac7b CLSA-2026:1779987841 TuxCare License Agreement 0 - smb: client: reject userspace cifs.spnego descriptions - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash {CVE-2024-35854} - cifs: Fix memory leak when build ntlmssp negotiate blob failed {CVE-2022-50372} - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() {CVE-2023-53038} - drm/amd/display: Do not set DRR on pipe Commit {CVE-2023-53042} - tcp: fix skb_copy_ubufs() vs BIG TCP {CVE-2023-53669} - clk: Fix clk_core_get NULL dereference {CVE-2024-27038} - drm/amd/display: Check null pointers before using dc->clk_mgr {CVE-2024-49907} - bpf: reject unhashed sockets in bpf_sk_assign {CVE-2023-53585} - driver core: fix resource leak in device_add() {CVE-2023-53594} - wifi: ath9k: hif_usb: fix memory leak of remain_skbs {CVE-2023-53641} - wifi: ath9k: verify the expected usb_endpoints are present {CVE-2022-50297} - drm/amd/display: Fix potential null-deref in dm_resume {CVE-2022-50535} - ext4: don't allow journal inode to have encrypt flag {CVE-2022-50277} - tls: get psock ref after taking rxlock to avoid leak {CVE-2024-35908} - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program {CVE-2024-27431} - bpf: Guard stack limits against 32bit overflow {CVE-2023-52676} - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() {CVE-2021-47457} - serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527} - cpufreq: exit() callback is optional {CVE-2024-38615} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() {CVE-2024-39276} - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets {CVE-2024-36905} - wifi: nl80211: reject iftype change with mesh ID change {CVE-2024-27410} - tcp: do not accept ACK of bytes we never sent {CVE-2023-52881} - crypto: pcrypt - Fix hungtask for PADATA_RESET {CVE-2023-52813} - net/mlx5: Properly link new fs rules into the tree {CVE-2024-35960} - usb: ulpi: fix memory leak on ulpi_register() error paths - usb: ulpi: fix double free in ulpi_register_interface() error path {CVE-2026-31759} - wifi: ath11k: fix htt pktlog locking {CVE-2023-52800} - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute {CVE-2025-21653} - calipso: fix memory leak in netlbl_calipso_add_pass() {CVE-2023-52698} - wifi: iwlwifi: mvm: avoid NULL pointer dereference {CVE-2024-49929} - ext4: update orig_path in ext4_find_extent() {CVE-2024-49881} - drm/vmwgfx: Fix a deadlock in dma buf fence polling {CVE-2024-43863} - RDMA/restrack: Fix potential invalid address access {CVE-2024-42080} - net: can: j1939: Initialize unused data in j1939_send_one() {CVE-2024-42076} - nfsd: clear acl_access/acl_default after releasing them {CVE-2025-21796} - rtc: pl031: fix rtc features null pointer dereference {CVE-2022-49273} - net: veth: clear GRO when clearing XDP even when down {CVE-2024-26803} - coresight: cti: Fix hang in cti_disable_hw() {CVE-2022-50491} - scsi: qla2xxx: Fix deletion race condition {CVE-2023-53615} - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() {CVE-2023-53476} - scsi: qla2xxx: Fix potential NULL pointer dereference {CVE-2023-53451} - usb: ucsi_acpi: Increase the command completion timeout {CVE-2023-53168} - drivers: base: dd: fix memory leak with using debugfs_lookup() {CVE-2023-53390} - USB: fix memory leak with using debugfs_lookup() {CVE-2023-53359} - PM: domains: fix memory leak with using debugfs_lookup() {CVE-2023-53202} - drm/client: Fix memory leak in drm_client_modeset_probe {CVE-2023-53288} - drivers: base: component: fix memory leak with using debugfs_lookup() {CVE-2023-53409} - USB: uhci: fix memory leak with using debugfs_lookup() {CVE-2023-53197} - media: uvcvideo: Handle cameras with invalid descriptors {CVE-2023-53437} - arm64: csum: Fix OoB access in IP checksum code for negative lengths {CVE-2023-53726} - bnxt: Do not read past the end of test names {CVE-2023-53010} - dax: make sure inodes are flushed before destroy cache {CVE-2022-49220} - cifs: Fix oops due to uncleared server->smbd_conn in reconnect {CVE-2023-53006} - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE {CVE-2024-42321} - PCI: Fix use-after-free of slot->bus on hot remove {CVE-2024-53194} - net/ipv6: release expired exception dst cached in socket {CVE-2024-56644} - net: sched: fix ordering of qlen adjustment {CVE-2024-53164} - watch_queue: Fix NULL dereference in error cleanup {CVE-2022-49257} - lz4: fix LZ4_decompress_safe_partial read out of bound {CVE-2022-49078} - vmxnet3: disable rx data ring on dma allocation failure {CVE-2024-40923} - ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() {CVE-2024-36955} - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure {CVE-2022-50374} - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag {CVE-2024-35817} - dm snapshot: fix lockup in dm_exception_table_exit {CVE-2024-35805} - nouveau: fix instmem race condition around ptr stores {CVE-2024-26984} - wireguard: netlink: access device through ctx instead of peer {CVE-2024-26950} - drm/i915/gt: Reset queue_priority_hint on parking {CVE-2024-26937} - netfilter: nft_set_pipapo: do not free live element {CVE-2024-26924} - dmaengine: fix NULL pointer in channel unregistration function {CVE-2023-52492} - PCI/PM: Drain runtime-idle callbacks before driver removal {CVE-2024-35809} - nvme-fc: do not wait in vain when unloading module {CVE-2024-26846} - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp {CVE-2026-31427} - phylib: fix potential use-after-free {CVE-2022-48754} - mm/filemap: skip to create PMD-sized page cache if needed {CVE-2024-41031} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() {CVE-2024-35944} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage {CVE-2024-36006} - wifi: ath11k: decrease MHI channel buffer length to 8KB {CVE-2024-35938} - dyndbg: fix old BUG_ON in >control parser {CVE-2024-35947} - ALSA: core: Fix NULL module pointer assignment at card init {CVE-2024-38605} - wifi: iwlwifi: mvm: rfi: fix potential response leaks {CVE-2024-35912} - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD {CVE-2024-35801} - ipv6: avoid overflows in ip6_datagram_send_ctl() {CVE-2026-31415} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() {CVE-2023-52832} - i2c: core: Run atomic i2c xfer when !preemptible {CVE-2023-52791} - mmc: sdio: fix possible resource leaks in some error paths {CVE-2023-52730} - protect the fetch of ->fd[fd] in do_dup2() from mispredictions {CVE-2024-42265} - wifi: mac80211: fix potential sta-link leak {CVE-2024-35838} - octeontx2-af: avoid off-by-one read from userspace {CVE-2024-36957} - xen-netfront: Add missing skb_mark_for_recycle {CVE-2024-27393} - net: hns3: do not allow call hns3_nic_net_open repeatedly {CVE-2021-47400} - HID: sony: Fix a potential memory leak in sony_probe() {CVE-2023-52529} - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD {CVE-2026-31428} - mm/gup: fix gup_pud_range() for dax {CVE-2022-48986} - drm/virtio: Fix GEM handle creation UAF {CVE-2022-48899} - ipv4: ip_gre: make ipgre_header() robust {CVE-2026-23011} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() {CVE-2024-26894} - RDMA/umad: Reject negative data_len in ib_umad_write {CVE-2026-23243} - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure {CVE-2026-43049} - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks {CVE-2026-23270} - net/sched: act_ct: fix skb leak and crash on ooo frags {CVE-2023-52610} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - mm/mempolicy: fix memory leak in set_mempolicy_home_node system call {CVE-2022-50391} - mm/kasan: fix double free for kasan pXds {CVE-2026-31686} - ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402} - dax: Fix dax_mapping_release() use after free {CVE-2023-53613} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- smb: client: reject userspace cifs.spnego descriptions - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash {CVE-2024-35854} - cifs: Fix memory leak when build ntlmssp negotiate blob failed {CVE-2022-50372} - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() {CVE-2023-53038} - drm/amd/display: Do not set DRR on pipe Commit {CVE-2023-53042} - tcp: fix skb_copy_ubufs() vs BIG TCP {CVE-2023-53669} - clk: Fix clk_core_get NULL dereference {CVE-2024-27038} - drm/amd/display: Check null pointers before using dc->clk_mgr {CVE-2024-49907} - bpf: reject unhashed sockets in bpf_sk_assign {CVE-2023-53585} - driver core: fix resource leak in device_add() {CVE-2023-53594} - wifi: ath9k: hif_usb: fix memory leak of remain_skbs {CVE-2023-53641} - wifi: ath9k: verify the expected usb_endpoints are present {CVE-2022-50297} - drm/amd/display: Fix potential null-deref in dm_resume {CVE-2022-50535} - ext4: don't allow journal inode to have encrypt flag {CVE-2022-50277} - tls: get psock ref after taking rxlock to avoid leak {CVE-2024-35908} - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program {CVE-2024-27431} - bpf: Guard stack limits against 32bit overflow {CVE-2023-52676} - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() {CVE-2021-47457} - serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527} - cpufreq: exit() callback is optional {CVE-2024-38615} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() {CVE-2024-39276} - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets {CVE-2024-36905} - wifi: nl80211: reject iftype change with mesh ID change {CVE-2024-27410} - tcp: do not accept ACK of bytes we never sent {CVE-2023-52881} - crypto: pcrypt - Fix hungtask for PADATA_RESET {CVE-2023-52813} - net/mlx5: Properly link new fs rules into the tree {CVE-2024-35960} - usb: ulpi: fix memory leak on ulpi_register() error paths - usb: ulpi: fix double free in ulpi_register_interface() error path {CVE-2026-31759} - wifi: ath11k: fix htt pktlog locking {CVE-2023-52800} - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute {CVE-2025-21653} - calipso: fix memory leak in netlbl_calipso_add_pass() {CVE-2023-52698} - wifi: iwlwifi: mvm: avoid NULL pointer dereference {CVE-2024-49929} - ext4: update orig_path in ext4_find_extent() {CVE-2024-49881} - drm/vmwgfx: Fix a deadlock in dma buf fence polling {CVE-2024-43863} - RDMA/restrack: Fix potential invalid address access {CVE-2024-42080} - net: can: j1939: Initialize unused data in j1939_send_one() {CVE-2024-42076} - nfsd: clear acl_access/acl_default after releasing them {CVE-2025-21796} - rtc: pl031: fix rtc features null pointer dereference {CVE-2022-49273} - net: veth: clear GRO when clearing XDP even when down {CVE-2024-26803} - coresight: cti: Fix hang in cti_disable_hw() {CVE-2022-50491} - scsi: qla2xxx: Fix deletion race condition {CVE-2023-53615} - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() {CVE-2023-53476} - scsi: qla2xxx: Fix potential NULL pointer dereference {CVE-2023-53451} - usb: ucsi_acpi: Increase the command completion timeout {CVE-2023-53168} - drivers: base: dd: fix memory leak with using debugfs_lookup() {CVE-2023-53390} - USB: fix memory leak with using debugfs_lookup() {CVE-2023-53359} - PM: domains: fix memory leak with using debugfs_lookup() {CVE-2023-53202} - drm/client: Fix memory leak in drm_client_modeset_probe {CVE-2023-53288} - drivers: base: component: fix memory leak with using debugfs_lookup() {CVE-2023-53409} - USB: uhci: fix memory leak with using debugfs_lookup() {CVE-2023-53197} - media: uvcvideo: Handle cameras with invalid descriptors {CVE-2023-53437} - arm64: csum: Fix OoB access in IP checksum code for negative lengths {CVE-2023-53726} - bnxt: Do not read past the end of test names {CVE-2023-53010} - dax: make sure inodes are flushed before destroy cache {CVE-2022-49220} - cifs: Fix oops due to uncleared server->smbd_conn in reconnect {CVE-2023-53006} - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE {CVE-2024-42321} - PCI: Fix use-after-free of slot->bus on hot remove {CVE-2024-53194} - net/ipv6: release expired exception dst cached in socket {CVE-2024-56644} - net: sched: fix ordering of qlen adjustment {CVE-2024-53164} - watch_queue: Fix NULL dereference in error cleanup {CVE-2022-49257} - lz4: fix LZ4_decompress_safe_partial read out of bound {CVE-2022-49078} - vmxnet3: disable rx data ring on dma allocation failure {CVE-2024-40923} - ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() {CVE-2024-36955} - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure {CVE-2022-50374} - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag {CVE-2024-35817} - dm snapshot: fix lockup in dm_exception_table_exit {CVE-2024-35805} - nouveau: fix instmem race condition around ptr stores {CVE-2024-26984} - wireguard: netlink: access device through ctx instead of peer {CVE-2024-26950} - drm/i915/gt: Reset queue_priority_hint on parking {CVE-2024-26937} - netfilter: nft_set_pipapo: do not free live element {CVE-2024-26924} - dmaengine: fix NULL pointer in channel unregistration function {CVE-2023-52492} - PCI/PM: Drain runtime-idle callbacks before driver removal {CVE-2024-35809} - nvme-fc: do not wait in vain when unloading module {CVE-2024-26846} - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp {CVE-2026-31427} - phylib: fix potential use-after-free {CVE-2022-48754} - mm/filemap: skip to create PMD-sized page cache if needed {CVE-2024-41031} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() {CVE-2024-35944} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage {CVE-2024-36006} - wifi: ath11k: decrease MHI channel buffer length to 8KB {CVE-2024-35938} - dyndbg: fix old BUG_ON in >control parser {CVE-2024-35947} - ALSA: core: Fix NULL module pointer assignment at card init {CVE-2024-38605} - wifi: iwlwifi: mvm: rfi: fix potential response leaks {CVE-2024-35912} - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD {CVE-2024-35801} - ipv6: avoid overflows in ip6_datagram_send_ctl() {CVE-2026-31415} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() {CVE-2023-52832} - i2c: core: Run atomic i2c xfer when !preemptible {CVE-2023-52791} - mmc: sdio: fix possible resource leaks in some error paths {CVE-2023-52730} - protect the fetch of ->fd[fd] in do_dup2() from mispredictions {CVE-2024-42265} - wifi: mac80211: fix potential sta-link leak {CVE-2024-35838} - octeontx2-af: avoid off-by-one read from userspace {CVE-2024-36957} - xen-netfront: Add missing skb_mark_for_recycle {CVE-2024-27393} - net: hns3: do not allow call hns3_nic_net_open repeatedly {CVE-2021-47400} - HID: sony: Fix a potential memory leak in sony_probe() {CVE-2023-52529} - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD {CVE-2026-31428} - mm/gup: fix gup_pud_range() for dax {CVE-2022-48986} - drm/virtio: Fix GEM handle creation UAF {CVE-2022-48899} - ipv4: ip_gre: make ipgre_header() robust {CVE-2026-23011} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() {CVE-2024-26894} - RDMA/umad: Reject negative data_len in ib_umad_write {CVE-2026-23243} - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure {CVE-2026-43049} - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks {CVE-2026-23270} - net/sched: act_ct: fix skb leak and crash on ooo frags {CVE-2023-52610} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - mm/mempolicy: fix memory leak in set_mempolicy_home_node system call {CVE-2022-50391} - mm/kasan: fix double free for kasan pXds {CVE-2026-31686} - ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402} - dax: Fix dax_mapping_release() use after free {CVE-2023-53613}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 6bd4376ff0ca8ae45867713c04ac203e6c7788e4683258332acdb847d3da117f kernel-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 5b67084c50d556d3c093e24462d6708b6bb9a8dad0695f7946e4cbbabdbd8250 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els2.noarch.rpm 3044e024d831a3a7e436d4664d18651fec7d9f4d874ec99fb702e57bb46f24ba kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm fdbc3867d726ae1a192fc3c15f9abc31aa884f52221d51d0e303b2de7974c236 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm ec0d74af18ca9c6823dbeba25ea1e39e9a25fd15df0cde2e9ee36b11ca044452 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 124fdb1461f1b50ffb833c3ac05c533e2e957c444d0414c78e54145509889d38 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm a113b3618809541f41dbf47064414c92996aca9408be03dd47605a7fcabe44da kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 299ccdc02f4517aef1128d6a3ee6b4dc386375eeb13971d14670e36d2ebcd8f0 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 0a10ce1beba0d28fe15b8c8741b2a82927e3a98b8565ebb2081d2f2813f2c2a0 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 6fbfad3a99c0139fc6a6b4454a4143cba659a24a5c49da847c0051fde5866c83 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm a613b4b44617643e46bc94570c6d47a0627fd1bf8b3293947d28b4230def73a3 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm beabf2bf003c4e0d9349a585d8eb8fbb4947a6596ca0394338b1ae1875e866d3 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 2fa62de85bdacf0fd90a1acf5870256bcc447b8ffd731c3a54325a9668a3dc06 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 27713b2ec36eb47ae58fa35d9a49dc093e37bbe7382230188245eb4e44e5ffff kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm ac126bf1c7d2d3f0ee554c31d8883828bb820752076b3429b5510a989ce64a45 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm a115bdae5ca8ccdbe19d2b905abd658663743c656461826fa118d617784e8be2 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 7b9b5a96ba101dfd5cb9f6e862cb57c7d8985dca440ddbda0e52f825db83c2b7 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els2.noarch.rpm 08d16c3d090c80bb724beb08686fc85dbd06f1db267d2ab2c16da6a2ef5a4ddc kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm de2b8c96d5b9c3b7bed2e2e9b8834699023591a998aa9da04af76ef4ea8ab5f7 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 22825ec7a4211d0d97c6b7ee94d5a6c69850a437b5d27703835ee1ff5ec5c177 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 8fbae9421200ae2da727106bb97c076c416a10460ee84be0406954a6e267605c kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm bde27d7a5c82428d0129d23e104b616f7b4755f49dac42ea66355be1431d0b50 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 0dcf2decf59e888c583e02f9afad0b34d2af8caa6012a1fdfbb5bf2130b65d28 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 8357ba46d0eacf5dd2280c4b6b8144e8bc561c82635cbc7227cdf390f01f3553 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm bc3dcfde456922247270fea15fed43f3476b3e485ae3e15e7bf233eaae3d11e2 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm eae6eb42f79bb897c8a60b3a91aa932701abf0885d9414e9510b49076effc0d0 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm cd2d485c8a9e0a7aae9baa6c0f76cadae940fc23283054436de5f1d056b83e2e kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 1c1d6aeab61df85d2b10f24038a5d8d69a1a847ace4f29e5d9c2fa50e7e8e9ed kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm c684e29cacc291a77b84100287258fcf21975162b1d3e6922dd5f3f8cb34f018 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 11b9b2123cbfed20470418b72f6a542d9d9db50465f2756a3459e84b2e8cab5c libbpf-1.0.0-2.el9_2.tuxcare.11.els2.i686.rpm cfff9392d5f18a6f330c0b1c2dfad8e8374970d4846b07c1934ed74383434a92 libbpf-1.0.0-2.el9_2.tuxcare.11.els2.x86_64.rpm 6978163bb43ccca3a5444356b9172352f06f072ea1c29305818f402baa677809 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els2.i686.rpm efc9f63e2adb988c34d46d2b1fae97b08e0cae60f958d65ccf4f9c03f9d38582 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els2.x86_64.rpm 0661631ff3cd764e978248e866629c82c99b68627ef54ee8cfaab0fb9c7d4ed8 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els2.i686.rpm df165ea71088c5645826de5a998da2a1ebe4cf1930c80b80aa63b8de5a3a4480 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els2.x86_64.rpm 863d3ac38fd4c47a2701ae7edbc9cbeb27590b0667b01b71ccbd2d941c86bd41 perf-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm 981835dd04d135ee0374cf584729ed6605d6c8880de44816e2b15cb7b57053d6 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm e5f0f1ab642d5d248be272bc4e56d4a3366ffb535d823a9c6021801451594487 rtla-5.14.0-284.1101.el9_2.tuxcare.11.els2.x86_64.rpm e9c73308d622076f3d1f4b18a3d5d4c0506cc82161c20a37c4011a28b5c0fcff CLSA-2026:1780063601 TuxCare License Agreement 0 - CVE-2021-46195: fix infinite recursion in libiberty rust demangler Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-46195: fix infinite recursion in libiberty rust demangler

0 tuxcare-almalinux9.2-esu cpp-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 3dc206fa05edcad49a0ee17a8d514164da37685753ae4c4c74d11bfd935f1a64 cross-gcc-aarch64-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 6f214dfbedb290fe4cdbbcb77e1f482eedac951af8075bcbc252c3c6cd4f2dac cross-gcc-c++-aarch64-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 2859d5b9022579c8a9ab39ede8b2ef9c8255011cfe411fffdbbabb75a663375a gcc-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm ce113f936440064982109e9e6410f620707c9dc6db1ad4eeafce735eda891bff gcc-c++-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm ef99609bc5975067d9c8512aa129e780f82e299bdc4b848056fb7e16490171b8 gcc-gdb-plugin-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm cb9597b05bfaa1e47286fe203a860f0b44c111d0811dcd03d98086f7217dd1d5 gcc-gfortran-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 4db078c6202abf55627e00520bd03f29e6aa563e907bd335c1827e343de0486d gcc-offload-nvptx-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 623e932594572406f03df37ba634db6496710553af8480422ae6f1928c032455 gcc-plugin-annobin-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 04c5a5916e98af187fd41a8cf9200246615ba5e598e47395b795052eda6d0ef0 gcc-plugin-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 525b617b122942919dc2f35d933d6a5f0ea9baa5360c8089aa154e98cf0a696f gcc-plugin-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 2a86af2fabb28325437a1c7816bcda800c26bed2f203f9b4485a54187b45e09c libasan-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 689c0820c9e43786ca42d9282588aeb1b6f1f6b06b5be98c7712331f19b8fbb9 libasan-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 70e902c4c120495f10a7e3632f56046fa88aaea257c2b1c0e0f8d302aa0a549b libasan-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm fd369d54f649d38577fac396611c57b31981bf38822d065c4bfb21c82519caf8 libatomic-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 9e357617cfc8bf819570185d657ac1c0b0056087d03af6dda40c905b49eb1a1b libatomic-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm c8a72ff4f0e4e32e2b000e3ab8db0e17dd1b55e113d2062516a1445762ff7c51 libatomic-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 7644ca0035f5fe2c2ea3b1ee61bb5b90afaf6017bcfb874a6d3c3e22aac1bfdc libgcc-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm b988ec218d93dba861f93c5c923c0e2d2cb23ea8e6c31333b795e15fd13f28a2 libgcc-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 3b197f0dc5b36d39c04e4566dbdc13cc5e2fc600431043f41dadf98bb8b6ec58 libgccjit-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm e92f698ce9a66df6db8561b016b21fab2dbae4ff0c5d51e53c728fe22ae9b982 libgccjit-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm e3561792337cc7d59b9966815d8eed337e051286d8e38bb4acc1365b4bf3f107 libgccjit-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm ff6871f7414e41a1d7c0400d472e62820571318541272d4ccced23492322493b libgccjit-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm b441b9c884fb5661d225b7071c424ea9b2d1939a5cac30a7baab2d9892823893 libgfortran-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm e8a64e913d80056358c45e80a43b2d784f9d10921551bb78436b9d764f7c2c99 libgfortran-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 551f68995c5baf39980eb7e64cd499f81c905e10ded365026b101428ded2773f libgfortran-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 570ac17c8adb2ca860c89e07f423f4c5277975feeb0a999d191352bb9c93952d libgfortran-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm d6945f980fdb7c6df3f6dc8c3ca9a94755f8d993495a90bbf8a6d6175a660a30 libgomp-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm f2c0c683a2b5184d3cdb1ee46178bf9fd67311d0e3507887c3a422b115f970eb libgomp-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 100e60209849e3601aa2174bed369a317ecaa416af58bd2d14499184dd576f34 libgomp-offload-nvptx-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 740edc888d4e70598016b19a5bae92fea0d9a5077ce35ca71bf1e0b837f84eb3 libitm-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm cc90dea18be6a25c01edceb2a6b7688a06ddd5a2f6cad69be9b1df2d1c255f73 libitm-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm ef0b883ba6a4cfd8b78949310dfd3ca0adb0c37d64e4c10faba1f4ecf0c1b1fb libitm-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 4632371d7fb682cd7f2c166a17df47bba077eadd5678a374b7f78c4cde7fa9f3 libitm-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 7eb9d7250e7820c9410fa5b3ee3ff4f11a962aebb5b8db8e6e0b58d6783525a6 libitm-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm c1eb30bd6f78d8d90400237d26aaf3b751e2441bcadaea05f260d36c25ec313c liblsan-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 659b6a15cf5a3cb75320e3a6a3215587113f1aa07b2bbd562361292768b9e1c6 liblsan-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm df04a3ff40b1f61561d243e184ca80324bc42e41729d8b6e074975732a4ac784 libquadmath-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 7b1f570af5e3d3b83149126bc1c1659e55d9cd212a9de1fdbf441b7a3a2a55b3 libquadmath-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 94478f226c181710d07bcd9df938079ff5bc4598e54c215415ab4bc3888b9a03 libquadmath-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 4a9b250c502bc2ead468be31d45dffb4187317dd89247f2738c74c5e03a3fdb5 libquadmath-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 68bbebf888f23c17750331fdb4a4ae2bee05fe97db547584c3678ab923752bbe libquadmath-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 1385a1567d7c97d140d9c672c39b44b99f44f65685b1919239b0ae53e23cbe9e libquadmath-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm d348c9966e74cab01caf7933f325f8b606f613d9462114caf3890ac3251cbfbc libstdc++-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 20bfb58eb8f84cbf5b8b6585dbbe08c8e412dfcfe5adfe493bada180022af310 libstdc++-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 2db5bb12738024b83f70b0fc41d9240841e609b1a1b27b9e3009ef2ab6b63d5a libstdc++-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm e0aee5dee1a4d07eeede4965fe6350949422bf1fa8cfa0b61fdf7bddf894a504 libstdc++-devel-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 82af7d2b82c09bbba9174f010252e68b885d0de481ce65c21c4fd6eafae3f73f libstdc++-docs-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm a8380a346a5e20b79644491ebb617fda52a4316262ea15c8191ebd71df87e078 libstdc++-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 536d440c84abbbee0fc8de896048ec1cb3ebb01e9e89dcaef0118fae6011ef0a libstdc++-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm bed86ea415c3b0310e627b6ad8265303984f82c5dd8b0ae7708a47aa6ed4e7b0 libtsan-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 32078ff1884ea91ddffa8c5d8ba74b384e7a2eee7204193d075f7ec2d544004b libtsan-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 1a8ff98721bd5191a807777282e75ec5b4827f6615451d600eb93039074ff530 libubsan-11.3.1-4.3.el9_2.alma.tuxcare.els3.i686.rpm 260939d206cdd1185765551fd21466d18f365d70969db28147651625db5a2689 libubsan-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm 269b87df55f4e042e28a390776e6c2cfcf12ea2f33b773943f592f8d78f5c980 libubsan-static-11.3.1-4.3.el9_2.alma.tuxcare.els3.x86_64.rpm bd08d32f61e9fcd9053983230cc563ada93a531634d7ffeedafc18334c3ee9c1 CLSA-2026:1780064425 TuxCare License Agreement 0 - CVE-2026-41035: fix use of wrong element count in qsort call in receive_xattr() leading to SIGSEGV Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41035: fix use of wrong element count in qsort call in receive_xattr() leading to SIGSEGV

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9_2.tuxcare.els7.x86_64.rpm e0e50102f5b5360f5267fa25ca6ecf19370007133f3e910f7a26b05750af2301 rsync-daemon-3.2.3-19.el9_2.tuxcare.els7.noarch.rpm 69429497bee48f0804650eb8e1b32afce282fd0a1601291efbedaad7e6cc4180 CLSA-2026:1780054786 TuxCare License Agreement 0 - CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape

0 tuxcare-almalinux9.2-esu log4j-2.17.2-1.el9_2.tuxcare.els1.noarch.rpm 9960411349ba9af0e51163246aebadcf34d304dfa3c75664ec07c64ef4d79581 log4j-jcl-2.17.2-1.el9_2.tuxcare.els1.noarch.rpm 31cb377bb17369ee3bc1ddd3d83c16ab5d9a99305b99945cd2a6bfbadfccce30 log4j-slf4j-2.17.2-1.el9_2.tuxcare.els1.noarch.rpm dbc7e24118e5975777181a68e2ca08c228d6c0ee30d90d2bf5f3aca5ade9b475 log4j-web-2.17.2-1.el9_2.tuxcare.els1.noarch.rpm 131e0d98daa3ce2ea6bac5bc9dc4df87b1160c12f97d23d27164c73f58c73d59 CLSA-2026:1780067463 TuxCare License Agreement 0 - CVE-2026-27447: fix authorization bypass in cupsd caused by case-insensitive comparison of local user and group names; include upstream Issue #1557 follow-up to avoid breaking AuthType None policies for non-local accounts Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27447: fix authorization bypass in cupsd caused by case-insensitive comparison of local user and group names; include upstream Issue #1557 follow-up to avoid breaking AuthType None policies for non-local accounts

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els12.x86_64.rpm 4d46e40397e9707fd5fded36440f1828151e08895c032b432558912db8f053c6 cups-client-2.3.3op2-16.el9_2.1.tuxcare.els12.x86_64.rpm c5e9a24038909efe61527b9b84ae6d0ee01ddfcf9c6f56bb13b504e795c64ddf cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els12.i686.rpm f59c947baf5b299047c5031d5b2c1dd6ce84f53215505444f20b038c2a82165c cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els12.x86_64.rpm fd3c101827964bb62f0bc9ad3c10fbee7586a51d2c87c837288e40432132f7b8 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els12.noarch.rpm 63def44bd5662f55c30633a5f1820548aa779f1557f33673eed3227cc8c26903 cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els12.x86_64.rpm 756fcd4e947542ac5172ccb52d9a98b4c2ca04ee604894f2992791eaaf21095a cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els12.i686.rpm 4223b9bce79956bed5ec8d06665b7fcccb6bdd24ade38c8142fa95193456de63 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els12.x86_64.rpm 5a41d14775e562d771692963484365bb42cf9f3af89612d083d784840fe44f59 cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els12.x86_64.rpm b70f111bea25d7587096aaf6756fbb87b17f40c81a94b25c571460d6eda7b21c cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els12.x86_64.rpm 945a15a8093a39ce8328eb47a2b7bf44e759f187a3c92e820111b22ce458bed1 CLSA-2026:1780133935 TuxCare License Agreement 0 - CVE-2021-3826: Fix heap/stack buffer overflow in dlang_lname that could cause segmentation fault on crafted mangled symbols; add bounds checks and input validation to prevent overflow and crashes. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3826: Fix heap/stack buffer overflow in dlang_lname that could cause segmentation fault on crafted mangled symbols; add bounds checks and input validation to prevent overflow and crashes.

0 tuxcare-almalinux9.2-esu gdb-10.2-10.el9_2.tuxcare.els1.x86_64.rpm f8b97f9125e50d2d021890d0452da048eca1f6aeafcf5ee2b233332a708d3296 gdb-doc-10.2-10.el9_2.tuxcare.els1.noarch.rpm 76037334eff0d0e552b5168a2c247de90141ff122a7aa7bd3d7d43ef08fa91d5 gdb-gdbserver-10.2-10.el9_2.tuxcare.els1.x86_64.rpm c0d9e88608e9a3c79f5a51667fdb173a5d9f1aa838b42b7f0c5b525938465e54 gdb-headless-10.2-10.el9_2.tuxcare.els1.x86_64.rpm d318dd9dcb3ba097e6df1632e66694e99336f6918e835470c26ebf1634aac2bc gdb-minimal-10.2-10.el9_2.tuxcare.els1.x86_64.rpm 89c7e6621e9bb867c6af5f48ee2e286378e6e3a6f0dbe740ed3e0fdeee92df69 CLSA-2026:1780305652 TuxCare License Agreement 0 - CVE-2024-42934: fix out-of-bounds array access on auth byte in lanserv_ipmi.c (handle_temp_session, ipmi_handle_lan_msg) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-42934: fix out-of-bounds array access on auth byte in lanserv_ipmi.c (handle_temp_session, ipmi_handle_lan_msg)

0 tuxcare-almalinux9.2-esu OpenIPMI-2.0.32-3.el9_2.tuxcare.els1.i686.rpm e12b221f73fc00995deef638d266f93b8f25d518cb163847c511c46bd53f79ae OpenIPMI-2.0.32-3.el9_2.tuxcare.els1.x86_64.rpm d19ff5b2ea47837d5a59b8f377d191ec77421d99ca4791a963482a60263651d4 OpenIPMI-devel-2.0.32-3.el9_2.tuxcare.els1.i686.rpm fb1500375416176af1fd8e54ffc87e4dd0b140ec239cb9f8d6edee6f0d126bd9 OpenIPMI-devel-2.0.32-3.el9_2.tuxcare.els1.x86_64.rpm 19ee209950721898d727307e2f9fc381621136f230e3bfe5d41accbb609ef6b3 OpenIPMI-lanserv-2.0.32-3.el9_2.tuxcare.els1.i686.rpm 202914296ea34515404654b3dd7f7d510dfe4dfdd6e4d9e24392bbab1377947a OpenIPMI-lanserv-2.0.32-3.el9_2.tuxcare.els1.x86_64.rpm f051f469696f01d677fd16b83a38dfd1d520c60f895ee21212fff9e812c60a32 OpenIPMI-libs-2.0.32-3.el9_2.tuxcare.els1.i686.rpm 12c88326fe8c368cd7b804984b09205a8371307037513fc617c14626028b093a OpenIPMI-libs-2.0.32-3.el9_2.tuxcare.els1.x86_64.rpm 366d26f54b11af6edba18d7eee37a466f3965f7b27b65f71da270dda247064c8 OpenIPMI-perl-2.0.32-3.el9_2.tuxcare.els1.x86_64.rpm 447175ff3e5bcc9c7bb496cae5a3d4f24c017bd8140d27988c7397075389b22f python3-openipmi-2.0.32-3.el9_2.tuxcare.els1.x86_64.rpm 4e4e420802caeb7c784851cdc2477f3d7f3aeb6b48eaf6726351f20edc2e97be CLSA-2026:1780406442 TuxCare License Agreement 0 - CVE-2026-5950: fix unbounded resend loop in resolver bad-server handling - CVE-2026-3592: limit addresses returned per ADB find and dedup resolver SLIST to mitigate resource-exhaustion amplification Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5950: fix unbounded resend loop in resolver bad-server handling - CVE-2026-3592: limit addresses returned per ADB find and dedup resolver SLIST to mitigate resource-exhaustion amplification

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els12.x86_64.rpm 749e89ee335e06485a6528194dc707118c0db72be3072ab449c10ca163f856d3 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els12.x86_64.rpm 55af5a0f4f38dfb406faeb62d6aa06ab73a2570795dfa6e400331c780b244903 bind-devel-9.16.23-11.el9_2.2.tuxcare.els12.i686.rpm 554c82862eedfcc34f8e10a6cd091a4d440c196c37a8122f8e412460a6dfe6f9 bind-devel-9.16.23-11.el9_2.2.tuxcare.els12.x86_64.rpm 4ea2eba019883cc1a62762b0aa747122946fd2c5bed4dafab162fdc2d13c4e83 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els12.noarch.rpm ea3b4ea393d0b152e0fe0ea9bd7cb544c2443890b67518b2a80feea53f1e29a6 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els12.x86_64.rpm a13a454cfdea9c055ae61b2a9be833de0c3ebc73d64c54a7a83649b63adf5b4c bind-doc-9.16.23-11.el9_2.2.tuxcare.els12.noarch.rpm c26cead53e81e219181844b82074a3686131bd9440dc54be3551c96049a31cc2 bind-libs-9.16.23-11.el9_2.2.tuxcare.els12.i686.rpm 13796a267dd05ebbef0b855121969bca5f6aced4b1319f2a0df812cea354cedf bind-libs-9.16.23-11.el9_2.2.tuxcare.els12.x86_64.rpm 6d6279a4d01e52378c864bd33f0ecefa3043133fe65781de2804156766cda1b2 bind-license-9.16.23-11.el9_2.2.tuxcare.els12.noarch.rpm 5332c20035d094dcb3e6f4386c66603dc6a0f71f2f174b55cc2443416637d8a3 bind-utils-9.16.23-11.el9_2.2.tuxcare.els12.x86_64.rpm 8773b69172e40d10ce33149a22026db5216ee507e86392c97d7e26caaac05967 python3-bind-9.16.23-11.el9_2.2.tuxcare.els12.noarch.rpm 288fa5d1ca0361faa552f673f0ebd133a75b74f50f3a31e477c6127841088e1d CLSA-2026:1780407449 TuxCare License Agreement 0 - CVE-2026-3039: fix GSS-API memory exhaustion during TKEY negotiation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3039: fix GSS-API memory exhaustion during TKEY negotiation

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els10.x86_64.rpm dd49037187d93a4df71b3ea52077eccd0451ffe6b8a49bc230b63aeeb4ad6678 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els10.x86_64.rpm da1aafd198ca59ab126a497b3e0f8050f092de6ec5c636094c8c20a0347c0f25 bind-devel-9.16.23-11.el9_2.2.tuxcare.els10.i686.rpm 2dd13f23179cfbab5e0b84311caebb9ad60bb63bbb0b2f6520f875a20aa1c58e bind-devel-9.16.23-11.el9_2.2.tuxcare.els10.x86_64.rpm be804e8ab6ef45fc373110d75aef539f0b2930a36fd364408eca4f2b02b6b6d7 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els10.noarch.rpm 324cc39bacf9dc2eaed2240efa215ddeebed9b44f437e5d5357271d6c880f327 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els10.x86_64.rpm 680c33d5e9533efec962ff0af77040c81f3b4d7d2ae4ba6543a6fa7e0f84adf1 bind-doc-9.16.23-11.el9_2.2.tuxcare.els10.noarch.rpm 410102e2eb1be0299263d025db3edd21a590b9a758aa5a2bea72c0992c741cb8 bind-libs-9.16.23-11.el9_2.2.tuxcare.els10.i686.rpm ae0e10fb3ed08a4f2435f597c3ffd928285ed0ddc632dbe3e044f43e09ae4bc9 bind-libs-9.16.23-11.el9_2.2.tuxcare.els10.x86_64.rpm 4b78ffde0b97517ba5ccecf9abd30c0e5de8f733a581927bca8110415e78c3ec bind-license-9.16.23-11.el9_2.2.tuxcare.els10.noarch.rpm de25d876336ed55b380f50878dca83b0f792a2dca307f5b23d0fd6e728cf8d2e bind-utils-9.16.23-11.el9_2.2.tuxcare.els10.x86_64.rpm 6394a36d8b5f5e00cd782e89d2cbfb427a04e6765a550203de61512bc4680c75 python3-bind-9.16.23-11.el9_2.2.tuxcare.els10.noarch.rpm f929586f34b18b2f4b5922e044f6bc06b362539060ef2a4a80ae37b805ec28d2 CLSA-2026:1780411655 TuxCare License Agreement 0 - CVE-2025-11568: fix data corruption in luksmeta when writing metadata larger than the gap between the LUKS1 header and encrypted data area; add upfront size validation in find_gap() and a hard-limit boundary check inside overlap() to prevent overrunning the gap and corrupting encrypted user data Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11568: fix data corruption in luksmeta when writing metadata larger than the gap between the LUKS1 header and encrypted data area; add upfront size validation in find_gap() and a hard-limit boundary check inside overlap() to prevent overrunning the gap and corrupting encrypted user data

0 tuxcare-almalinux9.2-esu libluksmeta-9-12.el9_2.tuxcare.els1.i686.rpm 0a5300cbe132cbb9a79892ac2c8fec9f31c5200ba9313b32a983d08a9e8e862d libluksmeta-9-12.el9_2.tuxcare.els1.x86_64.rpm 94515d951f86e8c4bf52d0423c77cdc85e786d733ecdde8c368181871e15dfd2 libluksmeta-devel-9-12.el9_2.tuxcare.els1.i686.rpm e642d1f3426091d80486ab86defbccf58f3fec7de86fd09d32921319b29e3cb7 libluksmeta-devel-9-12.el9_2.tuxcare.els1.x86_64.rpm b8b439c8cf7afa09d7bb8ae1f29fc06fe089af402301dfecd836dee9c7105bbb luksmeta-9-12.el9_2.tuxcare.els1.x86_64.rpm 35b24004b3becfcc49e443165b0db9da02b1926f7b7be112bdd194b88a790b85 CLSA-2026:1780416707 TuxCare License Agreement 0 - CVE-2025-6395: harden TLS 1.3 handshake state handling around PSK binders - CVE-2025-9820: harden PKCS#11 token initialization against malformed input Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6395: harden TLS 1.3 handshake state handling around PSK binders - CVE-2025-9820: harden PKCS#11 token initialization against malformed input

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.4.els7.i686.rpm 5e14d25a6dcb298396780956082c88592dcc7afb87038a1aa38d933421f2aa03 gnutls-3.7.6-23.el9_2.tuxcare.4.els7.x86_64.rpm 7c1087efecf7451ca350a6d8ab11f87cff4ab34a2b2f5f6a2604b44220019556 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els7.i686.rpm 969751fc4521843149fd704f47a19ab11d29c623649cfc8407a806cbc98a9bf4 gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els7.x86_64.rpm 46975a195acff5dff2a27e56238c5afc30e4c57f55d329e1beaeceffbe1a4b45 gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els7.i686.rpm 9a45b13aefdb12c45f5c1a755f45220e398d1f6da74ea0d09918a480092c5a1d gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els7.x86_64.rpm d6d893a7875ee39f8d6c4483ded06018fa13300e65d7e0eebe5e1e5b7ff584d6 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els7.i686.rpm cb79157108f79faa46571e7683ec92bc91ea08642e5c259ce803ed24445f9a1e gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els7.x86_64.rpm 95e4f8c7c07d3bb6413cf9a00f383ceda59ac27c167fd6bf021ac49c39579d63 gnutls-utils-3.7.6-23.el9_2.tuxcare.4.els7.x86_64.rpm bb0021e09980a343fafd6d21bc93c3c9fd3b6179fc34b1258508450fdc2a985b CLSA-2026:1779733763 TuxCare License Agreement 0 - CVE-2026-4046: iconv: use pending character state in IBM1390/IBM1399 character sets to avoid assertion failure when the output buffer ends between two 4-byte UCS-4 code points of a combined character; add tst-bug33980 regression test Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4046: iconv: use pending character state in IBM1390/IBM1399 character sets to avoid assertion failure when the output buffer ends between two 4-byte UCS-4 code points of a combined character; add tst-bug33980 regression test

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 9993ffb627cf08a4c6d3e7ba1b4fd3f10a52449727119809630058998308906f glibc-2.34-61.el9_2.1.tuxcare.els2.i686.rpm e23818ad1b2dd5cd43e94108d2a461adfa9fdeeb861cf7f514844d572b10bd2f glibc-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm cf6f505d72df3f3c4a8569b48ad498c5b7b8086373312de60b66247539e93be8 glibc-all-langpacks-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 996dcecce01c0b0060271e32c78ec67bac37785c339d904f4434b3f90a5125bc glibc-benchtests-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 1c9985bd790877cd80180c52a07bd598379e5eca4a32dd0f4a079b92fcae2a8b glibc-common-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm affd8d83cd1fa52b1045110f4412a7ea8d63c82602fd20e916e9d00d2be1dfe6 glibc-devel-2.34-61.el9_2.1.tuxcare.els2.i686.rpm 0ae8a395b3376009495e24452506a4485ae534d2597c76f3045a214e96166c31 glibc-devel-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 3c41d915fa26c8f0a5c8d608e83287a019af4250ada3e39b4d5c73df4b7402dd glibc-doc-2.34-61.el9_2.1.tuxcare.els2.noarch.rpm 8094e78e9ede4ed5a19dcd2d366895f5645db390e64cb5e82fe3fd3a12aeb097 glibc-gconv-extra-2.34-61.el9_2.1.tuxcare.els2.i686.rpm 66790a554964f0dd52ee87b337cd5d0accf171f19ee9d01c5597734ce53ff403 glibc-gconv-extra-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 12673d5bca684c0572498a75f5dd952dc2b04c75ab625edaa83e1e5ef769810d glibc-headers-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2b9731028d8b7b42cb92dae546556fdef4a7c31f2d2406fb1afa45dabd9d7c05 glibc-langpack-aa-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 72f5e510f44742d363941fa7646763a00885bd4fbbd9b1786e39ae7a499faca8 glibc-langpack-af-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 69b46f005fc32bcad4eff38ac685b77c969b2da246f55b496ffa3a54ad60134b glibc-langpack-agr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm ee0d208f83de35a845a8d198ccc75a0c2cf9919dc5d4d27e7be991d0931e5992 glibc-langpack-ak-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 92dbbe7680bfcd1d85d95a86fbdc85dd906ede97c990a40f11e07cd1ecbbdd0c glibc-langpack-am-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm ab209520609cd6ff26249b477ec4ed7f579da7fa25c2fca5dd5d950a9436e29c glibc-langpack-an-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d2db7f27a4fd1bb9fd132225cc55e96f72c97b0526ecb2e3685d787571cf84b0 glibc-langpack-anp-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d591562afce30faa445a23dbbf1dde7391c0d1407926ddf5c9ac8adb39e93fc2 glibc-langpack-ar-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 8e7529d54a9f2ef57298cfaa64107d8fa947f038cf83f57659aad82c2032a6dd glibc-langpack-as-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm e160116d3d1a2174e30cbb09600d23c333e14d795082cc943716466c9990258e glibc-langpack-ast-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 28fc519f534099aeeb92b68d5ec79dcf61ccd32325f26b1c360d79141f5a8b66 glibc-langpack-ayc-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 4a48986d08a49ee8dd7717ebbb9f5f13d7eac43cf03fbf8fe67c7e9f73270b02 glibc-langpack-az-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 646714a8dd3ddb3f75c701e7f2b738c44f069117aa48179073e2afaba5844a5a glibc-langpack-be-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7436789e7e28da49ee8ff870cdd67bb367fddb658f04621817fe7487629105b1 glibc-langpack-bem-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f8c4322bae7e6436a433af19cf5ab48061f34f66d089cba00fb09ffdc7ed2e70 glibc-langpack-ber-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 30756d6c4a70683f3da4b9b167caf114518e3bb120bbae7708e268fb7b627ae4 glibc-langpack-bg-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm c37b1a7d6e0a1324bf62cbddf0e9ef3b4d12e8a5f5f102a2333cc68fcd821ba1 glibc-langpack-bhb-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 4345a8e71e1555cf5965ced52910c4e8280cb88f7d61b76c28d678bdfce46b46 glibc-langpack-bho-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 9a6eaec35f92cf0c00aa29382fb19b27839fb6117ac4a2fb20278e071ef9294b glibc-langpack-bi-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm e130f9f3cf5731f10e9e45f3591cc7654a9a52a38781eab15080248d0b7a00d2 glibc-langpack-bn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 33539346d7cf4b0a09cf09c13138c13d7728e3b6084d588e3985e4dd7be89c7a glibc-langpack-bo-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 870d925a9075618f6d1a90297014d28a7928565cba8fd039a19bd59843033a06 glibc-langpack-br-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm bcc5487f4b66176e50aa28a454c11419d3e827201abc4b8c7a9af926abac3aa3 glibc-langpack-brx-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 1c8006131dc2d0dc7b34530ce0a2733beb46a4a084db79ec2c47677e13dfa263 glibc-langpack-bs-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 88c6016dad451b2510b2906136a0429a9356638b80eb95346a1284133ee395c4 glibc-langpack-byn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 3b0fdb8069365f5ea9aa076550c2f4f9cd99ffcbe76641b7a184bcc2b15bbf76 glibc-langpack-ca-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm eec9b944b1dd22db70772598872e21e549cf1a60a7239db3b05c825487a8074e glibc-langpack-ce-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 00f7f8a856a127892e19a61570f4caf79dd5d20ba413a0030d495515cfe8aca6 glibc-langpack-chr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm cb5aef5ef0baf853801e45d944e1002df38bb72f19476d47f4cbe5eafcc06da3 glibc-langpack-ckb-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 5c3d19e5dac7038387b7842d8090e3c95d4c0db78f3da40a164072327baf0d5b glibc-langpack-cmn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm c622e08064f7141bdf4a640d4b32c0391a17666bcbe9fde69f128b7a4accb732 glibc-langpack-crh-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7acce52b58b10ff614b06ec0dedee0c9d87ee9b2fff0a8938d5f4ec53211a20e glibc-langpack-cs-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 51c507419c491d0898c86b46d4a90f1b61010be2c86cc1d7f41584afc26d9078 glibc-langpack-csb-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 1a41a9ed19710e7f6ac0575f4e8eed11689c326a2336e51fb0a5807ee0e81121 glibc-langpack-cv-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f76e2b9e4a01cc1e2fe71c1874a64dca390f7eb1716f799693e54662a42c6db9 glibc-langpack-cy-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm fb271a560ae70c8673702a71ec585ba985dbcf851485116cbab84094f09de0c1 glibc-langpack-da-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 1b33eaf17d37af2e34653cfefa7f4022198fa914e3e4194d0cbc9cbe1a44bd42 glibc-langpack-de-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2ad8af49f220c6e927f1ede092b2fc9a5288af876880ca4b85b0626f7273bd51 glibc-langpack-doi-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm e9f522e2f9a0712ce2f2c321ddfc0ce05f6f9d1d352adea64b96bcab0da7cd91 glibc-langpack-dsb-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 9f62a164537b067367c59104b512f95d2a15cd5b1f676f7cd5870cf8a08a99ef glibc-langpack-dv-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 09197383c496e1d5779520b75f512c1c38857eeb475dfc6c827d12afb6a1dc4d glibc-langpack-dz-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm df311038bc281860b547eee4a503b8d8a9e0d3f9408fb66a74c9de64a839ae8c glibc-langpack-el-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 3abc07898ed3f2c2856b78ec725f8c0003e31444b179447b01d0f085b58a39e0 glibc-langpack-en-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm ae52b8f73128ac8f82697e422a0ef88edb6e9689eaba124d5885192276ae7c2a glibc-langpack-eo-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm c90e4fedc69e6511bd38d1e088f66f0bd9b253383dfa4f9fed9be2150aaa2681 glibc-langpack-es-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f12612f8f2bd8f175cc997d3498dfa0b7c2ad1310a547e8efe701e6bcb3b8ea2 glibc-langpack-et-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 4ae8cb6c40109a6cab6f9dd038ac17c0bf300d773d76a113136c757e4be62aa8 glibc-langpack-eu-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm b7da0aa1fb1aef3bea4acfb638dab3b3c96ecc735b8ff5452a25c5241e76b24a glibc-langpack-fa-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f13b878e403106c8d4f4194b337832fc27be00b48dbd8791b30c074d651ac0ef glibc-langpack-ff-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d1e12176814c653c5ace68bb7ca57b863f9ac39e86572311db33959a5ec16adb glibc-langpack-fi-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 99c0dfb4a29416dfa6606eba005f6bfe8658bdd445a4e39e05cf2a56037d23eb glibc-langpack-fil-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d93ba1891decd63600947cfc90576b1f60f3ff92dd97bd7395ab8956348fe7f7 glibc-langpack-fo-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 9a3262b7505aa65ed44731604712d082d6be98a87631ac6d7f131881241adea4 glibc-langpack-fr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7deceb15635de1ac800df71c1ef97788b03a27ffde0ad72a8d8e0192333493dd glibc-langpack-fur-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 521540f56ccfd191f23dedf679a1f2cf2a15e82bcfb694d9c7e41df9abb2ba90 glibc-langpack-fy-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 6bb3651cdb0d10b78096c7b583bce97eb289d5229b8587132e687bc521823fc0 glibc-langpack-ga-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2cf112bffb21f6a8e3ffa22dadee1135c9629ffeb3daf523dd930cf1405885c2 glibc-langpack-gd-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm ace8f0aa5c5f95e4b088f2a048e8912803aaa5d25868b6d32edfe290d19ad6e0 glibc-langpack-gez-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 0c3a560d57ebb3028f6313fca400f9dab8ba8a2a89ec6667dffc15bee13d2698 glibc-langpack-gl-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 9d7a7d392bddba7279f00294a32bde7940af4cf02dc85fcc9486e548ae5aa966 glibc-langpack-gu-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 0624ecd36c5290f67bdf3387b57bf880c7c929e5a154c94c71c8be27f4e4cf73 glibc-langpack-gv-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 628e065684901c06edcb6d258c295ca97dc1fce78d5019f5aead78fc294fbef3 glibc-langpack-ha-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 6e526ffd4bcf1fb198fc7830660295518549e87935526814703aaf44c448fa7d glibc-langpack-hak-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 5296fbed375281c4fcd67e9ba9298e2a7c9a66ff34e6db65207378ccdd58331a glibc-langpack-he-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm b7ed4e3f5322a0caeacf8f44b9b2e34139094321a68306920842cb6fd923f1bd glibc-langpack-hi-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7d1487ddf5232e9558c7b1abfb057360635b03f7e40a7bf644ec169db5694d3c glibc-langpack-hif-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm cc2dee8bc789ba82db30122ef629873b43d85836586551188326090733778fcf glibc-langpack-hne-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm c90d708bd09883b8d8b10c904e0ad9f73e177227f865e3d86abce349c3de65c3 glibc-langpack-hr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 6e219a3e583ebc1ddbeae78fff69585ee26c1cddcb369ecf0383e6a4f83992b8 glibc-langpack-hsb-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm fa16a05a71ecf8a391c8dbb08d99c7b7439cb8b816c116222fb3e6e0f50948eb glibc-langpack-ht-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2b2e95ba499013ac88c0c776c7a68a262745900cd8d1fc2a94cfa84ba6f39a4f glibc-langpack-hu-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 552f81587cdb63009fb5c51fef9bd81ec6035ca5ef44f8ba5f1b3d076f7e89df glibc-langpack-hy-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 5babb6d6ef2fc834ba874d1f07dd7c6b399ec153f88eda1676ed269c461562e0 glibc-langpack-ia-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm a2b58edef4c135000bd355efbb2000cf3dbebd41bf0100f7f8756990a6e586cb glibc-langpack-id-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2e6d886b00c967fad84190ab20d9f37f1945f188255e9ba2d8fd2abdffe6a706 glibc-langpack-ig-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 3380d698528d23ade7c55f3c5796ce34143d0a3a626ad2368bf17d928a8690da glibc-langpack-ik-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f3db7db046ab4e6b9d8319704ed375316e6b0a72c2853d74fc3f20c736eb222f glibc-langpack-is-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 4e629961fd949c8bab70df485daea4878db355d472a7c38c8fc7c4230bcf4295 glibc-langpack-it-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm b9bf2a1ae1493b7df58ec27a30bda18e51fb911e23803580e7489c58ccec69a0 glibc-langpack-iu-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm e21cf74250b1d13d6aa241586dcbc49757b85626cc1a37c09483143ffa8e30f9 glibc-langpack-ja-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm c8e98e98ce2fa04728476b601d647052c4a5c7848c2a6868891f6859362ec8f7 glibc-langpack-ka-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 4a9637bc2469fb19b95a4a7fdebc54eee5cda91b341e766986f8ce86fff6fb45 glibc-langpack-kab-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 6f2a0713cad07d84a0d93dcac5aa8bcd821cbca946a24b0439f61212f33fe7c5 glibc-langpack-kk-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm bbe1fe3051d8bcbff5ac7ebd4695eb9b7147b55178e2d5db3f892bb9a27966d0 glibc-langpack-kl-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2fc4a9bbc6ee47edc4055f35183277faa81d3d5c0ee8b1df7c959ff8290a69b3 glibc-langpack-km-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm c11274c25b85e7d998a8039d9e8db74c9af18eded211f798e7fe678f3fde0403 glibc-langpack-kn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 39a760fa5020077f322f9d2f44e793bcd3c5e7bd2a0484361a081c4db13205aa glibc-langpack-ko-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm aaf576b50d3be0d81b3875b1a828c5c45ac01d0629f1e1009cae97cef2009318 glibc-langpack-kok-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm fda514d3e92ab79e5ced8b0708c0b9c61a9f19024472ec46805e7c4c70c42ad8 glibc-langpack-ks-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 0258de70a1d025d82da1f5ce4b82cbfb073016089a9294adcbf803ce60e75a1e glibc-langpack-ku-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 15f5bc4e0bcf7e6fc62215cf1dd8ba65c76af874371a0b0257e929dea90462d6 glibc-langpack-kw-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7560a4515a6c68b88cce31359fb36726a59b4c21105d81c60949185c365f434a glibc-langpack-ky-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 091904d1810cbf906c5ba65a04d6bc369356af3b64e997ed9931ba46032346b1 glibc-langpack-lb-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 4465c2b15682c793b5f367202f1e7bdfb6cb261a79f7a7c840c98ce6b6ebb429 glibc-langpack-lg-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 488233fdf5bc899618a998590b1afcd5d7f6b8802cc28c57fb2befa3fa9d023e glibc-langpack-li-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d8ed58a7ae446f5b1e1ca6a82f6f39d94e2f1a7ec5c3b798ed5cb2f15be40075 glibc-langpack-lij-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d4932698edcee1ec6994df6d7ee7c1e560107fff27324e84bb730e6898b40019 glibc-langpack-ln-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 22176acbcd7a7e5e4f0ccde8038d5577a893801be728d32393c2c40977d443cd glibc-langpack-lo-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 0e7ce9c196105d2e04c21747ef1f88f6948af4aafff689643c38841af550ce49 glibc-langpack-lt-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d8cea360b17a1eedb5c12211d5aab0ad5b22511f47b95e17bdb5e48cbbe32c10 glibc-langpack-lv-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 9909595080cb0e4798c3e7b467d71307d2916e27bcff3401b52141673a38f8af glibc-langpack-lzh-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 34047b916ae0021b56aa69b9fae5dd5859fef81c74bd19b6ab3caf09d2db7ff6 glibc-langpack-mag-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 74d46e1909a9ab2186fc11cd0d0fc0a4c8176dae38bba1db3b296d142ff58280 glibc-langpack-mai-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 18a7cc639fa04a1b07ca581af19042ac5fefb6ddbe7f73f13c38f6f7ed5fe636 glibc-langpack-mfe-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 57b6e5308e0bb0793842a42609387817558f29cea4cdad1cbe06d93673ec323d glibc-langpack-mg-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm eed08e307be810859053912dc650ad1230db101eb41f0f1e0e479a82b2359ff4 glibc-langpack-mhr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 9208f727b701fae5ca5fb61fa40a277bf640f8734659636b80c01ebaa9cf6f83 glibc-langpack-mi-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 605da0dd4d1f14f802287cab42e75017faab2d998ea714283db6ca4a134037b0 glibc-langpack-miq-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 15910dc6a20023d70babb7b5a3024a715374c59bcde51da695c515596719bd13 glibc-langpack-mjw-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 62b78991f14336ae8c51f2248a7bd99fb56ab6c0a28bb5c3fd87253b5b31d16c glibc-langpack-mk-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 84aefe5c8ddeb000b8f517f443229aa59a511fbe6540b9fe8b12c98cd7a6e608 glibc-langpack-ml-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 50f3c6227f5eca346c159d938c1c9e9f3caac175d6d2e42415c657796c4a3745 glibc-langpack-mn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 61e1e86f1f36684781bb0bac8c443dab710a627b8a0539f1417fdc0cb3995161 glibc-langpack-mni-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 29d573865e4ec582e4645396d9a43a9dfd8f2fa0bffe63bfef76d6952cfd0fef glibc-langpack-mnw-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 4fabe4822d0bf1d0d46c85a363271a212d0957ab6bbb2176c275da8e80291626 glibc-langpack-mr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 21e6651b21c0068e755201e4260c83f9e1dd135ee4bba8bcd03d61bc1f7ba4e9 glibc-langpack-ms-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm a0816a29fa0542a61166c8d548084f13f3181ea10d4d23df1749c148b98bdbd6 glibc-langpack-mt-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 04aaf00d14b5ee78197d599cf0d415ccaa167b6cf4972fbf0046345e591991c1 glibc-langpack-my-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm fbb734c8cc7f96ead3fe217e7f66cab6dfe27493a298ecf2ae02d59481bb7aa0 glibc-langpack-nan-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm e84239494baa67db3144510e1179ef1ceaa5fd1b531b0dbd19ed472ad134cb66 glibc-langpack-nb-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 3da2bd2d3366b21ff3354b9592c8fd14b78161f2efd852bc65cec0c39c874a43 glibc-langpack-nds-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 172f9707d09d997357f214cedb859f4a7e790ebbd18ef164f5e897e3f6998609 glibc-langpack-ne-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm af888870c32cab6b1e28b51409031b1ce15125c15c64497cc66f42e8a375a79c glibc-langpack-nhn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 76bd1d79ea8c087587b203fa4fb9343e6b4d96010c29dc1938ca206397cda77e glibc-langpack-niu-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 512fe2ad0582545c20e4c163de4b63381c068d58a6a7ee02955d258ba3485ddf glibc-langpack-nl-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 267b747207e6784191861bbcd64c16d26f6a6d0758c36b37df93c36c91464d91 glibc-langpack-nn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2eb26b1be5595c8e8664d6114b055448557b24cc7b3e7fc66f86f1b036e9abc3 glibc-langpack-nr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 199289c5d1f3a22a73ddd57072c455ee67696efe4ef8e34dfbf3f09f26ce2fc7 glibc-langpack-nso-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 928432d815888b76cf6639645db010377b23c5b3804b283ffdf36f117d4ac536 glibc-langpack-oc-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 0e0f104cbc00263f864b48d748c2ddda8bc22159445c762106971c59b790cbea glibc-langpack-om-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 311ab65f49c8f8e37503f84fd5360a9defc0135e7f8bd7b311d53bb37d593197 glibc-langpack-or-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2452b58c92245d5edb94c043e545e27dfac8b29a9b42fa802d20e8c75dd96266 glibc-langpack-os-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 6bcf10fc700518cca41211115a7cd47d729ef275bf17406bca8507bde92322d3 glibc-langpack-pa-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 0fd37abbc072aecc60f8321e3fb8fb343e60fd27db599c03a55b8111f1c97f5c glibc-langpack-pap-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d5e6426249400c43e9516d6a26ea5210950ccd2ce0d6b85659fed6a00afb06bd glibc-langpack-pl-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f57c8dde37f846869f9e43e16f03095ec85b6646c2060536ba2f6eefbb7653da glibc-langpack-ps-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d89084ddeb11804e668c0d891a06ae7f561dda93fb083c21836762914d80fc2f glibc-langpack-pt-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2fc55d6a5f78640e1d15a18e6362c79c69e6e436d0427c93e1baf79e53b69d64 glibc-langpack-quz-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm cad139913e445599d9f986d766cfddd0465c19556609b8448dd1d9d4c11b0f45 glibc-langpack-raj-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 25d4da945f9faeac6ef365248a955178e1059d9e29d5017d0433e267a189be15 glibc-langpack-ro-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm cd6c0920c782751c17736278e1db6596f45cadd92d339b35cf89ba5e51c06e5b glibc-langpack-ru-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 626f5fa13c1c8219898162a6b743183cea4e66ff97cccaa7f4750922b01dfb08 glibc-langpack-rw-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7752c9c7277cecc94fb3ca38eb64cdc757b176f1aa34e6a005275eb744658570 glibc-langpack-sa-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 107b791402f73c74ebace4c3c3e010da86aa2d2bacc0a4b450a61bd2befd7640 glibc-langpack-sah-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 553a9b8b4b295818ac41627f270886b1ab6c9ecc67755728e0c2169659a49890 glibc-langpack-sat-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 687bfe7c08d63789e8f8677312e88d92b2941f78a5499540ac1d22b25f1ff3f2 glibc-langpack-sc-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 72c2188ba353f677db90f9e12dcd3cc9e598fedf2a7337521c508d7f644387fb glibc-langpack-sd-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm ce9bb797221b7cf4b8ac18eed8b03f5482df8938637808b3764c82f367c6713a glibc-langpack-se-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm b4e31e29178ac7ed67e71b5fe418e8cb62bd6e7f52a1d33817f4ed0b8916af9f glibc-langpack-sgs-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 81f605091cfe9c72832875bea860e0968ae3a6927ed04d6a8e8c6053837b8fee glibc-langpack-shn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 394e8d4efd64b82640c583e9d3d74f8c9845a1f6f2b258c28e7bee91d70393b8 glibc-langpack-shs-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 075e627d4e9e8145903144faf4e21921a8e3d9438d7945cfea91af4a44fe458c glibc-langpack-si-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 726147bf2ec195f8879dcd9260c188343977986c88a93d2b437d0d815e9d5293 glibc-langpack-sid-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm a0a67f289424b35cacce4a038d80458494d70b2febf1761d8be8a81d0ea827ec glibc-langpack-sk-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm a5e0d20d325899f81737ca9ea3fb3f8b10c03e2fb29512a3629cde8cf81fe616 glibc-langpack-sl-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm bc2ff971e47a1fcf74c49c8ab03e529af77c28470577735a1012502b1e393417 glibc-langpack-sm-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 3812cb2a651220c4e88e27ee059ed0d6191090e04bd2e9e10e3e24e379f01be9 glibc-langpack-so-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm e108e9b6727459bd25ce4d9551c6bfb216119fe43845fa6009c0248a113cef3b glibc-langpack-sq-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 76e71057bde6baec37302a3c6acb57fc5910658e51fa4b0cbf25e302931ef147 glibc-langpack-sr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 719c00bc5ea13d4fdab634449520aee23ee3abde60815a0ff78f1bb7238a15cc glibc-langpack-ss-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 4f565fd64be2d9598815c1bf5dbbd2e00304ed290d65835d5c0428461c8119a3 glibc-langpack-st-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 2225a19c518c37a2a0a241ea4aed67acabe74f0541bd22f8307c6f4590ae648c glibc-langpack-sv-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm c7f684250b2abc698eaac9923c6be3284da76cd9940686860dc2a78c1cf3e62d glibc-langpack-sw-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 395570953aef2a0cbee726cc7b74cc95a3f65af3bcb2b6667e57a80746cc3af6 glibc-langpack-szl-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f23bb7e6438898f1f91eb17853dc0d5fdf1bde5baafe982754cfe90d4da0681c glibc-langpack-ta-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 5be91c2705dee3b6ff411bb3529b6beebf8485049b6e4f070a40a1591ab1c6e2 glibc-langpack-tcy-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 91d52051266159db8cb8e07b331c1bf4b3fb522b49e42c556edcfe83ce5326de glibc-langpack-te-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7c2400d4bdedef64cbf103d96d87854d9da0c0f28f5d93bf953e9b4d0a8ac445 glibc-langpack-tg-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm b17f8e1bead6044e653d765e1dd0b7121a5c9f86881ff5a550fcfe01d8518d0b glibc-langpack-th-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 02cb79c6ba41be832f310009f414e7b6b78ad74bf6d62ebaccf0d8b9c387527e glibc-langpack-the-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7cd23d7f755beb8e39f76235f7df83419e2abc34fd836d584f1e92708f8af548 glibc-langpack-ti-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 55e1a5c33794baa2d260bdccfe945fb380d5233d7b9cc2a4f4e27965767e809b glibc-langpack-tig-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f9415f48744ca2e9802e62d7ca44f4dbdee6e7aa5df0f7a0f83671ec5d71d5ca glibc-langpack-tk-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 55b8cdf050e5d9f89ea57603d6cbca13ebf89672d95f0d0fa4f6ae312ca04049 glibc-langpack-tl-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 41b674c8881050a1fac91115492befb3ee609f0fb9f9fe36b70e56f9ee5f1f9e glibc-langpack-tn-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 1e0c2e2be553ce52a4871f55268e88e57deeccfdf50118432150241650032ec7 glibc-langpack-to-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 24dafd07e34eb9ba8c41569a81e5582242c1272a9397aab2084c43fea3196f2b glibc-langpack-tpi-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 8f03a4f8b95e84863eb890424a7c5e548e56e49a44a97938433323d0645529fe glibc-langpack-tr-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f0f4024028c9e5562c6c751feb5378e5695b0847856823aed91fe03d200d252c glibc-langpack-ts-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm eb8090e19ab6a96a74d74a0ba545f67ed3f61665c39d2ba4dea2b098f39fe045 glibc-langpack-tt-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 64691cc46981d2a47b784223e54c680ee3d264c35013c1950591e17d584441f6 glibc-langpack-ug-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm eb0b8e73959596706fb1b174bdbedd7827b690281bbcdd5e5d213983445446eb glibc-langpack-uk-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 6c67774bcf0fb0d80919f39997ad03e12e40eba53cac9a09c0980fb739a96eed glibc-langpack-unm-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d85270376e58cb5a8c5e3b8e7fc4289adffcafbe66555aa730e68bb5144d720d glibc-langpack-ur-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm b68ae913585dac1a871e35985b87b9b253243b44f375736630646a2b3bf832a8 glibc-langpack-uz-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 29b0f38e874988b2c2eb05f0d3d5d31abeafa11b3aae6e14b5710123c3be3970 glibc-langpack-ve-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 69511eccc47e563dde8ebadaa5b56a7cfaff77fc072a4761633d5cd3a17ebe07 glibc-langpack-vi-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm e0e71e7a41c67cfc094155314e3e766f7210b5b54701a780afa0b5ba5aa3b9c1 glibc-langpack-wa-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm ab7527413c0895aebec97d8d1b49a0a37cd50b123bb0f1810ef109aa9d9fe0b6 glibc-langpack-wae-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 6b2277fcd278b0eee6b883f91883c47230e38d868e4b4509e10613c769fec2af glibc-langpack-wal-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm c76265171223e973f976a8489f1138e6ed65d892f832a7b41be27e1a33203fca glibc-langpack-wo-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 68dc36160d59298685692fd94c8bdec7aecf5bea55c9069a2ec75d14f1a9154b glibc-langpack-xh-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 53791312ad71cdbd116027897abaa2eb4bec7e14633b97395edf140caa3edadd glibc-langpack-yi-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f81b04ffa03630362569d930d1bbc6e7ecd1f2781bb48931b6c694d70dd1e529 glibc-langpack-yo-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 39291b1d23469c73043f5c68a62af7de2520fa90e426e6ac1472a094b974908a glibc-langpack-yue-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm dcab933b0c63a31f1e6f630964e082ebaca2981d573d0335a2fc64c276193fb8 glibc-langpack-yuw-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm cc81f7f601f240c85ee0aee1a7594f758d208a56791500cb1bbd343f0c1c264e glibc-langpack-zh-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm e2353e6917538940dd35c25f4b0bf81a07f446fd32990d3749dde3a89e941f77 glibc-langpack-zu-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 08aa70ab42cdcf0f7e9134fc232686dc2c8650de1534e0236554e1df9427ca5b glibc-locale-source-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d1fa48b70e2710c9188b1845300ca5bedfa1094136d01d4e8980fe3d295fc61d glibc-minimal-langpack-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm dfb460322cf0919b76fd7c3037b5849330b6b56ac0b864414c19c05d29582589 glibc-nss-devel-2.34-61.el9_2.1.tuxcare.els2.i686.rpm f02a9ad1df1d634ae91cd445eefbda8fbff62fb540d9bbedd7eb580f95199c92 glibc-nss-devel-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm f8444e8a4a0337b3a453375491995e8fdad7ad0ce26dd708ba1109dc38a0f950 glibc-static-2.34-61.el9_2.1.tuxcare.els2.i686.rpm 8396c42f5d6ecc8c34802832eed367715271cb70f48c97ee1be56902d50543b0 glibc-static-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 0689ad14d9be9ab149e58270883e88509337d31ce91a069694da2e74ee84076e glibc-utils-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 7385e5e4c4741eba81982ca9915225c20f92bece8214e555a3404828da12d8e3 libnsl-2.34-61.el9_2.1.tuxcare.els2.i686.rpm d1b6a1166058dc185456f95bdc7e21bcea05e43e00b02980b59fb4381fee039b libnsl-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 933f91684cfccb5fba8469c1c4ebfa9f25120450d6f6bac7609b1071a2bb1a89 nscd-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm ebabd6af37f1c110af88f556173b89e42a7da1215fed2402608ba57dd4a80db2 nss_db-2.34-61.el9_2.1.tuxcare.els2.i686.rpm 8034bb8b13023bdfcd89a00e1852b7bcec7460d3a6aa5d9d437b1275ae624d60 nss_db-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm d17d13c7b1fbfac130671fe8b92b2481043edbd82d8edb89a8bbf0e31350722a nss_hesiod-2.34-61.el9_2.1.tuxcare.els2.i686.rpm 02f578f923e451f7f7ddb14ad723d5117b5532f08803606af61810af5863b2ff nss_hesiod-2.34-61.el9_2.1.tuxcare.els2.x86_64.rpm 0a94df6cfe237deaba7b86262f9ff0df657455238ff4962fc76f2650da934714 sysroot-aarch64-el9-glibc-2.34-61.el9_2.1.tuxcare.els2.noarch.rpm 1ecce9e8cf0fb7b661488645569d8a5fdeea921609075dc8bf268dae7202de3a sysroot-i386-el9-glibc-2.34-61.el9_2.1.tuxcare.els2.noarch.rpm f07725a21a147b6e5e0b0fbcb03ae446d76a420ad73a2b5ff435da59b2e62973 sysroot-x86_64-el9-glibc-2.34-61.el9_2.1.tuxcare.els2.noarch.rpm 88005e370cf5ef520668e38b0e4c056228e83fd3d2f156fb48e3a754ade24870 CLSA-2026:1780400093 TuxCare License Agreement 0 - CVE-2026-6019: base64-encode cookie values in http.cookies.Morsel.js_output() to prevent script-context injection Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6019: base64-encode cookie values in http.cookies.Morsel.js_output() to prevent script-context injection

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els26.i686.rpm e0ccdaf0b2aae58f76a13d9c919b39277787727f63d440bdff823d7df2b80099 python3.11-3.11.2-2.el9_2.2.tuxcare.els26.x86_64.rpm adfbe63a6d8e21736c03f14f0fb65e1cae35ff6cbd7cdb2a169066ffb2bbe132 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els26.i686.rpm 1cd64adac993254085236d8f93aa55026b74d121fdacead9a05b733d3d3fa38d python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els26.x86_64.rpm cf3bf470df65f201072b4718007b6e30172721fa7df5a7cfc1c378b508f2469c python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els26.i686.rpm cbb77004bf9ce9b2ffdac530ac3e17ce7784b5abfe7961c79e34e3d550957c8a python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els26.x86_64.rpm c2d330ab55c6b1b792d5cc4bbbe79a4f517d341b0cf4aa6c5f3f574e4f9f1a29 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els26.i686.rpm 540de67df8a878d5485ebc2ed742766c0681d478a0dac8b028df6d02837743f7 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els26.x86_64.rpm ce5a5146102a9c8d444b873e186ae0867fa9b93163af18d67033a55f0c92c511 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els26.i686.rpm dcf29bddb89237250508de5d2d28b26f12f4162ddccd0af4b14378982a56237c python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els26.x86_64.rpm e33f9a1ed87705254478d61b152b76e5ee44134fe34f845a6ff7d56d71b287c6 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els26.i686.rpm f763b10f870436d041952c273cf687a4830ac7e052193ca7dacb08c7cbb2bea5 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els26.x86_64.rpm a9101afb8180c29b8a5507b90f01476b8a4bf70fe699073231e4e691e552c92b python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els26.i686.rpm d27112ecf536cb668cec33148b50d672af17da68fd47763c36b1a7d10630db8c python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els26.x86_64.rpm ad9f4ce430b7dc7690dfd597e50dcf060473b16c60df7de7ab5f6a324af540d6 CLSA-2026:1779465287 TuxCare License Agreement 0 - Bump leading release to maintain monotonic rpm-version ordering in the AlmaLinux 9.2 ESU update stream Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump leading release to maintain monotonic rpm-version ordering in the AlmaLinux 9.2 ESU update stream

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-12.el9_2.1.tuxcare.els1.noarch.rpm 1d6362d6e091ea7fad5fdde8324f3dbd4560d2b8ba00382a97f9a22adc3211f8 tomcat-admin-webapps-9.0.62-12.el9_2.1.tuxcare.els1.noarch.rpm 5c146b3be0ffc5e641df72dccb1b72c25e4444e54c3c83a244aed459c430dd4a tomcat-docs-webapp-9.0.62-12.el9_2.1.tuxcare.els1.noarch.rpm 975b0c53178b1446da6a832c4158b8fa87ba5b6a15b9d5118030250719591262 tomcat-el-3.0-api-9.0.62-12.el9_2.1.tuxcare.els1.noarch.rpm 4a581b85631c772cd614b192e148712e03b819c0250532bfebab33c437fe7331 tomcat-jsp-2.3-api-9.0.62-12.el9_2.1.tuxcare.els1.noarch.rpm df0e293cc4f042e5d05728e75eff0310bd136e9041f4bffdfdd94b217e60ca42 tomcat-lib-9.0.62-12.el9_2.1.tuxcare.els1.noarch.rpm ed36cabb57698c9e7d3cd545890c06b34b0b92ca6ba68f95a9ca8604a5db50cb tomcat-servlet-4.0-api-9.0.62-12.el9_2.1.tuxcare.els1.noarch.rpm 6cbdc5fa54f45e402b71d6199113d5391c4ad3931a23cb18746ca0f368a767b7 tomcat-webapps-9.0.62-12.el9_2.1.tuxcare.els1.noarch.rpm 7fc51053a09cecd0132d186d6a304e1964cffef165b4459ce8d7c9fc045434f1 CLSA-2026:1780477611 TuxCare License Agreement 0 - CVE-2026-42960: prevent cache poisoning via promiscuous additional-section records by marking glue only for NS RRsets in the authority section [ELSCVE-130594] - CVE-2026-42944: fix heap overflow and crash with multiple NSID and PADDING EDNS options by deduplicating options and adding bounds checks in attach_edns_record_max_msg_sz [ELSCVE-130649] - CVE-2026-41292: cap parsed EDNS options at MAX_PARSED_EDNS_OPTIONS (100) to prevent DoS via long option lists [ELSCVE-130636] - CVE-2026-42959: fix out-of-bounds write in val_fill_reply by indexing the destination array with chase->ns_numrrsets instead of orig->ns_numrrsets [ELSCVE-130615] - CVE-2026-40622: prevent ghost-domain TTL extension by clamping newd->ttl to cached->ttl in the higher-trust branch of need_to_update_rrset [ELSCVE-129354] Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42960: prevent cache poisoning via promiscuous additional-section records by marking glue only for NS RRsets in the authority section [ELSCVE-130594] - CVE-2026-42944: fix heap overflow and crash with multiple NSID and PADDING EDNS options by deduplicating options and adding bounds checks in attach_edns_record_max_msg_sz [ELSCVE-130649] - CVE-2026-41292: cap parsed EDNS options at MAX_PARSED_EDNS_OPTIONS (100) to prevent DoS via long option lists [ELSCVE-130636] - CVE-2026-42959: fix out-of-bounds write in val_fill_reply by indexing the destination array with chase->ns_numrrsets instead of orig->ns_numrrsets [ELSCVE-130615] - CVE-2026-40622: prevent ghost-domain TTL extension by clamping newd->ttl to cached->ttl in the higher-trust branch of need_to_update_rrset [ELSCVE-129354]

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9_2.tuxcare.els6.x86_64.rpm f5c47796c84a644e8eac168d9a135f9f4afa537c8471c3ce95b0398daf319240 unbound-1.16.2-3.el9_2.tuxcare.els6.x86_64.rpm b309e70366a87d77566a3803a16f3d9698ce754f17dc75a23c3ecdbf44967966 unbound-devel-1.16.2-3.el9_2.tuxcare.els6.i686.rpm 4bbf3a2c560a442d5f0c087a1a3b1f41c582ea0f0d3aeeb7ff77f2ae7bdd0bb8 unbound-devel-1.16.2-3.el9_2.tuxcare.els6.x86_64.rpm ebedd82bae3d3d8031afd2f3d2bf3a197dc37b12878e83e7ba0529d39418d69d unbound-libs-1.16.2-3.el9_2.tuxcare.els6.i686.rpm ea0df4ec54ed0fca045b30cc5d42b9b1771c18c72e0cf5fa83ebd1487f1e887d unbound-libs-1.16.2-3.el9_2.tuxcare.els6.x86_64.rpm 0c518dbea284d2b252a1f74dfef4a86537667130a16b5b1822894a20b988df36 CLSA-2026:1780480701 TuxCare License Agreement 0 - CVE-2026-29518: fix daemon-no-chroot TOCTOU on parent path components by routing both the sender read-path (sender.c) and the receiver write-path (receiver.c open_tmpfile and recv_files inplace branch) through secure_relative_open() / secure_mkstemp() from the trusted module root, and add regression test (chdir-symlink-race.test case 4) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-29518: fix daemon-no-chroot TOCTOU on parent path components by routing both the sender read-path (sender.c) and the receiver write-path (receiver.c open_tmpfile and recv_files inplace branch) through secure_relative_open() / secure_mkstemp() from the trusted module root, and add regression test (chdir-symlink-race.test case 4)

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9_2.tuxcare.els8.x86_64.rpm ea1f34900491dcae2ae51febc641a189cf35438940453e6cfdc11163d749c9aa rsync-daemon-3.2.3-19.el9_2.tuxcare.els8.noarch.rpm 6e53581ed0fa5fc1288abeeac2607669d6f7e8ad45fef6cdaad5c192e411001e CLSA-2026:1780486587 TuxCare License Agreement 0 - CVE-2026-43619: secure receiver-side path-based syscalls (do_chmod, do_lchown, do_rename, do_unlink, do_mkdir, do_symlink, do_mknod, do_link, do_rmdir, do_utimensat, do_lstat) against symlink-race TOCTOU by routing through secure_relative_open + *at() wrappers, harden secure_relative_open to reject .. components and confine relative basedir, secure change_dir against chdir-escape, secure copy_file source/dest opens, fix absolute --partial-dir delta resume via secure_basis_open; add alt-dest-symlink-race / bare-do-open-symlink-race / copy-dest-source-symlink / secure-relpath-validation tests Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43619: secure receiver-side path-based syscalls (do_chmod, do_lchown, do_rename, do_unlink, do_mkdir, do_symlink, do_mknod, do_link, do_rmdir, do_utimensat, do_lstat) against symlink-race TOCTOU by routing through secure_relative_open + *at() wrappers, harden secure_relative_open to reject .. components and confine relative basedir, secure change_dir against chdir-escape, secure copy_file source/dest opens, fix absolute --partial-dir delta resume via secure_basis_open; add alt-dest-symlink-race / bare-do-open-symlink-race / copy-dest-source-symlink / secure-relpath-validation tests

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9_2.tuxcare.els9.x86_64.rpm 790444932f60861a78c6c0eeb5ac969be89b0e4accfa3ec086ceaca90b079f53 rsync-daemon-3.2.3-19.el9_2.tuxcare.els9.noarch.rpm da449cb478e4d8ac55e97165eaab89c51bbfa19e6077e57c4905618e5eeca5f4 CLSA-2026:1780508058 TuxCare License Agreement 0 - CVE-2026-5946: fix non-IN class request handling - disable recursion, UPDATE, and NOTIFY for non-IN views; reject meta-classes ANY/NONE in UPDATE/NOTIFY; validate message CLASS early; skip deny-answer-address for non-IN Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5946: fix non-IN class request handling - disable recursion, UPDATE, and NOTIFY for non-IN views; reject meta-classes ANY/NONE in UPDATE/NOTIFY; validate message CLASS early; skip deny-answer-address for non-IN

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els11.x86_64.rpm a312b6e492fa7a916702a39edf1403f0bede5479fbf289a676e7b84428d94319 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els11.x86_64.rpm 60efcf1e9b894670a44a19bab1d5dfbf7d26a0781c065714186c763f38ab0367 bind-devel-9.16.23-11.el9_2.2.tuxcare.els11.i686.rpm 6a7712de758c1c5be1dfb91e012923434a6f56f45e5e5dffa1520b7f13dc4d84 bind-devel-9.16.23-11.el9_2.2.tuxcare.els11.x86_64.rpm 304e5c58b9e272269d9d7fe9f382cd732c4cfea80765b86886e8656511f84e44 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els11.noarch.rpm 5a8c52291a46404bfc03785a73f6a331e5a516b2cf34157b9c68339b0d3bf6c6 bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els11.x86_64.rpm 9c4ef294a0a4ba49cd7090a22978604e3453c5dc6eade87c850e059435903ead bind-doc-9.16.23-11.el9_2.2.tuxcare.els11.noarch.rpm 09d0b0650b1fc1678cafdb20d05fbf10cecd5f95a157422ecedb72b689dc51f4 bind-libs-9.16.23-11.el9_2.2.tuxcare.els11.i686.rpm f905b0805663cf9724168a644125b3d40ddb81aea3e4799ca406b791d02e9b6e bind-libs-9.16.23-11.el9_2.2.tuxcare.els11.x86_64.rpm 0cc55ee26ffba507d42878c58f24c28b28acbe42c22f48d6c48f86ae3a192788 bind-license-9.16.23-11.el9_2.2.tuxcare.els11.noarch.rpm 132c3c7455cc218edff9d9b5054e2d00fab1f465a50526ab2d3b5d6032fc4c75 bind-utils-9.16.23-11.el9_2.2.tuxcare.els11.x86_64.rpm 986df06e4294c95b1d735038d056db0342fd9efeca78384d46003cf77e565e2b python3-bind-9.16.23-11.el9_2.2.tuxcare.els11.noarch.rpm 0a1081cfb0b677b7e0027c6ec4c0c12d5cc08097bce4d1cfadd0f19c6a405578 CLSA-2026:1780497150 TuxCare License Agreement 0 - CVE-2026-6019: base64-encode cookie values embedded in JS by http.cookies.Morsel.js_output() to avoid injection Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6019: base64-encode cookie values embedded in JS by http.cookies.Morsel.js_output() to avoid injection

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els26.noarch.rpm f7b939333ec3f041d2debc595459c9755b50e4524ec3d5e798ff47425c77c27a python3-3.9.16-1.el9_2.2.tuxcare.els26.i686.rpm e5fc66ab83654081f959c8e305e0cb581d919b351d273a0d70b08d45e45d96d7 python3-3.9.16-1.el9_2.2.tuxcare.els26.x86_64.rpm b2d6e924918368e73a0dfa43204992e8b3dd041fb44ea3a6af2910c7aa2135f6 python3-debug-3.9.16-1.el9_2.2.tuxcare.els26.i686.rpm a3b30ec9c34760e9c1318e32839a0c63c7685ccaab92e5ebfe786fb41c84ef00 python3-debug-3.9.16-1.el9_2.2.tuxcare.els26.x86_64.rpm 7df3defce6f19d7bdb8ebeb430f28f18af0e198f831d93a6e3683e5318240455 python3-devel-3.9.16-1.el9_2.2.tuxcare.els26.i686.rpm 05593f8eac89e2ada1d9ea51f5536ebe8c9a0912b3f151fb808894bb70ff443b python3-devel-3.9.16-1.el9_2.2.tuxcare.els26.x86_64.rpm eaac52236d8c6b4d35a5fb9f330421f6e79252a2dc4cb2ea2e67934c8a88a406 python3-idle-3.9.16-1.el9_2.2.tuxcare.els26.i686.rpm 0024e18aed88346e9fedd2d0ef606bf87b8f744b09f0026ddc2c8b44bbe2f6b9 python3-idle-3.9.16-1.el9_2.2.tuxcare.els26.x86_64.rpm 916fd02c21381706bfece757d3decc082f0a3dd0b16ea3d5afafb31b2a3cf547 python3-libs-3.9.16-1.el9_2.2.tuxcare.els26.i686.rpm f59066e030bb7e3fec81d121b895143a62417321be6cade4f46ea06b1359e423 python3-libs-3.9.16-1.el9_2.2.tuxcare.els26.x86_64.rpm 235fff69dcc97b759dd823ad0928a676beef0aa99e3e192c0da2d14ae35cbe07 python3-test-3.9.16-1.el9_2.2.tuxcare.els26.i686.rpm 8d99d3a12aaf65a45a05699410da6b4e8d090e3e5eea4a27a4ece8ed4cef662e python3-test-3.9.16-1.el9_2.2.tuxcare.els26.x86_64.rpm 4ca0e03d35ea7f9582d1ff0c9d98744160e1167102b833aea15b237dddaaeeff python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els26.i686.rpm 8ee118a8dae94255a021f5a111d111c77da34fd79768359972a1ff61f0a73480 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els26.x86_64.rpm d9fa2c07aec5a13ce55369662c58b5b4a12b2f6e7760d53af7775337f51e1d46 CLSA-2026:1780509244 TuxCare License Agreement 0 - CVE-2025-11411: scrub promiscuous NS RRsets from positive answers to prevent a possible domain hijacking attack; add the iter-scrub-promiscuous option (default yes) and extend the mitigation to YXDOMAIN and non-referral nodata answers Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11411: scrub promiscuous NS RRsets from positive answers to prevent a possible domain hijacking attack; add the iter-scrub-promiscuous option (default yes) and extend the mitigation to YXDOMAIN and non-referral nodata answers

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9_2.tuxcare.els8.x86_64.rpm b0e8ed4c805f88a60d7ca17773227f9a3b9a2b488252d7196fc9ad4b1570c5af unbound-1.16.2-3.el9_2.tuxcare.els8.x86_64.rpm f3ca6dcdf898e944c6b375bc11e0de58c0474e1078e343437bad4f10833fc94a unbound-devel-1.16.2-3.el9_2.tuxcare.els8.i686.rpm 93ab75dbf33fcace4a8bc56d51e41e951d0904e6e0fa71637db4653b7ab25e14 unbound-devel-1.16.2-3.el9_2.tuxcare.els8.x86_64.rpm 07899722eb249f91eab2752af3eff9678417e8f4657a101ff6a53c5b94506b95 unbound-libs-1.16.2-3.el9_2.tuxcare.els8.i686.rpm f36ce276aea13c32de215be7b2ef76dec6b15f40559669443985af096a28e835 unbound-libs-1.16.2-3.el9_2.tuxcare.els8.x86_64.rpm efd65c96e8d85c130e9da2e66e3e567fe1fe2043bed3fa3f73ec73c3e4ba71b7 CLSA-2026:1780513164 TuxCare License Agreement 0 - CVE-2024-2511: unbounded TLSv1.3 session-cache growth via not_resumable session duplication; cache full handshakes only and clear not_resumable on dup so the entry remains evictable Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-2511: unbounded TLSv1.3 session-cache growth via not_resumable session duplication; cache full handshakes only and clear not_resumable on dup so the entry remains evictable

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els12.x86_64.rpm d605979784d4a0ab2cedb5a419789e628d6c8a21b18bf2266b258640609c02de openssl-devel-3.0.7-20.el9_2.tuxcare.1.els12.i686.rpm b3f5e4ffe4f4cb0e751432c02e26e485ff2efb1c7f19c5c717e37ac563f78a39 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els12.x86_64.rpm 36b34d512a158616d1a4929c082bc580ba07f174c5aa1971845bad6ffe6c6ba2 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els12.i686.rpm 27d29f46bda8996b5119d4c16651fb6d1edc633d5ad473a2d74a07a6a08dba0e openssl-libs-3.0.7-20.el9_2.tuxcare.1.els12.x86_64.rpm f75897cd3334bbc68fe2e96158007548d940fdeed9408fd3e108071632382eaf openssl-perl-3.0.7-20.el9_2.tuxcare.1.els12.x86_64.rpm 9224f9ec81c36cee1586d3d3412d3e1d25609633f15a8a61097cbdde23dbf29a CLSA-2026:1780519410 TuxCare License Agreement 0 - CVE-2026-40686: out-of-bounds heap read in GETUTF8INC macro when utf8 operators process malformed input; may exfiltrate heap data via SMTP rejection messages Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40686: out-of-bounds heap read in GETUTF8INC macro when utf8 operators process malformed input; may exfiltrate heap data via SMTP rejection messages

0 tuxcare-almalinux9.2-esu exim-4.99.1-1.el9_2.tuxcare.els2.x86_64.rpm d2bacc28dd43c84c24390f8f79d0d34bf7513f01786299037e56f0ee6d8bbdf8 exim-greylist-4.99.1-1.el9_2.tuxcare.els2.x86_64.rpm 9d8be2670ce13bf391eedb80677d3f7ba1cd8c5c6c1acc41296572f32cc7b485 exim-mon-4.99.1-1.el9_2.tuxcare.els2.x86_64.rpm bd85da692cb3323581e60f2c59dd3255bb9e7cb1311fa2de43dcb357561dfb58 exim-mysql-4.99.1-1.el9_2.tuxcare.els2.x86_64.rpm 0c95fff0090af8421bc8b2c851ee2a8c8c9eee343f945f58440bdd9ac750247f exim-pgsql-4.99.1-1.el9_2.tuxcare.els2.x86_64.rpm dee6a56cbfac8ba23bfbf8da6ff14ab21e485d64004ebe3d959eb9bfe77ba819 CLSA-2026:1780592196 TuxCare License Agreement 0 - CVE-2026-37555: fix int overflow in ima_reader_init in src/ima_adpcm.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-37555: fix int overflow in ima_reader_init in src/ima_adpcm.c

0 tuxcare-almalinux9.2-esu libsndfile-1.0.31-7.el9_2.tuxcare.els3.i686.rpm 8fa30a91a5c30fcdecf8195abc64c81bedf2f5702005809586c7fbb46695d75a libsndfile-1.0.31-7.el9_2.tuxcare.els3.x86_64.rpm da05bf8527f45e0bbcd10bbbe6a78a45e707760541dfbd796f1a87d28097d9eb libsndfile-devel-1.0.31-7.el9_2.tuxcare.els3.i686.rpm 84c23cf022989f87217c06a5408207aeb29a4833ee427b7ebb7f2285b9805717 libsndfile-devel-1.0.31-7.el9_2.tuxcare.els3.x86_64.rpm db182d11538026b710fd9214ec3e3c0be07b9793dd61c96336b7927a1b7334c3 libsndfile-utils-1.0.31-7.el9_2.tuxcare.els3.x86_64.rpm 25e3db6b78127085a580e93861748553bddbaa949ea8fde4979a62c52d3e9b1d CLSA-2026:1780659609 TuxCare License Agreement 0 - CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling regular expressions with a repeated fixed string on 32-bit builds (mincount * l overflow) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling regular expressions with a repeated fixed string on 32-bit builds (mincount * l overflow)

0 tuxcare-almalinux9.2-esu perl-5.32.1-481.1.el9_2.tuxcare.els2.x86_64.rpm 53facb4211321b5dcaccdadd56a3443029b277d3a53386410ef82012218f96c7 perl-Attribute-Handlers-1.01-481.1.el9_2.tuxcare.els2.noarch.rpm 4811dce1dd56016d17fcf0dd9559ba6d220774f5bd7aae9cb9f65cec58fe7938 perl-AutoLoader-5.74-481.1.el9_2.tuxcare.els2.noarch.rpm 22d424f4cb5430ac91eccaa007154ffb33430baf810961ecb03481ddbe61d353 perl-AutoSplit-5.74-481.1.el9_2.tuxcare.els2.noarch.rpm 1a825ce6b8cbd9407b9e3db24f54bdc6b890efbc28fdc30f0dc79cadbe606a68 perl-B-1.80-481.1.el9_2.tuxcare.els2.x86_64.rpm 8ebaea4d248b4945d4103607e12ed0960749acb2706e019dfcf7646357626d28 perl-Benchmark-1.23-481.1.el9_2.tuxcare.els2.noarch.rpm b4598f7dad52b22ab70ac514a96026493a72530d29a60b727cb2e87149eeaa8c perl-Class-Struct-0.66-481.1.el9_2.tuxcare.els2.noarch.rpm 24e9f84bf3f2e51901c06afec2849582a375e41f4335775cbd789323be807089 perl-Config-Extensions-0.03-481.1.el9_2.tuxcare.els2.noarch.rpm 6dfc144d6d5eed4ad0db3162da34dfd820afa7603eac7d5ca036db27aa76faed perl-DBM_Filter-0.06-481.1.el9_2.tuxcare.els2.noarch.rpm ce1068c5f97691c10be8978104832fb52022f24ad43bc6d084902dc8c7c86fd4 perl-Devel-Peek-1.28-481.1.el9_2.tuxcare.els2.x86_64.rpm 314f85c0c457525fa423428435dd472ff28a1affc1761221a462f7d91dd1d67a perl-Devel-SelfStubber-1.06-481.1.el9_2.tuxcare.els2.noarch.rpm e6b8814b80123ad7308b2df8203891957e8e42154ee9269a891be7b049652227 perl-DirHandle-1.05-481.1.el9_2.tuxcare.els2.noarch.rpm b4357df4770ac9f4b1b17419db03d66d1084c6e4439b3eb59a7936c5b98438c6 perl-Dumpvalue-2.27-481.1.el9_2.tuxcare.els2.noarch.rpm c0df63ca377c1a3079c109832cbb3d6b43871b6d5519980ac4cf46d511d5fa40 perl-DynaLoader-1.47-481.1.el9_2.tuxcare.els2.x86_64.rpm 0c6bd64b4d6239dbd56f98e766fe7b91625e2686a298e6adda41a47deae7ee3c perl-English-1.11-481.1.el9_2.tuxcare.els2.noarch.rpm 560710633cfc28fa99398c53b7f9a267dde248dc1aebe80549b270f1cd9511df perl-Errno-1.30-481.1.el9_2.tuxcare.els2.x86_64.rpm 7f630e0739e98839ba91499876a9b8c456c0a657e23fb70ba65731ecce7c9802 perl-ExtUtils-Constant-0.25-481.1.el9_2.tuxcare.els2.noarch.rpm 51c3f0263019c9fb74fcb90d642e44988ef01f5ab2b524089ba8cc22b1a34d02 perl-ExtUtils-Embed-1.35-481.1.el9_2.tuxcare.els2.noarch.rpm 6eba9aa008f2d542274dd097f59afc615e69604b9c7c10e426ad2c281ec493f7 perl-ExtUtils-Miniperl-1.09-481.1.el9_2.tuxcare.els2.noarch.rpm d093d83563beb6c203c709347cac27e52dc6ffc6342a10d49bdd67239c44607f perl-Fcntl-1.13-481.1.el9_2.tuxcare.els2.x86_64.rpm 9741bdce8fdee9b817cf5b1da5a3c6250976b6f6000859f660b300a4dbbd45fd perl-File-Basename-2.85-481.1.el9_2.tuxcare.els2.noarch.rpm 5615b3bb11f164e683a7fc1c32ec8943e791c3bf8d01560ae9911b524e26eeab perl-File-Compare-1.100.600-481.1.el9_2.tuxcare.els2.noarch.rpm 45a8876d32ccf7e48892870ff274cf3eb80f215607840e3177efc1e55cd56921 perl-File-Copy-2.34-481.1.el9_2.tuxcare.els2.noarch.rpm 130d7675c63d802df8ca3fbbbd0efde1e1a815b3643a8ab407964a9c8a514694 perl-File-DosGlob-1.12-481.1.el9_2.tuxcare.els2.x86_64.rpm 1ddb191a5452f423dfe2f366967d46123d893187a17553a59cb3310c18940c21 perl-File-Find-1.37-481.1.el9_2.tuxcare.els2.noarch.rpm 237ac7d4d463de86ffb7cd60eb51eef4a518ed5f30a0ef4e1b9ef593e5e967e2 perl-File-stat-1.09-481.1.el9_2.tuxcare.els2.noarch.rpm a955f6482a695cf7a67e7d42a52e5947270579a68ce63159dd50b00ca409ce5b perl-FileCache-1.10-481.1.el9_2.tuxcare.els2.noarch.rpm bab9edb044e289a57048563e423c04406ddde3671f8fdec2e03b9b303cbfc59e perl-FileHandle-2.03-481.1.el9_2.tuxcare.els2.noarch.rpm 61b3ea56926b40bd9d0eefc83b3552b02f0beca416bfd0bd6bd4c305b681a30c perl-FindBin-1.51-481.1.el9_2.tuxcare.els2.noarch.rpm 22e36b04b8e64e964b41dbd0a50a60029cc66bd449afee06eb703b242afd4694 perl-GDBM_File-1.18-481.1.el9_2.tuxcare.els2.x86_64.rpm 77e7f76e247f29a0f538114be8eb8ef66ed5bae1a4a6d2ed7cfbe48cf03cd0e0 perl-Getopt-Std-1.12-481.1.el9_2.tuxcare.els2.noarch.rpm 7c8fec4fb5fb481b134516c660f288b6b5bac95c156d1ac9eb8858a21c227ad6 perl-Hash-Util-0.23-481.1.el9_2.tuxcare.els2.x86_64.rpm ad8006e159c175ecb637b79774a734410afd0e590d0ccaf7139e4a712cead888 perl-Hash-Util-FieldHash-1.20-481.1.el9_2.tuxcare.els2.x86_64.rpm e3b3dccf17b74b905d2ab49b48cd0b3c4d8d2305c29f6407b7abe983cd59180d perl-I18N-Collate-1.02-481.1.el9_2.tuxcare.els2.noarch.rpm e0fbdf6cd3765eb320f20cd98408a82dbf49b2fde12fe0692172459d380be6cb perl-I18N-LangTags-0.44-481.1.el9_2.tuxcare.els2.noarch.rpm c9df43dc557af2a6da2e5c892408371284d5c501ee75a9849335c90b37d1df3b perl-I18N-Langinfo-0.19-481.1.el9_2.tuxcare.els2.x86_64.rpm b9b2824cacc390f985e37de099a47b8d60ed7b116d703e2d6775d0a8887e347f perl-IO-1.43-481.1.el9_2.tuxcare.els2.x86_64.rpm 06775db0479cf9832b5d9bbb8d465350d9c0e17f1890136aeb5600966e169012 perl-IPC-Open3-1.21-481.1.el9_2.tuxcare.els2.noarch.rpm ce8aa0a073625b4c4aaf88ff902013d914cb4ba459a782e4352129650294040f perl-Locale-Maketext-Simple-0.21-481.1.el9_2.tuxcare.els2.noarch.rpm 38c6ac8365b196059e07a25407603dd3aea8469278fa81c408dad6a207fce85e perl-Math-Complex-1.59-481.1.el9_2.tuxcare.els2.noarch.rpm 45f98f6593ea9fc16e6a736b3c09b1c21d5127703043c7898c3b44cd6e9989f8 perl-Memoize-1.03-481.1.el9_2.tuxcare.els2.noarch.rpm b6843a4ef0b38ed97f312dbd84d352485cf7ff888fa6dda58d03ffbf8f0d8647 perl-Module-Loaded-0.08-481.1.el9_2.tuxcare.els2.noarch.rpm b0af4399c8d4639c51b8b4645b46749cdcf9e8851970f027d834a37c5e489cac perl-NDBM_File-1.15-481.1.el9_2.tuxcare.els2.x86_64.rpm 092bd8198fb461f3222c11e4387944bb02c5f34f938275cc49cea6abb13ec091 perl-NEXT-0.67-481.1.el9_2.tuxcare.els2.noarch.rpm cd6ce49f431ab2c283bcb40bd9751af82467b4f9922ca71ff3f370b6dd1c0b63 perl-Net-1.02-481.1.el9_2.tuxcare.els2.noarch.rpm f643eefbc5157eba5599c6e6518de8057da1c37052572326942e8f3747350423 perl-ODBM_File-1.16-481.1.el9_2.tuxcare.els2.x86_64.rpm 25af7557eb7e98a5a17521c52fdbbe1cd90a8bf56b798dba560004b8dbdf3159 perl-Opcode-1.48-481.1.el9_2.tuxcare.els2.x86_64.rpm ca5ca338adeffb52415e0f416e8aea3e40fe5aa728515cf24f321d0666c51b33 perl-POSIX-1.94-481.1.el9_2.tuxcare.els2.x86_64.rpm 38d809b708f8abd84006a20bbf8d4410a695810a1a08d2b9b4e53501ed052140 perl-Pod-Functions-1.13-481.1.el9_2.tuxcare.els2.noarch.rpm 4c1de1f49d430c2c4dd44114987de860219620fe022d59579568adc78c8017ad perl-Pod-Html-1.25-481.1.el9_2.tuxcare.els2.noarch.rpm e280b8634791560ce103e71567301ac871b4a4fcb43174cb010a15483c1f139c perl-Safe-2.41-481.1.el9_2.tuxcare.els2.noarch.rpm ba5d71c3b75f2ce7a9d6537e2ec9eaaaa332d168aaa87ed678a92ea434b0887c perl-Search-Dict-1.07-481.1.el9_2.tuxcare.els2.noarch.rpm fbf2da112214f32bfa1f3832ae0d289251c8dc962865819f6387d6825f908337 perl-SelectSaver-1.02-481.1.el9_2.tuxcare.els2.noarch.rpm 65fbe59a621e1f15914ce5d00882f23f9e8d3f1cbaba43d40fe6fa001152d13b perl-SelfLoader-1.26-481.1.el9_2.tuxcare.els2.noarch.rpm 9ef37f754b849b8ce993c143b3d48c30ca6b9fbd378c2f95e01696583f568d9a perl-Symbol-1.08-481.1.el9_2.tuxcare.els2.noarch.rpm bc938831889e93be6fe5c20054ee2cd2f7cc7dbc8c510a82652a4aae2a3ca5f0 perl-Sys-Hostname-1.23-481.1.el9_2.tuxcare.els2.x86_64.rpm d976d737716025d5d150ffea8fd1c7be4948b5be7ebe8aeb78e8e1c888e89df1 perl-Term-Complete-1.403-481.1.el9_2.tuxcare.els2.noarch.rpm 181a2349e2bef624738436d7429168540cb2ee8041da85107ba561b5dd9c5e3f perl-Term-ReadLine-1.17-481.1.el9_2.tuxcare.els2.noarch.rpm 5af70cb7ef9971ff0d207b5b7e592b51f38890ea298c1bd442320950cbe4cc49 perl-Test-1.31-481.1.el9_2.tuxcare.els2.noarch.rpm e342af9d287e1314423b5882e29375db94d0164375f6f01aae013c7a023bf02d perl-Text-Abbrev-1.02-481.1.el9_2.tuxcare.els2.noarch.rpm ce51cd908efb694ee33443d98fe2c9419569a04b178c424e968749865cdb3ae6 perl-Thread-3.05-481.1.el9_2.tuxcare.els2.noarch.rpm 9db5c761ae992a2a16ab4e1d674e818e464b3ebf2c1a96a51bd7bdd9b13d3b8a perl-Thread-Semaphore-2.13-481.1.el9_2.tuxcare.els2.noarch.rpm 7da745d048d15b67ae19ab83fadbabd85160af78e84171e80ae0843ce0ae6a8c perl-Tie-4.6-481.1.el9_2.tuxcare.els2.noarch.rpm e03355254cb570d2043928ec8369827c78a0eb86fcbe2eed6c8d5a3c1ac82f2c perl-Tie-File-1.06-481.1.el9_2.tuxcare.els2.noarch.rpm a41a156cc860d3f514c99aef540716f4d84227fe1a2fef727deda64e258a000b perl-Tie-Memoize-1.1-481.1.el9_2.tuxcare.els2.noarch.rpm db71bc4db4328966093bd0fa79b6e7750c96b12f38ef68e483e213f872d552a3 perl-Time-1.03-481.1.el9_2.tuxcare.els2.noarch.rpm 052c69f17222323d6b78eb127e1054ed19755f4b08af974838b5b4e2f2cd795d perl-Time-Piece-1.3401-481.1.el9_2.tuxcare.els2.x86_64.rpm 493ae3300521d3bcb8ab8b083bb765542b0351769ddb297948fe668b3a697982 perl-Unicode-UCD-0.75-481.1.el9_2.tuxcare.els2.noarch.rpm ada9e5cff0eeda0236350f71d4cd3733c89f005f68861bf1dcd397e0e5827d2f perl-User-pwent-1.03-481.1.el9_2.tuxcare.els2.noarch.rpm 939a28ef9356123fd0eb91f02bca154e806018a2e9fe5be56494123d7f985c77 perl-autouse-1.11-481.1.el9_2.tuxcare.els2.noarch.rpm ca8312758a3c081a819ed38c966c7f81399333dc75ed586c09c1a5d925b26c4f perl-base-2.27-481.1.el9_2.tuxcare.els2.noarch.rpm 49980ab7902aa203d85f65e389020a3eadd28ec88faac97b0c23416aa2616ea1 perl-blib-1.07-481.1.el9_2.tuxcare.els2.noarch.rpm 149a67f66bd5a83a8d1f16c53beeb84dad2bd9dd015f2b463f2c3d41f6cd7b55 perl-debugger-1.56-481.1.el9_2.tuxcare.els2.noarch.rpm 82258040df88051300657f03073d599dcfb9609233d366e7a52d24cdd10f1dd9 perl-deprecate-0.04-481.1.el9_2.tuxcare.els2.noarch.rpm 56c1df89c49de0c60cc1f7f84e07efaaa241158a2d44aafcc96acdb420f59609 perl-devel-5.32.1-481.1.el9_2.tuxcare.els2.i686.rpm 2208bdb87d44dea23db2baf89790f2421c4923dd3adef7cb9ab92cb4c513a58d perl-devel-5.32.1-481.1.el9_2.tuxcare.els2.x86_64.rpm caddcc23ebbbe9bdcc97b8d2fe832fbb22911ef7e92e081115c3237800a9931d perl-diagnostics-1.37-481.1.el9_2.tuxcare.els2.noarch.rpm d27e886691055e663fb76fc3925ee9a953d7ef2ca72a0a8d578e61ca0607104e perl-doc-5.32.1-481.1.el9_2.tuxcare.els2.noarch.rpm 7bf5b4cfa78f4f9fcfa549b590ee36fa5e3f73a130b7c3e0a51824e1072bde53 perl-encoding-warnings-0.13-481.1.el9_2.tuxcare.els2.noarch.rpm c90671b7f26c05b0154deaba25b3a1717a846d05583c38b20061c1f36b2fd872 perl-fields-2.27-481.1.el9_2.tuxcare.els2.noarch.rpm cfa688abc0d9e512e492ab1b2eddbc50e6d897168742cf4af83651dcb7b68112 perl-filetest-1.03-481.1.el9_2.tuxcare.els2.noarch.rpm 04eec77858cadd740a84373fe78b923aa06861a53f93ca234b7d8f14a414e9b9 perl-if-0.60.800-481.1.el9_2.tuxcare.els2.noarch.rpm 4c71acd88b18f3341cee9efd61093720bcf1350b959f027664e2e1bf7d518988 perl-interpreter-5.32.1-481.1.el9_2.tuxcare.els2.x86_64.rpm 83eddbc7f511ada955381e88ce24383c416ab5473e51535ed54801608d10e5ba perl-less-0.03-481.1.el9_2.tuxcare.els2.noarch.rpm ae79c5e0abeb39801b224ccb33e1f2e37056e746cb1521cd8db53e2da9640a99 perl-lib-0.65-481.1.el9_2.tuxcare.els2.x86_64.rpm 1b2d496ada082daa39fe90fa03f02d3a5bfcbcb21fc297f147913b02e0cca049 perl-libnetcfg-5.32.1-481.1.el9_2.tuxcare.els2.noarch.rpm 539bd5d237aa675dfd260d9f607fcb5fb9d540a624ce54d3f6681cb169b20211 perl-libs-5.32.1-481.1.el9_2.tuxcare.els2.i686.rpm 0482aaa2ace1eda19a844769de8e55fa0ad791ab94c570d25cd381e53473ca7a perl-libs-5.32.1-481.1.el9_2.tuxcare.els2.x86_64.rpm 09f98db978a9ff04880145e62a754ea634111f39cd84243ba6d6c5981d592346 perl-locale-1.09-481.1.el9_2.tuxcare.els2.noarch.rpm 40861ecb0a4267d628fb8331ef2ef1c85b7a50f0d952f8f6fd66f49367475992 perl-macros-5.32.1-481.1.el9_2.tuxcare.els2.noarch.rpm 7a2e47107991bba80fce86641872a5a4d6509cac0e53c0def2488f77f42dce39 perl-meta-notation-5.32.1-481.1.el9_2.tuxcare.els2.noarch.rpm 8f45c0a7ce697e79bd88ea88c8c43889ef9481bc2d19bac9d6d13a67990fc7e2 perl-mro-1.23-481.1.el9_2.tuxcare.els2.x86_64.rpm 08bf85272ede282d5ba6e7d3da8d429e068fd4c79d45f94b2bf95e4c22bce3b3 perl-open-1.12-481.1.el9_2.tuxcare.els2.noarch.rpm 5fc5285c93f0a2cc75de02dc93be5cf584382df7e6b1420dbb46f83fcd37ecfc perl-overload-1.31-481.1.el9_2.tuxcare.els2.noarch.rpm 48b040c0bef1328c7b899ec237d32123f4b3a541fc744f50ddde0af1bdb2e353 perl-overloading-0.02-481.1.el9_2.tuxcare.els2.noarch.rpm 169db62aa19618665292b19dc8e5d86e1fa3f9d3b03a16824876b0d7ed11ca86 perl-ph-5.32.1-481.1.el9_2.tuxcare.els2.x86_64.rpm b4d743306cf76e81d05984e318bcb2944885f65b5da87088c0f3e9afb9215804 perl-sigtrap-1.09-481.1.el9_2.tuxcare.els2.noarch.rpm 1d2c82758c5f71a9c147817d81c8604133f4e0b241cf6ba7cd1712b256d40809 perl-sort-2.04-481.1.el9_2.tuxcare.els2.noarch.rpm aa41932f2be4fdd0a21b4d34695709140c92e66c0430df78bdd36ad47d7b1c42 perl-subs-1.03-481.1.el9_2.tuxcare.els2.noarch.rpm bcd20dd665c323090a1f5376e99b0ec4f7333f7c3a7fc8b34a77a364fbd08296 perl-tests-5.32.1-481.1.el9_2.tuxcare.els2.x86_64.rpm f2cdb0bad78ab1a88d979c590d6a91c188d15b60e146e6ad05eaad312c4c85ab perl-utils-5.32.1-481.1.el9_2.tuxcare.els2.noarch.rpm 62ff4700b9f3851313c62de010dd8c658daf2ab07da5eed302a90e45885b7732 perl-vars-1.05-481.1.el9_2.tuxcare.els2.noarch.rpm b5c6fb9575b8a325c4bf71f821bfaea536f57c0b04d324adaebf91813a9fddbe perl-vmsish-1.04-481.1.el9_2.tuxcare.els2.noarch.rpm 5764a4107ee621c3f0b2c9ab320ebc269c2e80aa4deaf87eb448db5c702ef1f6 CLSA-2026:1780672432 TuxCare License Agreement 0 - CVE-2026-30883: fix heap buffer overflow in the PNG encoder when writing extremely large raw profiles - CVE-2026-28692: fix 32-bit integer arithmetic in the MAT decoder row-size computation causing a heap over-read - CVE-2026-31853: fix broken 32-bit overflow check in the SFW decoder buffer allocation - CVE-2026-28689: enforce path policy rights at file-open time and honor a new system 'follow' policy to prevent symlink TOCTOU policy bypass Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-30883: fix heap buffer overflow in the PNG encoder when writing extremely large raw profiles - CVE-2026-28692: fix 32-bit integer arithmetic in the MAT decoder row-size computation causing a heap over-read - CVE-2026-31853: fix broken 32-bit overflow check in the SFW decoder buffer allocation - CVE-2026-28689: enforce path policy rights at file-open time and honor a new system 'follow' policy to prevent symlink TOCTOU policy bypass

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els7.x86_64.rpm eee55b41a9072789f7c47ee36123ebec4731de65e5308532a545446e5feb3bc9 ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els7.x86_64.rpm 819be56d3bc22257274fadf93d3cee46c989d992117da4c2135961323049fc6d ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els7.x86_64.rpm b5c42f6d0647067e1be3350f9a7516b84b4b087591af1f8c1914eb7da662ba0c ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els7.x86_64.rpm 13c6ccb298305b6cd53a99a334dbe45dd4b576ed013acd8f378a8e482484f1d2 ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els7.x86_64.rpm ce5d90caa6cd9d3bb67981b205edf013d92ce2755a95f52f8520a35166c782a7 ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els7.x86_64.rpm 3cb976ca2db0106bd4d3cd33889192c9ad5a7e50bb8c43662a1b4c0210d70e00 ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els7.x86_64.rpm 44d42f8266fe220a0678db7b24c987ab3344444d52f850f399834aca0827e7a3 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els7.x86_64.rpm f1ae6fc6153a15dff027bace6b0e0377ae1ea8b031e5ad7a40336e4b7b802424 CLSA-2026:1780908222 TuxCare License Agreement 0 - CVE-2026-34078: backport the AlmaLinux/RHSA-2026:21755 fix series (29 commits + libglnx-chase update) to defeat sandbox-expose symlink races; preserves 1.12.7 baseline. Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34078: backport the AlmaLinux/RHSA-2026:21755 fix series (29 commits + libglnx-chase update) to defeat sandbox-expose symlink races; preserves 1.12.7 baseline.

