Tuxcare Errata System 0.0.1 5.10 2026-08-13T11:36:25 AlmaLinux 9 - Changed suffix from esu to els Critical TuxCare License Agreement CVE-2023-45853 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-45078: Fix out-of-bounds write in stab_xcoff_builtin_type - CVE-2021-46174: Fix buffer overflow in read_section_stabs_debugging_info - CVE-2022-44840: Fix possible heap buffer overflow in find_section_in_set() in readelf.c - CVE-2022-45703: Combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-47695: Test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47696: Fix uninitialised field `the_bfd` of `asymbol` - CVE-2022-47673: Fix lack of bounds checking in vms-alpha.c Important TuxCare License Agreement CVE-2021-45078 CVE-2022-45703 CVE-2022-47696 CVE-2022-47673 CVE-2022-47695 CVE-2022-44840 CVE-2021-46174 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-31484: fix possible MITM attach due to missing SSL verification - CVE-2023-31486: add verify_SSL=>1 to HTTP::Tiny default configuration Important TuxCare License Agreement CVE-2023-31486 CVE-2023-31484 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-24329: prevent bypass blocklisting methods Important TuxCare License Agreement CVE-2023-24329 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference Important TuxCare License Agreement CVE-2023-2953 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-27522: mod_proxy_uwsgi: HTTP response splitting - CVE-2023-31122: mod_macro: fix out-of-bounds read vulnerability by using own strncmp function Important TuxCare License Agreement CVE-2023-27522 CVE-2023-31122 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update Intel CPU microcode to microcode-20231114 release, addresses CVE-2023-23583 (INTEL-SA-00950): - Update of 06-6a-06/0x87 (ICX-SP D0) microcode (in 06-6a-06) from revision 0xd0003a5 up to 0xd0003b9; - Update of 06-6c-01/0x10 (ICL-D B0) microcode (in 06-6c-01) from revision 0x1000230 up to 0x1000268; - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode (in 06-7e-05) from revision 0xbc up to 0xc2; - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in 06-8c-01) from revision 0xac up to 0xb4; - Update of 06-8c-02/0xc2 (TGL-R C0) microcode (in 06-8c-02) from revision 0x2c up to 0x34; - Update of 06-8d-01/0xc2 (TGL-H R0) microcode (in 06-8d-01) from revision 0x46 up to 0x4e; - Update of 06-8f-04/0x10 microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-04) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-04) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-04) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-05) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-05) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-05) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-06) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-06) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-06) at revision 0x2b0004b1; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-07) at revision 0x2b0004b1; - Update of 06-8f-04/0x10 microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-06/0x10 microcode (in 06-8f-08) from revision 0x2c000271 up to 0x2c000290; - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in 06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000290; - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000290; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000271; - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in 06-8f-08) at revision 0x2c000271; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004d0; - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004d0; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004b1; - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in 06-8f-08) at revision 0x2b0004b1; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-02) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-97-02) from revision 0x2e up to 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-97-05) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-97-05) from revision 0x2e up to 0x32; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x430; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x42c; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-03) at revision 0x42c; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in 06-9a-03) from revision 0x42c up to 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x430; - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x430; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x42c; - Removal of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in 06-9a-04) at revision 0x42c; - Update of 06-9a-04/0x40 (AZB A0) microcode (in 06-9a-04) from revision 0x4 up to 0x5; - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in 06-9a-04) from revision 0x42c up to 0x430; - Update of 06-a7-01/0x02 (RKL-S B0) microcode (in 06-a7-01) from revision 0x59 up to 0x5d; - Update of 06-b7-01/0x32 (RPL-S B0) microcode (in 06-b7-01) from revision 0x119 up to 0x11d; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x411c; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x4119; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-02) at revision 0x4119; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in 06-ba-02) from revision 0x4119 up to 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x411c; - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x411c; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x4119; - Removal of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in 06-ba-03) at revision 0x4119; - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in 06-ba-03) from revision 0x4119 up to 0x411c; - Update of 06-be-00/0x11 (ADL-N A0) microcode (in 06-be-00) from revision 0x11 up to 0x12; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-02) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-bf-02) from revision 0x2e up to 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x32; - Addition of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x32; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x2e; - Removal of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in 06-bf-05) at revision 0x2e; - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - Update of 06-bf-02/0x07 (ADL C0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - Update of 06-bf-05/0x07 (ADL C0) microcode (in 06-bf-05) from revision 0x2e up to 0x32; - gen_update2.py was updated to output strings having restricted length; - refactor the way to keep the realeasenote.md file actual; Important TuxCare License Agreement CVE-2023-23583 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-47100: fix read/write past buffer end Critical TuxCare License Agreement CVE-2023-47100 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-51385: ban user/hostnames with most shell metacharacters in command line Critical TuxCare License Agreement CVE-2023-51385 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary Important TuxCare License Agreement CVE-2023-4692 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-7104: Fix heap-based buffer overflow in the sessionReadRecord function Important TuxCare License Agreement CVE-2023-7104 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-25062: Fix use-after-free issue in libxml2 XML Reader interface with DTD validation and XInclude expansion enabled. Important TuxCare License Agreement CVE-2024-25062 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-35937: fix a possible privilege escalation through a symlink check race condition - CVE-2021-35938: fix a possible privilege escalation using a symlink to a security-critical file - CVE-2021-35939: fix a possible privilege escalation using a symlink as a destination path Moderate TuxCare License Agreement CVE-2021-35937 CVE-2021-35938 CVE-2021-35939 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-48795: implement "strict key exchange" in ssh and sshd Moderate TuxCare License Agreement CVE-2023-48795 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-50387: Resolved CPU exhaustion from specially crafted DNSSEC-signed zone responses - CVE-2023-50868: Resolved CPU exhaustion from DNSSEC-signed zones using NSEC3 Important TuxCare License Agreement CVE-2023-50387 CVE-2023-50868 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6004: fix the possibility of injections through a hostname parameter in the ProxyCommand/ProxyJump features - CVE-2023-6918: fix the issue when unchecked return values for digests may cause DoS Moderate TuxCare License Agreement CVE-2023-6918 CVE-2023-6004 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-42465: Prevent row hammer attacks by modifying application logic to equal a success value instead of not equaling an error value and enhancing bit flip resistance of values. Important TuxCare License Agreement CVE-2023-42465 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-1667: fix possible NULL-pointer dereference during re-keying with algorithm guessing - CVE-2023-48795: fix the prefix truncation attack on Binary Packet Protocol Moderate TuxCare License Agreement CVE-2023-48795 CVE-2023-1667 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-28486: Escape control characters in log messages - CVE-2023-28487: Escape control characters in sudoreplay output Moderate TuxCare License Agreement CVE-2023-28486 CVE-2023-28487 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-27043: reject malformed addresses in email.parseaddr() Moderate TuxCare License Agreement CVE-2023-27043 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-46218: lowercase the domain names before PSL checks - Add verify cookie PSL mixed case test Moderate TuxCare License Agreement CVE-2023-46218 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-2398: http2: push headers better cleanup Important TuxCare License Agreement CVE-2024-2398 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2023-4001: add --root-dev-only flag to force only search root dev (the grub2 configuration file /boot/efi/EFI/almalinux/grub.cfg should be removed manually BEFORE grub2 updating) Moderate TuxCare License Agreement CVE-2023-4001 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-52425: fix reparsings for large token to prevent DoS Important TuxCare License Agreement CVE-2023-52425 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2024-32487: filename.c: quoting mishandling. Important TuxCare License Agreement CVE-2024-32487 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-48624: shell-quote filenames when invoking LESSCLOSE. Important TuxCare License Agreement CVE-2022-48624 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-27316: fix HTTP/2 DoS vulnerability caused by memory exhaustion from endless continuation frames: Incoming headers that exceed limits are buffered in nghttp2 to generate an HTTP 413 response Important TuxCare License Agreement CVE-2024-27316 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update iwlwifi firmware to mitigate CVE-2022-38076 for wifi adapters: Intel Wireless-AC 9560, Intel Wireless-AC 9462, Intel Wireless-AC 9461, Intel Wireless-AC 9260 - Update automatically loaded iwlwifi firmware to mitigate CVE-2022-36351, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Wi-Fi 6E AX211, AX411 - Update iwlwifi firmware to manually mitigate CVE-2022-36351, CVE-2022-27635, CVE-2022-40964 for wifi adapters: Intel Wi-Fi 6 AX101, AX200, AX201, AX203, Intel Wireless-AC 9560, 9462, 9461 Important TuxCare License Agreement CVE-2022-46329 CVE-2022-36351 CVE-2022-40964 CVE-2022-27635 CVE-2022-38076 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-48554: fix stack-based buffer over-read in file_copystr in funcs.c Moderate TuxCare License Agreement CVE-2022-48554 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-2961: Fix buffer overflow issue in iconv() function when converting strings to ISO-2022-CN-EXT character set - CVE-2024-33599: Fix buffer overflow in netgroup cache Important TuxCare License Agreement CVE-2024-33599 CVE-2024-2961 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-22365: pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations Moderate TuxCare License Agreement CVE-2024-22365 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4016: possible overflow in multiplication when allocating memory in ps/parser.c Low TuxCare License Agreement CVE-2023-4016 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-3826: fix buffer overflow in dlang_lname function to prevent denial of service Moderate TuxCare License Agreement CVE-2021-3826 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-39975: fix double free vulnerability in authorization-data handling to prevent incorrect data copying from one ticket to another Important TuxCare License Agreement CVE-2023-39975 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-2283: src/pki_crypto.c: fix possible authentication bypass, remove unneccessary null check; tests/client/torture_rekey.c: fix tests Moderate TuxCare License Agreement CVE-2023-2283 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-33600: nscd: avoid null pointer crashes after notfound response - CVE-2024-33601: fix memory allocation issue in netgroup cache by replacing xmalloc and xrealloc functions to prevent denial of service - CVE-2024-33602: fix memory corruption in netgroup cache by ensuring all strings are stored in the buffer in NSS callback Moderate TuxCare License Agreement CVE-2024-33602 CVE-2024-33601 CVE-2024-33600 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4641: fix buffer cleaning issue when password fails on second attempt Moderate TuxCare License Agreement CVE-2023-4641 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-27538: url: fix the SSH connection reuse check - CVE-2023-27536: url: only reuse connections with same GSS delegation Moderate TuxCare License Agreement CVE-2023-27538 CVE-2023-27536 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6387: the signal handler race condition itself fixed by commenting out the async-signal-unsafe code from the sshsigdie() function Important TuxCare License Agreement CVE-2024-6387 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-36054: fix uninitialized pointer in kadm_rpc_xdr.c to prevent kadmind crash Moderate TuxCare License Agreement CVE-2023-36054 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6597: prevent tempfile.TemporaryDirectory class dereference symlinks - Fix expat regression tests for xml_etree Important TuxCare License Agreement CVE-2023-6597 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6409: fix signal handler race condition vulnerability in sshd server Important TuxCare License Agreement CVE-2024-6409 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-29499: Fix GVariant offset table entry size which is not checked in is_normal() - CVE-2023-32611: Fix an issue where g_variant_byteswap() can take a long time with some non-normal inputs - CVE-2023-32665: Fix GVariant deserialisation which does not match spec for non-normal data - Enable internal tests during meson build and ignore the failing ones Important TuxCare License Agreement CVE-2023-32611 CVE-2023-29499 CVE-2023-32665 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-7008: prevent systemd-resolved from accepting DNS records of DNSSEC- signed domains without a signature to mitigate man-in-the-middle attacks Moderate TuxCare License Agreement CVE-2023-7008 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38473: mod_proxy: server proxy encoding problem - CVE-2024-39573: mod_rewrite: proxy handler substitution - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix Critical TuxCare License Agreement CVE-2024-38474 CVE-2024-38477 CVE-2024-38475 CVE-2024-38473 CVE-2024-40725 CVE-2024-39884 CVE-2024-39573 CVE-2024-38476 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4693: ntfs: fix an out-of-bounds read flaw on NTFS filesystem driver Moderate TuxCare License Agreement CVE-2023-4693 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-45490: reject negative length in XML_ParseBuffer - CVE-2024-45491: detect integer overflow in dtdCopy on 32-bit platforms - CVE-2024-45492: detect integer overflow in nextScaffoldPart on 32-bit platforms Critical TuxCare License Agreement CVE-2024-45492 CVE-2024-45491 CVE-2024-45490 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-38428: properly re-implement userinfo parsing Critical TuxCare License Agreement CVE-2024-38428 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6923: properly quote newlines for email headers to prevent header injection Moderate TuxCare License Agreement CVE-2024-6923 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-4076: avoid assertion failure from client queries triggering stale data and needing local zone lookups - CVE-2024-1975: remove support for SIG(0) message verification Important TuxCare License Agreement CVE-2024-1975 CVE-2024-4076 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-1737: fix resolver caches and authoritative zone databases to prevent degraded performance when handling client queries for the same hostname Important TuxCare License Agreement CVE-2024-1737 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-37370: prevent modification of Extra Count field in GSS krb5 wrap token to avoid appearing truncated to application - CVE-2024-37371: fix invalid memory reads during GSS message token handling Critical TuxCare License Agreement CVE-2024-37371 CVE-2024-37370 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-4032: fix missing and incorrect ip address ranges in _private_network variables Low TuxCare License Agreement CVE-2024-4032 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes Important TuxCare License Agreement CVE-2024-7592 CVE-2024-6232 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); - Fix CVE-2023-31315 - Update AMD CPU microcode to 2024-08-11 Important TuxCare License Agreement CVE-2023-31315 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-34397: Fix GDBus signal subscriptions from unicast spoofing Low TuxCare License Agreement CVE-2024-34397 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-38709: faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses - CVE-2024-24795: HTTP response splitting in multiple modules allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack Moderate TuxCare License Agreement CVE-2023-38709 CVE-2024-24795 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-26462: Fix memory leak vulnerability in src/kdc/ndr.c Important TuxCare License Agreement CVE-2024-26462 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-50602: Fix crash in XML_ResumeParser by preventing XML_StopParser from stopping/suspending unstarted parser Moderate TuxCare License Agreement CVE-2024-50602 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-8088: Fix infinite loop vulnerability in zipfile.Path when iterating over zip archive entries Moderate TuxCare License Agreement CVE-2024-8088 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-26458: Fix memory leak vulnerability in src/lib/rpc/pmap_rmt.c - CVE-2024-26461: Fix memory leak vulnerability in src/lib/gssapi/krb5/k5sealv3.c Moderate TuxCare License Agreement CVE-2024-26458 CVE-2024-26461 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-34241: Fix use-after-free bug in CUPS Important TuxCare License Agreement CVE-2023-34241 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-32324: Fix heap buffer overflow vulnerability in format_log_line function Important TuxCare License Agreement CVE-2023-32324 CVE-2023-4504 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-35235: Patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item Moderate TuxCare License Agreement CVE-2024-35235 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-50387: Evaluate DNSSEC responses to prevent KeyTrap denial of service issue. - CVE-2023-50868: Fix Closest Encloser Proof aspect to prevent CPU consumption for SHA-1 computations in random subdomain attacks Important TuxCare License Agreement CVE-2023-50387 CVE-2023-50868 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0450: Reject zip archives with overlapping entries to prevent quoted- overlap zip-bombs. Moderate TuxCare License Agreement CVE-2024-0450 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-46724: fix validation of certificates with CN=* Important TuxCare License Agreement CVE-2023-46724 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-10963: pam_access: rework resolving of tokens as hostname Important TuxCare License Agreement CVE-2024-10963 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5824: do not send serialized HTTP response header bytes in storeClientCopy() answers. Ignore serialized header size when calling storeClientCopy(). Important TuxCare License Agreement CVE-2023-5824 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-0836: Fix information leak vulnerability in connection buffer by initializing 5 bytes in FCGI_BEGIN_REQUEST record encoding. Important TuxCare License Agreement CVE-2023-0836 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-40225: Fix forward empty Content-Length headers issue Important TuxCare License Agreement CVE-2023-40225 CVE-2023-45539 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9287: Fix improperly quoting path names in virtual environment creation to prevent command injection in activation scripts Moderate TuxCare License Agreement CVE-2024-9287 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-49285: Fix Buffer Overread bug to prevent Denial of Service attack - CVE-2023-49286: Fix Incorrect Check of Function Return Value bug in Helper process management - CVE-2023-50269: Fix Uncontrolled Recursion bug in HTTP Request parsing by limiting X-Forwarded-For header size to prevent Denial of Service attack. - CVE-2024-25617: Fix Collapse of Data into Unsafe Value bug to prevent Denial of Service attack against HTTP header parsing Important TuxCare License Agreement CVE-2023-46728 CVE-2023-49286 CVE-2023-49285 CVE-2023-50269 CVE-2024-25617 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-8508: Limit number of name compression calculations per packet to prevent CPU lock and potential denial of service Moderate TuxCare License Agreement CVE-2024-8508 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9287: Quote path names when creating virtual environments to prevent command injection in activation scripts Moderate TuxCare License Agreement CVE-2024-9287 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-23638: Fix Denial of Service attack against Cache Manager error responses - CVE-2024-37894: Fix Out-of-bounds Write error when assigning ESI variables Moderate TuxCare License Agreement CVE-2024-37894 CVE-2024-23638 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2023-3961: fix path traversal vulnerability when processing client pipe names connecting to Unix domain sockets within a private directory Critical TuxCare License Agreement CVE-2023-3961 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-3903: fix invalid memory access when scrolling without valid screen Important TuxCare License Agreement CVE-2021-3903 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-0288: prevent the cursor from moving to line zero to fix invalid memory access with folding and using "L" Important TuxCare License Agreement CVE-2023-0288 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-32002: fix submodule paths to not contain symlinks Critical TuxCare License Agreement CVE-2024-32002 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-0433: check for not going over the end of the line to fix reading past the end of a line when formatting text Important TuxCare License Agreement CVE-2023-0433 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-32004: fetch/clone: detect dubious ownership of local repositories Important TuxCare License Agreement CVE-2024-32004 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-32465: Fix issue allowing protections to be bypassed when obtaining Git repository from untrusted sources Important TuxCare License Agreement CVE-2024-32465 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-8927: fix bypass of cgi.force_redirect configuration - CVE-2024-11233: fix single byte overread with convert.quoted-printable-decode filter - CVE-2024-11234: fix HTTP fulluri CRLF injection Important TuxCare License Agreement CVE-2024-11233 CVE-2024-11234 CVE-2024-8927 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4751: fix illegal memory access when using :ball - CVE-2023-4734: fix crash caused by int overflow - CVE-2023-5344: fix buffer overflow - CVE-2023-5535: fix use after free Important TuxCare License Agreement CVE-2023-5535 CVE-2023-4734 CVE-2023-5344 CVE-2023-4751 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 CVE-2024-38286: fix DoS vulnerability in TLS handshake process Important TuxCare License Agreement CVE-2024-38286 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4733: fix use after free vulnerability Important TuxCare License Agreement CVE-2023-4733 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-12085: Fix issue where checksum length manipulation could leak uninitialized stack data during file comparison. Important TuxCare License Agreement CVE-2024-12085 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-34750: correctly count the number of active streams Important TuxCare License Agreement CVE-2024-34750 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-0049: fix invalid memory access with bad 'statusline' value Important TuxCare License Agreement CVE-2023-0049 CVE-2024-22667 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-1488: make sure that only the unbound group is allowed to modify the configuration Important TuxCare License Agreement CVE-2024-1488 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-2610: limit the text length to MAXCOL - CVE-2023-4735: don't overflow buf2, check size in for loop() - CVE-2023-4750: check buffer is valid before accessing it - CVE-2023-4752: validate buffer before accessing it - CVE-2023-4781: disallow exchanging windows when textlock is active - Drop the patch level in version.c to the original one Important TuxCare License Agreement CVE-2023-2610 CVE-2023-4750 CVE-2023-4781 CVE-2023-0054 CVE-2023-4735 CVE-2023-4752 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2023-34967: fix type confusion vulnerability in Samba's mdssvc RPC service for Spotlight Important TuxCare License Agreement CVE-2023-34966 CVE-2023-34967 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-51764: Improvements for inbound SMTP smuggling defense. Reject or restrict input lines from an SMTP client that end in bare new line. Replace each stray <CR> or <LF> character in message content with a space character, to prevent outbound SMTP smuggling To prevent the SMTP smuggling vulnerability, the option "smtpd_forbid_bare_newline = reject" must be set. Moderate TuxCare License Agreement CVE-2023-51764 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-2756: fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix Moderate TuxCare License Agreement CVE-2024-2756 CVE-2024-3096 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-25111: Fix uncontrolled recursion bug in HTTP Chunked decoder to prevent DoS attack Important TuxCare License Agreement CVE-2024-25111 CVE-2024-45802 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-45648: fix improper processing of trailer headers which could lead to the possibility of request smuggling when behind a reverse proxy Moderate TuxCare License Agreement CVE-2023-45648 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2023-42669: disable the rpcecho server - Fix CVE-2022-2127: fix out-of-bounds read triggered by a malicious request Moderate TuxCare License Agreement CVE-2023-42669 CVE-2022-2127 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52533: Fix off-by-one error in gsocks4aproxy.c to prevent buffer overflow caused by insufficient length of SOCKS4_CONN_MSG_LEN Important TuxCare License Agreement CVE-2024-52533 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2023-4091: fix vulnerability that allows SMB clients to truncate files, even with read-only permissions for certain acl_xattr settings. Moderate TuxCare License Agreement CVE-2023-4091 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5517: fix a flaw causing named to crash with an assertion failure when nxdomain-redirect is set, and a PTR query for an RFC 1918 address returns NXDOMAIN - CVE-2023-5679: fix a crash in named due to an assertion failure during recursive resolution when both DNS64 and serve-stale are enabled - CVE-2023-6516: fix a vulnerability where named may exceed max-cache-size due to unbounded growth of queued cache cleanup events Important TuxCare License Agreement CVE-2023-6516 CVE-2023-5679 CVE-2023-5517 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-32020: fix issue where local clones may hardlink files into target repository's object database when owned by different user - CVE-2024-32021: fix issue with hardlinks to arbitrary user-readable files when cloning local source repository containing symlinks Low TuxCare License Agreement CVE-2024-32020 CVE-2024-32021 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-2496: fix memory corruption listing interfaces - CVE-2024-4418: fix stack use-after-free in event loop Moderate TuxCare License Agreement CVE-2024-4418 CVE-2024-2496 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-29491: fix triggering memory corruption via malformed terminfo database file when used by a setuid application Important TuxCare License Agreement CVE-2023-29491 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-42795: improve handling of failures during recycle() methods Moderate TuxCare License Agreement CVE-2023-42795 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-42794: restore the finalize() method Moderate TuxCare License Agreement CVE-2023-42794 CVE-2023-41080 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to MySQL 8.0.40 - CVEs fixed: CVE-2024-21201 CVE-2024-21236 CVE-2024-21230 CVE-2024-21160 CVE-2024-21196 CVE-2024-21239 CVE-2024-21173 CVE-2024-21193 CVE-2024-21159 CVE-2024-21135 CVE-2024-20996 CVE-2024-21166 CVE-2024-21157 CVE-2024-21231 CVE-2024-21199 CVE-2024-21207 CVE-2024-21194 CVE-2024-21238 CVE-2024-21218 CVE-2024-21203 CVE-2024-21162 CVE-2024-21213 CVE-2024-21219 CVE-2024-21163 CVE-2024-21241 CVE-2024-21125 CVE-2024-21134 CVE-2024-21130 CVE-2024-21198 CVE-2024-21142 CVE-2024-21127 CVE-2024-21237 CVE-2024-21197 CVE-2024-21212 CVE-2024-21247 CVE-2024-21129 CVE-2024-21200 CVE-2024-21171 CVE-2024-21165 CVE-2024-21137 CVE-2024-21061 CVE-2024-21057 CVE-2024-21056 CVE-2024-21055 CVE-2024-21053 CVE-2024-21052 CVE-2024-21051 CVE-2024-21050 CVE-2024-21049 CVE-2024-20993 CVE-2024-20984 CVE-2024-20982 CVE-2024-20970 CVE-2024-20968 CVE-2024-20966 CVE-2024-20964 CVE-2024-20962 CVE-2024-20960 CVE-2024-21179 CVE-2024-21185 CVE-2024-21177 CVE-2024-20972 CVE-2024-20976 CVE-2024-20974 CVE-2024-20978 CVE-2024-20981 CVE-2024-20969 CVE-2024-20985 CVE-2024-20965 CVE-2024-20967 CVE-2024-20977 CVE-2024-20961 CVE-2024-20983 CVE-2024-20963 CVE-2024-20971 CVE-2024-20973 CVE-2023-22103 CVE-2023-22070 CVE-2023-22114 CVE-2023-22079 CVE-2023-22066 CVE-2023-22104 CVE-2023-22084 CVE-2023-22078 CVE-2023-22111 CVE-2023-22064 CVE-2023-22113 CVE-2023-22097 CVE-2023-22065 CVE-2023-22092 CVE-2023-22110 CVE-2023-22059 CVE-2023-22068 CVE-2023-22115 CVE-2023-22032 CVE-2023-22112 CVE-2023-22033 CVE-2023-22048 CVE-2023-21950 CVE-2023-22058 CVE-2023-22008 CVE-2023-22007 CVE-2023-22046 CVE-2023-22054 CVE-2023-22005 CVE-2023-22056 CVE-2023-22038 CVE-2023-22053 CVE-2023-22057 CVE-2023-21935 CVE-2023-21972 CVE-2023-21953 CVE-2023-21977 CVE-2023-21962 CVE-2023-21955 CVE-2023-21946 CVE-2023-21920 CVE-2023-21919 CVE-2023-21980 CVE-2023-21929 CVE-2023-21982 CVE-2023-21966 CVE-2023-21945 CVE-2023-21911 CVE-2023-21933 CVE-2023-21976 CVE-2023-21940 CVE-2023-21947 CVE-2022-4899 Important TuxCare License Agreement CVE-2023-21977 CVE-2023-21933 CVE-2023-22007 CVE-2024-20972 CVE-2023-22070 CVE-2023-22058 CVE-2024-20978 CVE-2022-4899 CVE-2024-21173 CVE-2024-21134 CVE-2024-21231 CVE-2024-21053 CVE-2024-21230 CVE-2024-21196 CVE-2024-21236 CVE-2024-21193 CVE-2024-21238 CVE-2024-21135 CVE-2024-21159 CVE-2024-21207 CVE-2024-21203 CVE-2024-21157 CVE-2024-21166 CVE-2024-21218 CVE-2024-21125 CVE-2024-21163 CVE-2024-21213 CVE-2024-21219 CVE-2024-21162 CVE-2024-21129 CVE-2024-21142 CVE-2024-21197 CVE-2024-21198 CVE-2024-21237 CVE-2024-21057 CVE-2024-21137 CVE-2024-21212 CVE-2024-21200 CVE-2024-21171 CVE-2024-21052 CVE-2024-21165 CVE-2024-21055 CVE-2024-21247 CVE-2024-20984 CVE-2024-21050 CVE-2024-21049 CVE-2024-20960 CVE-2024-20964 CVE-2024-20968 CVE-2024-20982 CVE-2024-21177 CVE-2024-20970 CVE-2024-21179 CVE-2024-20974 CVE-2024-20985 CVE-2024-20969 CVE-2024-20981 CVE-2024-20971 CVE-2024-20965 CVE-2024-20967 CVE-2023-22114 CVE-2024-20977 CVE-2024-20973 CVE-2023-22078 CVE-2023-22079 CVE-2024-20983 CVE-2023-22111 CVE-2023-22092 CVE-2023-22064 CVE-2023-22104 CVE-2023-22048 CVE-2023-22110 CVE-2023-22068 CVE-2023-22065 CVE-2023-22032 CVE-2023-22097 CVE-2023-22046 CVE-2023-21950 CVE-2023-22038 CVE-2023-21980 CVE-2023-22057 CVE-2023-21972 CVE-2023-21966 CVE-2023-21953 CVE-2023-21955 CVE-2023-21919 CVE-2024-21201 CVE-2023-21947 CVE-2024-21160 CVE-2023-21982 CVE-2023-21945 CVE-2023-21911 CVE-2024-21239 CVE-2024-21130 CVE-2024-21199 CVE-2024-21194 CVE-2024-20996 CVE-2024-21051 CVE-2024-21127 CVE-2024-21241 CVE-2024-20966 CVE-2024-20993 CVE-2024-21061 CVE-2024-21056 CVE-2024-20962 CVE-2024-21185 CVE-2023-22084 CVE-2024-20976 CVE-2024-20961 CVE-2023-22066 CVE-2024-20963 CVE-2023-22008 CVE-2023-22113 CVE-2023-22103 CVE-2023-22115 CVE-2023-22059 CVE-2023-21935 CVE-2023-22054 CVE-2023-22112 CVE-2023-22033 CVE-2023-21962 CVE-2023-22053 CVE-2023-22005 CVE-2023-22056 CVE-2023-21929 CVE-2023-21946 CVE-2023-21920 CVE-2023-21976 CVE-2023-21940 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-8925: fix erroneous parsing of multipart form data contained in an HTTP POST request - CVE-2024-9026: fix log tampering in PHP-FPM - CVE-2024-5458: fix early-out for ipv6 hostname validation, ensure full check is performed Moderate TuxCare License Agreement CVE-2024-8925 CVE-2024-5458 CVE-2024-9026 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-3750: fix race condition in virStoragePoolObjListSearch function to prevent denial of service Moderate TuxCare License Agreement CVE-2023-3750 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2023-34968: fix path disclosure vulnerability by sanitizing search query results - Delete fixed tests from knowfail list Moderate TuxCare License Agreement CVE-2023-34968 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-49043: fix use-after-free vulnerability in xmlXIncludeAddNode Moderate TuxCare License Agreement CVE-2022-49043 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4408: fix high CPU load in ‘named’ while parsing large DNS messages Important TuxCare License Agreement CVE-2023-4408 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-3596: implement support for Message-Authenticator in libkrad Critical TuxCare License Agreement CVE-2024-3596 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-24549: fix improper input validation vulnerability for HTTP/2 requests Important TuxCare License Agreement CVE-2024-24549 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-28100: fix issue where Flatpak could copy text from Linux virtual console and paste it into command buffer, potentially leading to command execution Moderate TuxCare License Agreement CVE-2023-28100 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-1441: fix off-by-one error in udevListInterfacesByStatus - CVE-2024-2494: check for negative array lengths before allocation in remote_daemon_dispatch Moderate TuxCare License Agreement CVE-2024-1441 CVE-2024-2494 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-23672: fix incomplete cleanup vulnerability to prevent Denial of Service Important TuxCare License Agreement CVE-2024-23672 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update AMD SEV CPU firmware to address CVE-2023-31356, CVE-2023-20584 Moderate TuxCare License Agreement CVE-2023-31356 CVE-2023-20584 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-41105: fix unexpected path truncation in os.path.normpath() when handling '\0' bytes - fix potential nullptr dereference + use of uninitialized memory Important TuxCare License Agreement CVE-2023-41105 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2007-4559: add security filter in the tarfile module to prevent directory traversal attacks. Uses `filter="data"` by default to block unsafe filenames; set `filter="tar"` to keep legacy behavior Low TuxCare License Agreement CVE-2007-4559 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6232: fix excessive backtracking in tarfile.TarFile header parsing to address ReDoS vulnerability. Important TuxCare License Agreement CVE-2024-6232 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6597: fix symlink dereferencing in TemporaryDirectory cleanup process Important TuxCare License Agreement CVE-2023-6597 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-27043: add a strict parsing mode to prevent incorrect address interpretation. By default, strict=True is enabled. If you need the legacy behavior, explicitly set strict=False when calling parseaddr() or getaddresses() - Additionally, strict parsing can be disabled globally by setting the environment variable PYTHON_EMAIL_DISABLE_STRICT_ADDR_PARSING to a non-empty string or by creating the configuration file /etc/python/email.cfg with the following content: [email_addr_parsing] PYTHON_EMAIL_DISABLE_STRICT_ADDR_PARSING = true Moderate TuxCare License Agreement CVE-2023-27043 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-28101: fix issue of hiding elevated permissions by setting crafted values containing non-printable control characters Moderate TuxCare License Agreement CVE-2023-28101 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-49288: fix Denial of Service in HTTP Collapsed Forwarding Important TuxCare License Agreement CVE-2023-49288 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - fix CVE-2024-42472 in flatpak by adding --bind-fd and --ro-bind-fd options in in bubblewrap, enabling race-free bind mounts using an O_PATH file descriptor instead of a direct path Important TuxCare License Agreement CVE-2024-42472 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2007-4559: add security filter in the tarfile module to prevent directory traversal attacks. Introduces the `filter` parameter; use `filter="data"` to block unsafe filenames Low TuxCare License Agreement CVE-2007-4559 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-11187: fix excessive resource usage by limiting additional section processing and adjusting resolver tests Important TuxCare License Agreement CVE-2024-11187 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-4032: update 'ipaddress' module to correct is_private and is_global properties based on latest IANA information - CVE-2024-6923: properly quote newlines for email headers to prevent header injection - CVE-2024-8088: fix issue causing infinite loop when iterating over names of entries in a zip archive in 'zipfile.Path' module Moderate TuxCare License Agreement CVE-2024-8088 CVE-2024-4032 CVE-2024-11168 CVE-2024-6923 CVE-2025-0938 CVE-2024-0450 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4408: use hashtable when parsing a message Important TuxCare License Agreement CVE-2023-4408 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47175: fixed multiple PPD vulnerabilities by validating inputs, sanitizing strings, quoting localized data, and addressing warnings in cups/ppd-cache.c and scheduler/ipp.c Important TuxCare License Agreement CVE-2024-47175 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-27113: fix NULL pointer dereference in xmlPatMatch in pattern.c Important TuxCare License Agreement CVE-2025-27113 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-32462: mitigate sandbox escape by passing the -- argument to bwrap Important TuxCare License Agreement CVE-2024-32462 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-26465: fix a machine-in-the-middle attack vulnerability caused by a malicious machine impersonating a legitimate server Moderate TuxCare License Agreement CVE-2025-26465 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2020-11023: fix jQuery untrusted code execution vulnerability in the documentation Moderate TuxCare License Agreement CVE-2020-11023 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-28757: Prevent billion laughs attacks in isolated external parser (part of #839) Reject direct parameter entity recursion (part of #839) Important TuxCare License Agreement CVE-2024-28757 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-42472: patch Flatpak to include the new --bind-fd option in bubblewrap to prevent symlink attacks on persistent directories Important TuxCare License Agreement CVE-2024-42472 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to MySQL 8.0.41 - CVEs fixed: CVE-2024-21101 CVE-2025-21559 CVE-2025-21555 CVE-2025-21546 CVE-2025-21543 CVE-2025-21540 CVE-2025-21531 CVE-2025-21529 CVE-2025-21523 CVE-2025-21522 CVE-2025-21520 CVE-2025-21519 CVE-2025-21518 CVE-2025-21505 CVE-2025-21504 CVE-2025-21503 CVE-2025-21501 CVE-2025-21500 CVE-2025-21497 CVE-2025-21491 CVE-2025-21490 CVE-2024-11053 CVE-2024-7264 Moderate TuxCare License Agreement CVE-2025-21546 CVE-2025-21559 CVE-2025-21490 CVE-2025-21543 CVE-2024-11053 CVE-2025-21491 CVE-2025-21531 CVE-2025-21540 CVE-2025-21503 CVE-2025-21522 CVE-2025-21555 CVE-2025-21529 CVE-2025-21523 CVE-2024-21101 CVE-2025-21505 CVE-2025-21501 CVE-2025-21520 CVE-2025-21519 CVE-2025-21504 CVE-2025-21500 CVE-2025-21497 CVE-2025-21518 CVE-2024-7264 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-0840: fix stack-based buffer overflow in disassemble_bytes function Important TuxCare License Agreement CVE-2025-0840 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-24813: Fix path equivalence vulnerability to prevent remote code execution and information disclosure in Default Servlet Critical TuxCare License Agreement CVE-2025-24813 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-0624: net: Out-of-bounds write in grub_net_search_config_file() - CVE-2025-0690: read: Integer overflow may lead to out-of-bounds write - CVE-2025-1118: commands/dump: The dump command is not in lockdown when secure boot is enabled - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write Important TuxCare License Agreement CVE-2024-45782 CVE-2025-1118 CVE-2025-0622 CVE-2024-45781 CVE-2024-45776 CVE-2025-0678 CVE-2024-45775 CVE-2024-1048 CVE-2025-1125 CVE-2025-0690 CVE-2025-0624 CVE-2024-56737 CVE-2024-45783 CVE-2024-45780 CVE-2024-45777 CVE-2024-45774 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c Important TuxCare License Agreement CVE-2025-24928 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-11168: fix improper validation of bracketed hosts in urllib.parse.urlsplit() and urlparse() functions - CVE-2025-0938: fix incomplete algorithm of validating hosts by disallowing square brackets in domain names Moderate TuxCare License Agreement CVE-2024-11168 CVE-2025-0938 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-26595: xorg-x11-server: fix buffer overflow in XkbVModMaskText() Important TuxCare License Agreement CVE-2025-26595 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-28879: Fix buffer overflow in base/sbcp.c by correctly handling write buffer for BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode functions Critical TuxCare License Agreement CVE-2023-28879 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions - enable modules test Important TuxCare License Agreement CVE-2025-1094 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-46589: fix improper input validation vulnerability Important TuxCare License Agreement CVE-2023-46589 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-10979: fix incorrect control of environment variables in PostgreSQL PL/Perl Important TuxCare License Agreement CVE-2024-10979 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-26601: xorg-x11-server: fix use-after-free issue by adding check to ensure new sync object is added before alarm triggers Important TuxCare License Agreement CVE-2025-26596 CVE-2025-26600 CVE-2025-26594 CVE-2025-26601 CVE-2025-26599 CVE-2025-26597 CVE-2025-26598 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-3596: fix chosen-prefix collision attack against MD5 Response Authenticator signature that allowed malicious modification of valid RADIUS responses Critical TuxCare License Agreement CVE-2024-3596 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-56171: Fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c Important TuxCare License Agreement CVE-2024-56171 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-3468: handle termination event on avahi Unix socket to prevent infinite loop - CVE-2023-1981: prevent avahi daemon crash by emitting an error if the requested D-Bus service is not found - CVE-2021-3502: fix avahi-daemon crashing from NULL pointer assertions - CVE-2023-38469: reject overly long TXT resource records to prevent reachable assertion in avahi_dns_packet_append_record - CVE-2023-38470: ensure each label is at least one byte long in avahi_normalize_name() to prevent reachable assertion in avahi_escape_label() - CVE-2023-38471: fix creating invalid escape sequence in dbus_set_host_name function - CVE-2023-38472: ensure avahi_rdata_parse() has valid rdata before parsing to prevent reachable assertion - CVE-2023-38473: normalize input in avahi_alternative_host_name() to prevent reachable assertion due to unescaped dot handling Moderate TuxCare License Agreement CVE-2023-38473 CVE-2021-3502 CVE-2021-3468 CVE-2023-38471 CVE-2023-38469 CVE-2023-38470 CVE-2023-38472 CVE-2023-1981 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-7006: check return value of _TIFFCreateAnonField() to avoid potential DoS via memory allocation failures - CVE-2023-6228: validate input image codec in tiffcp to prevent heap-based buffer overflow and potential application crash - CVE-2022-40090: improve IFD loop handling in TIFFReadDirectory to prevent DoS via crafted TIFF files - CVE-2023-2731: handle missing end-of-information marker in LZWDecode() to prevent NULL pointer dereference and potential DoS Important TuxCare License Agreement CVE-2022-40090 CVE-2024-7006 CVE-2023-6228 CVE-2023-2731 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-4904: fix missing checks in ares_set_sortlist to prevent possible stack overflow Important TuxCare License Agreement CVE-2022-4904 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6816: xorg-x11-server: fix use-after-free issue by adding check to allocate sufficient space for logical button maps to prevent heap overflow in DeviceFocusEvent and XIQueryPointer replies - CVE-2023-5367: xorg-x11-server: correct buffer offset handling in XIChangeDeviceProperty and RRChangeOutputProperty to prevent out-of-bound writes during append/prepend operations - CVE-2023-6478: xorg-x11-server: fix integer overflow in RRChangeProviderProperty and RRChangeOutputProperty to prevent disclosure of sensitive information Critical TuxCare License Agreement CVE-2023-6478 CVE-2023-5367 CVE-2023-6816 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-31080: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIGetSelectedEvents() by avoiding byte-swapped length values in replies - CVE-2024-9632: xorg-x11-server: fix improperly tracked allocation size in _XkbSetCompatMap to prevent buffer overflow condition - CVE-2024-31081: xorg-x11-server: fix heap-based buffer over-read vulnerability in ProcXIPassiveGrabDevice() function to prevent memory leakage and segmentation faults by handling byte-swapped length values in replies correctly Important TuxCare License Agreement CVE-2024-9632 CVE-2024-31080 CVE-2024-31081 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Synced to upstream plus ASN.1 patch - Tested on AlmaLinux 9.5 - Fix CVE-2024-2236 (RHEL-34579) Moderate TuxCare License Agreement CVE-2024-2236 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Backported els3..els12 patches and changelog Critical TuxCare License Agreement CVE-2024-26782 CVE-2024-26743 CVE-2024-26804 CVE-2024-56615 CVE-2024-35852 CVE-2024-56551 CVE-2024-50067 CVE-2023-52635 CVE-2024-53141 CVE-2024-53239 CVE-2024-40929 CVE-2024-26989 CVE-2022-2977 CVE-2024-36902 CVE-2024-26852 CVE-2024-50047 CVE-2023-1079 CVE-2023-30456 CVE-2023-4133 CVE-2023-4273 CVE-2023-51779 CVE-2024-56608 CVE-2024-26582 CVE-2024-26883 CVE-2024-26884 CVE-2023-52628 CVE-2024-26934 CVE-2023-52809 CVE-2024-27059 CVE-2023-52667 CVE-2023-52504 CVE-2024-27046 CVE-2024-27043 CVE-2024-26923 CVE-2024-39494 CVE-2024-26737 CVE-2024-42154 CVE-2024-42152 CVE-2024-41092 CVE-2024-36941 CVE-2024-41091 CVE-2024-41090 CVE-2024-41096 CVE-2024-35855 CVE-2024-35845 CVE-2024-26958 CVE-2024-46722 CVE-2024-46757 CVE-2024-49889 CVE-2024-49989 CVE-2024-49960 CVE-2024-26704 CVE-2022-49011 CVE-2024-49967 CVE-2023-52751 CVE-2024-49884 CVE-2024-26669 CVE-2024-50115 CVE-2024-40927 CVE-2024-35868 CVE-2024-53103 CVE-2024-56631 CVE-2024-56708 CVE-2024-41076 CVE-2021-47383 CVE-2024-38627 CVE-2024-40995 CVE-2024-42082 CVE-2024-27052 CVE-2024-35789 CVE-2024-49895 CVE-2024-49995 CVE-2024-47698 CVE-2024-40954 CVE-2024-56603 CVE-2024-56600 CVE-2024-53173 CVE-2024-36012 CVE-2023-52501 CVE-2022-48672 CVE-2024-46758 CVE-2024-46731 CVE-2024-38562 CVE-2021-47101 CVE-2023-52651 CVE-2023-52885 CVE-2024-36025 CVE-2024-36978 CVE-2024-26779 CVE-2024-26664 CVE-2024-26610 CVE-2024-26603 CVE-2022-0480 CVE-2023-52840 CVE-2024-35847 CVE-2023-52679 CVE-2024-36940 CVE-2023-26545 CVE-2023-1075 CVE-2025-21795 CVE-2024-26734 CVE-2024-35864 CVE-2025-21692 CVE-2023-1077 CVE-2024-49996 CVE-2023-52494 CVE-2023-52474 CVE-2022-42895 CVE-2024-56614 CVE-2023-52528 CVE-2024-41057 CVE-2023-52741 CVE-2023-28464 CVE-2023-1855 CVE-2023-3161 CVE-2024-41058 CVE-2023-4622 CVE-2023-39189 CVE-2023-42754 CVE-2023-39194 CVE-2023-6176 CVE-2022-38096 CVE-2024-26898 CVE-2023-52594 CVE-2024-0841 CVE-2024-36901 CVE-2024-26744 CVE-2024-26872 CVE-2024-26828 CVE-2024-26897 CVE-2023-52854 CVE-2024-26800 CVE-2024-40912 CVE-2024-26925 CVE-2024-41040 CVE-2024-35791 CVE-2024-42225 CVE-2024-38558 CVE-2024-36960 CVE-2024-37353 CVE-2024-36883 CVE-2024-40941 CVE-2024-42131 CVE-2024-27415 CVE-2024-50073 CVE-2024-46700 CVE-2024-42096 CVE-2024-35962 CVE-2023-52884 CVE-2024-42148 CVE-2024-46811 CVE-2022-40982 CVE-2024-26754 CVE-2024-49860 CVE-2024-49883 CVE-2024-50033 CVE-2024-53150 CVE-2023-52475 CVE-2023-52614 CVE-2024-56672 CVE-2024-35867 CVE-2024-26853 CVE-2024-35905 CVE-2024-57798 CVE-2024-35896 CVE-2024-42136 CVE-2023-52531 CVE-2024-50262 CVE-2024-50035 CVE-2024-46859 CVE-2024-53156 CVE-2024-56605 CVE-2024-50154 CVE-2024-27045 CVE-2024-41071 CVE-2024-26946 CVE-2023-52818 CVE-2024-40914 CVE-2024-50036 CVE-2024-50074 CVE-2024-50125 CVE-2024-56601 CVE-2024-56662 CVE-2024-53057 CVE-2024-46738 CVE-2024-46723 CVE-2023-52735 CVE-2024-36017 CVE-2024-42161 CVE-2024-41073 CVE-2024-27014 CVE-2024-25742 CVE-2022-48655 CVE-2023-1073 CVE-2022-3594 CVE-2022-36402 CVE-2024-41000 CVE-2024-44987 CVE-2024-44970 CVE-2024-42285 CVE-2024-46756 CVE-2024-46743 CVE-2024-53104 CVE-2024-43830 CVE-2024-50127 CVE-2023-46813 CVE-2024-50301 CVE-2024-50150 CVE-2024-50278 CVE-2024-46853 CVE-2024-50151 CVE-2024-50302 CVE-2024-50267 CVE-2024-46813 CVE-2022-3534 CVE-2023-52707 CVE-2023-28866 CVE-2023-1076 CVE-2023-39193 CVE-2023-39198 CVE-2023-6622 CVE-2024-56664 CVE-2024-26673 CVE-2024-27020 CVE-2024-26933 CVE-2023-52752 CVE-2024-36897 CVE-2024-39277 CVE-2024-27397 CVE-2024-35898 CVE-2024-26855 CVE-2024-35823 CVE-2024-36020 CVE-2024-42228 CVE-2022-48637 CVE-2024-38384 CVE-2024-40978 CVE-2024-40983 CVE-2024-41041 CVE-2024-42110 CVE-2024-40956 CVE-2023-52880 CVE-2024-35979 CVE-2024-42301 CVE-2024-41087 CVE-2024-46725 CVE-2024-46724 CVE-2024-26665 CVE-2024-41039 CVE-2024-26602 CVE-2024-46746 CVE-2024-26903 CVE-2024-26593 CVE-2024-53142 CVE-2024-46858 CVE-2024-47685 CVE-2023-52837 CVE-2023-52859 CVE-2024-35861 CVE-2024-35862 CVE-2024-26961 CVE-2024-27395 CVE-2024-36979 CVE-2024-38538 CVE-2024-50124 CVE-2023-52812 CVE-2024-56538 CVE-2024-33621 CVE-2024-46821 CVE-2024-46744 CVE-2024-43882 CVE-2023-4194 CVE-2024-37356 CVE-2024-50131 CVE-2023-52612 CVE-2024-49950 CVE-2024-46747 CVE-2024-40984 CVE-2024-46673 CVE-2024-26908 CVE-2024-26629 CVE-2024-38619 CVE-2024-42284 CVE-2024-26668 CVE-2024-36886 CVE-2024-36270 CVE-2024-38586 CVE-2024-35890 CVE-2024-26929 CVE-2024-25744 CVE-2023-39191 CVE-2023-3772 CVE-2023-1206 CVE-2023-33203 CVE-2024-49882 CVE-2024-38588 CVE-2023-21102 CVE-2024-50143 CVE-2024-50279 CVE-2024-26882 CVE-2023-3212 CVE-2024-56658 CVE-2024-36904 CVE-2023-5717 CVE-2024-35885 CVE-2019-25162 CVE-2024-26595 CVE-2023-52595 CVE-2024-26735 CVE-2024-26642 CVE-2024-26643 CVE-2021-47185 CVE-2022-48627 CVE-2024-26964 CVE-2024-26973 CVE-2024-36971 CVE-2024-26615 CVE-2024-26886 CVE-2024-27016 CVE-2024-38570 CVE-2024-38581 CVE-2024-38552 CVE-2024-38601 CVE-2024-26907 CVE-2024-38559 CVE-2024-38555 CVE-2024-39476 CVE-2024-41044 CVE-2024-40911 CVE-2024-40905 CVE-2024-41049 CVE-2024-35866 CVE-2024-41023 CVE-2024-56642 CVE-2023-52637 CVE-2023-1074 CVE-2021-47515 CVE-2024-46818 CVE-2023-2269 CVE-2023-52562 CVE-2024-46871 CVE-2024-47701 CVE-2024-50055 CVE-2024-47745 CVE-2024-49894 CVE-2024-49969 CVE-2024-26931 CVE-2023-52519 CVE-2024-50264 CVE-2024-53179 CVE-2024-36929 CVE-2024-56604 CVE-2024-47742 CVE-2024-46759 CVE-2024-36899 CVE-2024-41013 CVE-2024-56602 CVE-2024-49991 CVE-2022-48988 CVE-2024-26689 CVE-2024-35863 CVE-2024-49930 CVE-2024-44977 CVE-2024-35895 CVE-2024-39471 CVE-2024-38579 CVE-2024-42159 CVE-2024-27030 CVE-2023-52520 CVE-2023-52477 CVE-2023-52513 CVE-2024-26993 CVE-2024-26901 CVE-2024-26584 CVE-2023-6546 CVE-2024-42243 CVE-2024-46800 CVE-2024-26885 CVE-2024-56606 CVE-2023-3358 CVE-2024-39502 CVE-2022-48804 CVE-2024-53059 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5363: process key length and iv length early if present Important TuxCare License Agreement CVE-2023-5363 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0567: detect loop in certificate chain Important TuxCare License Agreement CVE-2024-0567 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6119: avoid type errors in EAI-related name check logic Moderate TuxCare License Agreement CVE-2024-6119 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes Important TuxCare License Agreement CVE-2024-7592 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-28450: Set the default maximum DNS UDP packet size to 1232 Important TuxCare License Agreement CVE-2023-28450 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6239: Fix crash caused by malformed input files when using -dests parameter in pdfinfo utility Important TuxCare License Agreement CVE-2024-6239 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-29390: fix buffer overrun with certain narrow prog JPEGs Important TuxCare License Agreement CVE-2021-29390 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5380: xorg-x11-server: fix use-after-free flaw causing X server crash in specific multi-screen Zaphod mode configuration by handling window destruction properly Important TuxCare License Agreement CVE-2024-21885 CVE-2024-31083 CVE-2024-0229 CVE-2023-6377 CVE-2024-21886 CVE-2023-5380 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-7347: fix MP4 stsc cropping: prevent overflow and buffer underread causing invalid seeks and possible segfault. Moderate TuxCare License Agreement CVE-2024-7347 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47176: fix remote code execution vulnerability Important TuxCare License Agreement CVE-2024-47176 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-25629: fix invalid memory read issue in ares__read_line() - CVE-2023-31130: fix buffer underflow in ares_inet_net_pton() for certain ipv6 addresses - CVE-2023-31147: fix issue of using weak random numbers in DNS query ids by replacing rand() with a modern OS-provided CSPRNG like arc4random() - CVE-2023-31124: prevent fallback to rand() for entropy generation which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG. Moderate TuxCare License Agreement CVE-2023-31130 CVE-2024-25629 CVE-2023-31124 CVE-2023-31147 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-33871: fix arbitrary code execution by restricting Driver parameter to load only known dynamic libraries in gdevopvp.c - CVE-2023-38559: fix buffer overflow flaw in devn_pcx_write_rle() function by adding input validation checks - CVE-2024-29510: fix memory corruption and SAFER sandbox bypass by preventing format string injection with a uniprint device Important TuxCare License Agreement CVE-2023-38559 CVE-2024-33871 CVE-2024-29510 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6185: escape filename of embedded video to prevent execution of arbitrary GStreamer plugins. Important TuxCare License Agreement CVE-2023-6185 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-55549: fix use-after-free related to excluded namespaces Important TuxCare License Agreement CVE-2024-55549 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update Intel CPU microcode to 20250211 release, addresses: CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28127, CVE-2024-29214 (INTEL-SA-01139): - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Addition of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) at revision 0x3000330; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Addition of cpuid:B0674/0x32 microcode (in microcode.dat) at revision 0x12c; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Addition of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) at revision 0x1c; - Addition of cpuid:B06F6/0x07 microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:B06F7/0x07 microcode (in microcode.dat) at revision 0x38; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F4/0x10 microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F6/0x10 microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000290; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000390; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0004d0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b0005c0; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x35; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x433; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x123; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06A8/0xe0 microcode (in microcode.dat) at revision 0x4121; - Removal of cpuid:B06E0/0x11 (ADL-N A0) microcode (in microcode.dat) at revision 0x17; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000230; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003e7 up to 0xd0003f5; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002b0 up to 0x10002c0; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000390 up to 0x2c0003e0; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b0005c0 up to 0x2b000620; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x7 up to 0x9; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x433 up to 0x436; - Update of cpuid:906EA/0x22 (CFL-H/S/Xeon E U0) microcode (in microcode.dat) from revision 0xf8 up to 0xfa; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x100 up to 0x102; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x62 up to 0x63; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x1e up to 0x20; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4121 up to 0x4124; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4121 up to 0x4124; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x35 up to 0x38; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000230 up to 0x21000291; Important TuxCare License Agreement CVE-2024-24582 CVE-2023-43758 CVE-2023-34440 CVE-2024-28127 CVE-2024-29214 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-49761: parse XML with many digits in hex numeric character reference (&#x...) to fix ReDoS vulnerability in REXML Important TuxCare License Agreement CVE-2021-33621 CVE-2024-49761 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-24805: fix buffer overflow issue in handling of the INDEX of NET-SNMP-VACM- MIB that allows out-of-bounds memory access by user with read-only credentials - CVE-2022-24810: fix NULL pointer dereference caused by a user with read-write credentials using a malformed OID in a SET to the nsVacmAccessTable Important TuxCare License Agreement CVE-2022-24805 CVE-2022-24810 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-50387: DNSSEC aspects of the DNS protocol allow remote attackers to cause a DDOS - CVE-2023-50868: The Closest Encloser Proof aspect of the DNS protocol allows remote attackers to cause a DDOS Important TuxCare License Agreement CVE-2023-50387 CVE-2023-50868 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-33065: fix int overflow in dataend calculation Important TuxCare License Agreement CVE-2022-33065 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-3138: prevent out-of-bounds writes in XQueryExtension responses within Display struct Important TuxCare License Agreement CVE-2023-3138 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-5564: validate route information option length Important TuxCare License Agreement CVE-2024-5564 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-44638: fix out-of-bounds write in rasterize_edges_8 Important TuxCare License Agreement CVE-2022-44638 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-3316: avoid NULL pointer dereference in TIFFClose() when output file fails to open due to invalid path or permissions - CVE-2023-3618: handle errors from writeSelections() to prevent buffer overflow in Fax3Encode() and potential DoS - CVE-2023-3576: resolve memory leak in tiffcrop.c to prevent potential DoS via crafted TIFF file Moderate TuxCare License Agreement CVE-2023-3316 CVE-2023-3618 CVE-2023-3576 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-43618: fix integer overflow and buffer overflow in mpz/inp_raw.c to prevent segmentation fault on 32-bit platforms Important TuxCare License Agreement CVE-2021-43618 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-33869: fix path traversal and command execution vulnerability in base/gpmisc.c - CVE-2024-33870: fix path traversal vulnerability to prevent unauthorized access to arbitrary files by restricting access to permitted paths Moderate TuxCare License Agreement CVE-2024-33869 CVE-2024-33870 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9675: fix incorrect handling of paths in cache mounts that allows mounting of arbitrary directories in a container Important TuxCare License Agreement CVE-2024-9675 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-32142: fix buffer overflow vulnerability in LibRaw_buffer_datastream::gets(char*, int) in libraw_datastream.cpp Important TuxCare License Agreement CVE-2021-32142 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-26768: fix buffer overflow that allows a remote attacker to cause a denial of service Important TuxCare License Agreement CVE-2023-26768 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-43786: fix stack exhaustion from infinite recursion in PutSubImage() Important TuxCare License Agreement CVE-2023-43787 CVE-2023-43786 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-8176: fix stack overflow vulnerability in the libexpat library due to the way it handles recursive entity expansion in XML documents Important TuxCare License Agreement CVE-2024-8176 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52530: prevent HTTP request smuggling by properly handling '0' characters at the end of header names Important TuxCare License Agreement CVE-2024-52530 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-40745: prevent integer overflow on hostile images to avoid heap-based buffer overflow and potential code execution - CVE-2023-41175: address integer overflows and bypass in raw2tiff.c to prevent heap-based buffer overflow and potential code execution Important TuxCare License Agreement CVE-2023-26966 CVE-2023-26965 CVE-2023-41175 CVE-2023-40745 CVE-2023-52356 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-50379: fix inconsistent resource metadata with current GET and PUT/DELETE Important TuxCare License Agreement CVE-2024-50379 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47076: cfGetPrinterAttributes5() Validate response attributes before return Important TuxCare License Agreement CVE-2024-47076 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-24855: fix use-after-free of XPath context node Important TuxCare License Agreement CVE-2025-24855 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-43785: fix out-of-bounds memory access in _XkbReadKeySyms() Moderate TuxCare License Agreement CVE-2023-43785 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6186: validate macro permissions to prevent execution without warning Important TuxCare License Agreement CVE-2023-6186 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-28625: fix NULL pointer dereference causing segmentation fault Important TuxCare License Agreement CVE-2023-28625 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-25193: fix O(n^2) growth triggered by consecutive marks during mark attachment Important TuxCare License Agreement CVE-2023-25193 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6655: prevent injection of libraries from current working directory Important TuxCare License Agreement CVE-2024-6655 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52531: fix buffer overflow due to invalid input when parsing params if it decodes to UTF-8 Critical TuxCare License Agreement CVE-2024-52531 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-27363: fix out of bounds write in font subglyph structures parsing Important TuxCare License Agreement CVE-2025-27363 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-11235: Fix use-after-free vulnerability related to __set handler and ??