<?xml version='1.0' encoding='UTF-8'?>
<updates><update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1790590713</id>
    <title>openexr: Fix of CVE-2026-42217</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- CVE-2026-42217: reject IDManifest variable-length integers whose shift
  reaches 64 bits, avoiding undefined behaviour in readVariableLengthInteger()</description>
    <severity>Critical</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- CVE-2026-42217: reject IDManifest variable-length integers whose shift
  reaches 64 bits, avoiding undefined behaviour in readVariableLengthInteger()</summary>
    <pushcount>0</pushcount>
    <issued date="2026-09-28 10:18:43 UTC" />
    <updated date="2026-09-28 10:18:43 UTC" />
    <references href="https://errata.tuxcare.com/els_os/tuxcare9.8esu/CLSA-2026-1790590713.html" id="CLSA-2026:1790590713" title="CLSA-2026:1790590713" type="self">
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2026-42217" id="CVE-2026-42217" title="CVE-2026-42217" type="cve" />
    </references>
    <pkglist>
      <collection>
        <name>tuxcare-almalinux9.8-esu</name>
        <package arch="aarch64" epoch="0" name="openexr" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-3.1.1-3.el9_8.4.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">82c5a7ba91e88b5c48cac84d4297e746851184cdae66d193226cce01a52b2c51</sum>
        </package>
        <package arch="i686" epoch="0" name="openexr" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-3.1.1-3.el9_8.4.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">257197f8b2099e6358bd2880744c779e75f0fe92ffc6b9ae6319ef0f4d842fb2</sum>
        </package>
        <package arch="x86_64" epoch="0" name="openexr" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-3.1.1-3.el9_8.4.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">f1ecad16c166140ee1b0db6e7b2870ee0187a93a966c7df3f51defa69aacaeeb</sum>
        </package>
        <package arch="aarch64" epoch="0" name="openexr-devel" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-devel-3.1.1-3.el9_8.4.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">db682b9ca9ec9a48682465d474792b4d3d65b2246b3438a3c1b193d75fa1f5c6</sum>
        </package>
        <package arch="i686" epoch="0" name="openexr-devel" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-devel-3.1.1-3.el9_8.4.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">729d64d6debd121940104447bfd95f7913f2f8fbc68ee53f94461eb370d467b0</sum>
        </package>
        <package arch="x86_64" epoch="0" name="openexr-devel" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-devel-3.1.1-3.el9_8.4.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">c8c3b5bf53b1e3dea779e17c1358944e1ac7520c4e0c91ee1b8226efe70d727a</sum>
        </package>
        <package arch="aarch64" epoch="0" name="openexr-libs" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-libs-3.1.1-3.el9_8.4.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">3de3dd6805e0661a49929cde035f68d0d672a565d3ea52720df6aa1ca290be60</sum>
        </package>
        <package arch="i686" epoch="0" name="openexr-libs" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-libs-3.1.1-3.el9_8.4.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">88fcccdbf7dc95532bd73eb1e7b885642469168e3e90d67211347e78747f2c6d</sum>
        </package>
        <package arch="x86_64" epoch="0" name="openexr-libs" release="3.el9_8.4.tuxcare.els1" src="openexr-3.1.1-3.el9_8.4.tuxcare.els1.src.rpm" version="3.1.1">
          <filename>openexr-libs-3.1.1-3.el9_8.4.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">b281a766bb2da762fabf682623c8b76c741f2bbdb32e4799a0c96681c401e547</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1790594044</id>
    <title>zlib: Fix of CVE-2023-45853</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- CVE-2023-45853: reject zip header fields longer than 65535 bytes in minizip's
  zipOpenNewFileInZip4_64() to avoid an integer overflow and heap buffer overflow</description>
    <severity>Critical</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- CVE-2023-45853: reject zip header fields longer than 65535 bytes in minizip's
  zipOpenNewFileInZip4_64() to avoid an integer overflow and heap buffer overflow</summary>