0 tuxcare-almalinux9.2-esu flatpak-1.12.7-2.el9_2.tuxcare.els6.i686.rpm a59992331b777c6b0791a6cd2b0c71293fa192ebd442ab4698e5589976c37570 flatpak-1.12.7-2.el9_2.tuxcare.els6.x86_64.rpm 8643251fe26efb4c326b1e676b3e1a0689b1a6e752e9f98c95c6cebbfa4ea75d flatpak-devel-1.12.7-2.el9_2.tuxcare.els6.i686.rpm e8ea19877a09f554eb63e4b413c52e0cb147b6bd079cc2c6f9e1767b6b8effef flatpak-devel-1.12.7-2.el9_2.tuxcare.els6.x86_64.rpm ad3d2dd819b2f969c188580b4b20f917d0c64e8ea9fdb2584aa92c3b9fcdca5f flatpak-libs-1.12.7-2.el9_2.tuxcare.els6.i686.rpm 161cb830dddf3ab795041a32b4ba00cd6ad80325a38bcf01fff93a02d545511a flatpak-libs-1.12.7-2.el9_2.tuxcare.els6.x86_64.rpm a07551df6f242b70a04f82629b488cc50cca6a125dc13842ae857a14af28481a flatpak-selinux-1.12.7-2.el9_2.tuxcare.els6.noarch.rpm 078b1856517a9dff75078e52cfda076d86d04679b552839a4bd1f6f5e7b62287 flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els6.i686.rpm a70e1b686af9903ff8ca17de61ae75e4baf4f8f52fbca16f9f8343bf33131a39 flatpak-session-helper-1.12.7-2.el9_2.tuxcare.els6.x86_64.rpm 0ce6c80757f0dac43215a08575e3992497c2f615a9a9560155e46dd7bc743d00 flatpak-tests-1.12.7-2.el9_2.tuxcare.els6.x86_64.rpm 8bda50da6d4d2bd7ec3fd7438943275be8aa7c4acfb94ccf4f83c062c6a50240 CLSA-2026:1780736179 TuxCare License Agreement 0 - CVE-2026-7210: seed Expat with 16 bytes of hash salt via XML_SetHashSalt16Bytes when the linked libexpat exposes it, fixing the hash-flooding entropy gap in pyexpat and xml.etree.ElementTree - require expat >= 2.5.0-1.el9_2.tuxcare.els12 (CVE-2026-41080, XML_SetHashSalt16Bytes) so the runtime mitigation is guaranteed in effect Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7210: seed Expat with 16 bytes of hash salt via XML_SetHashSalt16Bytes when the linked libexpat exposes it, fixing the hash-flooding entropy gap in pyexpat and xml.etree.ElementTree - require expat >= 2.5.0-1.el9_2.tuxcare.els12 (CVE-2026-41080, XML_SetHashSalt16Bytes) so the runtime mitigation is guaranteed in effect

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els27.noarch.rpm 5da012dd92ab4401d10fb96d11fdb08137fcc27e7f6b71137eabf6608c9ce787 python3-3.9.16-1.el9_2.2.tuxcare.els27.i686.rpm 64bf2588428df5125a32c26ca786db4dd5a8698fe02dc8a23932a197295457bd python3-3.9.16-1.el9_2.2.tuxcare.els27.x86_64.rpm 5e7920a9c709356950880d1ab1ba07bc395f8728ae064dac839409ceb6c512bc python3-debug-3.9.16-1.el9_2.2.tuxcare.els27.i686.rpm c9e55af59d0fe7cbcc685a21600b617c9ad609f97075799de30357c5d72b2f66 python3-debug-3.9.16-1.el9_2.2.tuxcare.els27.x86_64.rpm 28fffca2f376432957a59b39bf38e12620e1cb0a313c011ba4cefe0e94dd1415 python3-devel-3.9.16-1.el9_2.2.tuxcare.els27.i686.rpm 531990acec08654fafefe9bf27669686de2c129b9d55839a133015cf4652ca13 python3-devel-3.9.16-1.el9_2.2.tuxcare.els27.x86_64.rpm 4915ad3a084398b3847c01b61c05a26a074f69e236575627a10872c0393a745e python3-idle-3.9.16-1.el9_2.2.tuxcare.els27.i686.rpm 98bb31f993d58e706b183fc44b787062c6a30345c7a35dfdf1ad59589a214094 python3-idle-3.9.16-1.el9_2.2.tuxcare.els27.x86_64.rpm 50372d46dc389c503306dc5070d2ba902cfdaf108ffe360d46d64d388ba67c5a python3-libs-3.9.16-1.el9_2.2.tuxcare.els27.i686.rpm f07c77758f3b8394ab8b07333fb6aebfd54bee7efe4a071f1978313c7e6574b0 python3-libs-3.9.16-1.el9_2.2.tuxcare.els27.x86_64.rpm d80bc95de4dc5d6b39c25df246114f8c579804ab670fe731e54babed5890a541 python3-test-3.9.16-1.el9_2.2.tuxcare.els27.i686.rpm 2796c08f68063623f55170657cb7cd3205cb7d8a85f7383ccb8dbb9ec7414970 python3-test-3.9.16-1.el9_2.2.tuxcare.els27.x86_64.rpm b2c23fd8098cc5c998685b53eb8bd3acd3c4a9dc6fc57272a1c99eed396f372b python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els27.i686.rpm 5775e7bf40816762ba3127c0e25593de76b8e20e7909cdf256c0a33ab73feeda python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els27.x86_64.rpm b324aa0c44c0c0f27c13f0e6ed37e60d5f8e76f1b49cf0ce708af6fa15163a4c CLSA-2026:1780910915 TuxCare License Agreement 0 - CVE-2026-40020: imap-acl: reject CR/LF/control-char and non-UTF-8 injection in SETACL identifier - CVE-2026-42006: lib-imap: fix list_count_limit to actually bound '(' (incomplete fix for CVE-2026-27857) - CVE-2026-40016: lib-sieve: enforce sieve_max_cpu_time inside :contains/:matches matcher loops Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40020: imap-acl: reject CR/LF/control-char and non-UTF-8 injection in SETACL identifier - CVE-2026-42006: lib-imap: fix list_count_limit to actually bound '(' (incomplete fix for CVE-2026-27857) - CVE-2026-40016: lib-sieve: enforce sieve_max_cpu_time inside :contains/:matches matcher loops

0 tuxcare-almalinux9.2-esu dovecot-2.3.16-8.el9_2.tuxcare.els6.i686.rpm 48ed86fac83bb8b6e704bfce03ea3bf7ae9f21e534025adb630b0f3f14b13148 dovecot-2.3.16-8.el9_2.tuxcare.els6.x86_64.rpm a358614caafb88ab6b8af75b7251090ff06c43493ea6cc9e73e4f16b1d7570f2 dovecot-devel-2.3.16-8.el9_2.tuxcare.els6.i686.rpm f076ea03a5d295081b33addb0babc41579fd23c8986db214cdf08e08c7eb6b63 dovecot-devel-2.3.16-8.el9_2.tuxcare.els6.x86_64.rpm 6a70414f55b1718f83d7eb7c41ba40f8199d79579b76196c710af805b5752b85 dovecot-mysql-2.3.16-8.el9_2.tuxcare.els6.x86_64.rpm 90bcd4f755f79df817bc55c8f2a7326b634a8e6398f0336d0bcf997f9bfbd255 dovecot-pgsql-2.3.16-8.el9_2.tuxcare.els6.x86_64.rpm 3ecfbc33b9b5aa8a4470c38c185c0a9214b3e98fc334cfcebb894f87a122cd07 dovecot-pigeonhole-2.3.16-8.el9_2.tuxcare.els6.x86_64.rpm 7e1d927d1c6794c4343d12b9f98303c9fabd62cce3afa3d1d1020209d6a792ae CLSA-2026:1780920842 TuxCare License Agreement 0 - CVE-2026-6843: harden statusline() callers against format-string flaw Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6843: harden statusline() callers against format-string flaw

0 tuxcare-almalinux9.2-esu nano-5.6.1-5.el9_2.tuxcare.els2.x86_64.rpm dd433ed4254b4be1856eac2668b7319237c2b5bd0703d78db68cf571d20eb75b CLSA-2026:1780707176 TuxCare License Agreement 0 - CVE-2026-41080: extract 16 bytes of entropy for the hash salt to prevent hash flooding Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41080: extract 16 bytes of entropy for the hash salt to prevent hash flooding

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9_2.tuxcare.els12.i686.rpm eb6f0d80606204c65553002c3a047589a9c3c8fc68be278b7a8df2860c091b75 expat-2.5.0-1.el9_2.tuxcare.els12.x86_64.rpm f053294a611a69312fffddc5622b413091aeac18886964da4fa47a50d5e11300 expat-devel-2.5.0-1.el9_2.tuxcare.els12.i686.rpm b5ddfaf339353ade6a096e859d0ccbace7e8b11f0956521a39a22b646a5e0f50 expat-devel-2.5.0-1.el9_2.tuxcare.els12.x86_64.rpm df48382018fe9cd6a08ff603b347b7bd05919159dbaeeb54f0b3c69e69de1d3a expat-static-2.5.0-1.el9_2.tuxcare.els12.x86_64.rpm edac66328d4aaa6a4b5925c7b7beb0b10967d701849745e6ed5a714ad2ea550a CLSA-2026:1780945931 TuxCare License Agreement 0 - CVE-2026-43617: fix hostname ACL bypass when using daemon chroot by performing the reverse-DNS lookup before entering the chroot so client_name() caches a usable hostname and "hosts deny" rules match Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43617: fix hostname ACL bypass when using daemon chroot by performing the reverse-DNS lookup before entering the chroot so client_name() caches a usable hostname and "hosts deny" rules match

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9_2.tuxcare.els10.x86_64.rpm aca18f913dd8e55d339e141e30283a7ee3ddaa40898c04b6f5f3586a1effe7f9 rsync-daemon-3.2.3-19.el9_2.tuxcare.els10.noarch.rpm d101e90cd99bea65813a55a7ae3b3d224b72054749a6e54ba38e6a32f0e12af6 CLSA-2026:1780946485 TuxCare License Agreement 0 - CVE-2026-42499: replace the quadratic string concatenation in net/mail consumePhrase with a strings.Builder so phrases containing many adjacent RFC 2047 encoded-words are coalesced in linear time, preventing a denial of service from pathological RFC 5322 address inputs - CVE-2026-42501: reject a checksum database (sumdb) /lookup/ response that lacks a hash for the requested module in cmd/go checkSumDB instead of silently treating it as verified, preventing a malicious module proxy from bypassing checksum database validation and serving a corrupted module Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42499: replace the quadratic string concatenation in net/mail consumePhrase with a strings.Builder so phrases containing many adjacent RFC 2047 encoded-words are coalesced in linear time, preventing a denial of service from pathological RFC 5322 address inputs - CVE-2026-42501: reject a checksum database (sumdb) /lookup/ response that lacks a hash for the requested module in cmd/go checkSumDB instead of silently treating it as verified, preventing a malicious module proxy from bypassing checksum database validation and serving a corrupted module

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els13.x86_64.rpm fd930bb8ed5b76fca1720cac886c07b9ccfaeb42859bb2b86d7a5ef16b66958f golang-1.22.9-1.el9_2.tuxcare.els13.x86_64.rpm beb866ce943518cdafff58b14b7efd1f22d2ebf9deb19a1e7c6af39c89c9ff69 golang-bin-1.22.9-1.el9_2.tuxcare.els13.x86_64.rpm 45562a02de0056bd1300303e0fc450aa57798e19e8ead9f37361ef5d56eebc65 golang-docs-1.22.9-1.el9_2.tuxcare.els13.noarch.rpm 32f3f29a63340cc3692041c886091ede55771e3d00dd064f81a3a78352ff9cca golang-misc-1.22.9-1.el9_2.tuxcare.els13.noarch.rpm 839dae456a70a722830355dc7f5332cc31ae79c17388ed171581ddab350b6fb3 golang-src-1.22.9-1.el9_2.tuxcare.els13.noarch.rpm 7c971a8042240bcf4576e5a695a786e5cfa6a31774c95c7cc874c7f6f2ac8e9e golang-tests-1.22.9-1.el9_2.tuxcare.els13.noarch.rpm 5859d0b6c0cbdb9afa5fcc02261e4b21e968310432bb90ba3c59687b207aef6a CLSA-2026:1780711381 TuxCare License Agreement 0 - CVE-2026-40510: stack buffer overflow in piv_process_history() via crafted PIV Key History Object - CVE-2026-40528: stack/heap buffer overrun in do_key_value() via overlong pkcs15init profile key value Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40510: stack buffer overflow in piv_process_history() via crafted PIV Key History Object - CVE-2026-40528: stack/heap buffer overrun in do_key_value() via overlong pkcs15init profile key value

0 tuxcare-almalinux9.2-esu opensc-0.22.0-2.el9_2.tuxcare.els8.i686.rpm 668751a4e85073cbe98f0dfe99d076bcdcfbcb6205de88065eda60f266cacd9e opensc-0.22.0-2.el9_2.tuxcare.els8.x86_64.rpm e0b86e6a76cd4acd5f79d08ca4e1719da9812c9d44e9675af90a9603e01131fa CLSA-2026:1780947657 TuxCare License Agreement 0 - CVE-2026-4480: mask and single-quote jobname passed as %J to 'print command' to prevent remote command injection via the generic print pipeline Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4480: mask and single-quote jobname passed as %J to 'print command' to prevent remote command injection via the generic print pipeline

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm a32811fbb06a67c8931c74475b6e71642cda16e281f90717896c686b0c13afbd libnetapi-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm eaf55b4739510afde4c73b70eb6b206b190e9d1196445a06ef590714144dc901 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 85d4cd436bbcb66e0d442652137889e3c094cec27711cb3fa26a03d96f1255cd libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 0eae62c3def21e99e33e5a138f4b633f23c6e66fbc7d1344ef8d5738baf72f77 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 3ec0b42e9dd0d8c5c4dff9c56d9d7956097dcb1365af1799b50a1301741bcef3 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm baa2ecad09cf54a5540cb57be408818ab3a524243ab126112ad1f36eb685db16 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm c9bd5c095227d6e0a3e5d0a2abe38d26019ced2ed9fc3216f92d4e8051656cb1 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 2a2d571f2decd8ef1e2e51b8f63f2db63c58e81bd398e2c240f15b10551f9c5b libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm c724d36ee578b3eb8f3f9333533e1ac3f1382e5863f0e64c92ac2217b5963e16 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 715641c2efb08d44e6751a8dfff4a5c088c471428ab5d152f12c915b01807aa0 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 4db05f9f53584c934b0ceae0f6f33e4f5766d5d1bdf0be9d65b52e76e7116278 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 794ead1871db61a159c36b503fefc5f52005fe93ab0d34e4ea64d1778cd17cbc libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 62be01523ec4f52898be586bfe9c1befaf4e1660a80666f7f70e8e116b41363a python3-samba-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm a67eea2c88dc6bfb03fd68602f3120416e1e2520634a6d116eb8b7b31dc06dfa python3-samba-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 05c694f5e6b1d106b3845b8dc8604157605627c8b66056f6aa0e8dca6e2e6b98 python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm bacd9320899f690f33a1a5325b0ee56f303fe34a042bc96f4e844593c6a93092 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 674ff893503894e5bad642b4b1d2ce763197b0424a27984f3de15dd1167ea62d python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 7a9ab0d7b73a2c2253ba08ca0db1cd429404509eb933c1274c7357480932d6e7 python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm b27bb15f9f1c71f753c0d162407e923d698fdd08d45a0a7159ba2d26929f86e3 samba-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm e3f9ab395ff4882cc29e94e4b02159cc04fbe980b1dab8a3ef189c1f48468cbf samba-client-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm cef582e61eb828cfaebeaa2d9b73524afa63ecbe683ea49365ff9b8405937e97 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 0eb72a3922a8247ab4172b476e2e36ed0e0dc95ab542bcfe0c6b11d33475f135 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 0714918309fb6e180c2bbf21dfec32889fbcbaa815b7c7d39ac9f6bb09691d82 samba-common-4.17.5-103.el9_2.alma.tuxcare.els8.noarch.rpm 54029fb7771d1f48303184873277d3eca41d115618423bfbdb8696af91b9c519 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 0ef9d847e17b40ac2ccc32a1e5a35c48336bcc0e56a2e98960fad06c67135274 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm bae9bd5b1fe44356e5dcf97838b652b7b3e5cd91f98078b4a6e84069e51bae7f samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm ed39a0310636935ded03d9be5fba6c1fa1cdce20e0c4ff11c12fe190ee350e3f samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 44a56905bf78033a683f55f66a69deb6f8270fc2dbbc5161d4cc34152ae081b1 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm e8da3f6c0913f7d17acc09569b35252c908aca846913bdb5198dc3ebf15a2afb samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm cb6c3701c703341f6bb2f1cb0e67625622648636b1ba4a9c31a71febac3d08ce samba-devel-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm e2688f91d13a9569388f2699a0a872aa1022318ae6da9207e3e5f635027223a5 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm b09f4b731873e2995d32ff327a1a4417f2d547b7b70d6ff6b276b20b4ac964ff samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm a98f5319c116b7f3697bffeec794ef14e83b6d39a0ab10e2112098fde63c26d0 samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm e187929119caf7b56a2ea357cef50dbeba5d54e186e5307bafb2e44a76ffb227 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm 4ee7a35e95a2a955d46ab7135dc991dc1d87e03bc94a2300ff991a4ce57c7555 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm d5b8fec8182e8c61da8d96952d572b206f431ff55588f365941d50184c2f30c9 samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els8.noarch.rpm 03f0a83be19c51835282ca9acb78b81fb358ff9370c55191dbdbda2e824920f7 samba-test-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm a3d8c22b004938a19a65a1e90e70e08ae21c97cca90e2996b3fa3ee3bb178649 samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 53ee66d94ee45ba42771585de9e6775775d4005791f2a5dc269bff72d6728113 samba-tools-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 25b9a531d09f8f1c5d0759511834d77ca0f03207b43b35aab2bdf891d34a0e69 samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm be70f7aa99318ea07108bae01e4f1b0aa681a6cae408ac2a403eeb00b5f3623d samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 25c5dd029b4d94d9cda3b4e4724aafe478668902cd0740d4dd41057904473863 samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 4599b2600811ec77814db9c288e3c8adbf88905c08e26e46d060821cfa456892 samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 701f1dc97a7a78aef5483c51b363fa909b7884f44abc46db7fa0a955a46cfb9e samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 5d80e337e15316d53bbd2a85c836e7fe1a6566b9e33a5d3b47ccf49f76ff70bd samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els8.i686.rpm c08a10996e5ab66f6aec49bf82826afe077d463a1fb10a779a0876779b759b33 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 191b54985d30e2a3d923732cb341d7439ad878d92c216ca388a8bc86256c2a0e samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els8.x86_64.rpm 5998615260a24a948321730e04517e32c5703da065195d4c843888fe68d0f6aa CLSA-2026:1780713496 TuxCare License Agreement 0 - CVE-2026-41411: prevent OS command injection in tag-file backtick expansion Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41411: prevent OS command injection in tag-file backtick expansion

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els33.x86_64.rpm 0e3332c6a635bad4196771390aec2146aa7e3d4e185cd07682771a1c2ffb7a4d vim-common-8.2.2637-22.el9_2.1.tuxcare.els33.x86_64.rpm 67ad80a77564c202b5a84914598e1f9c25e603de81948f6ad476983415b29f57 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els33.x86_64.rpm f4811f9b63c5fe4a8f075bf3bd362f1d3748dc65d78f717d33ca957b52bb43b4 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els33.noarch.rpm 92bfce3b7e670357c7cad5789b6f469612323f49f1ea2723e41fc3041298816a vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els33.x86_64.rpm 5535bee57eda3534b0fc50fb52de9bf47d0f00284504bd9c53371f227fa874e1 CLSA-2026:1780949133 TuxCare License Agreement 0 - CVE-2026-42534: fix jostle logic bypass that degrades resolution performance by tracking the first reply time per mesh state [ELSCVE-128376] Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42534: fix jostle logic bypass that degrades resolution performance by tracking the first reply time per mesh state [ELSCVE-128376]

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9_2.tuxcare.els9.x86_64.rpm a038eca38770cd5d7a38c597eacd808a8e5e3dc468f7c3e21796703eface28f7 unbound-1.16.2-3.el9_2.tuxcare.els9.x86_64.rpm f921dd7a5efc9e640a7c8d2d1c5c695a67f3b209845c8edf39b186de7d7ec13d unbound-devel-1.16.2-3.el9_2.tuxcare.els9.i686.rpm 2f2d98483399427f5939263fa524452a5155955e7aa1bfb9c8be5a1caea0ce0c unbound-devel-1.16.2-3.el9_2.tuxcare.els9.x86_64.rpm fc5eeea3c8e527de083677eccdef28400dcf6c099caa7461f6158007bd45400f unbound-libs-1.16.2-3.el9_2.tuxcare.els9.i686.rpm 5297dc4c4f672bb665e4e857c938b97fcf1035f70d70ec0de4dd568163a3edfb unbound-libs-1.16.2-3.el9_2.tuxcare.els9.x86_64.rpm 4db06ee82509deb15a497a48d81851d40e5759d85a33298da256e3c6de69322b CLSA-2026:1780944576 TuxCare License Agreement 0 - CVE-2023-32573: Fixed undefined behavior from using uninitialized variable in QSvgFont Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-32573: Fixed undefined behavior from using uninitialized variable in QSvgFont

0 tuxcare-almalinux9.2-esu qt5-qtsvg-5.15.3-1.el9_2.tuxcare.els1.i686.rpm f7baa8f8c0bda62b0b9c251482ef4ea73594d76421344fbe0afe10ba26f786a8 qt5-qtsvg-5.15.3-1.el9_2.tuxcare.els1.x86_64.rpm aa33a503272a243d73e6ebf6bfb153918314c365ee80effda787bb87d9b7a54b qt5-qtsvg-devel-5.15.3-1.el9_2.tuxcare.els1.i686.rpm 67215c58ba9a8eb96bb82a0c3d35abc2217c86be796304211c4947aa6c0eba5c qt5-qtsvg-devel-5.15.3-1.el9_2.tuxcare.els1.x86_64.rpm f94b356c95da9e22a8613265cc4d709a6e6ffce2dc1567b987ec691901cff96b qt5-qtsvg-examples-5.15.3-1.el9_2.tuxcare.els1.x86_64.rpm 76df1ed94c1da7af14399e1f9b31a39ce27fefa5d112cfd06ee63a21e02cd4b9 qt5-qtsvg-tests-5.15.3-1.el9_2.tuxcare.els1.x86_64.rpm c4ed04eac998c6433cb604e0a7587cbfacc96f24c9b95551ae46dc8063655761 CLSA-2026:1780972752 TuxCare License Agreement 0 - CVE-2026-7210: seed pyexpat/_elementtree with 16-byte XML hash salt via XML_SetHashSalt16Bytes; detect the symbol at runtime through a weak declaration so the fix engages against system libexpat 2.5.0 with the CVE-2026-41080 backport; add hard Requires on expat >= 2.5.0-1.el9_2.tuxcare.els12 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7210: seed pyexpat/_elementtree with 16-byte XML hash salt via XML_SetHashSalt16Bytes; detect the symbol at runtime through a weak declaration so the fix engages against system libexpat 2.5.0 with the CVE-2026-41080 backport; add hard Requires on expat >= 2.5.0-1.el9_2.tuxcare.els12

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els27.i686.rpm 70f327f602a835a750ca1d6be491330b88a43e2335b6065aeeb2554b1f44a64b python3.11-3.11.2-2.el9_2.2.tuxcare.els27.x86_64.rpm 961b53ddff68597efea9aab03bd61d0235ab4cc419aefb6250454887f530c0bf python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els27.i686.rpm 941098d55b8e7f16e2021d44eedb5ef9416db19307e662547d1802ffc54224f5 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els27.x86_64.rpm e20ad80852613796892215339a76fab68d176b97c0a3bc5e1ab928d242b5082f python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els27.i686.rpm 62b4626b357ce3181e833e583760022a9872b5e9c0bfab2354e2faabc356586a python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els27.x86_64.rpm b7c97e79bc4d762be9bd44a536e80b7ea14b247e8b44a6078afc1d8104e1cfe5 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els27.i686.rpm 063141e95034228f4af01465ee722ef9c7bc737b5c4b13a07043e3030330d7ff python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els27.x86_64.rpm 129ccc956206788199dde1e6609ecbebef55c61f0dabd46fefd2c107e4c5e642 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els27.i686.rpm 177a454e7d0c910d6807969c73d720dfb75ca5f4847d7893a404d7aafbde97fd python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els27.x86_64.rpm 48ede63dd66effbe5157e1997b1e053a3bc779ad82cb8ff81eea561b09a0d836 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els27.i686.rpm 1b64c64dc353fe4fede703387d637ddce711e9e73d30cbd135f39b79f85757a6 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els27.x86_64.rpm c8e11108ceb9865b1bed510d5e4fe3aa7c5a3eabd69722a0d290f9564cef7b74 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els27.i686.rpm e8f85e67a7b7383f6ca8cb22e525fe31dc7cce1a6f4ee8027070b50b262c182a python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els27.x86_64.rpm 6a05f9a43a0a329bc678547b779a946dd85b806cac1b59ba8dd3fb3f897c2aba CLSA-2026:1780993851 TuxCare License Agreement 0 - CVE-2026-32286: pgproto3 v2 DataRow.Decode panic on negative msgSize - CVE-2026-34986: go-jose v2 KeyUnwrap panic on too-short encrypted_key Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32286: pgproto3 v2 DataRow.Decode panic on negative msgSize - CVE-2026-34986: go-jose v2 KeyUnwrap panic on too-short encrypted_key

0 tuxcare-almalinux9.2-esu osbuild-composer-76-2.el9_2.2.alma.tuxcare.els3.x86_64.rpm f5350346111c01e236cdf7a0f7543f1e393f66a7cad2ba9b7d5ab4da97a0a280 osbuild-composer-core-76-2.el9_2.2.alma.tuxcare.els3.x86_64.rpm 028a21e29c6f729bada1f75e47509b87cd4438a971eea8d237cf78a0521c59f7 osbuild-composer-dnf-json-76-2.el9_2.2.alma.tuxcare.els3.x86_64.rpm 8cde08763daa2571fa66d033d0b9711ba33b0af088ed7dd836cf82c0776fea93 osbuild-composer-tests-76-2.el9_2.2.alma.tuxcare.els3.x86_64.rpm a253d05d63fb461088ba6b13e09e7fcd044c3cd58e2454fefea762c42df0474d osbuild-composer-worker-76-2.el9_2.2.alma.tuxcare.els3.x86_64.rpm 5be17291e6e6837df2465559a8fef69b948d078d81d534dfd5a51779a9c4338a CLSA-2026:1780952647 TuxCare License Agreement 0 - CVE-2026-6746: HTMLSlotElement - fix manual slot reassignment across different shadow roots (Bug 2014596) - CVE-2026-6749: ImageEncoder use mapped stride and surface size to avoid OOB read (Bug 2022610) - CVE-2026-6752: libwebrtc - truncate RTP CSRC list to RFC 3550 spec maximum (15) - CVE-2026-6785: prevent use-after-free in nsUnknownDecoder::CheckListenerChain (Bug 2036929) - CVE-2026-8388: SpiderMonkey JIT - widen RecoverOffset to uint64_t to prevent overflow in Ion snapshot encoding (Bug 2036978) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6746: HTMLSlotElement - fix manual slot reassignment across different shadow roots (Bug 2014596) - CVE-2026-6749: ImageEncoder use mapped stride and surface size to avoid OOB read (Bug 2022610) - CVE-2026-6752: libwebrtc - truncate RTP CSRC list to RFC 3550 spec maximum (15) - CVE-2026-6785: prevent use-after-free in nsUnknownDecoder::CheckListenerChain (Bug 2036929) - CVE-2026-8388: SpiderMonkey JIT - widen RecoverOffset to uint64_t to prevent overflow in Ion snapshot encoding (Bug 2036978)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els9.x86_64.rpm dc7390480a957ce17ce1c6532300001fca075429d50ceafc38a938ced0356378 CLSA-2026:1780995582 TuxCare License Agreement 0 - CVE-2026-5450: fix off-by-one heap overflow in scanf %mc/%ms allocation - CVE-2026-5928: fix buffer under-read in _IO_wdefault_pbackfail (ungetwc) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5450: fix off-by-one heap overflow in scanf %mc/%ms allocation - CVE-2026-5928: fix buffer under-read in _IO_wdefault_pbackfail (ungetwc)

0 tuxcare-almalinux9.2-esu compat-libpthread-nonshared-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 81037e02b6740e4366cbcd258908a5a08df5dec6b18cee5cc90e0e014af47681 glibc-2.34-61.el9_2.1.tuxcare.els4.i686.rpm ea9ff0511ba3048e3fd8cf8aee977357c93f260ca53223ab7069cf7ef2ab57c5 glibc-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 057f8a38c5ca9d41ad43859b9d700b7a44fc8a7d51852709e0773c38b8d6e72b glibc-all-langpacks-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 67781d81444c9f5e8cf0245c544e1a12fdf1b1d3a3e014fda64b367e814817ac glibc-benchtests-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm c9b3e6ab92166e514541700ee03719e5258c24417bd7d32ee341e78e53a389e4 glibc-common-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d9f7811dfb1d95634714b7af1a51d7c54af8ae838a6e9b2e892498a526601200 glibc-devel-2.34-61.el9_2.1.tuxcare.els4.i686.rpm c86b564b91f12cd99dd2304ab40deac46f10ea2fc85f96bc54d5375a08819911 glibc-devel-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm a9df2e234c1675dc2434a7901e93aec37910789a5ad67ec7a06bfcc3be5785f9 glibc-doc-2.34-61.el9_2.1.tuxcare.els4.noarch.rpm 5f52b08de84043e50f2504c77bba7b5b568b9d22911c435bd9eb3cb282b20273 glibc-gconv-extra-2.34-61.el9_2.1.tuxcare.els4.i686.rpm 69c1778934484086675b6a20c1f48e2420de77d7aad4a70472e1aee8d5632571 glibc-gconv-extra-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 59b891399ff686ee708c57a33f1e51ef7fae3fc12920fc8839dbadb86b002541 glibc-headers-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm fc14461d4bdc568d111ec2d97a4f499fa61f881af8c04c5675885f11b83b1825 glibc-langpack-aa-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 258525f9ad29f818537b5ba31ba08238acde2641c9b8ae35be8fdbf133d004d4 glibc-langpack-af-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 20f55506f24eaf40db0d485f6543a9b90702abfd2093ceba050c203510e821d1 glibc-langpack-agr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 0570db0309bd4cf818499d04207905c33a56457348edb0df16a52178238540c1 glibc-langpack-ak-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 58b3974d56a2fcdbb58d4940a2dc603ef79e921881071f1842e67ba907606f24 glibc-langpack-am-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm cf2afa941f6b04d29b9a30b4e7983e2d007c75250664cb5fecd432115a90d947 glibc-langpack-an-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 495cd6b62d3ef830fb0e811bb53098eac74d1ae3fb0b736be0315b311fda16c0 glibc-langpack-anp-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 14c17e9833bd8618e2118eb3623bd9fc061eacc3cc10cdae23e5025bd9c2bde9 glibc-langpack-ar-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 1065f48e888d03cdc4f2aa614af972086b31ba677cc86212fa44bd04230d7682 glibc-langpack-as-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 3d4357b85153238233339697cf23bef8f20cb58863c712a8ac58932370da7215 glibc-langpack-ast-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 7eee71f14ebeeb7653d4a510c7c0cc5cbbee81caea63285336c717c23f1eaf3f glibc-langpack-ayc-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d2a61fb3c008a57ac88e3599d23ffbc05038828fc5b893a93ce5fd7820d1997c glibc-langpack-az-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm a12f15038a00618300f52d30d28aa3f7430e5a2bdacd6920d614055f61b915ae glibc-langpack-be-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 8b4e9d4d8f19667e748e0c5cca06b3b6fc94e2c33ceaff037bb7c16b202b536a glibc-langpack-bem-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm fb4dfd8cad7d8a407b4d7e98fe172868b13d251c6d32e0ff1948bbe27b77dc2e glibc-langpack-ber-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 1f8e73799ecf2ea071cf68f6be0bf7a8b6ac82f1136e7e806c3c109df0ca3fc9 glibc-langpack-bg-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 40573b2e7097240a501cd53c07d9573c3f0f78920488f8240901d8e5c003f44a glibc-langpack-bhb-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 58603edc0519847725ed5495f22ff4985554bf0a001fd8b4626c4449cd3ee6ac glibc-langpack-bho-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e73829307b536189f5a1cefee8a796918137434234bffdc78fbf919abac6d2aa glibc-langpack-bi-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 48f352092376a9e60c9800f5480ecf70aa2cfa74eb89cbe62854ca4ed5d270b4 glibc-langpack-bn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 3ca3f37a59c87203304a46e3b813a5b4670d9f1008917bef2f6c79fb052dd722 glibc-langpack-bo-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 516a2c794367af32eef140c68e764aeb6f0b3bf5f8a6329077ac51eaf9a6555a glibc-langpack-br-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 138f4bb63302a36ae68cf33958aa75264715acf3e4f4638a1dbca0147055744a glibc-langpack-brx-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d9bf23496589056c091de5d923b53b044a667249e108de9d8bb47f8c9de4bf3a glibc-langpack-bs-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 8d9c970a59d3ad3996b280622c9b8f99b9c968157b80efe92d2835aaafe86167 glibc-langpack-byn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm aa68ccd28617fcbd090c2244a7490656fbb96ce518687a0dba48e383e790e8c4 glibc-langpack-ca-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 98b5671f14464054aed4af883a5294f153a7284543c4bc1ec52c1bc3af0f6165 glibc-langpack-ce-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 63d9af66a7a943de1fdf2e46fc95709a278dcfe345394e7955d1737586289a5d glibc-langpack-chr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d6cc2cb0ef06c8d0fd600b833b11f522607ff9f29979471951024e6362b104a3 glibc-langpack-ckb-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 77b951a3481a6d61d68aa52cadd374674aeac3185ba01fa75b9d0901f39dcda5 glibc-langpack-cmn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm b34df9313e701dc432ba4d1991ac9cca50b5087b394acd30d6273396f1ac3c58 glibc-langpack-crh-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 9ba1fd473e2680efb7a3143c110c156a5f3d234069b34103be463139f8e5750b glibc-langpack-cs-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm fec6a031a53e5fb3a0aeda5950690c71194bff1279f21799ade942840a91e878 glibc-langpack-csb-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 09015cc8343f76896a0a79e7a97ff9f63fe0c54ec62372dcd140bbce2e5aa7f7 glibc-langpack-cv-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 4f45bc8028c8f7c8e12a1f8b1a9667af86d82efab5e50d087be743c37ac97d8c glibc-langpack-cy-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm b13072293ea32fb4b038617b610dae3f37ff1ed3e47b2d483b35464ab9ad8d08 glibc-langpack-da-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 9b315d0c7fd0887b8a33fd69e4d5b00a9885969c099a060ee6f8c3da510cc563 glibc-langpack-de-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 1ac8ef164be43eb3dc6ed99cdf5ca2f76f8acdb3d67c86f033fee2624a16fb4d glibc-langpack-doi-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 81d41f2184ab8151fcb34fc61df7df88b933f01f3b6c85acccfe243b69624e18 glibc-langpack-dsb-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 9203fbe98c74edb5436b877c6bf96181540df5603e8be3b382f87139c801297b glibc-langpack-dv-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm a7a15a093b6ecb7e038bd8a3e25fc41b83cd5b21dc52562e865f0d38a07124ec glibc-langpack-dz-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 29256a3af717a3bcfc695428fca430452fc979d9269d9b7712db67e9267f44ec glibc-langpack-el-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 822278629b75ec99f7483e7ce48625c71450e30711886693d5418bd322e0da5f glibc-langpack-en-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 4370c4c0856161ab0ef60b5f26e9bc012d16c271ac8d14e8bb3c405d217951bc glibc-langpack-eo-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm cf6c521674052ac793a03a73c569c98d801ba366272dfbfbdce92f7494347d7e glibc-langpack-es-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2447112f546343e94e3831ad7526bc923c7d55e5259e7b9fc6cb31cd0945e2e2 glibc-langpack-et-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm bbb993be59437bb5f8e8f48dddac996e5e24483eda1134cb5ef7f1bf8dfe0269 glibc-langpack-eu-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 229a5c2761ef8aad31f9200be2f55d6ffc0d2ba9efc7ad7830df75ffb456efcf glibc-langpack-fa-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d1978cfcf891a5d268a9e349fc8329147dfefc484c4bafa2ccbb9c3a84595fa6 glibc-langpack-ff-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 5f8159ba6ff21d94bc202d2dfc2ad3c11a6ccd1c3cafb811d22d137a2dd958c3 glibc-langpack-fi-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 5966dda8817de47801f9107cf8a16bfb929d9943c45e304f4654f4d904d02681 glibc-langpack-fil-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d917d715510c3a0a3c4bd6d8818d14937a25acca58eea144eec2413fcd514098 glibc-langpack-fo-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 1da642d690b69d748975ab01eb52ca385fbe7ff702f37508e592b3b464cdfcb1 glibc-langpack-fr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm f0831eed8e0b5773c113f107c1c4973ef34b2078f130387026ed7bc3d99d4d4b glibc-langpack-fur-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 34606651c8b3b3a28f22eb084685eb464f34ae5da7954e1a48b905e2249cdfef glibc-langpack-fy-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 7c089e6599e55a4f38242ae6a8bd1dd2559a620636233ffd9683bb9417cd0226 glibc-langpack-ga-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 6e878c9e088edda4642366c123fe6c8e5ff31a929b41106174ce953b1a1f4b18 glibc-langpack-gd-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2e779d69364f996a4aa433ef543ca4a1c2ab666823dc2b8064c5f47b164f478b glibc-langpack-gez-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 02b078ba64ecb07469e91240104e84896a942aaf38ff2d2939ff5f6777be019f glibc-langpack-gl-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 88e84058a791409cd2b025caf38cd28d954929a60fb15109ec741c8c3fdd4657 glibc-langpack-gu-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 9209f8e4d1d93c41796688ca391ab3776c20078ef6e24ece9dedc94eacf3ec4c glibc-langpack-gv-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 1ce7ffa71225fef19fb3c01507b998f465818f2a1e6e1ac91a9d1a661862fae8 glibc-langpack-ha-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 490b0f03f28486317da83f93e1172399496eeae4710107b8df576d3f786d3d08 glibc-langpack-hak-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm c6c78b66668f652ac379e8c9292559861098e454b8f7b82cc2eac6b0b7ede6c5 glibc-langpack-he-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2264be9c3a23db593e1c9d7750400dac3ec813d3ca32b8229dd8857ebe56bb2f glibc-langpack-hi-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 8a197f198bcd8ad60be88ff080fa944f6922bab2188d3db5dea5a64f58d592f2 glibc-langpack-hif-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2dcc246a538888ce29f4ff42258c7b81f2cc289eb10e1f4c787be5917b50eaa8 glibc-langpack-hne-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 44a278999a5857ab53cee94ddbda3b2f3751f7433ae7ed0780bfd0214ffef192 glibc-langpack-hr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 6b6e223349e9412432197e775fed2fa8ffea9e93364330e7106cf55955c0a03d glibc-langpack-hsb-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 3f734da6b2033ffb655deb6609c883e6336b86c973bb1d8a2c39967065752243 glibc-langpack-ht-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 7825a76d17c5eb159cf70d8a6ab0fdbe99f90811834951ed81c629e8595d3ea4 glibc-langpack-hu-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 7061c744f21156e18445a109760c743c9fd4d2bd9e0330834c10e04e17ed1e0e glibc-langpack-hy-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 57582589d1521385ab26b4af32b0ec9450459c8e4c1d0f9020c947de4cebe201 glibc-langpack-ia-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 24a02a580d64971e19af09ef0cb21656be2b90ba747909dfd21f254efc176425 glibc-langpack-id-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 09ea657bdad69b986efd90e9b6289276b210f6d630e0a6a6706b3e87d2f5ca30 glibc-langpack-ig-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm f4d177b52a7db014435b28df66386797015d17e4f92cd3c722e651f8253ec393 glibc-langpack-ik-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm a24abd6be371bd42f5864d8ff7d8fcb6b2f54c708a10c5760c15b4808fde4f24 glibc-langpack-is-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 34890f0075c390618d9769827aacdb65c6c4a85b79f1152b691b27b9e296ead3 glibc-langpack-it-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 56d53cd68e6bffd111f0bab867d2327b8a1725adb7258768dc5b6f5af91af790 glibc-langpack-iu-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e8acf48fc97882f388299001338aae31cdd6f971a335a25086f4b837d5a948a3 glibc-langpack-ja-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 14ce749cd1f16496b48d9a094dc14e1a0becf838ceea352e1cb1ac7de25c707f glibc-langpack-ka-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e2ed4d7a32e63b0190c91fe6cfcc52c327151cc70446dc78b58b052df77df3a7 glibc-langpack-kab-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 5750161cb31c7339a2411197959fcee2f917988011db7474a9f899444c78a366 glibc-langpack-kk-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm f1ae585191c7640e34f9114e692c8df5f4faf1ac3505f6347de1bf674917c17e glibc-langpack-kl-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2dc95be0e60d1da3eb6e7b849b3a469690df90f9da190d033a78d6f9a0c1c408 glibc-langpack-km-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 30ac406fee763310a5449bedd36669b59f0f33c62f0f70839237904f981433d4 glibc-langpack-kn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 3e5879e3c8f8c1703071b3668a91c2bca4b48562850c0e60576d664e22273134 glibc-langpack-ko-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm f9acac9928e8e5d4f397917c4d846c76e8483e865d62ce5f9d0b051472f96b71 glibc-langpack-kok-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d81979e4d2c971af1ae82520dc4df6b6eadac8f570794b1b2610c008cf61a887 glibc-langpack-ks-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 078085fc64670658f0668db55c8ed98bea5cc5b19ca129acc45a60fe9976e76e glibc-langpack-ku-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm ce20afa3069ea3739514fc98f543cc8c579b9e078b8ca8a445113779549b6aa1 glibc-langpack-kw-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 6c5f6aa90d82e0f4ec25376fbc5777477b433bb4bd2ea5e2d3c3dcdfa4ba5f9d glibc-langpack-ky-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm b83ff5486200a35574dff530d0982d777811e90b5b07061c1be41757e6d7c1ca glibc-langpack-lb-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 800db96ae1d76aec2ec887ceaf36ebb25c217968cab5afaa634751b564b0c325 glibc-langpack-lg-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 34fd76ccc1e8ab082b2db267ea6a11479050f25eb6bbc91f5bda6edc185c3941 glibc-langpack-li-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 479e56f16599fbe47c581ba12cf42795bc4b3340d8a002c2d2200a2e0bc528b4 glibc-langpack-lij-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm c347718133d58c3dde42337f9a110961be45542b79a61880f9a52826fa52e7cb glibc-langpack-ln-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 49f90eba1b716eb01b59413477ab825d6075e31948f0d7739bfccb08ba0a5c31 glibc-langpack-lo-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm b4fe556cfe7658639145f2c9b55e3c00e76eea45b5a46268eb405e98a76e24b5 glibc-langpack-lt-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm f50421d65ae7ba3998514fa17f99c81334243c174958e0f3bc99fa076ae706e7 glibc-langpack-lv-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 83db1f5dd5d62fee2cfd55e2942b86c1486af954bf7856172406c2294ec2be58 glibc-langpack-lzh-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 4966d6a1ef10489ed2c8f87ec257655adba3b83ab7c9db8b836a2ba1c9793c08 glibc-langpack-mag-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 1bbc616884b9d20a06d56577e2839fe6fdf012ff909f99c8ebffcbf83de08cdf glibc-langpack-mai-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm c5973761b468965b83f398400fcf132ab292e84025675eb1c1585bfc6ab9e680 glibc-langpack-mfe-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 5ee13f89b1a701854494bcc4401f464375a1f83d8dc1d91c389c913b6af77905 glibc-langpack-mg-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 796d78d97cff66b3304bce9c087c2b77a92de78f4a0c21a023231a7cd5dc967b glibc-langpack-mhr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 99ca562608789b6ccd07f60de6428dab7f9611527857b0b2468d9dc2b78381c5 glibc-langpack-mi-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm c9bac4e556f77c84fef8dde61344db4fa210d68f6f76f8f25695bc602399e4e2 glibc-langpack-miq-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 097c2dbdcd0984f210b6108d2213fadfe7e32434642fb177a427e484d8016ce1 glibc-langpack-mjw-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e31bff0ab4996ae74afcb20480b2ea9b58cb5b4f738e67a8a06c01c256222e3d glibc-langpack-mk-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 5ba25c527f4ebd73e2fdeb1d647967f63b2e718c455385ece76241a2af32f1be glibc-langpack-ml-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm b916b44cdc6de7b13202a4bd662ed1cd4b7dc47c4654d1d7578c79ab834e1dfd glibc-langpack-mn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm dca4d64510842eaae809cedf48824bad876e7be44fa4b97d5616f1e4e4f4a15a glibc-langpack-mni-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 3a9361ca3db92f2d47f3e82c7106f3d9ed5b93ce4d19293333487213c6e9e16f glibc-langpack-mnw-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 8ebcca4e1c18ec478bba20babc503e59b35f9cb70948170316ce6a7b3beb08fc glibc-langpack-mr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 880db3c9c76c97ada244868b42e5e2156ce5765b9698c854d43ac78a2326afe2 glibc-langpack-ms-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 711dcbac2610641f70cda53f3aa160ae54012b85f0e31445088226e69d1b1422 glibc-langpack-mt-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d8c43dbfdb384ea627c82659d88509ec5a348fb67ace9595e1e1a667aa7dcc87 glibc-langpack-my-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm f117237ac9bde752f20c70f08d48304912a10fb9797894157a453fa1ad831418 glibc-langpack-nan-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 573b9033ba484c24244af32623554b355aa0951276671150f1bdbbb20368cec6 glibc-langpack-nb-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm da532b172c500dcf7a11f76a7d49d8b85ed8672f337f89e31d958513e3973a02 glibc-langpack-nds-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm ab0f5516355e4713c53f2e483ad21de2cd53a50093636f43a2ed474cb61109a8 glibc-langpack-ne-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2a2190d6a6d5c76a3df45eb6c9ab88292a295a94f019c180e237a05c83a0c816 glibc-langpack-nhn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 086ea3a47e54214b1d4a997d38bd982e6e8cdbbc60709095de1ea8b0192285c5 glibc-langpack-niu-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm b46fe1d42ea8026257fee5c8ee9e292976c22e41cf262ac52996882244539e0f glibc-langpack-nl-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 1e9ce911b4663dccb42da0b4f5e74d731fabb5b9349db1441a98d5a39e476c5b glibc-langpack-nn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 05d9730635c398ed7359bc7e5179374be80899ae699da7e41a49c717e3650d7f glibc-langpack-nr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 850faa00fdfc4d2a46a1e7032ca2b46106e72f8d925ad66e88e74cc601ec05ea glibc-langpack-nso-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 55032898dbbc5b4c6bd2587d976f72506f073e5a4dac77aeb6b0e7b56e6f21f6 glibc-langpack-oc-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm fd1ce8f34e7a9996d6a75743c41fc484e09ed0b78d1fe6d451949e9e688075fb glibc-langpack-om-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm a7cb305f673e0dcfc316f3ccfdd52d4675c34877f8c8ce5aab39005b2c1d25c9 glibc-langpack-or-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 00005cca473dbc2a041da8f4d1e4bd13e58ea928f010d6beebb29b631ad504bc glibc-langpack-os-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 0f7b41b545e49685c73966fbbf40ab0c18974016b9f6424e97c5cd3e68a556a7 glibc-langpack-pa-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2913fbfdc7b84891cdd10b4d62ece8866fa52436b289a182f2db8ae29133d936 glibc-langpack-pap-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 00fa77b721c39e2b48e92a22e2710b38b98c2a127946480d323ceecf73ff118d glibc-langpack-pl-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm f584996759240a9877d3a1a6605da8f7a749c19e65e70490017645d0fac34084 glibc-langpack-ps-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 9da1b06025b1bdfdc21bb68a8e0eaae5a0c60f44edc6fe3f9a5debea7fa46d2f glibc-langpack-pt-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 8345e4ac3c143800037bdc081370bf5be3b095f0b034d0b1428e1dfb2ee7aea7 glibc-langpack-quz-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 40b0f16db157bba77843a62b2ee5f4cfa5677bcca677bb0f162c957feac045f7 glibc-langpack-raj-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 32948aae4d55508d5a5faebdbfbe1441484cebbb9e217151dd8d5e266e28cce2 glibc-langpack-ro-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm ca9ca724afb9778ef6be45cdbc63030b9e2dab836da9b71f724663910b1e188c glibc-langpack-ru-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e140a01b077c88a6476ceb498987d97727a666b9993772949db46c252b6f7645 glibc-langpack-rw-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 641b2ca9423b5c55ffcd1e177f2b502c38005b4ee51e873a1210869a8e0b5dd8 glibc-langpack-sa-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2fe5c3b84b99b5b0969f0fb5e9d9321d54ffa7ed1c1b26847d4e9de6fbe22582 glibc-langpack-sah-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 83dc87df20f0e3a8395a0bca98fb3716c928fc2f3df099ecbe4f30fce99fec68 glibc-langpack-sat-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 7a40b43dcdb5bc55ef77b59f27b481b1cf324a0deb7a572ae2bb1121faaa38c8 glibc-langpack-sc-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d9f4a23bc3c478a611f9801d7e751367a6ea95249808043e40bee6314c87e1e2 glibc-langpack-sd-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 28cc4de426bb23258f59acf1ff9ffab25e01962d23fe977b0292b421e4fcd119 glibc-langpack-se-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d68c31c5247ebf1d7aeaaf43c502eb009120e9760be289ec0a0ce68b9b791eac glibc-langpack-sgs-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 922612fe67a4367737ab1936225bae6fd583594fcf3ad1270c6717a39baab74d glibc-langpack-shn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 3fcf1196f6a4b0aa7f3b7a647e9590e8aad5a59827c4b087a2795824d01a234e glibc-langpack-shs-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d63759967dee7f03732d81872d27fa7568a68df2838f188cdf0ea0322eddc355 glibc-langpack-si-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 60b791da531e8f7d06b58ac2782d6b1ef56640a042e5e61fd68ba40b1b4364d6 glibc-langpack-sid-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 22d0b3a94944b51b28f49f5b183ad64c932ecc70504110484e7a2752f509aa05 glibc-langpack-sk-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 22d55bbae4071f891eb4f29d399f8c2fb09e645123df3491b6fde801af52c35a glibc-langpack-sl-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 40ea62553e2479ca0d6ae94d13f77cf484a36e94facdba98da8cb04ec62d8582 glibc-langpack-sm-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d8878204ff7b9f92752119c854b465251b54fb36ea27394a55364e4ef1447322 glibc-langpack-so-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 3be3a16a87ed192d260d38dde9c6fd0d52fe22eea6e63db79eaf2482433ed656 glibc-langpack-sq-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e0532fcb15263ce792cbf1e360b01bcd02d3363b50a8df68fac31537ace46c2e glibc-langpack-sr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 40095fadb57a2cb27426d5fe101a798b006b6d65e6b7e847516251c7d34d5309 glibc-langpack-ss-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e5ea9cfe241e2adc4bcabdd576deb401767398c23e2eebdd3f4dfd5838227418 glibc-langpack-st-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm c46e0bf45217662d067aca175cd8f801d89d12ec75690a4fbf6793e986e6a576 glibc-langpack-sv-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 0abc359c358980754e2356cd17cfeb5c0bc90ea84bd2a3e811f97cad9019fa09 glibc-langpack-sw-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 3e9ffaa97e9785f416281694f4b0aad50c0d13ec25a5fac4c279eeb9dac8c290 glibc-langpack-szl-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 03749307e26b0247ebc045f8fa0f80976fe1278a3d9e839f3f87c9cee8c7087c glibc-langpack-ta-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 6ff48c6c74468a09c96de331ce5484b526c37d7195d8f9a8bedece232a7b6401 glibc-langpack-tcy-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 5e52b18415d1f75201349af31e5a0f11b24e2878cd91f4202177ca5e9971bc93 glibc-langpack-te-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 714917d90b037418d17382b585397043b7c85f82769e877a5c14beaa2e62642f glibc-langpack-tg-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 5da59e6060ddebe1f78152f83ad673459d7a89fa6794620f80a49000091a4147 glibc-langpack-th-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 10dab325a23419ae03605fbb55852e787e3bef53974a0b407ae3a16a9df77c4b glibc-langpack-the-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 01a46eb7241e9ff2104dc296c2a91333edfe4250d9f22d6bef7ad60103071b38 glibc-langpack-ti-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm ef200a5353e86bb51aa59146dabed10bc7e029d046f48fbc524bb7fc1f5e0d4a glibc-langpack-tig-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 7368f7cef82b17128a304befda007bf9f91e10c9362cad6b662061d5b13df11b glibc-langpack-tk-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 53bf5e3d2929fe4ee0dfbc1408629983d9a49f6cc0b2225074b930914d6c9841 glibc-langpack-tl-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm ce1e83e42f80566213dff45d72284cc4aef4fafe65ed674e1e2c832a785854e1 glibc-langpack-tn-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 71aabaa8307a1c923c0da3ab9489d5422eaee56f3f421e9ad8e036a5f31b8b48 glibc-langpack-to-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 41b03e7edd8966414402e8d13272803ff0fe3f6e29f1024bf3ec1a803afd2b5f glibc-langpack-tpi-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 79b9f48e4a317f74e22cc7d66dac597340876efdf96157e30ade94dba3f28867 glibc-langpack-tr-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm bbbc44186bfbed4527561bb06b0cee86f2e93d58482b6dbc926e48fa2071bbce glibc-langpack-ts-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2a77de1d093c6066c2fa98f9594416a0c9faed460a149a55f2db780fcd5cbd2a glibc-langpack-tt-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 9441333ee78074a50330010278ed6a12eed552210f6fdd271d1955c1acecb945 glibc-langpack-ug-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d4f394ee1f633b4d74ffd3cd0d0765dc60c967408560a8f627f7ad35cb85180d glibc-langpack-uk-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm bf13560d91d0658ab6265f2fb9f69ad79482eeec2534bb3870aaa69561e1d57f glibc-langpack-unm-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm c935aa4fc1feccb6094bdb863f01ce262d7cb10cd1efa2ea02b3ddc898878caa glibc-langpack-ur-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm d6b93eae08585324a88f55ace0198c0907be044434c968d2677bff993d3e5d49 glibc-langpack-uz-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 2968935fa026234cdbbeacc62eee8e66c1725b625a89f4454f8122864d800ff8 glibc-langpack-ve-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 0e8061d1ab43e7071b590a8d5863951a9cabbcb4b2b75f85be07df8c9d1bc252 glibc-langpack-vi-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 92e0eb651e55011ee5d936f812df4365dcec37d78185a037d7916d073d55bd42 glibc-langpack-wa-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm dda6b36f61725f1fd242fd38501efb6b32f6d5f96b8acee2aefbb5a4c7240c37 glibc-langpack-wae-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 396e221ee3e102785022bf5bc81043548c2a94ccf5b75fa60bbfce94aa106245 glibc-langpack-wal-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 722cd9476d331be6038da606cd74b0e0aa3dc0fe59cf187f88542c6900d27945 glibc-langpack-wo-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 450883433a3452194e39d5a18b7065f79993d3c94c674bde780da4109e01a2df glibc-langpack-xh-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e7766d9c6993bef1d4be304ab753dbf2ea191498857a2e487afe7bfd8d43aee9 glibc-langpack-yi-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 647c0f2bad3dc2b0387e265650f96592724e42e5897a5b47cc089b7e03f00b17 glibc-langpack-yo-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm b0bf12e4c5e795def1ae60cf450721248e15bb918bfb494be5c9aa1e78cd11ac glibc-langpack-yue-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 92134bee1e21f7b7bf24aa6d57dc74846ea730fc9cddffed82490424c477e011 glibc-langpack-yuw-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm a46d6512c988ef1b4e173ea7e17a9d4515d069554aae9f0a5f6913fc6fda1c57 glibc-langpack-zh-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm acfd99e9892ed4a064a319e6a96e3829436a3cce736a80156ed2a644ab8a3e50 glibc-langpack-zu-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm a19c6f71bf3ab83de0c03361434899fdcf6d62f99585628ed6eecc00b834af79 glibc-locale-source-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm f73aea25a2d1163647a18e5fc8ad30c350fef319714829de91cbb09e0f85d9f2 glibc-minimal-langpack-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm b12f816c2f043e58ee44f4c12e1f35698aa94dac25714f8837ed2c82aee35244 glibc-nss-devel-2.34-61.el9_2.1.tuxcare.els4.i686.rpm 3c5d5d3d2b0ce275e7cc1e1bd11f41f2425a641f2b02d0471cdd19501c27b2bd glibc-nss-devel-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 6d26962dc4d9ffdcc1d5de16526e2f4d78b11fe1a73e9c5821aa1af1b2df18d6 glibc-static-2.34-61.el9_2.1.tuxcare.els4.i686.rpm c4c512bf05a5b6afdf7a6c093bc0a37a502728d9caaa7b60cb924c2f3c4f4f0b glibc-static-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 99b46523bce50a409995dd137c0ddd8b4dc58ccbc2ed4f72ce55511133e24951 glibc-utils-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm abf26fbea39b2b5835df6b675f46beb1b999db97b23362bde0c3775758609949 libnsl-2.34-61.el9_2.1.tuxcare.els4.i686.rpm 766c901d7c83933e8556c608258b30991a4bd3ee602d9656068b0e671e24db43 libnsl-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm af5567ad7fe734babf61ab80f10e5c4195a5d1628157382ab2d3e64f69b18c4d nscd-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 87a5e8a14276995b4d9f818d84887e9837f8a910022ce7e99c60fed9756a86b7 nss_db-2.34-61.el9_2.1.tuxcare.els4.i686.rpm 7539299f8b0ca090f9f224e6ba99272814744ba78103702c50e236aaa8edc858 nss_db-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm 5d9de5b4318eaf5edf7344072fff0a48d5df1f1b96d1c598f508f3294d4e6495 nss_hesiod-2.34-61.el9_2.1.tuxcare.els4.i686.rpm 9f8e14e4125eb2b6885c86b4a85e57fc3e501670c81617fed2d701e74153bee9 nss_hesiod-2.34-61.el9_2.1.tuxcare.els4.x86_64.rpm e3d87a30d209795eb66d1efa7900953560c83d1d7c06245d54cb5d286c1a47ea sysroot-aarch64-el9-glibc-2.34-61.el9_2.1.tuxcare.els4.noarch.rpm e3b85182235a50e8392d7dff14cf6648e90c3bd7e69337e239f3c892d3b22ec7 sysroot-i386-el9-glibc-2.34-61.el9_2.1.tuxcare.els4.noarch.rpm d8aaa1bf98156f532cc35825f14cc2f453c0e44e076a0e5c641d772eabd52c29 sysroot-x86_64-el9-glibc-2.34-61.el9_2.1.tuxcare.els4.noarch.rpm 193b9d634a9175409c16deb125516555319a7bfe7c9ca1c692d46f271be32420 CLSA-2026:1780997466 TuxCare License Agreement 0 - CVE-2025-55668: fix session fixation in RewriteValve by encoding session id into sendRedirect URL and recycling session info on rewrite reinvoke - CVE-2026-29146: fix padding oracle in EncryptInterceptor by changing default cipher to AES/GCM/NoPadding and rejecting insecure mode+padding combinations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-55668: fix session fixation in RewriteValve by encoding session id into sendRedirect URL and recycling session info on rewrite reinvoke - CVE-2026-29146: fix padding oracle in EncryptInterceptor by changing default cipher to AES/GCM/NoPadding and rejecting insecure mode+padding combinations

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-12.el9_2.1.tuxcare.els3.noarch.rpm 490b1b1314a67a1315697a5662eef9178dc435d76d49b2d5f24153966e4df49c tomcat-admin-webapps-9.0.62-12.el9_2.1.tuxcare.els3.noarch.rpm edcbcf93f63385b2b6c7972da1aaea8e1547c1f32bd811b588f7aeae4f072fb5 tomcat-docs-webapp-9.0.62-12.el9_2.1.tuxcare.els3.noarch.rpm 7d4eedcbef1b902b285f50bec8864c4fa83408287f55b96dd694c121d2c653b3 tomcat-el-3.0-api-9.0.62-12.el9_2.1.tuxcare.els3.noarch.rpm 4f4f4b3a7231a7855468c865609bb7e95cf70dd2abc1222b12c02f251287991d tomcat-jsp-2.3-api-9.0.62-12.el9_2.1.tuxcare.els3.noarch.rpm 5c33ce4652931804fe1eb505152ff3af6be438741ed32c88b85c6118c19c4cfe tomcat-lib-9.0.62-12.el9_2.1.tuxcare.els3.noarch.rpm 7d5bf0b6a5a41d3ae015c41c48e3ae16502eba58ad7e462955cabda3b0c2f631 tomcat-servlet-4.0-api-9.0.62-12.el9_2.1.tuxcare.els3.noarch.rpm 292f92781a36670b488e496a1b90837d2955ba999e3e1eea398cb177727b5d06 tomcat-webapps-9.0.62-12.el9_2.1.tuxcare.els3.noarch.rpm 049a91c38098c80261e0edc8eb08f4264c0b298faca10606b65fca87d1bf1d5b CLSA-2026:1781079925 TuxCare License Agreement 0 - CVE-2026-7320: information disclosure from unchecked null input channel pointers in audio down-mixing and interleave/convert routines; treat null channels as zero in InterleaveAndConvertBuffer, AudioChannelsDownMix, and the AudioSegment up-mix path Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7320: information disclosure from unchecked null input channel pointers in audio down-mixing and interleave/convert routines; treat null channels as zero in InterleaveAndConvertBuffer, AudioChannelsDownMix, and the AudioSegment up-mix path

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els10.x86_64.rpm 8da6cb85ec9fc1b175e6f0adc842a3761b025d3ef4ee077ae6d0312561871090 CLSA-2026:1781080840 TuxCare License Agreement 0 - CVE-2026-39825: have net/http/httputil.ReverseProxy reencode the forwarded query when a request carries more than urlmaxqueryparams (default 10000) parameters or a non-default GODEBUG=urlmaxqueryparams is set, so query parameters hidden from a Rewrite hook by the parse limit can no longer be smuggled to the backend - CVE-2026-39826: treat a <script> tag with an empty or ASCII-whitespace "type" attribute as JavaScript in html/template, so data interpolated into such script blocks is contextually auto-escaped instead of being emitted unescaped, closing a cross-site scripting escaper bypass Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39825: have net/http/httputil.ReverseProxy reencode the forwarded query when a request carries more than urlmaxqueryparams (default 10000) parameters or a non-default GODEBUG=urlmaxqueryparams is set, so query parameters hidden from a Rewrite hook by the parse limit can no longer be smuggled to the backend - CVE-2026-39826: treat a <script> tag with an empty or ASCII-whitespace "type" attribute as JavaScript in html/template, so data interpolated into such script blocks is contextually auto-escaped instead of being emitted unescaped, closing a cross-site scripting escaper bypass

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els15.x86_64.rpm ec846dc119a862cd64bed48e7a3daac0dfc4194b918ef3f4afc7e97693788e13 golang-1.22.9-1.el9_2.tuxcare.els15.x86_64.rpm 2fc674925c95f3d51b7945dc93aa3be1adc9196ca86c180a00ab98d04acb5066 golang-bin-1.22.9-1.el9_2.tuxcare.els15.x86_64.rpm e04181ae6ba7565bcb567b6f18bc9a9ad1e329e41a8072012582bc00da8323cc golang-docs-1.22.9-1.el9_2.tuxcare.els15.noarch.rpm 4d3c44f2cac9c6dd9c21ad573ee0886bf6b4cc171bf5ac49193cd3302eedbd1b golang-misc-1.22.9-1.el9_2.tuxcare.els15.noarch.rpm 1e65b6c6d0c20ec3688c8968d8334bbcb9651a00291dab1ce1e393e9a814cd26 golang-src-1.22.9-1.el9_2.tuxcare.els15.noarch.rpm 4ffa8fa642038566fd21cdf39ccfd5726f89cb69de789f07924c7dd557b83119 golang-tests-1.22.9-1.el9_2.tuxcare.els15.noarch.rpm f0ed2a333cb327b59d82d9989e703b4c04140dab1748bcbd5cc882dcf9d8952d CLSA-2026:1781086040 TuxCare License Agreement 0 - CVE-2025-13462: do not apply the v7 AREGTYPE->DIRTYPE normalization when re-parsing GNU LONGNAME/LONGLINK follow-up headers in tarfile, preventing crafted archives from flipping an entry's type Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13462: do not apply the v7 AREGTYPE->DIRTYPE normalization when re-parsing GNU LONGNAME/LONGLINK follow-up headers in tarfile, preventing crafted archives from flipping an entry's type

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els28.i686.rpm 15d0b42998b0747c8e47caf79fae73fd8e2a95bfc1cb9e5a3700209e2e13969f python3.11-3.11.2-2.el9_2.2.tuxcare.els28.x86_64.rpm 83608a6a6c95704e3750c86bb74c671910ce1b6461611f13f9327dd4770a4da3 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els28.i686.rpm a9cbd71a1e77427776e89b1735e747f094a83dfd0d058acd44f7f67f1276c04c python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els28.x86_64.rpm 3d17f500630889f9372e7f46cc7d05725cbab01a0845ffb89da82bdaf25930db python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els28.i686.rpm c9c8b22a43a032129ef9700479ff5e2c77ba42028f775974c17b8874b8be1d60 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els28.x86_64.rpm 85dbe9a6a48d7d0956eb516c97135fceb81b0655e6df8cd5b1dda0f281e9a024 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els28.i686.rpm 55882464e032959b844dca73fda56a96475f0848e6ef8d7bc6739fb7e28a47ae python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els28.x86_64.rpm 25d9ec0bb24f0a4b655f62102547dad3dc2bef31bb1b6f25a772960477bc9fd8 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els28.i686.rpm 765487c8c5c7033fe417311132f4e2a6ebffc4d315fe32f1058d7c7a6eaa3dd0 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els28.x86_64.rpm dba9fdbb7324ab10407e122cbac1a8e593748f121f68550bee785f684567439d python3.11-test-3.11.2-2.el9_2.2.tuxcare.els28.i686.rpm 5bbde207bc674c0c9f2e8a3fb018220a047afef1ff2eb8a63ae1864e128bfa63 python3.11-test-3.11.2-2.el9_2.2.tuxcare.els28.x86_64.rpm 458fd6d3506ccf558746492352630918362b896afb9b300a71fd5a6848fc9db4 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els28.i686.rpm 9f5915e7a45d83c7d81e2dff422d97ffa97d719f48caa3cc1fe7bcb2c0532bb3 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els28.x86_64.rpm a3873bebdca295cff142796a4c5521ddfb88fa6576dfc159e72079d2e3a26797 CLSA-2026:1781091230 TuxCare License Agreement 0 - CVE-2026-4802: fix shell command injection via boot descriptor query string in the system logs page by quoting journalctl arguments using shlex-style single- quote escaping - CVE-2024-6126: fix insecure killing of session ssh-agent; include upstream follow-up commit for proper strtoul() error handling when parsing SSH_AGENT_PID Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4802: fix shell command injection via boot descriptor query string in the system logs page by quoting journalctl arguments using shlex-style single- quote escaping - CVE-2024-6126: fix insecure killing of session ssh-agent; include upstream follow-up commit for proper strtoul() error handling when parsing SSH_AGENT_PID

0 tuxcare-almalinux9.2-esu cockpit-286.2-1.el9_2.tuxcare.els2.x86_64.rpm 1fc782a5dd3429bcdfb9a2e33a0add35ad4acce5a62b14bf2ef52a26d6d4534d cockpit-bridge-286.2-1.el9_2.tuxcare.els2.x86_64.rpm 14e421441cdab5d2f0680c7fdce48dd930fe1793366f8aed65828e8260e4dc21 cockpit-doc-286.2-1.el9_2.tuxcare.els2.noarch.rpm 6daf350b9b0e27026ffb361b5fd4b02b3093f2a7ab1f09de7dac6fc261458fb7 cockpit-packagekit-286.2-1.el9_2.tuxcare.els2.noarch.rpm 0d240a45e8b748cbb5ee208c166c38d5bdc5c086cb536dff84a2e7ac50248b00 cockpit-pcp-286.2-1.el9_2.tuxcare.els2.x86_64.rpm 4a1be0fd43cb505f9fb34fd6c4a31d5553fcb7e1b4429cddd7d1fbb1c3f4788a cockpit-storaged-286.2-1.el9_2.tuxcare.els2.noarch.rpm cbfa22152330421cf2ccd688ffe185d6657c88e40887fee196b7a6b0ac7f756c cockpit-system-286.2-1.el9_2.tuxcare.els2.noarch.rpm 159759d018cb2329ef341dfa751b2a42f2fe35366091263c0d585c5228c1d973 cockpit-tests-286.2-1.el9_2.tuxcare.els2.x86_64.rpm 15d9aade34c9c8e12b2540f6bbfb6dc2d3b93622db84a03cba9d68214875cd3b cockpit-ws-286.2-1.el9_2.tuxcare.els2.x86_64.rpm 897181913d6c09a2cc98bc1551ae3fce98762b2015770e553eae85fe18336fc7 CLSA-2026:1781092532 TuxCare License Agreement 0 - CVE-2026-42198: fix unbounded SCRAM PBKDF2 iteration count accepted from the server Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42198: fix unbounded SCRAM PBKDF2 iteration count accepted from the server

0 tuxcare-almalinux9.2-esu postgresql-jdbc-42.2.28-1.el9.tuxcare.els2.noarch.rpm 161453802605060dbb16e29844b3499597e0fde837fff5e8c61cdc564b2633fa postgresql-jdbc-javadoc-42.2.28-1.el9.tuxcare.els2.noarch.rpm bac1a4481dc425e9e22fad1b8431679d950297499288fdc69adbf537d498881a CLSA-2026:1781093705 TuxCare License Agreement 0 - CVE-2026-33376: fix auth proxy IPv6 allow-list bypass (use /128 mask for IPv6, not /32) - CVE-2026-33377: fix dashboard import privilege escalation (set default dashboard permissions only for newly created dashboards, not when overwriting an existing one) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33376: fix auth proxy IPv6 allow-list bypass (use /128 mask for IPv6, not /32) - CVE-2026-33377: fix dashboard import privilege escalation (set default dashboard permissions only for newly created dashboards, not when overwriting an existing one)

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els17.x86_64.rpm 6d71da31f471bf818886e44bfb81c8df549e1f2d0b18c22621f531f4606938d3 CLSA-2026:1781095521 TuxCare License Agreement 0 - CVE-2026-9149: Fix integer overflow in repo_add_solv() leading to heap buffer overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9149: Fix integer overflow in repo_add_solv() leading to heap buffer overflow

0 tuxcare-almalinux9.2-esu libsolv-0.7.22-4.el9_2.tuxcare.els1.i686.rpm 1ab235029dc372a800c5397089cee7395210a36583309b34f81498ef66477879 libsolv-0.7.22-4.el9_2.tuxcare.els1.x86_64.rpm 696a2794097809e4e8889e3442a561c4c8a3cbee5dd13f0e0dd59e2488fa8533 libsolv-demo-0.7.22-4.el9_2.tuxcare.els1.x86_64.rpm c9a5154a05efbba9f4142bce3f123f7eac8501aa4b92cf9a49d31e8c67d59782 libsolv-devel-0.7.22-4.el9_2.tuxcare.els1.i686.rpm a041f1e9376b9e998f4f1e223f92cdf6347b99833a1af49d523e72a5182c0757 libsolv-devel-0.7.22-4.el9_2.tuxcare.els1.x86_64.rpm 5c0a679b7caf1d90362b0e9f120b01389a3949bd7407efb73e1437d5aa1b5b26 libsolv-tools-0.7.22-4.el9_2.tuxcare.els1.x86_64.rpm 52c5761631059c019e0e729fae5226a05872c05cda076b523fb7a0bc7bc3ca9e perl-solv-0.7.22-4.el9_2.tuxcare.els1.x86_64.rpm f4f27de239cbb58341524dd4d8214b30948a5bd5c051875f5341fd9f19e87011 python3-solv-0.7.22-4.el9_2.tuxcare.els1.x86_64.rpm edb9c91b1fcfdc16a7fcc83072c41011a6460bbef20613bcf37ec0d8e078d7ea ruby-solv-0.7.22-4.el9_2.tuxcare.els1.x86_64.rpm b4474740d49c730625c2ea761b097a3c154b6626206b9e00c0b03f38630cfe33 CLSA-2026:1781101738 TuxCare License Agreement 0 - CVE-2026-37457: fix off-by-one out-of-bounds write in BGP FlowSpec operator-array bounds check (bgp_flowspec_op_decode and bgp_flowspec_bitmask_decode) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-37457: fix off-by-one out-of-bounds write in BGP FlowSpec operator-array bounds check (bgp_flowspec_op_decode and bgp_flowspec_bitmask_decode)

0 tuxcare-almalinux9.2-esu frr-8.3.1-5.el9_2.2.alma.tuxcare.els5.x86_64.rpm a7054dcb10dc13cf13de248d785f846fe0aff9f843e84b7d982c3439bae00a5d frr-selinux-8.3.1-5.el9_2.2.alma.tuxcare.els5.noarch.rpm 80f8da1d1cf82c9d33ec9059e459635315190211fec262656ac36bdf9921331e CLSA-2026:1779707025 TuxCare License Agreement 0 - CVE-2024-10977: libpq retains untrusted error message bytes from a man-in-the-middle during SSL/GSS negotiation; bail out and discard the server-provided text so the client does not write arbitrary non-NUL bytes to a terminal Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-10977: libpq retains untrusted error message bytes from a man-in-the-middle during SSL/GSS negotiation; bail out and discard the server-provided text so the client does not write arbitrary non-NUL bytes to a terminal

0 tuxcare-almalinux9.2-esu postgresql-13.11-1.el9_2.tuxcare.els18.x86_64.rpm e9ae178d15e47c6a817d19f5e4777fb49099757cfbc6ec46dfb1802aedd13464 postgresql-contrib-13.11-1.el9_2.tuxcare.els18.x86_64.rpm bf8cf0a0fc742cea8a56256344307515767fbd5bcab9339df348ea1b8bc63ffc postgresql-docs-13.11-1.el9_2.tuxcare.els18.x86_64.rpm e444cf19dda8445a29eb0eac53c9f1ec47cf1002428e3446b89a9e744bc11c14 postgresql-plperl-13.11-1.el9_2.tuxcare.els18.x86_64.rpm b31465aaab9f61ab6aedb24d3d4cd7522d1e998f8847762880df87041e9bbe70 postgresql-plpython3-13.11-1.el9_2.tuxcare.els18.x86_64.rpm ef6dce23ba96f10202607fab473f3e7eb42bc8b4711515d51023fba9100dfa3d postgresql-pltcl-13.11-1.el9_2.tuxcare.els18.x86_64.rpm 7b66fd0e28ef78dd0e786042ad4765e80fcdf2a82ad34c82bd028466e5d979c5 postgresql-private-devel-13.11-1.el9_2.tuxcare.els18.x86_64.rpm 4e2b31969727d34f836c0902d07928d5a8109e4ea2187886496b60d180541c9e postgresql-private-libs-13.11-1.el9_2.tuxcare.els18.x86_64.rpm a3375782e8ee99b4a095df5e865d8f4ccfbd07e6a442aa9af51c4f975a3a8850 postgresql-server-13.11-1.el9_2.tuxcare.els18.x86_64.rpm 2e1a1359203f87dd63da89d3e7bc486f5fc81b1db41b79faf74109ea6b0d6589 postgresql-server-devel-13.11-1.el9_2.tuxcare.els18.x86_64.rpm c2eadc27b258a79a7e59b4a7a0be39a5634baf55f647f5b4614be5d7a800bb68 postgresql-static-13.11-1.el9_2.tuxcare.els18.x86_64.rpm 5bdcdb6f7463d7c32fe7541d88f3e5c7c71c88763796b46dff8f5db069cf23ea postgresql-test-13.11-1.el9_2.tuxcare.els18.x86_64.rpm 1e7b77e8916a18f583a69ba375fcdf29ced3f1e9deff9d085465a0a56c5c9982 postgresql-test-rpm-macros-13.11-1.el9_2.tuxcare.els18.noarch.rpm c1ed992fb1a2241d984659f1dc53efba9e0c4dff0ce01f71de1158f0d82a4b40 postgresql-upgrade-13.11-1.el9_2.tuxcare.els18.x86_64.rpm 5181859e9de89a925fb3c1ac96ae41497af5794fea664cd248ac68e224e4deb6 postgresql-upgrade-devel-13.11-1.el9_2.tuxcare.els18.x86_64.rpm 63e04c3a0164b90db0d0f66e1e07e4d50ed703f20097e2333ce55c6f5ba8a9b7 CLSA-2026:1781104507 TuxCare License Agreement 0 - CVE-2025-13462: do not apply the v7 AREGTYPE->DIRTYPE normalization when re-parsing GNU LONGNAME/LONGLINK follow-up headers in tarfile, preventing crafted archives from flipping an entry's type Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13462: do not apply the v7 AREGTYPE->DIRTYPE normalization when re-parsing GNU LONGNAME/LONGLINK follow-up headers in tarfile, preventing crafted archives from flipping an entry's type

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els28.noarch.rpm 60dbed4fd3e5ea9ab03ed79bb1bfb8a3a68372c64a085818b152a4e50b623fac python3-3.9.16-1.el9_2.2.tuxcare.els28.i686.rpm 579644505bce8b0c88f4577fee2a9e7d71df2e2961dee6b7e4d520e070e100da python3-3.9.16-1.el9_2.2.tuxcare.els28.x86_64.rpm e464a804478422baec92a60bddb0033626618c63700dd1b8b7bb2e90ab8cc876 python3-debug-3.9.16-1.el9_2.2.tuxcare.els28.i686.rpm 713d3a38dfba1dc89fa2f0b946e6a647a0b92b27a2e8282775686e0aa1c39647 python3-debug-3.9.16-1.el9_2.2.tuxcare.els28.x86_64.rpm 27247d161992422da2983b276133e9325d392d4770ca34ca483592d08f5ba3bc python3-devel-3.9.16-1.el9_2.2.tuxcare.els28.i686.rpm 4144aa5923bef801c47790f30c0aa4e2390a26f4f28c921b2ff975a8199c265c python3-devel-3.9.16-1.el9_2.2.tuxcare.els28.x86_64.rpm 871f36f2751d3ca01eacac407df3cf41b7addec6e94cf62fa7b50ba2261d4927 python3-idle-3.9.16-1.el9_2.2.tuxcare.els28.i686.rpm 0e7328a9dee5e4195587242c58c07a97f6eb43e3bfd582f624b96dbfb78c07ed python3-idle-3.9.16-1.el9_2.2.tuxcare.els28.x86_64.rpm 5cd03e5cb604c80456fad01ca5de780cf580e127479a4df622cbea8c7babf763 python3-libs-3.9.16-1.el9_2.2.tuxcare.els28.i686.rpm bbd1904e7f37f105dcd48217094ceb5049c305e9341cf9ae25fbf2166af6fc29 python3-libs-3.9.16-1.el9_2.2.tuxcare.els28.x86_64.rpm ac5fe016e7b36f97083bf854d786b442921b41275cea44c71ed86bcd8d507dd0 python3-test-3.9.16-1.el9_2.2.tuxcare.els28.i686.rpm 047d324565dfaec14aed7b4d7f4c3ab595d4d987bff6d5e2b464e011b7886ed6 python3-test-3.9.16-1.el9_2.2.tuxcare.els28.x86_64.rpm aabaef1f2aff3500a28c1d028be36c51561dc30dac4370cc61853a037bd92023 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els28.i686.rpm 396bf7520f14830e491436bafce6c66ec7286d6594d43b59af08e883122446d9 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els28.x86_64.rpm 9a0f57c9a58a13b6bee563bce94a249a6e9495b726ee7a67859f939347d52a37 CLSA-2026:1781165688 TuxCare License Agreement 0 - CVE-2026-28390: fix NULL deref in rsa_cms_decrypt with a missing CMS RSA-OAEP pSourceFunc parameter Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28390: fix NULL deref in rsa_cms_decrypt with a missing CMS RSA-OAEP pSourceFunc parameter

0 tuxcare-almalinux9.2-esu compat-openssl11-1.1.1k-4.el9_0.tuxcare.els3.i686.rpm 43700a8b031f8fa32facfb13672b27204f099d105e862d3d1c8667e20af7f91d compat-openssl11-1.1.1k-4.el9_0.tuxcare.els3.x86_64.rpm 7cd275768540f677e2a73afba5b180ad77291d63cbf54a317d57e2af21183593 CLSA-2026:1781177494 TuxCare License Agreement 0 - CVE-2022-48340: fix use-after-free in dht_setxattr_mds_cbk Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-48340: fix use-after-free in dht_setxattr_mds_cbk

0 tuxcare-almalinux9.2-esu glusterfs-6.0-57.4.el9.tuxcare.els1.x86_64.rpm f40cd8d10282c54ef35cb12d5118d819e97258d30c3ed1ebb5ff40db83762b2b glusterfs-api-6.0-57.4.el9.tuxcare.els1.x86_64.rpm a44784c86610e4f82ea7b9c1a9672195acd795ac91a657bf3cb6de73b0b76913 glusterfs-api-devel-6.0-57.4.el9.tuxcare.els1.x86_64.rpm 00ed6e08dcaae6108722ed7492ab7f8e21c0c9eb1c3a452b6af7ce9c274749b8 glusterfs-cli-6.0-57.4.el9.tuxcare.els1.x86_64.rpm c32cb940d5420163f2e77b66de8e6ee6a9e89b82b27aad451a9caa3a26174bb1 glusterfs-client-xlators-6.0-57.4.el9.tuxcare.els1.x86_64.rpm f30e1872742e9cd121fa17c51a738cebe85392c9fca00d74b41a3fc1470420e6 glusterfs-cloudsync-plugins-6.0-57.4.el9.tuxcare.els1.x86_64.rpm 5f0a48ee3140273fbcd96b08f333acdbfbbe0b57875f498f79df6ff7490a3f8f glusterfs-devel-6.0-57.4.el9.tuxcare.els1.x86_64.rpm 3bd13ab2278a068cb8042819e95fac04fa4659e9a621b6ad964be9115795b498 glusterfs-fuse-6.0-57.4.el9.tuxcare.els1.x86_64.rpm 65de1ee5ec14cc74f36c550864a02801be0acc595bebf2033afbd6e125c1cdf9 glusterfs-libs-6.0-57.4.el9.tuxcare.els1.x86_64.rpm 1274a3277956a130099fdffd56fd69e06c37162860f6a5ab43c0bb90e26aada5 glusterfs-rdma-6.0-57.4.el9.tuxcare.els1.x86_64.rpm a5a3cd34845dcd4cbbe975183d7a7050d66e5dfa89e4b9dc754a082c2b6a1a47 python3-gluster-6.0-57.4.el9.tuxcare.els1.x86_64.rpm 5149456f0d5aab46d10e263f95cdd3b7109432ec06ee76583857d3ec0d487187 CLSA-2026:1781179323 TuxCare License Agreement 0 - CVE-2025-11082: heap buffer overflow in _bfd_elf_parse_eh_frame Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11082: heap buffer overflow in _bfd_elf_parse_eh_frame

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els13.i686.rpm aa943a83d1c8c60e504d1427827e300525fddc3a7ca92dcbf5719e918995c2fa binutils-2.35.2-37.el9.tuxcare.els13.x86_64.rpm 4b83ea8767b0c3bf2e6d8b26ecb4a5fe7e8c9028a934c0cd9adeb84927ab7d2c binutils-devel-2.35.2-37.el9.tuxcare.els13.i686.rpm d78a89e49df35b4d77a9c983af9e2efd0319662d0cefed4cf2ca6c907d9b9b2f binutils-devel-2.35.2-37.el9.tuxcare.els13.x86_64.rpm e6c733cb197d5ab2e2b6839358f99d8e37db678ff9b03a78d387215ce60fdd78 binutils-gold-2.35.2-37.el9.tuxcare.els13.x86_64.rpm a15759e079f8c2a100e370bd0f482b7acc5fc9dffcc4de85d886b87b0eac882c cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els13.x86_64.rpm 04df4e55647239065f319e9f539672a21661e5523c4e40efc521dd66d5955dd7 cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els13.x86_64.rpm 669ec8de1cc5282dc451138ee9dfce66f10ba8235319f276639bcb726c4e54bd cross-binutils-s390x-2.35.2-37.el9.tuxcare.els13.x86_64.rpm 9603c10aee7c25ea42948951cf7f4995311c27eaf8cf696445b34fdc002b3d82 CLSA-2026:1781180341 TuxCare License Agreement 0 - CVE-2026-34544: fix B44/B44A integer overflow in row pointer arithmetic Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34544: fix B44/B44A integer overflow in row pointer arithmetic

0 tuxcare-almalinux9.2-esu openexr-3.1.1-3.el9.tuxcare.els7.x86_64.rpm 1ecdc78b2d2addb56a7ceca8d57da57cb61f5ead0d55108eb0dc8bbfb2fef020 openexr-devel-3.1.1-3.el9.tuxcare.els7.i686.rpm 265afb89adf3f9b785096f88dc1419c26508a64e4d0780af664410ce5119b206 openexr-devel-3.1.1-3.el9.tuxcare.els7.x86_64.rpm ccb1c06a36d8b12bd33c7ca9e546be935123e3dba7b9fb5b118c303b4b2f9f4c openexr-libs-3.1.1-3.el9.tuxcare.els7.i686.rpm 56e425c8685545a5b619daf5af9ddb94327f1c685c37c3e9a6b9a11f420ec66b openexr-libs-3.1.1-3.el9.tuxcare.els7.x86_64.rpm 17fb3eadf5b7e43f3c7591b162594afe214e29edbbb313555040dc0ba8f8243d CLSA-2026:1781191047 TuxCare License Agreement 0 - CVE-2022-37050: fix reachable assertion in pdfseparate when PDF Catalog is not a dictionary (PDFDoc::savePageAs) - CVE-2022-37051: fix reachable assertion in pdfunite when PDF Catalog is not a dictionary - CVE-2022-37052: fix abort in pdfseparate caused by reachable assertion in XRef::add Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-37050: fix reachable assertion in pdfseparate when PDF Catalog is not a dictionary (PDFDoc::savePageAs) - CVE-2022-37051: fix reachable assertion in pdfunite when PDF Catalog is not a dictionary - CVE-2022-37052: fix abort in pdfseparate caused by reachable assertion in XRef::add

0 tuxcare-almalinux9.2-esu poppler-21.01.0-14.el9.tuxcare.els4.i686.rpm ea92f5c9af6b0eb3be008baa31b13c793b5976727fb0fad3db2af52b2252c484 poppler-21.01.0-14.el9.tuxcare.els4.x86_64.rpm cb1ae3e95833ad5d4b91cb9ad2ff9d43c4a5590580ed96b472e6a999596ba684 poppler-cpp-21.01.0-14.el9.tuxcare.els4.i686.rpm 24288df83f420347e3c0659a3e2d297be5e1b7ca457430fc45b4c8d8022229c2 poppler-cpp-21.01.0-14.el9.tuxcare.els4.x86_64.rpm 20325d342c1c6c302c1386b8025fe4bcd0193f6db88a8d2ee02186d7e219c70d poppler-cpp-devel-21.01.0-14.el9.tuxcare.els4.i686.rpm 035561dd563a8734324ff52ca861f4804a82839846038bd10b92547b68c7100d poppler-cpp-devel-21.01.0-14.el9.tuxcare.els4.x86_64.rpm ea1c672f9cccd7a023c1f55fbc89848c3e9891f6442c7e1e931339c70d59e559 poppler-devel-21.01.0-14.el9.tuxcare.els4.i686.rpm 44a1a409b6b5fc1dc1f730c5ac0a4ced2467b2d3f55e655ce7bae357e4d28882 poppler-devel-21.01.0-14.el9.tuxcare.els4.x86_64.rpm f98005fc3b57c5c629f11b48d740d0addb95fe3c157434ffcf60279dfb2907e8 poppler-glib-21.01.0-14.el9.tuxcare.els4.i686.rpm 6a266cfc7e45aae390e372d94d57caabc4288ea8264bcb00a6c790b8fe79657b poppler-glib-21.01.0-14.el9.tuxcare.els4.x86_64.rpm b6e8dbafbba25bfdeba069d81f1401407c0a61f29cea7a2899c5e2e946c9bf4c poppler-glib-devel-21.01.0-14.el9.tuxcare.els4.i686.rpm 3328c5870bdf7c901c3efd820152790862fac7b9521aaec2c0af45f44d141844 poppler-glib-devel-21.01.0-14.el9.tuxcare.els4.x86_64.rpm be8646f7b90b104e13f123a120390e558b4ec44a8259e41e235db3158c243ddd poppler-glib-doc-21.01.0-14.el9.tuxcare.els4.noarch.rpm 6e8308f7f9c0c7787352f61646b7727f73a792557338f15b0816e996011b19bd poppler-qt5-21.01.0-14.el9.tuxcare.els4.i686.rpm ccdcf0ab9c3ca22630eb6c9a59dae58aea453db98b87e8977847e5ea86616768 poppler-qt5-21.01.0-14.el9.tuxcare.els4.x86_64.rpm 6eab17014700ca63ef99cb65038e3ac5d5282548c9cb1a3ca96b1b3b19c4beb9 poppler-qt5-devel-21.01.0-14.el9.tuxcare.els4.i686.rpm ae86efa2e06732a9e8112535cd4c801ddb4f3149ca35c9672e32b1350a16305b poppler-qt5-devel-21.01.0-14.el9.tuxcare.els4.x86_64.rpm dbd7f02fadd41c9516316102c4f2b01056bde17e797e70853ffac9c178e730ec poppler-utils-21.01.0-14.el9.tuxcare.els4.x86_64.rpm 9b813768308d9f3fcb547c01c3aaf8a520299d4ca859497bf8f3c4d698258cef CLSA-2026:1781204847 TuxCare License Agreement 0 - CVE-2026-6757: invalid pointer in wasm debug frames; add DebugEnvironments::onPopWasm to clean up the debug environment on pop - CVE-2026-6761: privilege escalation; enforce prefs for dom TCP and UDP sockets at the parent-process IPC entry points - CVE-2026-6764: out-of-bounds read; validate HID report length in Dualshock4Remapper::ProcessTouchData - CVE-2026-6771: CSP 'strict-dynamic' mitigation bypass; treat XSLT as parser-created so 'strict-dynamic' no longer auto-allows it - CVE-2026-8963: Web Speech spoofing; cancel SpeechSynthesis on navigation by overriding DisconnectFromOwner - CVE-2026-8965: information disclosure; pass the right sanitization kind through SanitizeInlineStyle (conditional CSS) - CVE-2026-8971: Networking JAR same-origin bypass; reject jar entry names containing an embedded NUL Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6757: invalid pointer in wasm debug frames; add DebugEnvironments::onPopWasm to clean up the debug environment on pop - CVE-2026-6761: privilege escalation; enforce prefs for dom TCP and UDP sockets at the parent-process IPC entry points - CVE-2026-6764: out-of-bounds read; validate HID report length in Dualshock4Remapper::ProcessTouchData - CVE-2026-6771: CSP 'strict-dynamic' mitigation bypass; treat XSLT as parser-created so 'strict-dynamic' no longer auto-allows it - CVE-2026-8963: Web Speech spoofing; cancel SpeechSynthesis on navigation by overriding DisconnectFromOwner - CVE-2026-8965: information disclosure; pass the right sanitization kind through SanitizeInlineStyle (conditional CSS) - CVE-2026-8971: Networking JAR same-origin bypass; reject jar entry names containing an embedded NUL

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els7.x86_64.rpm 40e2857eadb108ee6e24b3194a5ee7e6262519d46d407f07105bdda6cfc6859f CLSA-2026:1781274016 TuxCare License Agreement 0 - CVE-2022-37660: delete PKEX code and identifier on successful PKEX completion to prevent passive recovery of ephemeral key X Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-37660: delete PKEX code and identifier on successful PKEX completion to prevent passive recovery of ephemeral key X

0 tuxcare-almalinux9.2-esu hostapd-2.10-1.el9.tuxcare.els1.x86_64.rpm 7e8fdfcfe84c3af39f803cc62739aba9ac8ccdc6b628ac2c3a10b0f1bbc96214 hostapd-logwatch-2.10-1.el9.tuxcare.els1.x86_64.rpm 9acda53dc78c94d40d55b8a5c46fbe62f9cd1291238ec1d1e0bd343222619af7 CLSA-2026:1781274708 TuxCare License Agreement 0 - CVE-2023-0507: apply attribute sanitation to GeomapPanel attribution - Regenerate Source2 webpack tarball (NVR -2) so the patched GeomapPanel.tsx reaches the shipped JS bundle (precompiled tarball is what %install ships when compile_frontend=0; without regeneration the .tsx patch is dead code) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-0507: apply attribute sanitation to GeomapPanel attribution - Regenerate Source2 webpack tarball (NVR -2) so the patched GeomapPanel.tsx reaches the shipped JS bundle (precompiled tarball is what %install ships when compile_frontend=0; without regeneration the .tsx patch is dead code)

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els18.x86_64.rpm 3f360bdf890ffbf13691e457e52bfe2c72537ac56ba6d1d1ab0ed6f0f358637b CLSA-2026:1781261042 TuxCare License Agreement 0 - CVE-2026-29167: mod_ldap use-after-free in per-directory config, deep-copy client_certs into the connection pool - CVE-2026-34356: mod_proxy heap buffer overflow in ap_proxy_cookie_reverse_map(), reset newpath/newdomain state on duplicate path=/domain= cookie attributes from a malicious backend Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-29167: mod_ldap use-after-free in per-directory config, deep-copy client_certs into the connection pool - CVE-2026-34356: mod_proxy heap buffer overflow in ap_proxy_cookie_reverse_map(), reset newpath/newdomain state on duplicate path=/domain= cookie attributes from a malicious backend

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm 361d61af1243712c9a59f05f9fbdeffa751e71e1c825dfa4e45184497bd3b125 httpd-core-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm 064a2e65c6028e4ff55c9e5f28d2cc970735531adcb6e14e070240757529eb07 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm 0343fb35bc46dbc7e79c9cb3b5885c74bec1194edf19acf314ea0ce0461fa71b httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els15.noarch.rpm 5a095630ddb8829f91f9c74229f867eeba0e0b19c8e09891bbcf998f9022f29c httpd-manual-2.4.53-11.el9_2.5.tuxcare.els15.noarch.rpm e95f404650440b65abf72851d26473b419915a2845484044fb46f94cf17e5f4c httpd-tools-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm 82519a1d33093a9ae4fdc9b4f130e745865e59d0031c4d39a091e6d2616543c9 mod_ldap-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm 6ee807acba7191cc248ddd767972f124b8e0cf9424ce3d327c8dfa40614e4dca mod_lua-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm 73400ed2b219bf6803202f7cdf34256e83f30ecc3d248f03c35fd700dcc72308 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm 8afd51b4d03fe82d5789c4dc7e2bdb4f4afa65be1c558e0368a43586db1ebfc6 mod_session-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm b242f78e519a61ebbb06c02eb9e79c7c3aa059fd1f2ad28e96ec627fd2ae2f69 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els15.x86_64.rpm 34730909b3ce79d76f5a4b5cd38f53da7dcca05f239e0c47a522ade51beea464 CLSA-2026:1781348390 TuxCare License Agreement 0 - CVE-2020-23922: fix heap out-of-bounds read in DumpScreen2RGB Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-23922: fix heap out-of-bounds read in DumpScreen2RGB

0 tuxcare-almalinux9.2-esu giflib-5.2.1-9.el9.tuxcare.els5.i686.rpm 13fdc91941dbae62dacd335996e55d513d8a6b8e98b5a36613dd1ef82c90953d giflib-5.2.1-9.el9.tuxcare.els5.x86_64.rpm 404bdda7653cb576384b50433b24970212f52fc85d4cd3aacbc7cfd5c4a657f7 giflib-devel-5.2.1-9.el9.tuxcare.els5.i686.rpm a5203814950e2401c67f84c7e8693d77cbb5a82440022cc40fc21e0371a3d36f giflib-devel-5.2.1-9.el9.tuxcare.els5.x86_64.rpm 47beb924b8c83aeb859730612977e4f7d075e911fba10bdabc37e3661c112dfd giflib-utils-5.2.1-9.el9.tuxcare.els5.x86_64.rpm 2d35ba0f2bd07acc8b247e992c7e01b68af861488aebbcfc61202ff9bc2ff4a5 CLSA-2026:1781349151 TuxCare License Agreement 0 - CVE-2026-27143: fix cmd/compile loopbce overflow check logic Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27143: fix cmd/compile loopbce overflow check logic

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els16.x86_64.rpm 8f39c9adc1b2b2f4568b9f21710e7bbc40e22248229816bb53b05ee27d7373c9 golang-1.22.9-1.el9_2.tuxcare.els16.x86_64.rpm 73177659da381ace551e1a8463f55d248d172cb71fd0987304520b74cbe949dc golang-bin-1.22.9-1.el9_2.tuxcare.els16.x86_64.rpm 3ad9589f84b74801562370920d1348cd3f3491e9e5de4c10b404426e4d794745 golang-docs-1.22.9-1.el9_2.tuxcare.els16.noarch.rpm ed832548f0fdb2028a497da7f4699993f1b13209feedd2da7fef9a364bbce8da golang-misc-1.22.9-1.el9_2.tuxcare.els16.noarch.rpm a23095a32e7c90b248be150da3695c761ae54b3954cc5021d0eb7037b252eaa0 golang-src-1.22.9-1.el9_2.tuxcare.els16.noarch.rpm fae8a40c341c12ee9442d01a401552c4bd60cfc874abcab5826c4701a81ddef0 golang-tests-1.22.9-1.el9_2.tuxcare.els16.noarch.rpm ebd7118fd2c2f7a1a636961cbf9a958db6d820fc7725fef7271775bff552a5a5 CLSA-2026:1781347338 TuxCare License Agreement 0 - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c {CVE-2024-56726} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c {CVE-2024-56679} - USB: chipidea: fix memory leak with using debugfs_lookup() {CVE-2023-53334} - drivers: serial: jsm: fix some leaks in probe {CVE-2022-50312} - drm: amd: display: Fix memory leakage {CVE-2023-53605} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent {CVE-2026-43026} - net: Drop the lock in skb_may_tx_timestamp() {CVE-2026-43216} - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep {CVE-2026-43381} - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() {CVE-2026-43068} - net: mdio: unexport __init-annotated mdio_bus_init() {CVE-2022-49350} - netfilter: ipset: Rework long task execution when adding/deleting entries {CVE-2023-53549} - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() {CVE-2023-53275} - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash {CVE-2022-50494} - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message {CVE-2026-23307} - usb: image: mdc800: kill download URB on timeout {CVE-2026-43425} - tipc: fix divide-by-zero in tipc_sk_filter_connect() {CVE-2026-43411} - cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() {CVE-2023-52942} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path {CVE-2023-52703} - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() {CVE-2022-50246} - bus: mhi: host: Range check CHDBOFF and ERDBOFF {CVE-2023-53598} - hwmon: (coretemp) Simplify platform device handling {CVE-2023-53612} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920} - dm crypt: add cond_resched() to dmcrypt_write() {CVE-2023-53051} - xfrm: account XFRMA_IF_ID in aevent size calculation {CVE-2026-43107} - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() {CVE-2024-43879} - RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() {CVE-2023-53335} - regulator: check that dummy regulator has been probed before using it {CVE-2025-22008} - HID: prodikeys: Check presence of pm->input_ep82 {CVE-2026-43251} - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() {CVE-2022-50510} - wifi: ath11k: fix dfs radar event locking {CVE-2023-52798} - trace/blktrace: fix memory leak with using debugfs_lookup() {CVE-2023-53408} - dm-verity: correctly handle dm_bufio_client_create() failure {CVE-2026-43132} - pstore: ram_core: fix incorrect success return when vmap() fails {CVE-2026-43124} - crypto: af-alg - fix NULL pointer dereference in scatterwalk {CVE-2026-43043} - net: use skb_header_pointer() for TCPv4 GSO frag_off check {CVE-2026-43036} - scsi: mpi3mr: Fix config page DMA memory leak {CVE-2023-53120} - net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975} - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx {CVE-2023-53546} - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() {CVE-2025-37852} - bpf: Prevent decl_tag from being referenced in func_proto arg {CVE-2022-50883} - arm64: set __exception_irq_entry with __irq_entry as a default {CVE-2023-54322} - class: fix possible memory leak in __class_register() {CVE-2022-50578} - ALSA: usb-audio: Stop parsing channels bits when all channels are found. {CVE-2024-27436} - net/mlx5: fix potential memory leak in mlx5e_init_rep_rx {CVE-2023-54106} - net/mlx5: E-Switch, Fix an Oops in error handling code {CVE-2023-53058} - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() {CVE-2023-53078} - ice: xsk: disable txq irq before flushing hw {CVE-2023-53102} - selinux: fix memleak in security_read_state_kernel() {CVE-2022-50201} - efi: runtime: Fix potential overflow of soft-reserved region size {CVE-2024-26843} - drm/amdgpu: Fix potential null pointer derefernce {CVE-2023-52814} - ata: libata-core: Fix null pointer dereference on error {CVE-2024-41098} - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs {CVE-2026-23286} - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() {CVE-2026-23304} - drm/amd/display: Fix system hang while resume with TBT monitor {CVE-2024-50003} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator {CVE-2026-43085} - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION {CVE-2026-31590} - l2tp: Drop large packets with UDP encap {CVE-2026-43080} - tun: limit printing rate when illegal packet received by tun dev {CVE-2024-27013} - xfrm: always flush state and policy upon NETDEV_UNREGISTER event {CVE-2026-43167} - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding {CVE-2026-43315} - xenbus: Use kref to track req lifetime {CVE-2025-37949} - wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512} - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS {CVE-2024-46830} - scsi: smartpqi: Fix disable_managed_interrupts {CVE-2024-26742} - IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF {CVE-2023-52851} - vhost-vdpa: fix use after free in vhost_vdpa_probe() {CVE-2023-52795} - ndisc: ndisc_send_redirect() cleanup - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() - ipv6: icmp: convert to dev_net_rcu() - ipv4: icmp: convert to dev_net_rcu() - ipv4: use RCU protection in __ip_rt_update_pmtu() {CVE-2025-21766} - ipv6: use RCU protection in ip6_default_advmss() {CVE-2025-21765} - fix: ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764} - neighbour: use RCU protection in __neigh_notify() {CVE-2025-21763} - arp: use RCU protection in arp_xmit() {CVE-2025-21762} - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() {CVE-2025-21761} - ndisc: extend RCU protection in ndisc_send_skb() {CVE-2025-21760} - ipv6: mcast: extend RCU protection in igmp6_send() {CVE-2025-21759} - ipv6: mcast: add RCU protection to mld_newpack() {CVE-2025-21758} - ipv4: use RCU protection in rt_is_expired() - ipv4: use RCU protection in inet_select_addr() - ipv4: add RCU protection to ip4_dst_hoplimit() - flow_dissector: use RCU protection to fetch dev_net() - net: add dev_net_rcu() helper - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency {CVE-2024-47696} - perf/x86/amd/core: Always clear status for idx {CVE-2023-53073} - tcp_bpf: fix return value of tcp_bpf_sendmsg() {CVE-2024-46783} - RDMA/umem: Fix double dma_buf_unpin in failure path {CVE-2026-43128} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() {CVE-2026-43453} - drm/ttm: Fix a NULL pointer dereference {CVE-2023-53095} - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak {CVE-2026-43035} - fbcon: check return value of con2fb_acquire_newinfo() {CVE-2026-43123} - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() {CVE-2023-52996} - perf/x86/intel/uncore: Skip discovery table for offline dies {CVE-2026-43079} - mm/page_alloc: clear page->private in free_pages_prepare() {CVE-2026-43303} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() {CVE-2026-23111} - netfilter: nf_tables: restore set elements when delete set fails {CVE-2024-27012} - drm/amdkfd: Correct the migration DMA map direction {CVE-2024-57897} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c {CVE-2024-56726} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c {CVE-2024-56679} - USB: chipidea: fix memory leak with using debugfs_lookup() {CVE-2023-53334} - drivers: serial: jsm: fix some leaks in probe {CVE-2022-50312} - drm: amd: display: Fix memory leakage {CVE-2023-53605} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent {CVE-2026-43026} - net: Drop the lock in skb_may_tx_timestamp() {CVE-2026-43216} - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep {CVE-2026-43381} - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() {CVE-2026-43068} - net: mdio: unexport __init-annotated mdio_bus_init() {CVE-2022-49350} - netfilter: ipset: Rework long task execution when adding/deleting entries {CVE-2023-53549} - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() {CVE-2023-53275} - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash {CVE-2022-50494} - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message {CVE-2026-23307} - usb: image: mdc800: kill download URB on timeout {CVE-2026-43425} - tipc: fix divide-by-zero in tipc_sk_filter_connect() {CVE-2026-43411} - cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() {CVE-2023-52942} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path {CVE-2023-52703} - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() {CVE-2022-50246} - bus: mhi: host: Range check CHDBOFF and ERDBOFF {CVE-2023-53598} - hwmon: (coretemp) Simplify platform device handling {CVE-2023-53612} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920} - dm crypt: add cond_resched() to dmcrypt_write() {CVE-2023-53051} - xfrm: account XFRMA_IF_ID in aevent size calculation {CVE-2026-43107} - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() {CVE-2024-43879} - RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() {CVE-2023-53335} - regulator: check that dummy regulator has been probed before using it {CVE-2025-22008} - HID: prodikeys: Check presence of pm->input_ep82 {CVE-2026-43251} - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() {CVE-2022-50510} - wifi: ath11k: fix dfs radar event locking {CVE-2023-52798} - trace/blktrace: fix memory leak with using debugfs_lookup() {CVE-2023-53408} - dm-verity: correctly handle dm_bufio_client_create() failure {CVE-2026-43132} - pstore: ram_core: fix incorrect success return when vmap() fails {CVE-2026-43124} - crypto: af-alg - fix NULL pointer dereference in scatterwalk {CVE-2026-43043} - net: use skb_header_pointer() for TCPv4 GSO frag_off check {CVE-2026-43036} - scsi: mpi3mr: Fix config page DMA memory leak {CVE-2023-53120} - net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975} - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx {CVE-2023-53546} - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() {CVE-2025-37852} - bpf: Prevent decl_tag from being referenced in func_proto arg {CVE-2022-50883} - arm64: set __exception_irq_entry with __irq_entry as a default {CVE-2023-54322} - class: fix possible memory leak in __class_register() {CVE-2022-50578} - ALSA: usb-audio: Stop parsing channels bits when all channels are found. {CVE-2024-27436} - net/mlx5: fix potential memory leak in mlx5e_init_rep_rx {CVE-2023-54106} - net/mlx5: E-Switch, Fix an Oops in error handling code {CVE-2023-53058} - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() {CVE-2023-53078} - ice: xsk: disable txq irq before flushing hw {CVE-2023-53102} - selinux: fix memleak in security_read_state_kernel() {CVE-2022-50201} - efi: runtime: Fix potential overflow of soft-reserved region size {CVE-2024-26843} - drm/amdgpu: Fix potential null pointer derefernce {CVE-2023-52814} - ata: libata-core: Fix null pointer dereference on error {CVE-2024-41098} - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs {CVE-2026-23286} - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() {CVE-2026-23304} - drm/amd/display: Fix system hang while resume with TBT monitor {CVE-2024-50003} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator {CVE-2026-43085} - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION {CVE-2026-31590} - l2tp: Drop large packets with UDP encap {CVE-2026-43080} - tun: limit printing rate when illegal packet received by tun dev {CVE-2024-27013} - xfrm: always flush state and policy upon NETDEV_UNREGISTER event {CVE-2026-43167} - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding {CVE-2026-43315} - xenbus: Use kref to track req lifetime {CVE-2025-37949} - wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512} - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS {CVE-2024-46830} - scsi: smartpqi: Fix disable_managed_interrupts {CVE-2024-26742} - IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF {CVE-2023-52851} - vhost-vdpa: fix use after free in vhost_vdpa_probe() {CVE-2023-52795} - ndisc: ndisc_send_redirect() cleanup - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() - ipv6: icmp: convert to dev_net_rcu() - ipv4: icmp: convert to dev_net_rcu() - ipv4: use RCU protection in __ip_rt_update_pmtu() {CVE-2025-21766} - ipv6: use RCU protection in ip6_default_advmss() {CVE-2025-21765} - fix: ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764} - neighbour: use RCU protection in __neigh_notify() {CVE-2025-21763} - arp: use RCU protection in arp_xmit() {CVE-2025-21762} - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() {CVE-2025-21761} - ndisc: extend RCU protection in ndisc_send_skb() {CVE-2025-21760} - ipv6: mcast: extend RCU protection in igmp6_send() {CVE-2025-21759} - ipv6: mcast: add RCU protection to mld_newpack() {CVE-2025-21758} - ipv4: use RCU protection in rt_is_expired() - ipv4: use RCU protection in inet_select_addr() - ipv4: add RCU protection to ip4_dst_hoplimit() - flow_dissector: use RCU protection to fetch dev_net() - net: add dev_net_rcu() helper - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency {CVE-2024-47696} - perf/x86/amd/core: Always clear status for idx {CVE-2023-53073} - tcp_bpf: fix return value of tcp_bpf_sendmsg() {CVE-2024-46783} - RDMA/umem: Fix double dma_buf_unpin in failure path {CVE-2026-43128} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() {CVE-2026-43453} - drm/ttm: Fix a NULL pointer dereference {CVE-2023-53095} - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak {CVE-2026-43035} - fbcon: check return value of con2fb_acquire_newinfo() {CVE-2026-43123} - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() {CVE-2023-52996} - perf/x86/intel/uncore: Skip discovery table for offline dies {CVE-2026-43079} - mm/page_alloc: clear page->private in free_pages_prepare() {CVE-2026-43303} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() {CVE-2026-23111} - netfilter: nf_tables: restore set elements when delete set fails {CVE-2024-27012} - drm/amdkfd: Correct the migration DMA map direction {CVE-2024-57897}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 3069cac74f3f070575fb35eae15bbf9cc1fd79c7768c348b9f71b36b1df02689 kernel-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm ac012e32134d98b16b16515b02d132e381b8f0cf8e93de79cdf379f1a62cb67d kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els4.noarch.rpm f5942c2d1cc7fed5dffad354c55c89afc50f36bc73f38fcf446f0f18b7774563 kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 6caf3b2d3e70a3a09fbf6b4602b3eda107877a46729c59fb6c0ddbb090d73ea5 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 0f56b137636beb88382ff4ff70664f7e18a0c7466a17f55392d35ba0820b146d kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 769e2f4b24c066b0e347f4c4f4f9f6a3874299c43f66754e047e5a1295a89c42 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm fa3a79291588a8eb75724e1e2fa61e9a342b8687d9a0e8da764477dce568f278 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm d094ba5f1018d298bc035bebb2ed2d3969ca435277dd42e3631753a9fbbea45b kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 088d646f2f5418cdf1db0b04dd6e4160812f5ceaeb016b722ca14750fa3283d1 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm c61d552ccc73b3f6d15aa35545bce9c2c9c22f4d8e6b82d8c3ecdd27888599c7 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 172cc0fe5ff3179539b2cb9e1c45c6bb693fe1f968e149453efaca45b0a9c6d2 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm b27e078fefea10bdc8cec17e6e9e6eecc7507889b07992e2f645e1ea1be52faa kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm c9a84ec9074fc489948abd928efc2befcb08c09657f432fa9db010d155195800 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 7ca756e77e956bbcc30086d5893a4eaf912c04386ad86ddb0fb4614b8f049097 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 9b835b2d88b904375a56bfb6d337487401141f3cf8db0191f4a706add520e7aa kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 5b3db9f8a6a6fa9ebf8a72f981cb7d2ac8bfda484f8bd9e3faf44151b412a9fb kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 577ce933d92e5b006a62dfb9cff253746aaabe9b7dc0b84d10a047af37b40859 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els4.noarch.rpm 403e11ad598fb709b4d5d45c2fe9b8326d53b398370f83a4839de5300273fd7f kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 3f98ac2f3b819165a0c09140a8e25c415f50277d1c36d70da4e29dc6d7b465c7 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 31fa8e805f00767ec1d245d891adb47145eb442586818df32b49dba6c0bb63b5 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 172d27f916ff4142b6e6f2e095c4c6d23365c9e9cd93723ca536f5ff6c75ce19 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm fc27cf33f296e6c08db3af1d03b1cc32e729b82b4162a75651131dd6d5ea6c18 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 5e2f02e09b77224f9fe9b4784a2d23fa710f4ae4c087405846d8788801f26ba7 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 5b720906b969b4b98a565d37e8b821105e1be01c85acd7ca2102f60b2ab2fa20 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm f943aac3c3027558d90210327eac1b418299cdd2013b6766921eb5e988414d4c kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 8085813fe5450a8a8e8ba6717027a0d431c258a3353b2b902602c27789c96101 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm e244a8f38356f1a319974f9d755756fbbad30a0849edc57b2cc0dbe626608cfe kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 63ea79d4fa6d2ba2d8125eff552a8a48515dc189af59c885955aa46066b197b2 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 7965f831e9fe3ecdb44df290206d19dd8be5d9dc7413d1b2be68597c4d3fa232 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 6dff1cf3cbd91b9d42285a9276e2926e3d4f9182e1ad95e8b16bec374da7dc27 libbpf-1.0.0-2.el9_2.tuxcare.11.els4.i686.rpm a44352ea0b2443f97a247bac899c70fe480b21100f0c75e31d7a668a5263f765 libbpf-1.0.0-2.el9_2.tuxcare.11.els4.x86_64.rpm b3466a1b3ca432bd4c5d582b17bcfcb9ab3a1584bcb5e6e3ab35c90acc08a9bc libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els4.i686.rpm ab668eb9b2c851d8677e1d512b3b660d9ded2c3df94d62b7def828d2462e52ca libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els4.x86_64.rpm f74fd1ff5ab205415194d6c9f0af0ad3bb4218f2eed87bcd6097eb0054af4098 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els4.i686.rpm e386f313ece7b9d942a692e0ba69c9984eedc33c3f29db4275eef4a6a4245630 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els4.x86_64.rpm 03d4f9f16dcf8287503910e6680f28ec66bdd405cde8f4a8f1dab092a0cc5fed perf-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 90b56b5f692189fef94e3507b164d444169101ac9affd379c2de0aa8841793a9 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 7d097bb2b4840798c2351416d156f50ebc5cc4114702e38c41a575529156d19a rtla-5.14.0-284.1101.el9_2.tuxcare.11.els4.x86_64.rpm 3f350c4ab89d160e9d48d074e1947eb6bf6d5994eff20b580f83398ca01588a7 CLSA-2026:1781514933 TuxCare License Agreement 0 - CVE-2026-10118: fix integer overflow in SplashOutputDev::tilingPatternFill via checkedMultiply on surface size and repetition count Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-10118: fix integer overflow in SplashOutputDev::tilingPatternFill via checkedMultiply on surface size and repetition count