= operator to prevent potential remote code execution Important TuxCare License Agreement CVE-2024-11235 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-26767: fix buffer overflow in lou_setDataPath function Important TuxCare License Agreement CVE-2023-26767 CVE-2023-26769 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-51257: fix an integer-overflow bug in the ICC profile parsing code Important TuxCare License Agreement CVE-2023-51257 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9341: fix insecure handling of file paths inside vendored c/common Important TuxCare License Agreement CVE-2024-1753 CVE-2024-9341 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-31492: fix vulnerability causing disclosure of protected content to unauthenticated users in mod_auth_openidc Important TuxCare License Agreement CVE-2025-31492 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-38745: avoid unnecessary empty -Djava.class.path= - CVE-2024-3044: add notify for script execution Important TuxCare License Agreement CVE-2024-3044 CVE-2022-38745 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - upgrade rexml version to 3.3.3 - CVE-2024-41946: fix DoS vulnerability when parsing many entity expansions with SAX2 or pull parser API - CVE-2024-41123: fix DoS vulnerability when parsing XML with specific characters Important TuxCare License Agreement CVE-2025-27220 CVE-2024-41946 CVE-2024-41123 CVE-2025-27219 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52532: websocket process the frame as soon as we read data Important TuxCare License Agreement CVE-2024-52532 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-24814: fix DoS when `OIDCSessionType client-cookie` is set and a crafted Cookie header is supplied Important TuxCare License Agreement CVE-2024-24814 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-30204: update golang-jwt/jwt to v4.5.2 to prevent a vulnerability that could lead to excessive memory allocation when parsing untrusted JWT tokens using ParseUnverified Important TuxCare License Agreement CVE-2025-30204 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-34156: prevent prevents stack exhaustion when attempting to decode a message that contains an extremely deeply nested struct - CVE-2023-45287: replace big.Int for encryption and decryption Important TuxCare License Agreement CVE-2024-34156 CVE-2023-45287 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-45336: fix potential sending of sensitive headers in chain of redirections - CVE-2023-45289: fix potential sending of sensitive headers and cookies on IPv6 zones Moderate TuxCare License Agreement CVE-2024-45336 CVE-2023-45289 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuild with new golang version to address the following CVEs: - CVE-2023-45287: Timing Side Channel attack in RSA based TLS key exchanges - CVE-2024-34156: panic due to stack exhaustion for Decoder.Decode Important TuxCare License Agreement CVE-2024-11218 CVE-2023-45287 CVE-2024-34156 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-30472: fix stack-based buffer overflow in orf_token_endian_convert by adding input validation for large UDP packets Critical TuxCare License Agreement CVE-2025-30472 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-1183: disable script command file dump to prevent arbitrary writes Important TuxCare License Agreement CVE-2023-1183 CVE-2025-1080 CVE-2023-0950 CVE-2024-6472 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47175: prevent PPD generation based on invalid IPP response - CVE-2024-47850: do not generate PPD for remote raw queues and add system-cups.slice Important TuxCare License Agreement CVE-2024-47175 CVE-2024-47850 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-22869: fix vulnerability in golang.org/x/crypto module by updating podman archive. Fix the same vulnerability in gvisor-tap-vsock by applying patch for crypto/ssh module - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/bdd4a5f) Important TuxCare License Agreement CVE-2025-22869 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-10978: fix privilege assignment issue to prevent less-privileged user from viewing or changing unauthorized rows Moderate TuxCare License Agreement CVE-2024-10978 CVE-2024-10976 CVE-2023-5870 CVE-2023-5868 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - ext4: fix OOB read when checking dotdot dir {CVE-2025-37785} - wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905} - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572} - veth: Fix use after free in XDP_REDIRECT {CVE-2023-53107} - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() {CVE-2024-53068} - arm64/sve: Discard stale CPU state when handling SVE traps {CVE-2024-50275} - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969} - wifi: mt76: mt7921e: fix use-after-free in free_irq() {CVE-2024-26892} - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read {CVE-2024-58069} - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() {CVE-2025-21927} - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - net_sched: sch_fifo: implement lockless __fifo_dump() {CVE-2025-21702} - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993} - vlan: enforce underlying device type {CVE-2025-21920} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - watch_queue: Actually free the watch {CVE-2022-49256} - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - netfilter: nf_set_pipapo: fix initial map fill {CVE-2024-57947} - hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations {CVE-2021-47098} - aio: fix use-after-free due to missing POLLFREE handling {CVE-2021-47505} - aio: keep poll requests on waitqueue until completed {CVE-2021-47505} - smb: client: fix potential deadlock when releasing mids {CVE-2023-52757} - cifs: remove useless DeleteMidQEntry() {CVE-2023-52757} - media: uvcvideo: Remove dangling pointers {CVE-2024-58002} - media: uvcvideo: Only save async fh if success {CVE-2024-58002} - media: uvcvideo: Refactor iterators {CVE-2024-58002} - drm: nv04: Fix out of bounds access {CVE-2024-27008} - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780} - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array {CVE-2025-21785} - net: rose: fix timer races against user threads {CVE-2025-21718} - media: uvcvideo: Fix double free in error path {CVE-2024-57980} - vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791} - geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858} - afs: Increase buffer size in afs_update_volume_status() {CVE-2024-26736} - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664} - bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099} Important TuxCare License Agreement CVE-2021-47505 CVE-2025-21858 CVE-2025-21969 CVE-2025-21927 CVE-2025-21920 CVE-2025-21993 CVE-2024-53168 CVE-2025-21905 CVE-2023-52988 CVE-2023-52922 CVE-2024-58069 CVE-2024-58002 CVE-2025-37785 CVE-2025-21791 CVE-2024-57980 CVE-2025-21718 CVE-2025-21785 CVE-2025-21702 CVE-2023-52664 CVE-2023-52572 CVE-2024-58069 CVE-2025-21780 CVE-2024-27008 CVE-2023-52757 CVE-2021-47098 CVE-2024-50275 CVE-2024-53099 CVE-2024-53068 CVE-2024-57947 CVE-2024-26736 CVE-2023-53107 CVE-2022-49256 CVE-2025-21928 CVE-2024-26763 CVE-2024-27042 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-48161: fix heap-buffer overflow - CVE-2025-31344: fix heap-buffer overflow Important TuxCare License Agreement CVE-2025-31344 CVE-2023-48161 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-28834: fix side-channel leak in the deterministic ECDSA - CVE-2024-28835: fix crash when verifying a certificate chain with more than 16 certificates Moderate TuxCare License Agreement CVE-2024-28834 CVE-2024-28835 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47600: fixed out-of-bounds read in the gst-discoverer-1.0 command-line tool that could cause crashes Critical TuxCare License Agreement CVE-2024-47600 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47774: fix an integer overflow in the AVI subtitle parser that can lead to out-of-bounds reads and can cause crashes for certain input files Critical TuxCare License Agreement CVE-2024-47774 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-24790: fix unexpected behavior from Is methods for IPv4-mapped IPv6 addresses Critical TuxCare License Agreement CVE-2023-45285 CVE-2023-45288 CVE-2024-24790 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-24201: address issue with out-of-bounds write by adding improved checks Important TuxCare License Agreement CVE-2025-24201 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-24789: fix zip parsing to reject EOCDR records with truncated comments - CVE-2024-9355: fix HMAC to pass initialized length to EVP_DigestSignFinal, ensuring correct output handling. Moderate TuxCare License Agreement CVE-2023-39326 CVE-2024-24784 CVE-2024-9355 CVE-2024-24789 CVE-2023-45290 CVE-2024-34158 CVE-2024-24791 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778: fix various out-of-bounds reads in the WAV parser that can cause crashes for certain input files Critical TuxCare License Agreement CVE-2024-47778 CVE-2024-47597 CVE-2024-47776 CVE-2024-47777 CVE-2024-47775 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-24790: update golang dependency to include fix for CVE-2024-24790 Critical TuxCare License Agreement CVE-2024-24790 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47835: fix NULL-pointer dereference in LRC subtitle parser Important TuxCare License Agreement CVE-2024-47541 CVE-2024-47835 CVE-2024-47542 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-45341: properly check for IPv6 hosts in URIs Moderate TuxCare License Agreement CVE-2024-45341 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47596: fix integer underflow in MP4/MOV demuxer that can lead to out-of-bounds reads Critical TuxCare License Agreement CVE-2024-47602 CVE-2024-47596 CVE-2024-47543 CVE-2024-47603 CVE-2024-47601 CVE-2024-47834 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow {CVE-2024-38577} - tcp: fix mptcp DSS corruption due to large pmtu xmit {CVE-2024-50083} - vsock: Keep the binding until socket destruction {CVE-2025-21756} - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020} - drm/i915: Fix potential bit_17 double-free {CVE-2023-52930} - netfilter: nft_tunnel: fix geneve_opt type confusion addition {CVE-2025-22056} - mm: shmem: fix data-race in shmem_getattr() {CVE-2024-46828} - nvmet-auth: assign dh_key to NULL after kfree_sensitive {CVE-2024-50215} - net: explicitly clear the sk pointer, when pf->create fails {CVE-2024-50186} - net: wwan: fix global oob in wwan_rtnl_policy {CVE-2024-50128} - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free {CVE-2024-49983} - vhost_vdpa: assign irq bypass producer token correctly {CVE-2024-47748} - wifi: rtw88: always wait for both firmware loading attempts {CVE-2024-47718} - sched: sch_cake: fix bulk flow accounting logic for host fairness {CVE-2024-46828} - fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF {CVE-2024-46786} - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934} - vhost/vsock: always initialize seqpacket_allow {CVE-2024-43873} - ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305} - nfsd: make sure exp active before svc_export_show {CVE-2024-56558} - SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174} - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync {CVE-2024-53208} - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one {CVE-2024-56663} - Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006} - net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014} Important TuxCare License Agreement CVE-2024-50083 CVE-2024-47718 CVE-2025-22020 CVE-2024-50215 CVE-2024-49983 CVE-2024-46786 CVE-2024-44934 CVE-2024-43873 CVE-2024-42305 CVE-2024-56558 CVE-2024-56663 CVE-2022-49029 CVE-2022-49006 CVE-2022-49014 CVE-2024-53237 CVE-2024-53208 CVE-2025-21756 CVE-2024-38577 CVE-2023-52930 CVE-2024-50186 CVE-2024-47748 CVE-2025-22056 CVE-2024-53174 CVE-2024-46828 CVE-2024-50128 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47615: fix out-of-bounds write in Ogg demuxer Critical TuxCare License Agreement CVE-2024-47538 CVE-2024-47607 CVE-2024-47615 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47544: fix multiple NULL-pointer dereferences in the MP4/MOV demuxer's CENC handling Important TuxCare License Agreement CVE-2024-47544 CVE-2024-47546 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-46420: fix memory leaks in the soup_header_parse_quality_list() - CVE-2025-32050: fix using int instead of size_t for strcspn return to avoid buffer under-read - CVE-2025-32052: fix heap buffer overflow in soup_content_sniffer_sniff Important TuxCare License Agreement CVE-2025-32914 CVE-2025-4948 CVE-2025-46420 CVE-2025-32050 CVE-2025-2784 CVE-2025-32052 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5841: fix heap-based buffer overflow vulnerability Critical TuxCare License Agreement CVE-2023-5841 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47613: fix NULL-pointer dereference in gdk-pixbuf decoder Critical TuxCare License Agreement CVE-2024-47599 CVE-2024-47545 CVE-2024-47539 CVE-2024-47537 CVE-2024-47613 CVE-2024-47606 CVE-2024-47598 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-46956: fix out-of-bounds data access in filenameforall to prevent arbitrary code execution Important TuxCare License Agreement CVE-2024-46956 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-34058: don't accept tokens with unrelated certs - CVE-2023-34059: fix file descriptor vuln by moving privilege drop from suidWrapper to vmtoolsd Important TuxCare License Agreement CVE-2023-34059 CVE-2023-34058 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-3155: fix execution of arbitrary scripts in help documents, preventing malicious file exfiltration Important TuxCare License Agreement CVE-2025-3155 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-40153: fix directory traversal vulnerability in squashfs_opendir by validating filenames before creating new files Important TuxCare License Agreement CVE-2021-40153 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-46953: fix integer overflow in parsing filename format string to prevent path truncation and possible code execution Important TuxCare License Agreement CVE-2025-27832 CVE-2023-46751 CVE-2024-46953 CVE-2024-46951 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9341: Use securejoin to safely join container paths and prevent symlink-based host escapes. Important TuxCare License Agreement CVE-2024-9341 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32911: fix use-after-free vulnerability in soup_message_headers_get_content_disposition() function - CVE-2025-32913: fix NULL pointer dereference in soup_message_headers_get_content_disposition() function Critical TuxCare License Agreement CVE-2025-32911 CVE-2025-32906 CVE-2025-32913 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-31651: enforces rewrite rules to preventing bypass of security constraints in specific configurations Critical TuxCare License Agreement CVE-2025-31651 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-21605: add output buffer limiting for unauthenticated clients Important TuxCare License Agreement CVE-2025-21605 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-22247: prevent usage of illegal characters in user names and file paths Moderate TuxCare License Agreement CVE-2025-22247 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32907: fix resource consumption vulnerability in HTTP range requests Moderate TuxCare License Agreement CVE-2025-32907 CVE-2025-46421 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47613: fix integer overflow in available data check for image tags Important TuxCare License Agreement CVE-2023-37327 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-37328: fix subrip tag parsing to prevent out-of-bounds access in gstsubparse Important TuxCare License Agreement CVE-2023-37328 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-31130: fix potential leak of authentication tokens to plugins Important TuxCare License Agreement CVE-2022-31130 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52005: add configuration option to sanitize sideband channel payloads Important TuxCare License Agreement CVE-2024-52005 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-3758: fix race condition in ad_gpo Important TuxCare License Agreement CVE-2023-3758 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0397: fix memory race condition in ssl module's cert_store_stats() and get_ca_certs() methods by ensuring proper synchronization during certificates loading Moderate TuxCare License Agreement CVE-2024-0397 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32728: fix logic error in DisableForwarding option Low TuxCare License Agreement CVE-2025-32728 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0397: fix memory race condition in ssl.SSLContext methods cert_store_stats() and get_ca_certs() Moderate TuxCare License Agreement CVE-2024-0397 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to MySQL 8.0.42 - CVEs fixed: CVE-2025-21574 CVE-2025-21577 CVE-2025-21579 CVE-2025-21581 CVE-2025-21584 CVE-2025-21585 CVE-2025-30681 CVE-2025-30682 CVE-2025-30683 CVE-2025-30684 CVE-2025-30688 CVE-2025-30689 CVE-2025-30695 CVE-2025-30703 CVE-2025-30705 CVE-2025-30710 CVE-2025-30715 CVE-2025-30721 CVE-2025-30722 CVE-2025-21575 CVE-2025-30687 CVE-2025-30685 CVE-2025-21580 CVE-2025-30693 CVE-2025-30704 CVE-2025-30696 CVE-2025-30699 Moderate TuxCare License Agreement CVE-2025-30684 CVE-2025-21577 CVE-2025-30695 CVE-2025-21585 CVE-2025-30681 CVE-2025-30688 CVE-2025-30710 CVE-2025-30705 CVE-2025-30682 CVE-2025-30715 CVE-2025-30699 CVE-2025-21574 CVE-2025-21580 CVE-2025-30687 CVE-2025-21584 CVE-2025-30703 CVE-2025-30685 CVE-2025-30683 CVE-2025-30722 CVE-2025-30721 CVE-2025-21581 CVE-2025-21579 CVE-2025-30689 CVE-2025-30704 CVE-2025-21575 CVE-2025-30693 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4156: fix heap out-of-bounds read flaw in builtin.c to prevent potential crash and information leakage Important TuxCare License Agreement CVE-2023-4156 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5914: fix double free with over 4 billion nodes Critical TuxCare License Agreement CVE-2025-5914 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-41072: fix squashfs_opendir directory traversal vulnerability by restricting unsquashfs write operations Important TuxCare License Agreement CVE-2021-41072 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32414: fix out-of-bounds memory access in Python API Important TuxCare License Agreement CVE-2025-32414 CVE-2025-32415 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-39306: fix privilege escalation vulnerability caused by improper input validation Important TuxCare License Agreement CVE-2025-4123 CVE-2022-39201 CVE-2022-39306 CVE-2022-31123 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-4802: fix untrusted LD_LIBRARY_PATH environment variable vulnerability by properly sanitizing the dynamic shared library loading Important TuxCare License Agreement CVE-2025-4802 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2020-12762: fix out of bounds write vulnerability in printbuf Important TuxCare License Agreement CVE-2020-12762 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-46954: fix decode_utf8 to forbid overlong encodings Important TuxCare License Agreement CVE-2024-46954 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-50967: fix denial of service issue caused by large p2c value Important TuxCare License Agreement CVE-2023-50967 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to 2.44.4 - CVE-2023-42950: fix a use after free issue - CVE-2024-27851: fix processing maliciously crafted web content may lead to arbitrary code execution - CVE-2024-27820: fix processing web content may lead to arbitrary code execution - CVE-2024-4558: fix use after free in ANGLE Critical TuxCare License Agreement CVE-2023-42875 CVE-2023-42852 CVE-2023-40414 CVE-2022-32885 CVE-2023-42917 CVE-2023-38595 CVE-2023-38572 CVE-2023-42950 CVE-2023-39928 CVE-2023-32359 CVE-2023-40451 CVE-2023-40397 CVE-2023-38592 CVE-2023-32393 CVE-2023-28198 CVE-2023-42890 CVE-2024-27851 CVE-2024-27820 CVE-2024-4558 CVE-2023-38611 CVE-2023-38600 CVE-2023-38597 CVE-2023-38594 CVE-2023-42970 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - xdg-email: disable special support for Thunderbird to address following vulnerabilities: - CVE-2020-27748: local file inclusion vulnerability - CVE-2022-4055: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments Important TuxCare License Agreement CVE-2020-27748 CVE-2022-4055 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803} - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063} - nfsd: fix possible badness in FREE_STATEID {CVE-2024-50043} - nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open {CVE-2024-46682} - nfsd: fix race between laundromat and free_stateid {CVE-2024-50106} - nfsd: split sc_status out of sc_type {CVE-2024-46682} - net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926} - net: fix geneve_opt length integer overflow {CVE-2025-22055} - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation {CVE-2024-53213} - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths {CVE-2022-48991} - xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982} Important TuxCare License Agreement CVE-2024-50106 CVE-2025-21979 CVE-2025-22055 CVE-2024-50043 CVE-2024-50063 CVE-2024-46682 CVE-2025-37803 CVE-2025-21926 CVE-2024-53213 CVE-2022-48991 CVE-2024-57982 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-54479: fix issue with processing maliciously crafted web content may lead to an unexpected process crash Critical TuxCare License Agreement CVE-2024-54534 CVE-2024-54479 CVE-2025-24209 CVE-2025-24216 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-39331: fix org-link-expand-abbrev to not expand unsafe link abbreviations Important TuxCare License Agreement CVE-2024-39331 CVE-2024-53920 CVE-2024-30205 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-27144: fix vulnerability in go-jose dependency Important TuxCare License Agreement CVE-2024-3727 CVE-2025-27144 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-31449: fix stack buffer overflow in bit library triggered by Lua script execution Important TuxCare License Agreement CVE-2024-46981 CVE-2022-24834 CVE-2024-31449 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6020: fix potential privilege escalationvia multiple symlink attacks and race conditions Important TuxCare License Agreement CVE-2025-6020 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-3891: fix denial of service issue caused by sending empty POST request when OIDCPreservePost directive is enabled Important TuxCare License Agreement CVE-2025-3891 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-12088: fix path traversal vulnerability in symbolic link destinations when using --safe-links option Important TuxCare License Agreement CVE-2024-12088 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-23419: fix issue allowing session resumption to bypass client certificate authentication when multiple server blocks share same IP/port Moderate TuxCare License Agreement CVE-2025-23419 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-20952: remote data access or modification in sandboxed clients - CVE-2024-20932: modify or access sensitive data in sandboxed client environments - CVE-2024-20918: remote data access or modification in sandboxed clients - CVE-2024-20926: remote data access in sandboxed clients - CVE-2024-20945: low-privileged users can access sensitive data - CVE-2024-20921: emote data access via exposed APIs in sandboxed clients - CVE-2024-20919: modify critical data via exposed APIs Important TuxCare License Agreement CVE-2024-20932 CVE-2024-20952 CVE-2024-20921 CVE-2024-20919 CVE-2024-20926 CVE-2024-20945 CVE-2024-20918 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32462: prevent listed users from executing commands on unintended machines by updating sudoers file validation Important TuxCare License Agreement CVE-2025-32462 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6021: fix buffer overflow in xmlBuildQName function Critical TuxCare License Agreement CVE-2025-6021 CVE-2025-49796 CVE-2025-49794 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") Important TuxCare License Agreement CVE-2025-4138 CVE-2025-4435 CVE-2025-4517 CVE-2025-4330 CVE-2024-12718 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-48060: fix heap-buffer-overflow in function jv_string_vfmt in jq_fuzz_execute by adding boundary checks Important TuxCare License Agreement CVE-2025-48060 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-3652: fix assertion failure and crash caused by requesting AES-GMAC without specifying esp= line Moderate TuxCare License Agreement CVE-2024-3652 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-30204: disable LaTeX preview for e-mail attachments to protection when untrusted-content is non-nil Moderate TuxCare License Agreement CVE-2024-30204 CVE-2024-30203 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-49175: fix out-of-bounds read in handling of animated cursors Important TuxCare License Agreement CVE-2025-49180 CVE-2025-49179 CVE-2025-49178 CVE-2025-49176 CVE-2025-49175 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-31257: fix issue with processing malicious web content can cause a use-after-free issue due to improper memory handling and result in an unexpected crash Important TuxCare License Agreement CVE-2025-31257 CVE-2024-54543 CVE-2024-54508 CVE-2024-54505 CVE-2025-30427 CVE-2024-27856 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-27983: ensure to close stream when destroying session to prevent memory leak Important TuxCare License Agreement CVE-2024-27983 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-44309: fix issue with processing maliciously crafted web content may lead to a cross site scripting attack Moderate TuxCare License Agreement CVE-2024-44309 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-41741: fix vulnerability in ngx_http_mp4_module leading to potential memory corruption and termination by improving module handling of specially crafted audio/video files - CVE-2022-41742: fix module ngx_http_mp4_module vulnerability to prevent worker process crash and memory disclosure from specially crafted media files Important TuxCare License Agreement CVE-2022-41742 CVE-2022-41741 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-23166: src: fix error handling on async crypto operations Important TuxCare License Agreement CVE-2025-23166 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") Important TuxCare License Agreement CVE-2025-4435 CVE-2025-4517 CVE-2025-4330 CVE-2025-4138 CVE-2024-12718 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() {CVE-2022-49846} - net: atm: fix use after free in lec_send() {CVE-2025-22004} - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up {CVE-2025-21887} - rcutorture: Fix ksoftirqd boosting timing and iteration {CVE-2022-50177} - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() {CVE-2022-49940} - selinux: Add boundary check in put_entry() {CVE-2022-50200} - Squashfs: fix handling and sanity checking of xattr_ids count {CVE-2023-52933} - net: atlantic: fix aq_vec index out of range error {CVE-2022-50066} - ext4: ignore xattrs past end {CVE-2025-37738} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list {CVE-2025-21919} - md: fix mddev uaf while iterating all_mddevs list {CVE-2025-22126} - ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764} - md: factor out a helper from mddev_put() - Fix "Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd" - ext4: prevent stale extent cache entries caused by concurrent get es_cache Important TuxCare License Agreement CVE-2025-22004 CVE-2025-21887 CVE-2022-50177 CVE-2022-49940 CVE-2022-50200 CVE-2022-50066 CVE-2025-23150 CVE-2025-21919 CVE-2025-22126 CVE-2025-21764 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-46316: parse command lines properly in wrapper scripts Moderate TuxCare License Agreement CVE-2023-46316 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-23184: restrict address headers to mitigate excessive CPU usage and prevent potential DoS attacks Moderate TuxCare License Agreement CVE-2024-23184 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-27281: fix object injection and remote code execution in .rdoc_options and documentation cache loading Moderate TuxCare License Agreement CVE-2024-27282 CVE-2024-27281 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-46045: fix out-of-bounds read via crafted config6a file Important TuxCare License Agreement CVE-2023-46045 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-48385: bundle-uri: fix arbitrary file writes via parameter injection Important TuxCare License Agreement CVE-2025-48385 CVE-2025-48384 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-3887: fix H265 slice header parsing to validate num_long_term_pics and prevent stack overflow Important TuxCare License Agreement CVE-2025-3887 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to jdk-17.0.15+6 - Set bundled freetype provide version to 2.13.2 - Set bundled harfbuzz provide version to 8.2.2 - Require tzdata-java 2025a at runtime and for build - CVE-2025-21502: fix Hotspot component vulnerability allowing unauthorized access to resources and exposure of sensitive information - CVE-2025-30698: fix 2D component vulnerability allowing unauthorized data access and partial denial of service - CVE-2025-30691: fix Compiler component vulnerability allowing unauthorized data access and modification (CVSS 4.8 Medium) - CVE-2025-21587: fix JSSE component vulnerability allowing unauthorized creation/deletion/modification of critical data - CVE-2024-20921: fix information disclosure in Hotspot that allows remote attackers to access sensitive data via untrusted input through exposed APIs or sandboxed environments - CVE-2024-21235: fix vulnerability in Hotspot that allows remote attackers to read or modify limited data via untrusted input through exposed APIs or sandboxed code - CVE-2024-21217: fix vulnerability in Serialization that allows remote attackers to trigger partial denial of service via untrusted input through exposed APIs or sandboxed code - CVE-2024-21210: fix vulnerability in Hotspot that allows remote attackers to modify limited data via untrusted input through exposed APIs or sandboxed code. - CVE-2024-21208: fix security vulnerability in OpenJDK component - CVE-2024-21147: fix Hotspot component vulnerability allowing unauthorized data access - CVE-2024-21145: fix 2D component vulnerability allowing unauthorized data access - CVE-2024-21144: fix security vulnerability in OpenJDK component - CVE-2024-21140: fix Hotspot component vulnerability - CVE-2024-21138: fix Hotspot component vulnerability causing partial denial of service - CVE-2024-21131: fix vulnerability in Hotspot that allows remote attackers to modify limited data via untrusted input through exposed APIs or sandboxed code - CVE-2024-21094: fix Hotspot component vulnerability allowing unauthorized data modification - CVE-2024-21085: fix Concurrency component vulnerability causing partial denial of service - CVE-2024-21068: fix Hotspot component vulnerability allowing unauthorized data access - CVE-2024-21011: fix Hotspot component vulnerability causing partial denial of service - CVE-2024-20918: fix information disclosure and data modification in Hotspot via untrusted input - CVE-2024-20952: fix information disclosure and data modification in Security via untrusted input - CVE-2024-20926: fix information disclosure in Scripting via untrusted input - CVE-2023-48161: fix buffer overflow in GifLib’s DumpSCreen2RGB function allowing local attackers to access sensitive information - CVE-2023-22025: fix data modification in Hotspot via untrusted input through exposed APIs or sandboxed code - CVE-2023-25193: fix O(n^2) growth vulnerability in HarfBuzz's hb-ot-layout-gsubgpos.hh when processing consecutive marks Important TuxCare License Agreement CVE-2024-21068 CVE-2023-48161 CVE-2025-21502 CVE-2024-20921 CVE-2025-30698 CVE-2025-30691 CVE-2025-21587 CVE-2024-21235 CVE-2024-21217 CVE-2024-21210 CVE-2024-21208 CVE-2024-21147 CVE-2024-21145 CVE-2024-21144 CVE-2024-21140 CVE-2024-21138 CVE-2024-21131 CVE-2024-21094 CVE-2024-21085 CVE-2023-25193 CVE-2024-21011 CVE-2024-20918 CVE-2024-20952 CVE-2024-20926 CVE-2023-22025 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Security fixes from OpenJDK 8u452-b09: - CVE-2025-21587: JSSE issue allowing remote access or modification of sensitive data - CVE-2025-30698: allows limited data access and partial DoS via untrusted Java code - CVE-2025-30691: allows limited data access via untrusted code using compiler APIs - Security fixes from OpenJDK 8u442-b06: - CVE-2025-21502: hotspot vulnerability enabling limited data access java clients - Security fixes from OpenJDK 8u432-b06: - CVE-2024-21235: sandbox bypass in java clients via exposed APIs - CVE-2024-21208: network flaw in sandboxed java clients enabling limited DoS - CVE-2024-21210: enabling data modification in sandboxed clients via crafted API input - CVE-2024-21217: serialization flaw may trigger partial DoS in sandboxed environments - Security fixes from OpenJDK 8u422-b05: - CVE-2024-21147: hotspot issue may lead to unauthorized access of sensitive data - CVE-2024-21145: enable limited unauthorized data access via untrusted java code - CVE-2024-21140: expose limited data to unauthorized read/write via sandboxed java code - CVE-2024-21144: allow remote unauthenticated attacker to cause partial DoS - CVE-2024-21131: remote access via API may lead to limited data modification - CVE-2024-21138: remote API calls may trigger partial DoS in sandboxed java environments - Security fixes from OpenJDK 8u412-b08: - CVE-2024-21094: lead to unauthorized data changes in sandboxed java apps - CVE-2024-21085: concurrency flaw may cause partial DoS in sandboxed java environments - CVE-2024-21011: hotspot issue may trigger partial DoS in sandboxed java environments - CVE-2024-21068: lead to limited unauthorized data modification in sandboxed deployments - CVE-2024-21012: networking issue may allow limited data modification Important TuxCare License Agreement CVE-2024-21140 CVE-2024-21011 CVE-2025-21502 CVE-2025-30698 CVE-2025-30691 CVE-2025-21587 CVE-2024-21235 CVE-2024-21217 CVE-2024-21210 CVE-2024-21208 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-23527: fix open redirect vulnerability caused by improper URL validation Moderate TuxCare License Agreement CVE-2022-23527 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52949: fix stack-based buffer overflow in src/ifaces.c by controlling the size in the strcpy function Moderate TuxCare License Agreement CVE-2024-52949 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-31228: fix unbounded recursion on supported commands by limiting pattern matching length Moderate TuxCare License Agreement CVE-2024-31228 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-1729: fix heap-buffer-overflow in raw2image_ex() to prevent application crash Moderate TuxCare License Agreement CVE-2023-1729 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-52160: fix authentication bypass vulnerability by enforcing TLS certificate verification and addressing eap_peap_decrypt vulnerability Moderate TuxCare License Agreement CVE-2023-52160 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-1244: fix command injection flaw by sanitizing input Important TuxCare License Agreement CVE-2025-1244 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-1736: validate end-of-line characters in user-supplied headers to prevent headers from being misinterpreted Critical TuxCare License Agreement CVE-2025-1217 CVE-2025-1734 CVE-2025-1736 CVE-2025-1861 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-23185: fix resource exhaustion caused by very large headers when parsing messages Moderate TuxCare License Agreement CVE-2024-23185 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-47268: fix denial of service caused by signed 64-bit integer overflow in timestamp multiplication in ping Moderate TuxCare License Agreement CVE-2025-47268 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52616: initialize DNS transaction IDs randomly at each startup to prevent predictability and mitigate DNS spoofing attacks Moderate TuxCare License Agreement CVE-2024-52616 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to jdk-17.0.16+8 - CVE-2025-50106: fix 2D component vulnerability in Java SE allowing remote attackers to compromise the Java runtime via crafted input - CVE-2025-30749: fix 2D rendering vulnerability in Java SE that could lead to application crash or remote code execution - CVE-2025-30754: fix JSSE component vulnerability allowing unauthorized access to sensitive data over TLS connections - CVE-2025-50059: fix Networking component vulnerability allowing unauthenticated remote attackers to access sensitive data in Java SE and GraalVM environments Important TuxCare License Agreement CVE-2025-50059 CVE-2025-50106 CVE-2025-30754 CVE-2025-30749 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-25724: fix crash in list_item_verbose on invalid time Important TuxCare License Agreement CVE-2025-25724 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32023: fix stack/heap out of bounds write on hyperloglog operations Important TuxCare License Agreement CVE-2025-32023 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6019: fix local privilege escalation vulnerability by updating libblockdev to prevent mounting of user-provided filesystem images with SUID- root shell Important TuxCare License Agreement CVE-2025-6019 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to shenandoah-jdk8u462-b08 (GA) - Security fixes from OpenJDK 8u462-b08: - CVE-2025-30749: fix 2D vulnerability allowing remote attackers to compromise JVM via network access - CVE-2025-30754: fix JSSE vulnerability allowing unauthorized data access via TLS connections - CVE-2025-30761: fix Scripting vulnerability allowing unauthorized data modification via network access - CVE-2025-50106: fix 2D vulnerability allowing remote attackers to compromise JVM via API exploitation Important TuxCare License Agreement CVE-2025-30749 CVE-2025-30761 CVE-2025-50106 CVE-2025-30754 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6965: reject queries with aggregate terms exceeding column limit to prevent memory corruption Critical TuxCare License Agreement CVE-2025-6965 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-22019: fix resource exhaustion and DoS vulnerability by limiting number of bytes read from a single connection when handling HTTP requests with chunked encoding Important TuxCare License Agreement CVE-2024-22019 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-44446: fix use-after-free in MXF demuxer by storing essence tracks in fixed allocations Important TuxCare License Agreement CVE-2023-40474 CVE-2023-50186 CVE-2023-44446 CVE-2023-44429 CVE-2023-40476 CVE-2023-40475 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-47466: Fix segmentation violation and application crash during tag writing via crafted WAV file Important TuxCare License Agreement CVE-2023-47466 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5994: fix cache poisoning vulnerability by segregating outgoing queries to accommodate for different outgoing ECS information Important TuxCare License Agreement CVE-2025-5994 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-7425: fix attribute type modification in libxslt to prevent memory corruption Important TuxCare License Agreement CVE-2025-7425 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-56337: prevent time-of-check time-of-use (TOCTOU) race condition vulnerability by strengthening file validation logic during request handling and closing the gap left by the partial mitigation in CVE‑2024‑50379 Important TuxCare License Agreement CVE-2024-56337 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-27349: fix crash while handling unsupported events in avrcp Important TuxCare License Agreement CVE-2023-27349 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths Moderate TuxCare License Agreement CVE-2024-46901 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-5197: fix integer overflows in image allocation and wrapping logic, validate dimensions and alignment to prevent invalid buffer calculations Critical TuxCare License Agreement CVE-2024-5197 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-7250: fix flaw to prevent denial of service caused by malicious or malfunctioning client sending incomplete data to server Moderate TuxCare License Agreement CVE-2023-7250 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary code execution by validating user-supplied data length before copying to buffer Important TuxCare License Agreement CVE-2023-50229 CVE-2023-50230 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-40897: use vasprintf() if available for error messages and otherwise vsnprintf() to allocate as much memory as required and avoid buffer overflow Moderate TuxCare License Agreement CVE-2024-40897 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-4673: remove Proxy-Authorization and Proxy-Authenticate headers from cross-origin redirects to prevent sensitive information leakage Moderate TuxCare License Agreement CVE-2025-4673 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-29458: fix out-of-bounds read and segmentation violation Important TuxCare License Agreement CVE-2022-29458 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-36617: fix mishandling invalid URLs that have specific characters in URI parser to prevent ReDoS issue Moderate TuxCare License Agreement CVE-2023-36617 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2020-18770: fix denial-of-service issue in zzip_disk_entry_to_file_header function in mmapped.c Moderate TuxCare License Agreement CVE-2020-18770 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52615: fix issue with Avahi-daemon relying on fixed source ports for wide-area DNS queries to prevent attacks with injected malicious DNS responses Moderate TuxCare License Agreement CVE-2024-52615 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-48367: prevent unauthenticated connections causing IP protocol errors by implementing authentication checks Moderate TuxCare License Agreement CVE-2025-48367 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-3576: prevent spoofing vulnerability in GSSAPI-protected messages using RC4-HMAC-MD5 due to weaknesses in MD5 checksum design - CVE-2025-24528: prevent overflow when calculating ulog block size Moderate TuxCare License Agreement CVE-2025-24528 CVE-2025-3576 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-28863: prevent extraction in excessively deep sub-folders to address unlimited sub-folders vulnerability Moderate TuxCare License Agreement CVE-2025-23085 CVE-2024-28863 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-25629: prevent reading before buffer start when parsing config files containing an embedded NULL as the first character of a line by discarding such lines in ares__read_line() Moderate TuxCare License Agreement CVE-2024-25629 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to 2.48.5. The following CVEs were fixed: - CVE-2025-6558: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-31273: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-31278: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-43212: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-43216: fix processing maliciously crafted web content which may lead to an unexpected Safari crash - CVE-2025-43228: fix issue with visiting a malicious website which may lead to address bar spoofing - CVE-2025-24189: fix processing maliciously crafted web content which may lead to memory corruption - CVE-2025-31205: fix issue with a malicious website which may exfiltrate data cross-origin - CVE-2025-24208: fix loading a malicious iframe which may lead to a cross-site scripting attack - CVE-2024-54551: fix processing web content which may lead to a denial-of-service - CVE-2024-44192: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-54467: fix issue with a malicious website which may exfiltrate data cross-origin - CVE-2025-24162: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-54502: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44244: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44185: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2024-44187: fix issue wit a malicious website may exfiltrate data cross-origin - CVE-2024-40866: fix issue with visiting a malicious website which may lead to address bar spoofing Important TuxCare License Agreement CVE-2025-43216 CVE-2025-43212 CVE-2025-6558 CVE-2025-31273 CVE-2025-24189 CVE-2025-31205 CVE-2025-24162 CVE-2024-44244 CVE-2024-54502 CVE-2025-24208 CVE-2024-54551 CVE-2024-54467 CVE-2024-44192 CVE-2024-44187 CVE-2024-44185 CVE-2024-40866 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-53580: fix segmentation violation in iperf_exchange_parameters() function Important TuxCare License Agreement CVE-2024-53580 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5283: fix use after free vulnerability in libvpx to prevent potential heap corruption via crafted HTML page Important TuxCare License Agreement CVE-2025-5283 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8058: fix double free vulnerability in regcomp function Moderate TuxCare License Agreement CVE-2025-8058 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-4674: disallow multiple VCS metadata dirs in one module to prevent VCS injection attacks Important TuxCare License Agreement CVE-2025-4674 CVE-2025-22871 CVE-2023-29409 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9407: validate input for bind-propagation option in Dockerfile RUN --mount instruction to prevent arbitrary parameter passing and potential file modification Moderate TuxCare License Agreement CVE-2024-9407 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-22020: forbid data URLs in network imports to mitigate security flaw allowing bypass of network import restrictions Moderate TuxCare License Agreement CVE-2023-46809 CVE-2024-22020 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5388: fix timing attack against RSA decryption (in TLS) r=jschanck Moderate TuxCare License Agreement CVE-2023-5388 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-27613: fix issue with file creation and truncation when running gitk without additional command arguments from untrusted repositories Moderate TuxCare License Agreement CVE-2025-27613 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-48989: fix improper resource shutdown vulnerability to prevent reset attack Important TuxCare License Agreement CVE-2025-48989 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-7254: prevent stack overflow by limiting recursion depth when parsing nested Protocol Buffers data Important TuxCare License Agreement CVE-2024-7254 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-23552: sanitize SVG inputs in GeoMap by adding a dompurify preprocessor step, preventing stored XSS where malicious SVG could execute arbitrary JavaScript Moderate TuxCare License Agreement CVE-2024-1313 CVE-2022-23552 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8194: fix tarfile deadlock/infinite loop by rejecting negative member offsets Important TuxCare License Agreement CVE-2025-8194 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attacks in mod_ssl configurations Important TuxCare License Agreement CVE-2025-49630 CVE-2025-49812 CVE-2024-47252 CVE-2025-23048 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-12087: fix a path traversal issue in --inc-recursive mode that let a malicious server escape the destination directory Important TuxCare License Agreement CVE-2024-12087 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-22025: fix resource exhaustion DoS vulnerability in fetch() function Moderate TuxCare License Agreement CVE-2024-22025 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-44441: fix heap-based buffer overflow vulnerability in DDS file parsing Important TuxCare License Agreement CVE-2023-44441 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5318: fix out-of-bounds read in sftp_handle function Important TuxCare License Agreement CVE-2025-5318 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-44444: fix off-by-one error in PSP file parsing to prevent remote code execution (ZDI-CAN-22097) Important TuxCare License Agreement CVE-2023-44444 CVE-2023-44443 CVE-2023-44442 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2020-27827: fix memory allocation issue caused by specially crafted LLDP packets Important TuxCare License Agreement CVE-2020-27827 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update Intel CPU microcode to 20250812, addresses: CVE-2024-28047, CVE-2024-31157, CVE-2024-39279, CVE-2024-28956, CVE-2024-43420, CVE-2024-45332, CVE-2025-24495, CVE-2025-20623, CVE-2025-20012 - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa000100; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003d0; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x123; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000410; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002e0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x25; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000362; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002b3; Moderate TuxCare License Agreement CVE-2025-20012 CVE-2025-24495 CVE-2024-28956 CVE-2024-39279 CVE-2024-31157 CVE-2024-43420 CVE-2024-28047 CVE-2025-20623 CVE-2024-45332 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdk_pixbuf__jpeg_image_load_increment() Important TuxCare License Agreement CVE-2025-7345 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - mm/hugetlb: unshare page tables during VMA split, not