    <pushcount>0</pushcount>
    <issued date="2026-09-28 11:14:14 UTC" />
    <updated date="2026-09-28 11:14:14 UTC" />
    <references href="https://errata.tuxcare.com/els_os/tuxcare9.8esu/CLSA-2026-1790594044.html" id="CLSA-2026:1790594044" title="CLSA-2026:1790594044" type="self">
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2023-45853" id="CVE-2023-45853" title="CVE-2023-45853" type="cve" />
    </references>
    <pkglist>
      <collection>
        <name>tuxcare-almalinux9.8-esu</name>
        <package arch="aarch64" epoch="0" name="minizip-compat" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>minizip-compat-1.2.11-40.el9.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">2854b49d1b43d277e680f8ffc7a5ffb147bd438a68eaa5af3fd12b23e6e00bd7</sum>
        </package>
        <package arch="i686" epoch="0" name="minizip-compat" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>minizip-compat-1.2.11-40.el9.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">052957c0b77e670dc06c4c5f3ad5458e94b3180387e0a8492bd14410e9165620</sum>
        </package>
        <package arch="x86_64" epoch="0" name="minizip-compat" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>minizip-compat-1.2.11-40.el9.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">b8601e0afece6136291e27c11f98ca3c532d0f7339dd725cd3e31e43b876407c</sum>
        </package>
        <package arch="aarch64" epoch="0" name="minizip-compat-devel" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>minizip-compat-devel-1.2.11-40.el9.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">bf486d026e5dff3bd0dc2be8e52d1cea4e88e5d4f2e27acc0904d5d277a45e64</sum>
        </package>
        <package arch="i686" epoch="0" name="minizip-compat-devel" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>minizip-compat-devel-1.2.11-40.el9.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">2c7c99619ab26312d12ec1f276230daf2730ae7ef02a4d0d2f11b9c31eb06bab</sum>
        </package>
        <package arch="x86_64" epoch="0" name="minizip-compat-devel" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>minizip-compat-devel-1.2.11-40.el9.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">9b5316aeddc7325223411c8a6c84b795789368e762efa314c951c2a792daa654</sum>
        </package>
        <package arch="aarch64" epoch="0" name="zlib" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-1.2.11-40.el9.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">4559b7b42c54427c76c7af28bb3e310cc02ba4048c668f51e798db3464cb8354</sum>
        </package>
        <package arch="i686" epoch="0" name="zlib" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-1.2.11-40.el9.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">d713ccbeb14bf0de3b2abe7a0063d53bee0d6435f6a6ab8ae6ca626fcab007d5</sum>
        </package>
        <package arch="x86_64" epoch="0" name="zlib" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-1.2.11-40.el9.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">9649ff73eedbd054ca3b8e2c49e39d12ac319ba131a21e57d3d420d80480e283</sum>
        </package>
        <package arch="aarch64" epoch="0" name="zlib-devel" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-devel-1.2.11-40.el9.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">96f50581566bd371149959907f37b50b650f7f3cebb4beab69b1c6f1259a81a4</sum>
        </package>
        <package arch="i686" epoch="0" name="zlib-devel" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-devel-1.2.11-40.el9.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">6f05cce4ea73a34fd54ae22cc150f08571cac251c0ba6b92bc19de34af733904</sum>
        </package>
        <package arch="x86_64" epoch="0" name="zlib-devel" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-devel-1.2.11-40.el9.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">066600777af7c8b2cf076bf9a0bd11b90bb66562815703fdff806006425884f7</sum>
        </package>
        <package arch="aarch64" epoch="0" name="zlib-static" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-static-1.2.11-40.el9.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">97bb2d4d6d7453b64ff12b822132f110f81deb6e22e31a45d763f1f569746822</sum>
        </package>