0 tuxcare-almalinux9.2-esu poppler-21.01.0-14.el9.tuxcare.els5.i686.rpm 7b44728b2bf66056227e442e87cedf1efb660690166225f51bb01fa29a8ad81b poppler-21.01.0-14.el9.tuxcare.els5.x86_64.rpm b4b694db7f14137ec7fb56d36cb0019c29e7729f0c3235856a47ce31ef4f534f poppler-cpp-21.01.0-14.el9.tuxcare.els5.i686.rpm 5ff37669d5f17b334ca2c5964909f5c6c77a4ec573d38318e97468e4efa86a9b poppler-cpp-21.01.0-14.el9.tuxcare.els5.x86_64.rpm 3ec57876bfd27ef798ab9a6ff61f4e70ab42d46876d35f672e9ba6ac0e3b2ca4 poppler-cpp-devel-21.01.0-14.el9.tuxcare.els5.i686.rpm 0f803d641ee697f63e099fb405b99941457412cdccdc4c137503ce5e1990b213 poppler-cpp-devel-21.01.0-14.el9.tuxcare.els5.x86_64.rpm c505a50ac69847d54c83c71b8fd3e10b4278d66da40ba319830c8bb3688cb5c2 poppler-devel-21.01.0-14.el9.tuxcare.els5.i686.rpm a0bdf67592d7395d8b3d7c2891fe5e7b48a63e2d82f321e5a21a01388ce7bec1 poppler-devel-21.01.0-14.el9.tuxcare.els5.x86_64.rpm da89f2cfde8bfe858797b21cb663e323fb233beb2fb661064a19b1ae27fce07a poppler-glib-21.01.0-14.el9.tuxcare.els5.i686.rpm ec6d2fb39dd75969320bed3b79c26b15aa4a4c534293b324bc28bf6fd81b3431 poppler-glib-21.01.0-14.el9.tuxcare.els5.x86_64.rpm 91dba548a740c0c174651b2879361d042fc419fded4d1a4dc20dadfc7dc7660a poppler-glib-devel-21.01.0-14.el9.tuxcare.els5.i686.rpm bb71803fd3c305a23133bb532dfbdec94ee6949b6806ecfd86b70e69383c177b poppler-glib-devel-21.01.0-14.el9.tuxcare.els5.x86_64.rpm e4112db44218a3ea8a9a82d2e17e89b56a3cd5d012534ce9971cb4177341a8c2 poppler-glib-doc-21.01.0-14.el9.tuxcare.els5.noarch.rpm d8743936d51d311a15c5f63618a34589926359f8e82e6f430abece981b097d8a poppler-qt5-21.01.0-14.el9.tuxcare.els5.i686.rpm 09b66e610b397d3b39e8f65cd66865f656a16d7fefb5f40ab72c0046064823a7 poppler-qt5-21.01.0-14.el9.tuxcare.els5.x86_64.rpm 0efad580b94b6bbf7ee00038eea385623720cf241dd7355f5c5d96ac16674e1e poppler-qt5-devel-21.01.0-14.el9.tuxcare.els5.i686.rpm 8ef0c96898d8bc2b42596a3828c010f505849dda49050cd6395b049350303610 poppler-qt5-devel-21.01.0-14.el9.tuxcare.els5.x86_64.rpm 6d0837cb7d1eb33f41eb95c4957ef711920a000a0bea6fa0459fff429a412ec9 poppler-utils-21.01.0-14.el9.tuxcare.els5.x86_64.rpm 2501106dc7e0bd0be7a4263236b05beba1d0345aa55d37fb485253f340effe86 CLSA-2026:1781609354 TuxCare License Agreement 0 - CVE-2026-34986: go-jose JWE decrypt panic on empty encrypted_key Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34986: go-jose JWE decrypt panic on empty encrypted_key

0 tuxcare-almalinux9.2-esu skopeo-1.11.2-0.1.el9.tuxcare.els6.x86_64.rpm 8b7f5cce5c11439a1681b53f1ac775f4fc366bbe2ba9f53c8314ca5cfe2ee8a0 skopeo-tests-1.11.2-0.1.el9.tuxcare.els6.x86_64.rpm f6a16d5b841c94c9cb26608b198cf1fa91c7ce0cdaaa3c8c68770ad356930530 CLSA-2026:1781619768 TuxCare License Agreement 0 - CVE-2026-7321: remove the custom memory allocator from the WebRTC nICEr/nrappkit transport (r_strdup/RMALLOC/RFREE) that had incorrect size boundary conditions and replace all uses with standard strdup/malloc/free to prevent a buffer overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7321: remove the custom memory allocator from the WebRTC nICEr/nrappkit transport (r_strdup/RMALLOC/RFREE) that had incorrect size boundary conditions and replace all uses with standard strdup/malloc/free to prevent a buffer overflow

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els11.x86_64.rpm 43d4bbefca8e47c52795fb01f53e1c28629f0c9e7967441518e37bf3d2f907ce CLSA-2026:1781625156 TuxCare License Agreement 0 - CVE-2026-11824: reject fts5 leaf pages with szLeaf < 4 to prevent a heap buffer overflow on corrupt records - CVE-2026-11822: bound fts5 column-list nPos by the configured column count to prevent an output poslist buffer overrun Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11824: reject fts5 leaf pages with szLeaf < 4 to prevent a heap buffer overflow on corrupt records - CVE-2026-11822: bound fts5 column-list nPos by the configured column count to prevent an output poslist buffer overrun

0 tuxcare-almalinux9.2-esu lemon-3.34.1-6.el9_1.tuxcare.els3.x86_64.rpm aa5c9d7135b86674d18280892da214f5580af6fe43f2ace00c699b54a458ea08 sqlite-3.34.1-6.el9_1.tuxcare.els3.i686.rpm 3876a9c162a44e5167de1abcea1c47c5854920c37d0ead957a315086f3f56556 sqlite-3.34.1-6.el9_1.tuxcare.els3.x86_64.rpm 57816f9df39bdb3f0be603961706c664d8350918b9c3fd63ec93ac198c68d7f0 sqlite-analyzer-3.34.1-6.el9_1.tuxcare.els3.x86_64.rpm 056c461d2c007023413010600695db044050ff907936485afa473715cedc4304 sqlite-devel-3.34.1-6.el9_1.tuxcare.els3.i686.rpm 16fcdbedf743e045bfa6a6d4cc78b11d5585f9eb857c99d0d83e3369d4bdf772 sqlite-devel-3.34.1-6.el9_1.tuxcare.els3.x86_64.rpm 015939c7bcb72644b632be6436ac7ee3e9ef51baa70574b224c655adef903bd6 sqlite-doc-3.34.1-6.el9_1.tuxcare.els3.noarch.rpm af6f76efe19ba50e68c5121870f41ab7c790030ae9cf107d4ad98955d115247e sqlite-libs-3.34.1-6.el9_1.tuxcare.els3.i686.rpm 0481f5a1bf8b6ab467036f34805c0e6d628c8781a97518dfdeba9c8391e6bc57 sqlite-libs-3.34.1-6.el9_1.tuxcare.els3.x86_64.rpm bb047b508c463acb3a46bc08fe0d5430bdb85ffb0e6272b856d1d3d1945bca6d sqlite-tcl-3.34.1-6.el9_1.tuxcare.els3.x86_64.rpm 6f607744743e12708c366ce6da0fcd9964d66d464af04e57c4a2b888c447247a sqlite-tools-3.34.1-6.el9_1.tuxcare.els3.x86_64.rpm 7cdd760e1fce60f76a218d018b91c4d57ebc9f984c9af6015fdb52370d6064cb CLSA-2026:1781628379 TuxCare License Agreement 0 - CVE-2026-46433: fix heap out-of-bounds read in VLAN decapsulation memmove Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-46433: fix heap out-of-bounds read in VLAN decapsulation memmove

0 tuxcare-almalinux9.2-esu lldpd-1.0.4-10.el9.tuxcare.els4.i686.rpm 3dcfcfe8dafc7e597b48fda25812e77625647e2b78a0a12c26852ae3d2b4db1d lldpd-1.0.4-10.el9.tuxcare.els4.x86_64.rpm 4db5be20a0aff837c4e69c6965215f52356dc626bbbd9b31d3af01c2ec066c5c lldpd-devel-1.0.4-10.el9.tuxcare.els4.i686.rpm ce9212aebd1606cc9e453d706a374b9061bb1aef16148705e9c015a1bfa79883 lldpd-devel-1.0.4-10.el9.tuxcare.els4.x86_64.rpm 46d8c011c29c3fa17d563723155ed3d092247025770b0b94241088bb1fd531a2 CLSA-2026:1782137198 TuxCare License Agreement 0 - CVE-2026-44185: mod_ssl OCSP send_request - advance wbuf by the number of bytes actually sent (wlen) instead of the full remaining length Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-44185: mod_ssl OCSP send_request - advance wbuf by the number of bytes actually sent (wlen) instead of the full remaining length

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm e936adf8bd2e75a759a67d73f6d5a787a2418fdecd4f036769b1a2637c835986 httpd-core-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm d5eed73fb68f5131da69d8d1720edc8cd5477e9725e974862abee822434ddc3d httpd-devel-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm 68a58c78c01f1b3755c637665d0db47fcb4066fc968c2180ba6ae3b0c1ebac86 httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els16.noarch.rpm 936c7cf2975c4440a76797ee60aa2cbc6463b99198b9222db45cce38f6c4a457 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els16.noarch.rpm 6c477113b95f6d92c3f29450a80c2b55cf8b26c5fa858d8d7d63ccc947aa2d53 httpd-tools-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm d4731e7167d23002db7fe5ab915b8cc2b23d384bbe3afda5abf1804bce1d7ee3 mod_ldap-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm d448822aa09fc2fe3ca153e22fc785453ddf2c6b9e25d277957ab730314dc1c1 mod_lua-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm 0c53b6c2c8ec106297550300f5231d54517248ed2edf5a5e5fc3d68d1138c4a5 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm 952e071c61dce85e93ce879440d3d2ed60ce828b5423deab2368f098a2269cac mod_session-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm 1d6a073587a3ac4fa79aa20f0a8dc63f092d86ea53552afd038bc0d55d7c4a7a mod_ssl-2.4.53-11.el9_2.5.tuxcare.els16.x86_64.rpm 0bfb2bf142fb19350728f77dcb2bfcb3f7674011c8d4099862b8b51b1dabf207 CLSA-2026:1782140243 TuxCare License Agreement 0 - CVE-2024-54661: fix arbitrary file overwrite in readline.sh Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-54661: fix arbitrary file overwrite in readline.sh

0 tuxcare-almalinux9.2-esu socat-1.7.4.1-5.el9.tuxcare.els1.x86_64.rpm 643a070059b0572b29b1fbb53cc64691da596e86ee5eec971fc1b3dbec06a7f3 CLSA-2026:1782146244 TuxCare License Agreement 0 - CVE-2026-3012: do not trust CA certificates fetched over HTTP in the certificate auto-enrollment GP extension; use only LDAP-derived certificates and skip CAs with no cACertificate attribute Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3012: do not trust CA certificates fetched over HTTP in the certificate auto-enrollment GP extension; use only LDAP-derived certificates and skip CAs with no cACertificate attribute

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm a62595646367269461afde1d5823f18fc310164ac6fdd6dd1bf38fa2f41fe971 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 3f2ad409871b192d09494f0f6540d3ed2f728613884aea376dc855ceedf4f9cb libnetapi-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 60fd93e482e4ff6333ee9c9ca1bc7ff43bbb801d28373be86b57ec3625bec9e6 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm ddd9cba04f5a0e70b42015af1ac13cd8f72c646df57c11248874c00b9870eeee libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 1530c809973947f23f1eb2ca94221efc9210b2005559b5c61fc08029e9a5f6ee libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 1dfb7ced031c7e90e5edd0aeadbf5045fb05b1eca9b6eca5e5100d73efecf8ef libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm b4d885a059f387c9fb713feaecbf91bde1690a4be1fb9112d9c0226872466d70 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 273f918b0a1e1a0d29f1d665bba61a95c1495bce5a5aacba36a97fdac5907917 libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 5cc6941a4d4912ad86e9ca6eefb17d2823f94ea62e11d3a6d327dea056621173 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 5d5159c043fa488e2ebb6f42c92398e27c3dfcb606adaae38eb084afc2c004ae libwbclient-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 1dfd7d771073152e7fff14a595ca6d2392dc8ef1ac0de10cfd3b5840a877b500 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 626406289318ad0ec24ee0d518613554ca0394bdc09e51d6daa0e81c51834159 libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm e5291dd4646ed02a3d390ab37b122842c00089b7f24899a51d69c1c1c4fa1986 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 589b32aa2797f04a26059d725940cf3f1b69e7cf9aa9b6c9ec08eb06ff5cd769 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 8f6a0bf6e83dbab4d33a178746c483d23016a9653be6f6fe6992ba577e0de5b7 python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 45ed2cdcc27c26e8347972c23e528405d1c5840941043433e539d964d703bd51 python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 6d15da037684a0fef2a8cf95e52df4314709c5d330f2ac3855869bc88e5e87cd python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 70f973d5e904a4187c15356439632c990f7e1843cbb52d5d25a637a7771a3919 python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 9d771ba17734bb00a37e1fd536704c45dc60952fe4b311e0241ed4828e1369e0 samba-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm a52749a28076bf57d955bf226a327a898575299f491322986df2e829d674c789 samba-client-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm e24e2c472c3278ab21c823f2adb0ffa5ae14ff9c36743343613f7360dce594f5 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 31651e9abb1a3823f9e99c8ec893042d0de405c22b4a5c8c9ad82ba53e6fb4a7 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm e05c3fa351e00374069954ea8686bc1bde9f33bfef030b63c3f52321bf7f4fd6 samba-common-4.17.5-103.el9_2.alma.tuxcare.els10.noarch.rpm 15484e3611723c8314757d569d0dc6edf5971a708b5ca6815e931004c7674c88 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm f62dc121aa96108f2161249dd67f6814517f1c55e103fb85240f5f919dbc643f samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm b0abc4d26bc8734c45d75ce7173eb2e27900e144fc6d9980ce77536388dfa260 samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 22cee8a0813bf142cd2fd8c7f344cf319d1b472f32f2219c8f59a718743aff70 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 9e92b1829a7159ba7952c2bad6bb3b00ba7696d9270c3edc9780aaccac2a3f8d samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 3b785e536bbc3798fbae50ba84fb8736f9a3a48782754f0c3c972e2b233c4d7f samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 08e1216b2989bf205e8fa24ab38082b831b0b215b5a72c27d8a105aa29d72f7e samba-devel-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm b5c61dd9114b0e2024f78aa0b01662b1b91ee13ffbf10906424fa4dd0db19426 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 4313049ec5cd96aa331f19f58f819b6f500566eeb36d9ffb325013f1b42d49a3 samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 76a0435218559bfe5886480667f6a52088bf7bee0bb7476c259978f8aff6a531 samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm a6f614585c16bd25f821a8219a93b0c448defe43280ace45f9cf36072da8d842 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 09b994ea5cd922f18566302fc97421bd228b4da58e8dffc856b18923bcecff07 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm b7688a3cc3553a1fc8dcf429c4bc6bea3e0666c7a1f3d4104eeb3a618d608bca samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els10.noarch.rpm ce7282f52dc5ad08fad33b7bc2165f25a8e4b3d0d5d30aa4f8c7f74cacfd9c27 samba-test-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 29705b9acebd60dd07645e12b7a7cd079af17087bf5d68c945ea7defda4fc851 samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm dac8b4fc3b963aa7429dcfb8db68a249d58f61a0753cd6eca203fb810729e1ae samba-tools-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm aeabf0abb27a164f79d03494f89c4d862e1145f1eace6b62a3610ed8351252d1 samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 890ada3067c3c376d1ef91f04f9b41c9acb9e94448a3a0d05bb8115b9d1057b0 samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 2ae06b5b93071143f475a94a6539ebe4a5ade510716518636ca85e9948628e93 samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm d21ab62a1f2e0395e87c7ca2827f791b6cd452ee8b9b399c4289e6dc0cbc4a48 samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm c9d37d04af5e663b331659299a4afd5a569ca77a87bfbb9d3524ec2795c57789 samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 9741c0a71e06e91cb57f8b63e1c121f050d78e35d7a96ad6e34cb0558e381652 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els10.i686.rpm 424ee2a2837d7bb007470a80b85a8a0fb6a4095243f96572afc74c8b3774bbfe samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 09dc2792ddb770a039c055db7aa0d3bfefc015ef97addc557a9a306d124f0183 samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els10.x86_64.rpm 29308cfca01f4b49f2cbe221893055863e80bb3acb1f43deda0bd63099df8a89 CLSA-2026:1782147734 TuxCare License Agreement 0 - CVE-2025-8677: fail DNSSEC validation on a matching but cryptographically invalid DNSKEY instead of skipping it, preventing CPU exhaustion from malformed DNSKEY records in a specially crafted zone None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8677: fail DNSSEC validation on a matching but cryptographically invalid DNSKEY instead of skipping it, preventing CPU exhaustion from malformed DNSKEY records in a specially crafted zone

0 tuxcare-almalinux9.2-esu bind-9.16.23-11.el9_2.2.tuxcare.els13.x86_64.rpm 4d458f36dff97cc9de8a201d5c0ca951d3ad616c6612cc9546c274962d9e2661 bind-chroot-9.16.23-11.el9_2.2.tuxcare.els13.x86_64.rpm cffc4ad52b29b315ebf96a5acb3905910d9dec9cdae633d420cb69254d1f38f4 bind-devel-9.16.23-11.el9_2.2.tuxcare.els13.i686.rpm f0c8f5152c45564ef67213d90d4951a83e8e9c9bf4b47ce11888adde5d4571fd bind-devel-9.16.23-11.el9_2.2.tuxcare.els13.x86_64.rpm 7a0fdde409c06a5a9704b6230e451ae51b1dda67fe406906fde16f0c18e2aa90 bind-dnssec-doc-9.16.23-11.el9_2.2.tuxcare.els13.noarch.rpm 379ea48744e9340c6a8715214288376e8fb972bca3c0ab20dd3e2390d7c12cba bind-dnssec-utils-9.16.23-11.el9_2.2.tuxcare.els13.x86_64.rpm 3377166ca355df89db2392032d77db44b4d080a74aa3d24930e7c7cc45411033 bind-doc-9.16.23-11.el9_2.2.tuxcare.els13.noarch.rpm 1d5c8c184b87105a48c29e2ef863a656f069e46364907b7021c8ed6df990fa8d bind-libs-9.16.23-11.el9_2.2.tuxcare.els13.i686.rpm 3aab4dd9546afda8fa40d5f354c9de8db35114ad110d000240b7ff2e98b0661f bind-libs-9.16.23-11.el9_2.2.tuxcare.els13.x86_64.rpm d8361cb16f2d2769d67fcc18cca203c8cbf5eb973f9304d4648192ac46a6ab23 bind-license-9.16.23-11.el9_2.2.tuxcare.els13.noarch.rpm 8b0414e4abba6a65cb2a4db26dca031dd99076071e651d185e7fbf5a3caa7fa2 bind-utils-9.16.23-11.el9_2.2.tuxcare.els13.x86_64.rpm 29672acce73217836988d5cd5050356acacaeee9360875bf1f681d90a6dc5302 python3-bind-9.16.23-11.el9_2.2.tuxcare.els13.noarch.rpm 5ca71da91f096378754d4f0f02ad77e8655f3dc600d3fe52cef32628748bedb9 CLSA-2026:1782152259 TuxCare License Agreement 0 - CVE-2026-45445: AES-OCB IV ignored on EVP_Cipher() path Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45445: AES-OCB IV ignored on EVP_Cipher() path

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els18.x86_64.rpm 3d21f2c827e24e8fd5b9d08f5bfb81bc7c4bd0eb7edb5d0ba8488133a65c902d openssl-devel-3.0.7-20.el9_2.tuxcare.1.els18.i686.rpm 058347d1e789d6bbdc2e091835c5ca8c4b96f157483624a60c8705da26460d38 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els18.x86_64.rpm 306ab488653fd088803c7bba18bd0cb76d88867ed2c027bb1f5b309fb665a6bc openssl-libs-3.0.7-20.el9_2.tuxcare.1.els18.i686.rpm eaa8c8464cbdb4403c50305aac78e323b59d294aab0f821eaeba102a20ea853c openssl-libs-3.0.7-20.el9_2.tuxcare.1.els18.x86_64.rpm e0f23f6885b2f08fdbc09323c8640dacfd7b6dd529b279f24ea2bfcc361cb231 openssl-perl-3.0.7-20.el9_2.tuxcare.1.els18.x86_64.rpm 29a12a3da6d592e7c92224b398ada165936112c38f871bf17c860e9222e30549 CLSA-2026:1782153378 TuxCare License Agreement 0 - CVE-2026-44186: fix infinite loop in mod_proxy_ftp when scanning the FTP Retry-After message for the delta-seconds value Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-44186: fix infinite loop in mod_proxy_ftp when scanning the FTP Retry-After message for the delta-seconds value

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm 82b46ac709cc1b505683b6a02683c4df29f9fe41e1cdb7cb7d1da5e6de98a279 httpd-core-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm 817e6d8b47304aff1dab46aee2a43b61fa5d63b3c8406ae4856d0898d9d6bd50 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm b406b156dcd412b3de210be2c8c89d8fa128ac6f3ae6136f6d907db863e9557f httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els19.noarch.rpm c2499378dc825df18627863dca64bf1d06fd317c969c5e08c226391c12ef94d8 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els19.noarch.rpm 006cf025f8b560db43b193b15650abc0fe403f05df5e3465d5c9b48323c9903e httpd-tools-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm 9f42adac7cb5cf8a3e1213d707097eddbb72ae05509aca841846abe818f1f703 mod_ldap-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm 99dc3227587b0ae28308f101c214fddd0b3d13d6ad3d76417782596aa81511fb mod_lua-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm 362fd5c4cff36a58286de9198f0516c82789c19ca904daeddae9f8cdfde8cff7 mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm e37cb544b97a024de096321fe42b29a459f982be7adc08262d06de09066ac8d0 mod_session-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm ca8ec725f10b179d24c22afe5f6419bea086eaecef2894e85ac7357fcf5530ee mod_ssl-2.4.53-11.el9_2.5.tuxcare.els19.x86_64.rpm c8507cb5f1e8877ba1db360015f215b62f4747d754fc2a743b5fec69438dfc0d CLSA-2026:1782204526 TuxCare License Agreement 0 - CVE-2026-4408: deny, mask and/or single-quote the username passed as %u to 'check password script' to prevent remote command injection Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4408: deny, mask and/or single-quote the username passed as %u to 'check password script' to prevent remote command injection

0 tuxcare-almalinux9.2-esu ctdb-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 10fc560e40353453d8e68cc320f99bd9a88facc888e1fcb985560f5b45320e3e libnetapi-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm 285ba563d6c58716128b7ac3d85783b43269fc0d8be26baaccdc20c3d0aee5a3 libnetapi-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm b1f16a5107e65fb4a49d704f4e7ee0c1d3ad491a6cd93e7759bc64eb53d8166c libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm a61d2ceec5d21dad71a97bdd3f3b4774f41c3fadcbea471ce1de8a09372c6414 libnetapi-devel-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm eb19f7e09e4132dc190ac087ce0c4445d7af5287135bb7a8fe8cac83aeafdc52 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm 76fa4e6b13687505baea701504667c9f50ea54d08207705f399b05c5d5c65f37 libsmbclient-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm a54f85524bd5970d3f25482b3f9fb938347e62bda1ca4f6922e80cc6e498fdcb libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm 3a5b008fdd6f3dfebeeaec0b534d69e8a0bc032cc1c9459e3dcabb13d463f27b libsmbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 3ec07831b4b08eed3cb6c8132894d01aa80085a6d6e6b0e0f45e814bc5d0a64b libwbclient-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm df137ce7bdf41145e583d92ed836a755181ed9b992938b4ab13bda0e317917b9 libwbclient-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm a65a7eedf92d38da1df69541dd6fd90982150a6a606f5d2f6b6dd643ae3f9e4d libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm f3819852a7f0fa6383b89eaba9e79084431cee0ea107b236da5784cbe522e2ab libwbclient-devel-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 605b40ff865721e196dfe03c293e6d08d52de09749326a9f7e2979c4a698e8fd python3-samba-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm fb297c77ee222085f0b591be285a919992153c7fee62b3760e965a7b3c3d98a0 python3-samba-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 61a3ff84cbefe8c9d8b6561d5a9bb4479a2c3611eff22740aaa958248782a854 python3-samba-dc-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 99e99449246cf3dbe1899a01407c631c158f13d29b4e54e90fa014eb8a37221d python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm 9f07795759b0f2fa9ee13af1ffc0e0f7216f80a376f629cb08627f1eb3fe87ab python3-samba-devel-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 13f12f2c515abe7add3d8126c350696af4ee1d7a971a80c6d6fe5ffb2a725dd4 python3-samba-test-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm eb5e032e9b8a843ce1d940f87910cfd7a7a1cb4f0a8aac06caec6b368617c64f samba-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 2a195cdae9a070e69cc48101766a54cb1682c99c682163f324e311e625036584 samba-client-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm cc3fd4bd9307f108f72d2738b06285f741c8c2219d07d13c2bc4d180352c5660 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm f9be08a306b3dce7fca0a1e9df8223cad69c82db121b2b018af9ee33e7f9acb2 samba-client-libs-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm b91fc7a9b5facc994cafbf17e8634ebbafe0fd97d2eadcfb8e5209d33518fb0c samba-common-4.17.5-103.el9_2.alma.tuxcare.els9.noarch.rpm adc0c00b48a0174628ebd5906af61dfed54262656243e153ef148ae054d35409 samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm 86f9e8425c0c91102673858b842df5bd47eacd9ea2d9a7762f17abdf0b76a76b samba-common-libs-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm f15e2e825567c058991de2c63104e8cb4c189dcc2eb66e1d745a4902dcfbd900 samba-common-tools-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm f3406f59ddf804186dc6cd8170c19185b883f0bf5c0e28adda23451d0acb8b8a samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm 6fbaca7bf5b37e47c069a9ce5a6d655111b05d5eea802c376877e8af4d0e7659 samba-dc-libs-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm fba23928934fd5bfcb8ff38b1503a7c3dbc298e86591c2cf67da3ce6e9a1bd8e samba-dcerpc-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 34c52bc5afd4e313937d8fd2252f85689452fdad642c87dfcdc2b6d452252a8b samba-devel-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm eff175c18f6d0e304856cf219db1f75e4af524fa7989287d51fc6401fbae27e3 samba-devel-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 79b76a9508b01ffa7f7a5b30e202cc6a2b39ef3b961b9a786bc92c4e214c43b4 samba-krb5-printing-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm e65087624cc976544fd35b13275f69e6b4abf6775362feacffd34ba89f758b56 samba-ldb-ldap-modules-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 52e4d6f22e7ccd6c2b3488b89c91cfa51fde800df60024121b36a0ff2afeee98 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm c2cd93fb976911cbd0dba5bae016a6aedc1217060d1168003adde81f01451a69 samba-libs-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm a527ce49049a253bd69d33f89a239ba8c03bf177b4870da207a39b924bbcd977 samba-pidl-4.17.5-103.el9_2.alma.tuxcare.els9.noarch.rpm 97b3f3ca5505593eb9ccaab59c3c613c0903f563bcbc08db5d8155432b37cd20 samba-test-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 96f14dd07ba0e9ed4eb8e78b2cddca97853eaea896a6c65c5c2b96ae6624d742 samba-test-libs-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 048c243b0b78763a505a63f0c757729d5eed2e461537e0f579ff5e8a6cc135ab samba-tools-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 79eb9b462e44b3943cc625994aaf0e181f06227c358c8d2c8fa1e5518be50270 samba-usershares-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 53f16263e28ea3e83770a45ab6fd9d7684c9151b37a4026edde1749a8dcfd09e samba-vfs-iouring-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 9b520132ed0973088a8432bce1f6fcced7e75831bf780cfec4d5bdf368e0643d samba-winbind-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 09b4b8b5f9eaf73b88c8d98b110f7c438eafc6a3309f695b758b0be04fdba761 samba-winbind-clients-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 95d4bf66624125bf34fc5b8af9a963a6158354ec43c4efb211ca56c8e57ef334 samba-winbind-krb5-locator-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 68c0a07e188435ebdda442c6dbff2f0a41da3e92a1ae50e9052d0e3ceb569d9d samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els9.i686.rpm ccd89316fa4be86ffa851f4ac6b204876f01279963947562c5b500a694042df0 samba-winbind-modules-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 71ef80f9941f9a3422c6831a595423d4a1d31d6c65924d0e24aab0714cdbb2a9 samba-winexe-4.17.5-103.el9_2.alma.tuxcare.els9.x86_64.rpm 492b6da66face251e06141fe8566a76579e35dff1b5e12ef87b971daedfc6790 CLSA-2026:1782210649 TuxCare License Agreement 0 - CVE-2026-12299: WebIDL [Pure] over-optimization on getter/function calls; remove [Pure] annotation from blockedNodesByClassifier, getAttributeNames, flex/grid container reflection, innerText/outerText, HTMLInputElement.height, and MozEditableElement.editor accessors (Bug 2043139) - CVE-2026-12311: Linux sandbox broker did not enforce path-count per operation, allowing a malicious child to send an extra path; add OperationPaths() guard and preserve FORCE_DENY/CRASH_INSTEAD bits when intersecting both paths' permissions (Bug 2040177) - CVE-2026-12328: rollup of 11 mozilla-esr115 memory-safety fixes shipped as FIREFOX_115_37_0esr_RELEASE - a11y BindChildDoc cross-PBrowser guard (Bug 2038477), DOM bindings ObservableArray proxy cleanup on finalize (Bug 2042268), reject remote print in RecvCloneDocumentTreeInto (Bug 2042929), WebRender RefPtr lifetime for previousTexture (Bug 2042451), ANGLE redeclared built-in type checks (Bug 2039726), ParserAtom allocate length guard (Bug 2042858), VideoBridgeParent UnregisterSingleton split (Bug 2042965), ffmpeg ImageBufferTracker refcounted (Bug 2041373), IndexedDB deserialization done-flag wait loop (Bug 2043213), WebGL maxColorDrawBuffers clamp (Bug 2042782), and ANGLE gl_SecondaryFragColorEXT rewrite (Bug 2029402) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12299: WebIDL [Pure] over-optimization on getter/function calls; remove [Pure] annotation from blockedNodesByClassifier, getAttributeNames, flex/grid container reflection, innerText/outerText, HTMLInputElement.height, and MozEditableElement.editor accessors (Bug 2043139) - CVE-2026-12311: Linux sandbox broker did not enforce path-count per operation, allowing a malicious child to send an extra path; add OperationPaths() guard and preserve FORCE_DENY/CRASH_INSTEAD bits when intersecting both paths' permissions (Bug 2040177) - CVE-2026-12328: rollup of 11 mozilla-esr115 memory-safety fixes shipped as FIREFOX_115_37_0esr_RELEASE - a11y BindChildDoc cross-PBrowser guard (Bug 2038477), DOM bindings ObservableArray proxy cleanup on finalize (Bug 2042268), reject remote print in RecvCloneDocumentTreeInto (Bug 2042929), WebRender RefPtr lifetime for previousTexture (Bug 2042451), ANGLE redeclared built-in type checks (Bug 2039726), ParserAtom allocate length guard (Bug 2042858), VideoBridgeParent UnregisterSingleton split (Bug 2042965), ffmpeg ImageBufferTracker refcounted (Bug 2041373), IndexedDB deserialization done-flag wait loop (Bug 2043213), WebGL maxColorDrawBuffers clamp (Bug 2042782), and ANGLE gl_SecondaryFragColorEXT rewrite (Bug 2029402)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els13.x86_64.rpm 17222c6264dd5986fa07cb61ee23ef107423a73590e9250c8ffeddf14026d06c CLSA-2026:1782212784 TuxCare License Agreement 0 - CVE-2026-44631: fix buffer underwrite in ap_regname() caused by signed char regex capture-name offsets producing negative capture indices and corrupting memory; cast the name-table offset bytes to unsigned char and reject unreasonably large capture group numbers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-44631: fix buffer underwrite in ap_regname() caused by signed char regex capture-name offsets producing negative capture indices and corrupting memory; cast the name-table offset bytes to unsigned char and reject unreasonably large capture group numbers

0 tuxcare-almalinux9.2-esu httpd-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm 1ab5c3c20b518019456bd484d51ea2217a4fa374ad9332a4ac4c38d8a8983f13 httpd-core-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm 5a7a174b3479fafb04ae0e60d15e0894efe841bd9438e343e158d72feef90443 httpd-devel-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm 9f31c0f6289c8b61a58f49d3373467b256723337c44189a0b7915d62044525be httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els20.noarch.rpm be529aa02c3be2cb3c8956679ade3b79d799cf696c055b9acb97eec6bc734bf6 httpd-manual-2.4.53-11.el9_2.5.tuxcare.els20.noarch.rpm ba977bdda9178c1732b26c2834c3c5dbc7672daaf59a80ba12bec91f4b8166a0 httpd-tools-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm 12b0892de20947acf2ff5a5dbb44a0d79078ddd234dbaad4fb09be7ec6d5466f mod_ldap-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm cec2a1cb3b3599d6f7468e66b03374236763a92aa95e3d3b4d2a6997b3e49709 mod_lua-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm ed35550cc259c0afb3fafb9626793e4a7193a3a55510c7071d5f56d7e7d58fdb mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm 2d300d5d99a43fa169a8a3dc7ad4dc6b75f58da6192991a58e8bf9978b5cadc0 mod_session-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm 16c17decf1a1d08fb55f5ccfdbd827853c11d64ab9bfe83335c47c3cdf6eacd3 mod_ssl-2.4.53-11.el9_2.5.tuxcare.els20.x86_64.rpm 8e21d80416bcaa6952e31b0558aac1b86b48b35856a10189d06f8872e3bfbe63 CLSA-2026:1782219956 TuxCare License Agreement 0 - CVE-2026-9064: limit number of LDAP controls per operation to prevent DoS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9064: limit number of LDAP controls per operation to prevent DoS

0 tuxcare-almalinux9.2-esu 389-ds-base-2.2.4-5.el9_2.tuxcare.els5.x86_64.rpm bc682fb4d2d28d2fd57841a3a016a7f50b906e6b9d40000126867d4a19948139 389-ds-base-devel-2.2.4-5.el9_2.tuxcare.els5.x86_64.rpm fea049b0ff9b0b11ab3e4fc0266504d4471e1af808f373e2b780dad570097cf4 389-ds-base-libs-2.2.4-5.el9_2.tuxcare.els5.x86_64.rpm e423cbb9b2b63a2a347a1b026687d19bd90bc1e2e4e64e514db1d72c6b1af332 389-ds-base-snmp-2.2.4-5.el9_2.tuxcare.els5.x86_64.rpm 42c7cc20fb0d0471483f0615751831244dc8ca265b70f4336e581783fa41a09b python3-lib389-2.2.4-5.el9_2.tuxcare.els5.noarch.rpm 578c12f99610b7bc461758e2db1a5df4fdba34431c2523898434b7f7a12e307f CLSA-2026:1782221814 TuxCare License Agreement 0 - CVE-2021-33641: fix use-after-free in more_curly() in reader.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-33641: fix use-after-free in more_curly() in reader.c

0 tuxcare-almalinux9.2-esu byacc-2.0.20210109-4.el9.tuxcare.els1.x86_64.rpm 4d0b6ea78705945103c61baf2ead609c44d60d20b5c2c644998e9da14edc326a CLSA-2026:1782225575 TuxCare License Agreement 0 - CVE-2021-36373: resource exhaustion (OOM) when reading a crafted TAR archive's PAX extended header - CVE-2021-36374: resource exhaustion (OOM) when reading a crafted ZIP archive - Drop the GetTest (network) and ImageIOTest (JDK ImageIO) unit tests Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-36373: resource exhaustion (OOM) when reading a crafted TAR archive's PAX extended header - CVE-2021-36374: resource exhaustion (OOM) when reading a crafted ZIP archive - Drop the GetTest (network) and ImageIOTest (JDK ImageIO) unit tests

0 tuxcare-almalinux9.2-esu ant-1.10.9-7.el9.tuxcare.els1.noarch.rpm 0a76388caf3d7f3b66a7d4dd99152091c56a565c81002a0560d3318efb44837a ant-antlr-1.10.9-7.el9.tuxcare.els1.noarch.rpm 5586cd5d6404d7320d4527da22d88c37983c74d7592a577b35ee89ed39fbb293 ant-apache-bcel-1.10.9-7.el9.tuxcare.els1.noarch.rpm 316feaab3569c5c4dd688c6f788c5c39dd44af3af1d0f558654f9851d3c0aa51 ant-apache-bsf-1.10.9-7.el9.tuxcare.els1.noarch.rpm 4de8484bf1d659e116f470ec5c2e161cdd8507f6d718436c83f77594b355f2dd ant-apache-oro-1.10.9-7.el9.tuxcare.els1.noarch.rpm 335e806aa10eb07b362ac1215c2045fb9472950e1635416cce7914870d1f8977 ant-apache-regexp-1.10.9-7.el9.tuxcare.els1.noarch.rpm 53d7e9b2355a78b937a9056f3e475daa299e6c684e131939c77c080f1256fe42 ant-apache-resolver-1.10.9-7.el9.tuxcare.els1.noarch.rpm 72bb542f6997afcbd50451e3f225cbd7da07473812da38dc0eeb2e879779c01f ant-apache-xalan2-1.10.9-7.el9.tuxcare.els1.noarch.rpm 297523e3bc0d85f1b67d5ff903e01294fd2d88e1d9a13eca3d5e06531ab4f994 ant-commons-logging-1.10.9-7.el9.tuxcare.els1.noarch.rpm 7ad0b4c2b7ae154e71261fb87d06d5daae9be796e0e7477dcfad2fc7017748a0 ant-commons-net-1.10.9-7.el9.tuxcare.els1.noarch.rpm a8ec8da7628bdb993e35b0585efc419e903342b1d5dced39826015b9eaed2532 ant-imageio-1.10.9-7.el9.tuxcare.els1.noarch.rpm 7956cfcec62bd364e6fbc70fc9edc68903b753955c8e7559b11c28d15729b474 ant-javadoc-1.10.9-7.el9.tuxcare.els1.noarch.rpm d1c4629b977eb34588a2edae53dcedbc3e91841006200843fe5284ecdeffb7ce ant-javamail-1.10.9-7.el9.tuxcare.els1.noarch.rpm d910307c1aeb917ad7848690f0ff877a42c007696e25896cdaea31b9909f0c8c ant-jdepend-1.10.9-7.el9.tuxcare.els1.noarch.rpm 0a98e7b45692dbcedfc0f20112a896bf486969a5ba19c9bfab328886c873d67f ant-jmf-1.10.9-7.el9.tuxcare.els1.noarch.rpm 12af5e1d61ad4279c0a3c2ca83eefd6c38693007860bf470f7ba558a6e573034 ant-jsch-1.10.9-7.el9.tuxcare.els1.noarch.rpm c4b7b86cf5d8937513eee2983d7660d64f374745459d96fce67b880f766529d5 ant-junit-1.10.9-7.el9.tuxcare.els1.noarch.rpm a906ff15d74930b821277412cf6d6bb0bafcb7c46afc68730550fefd0306a2a4 ant-junit5-1.10.9-7.el9.tuxcare.els1.noarch.rpm 5e0b87b77bad0fb5c6af33eb516a22344bceba5e4ae29cb755a82f773286697a ant-lib-1.10.9-7.el9.tuxcare.els1.noarch.rpm 4bc80fc73ade07998fa46dcac8aff1b10259175bd445433de434cb06f416e98e ant-manual-1.10.9-7.el9.tuxcare.els1.noarch.rpm 61288c2e034f580bd11ab4a88aaf02a5d8957a3331031277057d3458ccffec6b ant-swing-1.10.9-7.el9.tuxcare.els1.noarch.rpm 7a43ccd05fdadfb58dd942744c4691103784af87722c5699f07b1cf1d635dfef ant-testutil-1.10.9-7.el9.tuxcare.els1.noarch.rpm 06599d32781a6ccb8670ed96dcff2a7422208e5dcbe3cc7872611782b58ee008 ant-xz-1.10.9-7.el9.tuxcare.els1.noarch.rpm 689c98ca8be59a368efad701a15f32fb3ecfa589286486e449d913924c74544a CLSA-2026:1781075599 TuxCare License Agreement 0 - Update to MySQL 8.0.46 (April 2026 CPU) CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34267 CVE-2026-34271 CVE-2026-34276 CVE-2026-34278 CVE-2026-34293 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to MySQL 8.0.46 (April 2026 CPU) CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34267 CVE-2026-34271 CVE-2026-34276 CVE-2026-34278 CVE-2026-34293 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240

0 tuxcare-almalinux9.2-esu mysql-8.0.46-1.el9_2.tuxcare.els1.x86_64.rpm 3191fa73bc0e7113435307c92c43523e5c6fd94e20d91bfb5778f421948e91f7 mysql-common-8.0.46-1.el9_2.tuxcare.els1.x86_64.rpm 07c2ac1111de713968a81aaec631362e7d9c91f281ef5aee12294d24a6cce133 mysql-devel-8.0.46-1.el9_2.tuxcare.els1.x86_64.rpm 984a5c29f5ea09e5e066ef8a062935f4db88d611d2d345d65819d8a897b64e9f mysql-errmsg-8.0.46-1.el9_2.tuxcare.els1.x86_64.rpm 6a879606d81d62e3e96b3aab79d3a84f658b4e50334c89f8dc6b3285f2d6eb8e mysql-libs-8.0.46-1.el9_2.tuxcare.els1.x86_64.rpm 583a7d319f9e0ea977a9fdc3c0a4c44a832494f2a1be649464d2cfb504ba89ad mysql-server-8.0.46-1.el9_2.tuxcare.els1.x86_64.rpm 6ac87ffd72fffa7ce86b96fff4de351ac63ece939f2ec8a582c025f187427717 mysql-test-8.0.46-1.el9_2.tuxcare.els1.x86_64.rpm e6b8efd517ebb4ff7b3b3f7a97c9a5ffd59377eb0260650ebc5ca9f112ed99ab CLSA-2026:1782404883 TuxCare License Agreement 0 - CVE-2026-12330: out-of-bounds write in intl/lwbrk LineBreaker ComputeBreakPositions break-all path when GraphemeClusterBreakIteratorUtf16 yields a position reaching End-Of-Text; add bounds check guarding the aBreakBefore[cur + *pos] write (Bug 2029326) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12330: out-of-bounds write in intl/lwbrk LineBreaker ComputeBreakPositions break-all path when GraphemeClusterBreakIteratorUtf16 yields a position reaching End-Of-Text; add bounds check guarding the aBreakBefore[cur + *pos] write (Bug 2029326)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els14.x86_64.rpm 3c2c3d4775716b5466a11351c9c05b595b09f04c9b0c431237b3a682b916342c CLSA-2026:1782469374 TuxCare License Agreement 0 - CVE-2024-27280: fix buffer over-read in StringIO#ungetc/#ungetbyte by correcting the buffer expansion size in strio_unget_bytes Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-27280: fix buffer over-read in StringIO#ungetc/#ungetbyte by correcting the buffer expansion size in strio_unget_bytes

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_2.tuxcare.els15.i686.rpm dcb52575bdecc3cc1be5440b83bda31dce2b427dc97d0afdeea34b9279ae36d8 ruby-3.0.4-160.el9_2.tuxcare.els15.x86_64.rpm eb8dc0c8daa064b44e305f263d1a9179cbfaad8230d30d0083ca1d89434f2537 ruby-default-gems-3.0.4-160.el9_2.tuxcare.els15.noarch.rpm 34a7a457c5def8c825a81fb8cb4e8f5575b07772a4e759fed9cf46d32796f518 ruby-devel-3.0.4-160.el9_2.tuxcare.els15.i686.rpm 71d49d5e62749159e4e999e222db17e9948a8a72e7d8af43a5262c9206a1d133 ruby-devel-3.0.4-160.el9_2.tuxcare.els15.x86_64.rpm f5b95e7a861aae70ae4cef0fc9a0a6091d9a4fe5133e9744058fb29dfbf29c8e ruby-doc-3.0.4-160.el9_2.tuxcare.els15.noarch.rpm 7128351abce054eb2c94f0f2fc664f539cc37446971c3ff6eb2d75b7fdce82d1 ruby-libs-3.0.4-160.el9_2.tuxcare.els15.i686.rpm ba2b3138dff26468e611e612ef3bcf62952107bb68d4261821ef900b666e1fc5 ruby-libs-3.0.4-160.el9_2.tuxcare.els15.x86_64.rpm eca3cc7a8f126eb660cde4fcae90e0be4a706a7e99e2985db1056f351826dbcd rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els15.i686.rpm 061244d76f422012d0947d7945377b6f9152860fb4b04e8c7d9df85dfc9f9ddd rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els15.x86_64.rpm 6ecc0520c1cee5c5a8af02c8784a5a4418f10bdca287ae7b6c51981b86431fd5 rubygem-bundler-2.2.33-160.el9_2.tuxcare.els15.noarch.rpm 0085c5c119071008e5386ec205409982c8c2e7e1b377dd152c9016ec4e6887f6 rubygem-io-console-0.5.7-160.el9_2.tuxcare.els15.i686.rpm 525a4364eeec533ca720b05f0daef4de748fd80b06264ef90fabe373fae99530 rubygem-io-console-0.5.7-160.el9_2.tuxcare.els15.x86_64.rpm 3230401483f745f2c4e9694a988ef2a79c72926b08022610ce6880e3904bee5a rubygem-irb-1.3.5-160.el9_2.tuxcare.els15.noarch.rpm 97f39ab5167445e157df4b7bb42874a979af295270bbde06230ada5cfb156b5f rubygem-json-2.5.1-160.el9_2.tuxcare.els15.i686.rpm 29eb9a5d3f1b23724a8f9c75cd750a6bb217717509e679d6a054143765fb5949 rubygem-json-2.5.1-160.el9_2.tuxcare.els15.x86_64.rpm b0ad90a69addbc96e7788e49e3fb28fce09ab509ab9949c59ec509e3340d444d rubygem-minitest-5.14.2-160.el9_2.tuxcare.els15.noarch.rpm e2194660927732ce7dabce17db5acbd67fce6cedd3ae06c7950d997fec7628b0 rubygem-power_assert-1.2.0-160.el9_2.tuxcare.els15.noarch.rpm 6164d1d1233f03a2f845119fd81eaa70b46ff765b3c1c7a39d87459a1c2737f5 rubygem-psych-3.3.2-160.el9_2.tuxcare.els15.i686.rpm bba03d3b084117fa7c51a03ac32aeb8fb92d89fc7e8168b8922335f33f80018a rubygem-psych-3.3.2-160.el9_2.tuxcare.els15.x86_64.rpm 47067772ac068c288e1879e1fae00def33f4ae49ad69d441bf6db647d299995b rubygem-rake-13.0.3-160.el9_2.tuxcare.els15.noarch.rpm 674805aa7e951857acc4068c4fd630960d8a412bbf33a880ecf5556e22a693bd rubygem-rbs-1.4.0-160.el9_2.tuxcare.els15.noarch.rpm db2bf9dd718775e44c5de5fb64b7bae8bd39f129d9273bbc7021b6c7e87a7313 rubygem-rdoc-6.3.3-160.el9_2.tuxcare.els15.noarch.rpm 808461864045c770668fbebed6c89c8203ca153c1bdba2b4424756b189436150 rubygem-rexml-3.3.3-160.el9_2.tuxcare.els15.noarch.rpm 583188da771536d32d8801ab64571308afbdc8f454910d31593fd94fbbb5a3e9 rubygem-rss-0.2.9-160.el9_2.tuxcare.els15.noarch.rpm cf0cbd2399fcca45831b0b43b4a382fcee747056b7727afa0b5acd3dc93190a8 rubygem-test-unit-3.3.7-160.el9_2.tuxcare.els15.noarch.rpm c18a044803e5608cb18a1df32beeba69a42530f849f3393eb04885a78a70f5d2 rubygem-typeprof-0.15.2-160.el9_2.tuxcare.els15.noarch.rpm 0ee0c8b4d5d09a518e4fdd0dc0e6f66d24e743164f0cec6de791929d919732a2 rubygems-3.2.33-160.el9_2.tuxcare.els15.noarch.rpm e4ebd8e729cf9ffd7557c73f819ed1140e59ac5288c79554956723bb30d984fa rubygems-devel-3.2.33-160.el9_2.tuxcare.els15.noarch.rpm f13c68f69e2fa0d134381824f81fa77d38bd56c699253d039e2b47c1beca2a8c CLSA-2026:1782483693 TuxCare License Agreement 0 - CVE-2026-8631: fix integer overflow in the hpcups processing path that could lead to privilege escalation / arbitrary code execution via crafted print data (backport of upstream HPLIP 3.26.4) - CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing the ps/grep shell pipeline with a safe /proc-based scan (backport of upstream HPLIP 3.26.4) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8631: fix integer overflow in the hpcups processing path that could lead to privilege escalation / arbitrary code execution via crafted print data (backport of upstream HPLIP 3.26.4) - CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing the ps/grep shell pipeline with a safe /proc-based scan (backport of upstream HPLIP 3.26.4)

0 tuxcare-almalinux9.2-esu hplip-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm a82b57a15530185064b6f11b6417e2d5527c300f18f3b145c227d4acf9ea0132 hplip-common-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm bf809297853abfd656d071346fbde1677a884be85cda4b60c56f1f5d5a05a480 hplip-common-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm 675cd86ad72bdcb74e8be1f892f35ab57e4ad6e9da4c199cfbd5ccaea015aef2 hplip-libs-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm ca3102b5acd9c88832fc8c5638d6ef3c678cb4f12014d6cdc037a36f2fb24b72 hplip-libs-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm 6ca6f60a40d00dcfc05d6d3ac8c761ce7a34abda6ea298679c3937c32bec7012 libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els1.i686.rpm a74cbb99f250bce1b60f8619d103a6bb373350827d13304c48b0ac248c9b3967 libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els1.x86_64.rpm 83a731419f7706880efc24678aa28abb9b29d36b860b537e581b7a59a0ae46df CLSA-2026:1782484404 TuxCare License Agreement 0 - CVE-2026-50256: increase XLFDMAXFONTNAMELEN and add bounds checks in doListFontsAndAliases/doListFontsWithInfo to prevent stack buffer overflow via long fonts.alias targets - CVE-2026-50257: fix use-after-free in miSyncDestroyFence by using safe list iteration and null-checking pTrigger before dereferencing - CVE-2026-50258: reject XkbSetMap key types with numLevels exceeding XkbMaxShiftLevel to prevent stack buffer overflow in XkbKeyTypesForCoreSymbols - CVE-2026-50259: clamp nMaps to XkbMaxLegalKeyCode+1 in CheckKeyTypes to prevent stack buffer overflow when XkbSetMapResizeTypes wraps - CVE-2026-50260: fix use-after-free in FreeCounter by using safe list iteration, advancing list head before callback, and NULL-ing out shared trigger pointers in FreeAwait - CVE-2026-50261: restart trigger list iteration in SyncChangeCounter after TriggerFired to avoid dereferencing freed sibling-trigger nodes - CVE-2026-50262: fix reversed length check in GLX ChangeDrawableAttributes by using REQUEST_FIXED_SIZE to prevent out-of-bounds read/write - CVE-2026-50263: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow to avoid use-after-free on saver-window replacement Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50256: increase XLFDMAXFONTNAMELEN and add bounds checks in doListFontsAndAliases/doListFontsWithInfo to prevent stack buffer overflow via long fonts.alias targets - CVE-2026-50257: fix use-after-free in miSyncDestroyFence by using safe list iteration and null-checking pTrigger before dereferencing - CVE-2026-50258: reject XkbSetMap key types with numLevels exceeding XkbMaxShiftLevel to prevent stack buffer overflow in XkbKeyTypesForCoreSymbols - CVE-2026-50259: clamp nMaps to XkbMaxLegalKeyCode+1 in CheckKeyTypes to prevent stack buffer overflow when XkbSetMapResizeTypes wraps - CVE-2026-50260: fix use-after-free in FreeCounter by using safe list iteration, advancing list head before callback, and NULL-ing out shared trigger pointers in FreeAwait - CVE-2026-50261: restart trigger list iteration in SyncChangeCounter after TriggerFired to avoid dereferencing freed sibling-trigger nodes - CVE-2026-50262: fix reversed length check in GLX ChangeDrawableAttributes by using REQUEST_FIXED_SIZE to prevent out-of-bounds read/write - CVE-2026-50263: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow to avoid use-after-free on saver-window replacement

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els16.i686.rpm 1c37b2437dd130c757c165dd9feda3e1ad97cc319824cc412543503280351521 xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els16.x86_64.rpm 5329b668144e5244138399726eab68a0a8aba6c750e8cde7cd10c9409b484ec4 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els16.i686.rpm e1deebbf3000b982c1a1bdb49245383cd519af101d10624929e5b79b45508fe2 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els16.x86_64.rpm 6dbda50086af1086683cdb31ecbb7562377f865c31d8916553675496e7c99287 CLSA-2026:1782485183 TuxCare License Agreement 0 - CVE-2026-46529: fix single-click RCE via /GoToR action argv injection by quoting the page-label, named-dest and search-string arguments passed to ev_spawn (backport of upstream 970c219e) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-46529: fix single-click RCE via /GoToR action argv injection by quoting the page-label, named-dest and search-string arguments passed to ev_spawn (backport of upstream 970c219e)

0 tuxcare-almalinux9.2-esu evince-40.5-2.el9.tuxcare.els1.x86_64.rpm 69b83e99fd7e2314d2a787e011185acfab0cc82eba68183a76bc89010a718a81 evince-devel-40.5-2.el9.tuxcare.els1.x86_64.rpm 473f360ebb115cc643abbfb11024c701ed946abce125418f21d4aef2bf403bd2 evince-dvi-40.5-2.el9.tuxcare.els1.x86_64.rpm 69f28d8dedd732090cf25a25eb86ed5f0f8733c201b1f1d6ba1513bc73817e7d evince-libs-40.5-2.el9.tuxcare.els1.i686.rpm 893554e27b5befc1cb0df036d08e5a827289c1d479e3b5fcf77b22edf7e5aa8d evince-libs-40.5-2.el9.tuxcare.els1.x86_64.rpm 7158d45c2d0f273a92988894741118178f32d2fdd6ba60a35b8ba41577f10508 evince-nautilus-40.5-2.el9.tuxcare.els1.x86_64.rpm 0903c70c7d13af443bdd18934271cabbfb7e9cc1fb0640fa33e96c2764a4dff9 evince-previewer-40.5-2.el9.tuxcare.els1.x86_64.rpm 45aabbd259a9db17bf1308ecb01343bca3dd16e74b626945206d4cc2e8371dac evince-thumbnailer-40.5-2.el9.tuxcare.els1.x86_64.rpm f43bff2176f970b1a537ad8aaaa617f786245f55ad68cb9947f69a301eabbcb1 CLSA-2026:1782744931 TuxCare License Agreement 0 - CVE-2026-55203: fix integer overflow in FCGI mux demux record length field by widening drl from uint16_t to uint32_t, preventing FCGI framing desynchronization triggered by malicious backends Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55203: fix integer overflow in FCGI mux demux record length field by widening drl from uint16_t to uint32_t, preventing FCGI framing desynchronization triggered by malicious backends

0 tuxcare-almalinux9.2-esu haproxy-2.4.17-6.el9.tuxcare.els5.x86_64.rpm 12051a35b745e6e2dcb68ee05f619969f59902fff7ffa8e9b5907645af9860bb CLSA-2026:1782809708 TuxCare License Agreement 0 - CVE-2022-2084: remove schema errors from log to avoid leaking sensitive user-data values into world-readable /var/log/cloud-init.log Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2084: remove schema errors from log to avoid leaking sensitive user-data values into world-readable /var/log/cloud-init.log

0 tuxcare-almalinux9.2-esu cloud-init-22.1-10.el9.alma.tuxcare.els4.noarch.rpm 064aa6f6d8b6cf88c942c5bf7b9affbf0beadc8053074a5bd7ee336f05e5c6c1 CLSA-2026:1782810335 TuxCare License Agreement 0 - CVE-2026-39829: fix DoS in vendored golang.org/x/crypto/ssh public-key parsing (cap RSA moduli at 8192 bits, validate DSA parameters per FIPS 186-2); affects both el9_2 and el9_6 - CVE-2026-32281: rebuild el9_6 against golang >= 1.25.7-1.el9_6.tuxcare.els7 to fix DoS in crypto/x509 policy validation (Go >= 1.24 only; el9_2 builds with Go 1.22.9 and is not affected) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39829: fix DoS in vendored golang.org/x/crypto/ssh public-key parsing (cap RSA moduli at 8192 bits, validate DSA parameters per FIPS 186-2); affects both el9_2 and el9_6 - CVE-2026-32281: rebuild el9_6 against golang >= 1.25.7-1.el9_6.tuxcare.els7 to fix DoS in crypto/x509 policy validation (Go >= 1.24 only; el9_2 builds with Go 1.22.9 and is not affected)

0 tuxcare-almalinux9.2-esu buildah-1.39.6-1.el9_2.tuxcare.els9.x86_64.rpm f6442b4bd30bdf88616a068eb9db9d30abffdeed9a0999ecddc09944818223f3 buildah-tests-1.39.6-1.el9_2.tuxcare.els9.x86_64.rpm df4292a94c48cfa93c3097f33678ec34e9db5b5e86a2c530b91b6482aa48ecfa CLSA-2026:1782811369 TuxCare License Agreement 0 - CVE-2026-8970: constrain AsyncPrefs by remoteType so a compromised content process cannot set security-relevant prefs via AsyncPrefs; split the allowlist into privileged-about and unprivileged-exposed sets (Bug 2032174) - CVE-2026-8961: add locationspecific="true" to Thunderbird's PopupAutoComplete panel so the form-autocomplete dropdown is dismissed on navigation, closing a spoofing window (Bug 1962625) Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8970: constrain AsyncPrefs by remoteType so a compromised content process cannot set security-relevant prefs via AsyncPrefs; split the allowlist into privileged-about and unprivileged-exposed sets (Bug 2032174) - CVE-2026-8961: add locationspecific="true" to Thunderbird's PopupAutoComplete panel so the form-autocomplete dropdown is dismissed on navigation, closing a spoofing window (Bug 1962625)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els15.x86_64.rpm 96aea17fbd886861ec13d18c461fea269ab81d7dbd2118795ac9cd2745ee29ea CLSA-2026:1782898054 TuxCare License Agreement 0 - CVE-2026-48962: fix eval injection in File::GlobMapper allowing arbitrary Perl code execution via an attacker-controlled output glob Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-48962: fix eval injection in File::GlobMapper allowing arbitrary Perl code execution via an attacker-controlled output glob

0 tuxcare-almalinux9.2-esu perl-IO-Compress-2.102-4.el9.tuxcare.els1.noarch.rpm 76d3ea7a67bec2b63577600001cd9ea14b87608646659ec61540dc0f1c4a1c62 perl-IO-Compress-tests-2.102-4.el9.tuxcare.els1.noarch.rpm 6e5cf83f037f0abde17bb54b8ae4c0df0d6bbaf5dc9cc84b0f39f28917f9423e CLSA-2026:1782901522 TuxCare License Agreement 0 - CVE-2026-47770: guard deep structural equality and comparison recursion in jv_equal/jv_cmp to prevent stack overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-47770: guard deep structural equality and comparison recursion in jv_equal/jv_cmp to prevent stack overflow

0 tuxcare-almalinux9.2-esu jq-1.6-14.el9.tuxcare.els7.i686.rpm a429ab0d0debc823eda2dbc402e6e5b205714d190a87c8002f73ecede54dc456 jq-1.6-14.el9.tuxcare.els7.x86_64.rpm bfa8f17379a395c0b173bda88d561cb7261a1a8ec7956da3b668fc3ccdbe3467 jq-devel-1.6-14.el9.tuxcare.els7.i686.rpm 808f43b98719bea932ad6a6231a43895bd972237bea2da0cf30616779c38839a jq-devel-1.6-14.el9.tuxcare.els7.x86_64.rpm 4a5c8e35a8562241378cc29af523747fa8b868f3e56a197edb57bcb89a755642 CLSA-2026:1782904895 TuxCare License Agreement 0 - CVE-2026-50256: fix stack overflow in font alias resolution by widening XLFDMAXFONTNAMELEN to match libXfont2 MAXFONTNAMELEN (bundled Xvnc xserver) - CVE-2026-50257: fix use-after-free of sync fences in miSyncDestroyFence - CVE-2026-50258: fix stack overflow in XKB CheckKeyTypes - CVE-2026-50259: fix stack overflow in XKB _XkbSetMapChecks key-type check - CVE-2026-50260: fix use-after-free of sync counters in FreeCounter - CVE-2026-50261: fix use-after-free in SyncChangeCounter - patches backported into the bundled xserver 21.1.3 tree, reused from the xorg-x11-server-Xwayland sibling change Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50256: fix stack overflow in font alias resolution by widening XLFDMAXFONTNAMELEN to match libXfont2 MAXFONTNAMELEN (bundled Xvnc xserver) - CVE-2026-50257: fix use-after-free of sync fences in miSyncDestroyFence - CVE-2026-50258: fix stack overflow in XKB CheckKeyTypes - CVE-2026-50259: fix stack overflow in XKB _XkbSetMapChecks key-type check - CVE-2026-50260: fix use-after-free of sync counters in FreeCounter - CVE-2026-50261: fix use-after-free in SyncChangeCounter - patches backported into the bundled xserver 21.1.3 tree, reused from the xorg-x11-server-Xwayland sibling change

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els25.x86_64.rpm 433a8b7624d667668c55d04e3932d66ce098eb8f12228868ee6e264d2ffaa25e tigervnc-icons-1.12.0-13.el9_2.tuxcare.els25.noarch.rpm 300ad3dfff7f186d9d451f314944a964115f26d65baa7a0091a45841647a80c9 tigervnc-license-1.12.0-13.el9_2.tuxcare.els25.noarch.rpm d46108ba49ffc05b010318c9fd9090e57a2b5f1ac861fb6abe61a0cfba385c2d tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els25.noarch.rpm 00853487a721dd572cf29740af3a53bbc2e6f0afc2e7e84d8c5904696a184e9c tigervnc-server-1.12.0-13.el9_2.tuxcare.els25.x86_64.rpm 3a46c995c10075bba91942b7f32c8edc35cdd4f941a46a018612e75062a69dab tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els25.x86_64.rpm f3b11cbd708b464a3dfc4a90b7acd75fbdeb2dfcd5d38150001556568835cc88 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els25.x86_64.rpm 05412a5a4f1db241423cac164beaa08850ea71211ea9261adfb84fa6c1335b18 CLSA-2026:1782910319 TuxCare License Agreement 0 - CVE-2026-42507: escape arbitrary input in net/textproto errors to prevent log/error injection of misleading content and terminal control bytes Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42507: escape arbitrary input in net/textproto errors to prevent log/error injection of misleading content and terminal control bytes

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els17.x86_64.rpm 0bb97a66549696c849d9c931bdeb1473de47770943bee1a335f9d89a8f59d31e golang-1.22.9-1.el9_2.tuxcare.els17.x86_64.rpm ee8d04ac747f9262691edbbfcf35b77c5782f281e601cd04418a6c080ba0c786 golang-bin-1.22.9-1.el9_2.tuxcare.els17.x86_64.rpm 6a4c513329731cc063f715238fb82982d68f5c72d5d70ae4e9c514aecf2b2333 golang-docs-1.22.9-1.el9_2.tuxcare.els17.noarch.rpm ca320f9c6bbf145c39cf81abaf57d0e08a06e4bad6a33addc57c9994bfebc6ab golang-misc-1.22.9-1.el9_2.tuxcare.els17.noarch.rpm 0b8afda91472d7002265b539e3667cbf1156bc110a73a7dcd73b4f107eefeb88 golang-src-1.22.9-1.el9_2.tuxcare.els17.noarch.rpm 4d6f1213062879cb000a1fd4d547ce2f9d19ea20223e928e158afdb3ff2bdf12 golang-tests-1.22.9-1.el9_2.tuxcare.els17.noarch.rpm 0a93067551146f78f12297ed71f65c71f8557853513630c5f68176bded0d3c0c CLSA-2026:1782976762 TuxCare License Agreement 0 - CVE-2026-45446: reset AES-SIV final_ret on context reuse so a forged all-zero tag is not accepted for empty-ciphertext messages - CVE-2026-9076: reject KEK ciphers with block size below 4 in CMS kek_unwrap_key to prevent an out-of-bounds read during check-byte validation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45446: reset AES-SIV final_ret on context reuse so a forged all-zero tag is not accepted for empty-ciphertext messages - CVE-2026-9076: reject KEK ciphers with block size below 4 in CMS kek_unwrap_key to prevent an out-of-bounds read during check-byte validation

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els20.x86_64.rpm 53510ccc8f883445483b5c0904e5aa0700f7106a97bb4924aa9e70e6a65609ef openssl-devel-3.0.7-20.el9_2.tuxcare.1.els20.i686.rpm 2bfa29e12a7615ac92a51407372dcd6530466ded265983e27b86b737d9d1d328 openssl-devel-3.0.7-20.el9_2.tuxcare.1.els20.x86_64.rpm 1b978b0b88e4d68ef4c3bf934c9dbd741eaaa039554655fa816aae0bf25a27d7 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els20.i686.rpm 06abcc7b36ea2de0239f630a2878a8a5b9ee9fd6d26414d01c02f0fb03eb9476 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els20.x86_64.rpm 913567e98e3454b4c6cf9cee1f7842b41f08645a91ebeaabbd4325c4c41e8dc1 openssl-perl-3.0.7-20.el9_2.tuxcare.1.els20.x86_64.rpm b4f42be64bb952feef4ed24fe33e09ae0bed9ef7cea862a5c48a288470ae541d CLSA-2026:1782977868 TuxCare License Agreement 0 - CVE-2024-29038: tpm2_checkquote: add TPM2_GENERATED_VALUE magic check to prevent acceptance of forged quotes Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-29038: tpm2_checkquote: add TPM2_GENERATED_VALUE magic check to prevent acceptance of forged quotes

0 tuxcare-almalinux9.2-esu tpm2-tools-5.2-2.el9_1.tuxcare.els2.x86_64.rpm 61cfea382409f9442627c8406805de07edde0ca4614caf57e42af23e57da6ed6 CLSA-2026:1782979178 TuxCare License Agreement 0 - CVE-2026-40355: fix null pointer dereference in NegoEx parse_nego_message() - CVE-2026-40356: fix read overrun in NegoEx parse_message() via short header_len Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40355: fix null pointer dereference in NegoEx parse_nego_message() - CVE-2026-40356: fix read overrun in NegoEx parse_message() via short header_len

0 tuxcare-almalinux9.2-esu krb5-devel-1.20.1-9.el9_2.tuxcare.els9.i686.rpm 91b28ca20cbf7319f8d982cc6f1a9cf6b28c867e1c754b29ef89d4534ab291ab krb5-devel-1.20.1-9.el9_2.tuxcare.els9.x86_64.rpm 9e87a3a24e1a5fb71b4bbf5f4991681f5aa52b0dcc407c2e6d22c18f8429da35 krb5-libs-1.20.1-9.el9_2.tuxcare.els9.i686.rpm 9558ebd495ab680a5bd8d538db667641aab2b8ea2f2ed2ce1750cabfa5e25595 krb5-libs-1.20.1-9.el9_2.tuxcare.els9.x86_64.rpm 796dad34a0bcb6fb8fac97f2486d4a35bc7cd52ce045b418005627b1152e248d krb5-pkinit-1.20.1-9.el9_2.tuxcare.els9.i686.rpm ae6586a02825376a0ee3be5c4f2ac6656b096a6779a92d0486efebd61564b4f2 krb5-pkinit-1.20.1-9.el9_2.tuxcare.els9.x86_64.rpm c7efeaced106e3c99b401e72aa5cd8f186ddf9d7f5214b604aba193743b97daf krb5-server-1.20.1-9.el9_2.tuxcare.els9.i686.rpm 6b8a26f384df053c94db4a26148828791adcfeea427119915c4d52f91246825b krb5-server-1.20.1-9.el9_2.tuxcare.els9.x86_64.rpm 08cd2998dcab91eab48fe8d3970a5e0b981b57be1751af070ed1a726ecb3dad5 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els9.i686.rpm feb5e9c0447d617b2ce00935d16c3beb8ec20f6329b5965ee3ecb1a768999d96 krb5-server-ldap-1.20.1-9.el9_2.tuxcare.els9.x86_64.rpm a03b08b821c7ca4381bfa8f1d20b8cad898b1d35e4d15fa5ffc1851b64c63cf6 krb5-workstation-1.20.1-9.el9_2.tuxcare.els9.x86_64.rpm 9f33848759f9d7b8c0a13b4bb46263889fe03b661e3918c21e45bc8b39ad7bd8 libkadm5-1.20.1-9.el9_2.tuxcare.els9.i686.rpm b03e172abea5bc56b1e1fa0f75929eb6bbc68f1746b2a2d037e82b9c2f5e5b77 libkadm5-1.20.1-9.el9_2.tuxcare.els9.x86_64.rpm 0bdd64b73573320b84bd50525ba650f1d8f71e566c1cf0521c18656d12e473cb CLSA-2026:1782981361 TuxCare License Agreement 0 - CVE-2026-45232: fix off-by-one out-of-bounds stack write in establish_proxy_connection() when a malicious HTTP proxy returns an over-long response line without a newline; reject the buffer-full case instead of writing the NUL terminator one byte past the buffer Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45232: fix off-by-one out-of-bounds stack write in establish_proxy_connection() when a malicious HTTP proxy returns an over-long response line without a newline; reject the buffer-full case instead of writing the NUL terminator one byte past the buffer

0 tuxcare-almalinux9.2-esu rsync-3.2.3-19.el9_2.tuxcare.els11.x86_64.rpm 90e9607fc23cbb87f57c4e16ccc4bcaf3950057b6edc1688d154c0685abf004f rsync-daemon-3.2.3-19.el9_2.tuxcare.els11.noarch.rpm e90a9f35f11fc3e4b870ca1f3af8b4932d752d87c0a7afcc6469db093dfd106c CLSA-2026:1782982174 TuxCare License Agreement 0 - CVE-2024-28085: wall: fix escape sequence injection in argv messages by sanitizing characters through buf_putc_careful(), preventing arbitrary text injection into other users' terminals (WallEscape) - CVE-2026-3184: login: use original FQDN for PAM_RHOST to prevent hostname canonicalization from bypassing host-based PAM access control rules Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-28085: wall: fix escape sequence injection in argv messages by sanitizing characters through buf_putc_careful(), preventing arbitrary text injection into other users' terminals (WallEscape) - CVE-2026-3184: login: use original FQDN for PAM_RHOST to prevent hostname canonicalization from bypassing host-based PAM access control rules

0 tuxcare-almalinux9.2-esu libblkid-2.37.4-11.el9_2.tuxcare.els3.i686.rpm 328c4bd2ce6ab64e2e106eaf2d41267ee6840f7beda200b3dc7b8dce61e415e6 libblkid-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 324bfdfa7ed2e2d5b48eafd108199a973ffe7532fc8419543ea92ced496cb251 libblkid-devel-2.37.4-11.el9_2.tuxcare.els3.i686.rpm 9f59d8b58c3250e537d3c9ebab83af7aae2ce9a4b0bad0380e7d92184f3a8b01 libblkid-devel-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm d0852ea0b066f81021a068519252c4ed15034e6b0c1312eee8f6a2513ad8b5dd libfdisk-2.37.4-11.el9_2.tuxcare.els3.i686.rpm 5f12c311cbf5b61c9691cbfd9b28e9f46c6b3d55a40bb03858d4d81baf880aba libfdisk-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 3828937b6ccab9ed1b94cc0d3241c16783f4d24347f0e6fc24098fe6ed897788 libfdisk-devel-2.37.4-11.el9_2.tuxcare.els3.i686.rpm 88843bbb4388bda2685caa5808f1d7a1709e5528b7539d94d517e5b12a87153f libfdisk-devel-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 5c52d83de32f1e1c535d58659f03ce3a7d8c319a80c59b8106560cd1e0a68317 libmount-2.37.4-11.el9_2.tuxcare.els3.i686.rpm c46f562fa25cd53dc1c38c8b5cefff212260cd3f5a2b5f24dcff224e059208f6 libmount-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 52ed3d2e50bef29222c8d6d945544e1941322aedfc8207484bfcbf196d5f0f36 libmount-devel-2.37.4-11.el9_2.tuxcare.els3.i686.rpm 3396dc085bd169c48ceadca7a48298ee8e496d6e48222ab501d6b4f2fbe00b16 libmount-devel-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 2ac75fbf26586e693dc5085b7783d1a092548c81659d90d6238304f064d0b9e0 libsmartcols-2.37.4-11.el9_2.tuxcare.els3.i686.rpm e48007b3eb5ff66b85d4e6e0f5b427be397280bd14758502914cfc06b2af9cfd libsmartcols-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 8cd633d8e0c7247a3ce1009d1af410def95d2afc54f5d3b912e568bd651f02c9 libsmartcols-devel-2.37.4-11.el9_2.tuxcare.els3.i686.rpm 03da631d1a7b67f29d40e6e2e86b90146bfaf849fcb1aaf6df0252a9213bb8e6 libsmartcols-devel-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 648ff504b547fa08c59411e2d2d3b2b5c2c6ec068cd25fe72fe12c5e7a64a3c4 libuuid-2.37.4-11.el9_2.tuxcare.els3.i686.rpm 8abe6c26bd57f2bfe1f8c96e416509f1cc9ab217c68e2e2fdf8fdaebf92affdd libuuid-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm b10130ba92429e8b842502303494c250fefafc84f1338d3a29e5f1e0f6aaa747 libuuid-devel-2.37.4-11.el9_2.tuxcare.els3.i686.rpm b7a434e0e6cffe531e19fcfb65e389becc3a6c369c1fa35b09e7315efbbb4101 libuuid-devel-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 99b4adf90c8782e4404452bea8258ef6d85961a5106c5c8f7f7d7ff7bca57930 python3-libmount-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 8ca0ab17ef6787f42678dbd8f381342c77917ac067f25da146cc3c6cce6a1220 util-linux-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm b3a3c6a6808da916378cc7702c7cc4cbc48eae74fca680213ab5bada02ae2c6b util-linux-core-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm e17ac69497037d61fd574ba90fcaac580229d9ec3a3d7513755d68bd148b4b22 util-linux-user-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 23039061a1149f08d0e4ed5c4270e03dbfacb1ecefc4d3f8f2c103f03f85b419 uuidd-2.37.4-11.el9_2.tuxcare.els3.x86_64.rpm 4223244e4c07ed7ccab44bec9499e49f09824f99033864536651c88a28d1ae10 CLSA-2026:1782983109 TuxCare License Agreement 0 - CVE-2026-42767: fix potential NULL dereference in OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42767: fix potential NULL dereference in OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert()

0 tuxcare-almalinux9.2-esu openssl-3.0.7-20.el9_2.tuxcare.1.els19.x86_64.rpm a7f55313ab9fd35368b3935c253e09eca41a801ff09555190dffed5ab643f43b openssl-devel-3.0.7-20.el9_2.tuxcare.1.els19.i686.rpm d1699ab42f9ee2e8c319b83fe799de539f1de432401bbee03729e194d4cf560a openssl-devel-3.0.7-20.el9_2.tuxcare.1.els19.x86_64.rpm 6ef67c9f5aaf007a5a72df4f92b152b6a4ccf6ad5a2004ce520e59e363e9b2d5 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els19.i686.rpm b711151e2de6f92a144698d1eab9fe366bdc8eec4b094231ddc1fc421432a873 openssl-libs-3.0.7-20.el9_2.tuxcare.1.els19.x86_64.rpm a8c66ec6b47ee23a6ffb74735243d3a19fd8f41b68a9a585175cc99c90eda692 openssl-perl-3.0.7-20.el9_2.tuxcare.1.els19.x86_64.rpm 7acd0f175186758c6a41caa2420dde2539a7501e50415eb64c7c3a08f20e1a62 CLSA-2026:1782984730 TuxCare License Agreement 0 - CVE-2026-47167: use Ruby's Regexp.new() instead of Kernel.eval() in the cucumber filetype plugin's s:stepmatch() so untrusted step-definition patterns are treated as inert regex data, preventing Ruby (and shell) code injection when jumping to a step in an attacker-controlled repository (runtime/ftplugin/cucumber.vim, upstream vim 9.2.0496) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-47167: use Ruby's Regexp.new() instead of Kernel.eval() in the cucumber filetype plugin's s:stepmatch() so untrusted step-definition patterns are treated as inert regex data, preventing Ruby (and shell) code injection when jumping to a step in an attacker-controlled repository (runtime/ftplugin/cucumber.vim, upstream vim 9.2.0496)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els36.x86_64.rpm 648f411da9e87c6df48d89f31d827dfa3aa254ae5b5bf3a98e53b96c988a88fe vim-common-8.2.2637-22.el9_2.1.tuxcare.els36.x86_64.rpm cfad15caa0400ccc38652be73ed396fd0538138e017e9f40526d8b69486f57d4 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els36.x86_64.rpm 70a1897c9e2e9e35236bb87ec4a9010c913f002dae5e638759d6278a35a404e6 vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els36.noarch.rpm 6a13d4aee4f4fcba275c8ecfc85c44acffe168b5f9b357157e651ababfe538f5 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els36.x86_64.rpm d64b80ccbc26df659374da0c81d95603972b93b3e500bc5e9776429d2ca560ac CLSA-2026:1782985538 TuxCare License Agreement 0 - CVE-2026-55686: replace the fragile isWorkDirSymlink symlink-chain walking in resolveWorkDir() with securejoin.SecureJoin(), scoping workdir resolution to the container mountpoint and letting the OCI runtime handle remaining symlink errors Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55686: replace the fragile isWorkDirSymlink symlink-chain walking in resolveWorkDir() with securejoin.SecureJoin(), scoping workdir resolution to the container mountpoint and letting the OCI runtime handle remaining symlink errors

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els13.x86_64.rpm b7a0be0134c233b5e0c528f50348361a2d0d9d2ca498a718c90fd3a48663c90a podman-docker-4.4.1-13.el9_2.tuxcare.els13.noarch.rpm 2e1e323f789c2c98120fabf0ab9e2cb92a8da9c899ab6487f4350d8f122f582f podman-gvproxy-4.4.1-13.el9_2.tuxcare.els13.x86_64.rpm e1b5ce2533ca8e3a3af8b18239a6a26e5e3106804f97d9849a9368c375479f61 podman-plugins-4.4.1-13.el9_2.tuxcare.els13.x86_64.rpm 594d325360542d4d61747098359099aef33bdb67604713effd91fb1cb8387517 podman-remote-4.4.1-13.el9_2.tuxcare.els13.x86_64.rpm 7fd2252d854915c147bb51f759ae639671d9f10a75957d627634927fafd44d0f podman-tests-4.4.1-13.el9_2.tuxcare.els13.x86_64.rpm 0489b35693f43c35cf1dfc8e0cfb6251d7249beae067673fe95c39f5f864dca5 CLSA-2026:1782986813 TuxCare License Agreement 0 - CVE-2026-50262: fix reversed request-length check in GLX __glXDisp_ChangeDrawableAttributes (and swapped variant) by reverting the mesa size-check workaround and restoring REQUEST_FIXED_SIZE / REQUEST_SIZE_MATCH in the bundled xserver GLX handlers (out-of-bounds read) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50262: fix reversed request-length check in GLX __glXDisp_ChangeDrawableAttributes (and swapped variant) by reverting the mesa size-check workaround and restoring REQUEST_FIXED_SIZE / REQUEST_SIZE_MATCH in the bundled xserver GLX handlers (out-of-bounds read)

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els26.x86_64.rpm 9be0541af2dd9327a0de6613ff280f2713e733b2f2e410d97a994858eb88161f tigervnc-icons-1.12.0-13.el9_2.tuxcare.els26.noarch.rpm 8a84a653982fad910b897e2a69153fb693fca7a8bf1a294ac384e29ac5075298 tigervnc-license-1.12.0-13.el9_2.tuxcare.els26.noarch.rpm 37be6fd0d68f77e03e616a8f66acd92ea62cd837b5e782a6957d21c88001b398 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els26.noarch.rpm 42f77a62fb0e04a16089974074322aa6180d6b353f56b12c27423942f0be2529 tigervnc-server-1.12.0-13.el9_2.tuxcare.els26.x86_64.rpm e9b696d8ffca4efc46339e84defad7f661ba9b7213d424f047bd8515de496676 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els26.x86_64.rpm 19faed51aafd985d055529c2926c89d2fea9e0e1670758aa328cb73bc9545a7e tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els26.x86_64.rpm bafa01f50f1219480c5a75f4c0a4c2208a85e4c5d547e38729c11841f51470ff CLSA-2026:1782996176 TuxCare License Agreement 0 - CVE-2026-32280: rebuild against golang containing GO-2026-4947 backport (crypto/x509 chain-building DoS fix) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32280: rebuild against golang containing GO-2026-4947 backport (crypto/x509 chain-building DoS fix)

0 tuxcare-almalinux9.2-esu runc-1.2.8-1.el9_1.tuxcare.els3.x86_64.rpm 47347bcd09ba038ea01cfb2d70e2db93293dc9ed18c2a9c7b7121004e87e5d6d CLSA-2026:1782998484 TuxCare License Agreement 0 - CVE-2026-11979: add bounds checks in xmlcatalog usershell() to prevent stack-based buffer overflow on long --shell input Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11979: add bounds checks in xmlcatalog usershell() to prevent stack-based buffer overflow on long --shell input

0 tuxcare-almalinux9.2-esu libxml2-2.9.13-3.el9_2.1.tuxcare.els14.i686.rpm 13d8045e8b9548ff439dc80b9a2a32c9d8847c12daf8c9d87a062590d9051e4e libxml2-2.9.13-3.el9_2.1.tuxcare.els14.x86_64.rpm 98b508edcac64afe6566afa3e25e41c2fa3f42d2ad55a546a4e43eddc301a8b1 libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els14.i686.rpm af3d08db8cef3f2e5654688ee18a0455472f3aa48ef4af6cdc3a7267bd5ec48c libxml2-devel-2.9.13-3.el9_2.1.tuxcare.els14.x86_64.rpm 5d6285a9b5510a4d7d5327f53b44146f4805492b81c57bfc55d99bac67d8f323 libxml2-static-2.9.13-3.el9_2.1.tuxcare.els14.x86_64.rpm 975967a95ade7c96214696b025b70c2c91094a5eb86c59772edb1c6676e148dd python3-libxml2-2.9.13-3.el9_2.1.tuxcare.els14.x86_64.rpm 809f88b29e9cf40bd42b8158d3196f0a30e0b3fe336b5fcccb46cd715706cf2c CLSA-2026:1782999239 TuxCare License Agreement 0 - CVE-2026-55693: bound the trie-descent depth counter against the MAXWLEN-element stack arrays in tree_count_words() to prevent an out-of-bounds write when reading a crafted spell file (src/spellfile.c, upstream vim 9.2.0653) - CVE-2026-55892: bound the trie-descent depth counter in dump_prefixes() to prevent a stack out-of-bounds write with a crafted .spl spell file (src/spell.c, upstream vim 9.2.0662) - CVE-2026-57455: bound the single-byte SOFO result copy in spell_soundfold_sofo() to MAXWLEN-1 to prevent a stack out-of-bounds write when sound-folding long words (src/spell.c, upstream vim 9.2.0698) - CVE-2026-57456: use repr() on reconstructed docstrings in the python3 omni-completion so a hostile buffer cannot break out of the triple-quoted literal and execute arbitrary Python during completion (runtime/autoload/python3complete.vim, upstream vim 9.2.0699) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55693: bound the trie-descent depth counter against the MAXWLEN-element stack arrays in tree_count_words() to prevent an out-of-bounds write when reading a crafted spell file (src/spellfile.c, upstream vim 9.2.0653) - CVE-2026-55892: bound the trie-descent depth counter in dump_prefixes() to prevent a stack out-of-bounds write with a crafted .spl spell file (src/spell.c, upstream vim 9.2.0662) - CVE-2026-57455: bound the single-byte SOFO result copy in spell_soundfold_sofo() to MAXWLEN-1 to prevent a stack out-of-bounds write when sound-folding long words (src/spell.c, upstream vim 9.2.0698) - CVE-2026-57456: use repr() on reconstructed docstrings in the python3 omni-completion so a hostile buffer cannot break out of the triple-quoted literal and execute arbitrary Python during completion (runtime/autoload/python3complete.vim, upstream vim 9.2.0699)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els37.x86_64.rpm d0856f5de2d10d54bc57e23840c663328072e6dbeac1c0dcd35f3fa53e6999d9 vim-common-8.2.2637-22.el9_2.1.tuxcare.els37.x86_64.rpm 965f75630f734ea6a003de34430f22a768ef7b693916bea3dbd3b96aa02d6e70 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els37.x86_64.rpm 9f68b4708ba46d1fa108a65f1c2982d74b0e218a380c3112e18cb13efb0526db vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els37.noarch.rpm 593756ffacfd4abb4f829c158ade3726c28779570422b12c382b73597102aa65 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els37.x86_64.rpm f3e006de39e04458cdf786d3684022ed3a3e1a470bb6760cf8713c1c44b43a6b CLSA-2026:1783005763 TuxCare License Agreement 0 - CVE-2026-45624: add polynomial-argument alignment check (upstream 7736b7c, GHSA-pfvh-m9xv-8966) alongside the earlier < 1 guard to close the misaligned-argument OOB read in GenerateCoefficients() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45624: add polynomial-argument alignment check (upstream 7736b7c, GHSA-pfvh-m9xv-8966) alongside the earlier < 1 guard to close the misaligned-argument OOB read in GenerateCoefficients()

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els9.x86_64.rpm 6dbfd44a285e2040532ac53cc0b2159f74c94e6e1f641ac0e556e2aecf025b46 ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els9.x86_64.rpm acc466165ed7567ea0985f3c8d53c10a01a6b7eaa27187c4609fe5546824975d ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els9.x86_64.rpm a7861d413c3a388197d979de24d964b0842b6c8a630edf2398d13b53abc49353 ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els9.x86_64.rpm bf8e512224a116f341a8d7b6fbf367631423a9893bf5f9a64d835d878b47e3a2 ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els9.x86_64.rpm 6a8a6fdc13269942dfd97f50c91d58a6d05a8b486ec3cdcdd014dd8c1eef32dd ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els9.x86_64.rpm 416305cf0ff63108734848a3866201282f767ce0d034bd25f96de3656a7f1e45 ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els9.x86_64.rpm 6af3fc46dac83492c71998bc7da30f34452d6521b6131cba9ccdbe847ccaf863 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els9.x86_64.rpm 384f0153834e0c5f592e42d31b8e076cf4552909b8777f1e71ca46df902018fe CLSA-2026:1783075621 TuxCare License Agreement 0 - CVE-2026-12313: Linux sandbox broker SymlinkPath() accepted paths containing /.. components, allowing a compromised content process to traverse out of allowed directories; reject any path that contains /../, equals .., starts with ../, or ends with /.. (Bug 2040477) - CVE-2026-33636: bundled libpng 1.6.39 NEON palette expansion (arm/palette_neon_intrinsics.c) had an out-of-bounds read/write when row_width was not aligned to chunk size; backport upstream libpng commit aba9f18 that rewrites the loop guard and removes the unsafe post-loop adjustment (compiled but unreachable on x86_64 ESU builds) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12313: Linux sandbox broker SymlinkPath() accepted paths containing /.. components, allowing a compromised content process to traverse out of allowed directories; reject any path that contains /../, equals .., starts with ../, or ends with /.. (Bug 2040477) - CVE-2026-33636: bundled libpng 1.6.39 NEON palette expansion (arm/palette_neon_intrinsics.c) had an out-of-bounds read/write when row_width was not aligned to chunk size; backport upstream libpng commit aba9f18 that rewrites the loop guard and removes the unsafe post-loop adjustment (compiled but unreachable on x86_64 ESU builds)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els16.x86_64.rpm 994989094ff478c536da108142e9dd9b55bd147715b2864ab65f2102789f234a CLSA-2026:1783076363 TuxCare License Agreement 0 - CVE-2026-6893: fix shell command injection via crafted DHCP and iBFT values in network-legacy, net-lib, initqueue, and iscsi modules Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6893: fix shell command injection via crafted DHCP and iBFT values in network-legacy, net-lib, initqueue, and iscsi modules

0 tuxcare-almalinux9.2-esu dracut-057-21.git20230214.el9.tuxcare.els1.x86_64.rpm 823749ac3d9c5c4850030990dc96a37bddda72942a11a5a65bf0db4125a9822d dracut-caps-057-21.git20230214.el9.tuxcare.els1.x86_64.rpm 700bba8b9f164b49689df52c3106a1ca6ab7d82a5440b31883dd687a62658166 dracut-config-generic-057-21.git20230214.el9.tuxcare.els1.x86_64.rpm 06378e944d80d57b24e990366adee567025af449944a8a906edea7c434814723 dracut-config-rescue-057-21.git20230214.el9.tuxcare.els1.x86_64.rpm 194ebdb7d6e9a69b48d292c842f1ca7e675d644c50a936be61c7b8e17f8dd27e dracut-live-057-21.git20230214.el9.tuxcare.els1.x86_64.rpm 5bdeebd9af224ebcb4b87240b48b436f2eef8260c4bee7d8a850a1548b0d534c dracut-network-057-21.git20230214.el9.tuxcare.els1.x86_64.rpm bea8c6ee6d21a0d631aec6b7482173cd1b39ab712365da4985c46d9706ba57b7 dracut-squash-057-21.git20230214.el9.tuxcare.els1.x86_64.rpm 39f41396f59a719e4d7f43eb4417e240390d81f7d7973d00140cf721747337b4 dracut-tools-057-21.git20230214.el9.tuxcare.els1.x86_64.rpm 8e77f3371e6292c19a15afb89b5b1454b4a24792dd16505e5d565c5c4ce38a1e CLSA-2026:1783078093 TuxCare License Agreement 0 - CVE-2026-42496: fix path traversal via crafted symlinks/hardlinks during tar extraction (validate link targets in secure-extract mode) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42496: fix path traversal via crafted symlinks/hardlinks during tar extraction (validate link targets in secure-extract mode)

0 tuxcare-almalinux9.2-esu perl-Archive-Tar-2.38-6.el9.tuxcare.els1.noarch.rpm baa47079872799d61b1916d52613ab3b90030d4431a72d2fcef6f65e453b5a7e CLSA-2026:1783338681 TuxCare License Agreement 0 - CVE-2026-50263: fix use-after-free in CreateSaverWindow by re-fetching the screen private after CheckScreenPrivate (bundled Xvnc xserver) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50263: fix use-after-free in CreateSaverWindow by re-fetching the screen private after CheckScreenPrivate (bundled Xvnc xserver)

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els27.x86_64.rpm 2274b83af9aa3da50b136cab4fc1e91d74ba1afd1e74293a8156a130b9d517b8 tigervnc-icons-1.12.0-13.el9_2.tuxcare.els27.noarch.rpm e7ae4bc32bad82802bd67d43095ac0f5e9a2aeb849b67a5b981f988c6d1444f9 tigervnc-license-1.12.0-13.el9_2.tuxcare.els27.noarch.rpm 96d1f9ead63278faea23fbf95e07fe7fcfc974820c39e95bbee3d51674bbc1ec tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els27.noarch.rpm 462f7deb5f844e50225ca4dda4f289e61212217de96a164b906b1999d3bbfa2a tigervnc-server-1.12.0-13.el9_2.tuxcare.els27.x86_64.rpm e534f0174b5cb2512a0f6e7669709531398a7d302ccc1d4c2abd311912f7075d tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els27.x86_64.rpm 8c713be5d65000256aeb85c268530da7e6098f4fedd8123326e8da90fedd94d8 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els27.x86_64.rpm d453b8f9457171282647a8f7839a3fe6dd57dfebd111c04822e225028955c071 CLSA-2026:1783340505 TuxCare License Agreement 0 - CVE-2026-49839: break out of the raw file load loop when jv_string_append_buf returns an invalid value to prevent a heap-buffer-overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-49839: break out of the raw file load loop when jv_string_append_buf returns an invalid value to prevent a heap-buffer-overflow

0 tuxcare-almalinux9.2-esu jq-1.6-14.el9_2.tuxcare.els9.i686.rpm 5f93fbc35ef7f7255c121b6286d1ae08ebad8f9d3cb4820698c22fdfd09b974f jq-1.6-14.el9_2.tuxcare.els9.x86_64.rpm f16da55ca20c49acf03fe278a569f91c570605f8df0021d8f133dd453d2005a1 jq-devel-1.6-14.el9_2.tuxcare.els9.i686.rpm 5a12b2d05e30c25629569c4fcde6045a2e23cd5a3b8bc62479f631d55a198c1d jq-devel-1.6-14.el9_2.tuxcare.els9.x86_64.rpm 82a88220ecb5ec0ca42da000c709e588495ba42b52e9763ca8f425aeacdebce3 CLSA-2026:1783341288 TuxCare License Agreement 0 - CVE-2026-54512: fix PolymorphicTypeValidator bypass via unvalidated generic type parameters Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-54512: fix PolymorphicTypeValidator bypass via unvalidated generic type parameters

0 tuxcare-almalinux9.2-esu pki-jackson-databind-2.14.1-2.el9_2.tuxcare.els3.noarch.rpm 9e48adb71598da45571cd259e59569cfb561aca67a59d7f97fcbf30a873d6634 CLSA-2026:1783341999 TuxCare License Agreement 0 - CVE-2026-58016: fix inverted <node> nesting guard in the GDBus introspection XML parser (gio/gdbusintrospection.c) - CVE-2026-58015: validate the DBUS_COOKIE_SHA1 cookie_context to avoid keyring path traversal (gio/gdbusauthmechanismsha1.c) - CVE-2026-58014: guard the empty-value case in g_key_file_get_locale_string_list() to avoid a one-byte heap underread Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58016: fix inverted <node> nesting guard in the GDBus introspection XML parser (gio/gdbusintrospection.c) - CVE-2026-58015: validate the DBUS_COOKIE_SHA1 cookie_context to avoid keyring path traversal (gio/gdbusauthmechanismsha1.c) - CVE-2026-58014: guard the empty-value case in g_key_file_get_locale_string_list() to avoid a one-byte heap underread

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els8.i686.rpm 0cc0568f11ca901737bb0bffa649386173ac38cbac158e74caf776aab68e93a8 glib2-2.68.4-6.el9.tuxcare.els8.x86_64.rpm 2304528cb2e1a0864aea285afa28cd9d3615ac6455d527a85aae00790e36cb9f glib2-devel-2.68.4-6.el9.tuxcare.els8.i686.rpm a8a872000054fd26a113cc1177c20dd7c057c4107564ff806cece0c782217fc7 glib2-devel-2.68.4-6.el9.tuxcare.els8.x86_64.rpm 0b553a2ff2ef36158718f27ac475b7be061113e4e73a207517ade408bc39f443 glib2-doc-2.68.4-6.el9.tuxcare.els8.noarch.rpm d95b9f81f2aa011fb7f8123a664edfbe3f468fbec184829f1bf7dfbaf860c65b glib2-static-2.68.4-6.el9.tuxcare.els8.i686.rpm 8733b8448693137f5d0f02c7e7cd0a824d503a056fbb46a9451dfcdef663906b glib2-static-2.68.4-6.el9.tuxcare.els8.x86_64.rpm 0bf1cbb44918079ca970f2011240c94c9f7287a1753960d4a504f7bfc8eb40b1 glib2-tests-2.68.4-6.el9.tuxcare.els8.x86_64.rpm de2b0d432d36256f7593d5562b3f52294afcd2f67a3c0a622ba98c03ab915c60 CLSA-2026:1783342928 TuxCare License Agreement 0 - CVE-2026-48933: guard WebCrypto AES cipher output length to prevent an integer overflow that crashes the process on ~2GiB subtle.encrypt inputs - CVE-2026-48934: bind reusable TLS sessions to the authenticated host so a resumed session cannot bypass server identity (hostname) verification Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-48933: guard WebCrypto AES cipher output length to prevent an integer overflow that crashes the process on ~2GiB subtle.encrypt inputs - CVE-2026-48934: bind reusable TLS sessions to the authenticated host so a resumed session cannot bypass server identity (hostname) verification

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-8.el9_2.tuxcare.els14.x86_64.rpm d396e4a07f6bbc5b4a90bcad8cd56f7c6addc2afdf7761ec860875fcac6fbbbf nodejs-devel-16.20.2-8.el9_2.tuxcare.els14.x86_64.rpm 322107db9906d352ce44a07fd100dd30542865e7ffa8a8b79a7b6eaee010bfbb nodejs-docs-16.20.2-8.el9_2.tuxcare.els14.noarch.rpm a8a358da3bf56da4fae258a10c0f963a9638d644fecc7cb66fd702578c59a876 nodejs-full-i18n-16.20.2-8.el9_2.tuxcare.els14.x86_64.rpm d832fe885c7d8da65892667cacafd62957adb169051a8e8a58fb15e0d3f46ce3 nodejs-libs-16.20.2-8.el9_2.tuxcare.els14.i686.rpm f3de68c9c9ddedc2079b9cac8e671b58bf1862a56495a80b9673cf13160f2100 nodejs-libs-16.20.2-8.el9_2.tuxcare.els14.x86_64.rpm f4d640cf52c43bb65b0b1d78be25447d6ec44ec0f5af4bed0b9e8236b412ac95 npm-8.19.4_1.16.20.2-8.el9_2.tuxcare.els14.x86_64.rpm ae2d07e52a729c266d30168ab286ff284ce14d5206dec7eae0a751f29208d403 v8-devel-9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els14.x86_64.rpm d0763f29e65eae05392ac8e0698163025f304535d04b04fcb2c6157ae4047c0f CLSA-2026:1783344253 TuxCare License Agreement 0 - CVE-2024-49395: show encryption information block to prevent Bcc recipient leak Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-49395: show encryption information block to prevent Bcc recipient leak

0 tuxcare-almalinux9.2-esu mutt-2.2.6-1.el9_2.tuxcare.els2.x86_64.rpm bd64cbc06d517410b79e40f4bdae62abd8669f8beef274b4f84d26ba858498c7 CLSA-2026:1783345013 TuxCare License Agreement 0 - CVE-2026-46522: add the missing length==0 checks to the MIFF decoder BZ2/LZMA/zlib decompression paths to reject empty compressed chunks and prevent an infinite loop (CPU exhaustion) on crafted files - CVE-2026-46523: mark the MSL coder as not supporting direct blob I/O (entry->blob_support=MagickFalse in RegisterMSLImage) to prevent a heap-use-after-free triggered by a crafted MSL image Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-46522: add the missing length==0 checks to the MIFF decoder BZ2/LZMA/zlib decompression paths to reject empty compressed chunks and prevent an infinite loop (CPU exhaustion) on crafted files - CVE-2026-46523: mark the MSL coder as not supporting direct blob I/O (entry->blob_support=MagickFalse in RegisterMSLImage) to prevent a heap-use-after-free triggered by a crafted MSL image

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.25-1.el9_2.tuxcare.els13.x86_64.rpm c24c99b299db92b741fe9dd168c11c2ba10a0aae086f5ca5acff36dbb1db0a40 ImageMagick-c++-6.9.13.25-1.el9_2.tuxcare.els13.x86_64.rpm 691c8aac097552fafa1bba2bbb75e2fbe435c8d9ff9312347a993e583772023f ImageMagick-c++-devel-6.9.13.25-1.el9_2.tuxcare.els13.x86_64.rpm 73dc8a1fed843a04394c3a42313914c4b3de7cced71ad6a3f995f42c28c06e82 ImageMagick-devel-6.9.13.25-1.el9_2.tuxcare.els13.x86_64.rpm 585400649065760170a7e079e566632b27a31e1277d28b6f9c91480bbbe982cc ImageMagick-djvu-6.9.13.25-1.el9_2.tuxcare.els13.x86_64.rpm f0cd98252d18400a7e55a24e0253dafdf90b903c48d3a931206d0547918fad0f ImageMagick-doc-6.9.13.25-1.el9_2.tuxcare.els13.x86_64.rpm ed7c7557941f50f8842f37c92185377d6112a7f18226c8313feb48604a1b5740 ImageMagick-libs-6.9.13.25-1.el9_2.tuxcare.els13.x86_64.rpm c32df752bf56c3586c35a73e788aa9ceb4435f9f849a96f7b1b88278510e58e3 ImageMagick-perl-6.9.13.25-1.el9_2.tuxcare.els13.x86_64.rpm 6d4ccc1fbfe38d578ecf9648953d5d5b8b759462afecdbd7fcd800c37f019e13 CLSA-2026:1783348552 TuxCare License Agreement 0 - CVE-2026-24660: X3F decoder heap buffer overflow via 32-bit size arithmetic in x3f_load_huffman/x3f_load_true; add LIBRAW_X3F_ALLOC_LIMIT_MB cap and convert size math to 64-bit (ELSCVE-135086) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-24660: X3F decoder heap buffer overflow via 32-bit size arithmetic in x3f_load_huffman/x3f_load_true; add LIBRAW_X3F_ALLOC_LIMIT_MB cap and convert size math to 64-bit (ELSCVE-135086)

0 tuxcare-almalinux9.2-esu LibRaw-0.20.2-5.el9_2.tuxcare.els5.i686.rpm 63532cd18407fd607ce31856630018a9847e7b132b3494f623df04779358bafb LibRaw-0.20.2-5.el9_2.tuxcare.els5.x86_64.rpm 17439a8aae13df87cf8042d3c43ce4de3ce35ec213a4d37f19d133a671a33da0 LibRaw-devel-0.20.2-5.el9_2.tuxcare.els5.i686.rpm f05b9a13f3a5843d7f27c9a5519bfd43eebe185b711f3704164a28db58e15cad LibRaw-devel-0.20.2-5.el9_2.tuxcare.els5.x86_64.rpm 409edc92d3ceeb8fb4c88c4ce7807ccef66790c3660de03b7898e7d19874bf63 LibRaw-samples-0.20.2-5.el9_2.tuxcare.els5.x86_64.rpm 1c8dec69600d473635bfe1fdbc665e13b6bf19d581170a8f48c0aff09b782098 LibRaw-static-0.20.2-5.el9_2.tuxcare.els5.x86_64.rpm 25e83a8a3ee1c78d15c1399381f4822786a734434b12f994b105a4208f4b824b CLSA-2026:1783351991 TuxCare License Agreement 0 - CVE-2026-29168: limit OCSP response size and add timeouts to prevent unbounded memory allocation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-29168: limit OCSP response size and add timeouts to prevent unbounded memory allocation

0 tuxcare-almalinux9.2-esu mod_md-2.4.19-1.el9.tuxcare.els2.x86_64.rpm e49ff1b0b39a280e0168d9afbe4b22cb314fa6f5f733926ac8085961992daeb0 CLSA-2026:1783353880 TuxCare License Agreement 0 - CVE-2026-20889: fix heap-based buffer overflow in x3f_thumb_loader() by adding thumbnail allocation size checks (ELSCVE-135084) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-20889: fix heap-based buffer overflow in x3f_thumb_loader() by adding thumbnail allocation size checks (ELSCVE-135084)

0 tuxcare-almalinux9.2-esu LibRaw-0.20.2-5.el9_2.tuxcare.els4.i686.rpm be206ae4d99cfed694429a1a7d9b2861b40262061f483c973144deba0d385a3e LibRaw-0.20.2-5.el9_2.tuxcare.els4.x86_64.rpm f1b5e995c8b018be8d12d3d148307317e340a7bbf79da58eb2c3985ce1c012fa LibRaw-devel-0.20.2-5.el9_2.tuxcare.els4.i686.rpm 62940af4f29e9bc999f3ea8ced9aa069bf97608779e8ef702fb26086ee4204cf LibRaw-devel-0.20.2-5.el9_2.tuxcare.els4.x86_64.rpm 6a796d6a6c698bc0cd7fbc4155ae310ead690d670e1183f8f98fed2bb59a772f LibRaw-samples-0.20.2-5.el9_2.tuxcare.els4.x86_64.rpm 03058b8bd5db75e17c990ea413a960635a0c7fc79d7f93a13b76c1651aeef9fa LibRaw-static-0.20.2-5.el9_2.tuxcare.els4.x86_64.rpm e7b5a585cc1b8823d466c6c6837c46ff4b05314b6fa35efe3842194a0c7f9c49 CLSA-2026:1783357653 TuxCare License Agreement 0 - CVE-2026-49261: reject shell-unsafe characters in Galera joiner node name and incoming address before interpolating into wsrep_notify_cmd - CVE-2026-48165: validate wsrep_sst_receive_address and wsrep_sst_donor for accepted characters to block SST shell command injection - CVE-2026-44168: add safe() helper and validate joiner-supplied params in the mariabackup SST donor path against shell command injection - CVE-2026-48163: validate joiner-supplied parameters in the rsync SST donor path against shell command injection - CVE-2026-44172: correct big5 lead/tail byte validation in the bundled Connector/C so mysql_real_escape_string cannot be bypassed via big5 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-49261: reject shell-unsafe characters in Galera joiner node name and incoming address before interpolating into wsrep_notify_cmd - CVE-2026-48165: validate wsrep_sst_receive_address and wsrep_sst_donor for accepted characters to block SST shell command injection - CVE-2026-44168: add safe() helper and validate joiner-supplied params in the mariabackup SST donor path against shell command injection - CVE-2026-48163: validate joiner-supplied parameters in the rsync SST donor path against shell command injection - CVE-2026-44172: correct big5 lead/tail byte validation in the bundled Connector/C so mysql_real_escape_string cannot be bypassed via big5

0 tuxcare-almalinux9.2-esu mariadb-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 9109a190e6d30a826c059446a115d3a21f37a1df784090655085ed4764290b8b mariadb-backup-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 6cef8266245f5293bcfc246db76c4d54d49125e5e944f025fe2be0e00f4b7bc3 mariadb-common-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 95b0fbe41153b0a0646640af88fbfd092206df0d96b298f1ed3e6cb890f43c28 mariadb-devel-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 7287fe12157ee56bbbd206f6ca9dc3659360429c622ba42de1a799df68306ce1 mariadb-embedded-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 3a1d38a86a7680b1ede7bc7af4082b13b052ce5cc1bc028750f9ccffb0a2bf1b mariadb-embedded-devel-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 8fb474b63869fb111bd3558643cae5e5d948c8a00ef2dbdcae6f654009b59f67 mariadb-errmsg-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm fe5d5acae12589a488b670f2d1a369c1347d20e77bd3f511c340ac5b0865793f mariadb-gssapi-server-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 3d0442de6af97080dc4099b9007143930002226c392d6b79547c503a2f827d9f mariadb-oqgraph-engine-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm a916396d495a58331531866b335b5dd0d9e1a3aeb6d81e20dd68111ee00340ad mariadb-pam-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 511c1efd557f7310d986fe017f8802f398202131297bcd1ded7516b985b68f3c mariadb-server-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm 4472a79b2042732ef38a006fad6b82e3bfe48b0198c649c603cf86efb0f67580 mariadb-server-galera-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm c1d68bf4cac788dbceeb84bd7d46255829087b8eb01cf92933312914292e531b mariadb-server-utils-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm d93e42e1ad124cbbb2decebd1faf62eec67a7e18b0ea28cb9b6ce5a266239a68 mariadb-test-10.5.29-1.el9_2.alma.1.tuxcare.els2.x86_64.rpm b305538de16493b82c2baf0e7b5682c836be209e557cc92e8e9ae74eb7ed2c16 CLSA-2026:1783416695 TuxCare License Agreement 0 - Add .bs_config to build with dist .el9_2 on Alma9_2ESU - Bump leading Release from 4 to 5 to outrank the currently released 4.el9.4.tuxcare.els3 in RPM version comparison (the previous .el9_2.tuxcare.els4 NVR sorted lower and broke the upgrade path) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add .bs_config to build with dist .el9_2 on Alma9_2ESU - Bump leading Release from 4 to 5 to outrank the currently released 4.el9.4.tuxcare.els3 in RPM version comparison (the previous .el9_2.tuxcare.els4 NVR sorted lower and broke the upgrade path)

0 tuxcare-almalinux9.2-esu mod_http2-1.15.19-5.el9_2.0.tuxcare.els1.x86_64.rpm 460381c31e5c3e7fd5759324f354106eb1aec0f80ae28691693936d97443f328 CLSA-2026:1783418975 TuxCare License Agreement 0 - CVE-2025-10911: use a dedicated node type to maintain the list of cached RVTs (fix use-after-free) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-10911: use a dedicated node type to maintain the list of cached RVTs (fix use-after-free)

0 tuxcare-almalinux9.2-esu libxslt-1.1.34-9.el9.tuxcare.els5.i686.rpm 70b6b7601cddfbbd288e02ca28b7790841a5578fa2b1b1011dc9ef0d5e6372a0 libxslt-1.1.34-9.el9.tuxcare.els5.x86_64.rpm 3aaeb2b5b0528395d1d8a3a83d1ea9d1ea43072ff00d59c2a0a5300944c1eda3 libxslt-devel-1.1.34-9.el9.tuxcare.els5.i686.rpm 7bf45a65f87215ee9b4b3c559ac378e3c386a9e64536ee1738668c004609ab49 libxslt-devel-1.1.34-9.el9.tuxcare.els5.x86_64.rpm ef924e1aee7d0762f4dcc606f2fed8a27fcb71670edc95604acf06b1555af9af CLSA-2026:1783420753 TuxCare License Agreement 0 - CVE-2026-48715: fix stack buffer overflow in radvdump print_ff() Route Information option parser via crafted ICMPv6 Router Advertisement Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-48715: fix stack buffer overflow in radvdump print_ff() Route Information option parser via crafted ICMPv6 Router Advertisement

0 tuxcare-almalinux9.2-esu radvd-2.19-5.el9_2.tuxcare.els1.x86_64.rpm 1cfe77edfc416e9e05de23c28cf9e7f060e1ba6bb7d1616cbc6e3ed6480a3423 CLSA-2026:1783432450 TuxCare License Agreement 0 - CVE-2026-9759: fix ROHC dissector NULL pointer dereference when handling uncompressed profile with large CID Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9759: fix ROHC dissector NULL pointer dereference when handling uncompressed profile with large CID

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9_2.tuxcare.els9.x86_64.rpm 9c039ed61061287ccf1920e0d1a21200f1688f0d531b72050d01fced4f38c5ff wireshark-cli-3.4.10-4.el9_2.tuxcare.els9.i686.rpm 72ade6279c2f9c655be9d17388afcbfa537ee39c1e014d5c5e1bda52ac2d9810 wireshark-cli-3.4.10-4.el9_2.tuxcare.els9.x86_64.rpm 221dd907a6a4121fa973ab74c168e71f052d1d065f29898985295a61fde50b3f wireshark-devel-3.4.10-4.el9_2.tuxcare.els9.i686.rpm 76b62dfab11d2e1e42eeed15741375762965c331df96b7b179ccca4bcae1191b wireshark-devel-3.4.10-4.el9_2.tuxcare.els9.x86_64.rpm 07372df2c1d9812a336dd39b69954737929e0b406f4e346b3a84cec36f2eb757 CLSA-2026:1783434809 TuxCare License Agreement 0 - CVE-2024-49394: fix In-Reply-To and References headers not being copied into protected headers Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-49394: fix In-Reply-To and References headers not being copied into protected headers