before {CVE-2025-38084} - hugetlb: unshare some PMDs when splitting VMAs {CVE-2025-38084} - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464} - vsock: Fix transport_* TOCTOU {CVE-2025-38461} - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200} - net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-37914} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - udp: Fix memory accounting leak. {CVE-2025-22058} - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177} - sch_htb: make htb_deactivate() idempotent {CVE-2025-38177} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177} - sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - net: fix udp gso skb_segment after pull from frag_list {CVE-2025-38124} Important TuxCare License Agreement CVE-2025-38461 CVE-2025-38124 CVE-2025-22058 CVE-2025-37823 CVE-2025-38200 CVE-2025-37914 CVE-2025-38084 CVE-2025-38352 CVE-2025-38177 CVE-2025-38000 CVE-2025-38464 CVE-2025-38211 CVE-2025-38350 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8194: fix defect in 'TarFile' extraction and entry enumeration APIs to prevent infinite loop and deadlock when processing tar archives with negative offsets Important TuxCare License Agreement CVE-2025-8194 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-8929: Security fix for heap buffer over-read in mysqlnd leading to possible information disclosure (GHSA-h35g-vwh6-m678) Moderate TuxCare License Agreement CVE-2024-8929 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-38711: fix a NULL pointer dereference in IKEv1 Quick Mode with ID_IPV4_ADDR/ID_IPV6_ADDR that causes a crash and restart of the pluto daemon when it receives an IDcr payload with ID_FQDN Moderate TuxCare License Agreement CVE-2023-38711 CVE-2023-38710 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-38712: fix a NULL pointer dereference caused by a duplicated Delete/Notify message which causes the pluto daemon to crash and restart Moderate TuxCare License Agreement CVE-2023-38712 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-33460: fix memory leak in yajl_tree_parse function Moderate TuxCare License Agreement CVE-2023-33460 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-39908: fix performance issue caused by using repeated characters to avoid DoS vulnerabilities when it parses an XML - CVE-2024-43398: improve namespace conflicted attribute check to avoid DoS vulnerability when it parses an XML Moderate TuxCare License Agreement CVE-2024-43398 CVE-2024-39908 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - tls: always refresh the queue when reading sock {CVE-2025-38471} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - i2c/designware: Fix an initialization issue {CVE-2025-38380} - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - mm/khugepaged: fix GUP-fast interaction by sending IPI - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() {CVE-2025-21867} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - ext4: avoid journaling sb update on error if journal is destroying {CVE-2025-22113} - ext4: define ext4_journal_destroy wrapper - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013} - Bluetooth: Remove BT_HS {CVE-2024-38620} - block, bfq: fix bfqq uaf in bfq_limit_depth() {CVE-2024-53166} - dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763} - bpf: Fix helper writes to read-only maps (alt version) {CVE-2024-49861} - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers {CVE-2023-52621} - netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556} - net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273} - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890} - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - padata: fix UAF in padata_reorder {CVE-2025-21727} - RDMA/mlx5: Fix page_size variable overflow {CVE-2025-22091} Important TuxCare License Agreement CVE-2025-38273 CVE-2024-38620 CVE-2024-38556 CVE-2025-38471 CVE-2025-37890 CVE-2025-38052 CVE-2022-49788 CVE-2025-22113 CVE-2024-36013 CVE-2024-26763 CVE-2024-49861 CVE-2023-52621 CVE-2023-52621 CVE-2024-50038 CVE-2024-41014 CVE-2024-41014 CVE-2024-40901 CVE-2024-40901 CVE-2025-22091 CVE-2025-38079 CVE-2024-26763 CVE-2025-38380 CVE-2024-50038 CVE-2025-38159 CVE-2024-38556 CVE-2025-38250 CVE-2024-53166 CVE-2025-21727 CVE-2025-38085 CVE-2025-21867 CVE-2024-49861 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-1941: fix parsing vulnerability in MessageSet type to prevent out of memory failures and DoS attacks Important TuxCare License Agreement CVE-2022-1941 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52006: fix issue where single Carriage Return characters could be interpreted as newlines by some ecosystems in Git's line-based protocol Moderate TuxCare License Agreement CVE-2024-52006 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-50612: fix out-of-bounds read in vorbis_analysis_wrote in ogg_vorbis.c Moderate TuxCare License Agreement CVE-2024-50612 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-22150: fix issue where undici used Math.random() to choose boundary for multipart/form-data request, now uses secure random number generator Moderate TuxCare License Agreement CVE-2025-22150 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-39307: fix omit error from http response when user does not exist Moderate TuxCare License Agreement CVE-2022-39307 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8714: prevent execution of unsafe meta-commands in plain-text dumps (pg_dump/pg_restore/pg_dumpall, psql restricted mode) - CVE-2025-8715: sanitize newlines in object names to avoid unsafe SQL comments in dumps Important TuxCare License Agreement CVE-2025-8715 CVE-2025-8714 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-27982: prevent HTTP request smuggling by properly interpreting content-length header Moderate TuxCare License Agreement CVE-2024-27982 CVE-2024-28182 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5473: fix parsing integer overflow issue in ICO file to prevent remote code execution Important TuxCare License Agreement CVE-2025-5473 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-41910: fix out-of-bounds read on heap memory in cdp_decode Critical TuxCare License Agreement CVE-2023-41910 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-48797: fix TGA loader buffer overflows by validating colormap alpha, color IDs, bytes-per-pixel, and limiting error messages Important TuxCare License Agreement CVE-2025-48797 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 - proc: fix a dentry lock race between release_task and lookup - scsi: aacraid: Stop using PCI_IRQ_AFFINITY - scsi: aacraid: Remove useless code - scsi: aacraid: Remove unused aac_check_health() - scsi: aacraid: struct {user,}sgmap{,64,raw}: Replace 1-element arrays with flexible arrays - scsi: aacraid: Rearrange order of struct aac_srb_unit - scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with flexible array - scsi: aacraid: union aac_init: Replace 1-element array with flexible array - scsi: aacraid: aachba: Replace snprintf() with the safer scnprintf() variant - Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" - scsi: aacraid: Avoid -Warray-bounds warning - scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity - scsi: aacraid: Replace all non-returning strlcpy with strscpy - scsi: aacraid: Declare SCSI host template const - scsi: aacraid: Drop redundant pci_enable_pcie_error_reporting() - scsi: aacraid: Allocate cmd_priv with scsicmd - scsi: aacraid: Remove redundant "the" - scsi: aacraid: Fix undefined behavior due to shift overflowing the constant - scsi: aacraid: Clean up some inconsistent indenting - scsi: aacraid: Move the SCSI pointer to private command data - scsi: aacraid: Fix spelling of "its" - scsi: aacraid: Call scsi_done() directly - scsi: aacraid: Introduce aac_scsi_done() - scsi: aacraid: Use scsi_cmd_to_rq() instead of scsi_cmnd.request - scsi: aacraid: Remove an unused include - x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler {CVE-2024-25743} - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() {CVE-2025-38550} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - PM: hibernate: defer device probing when resuming from hibernation {CVE-2022-50202} - net: fix UaF in netns ops registration error path {CVE-2023-52999} - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed {CVE-2023-52999} - usb: typec: fix potential array underflow in ucsi_ccg_sync_control() {CVE-2024-53203} - soundwire: cadence: fix invalid PDI offset {CVE-2024-38635} - drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939} - netns: Make get_net_ns() handle zero refcount net {CVE-2024-40958} - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() {CVE-2024-39487} - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} - wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() {CVE-2022-48632} - net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739} - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv {CVE-2021-47459} - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg {CVE-2021-47596} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974} - crypto: qat - fix double free during reset - media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445} - fs/smb/client: Reset password pointer to NULL {CVE-2023-5345} Important TuxCare License Agreement CVE-2024-26939 CVE-2024-26939 CVE-2022-50356 CVE-2025-38332 CVE-2022-50202 CVE-2024-38635 CVE-2024-38635 CVE-2024-36921 CVE-2024-36921 CVE-2023-52777 CVE-2023-52530 CVE-2022-48632 CVE-2022-48632 CVE-2024-26739 CVE-2021-47459 CVE-2021-47459 CVE-2024-26974 CVE-2023-52445 CVE-2023-5345 CVE-2024-39487 CVE-2025-38550 CVE-2024-26739 CVE-2023-52777 CVE-2024-53203 CVE-2024-53203 CVE-2024-26974 CVE-2023-5345 CVE-2024-25743 CVE-2023-52530 CVE-2023-52999 CVE-2024-25743 CVE-2024-39487 CVE-2023-52445 CVE-2021-47596 CVE-2021-47596 CVE-2024-40958 CVE-2024-40958 CVE-2024-26982 CVE-2023-52999 CVE-2024-26982 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8176: fix use after free vulnerability in get_histogram function that prevents proper scanline reading and processing in tools/tiffmedian.c - CVE-2025-8177: fix array overflow in thumbnail generation that could cause buffer overflow when processing malformed TIFF files in tools/thumbnail.c Important TuxCare License Agreement CVE-2025-8176 CVE-2025-8177 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-43612: fix out-of-bounds heap read in sonmp_decode function Important TuxCare License Agreement CVE-2021-43612 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-48622: fix heap memory corruption issue in ANI decoder to prevent denial of service or code execution attack Important TuxCare License Agreement CVE-2022-48622 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-48798: fix XCF loader use-after-free issues by properly managing layer/channel resources and ensuring safe cleanup during parsing Important TuxCare License Agreement CVE-2025-48798 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-58060: fix authentication bypass with AuthType Negotiate Important TuxCare License Agreement CVE-2025-58060 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32990: fix memory corruption in when parsing a template file - CVE-2025-32988: fix double-free vulnerability in export logic of Subject Alternative Name (SAN) entries containing an otherName Important TuxCare License Agreement CVE-2025-32990 CVE-2025-32988 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-9714: preserve recursion depth across recursive calls to prevent stack overflow in XPath evaluation Moderate TuxCare License Agreement CVE-2025-9714 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-31047: fix denial of service issue in convert function of exrmultipart.cpp Low TuxCare License Agreement CVE-2024-31047 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-31486: fix insecure default TLS configuration Important TuxCare License Agreement CVE-2023-31486 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-31484: verify TLS certificates when downloading distributions over HTTPS Important TuxCare License Agreement CVE-2023-31484 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8837: fix use after free vulnerability in jpc_dec_dump function Important TuxCare License Agreement CVE-2025-8837 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes Important TuxCare License Agreement CVE-2025-9566 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-4207: fix buffer over-read in GB18030 encoding validation to prevent temporary denial of service Moderate TuxCare License Agreement CVE-2025-4207 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-13176: fix timing side-channel in ECDSA signature computation vulnerability Moderate TuxCare License Agreement CVE-2024-13176 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832} - mm: fix zswap writeback race condition {CVE-2023-53178} - dm array: fix releasing a faulty array block twice in dm_array_cursor_end {CVE-2024-57929} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - gpio: davinci: Validate the obtained number of IRQs {CVE-2024-42092} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - Bluetooth: hci_sock: Fix not validating setsockopt user input {CVE-2024-35963} - Bluetooth: ISO: Fix not validating setsockopt user input {CVE-2024-35964} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35967} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} - wifi: mwifiex: avoid possible NULL skb pointer dereference {CVE-2023-53384} - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request {CVE-2023-53380} - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343} - thermal: core: prevent potential string overflow {CVE-2023-52868} - drm/amdkfd: Fix shift out-of-bounds issue {CVE-2023-52816} - drm/vkms: Fix null-ptr-deref in vkms_release() {CVE-2022-50369} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail {CVE-2024-40940} - ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - platform/x86: wmi: remove unnecessary initializations - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice {CVE-2025-38001} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - kobject_uevent: Fix OOB access within zap_modalias_env() {CVE-2024-42292} - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() {CVE-2023-53401} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - drm/radeon: possible buffer overflow {CVE-2023-52867} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - wifi: mac80211_hwsim: Fix possible NULL dereference {CVE-2023-53209} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - wifi: iwlwifi: fw: fix memory leak in debugfs {CVE-2023-53422} - drm/amdgpu: fix memory leak in mes self test {CVE-2023-53370} - skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354} - md/raid10: fix leak of 'r10bio->remaining' for recovery {CVE-2023-53299} - nfsd: call op_release, even when op_func returns an error {CVE-2023-53241} - ppdev: Add an error check in register_device {CVE-2024-36015} - wifi: cfg80211: check A-MSDU format more carefully {CVE-2024-35937} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields {CVE-2024-26882} Important TuxCare License Agreement CVE-2023-52835 CVE-2024-53214 CVE-2024-41069 CVE-2023-52816 CVE-2024-42092 CVE-2023-53380 CVE-2022-50369 CVE-2023-53401 CVE-2025-38001 CVE-2025-21704 CVE-2024-52332 CVE-2025-38498 CVE-2023-53125 CVE-2023-53241 CVE-2023-53354 CVE-2023-53299 CVE-2023-53370 CVE-2024-56616 CVE-2024-35964 CVE-2024-35965 CVE-2024-35967 CVE-2024-42292 CVE-2024-40940 CVE-2023-52867 CVE-2024-40940 CVE-2024-36015 CVE-2024-39499 CVE-2024-35937 CVE-2024-35937 CVE-2023-52864 CVE-2023-52864 CVE-2023-52764 CVE-2023-53209 CVE-2023-52835 CVE-2023-52578 CVE-2023-52578 CVE-2024-36015 CVE-2023-52867 CVE-2023-53384 CVE-2024-35963 CVE-2024-35966 CVE-2024-57929 CVE-2024-35939 CVE-2023-52868 CVE-2023-53178 CVE-2023-53422 CVE-2023-53343 CVE-2024-26832 CVE-2021-47497 CVE-2024-35939 CVE-2023-52796 CVE-2023-52796 CVE-2023-52764 CVE-2024-39499 CVE-2021-47497 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2020-36518: fix denial of service via a large depth of nested objects Important TuxCare License Agreement CVE-2020-36518 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-11584: fix systemd socket unit permission vulnerability to prevent unprivileged user from triggering hotplug-hook commands Important TuxCare License Agreement CVE-2024-6174 CVE-2024-11584 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8836: fix manipulation in function jpc_floorlog2 to prevent reachable assertion Moderate TuxCare License Agreement CVE-2025-8835 CVE-2025-8836 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-22745: fix out-of-bounds access in tss2_rc layer handler Moderate TuxCare License Agreement CVE-2023-22745 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-3750: fix for DMA reentrancy use-after-free - CVE-2023-2680: final fix for CVE-2021-3750 - CVE-2023-0330: fix reentrancy in LSI53c895a SCSI controller Important TuxCare License Agreement CVE-2023-2680 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-2977: correct left length calculation to fix buffer overrun bug Important TuxCare License Agreement CVE-2023-2977 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-1786: fix leak of sensitive user/vendor data and enforce 640 perms on cloud-init.log Moderate TuxCare License Agreement CVE-2023-1786 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-27371: Fix improper parsing of multipart/form-data boundary in MHD_create_post_processor() to prevent remote DoS vulnerability Moderate TuxCare License Agreement CVE-2023-27371 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-55304: add new method appendIccProfile to fix quadratic performance issue Moderate TuxCare License Agreement CVE-2025-55304 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-49844: prevent authenticated users from manipulating the garbage collector and triggering a use-after-free Important TuxCare License Agreement CVE-2025-49844 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-0395: fix underallocation of abort_msg_s struct that could lead to buffer overflow when printing assertion failures Moderate TuxCare License Agreement CVE-2025-0395 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-41244: fix local privilege escalation in the SDMP plugin by disabling execution of the get-versions.sh script (disabled by default) Important TuxCare License Agreement CVE-2025-41244 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836} - netfilter: ipset: Fix suspicious rcu_dereference_protected() {CVE-2024-40993} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type {CVE-2024-39503} - netfilter: ipset: Missing gc cancellations fixed {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc {CVE-2024-39503} - netfilter: ipset: fix performance regression in swap operation {CVE-2024-26910} - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test {CVE-2024-26910} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - scsi: mpt3sas: Fix a memory leak {CVE-2023-53512} - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() {CVE-2023-53464} - wifi: ath11k: fix deinitialization of firmware resources {CVE-2023-53532} - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() {CVE-2022-50464} - ionic: catch failure from devlink_alloc {CVE-2023-53470} - enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} - gpiolib: cdev: fix uninitialised kfifo {CVE-2024-36898} - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync {CVE-2022-50447} - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP {CVE-2024-36974} - ext4: Fix function prototype mismatch for ext4_feat_ktype {CVE-2023-53224} - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation {CVE-2023-53477} - netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042} - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry {CVE-2025-38472} - Bluetooth: qca: add missing firmware sanity checks {CVE-2024-36880} - Bluetooth: qca: fix info leak when fetching fw build id {CVE-2024-36032} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} - drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} - drm/vc4: don't check if plane->state->fb == state->fb {CVE-2024-35932} - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create {CVE-2023-53263} - cifs: fix oops during encryption {CVE-2022-50341} - smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} - smb: client: fix race with concurrent opens in rename(2) {CVE-2025-39825} - ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL {CVE-2023-52697} - blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none {CVE-2023-53292} - mlx5: fix possible ptp queue fifo use-after-free {CVE-2023-53398} - sctp: check send stream number after wait_for_sndbuf {CVE-2023-53296} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - scsi: mpi3mr: Use number of bits to manage bitmap sizes {CVE-2023-53376} - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue {CVE-2023-53280} - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data {CVE-2023-53232} - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185} - fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731} - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395} - ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value {CVE-2022-50327} - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() {CVE-2023-53220} - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() {CVE-2022-50272} Important TuxCare License Agreement CVE-2025-38472 CVE-2023-53521 CVE-2022-50464 CVE-2023-53365 CVE-2024-36880 CVE-2022-50341 CVE-2024-41042 CVE-2023-53232 CVE-2024-40993 CVE-2023-53470 CVE-2023-53464 CVE-2024-42119 CVE-2024-38659 CVE-2023-53395 CVE-2023-53398 CVE-2023-53376 CVE-2023-53297 CVE-2023-53263 CVE-2023-53280 CVE-2022-50272 CVE-2022-50327 CVE-2025-38718 CVE-2023-53296 CVE-2023-53224 CVE-2023-53477 CVE-2023-53512 CVE-2023-53532 CVE-2022-50447 CVE-2023-53185 CVE-2025-39825 CVE-2025-38527 CVE-2023-53220 CVE-2023-53292 CVE-2024-36032 CVE-2024-35932 CVE-2023-52836 CVE-2024-36898 CVE-2024-57876 CVE-2024-36974 CVE-2023-52731 CVE-2023-52697 CVE-2024-36974 CVE-2024-26910 CVE-2023-52697 CVE-2023-52731 CVE-2024-39503 CVE-2024-26910 CVE-2024-57876 CVE-2024-41042 CVE-2024-39503 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-48468: fix unsigned integer overflow in parse_required_member Moderate TuxCare License Agreement CVE-2022-48468 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-58364: fix handling of extension tag in ipp_read_io() Moderate TuxCare License Agreement CVE-2025-58364 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-38552: use tamper-proof integrity check function to prevent tampering with Hash class internals in policy mechanism Important TuxCare License Agreement CVE-2023-38552 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5088: fix incorrect guest I/O redirection to offset 0 that could allow data overwrite at LBA 0 and potential VM escape Important TuxCare License Agreement CVE-2023-5088 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32365: prevent out-of-bounds reads in JBIG2Bitmap::combine function in JBIG2Stream.cc Important TuxCare License Agreement CVE-2025-32365 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-1094: fix potential SQL injections allowed by an improper encoding validation in data quoting functions Important TuxCare License Agreement CVE-2025-1094 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-47907: avoid closing Rows in database/sql while scanning is in progress Important TuxCare License Agreement CVE-2025-47907 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-7409: fix improper synchronization during socket closure to prevent DoS attack Important TuxCare License Agreement CVE-2024-7409 CVE-2024-4467 CVE-2024-3446 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-50349: fix issue where URLs can obfuscate the host asking for credentials, by using strbuf_add_percentencode to sanitise the host name and port Low TuxCare License Agreement CVE-2024-50349 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - nfs: fix possible null-ptr-deref when parsing param {CVE-2022-50455} - KVM: arm64: Disassociate vcpus from redistributor region on teardown {CVE-2024-40989} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg {CVE-2024-56633} - ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} - ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() {CVE-2023-53483} - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} - KVM: nSVM: Check instead of asserting on nested TSC scaling support {CVE-2023-53663} - ice: Don't tx before switchdev is fully configured {CVE-2023-53657} - rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed {CVE-2023-53655} - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() {CVE-2023-53623} - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50485} - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode {CVE-2022-50485} - ext4: add helper to check quota inums {CVE-2022-50485} - ext4: fix bug_on in __es_tree_search caused by bad quota inode {CVE-2022-50485} - swiotlb: Fix double-allocation of slots due to broken alignment handling {CVE-2024-35814} - swiotlb: fix a braino in the alignment check fix {CVE-2024-35814} - swiotlb: fix slot alignment checks {CVE-2024-35814} - swiotlb: fix the deadlock in swiotlb_do_find_slots - drm/radeon: free iio for atombios when driver shutdown {CVE-2023-53453} Important TuxCare License Agreement CVE-2025-39757 CVE-2024-35814 CVE-2025-38556 CVE-2023-53623 CVE-2022-50455 CVE-2024-56633 CVE-2022-50485 CVE-2023-53373 CVE-2023-53483 CVE-2023-53663 CVE-2023-53655 CVE-2023-53657 CVE-2023-53453 CVE-2024-56570 CVE-2024-40989 CVE-2024-35814 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9676: fix symlink traversal vulnerability in containers/storage library to prevent hanging and denial of service when running malicious images via automatically assigned user namespace Moderate TuxCare License Agreement CVE-2024-9676 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang to fix CVE-2023-24540 (sanitize templates with whitespace outside the allowed character set in JavaScript contexts) Critical TuxCare License Agreement CVE-2023-24540 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-38406: fix BGP Flowspec NLRI overflow vulnerability where zero-length packets could cause packet processing errors Critical TuxCare License Agreement CVE-2023-38406 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-39976: Fix buffer overflow in log_blackbox.c by correctly limiting log message length Critical TuxCare License Agreement CVE-2023-39976 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-51714: fix incorrect HPack integer overflow check in hpacktable.cpp Critical TuxCare License Agreement CVE-2023-51714 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - update to 42.2.28 - CVE-2024-1597: fix SQL injection in PostgreSQL JDBC simple query mode Critical TuxCare License Agreement CVE-2024-1597 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-46817: fix integer overflow vulnerability in Lua scripting Critical TuxCare License Agreement CVE-2025-46817 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-24963: Fix integer overflow in apr_encode functions that could lead to out-of-bounds write Critical TuxCare License Agreement CVE-2022-24963 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5987: fix missing error detection in ChaCha20 initialization that could leave cipher context partially uninitialized Important TuxCare License Agreement CVE-2025-5372 CVE-2025-5987 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-39333: fix maliciously crafted export names injection of JavaScript code Moderate TuxCare License Agreement CVE-2023-39333 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to 2.48.7. The following CVEs were fixed: - CVE-2025-43272: fix processing maliciously crafted web content which may lead to an unexpected process/Safari crash - CVE-2025-43342: fix processing maliciously crafted web content which may lead to an unexpected process crash - CVE-2025-43356: fix where a website may access sensor information without user consent - CVE-2025-43368: fix processing maliciously crafted web content which may lead to an unexpected crash Important TuxCare License Agreement CVE-2025-43272 CVE-2025-43356 CVE-2025-43368 CVE-2025-43342 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-24258: fix memory leak in glutAddSubMenu function - CVE-2024-24259: fix memory leak in glutAddMenuEntry function Important TuxCare License Agreement CVE-2024-24258 CVE-2024-24259 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-36440: fix heap-buffer-overflow in peek_for_as4_capability when reading BGP OPEN extended optional parameters - CVE-2023-31490: fix insufficient stream data validation in BGP prefix SID attributes processing - CVE-2023-38407: fix out-of-bounds read in BGP labeled unicast parsing - CVE-2023-41909: fix implicit withdrawal handling for BGP flowspec without attributes Important TuxCare License Agreement CVE-2023-31490 CVE-2023-41909 CVE-2022-36440 CVE-2023-38407 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-24806: fix issue where uv_getaddrinfo function truncates hostnames, potentially allowing crafted payloads to resolve to unintended IP addresses, by handling hostname_ascii variable properly in uv_getaddrinfo and uv__idna_toascii functions Important TuxCare License Agreement CVE-2024-24806 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang to fix CVE-2024-34156 (stack exhaustion in encoding/gob when decoding deeply nested structures) Important TuxCare License Agreement CVE-2024-34156 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-41358: fix crash when processing NLRIs with zero attribute length - CVE-2023-47235: fix EOR handling to avoid unwanted processing of malformed attributes - CVE-2023-46753: fix mandatory attributes check for UPDATE messages with unknown transit attributes - CVE-2023-47234: fix handling NLRIs when MP_UNREACH_NLRI received without mandatory attributes Important TuxCare License Agreement CVE-2023-41358 CVE-2023-46753 CVE-2023-47235 CVE-2023-47234 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-47947: fix potential DoS by adding ARGS to the sanitize list only if it's not added yet Important TuxCare License Agreement CVE-2025-47947 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-3727: fix path traversal vulnerability with full digest validation in all containers/image transports - CVE-2025-27144: fix excessive memory consumption vulnerability in github.com/go-jose/go-jose/v3 library Important TuxCare License Agreement CVE-2024-3727 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-3064: prevent excessive CPU and memory consumption when parsing YAML documents Important TuxCare License Agreement CVE-2022-3064 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - bpf: Fix re-attachment branch in bpf_tracing_prog_attach {CVE-2024-26591} - ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775} - smb: client: fix OOB in receive_encrypted_standard() {CVE-2024-0565} - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier {CVE-2023-52449} - net: prevent mss overflow in skb_segment() {CVE-2023-52435} - smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434} - atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780} - ida: Fix crash in ida_free when the bitmap is empty {CVE-2023-6915} - nvmet: nul-terminate the NQNs passed in the connect command {CVE-2023-6121} - netfilter: nf_tables: Reject tables of unsupported family {CVE-2023-6040} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work {CVE-2023-1989} - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() {CVE-2023-1652} - x86/bugs: Flush IBP in ib_prctl_set() {CVE-2023-0045} - Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896} - x86: Clear .brk area at early boot {CVE-2022-36123} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424} - Fix double fget() in vhost_net_set_backend() {CVE-2023-1838} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380} - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197} - relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268} - ipv6: rpl: Fix Route of Death. {CVE-2023-2156} - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-2156} - net: rpl: fix rpl header size calculation {CVE-2023-2156} - memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141} - ovl: fix use after free in struct ovl_aio_req {CVE-2023-1252} - drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042} - netfilter: nf_tables: reject QUEUE/DROP verdict parameters {CVE-2024-1086} - perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931} - perf: Fix perf_event_validate_size() {CVE-2023-6931} - drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-51043} - nvmet-tcp: Fix the H2C expected PDU len calculation {CVE-2023-6356} - nvmet-tcp: remove boilerplate code {CVE-2023-6356} - nvmet-tcp: fix a crash in nvmet_req_complete() {CVE-2023-6356} - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length {CVE-2023-6356} - net: tls, update curr on splice as well {CVE-2024-0646} - smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610} - smb: client: fix potential OOB in cifs_dump_detail() {CVE-2023-6610} - smb: client: fix OOB in smbCalcSize() {CVE-2023-6606} - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932} - RDMA/core: Update CMA destination address on rdma_resolve_addr {CVE-2023-2176} - RDMA/core: Refactor rdma_bind_addr {CVE-2023-2176} - nfp: fix use-after-free in area_cache_get() {CVE-2022-3545} - netfilter: nf_tables: skip bound chain on rule flush {CVE-2023-3777} - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283} - drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858} - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623} - net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623} - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567} - nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178} - net: tun: fix bugs for oversize packet when napi frags enabled {CVE-2023-3812} - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c {CVE-2023-42753} - bpf: Fix incorrect verifier pruning due to missing register precision taints {CVE-2023-2163} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4206} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4207} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4208} - net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609} - libceph: harden msgr2.1 frame segment length checks {CVE-2023-44466} Critical TuxCare License Agreement CVE-2022-36123 CVE-2023-0045 CVE-2023-3609 CVE-2023-44466 CVE-2023-51780 CVE-2023-6915 CVE-2023-2176 CVE-2023-52434 CVE-2022-3545 CVE-2023-6610 CVE-2023-1989 CVE-2023-1380 CVE-2023-1652 CVE-2023-3141 CVE-2023-3567 CVE-2023-3812 CVE-2023-2163 CVE-2023-4623 CVE-2023-42753 CVE-2024-0565 CVE-2024-0646 CVE-2024-0775 CVE-2023-51043 CVE-2023-6040 CVE-2022-41858 CVE-2023-3268 CVE-2023-6356 CVE-2023-1252 CVE-2022-45934 CVE-2024-1086 CVE-2023-6121 CVE-2023-40283 CVE-2022-42896 CVE-2023-4207 CVE-2022-3424 CVE-2023-2156 CVE-2023-3777 CVE-2023-4206 CVE-2023-5178 CVE-2023-6932 CVE-2023-6931 CVE-2023-51042 CVE-2023-52435 CVE-2023-52449 CVE-2024-26591 CVE-2023-4208 CVE-2023-6606 CVE-2023-1838 CVE-2023-39197 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests {CVE-2023-52474} - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). {CVE-2023-4622} - sched/rt: pick_next_rt_entity(): check list_entry {CVE-2023-1077} - RDMA/irdma: Prevent zero-length STAG registration {CVE-2023-25775} - block: add check that partition length needs to be aligned with block size {CVE-2023-52458} - bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS {CVE-2024-26589} - bpf: fix check for attempt to corrupt spilled pointer {CVE-2023-52462} - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache {CVE-2024-26598} - ext4: regenerate buddy after block freeing failed if under fc replay {CVE-2024-26601} - ext4: allow ext4_get_group_info() to fail {CVE-2024-26601} - mlxsw: spectrum_acl_tcam: Fix stack corruption {CVE-2024-26586} - EDAC/thunderx: Fix possible out-of-bounds string access {CVE-2023-52464} - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() {CVE-2023-52470} - drivers/amd/pm: fix a use-after-free in kv_parse_power_table {CVE-2023-52469} - md/raid5: fix atomicity violation in raid5_cache_count {CVE-2024-23307} - igb: set max size RX buffer when store bad packet is enabled {CVE-2023-45871} - netfilter: nft_set_rbtree: skip end interval element from gc {CVE-2024-26581} - netfilter: nf_tables: check if catch-all set element is active in next generation {CVE-2024-1085} - netfilter: nf_tables: skip set commit for deleted/destroyed sets {CVE-2024-0193} - netfilter: nft_set_pipapo: skip inactive elements during set walk {CVE-2023-6817} - netfilter: nf_tables: split async and sync catchall in two functions {CVE-2023-4244} - netfilter: nf_tables: remove catchall element in GC sync path {CVE-2023-4244} - netfilter: nf_tables: expose opaque set element as struct nft_elem_priv {CVE-2023-4244} - netfilter: nf_tables: set backend .flush always succeeds {CVE-2023-4244} - netfilter: nft_set_pipapo: no need to call pipapo_deactivate() from flush {CVE-2023-4244} - netfilter: nf_tables: work around newrule after chain binding {CVE-2023-4244} - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure {CVE-2023-4244} - netfilter: nf_tables: fix memleak when more than 255 elements expired {CVE-2023-4244} - netfilter: nf_tables: disable toggling dormant table state more than once {CVE-2023-4244} - netfilter: nf_tables: disallow element removal on anonymous sets {CVE-2023-4244} - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration {CVE-2023-4244} - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails {CVE-2023-4244} - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention {CVE-2023-4244} - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC {CVE-2023-4244} - netfilter: nf_tables: disallow rule removal from chain binding {CVE-2023-4244} - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction {CVE-2023-4244} - netfilter: nf_tables: defer gc run if previous batch is still pending {CVE-2023-4244} - netfilter: nf_tables: fix out of memory error handling {CVE-2023-4244} - netfilter: nf_tables: use correct lock to protect gc_list {CVE-2023-4244} - netfilter: nf_tables: GC transaction race with abort path {CVE-2023-4244} - netfilter: nf_tables: flush pending destroy work before netlink notifier {CVE-2023-4244} - netfilter: nft_dynset: disallow object maps {CVE-2023-4244} - netfilter: nf_tables: GC transaction race with netns dismantle {CVE-2023-4244} - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path {CVE-2023-4244} - netfilter: nf_tables: don't fail inserts if duplicate has expired {CVE-2023-4244} - netfilter: nf_tables: deactivate catchall elements in next generation {CVE-2023-4244} - netfilter: nf_tables: fix kdoc warnings after gc rework {CVE-2023-4244} - netfilter: nf_tables: fix false-positive lockdep splat {CVE-2023-4244} - netfilter: nf_tables: remove busy mark and gc batch API {CVE-2023-4244} - netfilter: nft_set_hash: mark set element as dead when deleting from packet path {CVE-2023-4244} - netfilter: nf_tables: adapt set backend to use GC transaction API {CVE-2023-4244} - netfilter: nft_set_rbtree: fix overlap expiration walk {CVE-2023-4244} - netfilter: nf_tables: GC transaction API to avoid race with control plane {CVE-2023-4244} - netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-4244} - netfilter: nf_tables: skip bound chain in netns release path {CVE-2023-4244} - netfilter: nf_tables: fix spurious set element insertion failure {CVE-2023-4244} - netfilter: nf_tables: report use refcount overflow {CVE-2023-4244} - netfilter: nf_tables: fix underflow in chain reference counter {CVE-2023-4244} - netfilter: nf_tables: disallow timeout for anonymous sets {CVE-2023-4244} - netfilter: nf_tables: disallow updates of anonymous sets {CVE-2023-4244} - netfilter: nf_tables: reject unbound chain set before commit phase {CVE-2023-4244} - netfilter: nf_tables: reject unbound anonymous set before commit phase {CVE-2023-4244} - netfilter: nf_tables: disallow element updates of bound anonymous sets {CVE-2023-4244} - netfilter: nf_tables: fix underflow in object reference counter {CVE-2023-4244} - netfilter: nf_tables: drop map element references from preparation phase {CVE-2023-4244} - netfilter: nf_tables: validate variable length element extension {CVE-2023-4244} - netfilter: nft_set_pipapo: .walk does not deal with generations {CVE-2023-4244} - netfilter: nf_tables: relax set/map validation checks {CVE-2023-4244} - netfilter: nf_tables: integrate pipapo into commit protocol {CVE-2023-4244} - netfilter: nf_tables: upfront validation of data via nft_data_init() {CVE-2023-4244} - netfilter: nft_set_rbtree: fix null deref on element insertion - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR {CVE-2023-4015} - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() {CVE-2023-7192} - Documentation/hw-vuln: Fix rST warning {CVE-2022-27672} - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions {CVE-2022-27672} - KVM: x86: Mitigate the cross-thread return address predictions bug {CVE-2022-27672} - x86/speculation: Identify processors vulnerable to SMT RSB predictions {CVE-2022-27672} - uio: Fix use-after-free in uio_open {CVE-2023-52439} - gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump {CVE-2023-52448} Critical TuxCare License Agreement CVE-2024-26589 CVE-2023-4244 CVE-2023-4015 CVE-2023-7192 CVE-2024-23307 CVE-2023-6817 CVE-2024-1085 CVE-2023-52464 CVE-2023-52439 CVE-2023-52462 CVE-2024-26598 CVE-2024-26601 CVE-2024-26586 CVE-2023-52458 CVE-2024-26581 CVE-2023-25775 CVE-2023-52448 CVE-2023-52469 CVE-2023-52470 CVE-2024-0193 CVE-2023-45871 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-11614: add bounds check in vhost_dequeue_offload to prevent checksum computation overflow Important TuxCare License Agreement CVE-2024-11614 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang to fix multiple security vulnerabilities: - CVE-2023-24534: fix HTTP/2 rapid reset attack leading to denial of service - CVE-2023-29400: fix HTTP/2 frame processing panic leading to denial of service - CVE-2022-41725: fix HTTP/2 server connection handling causing premature closure - CVE-2022-41724: fix HTTP/2 server connection misuse causing resource exhaustion - CVE-2023-24538: fix HTTP/2 request handling causing denial of service - CVE-2023-39322: fix HTTP/2 connection resource exhaustion and denial of service - CVE-2023-24539: fix HTTP/2 request handling causing excessive memory consumption - CVE-2023-39321: fix HTTP/2 frame processing causing panic and denial of service - CVE-2024-24788: fix HTTP/2 connection handling causing denial of service - CVE-2022-41723: fix HTTP/2 server connection handling causing resource exhaustion - CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability - CVE-2024-34156: fix HTTP/2 connection resource exhaustion and denial of service - CVE-2023-24536: fix HTTP/2 request handling causing denial of service Critical TuxCare License Agreement CVE-2023-45287 CVE-2023-24536 CVE-2024-34156 CVE-2024-24788 CVE-2023-39321 CVE-2023-39322 CVE-2023-24538 CVE-2022-41725 CVE-2023-29400 CVE-2023-24534 CVE-2022-41724 CVE-2023-24539 CVE-2022-41723 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuild with golang >= 1.22.5.tuxcare.els7 to fix CVE-2024-24790, CVE-2024-34156, CVE-2023-45288, CVE-2023-39322, CVE-2023-39321, CVE-2024-24788 Critical TuxCare License Agreement CVE-2024-34156 CVE-2024-24788 CVE-2023-39321 CVE-2024-24790 CVE-2023-45288 CVE-2023-39322 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5222: fix stack buffer overflow in genrb binary by properly handling 'subtag' struct in SRBRoot::addTag function Important TuxCare License Agreement CVE-2025-5222 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-49630: prevent denial of service attack by fixing assertion issue in mod_proxy_http2 Important TuxCare License Agreement CVE-2024-27316 CVE-2025-49630 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - update tarball to 6.2.21 - CVE‑2025‑46818: fix Lua scripting vulnerability allowing code execution by authenticated users - CVE‑2025‑46819: fix Lua scripting vulnerability causing out-of-bounds memory access or server crash Important TuxCare License Agreement CVE-2025-46819 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-3657: fix buffer overflow in audit logging preventing DoS Important TuxCare License Agreement CVE-2024-3657 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-53263: fix issue where Git LFS could expose user credentials via URL- encoded control characters in host's URL Important TuxCare License Agreement CVE-2024-53263 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els7 - CVE-2024-34156: fix stack exhaustion in Decoder.Decode in golang Important TuxCare License Agreement CVE-2024-34156 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-9900: fix write-what-where vulnerability by enforcing bounds checking on image height metadata Important TuxCare License Agreement CVE-2025-9900 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-45321: patch the code to use https instead of http Important TuxCare License Agreement CVE-2024-45321 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-40907: fix integer overflow when parsng FastCGI parameters Important TuxCare License Agreement CVE-2025-40907 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-12133: fix inefficient handling of specific certificate data in libtasn1 to prevent denial of service attacks Moderate TuxCare License Agreement CVE-2024-12133 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-27349: fix crash while handling unsupported events in avrcp - CVE-2023-44431: fix Stack-based buffer overflow and remote code execution vulnerability - CVE-2023-45866: restrict HID connections to avoid unauthorized input injection - CVE-2023-50229: fix heap-based buffer overflow vulnerability in handling Phone Book Access profile by adding proper validation of user-supplied data length before copying to buffer - CVE-2023-50230: fix heap-based buffer overflow vulnerability in Phone Book Access profile to prevent arbitrary code execution by validating user-supplied data length before copying to buffer - CVE-2023-51580: validate AVRCP attribute list data to prevent out-of-bounds reads and information disclosure - CVE-2023-51589: validate AVRCP media element data to prevent out-of-bounds reads and information disclosure - CVE-2023-51592: validate AVRCP media folder data to prevent out-of-bounds reads and information disclosure - CVE-2023-51594: validate OBEX protocol parameters to prevent out-of-bounds reads and information disclosure - CVE-2023-51596: validate PBAP data length to prevent heap overflow and remote code execution Important TuxCare License Agreement CVE-2023-45866 CVE-2023-51592 CVE-2023-51580 CVE-2023-51596 CVE-2023-44431 CVE-2023-51589 CVE-2023-51594 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-41081: fix authentication bypass by removing implicit mapping functionality in mod_jk Important TuxCare License Agreement CVE-2023-41081 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-43804: fix issue to properly handle Cookie header to prevent information leakage via HTTP redirects Important TuxCare License Agreement CVE-2023-43804 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-3159: fix heap-based buffer overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices function of ASE File Handler Important TuxCare License Agreement CVE-2025-3158 CVE-2025-3159 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-36763: fix heap buffer overflow in TPM2 measure boot library when processing GPT partition tables - CVE-2022-36764: fix heap buffer overflow in TPM measure boot library when calculating PE image event size - CVE-2022-36765: fix integer overflow in CreateHob() function that could lead to undersized HOB allocation and out-of-bounds memory access - Refactoring: fix symbol collision between TPM libraries introduced by CVE-2022-36763 and CVE-2022-36764 patches Important TuxCare License Agreement CVE-2022-36763 CVE-2022-36764 CVE-2022-36765 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-41915: prevent attackers from obtaining ownership of arbitrary files by fixing race condition during execution of library code with UID 0 Important TuxCare License Agreement CVE-2023-41915 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8067: fix issue allowing unprivileged users to create loop devices by validating lower bound of index parameter in loop device handler function Important TuxCare License Agreement CVE-2025-8067 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6816: fix heap buffer overflow in logical button map allocation, allocate sufficient space for maximum button mappings (up to 255) Critical TuxCare License Agreement CVE-2023-6816 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-62230: fix use-after-free vulnerability in XKB resource handling Important TuxCare License Agreement CVE-2025-62230 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-49083: fix crash when loading PKCS#7 bundle with no certificates - Fix RUSTFLAGS macro expansion in build process Important TuxCare License Agreement CVE-2023-49083 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-62231: fix improper bounds checking in XkbSetCompatMap() function to prevent unsigned short overflow and potential memory corruption or crash Important TuxCare License Agreement CVE-2025-62229 CVE-2025-62231 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-30156: fix HTTP/2 flow control vulnerability allowing window credit exhaustion (Broke Window Attack) causing potential denial of service - CVE-2025-47905: fix client-side request smuggling via malformed HTTP/1 chunked requests Important TuxCare License Agreement CVE-2024-30156 CVE-2025-47905 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-7493: fix privilege escalation, validate krbCanonicalName to prevent host-to-realm admin escalation, blocks unauthorized admin actions and data exfiltration Critical TuxCare License Agreement CVE-2024-3183 CVE-2024-2698 CVE-2025-4404 CVE-2025-7493 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-12243: fix inefficient algorithm in libtasn1 for decoding certain DER-encoded certificate data to prevent denial-of-service condition Moderate TuxCare License Agreement CVE-2024-12243 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9050: sanitize VPN configuration input to prevent local privilege escalation via malicious 'leftupdown' key value Important TuxCare License Agreement CVE-2024-9050 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang to fix security vulnerabilities: - CVE-2023-45287: fix RSA-based TLS key exchange timing attack vulnerability - CVE-2024-24788: fix DNS resolver infinite loop causing denial of service - CVE-2023-39321: fix QUIC post-handshake message processing causing panic and denial of service Important TuxCare License Agreement CVE-2023-45287 CVE-2023-28642 CVE-2023-39321 CVE-2024-24788 CVE-2023-27561 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6377: fix buffer overwrite caused by allocating too few XkbActions for device buttons, preventing writes past the intended action array Important TuxCare License Agreement CVE-2023-6377 CVE-2023-6478 CVE-2024-21885 CVE-2025-26599 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0409: fix incorrect cursor private key usage in Xwayland/Xephyr that caused XSELINUX devPrivates corruption - CVE-2025-26597: fix buffer overflow in XkbChangeTypesOfKey() by properly resizing key syms and actions when nGroups is zero - CVE-2025-26594: fix root cursor lifetime handling to prevent use-after-free and stale references Important TuxCare License Agreement CVE-2024-0229 CVE-2024-0409 CVE-2025-26597 CVE-2025-26594 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic Important TuxCare License Agreement CVE-2025-11021 CVE-2025-4945 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - upgrade to runc 1.2.8 to fix multiple critical security vulnerabilities: - CVE-2024-21626: fix file descriptor leak vulnerability allowing container escape - CVE-2025-52565: fix container escape with malicious config due to /dev/console mount races - CVE-2025-31133: fix container escape and denial of service due to masked path abuse - CVE-2025-52881: fix container escape and denial of service due to procfs write redirects - remove obsolete CVE-2023-27561_CVE-2023-28642.patch (fixes included in 1.2.8) - add no_openssl build tag to prevent use of vendored crypto libraries - add runc_dmz_selinux_nocompat build tag for SELinux DMZ feature support - add container-selinux >= 2.224.0 dependency for DMZ SELinux feature Important TuxCare License Agreement CVE-2025-52565 CVE-2024-21626 CVE-2025-52881 CVE-2025-31133 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-1393: fix use-after-free in compositor overlay window by clearing dangling COW pointer - CVE-2024-31080: prevent heap over-read in ProcXIGetSelectedEvents() caused by using byte-swapped length values in replies. - CVE-2024-31081: fix buffer over-read in ProcXIPassiveGrabDevice by using correct unswapped length for replies - CVE-2025-26600: fix use-after-free by clearing pending events when removing a frozen device Important TuxCare License Agreement CVE-2025-49180 CVE-2025-26601 CVE-2024-31080 CVE-2024-31081 CVE-2023-1393 CVE-2025-26600 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-45229: fix IPv6 malformed option handling to prevent parsing loop - CVE-2023-45230: fix DHCPv6 ServerID length validation to prevent buffer overflow - CVE-2023-45231: fix IPv6 Redirect bounds checks to avoid out-of-bounds access - CVE-2023-45232: fix IPv6 destination option parsing to prevent infinite loop - CVE-2023-45233: fix PadN option handling in IPv6 PXE processing to prevent loop - CVE-2023-45234: fix DHCPv6 Advertise DNS Servers option parsing to prevent buffer overflow - CVE-2023-45235: fix DHCPv6 proxy Advertise ServerID option parsing to prevent buffer overflow Important TuxCare License Agreement CVE-2023-45234 CVE-2023-45235 CVE-2023-45229 CVE-2023-45230 CVE-2023-45231 CVE-2023-45233 CVE-2023-45232 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-62168: fix redaction failure to prevent information disclosure in error handling Important TuxCare License Agreement CVE-2025-62168 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-38197: fix infinite loops in recursive entity expansion Important TuxCare License Agreement CVE-2023-38197 CVE-2023-37369 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-21886: fix heap overflow caused by incorrect DisableDevice() recursion - CVE-2024-31083: fix use-after-free caused by incorrect glyph reuse handling - CVE-2023-5367: fix out-of-bounds write in property append/prepend handling Important TuxCare License Agreement CVE-2024-31083 CVE-2024-21886 CVE-2025-49179 CVE-2025-26598 CVE-2023-5367 CVE-2025-26595 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal Important TuxCare License Agreement CVE-2025-11561 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-54349: fix off-by-one error and heap-based buffer overflow in iperf_auth.c - CVE-2025-54350: prevent crash due to assertion failures on malformed authentication attempt in iperf_auth.c Critical TuxCare License Agreement CVE-2025-54349 CVE-2025-54350 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-0167: fix password leakage issue when using .netrc file with no login or password in default entry and following HTTP redirects Low TuxCare License Agreement CVE-2025-0167 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-45236: fix TCP Initial Sequence Number generation in NetworkPkg to prevent predictable sequence numbers - CVE-2023-45237: fix weak pseudo-random number generator in NetworkPkg to prevent predictable TCP sequence numbers Important TuxCare License Agreement CVE-2023-45237 CVE-2023-45236 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-3019: Fix default pmproxy configuration to restrict access to Redis server backend, preventing remote command execution Important TuxCare License Agreement CVE-2024-3019 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-62229: fix use-after-free caused by incorrect error cleanup in present notify handling - CVE-2025-62230: fix use-after-free caused by improper XKB resource cleanup - CVE-2025-62231: fix overflow caused by improper bounds checking in XkbSetCompatMap() Important TuxCare License Agreement CVE-2025-62231 CVE-2025-49176 CVE-2025-62230 CVE-2024-9632 CVE-2025-26596 CVE-2025-62229 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els6 to address CVE-2025-47907 Important TuxCare License Agreement CVE-2025-47907 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11277: fix heap-based buffer overflow in Q3DImporter::InternReadFile function of Q3DLoader.cpp Important TuxCare License Agreement CVE-2025-11277 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-40780: fix randomness sources, drop obsolete PRNG test - CVE-2025-40778: fix NS caching, DNAME/referral handling, restore IPv6 TCP tests Important TuxCare License Agreement CVE-2025-40780 CVE-2025-40778 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-2947: fix command injection vulnerability by sanitizing sosreport names during deletion Important TuxCare License Agreement CVE-2024-2947 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - perf/aux: Fix AUX buffer serialization {CVE-2024-46713} - block: fix uaf for flush rq while iterating tags {CVE-2024-53170} - zram: fix potential UAF of zram table {CVE-2025-21671} - sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647} - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675} - net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789} - isofs: Prevent the use of too small fid {CVE-2025-37780} - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142} - ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702} - RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539} - crypto: xts - Handle EBUSY correctly {CVE-2023-53494} - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252} - af_unix: Fix data-races around user->unix_inflight. {CVE-2023-53204} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-50367} - wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} - wifi: rtlwifi: remove unused dualmac control leftovers - wifi: rtlwifi: remove unused timer and related code - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - ipmr: do not call mr_mfc_uses_dev() for unres entries {CVE-2025-21719} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019} - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751} - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730} - net/mlx5e: Check for NOT_READY flag state after locking {CVE-2023-53581} - null_blk: Always check queue mode setting from configfs {CVE-2023-53576} - ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559} - rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() {CVE-2023-53558} - pstore/ram: Check start of empty przs during init {CVE-2023-53331} - wifi: ath11k: fix memory leak in WMI firmware stats {CVE-2023-53602} - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta {CVE-2023-53229} - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() {CVE-2022-50486} - RDMA/core: Make sure "ib_port" is valid when access sysfs node {CVE-2022-50475} - RDMA/rxe: Fix mr->map double free {CVE-2022-50543} - scsi: qla2xxx: Fix end of loop test - scsi: qla2xxx: Fix mem access after free - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} - scsi: target: Fix multiple LUN_RESET handling {CVE-2023-53586} - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses {CVE-2023-53675} - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() {CVE-2023-53675} - scsi: lpfc: Fix buffer free/clear order in deferred receive path {CVE-2025-39841} - nbd: fix incomplete validation of ioctl arg {CVE-2023-53513} - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} - bnxt: avoid overflow in bnxt_get_nvram_directory() {CVE-2023-53661} Important TuxCare License Agreement CVE-2023-53252 CVE-2024-53170 CVE-2025-21671 CVE-2024-56675 CVE-2025-37789 CVE-2023-53204 CVE-2025-39702 CVE-2024-58014 CVE-2025-21719 CVE-2025-21772 CVE-2024-58072 CVE-2022-50486 CVE-2023-53559 CVE-2023-53539 CVE-2023-53558 CVE-2023-53586 CVE-2023-53576 CVE-2023-53322 CVE-2022-50475 CVE-2023-53331 CVE-2023-53602 CVE-2023-53019 CVE-2025-39730 CVE-2025-39751 CVE-2022-50543 CVE-2023-53513 CVE-2025-39817 CVE-2023-53661 CVE-2025-37749 CVE-2024-46713 CVE-2022-50367 CVE-2023-53229 CVE-2023-53675 CVE-2025-39841 CVE-2023-53581 CVE-2025-23142 CVE-2025-21647 CVE-2023-53494 CVE-2024-46713 CVE-2025-37780 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to 2.50.1. The following CVE was fixed: - CVE-2025-43343: fix memory handling issue causing unexpected process crashes with malicious web content (RHSA-2025:19919) Important TuxCare License Agreement CVE-2025-43343 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-52999: add StreamReadConstraints to protect against DoS attacks via deeply nested structures and oversized inputs Important TuxCare License Agreement CVE-2025-52999 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-3661: fix TunnelVision vulnerability by preventing DHCP option 121 route manipulation that could bypass VPN encryption and leak traffic Important TuxCare License Agreement CVE-2024-3661 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11230: fix denial of service vulnerability in mjson library by optimizing exponent calculation to prevent CPU exhaustion from crafted JSON requests Important TuxCare License Agreement CVE-2025-11230 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-58183: fix unbounded memory consumption when reading GNU pax 1.0 sparse files Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-50379: fix TOCTOU vulnerability in JSP compilation to prevent RCE on case insensitive file systems - CVE-2024-38286: fix issue of resource allocation without limits or throttling vulnerability in TLS handshake process - Apply skip-common-daemon patch to remove the commons-daemon.jar copy in build.xml, as Alma/RHEL cannot ship bundled JARs and must use the system commons-daemon The ELS-provided source archive requires this adaptation Important TuxCare License Agreement CVE-2024-50379 CVE-2024-38286 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-29039: add comparison of pcr selection to prevent misleading picture of the TPM state Important TuxCare License Agreement CVE-2024-29039 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE:2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write Important TuxCare License Agreement CVE-2024-6345 CVE-2025-47273 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-47151: fix type confusion vulnerability in the lasso_node_impl_init_from_xml functionality Critical TuxCare License Agreement CVE-2025-47151 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update buildah to 1.39.6 - CVE-2025-52881: fix runc vulnerability by updating to runc v1.2.8 - Update golang dependency to 1.22.9.tuxcare.els1 - Remove patches for fixes included in upstream (CVE-2024-9341, CVE-2024-9407, CVE-2025-27144) Important TuxCare License Agreement CVE-2025-52881 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-0286: fix X.400 address type confusion in X.509 GeneralName Important TuxCare License Agreement CVE-2023-0286 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-27144: fix memory exhaustion vulnerability when parsing compact JWS or JWE input by updating the code to split JWT tokens Important TuxCare License Agreement CVE-2025-27144 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: replaced missing packages with a patch for PackageVersion Important TuxCare License Agreement CVE-2025-52999 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: replaced missing packages with a patch for PackageVersion Important TuxCare License Agreement CVE-2025-52999 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-7383: verify NBD server's certificate to prevent man-in-the-middle attack on NBD traffic Important TuxCare License Agreement CVE-2024-7383 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-9681: improve HSTS subdomain handling to prevent incorrectly overriding parent domain entries Moderate TuxCare License Agreement CVE-2024-9681 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-47606: fix integer overflow when allocating sysmem and avoid integer overflow in qtdemux theora extension parsing Critical TuxCare License Agreement CVE-2024-47606 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuilt with the CVE-2025-52999: fixed jackson-core version - Fixed build: removed unavailable jackson-parent dependencies Important TuxCare License Agreement CVE-2025-52999 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Removed CVE-2020-36518.patch: jackson-databind 2.14.1-1 is not affected - Rebuilt with the CVE-2025-52999: fixed jackson-core version Important TuxCare License Agreement CVE-2025-52999 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-59375: fix memory amplification and add allocation tracker Moderate TuxCare License Agreement CVE-2025-59375 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update libreswan to 4.12-2 to include not compatible CVE fix CVE-2024-2357 after the version 4.9 - CVE-2024-2357: fix crash in IKEv2 when a missing PreSharedKey triggers repeated pluto restarts Moderate TuxCare License Agreement CVE-2024-2357 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-10922: fix heap-based buffer overflow in DCM file parser by adding safety checks and proper GError handling to prevent potential RCE - CVE-2025-10934: fix heap-based buffer overflow in XWD file parser by validating colormap offsets to prevent potential RCE Important TuxCare License Agreement CVE-2025-10922 CVE-2025-10934 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-53906: drop leading ../ on write of zipfiles, don't forcefully overwrite existing files - CVE-2025-29768: use glob '[-]' to protect filenames starting with '-' Moderate TuxCare License Agreement CVE-2025-29768 CVE-2025-53906 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5024: add connection throttling to prevent resource exhaustion. Fixes unauthenticated resource exhaustion and DoS attacks via connection flooding Important TuxCare License Agreement CVE-2025-5024 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5557: fix seccomp rules, backport fix for CVE-2023-5557 added improvements from upstream regards seccomp Important TuxCare License Agreement CVE-2023-5557 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-64505: fix heap buffer over-read vulnerability in png_do_quantize function Low TuxCare License Agreement CVE-2025-64505 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-58183: fix cap GNU tar pax 1.0 sparse region size to prevent unbounded memory allocation Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2007-4559: fix for tarfile directory traversal vulnarability Low TuxCare License Agreement CVE-2007-4559 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-52886: limit amount of annotations per page/document to mitigate out-of-memory Moderate TuxCare License Agreement CVE-2025-52886 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-47906: fix issue where certain strings could cause executables in PATH variable to be returned by LookPath function Moderate TuxCare License Agreement CVE-2025-47906 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuild with golang >= 1.22.5-1.el9_2.tuxcare.els8 to address CVE-2025-58183 Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-28182: fix continuation frame floods via frame count limiting Moderate TuxCare License Agreement CVE-2024-28182 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-45618: fix insufficient or missing checking of return values of functions Low TuxCare License Agreement CVE-2024-45618 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117} - padata: Fix pd UAF once and for all {CVE-2025-38584} - wifi: cfg80211: Fix use after free for wext {CVE-2023-53153} - padata: Fix list iterator in padata_do_serial() - padata: do not leak refcount in reorder_work {CVE-2025-38031} - padata: avoid UAF for reorder_work {CVE-2025-21726} - padata: add pd get/put refcnt helper - net/smc: fix UAF on smcsk after smc_listen_out() {CVE-2025-38734} - scsi: mpi3mr: Bad drive in topology results kernel crash {CVE-2023-53037} - scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258} - igb: Fix igb_down hung on surprise removal {CVE-2023-53148} - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access {CVE-2023-53112} - i40e: fix idx validation in config queues msg {CVE-2025-39971} - dm-bufio: don't schedule in atomic context {CVE-2025-37928} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083} - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885} - KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849} - KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache {CVE-2022-49882} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - power: supply: gpio-charger: Fix set charge current limits {CVE-2024-57792} - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object {CVE-2024-46798} - ipv6: prevent possible UAF in ip6_xmit() {CVE-2024-44985} - ipv6: fix possible UAF in ip6_finish_output2() {CVE-2024-44986} - netfilter: flowtable: validate vlan header {CVE-2024-44983} - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() {CVE-2024-50268} - usb: vhci-hcd: Do not drop references before new references are gained {CVE-2024-43883} - drm/amd/display: Fix slab-use-after-free on hdcp_work {CVE-2025-21968} - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815} - drm/amd/display: Check index msg_id before read or write {CVE-2024-42121} - drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120} - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages {CVE-2024-41011} - drm/amdkfd: Fix an illegal memory access {CVE-2023-53090} - drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084} - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077} - drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552} - ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994} - nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116} - loop: Fix use-after-free issues {CVE-2023-53111} - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} - mptcp: use the workqueue to destroy unaccepted sockets {CVE-2023-53072} - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output {CVE-2023-53065} - erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053} - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - coresight: Clear the connection field properly {CVE-2022-50214} - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-53145} - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync {CVE-2025-39982} - x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727} - arm64: sme: Use STR P to clear FFR context field in streaming SVE mode {CVE-2023-53713} - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read {CVE-2023-53710} Important TuxCare License Agreement CVE-2022-50258 CVE-2023-53037 CVE-2025-39971 CVE-2025-38584 CVE-2023-53153 CVE-2024-46815 CVE-2024-44986 CVE-2025-37849 CVE-2023-53111 CVE-2024-46798 CVE-2024-40994 CVE-2024-50268 CVE-2025-39982 CVE-2025-38117 CVE-2025-37928 CVE-2024-44985 CVE-2024-41011 CVE-2025-37885 CVE-2025-37927 CVE-2025-37923 CVE-2025-37839 CVE-2023-53713 CVE-2023-53710 CVE-2024-47727 CVE-2025-21726 CVE-2023-53552 CVE-2023-53116 CVE-2023-53039 CVE-2023-53084 CVE-2023-53077 CVE-2023-53065 CVE-2023-53145 CVE-2023-53000 CVE-2023-53075 CVE-2024-44983 CVE-2024-42120 CVE-2022-49882 CVE-2022-50214 CVE-2023-53148 CVE-2023-53072 CVE-2023-53053 CVE-2023-53090 CVE-2025-38031 CVE-2023-53117 CVE-2023-53112 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6345: fix code injection vulnerability in package download functions - CVE-2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write Important TuxCare License Agreement CVE-2025-47273 CVE-2024-6345 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-9230: fix out-of-bounds read of unwrapped key size that may trigger a crash Moderate TuxCare License Agreement CVE-2025-9230 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuild with golang >= 1.22.9-1.el9_2.tuxcare.els2 to address CVE-2025-47906 Moderate TuxCare License Agreement CVE-2025-47906 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-45619: fix insufficient certificate and key length validation Moderate TuxCare License Agreement CVE-2024-45619 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-55752: fix relative path traversal vulnerability by normalizing rewritten URLs before decoding to prevent bypassing security constraints and potential remote code execution via PUT requests Important TuxCare License Agreement CVE-2025-55752 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-2906: fix for potential crash in cp2179 dissector (packet-cp2179.c) Moderate TuxCare License Agreement CVE-2023-2906 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang to fix CVE-2025-58183 (fix unbounded memory consumption when reading GNU pax 1.0 sparse files) Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13502: fix out of bounds read and integer underflow by adding bounds checking and validating message delimiters - CVE-2025-43430: fix bbq jit compiler writing to wrong stack slots in wasm try/catch blocks - CVE-2025-43421: fix memory handling issues that cause unexpected process crashes by disabling array allocation sinking in JS JIT - CVE-2025-66287: fix process crash from malicious png/apng files with excessive data Important TuxCare License Agreement CVE-2025-43429 CVE-2025-66287 CVE-2025-43430 CVE-2025-43432 CVE-2025-43434 CVE-2025-13502 CVE-2025-43421 CVE-2025-43425 CVE-2025-43427 CVE-2025-43440 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang to fix CVE-2025-58183 (fix unbounded memory consumption when reading GNU pax 1.0 sparse files) Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability Important TuxCare License Agreement CVE-2025-10921 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-52881: fix security vulnerability in /proc file handle operations - Partial backport: add pathrs-lite library from runc v1.2.8 vendor directory Important TuxCare License Agreement CVE-2025-52881 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Upgrade to openjdk-11.0.29+7. The following CVEs were fixed: - CVE-2025-53066: Enhance Path Factories - CVE-2025-53057: Enhance Certificate Handling Moderate TuxCare License Agreement CVE-2025-53057 CVE-2025-53066 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-4598: fixed race condition in systemd-coredump that exposes privileged core dump data Moderate TuxCare License Agreement CVE-2025-4598 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to MySQL 8.0.44 CVE-2025-53069 CVE-2025-53042 CVE-2025-53053 CVE-2025-53062 CVE-2025-53044 CVE-2025-53040 CVE-2025-53054 CVE-2025-53045 - MySQL 8.0.43 CVE-2025-50078 CVE-2025-50082 CVE-2025-50083 CVE-2025-50085 CVE-2025-50077 CVE-2025-50088 CVE-2025-50092 CVE-2025-50099 CVE-2025-50086 CVE-2025-50093 CVE-2025-50094 CVE-2025-50079 CVE-2025-50084 CVE-2025-50087 CVE-2025-50091 CVE-2025-50101 CVE-2025-50102 CVE-2025-53023 CVE-2025-50097 CVE-2025-50080 CVE-2025-50096 CVE-2025-5399 CVE-2025-50104 CVE-2025-50098 CVE-2025-50100 Moderate TuxCare License Agreement CVE-2025-50098 CVE-2025-50088 CVE-2025-53069 CVE-2025-50100 CVE-2025-50078 CVE-2025-53023 CVE-2025-50080 CVE-2025-50079 CVE-2025-50084 CVE-2025-50086 CVE-2025-50087 CVE-2025-50085 CVE-2025-50091 CVE-2025-53042 CVE-2025-53053 CVE-2025-50093 CVE-2025-50102 CVE-2025-50092 CVE-2025-53062 CVE-2025-53040 CVE-2025-53054 CVE-2025-50101 CVE-2025-50099 CVE-2025-53044 CVE-2025-5399 CVE-2025-50077 CVE-2025-50083 CVE-2025-50082 CVE-2025-50097 CVE-2025-50104 CVE-2025-50094 CVE-2025-50096 CVE-2025-53045 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-54080: fix insufficient bounds checking Moderate TuxCare License Agreement CVE-2025-54080 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13499: fix crash in Kafka dissector Moderate TuxCare License Agreement CVE-2025-13499 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13609: enforce TPM identity immutability for agent UUIDs in registrar, add shared memory for multiprocess synchronization Important TuxCare License Agreement CVE-2025-13609 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-58183: fix unbounded memory consumption when reading GNU pax 1.0 sparse files by rebuilding with golang 1.22.5 Important TuxCare License Agreement CVE-2025-58183 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-43392: fix cross-origin image data leak by correctly tainting OffscreenCanvas when transferring a cross-origin ImageBitmap Moderate TuxCare License Agreement CVE-2025-43392 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-27144: fix vulnerability in go-jose dependency leading to memory exhaustion and a Denial of Service Important TuxCare License Agreement CVE-2025-27144 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-53905: fix Vim path traversal issue in tar.vim Moderate TuxCare License Agreement CVE-2025-53905 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-45616: fix insufficient control of APDU buffer and its length - CVE-2024-45615: initialize uninitialized variables - CVE-2024-45617: fix insufficient or missing checking of return values - CVE-2024-45620: fix incorrect handling length of buffers or files in pkcs15init Low TuxCare License Agreement CVE-2024-45617 CVE-2024-45620 CVE-2024-45616 CVE-2024-45615 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-1735: add error checks to prevent crashes and improperly escaped data when PostgreSQL rejects invalid strings Important TuxCare License Agreement CVE-2025-1735 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8941: fix additiinally potential privilege escalationvia multiple symlink attacks and race conditions Important TuxCare License Agreement CVE-2025-8941 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11083: fix crash in linker for corrupt ELF input Important TuxCare License Agreement CVE-2025-11083 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-58098: prevent command injection in mod_cgid via shell-escaped SSI query strings Important TuxCare License Agreement CVE-2025-58098 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-10921: fix vulnerability by updating gegl04 dependency requirement to gegl04 >= 0.4.34-2.el9.tuxcare.els1 Important TuxCare License Agreement CVE-2025-10921 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-55753: fix exponential error retry back-off to prevent delay overflow Important TuxCare License Agreement CVE-2025-55753 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - mm: hugetlb: fix UAF in hugetlb_handle_userfault {CVE-2022-50630} - drm/amdkfd: fix potential kgd_mem UAFs {CVE-2023-53816} - net/mlx5e: Fix deadlock in tc route query code {CVE-2023-53591} - PCI: Fix pci_device_is_present() for VFs by checking PF {CVE-2022-50636} - wifi: ath11k: fix monitor mode bringup crash {CVE-2022-50627} - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321} - scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075} - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va {CVE-2023-53819} - dmaengine: ptdma: check for null desc before calling pt_cmd_callback {CVE-2023-53755} - wifi: mt7601u: fix an integer underflow {CVE-2023-53679} - Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673} - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails {CVE-2022-50087} - tls: wait for pending async decryptions if tls_strp_msg_hold fails {CVE-2025-40176} - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns {CVE-2025-38499} - net: openvswitch: reject negative ifindex {CVE-2023-53843} - drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833} - iommu/amd: Improve page fault error reporting {CVE-2023-53789} - media: v4l2-mem2mem: add lock to protect parameter num_rdy {CVE-2023-53519} - Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386} - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} - ext4: fix use-after-free in ext4_orphan_cleanup {CVE-2022-50673} - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254} - rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218} - ip6_vti: fix slab-use-after-free in decode_session6 {CVE-2023-53821} - vxlan: Fix nexthop hash size {CVE-2023-53192} - wifi: mac80211: check S1G action frame size {CVE-2023-53257} - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279} - dm flakey: fix a crash with invalid table line {CVE-2023-53786} - md/raid10: fix null-ptr-deref in raid10_sync_request {CVE-2023-53832} - md: don't dereference mddev after export_rdev() {CVE-2023-53665} - md: fix 'delete_mutex' deadlock - md: fix duplicate filename for rdev {CVE-2023-53665} - kernfs: Fix UAF in polling when open file is released {CVE-2025-39881} - mptcp: pm: avoid possible UaF when selecting endp {CVE-2024-44974} - mptcp: fix UaF in listener shutdown {CVE-2023-53088} - Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981} - Bluetooth: hci_sync: fix set_local_name race condition - Bluetooth: MGMT: Fix possible deadlocks {CVE-2024-53207} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186} - e1000e: fix heap overflow in e1000_set_eeprom {CVE-2025-39898} - wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - nfsd: release svc_expkey/svc_export with rcu_work {CVE-2024-53216} - NFS: Fix a race when updating an existing write {CVE-2025-39697} - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests - drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361} Important TuxCare License Agreement CVE-2025-38724 CVE-2025-22022 CVE-2023-53088 CVE-2023-53832 CVE-2023-53755 CVE-2023-53786 CVE-2023-53789 CVE-2025-38075 CVE-2025-39697 CVE-2023-53519 CVE-2023-53305 CVE-2023-53254 CVE-2024-44974 CVE-2023-53257 CVE-2023-53285 CVE-2023-53665 CVE-2024-53216 CVE-2023-53816 CVE-2025-39864 CVE-2022-50636 CVE-2023-53192 CVE-2023-53833 CVE-2022-50673 CVE-2025-40176 CVE-2025-39797 CVE-2025-39898 CVE-2022-50279 CVE-2023-53843 CVE-2023-53386 CVE-2023-53321 CVE-2023-53819 CVE-2023-53679 CVE-2024-53207 CVE-2025-39881 CVE-2025-40186 CVE-2023-53821 CVE-2023-53673 CVE-2022-50630 CVE-2025-39955 CVE-2025-39965 CVE-2023-53218 CVE-2025-38499 CVE-2025-39981 CVE-2025-38361 CVE-2022-50087 CVE-2023-53591 CVE-2022-50627 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61984: fix username handling by rejecting control characters from untrusted sources to prevent ProxyCommand code execution - CVE-2025-61985: disallowed NUL characters in ssh:// URI parsing to prevent ProxyCommand-based code execution Moderate TuxCare License Agreement CVE-2025-61984 CVE-2025-61985 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-24294: fix decompressed name length limit in DNS resolver to prevent exceeding RFC 1035's 255-octet maximum Moderate TuxCare License Agreement CVE-2025-24294 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-64524: fix heap buffer overflow and infinite loop in rastertopclx when processing maliciously crafted raster input Moderate TuxCare License Agreement CVE-2025-64524 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-65082: fix CGI environment variable injection by preventing HTTP headers from overriding server-set variables - CVE-2025-66200: prevent suexec bypass by removing request notes usage and rejecting the undocumented RequestHeader note option Moderate TuxCare License Agreement CVE-2025-65082 CVE-2025-66200 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-66293: fix out-of-bounds read in png_image_read_composite Important TuxCare License Agreement CVE-2025-66293 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-65018: fixed buffer overflow vulnerability in png_image_finish_read function Important TuxCare License Agreement CVE-2025-65018 CVE-2025-64720 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13836: fixed memory exhaustion vulnerability when reading HTTP responses with malicious Content-Length headers Critical TuxCare License Agreement CVE-2025-13836 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-12818: fix integer overflow in libpq size calculations to prevent undersized allocations and potential out-of-bounds writes from untrusted inputs Important TuxCare License Agreement CVE-2025-12818 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-14523: reject requests with duplicate Host headers Important TuxCare License Agreement CVE-2025-14523 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-14178: fix integer overflow in array_merge() to prevent potential denial of service when merging arrays with total elements exceeding HT_MAX_SIZE Important TuxCare License Agreement CVE-2025-14178 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - drm/i915/gt: Fix timeline left held on VMA alloc error {CVE-2025-38389} - md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - bpf: Avoid __bpf_prog_ret0_warn when jit fails {CVE-2025-38280} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - netfilter: nf_tables: do not compare internal table flags on updates {CVE-2024-27065} - init/main.c: Fix potential static_command_line memory overflow {CVE-2024-26988} - wireguard: netlink: check for dangling peer via is_dead instead of empty list {CVE-2024-26951} - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() {CVE-2025-38077} - exfat: fix double free in delayed_free {CVE-2025-38206} - net: openvswitch: Fix the dead loop of MPLS parse {CVE-2025-38146} - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write {CVE-2023-54286} - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198} - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - software node: Correct a OOB check in {CVE-2025-38342} - nbd: fix uaf in nbd_genl_connect() error path {CVE-2025-38443} - USB: usbtmc: Fix direction for 0-length ioctl control messages {CVE-2023-53761} - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname {CVE-2023-53751} - cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427} - PCI/ASPM: Fix link state exit during switch upstream function removal {CVE-2024-58093} - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446} - sctp: fix a potential overflow in sctp_ifwdtsn_skip {CVE-2023-53372} - md/raid10: fix wrong setting of max_corr_read_errors {CVE-2023-53313} - md/raid10: fix overflow of md/safe_mode_delay - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357} - lwt: Fix return values of BPF xmit ops {CVE-2023-53338} - net: fec: Better handle pm_runtime_get() failing in .remove() {CVE-2023-53308} - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307} - ice: set tx_tstamps when creating new Tx rings via ethtool {CVE-2022-50710} - RDMA/mlx5: Return the firmware result upon destroying QP/RQ {CVE-2023-53286} - RDMA/mlx5: Handle DCT QP logic separately from low level QP interface - net/mlx5e: Use correct encap attribute during invalidation {CVE-2023-54074} - net/mlx5: Nullify qp->dbg pointer post destruction - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282} - net: ena: fix shift-out-of-bounds in exponential backoff {CVE-2023-53272} - ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265} - sched/fair: Don't balance task to its current running CPU {CVE-2023-53215} - netfilter: allow exp not to be removed in nf_ct_find_expectation {CVE-2023-52927} - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() {CVE-2022-50881} Important TuxCare License Agreement CVE-2024-26951 CVE-2024-26951 CVE-2023-53313 CVE-2023-53286 CVE-2024-35886 CVE-2024-35886 CVE-2024-58093 CVE-2025-38389 CVE-2023-53338 CVE-2023-53282 CVE-2022-50881 CVE-2023-53307 CVE-2023-52927 CVE-2025-38077 CVE-2023-53357 CVE-2023-53761 CVE-2023-53427 CVE-2023-53372 CVE-2023-53308 CVE-2023-53446 CVE-2025-38445 CVE-2025-38249 CVE-2022-50710 CVE-2023-53265 CVE-2023-53215 CVE-2023-53272 CVE-2024-27065 CVE-2024-27065 CVE-2023-53751 CVE-2024-26988 CVE-2024-26988 CVE-2025-38618 CVE-2023-54286 CVE-2025-38443 CVE-2025-38198 CVE-2025-38459 CVE-2025-38280 CVE-2023-54074 CVE-2025-38068 CVE-2025-38342 CVE-2025-38206 CVE-2025-38146 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-58767: fixed REXML to reject duplicate XML declarations and validate declaration attributes to protect from DoS Moderate TuxCare License Agreement CVE-2025-58767 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - timezone-test-to-cet: change the timezone to CET to fix the test failure - CVE-2025-13699: fix directory traversal in mariadb-dump --tab by safely converting table and view names when generating output file paths Important TuxCare License Agreement CVE-2025-13699 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-47913: prevent ssh-agent panic by rejecting unexpected message types and returning a descriptive error instead Important TuxCare License Agreement CVE-2025-47913 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-47913: fix ssh/agent client panic on unexpected message types Important TuxCare License Agreement CVE-2025-47913 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-32049: fix Denial of Service attack to websocket server Important TuxCare License Agreement CVE-2025-32049 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-58436: fix unresponsive cupsd process caused by a slow client Moderate TuxCare License Agreement CVE-2025-58436 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-55752: fix improper normalization in RewriteValve to prevent path traversal attacks Important TuxCare License Agreement CVE-2025-55752 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Updated to the 10.5.29 tarball - CVE-2025-30722: fix mariadb-dump wrong quoting character by using ' not " and using quote_for_equal() - CVE-2025-30693: fix incorrect undo logging for indexes on virtual columns by properly encoding/decoding large index IDs in InnoDB undo log records - CVE-2025-21490: fix assertion failure on cascade by skipping virtual columns in the update vector of the parent table during foreign key cascade operations - CVE-2023-52969: fix INSERT..SELECT crash when target table appears in a derived table within the SELECT clause - CVE-2023-52970: fix crash in SHOW GRANTS when user has column-level privileges on a table that has been dropped - mariadb-mtr.patch: fix MTR port allocation to avoid port conflicts during parallel tests Moderate TuxCare License Agreement CVE-2025-30693 CVE-2025-21490 CVE-2025-30722 CVE-2023-52969 CVE-2023-52970 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-12084: fix denial-of-service by removing quadratic behavior in xml.dom.minidom node ID cache clearing when building deeply nested documents Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61594: fix incomplete fix for CVE-2025-27221 which allowed credential leaks to persist in URI#+ CVE-2025-27221: fix credential leak by correctly truncating userinfo Moderate TuxCare License Agreement CVE-2025-27221 CVE-2025-61594 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61915: fix out-of-bound write issue caused by inserting malicious line in cups web UI config Moderate TuxCare License Agreement CVE-2025-61915 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-12817: fix missing CREATE privilege check on target schema in CREATE STATISTICS, preventing unauthorized statistics creation Moderate TuxCare License Agreement CVE-2025-12817 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-67268: fix heap-based out-of-bounds write in NMEA2000 Driver - CVE-2025-67269: fix integer underflow leading to DoS in NAVCOM packet parsing Important TuxCare License Agreement CVE-2025-67268 CVE-2025-67269 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-45582: fixed path traversal vulnerability using malicious archive extraction Moderate TuxCare License Agreement CVE-2025-45582 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-68973: fix out-of-bounds write in armor_filter function by correcting index variable increments Important TuxCare License Agreement CVE-2025-68973 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-1220: add null byte validation and fix hostname formatting to prevent null byte truncation that could bypass hostname access checks - CVE-2025-6491: fix NULL pointer dereference in PHP SOAP Extension via Large XML namespace prefix Moderate TuxCare License Agreement CVE-2025-6491 CVE-2025-1220 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-31651: fix improper neutralization of escape, meta or control sequences to avoid bypassing rewrite rules Critical TuxCare License Agreement CVE-2025-31651 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-14425: fix JP2 image loader buffer overflow by validating pixel buffer size calculation to prevent potential remote code execution - CVE-2025-14422: fix parsing of PNM files to prevent integer overflow leading to remote code execution Important TuxCare License Agreement CVE-2025-14422 CVE-2025-14425 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-59465: add default error handler to TLSSocket to prevent server crash when connection is abruptly destroyed during initialization - CVE-2025-59466: fix stack overflow exception handling in async_hooks to allow catching with try-catch instead of requiring uncaughtException handlers - CVE-2025-55131: refactor unsafe buffer creation to remove zero-fill toggle Low TuxCare License Agreement CVE-2025-59466 CVE-2025-55131 CVE-2025-59465 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-68615: fix buffer overflow in snmptrapd daemon Critical TuxCare License Agreement CVE-2025-68615 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-66471: fix improper handling of highly compressed data in the Streaming API Important TuxCare License Agreement CVE-2026-21441 CVE-2025-66418 CVE-2025-66471 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13601: Fixed incorrect buffer size calculation in g_escape_uri_string() and added fuzz tests - 4-0001-fix-gdatetime-test: fixes gdatetime test failing Important TuxCare License Agreement CVE-2025-13601 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Important TuxCare License Agreement CVE-2025-61729 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-69418: fix OCB AES-NI/HW stream path leaving trailing bytes unauthenticated/unencrypted by advancing pointers after stream processing - CVE-2025-69420: fix missing ASN1_TYPE validation in TS_RESP_verify_response for signing certificate attributes Critical TuxCare License Agreement CVE-2025-69421 CVE-2024-0727 CVE-2025-69418 CVE-2026-22796 CVE-2026-22795 CVE-2025-68160 CVE-2025-69419 CVE-2025-69420 CVE-2025-15467 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-24515: fix NULL pointer dereference in XML_ExternalEntityParserCreate Low TuxCare License Agreement CVE-2026-24515 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6176: fix excessive resource consumption during brotli decompression Important TuxCare License Agreement CVE-2025-6176 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-0719 fix integer overflow in NTLM authentication when processing excessively long passwords Important TuxCare License Agreement CVE-2026-0719 CVE-2026-1761 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-22801: fix heap buffer over-read in png_image_write_* Important TuxCare License Agreement CVE-2026-22801 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-69204: fix integer overflow in WriteSVGImage Important TuxCare License Agreement CVE-2025-69204 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-21637: route callback exceptions through error handlers Important TuxCare License Agreement CVE-2026-21637 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit {CVE-2025-39766} - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680} - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} - KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823} - ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689} - ext4: improve error handling from ext4_dirhash() {CVE-2023-53473} - rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749} - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269} - Bluetooth: ISO: Fix possible UAF on iso_conn_free {CVE-2025-40141} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - libceph: fix invalid accesses to ceph_connection_v1_info {CVE-2025-39880} - bus: mhi: host: Detect events pointing to unexpected TREs {CVE-2025-39790} - nvmet: fix out-of-bounds access in nvmet_enable_port {CVE-2025-37825} - net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() {CVE-2023-54155} - wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device {CVE-2023-54015} - x86/sev: Make enc_dec_hypercall() accept a size instead of npages {CVE-2023-53996} - page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129} - page_pool: fix inconsistency for page_pool_ring_[un]lock() - net: page_pool: use in_softirq() instead {CVE-2025-38129} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - vsock: avoid to close connected socket after the timeout {CVE-2025-40248} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933} - net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905} - i40e: validate ring_len parameter against hardware-specific values - i40e: add validation for ring_len param {CVE-2025-39973} - i40e: increase max descriptors for XL710 - i40e: remove read access to debugfs files {CVE-2025-39901} - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - i2c: tegra: check msg length in SMBUS block read {CVE-2025-38425} - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods {CVE-2025-38395} - virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375} - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004} - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow {CVE-2023-54102} - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() {CVE-2022-50865} - tcp: minor optimization in tcp_add_backlog() {CVE-2022-50865} - block, bfq: fix uaf for bfqq in bic_set_bfqq() {CVE-2023-52983} - block, bfq: replace 0/1 with false/true in bic apis - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq {CVE-2022-50329} - block, bfq: fix possible uaf for 'bfqq->bic' {CVE-2022-50488} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346} - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - net/mdiobus: Fix potential out-of-bounds read/write access {CVE-2025-38111} - net: mdio: C22 is now optional, EOPNOTSUPP if not provided - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - net: atm: add lec_mutex {CVE-2025-38323} - Bluetooth: hci_sync: always check if connection is alive before deleting - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync {CVE-2023-53762} - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete {CVE-2025-38118} - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync {CVE-2024-58013} - net_sched: remove qdisc_tree_flush_backlog() - net_sched: ets: fix a race in ets_qdisc_change() {CVE-2025-38107} - net_sched: tbf: fix a race in tbf_change() - net_sched: prio: fix a race in prio_tune() {CVE-2025-38083} - net_sched: red: fix a race in __red_change() {CVE-2025-38108} - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request {CVE-2025-38013} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} - mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258} - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} - wifi: ath10k: Delay the unmapping of the buffer {CVE-2022-50700} - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305} - ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072} - drm/amd/display: fix FCLK pstate change underflow {CVE-2023-53780} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} Important TuxCare License Agreement CVE-2025-38572 CVE-2025-38180 CVE-2025-39689 CVE-2025-39749 CVE-2025-39823 CVE-2025-39911 CVE-2025-40258 CVE-2025-38111 CVE-2025-39901 CVE-2025-38108 CVE-2023-54072 CVE-2025-38320 CVE-2025-39883 CVE-2025-39880 CVE-2025-38415 CVE-2025-39905 CVE-2023-53680 CVE-2025-40154 CVE-2025-38013 CVE-2022-50488 CVE-2025-40269 CVE-2025-38107 CVE-2025-38083 CVE-2025-37825 CVE-2025-39853 CVE-2025-39933 CVE-2025-39973 CVE-2025-38729 CVE-2025-68285 CVE-2025-39790 CVE-2025-38051 CVE-2025-38346 CVE-2025-38323 CVE-2025-38103 CVE-2025-38702 CVE-2023-52983 CVE-2025-38157 CVE-2025-40141 CVE-2022-50329 CVE-2023-54102 CVE-2025-38574 CVE-2025-38102 CVE-2023-54015 CVE-2025-68325 CVE-2025-38118 CVE-2022-50865 CVE-2025-38395 CVE-2025-39863 CVE-2025-38403 CVE-2025-39691 CVE-2025-40248 CVE-2023-53484 CVE-2025-38245 CVE-2025-38680 CVE-2025-40277 CVE-2022-50700 CVE-2023-53676 CVE-2023-53668 CVE-2023-53259 CVE-2025-38685 CVE-2025-38375 CVE-2025-40271 CVE-2025-68305 CVE-2023-54155 CVE-2025-38004 CVE-2023-53762 CVE-2025-38129 CVE-2025-38425 CVE-2023-53996 CVE-2025-39766 CVE-2023-53780 CVE-2024-58013 CVE-2025-39891 CVE-2025-38212 CVE-2025-40240 CVE-2023-53473 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to shenandoah-jdk8u482-b08 (GA) - Security fixes from OpenJDK 8u482-b08: - CVE-2026-21945: unauthenticated network-exploitable security flaw causing remote hang or repeatable crash leading to denial of service in sandboxed clients - CVE-2026-21932: network-exploitable awt/javafx vulnerability requiring user interaction allowing unauthorized modification or deletion of critical data - CVE-2026-21933: networking vulnerability enabling unauthorized read, insert, update, or deletion of accessible data via supplied input with user interaction - CVE-2026-21925: difficult-to-exploit rmi flaw permitting partial unauthorized data read or modification in sandboxed java environments - Security fixes from OpenJDK 8u472-b08: - CVE-2025-53066: fix unauthorized access vulnerability via untrusted input processing - CVE-2025-53057: fix unauthorized data modification through API misuse - CVE-2025-61748: fix unauthorized data manipulation which supplies data to the APIs Important TuxCare License Agreement CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-53066 CVE-2026-21932 CVE-2025-61748 CVE-2025-53057 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61662: gettext: Use-after-free due to gettext command not being unregistered on module unload Important TuxCare License Agreement CVE-2025-61662 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-68618: added recursion depth check in MSL and SVG coders - Check that image exists before we destroy it Important TuxCare License Agreement CVE-2025-68618 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-15079: fix accepting hosts not present in the specified known_hosts during SSH-based SCP/SFTP transfers when global known_hosts contained them restrict host verification to the specified known_hosts file Low TuxCare License Agreement CVE-2025-15079 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-14524: fix OAuth2 bearer token leak on cross-protocol redirect - CVE-2025-15224: fix libssh public-key auth fallback to SSH agent Low TuxCare License Agreement CVE-2025-15224 CVE-2025-14524 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm Important TuxCare License Agreement CVE-2025-61728 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-25646: fix out-of-bounds read and potential heap buffer overflow in png_set_quantize() caused by stale palette indices during color pruning Important TuxCare License Agreement CVE-2026-25646 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-68950: fix DOS due to circular references between two MVGs, leading to a stack overflow Moderate TuxCare License Agreement CVE-2025-68950 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-15059: fix PSP file loader to validate channel types for grayscale images, preventing invalid memory access from incorrect offset computation Important TuxCare License Agreement CVE-2025-15059 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61732: prevent cgo code smuggling by removing user-controlled content from documentation strings in generated ASTs Important TuxCare License Agreement CVE-2025-61732 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els5 to fix the following CVE's - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Important TuxCare License Agreement CVE-2025-61729 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els5 to fix the following CVE's - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Important TuxCare License Agreement CVE-2025-61729 CVE-2025-61728 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-14087: Fix integer overflows in GVariant text format parser and escape_byte_string() Critical TuxCare License Agreement CVE-2025-14087 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-0915: fix leak of stack contents to configured DNS resolver when resolving a zero-valued network via getnetbyaddr/getnetbyaddr_r with DNS NSS backend; sanitize network value and avoid passing uninitialized stack data to resolver Important TuxCare License Agreement CVE-2026-0861 CVE-2026-0915 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical TuxCare License Agreement CVE-2025-68121 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-25646: fix heap buffer overflow in png_set_quantize caused by stale palette indices in the color distance hash table Important TuxCare License Agreement CVE-2026-25646 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-0994: recursion depth bypass in json_format.ParseDict Important TuxCare License Agreement CVE-2026-0994 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61728: fix denial-of-service in archive/zip by replacing super-linear index construction with an efficient algorithm - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61728 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical TuxCare License Agreement CVE-2025-68121 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-26269: fix buffer overflow in netbeans interface Important TuxCare License Agreement CVE-2026-26269 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-25506: fix buffer overflow in message parsing and add bounds checks and input validation for address length; prevent leak of cryptographic MAC subkey and forging of arbitrary credentials Important TuxCare License Agreement CVE-2026-25506 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-14905: fix heap buffer overflow in schema.c Important TuxCare License Agreement CVE-2025-14905 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61144: add MAX_SAMPLES bounds check in combineSeparateSamplesBytes to prevent stack-based buffer overflow when spp exceeds MAX_SAMPLES in tiffcrop Important TuxCare License Agreement CVE-2025-61144 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE's - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical TuxCare License Agreement CVE-2025-68121 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61729: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing Important TuxCare License Agreement CVE-2025-61729 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVEs - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13837: fix a potential denial of service in plistlib (GH-119343) Moderate TuxCare License Agreement CVE-2025-12781 CVE-2025-13837 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-1642: fix upstream TLS proxy vulnerability allowing MITM inject plaintext into proxied responses; enforce strict upstream TLS verification and reject injected plaintext Moderate TuxCare License Agreement CVE-2026-1642 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - fix: fbdev: fix potential buffer overflow in do_register_framebuffer() - qed: Don't collect too many protection override GRC elements {CVE-2025-39949} - drm/amd/display: Avoid a NULL pointer dereference {CVE-2025-39693} - pNFS: Fix uninited ptr deref in block/scsi layout {CVE-2025-38691} - netfilter: nf_reject: don't leak dst refcount for loopback packets {CVE-2025-38732} - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085} - fs: dlm: fix use after free in midcomms commit {CVE-2023-53629} - svcrdma: use rc_pageoff for memcpy byte offset {CVE-2025-68811} - bpf: Disable preemption in bpf_perf_event_output {CVE-2023-54303} - scsi: target: iscsit: Free cmds before session free {CVE-2023-54184} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem {CVE-2025-38022} - memcg: protect concurrent access to mem_cgroup_idr {CVE-2024-43892} - ACPI: EC: Fix oops when removing custom query handlers {CVE-2023-54244} - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration {CVE-2023-54296} - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() {CVE-2023-54114} - net: tls: avoid hanging tasks on the tx_lock {CVE-2023-54306} - usb: typec: bus: verify partner exists in typec_altmode_attention {CVE-2023-54299} - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization {CVE-2023-54234} - rxrpc: Fix timeout of a call that hasn't yet been granted a channel {CVE-2023-54195} - block, bfq: Fix division by zero error on zero wsum {CVE-2023-54242} - wifi: cfg80211: reject auth/assoc to AP with our address {CVE-2023-53540} - wifi: iwlwifi: mvm: don't trust firmware n_channels {CVE-2023-53589} - wifi: mac80211: check for station first in client probe {CVE-2023-53588} - bonding: do not assume skb mac_header is set {CVE-2023-53601} - drm/i915: Make intel_get_crtc_new_encoder() less oopsy {CVE-2023-53571} - wifi: rtw88: delete timer and free skb queue when unloading {CVE-2023-53574} - net: bcmgenet: Add a check for oversized packets {CVE-2023-53535} - media: uvcvideo: Fix memory leak in uvc_gpio_parse {CVE-2022-50882} - md/raid10: fix memleak of md thread {CVE-2023-54294} - usb: typec: altmodes/displayport: fix pin_assignment_show {CVE-2023-54186} - scsi: qedf: Fix NULL dereference in error handling {CVE-2023-54289} - HID: multitouch: Add NULL check in mt_input_configured {CVE-2024-58020} - driver core: fix potential null-ptr-deref in device_add() {CVE-2023-54321} - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull {CVE-2023-53125} - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() {CVE-2023-54246} - bpf: Address KCSAN report on bpf_lru_list {CVE-2023-54283} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec {CVE-2026-22998} - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl {CVE-2023-54202} - mmc: via-sdmmc: fix return value check of mmc_add_host() {CVE-2022-50846} - bpf: Disable preemption in bpf_event_output {CVE-2023-54173} - net/mlx5e: Move representor neigh cleanup to profile cleanup_tx {CVE-2023-54148} - net/mlx5: Handle pairing of E-switch via uplink un/load APIs {CVE-2023-53347} - net/mlx5e: Fix cleanup null-ptr deref on encap lock {CVE-2023-53105} - smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728} - perf/core: Exit early on perf_mmap() fail {CVE-2025-38565} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - HID: core: ensure __hid_request reserves the report ID as the first byte - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495} - HID: intel-ish-hid: Fix kernel panic during warm reset {CVE-2023-53392} - xfs: do not propagate ENODATA disk errors into xattr code {CVE-2025-39835} - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode {CVE-2025-38535} - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf {CVE-2023-53524} - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX {CVE-2025-38201} - xfrm: fix slab-use-after-free in decode_session6 {CVE-2023-53500} - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras {CVE-2023-53471} - drm/edid: fix info leak when failing to get panel id {CVE-2023-53085} - xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470} - vdpa: Add features attr to vdpa_nl_policy for nlattr length check {CVE-2023-53652} - virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515} - virtio_net: fix xdp_rxq_info bug after suspend/resume {CVE-2022-49687} - drivers: net: prevent tun_build_skb() to exceed the packet size limit - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy {CVE-2025-40251} - tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454} - HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824} - udf: Do not bother merging very long extents {CVE-2023-53506} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866} - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. {CVE-2025-39913} - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} - tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600} - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604} - tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - iavf: Fix use-after-free in free_netdev {CVE-2023-53556} Important TuxCare License Agreement CVE-2022-50846 CVE-2024-43892 CVE-2024-43892 CVE-2024-58020 CVE-2023-53392 CVE-2025-38691 CVE-2023-53454 CVE-2023-53622 CVE-2023-54303 CVE-2023-54186 CVE-2025-40304 CVE-2025-38728 CVE-2025-39866 CVE-2023-54184 CVE-2025-39693 CVE-2023-53571 CVE-2023-53535 CVE-2025-71085 CVE-2026-22998 CVE-2023-54173 CVE-2023-53105 CVE-2023-54114 CVE-2023-3773 CVE-2023-3773 CVE-2023-54289 CVE-2025-38535 CVE-2023-54244 CVE-2023-53515 CVE-2023-53619 CVE-2025-38201 CVE-2023-54202 CVE-2025-38022 CVE-2025-40322 CVE-2022-50470 CVE-2023-53524 CVE-2023-54306 CVE-2023-54296 CVE-2025-39683 CVE-2022-50882 CVE-2023-53556 CVE-2023-54246 CVE-2023-53347 CVE-2023-53574 CVE-2025-39835 CVE-2023-54299 CVE-2023-53560 CVE-2023-54321 CVE-2023-54283 CVE-2023-53604 CVE-2025-39824 CVE-2025-39913 CVE-2025-39945 CVE-2023-54242 CVE-2023-54234 CVE-2023-53588 CVE-2025-38494 CVE-2025-68811 CVE-2023-53540 CVE-2023-53471 CVE-2023-53601 CVE-2023-53629 CVE-2023-53652 CVE-2022-50422 CVE-2023-53587 CVE-2025-38565 CVE-2025-38732 CVE-2023-53085 CVE-2025-39949 CVE-2025-40251 CVE-2025-38495 CVE-2023-53600 CVE-2023-54294 CVE-2025-39760 CVE-2023-53506 CVE-2023-54148 CVE-2025-68349 CVE-2023-53589 CVE-2023-54195 CVE-2023-53500 CVE-2022-49687 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2004: require superuser to install non-built-in selectivity estimators and harden intarray _int_matchsel() against wrong operator type - CVE-2026-2005: fix heap buffer overflow in pgcrypto PGP public-key decryption by validating session key length - CVE-2026-2006: fix multibyte character handling vulnerabilities in wchar conversion, EUC_CN encoding length, and replace pg_mblen() with bounds-checked versions across all call sites Important TuxCare License Agreement CVE-2026-2006 CVE-2026-2004 CVE-2026-2005 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-64503: fix out-of-bounds write in pdftoraster filter caused by integer overflow when processing PDFs with large MediaBox values - CVE-2025-57812: fix out-of-bounds read/write in imagetoraster TIFF processing caused by incorrect buffer size calculation in cupsImageLut Low TuxCare License Agreement CVE-2025-64503 CVE-2025-57812 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-12801: fix rpc.mountd privilege escalation allowing NFSv3 clients to bypass root_squash and all_squash when mounting subdirectories Moderate TuxCare License Agreement CVE-2025-12801 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuild with golang 1.22.9-1.el9_2.tuxcare.els6 to fix CVE-2025-68121 - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical TuxCare License Agreement CVE-2025-68121 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2003: guard against unexpected dimensions of oidvector/int2vector Moderate TuxCare License Agreement CVE-2026-2003 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6075: fix quadratic complexity in os.path.expandvars() Moderate TuxCare License Agreement CVE-2025-12781 CVE-2025-13837 CVE-2025-6075 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVE - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing Important TuxCare License Agreement CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebuild with newer golang version 1.22.9-1.el9_2.tuxcare.els6 to fix the following CVEs - CVE-2025-61729: fix excessive resource consumption when constructing hostname error messages for certificates with many SANs - CVE-2025-61728: reduce CPU usage in index construction - CVE-2025-61726: limit parsed URL query parameters to mitigate excessive memory consumption during form parsing - CVE-2025-68121: fix TLS session resumption bypass by preventing shared auto-rotated ticket keys in Config and validating full certificate chain expiry Critical TuxCare License Agreement