        <package arch="i686" epoch="0" name="zlib-static" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-static-1.2.11-40.el9.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">b3318dbdcae4545706b280220fb77e25035d25a0ad0e3ee7fad27a059bd918ee</sum>
        </package>
        <package arch="x86_64" epoch="0" name="zlib-static" release="40.el9.tuxcare.els1" src="zlib-1.2.11-40.el9.tuxcare.els1.src.rpm" version="1.2.11">
          <filename>zlib-static-1.2.11-40.el9.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">97286508480251669bc0cb195b77d20a3572f647a919de7f83ceb641b6717185</sum>
        </package>
      </collection>
    </pkglist>
  </update>
<update from="packager@tuxcare.com" status="final" type="security" version="1">
    <id>CLSA-2026:1790603127</id>
    <title>libexif: Fix of CVE-2026-32775</title>
    <rights>TuxCare License Agreement</rights>
    <release>0</release>
    <description>- CVE-2026-32775: buffer overwrite via underflow in exif_mnote_data_get_value()</description>
    <severity>Important</severity>
    <solution>Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.</solution>
    <summary>- CVE-2026-32775: buffer overwrite via underflow in exif_mnote_data_get_value()</summary>
    <pushcount>0</pushcount>
    <issued date="2026-09-28 13:45:38 UTC" />
    <updated date="2026-09-28 13:45:38 UTC" />
    <references href="https://errata.tuxcare.com/els_os/tuxcare9.8esu/CLSA-2026-1790603127.html" id="CLSA-2026:1790603127" title="CLSA-2026:1790603127" type="self">
      <reference href="https://nvd.nist.gov/vuln/detail/CVE-2026-32775" id="CVE-2026-32775" title="CVE-2026-32775" type="cve" />
    </references>
    <pkglist>
      <collection>
        <name>tuxcare-almalinux9.8-esu</name>
        <package arch="aarch64" epoch="0" name="libexif" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-0.6.22-6.el9_8.1.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">989aa88d1276b383db939fd187d5fc7be7b75f566e833511bc1adfdbc1e3caa9</sum>
        </package>
        <package arch="i686" epoch="0" name="libexif" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-0.6.22-6.el9_8.1.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">84d8e5840e796dbaa0a6fbd807bd24be044edf25f22de5439a20ca48abf1efdf</sum>
        </package>
        <package arch="x86_64" epoch="0" name="libexif" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-0.6.22-6.el9_8.1.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">a161841ba5868092624e7bff3b51b6658e31bf6901c0f7c74d1e59c8300b0d87</sum>
        </package>
        <package arch="aarch64" epoch="0" name="libexif-devel" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-devel-0.6.22-6.el9_8.1.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">d8abfbd637753e79d61b041854350c6773442ac26fa10c7366df5b3dd7acb801</sum>
        </package>
        <package arch="i686" epoch="0" name="libexif-devel" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-devel-0.6.22-6.el9_8.1.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">eaa6b15bbecdaa5f48af07fbf801b367a431bfff698ca3d7bbcd8ce3fef614c7</sum>
        </package>
        <package arch="x86_64" epoch="0" name="libexif-devel" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-devel-0.6.22-6.el9_8.1.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">f01f03d23902a2ed38f24fa38d9927aea99f7381c97d143a81bb4d43b01475a0</sum>
        </package>
        <package arch="aarch64" epoch="0" name="libexif-doc" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-doc-0.6.22-6.el9_8.1.tuxcare.els1.aarch64.rpm</filename>
          <sum type="sha256">8ec446d295706252ecc96150bceaaebf1d2a67564f6e27066b05a0e127eab675</sum>
        </package>
        <package arch="i686" epoch="0" name="libexif-doc" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-doc-0.6.22-6.el9_8.1.tuxcare.els1.i686.rpm</filename>
          <sum type="sha256">9edea70999b94feb2fccf6b539457513977e80fe3b820ee57989e9abc6ec5a9f</sum>
        </package>
        <package arch="x86_64" epoch="0" name="libexif-doc" release="6.el9_8.1.tuxcare.els1" src="libexif-0.6.22-6.el9_8.1.tuxcare.els1.src.rpm" version="0.6.22">
          <filename>libexif-doc-0.6.22-6.el9_8.1.tuxcare.els1.x86_64.rpm</filename>
          <sum type="sha256">813b4ade651fc13716fdfea089712330c52b1c5e9de9b27cac5081ef7e5dfd65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>