0 tuxcare-almalinux9.2-esu mutt-2.2.6-1.el9_2.tuxcare.els3.x86_64.rpm 6e640f7d6b7f9ec51e8d38d6564b98cc4d8f562b5863af5e6e11a3c454122cdc CLSA-2026:1783441581 TuxCare License Agreement 0 - CVE-2025-50420: fix crash in pdfseparate by skipping annotation entries missing both Type and SubType (PDFDoc::markAnnotations) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-50420: fix crash in pdfseparate by skipping annotation entries missing both Type and SubType (PDFDoc::markAnnotations)

0 tuxcare-almalinux9.2-esu poppler-21.01.0-14.el9_2.tuxcare.els6.i686.rpm 76a45e9d79a0bd45dec23ef0e0e06d64944cecd3db0f237fe1efd7515cf7d9a2 poppler-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm e312e9978302bd80a97880f3488f53315c8ca18503ec601346ee28c045a090cc poppler-cpp-21.01.0-14.el9_2.tuxcare.els6.i686.rpm f2623bcb3576884362f6ea7ad19c63f2cb1039de70733da3687ae62b990bcee3 poppler-cpp-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm dca7ce376a4050262088ff31b117b8202f3ac8a0111f6298d28231c9b8886d52 poppler-cpp-devel-21.01.0-14.el9_2.tuxcare.els6.i686.rpm b5bb024cbf8db8156f9b9b3c3edf8116d47c01cc5a77d8aa9a6bbabf39abf4cc poppler-cpp-devel-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm 80cb69a5d3883205f8b81a00abb2edf78bfaf7c8e1bee97e4e108b836ad2081a poppler-devel-21.01.0-14.el9_2.tuxcare.els6.i686.rpm 08886210671af3e6bc08d63bafddc32de78e076dc0d12f4a71ece794c5f5978e poppler-devel-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm 37fe9c5fc9fcfe896c28a20f00e8c286ccaf77360a32921cc6d02066ba3bf2c4 poppler-glib-21.01.0-14.el9_2.tuxcare.els6.i686.rpm ae07e2ffa1882d9253c49062f812d3d6779e08b72c995cfa67d3f49dad813bce poppler-glib-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm d20258ea3d03bfcc8d9a453f3784fa05acbcaa12d36221f916b9ad8a7e018ca4 poppler-glib-devel-21.01.0-14.el9_2.tuxcare.els6.i686.rpm 647fa038bbe698814cf46704e6b854c87852d888e2cd44a2a85673d206ae8357 poppler-glib-devel-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm a2110653c487bffb842a4afeb46e354ad916234e64e17f2af3b10704702b2f50 poppler-glib-doc-21.01.0-14.el9_2.tuxcare.els6.noarch.rpm 75ae1bacaf5d13cf1a9b5736d8865df0219c5256b907aa34a193897ef63cee83 poppler-qt5-21.01.0-14.el9_2.tuxcare.els6.i686.rpm 6c80e6a9113ab9473d6acd0b31bcdec550e7236c85d0556ee4a501f6c7832180 poppler-qt5-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm c371493bed59c4ad7a6118aea24a40aba5ecb950f439c27db6d4535f119edf0e poppler-qt5-devel-21.01.0-14.el9_2.tuxcare.els6.i686.rpm a919bed08c67cdbe088f1f16cdf51f813268283fa497649d4a7e57dd090e7c03 poppler-qt5-devel-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm 47ac0ca4fce6c6fe030a14e78ead2445ed3931f97b60f0ac8f4a26166a5c1198 poppler-utils-21.01.0-14.el9_2.tuxcare.els6.x86_64.rpm aec5c1e5480dfe2283d8a2b04b2aaba96fafb46a41adc36e3873f47cce250cc9 CLSA-2026:1783514299 TuxCare License Agreement 0 - CVE-2026-41991: fix a race when creating a temporary file in gzexe and zdiff on platforms lacking mktemp Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41991: fix a race when creating a temporary file in gzexe and zdiff on platforms lacking mktemp

0 tuxcare-almalinux9.2-esu gzip-1.12-1.el9_2.tuxcare.els1.x86_64.rpm 1c17bf3362397b17c752dabb7cb22922d26fecea6145155b202db21c12289a11 CLSA-2026:1783515814 TuxCare License Agreement 0 - CVE-2026-44173: check the FILE privilege separately before per-table SELECT_ACL so SELECT ... INTO OUTFILE/DUMPFILE from a derived table requires the FILE privilege Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-44173: check the FILE privilege separately before per-table SELECT_ACL so SELECT ... INTO OUTFILE/DUMPFILE from a derived table requires the FILE privilege

0 tuxcare-almalinux9.2-esu mariadb-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm f766c64f94e74199d66c8949ea132d337ae46a0ba120996e02b95eb8e87cae12 mariadb-backup-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm aaf50dde0b8b56c2cc71380749a80269ac1a6beea0be0b872e9f78b3b4a586e2 mariadb-common-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 22342b37689aab2095580b2ed3bdd1485df54fb33aa652abff3ceb5c9447a5a6 mariadb-devel-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm d6098624af862617076a0412a87f6f17b80aede2a7fcff7e73016cf98f8c2e26 mariadb-embedded-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm a35e0c2b7befd589c5c7944ad2bdc7aef6a7694981555c395687db2e0778008d mariadb-embedded-devel-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 1420167094bf4ad91f5c508f76e80c09374afae11c6c2e888ace1f7796a81922 mariadb-errmsg-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 2a14406a4a28f03a7893ea18a903dd6e64bc6e8d51234392110dbc1fd9addd4c mariadb-gssapi-server-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 888f316416b6746c7ea4a19ea3c5a0fa9ff4ee53cf973d9e95ea6f764df988af mariadb-oqgraph-engine-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 1645aab8a36477697cb83f33323c1aed0a6b86009f545906b79572a22691a4f3 mariadb-pam-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 389c7704ee2f91915382c82a7f274922af145c26da3205d20f5922e628294245 mariadb-server-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 56a274d1d685128490dc86c253a0c0eac0a332330cec4ec7acfefd2b27df0518 mariadb-server-galera-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm aab064ed92f682a555fcc18cc9a56651769c34642c539594d0e518d0faad87a7 mariadb-server-utils-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 748061d36771cf1c83613a51b64230ec01ede624539b2b5c635a9c6fb4af6196 mariadb-test-10.5.29-1.el9_2.alma.1.tuxcare.els3.x86_64.rpm 7a46b97b9c3904aa2afcf71388e726412fa64fb20f292ed4ee87e306f3187117 CLSA-2026:1783517292 TuxCare License Agreement 0 - CVE-2026-2770: keep construction depth for custom elements in sync; wrap AutoConstructionDepth in mozilla::Maybe so early throws in HTMLConstructor still tear it down deterministically (Bug 2014585) - CVE-2026-2763: use-after-free in SuppressDeletedProperty during property iteration; replace GetPrototype + GetPropertyDescriptor (both CanGC/re-entrant) with staticPrototype() + LookupPropertyPure() + GetPropertyAttributes() in js/src/vm/Iteration.cpp (Bug 2012018) - CVE-2026-2764: JIT baseline CacheIR call-scripted stub could observe a not-yet-created `this` if it OOM'd between reservation and construction; create `this` after pushing arguments and thread the argument through pushArguments/CreateThis paths (Bug 2012608) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2770: keep construction depth for custom elements in sync; wrap AutoConstructionDepth in mozilla::Maybe so early throws in HTMLConstructor still tear it down deterministically (Bug 2014585) - CVE-2026-2763: use-after-free in SuppressDeletedProperty during property iteration; replace GetPrototype + GetPropertyDescriptor (both CanGC/re-entrant) with staticPrototype() + LookupPropertyPure() + GetPropertyAttributes() in js/src/vm/Iteration.cpp (Bug 2012018) - CVE-2026-2764: JIT baseline CacheIR call-scripted stub could observe a not-yet-created `this` if it OOM'd between reservation and construction; create `this` after pushing arguments and thread the argument through pushArguments/CreateThis paths (Bug 2012608)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els18.x86_64.rpm 41bc0784aae2e948458db57700e2149366359ecc2bb8be605d331735e15b1fb4 CLSA-2026:1783520633 TuxCare License Agreement 0 - CVE-2026-12290: WebGL2 missing per-stage uniform-block validation could let a malicious shader exceed driver limits; opt into ANGLE's validatePerStageMaxUniformBlocks and wire MaxVertex/Fragment uniform block counts (Bug 2024852, includes ANGLE cherry-pick 05459080c9a3) - CVE-2026-12291: use-after-free in HTTP stream listener chain; hold a strong nsCOMPtr<nsIStreamListener> ref across OnStartRequest/ OnDataAvailable/OnStopRequest invocations across 45 callsites (Bug 2036929) - CVE-2026-12292: ThreadSharedFloatArrayBufferList::Create returned uninitialized memory; switch js_pod_malloc to js_pod_calloc for the Web Audio float buffer (Bug 2038465) - CVE-2026-12294: SharedWorker remote-type confusion; simplify SharedWorker remote type handling by sourcing the remote type from the content process instead of recomputing in parent (Bug 2039873) - CVE-2026-12295: sandbox escape via srcdoc data on non-about:srcdoc URIs; add MOZ_RELEASE_ASSERT/IPC reject guards in nsDocShell, nsDocShellLoadState, Document and nsViewSourceChannel (Bug 2040160) - CVE-2026-12297: nsStandardURL deserialization could over-read past the spec buffer; add authority/path NS_ENSURE_TRUE consistency check in Deserialize() and null-pointer guard in Finalize() (Bug 2041610, includes prereq Bug 2027976 isSubSegment ladder) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12290: WebGL2 missing per-stage uniform-block validation could let a malicious shader exceed driver limits; opt into ANGLE's validatePerStageMaxUniformBlocks and wire MaxVertex/Fragment uniform block counts (Bug 2024852, includes ANGLE cherry-pick 05459080c9a3) - CVE-2026-12291: use-after-free in HTTP stream listener chain; hold a strong nsCOMPtr<nsIStreamListener> ref across OnStartRequest/ OnDataAvailable/OnStopRequest invocations across 45 callsites (Bug 2036929) - CVE-2026-12292: ThreadSharedFloatArrayBufferList::Create returned uninitialized memory; switch js_pod_malloc to js_pod_calloc for the Web Audio float buffer (Bug 2038465) - CVE-2026-12294: SharedWorker remote-type confusion; simplify SharedWorker remote type handling by sourcing the remote type from the content process instead of recomputing in parent (Bug 2039873) - CVE-2026-12295: sandbox escape via srcdoc data on non-about:srcdoc URIs; add MOZ_RELEASE_ASSERT/IPC reject guards in nsDocShell, nsDocShellLoadState, Document and nsViewSourceChannel (Bug 2040160) - CVE-2026-12297: nsStandardURL deserialization could over-read past the spec buffer; add authority/path NS_ENSURE_TRUE consistency check in Deserialize() and null-pointer guard in Finalize() (Bug 2041610, includes prereq Bug 2027976 isSubSegment ladder)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els17.x86_64.rpm a000706e1a05b2c4e74e712a7849ed561b61b8f4d517dd86e2b60f361f76ea2d CLSA-2026:1783524329 TuxCare License Agreement 0 - CVE-2026-48864: Fix heap buffer overflow when decompressing solv pages Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-48864: Fix heap buffer overflow when decompressing solv pages

0 tuxcare-almalinux9.2-esu libsolv-0.7.22-4.el9_2.tuxcare.els2.i686.rpm 689fd03c4e812d1d0bc939ea4189f55781115fddd167472a24ecf53d4001a6d7 libsolv-0.7.22-4.el9_2.tuxcare.els2.x86_64.rpm 2e79a26a911531b84fe6401d30037b6bd1a6ab1800acc08c73b756ee15f1831e libsolv-demo-0.7.22-4.el9_2.tuxcare.els2.x86_64.rpm 00bc001935c6f5a4c12b2f5bbec8a461a85c7f9fdacdf5f9b50c04861a189b7b libsolv-devel-0.7.22-4.el9_2.tuxcare.els2.i686.rpm af059a93eb9686f4444161b7f6790072aab0712d6143f8368ada90b7f00a5520 libsolv-devel-0.7.22-4.el9_2.tuxcare.els2.x86_64.rpm 7f20317d8e34b1c80ded61084b4d1c9a9620732815aaee1855270f1a7c786c65 libsolv-tools-0.7.22-4.el9_2.tuxcare.els2.x86_64.rpm 68c9b80f32e1a3d5956d05252fba38f845101b84283ae12083590f98a04bce03 perl-solv-0.7.22-4.el9_2.tuxcare.els2.x86_64.rpm 35a6f5239ea31e0482104cbcacec5fb17d35bb693738ea1b8dfec5a2fd15acae python3-solv-0.7.22-4.el9_2.tuxcare.els2.x86_64.rpm a26e36ae628a2d113c646d56fadc818b86ee75695030ae7e0e20a7652bea9e91 ruby-solv-0.7.22-4.el9_2.tuxcare.els2.x86_64.rpm d6d88797eb69b022c80458e0f35328ab27d1a0de0d3865ec6a0d0e516220f0a7 CLSA-2026:1783525446 TuxCare License Agreement 0 - CVE-2026-42246: fix Net::IMAP STARTTLS response-injection / TLS stripping by guarding send_command against a tagged OK arriving before the response handler runs, and raising InvalidResponseError when the STARTTLS handler is bypassed Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42246: fix Net::IMAP STARTTLS response-injection / TLS stripping by guarding send_command against a tagged OK arriving before the response handler runs, and raising InvalidResponseError when the STARTTLS handler is bypassed

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_2.tuxcare.els16.i686.rpm 8a90c2fc573904109d7fb6329b9ef3b1e9d9ca5642ffcf505946486298750b91 ruby-3.0.4-160.el9_2.tuxcare.els16.x86_64.rpm 4bf697c79fab31f51a9d9fe70a2f6311ee61a8351a297e5a67ae14c139de8380 ruby-default-gems-3.0.4-160.el9_2.tuxcare.els16.noarch.rpm ae7c43e16e642e373e7a0919928203de7dcdc92836d5846e2a6d06f0c5c46693 ruby-devel-3.0.4-160.el9_2.tuxcare.els16.i686.rpm 938a22ebc8a0ac8698658ed0740b4da111d8ae1bd389f42b5ebcdf25929d10f4 ruby-devel-3.0.4-160.el9_2.tuxcare.els16.x86_64.rpm d4a8d54f214848f49c37edc9b992b3ddd7b0314ae07145be64ee78ad92d9c65d ruby-doc-3.0.4-160.el9_2.tuxcare.els16.noarch.rpm 67ef8374d609c6bbd1ed8f3ee2769bd01c9806d623cdb713db4873aa7e670f15 ruby-libs-3.0.4-160.el9_2.tuxcare.els16.i686.rpm 173cc7e5447f32ef7a3364538847f845b76ea8730e29dbe6160e05901b6c67a1 ruby-libs-3.0.4-160.el9_2.tuxcare.els16.x86_64.rpm 4cea1b93d92f04af91a102f9132d55a7b0b41d8e381516889994322bd5be67de rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els16.i686.rpm a43c9dd6f0b0059efc37e5145b38c115f3657013ce83051f4ffa41d8b244e9de rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els16.x86_64.rpm d771c31085367fe7c0cf467d6064adaa81a4d8c4cb49d3210a354ae92f553f3f rubygem-bundler-2.2.33-160.el9_2.tuxcare.els16.noarch.rpm ac5ecb18429d4b318db7fd87eadb7d8258cb70aab58acc6c41d35bd9cc233a0f rubygem-io-console-0.5.7-160.el9_2.tuxcare.els16.i686.rpm 13610d27bf65f4141eb78e5293db10a54f1bcfffe41ebceedf58757d5bf3fecb rubygem-io-console-0.5.7-160.el9_2.tuxcare.els16.x86_64.rpm 01c49914fdea49dc6acd31df9844bec8964eab1240c563d15bd9ec983c8ebeea rubygem-irb-1.3.5-160.el9_2.tuxcare.els16.noarch.rpm 4af1b57087d10571c9007a27a7206723ccdc81707a60d8cea23af6954ed30057 rubygem-json-2.5.1-160.el9_2.tuxcare.els16.i686.rpm 7f44b1c626f3e7de8b2edcee9a396c920d130c52d9249e422f7e931ae7f65a10 rubygem-json-2.5.1-160.el9_2.tuxcare.els16.x86_64.rpm 125b01e88d51b4e4e8abfea8e4d8b875e16d7db9a055b2f4a7ba4aec8731514c rubygem-minitest-5.14.2-160.el9_2.tuxcare.els16.noarch.rpm 94406820452df97368b4cff6900657b29e2c06f36dcd930ff9330197276a7ef7 rubygem-power_assert-1.2.0-160.el9_2.tuxcare.els16.noarch.rpm c34ebde8aeab0ebc1de2e140694fe845cabbb0b6903341e92a12f71df0dcdaf0 rubygem-psych-3.3.2-160.el9_2.tuxcare.els16.i686.rpm 9c2aa8f17894d3d0885518c98bd30104a1da7c841836bec27d31b73453b885b7 rubygem-psych-3.3.2-160.el9_2.tuxcare.els16.x86_64.rpm ad1b3ab86379c19fa01d9dce951208b22815d0063ff880a8e6e7b632963c50e8 rubygem-rake-13.0.3-160.el9_2.tuxcare.els16.noarch.rpm 57adbf3c4348a93fd55fc0c8194fde495100466bc45c19faee2027ae357e954e rubygem-rbs-1.4.0-160.el9_2.tuxcare.els16.noarch.rpm 73adba6e0aa4143032070d3393aac6f3e6713acd743f1e1754babfa4c5afaa98 rubygem-rdoc-6.3.3-160.el9_2.tuxcare.els16.noarch.rpm 877f0d30aaae7499d2f5e151587b745aea6e4f86d06c371bd3fc8e61edf4cc01 rubygem-rexml-3.3.3-160.el9_2.tuxcare.els16.noarch.rpm 44e5d810f2eb0a15a11a2fba7036995fb8b78f16d70fc71375b054addcf15619 rubygem-rss-0.2.9-160.el9_2.tuxcare.els16.noarch.rpm 6b04761da1d3280681fb67a3aeca920970b844b938c871f665bbfe33cdd2c532 rubygem-test-unit-3.3.7-160.el9_2.tuxcare.els16.noarch.rpm c1e68a4b645f895b798b73dc774d95ea884d0946467e82535824fb416cac5a2b rubygem-typeprof-0.15.2-160.el9_2.tuxcare.els16.noarch.rpm 96f2e66483020cc008ddb20f21185975dd93e629d72059e6ed979d3191f812f6 rubygems-3.2.33-160.el9_2.tuxcare.els16.noarch.rpm d01d5663e4c9e35e0714cb6a7495a9f5d9aefe1278334984a130f0c4374f3845 rubygems-devel-3.2.33-160.el9_2.tuxcare.els16.noarch.rpm 1d2a627612b02eff1e1148935114db92cf143ec9ef8c85270d05a10cb1587c1e CLSA-2026:1783527210 TuxCare License Agreement 0 - CVE-2026-55204: fix NULL pointer dereference in hpack_dht_insert() by adding a missing NULL check after hpack_dht_defrag() on the data-space defragmentation path, preventing worker SIGSEGV when the HPACK dynamic-table memory pool is exhausted Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55204: fix NULL pointer dereference in hpack_dht_insert() by adding a missing NULL check after hpack_dht_defrag() on the data-space defragmentation path, preventing worker SIGSEGV when the HPACK dynamic-table memory pool is exhausted

0 tuxcare-almalinux9.2-esu haproxy-2.4.17-6.el9.tuxcare.els6.x86_64.rpm 3f60320d641003ab4c91cd19b534b56eee86c56592ebf9bcbd2b209357328467 CLSA-2026:1783530353 TuxCare License Agreement 0 - CVE-2025-5278: sort - fix heap buffer under-read in begfield()/limfield() when a traditional key specification uses a very large character position Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-5278: sort - fix heap buffer under-read in begfield()/limfield() when a traditional key specification uses a very large character position

0 tuxcare-almalinux9.2-esu coreutils-8.32-34.el9.tuxcare.els1.x86_64.rpm c3d260bc5ffbf80c12233d2b82c1363d27c03db0ca24df066a05c9a026410895 coreutils-common-8.32-34.el9.tuxcare.els1.x86_64.rpm 1fa261d8705f6c5666a9c850f7032830a09282cc25da97f33dcb483990883587 coreutils-single-8.32-34.el9.tuxcare.els1.x86_64.rpm 740ac07bc04ecf3a7d5643ee9cd06cd278ded9b15ef217bba0cbfed9c82929c9 CLSA-2026:1783522891 TuxCare License Agreement 0 - CVE-2026-55957: fix JNDIRealm GSSAPI credential validation bypass by snapshotting the JNDI environment before bind, removing SECURITY_AUTHENTICATION when set to GSSAPI, and restoring it in a finally block that also releases user credentials Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55957: fix JNDIRealm GSSAPI credential validation bypass by snapshotting the JNDI environment before bind, removing SECURITY_AUTHENTICATION when set to GSSAPI, and restoring it in a finally block that also releases user credentials

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-12.el9_2.1.tuxcare.els4.noarch.rpm b0eaf14f1e21211bf211503bd13265cd7acd8ebb6459c812e3a3bebcea0b1ee5 tomcat-admin-webapps-9.0.62-12.el9_2.1.tuxcare.els4.noarch.rpm 82e66437717c60e1674cc4cddaab19eddbdbb1fe81ce7e4bed9e7ec909bb2471 tomcat-docs-webapp-9.0.62-12.el9_2.1.tuxcare.els4.noarch.rpm 3bd1de12327d599b212847e41d5b94e56ed713aad9e9a7e64ed596ba05491429 tomcat-el-3.0-api-9.0.62-12.el9_2.1.tuxcare.els4.noarch.rpm bd22a76146dbe8b80d329aede3ea478045e3288f318710d2b0d41f81393b9029 tomcat-jsp-2.3-api-9.0.62-12.el9_2.1.tuxcare.els4.noarch.rpm 3becfd6038ec236ba361c345e8ab7fce7b3654f99e9a66dfea3577219108172e tomcat-lib-9.0.62-12.el9_2.1.tuxcare.els4.noarch.rpm e05ffee89c4012bdcc7e9871fa7382e04dbb4c6f2c48e14095788addf64ccdd6 tomcat-servlet-4.0-api-9.0.62-12.el9_2.1.tuxcare.els4.noarch.rpm d5f6a5be2984a96057cb8c74be23c2e69b01e14be61dcb5758c7ebf3157ca5ce tomcat-webapps-9.0.62-12.el9_2.1.tuxcare.els4.noarch.rpm e2709b8fd9bdbce223cd7568bd9c64b6b2baa6b9ea16076a047cfa8dbc97c2b8 CLSA-2026:1783601793 TuxCare License Agreement 0 - CVE-2026-2759: out-of-bounds read in AVIF ByteStream reader; validate offset/size via CheckedInt<size_t> before pointer arithmetic and swap the sign-mismatched >= for > in GetContiguousAccess (Bug 2010933, upstream facd3303abe7) - CVE-2026-2778: out-of-bounds heap read in StructuredCloneBlob IPC deserialization; route BlobImpls copy through Span::Subspan so the bounds check triggers a hard abort instead of leaking parent-process memory (Bug 2016358, upstream 1479f78b642c) - CVE-2026-4689: integer overflow / sandbox escape in SlicedInputStream IPC deserialization; validate start+length via CheckedUint64 and reject when curPos exceeds the computed end (Bug 2016374, upstream 14db1934383f) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2759: out-of-bounds read in AVIF ByteStream reader; validate offset/size via CheckedInt<size_t> before pointer arithmetic and swap the sign-mismatched >= for > in GetContiguousAccess (Bug 2010933, upstream facd3303abe7) - CVE-2026-2778: out-of-bounds heap read in StructuredCloneBlob IPC deserialization; route BlobImpls copy through Span::Subspan so the bounds check triggers a hard abort instead of leaking parent-process memory (Bug 2016358, upstream 1479f78b642c) - CVE-2026-4689: integer overflow / sandbox escape in SlicedInputStream IPC deserialization; validate start+length via CheckedUint64 and reject when curPos exceeds the computed end (Bug 2016374, upstream 14db1934383f)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els19.x86_64.rpm 46c9578b953bef480ddaeadf97c7ff463e23564de22da231e28107ba75904408 CLSA-2026:1783607257 TuxCare License Agreement 0 - CVE-2026-6846: XCOFF linker buffer overflow in xcoff_link_add_symbols reloc_info sizing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6846: XCOFF linker buffer overflow in xcoff_link_add_symbols reloc_info sizing

0 tuxcare-almalinux9.2-esu binutils-2.35.2-37.el9.tuxcare.els14.i686.rpm 0f8e40d4833e893f2f24d9f78e3e97bf2f4b7ab49a0adeaa6d311d2c040b99ea binutils-2.35.2-37.el9.tuxcare.els14.x86_64.rpm b8fb2182a2cf5511c6bb9cd18e3d4f41c7acd650ffb2a2476b549b82cf02da92 binutils-devel-2.35.2-37.el9.tuxcare.els14.i686.rpm ab964cb9af24d8d52ba7a1728dad252a4f63433c237d6f85208bbdff2f9b655f binutils-devel-2.35.2-37.el9.tuxcare.els14.x86_64.rpm 247a1d03e265035b017e3ca728231b5e46ef034389ddd18db5810cfa977cb999 binutils-gold-2.35.2-37.el9.tuxcare.els14.x86_64.rpm 1b90136706de6908e7a92917a2e309dd638155f6872985761f4ba7842067d3a4 cross-binutils-aarch64-2.35.2-37.el9.tuxcare.els14.x86_64.rpm 28806feca2fe1fce4b8781b8addc11c767df393e236daf78e98c5f4eec716bbd cross-binutils-ppc64le-2.35.2-37.el9.tuxcare.els14.x86_64.rpm f70770b108e28cf4e70c37683181c9d27f369891c2f702a0a0069aeb3593bf81 cross-binutils-s390x-2.35.2-37.el9.tuxcare.els14.x86_64.rpm 6b2f4353dbb78b3132b9bb159583fd25366d89c7ddda8f995488f6cab1fe3d96 CLSA-2026:1783635895 TuxCare License Agreement 0 - CVE-2026-47783: timing side-channel in SASL userdb auth; use constant-time safe_memcmp() for username/password and drop the early break so the whole password file is always scanned. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-47783: timing side-channel in SASL userdb auth; use constant-time safe_memcmp() for username/password and drop the early break so the whole password file is always scanned.

0 tuxcare-almalinux9.2-esu memcached-1.6.9-7.el9.tuxcare.els2.x86_64.rpm 5a8393452f0a593494571bd9ee389def476f8967a841a50406e2b143ad7b6993 memcached-devel-1.6.9-7.el9.tuxcare.els2.x86_64.rpm dbe5a7a7018725bbc532d1cd0165ee88e0c7317fad0e1a1030a6b98f5d331234 memcached-selinux-1.6.9-7.el9.tuxcare.els2.x86_64.rpm ee86b51bb271945385ee79da20a0ed6477e1e11eb93c0287ce02907de6176870 CLSA-2026:1783675292 TuxCare License Agreement 0 - CVE-2026-48930: reject hostnames with embedded NUL bytes in dns.lookup and net.connect to prevent silent authority rebinding - CVE-2026-48619: cap the HTTP/2 client ORIGIN set size to prevent unbounded memory growth - CVE-2026-48618: normalize hostname to ASCII for TLS server identity checks - CVE-2026-48928: make SNI context matching case-insensitive Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-48930: reject hostnames with embedded NUL bytes in dns.lookup and net.connect to prevent silent authority rebinding - CVE-2026-48619: cap the HTTP/2 client ORIGIN set size to prevent unbounded memory growth - CVE-2026-48618: normalize hostname to ASCII for TLS server identity checks - CVE-2026-48928: make SNI context matching case-insensitive

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-8.el9_2.tuxcare.els15.x86_64.rpm abb88bd842a2e5397357afa09a97df53da8b9ae3afc6b433ccdab5ecda34a0cf nodejs-devel-16.20.2-8.el9_2.tuxcare.els15.x86_64.rpm 7968d77fa1404eaf6ac218897a3523e1562aac08d4fd1772bba2c370fc890612 nodejs-docs-16.20.2-8.el9_2.tuxcare.els15.noarch.rpm f180ab2a7f63dfbb069635877410f27cc9d511f5f0306ed8fe7215c0c4cf078f nodejs-full-i18n-16.20.2-8.el9_2.tuxcare.els15.x86_64.rpm 62eb1290952317bd0b5f6c10bb2f19dba1155bcfbd7bde6b505f4aba8d63013c nodejs-libs-16.20.2-8.el9_2.tuxcare.els15.i686.rpm 015ddaac469aa6408abd24ddf5e2ed593657d38f1a47553843d73ce29aaebd43 nodejs-libs-16.20.2-8.el9_2.tuxcare.els15.x86_64.rpm c70d7c4b3ecf4f45aee05ab951e410feb5ed8beb31a6cce611a905c71b42f332 npm-8.19.4_1.16.20.2-8.el9_2.tuxcare.els15.x86_64.rpm 9ab2bc79f8fa8211f814544d41528ac4eba13ac28147b8b30be15668a16b8911 v8-devel-9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els15.x86_64.rpm 621db44c5b910379b442f88a9a5c1c3496a0bfa39704b9c97acc9490223d5506 CLSA-2026:1783694178 TuxCare License Agreement 0 - CVE-2026-55653: fix double free in the DH-GEX client path during FIPS known-group validation that leads to a client-side denial of service Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55653: fix double free in the DH-GEX client path during FIPS known-group validation that leads to a client-side denial of service

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els13.x86_64.rpm 0771161146318afa80987cf967ce0290f6f8a8a5d3195dea36a3aaa53324600c openssh-askpass-8.7p1-30.el9_2.tuxcare.els13.x86_64.rpm 01bb2373d6ceca2ab1ab77cc6fc24e3791dba226b663b5cc4e7bd43d9474d89c openssh-clients-8.7p1-30.el9_2.tuxcare.els13.x86_64.rpm 8b864f314f8c0271483dfa42b9ccf5511ecc95dcdc3d65b61f37412f71e28ea7 openssh-keycat-8.7p1-30.el9_2.tuxcare.els13.x86_64.rpm e377a15d4be7e04068508967cae9ce3ec12329711791896f79bd84eef3de0092 openssh-server-8.7p1-30.el9_2.tuxcare.els13.x86_64.rpm 44b3219687b7767d6704e911674b716710d3020f301316272f3767723c4e70ff openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els13.x86_64.rpm d16dcc512c6181da73d4765db7fc8bf283ebc91636badce9956a1cf2cf4ebf1b pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els13.x86_64.rpm 0333b14650d2c05acdb33070eaffd4b5ce3f2738bfae902fae5888c0095492d6 CLSA-2026:1783695736 TuxCare License Agreement 0 - CVE-2026-42258: fix Net::IMAP CRLF / IMAP command injection: strictly validate symbol (flag) arguments, send STORE attr as an atom, and validate the Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42258: fix Net::IMAP CRLF / IMAP command injection: strictly validate symbol (flag) arguments, send STORE attr as an atom, and validate the

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_2.tuxcare.els17.i686.rpm 708d8ea150578ecbddc4578b025fe5715ee2e8b2c561b80d07ccec576bc80d4d ruby-3.0.4-160.el9_2.tuxcare.els17.x86_64.rpm a5ba0637e099f33a1721bd978e3c65681137f7f0f02660c08d1910a715bd43fa ruby-default-gems-3.0.4-160.el9_2.tuxcare.els17.noarch.rpm bfb6d7fcf369bc3fa5ed234696f855c93d95970d7a41ceb921a7500f7aabe16a ruby-devel-3.0.4-160.el9_2.tuxcare.els17.i686.rpm 148ff21f1cb51c23d4fa9311a49e0d2a856bcee256fe40c332d38051ed88f96d ruby-devel-3.0.4-160.el9_2.tuxcare.els17.x86_64.rpm eab9624a07d2ac2fa69af2c32fbbe80875b3f8455277153ae31095f9d5c7372f ruby-doc-3.0.4-160.el9_2.tuxcare.els17.noarch.rpm 3ea91dcaa8e52c9c2e736f8fd4dba83b433c64e9b0c89ac634a34f230e4c0ccd ruby-libs-3.0.4-160.el9_2.tuxcare.els17.i686.rpm 3cb4a06044f0409fb529f8103e53b9575d7c229e00aac78df46f6844d588a176 ruby-libs-3.0.4-160.el9_2.tuxcare.els17.x86_64.rpm 0be222881461f1fbef86c3e3573c3f05e6aea2fcff0fa9e643ab63f370fbe6b2 rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els17.i686.rpm 83f0b577845add53257cfd031f6a8be7ba47dd82a862a080c8a2fc19a2e9fbe7 rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els17.x86_64.rpm 032a86252dd74f61edbe831d7f60cddf1cff236cad70c558808bc051770839cf rubygem-bundler-2.2.33-160.el9_2.tuxcare.els17.noarch.rpm 1de2a874c3e7ee116a09ff175422f717057030dd1a1177512a757bf2a8165f11 rubygem-io-console-0.5.7-160.el9_2.tuxcare.els17.i686.rpm 1d2c122d630348ab33239b5589a0655ae4c7b9ea043c9af217b91577535d33fa rubygem-io-console-0.5.7-160.el9_2.tuxcare.els17.x86_64.rpm 12e281b348aac1964e4ad322fb62065fbd2ccb5cd759cebe6482898ee6b47cce rubygem-irb-1.3.5-160.el9_2.tuxcare.els17.noarch.rpm 4a128dad96b0d5f7b7276321105c7d1ede5cab5e337bbad94dfe1362d69cd75f rubygem-json-2.5.1-160.el9_2.tuxcare.els17.i686.rpm ee0322635ed692037ed130f4610bf4bfa8673bc67f2398e08108043996ee7546 rubygem-json-2.5.1-160.el9_2.tuxcare.els17.x86_64.rpm a8650548c4421d2e21f87ca2e691c8525f20abdce3ec32af8ebbf328b8ce19ac rubygem-minitest-5.14.2-160.el9_2.tuxcare.els17.noarch.rpm c9e93ba4184d2602a2f0f36627bc1f937f4100ea2ca9d7d82ecd652b8897ae7b rubygem-power_assert-1.2.0-160.el9_2.tuxcare.els17.noarch.rpm d67d547b795c912835357019ce66c5a722bea78d1fecd41a9639a70d7e6efacc rubygem-psych-3.3.2-160.el9_2.tuxcare.els17.i686.rpm 8582a15c2fc06c1b88b44c4f7b01818a9cbd6540202c825db5940f8da6def1fd rubygem-psych-3.3.2-160.el9_2.tuxcare.els17.x86_64.rpm 0f27abd77998de9fbcddbe7e3c73718921fa1cdfea00d64e0c0581084a03a400 rubygem-rake-13.0.3-160.el9_2.tuxcare.els17.noarch.rpm be4736b965d7ecb04fc97967456ef8fd4b5b44cd9ea139f6299d23b20cc82fc1 rubygem-rbs-1.4.0-160.el9_2.tuxcare.els17.noarch.rpm 5982a65060bcc90496b8b82fc0d22f36ba959d927961a105dfbb5d51f7c1cd00 rubygem-rdoc-6.3.3-160.el9_2.tuxcare.els17.noarch.rpm 5accb99d6b207383c92faac915aabbed90ce319ea8fe587322eef08642ac37df rubygem-rexml-3.3.3-160.el9_2.tuxcare.els17.noarch.rpm be95505c782f62dc80f3316e7ea4c843fc27c9b98fae8f9648332532b7240758 rubygem-rss-0.2.9-160.el9_2.tuxcare.els17.noarch.rpm 1763dbf96fa75632b2118669bf97c37049c4cc73b2703c718f448a3a947f3e93 rubygem-test-unit-3.3.7-160.el9_2.tuxcare.els17.noarch.rpm b5c1335a47e915f1d0b84a2e106f41bdcc2c510488f44a7e707f0d7cef02eed4 rubygem-typeprof-0.15.2-160.el9_2.tuxcare.els17.noarch.rpm f0b4376ba3f3e38f15b78812cb0dad0b6aff3c4e1f4243e29d2cf2b78538ea81 rubygems-3.2.33-160.el9_2.tuxcare.els17.noarch.rpm 7da61be8a209216057de9d8a7a69146c8a76e4e41657743059703f1efb321b14 rubygems-devel-3.2.33-160.el9_2.tuxcare.els17.noarch.rpm 3c391c81a68d152f2328a2b93dfeff197d39cf0a444c7cccc511c7ec8e4111e2 CLSA-2026:1783696553 TuxCare License Agreement 0 - fix CVE-2026-42055: HPACK field-length validation in HTTP/2 gRPC request builder and HTTP/2 response header filter; fields exceeding NGX_HTTP_V2_MAX_FIELD now return NGX_ERROR instead of overflowing the 4-byte HPACK length prefix Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix CVE-2026-42055: HPACK field-length validation in HTTP/2 gRPC request builder and HTTP/2 response header filter; fields exceeding NGX_HTTP_V2_MAX_FIELD now return NGX_ERROR instead of overflowing the 4-byte HPACK length prefix

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.x86_64.rpm 46a13629d1d5c10ec5accd6fc62cfb103ebba5b140174556471ee49e2f0669ca nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.noarch.rpm 851503a458f1ae30c59ef06c794033c1ff6f38f97a3969ede8d701585f31d02e nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.x86_64.rpm 51fd863d7100c60107b3a6a8add29f05004240da800d6e9bdd1200c988f254be nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.noarch.rpm ab25e80d33c329e27fa89e4b4bb54eecdde6ace1271eb7d4a14acac946c88248 nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.x86_64.rpm ee72985c777fddc72f3a5110ccf3aa0a0d4bd0479ae1d59f0c6196cac55aa687 nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.x86_64.rpm ba56804da16c36f1f29f6b980cb829e7eead0d98afe4b2b4e4cc3cd1c3196e7b nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.x86_64.rpm 1e6eb680b62b37357beb6b3c235785aac2ca0024780cfc74ccb218b830ef38d6 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.x86_64.rpm 039ca883bd25ad9f4b91ab3df6a0d417e1a3ea24b0dac733d894d0439cb7088b nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.x86_64.rpm 82b081694672b8c949c268e2b7010d024a31a04c26ba2dc745dabb45a30efc57 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els10.x86_64.rpm 8347fd502e00dabcac9d2e4d40a72809f6a1fbe738c773cbe28cfad10e21c00c CLSA-2026:1783700414 TuxCare License Agreement 0 - CVE-2026-13601: fix loading external resources and ghelp:/proc URIs from web pages Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-13601: fix loading external resources and ghelp:/proc URIs from web pages

0 tuxcare-almalinux9.2-esu yelp-40.3-2.el9_2.tuxcare.els2.x86_64.rpm eef3752b7c3090cf342929b652a0332ab88f8974e577ec6f9c9198ba694a6429 yelp-devel-40.3-2.el9_2.tuxcare.els2.i686.rpm ccb5f976f3cd443e55d641e4264670e3d4d3a976c581e770549579bc31c85d6d yelp-devel-40.3-2.el9_2.tuxcare.els2.x86_64.rpm 130717a3b1a7a5b30d5e8fd5f7107d426a9fc73e8dcd451b9a3483da7d865019 yelp-libs-40.3-2.el9_2.tuxcare.els2.i686.rpm ef0ceab8e61c39da17906f004879a15934e021b8d3e16b0713ad05f1ddb1f571 yelp-libs-40.3-2.el9_2.tuxcare.els2.x86_64.rpm 8dafe172a24ac41f1e9513a3cc4c440cc6dd16f8d5492ff0ca8dac280e5c4226 CLSA-2026:1783705168 TuxCare License Agreement 0 - CVE-2026-11856: flush cached HTTP Digest auth state when the origin or credentials change on the same easy handle so a challenge computed for one origin or set of credentials is not reused for another Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11856: flush cached HTTP Digest auth state when the origin or credentials change on the same easy handle so a challenge computed for one origin or set of credentials is not reused for another

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els13.x86_64.rpm a6c944a4dc0a72c87f9b1b8e8740f0ed80ec09abc6a7c35b202dc43918e0311d curl-minimal-7.76.1-31.el9_2.1.tuxcare.els13.x86_64.rpm f26248bf307bc53afa6d47e5cd3d6529690e91874a063fba22dc5f3e3723a1f7 libcurl-7.76.1-31.el9_2.1.tuxcare.els13.i686.rpm 71e1209d69b3964fc73640a8c5789b3edbe3f77ef1cfe7184c183008f18cde2d libcurl-7.76.1-31.el9_2.1.tuxcare.els13.x86_64.rpm 5847f6f8a89c92244be8136fdfec38db66d7658eaac130f36bd3a18b76438c1b libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els13.i686.rpm b27d04ae4bddace53628c11cc351e7758ce38506207f454e10371959423e2e33 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els13.x86_64.rpm 665a04b5719aa6b8c638a500a1e298d0eb90adeb8917b67c1e783182522771a6 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els13.i686.rpm f6d891d25cbbdae4c5e1f61652af7661926ce9728cc6dbd9eb31985d3f07b57a libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els13.x86_64.rpm 7e01bd76601fd848c217f8b230ec24b43bc12c6ca01f17cf969a53cbc119927b CLSA-2026:1783791447 TuxCare License Agreement 0 - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660} - ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008} - KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975} - Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027} - xhci: Fix null pointer dereference when host dies {CVE-2023-52898} - sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638} - blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671} - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977} - gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975} - HID: betop: check shape of output reports {CVE-2023-53015} - mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932} - HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937} - drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002} - ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013} - RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026} - Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018} - scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760} - sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331} - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038} - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194} - ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160} - nbd: don't allow reconnect after disconnect {CVE-2025-21731} - openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681} - ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167} - ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820} - net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979} - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321} - ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813} - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121} - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041} - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000} - bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994} - xsk: check IFF_UP earlier in Tx path {CVE-2023-53240} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038} - virtgpu: don't reset on shutdown {CVE-2025-38064} - xen/netfront: fix crash when removing device {CVE-2022-48969} - mptcp: do not fallback when OoO is present {CVE-2024-50185} - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925} - netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160} - xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053} - ext4: fix racy may inline data check in dio write {CVE-2023-52786} - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738} - macsec: fix UAF bug for real_dev {CVE-2022-49390} - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259} - mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241} - driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715} - udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712} - ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657} - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611} - eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682} - net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302} - udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544} - RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224} - dlm: fix possible lkb_resource null dereference {CVE-2024-47809} - ACPI: battery: Fix possible crash when unregistering a battery hook {CVE-2024-49955} - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params {CVE-2024-58012} - tpm: Change to kvalloc() in eventlog/acpi.c {CVE-2024-58005} - net_sched: sch_sfq: move the limit validation {CVE-2025-37752} - usb: xhci: Fix NULL pointer dereference on certain command aborts {CVE-2024-57981} - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() {CVE-2025-21861} - bpf: avoid holding freeze_mutex during mmap operation {CVE-2025-21853} - acct: perform last write from workqueue {CVE-2025-21846} - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() {CVE-2025-21959} - ipvlan: ensure network headers are in skb linear part {CVE-2025-21891} - wifi: iwlwifi: mvm: fix 6 GHz scan construction {CVE-2024-53055} - signal: restore the override_rlimit logic {CVE-2024-50271} - thermal: core: Reference count the zone in thermal_zone_get_by_id() {CVE-2024-50028} - block: fix potential invalid pointer dereference in blk_add_partition {CVE-2024-47705} - userfaultfd: fix checks for huge PMDs {CVE-2024-46787} - mptcp: pm: only mark 'subflow' endp as available {CVE-2024-45010} - mptcp: pm: re-using ID of unused flushed subflows {CVE-2024-45010} - eth: bnxt: fix truesize for mb-xdp-pass case {CVE-2025-21961} - driver core: fix potential NULL pointer dereference in dev_uevent() {CVE-2025-37800} - virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835} - cgroup: fix race between task migration and iteration {CVE-2026-43439} - bpf: Fix wrong reg type conversion in release_reference() {CVE-2022-49873} - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error {CVE-2025-21732} - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN {CVE-2026-23472} - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion {CVE-2026-23468} - net: add proper RCU protection to /proc/net/ptype {CVE-2026-23255} - tcp: secure_seq: add back ports to TS offset {CVE-2026-23247} - RDMA/mlx5: Fix a WARN during dereg_mr for DM type {CVE-2025-21888} - list: fix a data-race around ep->rdllist {CVE-2022-49443} - can: isotp: sanitize CAN ID checks in isotp_bind() {CVE-2022-49269} - rxrpc: Fix recv-recv race of completed call {CVE-2025-38524} - sched/rt: Fix race in push_rt_task {CVE-2025-38234} - NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232} - virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064} - block: fix resource leak in blk_register_queue() error path {CVE-2025-37980} - xsk: Fix race condition in AF_XDP generic RX path {CVE-2025-37920} - mm/vmscan: don't try to reclaim hwpoison folio {CVE-2025-37834} - nouveau: offload fence uevents work to workqueue {CVE-2024-26719} - bpf: Fix kmemleak warning for percpu hashmap {CVE-2025-37807} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h {CVE-2024-26906} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket {CVE-2024-42246} - quota: Fix potential NULL pointer dereference {CVE-2024-26878} - arp: Prevent overflow in arp_req_get(). {CVE-2024-26733} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values {CVE-2024-42114} - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() {CVE-2024-41063} - fsnotify: clear PARENT_WATCHED flags lazily {CVE-2024-47660} - mm: use memalloc_nofs_save() in page_cache_ra_order() {CVE-2024-36882} - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled {CVE-2024-26987} - net: esp: fix bad handling of pages from page_pool {CVE-2024-26953} - virtio/vsock: Fix accept_queue memory leak {CVE-2024-53119} - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() {CVE-2024-50251} - fs/proc: fix softlockup in __read_vmcore (part 2) {CVE-2025-21694} - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability {CVE-2024-53051} - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. {CVE-2025-23143} - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() {CVE-2025-22090} - net: decrease cached dst counters in dst_release {CVE-2025-22057} - nfsd: put dl_stid if fail to queue dl_recall {CVE-2025-22025} - nfsd: make nfsd4_run_cb a bool return function {CVE-2025-22025} - usb: gadget: core: flush gadget workqueue after device removal {CVE-2025-21838} - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 {CVE-2025-21831} - media: uvcvideo: Fix crash during unbind if gpio unit is in use {CVE-2024-58079} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() {CVE-2023-52877} - ext4: filesystems without casefold feature cannot be mounted with siphash {CVE-2024-49968} - padata: use integer wrap around to prevent deadlock on seq_nr overflow {CVE-2024-47739} - bpf, lsm: Add check for BPF LSM return value {CVE-2024-47703} - sched/smt: Fix unbalance sched_smt_present dec/inc {CVE-2024-44958} - xen-netfront: Fix NULL sring after live migration {CVE-2022-48969} - dlm: prevent NPD when writing a positive value to event_done {CVE-2025-23131} - udp: Deal with race between UDP socket address change and rehash {CVE-2024-57974} - bpf: sync_linked_regs() must preserve subreg_def {CVE-2024-53125} - mptcp: handle consistently DSS corruption {CVE-2024-50185} - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' {CVE-2024-36478} - net: tunnels: annotate lockless accesses to dev->needed_headroom {CVE-2023-53109} - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled {CVE-2025-38039} - uprobes: Reject the shared zeropage in uprobe_write_opcode() {CVE-2025-21881} - mm: slub: avoid wake up kswapd in set_track_prepare {CVE-2025-39843} - mm/smaps: fix race between smaps_hugetlb_range and migration {CVE-2025-39754} - bpf: Reject narrower access to pointer ctx fields {CVE-2025-38591} - net: clear the dst when changing skb protocol {CVE-2025-38192} - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() {CVE-2025-23144} - RDMA/core: Don't expose hw_counters outside of init net namespace {CVE-2025-22089} - can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925} - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. {CVE-2025-22111} - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object {CVE-2025-39851} - loop: Avoid updating block size under exclusive owner {CVE-2025-38709} - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() {CVE-2025-38643} - net_sched: sch_sfq: reject invalid perturb period {CVE-2025-38193} - net: phy: mscc: Fix memory leak when using one step timestamping {CVE-2025-38148} - espintcp: remove encap socket caching to avoid reference leak {CVE-2025-38097} - rseq: Fix segfault on registration when rseq_cs is non-zero {CVE-2025-38067} - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs {CVE-2025-38040} - usb: typec: ucsi: displayport: Fix deadlock {CVE-2025-37967} - ipvs: fix uninit-value for saddr in do_output_route4 {CVE-2025-37961} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item {CVE-2025-68211} - bpf: Scrub packet on bpf_redirect_peer {CVE-2025-37959} - tracing: Verify event formats that have "%*p.." {CVE-2025-37938} - iommu/amd/pgtbl: Fix possible race while increase page table level {CVE-2025-39961} - net/mlx5e: Harden uplink netdev access against device unbind {CVE-2025-39947} - dm-stripe: fix a possible integer overflow {CVE-2025-39940} - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer {CVE-2025-39937} - can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665} - net/mlx5e: Fix crash on profile change rollback failure {CVE-2026-23000} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation {CVE-2025-38162} - tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138} - rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066} - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997} - net: can: j1939: recover socket queue on CAN bus error during BAM transmission {CVE-2026-22997} - dm-verity: disable recursive forward error correction {CVE-2025-71161} - netfilter: nf_tables: avoid chain re-validation if possible {CVE-2025-71160} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd {CVE-2025-71147} - vsock/virtio: fix potential underflow in virtio_transport_get_credit() {CVE-2026-23069} - net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154} - ice: Don't process extts if PTP is disabled {CVE-2024-42107} - drm/i915/dpt: Make DPT object unshrinkable {CVE-2024-40924} - drm/i915/dpt: Treat the DPT BO as a framebuffer {CVE-2024-40924} - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx {CVE-2024-53091} - pipe: wakeup wr_wait after setting max_usage {CVE-2023-52672} - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails {CVE-2023-53103} - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check {CVE-2024-57993} - drm/amdkfd: debugfs hang_hws skip GPU with MES {CVE-2025-37853} - leds: mlxreg: Use devm_mutex_init() for mutex initialization {CVE-2024-42129} - drm/amd/display: fix a Null pointer dereference vulnerability {CVE-2025-39705} - gfs2: Validate i_depth for exhash directories {CVE-2025-38710} - drm/scheduler: signal scheduled fence when kill job {CVE-2025-38436} - drm/amdgpu: Add basic validation for RAS header {CVE-2025-38426} - mptcp: fix NULL pointer in can_accept_new_subflow {CVE-2025-23145} - bpf: bpf_sk_storage: Fix invalid wait context lockdep report {CVE-2023-53857} - nvme-core: fix memory leak in dhchap_secret_store {CVE-2023-53852} - virtio_net: Fix error unwinding of XDP initialization {CVE-2023-53499} - nvme-core: fix memory leak in dhchap_ctrl_secret {CVE-2023-53792} - ceph: fix race condition validating r_parent before applying state {CVE-2025-39927} - x86/MCE: Always save CS register on AMD Zen IF Poison errors {CVE-2023-53438} - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() {CVE-2023-53332} - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net {CVE-2023-54276} - blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init {CVE-2023-54271} - net/mlx5e: TC, Fix internal port memory leak {CVE-2023-53999} - tipc: do not update mtu if msg_max is too small in mtu negotiation {CVE-2023-53517} - tipc: add tipc_bearer_min_mtu to calculate min mtu {CVE-2023-53517} - tun: Fix memory leak for detached NAPI queue. {CVE-2023-53685} - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize {CVE-2023-53667} - start_kernel: Add __no_stack_protector function attribute {CVE-2023-53491} - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb {CVE-2023-53548} - sched/psi: use kernfs polling functions for PSI trigger polling {CVE-2023-54019} - cxl/pmem: Fix nvdimm registration races {CVE-2023-54323} - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock {CVE-2025-68223} - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() {CVE-2026-23004} - wifi: mac80211: don't WARN for connections on invalid channels {CVE-2025-71227} - md: suspend array while updating raid_disks via sysfs {CVE-2025-71225} - net: stmmac: fix the crash issue for zero copy XDP_TX action {CVE-2025-71095} - drm/ttm: Don't leak a resource on eviction error {CVE-2023-54254} - firmware: arm_sdei: Fix sleep from invalid context BUG {CVE-2023-54160} - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter {CVE-2023-54057} - net: usb: asix: validate PHY address before use {CVE-2025-71094} - tty: fix deadlock caused by calling printk() under tty_port->lock {CVE-2022-49441} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE {CVE-2026-23401} - blktrace: fix __this_cpu_read/write in preemptible context {CVE-2026-23374} - x86/CPU: Fix FPDSS on Zen1 {CVE-2025-54505} - ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210} - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169} - gfs2: No more self recovery {CVE-2025-38659} - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() {CVE-2022-49891} - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() {CVE-2022-49796} - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() {CVE-2022-49797} - netlink: Bounds-check struct nlmsgerr creation {CVE-2022-49766} - bpf: Prevent bpf program recursion for raw tracepoint probes {CVE-2022-49764} - i2c: designware: use casting of u64 in clock multiplication to avoid overflow {CVE-2022-49749} - futex: Clear stale exiting pointer in futex_lock_pi() retry path {CVE-2026-31555} - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531} - netfilter: ctnetlink: use netlink policy range checks {CVE-2026-31495} - tracing: Fix potential deadlock in cpu hotplug with osnoise {CVE-2026-31480} - esp: fix skb leak with espintcp and async crypto {CVE-2026-31518} - xfs: factor out xfs_attr3_leaf_init {CVE-2026-43053} - xfs: factor out xfs_attr3_node_entry_remove {CVE-2026-43053} - ALSA: ctxfi: Check the error for index mapping {CVE-2026-31777} - bridge: br_nd_send: validate ND option lengths {CVE-2026-31752} - rtnetlink: add missing netlink_ns_capable() check for peer netns {CVE-2026-31692} - crypto: af_alg - limit RX SG extraction by receive buffer budget {CVE-2026-31677} - APEI/GHES: ensure that won't go past CPER allocated record {CVE-2026-43277} - ceph: supply snapshot context in ceph_zero_partial_object() {CVE-2026-43273} - team: avoid NETDEV_CHANGEMTU event when unregistering slave {CVE-2026-43234} - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() {CVE-2025-71297} - EFI/CPER: don't go past the ARM processor CPER record buffer {CVE-2026-43266} - net: bridge: switchdev: Skip MDB replays of deferred events on offload {CVE-2024-26837} - can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088} - ipvlan: Make the addrs_lock be per port {CVE-2026-23103} - netem: fix return value if duplicate enqueue fails {CVE-2024-45016} - USB: serial: mos7840: fix crash on resume {CVE-2024-42244} - crypto: null - Use spin lock instead of mutex {CVE-2025-37808} - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096} - bpf: Fix overrunning reservations in ringbuf {CVE-2024-41009} - bpf: Fix bpf_sk_select_reuseport() memory leak {CVE-2025-21683} - drm/i915: Fix request ref counting during error capture & debugfs dump {CVE-2023-52981} - netfilter: conntrack: fix wrong ct->timeout value {CVE-2023-53635} - drop_monitor: replace spin_lock by raw_spin_lock {CVE-2024-40980} - net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546} - serial: protect uart_port_dtr_rts() in uart_shutdown() too {CVE-2024-50058} - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. {CVE-2026-31551} - ipv6: Fix signed integer overflow in __ip6_append_data {CVE-2022-49728} - selinux: avoid dereference of garbage after mount failure {CVE-2024-35904} - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name {CVE-2024-49934} - tracing: Do not let histogram values have some modifiers {CVE-2023-53093} - ice: Add netif_device_attach/detach into PF reset flow {CVE-2024-46770} - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. {CVE-2025-37884} - fbmon: prevent division by zero in fb_videomode_from_videomode() {CVE-2024-35922} - drm/amdgpu: Fix the null pointer dereference to ras_manager {CVE-2024-43908} - tracing: Ensure visibility when inserting an element into tracing_map {CVE-2024-26645} - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func {CVE-2024-47720} - phy: mdio: fix memory leak {CVE-2021-47416} - ipv4: Fix reference count leak when using error routes with nexthop objects {CVE-2025-71097} - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() {CVE-2024-50046} - packet: annotate data-races around ignore_outgoing {CVE-2024-26862} - md: fix resync softlockup when bitmap size is less than array size {CVE-2024-38598} - wireguard: receive: annotate data-race around receiving_counter.counter {CVE-2024-26861} - netfs: Only call folio_start_fscache() one time for each folio {CVE-2023-52582} - usb: xhci: tegra: fix sleep in atomic call {CVE-2023-53475} - ACPI: PAD: fix crash in exit_round_robin() {CVE-2024-49935} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() {CVE-2024-50256} - Bluetooth: ISO: Fix multiple init when debugfs is disabled {CVE-2024-50077} - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio {CVE-2025-21931} - RDMA/core: Silence oversized kvmalloc() warning {CVE-2025-37867} - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() {CVE-2024-26663} - net: let net.core.dev_weight always be non-zero {CVE-2025-21806} - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() {CVE-2022-48961} - eth: alx: take rtnl_lock on resume {CVE-2022-50498} - ata: libata-transport: fix error handling in ata_tlink_add() {CVE-2022-49824} - ata: libata-transport: fix error handling in ata_tport_add() {CVE-2022-49825} - netfilter: br_netfilter: fix panic with metadata_dst skb {CVE-2024-50045} - net: fix NULL pointer in skb_segment_list {CVE-2023-52991} - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698} - scsi: qla2xxx: validate nvme_local_port correctly {CVE-2024-42286} - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale {CVE-2023-53291} - wifi: mac80211: Discard Beacon frames to non-broadcast address {CVE-2025-71127} - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() {CVE-2024-46755} - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640} - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes {CVE-2024-41089} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING {CVE-2023-52845} - bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets {CVE-2023-52523} - Bluetooth: Fix not cleanup led when bt_init fails {CVE-2022-48971} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range {CVE-2024-26851} - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() {CVE-2024-53680} - ppp_async: limit MRU to 64K {CVE-2024-26675} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904} - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work {CVE-2024-26631} - xfrm: fix one more kernel-infoleak in algo dumping {CVE-2024-50110} - xdp: fix invalid wait context of page_pool_destroy() {CVE-2024-43834} - fs/netfs/fscache_cookie: add missing "n_accesses" check {CVE-2024-45000} - mac802154: check local interfaces before deleting sdata list {CVE-2024-57948} - usbnet: gl620a: fix endpoint checking in genelink_bind() {CVE-2025-21877} - IB/core: Fix ib_cache_setup_one error flow cleanup {CVE-2024-47693} - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate {CVE-2021-4454} - vfs: fix race between evice_inodes() and find_inode()&iput() {CVE-2024-47679} - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts {CVE-2023-53245} - iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087} - cachefiles: fix memory leak in cachefiles_add_cache() {CVE-2024-26840} - ext4: fix access to uninitialised lock in fc replay path {CVE-2024-50014} - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices {CVE-2025-21649} - ftrace: Fix regression with module command in stack_trace_filter {CVE-2024-56569} - ipv6: sr: fix invalid unregister error path {CVE-2024-38612} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493} - netfilter: flowtable: strictly check for maximum number of actions {CVE-2026-43329} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() {CVE-2026-43038} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660} - ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008} - KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975} - Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027} - xhci: Fix null pointer dereference when host dies {CVE-2023-52898} - sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638} - blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671} - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977} - gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975} - HID: betop: check shape of output reports {CVE-2023-53015} - mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932} - HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937} - drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002} - ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013} - RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026} - Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018} - scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760} - sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331} - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038} - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194} - ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160} - nbd: don't allow reconnect after disconnect {CVE-2025-21731} - openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681} - ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167} - ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820} - net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979} - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321} - ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813} - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121} - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041} - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000} - bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994} - xsk: check IFF_UP earlier in Tx path {CVE-2023-53240} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038} - virtgpu: don't reset on shutdown {CVE-2025-38064} - xen/netfront: fix crash when removing device {CVE-2022-48969} - mptcp: do not fallback when OoO is present {CVE-2024-50185} - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925} - netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160} - xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053} - ext4: fix racy may inline data check in dio write {CVE-2023-52786} - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738} - macsec: fix UAF bug for real_dev {CVE-2022-49390} - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259} - mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241} - driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715} - udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712} - ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657} - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611} - eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682} - net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302} - udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544} - RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224} - dlm: fix possible lkb_resource null dereference {CVE-2024-47809} - ACPI: battery: Fix possible crash when unregistering a battery hook {CVE-2024-49955} - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params {CVE-2024-58012} - tpm: Change to kvalloc() in eventlog/acpi.c {CVE-2024-58005} - net_sched: sch_sfq: move the limit validation {CVE-2025-37752} - usb: xhci: Fix NULL pointer dereference on certain command aborts {CVE-2024-57981} - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() {CVE-2025-21861} - bpf: avoid holding freeze_mutex during mmap operation {CVE-2025-21853} - acct: perform last write from workqueue {CVE-2025-21846} - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() {CVE-2025-21959} - ipvlan: ensure network headers are in skb linear part {CVE-2025-21891} - wifi: iwlwifi: mvm: fix 6 GHz scan construction {CVE-2024-53055} - signal: restore the override_rlimit logic {CVE-2024-50271} - thermal: core: Reference count the zone in thermal_zone_get_by_id() {CVE-2024-50028} - block: fix potential invalid pointer dereference in blk_add_partition {CVE-2024-47705} - userfaultfd: fix checks for huge PMDs {CVE-2024-46787} - mptcp: pm: only mark 'subflow' endp as available {CVE-2024-45010} - mptcp: pm: re-using ID of unused flushed subflows {CVE-2024-45010} - eth: bnxt: fix truesize for mb-xdp-pass case {CVE-2025-21961} - driver core: fix potential NULL pointer dereference in dev_uevent() {CVE-2025-37800} - virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835} - cgroup: fix race between task migration and iteration {CVE-2026-43439} - bpf: Fix wrong reg type conversion in release_reference() {CVE-2022-49873} - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error {CVE-2025-21732} - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN {CVE-2026-23472} - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion {CVE-2026-23468} - net: add proper RCU protection to /proc/net/ptype {CVE-2026-23255} - tcp: secure_seq: add back ports to TS offset {CVE-2026-23247} - RDMA/mlx5: Fix a WARN during dereg_mr for DM type {CVE-2025-21888} - list: fix a data-race around ep->rdllist {CVE-2022-49443} - can: isotp: sanitize CAN ID checks in isotp_bind() {CVE-2022-49269} - rxrpc: Fix recv-recv race of completed call {CVE-2025-38524} - sched/rt: Fix race in push_rt_task {CVE-2025-38234} - NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232} - virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064} - block: fix resource leak in blk_register_queue() error path {CVE-2025-37980} - xsk: Fix race condition in AF_XDP generic RX path {CVE-2025-37920} - mm/vmscan: don't try to reclaim hwpoison folio {CVE-2025-37834} - nouveau: offload fence uevents work to workqueue {CVE-2024-26719} - bpf: Fix kmemleak warning for percpu hashmap {CVE-2025-37807} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h {CVE-2024-26906} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket {CVE-2024-42246} - quota: Fix potential NULL pointer dereference {CVE-2024-26878} - arp: Prevent overflow in arp_req_get(). {CVE-2024-26733} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values {CVE-2024-42114} - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() {CVE-2024-41063} - fsnotify: clear PARENT_WATCHED flags lazily {CVE-2024-47660} - mm: use memalloc_nofs_save() in page_cache_ra_order() {CVE-2024-36882} - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled {CVE-2024-26987} - net: esp: fix bad handling of pages from page_pool {CVE-2024-26953} - virtio/vsock: Fix accept_queue memory leak {CVE-2024-53119} - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() {CVE-2024-50251} - fs/proc: fix softlockup in __read_vmcore (part 2) {CVE-2025-21694} - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability {CVE-2024-53051} - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. {CVE-2025-23143} - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() {CVE-2025-22090} - net: decrease cached dst counters in dst_release {CVE-2025-22057} - nfsd: put dl_stid if fail to queue dl_recall {CVE-2025-22025} - nfsd: make nfsd4_run_cb a bool return function {CVE-2025-22025} - usb: gadget: core: flush gadget workqueue after device removal {CVE-2025-21838} - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 {CVE-2025-21831} - media: uvcvideo: Fix crash during unbind if gpio unit is in use {CVE-2024-58079} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() {CVE-2023-52877} - ext4: filesystems without casefold feature cannot be mounted with siphash {CVE-2024-49968} - padata: use integer wrap around to prevent deadlock on seq_nr overflow {CVE-2024-47739} - bpf, lsm: Add check for BPF LSM return value {CVE-2024-47703} - sched/smt: Fix unbalance sched_smt_present dec/inc {CVE-2024-44958} - xen-netfront: Fix NULL sring after live migration {CVE-2022-48969} - dlm: prevent NPD when writing a positive value to event_done {CVE-2025-23131} - udp: Deal with race between UDP socket address change and rehash {CVE-2024-57974} - bpf: sync_linked_regs() must preserve subreg_def {CVE-2024-53125} - mptcp: handle consistently DSS corruption {CVE-2024-50185} - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' {CVE-2024-36478} - net: tunnels: annotate lockless accesses to dev->needed_headroom {CVE-2023-53109} - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled {CVE-2025-38039} - uprobes: Reject the shared zeropage in uprobe_write_opcode() {CVE-2025-21881} - mm: slub: avoid wake up kswapd in set_track_prepare {CVE-2025-39843} - mm/smaps: fix race between smaps_hugetlb_range and migration {CVE-2025-39754} - bpf: Reject narrower access to pointer ctx fields {CVE-2025-38591} - net: clear the dst when changing skb protocol {CVE-2025-38192} - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() {CVE-2025-23144} - RDMA/core: Don't expose hw_counters outside of init net namespace {CVE-2025-22089} - can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925} - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. {CVE-2025-22111} - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object {CVE-2025-39851} - loop: Avoid updating block size under exclusive owner {CVE-2025-38709} - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() {CVE-2025-38643} - net_sched: sch_sfq: reject invalid perturb period {CVE-2025-38193} - net: phy: mscc: Fix memory leak when using one step timestamping {CVE-2025-38148} - espintcp: remove encap socket caching to avoid reference leak {CVE-2025-38097} - rseq: Fix segfault on registration when rseq_cs is non-zero {CVE-2025-38067} - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs {CVE-2025-38040} - usb: typec: ucsi: displayport: Fix deadlock {CVE-2025-37967} - ipvs: fix uninit-value for saddr in do_output_route4 {CVE-2025-37961} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item {CVE-2025-68211} - bpf: Scrub packet on bpf_redirect_peer {CVE-2025-37959} - tracing: Verify event formats that have "%*p.." {CVE-2025-37938} - iommu/amd/pgtbl: Fix possible race while increase page table level {CVE-2025-39961} - net/mlx5e: Harden uplink netdev access against device unbind {CVE-2025-39947} - dm-stripe: fix a possible integer overflow {CVE-2025-39940} - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer {CVE-2025-39937} - can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665} - net/mlx5e: Fix crash on profile change rollback failure {CVE-2026-23000} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation {CVE-2025-38162} - tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138} - rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066} - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997} - net: can: j1939: recover socket queue on CAN bus error during BAM transmission {CVE-2026-22997} - dm-verity: disable recursive forward error correction {CVE-2025-71161} - netfilter: nf_tables: avoid chain re-validation if possible {CVE-2025-71160} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd {CVE-2025-71147} - vsock/virtio: fix potential underflow in virtio_transport_get_credit() {CVE-2026-23069} - net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154} - ice: Don't process extts if PTP is disabled {CVE-2024-42107} - drm/i915/dpt: Make DPT object unshrinkable {CVE-2024-40924} - drm/i915/dpt: Treat the DPT BO as a framebuffer {CVE-2024-40924} - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx {CVE-2024-53091} - pipe: wakeup wr_wait after setting max_usage {CVE-2023-52672} - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails {CVE-2023-53103} - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check {CVE-2024-57993} - drm/amdkfd: debugfs hang_hws skip GPU with MES {CVE-2025-37853} - leds: mlxreg: Use devm_mutex_init() for mutex initialization {CVE-2024-42129} - drm/amd/display: fix a Null pointer dereference vulnerability {CVE-2025-39705} - gfs2: Validate i_depth for exhash directories {CVE-2025-38710} - drm/scheduler: signal scheduled fence when kill job {CVE-2025-38436} - drm/amdgpu: Add basic validation for RAS header {CVE-2025-38426} - mptcp: fix NULL pointer in can_accept_new_subflow {CVE-2025-23145} - bpf: bpf_sk_storage: Fix invalid wait context lockdep report {CVE-2023-53857} - nvme-core: fix memory leak in dhchap_secret_store {CVE-2023-53852} - virtio_net: Fix error unwinding of XDP initialization {CVE-2023-53499} - nvme-core: fix memory leak in dhchap_ctrl_secret {CVE-2023-53792} - ceph: fix race condition validating r_parent before applying state {CVE-2025-39927} - x86/MCE: Always save CS register on AMD Zen IF Poison errors {CVE-2023-53438} - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() {CVE-2023-53332} - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net {CVE-2023-54276} - blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init {CVE-2023-54271} - net/mlx5e: TC, Fix internal port memory leak {CVE-2023-53999} - tipc: do not update mtu if msg_max is too small in mtu negotiation {CVE-2023-53517} - tipc: add tipc_bearer_min_mtu to calculate min mtu {CVE-2023-53517} - tun: Fix memory leak for detached NAPI queue. {CVE-2023-53685} - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize {CVE-2023-53667} - start_kernel: Add __no_stack_protector function attribute {CVE-2023-53491} - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb {CVE-2023-53548} - sched/psi: use kernfs polling functions for PSI trigger polling {CVE-2023-54019} - cxl/pmem: Fix nvdimm registration races {CVE-2023-54323} - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock {CVE-2025-68223} - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() {CVE-2026-23004} - wifi: mac80211: don't WARN for connections on invalid channels {CVE-2025-71227} - md: suspend array while updating raid_disks via sysfs {CVE-2025-71225} - net: stmmac: fix the crash issue for zero copy XDP_TX action {CVE-2025-71095} - drm/ttm: Don't leak a resource on eviction error {CVE-2023-54254} - firmware: arm_sdei: Fix sleep from invalid context BUG {CVE-2023-54160} - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter {CVE-2023-54057} - net: usb: asix: validate PHY address before use {CVE-2025-71094} - tty: fix deadlock caused by calling printk() under tty_port->lock {CVE-2022-49441} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE {CVE-2026-23401} - blktrace: fix __this_cpu_read/write in preemptible context {CVE-2026-23374} - x86/CPU: Fix FPDSS on Zen1 {CVE-2025-54505} - ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210} - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169} - gfs2: No more self recovery {CVE-2025-38659} - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() {CVE-2022-49891} - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() {CVE-2022-49796} - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() {CVE-2022-49797} - netlink: Bounds-check struct nlmsgerr creation {CVE-2022-49766} - bpf: Prevent bpf program recursion for raw tracepoint probes {CVE-2022-49764} - i2c: designware: use casting of u64 in clock multiplication to avoid overflow {CVE-2022-49749} - futex: Clear stale exiting pointer in futex_lock_pi() retry path {CVE-2026-31555} - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531} - netfilter: ctnetlink: use netlink policy range checks {CVE-2026-31495} - tracing: Fix potential deadlock in cpu hotplug with osnoise {CVE-2026-31480} - esp: fix skb leak with espintcp and async crypto {CVE-2026-31518} - xfs: factor out xfs_attr3_leaf_init {CVE-2026-43053} - xfs: factor out xfs_attr3_node_entry_remove {CVE-2026-43053} - ALSA: ctxfi: Check the error for index mapping {CVE-2026-31777} - bridge: br_nd_send: validate ND option lengths {CVE-2026-31752} - rtnetlink: add missing netlink_ns_capable() check for peer netns {CVE-2026-31692} - crypto: af_alg - limit RX SG extraction by receive buffer budget {CVE-2026-31677} - APEI/GHES: ensure that won't go past CPER allocated record {CVE-2026-43277} - ceph: supply snapshot context in ceph_zero_partial_object() {CVE-2026-43273} - team: avoid NETDEV_CHANGEMTU event when unregistering slave {CVE-2026-43234} - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() {CVE-2025-71297} - EFI/CPER: don't go past the ARM processor CPER record buffer {CVE-2026-43266} - net: bridge: switchdev: Skip MDB replays of deferred events on offload {CVE-2024-26837} - can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088} - ipvlan: Make the addrs_lock be per port {CVE-2026-23103} - netem: fix return value if duplicate enqueue fails {CVE-2024-45016} - USB: serial: mos7840: fix crash on resume {CVE-2024-42244} - crypto: null - Use spin lock instead of mutex {CVE-2025-37808} - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096} - bpf: Fix overrunning reservations in ringbuf {CVE-2024-41009} - bpf: Fix bpf_sk_select_reuseport() memory leak {CVE-2025-21683} - drm/i915: Fix request ref counting during error capture & debugfs dump {CVE-2023-52981} - netfilter: conntrack: fix wrong ct->timeout value {CVE-2023-53635} - drop_monitor: replace spin_lock by raw_spin_lock {CVE-2024-40980} - net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546} - serial: protect uart_port_dtr_rts() in uart_shutdown() too {CVE-2024-50058} - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. {CVE-2026-31551} - ipv6: Fix signed integer overflow in __ip6_append_data {CVE-2022-49728} - selinux: avoid dereference of garbage after mount failure {CVE-2024-35904} - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name {CVE-2024-49934} - tracing: Do not let histogram values have some modifiers {CVE-2023-53093} - ice: Add netif_device_attach/detach into PF reset flow {CVE-2024-46770} - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. {CVE-2025-37884} - fbmon: prevent division by zero in fb_videomode_from_videomode() {CVE-2024-35922} - drm/amdgpu: Fix the null pointer dereference to ras_manager {CVE-2024-43908} - tracing: Ensure visibility when inserting an element into tracing_map {CVE-2024-26645} - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func {CVE-2024-47720} - phy: mdio: fix memory leak {CVE-2021-47416} - ipv4: Fix reference count leak when using error routes with nexthop objects {CVE-2025-71097} - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() {CVE-2024-50046} - packet: annotate data-races around ignore_outgoing {CVE-2024-26862} - md: fix resync softlockup when bitmap size is less than array size {CVE-2024-38598} - wireguard: receive: annotate data-race around receiving_counter.counter {CVE-2024-26861} - netfs: Only call folio_start_fscache() one time for each folio {CVE-2023-52582} - usb: xhci: tegra: fix sleep in atomic call {CVE-2023-53475} - ACPI: PAD: fix crash in exit_round_robin() {CVE-2024-49935} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() {CVE-2024-50256} - Bluetooth: ISO: Fix multiple init when debugfs is disabled {CVE-2024-50077} - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio {CVE-2025-21931} - RDMA/core: Silence oversized kvmalloc() warning {CVE-2025-37867} - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() {CVE-2024-26663} - net: let net.core.dev_weight always be non-zero {CVE-2025-21806} - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() {CVE-2022-48961} - eth: alx: take rtnl_lock on resume {CVE-2022-50498} - ata: libata-transport: fix error handling in ata_tlink_add() {CVE-2022-49824} - ata: libata-transport: fix error handling in ata_tport_add() {CVE-2022-49825} - netfilter: br_netfilter: fix panic with metadata_dst skb {CVE-2024-50045} - net: fix NULL pointer in skb_segment_list {CVE-2023-52991} - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698} - scsi: qla2xxx: validate nvme_local_port correctly {CVE-2024-42286} - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale {CVE-2023-53291} - wifi: mac80211: Discard Beacon frames to non-broadcast address {CVE-2025-71127} - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() {CVE-2024-46755} - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640} - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes {CVE-2024-41089} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING {CVE-2023-52845} - bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets {CVE-2023-52523} - Bluetooth: Fix not cleanup led when bt_init fails {CVE-2022-48971} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range {CVE-2024-26851} - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() {CVE-2024-53680} - ppp_async: limit MRU to 64K {CVE-2024-26675} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904} - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work {CVE-2024-26631} - xfrm: fix one more kernel-infoleak in algo dumping {CVE-2024-50110} - xdp: fix invalid wait context of page_pool_destroy() {CVE-2024-43834} - fs/netfs/fscache_cookie: add missing "n_accesses" check {CVE-2024-45000} - mac802154: check local interfaces before deleting sdata list {CVE-2024-57948} - usbnet: gl620a: fix endpoint checking in genelink_bind() {CVE-2025-21877} - IB/core: Fix ib_cache_setup_one error flow cleanup {CVE-2024-47693} - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate {CVE-2021-4454} - vfs: fix race between evice_inodes() and find_inode()&iput() {CVE-2024-47679} - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts {CVE-2023-53245} - iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087} - cachefiles: fix memory leak in cachefiles_add_cache() {CVE-2024-26840} - ext4: fix access to uninitialised lock in fc replay path {CVE-2024-50014} - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices {CVE-2025-21649} - ftrace: Fix regression with module command in stack_trace_filter {CVE-2024-56569} - ipv6: sr: fix invalid unregister error path {CVE-2024-38612} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493} - netfilter: flowtable: strictly check for maximum number of actions {CVE-2026-43329} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() {CVE-2026-43038}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 849a5451408b0f5adb390250ea3af80688af832c65f00c8a2cb603ee34b0e76f kernel-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 1017984f0a7a3953168e58f14c8c73ae3b15a5e731f07d4c0c8cad2edae19556 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els8.noarch.rpm 9b9d1771266352591b1c2cd6464fc385b6f239411ea667fa0e90bddefc180cbf kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 073a6b2a9fea66eaf93993457085cc40e6e150e599a0915163b62a98cddf0b0c kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 039596bf197f1e16fe1bd5605f4c15bedf39cba0bc204ea94db68d9a4fe1b2af kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm c947148c1f46b6118c3e21ea1aa9798a94beb2293e42fdc1ec1ce5291bf0389e kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 803dd946e63fe066e3c2a38050d5a7465a89408aadbae6971ff881de77aabba1 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm a5cf578d60df105b0c019e8d51102eda8de832fede6ef4d6c8da9908ca8c5651 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm b6ac8ac3ef87bc0a698e7ab38bf6b74b8a2821b831c8858d32aa097c38db5308 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm c09f54bff9fd27cb54417a7ba7827528f807f2336fd41d2db3cb060782c0e738 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm a8b999b8e5816dc04a6a3f2ebdd33de4356884f0339452d2f03e9d5efd6705c6 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm e45102afcfe7a60b095af838e54704e3c7618d840e82b8743fba10ac92352ae5 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 3e44e863b11e23c5fe607dfb988ef5a072ccc734b3d101d21ce8f6218b8e2542 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm baac9ca4e195b840bf7fb4c9208d873a94f3fc4c51237c4afe30e9c50a841091 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 2a6e0fb8332136588d9747f515b21372c80ac9e3d79d7844c7373f01affda5eb kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm f71a7f8820e1a745b8ac332b9820c89d7d5af87bd1a346750af8264cd3603505 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 19f06a6bb27cfcd2e8a284bd04b57ee785e29ce62ad9c246d375317082bb3b49 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els8.noarch.rpm 437acddd5ec02817c035f1267520c1e47b495512b05fe76b8f32493d6615f27b kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm d5094b5daafd7cb9a24ba952fd5e92d68bbdaa4f6205c3c00e42c20898e38006 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm d9365dca9b9144a227b6ddd35d7393d18130c3b785f6a77441e9ad5070cbeecb kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm ede0612e0e31689ffb9ef99dbde1d6fc8763c52065d101ad2c328fe7d49afa0e kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 2d92cf1d80e7cf4b7b9a9b25565f116582d5b798feed2b57a7ced6b7c01ac490 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 74083130d3e93807815f5410308acdc80bf7a9fb7d6f436fb31f162641f70432 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm a59f8e4ff4430f53401aca18bc31c9d88127ecc6dcab7b6c0459cfe4a36bcfa9 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 600f6e309a6a905af36fb3059672f62ec00a0f52bea2ce360b094900f5175fdd kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 6f95f23771ac81bd59f2852f604a57b613d3a7c8f16f015ff7e4f95e2d438a25 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 1306ac56ba0c5b15eb3e55ebee4a0d6cbb4e1d8cd2eda6b2c2eef13f5855ecfc kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm eec856b22b3f47f4956553fb3584df112bfd718dae3642e05e3bd92733f40850 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 2e09e887b94683743aa40f026f8f615d1126a56b2988792f27ba4ec920def88b kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 04690439ce3bc6eacf5c8a46053dbb5a1c7d215fc0cd250e7ead7caf94485b0c libbpf-1.0.0-2.el9_2.tuxcare.11.els8.i686.rpm 289f5c72cc30fb71326071e2d1ca440e2c8f9b6489733be5827271da46a0cb7d libbpf-1.0.0-2.el9_2.tuxcare.11.els8.x86_64.rpm 3d3d753b355b92fed92d17d20fd0f1655892cbd9cc56b1e8e319a1aefc4bfd31 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els8.i686.rpm 131e12d3d480f6864428090ca4367e75d56eaa23a374038ea823c36f61e14b00 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els8.x86_64.rpm 6621f9c5a6f90e629ea0e9a02c2ce12919881d8826602ed712b455d5645eb7ff libbpf-static-1.0.0-2.el9_2.tuxcare.11.els8.i686.rpm 73239883d515f473e8306ca3aa021370fb89443f1dd05ba4f70132b81fe673bd libbpf-static-1.0.0-2.el9_2.tuxcare.11.els8.x86_64.rpm 6627299a2ca317ac2092653c05fdfa78d2158a426ac44dff21b7309fab6d37a1 perf-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm 3f307d75caf3a3d484bc5c7609954be9eb620732b212da98f2513b025c12b0aa python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm c08024c7bf1600f783be8c75c6cc68f0f26ca7a2a0f305eb64abc10bcb0f4eee rtla-5.14.0-284.1101.el9_2.tuxcare.11.els8.x86_64.rpm cae044dfc16677d82a76a25a9fd1796b6b3cfddbf50ae5b7c92fdfb8ddca430a CLSA-2026:1783355084 TuxCare License Agreement 0 - net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331} - unshare: fix unshare_fs() handling {CVE-2026-43472} - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423} - net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422} - net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421} - dm: fix queue start/stop imbalance under suspend/load/resume races {CVE-2025-40134} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773} - ext4: fix i_data_sem unlock order in ext4_ind_migrate() {CVE-2024-50006} - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() {CVE-2024-53198} - HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862} - crypto: af_alg - Set merge to zero early in af_alg_sendmsg {CVE-2025-39931} - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper {CVE-2025-39681} - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061} - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change {CVE-2023-53103} - NFS: Fix a potential data corruption {CVE-2023-53711} - NFS: Fix a use after free in nfs_direct_join_group() {CVE-2023-53711} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload {CVE-2024-36919} - x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type {CVE-2023-52659} - Input: uinput - reject requests with unreasonable number of slots {CVE-2024-46745} - afs: Fix the maximum cell name length {CVE-2025-21646} - drm/i915: Avoid potential vm use-after-free {CVE-2023-52931} - interconnect: fix mem leak when freeing nodes {CVE-2023-53096} - drm/vkms: Fix memory leak in vkms_init() {CVE-2022-50269} - USB: dwc3: fix memory leak with using debugfs_lookup() {CVE-2023-53415} - mm/uffd: fix pte marker when fork() without fork event {CVE-2022-49744} - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() {CVE-2023-53696} - ipmi_si: fix a memleak in try_smi_init() {CVE-2023-53611} - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083} - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() {CVE-2024-36924} - firmware: cs_dsp: Validate payload length before processing block {CVE-2024-42237} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385} - ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898} - IB/core: Implement a limit on UMAD receive List {CVE-2024-42145} - vfio/pci: Disable auto-enable of exclusive INTx IRQ {CVE-2024-27437} - netfilter: nf_tables: reject duplicate device on updates {CVE-2025-38678} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type {CVE-2025-23161} - net: nexthop: Initialize all fields in dumped nexthops {CVE-2024-42283} - tracing: Make sure trace_printk() can output as soon as it can be used {CVE-2023-53007} - net: tls: explicitly disallow disconnect {CVE-2025-37756} - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779} - ext4: turn quotas off if mount failed after enabling quotas {CVE-2023-54153} - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622} - block: fix overflow in blk_ioctl_discard() {CVE-2024-36917} - usb: xhci: Check endpoint is valid before dereferencing it {CVE-2023-52901} - iio: core: fix memleak in iio_device_register_sysfs {CVE-2023-52643} - platform/x86/amd/pmc: Detect when STB is not available {CVE-2024-53072} - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() {CVE-2023-52939} - dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664} - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951} - bonding: provide a net pointer to __skb_flow_dissect() {CVE-2026-23119} - rocker: fix memory leak in rocker_world_port_post_fini() {CVE-2026-23164} - rtc: class: Fix potential memleak in devm_rtc_allocate_device() {CVE-2022-50477} - ice: fix memory leak in aRFS after reset {CVE-2025-21981} - bpf: Forget ranges when refining tnum after JSET {CVE-2025-39748} - net: hns: fix possible memory leak in hnae_ae_register() {CVE-2022-50352} - team: better TEAM_OPTION_TYPE_STRING validation {CVE-2025-21787} - refscale: Fix uninitalized use of wait_queue_head_t {CVE-2023-54316} - opp: Fix use-after-free in lazy_opp_tables after probe deferral {CVE-2023-54026} - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust {CVE-2024-53122} - serial: 8250: fix panic due to PSLVERR {CVE-2025-39724} - perf: Fix sample vs do_exit() {CVE-2025-38424} Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331} - unshare: fix unshare_fs() handling {CVE-2026-43472} - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423} - net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422} - net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421} - dm: fix queue start/stop imbalance under suspend/load/resume races {CVE-2025-40134} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773} - ext4: fix i_data_sem unlock order in ext4_ind_migrate() {CVE-2024-50006} - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() {CVE-2024-53198} - HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862} - crypto: af_alg - Set merge to zero early in af_alg_sendmsg {CVE-2025-39931} - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper {CVE-2025-39681} - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061} - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change {CVE-2023-53103} - NFS: Fix a potential data corruption {CVE-2023-53711} - NFS: Fix a use after free in nfs_direct_join_group() {CVE-2023-53711} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload {CVE-2024-36919} - x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type {CVE-2023-52659} - Input: uinput - reject requests with unreasonable number of slots {CVE-2024-46745} - afs: Fix the maximum cell name length {CVE-2025-21646} - drm/i915: Avoid potential vm use-after-free {CVE-2023-52931} - interconnect: fix mem leak when freeing nodes {CVE-2023-53096} - drm/vkms: Fix memory leak in vkms_init() {CVE-2022-50269} - USB: dwc3: fix memory leak with using debugfs_lookup() {CVE-2023-53415} - mm/uffd: fix pte marker when fork() without fork event {CVE-2022-49744} - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() {CVE-2023-53696} - ipmi_si: fix a memleak in try_smi_init() {CVE-2023-53611} - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083} - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() {CVE-2024-36924} - firmware: cs_dsp: Validate payload length before processing block {CVE-2024-42237} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385} - ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898} - IB/core: Implement a limit on UMAD receive List {CVE-2024-42145} - vfio/pci: Disable auto-enable of exclusive INTx IRQ {CVE-2024-27437} - netfilter: nf_tables: reject duplicate device on updates {CVE-2025-38678} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type {CVE-2025-23161} - net: nexthop: Initialize all fields in dumped nexthops {CVE-2024-42283} - tracing: Make sure trace_printk() can output as soon as it can be used {CVE-2023-53007} - net: tls: explicitly disallow disconnect {CVE-2025-37756} - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779} - ext4: turn quotas off if mount failed after enabling quotas {CVE-2023-54153} - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622} - block: fix overflow in blk_ioctl_discard() {CVE-2024-36917} - usb: xhci: Check endpoint is valid before dereferencing it {CVE-2023-52901} - iio: core: fix memleak in iio_device_register_sysfs {CVE-2023-52643} - platform/x86/amd/pmc: Detect when STB is not available {CVE-2024-53072} - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() {CVE-2023-52939} - dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664} - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951} - bonding: provide a net pointer to __skb_flow_dissect() {CVE-2026-23119} - rocker: fix memory leak in rocker_world_port_post_fini() {CVE-2026-23164} - rtc: class: Fix potential memleak in devm_rtc_allocate_device() {CVE-2022-50477} - ice: fix memory leak in aRFS after reset {CVE-2025-21981} - bpf: Forget ranges when refining tnum after JSET {CVE-2025-39748} - net: hns: fix possible memory leak in hnae_ae_register() {CVE-2022-50352} - team: better TEAM_OPTION_TYPE_STRING validation {CVE-2025-21787} - refscale: Fix uninitalized use of wait_queue_head_t {CVE-2023-54316} - opp: Fix use-after-free in lazy_opp_tables after probe deferral {CVE-2023-54026} - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust {CVE-2024-53122} - serial: 8250: fix panic due to PSLVERR {CVE-2025-39724} - perf: Fix sample vs do_exit() {CVE-2025-38424}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 24c0e11c1e6ea8efffc4781f139deb02d93d2025e18338c79c615f04f2065ae2 kernel-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 3bdc9c3d45a3175586c59fd2a4c294321e52bdd2e7e48e975d46cdcb7caa6379 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els6.noarch.rpm ab4099ff1bce510fe23100ee0280925ae793cf255477f73a7b9d284c75e8c2e9 kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm dd2507caa293a8111185b0b47a9e4785283d13eec5ec56f8e4fd55dfe648450e kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm d13b5732979a38cebab72d01be1770a11bd8a38335a64608c0c7bee8cb80f363 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm bef29ced71725e656ce8c15ee62c7f18052ee3077baefb100683c4009b09717f kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm d65bef53f0d7f73443935f2e636db808530a95b1c62bceae5025d18d53305090 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm a78dc2b9692dd57821ea47733c52ddbaf75df23c693ecfb4459581651a10420e kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm af5aa487e8a53f4cb8fb6e49245704a6ea7ae74c71d9300aae51cea553dc8477 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 85b17980d5c0deecb9dbfdeb2045474981781761e90ae397f764ec1b2f1d323d kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 2cae0639dd72f134cf1e783f53f4bf5c9617f184863f22880fed2aaf640f6901 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 436ff9b4ea73db14a8a83e2ec5e204acbe96c7fb00da17a6a6e022bf7936b5bb kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm c9295ee33ba81a1e47e2fe4c21e1f75e8c94237398f59200b803e09d5a030b7f kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 5773ea09ea345f7dd92829cb6a562895fb9d740f0a0d97827f46f11e5ef86ffd kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm c8786906d9d60dacdcc7aa26bc9af7020e3378c0207752452c27728c52248113 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 9b76fc445bf5af49e9a5d1843742b0cfb2d859326ba7e631fd858e2ef2bf1b43 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 93a54e8f014b714538a4351c2f39ac5626f1bbe0203a3cc620fd66c5e6ad80b2 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els6.noarch.rpm 77831d0bc48e78d9148f435c4fe9948b2f94f410784eaa57a533e4ba6aedbad3 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm b8a09f35a822c32065b81cec071639a6889958e3f13890ef4f10f5269fbf9858 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 108166dfe8b077eec564861454af02b362469641341e29a5c74b3b9113ec5d41 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 289cb2bb398b5f5bea96272e85afe14408dca83af733beb8399cf1eea261c0a5 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 17ea4656f3e697dbb745f3dae05580d1a854898c8e2d70889f3ae46b9d017c60 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 8ae090fb6508cf2a7e7617e18c99de1591a3f24426546359f6b03aa96a99a566 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 6aec242d9e276ee4a41153d5eaf2f8df21341fe9537ca373439053551ddc78d6 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 6263a23ac3bd83b8b2a98a15327bf0ff9f0f8ad6d8051d75c3e6bdaad0ee7269 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 891df23a6c08dbaa06c2c377170ff8fa2d675faf27547f228c6f2d423612e080 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 2d764ff6c74d885dda88dd341c91310715f6da3a7b9574f6899d5e115dc0780d kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm e6d25aae5ce98dd27c5bed9a868152b895e95fd20d2b0502fa0eb0aaf37e3385 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 9e53c04aff5ef82d73b6abb742c45036c532acd03ea04a85f49147cec4344470 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 922ee46c4c81c65a80bc78a5643deef4c658162447964b1fc2b49d591ee100e9 libbpf-1.0.0-2.el9_2.tuxcare.11.els6.i686.rpm 69f151ebd4e670403f0522545531b1bddb180b0550403a0bdda3cac0972b336b libbpf-1.0.0-2.el9_2.tuxcare.11.els6.x86_64.rpm 317d66e8ad5f4ad60ba6256cd2299e5fa095888fd5dd4df8f1b4270c68e866af libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els6.i686.rpm 69165d8f76e806b671c9e74b78004f91557be66ade20646274090a58e57afe42 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els6.x86_64.rpm 13af7978412ee514a75c32d5598731bdf86c148403c34601610d01c14abb2e9d libbpf-static-1.0.0-2.el9_2.tuxcare.11.els6.i686.rpm c38e029fc2d68e6672cbcce6b8ffc3ad455e7b1a29571a940167b555d465254d libbpf-static-1.0.0-2.el9_2.tuxcare.11.els6.x86_64.rpm 701191a5b69b742b66231ac8950a727ac5245ad67db5bfe07bbb0c11a18330cf perf-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm 5e0eac87dadc0938ac8c752dac9910e8e443f420010e4c66eda0e067c0ee11f6 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm abeeb418ec0afeca779d5c98e6ca8a1e7a0de3d93979e7d2ec33288b47be15d5 rtla-5.14.0-284.1101.el9_2.tuxcare.11.els6.x86_64.rpm e28cd213951c7aa8a74e61d234de26b82eaca287eb18a177eb7cc858c08789c4 CLSA-2025:1765463110 TuxCare License Agreement 0 - Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117} - padata: Fix pd UAF once and for all {CVE-2025-38584} - wifi: cfg80211: Fix use after free for wext {CVE-2023-53153} - padata: Fix list iterator in padata_do_serial() - padata: do not leak refcount in reorder_work {CVE-2025-38031} - padata: avoid UAF for reorder_work {CVE-2025-21726} - padata: add pd get/put refcnt helper - net/smc: fix UAF on smcsk after smc_listen_out() {CVE-2025-38734} - scsi: mpi3mr: Bad drive in topology results kernel crash {CVE-2023-53037} - scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258} - igb: Fix igb_down hung on surprise removal {CVE-2023-53148} - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access {CVE-2023-53112} - i40e: fix idx validation in config queues msg {CVE-2025-39971} - dm-bufio: don't schedule in atomic context {CVE-2025-37928} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083} - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885} - KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849} - KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache {CVE-2022-49882} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - power: supply: gpio-charger: Fix set charge current limits {CVE-2024-57792} - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object {CVE-2024-46798} - ipv6: prevent possible UAF in ip6_xmit() {CVE-2024-44985} - ipv6: fix possible UAF in ip6_finish_output2() {CVE-2024-44986} - netfilter: flowtable: validate vlan header {CVE-2024-44983} - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() {CVE-2024-50268} - usb: vhci-hcd: Do not drop references before new references are gained {CVE-2024-43883} - drm/amd/display: Fix slab-use-after-free on hdcp_work {CVE-2025-21968} - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815} - drm/amd/display: Check index msg_id before read or write {CVE-2024-42121} - drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120} - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages {CVE-2024-41011} - drm/amdkfd: Fix an illegal memory access {CVE-2023-53090} - drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084} - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552} - ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994} - nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116} - loop: Fix use-after-free issues {CVE-2023-53111} - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} - mptcp: use the workqueue to destroy unaccepted sockets {CVE-2023-53072} - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output {CVE-2023-53065} - erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053} - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - coresight: Clear the connection field properly {CVE-2022-50214} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-53145} - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync {CVE-2025-39982} - x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727} - arm64: sme: Use STR P to clear FFR context field in streaming SVE mode {CVE-2023-53713} - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read {CVE-2023-53710} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117} - padata: Fix pd UAF once and for all {CVE-2025-38584} - wifi: cfg80211: Fix use after free for wext {CVE-2023-53153} - padata: Fix list iterator in padata_do_serial() - padata: do not leak refcount in reorder_work {CVE-2025-38031} - padata: avoid UAF for reorder_work {CVE-2025-21726} - padata: add pd get/put refcnt helper - net/smc: fix UAF on smcsk after smc_listen_out() {CVE-2025-38734} - scsi: mpi3mr: Bad drive in topology results kernel crash {CVE-2023-53037} - scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258} - igb: Fix igb_down hung on surprise removal {CVE-2023-53148} - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access {CVE-2023-53112} - i40e: fix idx validation in config queues msg {CVE-2025-39971} - dm-bufio: don't schedule in atomic context {CVE-2025-37928} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083} - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885} - KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849} - KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache {CVE-2022-49882} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - power: supply: gpio-charger: Fix set charge current limits {CVE-2024-57792} - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object {CVE-2024-46798} - ipv6: prevent possible UAF in ip6_xmit() {CVE-2024-44985} - ipv6: fix possible UAF in ip6_finish_output2() {CVE-2024-44986} - netfilter: flowtable: validate vlan header {CVE-2024-44983} - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() {CVE-2024-50268} - usb: vhci-hcd: Do not drop references before new references are gained {CVE-2024-43883} - drm/amd/display: Fix slab-use-after-free on hdcp_work {CVE-2025-21968} - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815} - drm/amd/display: Check index msg_id before read or write {CVE-2024-42121} - drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120} - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages {CVE-2024-41011} - drm/amdkfd: Fix an illegal memory access {CVE-2023-53090} - drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084} - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552} - ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994} - nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116} - loop: Fix use-after-free issues {CVE-2023-53111} - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} - mptcp: use the workqueue to destroy unaccepted sockets {CVE-2023-53072} - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output {CVE-2023-53065} - erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053} - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - coresight: Clear the connection field properly {CVE-2022-50214} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-53145} - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync {CVE-2025-39982} - x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727} - arm64: sme: Use STR P to clear FFR context field in streaming SVE mode {CVE-2023-53713} - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read {CVE-2023-53710}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 236c0b6fc84d5a284885fde85c12bf6a7d39e70e046389bde28c7bda13314fe1 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 525cfa624e907bf0f70f2823c5d40c25214be62da15edcb01f5e4d86afef7a80 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els25.noarch.rpm 30e0a63769558d394fb6481cda84ddad893343125658320c8beccbeee192444c kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 4d2a6dbb623d888d94dc06f75923cb58c0628d01f51d2e361d9bd73d2a2282e8 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 399ee59c16b0e7ccb3b08655059f5a19dc8798edd14c6fd1cdd6c7ef9446fae2 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 7fa1489c6f61771e4117e929f5a43eab263ccbd243f733e5f5b05a7a65987884 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 721c180eef412e1813d21047ddb68551036131866f35363377df092215b10813 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 419a7f692d63c28a5921fae2f04a5887bf450afafe2224df99c2d7101e4494fc kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 8955235662f14d2107d0b7cc9cd0f0b35c3f22474f3cd881b0ee03dbc6a36a14 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 3180ec76873fc499c9ba2cd9f2e90f15114a334cdd3dd241678b1386c94ab2ea kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 2badc58c14babbd2b09c7c55c20ca3ef789e6636e135434bb8cc2a8854db3ef8 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 80061021a2b2050e50d7ffb6e981eee3ca63af99235b60d85a940d490cb5863c kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 1986ee69f43a993533e0adeb7d0be8ade2df7732e461648761a53f09da128eb0 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm c4a908454ce28d6486a02f287e0aabf4b67f5102c10af0c8987343fa704a0eaf kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm dd87ba21c36b18e5d6925ab84c479f114a323bed51553938087256ad6263fb57 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm b34dba04c1dce571fe360ffcb4bb250e0b4426ffb1b7ca6ab076b02fa248ce83 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 527d0f86886565aa704e35939bef5fe5b1e61110cbee561db54b204f8594a2cc kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els25.noarch.rpm 1cf7159aac1480af276137e13c961b978a5264f68c6c0565c5c7ad86ebeeed99 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 1c7022d060b6c8c764a263cff48d32b958ff8f94c04a8e274a2da24d65e4a9b1 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 1da11227f9d5cd2318d3125e02475ac1028c3c35257ef047b96b14f3c8f6744e kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 2b5617a7eb2fc6609b0975a4c85a6f7ab43a4d0f461b4f51bb69e5c9c72dd09b kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 3b60a8cdce52b62098af073d04a7575f5b93dde8ce209b229b98e445111787e2 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm db530a7725a287b8d1967a049b0cfd5b6ace9b7ed101171b8c76cf3740844cf6 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm d7c35998058aae0e22d9c75b4b39079aeb118e974bfa25f092546ddfc7716df7 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 0a1b687dabc845a6e254c7bcd1487e46f064d91b536feeb3b67fe7e75af1a4fe kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 2ec79ab49b310d381a97752e56c05a04cd2a03264c59501323b5c74067d48f88 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm be368efd76854de2db37cc5e324be797fe625edf88fd650489de901e02c0244a kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 6be77bfd2cf37cbd2fc5c5bc9344411ce7950ea44b58330790df7c5ebd27986b kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 34395132d4a32a808a5bd3756181b12bb88ae5ae9bd6b6ef690a53c87e734ccb kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 5b5558a99110b21c8489bc08ac9acea19ac36dd7a5e42e4b1964a576b1542613 libbpf-1.0.0-2.el9_2.tuxcare.7.els25.i686.rpm 670a77bd224f0b96d4056546d32d85b14638399885e711771ba5f94551a1b3f7 libbpf-1.0.0-2.el9_2.tuxcare.7.els25.x86_64.rpm bf9ff70efcce2a34918884160d87660e459c4888a84bf420cb4e6eda699998fe libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els25.i686.rpm f2f09bd13acaa4efe27676c91cc281514a98041b5a2a8d92f54f4b2d6d143e0e libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els25.x86_64.rpm b620a54607980f587fdedadff1cf141104a7cdf92a953483b71fa4f439bf4c31 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els25.i686.rpm 2176cf9e2aaf8eb8ed7991c26f979412f16b51bf2405fc4b7cd6c54b0636f16f libbpf-static-1.0.0-2.el9_2.tuxcare.7.els25.x86_64.rpm 2083bed3a680547e7e3b9862cdf4433918b89da8a54388705cf3354bddf80a82 perf-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 5620524533bf87c917cea4c0848ef045f2f554a3c27de2658c508a446b52dd96 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 526fe0e70696acafa090038cb2270bb70bba2234bbb2ef52caa86eec67c47815 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els25.x86_64.rpm 96cf3fe8066871b630a14b343b15b50725de22d516b387ef681bb0dd286e8e10 CLSA-2026:1783937718 TuxCare License Agreement 0 - CVE-2026-9150: Fix stack buffer overflow in Debian metadata parser when handling SHA384/SHA512 checksums Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9150: Fix stack buffer overflow in Debian metadata parser when handling SHA384/SHA512 checksums

0 tuxcare-almalinux9.2-esu libsolv-0.7.22-4.el9_2.tuxcare.els3.i686.rpm c3b29950856b6c17898dbf27cfe8c10cb46f46141c8cbbf27c24a55535b7a4e0 libsolv-0.7.22-4.el9_2.tuxcare.els3.x86_64.rpm c841dd3da164c80323bbcf93a5dee12a24e00efcaf6b20ca79cbb4536e1a853b libsolv-demo-0.7.22-4.el9_2.tuxcare.els3.x86_64.rpm a3ff490f8b714b02de59fc19289793358f73c247e49dea203a63eeaac9992958 libsolv-devel-0.7.22-4.el9_2.tuxcare.els3.i686.rpm 7885add515b349c242cf0beb454f3c2183fef35025cff9df374cb0aa2a0b91db libsolv-devel-0.7.22-4.el9_2.tuxcare.els3.x86_64.rpm 0accfcffc95e96b40c88f98f51690eab9a0aa71e1274503c951a299a2db70f52 libsolv-tools-0.7.22-4.el9_2.tuxcare.els3.x86_64.rpm 9eae523715d266b5d0f0f307378516efcd012b00884851b7963ad90e1787be16 perl-solv-0.7.22-4.el9_2.tuxcare.els3.x86_64.rpm 23b77fd8f2c9ba73222d63cb8e26616f058dda27f37274dfd2bee3cec128e514 python3-solv-0.7.22-4.el9_2.tuxcare.els3.x86_64.rpm 6009300ecf2ec7e665d088a3a324248f47b74884ce5da2f65f521a31766bf0f1 ruby-solv-0.7.22-4.el9_2.tuxcare.els3.x86_64.rpm 9517c43a79ff2485f1167cbdcfe25e1476f0c828f5fcef3e5cb96de97e9f3500 CLSA-2026:1782138503 TuxCare License Agreement 0 - CVE-2026-42014: fix use-after-free and leak in gnutls_pkcs11_token_set_pin when changing the Security Officer PIN with oldpin == NULL on a token lacking a protected authentication path - CVE-2026-42015: fix off-by-one bounds check in gnutls_pkcs12_bag_set_data that allowed writing past the 32-element PKCS#12 bag array when appending to an imported bag already holding the maximum number of elements Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42014: fix use-after-free and leak in gnutls_pkcs11_token_set_pin when changing the Security Officer PIN with oldpin == NULL on a token lacking a protected authentication path - CVE-2026-42015: fix off-by-one bounds check in gnutls_pkcs12_bag_set_data that allowed writing past the 32-element PKCS#12 bag array when appending to an imported bag already holding the maximum number of elements

0 tuxcare-almalinux9.2-esu gnutls-3.7.6-23.el9_2.tuxcare.4.els10.x86_64.rpm 4c1aa564f2c8a584e264c02000a9615b804c39b6c473584238cc84fb70f6908f gnutls-c++-3.7.6-23.el9_2.tuxcare.4.els10.x86_64.rpm 3604aef4c980ea1e1b248741e14c55512a958cf1c966374cbd0f72e1c752eca9 gnutls-dane-3.7.6-23.el9_2.tuxcare.4.els10.x86_64.rpm 8f45c7373bf29d49ce0df7bd5086ab316a57ca0b69681d79763211c09cb3c1f9 gnutls-devel-3.7.6-23.el9_2.tuxcare.4.els10.x86_64.rpm 9fa6343e9ebd543e3f26d30be684d1118b656afa55224331b7389fd357001761 gnutls-utils-3.7.6-23.el9_2.tuxcare.4.els10.x86_64.rpm fc17d07f8a30f9b2e1a298668a3d00a5f54c05b27d8d935a43b14502693fe560 CLSA-2026:1783970136 TuxCare License Agreement 0 - CVE-2024-7519: fix out-of-bounds write in graphics ShmemSection handling (Mozilla bug 1902307) - CVE-2025-14324: fix constant-pool assembler-buffer size miscalculation on ARM (Mozilla bug 1996840) - CVE-2026-2806: fix SVG glyph out-of-bounds read via decompression size mismatch (Mozilla bug 2006199) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-7519: fix out-of-bounds write in graphics ShmemSection handling (Mozilla bug 1902307) - CVE-2025-14324: fix constant-pool assembler-buffer size miscalculation on ARM (Mozilla bug 1996840) - CVE-2026-2806: fix SVG glyph out-of-bounds read via decompression size mismatch (Mozilla bug 2006199)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els23.x86_64.rpm 43b5e8064497c36a69768a3e7948a832b342ec893b04518a61c3fc214cdecbbd CLSA-2026:1784017931 TuxCare License Agreement 0 - CVE-2026-50292: sanitize phys sysattr to prevent udev property injection Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50292: sanitize phys sysattr to prevent udev property injection

0 tuxcare-almalinux9.2-esu libinput-1.19.3-7.el9_2.tuxcare.els1.i686.rpm 0303db0cc7cc38c13b5d98d043e401c084cd878e250ea3bb5725ec2baae0554a libinput-1.19.3-7.el9_2.tuxcare.els1.x86_64.rpm b5b649b8c3f64fadef324e37391d0231f60f67f16a2724a8b0ec642aea37c220 libinput-devel-1.19.3-7.el9_2.tuxcare.els1.i686.rpm a23a81ec567770fbc67cc294c9dc78313ede635c642498711b95a69ca1ee48a2 libinput-devel-1.19.3-7.el9_2.tuxcare.els1.x86_64.rpm 7702442225b86d32ee0614d8b571075f74d2708c911a7e37c0350bf77ef83452 libinput-test-1.19.3-7.el9_2.tuxcare.els1.x86_64.rpm a8d4b4794922ef4aeb497315c505d794942c75d1bd1f29bc9e3265ef01c4c2bc libinput-utils-1.19.3-7.el9_2.tuxcare.els1.x86_64.rpm 3fe8a1ad8c9704e6ddf0eedd16802641fe411e61d2f3e48be27443ea48ef6a1a CLSA-2026:1784019530 TuxCare License Agreement 0 - CVE-2026-12413: fix an off-by-one assertion in reassemble_v2_incoming_fragments() that let a malformed IKEv2 fragment abort and restart the pluto daemon (DoS) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12413: fix an off-by-one assertion in reassemble_v2_incoming_fragments() that let a malformed IKEv2 fragment abort and restart the pluto daemon (DoS)

0 tuxcare-almalinux9.2-esu libreswan-4.12-2.el9_2.tuxcare.els2.x86_64.rpm a286f861546031005784393da0d1eac091ae127b529e11594f5534e558f940b8 CLSA-2026:1784021188 TuxCare License Agreement 0 - CVE-2026-53705: fix integer overflow in WavPack decoder output buffer size calculation that caused an undersized heap allocation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53705: fix integer overflow in WavPack decoder output buffer size calculation that caused an undersized heap allocation

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els18.i686.rpm c4c3e7ccb647ef793e8374054b5043e72f3ee428bbacd336fc03f55f09b23632 gstreamer1-plugins-good-1.18.4-6.el9.tuxcare.els18.x86_64.rpm ff8675a21623b5011eb915ab8796b007e490771737ed935619ba280929709452 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els18.i686.rpm b5d683b949e177367685e6aff72ca33afd45a7c2f1c8f10219f9683f85fc1a86 gstreamer1-plugins-good-gtk-1.18.4-6.el9.tuxcare.els18.x86_64.rpm 287f1945066419603cef3a43774a5ae7fd65083881691e7a2f06777e23cb2e85 gstreamer1-plugins-good-qt-1.18.4-6.el9.tuxcare.els18.x86_64.rpm 67802b5448eb9a7e335b4c6380dbc993ccc3a1233270b2094144e805feff7b44 CLSA-2026:1784023446 TuxCare License Agreement 0 - CVE-2026-59858: escape the typeref field with escape(typename, '/\') before interpolating it into the :vimgrep pattern in ccomplete.vim StructMembers(), preventing arbitrary Ex command execution during C omni-completion when reading a crafted tags file (runtime/autoload/ccomplete.vim, upstream vim 9.2.0735) - CVE-2026-59856: quote the class name via string() before interpolating it into the search() pattern executed by win_execute() in phpcomplete.vim GetClassContentsStructure(), preventing potential command execution during PHP omni-completion (runtime/autoload/phpcomplete.vim, upstream vim 9.2.0736) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59858: escape the typeref field with escape(typename, '/\') before interpolating it into the :vimgrep pattern in ccomplete.vim StructMembers(), preventing arbitrary Ex command execution during C omni-completion when reading a crafted tags file (runtime/autoload/ccomplete.vim, upstream vim 9.2.0735) - CVE-2026-59856: quote the class name via string() before interpolating it into the search() pattern executed by win_execute() in phpcomplete.vim GetClassContentsStructure(), preventing potential command execution during PHP omni-completion (runtime/autoload/phpcomplete.vim, upstream vim 9.2.0736)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els38.x86_64.rpm 06626b23fc3c72309562e2a0e284f1823e9aa80f9a86e31a2b2917e4914a3692 vim-common-8.2.2637-22.el9_2.1.tuxcare.els38.x86_64.rpm 0ccad2b0a153aaf00052c9d88ff9a6a8189505a6a8b16e9ea0676c07e3a489f7 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els38.x86_64.rpm 7d2fdd2e1547b62ff2ccd7e0c50ccf9227ee3b6568ea56e968d5cc506530df1d vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els38.noarch.rpm 18841726615cd7e1101d96a85f8749f21970dcc6916f7ed5bb1a8c4a54b71efc vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els38.x86_64.rpm 3cf49da2dab9d75c3d2cbb922a4c9f649284b06b39192bb245c886cb7da46a96 CLSA-2026:1784021937 TuxCare License Agreement 0 - CVE-2026-58380: fix out-of-bounds write in PNM parser by keeping the pnmscanner_gettoken NUL terminator within bufsize - 1 - CVE-2026-58384: fix integer overflow in PSD read_RLE_channel row-length allocation with a g_size_checked_mul guard against G_MAXUINT32 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58380: fix out-of-bounds write in PNM parser by keeping the pnmscanner_gettoken NUL terminator within bufsize - 1 - CVE-2026-58384: fix integer overflow in PSD read_RLE_channel row-length allocation with a g_size_checked_mul guard against G_MAXUINT32

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els12.x86_64.rpm f557f7ef561da0c81016c58c38a28094599e7f74497de5213f75079e9093ccfd gimp-devel-2.99.8-4.el9.2.tuxcare.els12.x86_64.rpm bcc50d112ce5d6d3217c82c4be2f5304545d5d58860c15d7985c503179c4cf02 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els12.x86_64.rpm d48a6b40e3f916d28d4f2b71ed3fa84ea6a2898de68782e778061e403593921c gimp-libs-2.99.8-4.el9.2.tuxcare.els12.i686.rpm 48e9c4c343e0b57a370e37200a0c6e976996b3ad0cded62c1ac0ee528d2da97f gimp-libs-2.99.8-4.el9.2.tuxcare.els12.x86_64.rpm 39a9cc52c9b59c793156ca97e1c6d53e8683301f252760270355643c3e42f300 CLSA-2026:1784027626 TuxCare License Agreement 0 - CVE-2026-39821: reject all-ASCII xn-- labels in vendored golang.org/x/net/idna (backport of upstream commit f05f21b) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39821: reject all-ASCII xn-- labels in vendored golang.org/x/net/idna (backport of upstream commit f05f21b)