CVE-2025-61729 CVE-2025-68121 CVE-2025-61728 CVE-2025-61726 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6075: fix quadratic complexity in os.path.expandvars() Moderate TuxCare License Agreement CVE-2025-6075 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to MySQL 8.0.45 (January 2026 CPU) CVE-2026-21968 CVE-2026-21936 CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21964 CVE-2025-9230 Moderate TuxCare License Agreement CVE-2026-21937 CVE-2026-21941 CVE-2026-21948 CVE-2026-21936 CVE-2026-21964 CVE-2026-21968 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-69419: fix heap buffer overflow in OPENSSL_uni2utf8 via bmp_to_utf8 Important TuxCare License Agreement CVE-2025-69419 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2044: fix uninitialized memory read in PGM file parser - CVE-2026-2045: fix heap buffer overflow in XWD file loader - CVE-2026-2048: fix out-of-bounds write in XWD file loader - CVE-2026-0797: fix missing fread return value checks in ICO file loader Important TuxCare License Agreement CVE-2026-0797 CVE-2026-2044 CVE-2026-2048 CVE-2026-2045 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-15281: fix process crash in wordexp() when attempting to reuse and append to previous expansion results due to uninitialized memory access Moderate TuxCare License Agreement CVE-2025-15281 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61145: fix double-free and memory leak in tiffcrop, avoid dangling pointer in loadImage by clearing *read_ptr after free Moderate TuxCare License Agreement CVE-2025-61145 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2447: fix heap buffer overflow in write_superframe_index Important TuxCare License Agreement CVE-2026-2447 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3731: fix out-of-bounds read in sftp_extensions_get_name and sftp_extensions_get_data when idx equals the extension count Important TuxCare License Agreement CVE-2026-3731 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3783: prevent bearer token leak on HTTP(S) redirect when .netrc contains entries for the redirected host Moderate TuxCare License Agreement CVE-2026-1965 CVE-2026-3783 CVE-2026-3784 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-25210: fix integer overflow in tag buffer reallocation in doContent Important TuxCare License Agreement CVE-2026-25210 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-0865: Prevent HTTP header injection: validate and reject user- controlled header names and values containing newlines. - CVE-2025-15367: Reject control characters in POP3 commands - CVE-2026-1299: Reject incorrectly folded LiteralHeader values and quote newlines during BytesGenerator serialization; prevent header injection Important TuxCare License Agreement CVE-2025-15367 CVE-2026-1299 CVE-2026-0865 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-25884: fix out-of-bounds read in CRW image parser - CVE-2026-27596: fix integer underflow in preview component Important TuxCare License Agreement CVE-2026-25884 CVE-2026-27596 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61143: fix NULL pointer dereference in tiffcrop add null checks and pointer validation, prevent crash Moderate TuxCare License Agreement CVE-2025-61143 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-28417: fix OS command injection via shell metacharacters in netrw URI hostname and port - CVE-2026-28421: fix heap-buffer-overflow and SEGV in swap file recovery due to unvalidated pointer block fields Important TuxCare License Agreement CVE-2026-28417 CVE-2026-28421 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-68114: fix stack buffer underflow/overflow in SStream_concat() Critical TuxCare License Agreement CVE-2025-68114 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4111: Fix infinite loop in RAR5 decompression caused by block_length exceeding half the window size, leading to CPU-consuming denial-of-service Important TuxCare License Agreement CVE-2026-4111 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-66614: enforce SNI and HTTP Host header matching to prevent bypass of client certificate authentication when multiple virtual hosts are configured Critical TuxCare License Agreement CVE-2025-66614 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32776: fix NULL pointer dereference in storeEntityValue() with empty external parameter entity content Moderate TuxCare License Agreement CVE-2026-32776 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-67873: fix heap buffer overflow in cs_insn.bytes Important TuxCare License Agreement CVE-2025-67873 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-1299: Fix header injection; quote newlines in email headers and reject incorrectly folded LiteralHeader values during serialization with BytesGenerator. - CVE-2026-0865: Fix header injection via user-controlled header names and values containing newlines; sanitize and reject header names and values containing newline characters. - CVE-2025-15367: Reject control characters in POP3 commands to prevent command injection via newlines in user-controlled input Important TuxCare License Agreement CVE-2025-15367 CVE-2026-1299 CVE-2026-0865 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-15366: reject control characters in IMAP commands Important TuxCare License Agreement CVE-2025-15366 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-43441: fix macro scratch register spilling in OMG tail calls to prevent memory corruption via crafted web content Important TuxCare License Agreement CVE-2025-43441 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27622: fix integer overflow in CompositeDeepScanLine leading to heap buffer overflow Important TuxCare License Agreement CVE-2026-27622 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32777: fix infinite loop while parsing DTD content - CVE-2026-32778: fix NULL pointer dereference in setContext on retry after OOM Moderate TuxCare License Agreement CVE-2026-32777 CVE-2026-32778 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-25749: fix buffer overflow in 'helpfile' option handling in get_tagfname() Important TuxCare License Agreement CVE-2026-25749 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-30258: fix verification DoS due to a malicious subkey in the keyring Moderate TuxCare License Agreement CVE-2025-30258 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-59362: fix ASN.1 encoding of long SNMP OIDs - CVE-2026-33526: do not escape malformed URI twice when sending ICP errors - CVE-2026-33515: fix validation of ICP packet sizes and URLs Moderate TuxCare License Agreement CVE-2026-33526 CVE-2025-59362 CVE-2026-33515 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-43438: introduce distinct SpecMapIteratorObject/SpecSetIteratorObject types replacing shared SpecObjectOther in JSC DFG/FTL JIT type speculation Important TuxCare License Agreement CVE-2025-43438 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-23893: fix symlink-following vulnerabilities in privileged contexts Moderate TuxCare License Agreement CVE-2026-23893 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-28494: fix stack buffer overflow in morphology kernel parsing - CVE-2026-28691: fix uninitialized pointer dereference in JBIG decoder - CVE-2026-25989: fix off-by-one boundary check in CastDouble functions - CVE-2026-25985: fix memory allocation without limits in SVG decoder - CVE-2026-24485: fix infinite loop in PCD decoder - CVE-2025-66628: fix integer overflow in TIM decoder on 32-bit systems - CVE-2026-28693: fix integer overflow in DIB/BMP coder Important TuxCare License Agreement CVE-2026-24485 CVE-2026-28691 CVE-2026-25985 CVE-2025-66628 CVE-2026-28494 CVE-2026-25989 CVE-2026-28693 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6175: fix heap buffer overflow in NetScreen file parser - CVE-2024-0208: fix crash in GVCP dissector due to NULL string - CVE-2024-0209: fix uncontrolled recursion in ASN.1 dissectors - CVE-2024-0211: fix infinite loop in DOCSIS dissector - CVE-2024-2955: fix use-after-free in T.38 dissector - CVE-2024-8250: fix stack buffer overflow in NTLMSSP dissector - CVE-2024-9781: fix crash in AppleTalk and RELOAD Framing dissectors - CVE-2024-11596: fix buffer overflow in ECMP dissector - CVE-2024-24476: fix heap buffer overflow in address resolution - CVE-2024-24478: fix integer overflow in BGP dissector - CVE-2025-5601: fix crash in column prepend fence handling Important TuxCare License Agreement CVE-2024-0208 CVE-2024-0209 CVE-2023-6175 CVE-2024-11596 CVE-2024-24476 CVE-2024-2955 CVE-2024-8250 CVE-2024-9781 CVE-2024-24478 CVE-2025-5601 CVE-2024-0211 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32748: fix HttpRequest lifetime for ICP v3 queries Important TuxCare License Agreement CVE-2026-32748 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61731: fix pkg-config --log-file argument injection via #cgo pkg-config directive Important TuxCare License Agreement CVE-2025-61731 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print buffer overflow in BJ10V device Moderate TuxCare License Agreement CVE-2025-27830 CVE-2025-27835 CVE-2025-27836 CVE-2025-27831 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-2761: fix out-of-bounds write in FLI plug-in (ZDI-CAN-25100) Important TuxCare License Agreement CVE-2025-2761 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Bump release Important TuxCare License Agreement CVE-2025-64181 CVE-2025-12840 CVE-2025-12495 CVE-2025-12839 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4519: fix webbrowser.open() leading dash injection Important TuxCare License Agreement CVE-2026-4519 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Bump release Important TuxCare License Agreement CVE-2024-52316 CVE-2025-46701 CVE-2025-55754 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-34459: fix buffer over-read in xmlHTMLPrintFileContext in xmllint - CVE-2025-8732: fix stack overflow from self-referencing SGML CATALOG entries - CVE-2026-0989: add RelaxNG include recursion limit - CVE-2026-0990: prevent infinite recursion in xmlCatalogListXMLResolveURI - CVE-2026-0992: ignore repeated nextCatalog entries in XML catalog parsing - CVE-2026-1757: fix memory leak in xmllint interactive shell Moderate TuxCare License Agreement CVE-2026-1757 CVE-2026-0990 CVE-2026-0992 CVE-2024-34459 CVE-2026-0989 CVE-2025-8732 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-20696: fix heap buffer overflow via negative copy length in RAR4 reader Important TuxCare License Agreement CVE-2024-20696 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-21720: fix denial of service by preventing goroutine leaks and memory exhaustion triggered by unauthenticated avatar cache requests Important TuxCare License Agreement CVE-2026-21720 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-41056: fix possible corruption in sdsResize due to incorrect alloc_already_optimal logic skipping sds type header update Important TuxCare License Agreement CVE-2023-41056 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-15366: reject control characters in IMAP commands Important TuxCare License Agreement CVE-2025-15366 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27448: fix fail-open in set_tlsext_servername_callback when callback raises exception Moderate TuxCare License Agreement CVE-2026-27448 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-29111: validate input cgroup path in GetUnitByControlGroup to prevent PID 1 assert/freeze on spurious IPC API calls - CVE-2026-4105: reject invalid class types when registering machines in systemd-machined to prevent privilege escalation Important TuxCare License Agreement CVE-2026-29111 CVE-2026-4105 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-52316: fix unchecked error condition in Jakarta Authentication (JASPIC) ServerAuthContext - CVE-2025-46701: fix case sensitivity bypass in CGI servlet pathInfo - CVE-2025-55754: add escaping to logging output for ANSI sequences Important TuxCare License Agreement CVE-2024-52316 CVE-2025-46701 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2026-0968 - sftp_parse_longname out-of-bounds access Low TuxCare License Agreement CVE-2026-0968 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13151: fix stack-based buffer overflow in asn1_expand_octet_string, _asn1_expand_object_id Moderate TuxCare License Agreement CVE-2025-13151 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-1489: fix integer overflow in Unicode case conversion functions - CVE-2026-1484: fix integer overflow in GLib Base64 encoding - CVE-2025-14512: fix integer overflow in escape_byte_string() for byte strings with many invalid characters - CVE-2026-1485: fix buffer underflow in content type treemagic parsing - CVE-2026-0988: fix integer overflow in g_buffered_input_stream_peek() - CVE-2025-7039: fix integer overflow in temporary file creation Moderate TuxCare License Agreement CVE-2026-0988 CVE-2026-1485 CVE-2026-1489 CVE-2025-14512 CVE-2025-7039 CVE-2026-1484 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-8291: fix zipfile ZIP64 EOCD Locator offset validation - CVE-2025-6069: fix quadratic complexity in HTMLParser - CVE-2025-4516: fix use-after-free in unicode-escape decoder with error handler - CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code - CVE-2026-3479: reject invalid resource arguments in pkgutil.get_data() - CVE-2025-1795: fix email header list separator incorrectly encoded during folding - CVE-2026-0672: reject control characters in http cookies - CVE-2025-15282: reject control characters in data URL mediatypes - CVE-2026-3644: reject control characters in http.cookies.Morsel.update(), |=, unpickling, and js_output() - CVE-2026-4224: avoid unbound C recursion in conv_content_model in pyexpat.c - CVE-2025-11468: preserve parens when folding email comments to prevent header injection Moderate TuxCare License Agreement CVE-2025-4516 CVE-2025-15282 CVE-2026-3644 CVE-2026-2297 CVE-2026-3479 CVE-2026-4224 CVE-2026-0672 CVE-2025-8291 CVE-2025-6069 CVE-2025-1795 CVE-2025-11468 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-23337: fix signed integer overflow in jvp_array_write and jvp_object_rehash that could lead to SEGV on growing arrays and objects Moderate TuxCare License Agreement CVE-2024-23337 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33416: fix use-after-free in png_set_tRNS and png_set_PLTE due to aliased heap buffers Important TuxCare License Agreement CVE-2026-33416 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-61723: fix non-linear processing time when parsing invalid PEM inputs that could lead to denial of service - CVE-2025-58187: fix quadratic complexity when checking name constraints in crypto/x509 certificate validation - CVE-2025-58188: fix panic when validating certificates with DSA public keys in crypto/x509 Moderate TuxCare License Agreement CVE-2025-58188 CVE-2025-58187 CVE-2025-61723 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-35387: correctly match ECDSA signature algorithms against HostKeyAlgorithms, PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms - CVE-2026-35388: add missing askpass check when using ControlMaster=ask/autoask and "ssh -O proxy ..." - CVE-2026-35414: fix authorized_keys principals option matching to compare comma-separated entries individually instead of using match_list Important TuxCare License Agreement CVE-2026-35388 CVE-2026-35387 CVE-2026-35414 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5745: fix NULL pointer dereference in ACL parsing in archive_acl_from_text_w() Moderate TuxCare License Agreement CVE-2026-5745 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-35091: fix incorrect return value in check_memb_commit_token_sanity allowing DoS via crafted memb_commit_token packet - CVE-2026-35092: fix integer overflow in check_memb_join_sanity allowing bypass of length validation via crafted memb_join packet Important TuxCare License Agreement CVE-2026-35091 CVE-2026-35092 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3082: fix heap-based buffer overflow in JPEG parser READ_BYTES macro by adding sizeof(buf) bounds check Important TuxCare License Agreement CVE-2026-3082 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2021-40145: double-free in gdImageGd2Ptr() Important TuxCare License Agreement CVE-2021-40145 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-7264: fix ASN.1 GTime2str() heap buffer over-read caused by off-by-one in fractional seconds length calculation Moderate TuxCare License Agreement CVE-2025-0725 CVE-2025-14017 CVE-2023-46219 CVE-2024-11053 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5119: fix cleartext transmission of cookies to HTTP proxy in tunnel_connect() CONNECT request for HTTPS targets Important TuxCare License Agreement CVE-2026-5119 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-42523: fix memory leak in cd_device_db_load() and cd_profile_db_load() where sqlite3_exec() error_msg output was allocated but never freed Important TuxCare License Agreement CVE-2021-42523 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-1467: validate URI host characters when checking if a URI is valid - CVE-2026-1539: fix proxy credentials leak on cross-origin HTTP redirect Moderate TuxCare License Agreement CVE-2026-1467 CVE-2026-1539 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-30560: fix use-after-free in xsltApplyTemplates Important TuxCare License Agreement CVE-2021-30560 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27654: fix heap-based buffer overflow in ngx_http_dav_module triggered by destination URI shorter than alias length in COPY/MOVE requests Important TuxCare License Agreement CVE-2026-27654 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job - CVE-2026-39314: range check job-password-supported to prevent integer underflow in _ppdCreateFromIPP - CVE-2026-39316: expire per-printer subscriptions before deleting the printer to prevent use-after-free in cupsdDeleteTemporaryPrinters Important TuxCare License Agreement CVE-2026-34980 CVE-2026-39316 CVE-2026-39314 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks Important TuxCare License Agreement CVE-2026-40386 CVE-2026-40385 CVE-2026-32775 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3083, CVE-2026-3085: disable rtpqdm2depay element to fix heap buffer overflow and out-of-bounds write via crafted RTP payloads Important TuxCare License Agreement CVE-2026-3085 CVE-2026-3083 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2921: fix integer overflow in RIFF palette handling Important TuxCare License Agreement CVE-2026-2921 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-26996: fix ReDoS in bundled minimatch caused by consecutive non-globstar * characters, by coalescing them during pattern compilation - CVE-2026-27904: fix ReDoS in bundled minimatch from nested extglobs and multiple non-adjacent ** wildcards, by limiting globstar recursion Important TuxCare License Agreement CVE-2026-26996 CVE-2026-27904 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2239: fix heap-buffer-overflow in fread_pascal_string when processing PSD files and a follow-up NULL pointer dereference in load_resource_1006 alpha names handling - CVE-2026-2272: fix integer overflow in ICO file loading Moderate TuxCare License Agreement CVE-2026-2239 CVE-2026-2272 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-1801: use CRLF as line boundary when parsing chunked encoding data to prevent HTTP request smuggling via lone LF - CVE-2026-2443: reject Range header ends exceeding content length to prevent out-of-bounds read in byte range handling Moderate TuxCare License Agreement CVE-2026-1801 CVE-2026-2443 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27784: fix possible integer overflow on 32-bit platforms in ngx_http_mp4_module Moderate TuxCare License Agreement CVE-2026-27784 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4424: fix heap out-of-bounds read in RAR reader due to LZSS window size mismatch after PPMd block Important TuxCare License Agreement CVE-2026-4424 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-23868: fix double-free in GifMakeSavedImage Important TuxCare License Agreement CVE-2026-23868 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2006-10003: fix off-by-one heap buffer overflow in st_serial_stack growth check in Expat/Expat.xs startElement(); also backport upstream follow-up 2abd177 to initialize st_serial_stacksize=1024 after allocation Critical TuxCare License Agreement CVE-2006-10003 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34352: fix world-accessible SHM segment in x0vncserver by changing shmget() mode from 0777 to 0600 in ShmImage::Init() Critical TuxCare License Agreement CVE-2026-34352 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-3234 fix heap buffer overflow in op_replace() when replacing NUL after Tab in virtualedit mode Important TuxCare License Agreement CVE-2022-3234 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34079: restrict cached-file removal to alphanumeric targets in flatpak_switch_symlink_and_remove to prevent path-traversal unlink via a sandboxed-app-controlled symlink Important TuxCare License Agreement CVE-2026-34079 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34588 fix signed 32-bit integer overflow in PIZ decoder wavelet buffer arithmetic leading to out-of-bounds read/write Important TuxCare License Agreement CVE-2026-34588 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-2889: fix use-after-free with multiple line breaks in Vim9 expression by deferring the free of evalarg->eval_tofree Important TuxCare License Agreement CVE-2022-2982 CVE-2022-2889 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32647: fix buffer over-read/over-write in ngx_http_mp4_module via integer overflow, off-by-one boundary checks, and zero sync sample validation in stss atom - CVE-2026-27651: fix NULL pointer dereference in ngx_mail_auth_http_module when using CRAM-MD5 or APOP authentication with Auth-Wait response Important TuxCare License Agreement CVE-2026-32647 CVE-2026-27651 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-67030 fix zip slip via canonical path check in Expand Important TuxCare License Agreement CVE-2025-67030 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2023-3255 (qemu-kvm: VNC inflate_buffer infinite loop) [ELSCVE-57519] - Fix CVE-2023-6683 (qemu-kvm: VNC clipboard NULL pointer dereference) [ELSCVE-57516] Moderate TuxCare License Agreement CVE-2023-6683 CVE-2023-3255 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2021-38115: out-of-bounds read in read_header_tga() Moderate TuxCare License Agreement CVE-2021-38115 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-0586: fix infinite loop in RTMPT dissector rtmpt_get_amf_length Important TuxCare License Agreement CVE-2022-0586 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-41409 diagnose negative repeat value in pcre2test subject line (upstream 94e1c001) and change pcre2grep length variables from int to size_t to reject negative --buffer-size / --max-buffer-size (upstream 7549fdca) Important TuxCare License Agreement CVE-2022-41409 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-4185: fix infinite loop in RTMPT dissector on TCP sequence wraparound Important TuxCare License Agreement CVE-2021-4185 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32316: fix heap buffer overflow in jvp_string_append and jvp_string_copy_replace_bad caused by uint32_t overflow in size calculations for strings exceeding INT_MAX bytes Important TuxCare License Agreement CVE-2026-32316 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-4173: fix double free in Vim9 nested :def function definition - CVE-2022-3352: fix use-after-free when SpellFileMissing autocmd deletes the current buffer during spell file loading - CVE-2022-2343: fix heap buffer overflow in ins_compl_add_infercase() when completing a long line with 'infercase' set Important TuxCare License Agreement CVE-2021-4173 CVE-2022-3352 CVE-2022-2343 CVE-2022-2344 CVE-2021-4136 CVE-2021-3927 CVE-2022-1619 CVE-2022-2287 CVE-2022-4141 CVE-2022-2129 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2026-5121: heap buffer overflow in ISO9660 reader via invalid pz_log2_bs value in Rock Ridge ZF extension Important TuxCare License Agreement CVE-2026-5121 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-4181: sysdig event dissector SIGSEGV fix - CVE-2021-4182: rfc7468 file parser infinite loop fix - CVE-2021-4184: bt-dht endless loop fix - CVE-2021-4186: gryphon NULL pkt_info dereference fix - CVE-2021-4190: kafka dissector varint strictness fix - CVE-2022-0581: cms dissector globals-scoping fix - CVE-2022-0583: pvfs2 heap overflow OOB read fix Important TuxCare License Agreement CVE-2021-4182 CVE-2021-4181 CVE-2022-0581 CVE-2021-4184 CVE-2021-4190 CVE-2022-0583 CVE-2021-4186 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34986: fix go-jose panic on JWE decryption when encrypted_key field is empty Important TuxCare License Agreement CVE-2026-34986 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-3520: fix heap buffer overflow in do_put() when Visual-block put causes the end-column to underflow to a negative value Critical TuxCare License Agreement CVE-2022-3297 CVE-2021-3973 CVE-2022-3016 CVE-2022-2210 CVE-2022-3296 CVE-2022-3235 CVE-2022-2285 CVE-2022-3134 CVE-2022-2817 CVE-2022-2345 CVE-2022-3705 CVE-2022-2284 CVE-2022-3520 CVE-2022-3037 CVE-2022-2581 CVE-2021-4166 CVE-2022-3099 CVE-2022-2845 CVE-2022-2304 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Upgrade to openjdk-11.0.30+7 (GA). The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 - CVE-2025-65018: update libpng to 1.6.51 Important TuxCare License Agreement CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2025-65018 CVE-2025-64720 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-25883: fix ReDoS in bundled npm semver new Range and parseComparator caused by unbounded whitespace expansion in version ranges - CVE-2026-21710: fix HTTP prototype pollution in http.get/request via headersDistinct option by using null-prototype objects for header storage - CVE-2026-27135: fix bundled nghttp2 IGN_ALL flag bypass that allowed attackers to ignore header validation and smuggle malformed HTTP/2 requests Important TuxCare License Agreement CVE-2026-27135 CVE-2026-21710 CVE-2022-25883 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-29885: fix documentation stating EncryptInterceptor does not protect against DoS on an untrusted network Important TuxCare License Agreement CVE-2022-29885 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4887 fix heap buffer over-read in PCX file loader by adding bpp validation, tolerating off-by-one bytesperline values, and allocating one extra byte for line buffers Important TuxCare License Agreement CVE-2026-4887 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27631: fix integer overflow in preview component of PSD image parser Moderate TuxCare License Agreement CVE-2026-27631 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-2183: fix out-of-bounds read in get_lisp_indent() (src/indent.c) by guarding the `that++; amount++;` advance with `if (*that != NUL)` so the lisp auto-indent pointer does not walk past the line's NUL terminator Important TuxCare License Agreement CVE-2022-2183 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40169: fix out-of-bounds heap write in JSON encoder montageDirectory loop Moderate TuxCare License Agreement CVE-2026-40169 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-35385: scp legacy -O mode privilege escalation via umask bypass Important TuxCare License Agreement CVE-2026-35385 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebase to webkitgtk 2.52.3 to address WebKitGTK security advisories WSA-2026-0001 and WSA-2026-0002 (matches RHSA-2026:9692). - Drop all CVE-2025-* backport patches (Patch100..Patch112); the fixes are included in 2.52.3 upstream. - Drop fix-missing-typename.patch: target source file was removed upstream. - Adapt fix-compositemode-init.patch, fix-renderelement-binding.patch, and fix-renderflexbox-typename.patch to 2.52.3 line offsets (same semantic clang15 / libstdc++ compat fix). - Refresh all CentOS Stream 9-derived patches to the versions that ship with c9s webkit2gtk3-2.52.3 (glib-2-68, libsoup2, icu-67, g-ir-scanner-nonfatal, evolution-sandbox-warning, aarch64-build) and reorder them to match c9s so they apply with rpm's --fuzz=0 --strict mode. Our previously-carried versions targeted the 2.50.1 source tree and broke when applied against 2.52.3. - Switch build toolchain from Clang 15 to gcc-toolset-12 (GCC 12). AlmaLinux 9.2 ESU ships Clang 15 as its system compiler, but Clang 15 does not implement C++20 P0634R3 ("implicit typename") nor the `requires`-clause name-lookup fix needed to compile WebKit 2.52+. GCC 12 implements both and is fully supported upstream. %global toolchain is now gcc; BuildRequires updated accordingly; gcc-toolset-12 is enabled in %build via /opt/rh/gcc-toolset-12/enable. - Drop tarball signature/hash verification from %prep. Upstream's 2.52.3 .asc was signed with an expired DSA key (key expired 2026-04-14, signature made 2026-04-16), so gpgv 2.3.x refuses it. The tarball lives in Gerrit under change control, so the per-build verify step is redundant. Source1 (.asc) and Source2 (keyring) are removed along with their files. - CVEs resolved by this rebase (30 total): WSA-2026-0001 (fixed upstream in 2.50.5 / 2.50.6): CVE-2025-43433, CVE-2025-43438, CVE-2025-43441, CVE-2025-43457, CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635, CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676 WSA-2026-0002 (fixed in 2.52.1): CVE-2026-20643, CVE-2026-20664, CVE-2026-20665, CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28871 Older Apple waves superseded by this rebase (from WSA-2025-0008/0009/0010, previously tracked by WIP Gerrit change 245288): CVE-2025-13947, CVE-2025-14174, CVE-2025-43431, CVE-2025-43443, CVE-2025-43458, CVE-2025-43501, CVE-2025-43529, CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541 CVEs from these advisories that were already fixed in 2.50.1 (no action needed): CVE-2023-43010 (2.44.0), CVE-2025-31223 / CVE-2025-31277 (2.50.0), CVE-2025-43213 / CVE-2025-43214 (cherry-picked onto the webkitglib/2.50 branch before the 2.50.0 tag). Important TuxCare License Agreement CVE-2026-20665 CVE-2026-20676 CVE-2025-46299 CVE-2025-14174 CVE-2025-43541 CVE-2025-43441 CVE-2025-43511 CVE-2025-43458 CVE-2026-20643 CVE-2026-20664 CVE-2025-43529 CVE-2025-43433 CVE-2025-43438 CVE-2026-20635 CVE-2025-43431 CVE-2025-43536 CVE-2026-20652 CVE-2026-28857 CVE-2025-43501 CVE-2025-13947 CVE-2026-20608 CVE-2026-20636 CVE-2025-43457 CVE-2026-20644 CVE-2025-43531 CVE-2026-28859 CVE-2026-20691 CVE-2025-43535 CVE-2026-28871 CVE-2025-43443 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5201: jpeg loader rejects unsupported component counts in the non-incremental code path Important TuxCare License Agreement CVE-2026-5201 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33412: fix OS command injection via newline in glob() by adding \n to SHELL_SPECIAL in src/os_unix.c so newlines are escaped before the pattern is passed to the user's shell Important TuxCare License Agreement CVE-2026-33412 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2369: fix integer underflow in sniff_unknown() on zero-length buffer that caused an out-of-bounds read in the content sniffer Critical TuxCare License Agreement CVE-2026-2369 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check Critical TuxCare License Agreement CVE-2026-6100 CVE-2026-4786 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6100 fix use-after-free in lzma/bz2 decompressor by clearing the dangling next_in pointer after MemoryError so a re-used decompressor cannot read or write through a stale buffer pointer Critical TuxCare License Agreement CVE-2026-6100 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check by validating url after %action expansion and reordering replace() calls so the dash-prefix check sees the final argument Important TuxCare License Agreement CVE-2026-4786 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33999: fix buffer re-use in _XkbSetCompatMap() (ELSCVE-122668) - CVE-2026-34001: fix use-after-free in miSyncTriggerFence() (ELSCVE-122664) - CVE-2026-34003: add bounds checking in CheckKeyTypes() and companion helpers (ELSCVE-122672) Important TuxCare License Agreement CVE-2026-34001 CVE-2026-33999 CVE-2026-34003 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33999: fix buffer re-use in _XkbSetCompatMap() (ELSCVE-122736) - CVE-2026-34001: fix use-after-free in miSyncTriggerFence() (ELSCVE-122732) - CVE-2026-34003: add bounds checking in CheckKeyTypes() and companion helpers (ELSCVE-122740) Important TuxCare License Agreement CVE-2026-34001 CVE-2026-33999 CVE-2026-34003 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-21413: fix heap-based buffer overflow in lossless_jpeg_load_raw() by adding col bounds check (ELSCVE-122352) Important TuxCare License Agreement CVE-2026-21413 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-35177: fix path traversal bypass in zip.vim by using simplify() to detect attacks that circumvent the previous regex-only check - CVE-2026-39881: fix command injection in netbeans interface via unsanitized defineAnnoType and specialKeys parameters Important TuxCare License Agreement CVE-2026-39881 CVE-2026-35177 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-42516: fix HTTP response splitting in core httpd via header merging refactor in modules/http/http_filters.c - CVE-2024-43204: fix SSRF in mod_proxy when mod_headers is configured to modify Content-Type from request input Moderate TuxCare License Agreement CVE-2024-43204 CVE-2024-42516 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11412: fix out-of-bounds read in bfd_elf_gc_record_vtentry - CVE-2025-11413: fix out-of-bounds read in elf_link_add_object_symbols - CVE-2025-11839: fix abort in tg_tag_type with fuzzed input - CVE-2025-11840: fix SEGV from NULL howto name in coff reloc processing - CVE-2025-3198: fix memory leak in objdump display_info - CVE-2026-4647: fix out-of-bounds read in XCOFF relocation processing - CVE-2025-69645: fix abort in byte_get_little_endian from malformed DWARF - CVE-2025-69652: fix abort in readelf from malformed DWARF debug info Moderate TuxCare License Agreement CVE-2025-69645 CVE-2025-11413 CVE-2025-11412 CVE-2025-11839 CVE-2025-11840 CVE-2026-4647 CVE-2025-69652 CVE-2025-3198 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3497: fix information disclosure / DoS in GSSAPI key exchange by initialising gssbuf, recv_tok, msg_tok to GSS_C_EMPTY_BUFFER and replacing non-terminating sshpkt_disconnect() with ssh_packet_disconnect() in kexgssc.c / kexgsss.c Important TuxCare License Agreement CVE-2026-3497 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33416: fix use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE - CVE-2026-33636: fix out-of-bounds read/write in ARM NEON palette expansion Important TuxCare License Agreement CVE-2026-33416 CVE-2026-33636 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-2124: fix out-of-bounds read in current_quote() when searching for quotes goes over the end of the line (textobject.c, upstream patch 8.2.5120) - CVE-2022-2126: fix invalid index use in suggest_trie_walk() when ts_fidx is zero (spellsuggest.c, upstream patch 8.2.5123) - CVE-2022-2207: fix read before start of line with BS in Replace mode (edit.c, upstream patch 8.2.5162) - CVE-2022-1720: fix read past end of line with "gf" in Visual block mode (normal.c, upstream patch 8.2.4956) - CVE-2022-2042: fix uninitialized value and use-after-free in spell command (spell.c, upstream patch 8.2.5072) Important TuxCare License Agreement CVE-2022-2124 CVE-2022-2207 CVE-2022-2042 CVE-2022-2126 CVE-2022-1720 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-35535: failure to drop privileges before running mailer Important TuxCare License Agreement CVE-2026-35535 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-46835: fix Git GUI from creating and overwriting arbitrary files when editing a file in a maliciously crafted repository directory Low TuxCare License Agreement CVE-2025-46835 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6170: fix potential buffer overflows in xmllint interactive shell Low TuxCare License Agreement CVE-2025-6170 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5215: fix nbd_get_size returning negative value for sizes larger than INT64_MAX Moderate TuxCare License Agreement CVE-2023-5215 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-2125: fix out-of-bounds read in get_lisp_indent(); break out of the inner loop on NUL byte (indent.c, upstream patch 8.2.5122) - CVE-2021-3974: fix use-after-free in nfa_regmatch() when a substitute callback frees the regline during a mark comparison; save col and re-fetch rex.line via reg_getline() after getmark_buf() (regexp.c + regexp_nfa.c, upstream patch 8.2.3612) - CVE-2022-2206: fix OOB read after terminal resize lowers Rows below cmdline_row / msg_row; clamp both to Rows - 1 in check_shellsize() (term.c, upstream patch 8.2.5160) - CVE-2022-2946: fix use-after-free in do_tag() when 'tagfunc' deletes the buffer; make a vim_strsave copy of the tagstack tagname before calling user code (tag.c, upstream patch 9.0.0246) - CVE-2022-2286: fix heap-buffer-overflow in the Ctrl-E completion-stop path when the completion leader shrinks below the original text; bounds-check compl_len against replacement string length before ins_bytes_len() (insexpand.c, upstream patch 9.0.0020) Important TuxCare License Agreement CVE-2022-2206 CVE-2021-3974 CVE-2022-2286 CVE-2022-2125 CVE-2022-2946 CVE-2022-4292 CVE-2022-3256 CVE-2022-2175 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-3826: fix heap/stack buffer overflow in dlang_lname (libiberty d-demangle.c) via missing length check in dlang_symbol_backref Moderate TuxCare License Agreement CVE-2021-3826 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27857: limit number of open IMAP parser lists in imap-login to prevent excessive memory usage DoS via deeply-nested parentheses Important TuxCare License Agreement CVE-2026-27857 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-28387: fix use of OPENSSL_free instead of X509_free on dane->mcert in dane_match() (X509 reference-count bypass / UAF) - CVE-2026-28388: fix NULL deref in check_delta_base when a delta CRL carries the Delta CRL Indicator extension but lacks a CRL Number - CVE-2026-28389: fix NULL deref in dh_cms_set_shared_info / ecdh_cms_set_shared_info on absent CMS KARI parameters - CVE-2026-31789: fix integer overflow in OPENSSL_buf2hexstr causing heap OOB write when converting > SIZE_MAX/3 bytes (32-bit builds) Important TuxCare License Agreement CVE-2026-28389 CVE-2026-28390 CVE-2026-28387 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-31790: fix RSA KEM RSASVE encapsulation memory leak by validating RSA_public_encrypt() return value and cleansing secret on failure Moderate TuxCare License Agreement CVE-2026-31790 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to shenandoah-jdk8u492-b09 (RHSA-2026:9683) - Security fixes from OpenJDK 8u492-b09: - CVE-2026-22007: enhance crypto algorithm support - CVE-2026-22013: improve Kerberos credentialing - CVE-2026-22016: enhance Path Factories Redux (JAXP information disclosure) - CVE-2026-22018: enhance Zip file reading - CVE-2026-22021: enhance certificate chain validation - CVE-2026-23865: update FreeType to 2.14.1 - CVE-2026-34268: enhance key generation - Add -Wno-error to EXTRA_CPP_FLAGS to tolerate new compiler warnings in 8u492-b09 Important TuxCare License Agreement CVE-2026-34268 CVE-2026-22007 CVE-2026-22016 CVE-2026-23865 CVE-2026-22013 CVE-2026-22021 CVE-2026-22018 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-2313: Prevent bpftrace from loading compromised Linux headers when extracting kernel headers from temporary directory Low TuxCare License Agreement CVE-2024-2313 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-0966: avoid 1-byte heap buffer underflow in ssh_get_hexa() on NULL/zero-length input Important TuxCare License Agreement CVE-2026-0966 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5455: fix qDecodeDataUrl crash on malformed data URL with charset - CVE-2024-25580: fix KTX file reading buffer overflow - CVE-2024-39936: delay HTTP/2 communication until encrypted() can be responded to (includes prerequisite to emit encrypted() on H2 path) Moderate TuxCare License Agreement CVE-2024-39936 CVE-2024-25580 CVE-2025-5455 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuild with golang >= 1.22.5 to fix CVE-2022-1705, CVE-2022-41717, CVE-2023-29406, CVE-2023-39318, CVE-2023-39319, CVE-2023-39326, CVE-2023-45290, CVE-2024-24785, CVE-2024-24791 Moderate TuxCare License Agreement CVE-2023-39319 CVE-2022-41717 CVE-2024-24785 CVE-2023-39326 CVE-2023-45290 CVE-2023-39318 CVE-2022-1705 CVE-2024-24791 CVE-2023-29406 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0408: fix XSELinux crash by calling XACE hooks when creating GLX buffers - CVE-2025-49175: fix out-of-bounds read in animated cursor creation when client provides zero cursors - CVE-2025-49178: fix possible client request hang caused by leftover bytes-to-ignore when sharing input buffer Moderate TuxCare License Agreement CVE-2025-49175 CVE-2024-0408 CVE-2025-49178 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-24401: fix avahi-daemon crash on receipt of unsolicited mDNS responses containing self-referencing CNAME records by detecting CNAME loops in lookup_handle_cname() to prevent uncontrolled recursion and stack exhaustion; also includes two related DoS fixes in the same lookup path from upstream PR #682 Moderate TuxCare License Agreement CVE-2026-24401 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-3019: net: improper synchronization in net device backends - CVE-2023-42467: scsi-disk: division by zero in scsi_disk_emulate_mode_select - CVE-2024-26327: pcie_sriov: NumVFs validation buffer overflow Moderate TuxCare License Agreement CVE-2023-42467 CVE-2024-26327 CVE-2023-3019 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-45770: guard pmpost against symlink attacks on $PCP_LOG_DIR/NOTICES - CVE-2024-45769: harden libpcp __pmDecodeValueSet to prevent heap corruption from crafted PDUs Moderate TuxCare License Agreement CVE-2024-45769 CVE-2024-45770 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-0585: fix large/infinite loops in multiple dissectors (AMP, ATN-ULCS, BP, GDSDB, P_MUL, WAP, ZigBee ZCL, OpenFlow v5/v6, IPDC, TDS, ASN.1 PER, FT_UINT_BYTES/STRING) - CVE-2022-4344: fix Kafka dissector memory exhaustion via decompression/loop bounds - CVE-2023-0666: fix RTPS dissector heap-based buffer overflow in g_strlcpy dest_size - CVE-2023-0668: fix synphasor dissector heap-based out-of-bounds read via val_to_str_const - CVE-2023-2855: fix candump file parser stack buffer overflow on too-long frame length - CVE-2023-2856: fix VMS TCPIPtrace file parser stack overflow in packet length search - CVE-2023-2858: fix NetScaler nstrace v10 file parser heap buffer overflow - CVE-2023-2952: fix XRA dissector infinite loop via integer overflow Moderate TuxCare License Agreement CVE-2023-0668 CVE-2023-2856 CVE-2023-2858 CVE-2023-0666 CVE-2022-4344 CVE-2023-2952 CVE-2023-2855 CVE-2022-0585 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-35945: fix memory leak on RST_STREAM followed by GOAWAY - CVE-2026-27135: fix iframe state validation to prevent assertion failure Important TuxCare License Agreement CVE-2023-35945 CVE-2026-27135 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-0672: reject control characters in http.cookies cookie names, values, and parameters to prevent header injection - CVE-2026-3644: reject control characters in Morsel.update(), |= operator, and unpickling paths missed by CVE-2026-0672; add output validation to BaseCookie.js_output() - CVE-2026-2297: ensure SourcelessFileLoader uses io.open_code so sys.audit handlers fire for legacy .pyc imports - CVE-2025-8291: validate ZIP64 End of Central Directory locator offset to prevent ZIP archive parser confusion - CVE-2025-6069: fix quadratic complexity in html.parser.HTMLParser when processing crafted malformed inputs - CVE-2025-4516: fix use-after-free in unicode-escape decoder when an error handler is invoked - CVE-2025-1795: stop incorrectly RFC 2047 encoding the comma separator when an address list is folded Moderate TuxCare License Agreement CVE-2025-4516 CVE-2026-3644 CVE-2026-2297 CVE-2026-0672 CVE-2025-8291 CVE-2025-6069 CVE-2025-1795 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-4217: fix null pointer dereference in EF_UNIPATH extra field handling - CVE-2022-0529: fix heap-based buffer overflow in wide_to_local_string - CVE-2022-0530: fix null pointer dereference on invalid UTF-8 input Moderate TuxCare License Agreement CVE-2021-4217 CVE-2022-0529 CVE-2022-0530 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-0158: fix Vim9 reading before start of line with single $ - CVE-2022-0696: fix crash when switching tabpage in cmdline window - CVE-2022-1674: fix crash when matching buffer with invalid pattern - CVE-2022-1725: fix using NULL regexp program in buffer matching - CVE-2022-1771: fix recursive command line crash by limiting getcmdline depth - CVE-2022-2208: fix crash when deleting buffers in diff mode - CVE-2022-2598: fix invalid memory access in diff mode with dp and undo - CVE-2022-2874: fix NULL pointer when skipping compiled Vim9 code - CVE-2022-2923: fix crash with mkspell on empty dictionary file - CVE-2022-2980: fix crash with mouse click when TabPageIdxs not initialized Moderate TuxCare License Agreement CVE-2022-2874 CVE-2022-1771 CVE-2022-0696 CVE-2022-2923 CVE-2022-2208 CVE-2022-0158 CVE-2022-1725 CVE-2022-1674 CVE-2022-2598 CVE-2022-2980 CVE-2021-3875 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33947: limit path depth in jv_setpath, jv_getpath, and jv_delpaths to prevent stack overflow from deep path arrays - CVE-2026-33948: remove strlen-based length calculation that truncated JSON input at embedded NUL bytes, preventing parser-differential attacks Moderate TuxCare License Agreement CVE-2026-33947 CVE-2026-33948 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4775: signed integer overflow in YCbCr tile decoders leading to heap overflow Important TuxCare License Agreement CVE-2026-4775 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789: out of bounds read on XPM with corrupted colormap Moderate TuxCare License Agreement CVE-2023-43788 CVE-2023-43789 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-4373 fix buffer underflow in g_string_insert_unichar() and other GString APIs by carefully handling gssize parameters in glib/gstring.c Moderate TuxCare License Agreement CVE-2025-4373 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41079: limit num_bytes for SNMP string values to prevent out-of-bounds read in asn1_decode_snmp Moderate TuxCare License Agreement CVE-2026-41079 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-10158: fix invalid access to files array in sender - CVE-2024-12747: fix symlink race condition in sender - CVE-2024-12086: fix server leak of arbitrary client files via crafted checksums and fuzzy basis Moderate TuxCare License Agreement CVE-2024-12747 CVE-2025-10158 CVE-2024-12086 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-0964: reject invalid filenames in ssh_scp_pull_request to prevent path traversal via SCP Moderate TuxCare License Agreement CVE-2025-5351 CVE-2026-0967 CVE-2026-0964 CVE-2025-8114 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-43681: fix bgpd crash on malformed BGP OPEN messages with insufficient data - CVE-2022-40318: fix out-of-bounds read in bgp_open_option_parse with extended option params - CVE-2023-31489: fix out-of-bounds read in BGP Long-lived Graceful-Restart capability parsing - CVE-2023-46752: fix bgpd crash on malformed MP_REACH_NLRI packets Moderate TuxCare License Agreement CVE-2022-40318 CVE-2023-46752 CVE-2023-31489 CVE-2022-43681 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6104: backport go-retryablehttp URL redaction so basic-auth credentials embedded in request URLs are not written to logs/errors - CVE-2024-28180: backport go-jose decompression-bomb fix to both vendored major versions (github.com/go-jose/go-jose/v3 and gopkg.in/square/go-jose.v2) Moderate TuxCare License Agreement CVE-2024-6104 CVE-2024-28180 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-1219: fix wrong content-type header on libxml streams redirect Moderate TuxCare License Agreement CVE-2025-1219 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-41317: fix exposure of sensitive cache manager information via non-HTTP URI schemes due to typo in default manager ACL regex Moderate TuxCare License Agreement CVE-2022-41317 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27858: bound managesieve-login AUTHENTICATE initial response size to prevent memory exhaustion DoS before authentication - CVE-2025-59032: fix managesieve-login crash when AUTHENTICATE command did not finish on the first call due to literal SASL initial response Important TuxCare License Agreement CVE-2026-27858 CVE-2025-59032 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-3278: fix crash when using NUL in buffer that uses :source; don't get a next line when skipping over NL in eval_next_non_blank() (eval.c, upstream patch 9.0.0552) - CVE-2023-48234: fix overflow when getting count for normal z command; break out of nv_zet() count loop when n > LONG_MAX/10 (normal.c, upstream patch 9.0.2109) - CVE-2023-48236: fix overflow in get_number() when using z= with a large count; return 0 when n > INT_MAX/10 (misc1.c, upstream patch 9.0.2111) - CVE-2025-26603: fix use-after-free in str_to_reg() when redirecting :display to a clipboard register; skip the active redir register including the * and + clipboard fallbacks to register 0 (register.c, upstream patch 9.1.1115) Moderate TuxCare License Agreement CVE-2023-48234 CVE-2022-3278 CVE-2023-48236 CVE-2022-4293 CVE-2023-48231 CVE-2024-47814 CVE-2023-48235 CVE-2024-41957 CVE-2025-26603 CVE-2024-43374 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40685: dewrap() OOB read/write on trailing backslash in JSON header - CVE-2026-40687: SPA authenticator OOB read/write and base64 decode infoleak - Refresh Exim-Maintainers-Keyring.asc to verify the 4.99.x release tarball signature Critical TuxCare License Agreement CVE-2026-40687 CVE-2026-40685 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-47038: fix write past buffer end via illegal user-defined Unicode property, for almalinux9.2esu - CVE-2025-40909: clone dirhandles without fchdir, for almalinux9.2esu Moderate TuxCare License Agreement CVE-2025-40909 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27855: use translated username in auth_cache_remove() to prevent OTP authentication replay attack - CVE-2026-27856: use timing-safe credential comparison in doveadm HTTP and TCP authentication paths Moderate TuxCare License Agreement CVE-2026-27855 CVE-2026-27856 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-2175: fix invalid memory access in cmdline_insert_reg() when using an expression on the command line; save/restore new_cmdpos around the expression evaluation (ex_getln.c, upstream patch 8.2.5148; hunk 3 context adjusted for 8.2.2637) - CVE-2022-3256: fix use-after-free in movemark() when an autocommand changes the mark; make a local copy of the fmark before potentially triggering buffer autocommands (mark.c, upstream patch 9.0.0530) - CVE-2022-4292: fix use-after-free in did_set_spelllang() when a SpellFileMissing autocommand uses :bwipe to close the current window; also bail out when the window is no longer valid (spell.c, upstream patch 9.0.0882) - CVE-2022-3324: fix negative-index buffer access caused by negative window width; clamp next_curwin_size in win_equal_rec() and clamp wp->w_width in win_new_width() (window.c, upstream patch 9.0.0598) Important TuxCare License Agreement CVE-2022-3324 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-2257: fix out-of-bounds read in str2special() when advancing past the trailing NUL of a menu item with only a modifier (message.c, upstream patch 9.0.0009) - CVE-2022-2182: fix heap buffer overflow in parse_cmd_address() when address line 0 is used with the ";" separator (":0;/PATTERN/"); clamp cursor column via check_cursor_col() for line 0 (ex_docmd.c, upstream patch 8.2.5150) - CVE-2022-2849: return zero byte length for NUL in latin_ptr2len() and dbcs_ptr2len() so iterating past the end of a null string cannot dereference an invalid address (mbyte.c, upstream patch 9.0.0220; minimal form — only the functional changes backported) Important TuxCare License Agreement CVE-2022-2182 CVE-2022-2849 CVE-2022-2257 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-24072: use AP_EXPR_FLAG_RESTRICTED in htaccess - CVE-2026-29169: mod_dav_lock: use the right dav_lock_discovery - CVE-2026-33006: mod_auth_digest: use apr_crypto_equals - CVE-2026-33007: mod_authn_socache: validate URL earlier - CVE-2026-33523: scan outgoing status line for newlines and controls - CVE-2026-33857: fix length checks in AJP msg_get functions - CVE-2026-34032: fix ajp_msg_get_string buffer checks - CVE-2026-34059: fix ajp_parse_data message len check Important TuxCare License Agreement CVE-2026-34059 CVE-2026-29169 CVE-2026-33006 CVE-2026-24072 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-33007 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-15282: reject control characters in data: URL mediatypes - CVE-2025-11468: preserve parens when folding email comments to prevent header injection Moderate TuxCare License Agreement CVE-2025-15282 CVE-2025-11468 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33554: fix buffer overflows in ipmi-oem response handling for dell get-last-post-code, supermicro extra-firmware-info, and wistron read-proprietary-string subcommands Important TuxCare License Agreement CVE-2026-33554 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-48063: fix excessive memory allocation in load_specific_debug_section for corrupt ELF Moderate TuxCare License Agreement CVE-2022-48063 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-28756: fix ReDoS in Time.rfc2822 by linearizing the RFC2822 parser regex in lib/time.rb to prevent quadratic backtracking on crafted invalid input Moderate TuxCare License Agreement CVE-2023-28756 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-24786: fix infinite loop in vendored google.golang.org/protobuf protojson.Unmarshal on malformed JSON by handling EOF in skipJSONValue and rejecting ObjectClose after a Name token in Decoder.Read Moderate TuxCare License Agreement CVE-2024-24786 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4878: cap_set_file() TOCTOU race via path-based xattr operations Important TuxCare License Agreement CVE-2026-4878 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-29508: heap pointer disclosure in pdf_base_font_alloc via synthesized BaseFont name - CVE-2025-48708: argument sanitisation missed '#' separator, leaking -sUserPassword#secret values into output PDF metadata Low TuxCare License Agreement CVE-2024-29508 CVE-2025-48708 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41142: fix integer overflow in ImageChannel::resize() pixel count computation leading to heap out-of-bounds write via the OpenEXRUtil public API Critical TuxCare License Agreement CVE-2026-41142 CVE-2026-42217 CVE-2026-42216 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33845: fix integer underflow in DTLS handshake reassembly that allowed a remote heap overrun via crafted zero-length fragments Critical TuxCare License Agreement CVE-2026-33845 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-0922: set default ldap client sasl wrapping to seal - Refresh samba-pubkey_AA99442FB680B620.gpg (expiry extended to 2027-12-12) Moderate TuxCare License Agreement CVE-2023-0922 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - net: skbuff: propagate shared-frag marker through pskb_copy() - HID: ignore non-functional sensor in HP 5MP Camera {CVE-2025-21992} - net: fix crash when config small gso_max_size/gso_ipv4_max_size {CVE-2024-50258} - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() {CVE-2024-53042} - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - serial: imx: Add missing .thaw_noirq hook {CVE-2022-49841} - module: ensure that kobject_put() is safe for module type kobjects {CVE-2025-37995} - udf: Fix uninitialized array access for some pathnames {CVE-2023-53165} - ACPICA: Avoid undefined behavior: applying zero offset to null pointer {CVE-2023-53182} - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381} - platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data {CVE-2026-23370} - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382} - icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398} - net/sched: ets: fix divide by zero in the offload path {CVE-2026-23379} - ice: Fix memory leak in ice_set_ringparam() {CVE-2026-23389} - wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367} - HID: asus: avoid memory leak in asus_report_fixup() {CVE-2026-31524} - xprtrdma: treat all calls not a bcall when bc_serv is NULL {CVE-2022-49321} - mm/mempolicy: fix uninit-value in mpol_rebind_policy() {CVE-2022-49567} - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails {CVE-2022-49549} - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). {CVE-2022-49344} - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data {CVE-2022-50536} - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() {CVE-2023-53578} - wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() {CVE-2023-53570} - mptcp: fix race on unaccepted mptcp sockets {CVE-2022-49669} - ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318} - wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() {CVE-2026-23315} - net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check {CVE-2026-23447} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - apparmor: Fix double free of ns_name in aa_replace_profiles() {CVE-2026-23408} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - i2c: piix4: Fix a memory leak in the EFCH MMIO support {CVE-2022-49653} Important TuxCare License Agreement CVE-2026-23367 CVE-2025-37995 CVE-2023-53165 CVE-2026-23318 CVE-2026-23381 CVE-2023-53570 CVE-2026-23370 CVE-2023-53182 CVE-2026-23315 CVE-2026-23397 CVE-2022-49321 CVE-2026-23389 CVE-2026-31524 CVE-2026-23388 CVE-2022-49344 CVE-2026-31602 CVE-2022-49567 CVE-2026-23447 CVE-2023-53578 CVE-2024-53042 CVE-2026-23382 CVE-2026-23408 CVE-2022-49669 CVE-2022-49841 CVE-2024-50258 CVE-2022-49653 CVE-2022-50536 CVE-2026-46300 CVE-2026-23398 CVE-2025-21992 CVE-2022-49549 CVE-2026-23379 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-48065: Fix memory leak in function find_abstract_instance in dwarf2.c and free allocated memory. Moderate TuxCare License Agreement CVE-2022-48065 CVE-2022-47011 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-31879: do not propagate Authorization/Cookie headers across HTTP 3xx redirects (openSUSE patch) Moderate TuxCare License Agreement CVE-2021-31879 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-39804: fix crash on PAX archive with malformed extended header attributes in locate_handler and xattr_decoder Low TuxCare License Agreement CVE-2023-39804 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42945: fix heap buffer overflow in ngx_http_rewrite_module when an unnamed PCRE capture group with '?' in the replacement is followed by another rewrite, if, or set directive; clear stale is_args flag in regex end code to prevent buffer overrun and possible worker crash or code execution Important TuxCare License Agreement CVE-2026-42945 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-23631: fix use-after-free in readSyncBulkPayload when fullsync happens while a Lua script is timed out on the replica - CVE-2026-25243: fix invalid memory access in RESTORE on crafted zipmap, listpack and stream PEL payloads Important TuxCare License Agreement CVE-2026-23631 CVE-2026-25243 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-28780: heap-based buffer overflow in ajp_msg_check_header() in mod_proxy_ajp when proxying to a malicious AJP backend that returns an oversized response, allowing a 4-byte out-of-bounds write past the heap buffer Important TuxCare License Agreement CVE-2026-28780 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34982: fix vim modeline sandbox bypass via complete/guitabtooltip/printheader options and mapset() Important TuxCare License Agreement CVE-2026-34982 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-6710: stored XSS in mod_cluster-manager HTML output via virtual host and context names rendered without HTML escaping - CVE-2024-10306: unauthorized MCMP requests due to <Directory> directive being ignored for protocol-handler filtering; runtime guard now refuses <Directory> siblings of EnableMCPMReceive, and the shipped conf.sample uses <Location> Moderate TuxCare License Agreement CVE-2024-10306 CVE-2023-6710 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4153: fix heap-based buffer overflow in PSP file parser by computing proper line_width for bit depths 1 and 4 with small widths - CVE-2026-4154: fix integer overflow and buffer overflow in XPM file parser by adding GIMP_MAX_IMAGE_SIZE bounds checks and using g_try_new Important TuxCare License Agreement CVE-2026-4150 CVE-2026-4153 CVE-2026-4154 CVE-2026-4152 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-45802: fix deferred memory reclaim of reset HTTP/2 streams Moderate TuxCare License Agreement CVE-2023-45802 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-43964: fix buffer over-read in dsn_split() when an enhanced status code is not followed by other text Important TuxCare License Agreement CVE-2026-43964 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5455: fix CSRF vulnerability by adding Referer header check to all session endpoints - CVE-2024-1481: validate Kerberos principal name before kinit and pass it with -- separator to prevent option injection - CVE-2024-11029: scrub administrative passwords from process command line and pass OIDC client secret via stdin Moderate TuxCare License Agreement CVE-2024-1481 CVE-2024-11029 CVE-2023-5455 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4948: use PK_ACTION_CONFIG for setZoneSettings2/setPolicySettings to require write authorization Moderate TuxCare License Agreement CVE-2026-4948 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5545: wrong reuse of HTTP Negotiate connection; only allow an existing connection to be reused and "upgraded" to NTLM when neither NTLM nor Negotiate authentication is in flight on it Moderate TuxCare License Agreement CVE-2026-5545 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34757: use-after-free in png_set_PLTE, png_set_tRNS, png_set_hIST, png_set_text, png_set_sPLT and png_set_unknown_chunks when the caller passes the pointer returned by the corresponding getter back to the setter Moderate TuxCare License Agreement CVE-2026-34757 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-5953: fix DoS via malformed password hash on bind - CVE-2024-2199: fix DoS via malformed userPassword modify - CVE-2025-2487: fix NULL pointer deref on failed MODDN operations Moderate TuxCare License Agreement CVE-2025-2487 CVE-2024-2199 CVE-2024-5953 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-60753: denial of service in bsdtar -s substitution when the regular expression matches a zero-length string, causing an infinite loop in apply_substitution Moderate TuxCare License Agreement CVE-2025-60753 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-28544: fix authz copyfrom path information leak in svn log -v Moderate TuxCare License Agreement CVE-2021-28544 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-40403: make generate-id() deterministic to prevent memory layout leak Moderate TuxCare License Agreement CVE-2023-40403 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - ptrace: require CAP_SYS_PTRACE when task has no mm - net: udp_offload: propagate SKBFL_SHARED_FRAG in skb_gro_receive_list {CVE-2026-46300} - can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532} Important TuxCare License Agreement CVE-2026-31532 CVE-2026-46333 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2708: reject duplicate Content-Length headers with different values to prevent HTTP request smuggling per RFC 9110 section 7.7 Moderate TuxCare License Agreement CVE-2026-2708 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-38533: fix heap buffer overflow in bfd_getl32 from strip_main with crafted COFF file - CVE-2022-47007: fix memory leak in stab_demangle_v3_arg in stabs.c - CVE-2022-47008: fix memory leak in make_tempdir and make_tempname in bucomm.c - CVE-2022-47010: fix memory leak in pr_function_type in prdbg.c - CVE-2022-48064: fix excessive memory consumption in bfd_dwarf2_find_nearest_line_with_alt - CVE-2023-1972: fix heap buffer overflow in _bfd_elf_slurp_version_tables Moderate TuxCare License Agreement CVE-2022-38533 CVE-2022-47008 CVE-2022-48064 CVE-2023-1972 CVE-2022-47010 CVE-2022-47007 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-37519: heap buffer overflow in authfile_load() when the auth file lacks a trailing newline; missing bounds check on fgets() and missing NUL check in the user-entry parse loop allow local DoS via a crafted --auth-file. Moderate TuxCare License Agreement CVE-2021-37519 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - fix CVE-2023-6693: virtio-net stack overflow via large guest_hdr_len Moderate TuxCare License Agreement CVE-2023-6693 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-28755: fix ReDoS in URI parser by converting greedy quantifiers to possessive quantifiers in RFC3986_URI and RFC3986_relative_ref Moderate TuxCare License Agreement CVE-2023-28755 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-40661: fix multiple smartcard pkcs15init buffer overflows, underflows and out-of-bounds writes (sc_pkcs15init_rmdir, setcos_create_key, cosm_new_file, cosm_create_key, sc_pkcs15_get_lastupdate, iasecc-sdo, entersafe, epass2003 keygen) Moderate TuxCare License Agreement CVE-2023-40661 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - fix CVE-2024-34055: denial of service via memory exhaustion using oversized IMAP literals and command arguments - disable cassandane test runner on x86_64 and aarch64 due to multiple unrelated mock-environment issues (imaptest binary SIGSEGV, slow file I/O, alarm scheduling races); cunit which exercises the CVE fix continues to run on all arches Moderate TuxCare License Agreement CVE-2024-34055 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2020-11023: fix XSS by removing bundled jQuery from Doxygen-generated tbb-doc HTML Moderate TuxCare License Agreement CVE-2020-11023 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-7258: fix signed-char passing to ctype.h functions in urldecode and url parsing (GHSA-m8rr-4c36-8gq4) - CVE-2026-7262: fix NULL check in to_zval_map() using wrong variable xmlKey instead of xmlValue, causing crash in SOAP typemap decoding (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7568: fix signed integer overflow in metaphone() by switching w_idx/idx/how_far from int to size_t in ext/standard/metaphone.c Important TuxCare License Agreement CVE-2026-7262 CVE-2026-7258 CVE-2026-7568 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-45186: fix quadratic runtime behavior in attribute collision detection Important TuxCare License Agreement CVE-2026-45186 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-5742: emergency_save() applied chmod/chown to a path after the descriptor was closed, allowing a symlink swap to redirect the ownership change to an attacker-controlled file - Backport of upstream commit 5e7a3c2e from nano v8.0, adapted to the 5.6.1 codebase (write_file signature predates the SPECIAL/NONOTES refactor) Moderate TuxCare License Agreement CVE-2024-5742 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40164: randomize hash seed to mitigate hash collision DoS - CVE-2026-40612: limit containment check depth - CVE-2026-41256: fix NUL truncation in program files loaded with -f - CVE-2026-41257: fix signed-int overflow in stack_reallocate - CVE-2026-43894: cap numeric literal length to DEC_MAX_DIGITS - CVE-2026-43895: reject embedded NUL bytes in module import paths - CVE-2026-43896: limit recursive object merge depth - CVE-2026-44777: detect circular module imports Important TuxCare License Agreement CVE-2026-43894 CVE-2026-41256 CVE-2026-43896 CVE-2026-43895 CVE-2026-44777 CVE-2026-40612 CVE-2026-39979 CVE-2026-40164 CVE-2026-41257 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34757: Use snapshot-before-free and defer-free patterns to prevent use-after-free when a caller passes a pointer obtained from png_get_PLTE, png_get_tRNS, png_get_hIST, png_get_text, png_get_sPLT, or png_get_unknown_chunks back into the corresponding setter (issues 836 and 837) Moderate TuxCare License Agreement CVE-2026-34757 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0747: Document::Open inheriting CSP from a different window - CVE-2025-5268: Memory safety bugs (gfxFont mHasSpaceFeatures atomicity, PresShell event-handler UAF, wasm uncheckedReadValType missing types) Moderate TuxCare License Agreement CVE-2024-0747 CVE-2025-5268 CVE-2024-0749 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32280: Limit processing of attacker-supplied intermediate certificates during chain building and introduce bound on number of intermediates, preventing uncontrolled work and denial of service Important TuxCare License Agreement CVE-2026-32280 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5992: implement constant-time PKCS#1 v1.5 depadding to prevent Bleichenbacher/Marvin-style timing attacks - CVE-2025-49010: fix stack buffer overflow write in iso7816 GET RESPONSE - CVE-2025-66037: fix out-of-bounds heap read in sc_pkcs15_pubkey_from_spki_fields - CVE-2025-66038: fix buffer over-read in sc_compacttlv_find_tag - CVE-2025-66215: fix stack buffer overflow write in card-oberthur auth_compute_signature and auth_read_record Moderate TuxCare License Agreement CVE-2025-66037 CVE-2025-66215 CVE-2025-66038 CVE-2025-49010 CVE-2023-5992 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-46544: fix insecure file permissions on shared memory and lock files Moderate TuxCare License Agreement CVE-2024-46544 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-1519: fix unbounded NSEC3 iterations when validating referrals to unsigned delegations Important TuxCare License Agreement CVE-2026-1519 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3441: XCOFF linker XTY_LD x_scnlen out-of-bounds read - CVE-2026-3442: XCOFF linker r_symndx out-of-bounds read in obj_xcoff_sym_hashes - CVE-2025-7545: objcopy heap buffer overflow on --interleave with crafted small input - CVE-2025-5245: objdump SEGV / NULL deref in debug_type_samep and debug_write_type Important TuxCare License Agreement CVE-2026-3442 CVE-2025-7545 CVE-2026-3441 CVE-2025-5245 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42010: fix RSA-PSK identity truncation allowing authentication bypass via NUL byte in client-supplied username Critical TuxCare License Agreement CVE-2026-42010 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-26740: fix heap OOB write when rewriting truncated GCE in EGifGCBToSavedExtension Important TuxCare License Agreement CVE-2026-26740 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5773: wrong reuse of SMB connection; disable connection reuse for SMB(S) so a subsequent transfer cannot wrongfully reuse a pooled connection to a different share - CVE-2026-6276: clear stale custom-Host cookiehost between requests on the same easy handle (cookie leak across origins) Important TuxCare License Agreement CVE-2026-6276 CVE-2026-7168 CVE-2026-5773 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-40660: fix potential PIN bypass when card tracks its own login state Moderate TuxCare License Agreement CVE-2023-40660 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-0677: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks Moderate TuxCare License Agreement CVE-2025-0677 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-26306: use OAEP padding instead of PKCS1 padding for OpenSSL to address timing side-channel in RSA authentication. Note: peers running patched and unpatched iperf3 will fail to authenticate unless the legacy behavior is explicitly opted into via --use-pkcs1-padding on both ends. Moderate TuxCare License Agreement CVE-2024-26306 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-43618: fix integer overflow in compressed-token decoder allowing memory disclosure via crafted compressed stream Important TuxCare License Agreement CVE-2026-43618 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2291: heap OOB write via undersized union bigname buffer - CVE-2026-4890: dnssec NSEC bitmap parsing infinite loop - CVE-2026-4891: dnssec missing rdlen validation in RRSIG records - CVE-2026-4892: helper buffer overflow with large DHCPv6 CLIDs - CVE-2026-4893: broken client subnet validation in process_reply Important TuxCare License Agreement CVE-2026-2291 CVE-2026-4891 CVE-2026-4892 CVE-2026-4890 CVE-2026-4893 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-43620: prevent client-side out-of-bounds read in receiver when a malicious server sends a crafted file-list with parent_ndx<0 Moderate TuxCare License Agreement CVE-2026-43620 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Bump leading release to maintain monotonic rpm-version ordering in the AlmaLinux 9.2 ESU update stream Low TuxCare License Agreement CVE-2026-43514 CVE-2026-43512 CVE-2026-41284 CVE-2026-41293 CVE-2026-43515 CVE-2026-42498 CVE-2026-43513 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-45130: fix heap buffer overflow in read_compound() in src/spellfile.c Moderate TuxCare License Agreement CVE-2026-45130 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-39324: build snapshot originalUrl on the backend with a UID check and warn through a confirm modal before navigating to a cross-origin snapshot URL Low TuxCare License Agreement CVE-2022-39324 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-6501: NULL pointer dereference of n->lldp_rx in nm_lldp_neighbor_parse() when DEBUG logging is enabled, leading to denial-of-service on malformed LLDP packets Low TuxCare License Agreement CVE-2024-6501 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33278: dangling pointer dereference in dns_msg_deepcopy_region() during DS sub-query suspend/resume; the previously-backported CVE-2023-50387-CVE-2023-50868.patch dragged the vulnerable '*res->rep = *origin->rep;' struct-assignment into our 1.16.2 tree. Save the destination rrsets pointer, sized-memcpy with rrset_ref excluded, restore the pointer. Adds defense-in-depth param_set_same() NSEC3 parameter consistency check called from all five nsec3_prove_* entry points. Critical TuxCare License Agreement CVE-2026-33278 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0742: assertion failure in nsPresContext::UserInputEventsAllowed (Document::SetIsInitialDocument sticky-bit) - CVE-2025-2830: path traversal via malformed attachment filename in multipart message (directory guard in MimePart._fetchAttachment + mimedrft.cpp) - CVE-2025-3909: predictable tempfile path enables JavaScript execution from attachment opened in file:/// context (per-PID tempdir, 0o700) - CVE-2025-3932: tracking links in attachments bypass remote-content blocking (scheme allowlist + FeedMsg http(s) carve-out in AttachmentInfo.isEmpty) Critical TuxCare License Agreement CVE-2026-33416 CVE-2025-3875 CVE-2024-9680 CVE-2025-3522 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11234: io: use-after-free in websocket handshake code - Bump leading release 14 -> 15 to overcome rpm-version-rank trap: previously released wrong-dist builds tagged .el9 outrank the correctly-tagged .el9_2 builds, blocking the proper release to stable. No source/code changes vs els9. Important TuxCare License Agreement CVE-2025-11234 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34000: widen bounds check in _CheckSetGeom() to cover both key alias names (2 * XkbKeyNameLength) and prevent out-of-bounds read of uninitialized memory in XkbAddGeomKeyAlias() Critical TuxCare License Agreement CVE-2026-34000 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-10573: Out-of-bounds write during PCM decoding of crafted streams could lead to heap corruption and potential arbitrary code execution; decode the MPEG header into a temporary copy that is only applied to the live handle after the frame body is validated (upstream svn-r5442, main fix), and gate decode_the_frame() behind a FRAME_DECODER_LIVE state bit so it cannot run with stale state when decode_update() failed (upstream svn-r4991 plus the bug-324 precedence fix from 1.29.2, follow-up safeguard). Moderate TuxCare License Agreement CVE-2024-10573 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42307: fix shell injection in netrw via the tempfile suffix when reading sftp:// or file:// URLs by escaping the tempfile and restricting the suffix regex to word characters Moderate TuxCare License Agreement CVE-2023-2609 CVE-2023-48237 CVE-2023-1264 CVE-2023-1170 CVE-2023-46246 CVE-2023-1175 CVE-2023-48706 CVE-2023-2426 CVE-2023-48233 CVE-2023-5441 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-10977: libpq retains untrusted error message bytes from a man-in-the-middle during SSL/GSS negotiation; bail out and discard the server-provided text so the client does not write arbitrary non-NUL bytes to a terminal Low TuxCare License Agreement CVE-2024-10977 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebuild with golang 1.22.9-1.el9_2.tuxcare.els9 and patch go-jose to fix CVE-2026-32280, CVE-2026-34986 - CVE-2026-32280: limit processing of attacker-supplied intermediate certificates during chain building and introduce bound on number of intermediates, preventing uncontrolled work and denial of service - CVE-2026-34986: reject too-short ciphertext in vendored go-jose cipher.KeyUnwrap to prevent a denial-of-service panic when decrypting a JWE with an attacker-controlled Encrypted Key Important TuxCare License Agreement CVE-2026-34986 CVE-2026-32280 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-12748: enforce ACL before parsing user-supplied domain XML Moderate TuxCare License Agreement CVE-2025-12748 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41651: Fix TOCTOU race on transaction flags that allowed unprivileged users to install arbitrary RPMs and execute scriptlets as root; prevent unconditional flag overwrite, enforce state-transition validation, and read cached flags at authorization time rather than at dispatch. Important TuxCare License Agreement CVE-2026-41651 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-9256: heap buffer overflow in ngx_http_script_regex_start_code() when a rewrite replacement contains overlapping captures with the redirect parameter or argument string; the per-capture length accumulation is refactored to also account for escape-uri expansion per capture region, preventing under-allocation of the rewrite output buffer Low TuxCare License Agreement CVE-2026-9256 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4046: iconv: use pending character state in IBM1390/IBM1399 character sets to avoid assertion failure when the output buffer ends between two 4-byte UCS-4 code points of a combined character; add tst-bug33980 regression test Moderate TuxCare License Agreement CVE-2026-4046 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41316: prohibit ERB#def_method on marshal-loaded ERB instances by extending the @_init singleton-class guard to def_method (and transitively def_module/def_class), preventing RCE via Marshal.load gadgets Important TuxCare License Agreement CVE-2026-41316 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-1502: reject CR/LF in HTTP proxy tunnel host and headers Moderate TuxCare License Agreement CVE-2026-1502 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-3446: fix DH_check() excessive time with over sized modulus - CVE-2024-4603: fix DSA parameter check excessive time with very large keys - CVE-2024-4741: fix use-after-free in SSL_free_buffers Moderate TuxCare License Agreement CVE-2023-3446 CVE-2024-4741 CVE-2024-4603 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-1298: fix potential UINT32 overflow in S3 ResumeCount that could DoS firmware on resume (EDK2) - CVE-2024-38796: fix integer overflow in PeCoffLoaderRelocateImage() that could lead to memory corruption (EDK2) - CVE-2023-2650: fix DoS in OBJ_obj2txt() when parsing OBJECT IDENTIFIERs with very large sub-identifiers (bundled OpenSSL) - CVE-2023-3446: fix excessive runtime in DH_check() when supplied with over-sized modulus (bundled OpenSSL) - CVE-2024-0727: fix NULL pointer dereference in PKCS12 ContentInfo handling that could crash applications (bundled OpenSSL) Moderate TuxCare License Agreement CVE-2023-2650 CVE-2023-3446 CVE-2024-1298 CVE-2024-0727 CVE-2024-38796 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-5388: NSS MPI RSA decryption timing side-channel (Marvin attack); backport upstream NSS_3_90 commit 196716d8 to security/nss/lib/freebl - CVE-2024-0741: ANGLE VariablePacker int32 overflow leading to heap out-of-bounds write in WebGL shader compilation - CVE-2024-0753: PSM HSTS superdomain walk did not honor ancestor includeSubDomains policy (RFC 6797 conformance) - CVE-2025-3523: attachment URL UI misrepresentation in displayAttachmentsForExpandedViewExternal; mouseover/focus showed last URL for all rows Moderate TuxCare License Agreement CVE-2023-5388 CVE-2024-0753 CVE-2025-3523 CVE-2024-0741 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0690: Fix information disclosure caused by failure to respect NO_LOG configuration, which allowed inclusion of sensitive data such as loop items and decrypted secret values in task output; ensure NO_LOG is honored. Moderate TuxCare License Agreement CVE-2024-0690 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-52434: fix race condition in APR/native connector that could cause JVM crash on connection close Moderate TuxCare License Agreement CVE-2025-52434 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-44656: fix shell command execution via backticks in 'path' option during file completion by skipping backtick entries in expand_path_option() (findfile.c, upstream patches 9.2.0435 and 9.2.0444; the P_SECURE-on-'path' portion of 9.2.0435 was reverted by 9.2.0444 and is intentionally not backported) Moderate TuxCare License Agreement CVE-2026-44656 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-43788: fix out of bounds read in XpmCreateXpmImageFromBuffer - CVE-2023-43789: fix out of bounds read on XPM with corrupted colormap Moderate TuxCare License Agreement CVE-2023-43788 CVE-2023-43789 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-40812: out-of-bounds read in BMP/WebP output due to unchecked gdPutBuf return values Moderate TuxCare License Agreement CVE-2021-40812 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-4874: fix NULL pointer dereference in write_one_header() - CVE-2023-4875: fix NULL pointer dereference in userhdrs handling Moderate TuxCare License Agreement CVE-2023-4874 CVE-2023-4875 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-56826: fix out-of-bounds read in sycc422_to_rgb()/sycc420_to_rgb() - CVE-2024-56827: validate tile-part number in opj_j2k_add_tlmarker() Moderate TuxCare License Agreement CVE-2024-56826 CVE-2024-56827 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-1502: reject CR/LF control characters in http.client._tunnel() host and request headers to prevent HTTP header injection Moderate TuxCare License Agreement CVE-2026-1502 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-4877: prevent integer overflow and potential out-of-bounds write in base64 decoder by capping input length to 256MB - CVE-2025-8277: adjust packet filter to work correctly when DH-GEX is guessed wrongly - CVE-2026-0965: refuse non-regular and over-sized configuration files in libssh config and known_hosts readers Moderate TuxCare License Agreement CVE-2025-8277 CVE-2025-4877 CVE-2026-0965 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-45897: fix out-of-bounds write in read_file_dentry_set when SecondaryCount exceeds the maximum number of File Name entries Moderate TuxCare License Agreement CVE-2023-45897 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34743: fix buffer overflow in lzma_index_append Moderate TuxCare License Agreement CVE-2026-34743 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-54389: escape control characters in report and log output to prevent terminal escape sequence injection via crafted filenames, extended attribute key names, and symbolic link targets Moderate TuxCare License Agreement CVE-2025-54389 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3833: fix case-sensitive nameConstraints comparison of DNS names and e-mail domains in lib/x509/name_constraints.c Important TuxCare License Agreement CVE-2026-3833 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - smb: client: reject userspace cifs.spnego descriptions - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash {CVE-2024-35854} - cifs: Fix memory leak when build ntlmssp negotiate blob failed {CVE-2022-50372} - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() {CVE-2023-53038} - drm/amd/display: Do not set DRR on pipe Commit {CVE-2023-53042} - tcp: fix skb_copy_ubufs() vs BIG TCP {CVE-2023-53669} - clk: Fix clk_core_get NULL dereference {CVE-2024-27038} - drm/amd/display: Check null pointers before using dc->clk_mgr {CVE-2024-49907} - bpf: reject unhashed sockets in bpf_sk_assign {CVE-2023-53585} - driver core: fix resource leak in device_add() {CVE-2023-53594} - wifi: ath9k: hif_usb: fix memory leak of remain_skbs {CVE-2023-53641} - wifi: ath9k: verify the expected usb_endpoints are present {CVE-2022-50297} - drm/amd/display: Fix potential null-deref in dm_resume {CVE-2022-50535} - ext4: don't allow journal inode to have encrypt flag {CVE-2022-50277} - tls: get psock ref after taking rxlock to avoid leak {CVE-2024-35908} - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program {CVE-2024-27431} - bpf: Guard stack limits against 32bit overflow {CVE-2023-52676} - can: isotp: isotp_sendmsg(): add result check for wait_event_interruptible() {CVE-2021-47457} - serial: core: fix transmit-buffer reset and memleak {CVE-2021-47527} - cpufreq: exit() callback is optional {CVE-2024-38615} - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() {CVE-2024-39276} - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets {CVE-2024-36905} - wifi: nl80211: reject iftype change with mesh ID change {CVE-2024-27410} - tcp: do not accept ACK of bytes we never sent {CVE-2023-52881} - crypto: pcrypt - Fix hungtask for PADATA_RESET {CVE-2023-52813} - net/mlx5: Properly link new fs rules into the tree {CVE-2024-35960} - usb: ulpi: fix memory leak on ulpi_register() error paths - usb: ulpi: fix double free in ulpi_register_interface() error path {CVE-2026-31759} - wifi: ath11k: fix htt pktlog locking {CVE-2023-52800} - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute {CVE-2025-21653} - calipso: fix memory leak in netlbl_calipso_add_pass() {CVE-2023-52698} - wifi: iwlwifi: mvm: avoid NULL pointer dereference {CVE-2024-49929} - ext4: update orig_path in ext4_find_extent() {CVE-2024-49881} - drm/vmwgfx: Fix a deadlock in dma buf fence polling {CVE-2024-43863} - RDMA/restrack: Fix potential invalid address access {CVE-2024-42080} - net: can: j1939: Initialize unused data in j1939_send_one() {CVE-2024-42076} - nfsd: clear acl_access/acl_default after releasing them {CVE-2025-21796} - rtc: pl031: fix rtc features null pointer dereference {CVE-2022-49273} - net: veth: clear GRO when clearing XDP even when down {CVE-2024-26803} - coresight: cti: Fix hang in cti_disable_hw() {CVE-2022-50491} - scsi: qla2xxx: Fix deletion race condition {CVE-2023-53615} - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() {CVE-2023-53476} - scsi: qla2xxx: Fix potential NULL pointer dereference {CVE-2023-53451} - usb: ucsi_acpi: Increase the command completion timeout {CVE-2023-53168} - drivers: base: dd: fix memory leak with using debugfs_lookup() {CVE-2023-53390} - USB: fix memory leak with using debugfs_lookup() {CVE-2023-53359} - PM: domains: fix memory leak with using debugfs_lookup() {CVE-2023-53202} - drm/client: Fix memory leak in drm_client_modeset_probe {CVE-2023-53288} - drivers: base: component: fix memory leak with using debugfs_lookup() {CVE-2023-53409} - USB: uhci: fix memory leak with using debugfs_lookup() {CVE-2023-53197} - media: uvcvideo: Handle cameras with invalid descriptors {CVE-2023-53437} - arm64: csum: Fix OoB access in IP checksum code for negative lengths {CVE-2023-53726} - bnxt: Do not read past the end of test names {CVE-2023-53010} - dax: make sure inodes are flushed before destroy cache {CVE-2022-49220} - cifs: Fix oops due to uncleared server->smbd_conn in reconnect {CVE-2023-53006} - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE {CVE-2024-42321} - PCI: Fix use-after-free of slot->bus on hot remove {CVE-2024-53194} - net/ipv6: release expired exception dst cached in socket {CVE-2024-56644} - net: sched: fix ordering of qlen adjustment {CVE-2024-53164} - watch_queue: Fix NULL dereference in error cleanup {CVE-2022-49257} - lz4: fix LZ4_decompress_safe_partial read out of bound {CVE-2022-49078} - vmxnet3: disable rx data ring on dma allocation failure {CVE-2024-40923} - ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() {CVE-2024-36955} - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure {CVE-2022-50374} - drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag {CVE-2024-35817} - dm snapshot: fix lockup in dm_exception_table_exit {CVE-2024-35805} - nouveau: fix instmem race condition around ptr stores {CVE-2024-26984} - wireguard: netlink: access device through ctx instead of peer {CVE-2024-26950} - drm/i915/gt: Reset queue_priority_hint on parking {CVE-2024-26937} - netfilter: nft_set_pipapo: do not free live element {CVE-2024-26924} - dmaengine: fix NULL pointer in channel unregistration function {CVE-2023-52492} - PCI/PM: Drain runtime-idle callbacks before driver removal {CVE-2024-35809} - nvme-fc: do not wait in vain when unloading module {CVE-2024-26846} - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp {CVE-2026-31427} - phylib: fix potential use-after-free {CVE-2022-48754} - mm/filemap: skip to create PMD-sized page cache if needed {CVE-2024-41031} - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() {CVE-2024-35944} - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage {CVE-2024-36006} - wifi: ath11k: decrease MHI channel buffer length to 8KB {CVE-2024-35938} - dyndbg: fix old BUG_ON in >control parser {CVE-2024-35947} - ALSA: core: Fix NULL module pointer assignment at card init {CVE-2024-38605} - wifi: iwlwifi: mvm: rfi: fix potential response leaks {CVE-2024-35912} - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD {CVE-2024-35801} - ipv6: avoid overflows in ip6_datagram_send_ctl() {CVE-2026-31415} - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() {CVE-2023-52832} - i2c: core: Run atomic i2c xfer when !preemptible {CVE-2023-52791} - mmc: sdio: fix possible resource leaks in some error paths {CVE-2023-52730} - protect the fetch of ->fd[fd] in do_dup2() from mispredictions {CVE-2024-42265} - wifi: mac80211: fix potential sta-link leak {CVE-2024-35838} - octeontx2-af: avoid off-by-one read from userspace {CVE-2024-36957} - xen-netfront: Add missing skb_mark_for_recycle {CVE-2024-27393} - net: hns3: do not allow call hns3_nic_net_open repeatedly {CVE-2021-47400} - HID: sony: Fix a potential memory leak in sony_probe() {CVE-2023-52529} - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD {CVE-2026-31428} - mm/gup: fix gup_pud_range() for dax {CVE-2022-48986} - drm/virtio: Fix GEM handle creation UAF {CVE-2022-48899} - ipv4: ip_gre: make ipgre_header() robust {CVE-2026-23011} - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() {CVE-2024-26894} - RDMA/umad: Reject negative data_len in ib_umad_write {CVE-2026-23243} - HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure {CVE-2026-43049} - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks {CVE-2026-23270} - net/sched: act_ct: fix skb leak and crash on ooo frags {CVE-2023-52610} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - mm/mempolicy: fix memory leak in set_mempolicy_home_node system call {CVE-2022-50391} - mm/kasan: fix double free for kasan pXds {CVE-2026-31686} - ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452} - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402} - dax: Fix dax_mapping_release() use after free {CVE-2023-53613} Important TuxCare License Agreement CVE-2024-38615 CVE-2022-50391 CVE-2026-31428 CVE-2024-41031 CVE-2024-53164 CVE-2022-49220 CVE-2024-35805 CVE-2024-35912 CVE-2026-31452 CVE-2023-52832 CVE-2024-26937 CVE-2024-49907 CVE-2026-43427 CVE-2026-43049 CVE-2024-39276 CVE-2024-42265 CVE-2023-53594 CVE-2022-49078 CVE-2023-52730 CVE-2023-52881 CVE-2024-53194 CVE-2023-53288 CVE-2022-50372 CVE-2026-31415 CVE-2026-31427 CVE-2023-53390 CVE-2022-48754 CVE-2021-47457 CVE-2023-52529 CVE-2024-36957 CVE-2023-53577 CVE-2023-53202 CVE-2024-27393 CVE-2023-52676 CVE-2021-47527 CVE-2026-23243 CVE-2024-40923 CVE-2024-35854 CVE-2025-21796 CVE-2022-50374 CVE-2022-49257 CVE-2024-26803 CVE-2024-26846 CVE-2022-50491 CVE-2023-53615 CVE-2023-52492 CVE-2023-53476 CVE-2023-53585 CVE-2022-48986 CVE-2026-31759 CVE-2024-35938 CVE-2024-26894 CVE-2024-35817 CVE-2022-50277 CVE-2023-52800 CVE-2022-49273 CVE-2023-53168 CVE-2024-43863 CVE-2023-52791 CVE-2026-31402 CVE-2023-53042 CVE-2026-31686 CVE-2024-35908 CVE-2026-43052 CVE-2024-35809 CVE-2024-35801 CVE-2024-36006 CVE-2024-35947 CVE-2023-53451 CVE-2024-35944 CVE-2023-53613 CVE-2024-42076 CVE-2023-53409 CVE-2023-53006 CVE-2024-56644 CVE-2022-50297 CVE-2023-52698 CVE-2023-52813 CVE-2024-27410 CVE-2022-50535 CVE-2023-53641 CVE-2024-36905 CVE-2024-26984 CVE-2024-27038 CVE-2024-49881 CVE-2024-49929 CVE-2024-42080 CVE-2023-53038 CVE-2025-21653 CVE-2023-53669 CVE-2024-26924 CVE-2023-53726 CVE-2026-23011 CVE-2023-53010 CVE-2022-50386 CVE-2021-47400 CVE-2023-52610 CVE-2024-27431 CVE-2024-35960 CVE-2023-53359 CVE-2024-26950 CVE-2024-42321 CVE-2022-48899 CVE-2023-53437 CVE-2023-53197 CVE-2024-36955 CVE-2024-38605 CVE-2026-23270 CVE-2024-35838 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape Important TuxCare License Agreement CVE-2026-34479 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-46195: fix infinite recursion in libiberty rust demangler Moderate TuxCare License Agreement CVE-2021-46195 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41035: fix use of wrong element count in qsort call in receive_xattr() leading to SIGSEGV Important TuxCare License Agreement CVE-2026-41035 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27447: fix authorization bypass in cupsd caused by case-insensitive comparison of local user and group names; include upstream Issue #1557 follow-up to avoid breaking AuthType None policies for non-local accounts Moderate TuxCare License Agreement CVE-2026-27447 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-3826: Fix heap/stack buffer overflow in dlang_lname that could cause segmentation fault on crafted mangled symbols; add bounds checks and input validation to prevent overflow and crashes. Moderate TuxCare License Agreement CVE-2021-3826 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-42934: fix out-of-bounds array access on auth byte in lanserv_ipmi.c (handle_temp_session, ipmi_handle_lan_msg) Moderate TuxCare License Agreement CVE-2024-42934 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-32573: Fixed undefined behavior from using uninitialized variable in QSvgFont Moderate TuxCare License Agreement CVE-2023-32573 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6019: base64-encode cookie values in http.cookies.Morsel.js_output() to prevent script-context injection Moderate TuxCare License Agreement CVE-2026-6019 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5950: fix unbounded resend loop in resolver bad-server handling - CVE-2026-3592: limit addresses returned per ADB find and dedup resolver SLIST to mitigate resource-exhaustion amplification Moderate TuxCare License Agreement CVE-2026-5950 CVE-2026-3592 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3039: fix GSS-API memory exhaustion during TKEY negotiation Important TuxCare License Agreement CVE-2026-3039 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11568: fix data corruption in luksmeta when writing metadata larger than the gap between the LUKS1 header and encrypted data area; add upfront size validation in find_gap() and a hard-limit boundary check inside overlap() to prevent overrunning the gap and corrupting encrypted user data Moderate TuxCare License Agreement CVE-2025-11568 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-6395: harden TLS 1.3 handshake state handling around PSK binders - CVE-2025-9820: harden PKCS#11 token initialization against malformed input Moderate TuxCare License Agreement CVE-2025-9820 CVE-2025-6395 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42960: prevent cache poisoning via promiscuous additional-section records by marking glue only for NS RRsets in the authority section [ELSCVE-130594] - CVE-2026-42944: fix heap overflow and crash with multiple NSID and PADDING EDNS options by deduplicating options and adding bounds checks in attach_edns_record_max_msg_sz [ELSCVE-130649] - CVE-2026-41292: cap parsed EDNS options at MAX_PARSED_EDNS_OPTIONS (100) to prevent DoS via long option lists [ELSCVE-130636] - CVE-2026-42959: fix out-of-bounds write in val_fill_reply by indexing the destination array with chase->ns_numrrsets instead of orig->ns_numrrsets [ELSCVE-130615] - CVE-2026-40622: prevent ghost-domain TTL extension by clamping newd->ttl to cached->ttl in the higher-trust branch of need_to_update_rrset [ELSCVE-129354] Critical TuxCare License Agreement CVE-2026-40622 CVE-2026-42960 CVE-2026-42959 CVE-2026-41292 CVE-2026-42944 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-29518: fix daemon-no-chroot TOCTOU on parent path components by routing both the sender read-path (sender.c) and the receiver write-path (receiver.c open_tmpfile and recv_files inplace branch) through secure_relative_open() / secure_mkstemp() from the trusted module root, and add regression test (chdir-symlink-race.test case 4) Important TuxCare License Agreement CVE-2026-29518 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-43619: secure receiver-side path-based syscalls (do_chmod, do_lchown, do_rename, do_unlink, do_mkdir, do_symlink, do_mknod, do_link, do_rmdir, do_utimensat, do_lstat) against symlink-race TOCTOU by routing through secure_relative_open + *at() wrappers, harden secure_relative_open to reject .. components and confine relative basedir, secure change_dir against chdir-escape, secure copy_file source/dest opens, fix absolute --partial-dir delta resume via secure_basis_open; add alt-dest-symlink-race / bare-do-open-symlink-race / copy-dest-source-symlink / secure-relpath-validation tests Moderate TuxCare License Agreement CVE-2026-43619 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5946: fix non-IN class request handling - disable recursion, UPDATE, and NOTIFY for non-IN views; reject meta-classes ANY/NONE in UPDATE/NOTIFY; validate message CLASS early; skip deny-answer-address for non-IN Important TuxCare License Agreement CVE-2026-5946 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6019: base64-encode cookie values embedded in JS by http.cookies.Morsel.js_output() to avoid injection Moderate TuxCare License Agreement CVE-2026-6019 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11411: scrub promiscuous NS RRsets from positive answers to prevent a possible domain hijacking attack; add the iter-scrub-promiscuous option (default yes) and extend the mitigation to YXDOMAIN and non-referral nodata answers Moderate TuxCare License Agreement CVE-2026-32792 CVE-2025-11411 CVE-2026-44608 CVE-2026-44390 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-2511: unbounded TLSv1.3 session-cache growth via not_resumable session duplication; cache full handshakes only and clear not_resumable on dup so the entry remains evictable Low TuxCare License Agreement CVE-2024-2511 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40686: out-of-bounds heap read in GETUTF8INC macro when utf8 operators process malformed input; may exfiltrate heap data via SMTP rejection messages Moderate TuxCare License Agreement CVE-2026-40686 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-37555: fix int overflow in ima_reader_init in src/ima_adpcm.c Important TuxCare License Agreement CVE-2026-37555 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling regular expressions with a repeated fixed string on 32-bit builds (mincount * l overflow) Critical TuxCare License Agreement CVE-2026-8376 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-30883: fix heap buffer overflow in the PNG encoder when writing extremely large raw profiles - CVE-2026-28692: fix 32-bit integer arithmetic in the MAT decoder row-size computation causing a heap over-read - CVE-2026-31853: fix broken 32-bit overflow check in the SFW decoder buffer allocation - CVE-2026-28689: enforce path policy rights at file-open time and honor a new system 'follow' policy to prevent symlink TOCTOU policy bypass Important TuxCare License Agreement CVE-2026-30883 CVE-2026-31853 CVE-2026-28692 CVE-2026-28689 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34078: backport the AlmaLinux/RHSA-2026:21755 fix series (29 commits + libglnx-chase update) to defeat sandbox-expose symlink races; preserves 1.12.7 baseline. Critical TuxCare License Agreement CVE-2026-34078 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-7210: seed Expat with 16 bytes of hash salt via XML_SetHashSalt16Bytes when the linked libexpat exposes it, fixing the hash-flooding entropy gap in pyexpat and xml.etree.ElementTree - require expat >= 2.5.0-1.el9_2.tuxcare.els12 (CVE-2026-41080, XML_SetHashSalt16Bytes) so the runtime mitigation is guaranteed in effect Critical TuxCare License Agreement CVE-2026-7210 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40020: imap-acl: reject CR/LF/control-char and non-UTF-8 injection in SETACL identifier - CVE-2026-42006: lib-imap: fix list_count_limit to actually bound '(' (incomplete fix for CVE-2026-27857) - CVE-2026-40016: lib-sieve: enforce sieve_max_cpu_time inside :contains/:matches matcher loops Moderate TuxCare License Agreement CVE-2026-40016 CVE-2026-42006 CVE-2026-40020 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6843: harden statusline() callers against format-string flaw Moderate TuxCare License Agreement CVE-2026-6843 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41080: extract 16 bytes of entropy for the hash salt to prevent hash flooding Low TuxCare License Agreement CVE-2026-41080 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40510: stack buffer overflow in piv_process_history() via crafted PIV Key History Object - CVE-2026-40528: stack/heap buffer overrun in do_key_value() via overlong pkcs15init profile key value Important TuxCare License Agreement CVE-2026-40510 CVE-2026-40528 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-43617: fix hostname ACL bypass when using daemon chroot by performing the reverse-DNS lookup before entering the chroot so client_name() caches a usable hostname and "hosts deny" rules match Moderate TuxCare License Agreement CVE-2026-43617 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42499: replace the quadratic string concatenation in net/mail consumePhrase with a strings.Builder so phrases containing many adjacent RFC 2047 encoded-words are coalesced in linear time, preventing a denial of service from pathological RFC 5322 address inputs - CVE-2026-42501: reject a checksum database (sumdb) /lookup/ response that lacks a hash for the requested module in cmd/go checkSumDB instead of silently treating it as verified, preventing a malicious module proxy from bypassing checksum database validation and serving a corrupted module Important TuxCare License Agreement CVE-2026-27140 CVE-2026-39820 CVE-2026-33814 CVE-2026-42499 CVE-2026-42501 CVE-2026-27144 CVE-2026-33811 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4480: mask and single-quote jobname passed as %J to 'print command' to prevent remote command injection via the generic print pipeline Critical TuxCare License Agreement CVE-2026-4480 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41411: prevent OS command injection in tag-file backtick expansion Important TuxCare License Agreement CVE-2026-41411 CVE-2026-42307 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42534: fix jostle logic bypass that degrades resolution performance by tracking the first reply time per mesh state [ELSCVE-128376] Moderate TuxCare License Agreement CVE-2026-42534 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6746: HTMLSlotElement - fix manual slot reassignment across different shadow roots (Bug 2014596) - CVE-2026-6749: ImageEncoder use mapped stride and surface size to avoid OOB read (Bug 2022610) - CVE-2026-6752: libwebrtc - truncate RTP CSRC list to RFC 3550 spec maximum (15) - CVE-2026-6785: prevent use-after-free in nsUnknownDecoder::CheckListenerChain (Bug 2036929) - CVE-2026-8388: SpiderMonkey JIT - widen RecoverOffset to uint64_t to prevent overflow in Ion snapshot encoding (Bug 2036978) Important TuxCare License Agreement CVE-2026-6754 CVE-2026-6750 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-32573: Fixed undefined behavior from using uninitialized variable in QSvgFont Moderate TuxCare License Agreement CVE-2023-32573 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-7210: seed pyexpat/_elementtree with 16-byte XML hash salt via XML_SetHashSalt16Bytes; detect the symbol at runtime through a weak declaration so the fix engages against system libexpat 2.5.0 with the CVE-2026-41080 backport; add hard Requires on expat >= 2.5.0-1.el9_2.tuxcare.els12 Critical TuxCare License Agreement CVE-2026-7210 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32286: pgproto3 v2 DataRow.Decode panic on negative msgSize - CVE-2026-34986: go-jose v2 KeyUnwrap panic on too-short encrypted_key Important TuxCare License Agreement CVE-2026-34986 CVE-2026-32286 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5450: fix off-by-one heap overflow in scanf %mc/%ms allocation - CVE-2026-5928: fix buffer under-read in _IO_wdefault_pbackfail (ungetwc) Moderate TuxCare License Agreement CVE-2026-5450 CVE-2026-5928 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-55668: fix session fixation in RewriteValve by encoding session id into sendRedirect URL and recycling session info on rewrite reinvoke - CVE-2026-29146: fix padding oracle in EncryptInterceptor by changing default cipher to AES/GCM/NoPadding and rejecting insecure mode+padding combinations Important TuxCare License Agreement CVE-2025-55668 CVE-2026-29146 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to MySQL 8.0.46 (April 2026 CPU) CVE-2026-21998 CVE-2026-22001 CVE-2026-22002 CVE-2026-22004 CVE-2026-22005 CVE-2026-22009 CVE-2026-22015 CVE-2026-22017 CVE-2026-34267 CVE-2026-34271 CVE-2026-34276 CVE-2026-34278 CVE-2026-34293 CVE-2026-34303 CVE-2026-34304 CVE-2026-34308 CVE-2026-35236 CVE-2026-35237 CVE-2026-35238 CVE-2026-35239 CVE-2026-35240 Moderate TuxCare License Agreement CVE-2026-34303 CVE-2026-22001 CVE-2026-35239 CVE-2026-34278 CVE-2026-35236 CVE-2026-34267 CVE-2026-34293 CVE-2026-22005 CVE-2026-22004 CVE-2026-34308 CVE-2026-22015 CVE-2026-34304 CVE-2026-35240 CVE-2026-34271 CVE-2026-35238 CVE-2026-22002 CVE-2026-34276 CVE-2026-21998 CVE-2026-22017 CVE-2026-35237 CVE-2026-22009 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-7320: information disclosure from unchecked null input channel pointers in audio down-mixing and interleave/convert routines; treat null channels as zero in InterleaveAndConvertBuffer, AudioChannelsDownMix, and the AudioSegment up-mix path Important TuxCare License Agreement CVE-2026-7320 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-39825: have net/http/httputil.ReverseProxy reencode the forwarded query when a request carries more than urlmaxqueryparams (default 10000) parameters or a non-default GODEBUG=urlmaxqueryparams is set, so query parameters hidden from a Rewrite hook by the parse limit can no longer be smuggled to the backend - CVE-2026-39826: treat a <script> tag with an empty or ASCII-whitespace "type" attribute as JavaScript in html/template, so data interpolated into such script blocks is contextually auto-escaped instead of being emitted unescaped, closing a cross-site scripting escaper bypass Moderate TuxCare License Agreement CVE-2026-39819 CVE-2026-39825 CVE-2026-39826 CVE-2026-39817 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13462: do not apply the v7 AREGTYPE->DIRTYPE normalization when re-parsing GNU LONGNAME/LONGLINK follow-up headers in tarfile, preventing crafted archives from flipping an entry's type Critical TuxCare License Agreement CVE-2025-13462 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4802: fix shell command injection via boot descriptor query string in the system logs page by quoting journalctl arguments using shlex-style single- quote escaping - CVE-2024-6126: fix insecure killing of session ssh-agent; include upstream follow-up commit for proper strtoul() error handling when parsing SSH_AGENT_PID Important TuxCare License Agreement CVE-2026-4802 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42198: fix unbounded SCRAM PBKDF2 iteration count accepted from the server Important TuxCare License Agreement CVE-2026-42198 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33376: fix auth proxy IPv6 allow-list bypass (use /128 mask for IPv6, not /32) - CVE-2026-33377: fix dashboard import privilege escalation (set default dashboard permissions only for newly created dashboards, not when overwriting an existing one) Moderate TuxCare License Agreement CVE-2026-33377 CVE-2026-33378 CVE-2026-33376 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-9149: Fix integer overflow in repo_add_solv() leading to heap buffer overflow Moderate TuxCare License Agreement CVE-2026-9149 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-37457: fix off-by-one out-of-bounds write in BGP FlowSpec operator-array bounds check (bgp_flowspec_op_decode and bgp_flowspec_bitmask_decode) Important TuxCare License Agreement CVE-2026-37457 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-13462: do not apply the v7 AREGTYPE->DIRTYPE normalization when re-parsing GNU LONGNAME/LONGLINK follow-up headers in tarfile, preventing crafted archives from flipping an entry's type Critical TuxCare License Agreement CVE-2025-13462 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-28390: fix NULL deref in rsa_cms_decrypt with a missing CMS RSA-OAEP pSourceFunc parameter Important TuxCare License Agreement CVE-2026-28390 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-48340: fix use-after-free in dht_setxattr_mds_cbk Important TuxCare License Agreement CVE-2022-48340 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-11082: heap buffer overflow in _bfd_elf_parse_eh_frame Important TuxCare License Agreement CVE-2025-11082 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34544: fix B44/B44A integer overflow in row pointer arithmetic Important TuxCare License Agreement CVE-2026-34544 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-37050: fix reachable assertion in pdfseparate when PDF Catalog is not a dictionary (PDFDoc::savePageAs) - CVE-2022-37051: fix reachable assertion in pdfunite when PDF Catalog is not a dictionary - CVE-2022-37052: fix abort in pdfseparate caused by reachable assertion in XRef::add Moderate TuxCare License Agreement CVE-2022-37050 CVE-2022-37052 CVE-2022-37051 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6757: invalid pointer in wasm debug frames; add DebugEnvironments::onPopWasm to clean up the debug environment on pop - CVE-2026-6761: privilege escalation; enforce prefs for dom TCP and UDP sockets at the parent-process IPC entry points - CVE-2026-6764: out-of-bounds read; validate HID report length in Dualshock4Remapper::ProcessTouchData - CVE-2026-6771: CSP 'strict-dynamic' mitigation bypass; treat XSLT as parser-created so 'strict-dynamic' no longer auto-allows it - CVE-2026-8963: Web Speech spoofing; cancel SpeechSynthesis on navigation by overriding DisconnectFromOwner - CVE-2026-8965: information disclosure; pass the right sanitization kind through SanitizeInlineStyle (conditional CSS) - CVE-2026-8971: Networking JAR same-origin bypass; reject jar entry names containing an embedded NUL Critical TuxCare License Agreement CVE-2026-6757 CVE-2026-8971 CVE-2026-8965 CVE-2026-8963 CVE-2026-6761 CVE-2026-6771 CVE-2026-6764 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-29167: mod_ldap use-after-free in per-directory config, deep-copy client_certs into the connection pool - CVE-2026-34356: mod_proxy heap buffer overflow in ap_proxy_cookie_reverse_map(), reset newpath/newdomain state on duplicate path=/domain= cookie attributes from a malicious backend Important TuxCare License Agreement CVE-2026-29167 CVE-2026-34356 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-37660: delete PKEX code and identifier on successful PKEX completion to prevent passive recovery of ephemeral key X Important TuxCare License Agreement CVE-2022-37660 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-0507: apply attribute sanitation to GeomapPanel attribution - Regenerate Source2 webpack tarball (NVR -2) so the patched GeomapPanel.tsx reaches the shipped JS bundle (precompiled tarball is what %install ships when compile_frontend=0; without regeneration the .tsx patch is dead code) Moderate TuxCare License Agreement CVE-2023-0507 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2020-23922: fix heap out-of-bounds read in DumpScreen2RGB Important TuxCare License Agreement CVE-2022-28506 CVE-2020-23922 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27143: fix cmd/compile loopbce overflow check logic Critical TuxCare License Agreement CVE-2026-27143 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c {CVE-2024-56726} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c {CVE-2024-56679} - USB: chipidea: fix memory leak with using debugfs_lookup() {CVE-2023-53334} - drivers: serial: jsm: fix some leaks in probe {CVE-2022-50312} - drm: amd: display: Fix memory leakage {CVE-2023-53605} - netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent {CVE-2026-43026} - net: Drop the lock in skb_may_tx_timestamp() {CVE-2026-43216} - nouveau/dpcd: return EBUSY for aux xfer if the device is asleep {CVE-2026-43381} - ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() {CVE-2026-43068} - net: mdio: unexport __init-annotated mdio_bus_init() {CVE-2022-49350} - netfilter: ipset: Rework long task execution when adding/deleting entries {CVE-2023-53549} - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() {CVE-2023-53275} - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash {CVE-2022-50494} - can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message {CVE-2026-23307} - usb: image: mdc800: kill download URB on timeout {CVE-2026-43425} - tipc: fix divide-by-zero in tipc_sk_filter_connect() {CVE-2026-43411} - cgroup/cpuset: Fix wrong check in update_parent_subparts_cpumask() {CVE-2023-52942} - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path {CVE-2023-52703} - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() {CVE-2022-50246} - bus: mhi: host: Range check CHDBOFF and ERDBOFF {CVE-2023-53598} - hwmon: (coretemp) Simplify platform device handling {CVE-2023-53612} - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING {CVE-2024-36920} - dm crypt: add cond_resched() to dmcrypt_write() {CVE-2023-53051} - xfrm: account XFRMA_IF_ID in aevent size calculation {CVE-2026-43107} - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() {CVE-2024-43879} - RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() {CVE-2023-53335} - regulator: check that dummy regulator has been probed before using it {CVE-2025-22008} - HID: prodikeys: Check presence of pm->input_ep82 {CVE-2026-43251} - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() {CVE-2022-50510} - wifi: ath11k: fix dfs radar event locking {CVE-2023-52798} - trace/blktrace: fix memory leak with using debugfs_lookup() {CVE-2023-53408} - dm-verity: correctly handle dm_bufio_client_create() failure {CVE-2026-43132} - pstore: ram_core: fix incorrect success return when vmap() fails {CVE-2026-43124} - crypto: af-alg - fix NULL pointer dereference in scatterwalk {CVE-2026-43043} - net: use skb_header_pointer() for TCPv4 GSO frag_off check {CVE-2026-43036} - scsi: mpi3mr: Fix config page DMA memory leak {CVE-2023-53120} - net/mlx5: handle errors in mlx5_chains_create_table() {CVE-2025-21975} - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx {CVE-2023-53546} - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() {CVE-2025-37852} - bpf: Prevent decl_tag from being referenced in func_proto arg {CVE-2022-50883} - arm64: set __exception_irq_entry with __irq_entry as a default {CVE-2023-54322} - class: fix possible memory leak in __class_register() {CVE-2022-50578} - ALSA: usb-audio: Stop parsing channels bits when all channels are found. {CVE-2024-27436} - net/mlx5: fix potential memory leak in mlx5e_init_rep_rx {CVE-2023-54106} - net/mlx5: E-Switch, Fix an Oops in error handling code {CVE-2023-53058} - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() {CVE-2023-53078} - ice: xsk: disable txq irq before flushing hw {CVE-2023-53102} - selinux: fix memleak in security_read_state_kernel() {CVE-2022-50201} - efi: runtime: Fix potential overflow of soft-reserved region size {CVE-2024-26843} - drm/amdgpu: Fix potential null pointer derefernce {CVE-2023-52814} - ata: libata-core: Fix null pointer dereference on error {CVE-2024-41098} - atm: lec: fix null-ptr-deref in lec_arp_clear_vccs {CVE-2026-23286} - ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() {CVE-2026-23304} - drm/amd/display: Fix system hang while resume with TBT monitor {CVE-2024-50003} - netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator {CVE-2026-43085} - KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION {CVE-2026-31590} - l2tp: Drop large packets with UDP encap {CVE-2026-43080} - tun: limit printing rate when illegal packet received by tun dev {CVE-2024-27013} - xfrm: always flush state and policy upon NETDEV_UNREGISTER event {CVE-2026-43167} - KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding {CVE-2026-43315} - xenbus: Use kref to track req lifetime {CVE-2025-37949} - wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512} - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS {CVE-2024-46830} - scsi: smartpqi: Fix disable_managed_interrupts {CVE-2024-26742} - IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF {CVE-2023-52851} - vhost-vdpa: fix use after free in vhost_vdpa_probe() {CVE-2023-52795} - ndisc: ndisc_send_redirect() cleanup - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() - ipv6: icmp: convert to dev_net_rcu() - ipv4: icmp: convert to dev_net_rcu() - ipv4: use RCU protection in __ip_rt_update_pmtu() {CVE-2025-21766} - ipv6: use RCU protection in ip6_default_advmss() {CVE-2025-21765} - fix: ndisc: use RCU protection in ndisc_alloc_skb() {CVE-2025-21764} - neighbour: use RCU protection in __neigh_notify() {CVE-2025-21763} - arp: use RCU protection in arp_xmit() {CVE-2025-21762} - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() {CVE-2025-21761} - ndisc: extend RCU protection in ndisc_send_skb() {CVE-2025-21760} - ipv6: mcast: extend RCU protection in igmp6_send() {CVE-2025-21759} - ipv6: mcast: add RCU protection to mld_newpack() {CVE-2025-21758} - ipv4: use RCU protection in rt_is_expired() - ipv4: use RCU protection in inet_select_addr() - ipv4: add RCU protection to ip4_dst_hoplimit() - flow_dissector: use RCU protection to fetch dev_net() - net: add dev_net_rcu() helper - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974} - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency {CVE-2024-47696} - perf/x86/amd/core: Always clear status for idx {CVE-2023-53073} - tcp_bpf: fix return value of tcp_bpf_sendmsg() {CVE-2024-46783} - RDMA/umem: Fix double dma_buf_unpin in failure path {CVE-2026-43128} - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() {CVE-2026-43453} - drm/ttm: Fix a NULL pointer dereference {CVE-2023-53095} - net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak {CVE-2026-43035} - fbcon: check return value of con2fb_acquire_newinfo() {CVE-2026-43123} - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() {CVE-2023-52996} - perf/x86/intel/uncore: Skip discovery table for offline dies {CVE-2026-43079} - mm/page_alloc: clear page->private in free_pages_prepare() {CVE-2026-43303} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() {CVE-2026-23111} - netfilter: nf_tables: restore set elements when delete set fails {CVE-2024-27012} - drm/amdkfd: Correct the migration DMA map direction {CVE-2024-57897} Important TuxCare License Agreement CVE-2023-53546 CVE-2022-49350 CVE-2024-50003 CVE-2023-53334 CVE-2026-43085 CVE-2026-31408 CVE-2023-52795 CVE-2022-50510 CVE-2026-43303 CVE-2026-43216 CVE-2023-52851 CVE-2026-23111 CVE-2023-52798 CVE-2025-21759 CVE-2023-53120 CVE-2023-53078 CVE-2024-27013 CVE-2026-43251 CVE-2024-26742 CVE-2025-21766 CVE-2022-50312 CVE-2024-56679 CVE-2024-26843 CVE-2023-53275 CVE-2023-53335 CVE-2026-23304 CVE-2026-43068 CVE-2025-22008 CVE-2026-43132 CVE-2022-50494 CVE-2026-43043 CVE-2026-43036 CVE-2026-43453 CVE-2023-52942 CVE-2023-53073 CVE-2023-53408 CVE-2023-53102 CVE-2024-27012 CVE-2025-21765 CVE-2026-43026 CVE-2023-52996 CVE-2023-53051 CVE-2026-43035 CVE-2024-56726 CVE-2022-50578 CVE-2026-43124 CVE-2026-43411 CVE-2023-53598 CVE-2022-50883 CVE-2026-43167 CVE-2023-53612 CVE-2025-21975 CVE-2023-54322 CVE-2024-27436 CVE-2025-21763 CVE-2026-31590 CVE-2025-38512 CVE-2026-43107 CVE-2026-23286 CVE-2025-21758 CVE-2026-43425 CVE-2022-50246 CVE-2026-43080 CVE-2026-43123 CVE-2026-23307 CVE-2026-43079 CVE-2026-43315 CVE-2025-37852 CVE-2024-46830 CVE-2026-43128 CVE-2023-52814 CVE-2023-52974 CVE-2024-46783 CVE-2024-57897 CVE-2023-52703 CVE-2024-36920 CVE-2023-53605 CVE-2022-50201 CVE-2025-21764 CVE-2024-41098 CVE-2023-53095 CVE-2023-54106 CVE-2023-53058 CVE-2024-43879 CVE-2024-47696 CVE-2023-53549 CVE-2026-43381 CVE-2025-37949 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-10118: fix integer overflow in SplashOutputDev::tilingPatternFill via checkedMultiply on surface size and repetition count Important TuxCare License Agreement CVE-2026-10118 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34986: go-jose JWE decrypt panic on empty encrypted_key Important TuxCare License Agreement CVE-2026-34986 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-7321: remove the custom memory allocator from the WebRTC nICEr/nrappkit transport (r_strdup/RMALLOC/RFREE) that had incorrect size boundary conditions and replace all uses with standard strdup/malloc/free to prevent a buffer overflow Moderate TuxCare License Agreement CVE-2026-7321 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-11824: reject fts5 leaf pages with szLeaf < 4 to prevent a heap buffer overflow on corrupt records - CVE-2026-11822: bound fts5 column-list nPos by the configured column count to prevent an output poslist buffer overrun Important TuxCare License Agreement CVE-2026-11824 CVE-2026-11822 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-46433: fix heap out-of-bounds read in VLAN decapsulation memmove Moderate TuxCare License Agreement CVE-2026-46433 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-44185: mod_ssl OCSP send_request - advance wbuf by the number of bytes actually sent (wlen) instead of the full remaining length Important TuxCare License Agreement CVE-2026-44185 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42014: fix use-after-free and leak in gnutls_pkcs11_token_set_pin when changing the Security Officer PIN with oldpin == NULL on a token lacking a protected authentication path - CVE-2026-42015: fix off-by-one bounds check in gnutls_pkcs12_bag_set_data that allowed writing past the 32-element PKCS#12 bag array when appending to an imported bag already holding the maximum number of elements Important TuxCare License Agreement CVE-2026-5260 CVE-2026-42014 CVE-2026-42011 CVE-2026-42015 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-54661: fix arbitrary file overwrite in readline.sh Moderate TuxCare License Agreement CVE-2024-54661 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3012: do not trust CA certificates fetched over HTTP in the certificate auto-enrollment GP extension; use only LDAP-derived certificates and skip CAs with no cACertificate attribute Moderate TuxCare License Agreement CVE-2026-3012 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-45445: AES-OCB IV ignored on EVP_Cipher() path Critical TuxCare License Agreement CVE-2026-7383 CVE-2026-45445 CVE-2026-34182 CVE-2026-45447 CVE-2026-42770 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-44186: fix infinite loop in mod_proxy_ftp when scanning the FTP Retry-After message for the delta-seconds value Important TuxCare License Agreement CVE-2026-44186 CVE-2026-44119 CVE-2026-43951 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4408: deny, mask and/or single-quote the username passed as %u to 'check password script' to prevent remote command injection Critical TuxCare License Agreement CVE-2026-4408 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12299: WebIDL [Pure] over-optimization on getter/function calls; remove [Pure] annotation from blockedNodesByClassifier, getAttributeNames, flex/grid container reflection, innerText/outerText, HTMLInputElement.height, and MozEditableElement.editor accessors (Bug 2043139) - CVE-2026-12311: Linux sandbox broker did not enforce path-count per operation, allowing a malicious child to send an extra path; add OperationPaths() guard and preserve FORCE_DENY/CRASH_INSTEAD bits when intersecting both paths' permissions (Bug 2040177) - CVE-2026-12328: rollup of 11 mozilla-esr115 memory-safety fixes shipped as FIREFOX_115_37_0esr_RELEASE - a11y BindChildDoc cross-PBrowser guard (Bug 2038477), DOM bindings ObservableArray proxy cleanup on finalize (Bug 2042268), reject remote print in RecvCloneDocumentTreeInto (Bug 2042929), WebRender RefPtr lifetime for previousTexture (Bug 2042451), ANGLE redeclared built-in type checks (Bug 2039726), ParserAtom allocate length guard (Bug 2042858), VideoBridgeParent UnregisterSingleton split (Bug 2042965), ffmpeg ImageBufferTracker refcounted (Bug 2041373), IndexedDB deserialization done-flag wait loop (Bug 2043213), WebGL maxColorDrawBuffers clamp (Bug 2042782), and ANGLE gl_SecondaryFragColorEXT rewrite (Bug 2029402) Critical TuxCare License Agreement CVE-2026-12328 CVE-2026-8947 CVE-2026-8956 CVE-2026-8950 CVE-2026-12299 CVE-2026-8955 CVE-2026-8957 CVE-2026-8954 CVE-2026-12311 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-44631: fix buffer underwrite in ap_regname() caused by signed char regex capture-name offsets producing negative capture indices and corrupting memory; cast the name-table offset bytes to unsigned char and reject unreasonably large capture group numbers Important TuxCare License Agreement CVE-2026-44631 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebase to webkitgtk 2.52.4 to address WebKitGTK security advisory WSA-2026-0003 (16 CVEs). - Refresh libsoup2.patch for 2.52.4 library version triplet bumps (WEBKIT 21/8/21, JAVASCRIPTCORE 10/12/10 on API 4.1; WEBKIT 20/8/16, JAVASCRIPTCORE 8/12/7 on API 6.0). - Drop aarch64-build.patch — the upstream cherry-pick (Apple fix for WebKit bug 306638) is included in 2.52.4. - Add fix-system-malloc-llint-extractor.patch (upstream cherry-pick 314364@main, bugs.webkit.org/show_bug.cgi?id=316083) to gate bmalloc_CopyHeaders in LLIntSettingsExtractor/LLIntOffsetsExtractor dependencies on (NOT USE_SYSTEM_MALLOC). Without it, CMake configure fails on aarch64 because USE_64KB_PAGE_BLOCK=ON forces USE_SYSTEM_MALLOC=ON, which prevents the bmalloc subdirectory from being added and the bmalloc_CopyHeaders target from being created. - CVEs resolved by this rebase (WSA-2026-0003): CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902, CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907, CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953, CVE-2026-28955, CVE-2026-28958, CVE-2026-43658, CVE-2026-43660 Important TuxCare License Agreement CVE-2026-28955 CVE-2026-28942 CVE-2026-28883 CVE-2026-43660 CVE-2026-28902 CVE-2026-28946 CVE-2026-28907 CVE-2026-28905 CVE-2026-28958 CVE-2026-28904 CVE-2026-28903 CVE-2026-28953 CVE-2026-28947 CVE-2026-43658 CVE-2026-28901 CVE-2026-28847 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-9064: limit number of LDAP controls per operation to prevent DoS Important TuxCare License Agreement CVE-2026-9064 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-33641: fix use-after-free in more_curly() in reader.c Important TuxCare License Agreement CVE-2021-33641 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-36373: resource exhaustion (OOM) when reading a crafted TAR archive's PAX extended header - CVE-2021-36374: resource exhaustion (OOM) when reading a crafted ZIP archive - Drop the GetTest (network) and ImageIOTest (JDK ImageIO) unit tests Moderate TuxCare License Agreement CVE-2021-36373 CVE-2021-36374 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12330: out-of-bounds write in intl/lwbrk LineBreaker ComputeBreakPositions break-all path when GraphemeClusterBreakIteratorUtf16 yields a position reaching End-Of-Text; add bounds check guarding the aBreakBefore[cur + *pos] write (Bug 2029326) Moderate TuxCare License Agreement CVE-2026-12330 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-27280: fix buffer over-read in StringIO#ungetc/#ungetbyte by correcting the buffer expansion size in strio_unget_bytes Low TuxCare License Agreement CVE-2024-27280 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-8631: fix integer overflow in the hpcups processing path that could lead to privilege escalation / arbitrary code execution via crafted print data (backport of upstream HPLIP 3.26.4) - CVE-2026-8632: fix OS command injection in Is_Process_Running() by replacing the ps/grep shell pipeline with a safe /proc-based scan (backport of upstream HPLIP 3.26.4) Critical TuxCare License Agreement CVE-2026-8631 CVE-2026-8632 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50256: increase XLFDMAXFONTNAMELEN and add bounds checks in doListFontsAndAliases/doListFontsWithInfo to prevent stack buffer overflow via long fonts.alias targets - CVE-2026-50257: fix use-after-free in miSyncDestroyFence by using safe list iteration and null-checking pTrigger before dereferencing - CVE-2026-50258: reject XkbSetMap key types with numLevels exceeding XkbMaxShiftLevel to prevent stack buffer overflow in XkbKeyTypesForCoreSymbols - CVE-2026-50259: clamp nMaps to XkbMaxLegalKeyCode+1 in CheckKeyTypes to prevent stack buffer overflow when XkbSetMapResizeTypes wraps - CVE-2026-50260: fix use-after-free in FreeCounter by using safe list iteration, advancing list head before callback, and NULL-ing out shared trigger pointers in FreeAwait - CVE-2026-50261: restart trigger list iteration in SyncChangeCounter after TriggerFired to avoid dereferencing freed sibling-trigger nodes - CVE-2026-50262: fix reversed length check in GLX ChangeDrawableAttributes by using REQUEST_FIXED_SIZE to prevent out-of-bounds read/write - CVE-2026-50263: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow to avoid use-after-free on saver-window replacement Important TuxCare License Agreement CVE-2026-50256 CVE-2026-50260 CVE-2026-50262 CVE-2026-50258 CVE-2026-50257 CVE-2026-50261 CVE-2026-50263 CVE-2026-50259 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-46529: fix single-click RCE via /GoToR action argv injection by quoting the page-label, named-dest and search-string arguments passed to ev_spawn (backport of upstream 970c219e) Important TuxCare License Agreement CVE-2026-46529 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-55203: fix integer overflow in FCGI mux demux record length field by widening drl from uint16_t to uint32_t, preventing FCGI framing desynchronization triggered by malicious backends Critical TuxCare License Agreement CVE-2026-55203 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-2084: remove schema errors from log to avoid leaking sensitive user-data values into world-readable /var/log/cloud-init.log Moderate TuxCare License Agreement CVE-2022-2084 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-39829: fix DoS in vendored golang.org/x/crypto/ssh public-key parsing (cap RSA moduli at 8192 bits, validate DSA parameters per FIPS 186-2); affects both el9_2 and el9_6 - CVE-2026-32281: rebuild el9_6 against golang >= 1.25.7-1.el9_6.tuxcare.els7 to fix DoS in crypto/x509 policy validation (Go >= 1.24 only; el9_2 builds with Go 1.22.9 and is not affected) Important TuxCare License Agreement CVE-2026-39829 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-8970: constrain AsyncPrefs by remoteType so a compromised content process cannot set security-relevant prefs via AsyncPrefs; split the allowlist into privileged-about and unprivileged-exposed sets (Bug 2032174) - CVE-2026-8961: add locationspecific="true" to Thunderbird's PopupAutoComplete panel so the form-autocomplete dropdown is dismissed on navigation, closing a spoofing window (Bug 1962625) Low TuxCare License Agreement CVE-2026-8970 CVE-2026-8961 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-48962: fix eval injection in File::GlobMapper allowing arbitrary Perl code execution via an attacker-controlled output glob Important TuxCare License Agreement CVE-2026-48962 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-47770: guard deep structural equality and comparison recursion in jv_equal/jv_cmp to prevent stack overflow Moderate TuxCare License Agreement CVE-2026-47770 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50256: fix stack overflow in font alias resolution by widening XLFDMAXFONTNAMELEN to match libXfont2 MAXFONTNAMELEN (bundled Xvnc xserver) - CVE-2026-50257: fix use-after-free of sync fences in miSyncDestroyFence - CVE-2026-50258: fix stack overflow in XKB CheckKeyTypes - CVE-2026-50259: fix stack overflow in XKB _XkbSetMapChecks key-type check - CVE-2026-50260: fix use-after-free of sync counters in FreeCounter - CVE-2026-50261: fix use-after-free in SyncChangeCounter - patches backported into the bundled xserver 21.1.3 tree, reused from the xorg-x11-server-Xwayland sibling change Important TuxCare License Agreement CVE-2026-50256 CVE-2026-50260 CVE-2026-50258 CVE-2026-50257 CVE-2026-50261 CVE-2026-50259 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42507: escape arbitrary input in net/textproto errors to prevent log/error injection of misleading content and terminal control bytes Moderate TuxCare License Agreement CVE-2026-42507 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-45446: reset AES-SIV final_ret on context reuse so a forged all-zero tag is not accepted for empty-ciphertext messages - CVE-2026-9076: reject KEK ciphers with block size below 4 in CMS kek_unwrap_key to prevent an out-of-bounds read during check-byte validation Moderate TuxCare License Agreement CVE-2026-45446 CVE-2026-9076 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-29038: tpm2_checkquote: add TPM2_GENERATED_VALUE magic check to prevent acceptance of forged quotes Low TuxCare License Agreement CVE-2024-29038 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40355: fix null pointer dereference in NegoEx parse_nego_message() - CVE-2026-40356: fix read overrun in NegoEx parse_message() via short header_len Moderate TuxCare License Agreement CVE-2026-40356 CVE-2026-40355 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-45232: fix off-by-one out-of-bounds stack write in establish_proxy_connection() when a malicious HTTP proxy returns an over-long response line without a newline; reject the buffer-full case instead of writing the NUL terminator one byte past the buffer Low TuxCare License Agreement CVE-2026-45232 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-28085: wall: fix escape sequence injection in argv messages by sanitizing characters through buf_putc_careful(), preventing arbitrary text injection into other users' terminals (WallEscape) - CVE-2026-3184: login: use original FQDN for PAM_RHOST to prevent hostname canonicalization from bypassing host-based PAM access control rules Moderate TuxCare License Agreement CVE-2026-3184 CVE-2026-27456 CVE-2025-14104 CVE-2024-28085 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42767: fix potential NULL dereference in OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert() Moderate TuxCare License Agreement CVE-2026-42767 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-47167: use Ruby's Regexp.new() instead of Kernel.eval() in the cucumber filetype plugin's s:stepmatch() so untrusted step-definition patterns are treated as inert regex data, preventing Ruby (and shell) code injection when jumping to a step in an attacker-controlled repository (runtime/ftplugin/cucumber.vim, upstream vim 9.2.0496) Important TuxCare License Agreement CVE-2026-47162 CVE-2026-52858 CVE-2026-52860 CVE-2026-47167 CVE-2026-52859 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-55686: replace the fragile isWorkDirSymlink symlink-chain walking in resolveWorkDir() with securejoin.SecureJoin(), scoping workdir resolution to the container mountpoint and letting the OCI runtime handle remaining symlink errors Low TuxCare License Agreement CVE-2026-55686 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50262: fix reversed request-length check in GLX __glXDisp_ChangeDrawableAttributes (and swapped variant) by reverting the mesa size-check workaround and restoring REQUEST_FIXED_SIZE / REQUEST_SIZE_MATCH in the bundled xserver GLX handlers (out-of-bounds read) Moderate TuxCare License Agreement CVE-2026-50262 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32280: rebuild against golang containing GO-2026-4947 backport (crypto/x509 chain-building DoS fix) Important TuxCare License Agreement CVE-2026-32280 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-11979: add bounds checks in xmlcatalog usershell() to prevent stack-based buffer overflow on long --shell input Important TuxCare License Agreement CVE-2026-11979 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-55693: bound the trie-descent depth counter against the MAXWLEN-element stack arrays in tree_count_words() to prevent an out-of-bounds write when reading a crafted spell file (src/spellfile.c, upstream vim 9.2.0653) - CVE-2026-55892: bound the trie-descent depth counter in dump_prefixes() to prevent a stack out-of-bounds write with a crafted .spl spell file (src/spell.c, upstream vim 9.2.0662) - CVE-2026-57455: bound the single-byte SOFO result copy in spell_soundfold_sofo() to MAXWLEN-1 to prevent a stack out-of-bounds write when sound-folding long words (src/spell.c, upstream vim 9.2.0698) - CVE-2026-57456: use repr() on reconstructed docstrings in the python3 omni-completion so a hostile buffer cannot break out of the triple-quoted literal and execute arbitrary Python during completion (runtime/autoload/python3complete.vim, upstream vim 9.2.0699) Important TuxCare License Agreement CVE-2026-57456 CVE-2026-55892 CVE-2026-57455 CVE-2026-55693 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-45624: add polynomial-argument alignment check (upstream 7736b7c, GHSA-pfvh-m9xv-8966) alongside the earlier < 1 guard to close the misaligned-argument OOB read in GenerateCoefficients() Moderate TuxCare License Agreement CVE-2026-48733 CVE-2026-47165 CVE-2026-48994 CVE-2026-42326 CVE-2026-45624 CVE-2026-46521 CVE-2026-48734 CVE-2026-53464 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12313: Linux sandbox broker SymlinkPath() accepted paths containing /.. components, allowing a compromised content process to traverse out of allowed directories; reject any path that contains /../, equals .., starts with ../, or ends with /.. (Bug 2040477) - CVE-2026-33636: bundled libpng 1.6.39 NEON palette expansion (arm/palette_neon_intrinsics.c) had an out-of-bounds read/write when row_width was not aligned to chunk size; backport upstream libpng commit aba9f18 that rewrites the loop guard and removes the unsafe post-loop adjustment (compiled but unreachable on x86_64 ESU builds) Critical TuxCare License Agreement CVE-2026-12313 CVE-2026-33636 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6893: fix shell command injection via crafted DHCP and iBFT values in network-legacy, net-lib, initqueue, and iscsi modules Important TuxCare License Agreement CVE-2026-6893 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42496: fix path traversal via crafted symlinks/hardlinks during tar extraction (validate link targets in secure-extract mode) Critical TuxCare License Agreement CVE-2026-42496 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50263: fix use-after-free in CreateSaverWindow by re-fetching the screen private after CheckScreenPrivate (bundled Xvnc xserver) Moderate TuxCare License Agreement CVE-2026-50263 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-49839: break out of the raw file load loop when jv_string_append_buf returns an invalid value to prevent a heap-buffer-overflow Important TuxCare License Agreement CVE-2026-49839 CVE-2026-54679 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-54512: fix PolymorphicTypeValidator bypass via unvalidated generic type parameters Critical TuxCare License Agreement CVE-2026-54512 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-58016: fix inverted <node> nesting guard in the GDBus introspection XML parser (gio/gdbusintrospection.c) - CVE-2026-58015: validate the DBUS_COOKIE_SHA1 cookie_context to avoid keyring path traversal (gio/gdbusauthmechanismsha1.c) - CVE-2026-58014: guard the empty-value case in g_key_file_get_locale_string_list() to avoid a one-byte heap underread Critical TuxCare License Agreement CVE-2026-58015 CVE-2026-58014 CVE-2026-58016 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-48933: guard WebCrypto AES cipher output length to prevent an integer overflow that crashes the process on ~2GiB subtle.encrypt inputs - CVE-2026-48934: bind reusable TLS sessions to the authenticated host so a resumed session cannot bypass server identity (hostname) verification Important TuxCare License Agreement CVE-2026-48934 CVE-2026-48933 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-49395: show encryption information block to prevent Bcc recipient leak Moderate TuxCare License Agreement CVE-2024-49395 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-46522: add the missing length==0 checks to the MIFF decoder BZ2/LZMA/zlib decompression paths to reject empty compressed chunks and prevent an infinite loop (CPU exhaustion) on crafted files - CVE-2026-46523: mark the MSL coder as not supporting direct blob I/O (entry->blob_support=MagickFalse in RegisterMSLImage) to prevent a heap-use-after-free triggered by a crafted MSL image Important TuxCare License Agreement CVE-2026-46523 CVE-2026-46520 CVE-2026-45359 CVE-2026-46522 CVE-2026-45031 CVE-2026-33901 CVE-2026-33908 CVE-2026-45664 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-24660: X3F decoder heap buffer overflow via 32-bit size arithmetic in x3f_load_huffman/x3f_load_true; add LIBRAW_X3F_ALLOC_LIMIT_MB cap and convert size math to 64-bit (ELSCVE-135086) Important TuxCare License Agreement CVE-2026-24660 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-29168: limit OCSP response size and add timeouts to prevent unbounded memory allocation Important TuxCare License Agreement CVE-2026-29168 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-20889: fix heap-based buffer overflow in x3f_thumb_loader() by adding thumbnail allocation size checks (ELSCVE-135084) Critical TuxCare License Agreement CVE-2026-20889 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331} - unshare: fix unshare_fs() handling {CVE-2026-43472} - net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423} - net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422} - net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421} - dm: fix queue start/stop imbalance under suspend/load/resume races {CVE-2025-40134} - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() {CVE-2024-26773} - ext4: fix i_data_sem unlock order in ext4_ind_migrate() {CVE-2024-50006} - xen: Fix the issue of resource not being properly released in xenbus_dev_probe() {CVE-2024-53198} - HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862} - crypto: af_alg - Set merge to zero early in af_alg_sendmsg {CVE-2025-39931} - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper {CVE-2025-39681} - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061} - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change {CVE-2023-53103} - NFS: Fix a potential data corruption {CVE-2023-53711} - NFS: Fix a use after free in nfs_direct_join_group() {CVE-2023-53711} - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47386} - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload {CVE-2024-36919} - x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type {CVE-2023-52659} - Input: uinput - reject requests with unreasonable number of slots {CVE-2024-46745} - afs: Fix the maximum cell name length {CVE-2025-21646} - drm/i915: Avoid potential vm use-after-free {CVE-2023-52931} - interconnect: fix mem leak when freeing nodes {CVE-2023-53096} - drm/vkms: Fix memory leak in vkms_init() {CVE-2022-50269} - USB: dwc3: fix memory leak with using debugfs_lookup() {CVE-2023-53415} - mm/uffd: fix pte marker when fork() without fork event {CVE-2022-49744} - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() {CVE-2023-53696} - ipmi_si: fix a memleak in try_smi_init() {CVE-2023-53611} - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083} - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() {CVE-2024-36924} - firmware: cs_dsp: Validate payload length before processing block {CVE-2024-42237} - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field {CVE-2021-47385} - ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898} - IB/core: Implement a limit on UMAD receive List {CVE-2024-42145} - vfio/pci: Disable auto-enable of exclusive INTx IRQ {CVE-2024-27437} - netfilter: nf_tables: reject duplicate device on updates {CVE-2025-38678} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type {CVE-2025-23161} - net: nexthop: Initialize all fields in dumped nexthops {CVE-2024-42283} - tracing: Make sure trace_printk() can output as soon as it can be used {CVE-2023-53007} - net: tls: explicitly disallow disconnect {CVE-2025-37756} - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel {CVE-2025-21779} - ext4: turn quotas off if mount failed after enabling quotas {CVE-2023-54153} - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622} - block: fix overflow in blk_ioctl_discard() {CVE-2024-36917} - usb: xhci: Check endpoint is valid before dereferencing it {CVE-2023-52901} - iio: core: fix memleak in iio_device_register_sysfs {CVE-2023-52643} - platform/x86/amd/pmc: Detect when STB is not available {CVE-2024-53072} - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() {CVE-2023-52939} - dm thin: make get_first_thin use rcu-safe list first function {CVE-2025-21664} - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock {CVE-2025-21951} - bonding: provide a net pointer to __skb_flow_dissect() {CVE-2026-23119} - rocker: fix memory leak in rocker_world_port_post_fini() {CVE-2026-23164} - rtc: class: Fix potential memleak in devm_rtc_allocate_device() {CVE-2022-50477} - ice: fix memory leak in aRFS after reset {CVE-2025-21981} - bpf: Forget ranges when refining tnum after JSET {CVE-2025-39748} - net: hns: fix possible memory leak in hnae_ae_register() {CVE-2022-50352} - team: better TEAM_OPTION_TYPE_STRING validation {CVE-2025-21787} - refscale: Fix uninitalized use of wait_queue_head_t {CVE-2023-54316} - opp: Fix use-after-free in lazy_opp_tables after probe deferral {CVE-2023-54026} - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust {CVE-2024-53122} - serial: 8250: fix panic due to PSLVERR {CVE-2025-39724} - perf: Fix sample vs do_exit() {CVE-2025-38424} Moderate TuxCare License Agreement CVE-2025-38678 CVE-2026-23164 CVE-2025-37756 CVE-2025-39681 CVE-2023-53103 CVE-2025-39931 CVE-2022-50352 CVE-2024-42237 CVE-2023-54316 CVE-2025-21898 CVE-2024-36917 CVE-2023-52901 CVE-2023-53007 CVE-2025-37862 CVE-2023-53096 CVE-2025-21664 CVE-2024-58083 CVE-2024-42283 CVE-2023-52939 CVE-2024-53122 CVE-2021-47385 CVE-2026-31622 CVE-2023-54153 CVE-2024-27437 CVE-2023-52659 CVE-2024-36924 CVE-2025-39748 CVE-2026-31423 CVE-2025-21981 CVE-2025-39724 CVE-2024-53072 CVE-2023-53415 CVE-2022-50477 CVE-2023-53696 CVE-2022-50269 CVE-2023-52643 CVE-2024-50006 CVE-2023-53611 CVE-2024-53198 CVE-2026-43472 CVE-2025-21646 CVE-2026-31421 CVE-2024-46745 CVE-2023-53711 CVE-2026-23061 CVE-2021-47386 CVE-2025-21787 CVE-2022-49744 CVE-2025-21951 CVE-2026-31422 CVE-2023-52931 CVE-2025-23161 CVE-2023-54026 CVE-2024-42145 CVE-2024-36919 CVE-2026-23119 CVE-2025-38424 CVE-2024-26773 CVE-2025-21779 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-49261: reject shell-unsafe characters in Galera joiner node name and incoming address before interpolating into wsrep_notify_cmd - CVE-2026-48165: validate wsrep_sst_receive_address and wsrep_sst_donor for accepted characters to block SST shell command injection - CVE-2026-44168: add safe() helper and validate joiner-supplied params in the mariabackup SST donor path against shell command injection - CVE-2026-48163: validate joiner-supplied parameters in the rsync SST donor path against shell command injection - CVE-2026-44172: correct big5 lead/tail byte validation in the bundled Connector/C so mysql_real_escape_string cannot be bypassed via big5 Critical TuxCare License Agreement CVE-2026-44168 CVE-2026-49261 CVE-2026-44172 CVE-2026-48163 CVE-2026-48165 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Add .bs_config to build with dist .el9_2 on Alma9_2ESU - Bump leading Release from 4 to 5 to outrank the currently released 4.el9.4.tuxcare.els3 in RPM version comparison (the previous .el9_2.tuxcare.els4 NVR sorted lower and broke the upgrade path) Moderate TuxCare License Agreement CVE-2025-53020 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-10911: use a dedicated node type to maintain the list of cached RVTs (fix use-after-free) Moderate TuxCare License Agreement CVE-2025-10911 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-48715: fix stack buffer overflow in radvdump print_ff() Route Information option parser via crafted ICMPv6 Router Advertisement Important TuxCare License Agreement CVE-2026-48715 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-9759: fix ROHC dissector NULL pointer dereference when handling uncompressed profile with large CID Moderate TuxCare License Agreement CVE-2026-9759 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-49394: fix In-Reply-To and References headers not being copied into protected headers Moderate TuxCare License Agreement CVE-2024-49394 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-50420: fix crash in pdfseparate by skipping annotation entries missing both Type and SubType (PDFDoc::markAnnotations) Moderate TuxCare License Agreement CVE-2025-50420 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41991: fix a race when creating a temporary file in gzexe and zdiff on platforms lacking mktemp Moderate TuxCare License Agreement CVE-2026-41991 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-44173: check the FILE privilege separately before per-table SELECT_ACL so SELECT ... INTO OUTFILE/DUMPFILE from a derived table requires the FILE privilege Moderate TuxCare License Agreement CVE-2026-44173 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2770: keep construction depth for custom elements in sync; wrap AutoConstructionDepth in mozilla::Maybe so early throws in HTMLConstructor still tear it down deterministically (Bug 2014585) - CVE-2026-2763: use-after-free in SuppressDeletedProperty during property iteration; replace GetPrototype + GetPropertyDescriptor (both CanGC/re-entrant) with staticPrototype() + LookupPropertyPure() + GetPropertyAttributes() in js/src/vm/Iteration.cpp (Bug 2012018) - CVE-2026-2764: JIT baseline CacheIR call-scripted stub could observe a not-yet-created `this` if it OOM'd between reservation and construction; create `this` after pushing arguments and thread the argument through pushArguments/CreateThis paths (Bug 2012608) Critical TuxCare License Agreement CVE-2026-2764 CVE-2026-2763 CVE-2026-2770 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12290: WebGL2 missing per-stage uniform-block validation could let a malicious shader exceed driver limits; opt into ANGLE's validatePerStageMaxUniformBlocks and wire MaxVertex/Fragment uniform block counts (Bug 2024852, includes ANGLE cherry-pick 05459080c9a3) - CVE-2026-12291: use-after-free in HTTP stream listener chain; hold a strong nsCOMPtr<nsIStreamListener> ref across OnStartRequest/ OnDataAvailable/OnStopRequest invocations across 45 callsites (Bug 2036929) - CVE-2026-12292: ThreadSharedFloatArrayBufferList::Create returned uninitialized memory; switch js_pod_malloc to js_pod_calloc for the Web Audio float buffer (Bug 2038465) - CVE-2026-12294: SharedWorker remote-type confusion; simplify SharedWorker remote type handling by sourcing the remote type from the content process instead of recomputing in parent (Bug 2039873) - CVE-2026-12295: sandbox escape via srcdoc data on non-about:srcdoc URIs; add MOZ_RELEASE_ASSERT/IPC reject guards in nsDocShell, nsDocShellLoadState, Document and nsViewSourceChannel (Bug 2040160) - CVE-2026-12297: nsStandardURL deserialization could over-read past the spec buffer; add authority/path NS_ENSURE_TRUE consistency check in Deserialize() and null-pointer guard in Finalize() (Bug 2041610, includes prereq Bug 2027976 isSubSegment ladder) Important TuxCare License Agreement CVE-2026-12297 CVE-2026-12290 CVE-2026-12294 CVE-2026-12292 CVE-2026-12295 CVE-2026-12291 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-48864: Fix heap buffer overflow when decompressing solv pages Important TuxCare License Agreement CVE-2026-48864 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42246: fix Net::IMAP STARTTLS response-injection / TLS stripping by guarding send_command against a tagged OK arriving before the response handler runs, and raising InvalidResponseError when the STARTTLS handler is bypassed Important TuxCare License Agreement CVE-2026-42246 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-55204: fix NULL pointer dereference in hpack_dht_insert() by adding a missing NULL check after hpack_dht_defrag() on the data-space defragmentation path, preventing worker SIGSEGV when the HPACK dynamic-table memory pool is exhausted Important TuxCare License Agreement CVE-2026-55204 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-5278: sort - fix heap buffer under-read in begfield()/limfield() when a traditional key specification uses a very large character position Moderate TuxCare License Agreement CVE-2025-5278 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-55957: fix JNDIRealm GSSAPI credential validation bypass by snapshotting the JNDI environment before bind, removing SECURITY_AUTHENTICATION when set to GSSAPI, and restoring it in a finally block that also releases user credentials Important TuxCare License Agreement CVE-2026-55957 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2759: out-of-bounds read in AVIF ByteStream reader; validate offset/size via CheckedInt<size_t> before pointer arithmetic and swap the sign-mismatched >= for > in GetContiguousAccess (Bug 2010933, upstream facd3303abe7) - CVE-2026-2778: out-of-bounds heap read in StructuredCloneBlob IPC deserialization; route BlobImpls copy through Span::Subspan so the bounds check triggers a hard abort instead of leaking parent-process memory (Bug 2016358, upstream 1479f78b642c) - CVE-2026-4689: integer overflow / sandbox escape in SlicedInputStream IPC deserialization; validate start+length via CheckedUint64 and reject when curPos exceeds the computed end (Bug 2016374, upstream 14db1934383f) Critical TuxCare License Agreement CVE-2026-2759 CVE-2026-2778 CVE-2026-4689 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6846: XCOFF linker buffer overflow in xcoff_link_add_symbols reloc_info sizing Important TuxCare License Agreement CVE-2026-6846 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-47783: timing side-channel in SASL userdb auth; use constant-time safe_memcmp() for username/password and drop the early break so the whole password file is always scanned. Important TuxCare License Agreement CVE-2026-47783 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-48930: reject hostnames with embedded NUL bytes in dns.lookup and net.connect to prevent silent authority rebinding - CVE-2026-48619: cap the HTTP/2 client ORIGIN set size to prevent unbounded memory growth - CVE-2026-48618: normalize hostname to ASCII for TLS server identity checks - CVE-2026-48928: make SNI context matching case-insensitive Critical TuxCare License Agreement CVE-2026-48928 CVE-2026-48930 CVE-2026-48619 CVE-2026-48618 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-55653: fix double free in the DH-GEX client path during FIPS known-group validation that leads to a client-side denial of service Moderate TuxCare License Agreement CVE-2026-55653 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42258: fix Net::IMAP CRLF / IMAP command injection: strictly validate symbol (flag) arguments, send STORE attr as an atom, and validate the Moderate TuxCare License Agreement CVE-2026-42258 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - fix CVE-2026-42055: HPACK field-length validation in HTTP/2 gRPC request builder and HTTP/2 response header filter; fields exceeding NGX_HTTP_V2_MAX_FIELD now return NGX_ERROR instead of overflowing the 4-byte HPACK length prefix Low TuxCare License Agreement CVE-2026-42055 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-13601: fix loading external resources and ghelp:/proc URIs from web pages Moderate TuxCare License Agreement CVE-2026-13601 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-11856: flush cached HTTP Digest auth state when the origin or credentials change on the same easy handle so a challenge computed for one origin or set of credentials is not reused for another Moderate TuxCare License Agreement CVE-2026-11856 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully {CVE-2022-48660} - ipv4: check for NULL idev in ip_route_use_hint() {CVE-2024-36008} - KEYS: trusted: Do not use WARN when encode fails {CVE-2024-36975} - Fix userfaultfd_api to return EINVAL as expected {CVE-2024-41027} - xhci: Fix null pointer dereference when host dies {CVE-2023-52898} - sctp: sysctl: auth_enable: avoid using current->nsproxy {CVE-2025-21638} - blk-mq: fix IO hang from sbitmap wakeup race {CVE-2024-26671} - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new {CVE-2023-52977} - gpiolib: fix memory leak in gpiochip_setup_dev() {CVE-2022-48975} - HID: betop: check shape of output reports {CVE-2023-53015} - mm/swapfile: add cond_resched() in get_swap_pages() {CVE-2023-52932} - HV: hv_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-52937} - drm/i915: Fix a memory leak with reused mmap_offset {CVE-2023-53002} - ptdma: pt_core_execute_cmd() should use spinlock {CVE-2023-53013} - RDMA/core: Fix ib block iterator counter overflow {CVE-2023-53026} - Bluetooth: hci_conn: Fix memory leaks {CVE-2023-53018} - scsi: target: pscsi: Fix bio_put() for error case {CVE-2024-26760} - sctp: Prevent TOCTOU out-of-bounds write {CVE-2025-40331} - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() {CVE-2026-23038} - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() {CVE-2025-40194} - ALSA: hda/cs8409: Fix possible NULL dereference {CVE-2024-50160} - nbd: don't allow reconnect after disconnect {CVE-2025-21731} - openvswitch: fix lockup on tx to unregistering netdev with carrier {CVE-2025-21681} - ext4: detect invalid INLINE_DATA + EXTENTS flag combination {CVE-2025-40167} - ext4: xattr: fix null pointer deref in ext4_raw_inode() {CVE-2025-68820} - net: fix memory leak in skb_segment_list for GRO packets {CVE-2026-22979} - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode {CVE-2025-40321} - ipvs: fix ipv4 null-ptr-deref in route error path {CVE-2025-68813} - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping {CVE-2025-40121} - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash {CVE-2024-50041} - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc() {CVE-2024-50000} - bpf: Fix reference count leak in bpf_prog_test_run_xdp() {CVE-2026-22994} - xsk: check IFF_UP earlier in Tx path {CVE-2023-53240} - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers {CVE-2024-41038} - virtgpu: don't reset on shutdown {CVE-2025-38064} - xen/netfront: fix crash when removing device {CVE-2022-48969} - mptcp: do not fallback when OoO is present {CVE-2024-50185} - can: j1939: add missing calls in NETDEV_UNREGISTER notification handler {CVE-2025-39925} - netfilter: nf_tables: remove redundant chain validation on register store {CVE-2025-71160} - xfs: fix use-after-free in xattr node block inactivation {CVE-2026-43053} - ext4: fix racy may inline data check in dio write {CVE-2023-52786} - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini {CVE-2023-52738} - macsec: fix UAF bug for real_dev {CVE-2022-49390} - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation {CVE-2024-42259} - mm/shmem: disable PMD-sized page cache if needed {CVE-2024-42241} - driver: iio: add missing checks on iio_info's callback access {CVE-2024-46715} - udmabuf: fix memory leak on last export_udmabuf() error path {CVE-2024-56712} - ALSA: control: Avoid WARN() for symlink errors {CVE-2024-56657} - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM {CVE-2024-56611} - eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682} - net: annotate data-races around sk->sk_{data_ready,write_space} {CVE-2026-23302} - udmabuf: change folios array from kmalloc to kvmalloc {CVE-2024-56544} - RDMA/mlx5: Move events notifier registration to be after device registration {CVE-2024-53224} - dlm: fix possible lkb_resource null dereference {CVE-2024-47809} - ACPI: battery: Fix possible crash when unregistering a battery hook {CVE-2024-49955} - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params {CVE-2024-58012} - tpm: Change to kvalloc() in eventlog/acpi.c {CVE-2024-58005} - net_sched: sch_sfq: move the limit validation {CVE-2025-37752} - usb: xhci: Fix NULL pointer dereference on certain command aborts {CVE-2024-57981} - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() {CVE-2025-21861} - bpf: avoid holding freeze_mutex during mmap operation {CVE-2025-21853} - acct: perform last write from workqueue {CVE-2025-21846} - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() {CVE-2025-21959} - ipvlan: ensure network headers are in skb linear part {CVE-2025-21891} - wifi: iwlwifi: mvm: fix 6 GHz scan construction {CVE-2024-53055} - signal: restore the override_rlimit logic {CVE-2024-50271} - thermal: core: Reference count the zone in thermal_zone_get_by_id() {CVE-2024-50028} - block: fix potential invalid pointer dereference in blk_add_partition {CVE-2024-47705} - userfaultfd: fix checks for huge PMDs {CVE-2024-46787} - mptcp: pm: only mark 'subflow' endp as available {CVE-2024-45010} - mptcp: pm: re-using ID of unused flushed subflows {CVE-2024-45010} - eth: bnxt: fix truesize for mb-xdp-pass case {CVE-2025-21961} - driver core: fix potential NULL pointer dereference in dev_uevent() {CVE-2025-37800} - virtio_net: Fix napi_skb_cache_put warning {CVE-2024-43835} - cgroup: fix race between task migration and iteration {CVE-2026-43439} - bpf: Fix wrong reg type conversion in release_reference() {CVE-2022-49873} - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error {CVE-2025-21732} - serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN {CVE-2026-23472} - drm/amdgpu: Limit BO list entry count to prevent resource exhaustion {CVE-2026-23468} - net: add proper RCU protection to /proc/net/ptype {CVE-2026-23255} - tcp: secure_seq: add back ports to TS offset {CVE-2026-23247} - RDMA/mlx5: Fix a WARN during dereg_mr for DM type {CVE-2025-21888} - list: fix a data-race around ep->rdllist {CVE-2022-49443} - can: isotp: sanitize CAN ID checks in isotp_bind() {CVE-2022-49269} - rxrpc: Fix recv-recv race of completed call {CVE-2025-38524} - sched/rt: Fix race in push_rt_task {CVE-2025-38234} - NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232} - virtio: break and reset virtio devices on device_shutdown() {CVE-2025-38064} - block: fix resource leak in blk_register_queue() error path {CVE-2025-37980} - xsk: Fix race condition in AF_XDP generic RX path {CVE-2025-37920} - mm/vmscan: don't try to reclaim hwpoison folio {CVE-2025-37834} - nouveau: offload fence uevents work to workqueue {CVE-2024-26719} - bpf: Fix kmemleak warning for percpu hashmap {CVE-2025-37807} - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() {CVE-2024-26906} - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h {CVE-2024-26906} - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket {CVE-2024-42246} - quota: Fix potential NULL pointer dereference {CVE-2024-26878} - arp: Prevent overflow in arp_req_get(). {CVE-2024-26733} - ALSA: Fix deadlocks with kctl removals at disconnection {CVE-2024-38600} - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values {CVE-2024-42114} - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() {CVE-2024-41063} - fsnotify: clear PARENT_WATCHED flags lazily {CVE-2024-47660} - mm: use memalloc_nofs_save() in page_cache_ra_order() {CVE-2024-36882} - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled {CVE-2024-26987} - net: esp: fix bad handling of pages from page_pool {CVE-2024-26953} - virtio/vsock: Fix accept_queue memory leak {CVE-2024-53119} - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() {CVE-2024-50251} - fs/proc: fix softlockup in __read_vmcore (part 2) {CVE-2025-21694} - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability {CVE-2024-53051} - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. {CVE-2025-23143} - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() {CVE-2025-22090} - net: decrease cached dst counters in dst_release {CVE-2025-22057} - nfsd: put dl_stid if fail to queue dl_recall {CVE-2025-22025} - nfsd: make nfsd4_run_cb a bool return function {CVE-2025-22025} - usb: gadget: core: flush gadget workqueue after device removal {CVE-2025-21838} - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 {CVE-2025-21831} - media: uvcvideo: Fix crash during unbind if gpio unit is in use {CVE-2024-58079} - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() {CVE-2023-52877} - ext4: filesystems without casefold feature cannot be mounted with siphash {CVE-2024-49968} - padata: use integer wrap around to prevent deadlock on seq_nr overflow {CVE-2024-47739} - bpf, lsm: Add check for BPF LSM return value {CVE-2024-47703} - sched/smt: Fix unbalance sched_smt_present dec/inc {CVE-2024-44958} - xen-netfront: Fix NULL sring after live migration {CVE-2022-48969} - dlm: prevent NPD when writing a positive value to event_done {CVE-2025-23131} - udp: Deal with race between UDP socket address change and rehash {CVE-2024-57974} - bpf: sync_linked_regs() must preserve subreg_def {CVE-2024-53125} - mptcp: handle consistently DSS corruption {CVE-2024-50185} - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' {CVE-2024-36478} - net: tunnels: annotate lockless accesses to dev->needed_headroom {CVE-2023-53109} - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled {CVE-2025-38039} - uprobes: Reject the shared zeropage in uprobe_write_opcode() {CVE-2025-21881} - mm: slub: avoid wake up kswapd in set_track_prepare {CVE-2025-39843} - mm/smaps: fix race between smaps_hugetlb_range and migration {CVE-2025-39754} - bpf: Reject narrower access to pointer ctx fields {CVE-2025-38591} - net: clear the dst when changing skb protocol {CVE-2025-38192} - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() {CVE-2025-23144} - RDMA/core: Don't expose hw_counters outside of init net namespace {CVE-2025-22089} - can: j1939: implement NETDEV_UNREGISTER notification handler {CVE-2025-39925} - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. {CVE-2025-22111} - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object {CVE-2025-39851} - loop: Avoid updating block size under exclusive owner {CVE-2025-38709} - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() {CVE-2025-38643} - net_sched: sch_sfq: reject invalid perturb period {CVE-2025-38193} - net: phy: mscc: Fix memory leak when using one step timestamping {CVE-2025-38148} - espintcp: remove encap socket caching to avoid reference leak {CVE-2025-38097} - rseq: Fix segfault on registration when rseq_cs is non-zero {CVE-2025-38067} - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs {CVE-2025-38040} - usb: typec: ucsi: displayport: Fix deadlock {CVE-2025-37967} - ipvs: fix uninit-value for saddr in do_output_route4 {CVE-2025-37961} - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item {CVE-2025-68211} - bpf: Scrub packet on bpf_redirect_peer {CVE-2025-37959} - tracing: Verify event formats that have "%*p.." {CVE-2025-37938} - iommu/amd/pgtbl: Fix possible race while increase page table level {CVE-2025-39961} - net/mlx5e: Harden uplink netdev access against device unbind {CVE-2025-39947} - dm-stripe: fix a possible integer overflow {CVE-2025-39940} - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer {CVE-2025-39937} - can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode {CVE-2025-38665} - net/mlx5e: Fix crash on profile change rollback failure {CVE-2026-23000} - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation {CVE-2025-38162} - tracing: Add recursion protection in kernel stack trace recording {CVE-2026-23138} - rxrpc: Fix recvmsg() unconditional requeue {CVE-2026-23066} - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997} - net: can: j1939: recover socket queue on CAN bus error during BAM transmission {CVE-2026-22997} - dm-verity: disable recursive forward error correction {CVE-2025-71161} - netfilter: nf_tables: avoid chain re-validation if possible {CVE-2025-71160} - KEYS: trusted: Fix a memory leak in tpm2_load_cmd {CVE-2025-71147} - vsock/virtio: fix potential underflow in virtio_transport_get_credit() {CVE-2026-23069} - net: fix segmentation of forwarding fraglist GRO {CVE-2026-23154} - ice: Don't process extts if PTP is disabled {CVE-2024-42107} - drm/i915/dpt: Make DPT object unshrinkable {CVE-2024-40924} - drm/i915/dpt: Treat the DPT BO as a framebuffer {CVE-2024-40924} - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx {CVE-2024-53091} - pipe: wakeup wr_wait after setting max_usage {CVE-2023-52672} - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails {CVE-2023-53103} - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check {CVE-2024-57993} - drm/amdkfd: debugfs hang_hws skip GPU with MES {CVE-2025-37853} - leds: mlxreg: Use devm_mutex_init() for mutex initialization {CVE-2024-42129} - drm/amd/display: fix a Null pointer dereference vulnerability {CVE-2025-39705} - gfs2: Validate i_depth for exhash directories {CVE-2025-38710} - drm/scheduler: signal scheduled fence when kill job {CVE-2025-38436} - drm/amdgpu: Add basic validation for RAS header {CVE-2025-38426} - mptcp: fix NULL pointer in can_accept_new_subflow {CVE-2025-23145} - bpf: bpf_sk_storage: Fix invalid wait context lockdep report {CVE-2023-53857} - nvme-core: fix memory leak in dhchap_secret_store {CVE-2023-53852} - virtio_net: Fix error unwinding of XDP initialization {CVE-2023-53499} - nvme-core: fix memory leak in dhchap_ctrl_secret {CVE-2023-53792} - ceph: fix race condition validating r_parent before applying state {CVE-2025-39927} - x86/MCE: Always save CS register on AMD Zen IF Poison errors {CVE-2023-53438} - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() {CVE-2023-53332} - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net {CVE-2023-54276} - blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init {CVE-2023-54271} - net/mlx5e: TC, Fix internal port memory leak {CVE-2023-53999} - tipc: do not update mtu if msg_max is too small in mtu negotiation {CVE-2023-53517} - tipc: add tipc_bearer_min_mtu to calculate min mtu {CVE-2023-53517} - tun: Fix memory leak for detached NAPI queue. {CVE-2023-53685} - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize {CVE-2023-53667} - start_kernel: Add __no_stack_protector function attribute {CVE-2023-53491} - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb {CVE-2023-53548} - sched/psi: use kernfs polling functions for PSI trigger polling {CVE-2023-54019} - cxl/pmem: Fix nvdimm registration races {CVE-2023-54323} - drm/radeon: delete radeon_fence_process in is_signaled, no deadlock {CVE-2025-68223} - dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() {CVE-2026-23004} - wifi: mac80211: don't WARN for connections on invalid channels {CVE-2025-71227} - md: suspend array while