0 tuxcare-almalinux9.2-esu grafana-pcp-5.1.1-1.el9_2.tuxcare.els4.x86_64.rpm 30de2e9bbb534d60bbd3828d845c1a6b75f4f372daa601130d15218e39f633e2 CLSA-2026:1784034091 TuxCare License Agreement 0 - CVE-2026-41579: fix /dev symlink path traversal in rootfs /dev setup Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41579: fix /dev symlink path traversal in rootfs /dev setup

0 tuxcare-almalinux9.2-esu runc-1.2.8-1.el9_1.tuxcare.els4.x86_64.rpm 1c6012f22f5843af665daa3797e9170859a34376f301f7ace1f07b02a50c677d CLSA-2026:1784071344 TuxCare License Agreement 0 - CVE-2026-58471: fix buffer size handling in filename conversion (src/url.c) - CVE-2026-58472: fix integer/buffer overflow in html_quote_string (src/convert.c) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58471: fix buffer size handling in filename conversion (src/url.c) - CVE-2026-58472: fix integer/buffer overflow in html_quote_string (src/convert.c)

0 tuxcare-almalinux9.2-esu wget-1.21.1-7.el9.tuxcare.els3.x86_64.rpm 190b64cf82b84a6e6a35d9260052db5f219302d2cd6496e60a533f1857d6779c CLSA-2025:1766074947 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.29+7. The following CVEs were fixed: - CVE-2025-53066: Enhance Path Factories - CVE-2025-53057: Enhance Certificate Handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.29+7. The following CVEs were fixed: - CVE-2025-53066: Enhance Path Factories - CVE-2025-53057: Enhance Certificate Handling

0 tuxcare-almalinux9.2-esu java-11-openjdk-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm a4d6ec4e937437f2b430591f6f968a7c04effd836475d00b45d17d8f73319b56 java-11-openjdk-demo-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm 76d71e60ffba02821fb00692be2025a92bd32ac6197d0c341dc311198d3820be java-11-openjdk-devel-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm d4ab811676936b19f7dd0bd189599386f13b02c31275f8805ad9523137c4d1ef java-11-openjdk-headless-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm 620468a3e0d2b40596bf8d13447a60b07e3a227b7d1837ed7e5351edd5b098c4 java-11-openjdk-javadoc-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm c46231ef378c808cb4feb17686c63c105e0904e12756756e9840cd5d9dbb4d64 java-11-openjdk-javadoc-zip-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm 593a87d987d55b3312e96ed701e9d6e0969e12ef473538d333675e03f1f03cf3 java-11-openjdk-jmods-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm 950267190bf779cf39e35ed847d2d22782a12a8a26672482c00cbdb368b818c9 java-11-openjdk-src-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm db53f934cbf11ba89b39698958d67942ede7ace3eef81d15e820adcee5e7e460 java-11-openjdk-static-libs-11.0.29.0.7-1.el9.tuxcare.els1.x86_64.rpm a82a96230de73dae7223cf5f96d35b96c4d56527f3a566d9a608fe4015c4a3f4 CLSA-2026:1784074201 TuxCare License Agreement 0 - CVE-2026-57231: reject image environment variables that are not strict key=value in ParseImageEnvs(), preventing a crafted image from leaking matching host environment variables into the container Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-57231: reject image environment variables that are not strict key=value in ParseImageEnvs(), preventing a crafted image from leaking matching host environment variables into the container

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els14.x86_64.rpm bc6f88e8591a2a1e8a9f6c461d77102e30a331dfd127a392f406a9b5cfbcbbd7 podman-docker-4.4.1-13.el9_2.tuxcare.els14.noarch.rpm 6702980640dda4f3a86d46054e9febc0919eea9a7fa1f670decdbde0c3213cb1 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els14.x86_64.rpm 73e1c6f2d97788a152eb4b9e738b389e036092e44bd1859471ccc69f7b0edefd podman-plugins-4.4.1-13.el9_2.tuxcare.els14.x86_64.rpm 5a4d5f123fe14e074fa55c73f1f563322404b1ef2f689dc13e73996bca0ef506 podman-remote-4.4.1-13.el9_2.tuxcare.els14.x86_64.rpm cf3d5b2684d1047972694d61ac05c1def9d451809476ec34747ec778f8fe63dc podman-tests-4.4.1-13.el9_2.tuxcare.els14.x86_64.rpm 03d4a2679cedada464c25607b5744d819a9a68080c3a4091f3dd19e1f1578d4f CLSA-2026:1784074875 TuxCare License Agreement 0 - CVE-2026-39821: reject all-ASCII xn-- labels in vendored golang.org/x/net/idna (backport of upstream commit f05f21b) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39821: reject all-ASCII xn-- labels in vendored golang.org/x/net/idna (backport of upstream commit f05f21b)

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els19.x86_64.rpm 6d16527481b293cdb6acbaaba285b566a71a10cee6f45a1f827f4730065e5d5f CLSA-2026:1784111441 TuxCare License Agreement 0 - CVE-2026-56132: fix out-of-bound scaffolding index store in doProlog - CVE-2026-56403: protect storeAtts and xmlwf xcsdup from signed integer overflow - CVE-2026-56404: protect addBinding from signed integer overflow - CVE-2026-56405: protect getAttributeId from signed integer overflow - CVE-2026-56406: add missing overflow check to XML_ParseBuffer - CVE-2026-56410: protect xmlwf resolveSystemId from integer overflow - CVE-2026-56411: protect xmlwf notation list allocation from integer overflow Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56132: fix out-of-bound scaffolding index store in doProlog - CVE-2026-56403: protect storeAtts and xmlwf xcsdup from signed integer overflow - CVE-2026-56404: protect addBinding from signed integer overflow - CVE-2026-56405: protect getAttributeId from signed integer overflow - CVE-2026-56406: add missing overflow check to XML_ParseBuffer - CVE-2026-56410: protect xmlwf resolveSystemId from integer overflow - CVE-2026-56411: protect xmlwf notation list allocation from integer overflow

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9_2.tuxcare.els13.i686.rpm 0b71a3c0d340de3ab5ca52ac20c0c66aa14a8c071ab4bae4cd29232b494cc242 expat-2.5.0-1.el9_2.tuxcare.els13.x86_64.rpm 2ffef5b4f5ef044dcbdd13cee76f0761f4497b564843a9508f3e29398a3078ce expat-devel-2.5.0-1.el9_2.tuxcare.els13.i686.rpm 8e673f77a66615d9c19deb30ef0611c08fe8800ba744f803aa8f32f7105d7f9e expat-devel-2.5.0-1.el9_2.tuxcare.els13.x86_64.rpm dbc9a5826a754eeebc049caa198effaabe52be55b9fb07770e117dda68c83290 expat-static-2.5.0-1.el9_2.tuxcare.els13.x86_64.rpm 8b08ae597aaf2442c29b5d074b7861589d9013a71d9919702da6609fa080cf4c CLSA-2026:1784112338 TuxCare License Agreement 0 - CVE-2026-6733: reject unsolicited HTTP/1.1 response bytes that begin parsing with no in-flight request, preventing keep-alive response queue poisoning Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6733: reject unsolicited HTTP/1.1 response bytes that begin parsing with no in-flight request, preventing keep-alive response queue poisoning

0 tuxcare-almalinux9.2-esu nodejs-16.20.2-8.el9_2.tuxcare.els16.x86_64.rpm 4a1a17a8f0a3a26ec325b0f91f406f495e7f7a62470e3cfcf78d8892fdbf24bc nodejs-devel-16.20.2-8.el9_2.tuxcare.els16.x86_64.rpm 338b7b41e9ba24a7e340fcbe58f65cb51f3a17fc898f298ef21331e64f854cfd nodejs-docs-16.20.2-8.el9_2.tuxcare.els16.noarch.rpm 60d1d62cb0b7e8be46a8eaef46e0e987c47fefb17922dcc7ee0a9c1481b6311b nodejs-full-i18n-16.20.2-8.el9_2.tuxcare.els16.x86_64.rpm 9e7395b5ab513bc2a4dc81f43e3999276963474a403d798024971079da4d73c9 nodejs-libs-16.20.2-8.el9_2.tuxcare.els16.i686.rpm 99bc144f148259962d535789414fc8ad8d4201d6030ca5ba1bab81189c0ab08b nodejs-libs-16.20.2-8.el9_2.tuxcare.els16.x86_64.rpm feaab58056af93bb750b107d3d43adb98d808ac8d8dc97c08cfeec0442f42a2d npm-8.19.4_1.16.20.2-8.el9_2.tuxcare.els16.x86_64.rpm d9d6d4474855aa66b43d74631c8fcc8cf5393d45b3bac32bec1772c2e582881e v8-devel-9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els16.x86_64.rpm bf6123c80a605dd30df38e7e3d015a5daa342de77c2855c1cdb78750bf31bb96 CLSA-2026:1784118526 TuxCare License Agreement 0 - CVE-2021-3933: integer overflow in Imf::bytesPerDeepLineTable (ImfMisc.cpp) - CVE-2021-45942: heap OOB write in CompositeDeepScanLine::setFrameBuffer via missing subsampling validation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3933: integer overflow in Imf::bytesPerDeepLineTable (ImfMisc.cpp) - CVE-2021-45942: heap OOB write in CompositeDeepScanLine::setFrameBuffer via missing subsampling validation

0 tuxcare-almalinux9.2-esu openexr-3.1.1-3.el9.tuxcare.els8.x86_64.rpm 95318c76c0d19221f4e6b3702453d943bb6d63783cfbddbf71b40d5e44c31666 openexr-devel-3.1.1-3.el9.tuxcare.els8.i686.rpm a7147766c0c721e0abba51aca2668ac9df4950f20b9f09c21233bef75a026093 openexr-devel-3.1.1-3.el9.tuxcare.els8.x86_64.rpm 532f9d65cc3a6ccbb77ba5c1034e6be6d944276de2ef2a2ae0dccee493f8f667 openexr-libs-3.1.1-3.el9.tuxcare.els8.i686.rpm f6cd70dc25fbc4e28c58dbdf9a3b495df9f5a89476d2905091038bd232c50000 openexr-libs-3.1.1-3.el9.tuxcare.els8.x86_64.rpm 4bae6738f3087c1d226e1ccb69ea4f4d69ba1e2e662a368543052804c46aded1 CLSA-2026:1784126222 TuxCare License Agreement 0 - CVE-2024-46955: out-of-bounds read in Indexed colour space index (bug #707990) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-46955: out-of-bounds read in Indexed colour space index (bug #707990)

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els13.i686.rpm d5fc3e72fcc19e0b4bbd6cf4e464b6f00baa1c7956a3ab3c481ec918ca695c2e ghostscript-9.54.0-11.el9_2.tuxcare.els13.x86_64.rpm 2452817ec07bbc046a1e167a469a2a8d3854501c0da5b7e9920e018d42f09353 ghostscript-doc-9.54.0-11.el9_2.tuxcare.els13.noarch.rpm 5ab335c97015e86039c1d148476a5f7ae67d93666a2889f6b345ebd82eab5a99 ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els13.x86_64.rpm a6dd32f08f01404dfc63a1418a13d5e6dc92f109ba18d234528a991ff221ebb4 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els13.x86_64.rpm 46acddc47efdfd82fb99ce2988c64f424df5683d27e9838d2fdab4e7bdcebf36 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els13.i686.rpm 600c712887cba760fda97417939a36b6ddf6f76872736406f0fca3cf27c25535 ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els13.x86_64.rpm da0c7b0349c90a818ce9f34bf85d9c6841da4f94b8273c3655df686d2e0c72f8 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els13.i686.rpm 79d49269e870bb206ad637dfa6739c059a867103433a161af8fe3cecaefa6c42 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els13.x86_64.rpm ec55de0e4c363a6274be4f62e9c6591b78def0f4395ed359c592548bf49f7d17 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els13.x86_64.rpm 23a86c8c087354b4b0163cf93b6751626ab65c0e790c4c907e6985dd1e9c6046 libgs-9.54.0-11.el9_2.tuxcare.els13.i686.rpm 5b1d5ba386dd8795dc231c830183f00586ea2e8ccb04a88a792625b2da85a7a2 libgs-9.54.0-11.el9_2.tuxcare.els13.x86_64.rpm edcaa7777e5b7a290a41711f3989b432e0b132d5c6dff7317f4d749a99ec4943 libgs-devel-9.54.0-11.el9_2.tuxcare.els13.i686.rpm 7d0726951f5e725d7d84baa1227703122a8b37f12c255b0a9b26c7f00d69b268 libgs-devel-9.54.0-11.el9_2.tuxcare.els13.x86_64.rpm 83bb0811484b587949462b02797bf09e8aa0d006f29a47c6f6d50cf0d47c4701 CLSA-2026:1784131003 TuxCare License Agreement 0 - CVE-2026-52718: fix bytes/bits confusion when parsing AV1 tile data size in codecparsers, preventing an assertion Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-52718: fix bytes/bits confusion when parsing AV1 tile data size in codecparsers, preventing an assertion

0 tuxcare-almalinux9.2-esu gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els7.i686.rpm 268fe911f0730c14c4888311568bf5914ba7043569d94702c1adac7c49d091ac gstreamer1-plugins-bad-free-1.18.4-6.el9_2.tuxcare.els7.x86_64.rpm e4e6228a15ae15f1849f7d9423d5b938c511a565d48fa2e5c09fd8de8ac00106 gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els7.i686.rpm 299836d1e5063e17163afd2c8c3a7c94572f32d1fbe083a0d2bb51fde815f916 gstreamer1-plugins-bad-free-devel-1.18.4-6.el9_2.tuxcare.els7.x86_64.rpm 0bcaf4e6ed99bde3a7e4ef899ec42c98f2e1529358273ec193a76c688023e266 CLSA-2026:1784131746 TuxCare License Agreement 0 - CVE-2026-50722: fix improper DER validation of the ASN.1 digest in IKEv2 RSASSA-PKCS1-v1_5 AUTH verification Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50722: fix improper DER validation of the ASN.1 digest in IKEv2 RSASSA-PKCS1-v1_5 AUTH verification

0 tuxcare-almalinux9.2-esu libreswan-4.12-2.el9_2.tuxcare.els3.x86_64.rpm 90087964830863faecce2949f0b0f9ec5ba88cd282e502fa50525896e1246bb4 CLSA-2026:1784133121 TuxCare License Agreement 0 - CVE-2026-39835: return an error instead of panicking when the SSH CertChecker IsHostAuthority/IsUserAuthority callbacks are unset, in the vendored golang.org/x/crypto/ssh Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39835: return an error instead of panicking when the SSH CertChecker IsHostAuthority/IsUserAuthority callbacks are unset, in the vendored golang.org/x/crypto/ssh

0 tuxcare-almalinux9.2-esu buildah-1.39.6-1.el9_2.tuxcare.els11.x86_64.rpm addb7942387bd539d0d9264b9ec8570fd5a6d56ac93804d0a82626a48a9c2623 buildah-tests-1.39.6-1.el9_2.tuxcare.els11.x86_64.rpm c639b728d6b6b5c19e2330b55e60f484ad76467e9b49c43377c2e4dca33957b2 CLSA-2026:1784134559 TuxCare License Agreement 0 - CVE-2026-58379: fix heap buffer overflow in PSP file parser by correcting the line_width computation for low bit depths and reading line_width bytes instead of width in read_channel_data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58379: fix heap buffer overflow in PSP file parser by correcting the line_width computation for low bit depths and reading line_width bytes instead of width in read_channel_data

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els13.x86_64.rpm ceafd12e36569d4e20718e128c7be4916adda2a96255dd2c34d0d867804884a1 gimp-devel-2.99.8-4.el9.2.tuxcare.els13.x86_64.rpm 8dd2d15aba711dbb7f3fb92fd628f6d56d1c8cbc528c534a563b8f2875cfbd99 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els13.x86_64.rpm 44aa4e604eeeffc2ea0ba0af02ac9078694642ec2d3b2ada29886348b4619f99 gimp-libs-2.99.8-4.el9.2.tuxcare.els13.i686.rpm cc7696707a33621e93d2f9415fd2d9330451243f298df158c6a7e7669daa68ca gimp-libs-2.99.8-4.el9.2.tuxcare.els13.x86_64.rpm 93693df2837fb6a0d2e9ed8a289055aedef10e262418a26a8702c7a7f2b54b9c CLSA-2026:1784137549 TuxCare License Agreement 0 - CVE-2026-15308: fix quadratic complexity (CPU DoS) in incremental HTMLParser feed() by buffering pending data until a parse threshold Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15308: fix quadratic complexity (CPU DoS) in incremental HTMLParser feed() by buffering pending data until a parse threshold

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els29.noarch.rpm 70f613f90c1c28ec9f0808fce4cff3f25101d6db9a768bbcf998fa1f0ec59c8c python3-3.9.16-1.el9_2.2.tuxcare.els29.i686.rpm 219d4c6222a6e467f6fb47bfd0a0253f75fee4601471b37e0bd1a1c64428aebf python3-3.9.16-1.el9_2.2.tuxcare.els29.x86_64.rpm 5b6f0c7a2916c9b7ebef690186820675e4c56ecbe55d34f719635c4f4722d248 python3-debug-3.9.16-1.el9_2.2.tuxcare.els29.i686.rpm 4ee9ccd49ee165a498ca642166df58985811e7f0569068b8301c71412714d0c3 python3-debug-3.9.16-1.el9_2.2.tuxcare.els29.x86_64.rpm cb9465f834cd28b4ab5d6668e2435c14c4533d3d66d8544a61ac2f39174ea384 python3-devel-3.9.16-1.el9_2.2.tuxcare.els29.i686.rpm bd493e0b2ba0b2aca9af520d91df1b1c1e290dad662ff36213d22586f87f2dbc python3-devel-3.9.16-1.el9_2.2.tuxcare.els29.x86_64.rpm e56c6d500705862a3ff97870c642354dc48a3afaa01c4e3ea0a4f39bfd155579 python3-idle-3.9.16-1.el9_2.2.tuxcare.els29.i686.rpm 168ada8f3b4fe7a321fd45ef4ece409c9bbeee355a2f74d2330ec8ab6c2f8674 python3-idle-3.9.16-1.el9_2.2.tuxcare.els29.x86_64.rpm 775305464268c2474e5509f1aa50010316f6679e0a87548a9770b3fae278fa07 python3-libs-3.9.16-1.el9_2.2.tuxcare.els29.i686.rpm 6296d65ea898919e79295804222762dc892d0e0184266aa7cad6b49dab8cf685 python3-libs-3.9.16-1.el9_2.2.tuxcare.els29.x86_64.rpm 720d0b432cabc39d96f5afdcdecd3c3de690ae4973b3e9cfb7f3c5639037fec0 python3-test-3.9.16-1.el9_2.2.tuxcare.els29.i686.rpm c44d1d71580973a50f3de58b44bb6ca14550eb0efc31ddec7a8df5abca64b882 python3-test-3.9.16-1.el9_2.2.tuxcare.els29.x86_64.rpm 41f04847f5c932d940d7381d9825609197cb811e35b7b6df5c30fc74acbf1e67 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els29.i686.rpm a54479bb194abeef56b3df9d18b784c92f27ec20114058fe9572013acd8dd96e python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els29.x86_64.rpm 1bd39e59299b99fe8cd43fdf6cd8ebec26e9bae52f38275a1a143954d65a07b3 CLSA-2026:1784188646 TuxCare License Agreement 0 - CVE-2026-27145: fix crypto/x509 quadratic hostname verification by splitting the candidate hostname only once Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27145: fix crypto/x509 quadratic hostname verification by splitting the candidate hostname only once

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els18.x86_64.rpm e020d9dc6306fc8ab807a9c6af1f56ca0b6b77257ea622869011e00e7831aefc golang-1.22.9-1.el9_2.tuxcare.els18.x86_64.rpm f4838f9dc9275ea3282ebc5dc1a4e7956f8f1f353c8454a69ef6baf03966733f golang-bin-1.22.9-1.el9_2.tuxcare.els18.x86_64.rpm 8aa69bb1fb87e5c5ada583e3ec84f43834ab791b62d2775e25ef84553722ef20 golang-docs-1.22.9-1.el9_2.tuxcare.els18.noarch.rpm cd2a2f976801604f2edf38b507a189ec77c86ae58da147639074d973f2084226 golang-misc-1.22.9-1.el9_2.tuxcare.els18.noarch.rpm 98698bfdebb983576702b840cd9ceec533717974bb828163467f4cc7e7800dec golang-src-1.22.9-1.el9_2.tuxcare.els18.noarch.rpm 3ebba2c9d608c6ca7e8231ec9d91eafd06b84e85c283a33530e07949eda371ba golang-tests-1.22.9-1.el9_2.tuxcare.els18.noarch.rpm f9d5f1a3afc042903d84b0eb68d56cb66b19e8135ca7088a38f0e5f5a565255f CLSA-2026:1784189693 TuxCare License Agreement 0 - CVE-2026-59857: bound the single-byte SAL result writes and the terminating NUL to MAXWLEN - 1 in spell_soundfold_sal() to prevent a stack out-of-bounds write with a crafted spell file (src/spell.c, upstream vim 9.2.0725) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59857: bound the single-byte SAL result writes and the terminating NUL to MAXWLEN - 1 in spell_soundfold_sal() to prevent a stack out-of-bounds write with a crafted spell file (src/spell.c, upstream vim 9.2.0725)

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els39.x86_64.rpm ea6c3f2f94a83ba1a1f96c499740784ca9d0d6fe796585c2351ddf1810bce489 vim-common-8.2.2637-22.el9_2.1.tuxcare.els39.x86_64.rpm 0793f5a34e07b734ee7ece318a9d972c6f75572c315119cfbc1b6c2efe35e769 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els39.x86_64.rpm 840b735fe3d1e19907673a570b575f21a48200a78e5a9242f50177034d1122cb vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els39.noarch.rpm b329794eb113917e92874b7c32888128b16f52301c7f56be0cda03e91f191246 vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els39.x86_64.rpm 9b1f701b395dd62e32ba324412defaa1687e82e6f1b94c1a285657b1acdd6853 CLSA-2026:1784191279 TuxCare License Agreement 0 - CVE-2026-12549: incomplete range clamp for suffix range in soup_message_headers_get_ranges_internal Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12549: incomplete range clamp for suffix range in soup_message_headers_get_ranges_internal

0 tuxcare-almalinux9.2-esu libsoup-2.72.0-10.el9_2.3.tuxcare.els8.i686.rpm dda33aae3703f68c20f46868e0d3d6bccfe40042d56eed03c1364b90719cce89 libsoup-2.72.0-10.el9_2.3.tuxcare.els8.x86_64.rpm 4675796c0b622b7233b4cc25d36e934f8fbb80e898c1086f29ec04f559da56c1 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els8.i686.rpm 3752d1031ff28748fe35d7fc538a38edb4985d02addd06194c8181457572c127 libsoup-devel-2.72.0-10.el9_2.3.tuxcare.els8.x86_64.rpm 9ad0d5350d4ca17ba18e00c125c8b8defa12eab2221d555321f598aec0d14c5d libsoup-doc-2.72.0-10.el9_2.3.tuxcare.els8.noarch.rpm 037c27f5b3261c66847963817985d9c004d5493a7ed34473a211363860731d4c CLSA-2026:1784217991 TuxCare License Agreement 0 - CVE-2026-40467: fix use-after-free in do_getline_redir() in io.c (redir_exp dereferenced after being freed) - CVE-2026-40553: fix stack buffer overflow in ftype() in the readdir extension (unbounded path concatenation before stat()) - CVE-2026-40469: fix integer overflow in do_sub() in builtin.c (64-bit overflow check on the result-buffer size prevents heap corruption in sub/gsub/gensub replacement expansion on 32-bit builds) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40467: fix use-after-free in do_getline_redir() in io.c (redir_exp dereferenced after being freed) - CVE-2026-40553: fix stack buffer overflow in ftype() in the readdir extension (unbounded path concatenation before stat()) - CVE-2026-40469: fix integer overflow in do_sub() in builtin.c (64-bit overflow check on the result-buffer size prevents heap corruption in sub/gsub/gensub replacement expansion on 32-bit builds)

0 tuxcare-almalinux9.2-esu gawk-5.1.0-6.el9.tuxcare.els2.x86_64.rpm 0fe70fb62f26abd6a886b72e66f02e787131f20baebe1f452ef65d18cd7f7803 gawk-all-langpacks-5.1.0-6.el9.tuxcare.els2.x86_64.rpm 7997bb95bca9bec1848fbead7d71427f1d39a49fba5379ba1384cdc44c93b499 gawk-devel-5.1.0-6.el9.tuxcare.els2.x86_64.rpm 925175b2d9fc95e7a683496bda31c8c0b093d11ccdaa9ec6a12d0770b3a4f6bc gawk-doc-5.1.0-6.el9.tuxcare.els2.noarch.rpm c013408c9f7c28d62bdc0a82ad5de4e9117460022ad2b4b7bbd9a7e862ac9155 CLSA-2026:1784280067 TuxCare License Agreement 0 - CVE-2026-59998: document that GSSAPIStrictAcceptorCheck is ineffective when the server is joined to a Windows Active Directory. Backport upstream commit 8058c5bd. Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59998: document that GSSAPIStrictAcceptorCheck is ineffective when the server is joined to a Windows Active Directory. Backport upstream commit 8058c5bd.

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els20.x86_64.rpm 49262c6a966ef51cde32f3af5e7cc1e66242a528dbf735a67b8f28fa5c4936c4 openssh-askpass-8.7p1-30.el9_2.tuxcare.els20.x86_64.rpm c575888905b605aa487d01b9f5b36f911debd1b8c27c3eadb4485ef49580756b openssh-clients-8.7p1-30.el9_2.tuxcare.els20.x86_64.rpm d376a62e54cd8ab4c4e47276b7589e2d3d04747c1779f087e8420a63228f8201 openssh-keycat-8.7p1-30.el9_2.tuxcare.els20.x86_64.rpm 90b4a9515274e81c72fb668c8f8e93544e555d9ecc24c76cd011092f5cb66e9e openssh-server-8.7p1-30.el9_2.tuxcare.els20.x86_64.rpm 27e2baaec72b10361f0a4655ed96b177c7a4e7c51736027e227858fecff657a8 openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els20.x86_64.rpm c4bbaa7538cd36fca61d303ed2877941af8b0078270a9e34f11d25b14bbc256b pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els20.x86_64.rpm e310ced735001be05fef96ebad50f2f7f3307652c1fbe77a05f9098fe621b4e2 CLSA-2026:1784287739 TuxCare License Agreement 0 - xfs: resample the data fork mapping after cycling ILOCK - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149} - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). - net: l3mdev: use skb_dst_dev_rcu() in l3mdev_l3_out() - ipv4: start using dst_dev_rcu() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - tcp_metrics: use dst_dev_net_rcu() {CVE-2025-40075} - net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170} - udp6: Fix race condition in udp6_sendmsg & connect - ipv6: use RCU in ip6_output() {CVE-2025-40158} - ipv6: use RCU in ip6_xmit() {CVE-2025-40135} - ipv6: start using dst_dev_rcu() - net: dst: introduce dst->dev_rcu - neighbour: accept plain RCU readers in ___neigh_lookup_noref() {CVE-2025-40158} - net: Add locking to protect skb->dev access in ip_output - ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers - ipv6: adopt dst_dev() helper - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - net: dst: add four helpers to annotate data-races around dst->dev - tcp: convert to dev_net_rcu() - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- xfs: resample the data fork mapping after cycling ILOCK - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149} - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). - net: l3mdev: use skb_dst_dev_rcu() in l3mdev_l3_out() - ipv4: start using dst_dev_rcu() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - tcp_metrics: use dst_dev_net_rcu() {CVE-2025-40075} - net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170} - udp6: Fix race condition in udp6_sendmsg & connect - ipv6: use RCU in ip6_output() {CVE-2025-40158} - ipv6: use RCU in ip6_xmit() {CVE-2025-40135} - ipv6: start using dst_dev_rcu() - net: dst: introduce dst->dev_rcu - neighbour: accept plain RCU readers in ___neigh_lookup_noref() {CVE-2025-40158} - net: Add locking to protect skb->dev access in ip_output - ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers - ipv6: adopt dst_dev() helper - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - net: dst: add four helpers to annotate data-races around dst->dev - tcp: convert to dev_net_rcu() - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 22a5b08eec0e03522eb739c99c68d8e0344321bea61464460785da0f4a84fa5a kernel-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm b95042c4081878a4981384e7ea62014eae1dfb9817f7ca8f98d82061f7ebc021 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els9.noarch.rpm dac3db00513bf37d38de34edc1e5d57277835e76ffb72f384e4bedfc56952f06 kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 340f880377530fb7a068d0cecfd95c8ebafee6c28e802f4704ed4a18341513af kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm c2fe182822302020e530ab49ebbb8a75902e2e596306fbdb4bb1cc664e95d001 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 79f79b130fdb3f424b221fc7cc5db9f73d809d87b8a7bdec61b1eb4787a7b31c kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 27fd122f7a05d3ff4caab753cee8f77b1940a05afc2c57d9ecb8b2712fa70f41 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 48f733596ff0b1a514205db8779f9eb9fdeff5cc046ebb7cd9753dc5b8e742d8 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 353ade786712d5c6b1b8d7e14663cc4eaa65e9bd4d7966f7e3eb0748d4bdce19 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 04361d76db9ef43804402408b75801825e273a91543468901ea4159e6e8361e3 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 78d1807d84566b377f6a4dd32c992151bb74d09364dbca51526cf664c683b613 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm ef4b1460c2c4a70edc77814975887d95d67c32cb11c7f5d35b4b6ecd8ad3d04e kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 5ecceeedd3c26338cb0fb38b1f7ee753196c12877367d39de60aa4937bcb666a kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 530821099101532efca4348a9709c2e706744c4615433654aac91e6299f987c9 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm f3ad86ee5109195ffdcbd4168866eca9a20ac568a6d4b84268d9e944ebe73aa0 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 58bd794b938701c98a7c0c444048971f6ff6c32769bcb8a69393bc73f49660fd kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 7b90f4d80db01773917a3ad0ced7b685af1f2eb3de684e6b3b9384b9c2220ba7 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els9.noarch.rpm 174cf70d5c7063ff03e5d30aed3cfc52cfa441342d8f12eeefc7f0412d9e351d kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm e9620ca105fc5e0564dd0e780cb6cbbd8ea1b7a7030870b11ef45d8f8236c217 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 7b1a2a58db191c7df6f6760cb3e6f11447738da59aba281eedfb06dcd5577b6d kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 2d3e590e599562cee50c2d2c216b6e076a6e12456761a53ca89ad33df9ddc67c kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm ade5ff8064bede6a389f56e81a04bd1e938853b289c30ca55dc0d0ffca983fae kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 624230897a5b75d6af9dc03baff0ae98ab5244ea210a33a4d056bf11e9ff15bc kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 72d3d6b09cf7cd6ba885cf722937c0530d609dd9a6dffd5399036865bd6ffc6e kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm cdf43bc90a6658945e5f4dd66e4995ed5dad3387477ecfe79641ffb967d0c04e kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 7d5ec9868e8228d9d8c5cd531d1b2c326a7872bf985d79e330ab4f9297df4c25 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm d6edcfeb367c23cfbd90b5759ae877098ed8bb0ff4f6b4a7d909d0e738d63894 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm cb6d38a42c1ad16a8229ce6ea56dd149cc221c9c8b9ac97bacb0456295fda4c0 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 98d516796338212c2c11db1b2812f3b44f762c190e17f5d9aa64105d13b5dfd1 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm fe3a9ce081b99f4454ac2bf4295910dfb908b0e06ff10d29c83b89162c299f13 libbpf-1.0.0-2.el9_2.tuxcare.11.els9.i686.rpm 4c43aac081982563c6b4edaafdda640ea96b2c131a315c9ec76f2c5db14a51a1 libbpf-1.0.0-2.el9_2.tuxcare.11.els9.x86_64.rpm e6b23b9c5f81d425eab3278227625606c01a51cda31ab96bd69abe19a30e2178 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els9.i686.rpm 811796086f210f2e6146d1227b9ea94e1253235c206f95a8e35825f1222f46cd libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els9.x86_64.rpm 47ea4c1ba53a57e7798de9ccc70759dc04b716dde7e091217dfdaabd4d672c61 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els9.i686.rpm 72ed8bc0ca54343d827abfa4407b8c6a5ad1e367169543e935dfeca1281a975a libbpf-static-1.0.0-2.el9_2.tuxcare.11.els9.x86_64.rpm 4273603853e384be723b7772b919fffcec5f9856e238e19d9fff36176a86e8ba perf-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 3f22765242ec544657fa1acb6e4044e7248902ebc1b83cce044970616f8bafa6 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm 197371c92e5750a01a314dbfbffe211b05a0768becead162712071b50d81b6ee rtla-5.14.0-284.1101.el9_2.tuxcare.11.els9.x86_64.rpm b7d5c4b650e4124a9c2453d3d5a6828fdd27dcc06b7b1a5bd6ea722b18731adc CLSA-2026:1784291449 TuxCare License Agreement 0 - CVE-2026-50219: reject libexpat API re-entry from inside handler callbacks to prevent use-after-free - CVE-2026-56131: extend the handler re-entrancy guard to XML_ResumeParser - CVE-2026-56412: guard XML_TOK_DATA_CHARS handler calls in doCdataSection Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50219: reject libexpat API re-entry from inside handler callbacks to prevent use-after-free - CVE-2026-56131: extend the handler re-entrancy guard to XML_ResumeParser - CVE-2026-56412: guard XML_TOK_DATA_CHARS handler calls in doCdataSection

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9_2.tuxcare.els14.i686.rpm 099332f598851bb87c16b26c306a5b52da3589685e206d06db4a9f935d3215f3 expat-2.5.0-1.el9_2.tuxcare.els14.x86_64.rpm fda320efec833d1f3c8f470a3671732b1753fa0f15c3db71bd1d5a9b4da4433b expat-devel-2.5.0-1.el9_2.tuxcare.els14.i686.rpm 75dc7409dd6a8290f476fca0d7117df32660384e0fb258f84482a0865faf726b expat-devel-2.5.0-1.el9_2.tuxcare.els14.x86_64.rpm afc55fb1850e1f30e51a19359ac06fe517786d65d881d0b43c560fea5f88b5a0 expat-static-2.5.0-1.el9_2.tuxcare.els14.x86_64.rpm 4fc38bb9047fd0756ef2a51e123e1e87f43f0a94c7def42f8a6bb53b4e94dfa0 CLSA-2026:1784292256 TuxCare License Agreement 0 - CVE-2022-26981: fix buffer overflow in compilePassOpcode in compileTranslationTable.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-26981: fix buffer overflow in compilePassOpcode in compileTranslationTable.c

0 tuxcare-almalinux9.2-esu liblouis-3.16.1-4.el9_2.tuxcare.els4.i686.rpm 4baa21eea1591c072b53c3ed8b20c28d18c2aec3e06c3dbd760e5cbecdc3691b liblouis-3.16.1-4.el9_2.tuxcare.els4.x86_64.rpm 6130bcf188d7a0e5a8c8971d11b537e3133af98730eebab0437a3366698c2f64 liblouis-devel-3.16.1-4.el9_2.tuxcare.els4.x86_64.rpm 5ed2bd98bb34824048dd4385a02f6ac56712b70bfdf4a7f939068509bb8e1385 liblouis-doc-3.16.1-4.el9_2.tuxcare.els4.noarch.rpm 0f8c990ab11bf79a463f89ae837c3022e39e804053892794cf8e92c83b32fdbf liblouis-utils-3.16.1-4.el9_2.tuxcare.els4.x86_64.rpm 62c1a8f37f88f3b421174634ccdff3c8dbda738280b7467865e2a83a61b02dc9 python3-louis-3.16.1-4.el9_2.tuxcare.els4.noarch.rpm 55e07ed972f8f6027695f77d94ffbf90cd68cae4cb4c828ba997a5f59fd6b363 CLSA-2026:1784294795 TuxCare License Agreement 0 - CVE-2026-43958: fix stack-based buffer overflow in rrdcached handle_request_create() via an oversized CREATE request with unbounded DS/RRA arguments Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43958: fix stack-based buffer overflow in rrdcached handle_request_create() via an oversized CREATE request with unbounded DS/RRA arguments

0 tuxcare-almalinux9.2-esu python3-rrdtool-1.7.2-21.el9_2.tuxcare.els1.x86_64.rpm e9a657af82cd58237a7ef5636551bcd1640665db031d0b5572d19806653ce985 rrdtool-1.7.2-21.el9_2.tuxcare.els1.i686.rpm 172d59e5c46edba862afefe1092ce95ea396b097c9c53aa79ec66e6455bc372e rrdtool-1.7.2-21.el9_2.tuxcare.els1.x86_64.rpm 0e590e8129af43f4ea0055c805c57c8099d17e36c389d70207fa4d2d5bd92a00 rrdtool-devel-1.7.2-21.el9_2.tuxcare.els1.i686.rpm ba66c30641ba9aeca889c10fbd74c7a8aca31a16300ad33f30617d38522e8490 rrdtool-devel-1.7.2-21.el9_2.tuxcare.els1.x86_64.rpm 8af735c05d0c857e0a5d2b09ab0cc5a9b772668771842cb3aa8fc574ce069bb4 rrdtool-doc-1.7.2-21.el9_2.tuxcare.els1.x86_64.rpm fd3838a384831d6e9574e091c01d997983e2028d8078c66cd48620c1e4ae92d3 rrdtool-lua-1.7.2-21.el9_2.tuxcare.els1.x86_64.rpm 027c23ba9535a1445f1dbad7e5826864bac2faeb792a4f52d09954264c31adbf rrdtool-perl-1.7.2-21.el9_2.tuxcare.els1.x86_64.rpm 24ac3b6cca8d23e84f56e2e66c5f84b9615aa8316325ca74ee7a7abfc6c4ed34 rrdtool-ruby-1.7.2-21.el9_2.tuxcare.els1.x86_64.rpm 8603ad08c67f0c5ec5094ff7c6c223e7882d1fdded0b6c4443962c969392a1ba rrdtool-tcl-1.7.2-21.el9_2.tuxcare.els1.x86_64.rpm 92418c8605070bcdefa55868c7436f50d422e5782dcb2e10a07806034412752b CLSA-2026:1784295645 TuxCare License Agreement 0 - CVE-2026-55999: reject fonts with per-glyph metrics exceeding maxbounds in glamor_font_get() to prevent heap buffer overflow in the glamor font atlas Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55999: reject fonts with per-glyph metrics exceeding maxbounds in glamor_font_get() to prevent heap buffer overflow in the glamor font atlas

0 tuxcare-almalinux9.2-esu xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els17.i686.rpm cf6b0de73178df1b52f0ae5404eb5cb30ac91188f9d1e12d5d0c24cacf73814f xorg-x11-server-Xwayland-21.1.3-7.el9.tuxcare.els17.x86_64.rpm 0c54e5024362ecabc8e0ca8f56eb13d41ccf301d29f90ae9a6847eb99ac3de45 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els17.i686.rpm e14e43c3579de541c2a2ebc2c19838b6616c39649c928e88d1c6ebed299b6567 xorg-x11-server-Xwayland-devel-21.1.3-7.el9.tuxcare.els17.x86_64.rpm bfeedf28b2e7325f18d140e788b625c7f6c962f695b613a46430043c9d00543c CLSA-2026:1784302739 TuxCare License Agreement 0 - CVE-2026-27145: rebuild with newer golang 1.22.9-1.el9_2.tuxcare.els18 (crypto/x509: split candidate hostname only once) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27145: rebuild with newer golang 1.22.9-1.el9_2.tuxcare.els18 (crypto/x509: split candidate hostname only once)

0 tuxcare-almalinux9.2-esu skopeo-1.11.2-0.1.el9_2.tuxcare.els7.x86_64.rpm 7ee2a231800bc6daef869172f11ec9b8d0d81d9dcd5459799d88b2b65fa2a262 skopeo-tests-1.11.2-0.1.el9_2.tuxcare.els7.x86_64.rpm 6c57af79600413b934659caedb2f12baeecd6e195a9b230f53a01b97be337ffc CLSA-2026:1784306624 TuxCare License Agreement 0 - CVE-2026-50721: fix improper RSA signature hash-length verification in IKEv1 by delegating to PK11_Verify() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50721: fix improper RSA signature hash-length verification in IKEv1 by delegating to PK11_Verify()

0 tuxcare-almalinux9.2-esu libreswan-4.12-2.el9_2.tuxcare.els4.x86_64.rpm ed957f34fabe371644d266f9545afec26b21b618dc99f274f464b360be93370a CLSA-2026:1784308178 TuxCare License Agreement 0 - CVE-2026-39832: preserve SSH agent constraint extensions when adding keys and reject keys with unsupported constraint extensions in the vendored golang.org/x/crypto/ssh/agent client and in-memory keyring Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39832: preserve SSH agent constraint extensions when adding keys and reject keys with unsupported constraint extensions in the vendored golang.org/x/crypto/ssh/agent client and in-memory keyring

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els18.x86_64.rpm 1d95c4bc4b0ed40370c5a477699c114b90fbfd129c40c762aae0d0d9990096b7 podman-docker-4.4.1-13.el9_2.tuxcare.els18.noarch.rpm f77f1047de1bc92baff0e335852035a0dd5ee1b3aea8296637a9420f189d3c8f podman-gvproxy-4.4.1-13.el9_2.tuxcare.els18.x86_64.rpm 9ef6d698743cca7e1277393bda451a48d1d63084e5c4dc2eba51ed15447838a7 podman-plugins-4.4.1-13.el9_2.tuxcare.els18.x86_64.rpm 50a231bad11e6eeca793ffb6e03fc6110ac68c047b24f29e5ebd2e1165fcfa65 podman-remote-4.4.1-13.el9_2.tuxcare.els18.x86_64.rpm be030734aaf9df1aadd3ade532a791797f1a71e92de85d53008e1b7cd5cda884 podman-tests-4.4.1-13.el9_2.tuxcare.els18.x86_64.rpm 48f96a70e384f4c3bfd70fce20abfe06d2a19f75bc01046be3cfdb75a1346d29 CLSA-2026:1784309765 TuxCare License Agreement 0 - CVE-2026-42508: fix revoked CA key not correctly checked for revocation in vendored golang.org/x/crypto/ssh/knownhosts Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42508: fix revoked CA key not correctly checked for revocation in vendored golang.org/x/crypto/ssh/knownhosts

0 tuxcare-almalinux9.2-esu podman-4.4.1-13.el9_2.tuxcare.els17.x86_64.rpm fc40043a30c8e21492c224ba56b91efe4bc0c1978b04f977411a65db4e913dc8 podman-docker-4.4.1-13.el9_2.tuxcare.els17.noarch.rpm 92408c56f56f7fbc69674a41d5729836107f3f52ddabf4cd51a149eb1d736560 podman-gvproxy-4.4.1-13.el9_2.tuxcare.els17.x86_64.rpm 7b480483aefed2ccd05dc1f61c6c4f6436cdec736a342f15a22d4562f4f26340 podman-plugins-4.4.1-13.el9_2.tuxcare.els17.x86_64.rpm 4dc64078fa1446c886b927b87fa744c3f6962e3d85363cb66bc6e4bb9856e2cd podman-remote-4.4.1-13.el9_2.tuxcare.els17.x86_64.rpm d64af7b6c3152e32806625931933e8d237fdbf865eb4f88d01b77fb51dabde97 podman-tests-4.4.1-13.el9_2.tuxcare.els17.x86_64.rpm 48f9f23e6d0b3e6342b61573e563d67ace1d981e4b2b1d0aeea18b2afe16bca6 CLSA-2026:1784310537 TuxCare License Agreement 0 - CVE-2026-58470: fix integer overflow in parse_content_range Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58470: fix integer overflow in parse_content_range

0 tuxcare-almalinux9.2-esu wget-1.21.1-7.el9_2.tuxcare.els4.x86_64.rpm 3f19e2e8e1c4e79ea5de243a33802d16e3cd4c19c186539e1fd3d9b08a97d565 CLSA-2026:1784531112 TuxCare License Agreement 0 - CVE-2026-57432: fix pack/unpack SSize_t overflow when computing structure size Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-57432: fix pack/unpack SSize_t overflow when computing structure size

0 tuxcare-almalinux9.2-esu perl-5.32.1-481.1.el9_2.tuxcare.els3.x86_64.rpm 811a324d6e9da8d0b59ad6306b89d6e6f6096b3ef1ef60d32097b8d2d3a1cc37 perl-Attribute-Handlers-1.01-481.1.el9_2.tuxcare.els3.noarch.rpm 09e2450da676ec15697ff686d3bbaf6f4aa814ba1c3723625a6a742982ee42cb perl-AutoLoader-5.74-481.1.el9_2.tuxcare.els3.noarch.rpm 6be997191eea46e29bc09765cfa74ab9334c1caaae5155f63fe8688b2e4a9a3d perl-AutoSplit-5.74-481.1.el9_2.tuxcare.els3.noarch.rpm 4cf30eb8de58cf8e743accfd31563a715ecf8a750d1e84fd608f4f3641c3f9b0 perl-B-1.80-481.1.el9_2.tuxcare.els3.x86_64.rpm 581dd1006bbab68fa2a3981cd72f5fbeea154fb1c66c3a5fa5265d72ee99a026 perl-Benchmark-1.23-481.1.el9_2.tuxcare.els3.noarch.rpm b836196fff99c4d751d5f0b27b7f34a99238489a2713f6dfd2be6f0a497f869f perl-Class-Struct-0.66-481.1.el9_2.tuxcare.els3.noarch.rpm 2e102df24afabf4fe33446375d74c696629386f91165d2c7261233fcde35396e perl-Config-Extensions-0.03-481.1.el9_2.tuxcare.els3.noarch.rpm dcb27837eaf2055ba6feced3ff678f96c14ff77bf447979a427f8557d2a5879b perl-DBM_Filter-0.06-481.1.el9_2.tuxcare.els3.noarch.rpm 1a138401a3d45754c581e41d785cf7da01c804d426cda734fb04e9a18a7bacf0 perl-Devel-Peek-1.28-481.1.el9_2.tuxcare.els3.x86_64.rpm 73e03ecd5543688f13b2d4ad514b275c5f9d33f216b82bf147d36b8ac20eb538 perl-Devel-SelfStubber-1.06-481.1.el9_2.tuxcare.els3.noarch.rpm e87044225e86eb55578c089a672636abd5851e4951c8822576a4c5ebb3bfddc9 perl-DirHandle-1.05-481.1.el9_2.tuxcare.els3.noarch.rpm 153e8ca4263eee197cb1622164e030d3c054ef875e77a0624f70497791ccaf76 perl-Dumpvalue-2.27-481.1.el9_2.tuxcare.els3.noarch.rpm 04f97a877ad2682a71cc9d16b0c75440e1fdfab529fd93d022cf4ef1a609e5f8 perl-DynaLoader-1.47-481.1.el9_2.tuxcare.els3.x86_64.rpm 203962cd98046efb43ebf3f03e7ef1958575d2d41bf3ca58cb7aa4db2c652507 perl-English-1.11-481.1.el9_2.tuxcare.els3.noarch.rpm 816186056fa03103249c5c705aff8ca0547543240a97769d6e6087f718ae9187 perl-Errno-1.30-481.1.el9_2.tuxcare.els3.x86_64.rpm 01ec20143fc4ec2a2d503ca15754ff6b69720c6e5b8249408874a481465057e3 perl-ExtUtils-Constant-0.25-481.1.el9_2.tuxcare.els3.noarch.rpm 64f5a8086db92de919b7b6b57fbda1667d4ad6b9dafed7d08e7f96fdebae3baa perl-ExtUtils-Embed-1.35-481.1.el9_2.tuxcare.els3.noarch.rpm f0fb1ae079251226696e99083c891301d4c14f0c214dd576beafc815d11b421c perl-ExtUtils-Miniperl-1.09-481.1.el9_2.tuxcare.els3.noarch.rpm 8121cadd97a3dcde3ec3bf45716ee03d110f8e882cc5ceb6424deedf8ebadf28 perl-Fcntl-1.13-481.1.el9_2.tuxcare.els3.x86_64.rpm 860c99bba0f3df51345591ba9646a30e7ef1cb54a5f13b09f1fd602acc06c500 perl-File-Basename-2.85-481.1.el9_2.tuxcare.els3.noarch.rpm e409b843e3e4023c62359fd8ac90bfdb54ced4a7493a145fd3f15b535a8e8bdf perl-File-Compare-1.100.600-481.1.el9_2.tuxcare.els3.noarch.rpm 7f052bb821c793cc0a9c79261a6e8609c393901797b6aea1e2c46de7ace95209 perl-File-Copy-2.34-481.1.el9_2.tuxcare.els3.noarch.rpm 49bf3556003851ce19f3c189209e02cc357e3ef9fe18389b4c63978fe270a933 perl-File-DosGlob-1.12-481.1.el9_2.tuxcare.els3.x86_64.rpm 6f4f774b3a886f631a32610e263e82f2102f387891c2a7e3b313b196fec2cc7b perl-File-Find-1.37-481.1.el9_2.tuxcare.els3.noarch.rpm 5a2921caf81121d64f5a73506ffc66b35d58ae3397d9f05726d96f231583eefe perl-File-stat-1.09-481.1.el9_2.tuxcare.els3.noarch.rpm 65f4be69410e4f35e9fab8ad1ed94cddf64717d1e306c1eea0a344fec428cbf9 perl-FileCache-1.10-481.1.el9_2.tuxcare.els3.noarch.rpm 2a4e34e86a2e4ec3b9c677f07b454f94ea4f17686a5295afa5730761408966bb perl-FileHandle-2.03-481.1.el9_2.tuxcare.els3.noarch.rpm 4cb48e2835c5ad9328687d3310f6944bcc5d76cdd57ca576376934b3f8ae3cfe perl-FindBin-1.51-481.1.el9_2.tuxcare.els3.noarch.rpm d47d4901d5aa23c67b0682a2629a1169710bbfcd65622d6ad1bb42e42c8ba24f perl-GDBM_File-1.18-481.1.el9_2.tuxcare.els3.x86_64.rpm 278cb4e02dadf0a438047f148ce98ce8a408df73edc72b75bc1ced846d4c4817 perl-Getopt-Std-1.12-481.1.el9_2.tuxcare.els3.noarch.rpm 9a90ed3eb8840af417e830c8369aa003843aba5096cf42c31d7cea1869833be7 perl-Hash-Util-0.23-481.1.el9_2.tuxcare.els3.x86_64.rpm a8fe049c8f7d07055c1b888a2629b09dd64de655700a149f4bf35eb40c6b66d0 perl-Hash-Util-FieldHash-1.20-481.1.el9_2.tuxcare.els3.x86_64.rpm 5e4bbb11b68cfc737edd797181c49bde6d46a1a62321488eaf4daef01fba902f perl-I18N-Collate-1.02-481.1.el9_2.tuxcare.els3.noarch.rpm f3097f905a4314eb34c5952c1def50aaa6f638ca71158ac7d78267206a4cdd8f perl-I18N-LangTags-0.44-481.1.el9_2.tuxcare.els3.noarch.rpm a5d9a4c5ea0a7d2a2896b7ec51f794e4069e4bbc7f9e7e13fd67f3ebfebd3b8a perl-I18N-Langinfo-0.19-481.1.el9_2.tuxcare.els3.x86_64.rpm 851268145497efd41b93c5afc220c890e71d867b7d79c930314495d7b6ab4f49 perl-IO-1.43-481.1.el9_2.tuxcare.els3.x86_64.rpm 47e748c2661cff3d2fa96db4c62e1969ceaa430cb01825c8717420f9f56191c7 perl-IPC-Open3-1.21-481.1.el9_2.tuxcare.els3.noarch.rpm 2652a33fe23a7c451e25cbbc83433b870960c480731bf279d82b1bf0baaf895a perl-Locale-Maketext-Simple-0.21-481.1.el9_2.tuxcare.els3.noarch.rpm d8c9eda5de7fd5070b4f7020148645d450d991f0eeb68f1649ec6457d994528d perl-Math-Complex-1.59-481.1.el9_2.tuxcare.els3.noarch.rpm 6ebe848450fd7f43c002713be48ebe109b2925b8bd2c9afc30bd217c406d5d6b perl-Memoize-1.03-481.1.el9_2.tuxcare.els3.noarch.rpm d43fdc0113cf29b68b76108fdb1ccbb13efb7cdb653b2ff09850762941c599e6 perl-Module-Loaded-0.08-481.1.el9_2.tuxcare.els3.noarch.rpm eeb8202c9c06068ff371d81d8b1051d832d2f190b0b461350554446f4fbcfb22 perl-NDBM_File-1.15-481.1.el9_2.tuxcare.els3.x86_64.rpm b230cd6b375d2a1ed16d28a959537b693d41a828cee336a13801422ec67ab067 perl-NEXT-0.67-481.1.el9_2.tuxcare.els3.noarch.rpm 02054d3a1a3276fa8b7b4701765fa87f950266260fd02b297f9c20615141b4be perl-Net-1.02-481.1.el9_2.tuxcare.els3.noarch.rpm 422e6c7b883c765f13b6906af1ceb74e2e4990f73e24dc638f9a301724904098 perl-ODBM_File-1.16-481.1.el9_2.tuxcare.els3.x86_64.rpm c49ec995831d6c00f05fe3144dfdd6687c3d366ac4f3f28aac956c94479620dc perl-Opcode-1.48-481.1.el9_2.tuxcare.els3.x86_64.rpm 9d25f17ef56a97510cd7ef25a3953157dd45bd6f35583f2c06743f78ca7a5b7b perl-POSIX-1.94-481.1.el9_2.tuxcare.els3.x86_64.rpm e8adbd341f0fae29bf2fdeba9f760c85410933949233a221f5e37206273d61a3 perl-Pod-Functions-1.13-481.1.el9_2.tuxcare.els3.noarch.rpm 00d5ed917640240a1010202d14b9cd7951236c8aede48145a5b9359da0d376b2 perl-Pod-Html-1.25-481.1.el9_2.tuxcare.els3.noarch.rpm a459bb39b03fe9f5be2c91bbc77dae923635ae56b0fb8b0e1deef27796d07776 perl-Safe-2.41-481.1.el9_2.tuxcare.els3.noarch.rpm a30472f6e26046bc349956adfed8b4eba998aa763f596e11a326e12b1e08f95d perl-Search-Dict-1.07-481.1.el9_2.tuxcare.els3.noarch.rpm 2319d08cbbe36efc2166eee1f5ee7f4572524db0514a215385f2c1b69e950d28 perl-SelectSaver-1.02-481.1.el9_2.tuxcare.els3.noarch.rpm 3a763c274bea8b1dc134a3b6e69a3c729974d5c626290b3cf5298e762c273bf6 perl-SelfLoader-1.26-481.1.el9_2.tuxcare.els3.noarch.rpm 516b3b784a3ffbccba1d120936b75617a107b404221388de7bb31f02b430f100 perl-Symbol-1.08-481.1.el9_2.tuxcare.els3.noarch.rpm f0bb370ac4a7a51e4de8df0c33ab4c06b9d63dcfc8345818bb5cbe4fb4ccbcd8 perl-Sys-Hostname-1.23-481.1.el9_2.tuxcare.els3.x86_64.rpm a4c862f4201dc77bfb4581fadd38c00676f0f2453cc4ea93c1445479a3c99d2b perl-Term-Complete-1.403-481.1.el9_2.tuxcare.els3.noarch.rpm 64a6ac86dded0ed15845b02db9bb0b449fb86f37361cc638938802bcd94af222 perl-Term-ReadLine-1.17-481.1.el9_2.tuxcare.els3.noarch.rpm 6038d5051b5e0d57a9ab4e2dfe82051bf21520f1a8c5657faeaa214d8befc22d perl-Test-1.31-481.1.el9_2.tuxcare.els3.noarch.rpm 510c7c497bebdb9309126582de80f1fa61a80cbe7daf688124b763d124466243 perl-Text-Abbrev-1.02-481.1.el9_2.tuxcare.els3.noarch.rpm 6ebfd0ca8067e110b6e2d341a55b6b5477c835a0a84f35b3600645888b875ccb perl-Thread-3.05-481.1.el9_2.tuxcare.els3.noarch.rpm 826c05e016844a9c87463a293ac4cc43946b6d5db2aa0371232dbba184edf367 perl-Thread-Semaphore-2.13-481.1.el9_2.tuxcare.els3.noarch.rpm d40f9b4668fd022915150ccae50f0b3cf31449bc9db46b93f7ffd39ce9b311d0 perl-Tie-4.6-481.1.el9_2.tuxcare.els3.noarch.rpm e6a945a884007eb990494d633274232f3c65420c870cb4873dd6ce9de21a99c6 perl-Tie-File-1.06-481.1.el9_2.tuxcare.els3.noarch.rpm f2b9250f64c69be93c438f229acdc79568f4449379354a492819e3f6fe524307 perl-Tie-Memoize-1.1-481.1.el9_2.tuxcare.els3.noarch.rpm 12b88389fbd0fa540aabe153d031f6ff65196e0dff91befdc065f091586af047 perl-Time-1.03-481.1.el9_2.tuxcare.els3.noarch.rpm 7f624b5b2af8f5ea0aaefb86f02eb1c73fb9cfb706d8706203f7f222ad08b006 perl-Time-Piece-1.3401-481.1.el9_2.tuxcare.els3.x86_64.rpm 12460b1bfa1f206a92d897b8bc7f8d8a1271a05a06547f985a8afff65fce4379 perl-Unicode-UCD-0.75-481.1.el9_2.tuxcare.els3.noarch.rpm 22ff27542604c5261ab89e662f465b5e85482798271bf022f000b40f720d8f58 perl-User-pwent-1.03-481.1.el9_2.tuxcare.els3.noarch.rpm 990e2ddd5a5a63bf1f262ea4cabb7b824e45736cf9424480a09143b90998dcc4 perl-autouse-1.11-481.1.el9_2.tuxcare.els3.noarch.rpm 560f78ad694d85836352e15e7f966256ab54715f3a4e0a129ee2b26ab00466b6 perl-base-2.27-481.1.el9_2.tuxcare.els3.noarch.rpm 9e3805d944c51a038cbca6c7761e4a7703e982534f9ff91fe9cb17c521b94935 perl-blib-1.07-481.1.el9_2.tuxcare.els3.noarch.rpm 0c10f6a2d99ef1628d8bc5027e657a7f2ec9e227ffdec82eeb4d41244f13f45f perl-debugger-1.56-481.1.el9_2.tuxcare.els3.noarch.rpm 33eb5d8caad4296171a0c042afdf7cc8afad507757b59572b6ba38af327e03e0 perl-deprecate-0.04-481.1.el9_2.tuxcare.els3.noarch.rpm 230ad6cc1c7348a9237a3c2616ee284bc0e100a639dd6066300bd2fe6f049683 perl-devel-5.32.1-481.1.el9_2.tuxcare.els3.i686.rpm e295d7504980835485c6e15c6cfdc11a27d29485a537d5abcbd8d7e60713ea71 perl-devel-5.32.1-481.1.el9_2.tuxcare.els3.x86_64.rpm 4cf5a10d54f7e541c563fa8a2eb124ec7ec03933fff6bf17bbe7cd5cb4af6f18 perl-diagnostics-1.37-481.1.el9_2.tuxcare.els3.noarch.rpm c53aa30ec3b77b9130cbf98e64ae3cad2218ecac86bae0f7f31559fa1932beca perl-doc-5.32.1-481.1.el9_2.tuxcare.els3.noarch.rpm e0675b4a81bdca0949455d5321e67d972a86320f09078daf1e864c63e05bc124 perl-encoding-warnings-0.13-481.1.el9_2.tuxcare.els3.noarch.rpm fc91db286cd3c93f57c42f63fbb61ba614fe84769830a75839999e4a11dbc070 perl-fields-2.27-481.1.el9_2.tuxcare.els3.noarch.rpm 9626609a01e50163fc29aeab76cfd99fb31a1800841a4a63828d13ce56618162 perl-filetest-1.03-481.1.el9_2.tuxcare.els3.noarch.rpm 0b545e661e1ed7498f712e5873ad010e18abc89a738f891826649c48ebc7d5a8 perl-if-0.60.800-481.1.el9_2.tuxcare.els3.noarch.rpm 347fe5b6b24dc6d20d4a608d78a8404de2fba2e92347a46426070f200d97ce02 perl-interpreter-5.32.1-481.1.el9_2.tuxcare.els3.x86_64.rpm 8d6b613f31075c20fa9b73ad205f9b78a623d5db0a7824a430dd27fb861a83af perl-less-0.03-481.1.el9_2.tuxcare.els3.noarch.rpm d1e09bc7fe9ccdd5f326499b82ea0e0bea7c05eb8b31cd0c163e70ed39fd50b2 perl-lib-0.65-481.1.el9_2.tuxcare.els3.x86_64.rpm d4919fa8fd8f0febffa1b1b33761eb70276a622f13b40b8386177e4b022eadb3 perl-libnetcfg-5.32.1-481.1.el9_2.tuxcare.els3.noarch.rpm 130aff4145e90c0d3c4f703d2b72976dba132a244d9c64b8745d3ec7873637dc perl-libs-5.32.1-481.1.el9_2.tuxcare.els3.i686.rpm 03fb5a82b3dd106c8fe8af4ee21e99ef3c2aa39db0978dc94d53e533045ca193 perl-libs-5.32.1-481.1.el9_2.tuxcare.els3.x86_64.rpm eb81e87ba7db8cd6e3cbf7aef2a0d0665be181e7f9b8b7935b8e3ead69ac6670 perl-locale-1.09-481.1.el9_2.tuxcare.els3.noarch.rpm 004ee9cba483e66b4b504848132c855b6d3a3bd85167732ba5aed4b45a60a4e1 perl-macros-5.32.1-481.1.el9_2.tuxcare.els3.noarch.rpm 6565c10aa49b28f77621f6ebcb5d17120f6e4e7210ee7bc4a8c3e5149b306ea4 perl-meta-notation-5.32.1-481.1.el9_2.tuxcare.els3.noarch.rpm e1447370300208f5af458df653ed4dc093ef3dbedbbee6141be31416aab67e18 perl-mro-1.23-481.1.el9_2.tuxcare.els3.x86_64.rpm 221bf54cd2eb1f7b2ebc81987543420c4b8b7b81d1ccac8e664a0dbdb049ef4a perl-open-1.12-481.1.el9_2.tuxcare.els3.noarch.rpm 3a6bd6d712452b3e3ffa955dc0684007a73189da66d40dad75309684228c23db perl-overload-1.31-481.1.el9_2.tuxcare.els3.noarch.rpm aa6d96722fc35c658f86f40c39fffad8f02d65f6ca1e21d119c04f5b8b204726 perl-overloading-0.02-481.1.el9_2.tuxcare.els3.noarch.rpm 7b29eac35a18e749d692deee216bba84efa33ffc24e0816269599ca93e4293f4 perl-ph-5.32.1-481.1.el9_2.tuxcare.els3.x86_64.rpm 10eea8579c6e0ce0582596c0a8d3ba961817e78a988a60f4ac80932b933d4da3 perl-sigtrap-1.09-481.1.el9_2.tuxcare.els3.noarch.rpm a03d921d6445b2641fd654a19d43ec057f427b28a9fbaa4a478258b1a656591a perl-sort-2.04-481.1.el9_2.tuxcare.els3.noarch.rpm 5c52e022732a7def087fdea7eb722cf55a98ed75a10afdfee853f06bf5b5c9ad perl-subs-1.03-481.1.el9_2.tuxcare.els3.noarch.rpm 1b4855a969e96405638c8d0575fbde98a37f92ff2f0ed13971432546742717ad perl-tests-5.32.1-481.1.el9_2.tuxcare.els3.x86_64.rpm 967bcc2322ff49f4941810f1b0be3d717d713696f5398075dcec2979bf4c7ba8 perl-utils-5.32.1-481.1.el9_2.tuxcare.els3.noarch.rpm f78ca4fd344da0bdb2578aab1db6218941f94a1a990a00e3019380b01beb1be0 perl-vars-1.05-481.1.el9_2.tuxcare.els3.noarch.rpm ded75b0d6f816438cde703b28f1e0e634df942d10487485d4b38b3e3a027e945 perl-vmsish-1.04-481.1.el9_2.tuxcare.els3.noarch.rpm d2d3d3d46e9040e8bb6864ca2b11351c8f1bb6d82b6a477392e1a68df7a2aa4c CLSA-2026:1784533387 TuxCare License Agreement 0 - CVE-2026-39821: reject all-ASCII xn-- labels in the vendored golang.org/x/net/idna to prevent Punycode label spoofing Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-39821: reject all-ASCII xn-- labels in the vendored golang.org/x/net/idna to prevent Punycode label spoofing

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els19.x86_64.rpm 6b444422a25054a088a4befde5a5d26a4897c5a9320c6b01346f4b399239bf7b golang-1.22.9-1.el9_2.tuxcare.els19.x86_64.rpm ac5cee2232d9d205b4a9414212bcc520fb19e18cdb99248feae0ca9006fef194 golang-bin-1.22.9-1.el9_2.tuxcare.els19.x86_64.rpm 4caf5421f726cbac31e416f5de180fbd02add576c02a8ce92dc1f47b67e68fd2 golang-docs-1.22.9-1.el9_2.tuxcare.els19.noarch.rpm 1b6a7843d0342c6061805e0ae80e93f2ae82a7cd3793806203e7a83d868f81aa golang-misc-1.22.9-1.el9_2.tuxcare.els19.noarch.rpm 685992541a97fe9fa6a3e2cfd1eb0fb25c5f2053f90f2c4fb326c3be7bf32a6b golang-src-1.22.9-1.el9_2.tuxcare.els19.noarch.rpm 5f67bd5cb82ff41a6a796e6f833039f628c8c6cec74985d66b8aa668edc322a2 golang-tests-1.22.9-1.el9_2.tuxcare.els19.noarch.rpm 9016c27994cfbbad4db6c1cf7bb4e8134ee435a8c05e19ea761f3a081eefdfaf CLSA-2026:1782217586 TuxCare License Agreement 0 - Rebase to webkitgtk 2.52.4 to address WebKitGTK security advisory WSA-2026-0003 (16 CVEs). - Refresh libsoup2.patch for 2.52.4 library version triplet bumps (WEBKIT 21/8/21, JAVASCRIPTCORE 10/12/10 on API 4.1; WEBKIT 20/8/16, JAVASCRIPTCORE 8/12/7 on API 6.0). - Drop aarch64-build.patch — the upstream cherry-pick (Apple fix for WebKit bug 306638) is included in 2.52.4. - Add fix-system-malloc-llint-extractor.patch (upstream cherry-pick 314364@main, bugs.webkit.org/show_bug.cgi?id=316083) to gate bmalloc_CopyHeaders in LLIntSettingsExtractor/LLIntOffsetsExtractor dependencies on (NOT USE_SYSTEM_MALLOC). Without it, CMake configure fails on aarch64 because USE_64KB_PAGE_BLOCK=ON forces USE_SYSTEM_MALLOC=ON, which prevents the bmalloc subdirectory from being added and the bmalloc_CopyHeaders target from being created. - CVEs resolved by this rebase (WSA-2026-0003): CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902, CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958, CVE-2026-43658, CVE-2026-43660 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to webkitgtk 2.52.4 to address WebKitGTK security advisory WSA-2026-0003 (16 CVEs). - Refresh libsoup2.patch for 2.52.4 library version triplet bumps (WEBKIT 21/8/21, JAVASCRIPTCORE 10/12/10 on API 4.1; WEBKIT 20/8/16, JAVASCRIPTCORE 8/12/7 on API 6.0). - Drop aarch64-build.patch — the upstream cherry-pick (Apple fix for WebKit bug 306638) is included in 2.52.4. - Add fix-system-malloc-llint-extractor.patch (upstream cherry-pick 314364@main, bugs.webkit.org/show_bug.cgi?id=316083) to gate bmalloc_CopyHeaders in LLIntSettingsExtractor/LLIntOffsetsExtractor dependencies on (NOT USE_SYSTEM_MALLOC). Without it, CMake configure fails on aarch64 because USE_64KB_PAGE_BLOCK=ON forces USE_SYSTEM_MALLOC=ON, which prevents the bmalloc subdirectory from being added and the bmalloc_CopyHeaders target from being created. - CVEs resolved by this rebase (WSA-2026-0003): CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902, CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958, CVE-2026-43658, CVE-2026-43660

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.52.4-1.el9.tuxcare.els9.x86_64.rpm 4670b59e20d4fd5e1495f7311f258c29118d8b18c85a2309d12d07a556e93aeb webkit2gtk3-devel-2.52.4-1.el9.tuxcare.els9.x86_64.rpm 268d9f1761477b70e76aeefa4b7ce6308c59720555ccd108dabb1138a104c118 webkit2gtk3-jsc-2.52.4-1.el9.tuxcare.els9.x86_64.rpm 8cf6805859ca2be29f03417e9f109f8045eda5bce346f5329421eb72624f2637 webkit2gtk3-jsc-devel-2.52.4-1.el9.tuxcare.els9.x86_64.rpm 89ebc3eb7f75a90cb950f47b903b825183beec163e6a43796b24e6bd58294a7e CLSA-2026:1784541906 TuxCare License Agreement 0 - CVE-2025-59798: stack buffer overflow in pdfwrite gdevpdtw.c - CVE-2025-59799: missing size validation in pdfwrite gdevpdfm.c Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-59798: stack buffer overflow in pdfwrite gdevpdtw.c - CVE-2025-59799: missing size validation in pdfwrite gdevpdfm.c

0 tuxcare-almalinux9.2-esu ghostscript-9.54.0-11.el9_2.tuxcare.els12.i686.rpm dc80a3595ccee4240453fe2d38814338476b22a8a3058bd673ed3bedbf4a5ce2 ghostscript-9.54.0-11.el9_2.tuxcare.els12.x86_64.rpm 6c9825759368f8931038b3623a0cfe8f6999c20c6aeafbbd91d284a57b48fada ghostscript-doc-9.54.0-11.el9_2.tuxcare.els12.noarch.rpm b0e5482e87349f68276960deee06433a9c0bfe38e7eb9244180acb8cee669084 ghostscript-gtk-9.54.0-11.el9_2.tuxcare.els12.x86_64.rpm 7576471ce0c429f817e2818640fbdfee2f38eafe38f296380aad9a0c3de43c64 ghostscript-tools-dvipdf-9.54.0-11.el9_2.tuxcare.els12.x86_64.rpm 9a712c3d4b1f8dc288e066ba7e84b518879b40fc57b3158a9af7467a989f7ecb ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els12.i686.rpm 1d23714e954599e919e8fc9b48dc96d20544e0d7d93b552667eb6d1b6146385d ghostscript-tools-fonts-9.54.0-11.el9_2.tuxcare.els12.x86_64.rpm 18a9b8d6a3cb794679352ed5b0b18f123ab6d7924f58663b2416a6d32f1ee618 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els12.i686.rpm a2e78c79dc94f76212691eb97e993bc75623bddc8f906bc06dd67fe9b198f344 ghostscript-tools-printing-9.54.0-11.el9_2.tuxcare.els12.x86_64.rpm ba84d0f9df594750ada8d086d3577e18a9336283a77dd742779650b6b8ce77d6 ghostscript-x11-9.54.0-11.el9_2.tuxcare.els12.x86_64.rpm 4dc7d057db6c2c4529c1f01e7664c28d80f931704c69e6ab3a5220deaf6092d3 libgs-9.54.0-11.el9_2.tuxcare.els12.i686.rpm db2c9b7a28367ccab05110aac50c29d1b3fc32209828bd68bf8b9bd214d69aa7 libgs-9.54.0-11.el9_2.tuxcare.els12.x86_64.rpm 78c4f4b77fc038b3568f07287d0b8b68a96dbfdc3749e594e87e37a0f32176ef libgs-devel-9.54.0-11.el9_2.tuxcare.els12.i686.rpm a6feca3c731603f722a18acabcf6b5f07ebd4f652d7432f1758044510c2de6d6 libgs-devel-9.54.0-11.el9_2.tuxcare.els12.x86_64.rpm 52606dfd31771bcbf867175a2308797d905227519548d1f5baa30f4c7b512d0d CLSA-2026:1784542737 TuxCare License Agreement 0 - CVE-2024-0914: fix timing side-channel in RSA PKCS#1 v1.5 decryption (Marvin) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0914: fix timing side-channel in RSA PKCS#1 v1.5 decryption (Marvin)

0 tuxcare-almalinux9.2-esu opencryptoki-3.19.0-2.el9.tuxcare.els2.x86_64.rpm a21b60464c479501a12a293ebc27ccf6ad132fd87934e2341886795ba1505b85 opencryptoki-devel-3.19.0-2.el9.tuxcare.els2.i686.rpm cf8506b5ad5ecdb39ed4ae4fbbd563d0881e5a350fcb8bcee898eed5523ddd16 opencryptoki-devel-3.19.0-2.el9.tuxcare.els2.x86_64.rpm 8fd995c1ec02a790432fede35cc675eed17bffb105f53b460bb0967b6b91274b opencryptoki-icsftok-3.19.0-2.el9.tuxcare.els2.x86_64.rpm 759630010efbc6623bf5050a7fc9da187c5cdfd949e21dd7496e0ff7f5565165 opencryptoki-libs-3.19.0-2.el9.tuxcare.els2.i686.rpm 88b9513b5382510c3d9769d5eee7f063649f103f66c251aa9c8c76c5350a3b70 opencryptoki-libs-3.19.0-2.el9.tuxcare.els2.x86_64.rpm dd85d21ee834a74317e69c66ab2248583cdaae747763b0fd0cd25fc56a3869d7 opencryptoki-swtok-3.19.0-2.el9.tuxcare.els2.x86_64.rpm 349c50a7b8a5c50a2637f2a63376cccd165fbaa60ef07928a6b6ebce761672a3 CLSA-2026:1784553427 TuxCare License Agreement 0 - CVE-2026-8177: fix out-of-bounds read on truncated multi-byte UTF-8 node names (replace hand-rolled domParseChar with libxml2 xmlValidateName) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8177: fix out-of-bounds read on truncated multi-byte UTF-8 node names (replace hand-rolled domParseChar with libxml2 xmlValidateName)

0 tuxcare-almalinux9.2-esu perl-XML-LibXML-2.0206-5.el9.tuxcare.els1.x86_64.rpm f0f3382f2d7ded802f6ec405622338229f06834186350f8538782714c50bce60 CLSA-2026:1784622156 TuxCare License Agreement 0 - CVE-2021-4048: fix out of bounds read in larrv functions - Pull runtime 64-bit-index subpackages into -devel via Requires so devel-shipped liblapack64/libblas64/libcblas64 .so symlinks resolve on install Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-4048: fix out of bounds read in larrv functions - Pull runtime 64-bit-index subpackages into -devel via Requires so devel-shipped liblapack64/libblas64/libcblas64 .so symlinks resolve on install

0 tuxcare-almalinux9.2-esu blas-3.9.0-8.el9_2.tuxcare.els1.i686.rpm 080bd881e85e8b4a9901d0e958452d24896030c3533136d07ae84724d14efc3b blas-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm 7220eb08b2b89ebb0b87da7bfad0c4d463fc8f4068970c05663cbb7a6ae69a64 blas-devel-3.9.0-8.el9_2.tuxcare.els1.i686.rpm ed2569b95131e758bf49ee49bc886002420913497637418312481d2230b63d1f blas-devel-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm ae661d03913364199cef3cb9c06cb7dd4d8862e76cf55c515183e1b18a7de909 blas-static-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm 13654bcf223309658e87e6e36c8a0b203835a52b6826ba9de525650bfc17d64d blas64-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm 02efeaeb1cf44d664556926e9aec9afb0c9b1e5078fe3de767ff26e0b25dba5a blas64_-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm 54afcd1838aca34803b76f8068097b553fe475db1d9552fd76c89cc821e2409e lapack-3.9.0-8.el9_2.tuxcare.els1.i686.rpm d6fa469f9cd6a761ee4660257abb4e6f703d24ce532241f09870ca1c902ffb49 lapack-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm 7779ea140fd7e5944fd29550fa4d9b275401f0f2e864d34bb5e9dbfbbe9a8d88 lapack-devel-3.9.0-8.el9_2.tuxcare.els1.i686.rpm bd78c98678dc2552b381e12735dda6fc0ce8cf00172feed2d37431abdbcc9067 lapack-devel-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm ea89b7c0a9177b4eea94a985790ffcefb2b8c6e10255ca31ade1790ffc9bf8ba lapack-static-3.9.0-8.el9_2.tuxcare.els1.i686.rpm 2f42b5a65c8febfb2acfedc66fa5d5430f4e25d497ed61f4a202b40fbe051cc4 lapack-static-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm fd0a9e108527c4708d094138a2a2906a415a17ce0f1d2d021e61b739892d8e51 lapack64-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm a5cdfcde764d498245428008ea9752c3b719d1a6fe1b200030a7743c35895968 lapack64_-3.9.0-8.el9_2.tuxcare.els1.x86_64.rpm e59879cf127a68d7224c9396d49f638d6c0b66e8ae9292ef63d8a558f00d9ad1 CLSA-2026:1784623076 TuxCare License Agreement 0 - CVE-2025-14327: fix URI host display spoofing by consolidating DownloadUtils.getURIHost into BrowserUtils.formatURIForDisplay (Mozilla bug 1970743) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14327: fix URI host display spoofing by consolidating DownloadUtils.getURIHost into BrowserUtils.formatURIForDisplay (Mozilla bug 1970743)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els24.x86_64.rpm 4055804bd37bab5466b77a826d624c4448e62b6e3fa38bdcac47ef0519f19bae CLSA-2026:1784632339 TuxCare License Agreement 0 - CVE-2026-41989: heap OOB write in _gcry_ecc_mont_decodepoint Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41989: heap OOB write in _gcry_ecc_mont_decodepoint

0 tuxcare-almalinux9.2-esu libgcrypt-1.10.0-12.el9_2.tuxcare.els2.i686.rpm d2afe72d6fbd6ce2204ecbd428fd94dde03b2cf334cc99d2794d4ff87ae69b0d libgcrypt-1.10.0-12.el9_2.tuxcare.els2.x86_64.rpm 23b6f01a206bb9b3ef68e4793fa2ee9baf1c25dc84e7c8b49fd163bba037d245 libgcrypt-devel-1.10.0-12.el9_2.tuxcare.els2.i686.rpm bd8cddbb1c7bd3a50bda9be10aafb9b1e118da3b3ce86c36cb136337d50e20d8 libgcrypt-devel-1.10.0-12.el9_2.tuxcare.els2.x86_64.rpm bb58af02bf26d82be070ba7b602b3eff956507415cc4b26e87f5dd41ae8ee1eb CLSA-2026:1784634529 TuxCare License Agreement 0 - CVE-2026-60001: sshd did not enforce the minimum per-attempt authentication delay in the GSSAPI and keyboard-interactive paths, enabling timing-based user enumeration. Backport upstream commit d43ba60c. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-60001: sshd did not enforce the minimum per-attempt authentication delay in the GSSAPI and keyboard-interactive paths, enabling timing-based user enumeration. Backport upstream commit d43ba60c.

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els21.x86_64.rpm be6381b93b60b443eb9b3dfd9f7ad9caa551298890519631f03ec2e32d825a65 openssh-askpass-8.7p1-30.el9_2.tuxcare.els21.x86_64.rpm 78a970c5de745991984e905c7a4cbc83cb1dd345812d9d15d3fa07a9996216c2 openssh-clients-8.7p1-30.el9_2.tuxcare.els21.x86_64.rpm f85480382a031a26ac2c6848c5859084ca6f029e67ed82ed9a6c2654373e3abb openssh-keycat-8.7p1-30.el9_2.tuxcare.els21.x86_64.rpm 634ac96a6b42e035662f56cd50dc20eab287b6f430bb9fd3c95bee9514bb2995 openssh-server-8.7p1-30.el9_2.tuxcare.els21.x86_64.rpm 4e33199a9435c6064298803c93f032927e0141832aced56f7adc6fcc8deaaede openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els21.x86_64.rpm 9b38187a478719bb4a14ab44d3fe0b26a7f8538443c635a05b32417a1f7eb53f pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els21.x86_64.rpm 90e88c7155f1fb725f7baf63d1e73d315372b8c1363c4106606f72e42bd6c8d9 CLSA-2026:1784639752 TuxCare License Agreement 0 - CVE-2026-11774: Reject invalid SASL packet length values in sasl_io_start_packet Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11774: Reject invalid SASL packet length values in sasl_io_start_packet

0 tuxcare-almalinux9.2-esu 389-ds-base-2.2.4-5.el9_2.tuxcare.els6.x86_64.rpm dd0409f7695e3bc0f8ff25b582e4ecaabf929079d98b07c65ce667ad56b400e0 389-ds-base-devel-2.2.4-5.el9_2.tuxcare.els6.x86_64.rpm 58b0ad83c2154e1f4a956cda31374b92631622b8bf03b7c624eb91f7be691189 389-ds-base-libs-2.2.4-5.el9_2.tuxcare.els6.x86_64.rpm 57b6c27d8f59cf628e5669790059dc2fc1a1410a01798c166d3a5ed8c87ab3b7 389-ds-base-snmp-2.2.4-5.el9_2.tuxcare.els6.x86_64.rpm 3c362583624dc62b3e8f6ce2ee5928f49b18520f1be59cd36ac2921c2aaffce7 python3-lib389-2.2.4-5.el9_2.tuxcare.els6.noarch.rpm 9164dbd521ed66f29fcbc697b1d945eb9e9733f1dce944486f4036b7bd2e3aa3 CLSA-2026:1784645899 TuxCare License Agreement 0 - CVE-2026-12725: Fix buffer overflow in log_query() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12725: Fix buffer overflow in log_query()

0 tuxcare-almalinux9.2-esu dnsmasq-2.85-6.el9_2.tuxcare.els4.x86_64.rpm 8bc307a037eed377d6d5124937df27315a2c2d2ba9f2a42f054db51dd06baa1f dnsmasq-utils-2.85-6.el9_2.tuxcare.els4.x86_64.rpm d468ecced9a712f227a4f66a7479664c059eba08ce93360f5c82ba7d8b5461d9 CLSA-2026:1784647630 TuxCare License Agreement 0 - CVE-2026-42533: script engine capture-state save/restore + heap buffer overrun protection Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42533: script engine capture-state save/restore + heap buffer overrun protection

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.x86_64.rpm 9a0670a1e28bfe2dcb7f0b4ead70c08b5431822fafc8726eaac72de1bc8cc9e5 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.noarch.rpm 9d67f346f075f89e2192cfb79227f8a55d7b54848ac77568c268fc0161ab75b6 nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.x86_64.rpm 3dffc08b3e63470fe520ea97d47ab783271f981a40a7448283d360f7f393c326 nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.noarch.rpm 9aec58d8adb44507c25c24e941b320ddfd89f74b641671bf01bebfbadb3b5c7f nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.x86_64.rpm 9bb1f68b22c84c4e20150f57d15383e035d4f721e5bf7b3d2b88fb76cd37da7d nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.x86_64.rpm 1d7802f406c4a2c536ac721cc4b2c3f606d2a40d73d91c1c9d0b3fec554e86ea nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.x86_64.rpm 31dc11a1ff0a75446eb7bc089e44bcbfc529a8b73955766180255b24d5551edd nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.x86_64.rpm 8a23cc8a5cc60039311f6283ef004cafaa247151c88ef029a673a721aff3087a nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.x86_64.rpm e4800ace625e44064fb10d03f7a9b8bdd2cc17af75281d067c4dd04923a01ea3 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els11.x86_64.rpm a759cf93af4a1768b442c1d17a21f1121e1d391a5ed6915ea97262fb02db507e CLSA-2026:1784707996 TuxCare License Agreement 0 - CVE-2026-33811: require golang >= 1.22.9-1.el9_2.tuxcare.els12 (fix in the Go net package) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33811: require golang >= 1.22.9-1.el9_2.tuxcare.els12 (fix in the Go net package)

0 tuxcare-almalinux9.2-esu oci-seccomp-bpf-hook-1.2.8-1.el9_2.tuxcare.els1.x86_64.rpm 83849c8b9fc779c490927fe548bf9e74a3a939ed1e2c887cdf226e1f0e196183 CLSA-2026:1784710213 TuxCare License Agreement 0 - CVE-2026-2791: fix cache service instantiation outside the parent process (Mozilla bug 2015220) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2791: fix cache service instantiation outside the parent process (Mozilla bug 2015220)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els25.x86_64.rpm 00620efec31885a560581fa55902419ce469590c73b31416aed813e8469422ab CLSA-2026:1784711548 TuxCare License Agreement 0 - CVE-2026-14544: complete the incomplete CVE-2026-8631 integer overflow fix in the hpcups processing path (PCLmGenerator::Encapsulate), so the full whiteStripLen * srcNumComponents product is overflow-checked (backport of RHEL/AlmaLinux hplip-3.21.2-6.el9_8.5, RHSA-2026:40831) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-14544: complete the incomplete CVE-2026-8631 integer overflow fix in the hpcups processing path (PCLmGenerator::Encapsulate), so the full whiteStripLen * srcNumComponents product is overflow-checked (backport of RHEL/AlmaLinux hplip-3.21.2-6.el9_8.5, RHSA-2026:40831)

0 tuxcare-almalinux9.2-esu hplip-3.21.2-6.el9.alma.tuxcare.els2.x86_64.rpm 9210906b63d18193e08c91e08b282cc34404d4b95b5fa24ab5dbb6a1a854dfd6 hplip-common-3.21.2-6.el9.alma.tuxcare.els2.i686.rpm 01af3dfe0bfbe290243fb82467247f12347ac42a22e7bc8b043c138d205fc498 hplip-common-3.21.2-6.el9.alma.tuxcare.els2.x86_64.rpm df60029bcae798288567aafa130a3764cf1fc3f10057a923eb3e3be690d67f74 hplip-libs-3.21.2-6.el9.alma.tuxcare.els2.i686.rpm 5c211cd0dd28daa3ea3cd611769e68537cb8b1a8b6750488c12582e910861df4 hplip-libs-3.21.2-6.el9.alma.tuxcare.els2.x86_64.rpm 4cf291f47f0a25e650bd3aa4e1d90d66dca8e6642a3e54f731b664dcdc035964 libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els2.i686.rpm bd581cdc3f081b751a4a0d209cb4c7ae1e2af9d2fffc26808a82e491e54c9e34 libsane-hpaio-3.21.2-6.el9.alma.tuxcare.els2.x86_64.rpm 180d7dbd7618030b15f89a060ee5d82305c1657b8d866c824801c232ded8a4c2 CLSA-2026:1784712935 TuxCare License Agreement 0 - CVE-2024-3854: fix Ion IsDiamondPattern successor-count guard allowing switch terminators (Mozilla bug 1884552) - CVE-2024-5702: fix use-after-free in nsTransportEventSinkProxy via raw-pointer to smart-pointer refactor (Mozilla bug 1193389) - CVE-2026-0880: fix integer overflow in Cairo DrawTarget CopyToImageSurface/CreateSubImageForData (Mozilla bug 2005014) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3854: fix Ion IsDiamondPattern successor-count guard allowing switch terminators (Mozilla bug 1884552) - CVE-2024-5702: fix use-after-free in nsTransportEventSinkProxy via raw-pointer to smart-pointer refactor (Mozilla bug 1193389) - CVE-2026-0880: fix integer overflow in Cairo DrawTarget CopyToImageSurface/CreateSubImageForData (Mozilla bug 2005014)

0 tuxcare-almalinux9.2-esu thunderbird-115.4.1-1.el9_2.alma.tuxcare.els27.x86_64.rpm a0eca396b664c75b03e9d31bbae4630e4e8b88bf36e1db572d07754ebfe91041 CLSA-2026:1784720743 TuxCare License Agreement 0 - CVE-2026-56288: NULL pointer dereference via crafted unified-diff hunk (another_hunk) - CVE-2026-56289: Denial of service via infinite loop on null-range hunk offsets (locate_hunk) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56288: NULL pointer dereference via crafted unified-diff hunk (another_hunk) - CVE-2026-56289: Denial of service via infinite loop on null-range hunk offsets (locate_hunk)

0 tuxcare-almalinux9.2-esu patch-2.7.6-16.el9_2.tuxcare.els1.x86_64.rpm fa6bde399a1c036dae6473c0096eb0be401a3f3d600861166ef9d522c4b4ae1f CLSA-2026:1784796076 TuxCare License Agreement 0 - CVE-2026-11610: bounds-check sasl_io_recv against heap overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11610: bounds-check sasl_io_recv against heap overflow

0 tuxcare-almalinux9.2-esu 389-ds-base-2.2.4-5.el9_2.tuxcare.els7.x86_64.rpm 174013bd788c3ef690eca7bd155b1adee539f6dfdcecb475e53944cc7e0e04dd 389-ds-base-devel-2.2.4-5.el9_2.tuxcare.els7.x86_64.rpm 744f91d050e925543a6d8ccdda747949e62879a8df46d1a3919e22230e4dfc49 389-ds-base-libs-2.2.4-5.el9_2.tuxcare.els7.x86_64.rpm f04f3a6a62eb3fc67707c6235575d7df33d517d42ffef843d18ea1d16fd36e94 389-ds-base-snmp-2.2.4-5.el9_2.tuxcare.els7.x86_64.rpm 8eaf4834d4d0d26e2741c8698247b688ad361a47ccf63e2b41f9357e5aaaa87e python3-lib389-2.2.4-5.el9_2.tuxcare.els7.noarch.rpm ac95a7a483fbfdd9144abdfa394f9354a758bbaef9014632026c7823d02a2908 CLSA-2026:1784797098 TuxCare License Agreement 0 - Fix CVE-2026-56003: property buffer overflow in computeProps / ComputeScaledProperties in bitscale.c (upstream commit dff957a5158da038a282a59a31fe736702732939) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2026-56003: property buffer overflow in computeProps / ComputeScaledProperties in bitscale.c (upstream commit dff957a5158da038a282a59a31fe736702732939)

0 tuxcare-almalinux9.2-esu libXfont2-2.0.3-12.el9.tuxcare.els3.i686.rpm 487c1c7c33bc41f061afed252a028afed062ee17c1778c8d92307a1258c16648 libXfont2-2.0.3-12.el9.tuxcare.els3.x86_64.rpm f4fca84597a3b69ef3949038742f991763e69481086821dbb24d12315913c096 libXfont2-devel-2.0.3-12.el9.tuxcare.els3.i686.rpm f4a674fc59c6aa2d8564938f9bcd17d5393a440d8e6086e926563944d8076023 libXfont2-devel-2.0.3-12.el9.tuxcare.els3.x86_64.rpm a6da4fd5681663bc4bdbaca03baa36f27b4dfb88e4793445784beed5fb9b64f8 CLSA-2026:1784802906 TuxCare License Agreement 0 - CVE-2026-40468: fix integer overflows in do_sub() in builtin.c and parse_escape() in node.c (sofar widened to size_t, escape accumulator widened to int64_t to avoid overflow on 32-bit builds) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40468: fix integer overflows in do_sub() in builtin.c and parse_escape() in node.c (sofar widened to size_t, escape accumulator widened to int64_t to avoid overflow on 32-bit builds)

0 tuxcare-almalinux9.2-esu gawk-5.1.0-6.el9_2.tuxcare.els3.x86_64.rpm 9d291e97c3ededc1131cd59cbd6c664ced99930ea92e506de3105de72cab3a58 gawk-all-langpacks-5.1.0-6.el9_2.tuxcare.els3.x86_64.rpm 14df96cd1e1a03c9c8aca9a0622e7dc5b5dda2809e3c036475b30f92151c6d99 gawk-devel-5.1.0-6.el9_2.tuxcare.els3.x86_64.rpm 068f107368d876db6547f9f9dcc09da3f499e272e8f6b0ccbbf690ff4b52704a gawk-doc-5.1.0-6.el9_2.tuxcare.els3.noarch.rpm fc22a4fa89fa3940df1a5436b917add9eea960b5775457a273a55f68918422a2 CLSA-2026:1784804056 TuxCare License Agreement 0 - CVE-2026-14476: reject path traversal in the AD GPO gPCFileSysPath attribute, preventing writes outside the GPO cache directory - CVE-2026-14474: warn when ldap_sudo_search_base is unset and the sudo provider falls back to searching the entire directory tree for sudoRole objects Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-14476: reject path traversal in the AD GPO gPCFileSysPath attribute, preventing writes outside the GPO cache directory - CVE-2026-14474: warn when ldap_sudo_search_base is unset and the sudo provider falls back to searching the entire directory tree for sudoRole objects

0 tuxcare-almalinux9.2-esu libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm 622c6122c7b5ebec1880d73c50ff8cb91af6e9acb05d46ab6a2610991518a46e libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm f328da4ba13f1dd1809d6f18e9ff3e694e8330ab6bf747f4cd19abbb4bdc2552 libipa_hbac-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 9e9ee3defb19d7e15a3132f21625434060ca998a585a7917db565d7a802670ac libsss_autofs-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 8515fbcb425889d75f8737366c1027d50ad62406fcbb7f7cb0720e6a5de2d151 libsss_certmap-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm b883ced247481f47a3fb4e1e8a3a6ee6316a25723563386aa09e600ebf018825 libsss_certmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 704e95bf35b0ad2c13b58fcbd4318fe68ad5e40c9393ee8034cd58301d2d8cbb libsss_certmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm a92733489162a9ba0c245ca9b74ca645c65c563134732528717c67af77481116 libsss_certmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 1e775d3221c071078ebdb3519a78ce58c4b9696a41fc241b114e647c1071ab6b libsss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm 613a243cf8480456f0bff8fca33bc0d405bb7532f88d92ae20d6bab298d1b33a libsss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 9a428d66e4d7b09c159d2b6151e57dc669e3bd20626633710dfbe768527ed931 libsss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm a4482c9bf8b3492cd7fa28c59233b93247840432f6c142e12f67413bc0905e36 libsss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 5adb8bd4362641ec0f6067dd3997316ca4867601852b5494fbe2432f987225a7 libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm 57b264bc0c12a4b90fdc0beac43861effa80be11a0252051084017a3f82b0b07 libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 6629bde265715774dca13d8746780b672ee46dbf49a775bf1f438f4cb6371821 libsss_nss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm fe6cfe6a63ebfee607bd9dd7a2e6ab2eb9a69e289dff353d86d159d0b3665603 libsss_nss_idmap-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 10c31f38f158b2019b714f2bf28d6c6d243d52b707ff08a53b66aa90e8e3b3d1 libsss_simpleifp-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm 487b459938c01b6fd36ee9819d99b0a38bd0a6990e9a76f5b735fba4d3eb970a libsss_simpleifp-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm d8e2af5f592df03f7e9b2fb786f66965b7942230ac6cfbf1aee66b3a9daf0295 libsss_simpleifp-devel-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 7be66467920cf7910e2825a9933dcc8bcab83ee697cb97af7ce41150a3a2f4ea libsss_sudo-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 8cee197f114f2f5d428806b25f591f0b41cb5c24d401faebaf8695f61aa418f5 python3-libipa_hbac-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 2b55fec3097180ea3071ad590d0439508a352d57e599bbcd39c2c59a1056e270 python3-libsss_nss_idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 6866c62c54b682507b184a25063bde9498d375f2fc00b0c81c6b24b35226f771 python3-sss-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 576a986eaf512cfaaf03b7e9fc26f03fca883d746148b350ac5edd3c0f434257 python3-sss-murmur-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 9927caa0927636f2719b55141fb87029da6c4508a10bcb3eb99c46921bc7b88c python3-sssdconfig-2.8.2-3.el9_2.alma.tuxcare.els3.noarch.rpm 43dcde863df72fc57af0cbb3a355761d7e31590939fd507d21ce7cf4f7ffd389 sssd-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 7a57106e118386158c1fcb7495d3d3bb507b631f06e02169c307d5c4ee768d1b sssd-ad-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 5de602d666dd2fdeada6af18ba5e931df60542b73c8b8d16c22afb37991e88d3 sssd-client-2.8.2-3.el9_2.alma.tuxcare.els3.i686.rpm c5368e203372745ce53bcf9414cbb1c84b4a90a24d7594f624ef0df8ad3ecf63 sssd-client-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 9f4c959f8492dd08e2f38c9b0aa6c525b7fa6d6960b57cc4c579f2ff2cf2e176 sssd-common-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 0c3058de3426b58d55f820f83f1fbb99cc57d73aba6c8674b5f922b00af1fe4f sssd-common-pac-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm b26c1cbd2d19817cf1f9d9f9a378d0a48114d779fbecedbcbec130b2ca158bf8 sssd-dbus-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 2a8ea9e07f755a7ac45d2a1f09f99eafb75bf30f48dbd42a88b66968a1c22fdf sssd-idp-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 186750307000d475eafe083dff557f78304f11effa9b7599a1ff45af962f3be6 sssd-ipa-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 4536dfbcc96deac4b67a93d2e4d09e57be4c4c2e94610c59a5edffcba9ec0c69 sssd-kcm-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 0ef473942f4e62fc3f8d42642e8d06e08b1fa5ebcddc93fec72702bd3920376e sssd-krb5-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm eb525cf05eae3ccb4c41199d5700ca09dbe440a2e4c3ac3f74e81585ec177e24 sssd-krb5-common-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm cb97da61cfc7f90e7cb124eb221b1eece6cd4f7682f042060a8f3e93d99bca92 sssd-ldap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm bcbb2561ff395d95f9f23f3c120096cad13aac40340da5e647e51bcfb1a8dfe6 sssd-nfs-idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm eb235526a62bbd406dd98d0b2c232ac64a17100c48cf3db6640ae225554b0e95 sssd-polkit-rules-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm fea7abb700cc58f60ff38fbb364e20fad1e07916627c4f343290bb611c5bc932 sssd-proxy-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm 629c266732b2e00c1aaab102dc849a86a2a16a45a6a062ce00b50406e4966d30 sssd-tools-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm e0aca3d06aa199021436c8e44a2179c6ae7d3909f5b9293afe7d3d014a4c284c sssd-winbind-idmap-2.8.2-3.el9_2.alma.tuxcare.els3.x86_64.rpm df20dd009db22a165fae3501cd4198809cd9f44d790bd556c78a65799a47b37f CLSA-2026:1784806096 TuxCare License Agreement 0 - CVE-2026-48914: virtio-blk: out-of-bounds heap write via malformed scsi request None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-48914: virtio-blk: out-of-bounds heap write via malformed scsi request

0 tuxcare-almalinux9.2-esu qemu-guest-agent-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 8977cd2c37a8460074908957ecfc1e3cc4fa69b27796411d807aea38bb8b4d4d qemu-img-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm dc5df27a3b5f2e9a1287760d6c3f1ee3bf1a5ba271608b542175354aa015f2e0 qemu-kvm-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 644ae356ed4be4cd77652ebb658947efb91a4efc5b77516d6a3aa3e07d6cadad qemu-kvm-audio-pa-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 6cfe6e35060ffd05d03c8decca0804d900a26498dd72040cb65554a1f84d5de5 qemu-kvm-block-curl-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 29e6074cca41fb1cecd7f784dca1ab8cbe880ba7140b3faffb30e5ba2e08c0bf qemu-kvm-block-rbd-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm d3cc92b5f19829d566793555a2b678af32051fa710fb26580f388489c74803a5 qemu-kvm-common-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 8ece24ee61868c8b115a96434df8f70bb6748892a3dfbd404bffcc4a0e1f89b1 qemu-kvm-core-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 0026c38f0099d3beef65dc9836ae167c40d104de920ba5cb8f767d83155d486c qemu-kvm-device-display-virtio-gpu-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 10f9d38ca9da6260a14e5266e7852be2c37a7c9a296a03af119a3bb4ebdd440b qemu-kvm-device-display-virtio-gpu-pci-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 1eb9315b32193f4aa71f63dde84f0b409a41e92538f97ce0fcb8cc219870e069 qemu-kvm-device-display-virtio-vga-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 554274804a21f7719edcdeb52ddd207404125b553928ea2bdd8d36904178d812 qemu-kvm-device-usb-host-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 37f675eaf7429a000784d1db77f186473d7bbdf53909288b0d9ba337d88d8765 qemu-kvm-device-usb-redirect-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm d750e7eedae56af33e934930b29599b66e21d0ac468874e4e3b60bd30577a728 qemu-kvm-docs-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm a2c32deff9eadbcee15c95e2f2f3b3ae56c1b58cfa2eec9a5c3a8511055cad64 qemu-kvm-tests-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 5185e239bc4f7a965da053e37024a7cbb2cbb2c2fa453e9047bff847825f0681 qemu-kvm-tools-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 88730308d740adb103381790b792cb6ee2a3444edba6945d97244a524e0887b7 qemu-kvm-ui-egl-headless-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm f3b00f0863ef07a06687b01984787c378c86deddf063dba8570ead554899a8c2 qemu-kvm-ui-opengl-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm 1d290844b3b7ba75a85bb572d6d2e38aa88b86a713341eabfb2a044e8f035390 qemu-pr-helper-7.2.0-15.el9_2.1.alma.1.tuxcare.els2.x86_64.rpm f83d380fc82c1c70558f2a07d19e956bd3e603c6383e1ebda0f6f979be557332 CLSA-2026:1784297753 TuxCare License Agreement 0 - Bump release to skip the already-released els6 tag, which was set one release ahead of its changelog entry and cannot be changed Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump release to skip the already-released els6 tag, which was set one release ahead of its changelog entry and cannot be changed

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-12.el9_2.1.tuxcare.els7.noarch.rpm 96b64c09f8f1e1941f934938a164acb7855cf4992bb6f0140073460c9db0e0fe tomcat-admin-webapps-9.0.62-12.el9_2.1.tuxcare.els7.noarch.rpm 27351e19482f0acee167cdb67fb201ac76abb5f5b6b4ee02a6f02ed47e77ffd7 tomcat-docs-webapp-9.0.62-12.el9_2.1.tuxcare.els7.noarch.rpm 8a5b2a314efad344adf46fb067e3ffcd155f8b6b1c96a1a62fca58c187f248a1 tomcat-el-3.0-api-9.0.62-12.el9_2.1.tuxcare.els7.noarch.rpm 015b5ca13709e069b737a80e2f9be5e4ffa1a735d6e453bb0eac88c97a96c801 tomcat-jsp-2.3-api-9.0.62-12.el9_2.1.tuxcare.els7.noarch.rpm ef9185a9869c391e7446f5bb660a775be212de8dd34d5ad6dbdc7e12a80f0f6d tomcat-lib-9.0.62-12.el9_2.1.tuxcare.els7.noarch.rpm a72c9d65200cb58bb376934c84b28903626dfbbe5fca0d957a6536bf6974b096 tomcat-servlet-4.0-api-9.0.62-12.el9_2.1.tuxcare.els7.noarch.rpm 6e0a2b8614ccb0b4165fed3a2348a5167fb378200a518a75238d550372f09c1d tomcat-webapps-9.0.62-12.el9_2.1.tuxcare.els7.noarch.rpm 40d4e29c5aa5f9df9b4b9faa7e562ee827ce2bb0df4158d6751e51417dbce576 CLSA-2026:1784814430 TuxCare License Agreement 0 - CVE-2022-2476: sanitize alternate extension metadata before constructing output filenames Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2476: sanitize alternate extension metadata before constructing output filenames

0 tuxcare-almalinux9.2-esu wavpack-5.4.0-5.el9.tuxcare.els1.i686.rpm 5f3368025b7201a76342688db865ff679044efeb87cd8b18ceb5af8175ce6372 wavpack-5.4.0-5.el9.tuxcare.els1.x86_64.rpm 88f53bb7baffa82df0ab4469f46384cc2c33f787261cb6d0ee0f19ef4bfe15a7 wavpack-devel-5.4.0-5.el9.tuxcare.els1.i686.rpm 6f3694f4c7962ca78395d74aa9fa6c4f11657164f9095dc34637b3240977b376 wavpack-devel-5.4.0-5.el9.tuxcare.els1.x86_64.rpm 64476a6bf183abe30c14cd81f90d952b027217814979effc691e92d3b804ed93 CLSA-2026:1784816949 TuxCare License Agreement 0 - CVE-2026-2050: fix HDR file parsing heap-based buffer overflow vulnerability Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2050: fix HDR file parsing heap-based buffer overflow vulnerability

0 tuxcare-almalinux9.2-esu gegl04-0.4.34-2.el9.tuxcare.els2.i686.rpm c0667c6e54d8fb3e5f76821a97fba6d12e7f1b3b5a7b2dee2be443047d24d742 gegl04-0.4.34-2.el9.tuxcare.els2.x86_64.rpm 8324fbca6df610573de0bc215cee9a77114d6f209f5033b52210f8df0ac3f8d1 gegl04-devel-0.4.34-2.el9.tuxcare.els2.i686.rpm 5478dd125485b0172b999d0e3e1538a149d3feb105e771272b20ad47f5f28d67 gegl04-devel-0.4.34-2.el9.tuxcare.els2.x86_64.rpm bffe6e5261a814ada0ef33b210233770254803c00aa715e93735ce39067b8c84 gegl04-devel-docs-0.4.34-2.el9.tuxcare.els2.x86_64.rpm a5664b4f230d3abd3167f999e1d3fbae4b21b56792758e283683e4c4cd295a18 gegl04-tools-0.4.34-2.el9.tuxcare.els2.x86_64.rpm 9f5bdf0d9cafdcb9224f3d7d61e275fa132005226a75ca8031b2c3328b82cb44 CLSA-2026:1784817741 TuxCare License Agreement 0 - CVE-2022-38266: prevent divide-by-zero errors in block convolution functions Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-38266: prevent divide-by-zero errors in block convolution functions

0 tuxcare-almalinux9.2-esu leptonica-1.80.0-4.el9_2.1.tuxcare.els1.i686.rpm 677286354cc07d31021e079824321c84f4003de6e10a969ffbf3d628835a739d leptonica-1.80.0-4.el9_2.1.tuxcare.els1.x86_64.rpm 53b30640c1d25e52a538a45b01197b0630d086521094a7951107bf76cfd19cf5 leptonica-devel-1.80.0-4.el9_2.1.tuxcare.els1.i686.rpm 7dd3085fc2010bfa386b1daee41c25bba6df210af08331df3edbbff4da375897 leptonica-devel-1.80.0-4.el9_2.1.tuxcare.els1.x86_64.rpm 28514c02049a9abb59d023fd389147b1f63bb7a9e61361057ce96edee1dc7417 leptonica-tools-1.80.0-4.el9_2.1.tuxcare.els1.x86_64.rpm 7a1839833883d20c1ec803c3aefad45640654eb4426ed41598bccdd853a43c7a CLSA-2026:1784818499 TuxCare License Agreement 0 - CVE-2026-12505: perform the user lookup and drop supplementary groups on the host namespace before switching to the caller namespace, fixing a local privilege escalation in cifs.upcall Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12505: perform the user lookup and drop supplementary groups on the host namespace before switching to the caller namespace, fixing a local privilege escalation in cifs.upcall

0 tuxcare-almalinux9.2-esu cifs-utils-7.0-1.el9.tuxcare.els1.x86_64.rpm 9ed931b82773d511914bd17586776d6e7bdb6337accbed75c4c1c9a6e567f975 cifs-utils-devel-7.0-1.el9.tuxcare.els1.i686.rpm ad3805e30246a670f4705a52b3ad0bc18e4890cc44b061ae34774c27148ae436 cifs-utils-devel-7.0-1.el9.tuxcare.els1.x86_64.rpm 1284c76b03bf80158eb893cc2f7842bcaa7b3bceaa13ddea3a1ed7da3b862bda cifs-utils-info-7.0-1.el9.tuxcare.els1.x86_64.rpm 979df9822005e4174aed4de3e07f42fa387d0faaa300a8b6535f154302b7f5c2 pam_cifscreds-7.0-1.el9.tuxcare.els1.x86_64.rpm 3d87bbbbca5cbb65832ed2995a5fd7046720161dc82a2fc5cc75ba96b3e2904c CLSA-2026:1784826792 TuxCare License Agreement 0 - CVE-2024-0747: Document::Open inheriting CSP from a different window - CVE-2024-0749: Phishing site popup could obscure the address bar - CVE-2025-5268: Memory safety bugs (gfxFont mHasSpaceFeatures atomicity, PresShell event-handler UAF, wasm uncheckedReadValType missing types) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0747: Document::Open inheriting CSP from a different window - CVE-2024-0749: Phishing site popup could obscure the address bar - CVE-2025-5268: Memory safety bugs (gfxFont mHasSpaceFeatures atomicity, PresShell event-handler UAF, wasm uncheckedReadValType missing types)

0 tuxcare-almalinux9.2-esu firefox-115.4.0-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm f8126bd97dcb69ba5efcde5ba42910fc8bd7e256d73f04910356ce1920e4be6e firefox-x11-115.4.0-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 03cc9086116d760c79ac690bf184f7cdd2fa212d7814dfc4d54544cac4e3e04b CLSA-2026:1784880925 TuxCare License Agreement 0 - CVE-2022-36033: strip control characters from URLs before protocol validation Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-36033: strip control characters from URLs before protocol validation

0 tuxcare-almalinux9.2-esu jsoup-1.13.1-10.el9.tuxcare.els1.noarch.rpm fe58592c0ed32852610fa74142eaac21f60d1a7be556c8254f32d08797b36903 jsoup-javadoc-1.13.1-10.el9.tuxcare.els1.noarch.rpm 81723c85475870711d8abd85b2e9a5816e513bdfa0aa44527586c846468bd95b CLSA-2026:1784899428 TuxCare License Agreement 0 - CVE-2025-43903: properly verify adbe.pkcs7.sha1 signatures in SignatureHandler::validateSignature to prevent signature forgeries Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-43903: properly verify adbe.pkcs7.sha1 signatures in SignatureHandler::validateSignature to prevent signature forgeries

0 tuxcare-almalinux9.2-esu poppler-21.01.0-14.el9_2.tuxcare.els7.i686.rpm 2dab899eee924cd3eb47c72f935aac600b87c72e684427dce84f64d4f6d64909 poppler-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm f32457678b07d51c541b439256e2f67d6809b51c3eb8afa9ebc25300b1e818b4 poppler-cpp-21.01.0-14.el9_2.tuxcare.els7.i686.rpm 0b1f80b9cf43c8bd35c01798843d38e07a952bc06f2f61d588f64db59ec99cc2 poppler-cpp-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm 9bbb751dd99aa9edd33dbc349a026a032deca5be6d89965d7bcb28bdec0e6f08 poppler-cpp-devel-21.01.0-14.el9_2.tuxcare.els7.i686.rpm 9a2b3686ee0b83129c4c8df88ff1ee2bd9bed3d4cf879ab8055654dd62129dcf poppler-cpp-devel-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm a226ebe3d2523b2853e028095a65a5cf76453d50e7dc22a19c7fd20e050012f2 poppler-devel-21.01.0-14.el9_2.tuxcare.els7.i686.rpm 32893d5eeacfdd9f5b8c8539aa5989e0038357bef53bb169397cdc65af0f9050 poppler-devel-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm c83f5c036321ba35ca266d1827c5fbddef6a8a9b3d78ed7cba34b48daff2df05 poppler-glib-21.01.0-14.el9_2.tuxcare.els7.i686.rpm 8fa13c74e4e55b397c332fe3445fee9cd18dc2d5081066043d12fc41fb356ec9 poppler-glib-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm 581f551239520a1475c0080315ea27eb82eb842159db8678cbeab6f44fefb956 poppler-glib-devel-21.01.0-14.el9_2.tuxcare.els7.i686.rpm a26a15a5796ae5556e9498ca3b69e5d0373dddfce33439d58f359487de16f9e8 poppler-glib-devel-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm bde437d1be6488f71869c958908fe89806ea7035a90b9d42f859c65ad9a21d33 poppler-glib-doc-21.01.0-14.el9_2.tuxcare.els7.noarch.rpm 48a273a086fdfda3325ca5808637a6ddd524a96a767c6677cd7943554b728e75 poppler-qt5-21.01.0-14.el9_2.tuxcare.els7.i686.rpm 4c12d3312bb09878a764b73e55a3dbc306df7592038e3563891fc379dd8a2fd2 poppler-qt5-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm ea1c383d6d79c183f81b855d54c2f4010d4ad0515e7f9ab50e38ba9ed7f19a6e poppler-qt5-devel-21.01.0-14.el9_2.tuxcare.els7.i686.rpm c83db660b603321cb308ae23e43bfa886ed0a5f8e7faffe45d2b5c93e93f16a6 poppler-qt5-devel-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm 875df35c8fe565c3263f7031e57a913eb6b32361d2556c3fcc08e1c5ae4e70c3 poppler-utils-21.01.0-14.el9_2.tuxcare.els7.x86_64.rpm 08dbf5d2bc59f599837b5ff88bed03cf8df9f423f0cf716cf627d42cda83a126 CLSA-2026:1784900402 TuxCare License Agreement 0 - CVE-2021-37714: fix uncontrolled recursion (StackOverflow) in HTML parser Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-37714: fix uncontrolled recursion (StackOverflow) in HTML parser

0 tuxcare-almalinux9.2-esu jsoup-1.13.1-10.el9.tuxcare.els2.noarch.rpm 1734ace54f50b7e71a88447dcdc9eda3a51c07e50a9ac3690253111859cb6e64 jsoup-javadoc-1.13.1-10.el9.tuxcare.els2.noarch.rpm f6297e38aa193e851561b24202ea1cbb749600540742ef4e78305a01fda0e962 CLSA-2026:1778867412 TuxCare License Agreement 0 - net: skbuff: propagate shared-frag marker through skb_gro_receive + skb_shift {CVE-2026-46300} - Revert "net: gro: propagate SKBFL_SHARED_FRAG through skb_gro_receive" Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- net: skbuff: propagate shared-frag marker through skb_gro_receive + skb_shift {CVE-2026-46300} - Revert "net: gro: propagate SKBFL_SHARED_FRAG through skb_gro_receive"

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 4a66ddc9df28a94f7cb667ae25b211b1ea830988a33ed047057c243dad63da3c kernel-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 10afb299e6cd502e936d348709597c4fe4a6dbb8d17833abd422d68a2cef7c94 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els34.noarch.rpm a24792f1c5d41f937a383a2c295cd1e52d12269b6b04de8550940d3125c94bf1 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 95070b012f8755462a7e5a4692ac247b3fc829dee35d07d732ad6b08903863a3 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 54ec734640e212449a78e9c718928d792f658a36c72bab20dbe0392e2d125641 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 4c45e799b8817c4a3dadc96c829c3ce804a1854d8e03988ca34713f2648cb9b1 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 0b608ba93c9066ceab054ce97bb60ac8ce04ddbb9938fcb898a353660fec74d2 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 652942f5120dcdf6b35d81fbbf4da1a2a9bb9224bb1f16a43d1b304d4824e01d kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm a7f18803f064ae1c0b84cb99652f2982140c247e006ee00d95e37b1de6d6e40f kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 4d1caa0ce4450267e529ca3f26c621355ab56ed359dc0a44bba507ddb542c7be kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm be8669baf7ec4101b7cdd99f97cb2d3573a63c70c6fc782eb801ac1b59362b93 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 57807345b91009f6bc890ce41731b5d9e098c5eae44ecaeee1e32cc7dac81cc6 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 65b9b7fb50a11061a360ee2035c62e7fd3dc2e963a875e68dd8437f1bd50153e kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm e7add81470dab32bb96c209df761adb0db796328c5ca22432416fc7b01261b36 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 3c8e0a360a4dbc2459d75a845ca247488b6ea4046625bc96e3216d9cb6262ce2 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 015922abc82e6630c69312898656da731e04fb1a2300841e2bfe5c5e64f514fa kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 3a1fc6386aeabd3ec272fb0fb0efa64f25384a20fd311a416ac4c2c18068f27b kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els34.noarch.rpm 3246fb1cfaa4d27d21b83c4434395970c98e76140938360cbd6d66c996ed848f kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 336336e9146082e4d6ad5484e373286c8a4d0f067ccb191f99a103a808e165eb kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 32c9e5962d6c066c6d7a1c1357b96c4ae6b8683c4232669315eac3b32ac3f7a1 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 96dc2078bacf00fedde86fea29802076de5d2be0c94daec2b4bbc0cf340fd28e kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 29553cacb06e5b2a22671009d17ffee27fa197d6f514ef8ee1f599aa4ac81c23 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 3d0a339d6c81a20edd7d03f33029f960c53af895f283deeef9f3edb4a9e18036 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm d38aa85677e144b0482593784bcccdac453aa47da1de0e79dd9b0efbe7c4fb91 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm dd24a2baffe19410ebfdd79479bbee0c8d9e7ff07687986be578b2f8f0066745 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 71e2f9607b320545c2db4025a99f6ffe17ccd950bac5bde580879f450ddd75da kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 66cb561219d2a1d1bda7b1e09600f017ad39439ac6f0480792ae6e480b59b06f kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 1e2a42dd52067efb5322d78bc69adce196c40b7cf36514f51e15f12ab1596fa4 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm c2f7cd3ac1ff2713d67a11fd23b6e2ddd15ebbc5bf8bb8ef59e773983afd3e30 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm ddebc42a75a5d24a01737f82275be58108694757b2724d41f5047e1a70befc18 libbpf-1.0.0-2.el9_2.tuxcare.7.els34.i686.rpm cde3948d943bdbb5d793e2bae251f073b6cd045c7c1b19916276adb5ae572d61 libbpf-1.0.0-2.el9_2.tuxcare.7.els34.x86_64.rpm 11aeb01f309237bc5c400fec951dfab9345f3ac7b2af3127ee0949d761ddde16 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els34.i686.rpm 64ae33cf284c43ee87fb36dcd3de1cd890a75cfeeacc04a7818eb4e699b3b786 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els34.x86_64.rpm 1ccb48dc83f18ea8ffcad40077ef2439cd7c292d9a85ac7ed2b036f584575f1d libbpf-static-1.0.0-2.el9_2.tuxcare.7.els34.i686.rpm f6ee8223b06219f4951ede73a63e3e59879af10e0bfa8fd3c4a3877369e9dda9 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els34.x86_64.rpm 6f7ed5c5eae0435c81708cb44aff1c5808e61256ee4c6953c592c90326c27595 perf-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm 340af87878794b42ceccde044aa3f69e90c1cebdbffaaaee42eead0a47e9c311 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm a88a54f0628aa99d878f3bdf98c0688d7679a3f6fb24c79675f278452a48cd0a rtla-5.14.0-284.1101.el9_2.tuxcare.7.els34.x86_64.rpm fbcbe3fca93b01921d8b977008528fbe63cf8f17ef992aa0dc340f99768a70d2 CLSA-2026:1784986614 TuxCare License Agreement 0 - CVE-2026-10846: Fix off-path DNS response poisoning in stub resolver over UDP Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-10846: Fix off-path DNS response poisoning in stub resolver over UDP

0 tuxcare-almalinux9.2-esu ldns-1.7.1-11.el9_2.tuxcare.els1.i686.rpm 881e6874efbd8f0434590d23a926c881ae63649d9b75a22431cc229e36d74b97 ldns-1.7.1-11.el9_2.tuxcare.els1.x86_64.rpm 3a0ee7d872102eb4fbee52d126e4f540eec1170952f7af3a71fcf2be96f70e8e ldns-devel-1.7.1-11.el9_2.tuxcare.els1.x86_64.rpm 80561461249623123a8e1f34ea5bb5725f85e3047f601599bbb41bfa53387a0b ldns-doc-1.7.1-11.el9_2.tuxcare.els1.noarch.rpm 87c840f3a6b6c2002ff6d77c6b2378998e8791f4cf55428ae3984fd87fc25c7b ldns-utils-1.7.1-11.el9_2.tuxcare.els1.x86_64.rpm 14f3b11815ed6c3f8a10ba6e006d1dd3ce2afbb326c9b504aa9d3228634aad57 perl-ldns-1.7.1-11.el9_2.tuxcare.els1.x86_64.rpm 1eba54232e7854de331b27b7161e36d61033d9de573e45a713bef7a6b2f64f30 python3-ldns-1.7.1-11.el9_2.tuxcare.els1.x86_64.rpm c5b88d2bd93ad4d589deda60ca4b715ed662946b90d0396cc49367f0c0dc3f65 CLSA-2026:1784988522 TuxCare License Agreement 0 - Rebase to webkitgtk 2.52.5 (WebKitGTK Security Advisory WSA-2026-0004), aligning with the 2.52.x security baseline shipped by RHEL 9 (RHSA-2026:42062). - CVEs resolved by this rebase: CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745. - Drop fix-system-malloc-llint-extractor.patch; the upstream cherry-pick (WebKit 314364@main) is now included in 2.52.5. - Refresh libsoup2.patch for the 2.52.5 library version triplet bumps (WEBKIT 21/9/21, JAVASCRIPTCORE 10/13/10 on API 4.1; WEBKIT 20/9/16, JAVASCRIPTCORE 8/13/7 on API 6.0). The webkit2gtk-4.0 SONAME (libwebkit2gtk-4.0.so.37) is preserved. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to webkitgtk 2.52.5 (WebKitGTK Security Advisory WSA-2026-0004), aligning with the 2.52.x security baseline shipped by RHEL 9 (RHSA-2026:42062). - CVEs resolved by this rebase: CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745. - Drop fix-system-malloc-llint-extractor.patch; the upstream cherry-pick (WebKit 314364@main) is now included in 2.52.5. - Refresh libsoup2.patch for the 2.52.5 library version triplet bumps (WEBKIT 21/9/21, JAVASCRIPTCORE 10/13/10 on API 4.1; WEBKIT 20/9/16, JAVASCRIPTCORE 8/13/7 on API 6.0). The webkit2gtk-4.0 SONAME (libwebkit2gtk-4.0.so.37) is preserved.

0 tuxcare-almalinux9.2-esu webkit2gtk3-2.52.5-1.el9.tuxcare.els10.x86_64.rpm f90e962ed68d665e34003f56559912a74b8824fa904e12270cf95205f7948b59 webkit2gtk3-devel-2.52.5-1.el9.tuxcare.els10.x86_64.rpm c0c6b6f8c73eefc1aa85a2ccb100691f1d19abea60a3b8f16562cb76f7ed2477 webkit2gtk3-jsc-2.52.5-1.el9.tuxcare.els10.x86_64.rpm dc8c837a61382edd4ed3f457e1e8daf547746a1a7b59d654e3f3dd77a5f5c7a9 webkit2gtk3-jsc-devel-2.52.5-1.el9.tuxcare.els10.x86_64.rpm f7a341c0196c4373d94cb68a209311bc942d841aca836d5587d6f3b7828ab00c CLSA-2025:1755682686 TuxCare License Agreement 0 - net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797} - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error {CVE-2025-38089} - net: ch9200: fix uninitialised access during mii_nway_restart {CVE-2025-38086} - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} - locking/csd_lock: Change csdlock_debug from early_param to __setup {CVE-2022-50091} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes {CVE-2025-21991} - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead {CVE-2022-49977} - NFSv4/pnfs: Fix a use-after-free bug in open {CVE-2022-50072} - NFSv4: Don't hold the layoutget locks across multiple RPC calls {CVE-2022-49316} - mm/khugepaged: fix ->anon_vma race {CVE-2023-52935} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797} - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error {CVE-2025-38089} - net: ch9200: fix uninitialised access during mii_nway_restart {CVE-2025-38086} - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} - locking/csd_lock: Change csdlock_debug from early_param to __setup {CVE-2022-50091} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes {CVE-2025-21991} - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead {CVE-2022-49977} - NFSv4/pnfs: Fix a use-after-free bug in open {CVE-2022-50072} - NFSv4: Don't hold the layoutget locks across multiple RPC calls {CVE-2022-49316} - mm/khugepaged: fix ->anon_vma race {CVE-2023-52935}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 77da1d8c4feb4589d74d7b2525726130ed722489edca0383f7a127faf553f2f6 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 66d9ec79aee060262cb57917e117725c233f41b9208f5431f2bae899282f6252 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els17.noarch.rpm 0de778c0dd51e3020229811ac2298ddaad3b29a42188e2332df80b1d09bacb08 kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 29dd08eda7b612d674f72bd78b11ae154f45c84e7a183ec71a5eb5d4a7e04e30 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 13472a9caac5870ff89eebb29208715cf6c8cbf968bb9664105faf10302608b7 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 69b71e47a2eb6aa6f1eef7ac61a09289fb7433febd1b2a9e8788c2234258f199 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 09c7ebca65cd5783149bff8c628089b3bb7bdd54a9428278cb4a6af92ab73837 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 4bdc51504d78ee70a4b86a7108e5002e465e22718f1151e693a34850444b4a32 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 326f496f123fa0ea27ad5ff1edd3f3f686d4fef32189523b5b67407a6a0971b4 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm a2ce17e484027ee4fb5dc3ec790bd557f50d1d012c5073c1a950aa8b356bc8d8 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 2f30eed8ac854bd57032ef459a29c530dc3826bf71ad200dd10d925f16ca7363 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 962f6cf0d0aac230180b985d8f211b0b11e34da2e58cb0d0a20d0dd396b87e94 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 492e3017a3d9544bc4a712421d9fc33c2acaea67403ee8af17f64a4a620bec2c kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm fe3896e50db4532913a1cfb3d00cfaab805b8598ade600753cb17ee0a2ccfe3c kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 2f076eb0c2b9d89600e17921b79a99487f303b595b57a7b438e023175b2c5f0e kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 67915ed8ddbbf8cbea2823f8e31344470b7d1c73c9e557374f00fea2c5968b4e kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm af8c2f5704ce88a12295d46e4a175d6dc9c5b59f656811e0e34ca21686dd0bdf kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els17.noarch.rpm 335785440f24af3702a882f9413a1350ac476c19a29afb0ef37965f592767f3c kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 0a559996b41253396b2d4bed1246052125a4c5f79cb99b0844b760ed9f5385ae kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 800e007666e399e53845f76fba04d6f40f4127fe58ed0eee9ab2f6b4ebf48768 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 9c617940d8f628e630233511dd555e8a0ca3bbee9a6367a800a0e764f1c144da kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 0eea1c94f1fd00d01c7cedd9d1572f4ac0771ce4479cc1cc2c393249d723c80c kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 3c2133fa278157ebccf00edd0a56cb9198505134448f4d853f0d9ca50cc2c79c kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm ba6f18ccaa695430c22f9fc12a6a3192921b400f12a5ccebe6014937a32852fc kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 3f1862e145401a5eb589bb39df11ed4a9bac6c5ae75d3e96541b3af1d0b0b722 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 91281e11791c14d0a7cc6346416928e5285dabeed8e1cffb38f461a176f786fc kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm cbdc719615ddd4f26fd33b9e7ab7a1ab0faa984a5c564a7c58069d41014fc905 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 3c441a6495b2b0e552a2fb0bb25b9eb1de0e8bc4cecd1d3344137a9b57335001 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 2943c1a8c3f2563182871c4aeb97a51dc89040d838c1d05a9791ac19ed082ee0 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm df22fe40d373ed54d9e64764f481f2da4eafaf7a68bb4a21497b4a0985379195 libbpf-1.0.0-2.el9_2.tuxcare.7.els17.i686.rpm 43498063afe8e2fd64b299ac8a343986afc4077435876649e0251e21011c3655 libbpf-1.0.0-2.el9_2.tuxcare.7.els17.x86_64.rpm c7d43f855248bc6ae0dc57c695dbd82bd3f586cdbf2592ba32f5fb7cd01ae8ae libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els17.i686.rpm 0f615f3073a0a612f3b73316a8340e36b7fd329a6e34c17cb89f0c1bcee44299 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els17.x86_64.rpm d07213f6549eaa81bb42de3d96f57647997b5bf1ea39cec6afff66eebf2112e6 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els17.i686.rpm 332fc871704fdddb07f79c9d1e033b462eae250da5fe3275fe8413f98e3cd6af libbpf-static-1.0.0-2.el9_2.tuxcare.7.els17.x86_64.rpm 7f21b95869f523a748b67659f538785b2cfaca92fafb68a5b5989abcdf211600 perf-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm fd415041139a2031fe14cf492a75a2d5a6379c4629e22dadce71c1e5552e6e07 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 152df3d5547d95800b2f0dac154685add681e28e9aa880fa88f7b6733adb8205 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els17.x86_64.rpm 0d35170b771b917a4feea66d7229aff6764a4ae2beb847eca859e46049b60456 CLSA-2026:1779375889 TuxCare License Agreement 0 - perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344} - x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363} - drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370} - dm: remove fake timeout to avoid leak request {CVE-2026-43314} - md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163} - drm: Account property blob allocations to memcg {CVE-2026-43287} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206} - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500} - net/sched: Fix backlog accounting in qdisc_dequeue_internal {CVE-2025-39677} - l2tp: avoid one data-race in l2tp_tunnel_del_work() {CVE-2026-23120} - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() {CVE-2025-39876} - espintcp: fix skb leaks {CVE-2025-38057} - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829} - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() {CVE-2025-37824} - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses {CVE-2025-23141} - virtiofs: add filesystem context source name check {CVE-2025-37773} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063} - ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922} - wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910} - wifi: ath11k: fix RCU stall while reaping monitor destination ring {CVE-2024-58097} - net/sctp: Prevent autoclose integer overflow in sctp_association_init() {CVE-2024-57938} - ubi: fastmap: Fix duplicate slab cache names while attaching {CVE-2024-53172} - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() {CVE-2024-56369} - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware {CVE-2024-53157} - vsock: Fix sk_error_queue memory leak {CVE-2024-53118} - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof {CVE-2024-53113} - exec: don't WARN for racy path_noexec check {CVE-2024-50010} - drm/amd/display: Initialize get_bytes_per_element's default to 1 {CVE-2024-49892} - ppp: do not assume bh is held in ppp_channel_bridge_input() {CVE-2024-49946} - drm/amd/display: Skip Recompute DSC Params if no Stream on Link {CVE-2024-47683} - x86/sgx: Fix deadlock in SGX NUMA node search {CVE-2024-49856} - pktgen: use cpus_read_lock() in pg_net_init() {CVE-2024-46681} - nfsd: call cache_put if xdr_reserve_space returns NULL {CVE-2024-47737} - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739} - drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812} - net/mlx5: Fix bridge mode operations when there are no VFs {CVE-2024-46857} - Input: MT - limit max slots {CVE-2024-45008} - net/mlx5e: SHAMPO, Fix incorrect page release {CVE-2024-46717} - netfilter: ctnetlink: use helper function to calculate expect ID {CVE-2024-44944} - lib: objagg: Fix general protection fault {CVE-2024-43846} - drm/qxl: Add check for drm_cvt_mode {CVE-2024-43829} - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems {CVE-2024-42073} - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes {CVE-2024-42101} - RDMA/mlx5: Add check for srq max_sge attribute {CVE-2024-40990} - tracing: Build event generation tests only as modules {CVE-2024-41004} - KEYS: trusted: Fix memory leak in tpm2_key_encode() {CVE-2024-36967} - epoll: be better about file lifetimes {CVE-2024-38580} - drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988} - RDMA/srpt: Add a check for valid 'mad_agent' pointer {CVE-2023-54274} - x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction {CVE-2023-54172} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772} - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected {CVE-2024-26891} - dm: don't attempt to queue IO under RCU protection {CVE-2023-53860} - md: fix soft lockup in status_resync {CVE-2023-53620} - spi: qup: Don't skip cleanup in remove's error path {CVE-2023-53567} - md/raid10: prevent soft lockup while flush writes {CVE-2023-53151} - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() {CVE-2023-53133} - spi: imx: Don't skip cleanup in remove's error path {CVE-2023-53225} - xsk: Add missing overflow check in xdp_umem_reg {CVE-2023-53080} - wifi: mt76: do not run mt76u_status_worker if the device is not running {CVE-2022-50735} - bpf: Skip task with pid=1 in send_signal_common() {CVE-2023-52992} - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808} - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() {CVE-2023-52702} - RDMA/irdma: Fix potential NULL-ptr-dereference {CVE-2023-52744} - i2c: designware: Fix handling of real but unexpected device interrupts {CVE-2022-50370} - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() {CVE-2022-50544} - tpm: acpi: Call acpi_put_table() to fix memory leak {CVE-2022-50562} - netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed {CVE-2022-50500} - ntb_netdev: Use dev_kfree_skb_any() in interrupt context {CVE-2022-50476} - blk-mq: fix possible memleak when register 'hctx' failed {CVE-2022-50434} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() {CVE-2022-49885} - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() {CVE-2022-49989} - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE {CVE-2022-49875} - can: j1939: j1939_send_one(): fix missing CAN header initialization {CVE-2022-49845} - ovl: Use "buf" flexible array for memcpy() destination {CVE-2022-49743} - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() {CVE-2022-49839} - net: bcmgenet: Use stronger register read/writes to assure ordering {CVE-2022-49194} - ima: Fix a potential integer overflow in ima_appraise_measurement {CVE-2022-49643} - net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656} - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" {CVE-2025-71137} - ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078} - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() {CVE-2026-43281} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696} - xfs: stop reclaim before pushing AIL during unmount {CVE-2026-31455} - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() {CVE-2022-49840} - drivers: base: Free devm resources when unregistering a device {CVE-2023-53596} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - ata: libata-transport: fix double ata_host_put() in ata_tport_add() {CVE-2022-49826} - tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799} - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case {CVE-2022-49779} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344} - x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363} - drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370} - dm: remove fake timeout to avoid leak request {CVE-2026-43314} - md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163} - drm: Account property blob allocations to memcg {CVE-2026-43287} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206} - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500} - net/sched: Fix backlog accounting in qdisc_dequeue_internal {CVE-2025-39677} - l2tp: avoid one data-race in l2tp_tunnel_del_work() {CVE-2026-23120} - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() {CVE-2025-39876} - espintcp: fix skb leaks {CVE-2025-38057} - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829} - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() {CVE-2025-37824} - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses {CVE-2025-23141} - virtiofs: add filesystem context source name check {CVE-2025-37773} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063} - ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922} - wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910} - wifi: ath11k: fix RCU stall while reaping monitor destination ring {CVE-2024-58097} - net/sctp: Prevent autoclose integer overflow in sctp_association_init() {CVE-2024-57938} - ubi: fastmap: Fix duplicate slab cache names while attaching {CVE-2024-53172} - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() {CVE-2024-56369} - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware {CVE-2024-53157} - vsock: Fix sk_error_queue memory leak {CVE-2024-53118} - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof {CVE-2024-53113} - exec: don't WARN for racy path_noexec check {CVE-2024-50010} - drm/amd/display: Initialize get_bytes_per_element's default to 1 {CVE-2024-49892} - ppp: do not assume bh is held in ppp_channel_bridge_input() {CVE-2024-49946} - drm/amd/display: Skip Recompute DSC Params if no Stream on Link {CVE-2024-47683} - x86/sgx: Fix deadlock in SGX NUMA node search {CVE-2024-49856} - pktgen: use cpus_read_lock() in pg_net_init() {CVE-2024-46681} - nfsd: call cache_put if xdr_reserve_space returns NULL {CVE-2024-47737} - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739} - drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812} - net/mlx5: Fix bridge mode operations when there are no VFs {CVE-2024-46857} - Input: MT - limit max slots {CVE-2024-45008} - net/mlx5e: SHAMPO, Fix incorrect page release {CVE-2024-46717} - netfilter: ctnetlink: use helper function to calculate expect ID {CVE-2024-44944} - lib: objagg: Fix general protection fault {CVE-2024-43846} - drm/qxl: Add check for drm_cvt_mode {CVE-2024-43829} - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems {CVE-2024-42073} - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes {CVE-2024-42101} - RDMA/mlx5: Add check for srq max_sge attribute {CVE-2024-40990} - tracing: Build event generation tests only as modules {CVE-2024-41004} - KEYS: trusted: Fix memory leak in tpm2_key_encode() {CVE-2024-36967} - epoll: be better about file lifetimes {CVE-2024-38580} - drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988} - RDMA/srpt: Add a check for valid 'mad_agent' pointer {CVE-2023-54274} - x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction {CVE-2023-54172} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772} - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected {CVE-2024-26891} - dm: don't attempt to queue IO under RCU protection {CVE-2023-53860} - md: fix soft lockup in status_resync {CVE-2023-53620} - spi: qup: Don't skip cleanup in remove's error path {CVE-2023-53567} - md/raid10: prevent soft lockup while flush writes {CVE-2023-53151} - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() {CVE-2023-53133} - spi: imx: Don't skip cleanup in remove's error path {CVE-2023-53225} - xsk: Add missing overflow check in xdp_umem_reg {CVE-2023-53080} - wifi: mt76: do not run mt76u_status_worker if the device is not running {CVE-2022-50735} - bpf: Skip task with pid=1 in send_signal_common() {CVE-2023-52992} - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808} - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() {CVE-2023-52702} - RDMA/irdma: Fix potential NULL-ptr-dereference {CVE-2023-52744} - i2c: designware: Fix handling of real but unexpected device interrupts {CVE-2022-50370} - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() {CVE-2022-50544} - tpm: acpi: Call acpi_put_table() to fix memory leak {CVE-2022-50562} - netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed {CVE-2022-50500} - ntb_netdev: Use dev_kfree_skb_any() in interrupt context {CVE-2022-50476} - blk-mq: fix possible memleak when register 'hctx' failed {CVE-2022-50434} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() {CVE-2022-49885} - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() {CVE-2022-49989} - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE {CVE-2022-49875} - can: j1939: j1939_send_one(): fix missing CAN header initialization {CVE-2022-49845} - ovl: Use "buf" flexible array for memcpy() destination {CVE-2022-49743} - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() {CVE-2022-49839} - net: bcmgenet: Use stronger register read/writes to assure ordering {CVE-2022-49194} - ima: Fix a potential integer overflow in ima_appraise_measurement {CVE-2022-49643} - net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656} - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" {CVE-2025-71137} - ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078} - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() {CVE-2026-43281} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696} - xfs: stop reclaim before pushing AIL during unmount {CVE-2026-31455} - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() {CVE-2022-49840} - drivers: base: Free devm resources when unregistering a device {CVE-2023-53596} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - ata: libata-transport: fix double ata_host_put() in ata_tport_add() {CVE-2022-49826} - tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799} - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case {CVE-2022-49779}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 9fa2de214c79ca5f690af10802f3647778d65a8768f80eb024ff73708f96aef8 kernel-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 682dc8d0a11a7e25e1d22ec7a5f676f498341f3500cb04c100ee11a70b30d3a5 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els1.noarch.rpm a8b5573550a649c39b25c2b44105c7abf457424dab61b732ff7bda2060b7dc13 kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm dc7c264ac3d94ebfee357f30759b469d9a566c719ff06a02bde7976d6415a645 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm a17f08c182017c45d5397741c15a5ce3068033eb38baf1efb06b725e97e81fca kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm e1629e0c6ab4d2d08858fac4f7a4623dc79f22bbd668cc582fd7382fdd195742 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 345ddd89cf9d48507658681a943ee115a482b06956da93aed82f69e10618012e kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 341b7fd6767b1d55b6bc96dce15151434236ad10409b6d70145edd9a797b6b65 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm d5020fe9764c0946160ceb37026d2dfb718e21f5fb4772fa83025189271273a6 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 4d0baa582c97c542dbbbd45c0faa611660ef6dff05f695875bc0db748c8eaa0a kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 8ad90a3b027ebca58f9251dd235bf42925b3e95f6a3d03815ac57fc3ee1f4ebf kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 6fe44f0f1ffc7bb23ccd566c1f18a125954754a575ca1c0a7062fc2c75ae255d kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 1cef4d6ff4db41bc9279359f815f07d1a79254229a9b60efdc1ad8ece83d5556 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 764f8088c7aefb3d9602d3225658f4b25944cd92df41bd6cc0a490a739892e71 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm b78dc4a70145a0c58ebb5939328e797d64ecff23d14cf9ebcc9537f130703d20 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm c01f7b19171a58b313f53efcfc3eb92a012c237cad78ad372e996fed3da8e5a6 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 45812ee9285cb4c84f836906659910de02831bd211aa95963cd8741f4f14356a kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els1.noarch.rpm f50f520d2d695469235a917c24ca54dc4eafe96171bdbbc5da1cf70c76ebe972 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 31daec081d509e68267368196c7445863b62b5d4d4c3250a69c9ead87aa3a79a kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm cc95106e4129c4e250ff9ab534a520c9889c9e4fe467d234a297abb6a73d89fc kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 91aad579f2006e0724ac295cdc3042b20d01f65e005e63f28bef5b0f04cfd944 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 125a419f7a898b55247edaac43005113788b28e32d7f8c32407818a089b1b1c7 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 134ade61a57ebdb3b937b910f59633a55741544db87152f92d76856066593915 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 84ef287fff18c6b7bbb183bb16d8b8d26b1ece1403e55aa1df3549041fbffe34 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 7a0eef72069f8aeb515a3f0ee607b9bb580b5cad916afbad7d5dbf1f61288780 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 4cc6c3dc92d79c17f73f35e2238cac55cb505966393482a3237a5f3a7387ca53 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 52e8ba302721771df19271caa58386d7c6e406f7e80c641a6077e3e4efbf9fff kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 3ac2bbbb8d0c496bae2e483cabfd446eb0fc1e39a5cf5a0fd0b92a0eb886d6a3 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 5aa0b70ecb98a5450fceb2d86a6865e02afb79c60c10a6cfb57b608f366da28c kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 7df16b8f6a579e8e4e3a700e65dad025db2954fd32db140a1d8a22621a8940f1 libbpf-1.0.0-2.el9_2.tuxcare.11.els1.i686.rpm 4503c63d5686f471d82c45ba44ceb040c26d9a1209b8d63529f8e299c5ba2e6a libbpf-1.0.0-2.el9_2.tuxcare.11.els1.x86_64.rpm f2a52a903ec1434e983cdf4cbe5903a1c84507c4e01865968227b6ec2daf3db3 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els1.i686.rpm b7ccb4b9406dac4cf3e2d0d6d65a0c13200f782b6a65a6bb9f0719b895835bcc libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els1.x86_64.rpm f2faf6cc43f7a6222f7c7f7e273a88ec1a44d32fa9eb914908e28e03022cbde3 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els1.i686.rpm 8bf9335a94870023679a58d1c79ef7017da20ad332619a2f8c3d8e03d7c0d91d libbpf-static-1.0.0-2.el9_2.tuxcare.11.els1.x86_64.rpm 4efc4b27320e03083b6746df3b7e41a36b4adfe03468c30769685523ee7eda69 perf-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm c4fca8d6d8680f00aaf7362ac7644fe4c5b998fb0568bbe054c8ba1c6e8abdf6 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 7d2abc38bc60b6352b8b92ab43a0f545e9044fc5fa6b76663e4295f8a9ca0497 rtla-5.14.0-284.1101.el9_2.tuxcare.11.els1.x86_64.rpm 53ebe46127e2cf9e0fd4006506f1e451c90c955b31d972a143809e203d42d5bb CLSA-2026:1777616064 TuxCare License Agreement 0 - crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431} - crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431} - crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431} - crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431} - crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431} - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551} - bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099} - libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238} - ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892} - intel_th: msu: Fix vmalloced buffers {CVE-2022-50142} - vt: Clear selection before changing the font {CVE-2022-49948} - ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411} - usbnet: Run unregister_netdev() before unbind_all() {CVE-2022-50220} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - bpf: Propagate error from htab_lock_bucket() to userspace {CVE-2022-50490} - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} - module: fix [e_shstrndx].sh_size=0 OOB access {CVE-2022-49444} - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} - tracing: Fix potential double free in create_var_ref() {CVE-2022-49410} - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366} - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} - xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426} - svcrdma: bound check rq_pages index in inline path {CVE-2025-71068} - net: hns3: add VLAN id validation before using {CVE-2025-71112} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315} - i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900} - team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091} - staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - ftrace: Add cond_resched() to ftrace_graph_set_hash() {CVE-2025-37940} - net: stmmac: Fix accessing freed irq affinity_hint {CVE-2025-23155} - ext4: set goal start correctly in ext4_mb_normalize_request {CVE-2023-54021} - netfilter: ipset: fix region locking in hash types {CVE-2025-37997} - openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998} - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() {CVE-2025-37990} - nfs: handle failure of nfs_get_lock_context in unlock path {CVE-2025-38023} - drm/amd/pm: Prevent division by zero {CVE-2025-37767} - netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764} - tracing: Fix null pointer dereference in tracing_err_log_open() {CVE-2023-53167} - ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386} - scsi: qla2xxx: Pointer may be dereferenced {CVE-2023-53150} - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() {CVE-2025-38061} - dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066} - libnvdimm/labels: Fix divide error in nd_label_data_init() {CVE-2025-38072} - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() {CVE-2023-53251} - tracing: Free error logs of tracing instances {CVE-2023-53375} - perf: Revert to requiring CAP_SYS_ADMIN for uprobes {CVE-2025-38466} - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO {CVE-2025-38122} - dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095} - x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334} - ext4: inline: fix len overflow in ext4_prepare_inline_data {CVE-2025-38222} - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38214} - sctp: initialize more fields in sctp_v6_from_sk() {CVE-2025-39812} - atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190} - usb: net: sierra: check for no status endpoint {CVE-2025-38474} - vxlan: Annotate FDB data races {CVE-2025-38037} - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184} - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181} - net_sched: sch_sfq: fix a potential crash on gso_skb handling {CVE-2025-38115} - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert {CVE-2025-38387} - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337} - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324} - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() {CVE-2025-38312} - usb: typec: altmodes/displayport: do not index invalid pin_assignments {CVE-2025-38391} - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request {CVE-2025-38430} - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() {CVE-2022-50829} - wifi: mt76: disable napi on driver removal {CVE-2025-38009} - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump {CVE-2025-39813} - net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - RDMA/irdma: avoid invalid read in irdma_net_event {CVE-2025-71133} - scsi: qla4xxx: Prevent a potential error pointer dereference {CVE-2025-39676} - ppp: fix race conditions in ppp_fill_forward_path {CVE-2025-39673} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990} - thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174} - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT {CVE-2025-38439} - ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345} - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460} - dm: fix unconditional IO throttle caused by REQ_PREFLUSH {CVE-2025-38063} - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs {CVE-2023-53391} - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231} - udf: Do not update file length for failed writes to inline files {CVE-2023-53295} - bpf: Fix WARN() in get_bpf_raw_tp_regs {CVE-2025-38285} - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree {CVE-2025-38468} - nvmet-tcp: don't restore null sk_state_change {CVE-2025-38035} - wifi: iwlwifi: mvm: fix double free on tx path. {CVE-2022-50248} - ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344} - bonding: fix use-after-free due to enslave fail after slave array update {CVE-2026-23171} - macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209} - cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() {CVE-2023-53479} - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967} - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} - rename(): fix the locking of subdirectories - scsi: qedi: Fix use after free bug in qedi_remove() {CVE-2023-54100} - ixgbe: Fix panic during XDP_TX with > 64 CPUs {CVE-2023-54090} - bpf: Do not let BPF test infra emit invalid GSO types to stack {CVE-2025-68725} - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154} - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() {CVE-2023-54014} - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() {CVE-2022-50699} - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() {CVE-2025-39808} - PCI: Fix dropping valid root bus resources with .end = zero {CVE-2023-53814} - KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state {CVE-2023-53208} - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini {CVE-2023-53193} - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() {CVE-2025-39795} - libceph: return the handler error from mon_handle_auth_done() {CVE-2026-22992} - Bluetooth: Fix hci_suspend_sync crash {CVE-2023-53520} - jbd2: prevent softlockup in jbd2_log_do_checkpoint() {CVE-2025-39782} - net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977} - wifi: ath11k: clear initialized flag for deinit-ed srng lists {CVE-2025-38601} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060} - libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991} - soundwire: fix enumeration completion {CVE-2023-54096} - ext4: fix inode leak in ext4_xattr_inode_create() on an error path {CVE-2022-50845} - ring-buffer: Handle race between rb_move_tail and rb_check_pages {CVE-2023-53709} - netlink: fix potential deadlock in netlink_set_err() {CVE-2023-53731} - xhci: dbc: Fix memory leak in xhci_alloc_dbc() {CVE-2022-50809} - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline {CVE-2022-50286} - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed {CVE-2023-53481} - driver core: location: Free struct acpi_pld_info *pld before return false {CVE-2023-53211} - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() {CVE-2025-39845} - dma-buf/dma-resv: Stop leaking on krealloc() failure {CVE-2023-53181} - rxrpc: Fix oops due to non-existence of prealloc backlog struct {CVE-2025-38514} - xfrm: Zero padding when dumping algos and encap {CVE-2023-53684} - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer {CVE-2023-53648} - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF {CVE-2023-53747} - ice: fix wrong fallback logic for FDIR {CVE-2023-54040} - cifs: Fix xid leak in cifs_create() {CVE-2022-50351} - drm/amd/display: populate subvp cmd info only for the top pipe {CVE-2023-53806} - netfilter: ctnetlink: fix refcount leak on table dump {CVE-2025-38721} - sfc: fix crash when reading stats while NIC is resetting {CVE-2023-54156} - Bluetooth: Fix race condition in hidp_session_thread {CVE-2023-54120} - bpf: Reject %p% format string in bprintf-like helpers {CVE-2025-38528} - RDMA/bnxt_re: Prevent handling any completions after qp destroy {CVE-2023-54048} - RDMA/siw: Fix immediate work request flush to completion queue {CVE-2022-50736} - net/packet: fix a race in packet_set_ring() and packet_notifier() {CVE-2025-38617} - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr {CVE-2025-38701} - IB/hfi1: Fix possible panic during hotplug remove {CVE-2023-53488} - cgroup: split cgroup_destroy_wq into 3 workqueues {CVE-2025-39953} - NFS: Fix the setting of capabilities when automounting a new filesystem {CVE-2025-39798} - fs: Prevent file descriptor table allocations exceeding INT_MAX {CVE-2025-39756} - ext4: remove a BUG_ON in ext4_mb_release_group_pa() {CVE-2023-53450} - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() {CVE-2025-39713} - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - wifi: mac80211: reject TDLS operations when station is not associated {CVE-2025-38644} - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() {CVE-2023-53271} - RDMA/bnxt_re: wraparound mbox producer index {CVE-2023-53201} - x86/iopl: Cure TIF_IO_BITMAP inconsistencies {CVE-2025-38100} - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() {CVE-2025-38706} - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated {CVE-2025-38700} - ALSA: hda: Fix Oops by 9.1 surround channel names {CVE-2023-53400} - mm: move page table sync declarations to linux/pgtable.h {CVE-2025-39844} - rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access {CVE-2023-53419} - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails {CVE-2023-53199} - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras {CVE-2025-38540} - scsi: ses: Don't attach if enclosure has no components {CVE-2023-53431} - ipv6/addrconf: fix a potential refcount underflow for idev {CVE-2023-53189} - wifi: ath11k: Fix SKB corruption in REO destination ring {CVE-2023-53315} - bpf: fix ktls panic with sockmap {CVE-2025-38166} - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime {CVE-2025-38470} - net: openvswitch: fix race on port output {CVE-2023-53188} - net_sched: Flush gso_skb list too during ->change() {CVE-2025-37992} - netfilter: x_tables: fix percpu counter block leak on error path when creating new netns {CVE-2023-53200} - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161} - af_unix: Fix data-race around unix_tot_inflight. {CVE-2023-54006} - watchdog: Fix kmemleak in watchdog_cdev_register {CVE-2023-53234} - usb: idmouse: fix an uninit-value in idmouse_open {CVE-2022-50733} - net: dcb: choose correct policy to parse DCB_ATTR_BCN {CVE-2023-53369} - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() {CVE-2022-50347} - Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889} - x86/apic: Don't disable x2APIC if locked {CVE-2022-50720} - serial: 8250: Reinit port->pm on port specific driver unbind {CVE-2023-53176} - devlink: hold region lock when flushing snapshots {CVE-2022-50712} - net: qrtr: Fix a refcount bug in qrtr_recvmsg() {CVE-2023-53445} - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list {CVE-2026-23084} - PM: EM: fix memory leak with using debugfs_lookup() {CVE-2023-53411} - vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check {CVE-2023-54031} - atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251} - ceph: fix potential use-after-free bug when trimming caps {CVE-2023-53867} - ACPI: video: check for error while searching for backlight device parent {CVE-2023-52693} - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL {CVE-2023-53246} - x86/xen: Fix memory leak in xen_init_lock_cpu() {CVE-2022-50761} - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping {CVE-2025-38126} - platform/x86: dell_rbu: Fix list usage {CVE-2025-38197} - x86/kexec: Fix double-free of elf header buffer {CVE-2023-54146} - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() {CVE-2025-38305} - KVM: Destroy target device if coalesced MMIO unregistration fails {CVE-2023-54024} - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table {CVE-2025-38319} - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() {CVE-2022-50771} - drm/radeon: Fix integer overflow in radeon_cs_parser_init {CVE-2023-53309} - net: atlantic: fix fragment overflow handling in RX path {CVE-2025-68301} - bpf: Fix oob access in cgroup local storage {CVE-2025-38502} - bpf: Add cookie object to bpf maps {CVE-2025-38502} - misc: vmw_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-53279} - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks {CVE-2025-38412} - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN {CVE-2025-38048} - tracing: Fix race issue between cpu buffer write and swap {CVE-2023-53368} - USB: wdm: close race between wdm_open and wdm_wwan_port_stop {CVE-2025-37985} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write {CVE-2023-53344} - wifi: ath11k: fix node corruption in ar->arvifs list {CVE-2025-38293} - x86/mm: Check return value from memblock_phys_alloc_range() {CVE-2025-38071} - net: Fix TOCTOU issue in sk_is_readable() {CVE-2025-38112} - scsi: mpi3mr: Fix an issue found by KASAN {CVE-2023-54011} - net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204} - net: add skb_header_pointer_careful() helper - scsi: qla2xxx: Array index may go out of bound {CVE-2023-54179} - net/mlx5e: fix memory leak in mlx5e_ptp_open {CVE-2023-54169} - igc: Fix Kernel Panic during ndo_tx_timeout callback {CVE-2023-54166} - Bluetooth: L2CAP: Fix potential user-after-free {CVE-2023-54214} - RDMA/restrack: Release MR restrack when delete {CVE-2022-50822} - RDMA/irdma: Fix memory leak of PBLE objects {CVE-2023-54055} - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup {CVE-2023-54275} - mptcp: stricter state check in mptcp_worker {CVE-2023-54176} - nfsd: provide locking for v4_end_grace {CVE-2026-22980} - iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089} - net: atlantic: add check for MAX_SKB_FRAGS {CVE-2025-68301} - net: atlantic: reduce scope of is_rsc_complete - atlantic: Fix buff_ring OOB in aq_ring_rx_clean - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies {CVE-2025-40096} - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe {CVE-2022-50777} - wifi: rt2x00: Fix memory leak when handling surveys {CVE-2023-54131} - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() {CVE-2022-50740} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure {CVE-2026-23144} - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() {CVE-2022-50423} - wifi: ath10k: fix dma_free_coherent() pointer {CVE-2026-23133} - bpf: Move bpf map owner out of common struct {CVE-2025-38502} - fs: Lock moved directories - fs: Establish locking order for unrelated directories - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800} - macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001} - HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207} - libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984} - ppp: fix memory leak in pad_compress_skb {CVE-2025-39847} - migrate: correct lock ordering for hugetlb file folios {CVE-2026-23097} - keys: Fix linking a duplicate key to a keyring's assoc_array {CVE-2023-54170} - scsi: qla4xxx: Add length check when parsing nlattrs {CVE-2023-53456} - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() {CVE-2023-53320} - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range {CVE-2023-54229} - wifi: iwlwifi: pcie: fix possible NULL pointer dereference {CVE-2023-54053} - dm flakey: don't corrupt the zero page {CVE-2023-54317} - md/raid10: fix memleak for 'conf->bio_split' {CVE-2023-54123} - crypto: qat - fix out-of-bounds read {CVE-2023-54325} - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP {CVE-2023-54263} - ipmi:ssif: Fix a memory leak when scanning for an adapter {CVE-2023-54064} - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" {CVE-2023-54197} - netfilter: nf_tables: always release netdev hooks from notifier {CVE-2023-54200} - wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO {CVE-2023-54029} - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` {CVE-2023-53719} - soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow {CVE-2023-54259} - vfio/type1: fix cap_migration information leak {CVE-2023-54137} - drm/client: Fix memory leak in drm_client_target_cloned {CVE-2023-54091} - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() {CVE-2025-39742} - crypto: ccp - Fix crash when rebind ccp device for ccp.ko {CVE-2025-38581} - iwlwifi: Add missing check for alloc_ordered_workqueue {CVE-2025-38602} - net: bridge: fix soft lockup in br_multicast_query_expired() {CVE-2025-39773} - net: drop UFO packets in udp_rcv_segment() {CVE-2025-38622} - iommu: Fix error unwind in iommu_group_alloc() {CVE-2023-53482} - qed: allow sleep in qed_mcp_trace_dump() {CVE-2023-53509} - cifs: Fix xid leak in cifs_flock() {CVE-2022-50460} - platform/x86: dell-sysman: Fix reference leak {CVE-2023-53631} - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure {CVE-2025-38695} - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls {CVE-2025-38608} - bpf: prevent decl_tag from being referenced in func_proto {CVE-2022-50862} - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock {CVE-2025-39736} - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() {CVE-2025-39737} - drm/amd/display: Fix potential null dereference {CVE-2023-53498} - x86/MCE/AMD: Use an u64 for bank_map {CVE-2023-53474} - kobject: Add sanity check for kset->kobj.ktype in kset_register() {CVE-2023-53480} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431} - crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431} - crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431} - crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431} - crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431} - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551} - bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099} - libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238} - ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892} - intel_th: msu: Fix vmalloced buffers {CVE-2022-50142} - vt: Clear selection before changing the font {CVE-2022-49948} - ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411} - usbnet: Run unregister_netdev() before unbind_all() {CVE-2022-50220} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - bpf: Propagate error from htab_lock_bucket() to userspace {CVE-2022-50490} - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} - module: fix [e_shstrndx].sh_size=0 OOB access {CVE-2022-49444} - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} - tracing: Fix potential double free in create_var_ref() {CVE-2022-49410} - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366} - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} - xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426} - svcrdma: bound check rq_pages index in inline path {CVE-2025-71068} - net: hns3: add VLAN id validation before using {CVE-2025-71112} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315} - i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900} - team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091} - staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - ftrace: Add cond_resched() to ftrace_graph_set_hash() {CVE-2025-37940} - net: stmmac: Fix accessing freed irq affinity_hint {CVE-2025-23155} - ext4: set goal start correctly in ext4_mb_normalize_request {CVE-2023-54021} - netfilter: ipset: fix region locking in hash types {CVE-2025-37997} - openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998} - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() {CVE-2025-37990} - nfs: handle failure of nfs_get_lock_context in unlock path {CVE-2025-38023} - drm/amd/pm: Prevent division by zero {CVE-2025-37767} - netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764} - tracing: Fix null pointer dereference in tracing_err_log_open() {CVE-2023-53167} - ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386} - scsi: qla2xxx: Pointer may be dereferenced {CVE-2023-53150} - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() {CVE-2025-38061} - dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066} - libnvdimm/labels: Fix divide error in nd_label_data_init() {CVE-2025-38072} - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() {CVE-2023-53251} - tracing: Free error logs of tracing instances {CVE-2023-53375} - perf: Revert to requiring CAP_SYS_ADMIN for uprobes {CVE-2025-38466} - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO {CVE-2025-38122} - dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095} - x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334} - ext4: inline: fix len overflow in ext4_prepare_inline_data {CVE-2025-38222} - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38214} - sctp: initialize more fields in sctp_v6_from_sk() {CVE-2025-39812} - atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190} - usb: net: sierra: check for no status endpoint {CVE-2025-38474} - vxlan: Annotate FDB data races {CVE-2025-38037} - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184} - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181} - net_sched: sch_sfq: fix a potential crash on gso_skb handling {CVE-2025-38115} - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert {CVE-2025-38387} - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337} - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324} - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() {CVE-2025-38312} - usb: typec: altmodes/displayport: do not index invalid pin_assignments {CVE-2025-38391} - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request {CVE-2025-38430} - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() {CVE-2022-50829} - wifi: mt76: disable napi on driver removal {CVE-2025-38009} - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump {CVE-2025-39813} - net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - RDMA/irdma: avoid invalid read in irdma_net_event {CVE-2025-71133} - scsi: qla4xxx: Prevent a potential error pointer dereference {CVE-2025-39676} - ppp: fix race conditions in ppp_fill_forward_path {CVE-2025-39673} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990} - thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174} - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT {CVE-2025-38439} - ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345} - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460} - dm: fix unconditional IO throttle caused by REQ_PREFLUSH {CVE-2025-38063} - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs {CVE-2023-53391} - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231} - udf: Do not update file length for failed writes to inline files {CVE-2023-53295} - bpf: Fix WARN() in get_bpf_raw_tp_regs {CVE-2025-38285} - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree {CVE-2025-38468} - nvmet-tcp: don't restore null sk_state_change {CVE-2025-38035} - wifi: iwlwifi: mvm: fix double free on tx path. {CVE-2022-50248} - ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344} - bonding: fix use-after-free due to enslave fail after slave array update {CVE-2026-23171} - macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209} - cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() {CVE-2023-53479} - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967} - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} - rename(): fix the locking of subdirectories - scsi: qedi: Fix use after free bug in qedi_remove() {CVE-2023-54100} - ixgbe: Fix panic during XDP_TX with > 64 CPUs {CVE-2023-54090} - bpf: Do not let BPF test infra emit invalid GSO types to stack {CVE-2025-68725} - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154} - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() {CVE-2023-54014} - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() {CVE-2022-50699} - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() {CVE-2025-39808} - PCI: Fix dropping valid root bus resources with .end = zero {CVE-2023-53814} - KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state {CVE-2023-53208} - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini {CVE-2023-53193} - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() {CVE-2025-39795} - libceph: return the handler error from mon_handle_auth_done() {CVE-2026-22992} - Bluetooth: Fix hci_suspend_sync crash {CVE-2023-53520} - jbd2: prevent softlockup in jbd2_log_do_checkpoint() {CVE-2025-39782} - net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977} - wifi: ath11k: clear initialized flag for deinit-ed srng lists {CVE-2025-38601} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060} - libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991} - soundwire: fix enumeration completion {CVE-2023-54096} - ext4: fix inode leak in ext4_xattr_inode_create() on an error path {CVE-2022-50845} - ring-buffer: Handle race between rb_move_tail and rb_check_pages {CVE-2023-53709} - netlink: fix potential deadlock in netlink_set_err() {CVE-2023-53731} - xhci: dbc: Fix memory leak in xhci_alloc_dbc() {CVE-2022-50809} - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline {CVE-2022-50286} - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed {CVE-2023-53481} - driver core: location: Free struct acpi_pld_info *pld before return false {CVE-2023-53211} - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() {CVE-2025-39845} - dma-buf/dma-resv: Stop leaking on krealloc() failure {CVE-2023-53181} - rxrpc: Fix oops due to non-existence of prealloc backlog struct {CVE-2025-38514} - xfrm: Zero padding when dumping algos and encap {CVE-2023-53684} - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer {CVE-2023-53648} - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF {CVE-2023-53747} - ice: fix wrong fallback logic for FDIR {CVE-2023-54040} - cifs: Fix xid leak in cifs_create() {CVE-2022-50351} - drm/amd/display: populate subvp cmd info only for the top pipe {CVE-2023-53806} - netfilter: ctnetlink: fix refcount leak on table dump {CVE-2025-38721} - sfc: fix crash when reading stats while NIC is resetting {CVE-2023-54156} - Bluetooth: Fix race condition in hidp_session_thread {CVE-2023-54120} - bpf: Reject %p% format string in bprintf-like helpers {CVE-2025-38528} - RDMA/bnxt_re: Prevent handling any completions after qp destroy {CVE-2023-54048} - RDMA/siw: Fix immediate work request flush to completion queue {CVE-2022-50736} - net/packet: fix a race in packet_set_ring() and packet_notifier() {CVE-2025-38617} - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr {CVE-2025-38701} - IB/hfi1: Fix possible panic during hotplug remove {CVE-2023-53488} - cgroup: split cgroup_destroy_wq into 3 workqueues {CVE-2025-39953} - NFS: Fix the setting of capabilities when automounting a new filesystem {CVE-2025-39798} - fs: Prevent file descriptor table allocations exceeding INT_MAX {CVE-2025-39756} - ext4: remove a BUG_ON in ext4_mb_release_group_pa() {CVE-2023-53450} - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() {CVE-2025-39713} - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - wifi: mac80211: reject TDLS operations when station is not associated {CVE-2025-38644} - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() {CVE-2023-53271} - RDMA/bnxt_re: wraparound mbox producer index {CVE-2023-53201} - x86/iopl: Cure TIF_IO_BITMAP inconsistencies {CVE-2025-38100} - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() {CVE-2025-38706} - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated {CVE-2025-38700} - ALSA: hda: Fix Oops by 9.1 surround channel names {CVE-2023-53400} - mm: move page table sync declarations to linux/pgtable.h {CVE-2025-39844} - rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access {CVE-2023-53419} - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails {CVE-2023-53199} - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras {CVE-2025-38540} - scsi: ses: Don't attach if enclosure has no components {CVE-2023-53431} - ipv6/addrconf: fix a potential refcount underflow for idev {CVE-2023-53189} - wifi: ath11k: Fix SKB corruption in REO destination ring {CVE-2023-53315} - bpf: fix ktls panic with sockmap {CVE-2025-38166} - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime {CVE-2025-38470} - net: openvswitch: fix race on port output {CVE-2023-53188} - net_sched: Flush gso_skb list too during ->change() {CVE-2025-37992} - netfilter: x_tables: fix percpu counter block leak on error path when creating new netns {CVE-2023-53200} - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161} - af_unix: Fix data-race around unix_tot_inflight. {CVE-2023-54006} - watchdog: Fix kmemleak in watchdog_cdev_register {CVE-2023-53234} - usb: idmouse: fix an uninit-value in idmouse_open {CVE-2022-50733} - net: dcb: choose correct policy to parse DCB_ATTR_BCN {CVE-2023-53369} - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() {CVE-2022-50347} - Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889} - x86/apic: Don't disable x2APIC if locked {CVE-2022-50720} - serial: 8250: Reinit port->pm on port specific driver unbind {CVE-2023-53176} - devlink: hold region lock when flushing snapshots {CVE-2022-50712} - net: qrtr: Fix a refcount bug in qrtr_recvmsg() {CVE-2023-53445} - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list {CVE-2026-23084} - PM: EM: fix memory leak with using debugfs_lookup() {CVE-2023-53411} - vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check {CVE-2023-54031} - atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251} - ceph: fix potential use-after-free bug when trimming caps {CVE-2023-53867} - ACPI: video: check for error while searching for backlight device parent {CVE-2023-52693} - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL {CVE-2023-53246} - x86/xen: Fix memory leak in xen_init_lock_cpu() {CVE-2022-50761} - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping {CVE-2025-38126} - platform/x86: dell_rbu: Fix list usage {CVE-2025-38197} - x86/kexec: Fix double-free of elf header buffer {CVE-2023-54146} - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() {CVE-2025-38305} - KVM: Destroy target device if coalesced MMIO unregistration fails {CVE-2023-54024} - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table {CVE-2025-38319} - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() {CVE-2022-50771} - drm/radeon: Fix integer overflow in radeon_cs_parser_init {CVE-2023-53309} - net: atlantic: fix fragment overflow handling in RX path {CVE-2025-68301} - bpf: Fix oob access in cgroup local storage {CVE-2025-38502} - bpf: Add cookie object to bpf maps {CVE-2025-38502} - misc: vmw_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-53279} - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks {CVE-2025-38412} - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN {CVE-2025-38048} - tracing: Fix race issue between cpu buffer write and swap {CVE-2023-53368} - USB: wdm: close race between wdm_open and wdm_wwan_port_stop {CVE-2025-37985} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write {CVE-2023-53344} - wifi: ath11k: fix node corruption in ar->arvifs list {CVE-2025-38293} - x86/mm: Check return value from memblock_phys_alloc_range() {CVE-2025-38071} - net: Fix TOCTOU issue in sk_is_readable() {CVE-2025-38112} - scsi: mpi3mr: Fix an issue found by KASAN {CVE-2023-54011} - net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204} - net: add skb_header_pointer_careful() helper - scsi: qla2xxx: Array index may go out of bound {CVE-2023-54179} - net/mlx5e: fix memory leak in mlx5e_ptp_open {CVE-2023-54169} - igc: Fix Kernel Panic during ndo_tx_timeout callback {CVE-2023-54166} - Bluetooth: L2CAP: Fix potential user-after-free {CVE-2023-54214} - RDMA/restrack: Release MR restrack when delete {CVE-2022-50822} - RDMA/irdma: Fix memory leak of PBLE objects {CVE-2023-54055} - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup {CVE-2023-54275} - mptcp: stricter state check in mptcp_worker {CVE-2023-54176} - nfsd: provide locking for v4_end_grace {CVE-2026-22980} - iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089} - net: atlantic: add check for MAX_SKB_FRAGS {CVE-2025-68301} - net: atlantic: reduce scope of is_rsc_complete - atlantic: Fix buff_ring OOB in aq_ring_rx_clean - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies {CVE-2025-40096} - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe {CVE-2022-50777} - wifi: rt2x00: Fix memory leak when handling surveys {CVE-2023-54131} - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() {CVE-2022-50740} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure {CVE-2026-23144} - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() {CVE-2022-50423} - wifi: ath10k: fix dma_free_coherent() pointer {CVE-2026-23133} - bpf: Move bpf map owner out of common struct {CVE-2025-38502} - fs: Lock moved directories - fs: Establish locking order for unrelated directories - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800} - macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001} - HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207} - libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984} - ppp: fix memory leak in pad_compress_skb {CVE-2025-39847} - migrate: correct lock ordering for hugetlb file folios {CVE-2026-23097} - keys: Fix linking a duplicate key to a keyring's assoc_array {CVE-2023-54170} - scsi: qla4xxx: Add length check when parsing nlattrs {CVE-2023-53456} - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() {CVE-2023-53320} - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range {CVE-2023-54229} - wifi: iwlwifi: pcie: fix possible NULL pointer dereference {CVE-2023-54053} - dm flakey: don't corrupt the zero page {CVE-2023-54317} - md/raid10: fix memleak for 'conf->bio_split' {CVE-2023-54123} - crypto: qat - fix out-of-bounds read {CVE-2023-54325} - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP {CVE-2023-54263} - ipmi:ssif: Fix a memory leak when scanning for an adapter {CVE-2023-54064} - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" {CVE-2023-54197} - netfilter: nf_tables: always release netdev hooks from notifier {CVE-2023-54200} - wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO {CVE-2023-54029} - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` {CVE-2023-53719} - soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow {CVE-2023-54259} - vfio/type1: fix cap_migration information leak {CVE-2023-54137} - drm/client: Fix memory leak in drm_client_target_cloned {CVE-2023-54091} - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() {CVE-2025-39742} - crypto: ccp - Fix crash when rebind ccp device for ccp.ko {CVE-2025-38581} - iwlwifi: Add missing check for alloc_ordered_workqueue {CVE-2025-38602} - net: bridge: fix soft lockup in br_multicast_query_expired() {CVE-2025-39773} - net: drop UFO packets in udp_rcv_segment() {CVE-2025-38622} - iommu: Fix error unwind in iommu_group_alloc() {CVE-2023-53482} - qed: allow sleep in qed_mcp_trace_dump() {CVE-2023-53509} - cifs: Fix xid leak in cifs_flock() {CVE-2022-50460} - platform/x86: dell-sysman: Fix reference leak {CVE-2023-53631} - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure {CVE-2025-38695} - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls {CVE-2025-38608} - bpf: prevent decl_tag from being referenced in func_proto {CVE-2022-50862} - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock {CVE-2025-39736} - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() {CVE-2025-39737} - drm/amd/display: Fix potential null dereference {CVE-2023-53498} - x86/MCE/AMD: Use an u64 for bank_map {CVE-2023-53474} - kobject: Add sanity check for kset->kobj.ktype in kset_register() {CVE-2023-53480}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm b60532f77942950497900c33594353d26ebdbff5210909b097412fc3ad4db497 kernel-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm a9449b828b6f6faf951c5c32eeda1fc1437944e5f879aa8455410a8318dac61f kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els30.noarch.rpm 1acb0fb7762942a441fc4b52eb56546186c7da876ad4412fcc43da014564aedb kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm d86850147f5f4af5391df090f5e561c2d01d3591c31ce1836b059ac357961aac kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm e48b431166432baea38b005b7efaa66d44cc664ca1a84d395164d4c039e1f649 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm d4abf4c5527e8b719e41f32166fea8e695cc7caffdc725f4afc48eafc75b70d6 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 00e38aee760f887ccb1e4977798342529440a1c3ef9253ba34ef832b562eafd0 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 6c75935fe2ff90f082fe94c346a93fa1a6b0b4dd8da89c4c8dcb19a3b360944e kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 31142acc77b10ec91c508317e913176e649f43f43867de4af53a7cbaed4a49ac kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm edf6ea7ede8324e78c52896adfc0e4ecb8c6603ceaf9b67d9d2eddceb66cb137 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm c542d44f6816e8edddd33ffc8a5883eaeaade5938d7799fad422226d65821370 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 2ca8b6f5ed8fa84ce63e2b726efc01a85df8b9419f34b078cc9d537d5f33a4f8 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 1e8d0a57cd542faeb257f52bd27c06858d0d8a04cd67adbb355de889c4666434 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 98e80140cbd65a0cf371e8d6319308e1de1ac0a34be42bfa0b4e233caa722ff5 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 762d94137408e9f75c1099b4cb3dfe33f1801394de3fa591715151a9256233dd kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 710a7d60372cbf47aadfc45a12a378b4a2ca2e1bb5267984bee8e1623026526f kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm f051d3e8fe8a7370723161c433672dd37319b7c83c7baf0d2e5d4b9e0b4bd812 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els30.noarch.rpm 6a1ffeb84e1e957c79a0ba92612949b2ae683d4f2d5fd71b3a46e6c2f98430a0 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 8bacf76904d5aa12cdf2fe2fe2e525099d9c317833a7557b7d066026b257cf7e kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 0a1bd2a112bef5b551093a2d435f1d84a2efcfaa4353039a79a403cacbc2f22e kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm cc2e1776f9f2154cefcead5bb3ff5f2c3d728ad482f02211924104ace8d28718 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm d3dccc28c56cb5e6da73bc15bd03b8c6b4610f495953d22df5a62f46b6a331fb kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm eb8d9b41743594266ac68cecaeae2a6910698124fe330a9d36d8a4e829be99bc kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 6b83978b59bb0b9048b234b49903cb1c4f2b1f39aa386fbc4a9e3228644519c6 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 3452a3fe12941d41ea78d050a8275d9f88b53be8800687bd37a3262ba501590a kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 2b36d97392c710f38552ef3c34ab212cf792e2c875daa7116cb6d8ca9104c7cd kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm a812e1833208f0b5ef40c8dd13acf3977be3c38cef91b8e23c27a82e7b05e49b kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 7b2a016125f868b9ef14c26b18938a7a795020c160be38c057cee99e2994dad8 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm f8c7b6fab3ed2ec1b7ba0f7790d66d04b8a0f0f22d8a40eb27fcaa2e261894cd kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 65e1849403a8144cea4593130f6dc6e22e455b6b208e7e23e47a8a3014f61d6f libbpf-1.0.0-2.el9_2.tuxcare.7.els30.i686.rpm 3d3846bb9eb0d0259f7fa036f890acfa92c24adf2c613049c27e121ec95ed0e0 libbpf-1.0.0-2.el9_2.tuxcare.7.els30.x86_64.rpm eacd91591f6f3ceeada3994df84954a2d317f295a68dfa4dfd2c9c9899010151 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els30.i686.rpm fd787f6fe8a48a76469636c0abb82759807b68919481a5916f7da0882cd5c586 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els30.x86_64.rpm 813b8ea9d36d9447a1afab037692b083083727a94a6097e8b20d180a089172b5 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els30.i686.rpm b454fd93dd370228dd35ef2bcc6a6490a8a8d735835f2f6c1ea457baf7e9d074 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els30.x86_64.rpm bc1786938b9c5a73aa65ec318fb7ebcf09c7f86e387a78c8aac3329e5efdb685 perf-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 4ddbbff5293fe31f6231302a90ac20cc7f3ce5340702cc72f7cdf9373a625b82 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm 1c331d59ddfa125b72402a5c1183745d95848c5bcd6853d353f2995657d438c2 rtla-5.14.0-284.1101.el9_2.tuxcare.7.els30.x86_64.rpm c3c50432be91fab0c2964d1deebbfc8beb9cc86197d923bb0b5b1a9e34e05547 CLSA-2026:1783362244 TuxCare License Agreement 0 - KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113} - Bluetooth: bcsp: receive data only if registered {CVE-2025-40308} - xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788} - xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788} - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429} - net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708} - net: usb: kaweth: validate USB endpoints {CVE-2026-23312} - net: usb: kalmia: validate USB endpoints {CVE-2026-23365} - net: usb: pegasus: validate USB endpoints {CVE-2026-23290} - net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156} - USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429} - USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399} - tpm: Cap the number of PCR banks {CVE-2025-71077} - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704} - dm: fix a race condition in retrieve_deps {CVE-2023-54324} - ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127} - mlx5: fix skb leak while fifo resync and push {CVE-2023-54238} - mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251} - bonding: annotate data-races around slave->last_rx {CVE-2026-23212} - RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302} - bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441} - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215} - trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829} - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850} - team: prevent adding a device which is already a team device lower {CVE-2024-58071} - net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594} - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108} - rxrpc: Fix handling of received connection abort {CVE-2024-58053} - bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911} - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690} - net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680} - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713} - drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905} - dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134} - smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709} - PM: runtime: Fix a race condition related to device removal {CVE-2026-23452} - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436} - nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448} - sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062} - cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870} - mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136} - memcg: fix soft lockup in the OOM process {CVE-2024-57977} - resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878} - r8169: add tally counter fields added with RTL8125 {CVE-2024-49973} - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215} - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066} - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273} - net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606} - extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308} - tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675} - bridge: switchdev: Fix memory leaks when changing VLAN protocol {CVE-2022-49812} - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() {CVE-2022-49890} - net: genl: fix error path memory leak in policy dumping {CVE-2022-50042} - kprobes: don't call disarm_kprobe() for disabled kprobes {CVE-2022-50008} - lib/fonts: fix undefined behavior in bit shift for get_default_font {CVE-2022-50511} - net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088} - arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored {CVE-2022-50675} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478} - efivarfs: force RO when remounting if SetVariable is not supported {CVE-2023-52463} - Fix page corruption caused by racy check in __free_pages {CVE-2023-52739} - mptcp: deal with large GSO size {CVE-2023-52778} - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new {CVE-2023-52887} - drm/i915/active: Fix misuse of non-idle barriers as fence trackers {CVE-2023-53087} - ext4: fix task hung in ext4_xattr_delete_inode {CVE-2023-53089} - ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent {CVE-2023-53070} - bnxt_en: Avoid order-5 memory allocation for TPA data {CVE-2023-53134} - tcp: tcp_make_synack() can be called from process context {CVE-2023-53121} - i40e: Fix kernel crash during reboot when adapter is in recovery mode {CVE-2023-53114} - skbuff: Fix a race between coalescing and releasing SKBs {CVE-2023-53186} - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() {CVE-2023-53421} - arm64: mm: fix VA-range sanity check {CVE-2023-53989} - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() {CVE-2024-26633} - SUNRPC: double free xprt_ctxt while still in use {CVE-2023-54269} - KVM: Always flush async #PF workqueue when vCPU is being destroyed {CVE-2024-26976} - drm/amdgpu: validate the parameters of bo mapping operations more clearly {CVE-2024-26922} - tracing/trigger: Fix to return error if failed to alloc snapshot {CVE-2024-26920} - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). {CVE-2024-36933} - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056} - scsi: qla2xxx: During vport delete send async logout explicitly {CVE-2024-42289} - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() {CVE-2022-49731} - ixgbevf: Fix resource leak in ixgbevf_init_module() {CVE-2022-49028} - mmc: core: Avoid bitfield RMW for claim/retune flags {CVE-2026-43484} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() {CVE-2026-45835} - cpufreq: Init completion before kobject_init_and_add() {CVE-2022-50473} - USB: gadget: Fix use-after-free during usb config switch {CVE-2022-50704} - IB/mad: Don't call to function that might sleep while in atomic context {CVE-2022-50472} - null_blk: fix poll request timeout handling {CVE-2023-53531} - drm/i915/gvt: fix vgpu debugfs clean in remove {CVE-2023-53625} - mlxsw: spectrum_acl_erp: Fix object nesting warning {CVE-2024-43880} - drm/drm_vma_manager: Add drm_vma_node_allow_once() {CVE-2023-53001} - drm/amd/display: fix mapping to non-allocated address {CVE-2023-53753} - ipv6: Fix an uninit variable access bug in __ip6_make_skb() {CVE-2023-54265} - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). {CVE-2023-54004} - netlink: terminate outstanding dump on socket close {CVE-2024-53140} - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN {CVE-2024-53135} - scsi: qla2xxx: Fix use after free on unload {CVE-2024-56623} - net: Fix icmp host relookup triggering ip_rt_bug {CVE-2024-56647} - spi: spi-imx: Add check for spi_imx_setupxfer() {CVE-2025-37801} - netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126} - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop {CVE-2026-23300} - ethtool: check device is present when getting link settings {CVE-2024-46679} - nfsd: return -EINVAL when namelen is 0 {CVE-2024-47692} - x86/ioapic: Handle allocation failures gracefully {CVE-2024-49927} - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error {CVE-2024-49959} - secretmem: disable memfd_secret() if arch cannot set direct map {CVE-2024-50182} - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures {CVE-2024-53190} - iommu/arm-smmu: Defer probe of clients after smmu device bound {CVE-2024-56568} - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers {CVE-2025-21885} - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs {CVE-2025-37805} - page_pool: avoid infinite loop to schedule delayed worker {CVE-2025-37859} - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() {CVE-2025-38441} - tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539} - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681} - ipv6: add NULL checks for idev in SRv6 paths {CVE-2026-23442} - sunrpc: fix cache_request leak in cache_release {CVE-2026-31400} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP {CVE-2026-31424} - netfilter: xt_multiport: validate range encoding in checkentry {CVE-2026-31681} - net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684} - vxlan: validate ND option lengths in vxlan_na_create {CVE-2026-31738} - gfs2: fiemap page fault fix {CVE-2026-43262} - e1000/e1000e: Fix leak in DMA error cleanup {CVE-2026-43445} - ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113} - Bluetooth: bcsp: receive data only if registered {CVE-2025-40308} - xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788} - xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788} - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429} - net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708} - net: usb: kaweth: validate USB endpoints {CVE-2026-23312} - net: usb: kalmia: validate USB endpoints {CVE-2026-23365} - net: usb: pegasus: validate USB endpoints {CVE-2026-23290} - net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156} - USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429} - USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399} - tpm: Cap the number of PCR banks {CVE-2025-71077} - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704} - dm: fix a race condition in retrieve_deps {CVE-2023-54324} - ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127} - mlx5: fix skb leak while fifo resync and push {CVE-2023-54238} - mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251} - bonding: annotate data-races around slave->last_rx {CVE-2026-23212} - RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302} - bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441} - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215} - trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829} - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850} - team: prevent adding a device which is already a team device lower {CVE-2024-58071} - net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594} - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108} - rxrpc: Fix handling of received connection abort {CVE-2024-58053} - bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911} - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690} - net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680} - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713} - drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905} - dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134} - smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709} - PM: runtime: Fix a race condition related to device removal {CVE-2026-23452} - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436} - nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448} - sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062} - cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870} - mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136} - memcg: fix soft lockup in the OOM process {CVE-2024-57977} - resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878} - r8169: add tally counter fields added with RTL8125 {CVE-2024-49973} - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215} - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066} - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273} - net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606} - extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308} - tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675} - bridge: switchdev: Fix memory leaks when changing VLAN protocol {CVE-2022-49812} - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() {CVE-2022-49890} - net: genl: fix error path memory leak in policy dumping {CVE-2022-50042} - kprobes: don't call disarm_kprobe() for disabled kprobes {CVE-2022-50008} - lib/fonts: fix undefined behavior in bit shift for get_default_font {CVE-2022-50511} - net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088} - arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored {CVE-2022-50675} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478} - efivarfs: force RO when remounting if SetVariable is not supported {CVE-2023-52463} - Fix page corruption caused by racy check in __free_pages {CVE-2023-52739} - mptcp: deal with large GSO size {CVE-2023-52778} - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new {CVE-2023-52887} - drm/i915/active: Fix misuse of non-idle barriers as fence trackers {CVE-2023-53087} - ext4: fix task hung in ext4_xattr_delete_inode {CVE-2023-53089} - ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent {CVE-2023-53070} - bnxt_en: Avoid order-5 memory allocation for TPA data {CVE-2023-53134} - tcp: tcp_make_synack() can be called from process context {CVE-2023-53121} - i40e: Fix kernel crash during reboot when adapter is in recovery mode {CVE-2023-53114} - skbuff: Fix a race between coalescing and releasing SKBs {CVE-2023-53186} - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() {CVE-2023-53421} - arm64: mm: fix VA-range sanity check {CVE-2023-53989} - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() {CVE-2024-26633} - SUNRPC: double free xprt_ctxt while still in use {CVE-2023-54269} - KVM: Always flush async #PF workqueue when vCPU is being destroyed {CVE-2024-26976} - drm/amdgpu: validate the parameters of bo mapping operations more clearly {CVE-2024-26922} - tracing/trigger: Fix to return error if failed to alloc snapshot {CVE-2024-26920} - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). {CVE-2024-36933} - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056} - scsi: qla2xxx: During vport delete send async logout explicitly {CVE-2024-42289} - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() {CVE-2022-49731} - ixgbevf: Fix resource leak in ixgbevf_init_module() {CVE-2022-49028} - mmc: core: Avoid bitfield RMW for claim/retune flags {CVE-2026-43484} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() {CVE-2026-45835} - cpufreq: Init completion before kobject_init_and_add() {CVE-2022-50473} - USB: gadget: Fix use-after-free during usb config switch {CVE-2022-50704} - IB/mad: Don't call to function that might sleep while in atomic context {CVE-2022-50472} - null_blk: fix poll request timeout handling {CVE-2023-53531} - drm/i915/gvt: fix vgpu debugfs clean in remove {CVE-2023-53625} - mlxsw: spectrum_acl_erp: Fix object nesting warning {CVE-2024-43880} - drm/drm_vma_manager: Add drm_vma_node_allow_once() {CVE-2023-53001} - drm/amd/display: fix mapping to non-allocated address {CVE-2023-53753} - ipv6: Fix an uninit variable access bug in __ip6_make_skb() {CVE-2023-54265} - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). {CVE-2023-54004} - netlink: terminate outstanding dump on socket close {CVE-2024-53140} - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN {CVE-2024-53135} - scsi: qla2xxx: Fix use after free on unload {CVE-2024-56623} - net: Fix icmp host relookup triggering ip_rt_bug {CVE-2024-56647} - spi: spi-imx: Add check for spi_imx_setupxfer() {CVE-2025-37801} - netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126} - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop {CVE-2026-23300} - ethtool: check device is present when getting link settings {CVE-2024-46679} - nfsd: return -EINVAL when namelen is 0 {CVE-2024-47692} - x86/ioapic: Handle allocation failures gracefully {CVE-2024-49927} - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error {CVE-2024-49959} - secretmem: disable memfd_secret() if arch cannot set direct map {CVE-2024-50182} - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures {CVE-2024-53190} - iommu/arm-smmu: Defer probe of clients after smmu device bound {CVE-2024-56568} - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers {CVE-2025-21885} - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs {CVE-2025-37805} - page_pool: avoid infinite loop to schedule delayed worker {CVE-2025-37859} - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() {CVE-2025-38441} - tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539} - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681} - ipv6: add NULL checks for idev in SRv6 paths {CVE-2026-23442} - sunrpc: fix cache_request leak in cache_release {CVE-2026-31400} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP {CVE-2026-31424} - netfilter: xt_multiport: validate range encoding in checkentry {CVE-2026-31681} - net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684} - vxlan: validate ND option lengths in vxlan_na_create {CVE-2026-31738} - gfs2: fiemap page fault fix {CVE-2026-43262} - e1000/e1000e: Fix leak in DMA error cleanup {CVE-2026-43445} - ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 716f93cc611493f68bcc951bf74e286016a5818196e7cd27e5ad5a21131731f9 kernel-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm c5d1e18905fdfef844a9597f98196657532b96f9f7980e27dfb6e7069580eb8e kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els7.noarch.rpm 81c36c8ce723a00dfca6656b6f86bb4656b9262bb93ebd2c78120cad7e491668 kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm e7836e812d602b00b403297704d80b13de931da44adb186847c53ecb75f5ef34 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 1b889e11e2dde1636ce5c0872be9b5d669f39ba547a6d42dbe50d4fec978adbd kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm d13abd016c9d8bbec8380627523a034b0f7b8376b32b87f41b483fa9ca7fe818 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 3188ab159fd6b7c4162fcfcccdba72db10daabef59ddd4e554a8cbe1f17a58f9 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm c934a4f2a0d0782d0cd953f73990c53580d274c4b8ec2a623c695875dfef9759 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm ca2b761c3b40c87b83ac56db3de6e8fda86772e3cadf62c1445cd98f946e8a18 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 3a79c38d0facad77c7859f3a844a9416e9591aeac2882a82e229ca7d91810a98 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm f78ad56fc88f16360c88a4bb750383247cd25a4c2482b2da7093f6be3e692198 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 2a9fb554a53e52f07ca398117574dedbcb7ffb0ab2156ce6cb8f5eb76265a535 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 625ce42eb146578c48e42a7058ecc9c5671a97115701d1cd54eb9cd75b42c6d9 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 5875d27c6f1876e3364efcdd17f6fc370e676993480304d4992af12a32d38abf kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 2564e911c0cec5b86388d776a073d3012a2a672f19dda32bc25082669c85bc8f kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm fd0814b010bbf9430d4d0d139836d17acb573137bdf39f91746f176b894747e2 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 40e9a471352d2b32a14fdeb458a5a9c57e359402242682196ab53ba23441e2e0 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els7.noarch.rpm 11ab01aed4b8005491a320490805eef32d232765aef6ee0b676b5de868b28a7c kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm e9fcb8289424292c8487343008625567dfd466dad478b5828a3b8ada8da095fe kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 4e290bad8e69ff7eefa231a298b4f609544d618b4259130fa8bcd666dc8ef5da kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm c6afd106c83fcdad3678e7cd986c87df495fc097d337b6bd1315eb05f6782a43 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm b0a16cff20981e838d26f4e4b8db42a1f04f23d5219411b807901526315bdce0 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm edef3dbf85fa4e2f3fc040acaf49390a87c7ce52c563d583ab341e1c85073e14 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 8b98eef78529e70632b6c4b0d8972a2f606b40adc95c003dc69b4998b0b117bf kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 0b7f5393bb56248b2ce7e5a73d42b0d9e86153d8af9c90251258a6831858132a kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm cccc11b71a5d33e4cc18d9e5c583ab2a07cf4021d263264ec5b9f84640a4dda0 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 523bf5c05f5dc37b0eaa4e0a820706251515c0005e37563a89bfbec9a8f8c3fc kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm cf7ec60f4061b1f8c72099c5695f50383c4c7296d12ac33a1289da4e927e9ba9 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 26b26a0eb2b7bd6c3cdaad151a8afcf6e559129dad1b9f95f62e62d095b7d870 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm fb90a601c056f6d11750b339f5ad8f0a4714fcbdccc98e87c4c7c90ba28854f0 libbpf-1.0.0-2.el9_2.tuxcare.11.els7.i686.rpm 3158b6b415e4c9af3f442178e18c7f2698df9b3db41117ac3f6a9eacca8b3363 libbpf-1.0.0-2.el9_2.tuxcare.11.els7.x86_64.rpm 2d183386ef0aadb6352c1d7aa6cbb0d9aef837768a7c5756494a0c2c7e8b31f5 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els7.i686.rpm 4edfb484c37b474f1b17d5011ceb9c48037234b2bd2cc765d30cb275188d74eb libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els7.x86_64.rpm 0d68011b7b2234a6340123bc4c74d9427f73e8bb2164dad5676757221f18557d libbpf-static-1.0.0-2.el9_2.tuxcare.11.els7.i686.rpm 9d65b3e7b2867ff7b9ec8aef948488638ad8e9faa8e84fd6feee459dbe39aa21 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els7.x86_64.rpm 03df7436e51af466ec670dc749cf473ad7c8dcc660703f73114751b57cb1aa0c perf-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm d32954857bb92859dc81a6079afe839f576145a55838f05ba95c4ec234ffe367 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 94866c04bdb2a45bf342c25389c75fdca977d35ed9004141950d4aaaa139d5de rtla-5.14.0-284.1101.el9_2.tuxcare.11.els7.x86_64.rpm 5d19cd393e5f7b32cf1f29649b7e50105705e8242822543408ae5e0e4edc17e4 CLSA-2026:1780516677 TuxCare License Agreement 0 - atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050} - ALSA: usb-audio: Use the right limit for PCM OOB check - ALSA: usb-audio: Prevent excessive number of frames {CVE-2026-23208} - xen/privcmd: fix double free via VMA splitting {CVE-2026-31787} - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path {CVE-2026-43328} - cpufreq: governor: Free dbs_data directly when gov->init() fails {CVE-2026-43328} - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu: Fix racy re-initialization of irq_work causing hangs - RDMA/efa: Fix possible deadlock {CVE-2026-31493} - RDMA/efa: Fix use of completion ctx after free {CVE-2026-31493} - RDMA/efa: Improve admin completion context state machine {CVE-2026-31493} - RDMA/efa: Check stored completion CTX command ID with received one {CVE-2026-31493} - RDMA/efa: Extend admin timeout error print - RDMA/efa: Properly handle unexpected AQ completions {CVE-2026-31493} - rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported {CVE-2025-22075} - kernel/printk/index.c: fix memory leak with using debugfs_lookup() {CVE-2023-53402} - wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096} - md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() {CVE-2023-53210} - exfat: fix the infinite loop in exfat_readdir() {CVE-2024-57940} - af_netlink: Fix shift out of bounds in group mask calculation {CVE-2022-49197} - xfrm_user: fix info leak in build_mapping() {CVE-2026-43089} - udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946} - efi: Do not import certificates from UEFI Secure Boot for T2 Macs {CVE-2022-49357} - kernel/resource: fix kfree() of bootmem memory again {CVE-2022-49190} - smb: client: fix warning in cifs_smb3_do_mount() {CVE-2023-53230} - sctp: Fix null-ptr-deref in reuseport_add_sock(). {CVE-2024-44935} - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages {CVE-2024-50208} - drm/amdgpu: avoid using null object of framebuffer {CVE-2024-41093} - firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238} - ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738} - net: hinic: fix memory leak when reading function table {CVE-2022-50438} - device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() {CVE-2022-49752} - libceph: fix race between delayed_work() and ceph_monc_stop() {CVE-2024-42232} - usbnet: fix memory leak in error case {CVE-2022-49657} - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU {CVE-2025-71111} - seccomp: Move copy_seccomp() to no failure path. {CVE-2022-50661} - net/mlx5: fs, lock FTE when checking if active {CVE-2024-53121} - nvme-pci: fix freeing of the HMB descriptor table {CVE-2024-56756} - leds: class: Protect brightness_show() with led_cdev->led_access mutex {CVE-2024-56587} - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener {CVE-2023-52986} - RDMA/uverbs: Prevent integer overflow issue {CVE-2024-57890} - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT {CVE-2026-23125} - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() {CVE-2022-49800} - kprobes: Fix check for probe enabled in kill_kprobe() {CVE-2022-50266} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 {CVE-2024-26870} - i915/perf: Fix NULL deref bugs with drm_dbg() calls {CVE-2023-52788} - can: mcp251x: fix deadlock in error path of mcp251x_open {CVE-2026-23357} - regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode {CVE-2022-50558} - wifi: cfg80211: Set correct chandef when starting CAC {CVE-2024-49937} - netfilter: nf_tables: prevent nf_skb_duplicated corruption {CVE-2024-49952} - can: isotp: fix potential CAN frame reception race in isotp_rcv() {CVE-2022-48830} - bpf: Fix memory leaks in __check_func_call {CVE-2022-49837} - configfs: fix a race in configfs_{,un}register_subsystem() {CVE-2022-48931} - RDMA/mad: Improve handling of timed out WRs of mad agent {CVE-2024-50095} - cifs: Fix connections leak when tlink setup failed {CVE-2022-49822} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() {CVE-2024-41097} - tcp: add sanity checks to rx zerocopy {CVE-2024-26640} - NFSD: Prevent a potential integer overflow {CVE-2024-53146} - bpf, cpumap: Handle skb as well when clean up ptr_ring {CVE-2023-53660} - team: fix null-ptr-deref when team device type is changed {CVE-2023-52574} - fbdev: efifb: Register sysfs groups through driver core {CVE-2024-49925} - bpf: devmap: provide rxq after redirect {CVE-2024-50162} - net: phy: micrel: Allow probing without .driver_data {CVE-2022-49472} - inotify: Avoid reporting event with invalid wd {CVE-2023-54119} - USB: hub: Ignore non-compliant devices with too many configs or interfaces {CVE-2025-21776} - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode {CVE-2024-58096} - RDMA/irdma: Fix data race on CQP request done {CVE-2023-54292} - fscache: Fix oops due to race with cookie_lru and use_cookie {CVE-2022-48989} - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() {CVE-2023-52450} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c {CVE-2024-56727} - wifi: iwlwifi: fix debug actions order {CVE-2025-38045} - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' {CVE-2022-50553} - net: ipv4: fix one memleak in __inet_del_ifa() {CVE-2023-53995} - exfat: fix memory leak in exfat_load_bitmap() {CVE-2024-50013} - vp_vdpa: fix id_table array not null terminated error {CVE-2024-53110} - intel_th: Fix a resource leak in an error handling path {CVE-2022-50143} - leds: led-class: Only Add LED to leds_list when it is fully ready {CVE-2026-23101} - usb: gadget: core: Check for unset descriptor {CVE-2024-44960} - drm/amdkfd: Fix lock dependency warning with srcu {CVE-2023-52632} - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() {CVE-2025-38458} - PM / devfreq: Check governor before using governor->name {CVE-2025-38609} - tls: fix missing memory barrier in tls_init {CVE-2024-36489} - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() {CVE-2025-37830} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery {CVE-2024-40977} - nvdimm: Fix firmware activation deadlock scenarios {CVE-2022-49446} - wifi: mac80211: sdata can be NULL during AMPDU start {CVE-2022-48875} - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods {CVE-2022-49024} - wifi: ath10k: Fix memory leak in management tx {CVE-2024-50236} - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] {CVE-2025-21666} - netdevsim: fix memory leak in nsim_bus_dev_new() {CVE-2022-50772} - fs: relax assertions on failure to encode file handles {CVE-2024-57924} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c {CVE-2024-56707} - ceph: fix deadlock or deadcode of misusing dget() {CVE-2023-52583} - bpf, verifier: Fix memory leak in array reallocation for stack state {CVE-2022-49878} - ip6_gre: make ip6gre_header() robust {CVE-2025-71098} - ACPICA: Avoid walking the Namespace if start_node is NULL {CVE-2025-71118} - net/mlx5e: kTLS, Fix incorrect page refcounting {CVE-2024-53138} - gve: Clear napi->skb before dev_kfree_skb_any() {CVE-2024-40937} - atm: clip: Fix memory leak of struct clip_vcc. {CVE-2025-38546} - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt {CVE-2025-71131} - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration {CVE-2024-45006} - irqchip: Fix refcount leak in platform_irqchip_probe {CVE-2023-53610} - CDC-NCM: avoid overflow in sanity checking {CVE-2022-48938} - Bluetooth: Fix crash when replugging CSR fake controllers {CVE-2022-48982} - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() {CVE-2022-50521} - ptp: Ensure info->enable callback is always set {CVE-2025-21814} - perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() {CVE-2022-50820} - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() {CVE-2022-50556} - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU {CVE-2023-54036} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959} - drm/amdgpu: Fix smatch static checker warning {CVE-2024-46835} - svcrdma: Address an integer overflow {CVE-2024-53151} - dma-debug: fix a possible deadlock on radix_lock {CVE-2024-47143} - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check {CVE-2024-41072} - regulator: core: fix use_count leakage when handling boot-on {CVE-2022-50250} - tpm: use try_get_ops() in tpm-space.c {CVE-2022-49286} - ata: libata-transport: fix error handling in ata_tdev_add() {CVE-2022-49823} - padata: Always leave BHs disabled when running ->parallel() {CVE-2022-50382} - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak {CVE-2026-23108} - serial: core: check uartclk for zero to avoid divide by zero {CVE-2024-43893} - cifs: fix potential memory leaks in session setup {CVE-2023-53008} - tty: fix out-of-bounds access in tty_driver_lookup_tty() {CVE-2023-54198} - nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() {CVE-2023-53697} - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() {CVE-2026-43136} - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf {CVE-2025-71120} - drm/ioc32: stop speculation on the drm_compat_ioctl path {CVE-2026-31781} - ext4: fix i_disksize exceeding i_size problem in paritally written case {CVE-2023-53270} - wifi: nl80211: fix NULL-ptr deref in offchan check {CVE-2023-53113} - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() {CVE-2023-53717} - ASoC: SOF: Add some bounds checking to firmware data {CVE-2024-26927} - regulator: core: Prevent integer underflow {CVE-2022-50582} - power: supply: fix null pointer dereferencing in power_supply_get_battery_info {CVE-2022-50276} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450} - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724} - nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366} - netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190} - netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051} - xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050} - ALSA: usb-audio: Use the right limit for PCM OOB check - ALSA: usb-audio: Prevent excessive number of frames {CVE-2026-23208} - xen/privcmd: fix double free via VMA splitting {CVE-2026-31787} - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path {CVE-2026-43328} - cpufreq: governor: Free dbs_data directly when gov->init() fails {CVE-2026-43328} - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu: Fix racy re-initialization of irq_work causing hangs - RDMA/efa: Fix possible deadlock {CVE-2026-31493} - RDMA/efa: Fix use of completion ctx after free {CVE-2026-31493} - RDMA/efa: Improve admin completion context state machine {CVE-2026-31493} - RDMA/efa: Check stored completion CTX command ID with received one {CVE-2026-31493} - RDMA/efa: Extend admin timeout error print - RDMA/efa: Properly handle unexpected AQ completions {CVE-2026-31493} - rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported {CVE-2025-22075} - kernel/printk/index.c: fix memory leak with using debugfs_lookup() {CVE-2023-53402} - wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096} - md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() {CVE-2023-53210} - exfat: fix the infinite loop in exfat_readdir() {CVE-2024-57940} - af_netlink: Fix shift out of bounds in group mask calculation {CVE-2022-49197} - xfrm_user: fix info leak in build_mapping() {CVE-2026-43089} - udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946} - efi: Do not import certificates from UEFI Secure Boot for T2 Macs {CVE-2022-49357} - kernel/resource: fix kfree() of bootmem memory again {CVE-2022-49190} - smb: client: fix warning in cifs_smb3_do_mount() {CVE-2023-53230} - sctp: Fix null-ptr-deref in reuseport_add_sock(). {CVE-2024-44935} - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages {CVE-2024-50208} - drm/amdgpu: avoid using null object of framebuffer {CVE-2024-41093} - firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238} - ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738} - net: hinic: fix memory leak when reading function table {CVE-2022-50438} - device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() {CVE-2022-49752} - libceph: fix race between delayed_work() and ceph_monc_stop() {CVE-2024-42232} - usbnet: fix memory leak in error case {CVE-2022-49657} - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU {CVE-2025-71111} - seccomp: Move copy_seccomp() to no failure path. {CVE-2022-50661} - net/mlx5: fs, lock FTE when checking if active {CVE-2024-53121} - nvme-pci: fix freeing of the HMB descriptor table {CVE-2024-56756} - leds: class: Protect brightness_show() with led_cdev->led_access mutex {CVE-2024-56587} - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener {CVE-2023-52986} - RDMA/uverbs: Prevent integer overflow issue {CVE-2024-57890} - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT {CVE-2026-23125} - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() {CVE-2022-49800} - kprobes: Fix check for probe enabled in kill_kprobe() {CVE-2022-50266} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 {CVE-2024-26870} - i915/perf: Fix NULL deref bugs with drm_dbg() calls {CVE-2023-52788} - can: mcp251x: fix deadlock in error path of mcp251x_open {CVE-2026-23357} - regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode {CVE-2022-50558} - wifi: cfg80211: Set correct chandef when starting CAC {CVE-2024-49937} - netfilter: nf_tables: prevent nf_skb_duplicated corruption {CVE-2024-49952} - can: isotp: fix potential CAN frame reception race in isotp_rcv() {CVE-2022-48830} - bpf: Fix memory leaks in __check_func_call {CVE-2022-49837} - configfs: fix a race in configfs_{,un}register_subsystem() {CVE-2022-48931} - RDMA/mad: Improve handling of timed out WRs of mad agent {CVE-2024-50095} - cifs: Fix connections leak when tlink setup failed {CVE-2022-49822} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() {CVE-2024-41097} - tcp: add sanity checks to rx zerocopy {CVE-2024-26640} - NFSD: Prevent a potential integer overflow {CVE-2024-53146} - bpf, cpumap: Handle skb as well when clean up ptr_ring {CVE-2023-53660} - team: fix null-ptr-deref when team device type is changed {CVE-2023-52574} - fbdev: efifb: Register sysfs groups through driver core {CVE-2024-49925} - bpf: devmap: provide rxq after redirect {CVE-2024-50162} - net: phy: micrel: Allow probing without .driver_data {CVE-2022-49472} - inotify: Avoid reporting event with invalid wd {CVE-2023-54119} - USB: hub: Ignore non-compliant devices with too many configs or interfaces {CVE-2025-21776} - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode {CVE-2024-58096} - RDMA/irdma: Fix data race on CQP request done {CVE-2023-54292} - fscache: Fix oops due to race with cookie_lru and use_cookie {CVE-2022-48989} - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() {CVE-2023-52450} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c {CVE-2024-56727} - wifi: iwlwifi: fix debug actions order {CVE-2025-38045} - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' {CVE-2022-50553} - net: ipv4: fix one memleak in __inet_del_ifa() {CVE-2023-53995} - exfat: fix memory leak in exfat_load_bitmap() {CVE-2024-50013} - vp_vdpa: fix id_table array not null terminated error {CVE-2024-53110} - intel_th: Fix a resource leak in an error handling path {CVE-2022-50143} - leds: led-class: Only Add LED to leds_list when it is fully ready {CVE-2026-23101} - usb: gadget: core: Check for unset descriptor {CVE-2024-44960} - drm/amdkfd: Fix lock dependency warning with srcu {CVE-2023-52632} - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() {CVE-2025-38458} - PM / devfreq: Check governor before using governor->name {CVE-2025-38609} - tls: fix missing memory barrier in tls_init {CVE-2024-36489} - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() {CVE-2025-37830} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery {CVE-2024-40977} - nvdimm: Fix firmware activation deadlock scenarios {CVE-2022-49446} - wifi: mac80211: sdata can be NULL during AMPDU start {CVE-2022-48875} - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods {CVE-2022-49024} - wifi: ath10k: Fix memory leak in management tx {CVE-2024-50236} - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] {CVE-2025-21666} - netdevsim: fix memory leak in nsim_bus_dev_new() {CVE-2022-50772} - fs: relax assertions on failure to encode file handles {CVE-2024-57924} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c {CVE-2024-56707} - ceph: fix deadlock or deadcode of misusing dget() {CVE-2023-52583} - bpf, verifier: Fix memory leak in array reallocation for stack state {CVE-2022-49878} - ip6_gre: make ip6gre_header() robust {CVE-2025-71098} - ACPICA: Avoid walking the Namespace if start_node is NULL {CVE-2025-71118} - net/mlx5e: kTLS, Fix incorrect page refcounting {CVE-2024-53138} - gve: Clear napi->skb before dev_kfree_skb_any() {CVE-2024-40937} - atm: clip: Fix memory leak of struct clip_vcc. {CVE-2025-38546} - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt {CVE-2025-71131} - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration {CVE-2024-45006} - irqchip: Fix refcount leak in platform_irqchip_probe {CVE-2023-53610} - CDC-NCM: avoid overflow in sanity checking {CVE-2022-48938} - Bluetooth: Fix crash when replugging CSR fake controllers {CVE-2022-48982} - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() {CVE-2022-50521} - ptp: Ensure info->enable callback is always set {CVE-2025-21814} - perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() {CVE-2022-50820} - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() {CVE-2022-50556} - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU {CVE-2023-54036} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959} - drm/amdgpu: Fix smatch static checker warning {CVE-2024-46835} - svcrdma: Address an integer overflow {CVE-2024-53151} - dma-debug: fix a possible deadlock on radix_lock {CVE-2024-47143} - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check {CVE-2024-41072} - regulator: core: fix use_count leakage when handling boot-on {CVE-2022-50250} - tpm: use try_get_ops() in tpm-space.c {CVE-2022-49286} - ata: libata-transport: fix error handling in ata_tdev_add() {CVE-2022-49823} - padata: Always leave BHs disabled when running ->parallel() {CVE-2022-50382} - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak {CVE-2026-23108} - serial: core: check uartclk for zero to avoid divide by zero {CVE-2024-43893} - cifs: fix potential memory leaks in session setup {CVE-2023-53008} - tty: fix out-of-bounds access in tty_driver_lookup_tty() {CVE-2023-54198} - nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() {CVE-2023-53697} - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() {CVE-2026-43136} - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf {CVE-2025-71120} - drm/ioc32: stop speculation on the drm_compat_ioctl path {CVE-2026-31781} - ext4: fix i_disksize exceeding i_size problem in paritally written case {CVE-2023-53270} - wifi: nl80211: fix NULL-ptr deref in offchan check {CVE-2023-53113} - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() {CVE-2023-53717} - ASoC: SOF: Add some bounds checking to firmware data {CVE-2024-26927} - regulator: core: Prevent integer underflow {CVE-2022-50582} - power: supply: fix null pointer dereferencing in power_supply_get_battery_info {CVE-2022-50276} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450} - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724} - nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366} - netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190} - netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051} - xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 9e440bf473f751f76f522fd0f5e2d84316fe5b90b90399518f6f9c329d24833a kernel-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 8929101b3c09e0fd4727c1b4010366e02ba173588d2492947f675dbdda14569e kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els3.noarch.rpm 6f32958d91c7afd9acbc6f341e23673de36960d8754a790c1cadc7881e52af6c kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 6410a645fba3597930e7ae13f6a61ddd9b00da98325883a587fdc5f138e345e3 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 0033701e3245822c17b0d9a4b52b6bf2bb29a4883ed991a8ff42a6a5d218a7e9 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 14032c059a4a1465847be397ff549aa0a9021ae90a4a5f662f4ac8826c04a316 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 79ac07d289deeb7c5ca3bf3f15a7ea1bc44d17a006697ed3cf36273861415b0b kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 153a228b3c11c9dcaf84a636e433548d40879edc752ba170d26ea603df2434d7 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 4c0777a4e58a81cc3055ebd6c4d0714b18792b3ad62d407f55642f41b5817896 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 05ce8ff229545d5f89231baed3a05cf7836d814a59b818c7a4c6777867cc43c6 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm f56710039590c3289ed1210b51a7ce43b1c19b03664c1f9307c9f4400e12af79 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm ddf4d0b33d6d808c86bfa0b6d4dd136f040b35e77cfc073c0a9ab7e39a0fa191 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 2ec07fd825090e3081c4e635e9b81e917392693aed773742987793746cbbf2a1 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm f105fe20849992112c77a9713505ad7cfb7b8c11d26a122294dc246368bb9eff kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm ee7303007b2c581e403af6123dbb444e79e295db21d964115836165fba039b4f kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 9ee6617f91f911af477cc6bfd29e8eae164fc3817fb68691675bbad561660387 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 005bbd8726ba83d265db5ab949f284ece61d12ad462c4148ea85057077ae5601 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els3.noarch.rpm ed68391804425bf67fc2a7a527114aa99e8525fb2ea830fd77930aee8c9a022a kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 73376ad843dcd6ce1197297ae7a33e1edd8e5518c34e8f7b5cda3323efbf57c3 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 2399dd0e03fbc1feada1c0ec46a815fe4c6690833949bafdd9dd6c7d23dacfcb kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm a427d4356d120c5b72a2354a7001a80e9b11626223472e5a479d44f16f5f9703 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm d4777380c869c3578470185241e6d9df884bd9e0c1136c2e0932f7a73f59b728 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 340b28d094c68325dd67d686aa6c4b5337339cce7a3c5de2ad8ca02a6a3f8248 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 8305f75e01b3ea28b9b46653a5774472ee2909b87364dd29bba36fcafa477f87 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 2d9173576ddf51b4cbc79d397b7e1e38646cb4860553a7b2bd464415dbb12edd kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 2da4afab942706523bfd3d6a9a0f3d077027b71aaaa53e53662a8812cc3e9cfc kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm ad765f62c0d8e3b49176c63a064b031136473bf7ee19d2e3ea15ff2298f52d98 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 20b95afce1afee9e8e34e18d4500717f538d8509c7295cc24ccf034c8bafaf82 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 8f008d21affc167ed54e5dca27e2c1fe649edfe63cd8914b3b7b404c73ba5b60 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm ee61f7f77eea075341391bcb89b429072c1243e0d1c80feece764eabe6dc89ba libbpf-1.0.0-2.el9_2.tuxcare.11.els3.i686.rpm d83b2c52925a312b99f6b1b457768244293bd17c4eff1e11c43981254f4e34aa libbpf-1.0.0-2.el9_2.tuxcare.11.els3.x86_64.rpm 60a6a7ffb75c4b40b75eec265a8c1b6b3d06bdfdca031b0f90b6df618ba5a443 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els3.i686.rpm 0de3d52908ff407f73aa074ab6cf9be3503aa61c8e866e8c8a82a010f2475995 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els3.x86_64.rpm 0a38a45224f0f354d72ce3cc485dffb2fffb077fe28f539b4e85a25fdf5a4dff libbpf-static-1.0.0-2.el9_2.tuxcare.11.els3.i686.rpm 28b53f7a2bd87c88822d2a02ece855e54539548786ef179b1f09e2c78910b718 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els3.x86_64.rpm 242b4c492ebe5444f98d8ec820106813046ad52a5a3963dcc9c8e0f72781610f perf-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 0f81d118103d1dafb517c1d303c5cb927d74332066be1aea2b31ae4b9fbd60d8 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 62e82b48d1de5f8b428063fb4eb000d27125ead3d81dbee322734a91e27240f8 rtla-5.14.0-284.1101.el9_2.tuxcare.11.els3.x86_64.rpm 51d7e5131fc69a5a3ed5027d5adc4329cc7bc059513f113b74de82f7ac07ba96 CLSA-2026:1778266904 TuxCare License Agreement 0 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - clk: Fix clk_hw_get_clk() when dev is NULL {CVE-2022-49187} - x86/sgx: Add overflow check in sgx_validate_offset_length() {CVE-2022-49785} - ext4: init quota for 'old.inode' in 'ext4_rename' {CVE-2022-50346} - skbuff: Account for tail adjustment during pull operations {CVE-2022-50365} - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory {CVE-2022-50409} - scsi: qla2xxx: Delay module unload while fabric scan in progress {CVE-2025-71235} - HID: alps: fix NULL pointer dereference in alps_raw_event() {CVE-2026-31625} - rxrpc: fix reference count leak in rxrpc_server_keyring() {CVE-2026-31634} - drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540} - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects {CVE-2023-54010} - drm/amdgpu: fix the waring dereferencing hive {CVE-2024-46805} - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func {CVE-2024-49911} - tracing: Prevent bad count for tracing_cpumask_write {CVE-2024-56763} - HID: wacom: fix when get product name maybe null pointer {CVE-2024-56629} - thermal: int340x: Add NULL check for adev {CVE-2025-23136} - wifi: mac80211: Purge vif txq in ieee80211_do_stop() {CVE-2025-37794} - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510} - wifi: cfg80211: ocb: don't leave if not joined {CVE-2023-53992} - mmc: core: Fix kernel panic when remove non-standard SDIO card {CVE-2022-50640} - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() {CVE-2022-50645} - serial: amba-pl011: avoid SBSA UART accessing DMACR register {CVE-2022-50625} - inet_diag: Initialize pad field in struct inet_diag_req_v2 {CVE-2024-42106} - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt {CVE-2022-49481} - net/core: Fix ETH_P_1588 flow dissector {CVE-2023-52580} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() {CVE-2023-52560} - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg {CVE-2024-38596} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 {CVE-2024-26660} - block: prevent division by zero in blk_rq_stat_sum() {CVE-2024-35925} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} - tipc: fix a possible memleak in tipc_buf_append {CVE-2024-36954} - ipv6: prevent possible NULL deref in fib6_nh_init() {CVE-2024-40961} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER {CVE-2024-42090} - ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960} - drm/radeon: check bo_va->bo is non-NULL before using it {CVE-2024-41060} - dma: fix call order in dmam_free_coherent {CVE-2024-43856} - scsi: qla2xxx: Fix for possible memory corruption {CVE-2024-42288} - ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt {CVE-2024-26774} - netfilter: flowtable: incorrect pppoe tuple {CVE-2024-27015} - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() {CVE-2024-40919} - Bluetooth: btintel: Fix null ptr deref in btintel_read_version {CVE-2024-35933} - netdevsim: prevent bad user input in nsim_dev_health_break_write() {CVE-2024-56716} - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow {CVE-2024-53120} - EDAC/bluefield: Fix potential integer overflow {CVE-2024-53161} - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() {CVE-2024-53217} - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() {CVE-2024-50304} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race {CVE-2024-50082} - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996} - HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948} - filemap: Fix bounds checking in filemap_read() {CVE-2024-50272} - efi: fix potential NULL deref in efi_mem_reserve_persistent {CVE-2023-52976} - perf/x86/amd: fix potential integer overflow on shift of a int {CVE-2022-49748} - ext4: fix infinite loop when replaying fast_commit {CVE-2024-43828} - kthread: unpark only parked kthread {CVE-2024-50019} - xhci: tegra: fix checked USB2 port number {CVE-2024-50075} - Bluetooth: Call iso_exit() on module unload {CVE-2024-50078} - scsi: target: core: Fix null-ptr-deref in target_alloc_device() {CVE-2024-50153} - drm/radeon: Fix encoder->possible_clones {CVE-2024-50201} - squashfs: harden sanity check in squashfs_read_xattr_id_table {CVE-2023-52979} - xsk: fix an integer overflow in xp_create_and_assign_umem() {CVE-2025-21997} - can: j1939: j1939_session_new(): fix skb reference counting {CVE-2024-56645} - ice: Do not use WQ_MEM_RECLAIM flag for workqueue {CVE-2023-52743} - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection {CVE-2024-56533} - sched/core: Prevent rescheduling when interrupts are disabled {CVE-2024-58090} - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections {CVE-2024-57986} - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow {CVE-2025-22086} - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs {CVE-2025-22045} - Bluetooth: btrtl: Prevent potential NULL dereference {CVE-2025-37792} - tracing/histograms: Fix memory leak problem {CVE-2022-49648} - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error {CVE-2025-21924} - ext4: fix another off-by-one fsmap error on 1k block filesystems {CVE-2023-53143} - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open {CVE-2024-46791} - crypto: ecdh - explicitly zeroize private_key {CVE-2024-42098} - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl {CVE-2025-22044} - geneve: do not assume mac header is set in geneve_xmit_skb() {CVE-2024-56636} - tracing/timerlat: Fix a race during cpuhp processing {CVE-2024-49866} - x86/mtrr: Check if fixed MTRRs exist before saving them {CVE-2024-44948} - genirq/irq_sim: Initialize work context pointers properly {CVE-2025-38408} - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() {CVE-2025-38664} - mm/ksm: fix flag-dropping behavior in ksm_madvise {CVE-2025-40040} - objtool: Fix SEGFAULT {CVE-2022-50879} - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() {CVE-2022-49307} - can: af_can: fix NULL pointer dereference in can_rx_register() {CVE-2022-49863} - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() {CVE-2022-49869} - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map {CVE-2022-49832} - tty: vt: initialize unicode screen buffer {CVE-2022-50222} - mfd: max77620: Fix refcount leak in max77620_initialise_fps {CVE-2022-50108} - pnode: terminate at peers of source {CVE-2022-50280} - mm: /proc/pid/smaps_rollup: fix no vma's null-deref {CVE-2022-50380} - chardev: fix error handling in cdev_device_add() {CVE-2022-50282} - net: hinic: fix the issue of CMDQ memory leaks {CVE-2022-50387} - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() {CVE-2022-50349} - tracing: Do not register unsupported perf events {CVE-2025-71125} - ASoC: amd: fix memory leak in acp3x pdm dma ops {CVE-2026-23190} - can: j1939: make j1939_session_activate() fail if device is no longer registered {CVE-2025-71182} - net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021} - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() {CVE-2026-23335} - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n {CVE-2026-23439} - xfrm: clear trailing padding in build_polexpire() {CVE-2026-31664} - wifi: rt2x00usb: fix devres lifetime {CVE-2026-31672} - mmc: vub300: fix NULL-deref on disconnect {CVE-2026-31651} - wifi: brcmsmac: Fix dma_free_coherent() size {CVE-2026-31661} - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change {CVE-2024-50044} - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes {CVE-2024-41095} - smb: client: fix deadlock in smb2_find_smb_tcon() {CVE-2024-39468} - drm/amdgpu: Fixed bug on error when unloading amdgpu {CVE-2023-52912} - usb: typec: ucsi: Fix null pointer dereference in trace {CVE-2024-46719} - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 {CVE-2024-46819} - netfilter: flowtable: initialise extack before use {CVE-2024-45018} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() {CVE-2024-47668} - drm/amd/display: Check null pointer before dereferencing se {CVE-2024-50049} - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption {CVE-2024-49858} - drm/amd/pm: ensure the fw_info is not null before using it {CVE-2024-49890} - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped {CVE-2024-47673} - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() {CVE-2024-49962} - drm/amd/display: Check stream before comparing them {CVE-2024-49896} - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() {CVE-2024-56593} - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() {CVE-2025-21689} - sctp: properly validate chunk size in sctp_sf_ootb() {CVE-2024-50299} - USB: usbtmc: prevent kernel-usb-infoleak {CVE-2024-47671} - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX {CVE-2024-58017} - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() {CVE-2025-21848} - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() {CVE-2023-52936} - linux/dim: Fix divide by 0 in RDMA DIM {CVE-2022-49670} - scsi: st: Fix array overflow in st_setup() {CVE-2025-37857} - usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe() {CVE-2022-50825} - samples/bpf: Fix buffer overflow in tcp_basertt {CVE-2023-54312} - debugobjects: Don't wake up kswapd from fill_pool() {CVE-2023-54268} - regmap-irq: Fix out-of-bounds access when allocating config buffers {CVE-2023-53768} - RDMA/core: Fix GID entry ref leak when create_ah fails {CVE-2023-54003} - drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486} - pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619} - net: usb: qmi_wwan: fix memory leak for not ip packets {CVE-2024-43861} - HID: i2c-hid-of: fix NULL-deref on failed power up {CVE-2024-26717} - netfilter: nf_tables: set dormant flag on hook register failure {CVE-2024-26835} - md: fix kmemleak of rdev->serial {CVE-2024-26900} - spi: fix null pointer dereference within spi_sync {CVE-2024-36930} - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() {CVE-2024-56748} - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() {CVE-2024-56747} - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport {CVE-2024-56688} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag {CVE-2025-21699} - sock_map: Add a cond_resched() in sock_hash_free() {CVE-2024-47710} - net: stmmac: Fix zero-division error when disabling tc cbs {CVE-2024-49977} - net/mlx5: Fix error path in multi-packet WQE transmit {CVE-2024-50001} - HID: core: remove unnecessary WARN_ON() in implement() {CVE-2024-39509} - tipc: fix memory leak in tipc_link_xmit {CVE-2025-37757} - ima: Fix potential memory leak in ima_init_crypto() {CVE-2022-49627} - net: tun: unlink NAPI from device on destruction {CVE-2022-49672} - iommu/amd: Fix pci device refcount leak in ppr_notifier() {CVE-2022-50505} - rxrpc: Fix bug due to prealloc collision {CVE-2025-38544} - ext4: zero i_disksize when initializing the bootloader inode {CVE-2023-53101} - scsi: hisi_sas: Add cond_resched() for no forced preemption model {CVE-2024-56589} - net: fix NULL pointer dereference in l3mdev_l3_rcv {CVE-2025-22103} - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path {CVE-2025-37788} - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini {CVE-2023-53237} - samples/bpf: Fix fout leak in hbm's run_bpf_prog {CVE-2023-53290} - regulator: core: fix NULL dereference on unbind due to stale coupling data {CVE-2025-38668} - PM / devfreq: Fix leak in devfreq_dev_release() {CVE-2023-53518} - coresight: trbe: remove cpuhp instance node before remove cpuhp state {CVE-2022-50319} - net: phy: fix null-ptr-deref while probe() failed {CVE-2022-49021} - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() {CVE-2022-49002} - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() {CVE-2022-48972} - watch_queue: Free the page array when watch_queue is dismantled {CVE-2022-49148} - samples/landlock: Fix path_list memory leak {CVE-2021-47654} - net: tun: Fix memory leaks of napi_get_frags {CVE-2022-49871} - ftrace: Fix null pointer dereference in ftrace_add_mod() {CVE-2022-49802} - netdevsim: Fix memory leak of nsim_dev->fa_cookie {CVE-2022-49803} - tracing: Fix memory leak in tracing_read_pipe() {CVE-2022-49801} - mtd: core: fix possible resource leak in init_mtd() {CVE-2022-50304} - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() {CVE-2022-50321} - xfrm_user: fix info leak in build_report() {CVE-2026-31671} - regulator: core: fix resource leak in regulator_register() {CVE-2022-50724} - x86/tdx: Fix data leak in mmio_read() {CVE-2024-46794} - x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n {CVE-2021-47430} - ceph: remove the incorrect Fw reference check when dirtying pages {CVE-2024-50179} - nfs: Fix KMSAN warning in decode_getfattr_attrs() {CVE-2024-53066} - blk-cgroup: Fix class @block_class's subsystem refcount leakage {CVE-2025-21745} - cifs: Fix lost destroy smbd connection when MR allocate failed {CVE-2023-54260} - cifs: Fix xid leak in cifs_ses_add_channel() {CVE-2022-50856} - phy: tegra: xusb: Clear the driver reference in usb-phy dev {CVE-2023-54083} - drm/ttm: Don't leak a resource on swapout move error {CVE-2023-53844} - team: Move team device type change at the end of team_port_add {CVE-2025-68340} - udp: Fix wildcard bind conflict check when using hash2 {CVE-2026-31503} - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock {CVE-2026-31592} - HID: core: clamp report_size in s32ton() to avoid undefined shift {CVE-2026-31624} - af_key: validate families in pfkey_send_migrate() {CVE-2026-31515} - nvme-pci: ensure we're polling a polled queue {CVE-2026-31523} - module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521} - ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - clk: Fix clk_hw_get_clk() when dev is NULL {CVE-2022-49187} - x86/sgx: Add overflow check in sgx_validate_offset_length() {CVE-2022-49785} - ext4: init quota for 'old.inode' in 'ext4_rename' {CVE-2022-50346} - skbuff: Account for tail adjustment during pull operations {CVE-2022-50365} - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory {CVE-2022-50409} - scsi: qla2xxx: Delay module unload while fabric scan in progress {CVE-2025-71235} - HID: alps: fix NULL pointer dereference in alps_raw_event() {CVE-2026-31625} - rxrpc: fix reference count leak in rxrpc_server_keyring() {CVE-2026-31634} - drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540} - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects {CVE-2023-54010} - drm/amdgpu: fix the waring dereferencing hive {CVE-2024-46805} - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func {CVE-2024-49911} - tracing: Prevent bad count for tracing_cpumask_write {CVE-2024-56763} - HID: wacom: fix when get product name maybe null pointer {CVE-2024-56629} - thermal: int340x: Add NULL check for adev {CVE-2025-23136} - wifi: mac80211: Purge vif txq in ieee80211_do_stop() {CVE-2025-37794} - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510} - wifi: cfg80211: ocb: don't leave if not joined {CVE-2023-53992} - mmc: core: Fix kernel panic when remove non-standard SDIO card {CVE-2022-50640} - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() {CVE-2022-50645} - serial: amba-pl011: avoid SBSA UART accessing DMACR register {CVE-2022-50625} - inet_diag: Initialize pad field in struct inet_diag_req_v2 {CVE-2024-42106} - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt {CVE-2022-49481} - net/core: Fix ETH_P_1588 flow dissector {CVE-2023-52580} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() {CVE-2023-52560} - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg {CVE-2024-38596} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 {CVE-2024-26660} - block: prevent division by zero in blk_rq_stat_sum() {CVE-2024-35925} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} - tipc: fix a possible memleak in tipc_buf_append {CVE-2024-36954} - ipv6: prevent possible NULL deref in fib6_nh_init() {CVE-2024-40961} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER {CVE-2024-42090} - ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960} - drm/radeon: check bo_va->bo is non-NULL before using it {CVE-2024-41060} - dma: fix call order in dmam_free_coherent {CVE-2024-43856} - scsi: qla2xxx: Fix for possible memory corruption {CVE-2024-42288} - ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt {CVE-2024-26774} - netfilter: flowtable: incorrect pppoe tuple {CVE-2024-27015} - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() {CVE-2024-40919} - Bluetooth: btintel: Fix null ptr deref in btintel_read_version {CVE-2024-35933} - netdevsim: prevent bad user input in nsim_dev_health_break_write() {CVE-2024-56716} - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow {CVE-2024-53120} - EDAC/bluefield: Fix potential integer overflow {CVE-2024-53161} - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() {CVE-2024-53217} - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() {CVE-2024-50304} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race {CVE-2024-50082} - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996} - HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948} - filemap: Fix bounds checking in filemap_read() {CVE-2024-50272} - efi: fix potential NULL deref in efi_mem_reserve_persistent {CVE-2023-52976} - perf/x86/amd: fix potential integer overflow on shift of a int {CVE-2022-49748} - ext4: fix infinite loop when replaying fast_commit {CVE-2024-43828} - kthread: unpark only parked kthread {CVE-2024-50019} - xhci: tegra: fix checked USB2 port number {CVE-2024-50075} - Bluetooth: Call iso_exit() on module unload {CVE-2024-50078} - scsi: target: core: Fix null-ptr-deref in target_alloc_device() {CVE-2024-50153} - drm/radeon: Fix encoder->possible_clones {CVE-2024-50201} - squashfs: harden sanity check in squashfs_read_xattr_id_table {CVE-2023-52979} - xsk: fix an integer overflow in xp_create_and_assign_umem() {CVE-2025-21997} - can: j1939: j1939_session_new(): fix skb reference counting {CVE-2024-56645} - ice: Do not use WQ_MEM_RECLAIM flag for workqueue {CVE-2023-52743} - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection {CVE-2024-56533} - sched/core: Prevent rescheduling when interrupts are disabled {CVE-2024-58090} - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections {CVE-2024-57986} - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow {CVE-2025-22086} - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs {CVE-2025-22045} - Bluetooth: btrtl: Prevent potential NULL dereference {CVE-2025-37792} - tracing/histograms: Fix memory leak problem {CVE-2022-49648} - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error {CVE-2025-21924} - ext4: fix another off-by-one fsmap error on 1k block filesystems {CVE-2023-53143} - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open {CVE-2024-46791} - crypto: ecdh - explicitly zeroize private_key {CVE-2024-42098} - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl {CVE-2025-22044} - geneve: do not assume mac header is set in geneve_xmit_skb() {CVE-2024-56636} - tracing/timerlat: Fix a race during cpuhp processing {CVE-2024-49866} - x86/mtrr: Check if fixed MTRRs exist before saving them {CVE-2024-44948} - genirq/irq_sim: Initialize work context pointers properly {CVE-2025-38408} - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() {CVE-2025-38664} - mm/ksm: fix flag-dropping behavior in ksm_madvise {CVE-2025-40040} - objtool: Fix SEGFAULT {CVE-2022-50879} - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() {CVE-2022-49307} - can: af_can: fix NULL pointer dereference in can_rx_register() {CVE-2022-49863} - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() {CVE-2022-49869} - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map {CVE-2022-49832} - tty: vt: initialize unicode screen buffer {CVE-2022-50222} - mfd: max77620: Fix refcount leak in max77620_initialise_fps {CVE-2022-50108} - pnode: terminate at peers of source {CVE-2022-50280} - mm: /proc/pid/smaps_rollup: fix no vma's null-deref {CVE-2022-50380} - chardev: fix error handling in cdev_device_add() {CVE-2022-50282} - net: hinic: fix the issue of CMDQ memory leaks {CVE-2022-50387} - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() {CVE-2022-50349} - tracing: Do not register unsupported perf events {CVE-2025-71125} - ASoC: amd: fix memory leak in acp3x pdm dma ops {CVE-2026-23190} - can: j1939: make j1939_session_activate() fail if device is no longer registered {CVE-2025-71182} - net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021} - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() {CVE-2026-23335} - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n {CVE-2026-23439} - xfrm: clear trailing padding in build_polexpire() {CVE-2026-31664} - wifi: rt2x00usb: fix devres lifetime {CVE-2026-31672} - mmc: vub300: fix NULL-deref on disconnect {CVE-2026-31651} - wifi: brcmsmac: Fix dma_free_coherent() size {CVE-2026-31661} - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change {CVE-2024-50044} - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes {CVE-2024-41095} - smb: client: fix deadlock in smb2_find_smb_tcon() {CVE-2024-39468} - drm/amdgpu: Fixed bug on error when unloading amdgpu {CVE-2023-52912} - usb: typec: ucsi: Fix null pointer dereference in trace {CVE-2024-46719} - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 {CVE-2024-46819} - netfilter: flowtable: initialise extack before use {CVE-2024-45018} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() {CVE-2024-47668} - drm/amd/display: Check null pointer before dereferencing se {CVE-2024-50049} - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption {CVE-2024-49858} - drm/amd/pm: ensure the fw_info is not null before using it {CVE-2024-49890} - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped {CVE-2024-47673} - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() {CVE-2024-49962} - drm/amd/display: Check stream before comparing them {CVE-2024-49896} - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() {CVE-2024-56593} - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() {CVE-2025-21689} - sctp: properly validate chunk size in sctp_sf_ootb() {CVE-2024-50299} - USB: usbtmc: prevent kernel-usb-infoleak {CVE-2024-47671} - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX {CVE-2024-58017} - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() {CVE-2025-21848} - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() {CVE-2023-52936} - linux/dim: Fix divide by 0 in RDMA DIM {CVE-2022-49670} - scsi: st: Fix array overflow in st_setup() {CVE-2025-37857} - usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe() {CVE-2022-50825} - samples/bpf: Fix buffer overflow in tcp_basertt {CVE-2023-54312} - debugobjects: Don't wake up kswapd from fill_pool() {CVE-2023-54268} - regmap-irq: Fix out-of-bounds access when allocating config buffers {CVE-2023-53768} - RDMA/core: Fix GID entry ref leak when create_ah fails {CVE-2023-54003} - drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486} - pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619} - net: usb: qmi_wwan: fix memory leak for not ip packets {CVE-2024-43861} - HID: i2c-hid-of: fix NULL-deref on failed power up {CVE-2024-26717} - netfilter: nf_tables: set dormant flag on hook register failure {CVE-2024-26835} - md: fix kmemleak of rdev->serial {CVE-2024-26900} - spi: fix null pointer dereference within spi_sync {CVE-2024-36930} - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() {CVE-2024-56748} - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() {CVE-2024-56747} - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport {CVE-2024-56688} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag {CVE-2025-21699} - sock_map: Add a cond_resched() in sock_hash_free() {CVE-2024-47710} - net: stmmac: Fix zero-division error when disabling tc cbs {CVE-2024-49977} - net/mlx5: Fix error path in multi-packet WQE transmit {CVE-2024-50001} - HID: core: remove unnecessary WARN_ON() in implement() {CVE-2024-39509} - tipc: fix memory leak in tipc_link_xmit {CVE-2025-37757} - ima: Fix potential memory leak in ima_init_crypto() {CVE-2022-49627} - net: tun: unlink NAPI from device on destruction {CVE-2022-49672} - iommu/amd: Fix pci device refcount leak in ppr_notifier() {CVE-2022-50505} - rxrpc: Fix bug due to prealloc collision {CVE-2025-38544} - ext4: zero i_disksize when initializing the bootloader inode {CVE-2023-53101} - scsi: hisi_sas: Add cond_resched() for no forced preemption model {CVE-2024-56589} - net: fix NULL pointer dereference in l3mdev_l3_rcv {CVE-2025-22103} - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path {CVE-2025-37788} - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini {CVE-2023-53237} - samples/bpf: Fix fout leak in hbm's run_bpf_prog {CVE-2023-53290} - regulator: core: fix NULL dereference on unbind due to stale coupling data {CVE-2025-38668} - PM / devfreq: Fix leak in devfreq_dev_release() {CVE-2023-53518} - coresight: trbe: remove cpuhp instance node before remove cpuhp state {CVE-2022-50319} - net: phy: fix null-ptr-deref while probe() failed {CVE-2022-49021} - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() {CVE-2022-49002} - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() {CVE-2022-48972} - watch_queue: Free the page array when watch_queue is dismantled {CVE-2022-49148} - samples/landlock: Fix path_list memory leak {CVE-2021-47654} - net: tun: Fix memory leaks of napi_get_frags {CVE-2022-49871} - ftrace: Fix null pointer dereference in ftrace_add_mod() {CVE-2022-49802} - netdevsim: Fix memory leak of nsim_dev->fa_cookie {CVE-2022-49803} - tracing: Fix memory leak in tracing_read_pipe() {CVE-2022-49801} - mtd: core: fix possible resource leak in init_mtd() {CVE-2022-50304} - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() {CVE-2022-50321} - xfrm_user: fix info leak in build_report() {CVE-2026-31671} - regulator: core: fix resource leak in regulator_register() {CVE-2022-50724} - x86/tdx: Fix data leak in mmio_read() {CVE-2024-46794} - x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n {CVE-2021-47430} - ceph: remove the incorrect Fw reference check when dirtying pages {CVE-2024-50179} - nfs: Fix KMSAN warning in decode_getfattr_attrs() {CVE-2024-53066} - blk-cgroup: Fix class @block_class's subsystem refcount leakage {CVE-2025-21745} - cifs: Fix lost destroy smbd connection when MR allocate failed {CVE-2023-54260} - cifs: Fix xid leak in cifs_ses_add_channel() {CVE-2022-50856} - phy: tegra: xusb: Clear the driver reference in usb-phy dev {CVE-2023-54083} - drm/ttm: Don't leak a resource on swapout move error {CVE-2023-53844} - team: Move team device type change at the end of team_port_add {CVE-2025-68340} - udp: Fix wildcard bind conflict check when using hash2 {CVE-2026-31503} - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock {CVE-2026-31592} - HID: core: clamp report_size in s32ton() to avoid undefined shift {CVE-2026-31624} - af_key: validate families in pfkey_send_migrate() {CVE-2026-31515} - nvme-pci: ensure we're polling a polled queue {CVE-2026-31523} - module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521} - ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 6b62c349abe67d3b9331bbce9b7cfd185762c0e57c2e4eaf1af65b4695761f5b kernel-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm c21c3b3d61e4ad1aafe888cbb89a4839366004300b4b701f343483cd860b9328 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els31.noarch.rpm 4991ab0a1a6f42fe913e0862f002d5f9b2ac3fd8de62a2adce65a812c23c793f kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 0cee19ea393778a4dd839c77be79d77a834917e509d00cfd135cb3a07fef124d kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 85190f0cf598b9fdb6e3c5826f329367044477f7d73a162797f488333304c90e kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm a375e91683a2f366670cce1204e960e6b3c77a3faf21ca5e9814e6d5a8db8126 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 9ab73beee074a8bcd1173537be71b7018d45b3e0f5de7a490575878bb52170f0 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm c86314304bc4fe06ad7bacae232489d1d06f7328950dd2a2f0a398bb5c1235cb kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 89367260227eb680e05b7af97a8396b99b31e88bb35ab1f0c5595e71e15fdcf0 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm ba424e3e56a1928f4ae3891806f41225dd91c26fc6252776eee1d3d1a1724b60 kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm c71ca3306056b0fa077ce106bfa84f9dee26b49780d6d1e3967d75ac369e7e64 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm de8e0c8d45b8de165acb4596d20d21d148777991201820010dd50e645d3a4580 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 07eac78e69f5f91defbc364850fa6c8018713996c87696515e07608cc2cb1ee9 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 1bed334650846266fe4586c15538c98800f158b934100635f8afcfce40c67e50 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm f4bbcab599e4ff9513d888d9994e8052c83a8d8595788d0f7a785590969670cf kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 2184e7c0dc6040542dfb952a84d72964d99a072875e109925b588a14a6087a64 kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm c3e87e761c5b325209473220124482ad8e1e39d2008bdf55caaab08c270fe27a kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els31.noarch.rpm d381e8d05672e4ed16ed1dc37f9ccaf14a567d42d822b10b30218ec9bc9af49c kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 5118a00d07e46e427f6cc0dbd36a45888b0b7e6732ae5cb69d186780f019763b kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm dd150697c4be430bc4c391d16ea5131d015bb67cf61a7f24227e2822c1950cce kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 6d54d2ca5012698eaaeb68b340ef79bc9bab76ccfc9e79e12a22a707f7360c24 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm dd3c05c433f90b3fc43f2adb2b1cdeaafd85bb6c6b77d4c27849c24113008d5f kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 6716f204f79faa60ba443228ddac501db0222f411f4e6d6262d0205850885581 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 6576bedb8ac0ca7180c2953a548b03fe70485105e18da34ecb5a8c0fe13b2c12 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm da0123176f777154d8d221e2226a93634507de3ea965468966eb712df054b609 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm b2f339cb8d9b04fc79c58126fd120e0a9a5198588a319d806be89e07877a0790 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 539d7ea57ffd360d8babd5a582ef36275703d3ed9bb171e72a23219f0f0041c9 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 60e634ab62b678d6a02d8b1e888b02c93e0182d563ae2a18ac62224ac0f3dc33 kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm cb7903a64d6aae0b17ff119ae15b71c9e00ae7c3e5cb2be7f9b0e64a1e4c8590 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 8927c8c66e27035d00dfeff60cec252b506b7c689c3052ee8edb1d1cc298af57 libbpf-1.0.0-2.el9_2.tuxcare.7.els31.i686.rpm 73c38b65ff9d52756f1e06d98dd073acb42bc80dc98e1ef82da2e051d8f3a441 libbpf-1.0.0-2.el9_2.tuxcare.7.els31.x86_64.rpm e3b811f617b5cb3def3bbe3f9bea70e6ce7f2ca05a60356703aeffd3373c07af libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els31.i686.rpm 940f4d2e86cdf03450f601effa6d04217724e8d3e411ec74543feacdc02a9f81 libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els31.x86_64.rpm c4b22185f1e2d361a5baf3d832ea38718898cafbe5ac8e128a726bb18588458a libbpf-static-1.0.0-2.el9_2.tuxcare.7.els31.i686.rpm e46db969cfa7b0e26763df8a1e115e59e808703db0af2f2b7f670379b345c317 libbpf-static-1.0.0-2.el9_2.tuxcare.7.els31.x86_64.rpm cba4b0518ebc896712dc848cd399a284e3ec2daa441dffd02a95ff50cad07fc2 perf-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 45ca2399e92da667c706c0dd42a7f89919268d51e15ccd66d760d65fc4e48c87 python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 5d63e0a7619d7ff5037543cbb3e2487093f838bc7a37f42b51eb7989b89b2ebd rtla-5.14.0-284.1101.el9_2.tuxcare.7.els31.x86_64.rpm 126ed4ce1e5d40582766770f3d28f14fb435f8ef0c9c2f40fa7e5a0694ae77f5 CLSA-2026:1785147682 TuxCare License Agreement 0 - CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size

0 tuxcare-almalinux9.2-esu squid-5.5-5.el9_2.1.tuxcare.els14.x86_64.rpm 851c50a2bfed8e646f7ad3a59ca299242f41e684d76989e6e936d1c3b16bd21c CLSA-2026:1785153163 TuxCare License Agreement 0 - CVE-2026-55655: gate the client-side abstract X11 socket behind SSH_INSECURE_ABSTRACT_SOCKET_ENABLED to prevent MITM of forwarded X11 via abstract UNIX socket pre-binding; backport downstream f5884eb Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55655: gate the client-side abstract X11 socket behind SSH_INSECURE_ABSTRACT_SOCKET_ENABLED to prevent MITM of forwarded X11 via abstract UNIX socket pre-binding; backport downstream f5884eb

0 tuxcare-almalinux9.2-esu openssh-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm 6da6c03353bd4bba5e8affaaf39c275db686ee9a9858ebbecfec5a253a036370 openssh-askpass-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm e5d5f08faec46930b2f8e0838f5c32e09d8e240774c5e33853a44566e7622563 openssh-clients-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm 1b8309c3ba09d1ad2e5855cb64fa3f5316440e820530591b5870246b3e3302ce openssh-keycat-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm 55cdfe28e2f3fafda8cc5a7f6d4b96b4f484fa073ec10405a8c402957312cbff openssh-server-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm f14ed71abf78e96e2e71600dfe08b7763789240db7a8c2a856e885822671e3c2 openssh-sk-dummy-8.7p1-30.el9_2.tuxcare.els22.x86_64.rpm 17a716d9075e4167d09b7a3716ebfb91eb3f97e9a8912bc0159c8d8ee80dea7f pam_ssh_agent_auth-0.10.4-5.30.el9_2.tuxcare.els22.x86_64.rpm 0252c988aeb91d7198be71de07e41e2ab354e3a7998fc3a8ffa70ba26f3cc91a CLSA-2026:1784909800 TuxCare License Agreement 0 - rebase to 2.4.0 to fix CVE-2026-54369 and CVE-2026-54370 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 2.4.0 to fix CVE-2026-54369 and CVE-2026-54370

0 tuxcare-almalinux9.2-esu acl-2.4.0-1.el9_2.tuxcare.els1.x86_64.rpm f85baada766c326a4fb644449fa59a5c4b5c1d9b87792dd035cfe851561ae5e6 libacl-2.4.0-1.el9_2.tuxcare.els1.i686.rpm 28a2ac0fb39e5332645ecb1273cb83190e0bbcbea775fcb7c192359b841a38e8 libacl-2.4.0-1.el9_2.tuxcare.els1.x86_64.rpm be1eb578e3bd7cb796911a9ae28d79036ad1297f83ef7028163e70b1333ad01b libacl-devel-2.4.0-1.el9_2.tuxcare.els1.i686.rpm c908e9008bca29c25bbec5858b959b7f5251453a94874d8b64031b76b02cd181 libacl-devel-2.4.0-1.el9_2.tuxcare.els1.x86_64.rpm acb18620148aabfe6ff26194e02f34a8026dfe7c8a3d5028e234e375620067e3 CLSA-2026:1782151303 TuxCare License Agreement 0 - spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485} - Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037} - net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419} - bonding: do not set usable_slaves for broadcast mode {CVE-2026-31419} - net: bonding: update the slave array for broadcast mode {CVE-2026-31419} - dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125} - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448} - net: Fix an unsafe loop on the list {CVE-2024-50024} - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636} - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx {CVE-2023-54300} - wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909} - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream {CVE-2024-49913} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset {CVE-2024-50142} - serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967} - iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind {CVE-2023-53501} - octeontx2-af: Add validation before accessing cgx and lmac {CVE-2023-53654} - sctp: sysctl: rto_min/max: avoid using current->nsproxy {CVE-2025-21639} - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices {CVE-2023-52984} - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start {CVE-2024-49944} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451} - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR {CVE-2022-48703} - x86/mm: Fix pti_clone_pgtable() alignment assumption {CVE-2024-44965} - net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725} - ALSA: hda: Do not unset preset when cleaning up codec {CVE-2023-52736} - drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func {CVE-2024-49909} - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE {CVE-2024-53144} - fuse: Initialize beyond-EOF page contents before setting uptodate {CVE-2024-44947} - sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637} - dm stats: check for and propagate alloc_percpu failure {CVE-2023-53044} - netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005} - tracing: Fix overflow in get_free_elt() {CVE-2024-43890} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902} - xen/netfront: stop tx queues during live migration {CVE-2022-48969} - Bluetooth: btusb: clamp SCO altsetting table indices {CVE-2026-31497} - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free {CVE-2025-38105} - can: j1939: make j1939_sk_bind() fail if device is no longer registered {CVE-2025-39925} - nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() {CVE-2023-52508} - smb: client: Don't log plaintext credentials in cifs_set_cifscreds {CVE-2026-23303} - cifs: Fix integer overflow while processing acdirmax mount option {CVE-2025-21963} - netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416} - drm/amdgpu/vkms: fix a possible null pointer dereference {CVE-2023-52815} - drm/amd/amdgpu: Check tbo resource pointer {CVE-2024-46807} - bonding: fix null pointer deref in bond_ipsec_offload_ok {CVE-2024-44990} - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower {CVE-2024-50237} - trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005} - drm/amdkfd: Add sync after creating vram bo {CVE-2023-53009} - bpf: Send signals asynchronously if !preemptible {CVE-2025-21728} - drm/client: fix null pointer dereference in drm_client_modeset_probe {CVE-2024-43894} - ext4: correct grp validation in ext4_mb_good_group {CVE-2023-53861} - RDMA/irdma: Initialize free_qp completion before using it {CVE-2026-31492} - usb: udc: remove warning when queue disabled ep {CVE-2024-35822} - bpf: Remove tst_run from lwt_seg6local_prog_ops. {CVE-2024-46754} - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet {CVE-2024-56590} - tls: stop recv() if initial process_rx_list gave us non-DATA {CVE-2024-58239} - iommu/vt-d: Clean up si_domain in the init_dmars() error path {CVE-2022-50482} - ext4: update s_journal_inum if it changes after journal replay {CVE-2023-53091} - cifs: Fix xid leak in cifs_copy_file_range() {CVE-2022-50643} - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit {CVE-2024-49938} - nbd: null check for nla_nest_start {CVE-2024-27025} - netfilter: ipset: Hold module reference while requesting a module {CVE-2024-56637} - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 {CVE-2024-46817} - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() {CVE-2026-31512} - Bluetooth: MGMT: Add error handling to pair_device() {CVE-2024-43884} - netfilter: nf_conntrack_expect: skip expectations in other netns via proc {CVE-2026-31496} - nvme-pci: fix mempool alloc size {CVE-2022-50756} - fs: fix fd table size alignment properly {CVE-2024-45025} - gpio: sim: fix a memory leak {CVE-2023-52706} - ice: switch: fix potential memleak in ice_add_adv_recipe() {CVE-2022-48709} - netfilter: ebtables: fix memory leak when blob is malformed {CVE-2022-48641} - mfd: syscon: Fix null pointer dereference in of_syscon_register() {CVE-2023-52467} - netfilter: ipset: drop logically empty buckets in mtype_del {CVE-2026-31418} - scsi: megaraid_sas: Fix for a potential deadlock {CVE-2024-57807} - ALSA: hda: Fix possible null-ptr-deref when assigning a stream {CVE-2023-52806} - drm/amd/display: Avoid NULL dereference of timing generator {CVE-2023-52753} - netfilter: nft_socket: fix sk refcount leaks {CVE-2024-46855} - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken {CVE-2025-38099} - objtool: Fix memory leak in create_static_call_sections() {CVE-2023-53423} - ceph: defer stopping mdsc delayed_work - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga {CVE-2023-52819} - rethook: fix a potential memleak in rethook_alloc() {CVE-2022-49795} - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() {CVE-2022-49787} - scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() {CVE-2023-53132} - cifs: fix small mempool leak in SMB2_negotiate() {CVE-2022-49938} - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() {CVE-2022-50191} - watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource {CVE-2022-50110} - drm/ttm: fix bulk_move corruption when adding a entry {CVE-2023-53444} - clk: Fix memory leak in devm_clk_notifier_register() {CVE-2023-53674} - md: raid1: fix potential OOB in raid1_remove_disk() {CVE-2023-53722} - wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU {CVE-2023-54052} - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags {CVE-2024-49923} - recordmcount: Fix memory leaks in the uwrite function {CVE-2023-53318} - crypto: cavium - prevent integer overflow loading firmware {CVE-2022-50330} - integrity: Fix memory leakage in keyring allocation error path {CVE-2022-50395} - mmc: toshsd: fix return value check of mmc_add_host() {CVE-2022-50886} - RDMA/efa: Fix wrong resources deallocation order {CVE-2023-54201} - inet: read sk->sk_family once in inet_recv_error() {CVE-2024-26679} - ALSA: pcm: Add sanity NULL check for the default mmap fault handler {CVE-2024-53180} - net_sched: Prevent creation of classes with TC_H_ROOT {CVE-2025-21971} - net: usb: smsc95xx: Limit packet length to skb->len {CVE-2023-53062} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() {CVE-2024-35930} - devres: Fix memory leakage caused by driver API devm_free_percpu() {CVE-2024-43871} - rdma/cxgb4: Prevent potential integer overflow on 32bit {CVE-2024-57973} - ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects {CVE-2023-53708} - rxrpc: Fix missing locking causing hanging calls {CVE-2024-50294} - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() {CVE-2024-50008} - ELF: fix kernel.randomize_va_space double read {CVE-2024-46826} - crypto: bcm - add error check in the ahash_hmac_init function {CVE-2024-56681} - drm/amd/pm: fix null pointer access {CVE-2025-38705} - ALSA: line6: Fix racy access to midibuf {CVE-2024-44954} - ALSA: us122l: Use snd_card_free_when_closed() at disconnection {CVE-2024-56532} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node {CVE-2023-52662} - drm/amd/display: Initialize denominators' default to 1 {CVE-2024-49899} - ipmi: fix use after free in _ipmi_destroy_user() {CVE-2022-50677} - Bluetooth: Fix memory leak in hci_req_sync_complete() {CVE-2024-35978} - null_blk: fix validation of block size {CVE-2024-41077} - ionic: Fix netdev notifier unregister on failure {CVE-2024-56715} - cifs: Fix integer overflow while processing acregmax mount option {CVE-2025-21964} - pm: cpupower: bench: Prevent NULL dereference on malloc failure {CVE-2025-37841} - nvmet-tcp: fix kernel crash if commands allocation fails {CVE-2024-46737} - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() {CVE-2024-50259} - wireguard: allowedips: avoid unaligned 64-bit memory accesses {CVE-2024-42247} - drm/amd/pm: Prevent division by zero {CVE-2025-37770} - drm/sched: Increment job count before swapping tail spsc queue {CVE-2025-38515} - i2c: qup: jump out of the loop in case of timeout {CVE-2025-38671} - brcmfmac: return error when getting invalid max_flowrings from dongle {CVE-2022-50358} - PNP: fix name memory leak in pnp_alloc_dev() {CVE-2022-50278} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN {CVE-2025-38393} - regmap: Fix race condition in hwspinlock irqsave routine {CVE-2026-23071} - drm/amd/pm: Prevent division by zero {CVE-2025-37768} - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() {CVE-2022-49780} - RDMA/cm: Fix leaking the multicast GID table reference {CVE-2025-71084} - netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116} - drop_monitor: fix incorrect initialization order {CVE-2025-21862} - wifi: nl80211: disallow setting special AP channel widths {CVE-2024-43912} - net/mlx5: Fix steering rules cleanup {CVE-2023-53079} - usbnet: Fix using smp_processor_id() in preemptible code warnings {CVE-2025-40164} - mptcp: fix slab-use-after-free in __inet_lookup_established {CVE-2026-31669} - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc {CVE-2024-58009} - fs/binfmt_elf: Fix memory leak in load_elf_binary() {CVE-2022-50466} - drm/amdgpu: set the right AMDGPU sg segment limitation {CVE-2024-56594} - bridge: mcast: Fix use-after-free during router port configuration {CVE-2025-38248} - xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663} - fuse: reject oversized dirents in page cache {CVE-2026-31694} - drm/amd/display: Do not skip unrelated mode changes in DSC validation {CVE-2026-31488} - net/mlx5: Collect command failures data only for known commands {CVE-2023-53340} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr {CVE-2025-68183} - scsi: sg: Do not sleep in atomic context {CVE-2025-40259} - scsi: sd: Fix off-by-one error in sd_read_block_characteristics() {CVE-2024-47682} - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586} - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449} - nbd: fix race between timeout and normal completion {CVE-2024-49855} - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() {CVE-2025-21724} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485} - Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037} - net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419} - bonding: do not set usable_slaves for broadcast mode {CVE-2026-31419} - net: bonding: update the slave array for broadcast mode {CVE-2026-31419} - dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125} - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448} - net: Fix an unsafe loop on the list {CVE-2024-50024} - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636} - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx {CVE-2023-54300} - wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909} - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream {CVE-2024-49913} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset {CVE-2024-50142} - serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967} - iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind {CVE-2023-53501} - octeontx2-af: Add validation before accessing cgx and lmac {CVE-2023-53654} - sctp: sysctl: rto_min/max: avoid using current->nsproxy {CVE-2025-21639} - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices {CVE-2023-52984} - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start {CVE-2024-49944} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451} - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR {CVE-2022-48703} - x86/mm: Fix pti_clone_pgtable() alignment assumption {CVE-2024-44965} - net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725} - ALSA: hda: Do not unset preset when cleaning up codec {CVE-2023-52736} - drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func {CVE-2024-49909} - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE {CVE-2024-53144} - fuse: Initialize beyond-EOF page contents before setting uptodate {CVE-2024-44947} - sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637} - dm stats: check for and propagate alloc_percpu failure {CVE-2023-53044} - netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005} - tracing: Fix overflow in get_free_elt() {CVE-2024-43890} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902} - xen/netfront: stop tx queues during live migration {CVE-2022-48969} - Bluetooth: btusb: clamp SCO altsetting table indices {CVE-2026-31497} - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free {CVE-2025-38105} - can: j1939: make j1939_sk_bind() fail if device is no longer registered {CVE-2025-39925} - nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() {CVE-2023-52508} - smb: client: Don't log plaintext credentials in cifs_set_cifscreds {CVE-2026-23303} - cifs: Fix integer overflow while processing acdirmax mount option {CVE-2025-21963} - netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416} - drm/amdgpu/vkms: fix a possible null pointer dereference {CVE-2023-52815} - drm/amd/amdgpu: Check tbo resource pointer {CVE-2024-46807} - bonding: fix null pointer deref in bond_ipsec_offload_ok {CVE-2024-44990} - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower {CVE-2024-50237} - trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005} - drm/amdkfd: Add sync after creating vram bo {CVE-2023-53009} - bpf: Send signals asynchronously if !preemptible {CVE-2025-21728} - drm/client: fix null pointer dereference in drm_client_modeset_probe {CVE-2024-43894} - ext4: correct grp validation in ext4_mb_good_group {CVE-2023-53861} - RDMA/irdma: Initialize free_qp completion before using it {CVE-2026-31492} - usb: udc: remove warning when queue disabled ep {CVE-2024-35822} - bpf: Remove tst_run from lwt_seg6local_prog_ops. {CVE-2024-46754} - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet {CVE-2024-56590} - tls: stop recv() if initial process_rx_list gave us non-DATA {CVE-2024-58239} - iommu/vt-d: Clean up si_domain in the init_dmars() error path {CVE-2022-50482} - ext4: update s_journal_inum if it changes after journal replay {CVE-2023-53091} - cifs: Fix xid leak in cifs_copy_file_range() {CVE-2022-50643} - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit {CVE-2024-49938} - nbd: null check for nla_nest_start {CVE-2024-27025} - netfilter: ipset: Hold module reference while requesting a module {CVE-2024-56637} - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 {CVE-2024-46817} - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() {CVE-2026-31512} - Bluetooth: MGMT: Add error handling to pair_device() {CVE-2024-43884} - netfilter: nf_conntrack_expect: skip expectations in other netns via proc {CVE-2026-31496} - nvme-pci: fix mempool alloc size {CVE-2022-50756} - fs: fix fd table size alignment properly {CVE-2024-45025} - gpio: sim: fix a memory leak {CVE-2023-52706} - ice: switch: fix potential memleak in ice_add_adv_recipe() {CVE-2022-48709} - netfilter: ebtables: fix memory leak when blob is malformed {CVE-2022-48641} - mfd: syscon: Fix null pointer dereference in of_syscon_register() {CVE-2023-52467} - netfilter: ipset: drop logically empty buckets in mtype_del {CVE-2026-31418} - scsi: megaraid_sas: Fix for a potential deadlock {CVE-2024-57807} - ALSA: hda: Fix possible null-ptr-deref when assigning a stream {CVE-2023-52806} - drm/amd/display: Avoid NULL dereference of timing generator {CVE-2023-52753} - netfilter: nft_socket: fix sk refcount leaks {CVE-2024-46855} - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken {CVE-2025-38099} - objtool: Fix memory leak in create_static_call_sections() {CVE-2023-53423} - ceph: defer stopping mdsc delayed_work - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga {CVE-2023-52819} - rethook: fix a potential memleak in rethook_alloc() {CVE-2022-49795} - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() {CVE-2022-49787} - scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() {CVE-2023-53132} - cifs: fix small mempool leak in SMB2_negotiate() {CVE-2022-49938} - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() {CVE-2022-50191} - watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource {CVE-2022-50110} - drm/ttm: fix bulk_move corruption when adding a entry {CVE-2023-53444} - clk: Fix memory leak in devm_clk_notifier_register() {CVE-2023-53674} - md: raid1: fix potential OOB in raid1_remove_disk() {CVE-2023-53722} - wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU {CVE-2023-54052} - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags {CVE-2024-49923} - recordmcount: Fix memory leaks in the uwrite function {CVE-2023-53318} - crypto: cavium - prevent integer overflow loading firmware {CVE-2022-50330} - integrity: Fix memory leakage in keyring allocation error path {CVE-2022-50395} - mmc: toshsd: fix return value check of mmc_add_host() {CVE-2022-50886} - RDMA/efa: Fix wrong resources deallocation order {CVE-2023-54201} - inet: read sk->sk_family once in inet_recv_error() {CVE-2024-26679} - ALSA: pcm: Add sanity NULL check for the default mmap fault handler {CVE-2024-53180} - net_sched: Prevent creation of classes with TC_H_ROOT {CVE-2025-21971} - net: usb: smsc95xx: Limit packet length to skb->len {CVE-2023-53062} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() {CVE-2024-35930} - devres: Fix memory leakage caused by driver API devm_free_percpu() {CVE-2024-43871} - rdma/cxgb4: Prevent potential integer overflow on 32bit {CVE-2024-57973} - ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects {CVE-2023-53708} - rxrpc: Fix missing locking causing hanging calls {CVE-2024-50294} - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() {CVE-2024-50008} - ELF: fix kernel.randomize_va_space double read {CVE-2024-46826} - crypto: bcm - add error check in the ahash_hmac_init function {CVE-2024-56681} - drm/amd/pm: fix null pointer access {CVE-2025-38705} - ALSA: line6: Fix racy access to midibuf {CVE-2024-44954} - ALSA: us122l: Use snd_card_free_when_closed() at disconnection {CVE-2024-56532} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node {CVE-2023-52662} - drm/amd/display: Initialize denominators' default to 1 {CVE-2024-49899} - ipmi: fix use after free in _ipmi_destroy_user() {CVE-2022-50677} - Bluetooth: Fix memory leak in hci_req_sync_complete() {CVE-2024-35978} - null_blk: fix validation of block size {CVE-2024-41077} - ionic: Fix netdev notifier unregister on failure {CVE-2024-56715} - cifs: Fix integer overflow while processing acregmax mount option {CVE-2025-21964} - pm: cpupower: bench: Prevent NULL dereference on malloc failure {CVE-2025-37841} - nvmet-tcp: fix kernel crash if commands allocation fails {CVE-2024-46737} - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() {CVE-2024-50259} - wireguard: allowedips: avoid unaligned 64-bit memory accesses {CVE-2024-42247} - drm/amd/pm: Prevent division by zero {CVE-2025-37770} - drm/sched: Increment job count before swapping tail spsc queue {CVE-2025-38515} - i2c: qup: jump out of the loop in case of timeout {CVE-2025-38671} - brcmfmac: return error when getting invalid max_flowrings from dongle {CVE-2022-50358} - PNP: fix name memory leak in pnp_alloc_dev() {CVE-2022-50278} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN {CVE-2025-38393} - regmap: Fix race condition in hwspinlock irqsave routine {CVE-2026-23071} - drm/amd/pm: Prevent division by zero {CVE-2025-37768} - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() {CVE-2022-49780} - RDMA/cm: Fix leaking the multicast GID table reference {CVE-2025-71084} - netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116} - drop_monitor: fix incorrect initialization order {CVE-2025-21862} - wifi: nl80211: disallow setting special AP channel widths {CVE-2024-43912} - net/mlx5: Fix steering rules cleanup {CVE-2023-53079} - usbnet: Fix using smp_processor_id() in preemptible code warnings {CVE-2025-40164} - mptcp: fix slab-use-after-free in __inet_lookup_established {CVE-2026-31669} - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc {CVE-2024-58009} - fs/binfmt_elf: Fix memory leak in load_elf_binary() {CVE-2022-50466} - drm/amdgpu: set the right AMDGPU sg segment limitation {CVE-2024-56594} - bridge: mcast: Fix use-after-free during router port configuration {CVE-2025-38248} - xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663} - fuse: reject oversized dirents in page cache {CVE-2026-31694} - drm/amd/display: Do not skip unrelated mode changes in DSC validation {CVE-2026-31488} - net/mlx5: Collect command failures data only for known commands {CVE-2023-53340} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr {CVE-2025-68183} - scsi: sg: Do not sleep in atomic context {CVE-2025-40259} - scsi: sd: Fix off-by-one error in sd_read_block_characteristics() {CVE-2024-47682} - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586} - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449} - nbd: fix race between timeout and normal completion {CVE-2024-49855} - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() {CVE-2025-21724}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm b4535bbc5aff2d3c150c8f9b756831248ea5388a6732861ff432dcf1756bce72 kernel-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 7d32705cb4d67df8606665320c6e024bc6853d047efc335ae5dd3c9143af2578 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els5.noarch.rpm f39ca6411e7f133525d9da1eeee64dc643873834381e3785f125b10c511a2a64 kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm a5f5995b31d6db87370707abd8c86a38e83177e0cb3f2d9189f066a3ee0ecae1 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 33af5593ab23472a03147a684c1632dfa56b240df443a490b1e2031c5bfcd74b kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 1207cb9109b9fc46187f3116f246e238dd1902dcad73f1fb6721c3a2457b1bf9 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 7f394b8f260f84d5b7ebe3ce65b99ac7c8dadc0aea120fea96dd475d0a224049 kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm ba76d50ca06564b0776af0283be18db5f17e9b812c43635b2cb267203bc41a48 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm dc08161c2ad9dee7fe2d6faf8bb650d8a96ed49f52635108e87837324d40499a kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm b8bd0f7806d4b85d59c3f332807a87cc495997095b92efd6876874dc265aac4c kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 73cb39dbc486e278de1e1f599f32c4529dc409d7853d3f1769de918625348e89 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm e7b80c439148ff3a2bdd37c257d43075d79e73c3b343814a4fcc87dd95dfb041 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 754a0b3fc418f7176b7e0d23297f6d3a6f86287642b9b6398b60a45f85076c18 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 590b1cee35a58b0d60db421ea47ebbbb6f7fced1d6381962913e1c8297aca1f9 kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 81d75d6692dc646e1a802e07f0ebec732bc7435dd4e32f114aeaa042964a41de kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 9aab7988ff5ae1aca84f80f9d4988e657053abcf2ee987f4c876675869465a1d kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 2a0d270c6012e9aacf002825399ec20ce11185d6361cc6e220e1c9c57e083f6e kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els5.noarch.rpm 1b5906109100b28de87eebf1282822bb1c36938900096e0363c4693b0547f92d kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 3a2defeb69b5b0edd00344f0794ba55f9e471433a13eaa0a8355909b5861aea6 kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm cc873e6ec028c692360586b596ccb4b95634a1f4b588dca726b0a9113b62bd3f kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 0d2d274efb77cf2506ef85c7d3e58a6ea8e5f7df6c1cad11303676dfc0c3c6cd kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 8b3820407563a97716302671015c2340d5f008d9f2677a3c5a27f5d72e2f55cb kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 9f06789c61f59229f39bc7a3ea5237db9b03d79c39d51e9219a0a724a96e2b26 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm cb05acf02a482c26871e72274693dca8eec1b86bcd6667634f78cad1e5c096c3 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm edd356f40364f8e1c6fb860f1c227b8102e4dffcfd2fbc94aab39e6e7e4dc160 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 19ce8e5216f1d86152563f3846d91de992f86f111fd259ce83bb9996539bea27 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 5ee01122884a80e62cc24cff7a8e6e01454a68aa4cd80624c807888773197051 kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm ae46d4add8b8575c25367edc03f34f00e2ff80bbbd0bc210c5ff814124b9edac kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm a78e2ff4a34dc6529b1295725edc2fb3691681a2638c615421cdaa44bddd32ed kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 04a38559132e0e4001e7702f12c9c19ddb8a2785d07ea2091af3dea8161c89ed libbpf-1.0.0-2.el9_2.tuxcare.11.els5.i686.rpm 629a4641f5dc09e1f89424412e5e841c6d375002ebb55e301b33a3208282a2a8 libbpf-1.0.0-2.el9_2.tuxcare.11.els5.x86_64.rpm 54df4152f0d3b6fb75caac0d235f366c5ba0dbd261791fb5dbf8e224aa4b424b libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els5.i686.rpm 797c062eb227ce840acb65cd98a9216efc3e4175d3440f7a3b6849e435c05b57 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els5.x86_64.rpm b6050b9d536ae93b9d20e18a44430eb1a403fd022388703529c41b66f782b7aa libbpf-static-1.0.0-2.el9_2.tuxcare.11.els5.i686.rpm a05dd46bf9e3354b21d92dff946d705e3fa28e1e6e81fee69e2d22ed691346d5 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els5.x86_64.rpm 266dbf7ce0282c44bb9f7070da7d5de81219d036481eb4d56bc8d93e14a8f88a perf-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 151979e70e2aab64cfa03f783470d324a38883c1678ebeab367d0b5bddbc94f4 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 32cfb3de865742727cc47c487b5281809e2a35b826c8d90a7790c788186af763 rtla-5.14.0-284.1101.el9_2.tuxcare.11.els5.x86_64.rpm 2fc566ea4985858599793f96a67107c5b786c1b620ed11b358a93807bcf241f4 CLSA-2026:1785316580 TuxCare License Agreement 0 - CVE-2022-41862: NULL-terminate the GSSAPI receive buffer on error packets so a modified server cannot make libpq over-read into its error message Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-41862: NULL-terminate the GSSAPI receive buffer on error packets so a modified server cannot make libpq over-read into its error message

0 tuxcare-almalinux9.2-esu libpq-13.5-1.el9.tuxcare.els4.i686.rpm 68d052b46e4ffef07410365cdf6164d57cfca5d46eafd514691ead387160d0a7 libpq-13.5-1.el9.tuxcare.els4.x86_64.rpm b777e01ebf702839cdecaae055c2fac446fda746bbd08112f2adbeb3eb619d46 libpq-devel-13.5-1.el9.tuxcare.els4.i686.rpm 9a3baa6521f18312b199638a7dc52949613ddb6b270520be9538faff889a29cc libpq-devel-13.5-1.el9.tuxcare.els4.x86_64.rpm 30c5d76482e3437b06749e29cb9e3556cbee39c2681b6c77fae08caf5db8d655 CLSA-2026:1785318558 TuxCare License Agreement 0 - CVE-2026-42923: cap NSEC3 hash calculations in the negative-cache DS proof and reject oversized NSEC3 salt - CVE-2024-43168: reject negative port numbers in outgoing-port-permit/avoid to prevent an out-of-bounds write Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42923: cap NSEC3 hash calculations in the negative-cache DS proof and reject oversized NSEC3 salt - CVE-2024-43168: reject negative port numbers in outgoing-port-permit/avoid to prevent an out-of-bounds write

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9_2.tuxcare.els10.x86_64.rpm 01198e5dfbf4775d475e042585846e18e5597184d7e67970680b8875452d36fc unbound-1.16.2-3.el9_2.tuxcare.els10.x86_64.rpm 275b9667543387b9de3e18bdf7fad2fef15831d51c2cfb6a3a309c4e0a7bfa62 unbound-devel-1.16.2-3.el9_2.tuxcare.els10.i686.rpm 645d0a6b0b33c9db87dc14eb4b17e67d0eb1b7fc9db607ec230fa1be37e393e3 unbound-devel-1.16.2-3.el9_2.tuxcare.els10.x86_64.rpm 7c18eacb7a7c3df1291d665bec3adddfd454fc6be2ea5177bfe9d79dc2dbdabb unbound-libs-1.16.2-3.el9_2.tuxcare.els10.i686.rpm bcd62679b693e96759c5200b90799b4780636f5cbc95c4197c83ba7ecb8cd567 unbound-libs-1.16.2-3.el9_2.tuxcare.els10.x86_64.rpm dff304bc0f0af3faaabbd15fa1c3fccf29d2437d933cbdc56fb458fd270c4dae CLSA-2026:1785332252 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-47063: enhance jar handling - CVE-2026-46917: improve DTLS handshaking - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-47063: enhance jar handling - CVE-2026-46917: improve DTLS handshaking - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32

0 tuxcare-almalinux9.2-esu java-11-openjdk-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm 762d3ccd0295590171d58c7c4d1200072aa110abb00a7e1a5ea985070a24fa1e java-11-openjdk-demo-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm 163bf1f3d4560e6b94fe6cac2cf74c3e304b3e520133798b1271bec7a61103eb java-11-openjdk-devel-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm cdfee70852919e8cceda48e2ac0a7354f4f1a1dcb9a44d02faaab7cc131e8c74 java-11-openjdk-headless-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm e922f96561f43b993214cc1d898dfa78666e380fb535005de0a752bd765e54cb java-11-openjdk-javadoc-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm 0b872bfd9e52706027702be1da44da066c09e465c1537ac074ecd1c28dd21c87 java-11-openjdk-javadoc-zip-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm ca51486ac46172ad6adb66d10cddb8fb1a59cd75e408d4fd7a4b83f7c014e100 java-11-openjdk-jmods-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm d44dd29f3f6bb359755b3054f68bb4f754b2f65d50ffe42c5b7e8c9c20882aa1 java-11-openjdk-src-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm 8a432154afbdeeb7376941a592935ea4b8af37c531e4d8ddf7c5b0a67ebef9e0 java-11-openjdk-static-libs-11.0.32.0.9-1.el9.tuxcare.els1.x86_64.rpm bea701ddbca2092aefa8e2f7d675cb25acd70808849b87c1ccd1395dc7f1d7f6 CLSA-2026:1785335342 TuxCare License Agreement 0 - CVE-2026-34380: fix signed 32-bit integer overflow in the PXR24 decoder bounds check, where (uint64_t) (w * 3) wrapped to a small positive value and allowed an out-of-bounds write through dout - CVE-2026-34378: fix signed 32-bit integer overflow in srcbuffer pointer arithmetic in the unpack_* routines, reached via an oversized dataWindow width Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34380: fix signed 32-bit integer overflow in the PXR24 decoder bounds check, where (uint64_t) (w * 3) wrapped to a small positive value and allowed an out-of-bounds write through dout - CVE-2026-34378: fix signed 32-bit integer overflow in srcbuffer pointer arithmetic in the unpack_* routines, reached via an oversized dataWindow width

0 tuxcare-almalinux9.2-esu openexr-3.1.1-3.el9.tuxcare.els9.x86_64.rpm f3d4e1b32e3e64f4cb20e132bc5b62e311713a06cca9f84ebf161f09bf932e05 openexr-devel-3.1.1-3.el9.tuxcare.els9.i686.rpm 7dbbc7a30def7f573eed4a91fdaee688591febf24b4d3dd03f5479f2748264af openexr-devel-3.1.1-3.el9.tuxcare.els9.x86_64.rpm b3d33307d997dd74eea26ed27d0b97233509400e2425bcc6c043cc289110d8d1 openexr-libs-3.1.1-3.el9.tuxcare.els9.i686.rpm 6a3c78052f12f5c6551c0d087f0e044e831c0b4d99f8ef51d45d1adeb1da7899 openexr-libs-3.1.1-3.el9.tuxcare.els9.x86_64.rpm 23654276ee85a1d77710ea4110c50b519ffc9bd861df97686bd81db6d49c0525 CLSA-2026:1785337661 TuxCare License Agreement 0 - CVE-2026-15169: fix UMTS FP dissector out-of-bounds write by bounding both the MAC-is PDU index and the per-PDU MAC-is SDU count to the 16-element subframe descriptor arrays Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15169: fix UMTS FP dissector out-of-bounds write by bounding both the MAC-is PDU index and the per-PDU MAC-is SDU count to the 16-element subframe descriptor arrays

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9_2.tuxcare.els12.x86_64.rpm 01ac36bc5b73cbddb33ec58bacea99bb23469dc5709306940cc7ca61d4e01e58 wireshark-cli-3.4.10-4.el9_2.tuxcare.els12.i686.rpm 12bcb9bf20e5d0145f2437c65188860bfdf1d19f6a88c923e98d1eee990a286b wireshark-cli-3.4.10-4.el9_2.tuxcare.els12.x86_64.rpm 77a145b31af0aca5fa4d6623d4a593fbec39d0e21a5575ffd6af8f1d0b56d3af wireshark-devel-3.4.10-4.el9_2.tuxcare.els12.i686.rpm 01476e7bd38d0140b13a6e83742ab97b97f704a820597fe95005cbbe744d1213 wireshark-devel-3.4.10-4.el9_2.tuxcare.els12.x86_64.rpm a3600bbd605010674ce017aa7a011f540abc303a1d38fbaaf5341dfe503ba9ae CLSA-2026:1785324019 TuxCare License Agreement 0 - Update to jdk-17.0.20+8 (GA) - CVE-2026-41254: fix integer overflow in the bundled Little CMS CubeSize function that could lead to information disclosure or denial of service when processing crafted colour profiles (bundled LCMS updated to 2.19.1) - CVE-2026-46917: improve DTLS handshaking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47027: enhance Jar file processing - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47063: enhance Jar handling - CVE-2026-60147: improve certification checking Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to jdk-17.0.20+8 (GA) - CVE-2026-41254: fix integer overflow in the bundled Little CMS CubeSize function that could lead to information disclosure or denial of service when processing crafted colour profiles (bundled LCMS updated to 2.19.1) - CVE-2026-46917: improve DTLS handshaking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47027: enhance Jar file processing - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47063: enhance Jar handling - CVE-2026-60147: improve certification checking

0 tuxcare-almalinux9.2-esu java-17-openjdk-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm d5e38cb11242923b696088fd3dca9a64e348f717f788235f3bcc68c39fadcabf java-17-openjdk-demo-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 0bcf7a741a32df5345f96081751aa3fc22ea221492be409bd49406de6afb4083 java-17-openjdk-demo-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm b32f31d089979dfb172a6cfc4b6c33d7d8368423ee3a084668c533b9776ec115 java-17-openjdk-demo-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 8aca3253c81acd57405a209546ea1a78b723439525c3d488de8954fb2611bec2 java-17-openjdk-devel-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 885abaaf0f5fdfac63de29d2a37e112453a3fd522caa10c85e48568361c151e6 java-17-openjdk-devel-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 817ae0592ee689bf67dc65bb1c2b437a1330bae488e54870d4fe1b3b85e17021 java-17-openjdk-devel-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 5aa711735f5c70c17f9faaf07e926a00ba091e6347e3af8d62179c8ce54024a8 java-17-openjdk-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 9098c08cdf1775e36e336278c514c530e4faa5aaf281113336b80816a8cb9a9d java-17-openjdk-headless-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm b4b4839c406041dc5f0f3f9d912464a5e782cd6e3ad1cce8e6f9b6a91651e48a java-17-openjdk-headless-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 94e967d397b1e3cf9a8250338bcad942a7984cfe3849979a081846e6f3649500 java-17-openjdk-headless-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 9e8fb631ff03386f32bac2f2d5729d9a2119149e02642fd16eedc132f46c5a43 java-17-openjdk-javadoc-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 5c0716d81e7588301658037f2f91cfe4a6264d71d349addd6027f7d81537b7c0 java-17-openjdk-javadoc-zip-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm e2adb60539bcb8150468c224bc66d41f459e875a0de7ddc675cbfc99573e1b0a java-17-openjdk-jmods-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 18a8977fa3d9440ed833596a2a7c02a17e336aeef6a77fb91ee020dffc99d7af java-17-openjdk-jmods-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm be90d8957647d2aa552ea65d85d7ed98c7e5649ace2af46ad8e9cc6dd07c727a java-17-openjdk-jmods-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 28b86b0c711e9768276a87616f360b4129ba5ccc25c1702a9ce9665c48535c89 java-17-openjdk-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 123605ffb25bab6215976506be12d1b48b46116b365bb383ca97c7b9b96e06a0 java-17-openjdk-src-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 920ec7c847c24fa2f7620e66cda3d0958b0c7f95b0b477e5b74ca60269452b3b java-17-openjdk-src-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 2e7c6d0f0d2a3ae41dbddafbcde23bf4e1ab07e4b84077f1a38543d3e587905b java-17-openjdk-src-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 6836c1e254b4595ad2009af9fbcf0117b9cbcbddaaaea046b75310f837c6ec35 java-17-openjdk-static-libs-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 16b936b9d4f02564fd1bd9a6a72c45dad4525fe3a7ee0f1ff72ec7c74bbf8766 java-17-openjdk-static-libs-fastdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 93ab2ba4497c6b565414f5f802e18f0805955451b3d0f8afe27d4a8545917b2a java-17-openjdk-static-libs-slowdebug-17.0.20.0.8-1.el9.tuxcare.els1.x86_64.rpm 34deb54aedcf08964b141d87f6753444251761481fb5cd62f93cebb3e8950dc6 CLSA-2026:1785406290 TuxCare License Agreement 0 - CVE-2026-12912: heap-based buffer overflow in PixarLog 8BITABGR decode with stride 3 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12912: heap-based buffer overflow in PixarLog 8BITABGR decode with stride 3

0 tuxcare-almalinux9.2-esu libtiff-4.4.0-8.el9_2.tuxcare.els13.i686.rpm bf88d2d92f0acecd0438135aa7c6bd373316a916a0789793794326ecefe0b0e0 libtiff-4.4.0-8.el9_2.tuxcare.els13.x86_64.rpm b6d29243b57b2d2727423b3e8f310f300fb681a799b43d1337ad4dfc01393db1 libtiff-devel-4.4.0-8.el9_2.tuxcare.els13.i686.rpm 6ff37147d437d74f2083b72957c2d3933b62d47beebd0871939778b2568d08ab libtiff-devel-4.4.0-8.el9_2.tuxcare.els13.x86_64.rpm 76cde410b5e17765d64b69b990ca72f664a98ea230267f056985a5a9a93357eb libtiff-static-4.4.0-8.el9_2.tuxcare.els13.x86_64.rpm 225faf16dde22f2493e934474b875a6bce559458525613f87aa9478eea8334b0 libtiff-tools-4.4.0-8.el9_2.tuxcare.els13.x86_64.rpm f3548d03d949ea677c6a02a03b24a7db8623471723739d2b621fd76a3788470f CLSA-2026:1785408515 TuxCare License Agreement 0 - CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964: fix out-of-bounds reads in the Phase One / Fujifilm metadata decoders (phase_one_correct / fuji 0xf00c); backport upstream 0.21.4 fixes Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964: fix out-of-bounds reads in the Phase One / Fujifilm metadata decoders (phase_one_correct / fuji 0xf00c); backport upstream 0.21.4 fixes

0 tuxcare-almalinux9.2-esu LibRaw-0.20.2-5.el9_2.tuxcare.els6.i686.rpm 3e18f79cf5429e76daf231804be6e591187f88f628cc052de628becd45e79c4d LibRaw-0.20.2-5.el9_2.tuxcare.els6.x86_64.rpm dcada86ee2ae20bc69d3da63c3ed8df1083999a32fa51b673e692d58e70ef8b9 LibRaw-devel-0.20.2-5.el9_2.tuxcare.els6.i686.rpm b18b720e3cec62a4134f72e4563c232e6c977fca92b0659e3232becdb4b0a5d3 LibRaw-devel-0.20.2-5.el9_2.tuxcare.els6.x86_64.rpm ad2992c4c3dced0af245fa721518e610661c5960a2d02e640e28068dcf909754 LibRaw-samples-0.20.2-5.el9_2.tuxcare.els6.x86_64.rpm c24de5cac68fe25f8eacc049e57f05c387a2ca7130be6434a959f3c8f9b9516d LibRaw-static-0.20.2-5.el9_2.tuxcare.els6.x86_64.rpm 7f84a9d85aaa94fb7c373c922a78d8b90fde33449e0dc312c29692ea6157708b CLSA-2026:1785421184 TuxCare License Agreement 0 - CVE-2025-68119: use safer flag/argument syntax in cmd/go VCS commands and reject module versions prefixed with '-' or '/' Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68119: use safer flag/argument syntax in cmd/go VCS commands and reject module versions prefixed with '-' or '/'

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els20.x86_64.rpm 2e2fce0695d1966dc360901c516b3be39c6583abf0007e9ff51e2ab1cef32423 golang-1.22.9-1.el9_2.tuxcare.els20.x86_64.rpm e66fdff81a497a271c78e0d4229076f735e2737a79e98240e83a69bf6c0fc91b golang-bin-1.22.9-1.el9_2.tuxcare.els20.x86_64.rpm 6bc5e09ec0ae56b8976d69bdb13ee008b7dd06394b0fd20478e73120d3761fc8 golang-docs-1.22.9-1.el9_2.tuxcare.els20.noarch.rpm 25c968304d877a0ce7788b0920b1df55ccbed67cddd9a7ca11407d5481c799ab golang-misc-1.22.9-1.el9_2.tuxcare.els20.noarch.rpm a1346efd58087c6595b842f162529d12d3459dbc953c31e3c582a0861d289c11 golang-src-1.22.9-1.el9_2.tuxcare.els20.noarch.rpm e80bb12db3eb569cb523c04e626f4bccdf245ffd985cf6c9f8a554c24ec72fad golang-tests-1.22.9-1.el9_2.tuxcare.els20.noarch.rpm 54005e29bcd9fb164ea8cb7be8403ba93458a9ce522e9c2b3a4c43e8f50ab6e2 CLSA-2026:1785422092 TuxCare License Agreement 0 - CVE-2026-14957: fix a remotely triggerable assertion failure in add_decoded_cert() when the peer certificate public key cannot be extracted Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-14957: fix a remotely triggerable assertion failure in add_decoded_cert() when the peer certificate public key cannot be extracted

0 tuxcare-almalinux9.2-esu libreswan-4.12-2.el9_2.tuxcare.els5.x86_64.rpm 424bfea603bcca1d0f7f86f1924cb47159defa7aed7b479daba88132c39461d7 CLSA-2026:1785422875 TuxCare License Agreement 0 - CVE-2026-42946: fix buffer over-read and excessive memory allocation in ngx_http_scgi_module and ngx_http_uwsgi_module when an upstream server returns an unrecognized status line; reset r->state before falling back to header parsing so the header parser no longer resumes from a status-line state and reads through an uninitialized r->header_name_start, and reuse r->header_name_start to backtrack the buffer position for status lines split across reads Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42946: fix buffer over-read and excessive memory allocation in ngx_http_scgi_module and ngx_http_uwsgi_module when an upstream server returns an unrecognized status line; reset r->state before falling back to header parsing so the header parser no longer resumes from a status-line state and reads through an uninitialized r->header_name_start, and reuse r->header_name_start to backtrack the buffer position for status lines split across reads

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.x86_64.rpm e16dd3ae0f13af1a8c90c97060fe434e7e9ea3464e521f7c755a21385a8f7ae2 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.noarch.rpm 0709a01ddd03cbc9eb29d8f2b9ea123f8d9e71690149ed7ae155021d334b72c7 nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.x86_64.rpm 50c9ae3e63c6602ef643cfac1c17cb819c2d3c024ae882e2959221962d0289e9 nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.noarch.rpm 30ae36c51d2d176570a76a935eda1529522e09390d8de90ce3d397051f6b98f8 nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.x86_64.rpm 0435ea8d3227346568dfb39a8a59cc3475f339782057e6ea6867d27476cc2b3e nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.x86_64.rpm 58d8aeba6f69ab2f7f2c0a78bdf0cf013a2e32e7ecffcb6b6c8beefdbdeedda4 nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.x86_64.rpm 156265aee03c27e825c1d4225a4d99068e1d2c199f38e04c2491dade1b120387 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.x86_64.rpm 635aa9afc9037f64e08997b16d9f8322d0ab90006b6b937bbfa910ec6f54dc2b nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.x86_64.rpm c7ce66cb1af334b9026e53ebc9348e10772b361311555f7e321e5bd22797de7c nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els12.x86_64.rpm e040567b0ca3ed74ef435709e9be81d87608e1f858f29f799d98d5d090cf8763 CLSA-2026:1785427487 TuxCare License Agreement 0 - CVE-2022-0213: bound the space appended to the window status line so it cannot be written past the end of NameBuff - CVE-2024-43802: check that the typeahead buffer has room before advancing the offset when flushing mapped characters - CVE-2026-28422: account for the byte length of a multi-byte fill character when sizing the status line buffer and when padding item groups - CVE-2022-0351: limit expression recursion depth so a deeply nested condition cannot exhaust the stack Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-0213: bound the space appended to the window status line so it cannot be written past the end of NameBuff - CVE-2024-43802: check that the typeahead buffer has room before advancing the offset when flushing mapped characters - CVE-2026-28422: account for the byte length of a multi-byte fill character when sizing the status line buffer and when padding item groups - CVE-2022-0351: limit expression recursion depth so a deeply nested condition cannot exhaust the stack

0 tuxcare-almalinux9.2-esu vim-X11-8.2.2637-22.el9_2.1.tuxcare.els40.x86_64.rpm 4e22e09b62ed07ca1d3149447ce606c19d088e02a192730766feec4762f6b885 vim-common-8.2.2637-22.el9_2.1.tuxcare.els40.x86_64.rpm d253b71f4c3a8b7532f0cf48dc866d73a357565cc50d039a0a518674c596a784 vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els40.x86_64.rpm 4aa6ef931593b5a93e2c945e93006ed169358a23cd40d4e3fa7fe1fed29f250f vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els40.noarch.rpm 6eea1529d87feca3a59730131fdcf87e08590455c0d0f3b6945f04e017ca48fe vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els40.x86_64.rpm 4258173397b7de12e638fd02d3fc9a0f9911c84132d84aaae2771876b51ee57f CLSA-2026:1785428387 TuxCare License Agreement 0 - CVE-2026-27820: zlib: fix buffer overflow in Zlib::GzipReader#ungetc by always growing the output buffer before the memmove Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27820: zlib: fix buffer overflow in Zlib::GzipReader#ungetc by always growing the output buffer before the memmove

0 tuxcare-almalinux9.2-esu ruby-3.0.4-160.el9_2.tuxcare.els18.i686.rpm 6d04fb8f1089c2178a2e94f846b9e951b9311aa4aa72cf74e95e3c03c303b2ca ruby-3.0.4-160.el9_2.tuxcare.els18.x86_64.rpm b15b015f047209c3a7ae4d9cd762007f703d5a81b6a5fa3c552680a1d4b3edd6 ruby-default-gems-3.0.4-160.el9_2.tuxcare.els18.noarch.rpm 17aef72b04fc4b71b8a81729523b7016af2e087b408b51b7242ce2877b271b1e ruby-devel-3.0.4-160.el9_2.tuxcare.els18.i686.rpm e901526b496b7c172ee5269c86ab8edef449c4be3bc2deece78782fd551b946c ruby-devel-3.0.4-160.el9_2.tuxcare.els18.x86_64.rpm cbb45a054ac1244034d2e80ebe4393f88cd7db06c348374efbe9836c5c227124 ruby-doc-3.0.4-160.el9_2.tuxcare.els18.noarch.rpm 0bf2264c606cf4d352b86b308c5f74493c293a995c67f9b7f741ce0724a656e1 ruby-libs-3.0.4-160.el9_2.tuxcare.els18.i686.rpm bc586b5f0678c61a530dcadd279cd58fd1b2f5c88653cb4584befee1ad97a6eb ruby-libs-3.0.4-160.el9_2.tuxcare.els18.x86_64.rpm 2b04ff241f6f3ed666330dd94acb8de4a8555299c4828b7e2f6f9deb5a1ba130 rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els18.i686.rpm de4b044b495e886023c77ec124fa0cda07741c801523cb9b4028382a5041fbdd rubygem-bigdecimal-3.0.0-160.el9_2.tuxcare.els18.x86_64.rpm daac51a8ced23a01dc295ff8f4d3935de23dab98a6e0b7e4f0ad51cdd77b58ba rubygem-bundler-2.2.33-160.el9_2.tuxcare.els18.noarch.rpm b746a3c72581240639bdb25a3c7540c6714cfa96dc56d821f02cfd90194f75c7 rubygem-io-console-0.5.7-160.el9_2.tuxcare.els18.i686.rpm 413fd405bc3c61b5cca7670ff01a1076f3493fd74bfb06c28bd333844bbf9530 rubygem-io-console-0.5.7-160.el9_2.tuxcare.els18.x86_64.rpm 212451fa64f3191d47750ecfa7bb98731f06e8f4fb610f95db2a86fa92c6ae0a rubygem-irb-1.3.5-160.el9_2.tuxcare.els18.noarch.rpm f1948ce63608a6fce562fdac7c139cebe537f07ee7ef23092eb171ec153c63a0 rubygem-json-2.5.1-160.el9_2.tuxcare.els18.i686.rpm 133d228a12feb6919155bd195b02c0017437e835e12adddeb7c9c6a8062689d3 rubygem-json-2.5.1-160.el9_2.tuxcare.els18.x86_64.rpm 20fe3549baf731de01ff9d583a1a001269ec460d538081d7a6d06c95d0228f51 rubygem-minitest-5.14.2-160.el9_2.tuxcare.els18.noarch.rpm 4ccc8d6a6c28e6d211422fc2bedd409984468ac3788820a22e0093c22d80c5fc rubygem-power_assert-1.2.0-160.el9_2.tuxcare.els18.noarch.rpm 2726e0f55ce3188a2b8b4d954b0b783e5ba190351dc812af85947a5cdaf965d2 rubygem-psych-3.3.2-160.el9_2.tuxcare.els18.i686.rpm 8979638320886de78e1cc968cec24b215b8169c102290fc355e8ff4df3b5510a rubygem-psych-3.3.2-160.el9_2.tuxcare.els18.x86_64.rpm b12f57d0cb95a42acae63fafc90d4c4a79daf65ccd3d8ce277e335597a1761fe rubygem-rake-13.0.3-160.el9_2.tuxcare.els18.noarch.rpm cf38aca42f31611f3b89e8a525dd810ededf3447cf4dc15f84bed15d1f3ac403 rubygem-rbs-1.4.0-160.el9_2.tuxcare.els18.noarch.rpm cc849537574a962bc96dc18b51ae0c105152cdc4fee214efad2288b23784b8a8 rubygem-rdoc-6.3.3-160.el9_2.tuxcare.els18.noarch.rpm fc05a33dd77379f90b9b6fd547ceade558ec1f823718c6d88d78ff1fe91f15a3 rubygem-rexml-3.3.3-160.el9_2.tuxcare.els18.noarch.rpm 189237d14aac45037c2436171b11feeb758b77ee31c8e5521ab1258e97875c0b rubygem-rss-0.2.9-160.el9_2.tuxcare.els18.noarch.rpm fead0ec2605e1fcc35dd4f5801a9289528f465ab8e7ef04fe19214785d1bbce4 rubygem-test-unit-3.3.7-160.el9_2.tuxcare.els18.noarch.rpm 1f10f7dff1c04ce189dbbca1eb1b0e173211c7d586dec6a6cd91d45f40204512 rubygem-typeprof-0.15.2-160.el9_2.tuxcare.els18.noarch.rpm 60ff84ed2a488776380b2b85c23ae4062295d0758da063153dc962be21fee75c rubygems-3.2.33-160.el9_2.tuxcare.els18.noarch.rpm f95d322ff2c9cc11d9844d979146423610b54c75ccb53d5fcd03ef0eed3e5730 rubygems-devel-3.2.33-160.el9_2.tuxcare.els18.noarch.rpm b4e43812c5d226bf3317d7957ec47e9ba7420c4443916151ee2db8698063c87f CLSA-2026:1785495654 TuxCare License Agreement 0 - CVE-2025-64505: fix heap buffer over-read in png_do_quantize caused by out-of-range palette indices in malformed PNG files Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-64505: fix heap buffer over-read in png_do_quantize caused by out-of-range palette indices in malformed PNG files

0 tuxcare-almalinux9.2-esu libpng15-1.5.30-14.el9.tuxcare.els4.i686.rpm a7414226f8e5da9c0d197ca84ef6dd50967de06e9fad518b18c57cda81a51e7a libpng15-1.5.30-14.el9.tuxcare.els4.x86_64.rpm 561cb7a554b94fe44b87a0c83117ef63a874e00fbb8f557b508994247d102dce CLSA-2026:1784808357 TuxCare License Agreement 0 - CVE-2026-9698: fix stack overflow and buffer overflow in DBI.xs error handling and preparse() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9698: fix stack overflow and buffer overflow in DBI.xs error handling and preparse()

0 tuxcare-almalinux9.2-esu perl-DBI-1.643-9.el9_2.tuxcare.els1.x86_64.rpm 9f3427044313ceb2284c291278412e838006cda4368a25fb9d14575c19fa684e CLSA-2026:1785515066 TuxCare License Agreement 0 - CVE-2026-5342: fix out-of-bounds read in nikon_load_padded_packed_raw() by sizing the row buffer from the final raw_width instead of the load_flags value pinned before raw_width adjustment (ELSCVE-152809) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5342: fix out-of-bounds read in nikon_load_padded_packed_raw() by sizing the row buffer from the final raw_width instead of the load_flags value pinned before raw_width adjustment (ELSCVE-152809)

0 tuxcare-almalinux9.2-esu LibRaw-0.20.2-5.el9_2.tuxcare.els7.i686.rpm 025853f238b0e50ec0d7ba922af4eeae58a903a81ea8539ecc888cc93acf29b1 LibRaw-0.20.2-5.el9_2.tuxcare.els7.x86_64.rpm 67f1f8fd08989572801793488656daec29acc157268f53d2a2dcacacc5f25d35 LibRaw-devel-0.20.2-5.el9_2.tuxcare.els7.i686.rpm c360911e8d6866d2b5aa13477d3d3dbffb84e9cd6703b527fa41d87d41f00969 LibRaw-devel-0.20.2-5.el9_2.tuxcare.els7.x86_64.rpm 840e1c32a63fe6fdb9b056c5b798208320e82013b1d08a69826cdc95d6e6d271 LibRaw-samples-0.20.2-5.el9_2.tuxcare.els7.x86_64.rpm d74eb07badb9bb7d8858f683b0d9ec89bfffbfe3c9831f8addbda077983dc05f LibRaw-static-0.20.2-5.el9_2.tuxcare.els7.x86_64.rpm 7b66215831a61da3d80ea76a33ad77c1cdde2fbdb8f8ed6b889bec5b3ade0b9a CLSA-2026:1785515860 TuxCare License Agreement 0 - CVE-2026-11972: break the block-skip loop in tarfile _Stream.seek() at EOF, so a crafted stream-mode archive declaring a huge member size no longer makes archive parsing take exponentially longer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11972: break the block-skip loop in tarfile _Stream.seek() at EOF, so a crafted stream-mode archive declaring a huge member size no longer makes archive parsing take exponentially longer

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els30.noarch.rpm 4dbaaeb3fedd4964cedb7ea260e566850f0f97bfa17f55ae8284f1713b7107f2 python3-3.9.16-1.el9_2.2.tuxcare.els30.i686.rpm 5d62fb5fcd1496f237e41c90a2fcb2a04f9cefdc21f41cfa13d8d5ac0256eccc python3-3.9.16-1.el9_2.2.tuxcare.els30.x86_64.rpm c1f1e46740af212ebbe547d73e1a922f6d79fbc31c7c71221476bc074a704261 python3-debug-3.9.16-1.el9_2.2.tuxcare.els30.i686.rpm 3984181b0761d1a744269d0c43e9280ca3783bb631c159ccb8a50b14d2db4b1b python3-debug-3.9.16-1.el9_2.2.tuxcare.els30.x86_64.rpm bcb4e884a72bf7811bbb2f6f253a0b0c8b4ffec67e6853b70a695dbc66dd4d80 python3-devel-3.9.16-1.el9_2.2.tuxcare.els30.i686.rpm a6f106280cdffebb10cc1662660c6ac58fa35384c03839f824fd04380a343de4 python3-devel-3.9.16-1.el9_2.2.tuxcare.els30.x86_64.rpm 38295f16c38acc6e32ff43c8b3efd1adf8535353438cb8ee3844ec437bd445fb python3-idle-3.9.16-1.el9_2.2.tuxcare.els30.i686.rpm e3939d03de3e506a55e9b5a55893edbe5b04f96a3506a57fbe8149dd03e0d756 python3-idle-3.9.16-1.el9_2.2.tuxcare.els30.x86_64.rpm 035dc4f661ab76ce29f4460573fe2b1d8420d4b108f89b9eb570248b7e9863df python3-libs-3.9.16-1.el9_2.2.tuxcare.els30.i686.rpm f74d79a43c424f62329d4f0a98cc035fa78a7f51bff93b9d24385337952dea2a python3-libs-3.9.16-1.el9_2.2.tuxcare.els30.x86_64.rpm d830f6ba22cdc6463d3a8a658724fd4502f45a5253821379e6a822a475379c0d python3-test-3.9.16-1.el9_2.2.tuxcare.els30.i686.rpm 9f16ed9ee65ec07fcd579f2824ca01ba36f06687bcc8412c7e7e84dba16d1259 python3-test-3.9.16-1.el9_2.2.tuxcare.els30.x86_64.rpm a53271fa7a421dc4beb8da9ca16793cd6ea7621ad2c0c40e7655029a84514d0a python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els30.i686.rpm 41465423bf5b38737e31124a3a85298d4486d235ead1007b8127d699a25dfbd6 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els30.x86_64.rpm d39131722894d7e19ba163e2ef645652a8455c9df26b56e564a9bef61ccb7948 CLSA-2026:1785510866 TuxCare License Agreement 0 - CVE-2026-13595: libblkid: fix use-after-free in nested partition probing by switching parts pool from array-of-structs to array-of-pointers so blkid_partition addresses stay stable across pool growth Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-13595: libblkid: fix use-after-free in nested partition probing by switching parts pool from array-of-structs to array-of-pointers so blkid_partition addresses stay stable across pool growth

0 tuxcare-almalinux9.2-esu libblkid-2.37.4-11.el9_2.tuxcare.els4.i686.rpm 1549a96d7a60b4e0cd2415a5cb20380dbb0b83357ba0866ea28b6d40e70330ef libblkid-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm bc1c81449ef9be693f3bd5b2a7db4f01c23481c3f6ac657a6d5c563be97a8f32 libblkid-devel-2.37.4-11.el9_2.tuxcare.els4.i686.rpm a8aa75a314f4f30dc1ec28cf69879cba90da7d7b94c875b9045f06f141bd4022 libblkid-devel-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm 8e5068be5e218449e5a57718892fc10bc04d944b5be82be1dac95cf7e409b159 libfdisk-2.37.4-11.el9_2.tuxcare.els4.i686.rpm 5f940c33439876eb43c74a03bbbec217a493a375f5e298175396f83ad64db302 libfdisk-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm c4a13bb140a8de3b7ddc0e8198f3a32f05644faa9cfebbc2ffca60cae1a3e3c3 libfdisk-devel-2.37.4-11.el9_2.tuxcare.els4.i686.rpm 1efdac1a3c0e1f325637727597b1b66518a171d27da717da95ed3238569ea8db libfdisk-devel-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm e9c1312aa3b7bbad33eab4c3be1fd781a1e4c4b38358ad10849d4f99aaee9687 libmount-2.37.4-11.el9_2.tuxcare.els4.i686.rpm 66cfebfcf77483b6c84edf363b081189f20e9a7a676bf760b3d9e397a2b6834e libmount-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm ae28ec7ab8f673723460539064be85b03167890bfaba80bdff595f1c9e026ced libmount-devel-2.37.4-11.el9_2.tuxcare.els4.i686.rpm 9d61a02e1d49fa87e0de3c0cba13aa4e581a9a8fc3e52846e689009c966e814d libmount-devel-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm 47892c0ddcde1b580764bea986644db90b43dea3333c7af84a66e5dabf2d8f9a libsmartcols-2.37.4-11.el9_2.tuxcare.els4.i686.rpm ef18b043267a63d38976df5c2ef2759d598f4573c1132171da61b24df781fb36 libsmartcols-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm 2fa480cb5442bec8e71d819f06c73ede72c938c007efde13078ba2e450d2f03f libsmartcols-devel-2.37.4-11.el9_2.tuxcare.els4.i686.rpm 1b9bfc9c68abf14fd488a6f8984299c6415c0ff51f0496a55a998f0089a4d2a0 libsmartcols-devel-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm 2ec1664f19094afaec246d7aab8ff28c61666e625815e25f3c3b34f98496759a libuuid-2.37.4-11.el9_2.tuxcare.els4.i686.rpm 415fe2635224e6191c5e701db9b2f3a7016cfa1b0314546801ca4e83c91b2f8b libuuid-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm c3099f3575ae6da8f4bee58c98f9c3f3b59edd2f27e5d501fc515e5d64c2834c libuuid-devel-2.37.4-11.el9_2.tuxcare.els4.i686.rpm 93e7a2651c1fbef32c5ebcc536d89d75342192377f6fb7d3a6d68d8ccda4d316 libuuid-devel-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm 1739e4826674e94e9784cedddb84450326a3f7b7261c33112a1f9d655aea6c9a python3-libmount-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm b42c1ddb9bc4c167d51e93ff84bcb2c04533b53601ae4f987756b15ee4983c4e util-linux-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm ae44b85d0268f3725445bb6dc723acc88bcd3311df8ef1c91cac7c0f3ea71286 util-linux-core-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm 5abb250c250b07aaaf68f986aeaf0be202fc6f2d55d516a459cabb385169213f util-linux-user-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm 956cc24e7d2c51c340030cb2ce86ce09c9fdd04a8775c704c2c34cc0541dcba2 uuidd-2.37.4-11.el9_2.tuxcare.els4.x86_64.rpm 15dc3fe084fec839b889631e268babeba102ef0ce747f813cf3903ce77d743dd CLSA-2026:1785517004 TuxCare License Agreement 0 - CVE-2026-45447: fix use-after-free of the caller-owned BIO in PKCS7_verify with an empty digestAlgorithms SET (RHSA-2026:44438) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45447: fix use-after-free of the caller-owned BIO in PKCS7_verify with an empty digestAlgorithms SET (RHSA-2026:44438)

0 tuxcare-almalinux9.2-esu compat-openssl11-1.1.1k-4.el9_0.tuxcare.els4.i686.rpm 8ffabed2030b7f768fc1446672381455d8ecc8e7def9f1bfe98674d02ad3ed47 compat-openssl11-1.1.1k-4.el9_0.tuxcare.els4.x86_64.rpm 292a29506ffcd06390514f3c55878182ca283fd559fb0960353f09d5692c73ef CLSA-2026:1785552246 TuxCare License Agreement 0 - CVE-2026-34978: reject ".." path traversal in the RSS notifier notify-recipient-uri, both in notifier/rss.c and when the subscription is created in the scheduler, and refuse to write when the target path exists and is not a regular file; previously a remote IPP client could make the lp-owned notifier clobber root-managed state such as CacheDir/job.cache - CVE-2026-34979: fix heap buffer overflow when building filter option strings; ipp_length() skipped NOVALUE, MIMETYPE, NAMELANG, TEXTLANG, URI and URISCHEME attributes that get_options() does emit, so the allocated options buffer was undersized Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34978: reject ".." path traversal in the RSS notifier notify-recipient-uri, both in notifier/rss.c and when the subscription is created in the scheduler, and refuse to write when the target path exists and is not a regular file; previously a remote IPP client could make the lp-owned notifier clobber root-managed state such as CacheDir/job.cache - CVE-2026-34979: fix heap buffer overflow when building filter option strings; ipp_length() skipped NOVALUE, MIMETYPE, NAMELANG, TEXTLANG, URI and URISCHEME attributes that get_options() does emit, so the allocated options buffer was undersized

0 tuxcare-almalinux9.2-esu cups-2.3.3op2-16.el9_2.1.tuxcare.els13.x86_64.rpm ae53aa94465648c71e3bbb69790f540ba401f580a94ba4b34c0211469e9564dc cups-client-2.3.3op2-16.el9_2.1.tuxcare.els13.x86_64.rpm 76bd2af5756e92d6124a776e9644cf3bde9c0637216652cea63b990f93ef5839 cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els13.i686.rpm b0ac50f3d9eecc3ba8b146fd8404765bbd2e16055888c1e036a48cfe36a09e5f cups-devel-2.3.3op2-16.el9_2.1.tuxcare.els13.x86_64.rpm 0aa4fcc2fa085a63a651ed341b184d341f843045a3cfeb5aef75010576695248 cups-filesystem-2.3.3op2-16.el9_2.1.tuxcare.els13.noarch.rpm b374cc047e0b1db85dbff4c402006ae51fb7e2169e47129a116f4243cbd12066 cups-ipptool-2.3.3op2-16.el9_2.1.tuxcare.els13.x86_64.rpm 5954938bab6b4b40207fbb62af96673a7e3660dbc9328cde7cba2927234c8424 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els13.i686.rpm 39dd52b535c7358591cd9a544f4f6fea9169d99b67db908d18376dda0dd235a2 cups-libs-2.3.3op2-16.el9_2.1.tuxcare.els13.x86_64.rpm 888f987d45e1cf42435613a5c7d1de9698379263d2012a2ea7a9d21d49bf4dbe cups-lpd-2.3.3op2-16.el9_2.1.tuxcare.els13.x86_64.rpm 2724846cad7b1ae194f2badefc6cc11fa9be488034748c13bc4e7f1eb1481ba7 cups-printerapp-2.3.3op2-16.el9_2.1.tuxcare.els13.x86_64.rpm d7964271648fdef69a50cc1979241a5c1a18db8e29e96c1eef8ddf0ab3efc5b6 CLSA-2026:1785557084 TuxCare License Agreement 0 - CVE-2026-57062: require a minimum AES-GCM authentication tag length of 12 octets in gpgsm CMS decryption; a 4-octet aes-ICVlen was previously accepted, weakening the integrity guarantee of the message Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-57062: require a minimum AES-GCM authentication tag length of 12 octets in gpgsm CMS decryption; a 4-octet aes-ICVlen was previously accepted, weakening the integrity guarantee of the message

0 tuxcare-almalinux9.2-esu gnupg2-2.3.3-2.el9_0.tuxcare.els4.x86_64.rpm d75466244fe1035c5f84be14e651ddc2425230228f3de348e1d44e58c70a39e2 gnupg2-smime-2.3.3-2.el9_0.tuxcare.els4.x86_64.rpm fa6d23111d6e485c89361113755200ab5272a9151a041437164cff9fd3aec0d3 CLSA-2026:1785560172 TuxCare License Agreement 0 - rebase from Thunderbird 115.4.1 to 140.12.0 ESR - CVE-2022-3032: When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked - CVE-2023-0430: Certificate OCSP revocation status was not checked when verifying S/Mime signatures - CVE-2023-0547: OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted - CVE-2023-0616: If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions - CVE-2023-1945: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash - CVE-2023-4573: When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash - CVE-2023-4574: When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished - CVE-2023-4575: When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished - CVE-2023-4577: When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash - CVE-2023-4578: When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error - CVE-2023-4580: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information - CVE-2023-4581: Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm - CVE-2023-5169: A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process - CVE-2023-5171: During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash - CVE-2023-5724: Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash - CVE-2023-5725: A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data - CVE-2023-5732: An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited - CVE-2023-6204: On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element - CVE-2023-6205: It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash - CVE-2023-6206: The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts - CVE-2023-6207: Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5 - CVE-2023-6208: When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard - CVE-2023-6209: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host - CVE-2023-6212: Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2023-6856: The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver - CVE-2023-6857: When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary - CVE-2023-6859: A use-after-free condition affected TLS socket creation when under memory pressure - CVE-2023-6860: The `VideoBridge` allowed any content process to use textures produced by remote decoders - CVE-2023-6862: A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start- up - CVE-2023-6863: The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor - CVE-2023-6864: Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2023-23598: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to `DataTransfer.setData`. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7 - CVE-2023-23599: When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within - CVE-2023-23601: Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7 - CVE-2023-23602: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored - CVE-2023-25728: The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect - CVE-2023-25730: A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks - CVE-2023-25737: An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior - CVE-2023-25742: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash - CVE-2023-25751: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly - CVE-2023-25752: When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds - CVE-2023-28164: Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks - CVE-2023-29533: A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls - CVE-2023-29535: Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced - CVE-2023-29536: An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash - CVE-2023-29539: When handling the filename directive in the Content- Disposition header, the filename would be truncated if the filename contained a NULL character - CVE-2023-29548: A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result - CVE-2023-32206: An out-of-bound read could have led to a crash in the RLBox Expat driver - CVE-2023-32211: A type checking bug would have led to invalid code being compiled - CVE-2023-37207: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks - CVE-2023-50761: The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time - CVE-2023-50762: When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user - CVE-2024-0746: A Linux user opening the print preview dialog could have caused the browser to crash - CVE-2024-0750: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions - CVE-2024-0751: A malicious devtools extension could have been used to escalate privileges - CVE-2024-1546: When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of- bounds memory read - CVE-2024-1547: Through a series of API calls and redirects, an attacker- controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8 - CVE-2024-1548: A website could have obscured the fullscreen notification by using a dropdown select input element - CVE-2024-1549: If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions - CVE-2024-1550: A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant - CVE-2024-1551: Set-Cookie response headers were being incorrectly honored in multipart HTTP responses - CVE-2024-1553: Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-2608: `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write - CVE-2024-2609: The permission prompt input delay could expire while the window is not in focus - CVE-2024-2610: Using a markup injection an attacker could have stolen nonce values - CVE-2024-2611: A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions - CVE-2024-2612: If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution - CVE-2024-2614: Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-2616: To harden ICU against exploitation, the behavior for out- of-memory conditions was changed to crash instead of attempt to continue - CVE-2024-3302: There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed - CVE-2024-3852: GetBoundName could return the wrong version of an object when JIT optimizations were applied - CVE-2024-3857: The JIT created incorrect code for arguments in certain cases - CVE-2024-3859: On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font - CVE-2024-3861: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use- after-free - CVE-2024-3864: Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code - CVE-2024-4767: If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed - CVE-2024-4768: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions - CVE-2024-4769: When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses - CVE-2024-4770: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash - CVE-2024-4777: Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-5688: If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant - CVE-2024-5690: By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system - CVE-2024-5691: By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window - CVE-2024-5693: Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy - CVE-2024-5696: By manipulating the text in an `&lt;input&gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash - CVE-2024-5700: Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-6600: Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128 - CVE-2024-6601: A race condition could lead to a cross-origin container obtaining permissions of the top-level origin - CVE-2024-6602: A mismatch between allocator and deallocator could have led to memory corruption - CVE-2024-6603: In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption - CVE-2024-6604: Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-6606: Clipboard code failed to check the index on an array access - CVE-2024-6607: It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts - CVE-2024-6608: It was possible to move the cursor using pointerlock from an iframe - CVE-2024-6609: When almost out-of-memory an elliptic curve key which was never allocated could have been freed again - CVE-2024-6610: Form validation popups could capture escape key presses - CVE-2024-6611: A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies - CVE-2024-6612: CSP violations generated links in the console tab of the developer tools, pointing to the violating resource - CVE-2024-6613: The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces - CVE-2024-6614: The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces - CVE-2024-7518: Select options could obscure the fullscreen notification dialog - CVE-2024-7521: Incomplete WebAssembly exception handing could have led to a use-after-free - CVE-2024-7522: Editor code failed to check an attribute value - CVE-2024-7525: It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site - CVE-2024-7526: ANGLE failed to initialize parameters which lead to reading from uninitialized memory - CVE-2024-7527: Unexpected marking work at the start of sweeping could have led to a use-after-free - CVE-2024-7529: The date picker could partially obscure security prompts - CVE-2024-7652: An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash - CVE-2024-8394: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash - CVE-2024-9392: A compromised content process could have allowed for the arbitrary loading of cross-origin pages - CVE-2024-9393: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin - CVE-2024-9394: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin - CVE-2024-9396: It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption - CVE-2024-9397: A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking - CVE-2024-9398: By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed - CVE-2024-9399: A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition - CVE-2024-9400: A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation - CVE-2024-9401: Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-10458: A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements - CVE-2024-10459: An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash - CVE-2024-10460: The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132 - CVE-2024-10461: In multipart/x-mixed-replace responses, `Content- Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks - CVE-2024-10462: Truncation of a long URL could have allowed origin spoofing in a permission prompt - CVE-2024-10463: Video frames could have been leaked between origins in some situations - CVE-2024-10464: Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser - CVE-2024-10465: A clipboard "paste" button could persist across tabs which allowed a spoofing attack - CVE-2024-10466: By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive - CVE-2024-10467: Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-10468: Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash - CVE-2024-11159: Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext - CVE-2024-11692: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks - CVE-2024-11693: The executable file warning was not presented when downloading .library-ms files - CVE-2024-11694: Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension - CVE-2024-11695: A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack - CVE-2024-11696: The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification - CVE-2024-11697: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog - CVE-2024-11700: Malicious websites may have been able to perform user intent confirmation through tapjacking - CVE-2024-11701: The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt - CVE-2024-11702: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled - CVE-2024-11704: A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path - CVE-2024-11705: `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes - CVE-2024-11706: A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files - CVE-2024-11708: Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure - CVE-2025-0237: The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks - CVE-2025-0238: Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash - CVE-2025-0239: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site - CVE-2025-0240: Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use- after-free - CVE-2025-0241: When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash - CVE-2025-0242: Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-0247: Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-0510: Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040 - CVE-2025-1009: An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash - CVE-2025-1010: An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash - CVE-2025-1012: A race during concurrent delazification could have led to a use-after-free - CVE-2025-1013: A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak - CVE-2025-1014: Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed - CVE-2025-1015: The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If another user imported the address book, clicking on the link could result in opening a web page inside Thunderbird, and that page could execute (unprivileged) JavaScript - CVE-2025-1016: Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1018: The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack - CVE-2025-1019: The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack - CVE-2025-1931: It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash - CVE-2025-1932: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later - CVE-2025-1933: On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type - CVE-2025-1934: It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it - CVE-2025-1935: A web page could trick a user into setting that site as the default handler for a custom URL protocol - CVE-2025-1936: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image - CVE-2025-1937: Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1938: Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1942: When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string - CVE-2025-3028: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free - CVE-2025-3029: A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack - CVE-2025-3030: Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-3031: An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function - CVE-2025-3032: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks - CVE-2025-3033: This bug only affects Firefox on Windows. Other operating systems are unaffected.* - CVE-2025-5262: A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash - CVE-2025-5986: A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content - CVE-2025-8027: On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits - CVE-2025-8028: On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address - CVE-2025-8029: Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags - CVE-2025-8030: Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code - CVE-2025-8031: The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials - CVE-2025-8032: XSLT document loading did not correctly propagate the source document which bypassed its CSP - CVE-2025-8033: The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref - CVE-2025-8034: Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-8035: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-8036: Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding - CVE-2025-8037: Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute - CVE-2025-9179: An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process - CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component - CVE-2025-9181: Uninitialized memory in the JavaScript Engine component - CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics: WebRender component - CVE-2025-9184: Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-9185: Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-10527: Sandbox escape due to use-after-free in the Graphics: Canvas2D component - CVE-2025-10528: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component - CVE-2025-10529: Same-origin policy bypass in the Layout component - CVE-2025-10532: Incorrect boundary conditions in the JavaScript: GC component - CVE-2025-10533: Integer overflow in the SVG component - CVE-2025-10536: Information disclosure in the Networking: Cache component - CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance() - CVE-2025-11709: A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures - CVE-2025-11710: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process - CVE-2025-11711: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable - CVE-2025-11712: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header - CVE-2025-11713: Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems - CVE-2025-11714: Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component - CVE-2025-14323: Privilege escalation in the DOM: Notifications component - CVE-2025-14328: Privilege escalation in the Netmonitor component - CVE-2025-14329: Privilege escalation in the Netmonitor component - CVE-2025-14331: Same-origin policy bypass in the Request Handling component - CVE-2025-26695: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address - CVE-2025-26696: Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted - CVE-2026-0818: When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If the user had additionally allowed loading of the remote content referenced by the outer email message, and the email was crafted by the sender using a combination of CSS rules and fonts and animations, then it was possible to extract the secret contents of the email - CVE-2026-0879: Sandbox escape due to incorrect boundary conditions in the Graphics component - CVE-2026-0882: Use-after-free in the IPC component - CVE-2026-0883: Information disclosure in the Networking component - CVE-2026-0884: Use-after-free in the JavaScript Engine component - CVE-2026-0885: Use-after-free in the JavaScript: GC component - CVE-2026-0886: Incorrect boundary conditions in the Graphics component - CVE-2026-0887: Clickjacking issue, information disclosure in the PDF Viewer component - CVE-2026-0890: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component - CVE-2026-2447: Heap buffer overflow in libvpx - CVE-2026-2769: Use-after-free in the Storage: IndexedDB component - CVE-2026-2772: Use-after-free in the Audio/Video: Playback component - CVE-2026-2773: Incorrect boundary conditions in the Web Audio component - CVE-2026-2774: Integer overflow in the Audio/Video component - CVE-2026-2779: Incorrect boundary conditions in the Networking: JAR component - CVE-2026-2782: Privilege escalation in the Netmonitor component - CVE-2026-2786: Use-after-free in the JavaScript Engine component - CVE-2026-2787: Use-after-free in the DOM: Window and Location component - CVE-2026-2788: Incorrect boundary conditions in the Audio/Video: GMP component - CVE-2026-2789: Use-after-free in the Graphics: ImageLib component - CVE-2026-2790: Same-origin policy bypass in the Networking: JAR component - CVE-2026-3889: Spoofing issue in Thunderbird - CVE-2026-4371: A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data - CVE-2026-4692: Sandbox escape in the Responsive Design Mode component - CVE-2026-4694: Incorrect boundary conditions, integer overflow in the Graphics component - CVE-2026-4710: Incorrect boundary conditions in the Audio/Video component - CVE-2026-4718: Undefined behavior in the WebRTC: Signaling component - CVE-2026-4721: Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-5731: Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-8090: Use-after-free in the DOM: Networking component - CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback component - CVE-2026-8092: Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-8094: Other issue in the WebRTC component - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component - CVE-2026-12305: Memory safety bug fixed in Firefox 152 - CVE-2026-12306: Memory safety bug fixed in Firefox 152 - CVE-2026-12309: Memory safety bug fixed in Firefox 152 - CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase from Thunderbird 115.4.1 to 140.12.0 ESR - CVE-2022-3032: When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked - CVE-2023-0430: Certificate OCSP revocation status was not checked when verifying S/Mime signatures - CVE-2023-0547: OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted - CVE-2023-0616: If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions - CVE-2023-1945: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash - CVE-2023-4573: When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash - CVE-2023-4574: When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished - CVE-2023-4575: When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished - CVE-2023-4577: When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash - CVE-2023-4578: When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error - CVE-2023-4580: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information - CVE-2023-4581: Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm - CVE-2023-5169: A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process - CVE-2023-5171: During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash - CVE-2023-5724: Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash - CVE-2023-5725: A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data - CVE-2023-5732: An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited - CVE-2023-6204: On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element - CVE-2023-6205: It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash - CVE-2023-6206: The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts - CVE-2023-6207: Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5 - CVE-2023-6208: When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard - CVE-2023-6209: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host - CVE-2023-6212: Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2023-6856: The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver - CVE-2023-6857: When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary - CVE-2023-6859: A use-after-free condition affected TLS socket creation when under memory pressure - CVE-2023-6860: The `VideoBridge` allowed any content process to use textures produced by remote decoders - CVE-2023-6862: A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start- up - CVE-2023-6863: The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor - CVE-2023-6864: Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2023-23598: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to `DataTransfer.setData`. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7 - CVE-2023-23599: When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within - CVE-2023-23601: Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7 - CVE-2023-23602: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored - CVE-2023-25728: The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect - CVE-2023-25730: A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks - CVE-2023-25737: An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior - CVE-2023-25742: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash - CVE-2023-25751: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly - CVE-2023-25752: When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds - CVE-2023-28164: Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks - CVE-2023-29533: A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls - CVE-2023-29535: Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced - CVE-2023-29536: An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash - CVE-2023-29539: When handling the filename directive in the Content- Disposition header, the filename would be truncated if the filename contained a NULL character - CVE-2023-29548: A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result - CVE-2023-32206: An out-of-bound read could have led to a crash in the RLBox Expat driver - CVE-2023-32211: A type checking bug would have led to invalid code being compiled - CVE-2023-37207: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks - CVE-2023-50761: The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time - CVE-2023-50762: When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user - CVE-2024-0746: A Linux user opening the print preview dialog could have caused the browser to crash - CVE-2024-0750: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions - CVE-2024-0751: A malicious devtools extension could have been used to escalate privileges - CVE-2024-1546: When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of- bounds memory read - CVE-2024-1547: Through a series of API calls and redirects, an attacker- controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8 - CVE-2024-1548: A website could have obscured the fullscreen notification by using a dropdown select input element - CVE-2024-1549: If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions - CVE-2024-1550: A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant - CVE-2024-1551: Set-Cookie response headers were being incorrectly honored in multipart HTTP responses - CVE-2024-1553: Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-2608: `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write - CVE-2024-2609: The permission prompt input delay could expire while the window is not in focus - CVE-2024-2610: Using a markup injection an attacker could have stolen nonce values - CVE-2024-2611: A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions - CVE-2024-2612: If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution - CVE-2024-2614: Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-2616: To harden ICU against exploitation, the behavior for out- of-memory conditions was changed to crash instead of attempt to continue - CVE-2024-3302: There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed - CVE-2024-3852: GetBoundName could return the wrong version of an object when JIT optimizations were applied - CVE-2024-3857: The JIT created incorrect code for arguments in certain cases - CVE-2024-3859: On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font - CVE-2024-3861: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use- after-free - CVE-2024-3864: Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code - CVE-2024-4767: If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed - CVE-2024-4768: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions - CVE-2024-4769: When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses - CVE-2024-4770: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash - CVE-2024-4777: Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-5688: If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant - CVE-2024-5690: By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system - CVE-2024-5691: By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window - CVE-2024-5693: Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy - CVE-2024-5696: By manipulating the text in an `&lt;input&gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash - CVE-2024-5700: Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-6600: Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128 - CVE-2024-6601: A race condition could lead to a cross-origin container obtaining permissions of the top-level origin - CVE-2024-6602: A mismatch between allocator and deallocator could have led to memory corruption - CVE-2024-6603: In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption - CVE-2024-6604: Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-6606: Clipboard code failed to check the index on an array access - CVE-2024-6607: It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts - CVE-2024-6608: It was possible to move the cursor using pointerlock from an iframe - CVE-2024-6609: When almost out-of-memory an elliptic curve key which was never allocated could have been freed again - CVE-2024-6610: Form validation popups could capture escape key presses - CVE-2024-6611: A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies - CVE-2024-6612: CSP violations generated links in the console tab of the developer tools, pointing to the violating resource - CVE-2024-6613: The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces - CVE-2024-6614: The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces - CVE-2024-7518: Select options could obscure the fullscreen notification dialog - CVE-2024-7521: Incomplete WebAssembly exception handing could have led to a use-after-free - CVE-2024-7522: Editor code failed to check an attribute value - CVE-2024-7525: It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site - CVE-2024-7526: ANGLE failed to initialize parameters which lead to reading from uninitialized memory - CVE-2024-7527: Unexpected marking work at the start of sweeping could have led to a use-after-free - CVE-2024-7529: The date picker could partially obscure security prompts - CVE-2024-7652: An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash - CVE-2024-8394: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash - CVE-2024-9392: A compromised content process could have allowed for the arbitrary loading of cross-origin pages - CVE-2024-9393: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin - CVE-2024-9394: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin - CVE-2024-9396: It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption - CVE-2024-9397: A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking - CVE-2024-9398: By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed - CVE-2024-9399: A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition - CVE-2024-9400: A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation - CVE-2024-9401: Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-10458: A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements - CVE-2024-10459: An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash - CVE-2024-10460: The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132 - CVE-2024-10461: In multipart/x-mixed-replace responses, `Content- Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks - CVE-2024-10462: Truncation of a long URL could have allowed origin spoofing in a permission prompt - CVE-2024-10463: Video frames could have been leaked between origins in some situations - CVE-2024-10464: Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser - CVE-2024-10465: A clipboard "paste" button could persist across tabs which allowed a spoofing attack - CVE-2024-10466: By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive - CVE-2024-10467: Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-10468: Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash - CVE-2024-11159: Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext - CVE-2024-11692: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks - CVE-2024-11693: The executable file warning was not presented when downloading .library-ms files - CVE-2024-11694: Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension - CVE-2024-11695: A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack - CVE-2024-11696: The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification - CVE-2024-11697: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog - CVE-2024-11700: Malicious websites may have been able to perform user intent confirmation through tapjacking - CVE-2024-11701: The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt - CVE-2024-11702: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled - CVE-2024-11704: A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path - CVE-2024-11705: `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes - CVE-2024-11706: A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files - CVE-2024-11708: Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure - CVE-2025-0237: The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks - CVE-2025-0238: Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash - CVE-2025-0239: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site - CVE-2025-0240: Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use- after-free - CVE-2025-0241: When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash - CVE-2025-0242: Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-0247: Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-0510: Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040 - CVE-2025-1009: An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash - CVE-2025-1010: An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash - CVE-2025-1012: A race during concurrent delazification could have led to a use-after-free - CVE-2025-1013: A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak - CVE-2025-1014: Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed - CVE-2025-1015: The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If another user imported the address book, clicking on the link could result in opening a web page inside Thunderbird, and that page could execute (unprivileged) JavaScript - CVE-2025-1016: Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1018: The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack - CVE-2025-1019: The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack - CVE-2025-1931: It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash - CVE-2025-1932: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later - CVE-2025-1933: On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type - CVE-2025-1934: It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it - CVE-2025-1935: A web page could trick a user into setting that site as the default handler for a custom URL protocol - CVE-2025-1936: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image - CVE-2025-1937: Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1938: Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1942: When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string - CVE-2025-3028: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free - CVE-2025-3029: A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack - CVE-2025-3030: Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-3031: An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function - CVE-2025-3032: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks - CVE-2025-3033: This bug only affects Firefox on Windows. Other operating systems are unaffected.* - CVE-2025-5262: A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash - CVE-2025-5986: A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content - CVE-2025-8027: On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits - CVE-2025-8028: On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address - CVE-2025-8029: Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags - CVE-2025-8030: Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code - CVE-2025-8031: The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials - CVE-2025-8032: XSLT document loading did not correctly propagate the source document which bypassed its CSP - CVE-2025-8033: The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref - CVE-2025-8034: Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-8035: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-8036: Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding - CVE-2025-8037: Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute - CVE-2025-9179: An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process - CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component - CVE-2025-9181: Uninitialized memory in the JavaScript Engine component - CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics: WebRender component - CVE-2025-9184: Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-9185: Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-10527: Sandbox escape due to use-after-free in the Graphics: Canvas2D component - CVE-2025-10528: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component - CVE-2025-10529: Same-origin policy bypass in the Layout component - CVE-2025-10532: Incorrect boundary conditions in the JavaScript: GC component - CVE-2025-10533: Integer overflow in the SVG component - CVE-2025-10536: Information disclosure in the Networking: Cache component - CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance() - CVE-2025-11709: A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures - CVE-2025-11710: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process - CVE-2025-11711: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable - CVE-2025-11712: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header - CVE-2025-11713: Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems - CVE-2025-11714: Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component - CVE-2025-14323: Privilege escalation in the DOM: Notifications component - CVE-2025-14328: Privilege escalation in the Netmonitor component - CVE-2025-14329: Privilege escalation in the Netmonitor component - CVE-2025-14331: Same-origin policy bypass in the Request Handling component - CVE-2025-26695: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address - CVE-2025-26696: Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted - CVE-2026-0818: When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If the user had additionally allowed loading of the remote content referenced by the outer email message, and the email was crafted by the sender using a combination of CSS rules and fonts and animations, then it was possible to extract the secret contents of the email - CVE-2026-0879: Sandbox escape due to incorrect boundary conditions in the Graphics component - CVE-2026-0882: Use-after-free in the IPC component - CVE-2026-0883: Information disclosure in the Networking component - CVE-2026-0884: Use-after-free in the JavaScript Engine component - CVE-2026-0885: Use-after-free in the JavaScript: GC component - CVE-2026-0886: Incorrect boundary conditions in the Graphics component - CVE-2026-0887: Clickjacking issue, information disclosure in the PDF Viewer component - CVE-2026-0890: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component - CVE-2026-2447: Heap buffer overflow in libvpx - CVE-2026-2769: Use-after-free in the Storage: IndexedDB component - CVE-2026-2772: Use-after-free in the Audio/Video: Playback component - CVE-2026-2773: Incorrect boundary conditions in the Web Audio component - CVE-2026-2774: Integer overflow in the Audio/Video component - CVE-2026-2779: Incorrect boundary conditions in the Networking: JAR component - CVE-2026-2782: Privilege escalation in the Netmonitor component - CVE-2026-2786: Use-after-free in the JavaScript Engine component - CVE-2026-2787: Use-after-free in the DOM: Window and Location component - CVE-2026-2788: Incorrect boundary conditions in the Audio/Video: GMP component - CVE-2026-2789: Use-after-free in the Graphics: ImageLib component - CVE-2026-2790: Same-origin policy bypass in the Networking: JAR component - CVE-2026-3889: Spoofing issue in Thunderbird - CVE-2026-4371: A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data - CVE-2026-4692: Sandbox escape in the Responsive Design Mode component - CVE-2026-4694: Incorrect boundary conditions, integer overflow in the Graphics component - CVE-2026-4710: Incorrect boundary conditions in the Audio/Video component - CVE-2026-4718: Undefined behavior in the WebRTC: Signaling component - CVE-2026-4721: Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-5731: Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-8090: Use-after-free in the DOM: Networking component - CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback component - CVE-2026-8092: Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-8094: Other issue in the WebRTC component - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component - CVE-2026-12305: Memory safety bug fixed in Firefox 152 - CVE-2026-12306: Memory safety bug fixed in Firefox 152 - CVE-2026-12309: Memory safety bug fixed in Firefox 152 - CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component

0 tuxcare-almalinux9.2-esu thunderbird-140.12.0-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 08445faa735e9c88e9b1b247981acca9236b1f5486ce86f9ea4569f8aa8dc42d CLSA-2026:1784820017 TuxCare License Agreement 0 - CVE-2026-32280: rebuild with newer golang to fix uncontrolled resource consumption in crypto/x509 chain building, where attacker-supplied intermediate certificates differing only in non-critical extensions bypass the dedup check and cause excessive work past the signature-check limit (denial of service); fix carried by golang >= 1.22.9-1.tuxcare.els9 via upstream Go commit 7b4ed1d7 (release-branch.go1.26), CL 758320 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32280: rebuild with newer golang to fix uncontrolled resource consumption in crypto/x509 chain building, where attacker-supplied intermediate certificates differing only in non-critical extensions bypass the dedup check and cause excessive work past the signature-check limit (denial of service); fix carried by golang >= 1.22.9-1.tuxcare.els9 via upstream Go commit 7b4ed1d7 (release-branch.go1.26), CL 758320

0 tuxcare-almalinux9.2-esu git-lfs-3.2.0-1.el9_2.tuxcare.els5.x86_64.rpm a47ca0a45b7fc925b002b2dded6fd745edaab0cb44b33c4df07a50c5a1739c7f CLSA-2026:1785760071 TuxCare License Agreement 0 - CVE-2026-58010: fix one-byte heap over-read in gvs_tuple_is_normal() by changing the offset bounds check from '>' to '>=' (glib/gvariant-serialiser.c) - CVE-2026-58011: validate the days field in g_date_time_add_full() to prevent an out-of-bounds read in g_date_time_get_ymd() (glib/gdatetime.c) - CVE-2026-58012: fix buffer over-read in g_regex_replace() with G_REGEX_RAW by splitting UTF-8 vs raw code paths in string_append() (glib/gregex.c) - CVE-2026-58013: fix out-of-bounds read in g_io_channel_read_line_backend() by bounding memcmp() length to the remaining buffer (glib/giochannel.c) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58010: fix one-byte heap over-read in gvs_tuple_is_normal() by changing the offset bounds check from '>' to '>=' (glib/gvariant-serialiser.c) - CVE-2026-58011: validate the days field in g_date_time_add_full() to prevent an out-of-bounds read in g_date_time_get_ymd() (glib/gdatetime.c) - CVE-2026-58012: fix buffer over-read in g_regex_replace() with G_REGEX_RAW by splitting UTF-8 vs raw code paths in string_append() (glib/gregex.c) - CVE-2026-58013: fix out-of-bounds read in g_io_channel_read_line_backend() by bounding memcmp() length to the remaining buffer (glib/giochannel.c)

0 tuxcare-almalinux9.2-esu glib2-2.68.4-6.el9.tuxcare.els9.i686.rpm 2af395b7c661b3cb26596f8f34eca585cf71f24b5629fe17c83b63eedb6d824c glib2-2.68.4-6.el9.tuxcare.els9.x86_64.rpm ca97ca0a7f84abbceb778c2523f384daca910ba783f33ca9bc52f4c4a0294451 glib2-devel-2.68.4-6.el9.tuxcare.els9.i686.rpm dc44e1fa16dddc57424b956d4f587e77848bf409610cecfc1021ead3407c6dcf glib2-devel-2.68.4-6.el9.tuxcare.els9.x86_64.rpm 77b06a4e88b4234d0c79eedd0c5796e869351a215a47cbe435dbca999504ec6c glib2-doc-2.68.4-6.el9.tuxcare.els9.noarch.rpm c931dde7c590298ae2e8690d80203c24246406de5294c87b2d4e53075b3537cc glib2-static-2.68.4-6.el9.tuxcare.els9.i686.rpm 350476dad319088c296c4195b14811e4a67d867eacb3a7f3614352dd053df7fe glib2-static-2.68.4-6.el9.tuxcare.els9.x86_64.rpm 038b29283234263800f3321dccdc9eb3ce24a255b01b359903cfadd089302f0e glib2-tests-2.68.4-6.el9.tuxcare.els9.x86_64.rpm 4bbae04595e2f8a31fd7446e43c369733c3e954195d0b324c0215201d17c1f50 CLSA-2026:1785765391 TuxCare License Agreement 0 - CVE-2025-68276: refuse to create wide-area record browsers when wide-area lookups are disabled; an unprivileged local user could crash avahi-daemon over D-Bus by passing AVAHI_LOOKUP_USE_WIDE_AREA to RecordBrowserNew, reaching an assertion in avahi_wide_area_scan_cache - CVE-2026-34933: reject publish flags that set both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST; the conflicting pair tripped an assertion in transport_flags_from_domain and crashed avahi-daemon from any unprivileged local D-Bus caller Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68276: refuse to create wide-area record browsers when wide-area lookups are disabled; an unprivileged local user could crash avahi-daemon over D-Bus by passing AVAHI_LOOKUP_USE_WIDE_AREA to RecordBrowserNew, reaching an assertion in avahi_wide_area_scan_cache - CVE-2026-34933: reject publish flags that set both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST; the conflicting pair tripped an assertion in transport_flags_from_domain and crashed avahi-daemon from any unprivileged local D-Bus caller

0 tuxcare-almalinux9.2-esu avahi-0.8-12.el9_2.1.tuxcare.els5.i686.rpm d42686f8b90ef017a59a7fd5eb5b4b113880308e0e76e9e4069b3405e86eb820 avahi-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 92a7cdb51f8f7fc0aa29f27220c611243be46dd43517ab27941481ae168857a4 avahi-autoipd-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm e527a1ba4c8c09c02e9ac343dbf8341425ffe5eb89d1177d74bddfeb2e2bea19 avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els5.i686.rpm 90a51e57918f8228a33fcb8df849cb4be1647d4adeaf63f1fbf6772c5684f948 avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm e2fc881e7f77f3db85027379b4a0c11b439516c31a42cc94f43d75ad90eb97d6 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm fcbb5859ee3beee45b8bc3619d0df32d5dcdcaf0cec150349019f83093acbdf4 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm c73a8903c0dad2a87f0418616fa7a7ac5ab7e4fdbc08a6770a9d005bc6e3cb24 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els5.i686.rpm b1d58a5d74bbf603be40608fa51fd9d2950a37dd1f35bcaa8b438fd5cc0a0979 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 867a50627723d07524efe76528d72007f799e32d5c07d9fd957192c3d7eb7df5 avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm e17dcc7f4266ce21b532154f51deb04f8b2311b7f717edeed527188bfe65e437 avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 82d4aa3040c836a31c45326000b86c291f8a35898dbf045f971f0d80c3bc78ee avahi-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm 80dcc1a36455849fdcaef171bf4d8c9ebd591cf5a43abb1b8bd08c5401a236f9 avahi-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 5e8b0d5ed522a38ff26349a8b67a0b2e59077683ec11331fa6f5f3e9ef350919 avahi-dnsconfd-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 1682cc6317521a38272ecde66a5d7eb8fa715dc65a6e4a062896413ec31241b0 avahi-glib-0.8-12.el9_2.1.tuxcare.els5.i686.rpm 9414e878554cf67a567fa298b8d8619022f61199b755ca374d0b396b844967d9 avahi-glib-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 270ef1128c617b098921e7d177a68b66bb428a89a1e2c42dab7da40f828ee061 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm 9039b36d01313243b18c6f136a860bccfe2725ca4e3a667cd0e2144963c1b0e4 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm dfe902251df3c8c7b9df900193230c2ee5affb13c1b53060b4dcf952a7a14ea4 avahi-gobject-0.8-12.el9_2.1.tuxcare.els5.i686.rpm 1931b409db7b2ace51a7b14cafb84e157cadf1d4c88bf2f39e74fb3b97d75d41 avahi-gobject-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 140e1e559e72d94ba8156c92b6477e47f68b0f00a959783ab33ece28411217d0 avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els5.i686.rpm cf874aea5060bce06ea88aceaf4d041ed6c3dae0d26ed7951a4018babdb890ca avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 7d9d3c302d0b65fb2ce79dac8197a51c47aca09b7e25455e8a61fb36e2e404a6 avahi-libs-0.8-12.el9_2.1.tuxcare.els5.i686.rpm 5afed41d4f33cdd2c8af5a51050c18511cd05194feb914e488edceb9aa9b3eab avahi-libs-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm d1e780ab7b2df015eb3b03df3543feca32e085de3f9d2520f4400bdea215cdf1 avahi-tools-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 231ddde95b2eb9984e7015b864820ae2051f192d8d518f3ec095d4a84d91dc7f avahi-ui-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 224b6d165c8f2ef87da4158ae9faba874ab460b64d3139dc4c0482d2a38c65aa avahi-ui-devel-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm d2fcffd7bf2d71658e38a5e7ca416c4297f3e6e1b2bda5df93bf02e2ca07b417 avahi-ui-gtk3-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 716ae1b603e6b265c58b20610a44cd8b5e92cdc42dd7e4d137e011e65ef98a51 avahi-ui-tools-0.8-12.el9_2.1.tuxcare.els5.x86_64.rpm 08ceff0a973eda38d03e8717ff28a727c201a0ec488c8270fd478bc2e1c0fe4f CLSA-2026:1785766306 TuxCare License Agreement 0 - CVE-2026-27879: cap the resampled series length in Series.Resample() at 1,000,000 points; the length was derived straight from the caller-supplied time range and interval and then allocated, so a crafted resample query could exhaust memory - CVE-2026-28375: bound the testdata data-source result sizes that were taken unchecked from client-controlled maxDataPoints and line counts - log lines, randomWalkTable, the simulation engine and the USA scenario are each clamped to 10000 points Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27879: cap the resampled series length in Series.Resample() at 1,000,000 points; the length was derived straight from the caller-supplied time range and interval and then allocated, so a crafted resample query could exhaust memory - CVE-2026-28375: bound the testdata data-source result sizes that were taken unchecked from client-controlled maxDataPoints and line counts - log lines, randomWalkTable, the simulation engine and the USA scenario are each clamped to 10000 points

0 tuxcare-almalinux9.2-esu grafana-9.0.9-4.el9_2.alma.1.tuxcare.els20.x86_64.rpm d793a1989471ed4dc7fbc1ce20874b1b302044595a0f9344318b356759c7e90d CLSA-2026:1785768115 TuxCare License Agreement 0 - CVE-2022-47022: handle glibc CPU set allocation failures - Skip tests/hwloc/linux/gather subdir in %check (DMI round-trip flake under mock) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-47022: handle glibc CPU set allocation failures - Skip tests/hwloc/linux/gather subdir in %check (DMI round-trip flake under mock)

0 tuxcare-almalinux9.2-esu hwloc-2.4.1-5.el9_2.tuxcare.els1.x86_64.rpm e87c1441d5223448613a35b499db2e4bb37198f5b3bb796d2d063aad8beecfb6 hwloc-devel-2.4.1-5.el9_2.tuxcare.els1.i686.rpm 64c6afff89a8798e4cdf63e970d7253b81bb0d633f862eae6525a196ead177b0 hwloc-devel-2.4.1-5.el9_2.tuxcare.els1.x86_64.rpm 8490850841d4f917d25e63d475b49643d3cb9f061b90334c2615fc9b79eecb1e hwloc-gui-2.4.1-5.el9_2.tuxcare.els1.x86_64.rpm c702c0ba36ce8668eb212af71240ed4a23b972651314860f3057b5c499f96412 hwloc-libs-2.4.1-5.el9_2.tuxcare.els1.i686.rpm 36cd29614045a6e12df9aeed6024df796f8c28f99862b69c44aa68ed54e73f03 hwloc-libs-2.4.1-5.el9_2.tuxcare.els1.x86_64.rpm d14944f752ad2ab95d0bfcb3c0f74086822fb729db30de5ce9489c9da54aa2ed hwloc-plugins-2.4.1-5.el9_2.tuxcare.els1.x86_64.rpm b958bce14c9bc5d0b66695ce688834211fe93da9ccb0eb778e40c670b1c56cbd CLSA-2026:1785768873 TuxCare License Agreement 0 - CVE-2022-4603: prevent out-of-range access to pppdump packet buffers Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-4603: prevent out-of-range access to pppdump packet buffers

0 tuxcare-almalinux9.2-esu network-scripts-ppp-2.4.9-5.el9.tuxcare.els1.x86_64.rpm 634452785fd6788121f6999335a253f03be188132d3574331630639ea484d68c ppp-2.4.9-5.el9.tuxcare.els1.i686.rpm aa70a8cf685cde7c0b6c26bdf72bdbc28f926144eb636d430087724e73720303 ppp-2.4.9-5.el9.tuxcare.els1.x86_64.rpm c36f1ccb77cfdee6201998345389334cc0980ea189f67441b593cadb77501dc5 ppp-devel-2.4.9-5.el9.tuxcare.els1.i686.rpm 110c496b6f71e560a48b465a61af5449a8d19c5bca1fba70b849785b8094352b ppp-devel-2.4.9-5.el9.tuxcare.els1.x86_64.rpm 1d4c9acb9f475f3414fc9d3ea2c8669dd82b30893c30de66f0e4cd7b2a314531 CLSA-2026:1785774324 TuxCare License Agreement 0 - CVE-2025-64506: fix heap buffer over-read in png_write_image_8bit when 8-bit input is written with the convert_to_8bit flag set Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-64506: fix heap buffer over-read in png_write_image_8bit when 8-bit input is written with the convert_to_8bit flag set

0 tuxcare-almalinux9.2-esu libpng-1.6.37-12.el9_2.tuxcare.els9.i686.rpm b59c329260b8e988ecbb66f9517be0e5ee4f00fce7081e5f275efdbe0a9a584b libpng-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm 30db26800b25db89ce881c29be6312b0fbd6c69ec19e915c40b70e3bf12e52d7 libpng-devel-1.6.37-12.el9_2.tuxcare.els9.i686.rpm f57afb6e8f60db6f18d2795fd128f05e1e3a88cd708abc55d696d2aca9588ef1 libpng-devel-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm 03562e9bf377467d2e7007b1e6033943dc94bed173e650965dfa9ba173bde3fd libpng-static-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm 6981f249b1f4a54ffca60b5b5b7b948f4f1cb4bc1b9662eae338e7e2f9c3f7e1 libpng-tools-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm 48d5e34df6a21ba2566d0fb868ac932d8693bb13c75b5dbb632265478aad0fd6 CLSA-2026:1785833533 TuxCare License Agreement 0 - CVE-2026-27142: escape URLs in the url= portion of html/template <meta> content attributes, closing a cross-site scripting vector - CVE-2026-39823: skip ASCII whitespace around the url= separator so the new <meta> content escaper cannot be bypassed Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27142: escape URLs in the url= portion of html/template <meta> content attributes, closing a cross-site scripting vector - CVE-2026-39823: skip ASCII whitespace around the url= separator so the new <meta> content escaper cannot be bypassed

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els22.x86_64.rpm 2e6f082d6078a6dba15f1b28cc149c8daca241172dc8caef0c0632dbc10baaac golang-1.22.9-1.el9_2.tuxcare.els22.x86_64.rpm bc0041eaf002469a4bea975b8ea118e6d77dacf178fbb3271d0727cd5c7fd128 golang-bin-1.22.9-1.el9_2.tuxcare.els22.x86_64.rpm 59eafa9c0724f5c6d57a2bb7c6862c5fcf18aac09f99da7b9d7fc718b0b9eb4b golang-docs-1.22.9-1.el9_2.tuxcare.els22.noarch.rpm 4117a7d19ed413ac9fe0395a24ae4c951958d9c0333a38482da1c4180a21032b golang-misc-1.22.9-1.el9_2.tuxcare.els22.noarch.rpm b200ede4df1c8deffb7243c5588017f82af3ad1462b6bb164da12b81dd33fef9 golang-src-1.22.9-1.el9_2.tuxcare.els22.noarch.rpm 9a18c4d26a3baa0090a09f5f53161ad67d138eb9112b4f7cfcb4171d8f1cad9c golang-tests-1.22.9-1.el9_2.tuxcare.els22.noarch.rpm cc3e8d29a597af8550de2d707c1de63d05530eb4ec3280e0950fac0f7382964a CLSA-2026:1785839724 TuxCare License Agreement 0 - update to 140.13.0 ESR (MFSA 2026-72; includes MFSA 2026-64 / 140.12.1 fixes) - CVE-2026-14899: The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. Exploit code for this issue is public - CVE-2026-15719: Site isolation issue in the DOM: Navigation component. Exploit code for this issue is public - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component - CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component - CVE-2026-16354: Information disclosure in the Graphics: ImageLib component - CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component - CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component - CVE-2026-16357: Incorrect boundary conditions in the Graphics component - CVE-2026-16358: Site isolation issue in the Graphics: WebRender component - CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component - CVE-2026-16360: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-16361: Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component - CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component - CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component - CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component - CVE-2026-16371: Privilege escalation in the DOM: Navigation component - CVE-2026-16374: Information disclosure in the Framework component in DevTools - CVE-2026-16375: Site isolation issue in the Networking: HTTP component - CVE-2026-16377: Mitigation bypass in the PDF Viewer component - CVE-2026-16379: Privilege escalation in the DOM: Content Processes component - CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component - CVE-2026-16383: Mitigation bypass in the DOM: Networking component - CVE-2026-16387: Site isolation issue in the Networking component - CVE-2026-16390: Mitigation bypass in the Enterprise Policies component - CVE-2026-16391: Information disclosure in the Storage: IndexedDB component - CVE-2026-16396: Privilege escalation in WebExtensions - CVE-2026-16405: Information disclosure in the Networking: WebSockets component - CVE-2026-16412: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-57962: Memory exhaustion via a malicious LDAP address-book server - CVE-2026-57963: Content injection via HTML chat messages (Matrix/XMPP) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to 140.13.0 ESR (MFSA 2026-72; includes MFSA 2026-64 / 140.12.1 fixes) - CVE-2026-14899: The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. Exploit code for this issue is public - CVE-2026-15719: Site isolation issue in the DOM: Navigation component. Exploit code for this issue is public - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component - CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component - CVE-2026-16354: Information disclosure in the Graphics: ImageLib component - CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component - CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component - CVE-2026-16357: Incorrect boundary conditions in the Graphics component - CVE-2026-16358: Site isolation issue in the Graphics: WebRender component - CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component - CVE-2026-16360: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-16361: Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component - CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component - CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component - CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component - CVE-2026-16371: Privilege escalation in the DOM: Navigation component - CVE-2026-16374: Information disclosure in the Framework component in DevTools - CVE-2026-16375: Site isolation issue in the Networking: HTTP component - CVE-2026-16377: Mitigation bypass in the PDF Viewer component - CVE-2026-16379: Privilege escalation in the DOM: Content Processes component - CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component - CVE-2026-16383: Mitigation bypass in the DOM: Networking component - CVE-2026-16387: Site isolation issue in the Networking component - CVE-2026-16390: Mitigation bypass in the Enterprise Policies component - CVE-2026-16391: Information disclosure in the Storage: IndexedDB component - CVE-2026-16396: Privilege escalation in WebExtensions - CVE-2026-16405: Information disclosure in the Networking: WebSockets component - CVE-2026-16412: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-57962: Memory exhaustion via a malicious LDAP address-book server - CVE-2026-57963: Content injection via HTML chat messages (Matrix/XMPP)

0 tuxcare-almalinux9.2-esu thunderbird-140.13.0-1.el9_2.alma.1.tuxcare.els1.x86_64.rpm 092c7e98cda74a5c8e52e9ca804be7c9b44346bebc3a970d20d5c7ec97bd5c91 CLSA-2026:1785840756 TuxCare License Agreement 0 - CVE-2026-50031: buffer overflow in ipmi-oem dell/fujitsu response handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50031: buffer overflow in ipmi-oem dell/fujitsu response handling

0 tuxcare-almalinux9.2-esu freeipmi-1.6.9-1.el9.tuxcare.els2.i686.rpm d59eed2ef2ee281f13d3cff23ff19e194f93b0488d5e8d7407a14334036f083b freeipmi-1.6.9-1.el9.tuxcare.els2.x86_64.rpm c0b6646527b96ee38bb0f9cf3878830471d19647666d408cf558ab0ddd40f7e1 freeipmi-bmc-watchdog-1.6.9-1.el9.tuxcare.els2.x86_64.rpm 3e8f127a59c36a42e5e229a9e8e5cc965f9b953cc8ce10f605df7d0b46997c53 freeipmi-devel-1.6.9-1.el9.tuxcare.els2.i686.rpm b9f5bddaba770b0b0b8b549839836660b1ec64807ff05e064972cb16098ad8e2 freeipmi-devel-1.6.9-1.el9.tuxcare.els2.x86_64.rpm a51a4d8bcd4c7dda211653a9aa68671eaabab79bcd583a2fb8b85b558961aae7 freeipmi-ipmidetectd-1.6.9-1.el9.tuxcare.els2.x86_64.rpm 186b1f592efac61944d7e232e3667ffe3ee3371c4101504a75b4c67e94135885 freeipmi-ipmiseld-1.6.9-1.el9.tuxcare.els2.x86_64.rpm 014ad7cb3b32978d5d554def18129b81655e79d22744343ec3e9dcd17aebd71c CLSA-2026:1785841535 TuxCare License Agreement 0 - CVE-2024-0743: add defensive check for large ssl_DefSend return values in ssl_SendSavedWriteData to prevent pendingBuf.len underflow (Mozilla bug 1867408, MFSA-2024-13, fixed upstream in NSS 3.90.2) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0743: add defensive check for large ssl_DefSend return values in ssl_SendSavedWriteData to prevent pendingBuf.len underflow (Mozilla bug 1867408, MFSA-2024-13, fixed upstream in NSS 3.90.2)

0 tuxcare-almalinux9.2-esu nspr-4.35.0-6.el9_2.tuxcare.1.els3.i686.rpm 117a05eb53830b68e71f7f151e27a450b97e7418f7e27c0a9ee147d55c4d2532 nspr-4.35.0-6.el9_2.tuxcare.1.els3.x86_64.rpm 03b2e2b7f3e89501de3075f9874500309a60d509c0a005a974e7738944b63a9a nspr-devel-4.35.0-6.el9_2.tuxcare.1.els3.i686.rpm 7417f5c2ef4263534826d4e9411688a66da41feb1527d253ebf4d48c446c1367 nspr-devel-4.35.0-6.el9_2.tuxcare.1.els3.x86_64.rpm d6bcaf3afd57a8989e5bedca35fde3bb9fa86ca6812620e4b7c786d1b1126ddf nss-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm ccf439fd5933f523f9ae37fa628bcca9eb4e898ddb3a00afefd8eb6416ac3653 nss-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm 8c4bab75ac227b8c2e1fad4c4121852dae669007d529c58add30407a34c2d6df nss-devel-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm 209192373f0c8aac59c98fc5c74fb1206a986c4d6b7d15a7ba328b3a39adf8df nss-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm 9df44a04bdd35a95c51bf01a745dd6f4ca3f5a9380fc3a4c252ef4f955a08dbf nss-pkcs11-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm 1bb8210f4cbf18c21295916aa0a27ae065a1e1ad7f8896812aaa86fafadd228d nss-softokn-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm a8704f36b30181176218250c3fa55a9acbd3a9aecc8618da9487bd5d60da277b nss-softokn-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm 562d4d135ca50156e87b5c105d3db4cf83325823906389d91a8a624367f36ffc nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm 6d1d9719c19c8227678b93a1ede17a6894835c3d6fa708d2f117e46bd3524888 nss-softokn-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm dbfdfffac2039d46b7121bd48edae1f8c52e899b6cea2258f952ab85249c3078 nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm c7149ac07e98062c9ed2cd1dcfeea4acf06b73018001396430484da7951c8f14 nss-softokn-freebl-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm e5f5ab7434d3f09e92da0dca27a6aa4fd5dbf46d2801ce1e87b6b53eedc1cf8d nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm cf82b9ff94a0d6cb82b46582451dcc5b6d748be940467ea629f4366e4d6fefaa nss-softokn-freebl-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm e977bcc0e65448eb5e2fa7cd83920f8d5060755f2b5a569b8b15f02025599355 nss-sysinit-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm c961a10cb797c1737e2a89403662d1dec0f3aed16de39bc7a3c2c5a5de547710 nss-tools-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm 542334ee4d388850b9d013a479a751bb9d8eded4130c8457f10d9f5a581a07b2 nss-util-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm 6496ac0653893902a49c83e95ef8cbfb93bef00a78e367f50202e320266a5874 nss-util-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm 581c269e8c9b1dde4a8c048dc34e457cb875a54a8a7a3953a99e35b389925205 nss-util-devel-3.90.0-6.el9_2.tuxcare.1.els3.i686.rpm fc7bfec07a213e2fe1876b70eb977fdd8f4794714c0d9bca54be0415e4002932 nss-util-devel-3.90.0-6.el9_2.tuxcare.1.els3.x86_64.rpm e1796071bf9c2f4473a615594065a06dddd11ab34ad5a5f54b9a71ddefdccecd CLSA-2026:1784298569 TuxCare License Agreement 0 - CVE-2026-61866: fix a memory leak in the JNG encoder by destroying the cloned JPEG image and image info when the JPEG-alpha blob cannot be opened Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-61866: fix a memory leak in the JNG encoder by destroying the cloned JPEG image and image info when the JPEG-alpha blob cannot be opened

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.50-1.el9_2.tuxcare.els2.x86_64.rpm bbff4cca5c5c87bc0554302f5206556040d488692b7b52870d63f1f67685e3ec ImageMagick-c++-6.9.13.50-1.el9_2.tuxcare.els2.x86_64.rpm 41b6ea3d49fc835b07eca145773723a2bea1a811817e26b0ea82f7c81639fb0e ImageMagick-c++-devel-6.9.13.50-1.el9_2.tuxcare.els2.x86_64.rpm 72933e2eb8ed74c5df13840ed5e16b0e1203ad2aa3636909297ef70f72559a91 ImageMagick-devel-6.9.13.50-1.el9_2.tuxcare.els2.x86_64.rpm fc5908c6a1060444c760fd7618a83eb31a8a33976949c5e542c4e42b6c91ef06 ImageMagick-djvu-6.9.13.50-1.el9_2.tuxcare.els2.x86_64.rpm b335f569bf148dd8bf1f3bcdc427910e662193d30e6d17c380f46eaf5f79b463 ImageMagick-doc-6.9.13.50-1.el9_2.tuxcare.els2.x86_64.rpm 8f888c2e2eff1515ea516d6c807260541eda822a47e62e07e37de29016012d52 ImageMagick-libs-6.9.13.50-1.el9_2.tuxcare.els2.x86_64.rpm 68a89c99b955343d0485a0095a61b03df7d28c0500ad01c15df988a201f2966d ImageMagick-perl-6.9.13.50-1.el9_2.tuxcare.els2.x86_64.rpm a8afa84ff3ac69d450701b6d85b3bcb8f1286bfd046229bf82a73ba85bcc062d CLSA-2026:1785846081 TuxCare License Agreement 0 - CVE-2026-17543: fix SQL injection in ext/pgsql by dropping the E prefix in php_pgsql_add_quotes (GHSA-7qpv-r5mr-78m4) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-17543: fix SQL injection in ext/pgsql by dropping the E prefix in php_pgsql_add_quotes (GHSA-7qpv-r5mr-78m4)

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 9a8adcf782d8c211f10071b99ed4bc7dba7f9e72c1021c78f748e4d506b88b95 php-bcmath-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 2ce3ef9bea06d63430870c1c0683205823b082c1f9192d6bdd4be26118c6304d php-cli-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 4f42642ce835127e057538a58460af399da200e580b3d562030089b4b35dc228 php-common-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm b1cfc9ec26fc6318b6b7f0a7822ba3758d6431d62dd192a371b23e9ce7d926d8 php-dba-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 29c589441a3e231a8a4b863c2d7cab0d2b43c07a907a42e58651363e478b5926 php-dbg-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 26a9d157a40327ddc3e6c14fce7591a93d199393c8f704bc10f1d4e1bc97c758 php-devel-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 0787f9fb0852cd336f734dcd317685080d5dde409eb7ccac736500a4f788b292 php-embedded-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 838570af7b08f756f37b6eb62da78d8cbf0b07f8d05852f340b9c06caa8df1f6 php-enchant-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm b1641921bc5191f1b0848972b3b166e45f3e5462283838eb382f99b65c1ec133 php-ffi-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm a9260bfe4a471f3031b847fbc633c29327cc8a23967405e1748ea6f8c8c86432 php-fpm-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm fc4174bf9e83b5a41b0d5a8ec5512068ffed71019ad59eda99539824a4fa3106 php-gd-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm aa8bf50a53d6dbe73d8b0c2a7f8b0d6f7a88e1c6b864e0fdb000b59eebdb7502 php-gmp-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 70f95bb90380748edba8ecaf264888169fe3ab42d1a35027eb8e8edc70acaf93 php-intl-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 8e0566cab8ae5b43cc43e01b0cf5d2156c0d882ff784dbcc0b0e339dfa52d033 php-ldap-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 3dad1489ecafa7e57597f4ff321193e2fed7e4232c05bfaf85a5327bf320f5ce php-mbstring-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 932974d941afc9b4fe7dc49b15f7807ac78fe342f10c20e8dd349fb2d44d1c67 php-mysqlnd-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm f12f1b61d4ae0e94f7cb9aceb657440f159b26c2cc40caf23f880c0d02d5a7cd php-odbc-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm a79f07b77d363e16a70bd5e713ea7a3dde247ff5fcd6ddf7e4369a01df7c82e0 php-opcache-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 84834cc150bab255432535457bd1f0a0f9185ed4f9c6a33e8233be6bd53ab763 php-pdo-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 9ddd3409f0a6786e3b22513c67e6feaef8b11c7ca2a230ae09331d905c8392fa php-pgsql-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm da384e4c544af560aa961814698541077be3cec788ba088f8475923c4e0cb6fe php-process-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 0500e39cda803f7805542b52faf0209a332153697aba647c5933d4675276e073 php-snmp-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 84695114bea9be22a118712a76ad9dd3618647e1872aa3d5821c4253741aa438 php-soap-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 95ba35b4d60723f76047ab1e8f049b03a9dddc1a60316faaf548f6f17167e7bb php-xml-8.0.30-1.el9_2.tuxcare.els15.x86_64.rpm 4ea2ea3d915265e1ea0bcde44b69f5217c7f7491194dd652cdba7d6918625f94 CLSA-2026:1785847606 TuxCare License Agreement 0 - CVE-2026-4873: do not reuse a clear-text STARTTLS connection when the new transfer requires TLS, so an IMAP, SMTP or POP3 request that mandates TLS is not sent over an unencrypted connection - CVE-2026-6253: restore the proxy credentials set via options on every redirect so credentials belonging to the first proxy are not disclosed to a second, different proxy - CVE-2026-6429: drop credentials that were not set through CURLOPT_USERNAME on redirect so a netrc password established for the first host is not sent to the redirect target over a reused connection or proxy - CVE-2026-8924: trim trailing dots from the request and cookie domains before the public suffix list check so a trailing-dot domain cannot set a super cookie scoped to an unrelated site Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4873: do not reuse a clear-text STARTTLS connection when the new transfer requires TLS, so an IMAP, SMTP or POP3 request that mandates TLS is not sent over an unencrypted connection - CVE-2026-6253: restore the proxy credentials set via options on every redirect so credentials belonging to the first proxy are not disclosed to a second, different proxy - CVE-2026-6429: drop credentials that were not set through CURLOPT_USERNAME on redirect so a netrc password established for the first host is not sent to the redirect target over a reused connection or proxy - CVE-2026-8924: trim trailing dots from the request and cookie domains before the public suffix list check so a trailing-dot domain cannot set a super cookie scoped to an unrelated site

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els16.x86_64.rpm 0395587ca0deb03c90fdc93a28dce1870cedc8afaee86f348cf314a3a64d4802 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els16.x86_64.rpm 0a4f2a2dac3eef99acfd6e321e6454f0cf4f00782fa0e1af7f450506632c094d libcurl-7.76.1-31.el9_2.1.tuxcare.els16.i686.rpm cc7a67fa3ac1c1375d3122e427db70330eb1a74444cdc67d75aa434090b7762a libcurl-7.76.1-31.el9_2.1.tuxcare.els16.x86_64.rpm 47149b6bea7d1a78d735a80268c8d1c7cc9fb28ea316bc2ea438aa0e4828d4fc libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els16.i686.rpm e228ba4a6b6fc08a101eb1e639914af9c911bd0ea065b83ca797d9d9e3944424 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els16.x86_64.rpm ad86822c6f6a2c059606b8ac49afc18fad23787d6c530f8852b1b319cce1389c libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els16.i686.rpm 1f66b6fa1ca1694fed28c775e8f3eba4044999db86e6182c05bac02996b5e090 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els16.x86_64.rpm 6ec454a68fad867f5a71fa94189de8174062723b9329aaa175c9cfbe5f88507d CLSA-2026:1785499004 TuxCare License Agreement 0 - CVE-2026-8286: require a matching SSL configuration before reusing a pooled connection for a clear-text transfer that upgrades via STARTTLS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8286: require a matching SSL configuration before reusing a pooled connection for a clear-text transfer that upgrades via STARTTLS

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm a7011a99c8dc2da9cb8ea690d6d2a84a87db54740cfff2ee523c78bdc8e37b79 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm b48a37794dad7824eac0693125880e21be23c00160b693cfb447614044829898 libcurl-7.76.1-31.el9_2.1.tuxcare.els15.i686.rpm b0b73fe635664b89d4eeaf179afdca8bfc9f132bbae7bc9d9f948c18c933977d libcurl-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm 7fbe9ca6e28b082aac7610e15217ed9ea4a2764c721396dbd82be48529ad5e6e libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els15.i686.rpm 7677fc0f2c362a70f792c0e37540770d0be5bb16b07ea6d7be67439ea44ec19a libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm da7d13381e8d8f911ef73da840e6c57d66e58dafc78e0e2cd4f9fcddca9c6e53 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els15.i686.rpm 6664b38b21c94c5ac5a922df90b164ac67529dff34c28eb71780846c06839433 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els15.x86_64.rpm bc1e760cbda93fd477c014e59b37e9f25669e49faf7a5d082a0c936fd0ff01da CLSA-2026:1785887332 TuxCare License Agreement 0 - CVE-2026-56407: cap entity textLen against signed integer overflow in doProlog - CVE-2026-56408: waterproof copyString against SIZE_MAX overflow in xmlparse.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56407: cap entity textLen against signed integer overflow in doProlog - CVE-2026-56408: waterproof copyString against SIZE_MAX overflow in xmlparse.c

0 tuxcare-almalinux9.2-esu expat-2.5.0-1.el9_2.tuxcare.els15.i686.rpm 72df115b6138c255a6e93d4200861079a169dc50a144b2c7c0b9d21b9f4728cb expat-2.5.0-1.el9_2.tuxcare.els15.x86_64.rpm 8021705bd8f21bc5f39325ab651504f71dd176a6ab313717b564bfc7f9972db2 expat-devel-2.5.0-1.el9_2.tuxcare.els15.i686.rpm 5ed504071a77251cd61c5158d1da6563084ad6b106dca24602a15dbacf794af9 expat-devel-2.5.0-1.el9_2.tuxcare.els15.x86_64.rpm 986f80c1718721459e31d217edc2b30163d51adfc9ead195a0264a9dbc8bbfc1 expat-static-2.5.0-1.el9_2.tuxcare.els15.x86_64.rpm a4211310dc1446f83c728ae57e49d277b9163be8042e65a23f71a2b69550397d CLSA-2026:1784036547 TuxCare License Agreement 0 - CVE-2026-15308: fix quadratic complexity (CPU DoS) in incremental HTMLParser feed() by buffering pending data until a parse threshold Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15308: fix quadratic complexity (CPU DoS) in incremental HTMLParser feed() by buffering pending data until a parse threshold

0 tuxcare-almalinux9.2-esu python3.11-3.11.2-2.el9_2.2.tuxcare.els30.i686.rpm f68a1063df00b3cfe076301f4c9f52e9f4bed3750cf01e43e1e5ca3d15b82834 python3.11-3.11.2-2.el9_2.2.tuxcare.els30.x86_64.rpm 5296d31214df36b443905c66fceba1c14ac30d2fb8e270729c282a2ff5fd20e4 python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els30.i686.rpm 1ce293c0a66c508d92042e7b4b0cd6ba7497d79435a940e13372dea7326e278a python3.11-debug-3.11.2-2.el9_2.2.tuxcare.els30.x86_64.rpm d7bc6c6b7a0c12ab6441c86c914e6a41220b2cffba932627296455c1841f3011 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els30.i686.rpm 8a8a8f95e0f8faf089c8e7c3e0573b84a4ccf1f5cc0d258765eaa66601d5abe2 python3.11-devel-3.11.2-2.el9_2.2.tuxcare.els30.x86_64.rpm b4614fd87c5b5ad4b1e58310f501780a09170ed53be63717cd337a3a62543943 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els30.i686.rpm b28866be4a5bd544a2ae86542767e61e12c77fcc4ca41bd88b0b617693cae914 python3.11-idle-3.11.2-2.el9_2.2.tuxcare.els30.x86_64.rpm 70e92a8136a01bc0df6351e68fb3f52b6a19c976fd29f08e3d01cac7d8ea8293 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els30.i686.rpm 8f1638494408392c29245976fa3f757ba7c8db14f00d5a93b196654e2e726ef2 python3.11-libs-3.11.2-2.el9_2.2.tuxcare.els30.x86_64.rpm 70b4d4ed0d216df5bfd6c7099e194fd1540e1d2415fd5dbbf064403fc3620a0d python3.11-test-3.11.2-2.el9_2.2.tuxcare.els30.i686.rpm a346202ce8ceaafef3324b9591b29bb7a55394b608b06c345f81c141b45fc79b python3.11-test-3.11.2-2.el9_2.2.tuxcare.els30.x86_64.rpm 95e8ab5250f3e9ae96accc0151142702d8d7711e9c047d83d875defbe32eba17 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els30.i686.rpm 6a3c9e1fe4d92f585e7ebda7a9fc16e2754d0711759ce1d3666bd828f65a69c6 python3.11-tkinter-3.11.2-2.el9_2.2.tuxcare.els30.x86_64.rpm 2fa35ad05c6927fe54d949aac404c4edc428ee1135c595a9bd80ab61e0a7de95 CLSA-2026:1785922957 TuxCare License Agreement 0 - CVE-2026-40701: fix resolver use-after-free in OCSP; the resolve context was leaked when a client SSL connection was terminated while resolving an OCSP responder, so completion of the resolve touched freed memory - CVE-2025-53859: fix buffer over-read in ngx_mail_smtp_module; login and password storage could be left in an inconsistent state after base64 decoding errors in the plain/login/cram-md5 auth methods - CVE-2026-28753: validate the host name resolved from the client address against the character set of RFC 1034 section 3.5, preventing CRLF injection into auth_http and smtp proxy requests - CVE-2026-42934: fix buffer over-read in ngx_http_charset_module recode_from_utf8(); pass the saved byte count rather than the last saved index to ngx_utf8_decode() and advance past the whole saved sequence on invalid UTF-8 Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40701: fix resolver use-after-free in OCSP; the resolve context was leaked when a client SSL connection was terminated while resolving an OCSP responder, so completion of the resolve touched freed memory - CVE-2025-53859: fix buffer over-read in ngx_mail_smtp_module; login and password storage could be left in an inconsistent state after base64 decoding errors in the plain/login/cram-md5 auth methods - CVE-2026-28753: validate the host name resolved from the client address against the character set of RFC 1034 section 3.5, preventing CRLF injection into auth_http and smtp proxy requests - CVE-2026-42934: fix buffer over-read in ngx_http_charset_module recode_from_utf8(); pass the saved byte count rather than the last saved index to ngx_utf8_decode() and advance past the whole saved sequence on invalid UTF-8

0 tuxcare-almalinux9.2-esu nginx-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.x86_64.rpm 350ade4fdb83ea1c6fe4465d234f861745903df435fa5070d3d82ef155e351c7 nginx-all-modules-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.noarch.rpm e8489ecd3ebb768a4be6dd5435a3d8bbdeb57c0888a2632c0eed3a5d4f24b21a nginx-core-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.x86_64.rpm c3def4ce4c7c7f5ba1aacf65076d65a6b828bad46a3739aedf1a734341c940cb nginx-filesystem-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.noarch.rpm 4fe12a4eed3cda4254fc08b94c3d3b41b5af8662fe4a469e810568a1340cd9e9 nginx-mod-devel-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.x86_64.rpm dccc00ff1e9c2715d584f4b482c99d84ebd0f72466dc4198fa923402f06dc1a8 nginx-mod-http-image-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.x86_64.rpm 7bffe66a93afef8267ced60715140b146c29d766a811b378a30a55ff952afb30 nginx-mod-http-perl-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.x86_64.rpm 857cb3370e6e5943690b0add8801b0182128560a620716d37ee5e7b5b9dc75d2 nginx-mod-http-xslt-filter-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.x86_64.rpm 6217c8e92b667f8fa7418d89838838670ee4ede03e7735c71c75f94becc92fe7 nginx-mod-mail-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.x86_64.rpm 0e46e901c8beb127a2cc1d8c59f4453d16a91c904c5f524e18cc4b8fe5974e40 nginx-mod-stream-1.20.1-14.el9_2.1.alma.1.tuxcare.els13.x86_64.rpm ce25f2cd01878d9128a9c152b93ccf8d7184eaf135168f4a295e8b9c15e1d862 CLSA-2026:1785925784 TuxCare License Agreement 0 - CVE-2026-8927: flush the proxy Digest authentication state when the proxy read from an environment variable differs from the one that state was established for, so a Proxy-Authorization header computed for one proxy is not sent to a different proxy on a reused handle - CVE-2026-8932: compare the client certificate type and the private key, its type, password and blob when matching a connection for reuse and when matching a cached TLS session, so a transfer cannot silently inherit another handle's authenticated client identity Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8927: flush the proxy Digest authentication state when the proxy read from an environment variable differs from the one that state was established for, so a Proxy-Authorization header computed for one proxy is not sent to a different proxy on a reused handle - CVE-2026-8932: compare the client certificate type and the private key, its type, password and blob when matching a connection for reuse and when matching a cached TLS session, so a transfer cannot silently inherit another handle's authenticated client identity

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els17.x86_64.rpm 90d85d434ce8963c328a7111bdae05440f25d6f6f3fd8b89acf2e5928290daa1 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els17.x86_64.rpm b873b8bafb1e611f54e1301c1eb78215cabaae7d21918db20e4592eaecdc78ae libcurl-7.76.1-31.el9_2.1.tuxcare.els17.i686.rpm ba6fcce775fce196f5ccff918df11e4934d2fe54a0ecbb7fa5127469db3419e2 libcurl-7.76.1-31.el9_2.1.tuxcare.els17.x86_64.rpm a6e6208558b5cc89e19c9f21e7fe3c5ed7c8303ce0cd9a14227721fba86a7fa1 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els17.i686.rpm 2082b8430344368a5f1170700e44a86a9585c6d4cba37116fdffac02de608991 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els17.x86_64.rpm 7b1d657c5fb648691d87f13db285aa8890c3a314eddb464735a7bbed455d7110 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els17.i686.rpm 7757f280c846ec80feafe99ffd15fdbc40ecfacb012f1e5972826402ebd99973 libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els17.x86_64.rpm c0b432934f0ba031a416f6ca52f59b1875063ef84f4ae5beeb26e956f174d4df CLSA-2026:1786008652 TuxCare License Agreement 0 - CVE-2026-50252: draw outgoing UDP ports from a shared randomized pool so a source port can no longer be mapped to a worker thread for cache poisoning Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50252: draw outgoing UDP ports from a shared randomized pool so a source port can no longer be mapped to a worker thread for cache poisoning

0 tuxcare-almalinux9.2-esu python3-unbound-1.16.2-3.el9_2.tuxcare.els11.x86_64.rpm e774d624e360bc16c9bd678aac38fc84ec72301b27c90d7fcfb9d306e1805f0a unbound-1.16.2-3.el9_2.tuxcare.els11.x86_64.rpm 2c0bc9509b154873aebb71279cfa6b542e8f7c30dcfed24a1d9e94ca4212c894 unbound-devel-1.16.2-3.el9_2.tuxcare.els11.i686.rpm a0b2ad41508529f9dc7baaadfaa87434a9b6829c5754f8c03ffdc0a4e631e7bb unbound-devel-1.16.2-3.el9_2.tuxcare.els11.x86_64.rpm a4b5871a40cec66d31c1048b86454f0b289c6ba2626ea8501b9685df19959bd8 unbound-libs-1.16.2-3.el9_2.tuxcare.els11.i686.rpm 0a312a90fe95fb8d9d1486083c8697e6a4a576d260815bfc60a8f4bc66afdc85 unbound-libs-1.16.2-3.el9_2.tuxcare.els11.x86_64.rpm 09d1a19eb78dff3744e520740e54fc2a7e4b4bb30d58d046070e4de344e08eb3 CLSA-2026:1785501342 TuxCare License Agreement 0 - Update to shenandoah-jdk8u502-b07 - Security fixes from OpenJDK 8u502-b07: - CVE-2026-41254: update LittleCMS to 2.19.1 - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47063: enhance jar handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47010: enhance JPEG handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to shenandoah-jdk8u502-b07 - Security fixes from OpenJDK 8u502-b07: - CVE-2026-41254: update LittleCMS to 2.19.1 - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47063: enhance jar handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47010: enhance JPEG handling

0 tuxcare-almalinux9.2-esu java-1.8.0-openjdk-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm f0ec61bb6fc9b7d6cdbcc349c9cab80934694d8d531fcfd6c841f7b6eae285de java-1.8.0-openjdk-demo-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm 9376c54edba6e17f91a238e828fdf62c0c13d8dfd4e2316fbb853a1eff3f7bf4 java-1.8.0-openjdk-demo-fastdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm 0d3c9f194e12944aa81fd6918c9435005078a0c24ee281d45c11ea066ccefa5e java-1.8.0-openjdk-demo-slowdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm 51a338b45f0ccb8dc3237d232d95e8a09e63db73f6b76c0d985b29c341d7a5a3 java-1.8.0-openjdk-devel-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm f88ae70ffcca13c79535b3b7abc1c14f38408b4ccfed8ca1acf2c94622998141 java-1.8.0-openjdk-devel-fastdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm a70ee0107a217bbb746dbf43100231f6edb38307b5f5ae2075f963714ce8a7f9 java-1.8.0-openjdk-devel-slowdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm 3ac33d0276621cd58b541569918cc12f4d82b2e97be5204655abe482ee0a1d2d java-1.8.0-openjdk-fastdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm 5610834038a8adb7427f2c96dc5454d98b2f96725f61542a326148e4dda40386 java-1.8.0-openjdk-headless-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm b726e80580ddcaec1b890ec27c3947c2b2b21d0d57ac83cc11da21af8c7c46fa java-1.8.0-openjdk-headless-fastdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm adf0dfa107492792db2897aafa8c93b461d91717d5d35d3b7eb8857b0fb0a213 java-1.8.0-openjdk-headless-slowdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm 71b45ddfdc29c3cf7ec17088c87aa10261bd8a881be27483f36af3e7298283ea java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.el9.tuxcare.els1.noarch.rpm 3a6904f1af4b4063847352dfdfde93b5b2632470d3b53fdeb503159f2c0fd37e java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.el9.tuxcare.els1.noarch.rpm ffce864ab66367f70b89a746fb44a161f5515ef62f2eaf2e28274aaa5ed8e724 java-1.8.0-openjdk-slowdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm 4527eb3d0f424da30f60ec66a25cd353e6cb6b228fea1cb6bc5daebfd452d425 java-1.8.0-openjdk-src-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm 3e5bfccf8861b62d817d9843d576a05d427a51b4005d4fd11d63251d4ba21c62 java-1.8.0-openjdk-src-fastdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm ed9e2b4b3544f3950ee792f9fa3044d15382a9c44b334a879c4288f19f11ce77 java-1.8.0-openjdk-src-slowdebug-1.8.0.502.b07-1.el9.tuxcare.els1.x86_64.rpm bf1f264bb215f5990ad85369a486ecb2019abfb83b73eabd0481bc427ad9c833 CLSA-2026:1784801122 TuxCare License Agreement 0 - fix CVE-2026-54513: validate array element type in BasicPolymorphicTypeValidator allowIfSubTypeIsArray Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix CVE-2026-54513: validate array element type in BasicPolymorphicTypeValidator allowIfSubTypeIsArray

0 tuxcare-almalinux9.2-esu pki-jackson-databind-2.14.1-2.el9_2.tuxcare.els6.noarch.rpm 404d0fee9b1019b148c345caa52a9d27501c07f1db6f56ffc18466518989aab0 CLSA-2026:1786035720 TuxCare License Agreement 0 - CVE-2026-37460: validate RFPOPTION sub-TLV length before accessing its data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-37460: validate RFPOPTION sub-TLV length before accessing its data

0 tuxcare-almalinux9.2-esu frr-8.3.1-5.el9_2.2.alma.tuxcare.els6.x86_64.rpm c04b91edf8472d018bb69d06fdeab6deba977a61aceb6e6187745d8450259697 frr-selinux-8.3.1-5.el9_2.2.alma.tuxcare.els6.noarch.rpm a52b5f0d5b2b522a871fd62a68b471c6568207fafa3ce45c87f0e63691354008 CLSA-2026:1786094315 TuxCare License Agreement 0 - CVE-2026-8458: tie the requested SASL/SPNEGO service name to the connection and compare it when matching an existing connection for reuse, so a Negotiate authenticated connection is not reused for a transfer that asked for a different service - CVE-2026-8926: discard a .netrc entry that matches the host but whose login does not match the user given in the URL, so the password that belongs to another user of that host is no longer returned as a successful lookup Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8458: tie the requested SASL/SPNEGO service name to the connection and compare it when matching an existing connection for reuse, so a Negotiate authenticated connection is not reused for a transfer that asked for a different service - CVE-2026-8926: discard a .netrc entry that matches the host but whose login does not match the user given in the URL, so the password that belongs to another user of that host is no longer returned as a successful lookup

0 tuxcare-almalinux9.2-esu curl-7.76.1-31.el9_2.1.tuxcare.els18.x86_64.rpm 923f27f2c20e29e60dfec68b47aab66f4a324391c983e88eb6a62aee3619d852 curl-minimal-7.76.1-31.el9_2.1.tuxcare.els18.x86_64.rpm 1dc48df33b6afe02e5601f22a66e55876a61202094fdee6f462b3c97edca203a libcurl-7.76.1-31.el9_2.1.tuxcare.els18.i686.rpm f2eb595a116180a279bf5652c9ca8805782b8f6590e60164d8e2f0fcfbaadca7 libcurl-7.76.1-31.el9_2.1.tuxcare.els18.x86_64.rpm d1cd35b635a6c535af04b46b1454a00ada09550d045de28cdc09ee6c94b45eee libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els18.i686.rpm 204345a30af27af405c45f73e08bf825c04007ac1b3e15d98d0acd66fda7d8f7 libcurl-devel-7.76.1-31.el9_2.1.tuxcare.els18.x86_64.rpm a19355d4bd0a61789542640249009fbecc9191ebfee1f4ec495457e11d8b19da libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els18.i686.rpm 2eefe77b8d7a98b103dc3be0f5d293a1a3f2972d8018291b7a7a7a0eb95f8aac libcurl-minimal-7.76.1-31.el9_2.1.tuxcare.els18.x86_64.rpm cd8a4ea9f4727f89a8e4b09e3e2934712990acebe05c1d86f077fb46c291efad CLSA-2026:1786095908 TuxCare License Agreement 0 - CVE-2026-9538: cap per-entry size during read to avoid memory exhaustion from a crafted oversized tar header (MAX_FILE_SIZE cap) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9538: cap per-entry size during read to avoid memory exhaustion from a crafted oversized tar header (MAX_FILE_SIZE cap)

0 tuxcare-almalinux9.2-esu perl-Archive-Tar-2.38-6.el9.tuxcare.els2.noarch.rpm 4c60670a302ac1ba1c50617e854e08bae181699963509bfa7d7e7376734f3d03 CLSA-2026:1778268804 TuxCare License Agreement 0 - Fix release version format: place .el9 before .tuxcare.els1 suffix; bump rpmrelease to 2 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix release version format: place .el9 before .tuxcare.els1 suffix; bump rpmrelease to 2

0 tuxcare-almalinux9.2-esu java-1.8.0-openjdk-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm e8905de3eabbac0cf5e7a35803ae2142da904f39de3aadd365fa29f3287a669b java-1.8.0-openjdk-demo-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 99977729d5084913bead895c15d3c197f66e49ed2fca6de4355b5840b3b263c4 java-1.8.0-openjdk-demo-fastdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 4a4d2c54e1b237326edc216a8a08b19b97cfea4bcc579521482d270310829686 java-1.8.0-openjdk-demo-slowdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm ead92eace672ef6d013280e68e12a9bcbc5ce423eb8574015a66a937f082ef2b java-1.8.0-openjdk-devel-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 32d1a7b25d6d3ad9ded40be209bb043ad8e2723f32dcce400cffd92f0226f77a java-1.8.0-openjdk-devel-fastdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 65ed56188b871a879aa7768c492404717dbaaaa8d24b1dbac724a27f04bb49ab java-1.8.0-openjdk-devel-slowdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 942b1d16e1041fa674a9f4b0ec4cc89a87b34a3e2eef8b5a30f2dfcc00d21977 java-1.8.0-openjdk-fastdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm adbba07c4bd75ac4bfac0a5496110ec92c1dff3287e2282da49c2483f07c009d java-1.8.0-openjdk-headless-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 666b1bf71bb3de754ef5ce55f7e65d9e9270a89354d7ebadbca35556e22e1ec2 java-1.8.0-openjdk-headless-fastdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 1f20da677ec53bd81c8f9531c7e59f7b25ce11b9823fd3e9d8c53680db9facb6 java-1.8.0-openjdk-headless-slowdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm ffcd323058422ef7f1cd831f7b2b2600ae4f810e3e57ecfbc2cc48f0954512bb java-1.8.0-openjdk-javadoc-1.8.0.492.b09-2.el9.tuxcare.els1.noarch.rpm 76b11feb1889c0837e8c1468c21c07a80d5dc8f664f76596c4140e229aac4dfc java-1.8.0-openjdk-javadoc-zip-1.8.0.492.b09-2.el9.tuxcare.els1.noarch.rpm c8d5c506ed114aa1bfd2162ffd3b26a5203986b0b646fd3b1d52e0f6705443ed java-1.8.0-openjdk-slowdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 10590f669ada75baea0639df3e2060010756220feaec621ee2d7eb7268aae4f8 java-1.8.0-openjdk-src-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 7302f89fa60d72c7171b23abafc77bffe6866df26236e586a81ca27dc067aeab java-1.8.0-openjdk-src-fastdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm 25cf010bf30e3c6bf76783b4d59495bfdc0fb468d2613ce139d1f356687fa926 java-1.8.0-openjdk-src-slowdebug-1.8.0.492.b09-2.el9.tuxcare.els1.x86_64.rpm e67fa659603ba5137314f79d6e99ca40a8573df3998a2a09d97c2a06fedb9949 CLSA-2026:1786108949 TuxCare License Agreement 0 - CVE-2025-24912: drop pending RADIUS request only when accepting the response Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24912: drop pending RADIUS request only when accepting the response

0 tuxcare-almalinux9.2-esu hostapd-2.10-1.el9.tuxcare.els2.x86_64.rpm 622a64c4738b0315a2449ef1c4338d24a80476f75671dc0f1094765d024fde18 hostapd-logwatch-2.10-1.el9.tuxcare.els2.x86_64.rpm 2daf15a2852caf0d07abe63d32df516fc76414339cc8bd517e38d39a35cdda64 CLSA-2026:1785922090 TuxCare License Agreement 0 - CVE-2026-2271: validate the Creator-block field length in the PSP loader; read_creator_block() used a 32-bit length straight from the file for allocation, so a length of 0xFFFFFFFF made g_malloc(len+1) wrap to g_malloc(0) and the following read overflowed the heap Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2271: validate the Creator-block field length in the PSP loader; read_creator_block() used a 32-bit length straight from the file for allocation, so a length of 0xFFFFFFFF made g_malloc(len+1) wrap to g_malloc(0) and the following read overflowed the heap

0 tuxcare-almalinux9.2-esu gimp-2.99.8-4.el9.2.tuxcare.els14.x86_64.rpm 42d44c1aa0cd404327942f2edb769a4617293a280f9da7f9e1d7e4359a3a55c9 gimp-devel-2.99.8-4.el9.2.tuxcare.els14.x86_64.rpm e8dd761dc07019234dd6682d33d3ec0681250832fb35ba93fb3dc95a44a8c6b5 gimp-devel-tools-2.99.8-4.el9.2.tuxcare.els14.x86_64.rpm 0c678cdc498788cfb9a10e8a3b7c4c26077c987acd932630867c54f8ae39eebc gimp-libs-2.99.8-4.el9.2.tuxcare.els14.i686.rpm 45fb48d0bafe047d99029cb7fe4ed83b787861446c1304a79915755f720e3db6 gimp-libs-2.99.8-4.el9.2.tuxcare.els14.x86_64.rpm 0484b13fef6b7d0338d4a1442ba7c3360a64364b8bc032634acc9aa16ed8fa7f CLSA-2025:1752246531 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.27+6. The following CVEs were fixed: - CVE-2025-30698: fix buffered image handling to avoid unauthorized access to accessible data - CVE-2025-30691: improve compiler transformations to avoid unauthorized access to accessible data - CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time - CVE-2024-21147: out-of-bounds array index in range check elimination - CVE-2024-21138: infinite loop vunlerability in SymbolTable - CVE-2024-21131: UTF8 size overflow - CVE-2024-21235: incorrect range check because of integer conversion error in LoopNode - CVE-2024-21140: int overflow/underflow in range check elimination - CVE-2024-21217: out-of-memory because of unbounded allocation in MessageFormat - CVE-2024-21210: integer overflow in array indexing in SuperWord - CVE-2024-21145: out-of-bounds access in MaskFill - CVE-2024-21208: improper handling of maxHeaderSize in HTTP client - CVE-2025-21502: enhance array handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.27+6. The following CVEs were fixed: - CVE-2025-30698: fix buffered image handling to avoid unauthorized access to accessible data - CVE-2025-30691: improve compiler transformations to avoid unauthorized access to accessible data - CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time - CVE-2024-21147: out-of-bounds array index in range check elimination - CVE-2024-21138: infinite loop vunlerability in SymbolTable - CVE-2024-21131: UTF8 size overflow - CVE-2024-21235: incorrect range check because of integer conversion error in LoopNode - CVE-2024-21140: int overflow/underflow in range check elimination - CVE-2024-21217: out-of-memory because of unbounded allocation in MessageFormat - CVE-2024-21210: integer overflow in array indexing in SuperWord - CVE-2024-21145: out-of-bounds access in MaskFill - CVE-2024-21208: improper handling of maxHeaderSize in HTTP client - CVE-2025-21502: enhance array handling

0 tuxcare-almalinux9.2-esu java-11-openjdk-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm ffcf1314504722704f8083c5c0a39fd3e4a668cbfd8d686511a1c980dbf2a913 java-11-openjdk-demo-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm 2095cc6db48a3ada5c2502e261e09386b707e55c3c679d7777de7370912963aa java-11-openjdk-devel-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm a43ec95ca68c77c04ced5fb6698fd9f1ebf353a82ca477989c99402e0445ea03 java-11-openjdk-headless-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm 5665e0d7fad6bf5d4a1b6c323d125f75393d24e600e924c0909485503d30dcd3 java-11-openjdk-javadoc-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm 0ae0346058a3554d80a7334abd8f6ef0e145cb15c809775f8553eeecdef8bc25 java-11-openjdk-javadoc-zip-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm a8d4bd2ddb793d33fc75907560c4f4ca929d09b6f9c764c81f17e343aafbc6f0 java-11-openjdk-jmods-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm f585d2e63b2e8a78b60375bdaf641c5a6a4d57d5afd75f98ed5fecaaa7ece71c java-11-openjdk-src-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm 302522a09e196e78d131f788e43cb6df72fc76ab66cbb7fa315defbc2304a547 java-11-openjdk-static-libs-11.0.27.0.6-1.el9.tuxcare.els1.x86_64.rpm f5b5aa35bc51d119a57d32ee280ea545c8d63c6cecfd865f88538ce492c7088a CLSA-2026:1786120315 TuxCare License Agreement 0 - CVE-2026-14380: load DBI::Profile packages via Module::Load instead of interpolating the caller-influenced package name into a string eval - CVE-2026-14739: set a hard limit of 99999 '?' placeholders and grow the preparse() buffer to 7x the statement length Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-14380: load DBI::Profile packages via Module::Load instead of interpolating the caller-influenced package name into a string eval - CVE-2026-14739: set a hard limit of 99999 '?' placeholders and grow the preparse() buffer to 7x the statement length

0 tuxcare-almalinux9.2-esu perl-DBI-1.643-9.el9_2.tuxcare.els2.x86_64.rpm 9feac46020ad5fd596b0b3156acc8a9474bf1916eb11e94e4b4820b607a2529b CLSA-2026:1786121727 TuxCare License Agreement 0 - CVE-2026-24880: validate HTTP/1.1 chunk extensions with a new ChunkExtension state machine instead of skipping them unparsed, so a CRLF embedded in a quoted extension value can no longer desync Tomcat from a front-end proxy and smuggle a request - CVE-2026-25854: collapse leading slashes on the request URI and redirect via sendRedirect in the LoadBalancerDrainingValve so a protocol-relative URI can no longer be reflected into the Location header as an open redirect - CVE-2026-34483: escape the request URI and query string in the access log %r, %q and %U elements so log fields cannot be forged through unescaped output - CVE-2026-34487: stop logging the Kubernetes bearer token by dropping it from the tokenStream.failedConnection message and dropping the request headers from the cloud stream provider debug log Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-24880: validate HTTP/1.1 chunk extensions with a new ChunkExtension state machine instead of skipping them unparsed, so a CRLF embedded in a quoted extension value can no longer desync Tomcat from a front-end proxy and smuggle a request - CVE-2026-25854: collapse leading slashes on the request URI and redirect via sendRedirect in the LoadBalancerDrainingValve so a protocol-relative URI can no longer be reflected into the Location header as an open redirect - CVE-2026-34483: escape the request URI and query string in the access log %r, %q and %U elements so log fields cannot be forged through unescaped output - CVE-2026-34487: stop logging the Kubernetes bearer token by dropping it from the tokenStream.failedConnection message and dropping the request headers from the cloud stream provider debug log

0 tuxcare-almalinux9.2-esu tomcat-9.0.62-12.el9_2.1.tuxcare.els8.noarch.rpm cc52540c02ac7e1c7c6b3047bb4f892ead273d83edad99cb52f67ad06197214f tomcat-admin-webapps-9.0.62-12.el9_2.1.tuxcare.els8.noarch.rpm efe6c0641210f81a0fa59bbe4cb7d9654eb9befa7a2c6ebbee7b70a06a15cd91 tomcat-docs-webapp-9.0.62-12.el9_2.1.tuxcare.els8.noarch.rpm 64a22d3c18d7af25e334f413056a0bb5e408f67472c96c13caeedae6634df491 tomcat-el-3.0-api-9.0.62-12.el9_2.1.tuxcare.els8.noarch.rpm afc7c16e360fce833a3bd4f17ab90856fa3eeed131315b9ba9f2facb6b4f97b2 tomcat-jsp-2.3-api-9.0.62-12.el9_2.1.tuxcare.els8.noarch.rpm a2c67ca05f151e51d90fe90e4ecc7b9f15b946530c42cd5f7c4afd3997abec5c tomcat-lib-9.0.62-12.el9_2.1.tuxcare.els8.noarch.rpm 8a812f7ca35097fb593124f9b851fa4e1629fee6f59df73ad271eb0ec5b1abe9 tomcat-servlet-4.0-api-9.0.62-12.el9_2.1.tuxcare.els8.noarch.rpm 894c8cef6cf316d04720e67877a75d90b90b2223479e0a7f93c26da7ffe95984 tomcat-webapps-9.0.62-12.el9_2.1.tuxcare.els8.noarch.rpm 1769e5ebfda778d965ed357c1275a14059e1bdf68c7976465bff119af7d46075 CLSA-2026:1786360814 TuxCare License Agreement 0 - CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion

0 tuxcare-almalinux9.2-esu avahi-0.8-12.el9_2.1.tuxcare.els6.i686.rpm 99cfca7b2cebb9a0a3764b581bec5ccd02c499ed3676d4cd33da792b9fefef1c avahi-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm be17f67017152a7c96ff6b8f80b3f1891df7349489eec0ebf36a18ee8a90d908 avahi-autoipd-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm e84af007c3e2324b42ebf0e1b3b27d3d514f39e0f074bcca2da6ae3a28c9a9db avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els6.i686.rpm 3eb062117f256299d702c4abd7d9a796e5d57b895ac8033939d147295ea8126d avahi-compat-howl-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm ce765e504902288a563528a99f6eb7d197929f63f3574889f2c6cde04ba96d27 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els6.i686.rpm 18ad2ea3ca77e9e3d15eb0a81ffbc8f328ae1be04e6b9d8f0fbd5888dacfe652 avahi-compat-howl-devel-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 0b6ab642f3f1877c591615d360644fcafe251294942250b841eced76c224b6a9 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els6.i686.rpm b6a5be1139d33dabba6cbae89b3c75bf4e165568b64aaa5be10fffb2f6c06328 avahi-compat-libdns_sd-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 161ab8eb3d7a3af9d61f916145024f48497e03e4040a110f9a5b85075c6bffc1 avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els6.i686.rpm 0ce6d56c4f89fb947f62e7616c409f988ce7b5fa0f93fa6de6e589d7a6f9bdfb avahi-compat-libdns_sd-devel-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 364fe9df30b351292f614404629e86e7ed5a4a184a45450e8f300bfdcae93665 avahi-devel-0.8-12.el9_2.1.tuxcare.els6.i686.rpm 7eab15a5acb99bc4ecb81d7474af63a39602fab9728b854da32c7fb505b34152 avahi-devel-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm f6980f240c6af95a9fa8b48be352ea6fe2b78e0c8a7ab686a6b23d8b96f1586f avahi-dnsconfd-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 1d5d5e845b030fce76fc379c44bd82b27f1aa302176868b82751fbbd48001b54 avahi-glib-0.8-12.el9_2.1.tuxcare.els6.i686.rpm b38b879498d39e19a4a105d75132f2c7508c0ebcfec0ab33dd40339fa3a96944 avahi-glib-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 826fd9c851abcd66a55abef8ceaa522d0181038a20875bdecdbe6b21c455f3a9 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els6.i686.rpm e662a3c72381cbafc5f8f9664bb56dcef256103e8205ddf46ef5bf17ced958e4 avahi-glib-devel-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm a5d8e4a0a14d75d3c4157f0d91ba7bd9661c68c4e01cc3534df642fff287c366 avahi-gobject-0.8-12.el9_2.1.tuxcare.els6.i686.rpm e8690701bcddcfa9e6d76b5443d7fad5611c68153831227beea3c42141c22224 avahi-gobject-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 402299e5a58379e3e1b6336350681586b8298f15d8abd88eee12582ed13f76f3 avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els6.i686.rpm f85314ce16418daef499f2c83950d4701e1ebc955d8ad3b5cb60612b691367f0 avahi-gobject-devel-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 5d89742e5a48d4ef25050b576e030b8ea448329501f1314cc2b6257ebd7da48c avahi-libs-0.8-12.el9_2.1.tuxcare.els6.i686.rpm 4f00f3d83d7a7343fb4251730efbe6932a995d4be9bdc47bf7bf424bc0db9315 avahi-libs-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 85fdb6e40890976002e34281701f36168ee2ca3eeabc207f53dff206d24be4dc avahi-tools-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm eb725545b16b5367cd354c1e2931a06f70e065a2091afa4aadc173f8e6b4a09f avahi-ui-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 6257d5c1d4935973118b847b445c9741e54a98a5674e6d5482390cd27439d09d avahi-ui-devel-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 7e042be186f59775b9d92fd63989079bbee61acc529898e83d99fa1ee4779b24 avahi-ui-gtk3-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm e65e6ee0deeda39df5f9274077fa8f07f272d29c186784d3bfbf5bc7f343c1b1 avahi-ui-tools-0.8-12.el9_2.1.tuxcare.els6.x86_64.rpm 04cbafd07ea8f57754d809277598821d40bde2367d82696c4c9b7a00a7ea602d CLSA-2026:1786433114 TuxCare License Agreement 0 - CVE-2021-26291: block external HTTP repositories by default (MNG-7116, MNG-7117, MNG-7118, MNG-7128) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-26291: block external HTTP repositories by default (MNG-7116, MNG-7117, MNG-7118, MNG-7128)

0 tuxcare-almalinux9.2-esu maven-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm 3f181adb7da6fc71fd6994de747d20fd32cf68977f573dcdf0b8749632341583 maven-javadoc-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm 79b021dfd2748fb5d1cb006e2b15d23d77b7ac495b8034ee95f4b99c55527943 maven-lib-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm 611043791345d6944148812fd517b3a5bb263b6fb8121bfbe35ec1d86433a3e2 maven-openjdk11-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm 486f42172c18ec14baec0ff40db1a9b51c0c047f7b037c7b885238aa4388157a maven-openjdk17-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm 2dd1506ac2afe94f4aaf7bcacff293578c53fcb255cb18dfd86b2d8325015b35 maven-openjdk8-3.6.3-15.el9_2.tuxcare.els1.noarch.rpm 79467bf51aa2fbdc426aa0cd3870985e218df0fd09fba26c83b6fe3e1e38b209 CLSA-2026:1786350974 TuxCare License Agreement 0 - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available {CVE-2026-64561} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807} - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035} - thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146} - drm/gud: Fix UBSAN warning {CVE-2022-50628} - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740} - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests {CVE-2023-54108} - fs: udf: fix OOB read in lengthAllocDescs handling {CVE-2025-40044} - tipc: Fix use-after-free in tipc_mon_reinit_self(). {CVE-2025-40280} - isofs: Fix out of bound access for corrupted isofs image {CVE-2021-47478} - pppoe: drop PFC frames {CVE-2026-53003} - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free {CVE-2026-46304} - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466} - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997} - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions {CVE-2022-49716} - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006} - can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625} - cxl/mem: Fix shutdown order {CVE-2023-52849} - pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030} - usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758} - RDMA/siw: Fix potential NULL pointer dereference in header processing {CVE-2026-23242} - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls {CVE-2026-53350} - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb {CVE-2026-53088} - HID: multitouch: Check to ensure report responses match the request {CVE-2026-43047} - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23058} - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle {CVE-2023-53250} - usb: storage: Fix memory leak in USB bulk transport {CVE-2025-68288} - wifi: rtw88: check for PCI upstream bridge existence {CVE-2026-46092} - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed {CVE-2026-31697} - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() {CVE-2022-48650} - HID: apple: avoid memory leak in apple_report_fixup() {CVE-2026-31520} - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() {CVE-2026-31522} - scsi: qla2xxx: Avoid fcport pointer dereference {CVE-2023-53603} - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() {CVE-2026-46178} - scsi: mpi3mr: Add NULL checks when resetting request and reply queues {CVE-2026-43473} - HID: roccat: fix use-after-free in roccat_report_event {CVE-2026-43111} - tap: free page on error paths in tap_get_user_xdp() {CVE-2026-46320} - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode {CVE-2026-43180} - usb: xhci: Fix memory leak in xhci_disable_slot() {CVE-2026-43432} - PCI: Fix reset_method_store() memory leak {CVE-2024-56745} - rbd: fix null-ptr-deref when device_add_disk() fails {CVE-2026-46079} - net: stmmac: fix integer underflow in chain mode {CVE-2026-31649} - be2net: pass wrb_params in case of OS2BMC {CVE-2025-40264} - thunderbolt: Validate XDomain request packet size before type cast {CVE-2026-53147} - Input: uinput - fix circular locking dependency with ff-core {CVE-2026-31667} - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency {CVE-2023-52855} - nbd: defer config put in recv_work {CVE-2025-68372} - net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064} - serial: imx: fix tx statemachine deadlock {CVE-2023-52456} - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() {CVE-2024-47734} - dm-thin: fix metadata refcount underflow {CVE-2026-46107} - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown {CVE-2026-23454} - usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916} - md/raid5: validate payload size before accessing journal metadata {CVE-2026-46070} - wifi: rtw89: fix potential race condition between napi_init and napi_enable {CVE-2023-53452} - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl {CVE-2021-47634} - ubi: ubi_create_volume: Fix use-after-free when volume creation failed {CVE-2022-49388} - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false {CVE-2026-31469} - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275} - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used {CVE-2025-38113} - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() {CVE-2025-40211} - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() {CVE-2026-45982} - libceph: define and enforce CEPH_MAX_KEY_LEN {CVE-2026-43304} - ACPI: pfr_update: Fix the driver update version check {CVE-2025-39701} - spi: imx: fix use-after-free on unbind {CVE-2026-45996} - Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253} - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access {CVE-2026-46094} - xdp: produce a warning when calculated tailroom is negative {CVE-2026-23343} - vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check {CVE-2023-53543} - iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406} - topology: Keep the cpumask unchanged when printing cpumap {CVE-2024-57917} - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers {CVE-2026-43059} - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early {CVE-2025-39861} - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' {CVE-2025-38593} - mm/damon/sysfs: fix use-after-free in state_show() {CVE-2025-39877} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation {CVE-2026-43133} - Bluetooth: SMP: force responder MITM requirements before building the pairing response {CVE-2026-43334} - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860} - scsi: megaraid_sas: Fix invalid node index {CVE-2025-38239} - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file {CVE-2024-42138} - kdb: Fix buffer overflow during tab-complete {CVE-2024-39480} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() {CVE-2026-43233} - bpf: Fix stack-out-of-bounds write in devmap {CVE-2026-23359} - mm/debug_vm_pgtable: clear page table entries at destroy_args() {CVE-2025-39776} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry {CVE-2026-43114} - gve: Account for stopped queues when reading NIC stats {CVE-2024-42162} - gve: Fix stats report corruption on queue count change {CVE-2026-23262} - amba: use generic driver_override infrastructure - Drivers: hv: vmbus: use generic driver_override infrastructure - vdpa: use generic driver_override infrastructure {CVE-2026-53118} - PCI: use generic driver_override infrastructure {CVE-2026-53120} - spi: use generic driver_override infrastructure {CVE-2026-31487} - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} - driver core: generalize driver_override in struct device {CVE-2026-31688} - arm64: topology: fix possible overflow in amu_fie_setup() {CVE-2022-48657} - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing {CVE-2025-68185} - NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324} - rxrpc: Fix key reference count leak from call->key {CVE-2026-31639} - rxrpc: Only put the call ref if one was acquired {CVE-2026-31638} - bpf: Set run context for rawtp test_run callback {CVE-2024-40908} - ethtool: Fix uninitialized number of lanes {CVE-2023-53798} - xsk: fix refcount underflow in error path {CVE-2023-53698} - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs {CVE-2026-23340} - net: fix fanout UAF in packet_release() via NETDEV_UP race {CVE-2026-31504} - net: avoid race between device unregistration and ethnl ops {CVE-2025-21701} - net: sched: Disallow replacing of child qdisc from one parent to another {CVE-2025-21700} - libceph: Fix potential out-of-bounds access in osdmap_decode() {CVE-2026-52958} - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() {CVE-2026-46024} - libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954} - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined {CVE-2025-71224} - wifi: mac80211: prohibit deactivating all links {CVE-2024-58061} - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() {CVE-2025-21937} - Bluetooth: SMP: derive legacy responder STK authentication from MITM state {CVE-2026-31773} - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() {CVE-2025-21936} - Bluetooth: fix memory leak in error path of hci_alloc_dev() {CVE-2026-53252} - netfilter: nf_tables: unconditionally flush pending work before notifier {CVE-2024-42109} - netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm {CVE-2025-39894} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case {CVE-2026-23456} - iavf: Fix out-of-bounds when setting channels on remove {CVE-2023-53659} - ipv6: prevent possible UaF in addrconf_permanent_addr() {CVE-2026-43339} - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet {CVE-2026-53112} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available {CVE-2026-64561} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807} - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035} - thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146} - drm/gud: Fix UBSAN warning {CVE-2022-50628} - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740} - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests {CVE-2023-54108} - fs: udf: fix OOB read in lengthAllocDescs handling {CVE-2025-40044} - tipc: Fix use-after-free in tipc_mon_reinit_self(). {CVE-2025-40280} - isofs: Fix out of bound access for corrupted isofs image {CVE-2021-47478} - pppoe: drop PFC frames {CVE-2026-53003} - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free {CVE-2026-46304} - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466} - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997} - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions {CVE-2022-49716} - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006} - can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625} - cxl/mem: Fix shutdown order {CVE-2023-52849} - pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030} - usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758} - RDMA/siw: Fix potential NULL pointer dereference in header processing {CVE-2026-23242} - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls {CVE-2026-53350} - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb {CVE-2026-53088} - HID: multitouch: Check to ensure report responses match the request {CVE-2026-43047} - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23058} - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle {CVE-2023-53250} - usb: storage: Fix memory leak in USB bulk transport {CVE-2025-68288} - wifi: rtw88: check for PCI upstream bridge existence {CVE-2026-46092} - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed {CVE-2026-31697} - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() {CVE-2022-48650} - HID: apple: avoid memory leak in apple_report_fixup() {CVE-2026-31520} - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() {CVE-2026-31522} - scsi: qla2xxx: Avoid fcport pointer dereference {CVE-2023-53603} - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() {CVE-2026-46178} - scsi: mpi3mr: Add NULL checks when resetting request and reply queues {CVE-2026-43473} - HID: roccat: fix use-after-free in roccat_report_event {CVE-2026-43111} - tap: free page on error paths in tap_get_user_xdp() {CVE-2026-46320} - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode {CVE-2026-43180} - usb: xhci: Fix memory leak in xhci_disable_slot() {CVE-2026-43432} - PCI: Fix reset_method_store() memory leak {CVE-2024-56745} - rbd: fix null-ptr-deref when device_add_disk() fails {CVE-2026-46079} - net: stmmac: fix integer underflow in chain mode {CVE-2026-31649} - be2net: pass wrb_params in case of OS2BMC {CVE-2025-40264} - thunderbolt: Validate XDomain request packet size before type cast {CVE-2026-53147} - Input: uinput - fix circular locking dependency with ff-core {CVE-2026-31667} - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency {CVE-2023-52855} - nbd: defer config put in recv_work {CVE-2025-68372} - net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064} - serial: imx: fix tx statemachine deadlock {CVE-2023-52456} - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() {CVE-2024-47734} - dm-thin: fix metadata refcount underflow {CVE-2026-46107} - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown {CVE-2026-23454} - usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916} - md/raid5: validate payload size before accessing journal metadata {CVE-2026-46070} - wifi: rtw89: fix potential race condition between napi_init and napi_enable {CVE-2023-53452} - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl {CVE-2021-47634} - ubi: ubi_create_volume: Fix use-after-free when volume creation failed {CVE-2022-49388} - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false {CVE-2026-31469} - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275} - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used {CVE-2025-38113} - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() {CVE-2025-40211} - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() {CVE-2026-45982} - libceph: define and enforce CEPH_MAX_KEY_LEN {CVE-2026-43304} - ACPI: pfr_update: Fix the driver update version check {CVE-2025-39701} - spi: imx: fix use-after-free on unbind {CVE-2026-45996} - Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253} - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access {CVE-2026-46094} - xdp: produce a warning when calculated tailroom is negative {CVE-2026-23343} - vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check {CVE-2023-53543} - iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406} - topology: Keep the cpumask unchanged when printing cpumap {CVE-2024-57917} - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers {CVE-2026-43059} - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early {CVE-2025-39861} - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' {CVE-2025-38593} - mm/damon/sysfs: fix use-after-free in state_show() {CVE-2025-39877} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation {CVE-2026-43133} - Bluetooth: SMP: force responder MITM requirements before building the pairing response {CVE-2026-43334} - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860} - scsi: megaraid_sas: Fix invalid node index {CVE-2025-38239} - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file {CVE-2024-42138} - kdb: Fix buffer overflow during tab-complete {CVE-2024-39480} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() {CVE-2026-43233} - bpf: Fix stack-out-of-bounds write in devmap {CVE-2026-23359} - mm/debug_vm_pgtable: clear page table entries at destroy_args() {CVE-2025-39776} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry {CVE-2026-43114} - gve: Account for stopped queues when reading NIC stats {CVE-2024-42162} - gve: Fix stats report corruption on queue count change {CVE-2026-23262} - amba: use generic driver_override infrastructure - Drivers: hv: vmbus: use generic driver_override infrastructure - vdpa: use generic driver_override infrastructure {CVE-2026-53118} - PCI: use generic driver_override infrastructure {CVE-2026-53120} - spi: use generic driver_override infrastructure {CVE-2026-31487} - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} - driver core: generalize driver_override in struct device {CVE-2026-31688} - arm64: topology: fix possible overflow in amu_fie_setup() {CVE-2022-48657} - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing {CVE-2025-68185} - NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324} - rxrpc: Fix key reference count leak from call->key {CVE-2026-31639} - rxrpc: Only put the call ref if one was acquired {CVE-2026-31638} - bpf: Set run context for rawtp test_run callback {CVE-2024-40908} - ethtool: Fix uninitialized number of lanes {CVE-2023-53798} - xsk: fix refcount underflow in error path {CVE-2023-53698} - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs {CVE-2026-23340} - net: fix fanout UAF in packet_release() via NETDEV_UP race {CVE-2026-31504} - net: avoid race between device unregistration and ethnl ops {CVE-2025-21701} - net: sched: Disallow replacing of child qdisc from one parent to another {CVE-2025-21700} - libceph: Fix potential out-of-bounds access in osdmap_decode() {CVE-2026-52958} - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() {CVE-2026-46024} - libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954} - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined {CVE-2025-71224} - wifi: mac80211: prohibit deactivating all links {CVE-2024-58061} - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() {CVE-2025-21937} - Bluetooth: SMP: derive legacy responder STK authentication from MITM state {CVE-2026-31773} - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() {CVE-2025-21936} - Bluetooth: fix memory leak in error path of hci_alloc_dev() {CVE-2026-53252} - netfilter: nf_tables: unconditionally flush pending work before notifier {CVE-2024-42109} - netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm {CVE-2025-39894} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case {CVE-2026-23456} - iavf: Fix out-of-bounds when setting channels on remove {CVE-2023-53659} - ipv6: prevent possible UaF in addrconf_permanent_addr() {CVE-2026-43339} - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet {CVE-2026-53112}

0 tuxcare-almalinux9.2-esu bpftool-7.0.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 9886b37ff04776a55ef847176c1779d2927b0dfc79e9885b24cf5aae1f0e5d14 kernel-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm c8217ebf7360c29827dcef9976b49c5f71267ac2c8843196c4d4e68f92f0a149 kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.11.els10.noarch.rpm c4968c893bd0d6954cfb19d3e970acddfc43fa29c0d308750c664a4cc8051810 kernel-core-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 7d74bda50d0df52ead491806407260ca620da0c16457c8f6f4ed7f9a9207be63 kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 18fa0b2dc7f82e45eeed97e22e7cb984655d2490b0423345e6cbce2454f6c9e5 kernel-debug-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm d691850ea9adfd3f8fc161937c91fa132fe3d651bf01375dcfed4a10ce685dc7 kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 90c2c226589f4ef305dbc83b60502686a1e5bb3c1115852404f1419791308ecf kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 1293903634ddbc333df548b23750f1df4fc1492877ac13fd8fe3dfadd7b52a10 kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 0ecab48da7ac79e4ef65511901fb685d8239e96883a5b1527b3eb8ba72afc571 kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 92ed8697f4754680385aafc447dd398919453dfcb99cf1da9245562b3feaf40d kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm fb895f970a7a1fd99ceaf25ec7b3b67478422f8cb994044ebcbaff77ad026bb5 kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 746e3cb43b0380c619f158cd8ca0230ecdc6bd594b425e88bea5ea366411fae7 kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm d2330a45a5429e74e77db2d7f1312cf79dedfbe8372d536625bf0100b890ce30 kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 63d648ac42d0be44ad65d7f05af5f78c251b9425a819dcb3808ac8109980182a kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 32a832f864baf41a934754bad24da898f4bb0c166ce2661bcbb2587b80e9df02 kernel-devel-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 7700e15088a9617546098c0fc86578cc129987d1a58293304652f6f85c86e78e kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 12ce0d91450a4a68cf34b62bace44a565b40734f363688f66b0973a7561940d9 kernel-doc-5.14.0-284.1101.el9_2.tuxcare.11.els10.noarch.rpm f48fdacb44966469cda843d06032846b6ad8e8327be984e0576935a6da5db4e1 kernel-headers-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 5d42ac22f2c4bf4a54015a22312bcb52ced5362ee3dd8b62c3625a97bb4299aa kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm f9b3ce3b1d390cf1df590185c5b43873db6fdf8d5b5f62436405975d9ae3fb74 kernel-modules-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 65afe95b3e694981a3ec02fdb5d52723dad998e4ba34b651a36eec1f7cab0ae2 kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm a04cc0ea9e02b1a15169acb8b83a5c86724489eda1c52d6018a42f860c814490 kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm e33804bb17c128b93144d046509944f665a895f9a75ee0510c34137aa2ca6908 kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 7cc3c08ac7100d70bd3a2b4e79661ac3b1bf4b7c4aa65496ca6d2d4ced4dd8a3 kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm b50d70cff60857948be5e3cfaf478d20564ac35876831105213c1d74ddd8fb57 kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 4d0f7709f06b9751e95f924d3117778673224204ea4974e97d5677992176b994 kernel-tools-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm fa6f351352cb22bdaf301b9d7716b284263b2bf2daf5f8e4dea14ad5e4fbc5fd kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 0cf3263ea860fa7034b0a2993fa72ab6ba0f05294ec5c49102e684cb130d803b kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm 028429607f4b7849234502821ef72b1147defafdb21a5ab4348262d001af7dd0 kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm f0c8d334d3d7e9452fcbd3f24250a4225a53df3b7443433c22d491487aed550f libbpf-1.0.0-2.el9_2.tuxcare.11.els10.i686.rpm 89d213ba101c13b57adb661e6209a74579c749799866f3b99b0ddfb45e3877ae libbpf-1.0.0-2.el9_2.tuxcare.11.els10.x86_64.rpm 55bf7fd8667dc4385c3d6648cf2c8b51846a4f83e638684ae4139c6c3ec64f9b libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els10.i686.rpm e387dede45c5977c0f2a5619e46aacce831c0cdb74a65175c086b900031c0609 libbpf-devel-1.0.0-2.el9_2.tuxcare.11.els10.x86_64.rpm 241d676d72b4af2ea593b5cc7096a31340fc3718fbe97e89ad2b4ff0e99132ef libbpf-static-1.0.0-2.el9_2.tuxcare.11.els10.i686.rpm a087822bb823c6ac8e3d8c11ecfae81944a4b6db070e839cc1569a82a9780db0 libbpf-static-1.0.0-2.el9_2.tuxcare.11.els10.x86_64.rpm 072a2200c3adbaf28aadd2c21ec2aec9143c3d08e57ca9574a861d7e79d032fa perf-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm c04b71f3f668c3df4b03cd87efb66553f85897bd09926a5d6824d532173532d5 python3-perf-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm a5c086399f157dba2460a88644d5df441d6f9ab1f914b3d92ec092967630515d rtla-5.14.0-284.1101.el9_2.tuxcare.11.els10.x86_64.rpm b25d00f65aee9d03703f271c1cc93cb015351673ed586efa197cebeff7718a49 CLSA-2026:1786446507 TuxCare License Agreement 0 - CVE-2026-59843: reject a peer-supplied maximum packet size of zero to prevent infinite loops in channel writes - CVE-2026-59848: track outstanding SFTP request IDs and reject responses with unknown IDs to prevent unbounded client memory growth - CVE-2026-59845: handle ProxyCommand fork failures before storing the PID to prevent cleanup from signaling unrelated processes Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59843: reject a peer-supplied maximum packet size of zero to prevent infinite loops in channel writes - CVE-2026-59848: track outstanding SFTP request IDs and reject responses with unknown IDs to prevent unbounded client memory growth - CVE-2026-59845: handle ProxyCommand fork failures before storing the PID to prevent cleanup from signaling unrelated processes

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9_2.tuxcare.els14.i686.rpm 6f69643548975f830185c5b25bf5cc78dc678324367e046b7d5f53e68c578fe9 libssh-0.10.4-8.el9_2.tuxcare.els14.x86_64.rpm 36af9d3e1411cab87ed6c7cb1a910dd9cbbb10a64a80878dd64b8cf52e3c2c62 libssh-config-0.10.4-8.el9_2.tuxcare.els14.noarch.rpm 45402cbae217e66dc359f74206628aeff2f96c02e4992a4f609e3f283f32e2b1 libssh-devel-0.10.4-8.el9_2.tuxcare.els14.i686.rpm 2053ea11e4907d2eb74a61ef5f477a74faa3bc84f60638315409b018c31a4dbb libssh-devel-0.10.4-8.el9_2.tuxcare.els14.x86_64.rpm f8a5e33daaa9b682ce862138537e157efd655c00add945a57e50169527770c6d CLSA-2026:1786447733 TuxCare License Agreement 0 - CVE-2026-58459: prevent command injection in gpsprof gnuplot output Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58459: prevent command injection in gpsprof gnuplot output

0 tuxcare-almalinux9.2-esu gpsd-minimal-3.25-1.el9.3.tuxcare.els2.x86_64.rpm 7622db6fc689e9daf8ffd7a92f7c92fa6b34188ffd523dd9a638046ce502ec82 gpsd-minimal-clients-3.25-1.el9.3.tuxcare.els2.x86_64.rpm 6735773536bf7d757a1631f130c902e726ebf40bdcaef359c47f9dcd4eae280f CLSA-2026:1777645704 TuxCare License Agreement 0 - Update to jdk-17.0.19+10 (RHSA-2026:9686) - Set fipsver to 62c0f885e30 - CVE-2026-22016: fix JAXP component vulnerability allowing unauthenticated remote attackers to gain unauthorized access to sensitive data in Java SE - CVE-2026-34282: fix Hotspot component vulnerability allowing unauthorized update, insert or delete access to Java SE accessible data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to jdk-17.0.19+10 (RHSA-2026:9686) - Set fipsver to 62c0f885e30 - CVE-2026-22016: fix JAXP component vulnerability allowing unauthenticated remote attackers to gain unauthorized access to sensitive data in Java SE - CVE-2026-34282: fix Hotspot component vulnerability allowing unauthorized update, insert or delete access to Java SE accessible data

0 tuxcare-almalinux9.2-esu java-17-openjdk-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 569ef3c62c384b2576ba028ee158eda45cf223febc91e103d47bf383ec0dbfdc java-17-openjdk-demo-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 8696ee07735eca427138310f8da3ad5014f11c9b0519e1e240e0ebf345970b57 java-17-openjdk-demo-fastdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 002f2985bea1e6517425944eae33501700727631c92423f19e59bd8f20626891 java-17-openjdk-demo-slowdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm db5e051e1218fda65ebe2e24f0b965c321f7d1aa6c5d031b7d2f3f252d1d8b19 java-17-openjdk-devel-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 10a22857d34463203cd276c624f2f54e4e833a2c41d9b3398cdbb412f12fb228 java-17-openjdk-devel-fastdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 9f3959280d32bea2e3f8cbbc966e70d7c7da904344fc103bc26ab440b059ab94 java-17-openjdk-devel-slowdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm d8c43fd3993fd86849e62323d2b23327a7a141dddd2babeac4accde61950b507 java-17-openjdk-fastdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 6340fc02733aeacaf101a6c86cd282f5b01c52388016ac009fe59afd83e0cbe5 java-17-openjdk-headless-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm d2a5a41b796ce90c24985e409a0ac4a97392211b8ee46fc728b18f865f5c6433 java-17-openjdk-headless-fastdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm d1ccffef6f05dc94e93b207c3cf0b7ce645b2730d7fdd656de9f6f9e69d6e3fd java-17-openjdk-headless-slowdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 8a58c06a9e8df8238add47f7f6956d4099ba9265c110303e7e6d7c90d417e0fa java-17-openjdk-javadoc-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm b7b19af51734efa384fd370f81583999acc3da0354a766d128d6e2dfeb4195b9 java-17-openjdk-javadoc-zip-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 33ba6c99e7399d2697ff83f1316a64bff3b64b147c3d3860e4f109f5904abcb6 java-17-openjdk-jmods-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 5cbb98a42effc470732d5a9cbd538588575480339c40c6ba7be0f52411dd8713 java-17-openjdk-jmods-fastdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm a09e887da358ac3006471540f9611044b442fe2d8d4c6d73e5b5c869c243e231 java-17-openjdk-jmods-slowdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm d0b81cd1dea22695747d099676af405974173437c114902b1e7bed0147a0172c java-17-openjdk-slowdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 2dda06c05a7b75ac781cfb5e0409fcc2437d355468d51b58d736f768943df978 java-17-openjdk-src-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 3e3a145db9ea3bcbfa302dcb1604da3c12f5cf6be232a439964704eb7e859a6e java-17-openjdk-src-fastdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm e77537f0565f6afaba53f19b51ef8679623b8ed59dcf0c00270f5a2ae0159f47 java-17-openjdk-src-slowdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm 4d371c68a0a01b8323c0af5dad05732c9234a5636528c3f3dd8cffde6d65064f java-17-openjdk-static-libs-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm aabc8758ac93efcb9aa8e09b4114da609cadc6720a87c53422597e73dda31848 java-17-openjdk-static-libs-fastdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm e3c9ef98ca1b122d96e12ccb62199bf36087304a306706082f9cc21519ecec11 java-17-openjdk-static-libs-slowdebug-17.0.19.0.10-1.el9.tuxcare.els1.x86_64.rpm d379cb94f2358d8d3be608bf1e3a6e0f45b638b87afb6bf69e539696d4c98f2f CLSA-2026:1786468462 TuxCare License Agreement 0 - CVE-2026-59890: normalize Unicode form (NFC) on both the MANIFEST.in pattern and the candidate path before matching, so an exclude directive cannot be bypassed by a decomposed (NFD) file name Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59890: normalize Unicode form (NFC) on both the MANIFEST.in pattern and the candidate path before matching, so an exclude directive cannot be bypassed by a decomposed (NFD) file name

0 tuxcare-almalinux9.2-esu python3-setuptools-53.0.0-12.el9.tuxcare.els2.noarch.rpm 3bc9dfe514c1e050218e219f7ef9ee35d456ac88bffaa3734e9499006b9f468a python3-setuptools-wheel-53.0.0-12.el9.tuxcare.els2.noarch.rpm 6510084a28f5d8ad51cd946f08894c242de366817f40720dbb90d5e4b1d3015d CLSA-2026:1786469793 TuxCare License Agreement 0 - CVE-2026-3494: replace the server_audit plugin's hand-rolled SQL parser with thd_sql_command(); emit MYSQL_AUDIT_GENERAL_STATUS inside Prepared_statement::execute; update thd->update_server_status guard in sp_instr_stmt::execute to include audit-enabled path - CVE-2026-44171: reject unsafe absolute, leading-dot, and parent-traversal paths during mbstream archive extraction Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3494: replace the server_audit plugin's hand-rolled SQL parser with thd_sql_command(); emit MYSQL_AUDIT_GENERAL_STATUS inside Prepared_statement::execute; update thd->update_server_status guard in sp_instr_stmt::execute to include audit-enabled path - CVE-2026-44171: reject unsafe absolute, leading-dot, and parent-traversal paths during mbstream archive extraction

0 tuxcare-almalinux9.2-esu mariadb-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm af312691a8bd7215ff4e9fc2557b8537c2f65cc516c1b64fe8bc63bc16d07ce6 mariadb-backup-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm fecc87f40917adb4421f304eb80cad8a8d5a60abbfca191f2da54f8d1161cc4c mariadb-common-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm dc11285a05844520a75dff325f537b858e741d754964e444f9b41ae2ff9c261c mariadb-devel-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm ded5edc8b46f4a74f5054c59b2bc2cc138a83f8d1c6df5170597a2d12ecafb63 mariadb-embedded-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm 315498c322924847aca648ee2fff456e79c9338dbb263a9d3e7b46625fe7b2e5 mariadb-embedded-devel-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm 36ceb1aba4b081eb3cf79c3be80bc9b70a7d18402ea01c570ec5a54b59d37660 mariadb-errmsg-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm b82d14d6ca565028f972a86562dc5fa0c50776cc2480e51ee745593bd47cb5f2 mariadb-gssapi-server-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm 9cb68add9e2ad15a162a836f7aa32d4b57c583ce1ba4e0dde00951a9661539de mariadb-oqgraph-engine-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm ad8f42ed1af423afd894eb9c51fd07e212c0384168128d0ba03abe40d4ade5b2 mariadb-pam-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm 9c1548a48dc799e022a8cb1bfdb2cac778615d158c1871c20e14343108b774cd mariadb-server-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm 3bd099bcb716488285543de8c49201286975340909f1040fcc06dc45f91cbc4f mariadb-server-galera-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm 28e6ecc4be9f82d7035e1f1d344684de0c9c80765639cbc79ca61ec91a8a43e8 mariadb-server-utils-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm ff6a55b7a1e2b6dee3c909c65dbc6b7892a14533398823ba1f5f3c4ba5c77332 mariadb-test-10.5.29-1.el9_2.alma.1.tuxcare.els4.x86_64.rpm 2ca8de2f1a3f98eb320be997c188f64b3e562028550842d409b3ad8163b3e349 CLSA-2026:1786470878 TuxCare License Agreement 0 - CVE-2026-7260: fix phar circular symlink crash by replacing recursive phar_get_link_source() with an iterative Floyd cycle-detection walk in ext/phar/util.c (GHSA-vc5h-9ppw-p5f3); add regression test ext/phar/tests/tar/ghsa-vc5h-9ppw-p5f3-symlink-circular.phpt Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7260: fix phar circular symlink crash by replacing recursive phar_get_link_source() with an iterative Floyd cycle-detection walk in ext/phar/util.c (GHSA-vc5h-9ppw-p5f3); add regression test ext/phar/tests/tar/ghsa-vc5h-9ppw-p5f3-symlink-circular.phpt

0 tuxcare-almalinux9.2-esu php-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 6af78e4faeca398f0136ec24f11ff6d62888e4cc6ab04f60260ca061994fe66d php-bcmath-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 3f6624f65b811441bfc97c99538166918b529dbf1456b2d1255905f894756cb6 php-cli-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 9506bad00d445f97b8313ec96010fac054fe62c2b4b8219200cdf87e8bdcd083 php-common-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 8104458ff7a311e3801a41d53b1a967821b3ecdfe51e0126f8ada24752abf2c3 php-dba-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm fdd7849047f36f0bb62cf32375d31c79c71fef807113c07d5e514da7d52c8e77 php-dbg-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 5095e155e57dd63f2bc520498db5f5a50fcbf32a5cc6d8858e91d8510896e7de php-devel-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm b4b816f8bed2d3de72ff1dcb60028c6299250cb4728237ad158d3d8ad014022e php-embedded-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm d37c655125c327db531cb4e6834c6266c21332a32efa8f2abadc07c98772b2da php-enchant-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm b813d7a2e1f5badd78f48c851c48a1b6e9bf72ddc308fa1ef0f9edbd867405ff php-ffi-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 98ea0a3b7cb663d37e7cac514153641efa78229dfc8955af09a9dc05bc57cad3 php-fpm-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 12ddff881546e3ad775a239b193de65301f5f9f381653377acc415f85670fe48 php-gd-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm ac30a9eb144172eeba0f0abd5e87f41be525e0c27a7092969d9775bf63b527f1 php-gmp-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm f22c787479f00eeb92843d053e32b4523c48ef9355173f703c071121375f6f67 php-intl-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 50d9d537edfab81c1541fb34112cda1b66e5068d9c277af8539367baf3c930e8 php-ldap-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 84384949de3a6edf9acc9ee11c1b503e4300e0807442189a54c0ce43838225a7 php-mbstring-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm bc620a8b3872bb61878c9b5cd8054969a129f53a16c6f75f7959b5adf0b560c5 php-mysqlnd-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 3969be1457118c301ea746a6210e856362ad7cc0a21308986bdfa8a1fcf8bd12 php-odbc-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 9bd033a9c326ed7afa0f4755f917d0aa1165990d6e331b5aff610cbbdf5857ab php-opcache-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm e4c90a74640c050df7427a3ad7c560deeb046405dff52061f338b81d0dfbe3f5 php-pdo-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 91ea442aab74253b4d27432597d052a1b06ba75920660232d3fff9be34cbe4c9 php-pgsql-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm c2c75bb7cb8e2f5b694a62daa870ad7b40fe2b5fe3a407976df20505a3580c95 php-process-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 76672117f27d9061f66314a84ffb6fb320c828f451191a487a299980b644ce3f php-snmp-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm c3f78593c7bd13eaacdfdd77ec13446345c58f18f6465612f8fdc7bf5459d479 php-soap-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 530eb9c49b38ae864d5817186506b6c9737da7c7cfa01a3ac82049f74ab9f447 php-xml-8.0.30-1.el9_2.tuxcare.els16.x86_64.rpm 26433d5a9f8a0b6b17d63980333adde2af1e254201475fc8bfb4e9cb56bc0ca3 CLSA-2026:1786479348 TuxCare License Agreement 0 - Add wireshark-0019-epan-add-simple-recursion-checks.patch: backport the increment/decrement_dissection_depth() API, a prerequisite for the recursion-depth fixes below (3.4.10 has no such API) - CVE-2023-1994: GQUIC dissector: fix a NULL pointer dereference - CVE-2024-4853: editcap: do not memmove more than the allocated buffer holds - CVE-2024-4855: editcap, libwiretap: do not use the array of initial decryption secrets after it has been freed - CVE-2026-15164: ciscodump: do not try to write more than PACKET_MAX_SIZE - CVE-2026-15167: DBS Etherwatch reader: keep buffer slack for an extra byte - CVE-2023-1993: LISP dissector: do not read past the LCAF payload length - CVE-2026-6867: SMB2 dissector: put bounds on total chained compression - CVE-2026-15172: FMP/NOTIFY dissector: stop precomputing the HandleList length - CVE-2026-15174: catapult-dct2000 dissector: cap the E-DCH no_ddi_entries count at MAX_EDCH_DDIS - CVE-2026-5407: SMB2 dissector: check for offset overflow in two more places - CVE-2026-6534: USB HID dissector: skip items with a report size of zero - CVE-2026-6522: RPKI-RTR dissector: check for overflow in the unknown PDU type case - CVE-2026-5404: K12 reader: fix a possible stack overflow when writing - CVE-2026-6529: iLBC codec plugin: report the proper decoded length in the multiframe case - CVE-2026-6530: DCP-ETSI dissector: reject a Reed-Solomon reassembly whose total size is not fcount * plen - CVE-2026-6870: GSM RP dissector: stop using a global for reassembly state - CVE-2026-6869: WebSocket dissector: put bounds on zlib decompression - CVE-2026-6521: OpenFlow v5 dissector: bound the OXM, action and match walks so a crafted message cannot drive an infinite loop - CVE-2026-6526: HTTP dissector: check the strstr() results before dereferencing them - CVE-2026-6532: kismet dissector: fix a heap buffer overflow - CVE-2026-5401: AFP Spotlight dissector: add recursion checks - CVE-2026-5406: fcswils dissector: add recursion checks - CVE-2026-5408: BT DHT dissector: add recursion checks - CVE-2026-6538: BEEP dissector: prevent overflow and add recursion checks - CVE-2026-6527: asn2wrs and the generated ASN.1 dissectors: treat open types as potentially cyclic and add recursion checks - CVE-2026-6535: epan: fix potential overflows in zlib decompression Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add wireshark-0019-epan-add-simple-recursion-checks.patch: backport the increment/decrement_dissection_depth() API, a prerequisite for the recursion-depth fixes below (3.4.10 has no such API) - CVE-2023-1994: GQUIC dissector: fix a NULL pointer dereference - CVE-2024-4853: editcap: do not memmove more than the allocated buffer holds - CVE-2024-4855: editcap, libwiretap: do not use the array of initial decryption secrets after it has been freed - CVE-2026-15164: ciscodump: do not try to write more than PACKET_MAX_SIZE - CVE-2026-15167: DBS Etherwatch reader: keep buffer slack for an extra byte - CVE-2023-1993: LISP dissector: do not read past the LCAF payload length - CVE-2026-6867: SMB2 dissector: put bounds on total chained compression - CVE-2026-15172: FMP/NOTIFY dissector: stop precomputing the HandleList length - CVE-2026-15174: catapult-dct2000 dissector: cap the E-DCH no_ddi_entries count at MAX_EDCH_DDIS - CVE-2026-5407: SMB2 dissector: check for offset overflow in two more places - CVE-2026-6534: USB HID dissector: skip items with a report size of zero - CVE-2026-6522: RPKI-RTR dissector: check for overflow in the unknown PDU type case - CVE-2026-5404: K12 reader: fix a possible stack overflow when writing - CVE-2026-6529: iLBC codec plugin: report the proper decoded length in the multiframe case - CVE-2026-6530: DCP-ETSI dissector: reject a Reed-Solomon reassembly whose total size is not fcount * plen - CVE-2026-6870: GSM RP dissector: stop using a global for reassembly state - CVE-2026-6869: WebSocket dissector: put bounds on zlib decompression - CVE-2026-6521: OpenFlow v5 dissector: bound the OXM, action and match walks so a crafted message cannot drive an infinite loop - CVE-2026-6526: HTTP dissector: check the strstr() results before dereferencing them - CVE-2026-6532: kismet dissector: fix a heap buffer overflow - CVE-2026-5401: AFP Spotlight dissector: add recursion checks - CVE-2026-5406: fcswils dissector: add recursion checks - CVE-2026-5408: BT DHT dissector: add recursion checks - CVE-2026-6538: BEEP dissector: prevent overflow and add recursion checks - CVE-2026-6527: asn2wrs and the generated ASN.1 dissectors: treat open types as potentially cyclic and add recursion checks - CVE-2026-6535: epan: fix potential overflows in zlib decompression

0 tuxcare-almalinux9.2-esu wireshark-3.4.10-4.el9_2.tuxcare.els13.x86_64.rpm ec44482ea748405e3b584dd65394e252d7f91a1917ea38811424833adf0a0416 wireshark-cli-3.4.10-4.el9_2.tuxcare.els13.i686.rpm ebea8e8b706ca02a1af6f5fac530a0f4d7556b1ca60f36acbd01c398d34d0c4e wireshark-cli-3.4.10-4.el9_2.tuxcare.els13.x86_64.rpm 9971c681979271ae34800d445e40fc87b7f9e3387be9ddcd431798c5966b9820 wireshark-devel-3.4.10-4.el9_2.tuxcare.els13.i686.rpm 1b303f177fb376b9e9fb524561cae984557c2550d1aa1bd362b6075dbab831cf wireshark-devel-3.4.10-4.el9_2.tuxcare.els13.x86_64.rpm 5aed048836228d1c334c36bfa7051ce53af643588cb42e3ece4a517c492dc800 CLSA-2026:1786483996 TuxCare License Agreement 0 - CVE-2025-52194: fix undefined behavior on float samplerate cast in ircam_read_header by using psf_lrintf (upstream 7ff854d1) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-52194: fix undefined behavior on float samplerate cast in ircam_read_header by using psf_lrintf (upstream 7ff854d1)

0 tuxcare-almalinux9.2-esu libsndfile-1.0.31-7.el9_2.tuxcare.els4.i686.rpm 2a3e54f89d2084dc587899acb88d67d4ee8a2adff68a1b1c1a33b3446d2730f8 libsndfile-1.0.31-7.el9_2.tuxcare.els4.x86_64.rpm fe410842c127bd6123091939b8146d472eaa3192456e8522b944654b151c516d libsndfile-devel-1.0.31-7.el9_2.tuxcare.els4.i686.rpm 7e8fa25337ec39d61cfa9ee21cc94cc86ce9248e23fbc7641f083146c377190e libsndfile-devel-1.0.31-7.el9_2.tuxcare.els4.x86_64.rpm f19427c1a50f5cd7d45cfffe5a2bc9fffc0964a68be74a1f8c505be6aa5ae955 libsndfile-utils-1.0.31-7.el9_2.tuxcare.els4.x86_64.rpm 94678e9a8fcaf6362d87ef23acd01b32936f3729e5985f3617740324384d8adf CLSA-2026:1786486767 TuxCare License Agreement 0 - CVE-2026-34002: add bounds check in xkb CheckModifierMap() to prevent out-of-bounds read of the modifier map request data Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34002: add bounds check in xkb CheckModifierMap() to prevent out-of-bounds read of the modifier map request data

0 tuxcare-almalinux9.2-esu tigervnc-1.12.0-13.el9_2.tuxcare.els28.x86_64.rpm 0176aa2e4e667a1f5bef357e24d61f22a42b3cffcbb9fcfe129bc5ef71328ac5 tigervnc-icons-1.12.0-13.el9_2.tuxcare.els28.noarch.rpm 9f0b46a0667f6d6bbd9aa5cbd8160b25470251bc8364640127a35877c129cb43 tigervnc-license-1.12.0-13.el9_2.tuxcare.els28.noarch.rpm 7c9d41c1cb3287b6373939f754cab24f140f43db678cd0cf8fae2783c1ab09d2 tigervnc-selinux-1.12.0-13.el9_2.tuxcare.els28.noarch.rpm ce3108ca3bfa92df4b471fe6603b386ae27bb26f52677bd5dc629d828fe6769b tigervnc-server-1.12.0-13.el9_2.tuxcare.els28.x86_64.rpm 4320bde160b3d95835cff8ecbbf47fe04698c80c53131527d8941aefe15f0248 tigervnc-server-minimal-1.12.0-13.el9_2.tuxcare.els28.x86_64.rpm 01d2db6fb991a647131f16d97e5c4280fed333943798f71fb0f67b067c4091b5 tigervnc-server-module-1.12.0-13.el9_2.tuxcare.els28.x86_64.rpm bf2c5b79803faa62057bc3bf81ad933487596d49b392298eb74305db6b46c3d2 CLSA-2026:1786488345 TuxCare License Agreement 0 - CVE-2026-15146: validate the address advertised in an FTP PASV/LPSV response against the control connection's peer, so a malicious FTP server cannot redirect the data connection to an arbitrary host (SSRF) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15146: validate the address advertised in an FTP PASV/LPSV response against the control connection's peer, so a malicious FTP server cannot redirect the data connection to an arbitrary host (SSRF)

0 tuxcare-almalinux9.2-esu wget-1.21.1-7.el9_2.tuxcare.els5.x86_64.rpm 6355c9e390c475b20160da963c19b92fe4cfbe9243c3af19e33cb41434671d9b CLSA-2026:1786497454 TuxCare License Agreement 0 - CVE-2026-3276: replace quadratic canonical ordering in unicodedata.normalize() with counting sort for long combining-mark runs Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3276: replace quadratic canonical ordering in unicodedata.normalize() with counting sort for long combining-mark runs

0 tuxcare-almalinux9.2-esu python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els31.noarch.rpm ce8e2fed45b17e09fb16ba427945b9d704cc60739e4cf886e2e0d8d4900d622a python3-3.9.16-1.el9_2.2.tuxcare.els31.i686.rpm 36ba5602d8c50f24fc63bb67f2a173d8be4aa07756f758b33cd257264ea3e472 python3-3.9.16-1.el9_2.2.tuxcare.els31.x86_64.rpm 6f599baa178a7b0c41cae77615c924a4199c2fe8caf5ecb70a45013de268fd6b python3-debug-3.9.16-1.el9_2.2.tuxcare.els31.i686.rpm 8fa7474c1da5d40c98ea2bb34dd9d56e88048bf2c8a7a8a6ae9ec96e6cf069d1 python3-debug-3.9.16-1.el9_2.2.tuxcare.els31.x86_64.rpm dbe6f35aedb27f6d47d401e8b2466a7a7a2dd0e814f7e33bd6c8fc888946bd88 python3-devel-3.9.16-1.el9_2.2.tuxcare.els31.i686.rpm 08f82fca35e472c1b2ed7d01133dc858288e9195d32768def0a9592b7e1c5642 python3-devel-3.9.16-1.el9_2.2.tuxcare.els31.x86_64.rpm 0cbb26e646148c2e8357f990cb6a3a06ff82367f81f95a6d2a3718740d5b8157 python3-idle-3.9.16-1.el9_2.2.tuxcare.els31.i686.rpm 1de0f5472e758e043e7afb33c675cc2d0613ce054ac121e2e6c2fb8ddc80be62 python3-idle-3.9.16-1.el9_2.2.tuxcare.els31.x86_64.rpm 197433612bbe7ab15d3951d9cf2c5ced85e49d413da940c3297200772b771d07 python3-libs-3.9.16-1.el9_2.2.tuxcare.els31.i686.rpm cde5484d95b5d9f3ace2d619ca1ebc9ca6a9932e7e055a5a84d99c4241b44a03 python3-libs-3.9.16-1.el9_2.2.tuxcare.els31.x86_64.rpm 345635992806c0213855c30225e596cc3393e9cd44abff8c9d3e629fc32c8d6f python3-test-3.9.16-1.el9_2.2.tuxcare.els31.i686.rpm fdbb42186368c72fac92b998e93bbcf8f1196513c30affeda61f2a3233ba0b33 python3-test-3.9.16-1.el9_2.2.tuxcare.els31.x86_64.rpm 9282c537e542133e7d69e8961b18a70842bae110fba18ffbc6a892854aabc3d7 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els31.i686.rpm 6a2430523fff82215935fb2f8af4faf7665b5a1db6e22f59a1e483b4562bf282 python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els31.x86_64.rpm a3283935bdcadf4019840082072fddc48be4ca38a9e01eaa8074e090b1780084 CLSA-2026:1786466122 TuxCare License Agreement 0 - CVE-2026-59847: fix incorrect return-code check of EVP_EncryptFinal / EVP_DecryptFinal that could bypass AES-GCM tag verification - CVE-2026-59850: reject SSH_MSG_CHANNEL_DATA received after remote close to avoid processing data on closed channels Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59847: fix incorrect return-code check of EVP_EncryptFinal / EVP_DecryptFinal that could bypass AES-GCM tag verification - CVE-2026-59850: reject SSH_MSG_CHANNEL_DATA received after remote close to avoid processing data on closed channels

0 tuxcare-almalinux9.2-esu libssh-0.10.4-8.el9_2.tuxcare.els13.i686.rpm b56c279edb8b336aacedb56eacee142e97a4b8debd63dd4ed9ddcb0e983e3240 libssh-0.10.4-8.el9_2.tuxcare.els13.x86_64.rpm 33f789bd9edb40f26dd85d8b544a86cb1eb2fd474bfe61ef5364be791ab033b0 libssh-config-0.10.4-8.el9_2.tuxcare.els13.noarch.rpm 6ec6ae4b20309949c48e9c9dc782aaa0b6be7fea4ec0223cdd970fc644d4c2e5 libssh-devel-0.10.4-8.el9_2.tuxcare.els13.i686.rpm 108e6e6b50350cf061b76503a3db6d85c70a353c9659c2110a32ae02ce12e733 libssh-devel-0.10.4-8.el9_2.tuxcare.els13.x86_64.rpm 49d6e4a3fe58cb02544bacd6642e2bfdb82672a18086307f3a061fc47de991c0 CLSA-2026:1786499335 TuxCare License Agreement 0 - CVE-2026-64685: check for unexpected end-of-file before importing each BGR channel to prevent a heap buffer over-read Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-64685: check for unexpected end-of-file before importing each BGR channel to prevent a heap buffer over-read

0 tuxcare-almalinux9.2-esu ImageMagick-6.9.13.52-2.el9_2.tuxcare.els2.x86_64.rpm 1cadc10e21d5d66e3c12707a7e78421f103fd64fd401d14f4eda9684fdcb48ec ImageMagick-c++-6.9.13.52-2.el9_2.tuxcare.els2.x86_64.rpm 3ae364a5ee18d864cc7cb5cd593986a4c2e0b102f4a5c162a33e7bf14f8532cc ImageMagick-c++-devel-6.9.13.52-2.el9_2.tuxcare.els2.x86_64.rpm ed55cd165d636ee48b9cdb8ac3760494a6f0fc9ee1ae02d5cf8c62e666228336 ImageMagick-devel-6.9.13.52-2.el9_2.tuxcare.els2.x86_64.rpm 0d0400911473cf994cfd37b482e84950c6d67faab672f35d28327fadc6818fe1 ImageMagick-djvu-6.9.13.52-2.el9_2.tuxcare.els2.x86_64.rpm 3ef9135961311fc96288a50de8d2266dc19914f468ec356ceaebc89d7e17c7c1 ImageMagick-doc-6.9.13.52-2.el9_2.tuxcare.els2.x86_64.rpm 4314c9beb256150a3937eeae06329142329721c6866e16697c517380e99d9cb0 ImageMagick-libs-6.9.13.52-2.el9_2.tuxcare.els2.x86_64.rpm 4dbe8fbc98510dbc4462e7850c313eaf86559c31904ebb93a7b8356d6551bdab ImageMagick-perl-6.9.13.52-2.el9_2.tuxcare.els2.x86_64.rpm 0a02aacf98cfec86ac002056268ff5ca778b9cc2fb8d578bafd1d33b75d340b1 CLSA-2026:1786527041 TuxCare License Agreement 0 - CVE-2026-32288: archive/tar - limit old GNU sparse-map extension data and cap sparse entries across all supported encodings to prevent excessive memory consumption Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32288: archive/tar - limit old GNU sparse-map extension data and cap sparse entries across all supported encodings to prevent excessive memory consumption

0 tuxcare-almalinux9.2-esu go-toolset-1.22.9-1.el9_2.tuxcare.els25.x86_64.rpm 8450df1b51a82b8162c064041bf1b17e60e6c586d3665e0e5e95118f8496e645 golang-1.22.9-1.el9_2.tuxcare.els25.x86_64.rpm 6dcc7d147765e7c26621ecac8e2bab3fea9f3e6c9b3b9bd11f0d1e1d5ed053d5 golang-bin-1.22.9-1.el9_2.tuxcare.els25.x86_64.rpm 456a5c908b1cd75e5c50db87b410e4d599b8e881c9a313f21ff27f454a47c2fc golang-docs-1.22.9-1.el9_2.tuxcare.els25.noarch.rpm 04fe119cd5356ce5ce0aeedba0a28eb259dd55e1beddbea1ed31916cbd777e25 golang-misc-1.22.9-1.el9_2.tuxcare.els25.noarch.rpm 7b020691462e45b4d946456bb62b730a599ca3e7821bc09786eab42578cb02df golang-src-1.22.9-1.el9_2.tuxcare.els25.noarch.rpm 0a3f8005f38ff37f70c5e10fc1ba1e03bb2dd94610d01230fe97f3a2f8cb6f3d golang-tests-1.22.9-1.el9_2.tuxcare.els25.noarch.rpm 528a4bf8d0743ed0e5ae9b2f4642e53a1e5bce3ce73d7f93d74365ade18a1c79 CLSA-2026:1786553851 TuxCare License Agreement 0 - CVE-2025-49506: non-constant-time password and hash comparisons in apr_password_validate() leak information through a timing side channel Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49506: non-constant-time password and hash comparisons in apr_password_validate() leak information through a timing side channel

0 tuxcare-almalinux9.2-esu apr-util-1.6.1-20.el9_2.1.tuxcare.els2.i686.rpm cedb74f57d0d946b2a8f824046dad486b54b58da272b1a2155f37a47c1ca0f0e apr-util-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm a25e3e06f8277239fcd1679ab26f5f1c9fcf0cc4c0e385bdc60eac176dfb9775 apr-util-bdb-1.6.1-20.el9_2.1.tuxcare.els2.i686.rpm 0598df995810c18b83fad16be33ebf3209219771969861cadda35f776e471ee9 apr-util-bdb-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm 325434c8bcd138bf941d3ff9bbd7cda111691481fa161382e30111a72ce97136 apr-util-devel-1.6.1-20.el9_2.1.tuxcare.els2.i686.rpm 32e10bbe8ba1ce2b89e6ef5f4ba2ce5a20252c41a27748829cb65aa25fedbd07 apr-util-devel-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm 2ecd96dfb91b3d2382dca2ae73abcc6b437342de3f100cb2bd2bb38a16113d14 apr-util-ldap-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm c20f4f363e5b86a51a411eff0e59124c904c8a4e57d504132974c244f997acf3 apr-util-mysql-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm a4e97210cecfb38845ef34fc8d8a719bbb94bcdfca0e509215825214f2c5f7f0 apr-util-odbc-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm 527d0e5dbd908c8e5c098bec6a95550385cbfd57381da57b0919d52bcb90f198 apr-util-openssl-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm 1e8eda554e9074d41c232f6aa85141ffe429187892075dd9cd7055721b72034c apr-util-pgsql-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm beb25d98eefbb0bc233b22bfeac6a4c160edb16387656cf0a5094e1001f56e3e apr-util-sqlite-1.6.1-20.el9_2.1.tuxcare.els2.x86_64.rpm 8594bb64026defdea6fd151d10ff9631286b3417511aa65e94f2dec888674b3c CLSA-2026:1786620962 TuxCare License Agreement 0 - CVE-2023-7207: path traversal via absolute symlink targets under --no-absolute-filenames; drop cpio-2.13-revert-CVE-2015-1197-fix.patch and apply the upstream symlink-placeholder fix instead Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-7207: path traversal via absolute symlink targets under --no-absolute-filenames; drop cpio-2.13-revert-CVE-2015-1197-fix.patch and apply the upstream symlink-placeholder fix instead

0 tuxcare-almalinux9.2-esu cpio-2.13-16.el9_2.tuxcare.els1.x86_64.rpm 8bdc644a471e8a943c1fc7ee9334413fd82ecf01c35b0730650f2ba4abafb343