updating raid_disks via sysfs {CVE-2025-71225} - net: stmmac: fix the crash issue for zero copy XDP_TX action {CVE-2025-71095} - drm/ttm: Don't leak a resource on eviction error {CVE-2023-54254} - firmware: arm_sdei: Fix sleep from invalid context BUG {CVE-2023-54160} - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter {CVE-2023-54057} - net: usb: asix: validate PHY address before use {CVE-2025-71094} - tty: fix deadlock caused by calling printk() under tty_port->lock {CVE-2022-49441} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE {CVE-2026-23401} - blktrace: fix __this_cpu_read/write in preemptible context {CVE-2026-23374} - x86/CPU: Fix FPDSS on Zen1 {CVE-2025-54505} - ice: Fix PTP NULL pointer dereference during VSI rebuild {CVE-2026-23210} - mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() {CVE-2026-23169} - gfs2: No more self recovery {CVE-2025-38659} - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() {CVE-2022-49891} - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() {CVE-2022-49796} - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() {CVE-2022-49797} - netlink: Bounds-check struct nlmsgerr creation {CVE-2022-49766} - bpf: Prevent bpf program recursion for raw tracepoint probes {CVE-2022-49764} - i2c: designware: use casting of u64 in clock multiplication to avoid overflow {CVE-2022-49749} - futex: Clear stale exiting pointer in futex_lock_pi() retry path {CVE-2026-31555} - ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() {CVE-2026-31531} - netfilter: ctnetlink: use netlink policy range checks {CVE-2026-31495} - tracing: Fix potential deadlock in cpu hotplug with osnoise {CVE-2026-31480} - esp: fix skb leak with espintcp and async crypto {CVE-2026-31518} - xfs: factor out xfs_attr3_leaf_init {CVE-2026-43053} - xfs: factor out xfs_attr3_node_entry_remove {CVE-2026-43053} - ALSA: ctxfi: Check the error for index mapping {CVE-2026-31777} - bridge: br_nd_send: validate ND option lengths {CVE-2026-31752} - rtnetlink: add missing netlink_ns_capable() check for peer netns {CVE-2026-31692} - crypto: af_alg - limit RX SG extraction by receive buffer budget {CVE-2026-31677} - APEI/GHES: ensure that won't go past CPER allocated record {CVE-2026-43277} - ceph: supply snapshot context in ceph_zero_partial_object() {CVE-2026-43273} - team: avoid NETDEV_CHANGEMTU event when unregistering slave {CVE-2026-43234} - wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() {CVE-2025-71297} - EFI/CPER: don't go past the ARM processor CPER record buffer {CVE-2026-43266} - net: bridge: switchdev: Skip MDB replays of deferred events on offload {CVE-2024-26837} - can: mcp251xfd: fix infinite loop when xmit fails {CVE-2024-41088} - ipvlan: Make the addrs_lock be per port {CVE-2026-23103} - netem: fix return value if duplicate enqueue fails {CVE-2024-45016} - USB: serial: mos7840: fix crash on resume {CVE-2024-42244} - crypto: null - Use spin lock instead of mutex {CVE-2025-37808} - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly {CVE-2025-71096} - bpf: Fix overrunning reservations in ringbuf {CVE-2024-41009} - bpf: Fix bpf_sk_select_reuseport() memory leak {CVE-2025-21683} - drm/i915: Fix request ref counting during error capture & debugfs dump {CVE-2023-52981} - netfilter: conntrack: fix wrong ct->timeout value {CVE-2023-53635} - drop_monitor: replace spin_lock by raw_spin_lock {CVE-2024-40980} - net: bonding: fix NULL deref in bond_debug_rlb_hash_show {CVE-2026-31546} - serial: protect uart_port_dtr_rts() in uart_shutdown() too {CVE-2024-50058} - wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. {CVE-2026-31551} - ipv6: Fix signed integer overflow in __ip6_append_data {CVE-2022-49728} - selinux: avoid dereference of garbage after mount failure {CVE-2024-35904} - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name {CVE-2024-49934} - tracing: Do not let histogram values have some modifiers {CVE-2023-53093} - ice: Add netif_device_attach/detach into PF reset flow {CVE-2024-46770} - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. {CVE-2025-37884} - fbmon: prevent division by zero in fb_videomode_from_videomode() {CVE-2024-35922} - drm/amdgpu: Fix the null pointer dereference to ras_manager {CVE-2024-43908} - tracing: Ensure visibility when inserting an element into tracing_map {CVE-2024-26645} - drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func {CVE-2024-47720} - phy: mdio: fix memory leak {CVE-2021-47416} - ipv4: Fix reference count leak when using error routes with nexthop objects {CVE-2025-71097} - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies() {CVE-2024-50046} - packet: annotate data-races around ignore_outgoing {CVE-2024-26862} - md: fix resync softlockup when bitmap size is less than array size {CVE-2024-38598} - wireguard: receive: annotate data-race around receiving_counter.counter {CVE-2024-26861} - netfs: Only call folio_start_fscache() one time for each folio {CVE-2023-52582} - usb: xhci: tegra: fix sleep in atomic call {CVE-2023-53475} - ACPI: PAD: fix crash in exit_round_robin() {CVE-2024-49935} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499} - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() {CVE-2024-50256} - Bluetooth: ISO: Fix multiple init when debugfs is disabled {CVE-2024-50077} - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio {CVE-2025-21931} - RDMA/core: Silence oversized kvmalloc() warning {CVE-2025-37867} - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() {CVE-2024-26663} - net: let net.core.dev_weight always be non-zero {CVE-2025-21806} - net: mdio: fix unbalanced fwnode reference count in mdio_device_release() {CVE-2022-48961} - eth: alx: take rtnl_lock on resume {CVE-2022-50498} - ata: libata-transport: fix error handling in ata_tlink_add() {CVE-2022-49824} - ata: libata-transport: fix error handling in ata_tport_add() {CVE-2022-49825} - netfilter: br_netfilter: fix panic with metadata_dst skb {CVE-2024-50045} - net: fix NULL pointer in skb_segment_list {CVE-2023-52991} - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove {CVE-2024-26698} - scsi: qla2xxx: validate nvme_local_port correctly {CVE-2024-42286} - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale {CVE-2023-53291} - wifi: mac80211: Discard Beacon frames to non-broadcast address {CVE-2025-71127} - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() {CVE-2024-46755} - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy {CVE-2025-21640} - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes {CVE-2024-41089} - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING {CVE-2023-52845} - bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets {CVE-2023-52523} - Bluetooth: Fix not cleanup led when bt_init fails {CVE-2022-48971} - netfilter: nf_conntrack_h323: Add protection for bmp length out of range {CVE-2024-26851} - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() {CVE-2024-53680} - ppp_async: limit MRU to 64K {CVE-2024-26675} - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages {CVE-2024-40904} - ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work {CVE-2024-26631} - xfrm: fix one more kernel-infoleak in algo dumping {CVE-2024-50110} - xdp: fix invalid wait context of page_pool_destroy() {CVE-2024-43834} - fs/netfs/fscache_cookie: add missing "n_accesses" check {CVE-2024-45000} - mac802154: check local interfaces before deleting sdata list {CVE-2024-57948} - usbnet: gl620a: fix endpoint checking in genelink_bind() {CVE-2025-21877} - IB/core: Fix ib_cache_setup_one error flow cleanup {CVE-2024-47693} - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate {CVE-2021-4454} - vfs: fix race between evice_inodes() and find_inode()&iput() {CVE-2024-47679} - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts {CVE-2023-53245} - iavf: fix off-by-one issues in iavf_config_rss_reg() {CVE-2025-71087} - cachefiles: fix memory leak in cachefiles_add_cache() {CVE-2024-26840} - ext4: fix access to uninitialised lock in fc replay path {CVE-2024-50014} - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices {CVE-2025-21649} - ftrace: Fix regression with module command in stack_trace_filter {CVE-2024-56569} - ipv6: sr: fix invalid unregister error path {CVE-2024-38612} - crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493} - netfilter: flowtable: strictly check for maximum number of actions {CVE-2026-43329} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() {CVE-2026-43038} Important TuxCare License Agreement CVE-2024-50271 CVE-2026-43053 CVE-2024-26760 CVE-2023-54271 CVE-2024-53091 CVE-2026-43493 CVE-2023-54276 CVE-2025-71094 CVE-2023-52786 CVE-2025-21638 CVE-2023-53291 CVE-2025-40331 CVE-2025-71160 CVE-2024-50028 CVE-2024-26840 CVE-2026-43038 CVE-2023-53517 CVE-2026-23468 CVE-2026-31531 CVE-2025-38097 CVE-2024-26663 CVE-2022-49824 CVE-2023-52991 CVE-2026-43329 CVE-2024-56544 CVE-2025-71227 CVE-2024-45010 CVE-2026-23038 CVE-2026-43439 CVE-2025-38710 CVE-2025-40194 CVE-2025-21831 CVE-2022-49441 CVE-2026-23086 CVE-2024-47679 CVE-2024-26733 CVE-2025-22089 CVE-2024-47703 CVE-2024-46715 CVE-2024-50160 CVE-2023-52898 CVE-2025-21731 CVE-2025-38591 CVE-2025-68223 CVE-2022-49269 CVE-2023-53852 CVE-2025-21888 CVE-2023-53002 CVE-2024-42259 CVE-2025-21681 CVE-2024-38600 CVE-2025-68211 CVE-2025-38709 CVE-2023-54160 CVE-2025-21683 CVE-2024-36882 CVE-2024-42286 CVE-2024-43835 CVE-2026-23103 CVE-2024-46755 CVE-2022-1462 CVE-2023-52582 CVE-2025-71225 CVE-2025-21881 CVE-2022-49443 CVE-2024-40980 CVE-2025-71095 CVE-2023-52845 CVE-2025-39843 CVE-2021-47416 CVE-2022-49728 CVE-2026-23210 CVE-2024-53224 CVE-2024-45009 CVE-2024-49935 CVE-2026-31518 CVE-2025-38232 CVE-2025-37920 CVE-2025-22057 CVE-2025-39937 CVE-2024-35904 CVE-2023-53635 CVE-2024-26631 CVE-2025-21853 CVE-2025-38426 CVE-2024-50251 CVE-2025-40167 CVE-2026-31628 CVE-2024-38598 CVE-2024-47809 CVE-2026-23169 CVE-2024-57996 CVE-2024-26953 CVE-2024-53119 CVE-2023-53013 CVE-2024-50058 CVE-2024-43834 CVE-2025-71147 CVE-2025-21649 CVE-2025-68820 CVE-2026-31777 CVE-2024-56712 CVE-2024-26698 CVE-2026-22997 CVE-2022-49825 CVE-2023-52877 CVE-2026-22979 CVE-2025-37808 CVE-2026-23066 CVE-2024-35922 CVE-2024-42246 CVE-2024-40904 CVE-2026-23401 CVE-2025-38148 CVE-2022-49766 CVE-2025-39705 CVE-2025-38643 CVE-2025-40321 CVE-2024-47693 CVE-2024-47705 CVE-2024-47720 CVE-2024-26862 CVE-2023-52932 CVE-2026-43499 CVE-2025-39940 CVE-2025-37800 CVE-2025-21846 CVE-2022-49764 CVE-2023-53685 CVE-2023-54254 CVE-2024-53125 CVE-2024-50077 CVE-2025-38436 CVE-2025-68813 CVE-2023-53491 CVE-2023-52672 CVE-2025-38162 CVE-2024-56569 CVE-2024-44958 CVE-2023-52738 CVE-2025-71297 CVE-2024-53051 CVE-2022-49796 CVE-2023-52523 CVE-2026-23374 CVE-2025-21838 CVE-2025-21682 CVE-2024-57974 CVE-2025-21931 CVE-2026-43234 CVE-2023-54057 CVE-2024-49934 CVE-2026-23069 CVE-2024-47739 CVE-2024-26671 CVE-2023-53475 CVE-2025-37980 CVE-2024-41027 CVE-2024-45016 CVE-2024-42114 CVE-2025-23131 CVE-2022-48660 CVE-2024-41089 CVE-2024-47660 CVE-2025-37884 CVE-2024-50045 CVE-2025-23145 CVE-2024-57948 CVE-2024-50014 CVE-2022-48961 CVE-2026-23472 CVE-2024-58005 CVE-2023-53093 CVE-2025-71127 CVE-2022-49891 CVE-2025-38193 CVE-2022-49873 CVE-2025-22090 CVE-2026-31480 CVE-2023-53018 CVE-2026-23000 CVE-2024-26987 CVE-2025-37834 CVE-2025-22111 CVE-2023-53792 CVE-2025-21891 CVE-2024-26861 CVE-2024-56657 CVE-2022-50498 CVE-2025-38064 CVE-2025-40121 CVE-2025-37959 CVE-2022-48971 CVE-2026-31677 CVE-2025-21959 CVE-2024-41038 CVE-2023-53109 CVE-2025-21732 CVE-2024-50041 CVE-2025-39851 CVE-2024-50000 CVE-2025-38524 CVE-2023-53667 CVE-2024-50185 CVE-2024-26878 CVE-2024-41009 CVE-2025-37867 CVE-2024-26906 CVE-2023-52937 CVE-2023-53499 CVE-2024-58012 CVE-2025-38192 CVE-2025-21806 CVE-2024-41088 CVE-2023-54019 CVE-2024-26675 CVE-2025-38067 CVE-2026-31551 CVE-2025-22025 CVE-2026-31495 CVE-2021-4454 CVE-2023-53857 CVE-2024-40924 CVE-2026-23004 CVE-2024-57993 CVE-2024-26837 CVE-2025-21877 CVE-2024-42244 CVE-2024-50256 CVE-2025-39927 CVE-2024-42107 CVE-2022-49390 CVE-2026-23138 CVE-2024-53055 CVE-2025-21694 CVE-2024-50110 CVE-2023-53015 CVE-2022-49797 CVE-2024-42129 CVE-2023-53026 CVE-2022-49749 CVE-2024-42241 CVE-2024-49968 CVE-2026-31692 CVE-2023-52981 CVE-2026-23247 CVE-2024-38612 CVE-2023-53332 CVE-2024-26851 CVE-2026-43266 CVE-2023-52977 CVE-2025-37967 CVE-2025-71087 CVE-2025-38665 CVE-2023-54323 CVE-2026-23255 CVE-2026-22994 CVE-2025-37853 CVE-2026-31546 CVE-2025-71161 CVE-2023-53240 CVE-2024-58079 CVE-2025-21961 CVE-2025-23143 CVE-2025-37961 CVE-2024-36478 CVE-2025-37938 CVE-2024-26645 CVE-2025-38039 CVE-2024-46787 CVE-2026-31555 CVE-2025-21861 CVE-2025-39961 CVE-2024-46770 CVE-2026-43277 CVE-2026-31752 CVE-2022-48975 CVE-2025-37807 CVE-2025-21640 CVE-2023-53999 CVE-2026-23154 CVE-2024-36008 CVE-2023-53438 CVE-2025-39754 CVE-2025-38040 CVE-2025-39947 CVE-2024-41063 CVE-2024-56611 CVE-2024-36975 CVE-2026-23302 CVE-2026-43273 CVE-2025-38234 CVE-2025-38659 CVE-2024-43908 CVE-2024-49955 CVE-2024-26719 CVE-2024-45000 CVE-2025-71097 CVE-2023-53548 CVE-2024-50046 CVE-2024-57981 CVE-2025-23144 CVE-2024-53680 CVE-2023-53245 CVE-2025-71096 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-9150: Fix stack buffer overflow in Debian metadata parser when handling SHA384/SHA512 checksums Moderate TuxCare License Agreement CVE-2026-9150 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-7519: fix out-of-bounds write in graphics ShmemSection handling (Mozilla bug 1902307) - CVE-2025-14324: fix constant-pool assembler-buffer size miscalculation on ARM (Mozilla bug 1996840) - CVE-2026-2806: fix SVG glyph out-of-bounds read via decompression size mismatch (Mozilla bug 2006199) Critical TuxCare License Agreement CVE-2024-7519 CVE-2025-14324 CVE-2026-2775 CVE-2026-2806 CVE-2026-2793 CVE-2026-2757 CVE-2026-2760 CVE-2026-2761 CVE-2026-2758 CVE-2026-2771 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50292: sanitize phys sysattr to prevent udev property injection Critical TuxCare License Agreement CVE-2026-50292 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12413: fix an off-by-one assertion in reassemble_v2_incoming_fragments() that let a malformed IKEv2 fragment abort and restart the pluto daemon (DoS) Important TuxCare License Agreement CVE-2026-12413 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-53705: fix integer overflow in WavPack decoder output buffer size calculation that caused an undersized heap allocation Important TuxCare License Agreement CVE-2026-53705 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-59858: escape the typeref field with escape(typename, '/\') before interpolating it into the :vimgrep pattern in ccomplete.vim StructMembers(), preventing arbitrary Ex command execution during C omni-completion when reading a crafted tags file (runtime/autoload/ccomplete.vim, upstream vim 9.2.0735) - CVE-2026-59856: quote the class name via string() before interpolating it into the search() pattern executed by win_execute() in phpcomplete.vim GetClassContentsStructure(), preventing potential command execution during PHP omni-completion (runtime/autoload/phpcomplete.vim, upstream vim 9.2.0736) Important TuxCare License Agreement CVE-2026-59858 CVE-2026-59856 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-58380: fix out-of-bounds write in PNM parser by keeping the pnmscanner_gettoken NUL terminator within bufsize - 1 - CVE-2026-58384: fix integer overflow in PSD read_RLE_channel row-length allocation with a g_size_checked_mul guard against G_MAXUINT32 Important TuxCare License Agreement CVE-2026-58380 CVE-2026-58384 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-39821: reject all-ASCII xn-- labels in vendored golang.org/x/net/idna (backport of upstream commit f05f21b) Important TuxCare License Agreement CVE-2026-39821 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41579: fix /dev symlink path traversal in rootfs /dev setup Important TuxCare License Agreement CVE-2026-41579 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-58471: fix buffer size handling in filename conversion (src/url.c) - CVE-2026-58472: fix integer/buffer overflow in html_quote_string (src/convert.c) Important TuxCare License Agreement CVE-2026-58472 CVE-2026-58471 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-57231: reject image environment variables that are not strict key=value in ParseImageEnvs(), preventing a crafted image from leaking matching host environment variables into the container Important TuxCare License Agreement CVE-2026-57231 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-39821: reject all-ASCII xn-- labels in vendored golang.org/x/net/idna (backport of upstream commit f05f21b) Important TuxCare License Agreement CVE-2026-39821 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-56132: fix out-of-bound scaffolding index store in doProlog - CVE-2026-56403: protect storeAtts and xmlwf xcsdup from signed integer overflow - CVE-2026-56404: protect addBinding from signed integer overflow - CVE-2026-56405: protect getAttributeId from signed integer overflow - CVE-2026-56406: add missing overflow check to XML_ParseBuffer - CVE-2026-56410: protect xmlwf resolveSystemId from integer overflow - CVE-2026-56411: protect xmlwf notation list allocation from integer overflow Moderate TuxCare License Agreement CVE-2026-56404 CVE-2026-56405 CVE-2026-56406 CVE-2026-56403 CVE-2026-56411 CVE-2026-56132 CVE-2026-56410 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-6733: reject unsolicited HTTP/1.1 response bytes that begin parsing with no in-flight request, preventing keep-alive response queue poisoning Low TuxCare License Agreement CVE-2026-6733 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-3933: integer overflow in Imf::bytesPerDeepLineTable (ImfMisc.cpp) - CVE-2021-45942: heap OOB write in CompositeDeepScanLine::setFrameBuffer via missing subsampling validation Moderate TuxCare License Agreement CVE-2021-3933 CVE-2021-45942 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-46955: out-of-bounds read in Indexed colour space index (bug #707990) Moderate TuxCare License Agreement CVE-2024-46955 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-52718: fix bytes/bits confusion when parsing AV1 tile data size in codecparsers, preventing an assertion Moderate TuxCare License Agreement CVE-2026-52718 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50722: fix improper DER validation of the ASN.1 digest in IKEv2 RSASSA-PKCS1-v1_5 AUTH verification Moderate TuxCare License Agreement CVE-2026-50722 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-39835: return an error instead of panicking when the SSH CertChecker IsHostAuthority/IsUserAuthority callbacks are unset, in the vendored golang.org/x/crypto/ssh Important TuxCare License Agreement CVE-2026-39832 CVE-2026-39835 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-58379: fix heap buffer overflow in PSP file parser by correcting the line_width computation for low bit depths and reading line_width bytes instead of width in read_channel_data Important TuxCare License Agreement CVE-2026-58379 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-15308: fix quadratic complexity (CPU DoS) in incremental HTMLParser feed() by buffering pending data until a parse threshold Important TuxCare License Agreement CVE-2026-15308 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27145: fix crypto/x509 quadratic hostname verification by splitting the candidate hostname only once Moderate TuxCare License Agreement CVE-2026-27145 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-59857: bound the single-byte SAL result writes and the terminating NUL to MAXWLEN - 1 in spell_soundfold_sal() to prevent a stack out-of-bounds write with a crafted spell file (src/spell.c, upstream vim 9.2.0725) Moderate TuxCare License Agreement CVE-2026-59857 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12549: incomplete range clamp for suffix range in soup_message_headers_get_ranges_internal Moderate TuxCare License Agreement CVE-2026-12549 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40467: fix use-after-free in do_getline_redir() in io.c (redir_exp dereferenced after being freed) - CVE-2026-40553: fix stack buffer overflow in ftype() in the readdir extension (unbounded path concatenation before stat()) - CVE-2026-40469: fix integer overflow in do_sub() in builtin.c (64-bit overflow check on the result-buffer size prevents heap corruption in sub/gsub/gensub replacement expansion on 32-bit builds) Critical TuxCare License Agreement CVE-2026-40469 CVE-2026-40467 CVE-2026-40553 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-59998: document that GSSAPIStrictAcceptorCheck is ineffective when the server is joined to a Windows Active Directory. Backport upstream commit 8058c5bd. Critical TuxCare License Agreement CVE-2026-59999 CVE-2026-59995 CVE-2026-59997 CVE-2026-59998 CVE-2026-60002 CVE-2026-59996 CVE-2026-60000 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - xfs: resample the data fork mapping after cycling ILOCK - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149} - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). - net: l3mdev: use skb_dst_dev_rcu() in l3mdev_l3_out() - ipv4: start using dst_dev_rcu() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - tcp_metrics: use dst_dev_net_rcu() {CVE-2025-40075} - net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170} - udp6: Fix race condition in udp6_sendmsg & connect - ipv6: use RCU in ip6_output() {CVE-2025-40158} - ipv6: use RCU in ip6_xmit() {CVE-2025-40135} - ipv6: start using dst_dev_rcu() - net: dst: introduce dst->dev_rcu - neighbour: accept plain RCU readers in ___neigh_lookup_noref() {CVE-2025-40158} - net: Add locking to protect skb->dev access in ip_output - ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers - ipv6: adopt dst_dev() helper - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - net: dst: add four helpers to annotate data-races around dst->dev - tcp: convert to dev_net_rcu() - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198} Important TuxCare License Agreement CVE-2025-40135 CVE-2026-43198 CVE-2025-40149 CVE-2025-40158 CVE-2025-40170 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50219: reject libexpat API re-entry from inside handler callbacks to prevent use-after-free - CVE-2026-56131: extend the handler re-entrancy guard to XML_ResumeParser - CVE-2026-56412: guard XML_TOK_DATA_CHARS handler calls in doCdataSection Moderate TuxCare License Agreement CVE-2026-50219 CVE-2026-56412 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-26981: fix buffer overflow in compilePassOpcode in compileTranslationTable.c Important TuxCare License Agreement CVE-2022-26981 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-43958: fix stack-based buffer overflow in rrdcached handle_request_create() via an oversized CREATE request with unbounded DS/RRA arguments Important TuxCare License Agreement CVE-2026-43958 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-55999: reject fonts with per-glyph metrics exceeding maxbounds in glamor_font_get() to prevent heap buffer overflow in the glamor font atlas Important TuxCare License Agreement CVE-2026-55999 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27145: rebuild with newer golang 1.22.9-1.el9_2.tuxcare.els18 (crypto/x509: split candidate hostname only once) Moderate TuxCare License Agreement CVE-2026-27145 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50721: fix improper RSA signature hash-length verification in IKEv1 by delegating to PK11_Verify() Moderate TuxCare License Agreement CVE-2026-50721 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-39832: preserve SSH agent constraint extensions when adding keys and reject keys with unsupported constraint extensions in the vendored golang.org/x/crypto/ssh/agent client and in-memory keyring Moderate TuxCare License Agreement CVE-2026-39832 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42508: fix revoked CA key not correctly checked for revocation in vendored golang.org/x/crypto/ssh/knownhosts Moderate TuxCare License Agreement CVE-2026-42508 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-58470: fix integer overflow in parse_content_range Moderate TuxCare License Agreement CVE-2026-58470 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-57432: fix pack/unpack SSize_t overflow when computing structure size Important TuxCare License Agreement CVE-2026-57432 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-39821: reject all-ASCII xn-- labels in the vendored golang.org/x/net/idna to prevent Punycode label spoofing Important TuxCare License Agreement CVE-2026-39821 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-59798: stack buffer overflow in pdfwrite gdevpdtw.c - CVE-2025-59799: missing size validation in pdfwrite gdevpdfm.c Moderate TuxCare License Agreement CVE-2025-59799 CVE-2025-59798 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0914: fix timing side-channel in RSA PKCS#1 v1.5 decryption (Marvin) Moderate TuxCare License Agreement CVE-2024-0914 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-8177: fix out-of-bounds read on truncated multi-byte UTF-8 node names (replace hand-rolled domParseChar with libxml2 xmlValidateName) Important TuxCare License Agreement CVE-2026-8177 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-4048: fix out of bounds read in larrv functions - Pull runtime 64-bit-index subpackages into -devel via Requires so devel-shipped liblapack64/libblas64/libcblas64 .so symlinks resolve on install Critical TuxCare License Agreement CVE-2021-4048 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-14327: fix URI host display spoofing by consolidating DownloadUtils.getURIHost into BrowserUtils.formatURIForDisplay (Mozilla bug 1970743) Important TuxCare License Agreement CVE-2025-14327 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-41989: heap OOB write in _gcry_ecc_mont_decodepoint Important TuxCare License Agreement CVE-2026-41989 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-60001: sshd did not enforce the minimum per-attempt authentication delay in the GSSAPI and keyboard-interactive paths, enabling timing-based user enumeration. Backport upstream commit d43ba60c. Moderate TuxCare License Agreement CVE-2026-60001 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-11774: Reject invalid SASL packet length values in sasl_io_start_packet Important TuxCare License Agreement CVE-2026-11774 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12725: Fix buffer overflow in log_query() Moderate TuxCare License Agreement CVE-2026-12725 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42533: script engine capture-state save/restore + heap buffer overrun protection Low TuxCare License Agreement CVE-2026-42533 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-33811: require golang >= 1.22.9-1.el9_2.tuxcare.els12 (fix in the Go net package) Important TuxCare License Agreement CVE-2026-33811 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2791: fix cache service instantiation outside the parent process (Mozilla bug 2015220) Critical TuxCare License Agreement CVE-2026-2791 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-14544: complete the incomplete CVE-2026-8631 integer overflow fix in the hpcups processing path (PCLmGenerator::Encapsulate), so the full whiteStripLen * srcNumComponents product is overflow-checked (backport of RHEL/AlmaLinux hplip-3.21.2-6.el9_8.5, RHSA-2026:40831) Critical TuxCare License Agreement CVE-2026-14544 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-3854: fix Ion IsDiamondPattern successor-count guard allowing switch terminators (Mozilla bug 1884552) - CVE-2024-5702: fix use-after-free in nsTransportEventSinkProxy via raw-pointer to smart-pointer refactor (Mozilla bug 1193389) - CVE-2026-0880: fix integer overflow in Cairo DrawTarget CopyToImageSurface/CreateSubImageForData (Mozilla bug 2005014) Important TuxCare License Agreement CVE-2024-3854 CVE-2026-0880 CVE-2024-5702 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-56288: NULL pointer dereference via crafted unified-diff hunk (another_hunk) - CVE-2026-56289: Denial of service via infinite loop on null-range hunk offsets (locate_hunk) Moderate TuxCare License Agreement CVE-2026-56288 CVE-2026-56289 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-11610: bounds-check sasl_io_recv against heap overflow Important TuxCare License Agreement CVE-2026-11610 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix CVE-2026-56003: property buffer overflow in computeProps / ComputeScaledProperties in bitscale.c (upstream commit dff957a5158da038a282a59a31fe736702732939) Important TuxCare License Agreement CVE-2026-56003 CVE-2026-56001 CVE-2026-56002 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40468: fix integer overflows in do_sub() in builtin.c and parse_escape() in node.c (sofar widened to size_t, escape accumulator widened to int64_t to avoid overflow on 32-bit builds) Critical TuxCare License Agreement CVE-2026-40468 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-14476: reject path traversal in the AD GPO gPCFileSysPath attribute, preventing writes outside the GPO cache directory - CVE-2026-14474: warn when ldap_sudo_search_base is unset and the sudo provider falls back to searching the entire directory tree for sudoRole objects Important TuxCare License Agreement CVE-2026-14476 CVE-2026-14474 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-48914: virtio-blk: out-of-bounds heap write via malformed scsi request Moderate TuxCare License Agreement CVE-2026-48914 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Bump release to skip the already-released els6 tag, which was set one release ahead of its changelog entry and cannot be changed Moderate TuxCare License Agreement CVE-2026-59084 CVE-2026-55956 CVE-2026-59083 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-2476: sanitize alternate extension metadata before constructing output filenames Moderate TuxCare License Agreement CVE-2022-2476 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2050: fix HDR file parsing heap-based buffer overflow vulnerability Important TuxCare License Agreement CVE-2026-2050 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-38266: prevent divide-by-zero errors in block convolution functions Moderate TuxCare License Agreement CVE-2022-38266 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12505: perform the user lookup and drop supplementary groups on the host namespace before switching to the caller namespace, fixing a local privilege escalation in cifs.upcall Important TuxCare License Agreement CVE-2026-12505 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0747: Document::Open inheriting CSP from a different window - CVE-2024-0749: Phishing site popup could obscure the address bar - CVE-2025-5268: Memory safety bugs (gfxFont mHasSpaceFeatures atomicity, PresShell event-handler UAF, wasm uncheckedReadValType missing types) Moderate TuxCare License Agreement CVE-2024-0747 CVE-2025-5268 CVE-2024-0749 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-36033: strip control characters from URLs before protocol validation Moderate TuxCare License Agreement CVE-2022-36033 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-43903: properly verify adbe.pkcs7.sha1 signatures in SignatureHandler::validateSignature to prevent signature forgeries Low TuxCare License Agreement CVE-2025-43903 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-37714: fix uncontrolled recursion (StackOverflow) in HTML parser Important TuxCare License Agreement CVE-2021-37714 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - net: skbuff: propagate shared-frag marker through skb_gro_receive + skb_shift {CVE-2026-46300} - Revert "net: gro: propagate SKBFL_SHARED_FRAG through skb_gro_receive" Important TuxCare License Agreement CVE-2026-46300 CVE-2026-43503 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-10846: Fix off-path DNS response poisoning in stub resolver over UDP Important TuxCare License Agreement CVE-2026-10846 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Rebase to webkitgtk 2.52.5 (WebKitGTK Security Advisory WSA-2026-0004), aligning with the 2.52.x security baseline shipped by RHEL 9 (RHSA-2026:42062). - CVEs resolved by this rebase: CVE-2024-4367, CVE-2026-39872, CVE-2026-43663, CVE-2026-43676, CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707, CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716, CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726, CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734, CVE-2026-43740, CVE-2026-43742, CVE-2026-43745. - Drop fix-system-malloc-llint-extractor.patch; the upstream cherry-pick (WebKit 314364@main) is now included in 2.52.5. - Refresh libsoup2.patch for the 2.52.5 library version triplet bumps (WEBKIT 21/9/21, JAVASCRIPTCORE 10/13/10 on API 4.1; WEBKIT 20/9/16, JAVASCRIPTCORE 8/13/7 on API 6.0). The webkit2gtk-4.0 SONAME (libwebkit2gtk-4.0.so.37) is preserved. Important TuxCare License Agreement CVE-2026-43725 CVE-2024-4367 CVE-2026-43731 CVE-2026-43713 CVE-2026-43663 CVE-2026-43712 CVE-2026-43701 CVE-2026-43705 CVE-2026-43732 CVE-2026-43721 CVE-2026-43734 CVE-2026-43707 CVE-2026-43676 CVE-2026-43742 CVE-2026-43716 CVE-2026-39872 CVE-2026-43726 CVE-2026-43727 CVE-2026-43699 CVE-2026-43740 CVE-2026-43715 CVE-2026-43720 CVE-2026-43745 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344} - x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363} - drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370} - dm: remove fake timeout to avoid leak request {CVE-2026-43314} - md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163} - drm: Account property blob allocations to memcg {CVE-2026-43287} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206} - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500} - net/sched: Fix backlog accounting in qdisc_dequeue_internal {CVE-2025-39677} - l2tp: avoid one data-race in l2tp_tunnel_del_work() {CVE-2026-23120} - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() {CVE-2025-39876} - espintcp: fix skb leaks {CVE-2025-38057} - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829} - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() {CVE-2025-37824} - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses {CVE-2025-23141} - virtiofs: add filesystem context source name check {CVE-2025-37773} - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets {CVE-2025-22063} - ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922} - wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910} - wifi: ath11k: fix RCU stall while reaping monitor destination ring {CVE-2024-58097} - net/sctp: Prevent autoclose integer overflow in sctp_association_init() {CVE-2024-57938} - ubi: fastmap: Fix duplicate slab cache names while attaching {CVE-2024-53172} - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh() {CVE-2024-56369} - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware {CVE-2024-53157} - vsock: Fix sk_error_queue memory leak {CVE-2024-53118} - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof {CVE-2024-53113} - exec: don't WARN for racy path_noexec check {CVE-2024-50010} - drm/amd/display: Initialize get_bytes_per_element's default to 1 {CVE-2024-49892} - ppp: do not assume bh is held in ppp_channel_bridge_input() {CVE-2024-49946} - drm/amd/display: Skip Recompute DSC Params if no Stream on Link {CVE-2024-47683} - x86/sgx: Fix deadlock in SGX NUMA node search {CVE-2024-49856} - pktgen: use cpus_read_lock() in pg_net_init() {CVE-2024-46681} - nfsd: call cache_put if xdr_reserve_space returns NULL {CVE-2024-47737} - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind {CVE-2024-46739} - drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812} - net/mlx5: Fix bridge mode operations when there are no VFs {CVE-2024-46857} - Input: MT - limit max slots {CVE-2024-45008} - net/mlx5e: SHAMPO, Fix incorrect page release {CVE-2024-46717} - netfilter: ctnetlink: use helper function to calculate expect ID {CVE-2024-44944} - lib: objagg: Fix general protection fault {CVE-2024-43846} - drm/qxl: Add check for drm_cvt_mode {CVE-2024-43829} - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems {CVE-2024-42073} - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes {CVE-2024-42101} - RDMA/mlx5: Add check for srq max_sge attribute {CVE-2024-40990} - tracing: Build event generation tests only as modules {CVE-2024-41004} - KEYS: trusted: Fix memory leak in tpm2_key_encode() {CVE-2024-36967} - epoll: be better about file lifetimes {CVE-2024-38580} - drm/radeon: fix UBSAN warning in kv_dpm.c {CVE-2024-40988} - RDMA/srpt: Add a check for valid 'mad_agent' pointer {CVE-2023-54274} - x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction {CVE-2023-54172} - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() {CVE-2024-26772} - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected {CVE-2024-26891} - dm: don't attempt to queue IO under RCU protection {CVE-2023-53860} - md: fix soft lockup in status_resync {CVE-2023-53620} - spi: qup: Don't skip cleanup in remove's error path {CVE-2023-53567} - md/raid10: prevent soft lockup while flush writes {CVE-2023-53151} - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() {CVE-2023-53133} - spi: imx: Don't skip cleanup in remove's error path {CVE-2023-53225} - xsk: Add missing overflow check in xdp_umem_reg {CVE-2023-53080} - wifi: mt76: do not run mt76u_status_worker if the device is not running {CVE-2022-50735} - bpf: Skip task with pid=1 in send_signal_common() {CVE-2023-52992} - scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs {CVE-2023-52808} - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() {CVE-2023-52702} - RDMA/irdma: Fix potential NULL-ptr-dereference {CVE-2023-52744} - i2c: designware: Fix handling of real but unexpected device interrupts {CVE-2022-50370} - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() {CVE-2022-50544} - tpm: acpi: Call acpi_put_table() to fix memory leak {CVE-2022-50562} - netdevsim: fix memory leak in nsim_drv_probe() when nsim_dev_resources_register() failed {CVE-2022-50500} - ntb_netdev: Use dev_kfree_skb_any() in interrupt context {CVE-2022-50476} - blk-mq: fix possible memleak when register 'hctx' failed {CVE-2022-50434} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() {CVE-2022-49885} - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() {CVE-2022-49989} - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE {CVE-2022-49875} - can: j1939: j1939_send_one(): fix missing CAN header initialization {CVE-2022-49845} - ovl: Use "buf" flexible array for memcpy() destination {CVE-2022-49743} - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() {CVE-2022-49839} - net: bcmgenet: Use stronger register read/writes to assure ordering {CVE-2022-49194} - ima: Fix a potential integer overflow in ima_appraise_measurement {CVE-2022-49643} - net: amd-xgbe: Fix skb data length underflow {CVE-2022-48743} - drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat {CVE-2026-31656} - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" {CVE-2025-71137} - ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078} - mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() {CVE-2026-43281} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027} - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696} - xfs: stop reclaim before pushing AIL during unmount {CVE-2026-31455} - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() {CVE-2022-49840} - drivers: base: Free devm resources when unregistering a device {CVE-2023-53596} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - ata: libata-transport: fix double ata_host_put() in ata_tport_add() {CVE-2022-49826} - tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799} - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case {CVE-2022-49779} Important TuxCare License Agreement CVE-2026-31778 CVE-2026-23120 CVE-2023-53151 CVE-2024-42073 CVE-2022-50434 CVE-2026-43314 CVE-2023-54274 CVE-2025-37824 CVE-2023-53620 CVE-2025-23141 CVE-2022-49743 CVE-2026-31696 CVE-2022-50476 CVE-2024-53172 CVE-2024-58097 CVE-2025-21910 CVE-2026-43163 CVE-2022-49875 CVE-2026-43344 CVE-2024-47737 CVE-2022-49989 CVE-2025-39876 CVE-2023-53080 CVE-2024-41004 CVE-2024-49892 CVE-2026-23078 CVE-2026-43206 CVE-2023-53225 CVE-2025-37829 CVE-2023-52744 CVE-2022-49839 CVE-2022-49643 CVE-2022-48743 CVE-2026-43287 CVE-2024-36967 CVE-2025-37773 CVE-2022-50500 CVE-2026-43363 CVE-2022-49840 CVE-2026-31455 CVE-2024-40988 CVE-2024-53118 CVE-2023-52702 CVE-2024-47683 CVE-2024-46857 CVE-2024-26772 CVE-2026-43020 CVE-2025-21922 CVE-2022-49194 CVE-2026-43027 CVE-2024-38580 CVE-2024-46681 CVE-2022-50562 CVE-2023-52992 CVE-2024-56369 CVE-2024-46739 CVE-2025-38057 CVE-2026-31500 CVE-2023-53133 CVE-2024-53113 CVE-2022-49799 CVE-2024-49946 CVE-2024-42101 CVE-2024-43846 CVE-2024-44944 CVE-2024-26891 CVE-2022-49845 CVE-2022-49779 CVE-2026-31656 CVE-2024-45008 CVE-2022-49826 CVE-2024-43829 CVE-2023-52808 CVE-2024-49856 CVE-2024-50010 CVE-2022-50370 CVE-2026-43500 CVE-2023-53860 CVE-2022-50735 CVE-2026-43281 CVE-2026-43040 CVE-2023-53567 CVE-2023-54172 CVE-2022-49918 CVE-2026-43370 CVE-2024-40990 CVE-2025-71137 CVE-2023-53596 CVE-2025-22063 CVE-2024-53157 CVE-2024-46717 CVE-2024-57938 CVE-2022-49885 CVE-2024-46812 CVE-2022-50544 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431} - crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431} - crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431} - crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431} - crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431} - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() {CVE-2022-50551} - bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099} - libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238} - ftrace: Fix use-after-free for dynamic ftrace_ops {CVE-2022-49892} - intel_th: msu: Fix vmalloced buffers {CVE-2022-50142} - vt: Clear selection before changing the font {CVE-2022-49948} - ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411} - usbnet: Run unregister_netdev() before unbind_all() {CVE-2022-50220} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - bpf: Propagate error from htab_lock_bucket() to userspace {CVE-2022-50490} - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} - module: fix [e_shstrndx].sh_size=0 OOB access {CVE-2022-49444} - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} - tracing: Fix potential double free in create_var_ref() {CVE-2022-49410} - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366} - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} - xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426} - svcrdma: bound check rq_pages index in inline path {CVE-2025-71068} - net: hns3: add VLAN id validation before using {CVE-2025-71112} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315} - i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900} - team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091} - staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - ftrace: Add cond_resched() to ftrace_graph_set_hash() {CVE-2025-37940} - net: stmmac: Fix accessing freed irq affinity_hint {CVE-2025-23155} - ext4: set goal start correctly in ext4_mb_normalize_request {CVE-2023-54021} - netfilter: ipset: fix region locking in hash types {CVE-2025-37997} - openvswitch: Fix unsafe attribute parsing in output_userspace() {CVE-2025-37998} - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() {CVE-2025-37990} - nfs: handle failure of nfs_get_lock_context in unlock path {CVE-2025-38023} - drm/amd/pm: Prevent division by zero {CVE-2025-37767} - netfilter: ctnetlink: remove refcounting in expectation dumpers {CVE-2025-39764} - tracing: Fix null pointer dereference in tracing_err_log_open() {CVE-2023-53167} - ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386} - scsi: qla2xxx: Pointer may be dereferenced {CVE-2023-53150} - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() {CVE-2025-38061} - dm cache: prevent BUG_ON by blocking retries on failed device resumes {CVE-2025-38066} - libnvdimm/labels: Fix divide error in nd_label_data_init() {CVE-2025-38072} - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() {CVE-2023-53251} - tracing: Free error logs of tracing instances {CVE-2023-53375} - perf: Revert to requiring CAP_SYS_ADMIN for uprobes {CVE-2025-38466} - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO {CVE-2025-38122} - dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095} - x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334} - ext4: inline: fix len overflow in ext4_prepare_inline_data {CVE-2025-38222} - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38214} - sctp: initialize more fields in sctp_v6_from_sk() {CVE-2025-39812} - atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190} - usb: net: sierra: check for no status endpoint {CVE-2025-38474} - vxlan: Annotate FDB data races {CVE-2025-38037} - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184} - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181} - net_sched: sch_sfq: fix a potential crash on gso_skb handling {CVE-2025-38115} - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert {CVE-2025-38387} - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337} - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324} - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() {CVE-2025-38312} - usb: typec: altmodes/displayport: do not index invalid pin_assignments {CVE-2025-38391} - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request {CVE-2025-38430} - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() {CVE-2022-50829} - wifi: mt76: disable napi on driver removal {CVE-2025-38009} - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump {CVE-2025-39813} - net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - RDMA/irdma: avoid invalid read in irdma_net_event {CVE-2025-71133} - scsi: qla4xxx: Prevent a potential error pointer dereference {CVE-2025-39676} - ppp: fix race conditions in ppp_fill_forward_path {CVE-2025-39673} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990} - thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174} - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT {CVE-2025-38439} - ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345} - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). {CVE-2025-38460} - dm: fix unconditional IO throttle caused by REQ_PREFLUSH {CVE-2025-38063} - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs {CVE-2023-53391} - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231} - udf: Do not update file length for failed writes to inline files {CVE-2023-53295} - bpf: Fix WARN() in get_bpf_raw_tp_regs {CVE-2025-38285} - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree {CVE-2025-38468} - nvmet-tcp: don't restore null sk_state_change {CVE-2025-38035} - wifi: iwlwifi: mvm: fix double free on tx path. {CVE-2022-50248} - ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344} - bonding: fix use-after-free due to enslave fail after slave array update {CVE-2026-23171} - macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209} - cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() {CVE-2023-53479} - fbcon: Fix OOB access in font allocation - fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967} - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} - rename(): fix the locking of subdirectories - scsi: qedi: Fix use after free bug in qedi_remove() {CVE-2023-54100} - ixgbe: Fix panic during XDP_TX with > 64 CPUs {CVE-2023-54090} - bpf: Do not let BPF test infra emit invalid GSO types to stack {CVE-2025-68725} - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154} - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() {CVE-2023-54014} - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() {CVE-2022-50699} - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() {CVE-2025-39808} - PCI: Fix dropping valid root bus resources with .end = zero {CVE-2023-53814} - KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state {CVE-2023-53208} - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini {CVE-2023-53193} - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() {CVE-2025-39795} - libceph: return the handler error from mon_handle_auth_done() {CVE-2026-22992} - Bluetooth: Fix hci_suspend_sync crash {CVE-2023-53520} - jbd2: prevent softlockup in jbd2_log_do_checkpoint() {CVE-2025-39782} - net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977} - wifi: ath11k: clear initialized flag for deinit-ed srng lists {CVE-2025-38601} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060} - libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991} - soundwire: fix enumeration completion {CVE-2023-54096} - ext4: fix inode leak in ext4_xattr_inode_create() on an error path {CVE-2022-50845} - ring-buffer: Handle race between rb_move_tail and rb_check_pages {CVE-2023-53709} - netlink: fix potential deadlock in netlink_set_err() {CVE-2023-53731} - xhci: dbc: Fix memory leak in xhci_alloc_dbc() {CVE-2022-50809} - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline {CVE-2022-50286} - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed {CVE-2023-53481} - driver core: location: Free struct acpi_pld_info *pld before return false {CVE-2023-53211} - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() {CVE-2025-39845} - dma-buf/dma-resv: Stop leaking on krealloc() failure {CVE-2023-53181} - rxrpc: Fix oops due to non-existence of prealloc backlog struct {CVE-2025-38514} - xfrm: Zero padding when dumping algos and encap {CVE-2023-53684} - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer {CVE-2023-53648} - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF {CVE-2023-53747} - ice: fix wrong fallback logic for FDIR {CVE-2023-54040} - cifs: Fix xid leak in cifs_create() {CVE-2022-50351} - drm/amd/display: populate subvp cmd info only for the top pipe {CVE-2023-53806} - netfilter: ctnetlink: fix refcount leak on table dump {CVE-2025-38721} - sfc: fix crash when reading stats while NIC is resetting {CVE-2023-54156} - Bluetooth: Fix race condition in hidp_session_thread {CVE-2023-54120} - bpf: Reject %p% format string in bprintf-like helpers {CVE-2025-38528} - RDMA/bnxt_re: Prevent handling any completions after qp destroy {CVE-2023-54048} - RDMA/siw: Fix immediate work request flush to completion queue {CVE-2022-50736} - net/packet: fix a race in packet_set_ring() and packet_notifier() {CVE-2025-38617} - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr {CVE-2025-38701} - IB/hfi1: Fix possible panic during hotplug remove {CVE-2023-53488} - cgroup: split cgroup_destroy_wq into 3 workqueues {CVE-2025-39953} - NFS: Fix the setting of capabilities when automounting a new filesystem {CVE-2025-39798} - fs: Prevent file descriptor table allocations exceeding INT_MAX {CVE-2025-39756} - ext4: remove a BUG_ON in ext4_mb_release_group_pa() {CVE-2023-53450} - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() {CVE-2025-39713} - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - wifi: mac80211: reject TDLS operations when station is not associated {CVE-2025-38644} - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() {CVE-2023-53271} - RDMA/bnxt_re: wraparound mbox producer index {CVE-2023-53201} - x86/iopl: Cure TIF_IO_BITMAP inconsistencies {CVE-2025-38100} - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() {CVE-2025-38706} - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated {CVE-2025-38700} - ALSA: hda: Fix Oops by 9.1 surround channel names {CVE-2023-53400} - mm: move page table sync declarations to linux/pgtable.h {CVE-2025-39844} - rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access {CVE-2023-53419} - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails {CVE-2023-53199} - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras {CVE-2025-38540} - scsi: ses: Don't attach if enclosure has no components {CVE-2023-53431} - ipv6/addrconf: fix a potential refcount underflow for idev {CVE-2023-53189} - wifi: ath11k: Fix SKB corruption in REO destination ring {CVE-2023-53315} - bpf: fix ktls panic with sockmap {CVE-2025-38166} - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime {CVE-2025-38470} - net: openvswitch: fix race on port output {CVE-2023-53188} - net_sched: Flush gso_skb list too during ->change() {CVE-2025-37992} - netfilter: x_tables: fix percpu counter block leak on error path when creating new netns {CVE-2023-53200} - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction {CVE-2025-38161} - af_unix: Fix data-race around unix_tot_inflight. {CVE-2023-54006} - watchdog: Fix kmemleak in watchdog_cdev_register {CVE-2023-53234} - usb: idmouse: fix an uninit-value in idmouse_open {CVE-2022-50733} - net: dcb: choose correct policy to parse DCB_ATTR_BCN {CVE-2023-53369} - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() {CVE-2022-50347} - Bluetooth: l2cap: Check encryption key size on incoming connection {CVE-2025-39889} - x86/apic: Don't disable x2APIC if locked {CVE-2022-50720} - serial: 8250: Reinit port->pm on port specific driver unbind {CVE-2023-53176} - devlink: hold region lock when flushing snapshots {CVE-2022-50712} - net: qrtr: Fix a refcount bug in qrtr_recvmsg() {CVE-2023-53445} - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list {CVE-2026-23084} - PM: EM: fix memory leak with using debugfs_lookup() {CVE-2023-53411} - vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check {CVE-2023-54031} - atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251} - ceph: fix potential use-after-free bug when trimming caps {CVE-2023-53867} - ACPI: video: check for error while searching for backlight device parent {CVE-2023-52693} - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL {CVE-2023-53246} - x86/xen: Fix memory leak in xen_init_lock_cpu() {CVE-2022-50761} - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping {CVE-2025-38126} - platform/x86: dell_rbu: Fix list usage {CVE-2025-38197} - x86/kexec: Fix double-free of elf header buffer {CVE-2023-54146} - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() {CVE-2025-38305} - KVM: Destroy target device if coalesced MMIO unregistration fails {CVE-2023-54024} - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table {CVE-2025-38319} - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() {CVE-2022-50771} - drm/radeon: Fix integer overflow in radeon_cs_parser_init {CVE-2023-53309} - net: atlantic: fix fragment overflow handling in RX path {CVE-2025-68301} - bpf: Fix oob access in cgroup local storage {CVE-2025-38502} - bpf: Add cookie object to bpf maps {CVE-2025-38502} - misc: vmw_balloon: fix memory leak with using debugfs_lookup() {CVE-2023-53279} - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks {CVE-2025-38412} - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN {CVE-2025-38048} - tracing: Fix race issue between cpu buffer write and swap {CVE-2023-53368} - USB: wdm: close race between wdm_open and wdm_wwan_port_stop {CVE-2025-37985} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write {CVE-2023-53344} - wifi: ath11k: fix node corruption in ar->arvifs list {CVE-2025-38293} - x86/mm: Check return value from memblock_phys_alloc_range() {CVE-2025-38071} - net: Fix TOCTOU issue in sk_is_readable() {CVE-2025-38112} - scsi: mpi3mr: Fix an issue found by KASAN {CVE-2023-54011} - net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204} - net: add skb_header_pointer_careful() helper - scsi: qla2xxx: Array index may go out of bound {CVE-2023-54179} - net/mlx5e: fix memory leak in mlx5e_ptp_open {CVE-2023-54169} - igc: Fix Kernel Panic during ndo_tx_timeout callback {CVE-2023-54166} - Bluetooth: L2CAP: Fix potential user-after-free {CVE-2023-54214} - RDMA/restrack: Release MR restrack when delete {CVE-2022-50822} - RDMA/irdma: Fix memory leak of PBLE objects {CVE-2023-54055} - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup {CVE-2023-54275} - mptcp: stricter state check in mptcp_worker {CVE-2023-54176} - nfsd: provide locking for v4_end_grace {CVE-2026-22980} - iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089} - net: atlantic: add check for MAX_SKB_FRAGS {CVE-2025-68301} - net: atlantic: reduce scope of is_rsc_complete - atlantic: Fix buff_ring OOB in aq_ring_rx_clean - drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies {CVE-2025-40096} - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe {CVE-2022-50777} - wifi: rt2x00: Fix memory leak when handling surveys {CVE-2023-54131} - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() {CVE-2022-50740} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure {CVE-2026-23144} - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() {CVE-2022-50423} - wifi: ath10k: fix dma_free_coherent() pointer {CVE-2026-23133} - bpf: Move bpf map owner out of common struct {CVE-2025-38502} - fs: Lock moved directories - fs: Establish locking order for unrelated directories - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats {CVE-2025-68800} - macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001} - HID: uclogic: Correct devm device reference for hidinput input_dev name {CVE-2023-54207} - libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984} - ppp: fix memory leak in pad_compress_skb {CVE-2025-39847} - migrate: correct lock ordering for hugetlb file folios {CVE-2026-23097} - keys: Fix linking a duplicate key to a keyring's assoc_array {CVE-2023-54170} - scsi: qla4xxx: Add length check when parsing nlattrs {CVE-2023-53456} - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() {CVE-2023-53320} - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range {CVE-2023-54229} - wifi: iwlwifi: pcie: fix possible NULL pointer dereference {CVE-2023-54053} - dm flakey: don't corrupt the zero page {CVE-2023-54317} - md/raid10: fix memleak for 'conf->bio_split' {CVE-2023-54123} - crypto: qat - fix out-of-bounds read {CVE-2023-54325} - drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP {CVE-2023-54263} - ipmi:ssif: Fix a memory leak when scanning for an adapter {CVE-2023-54064} - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" {CVE-2023-54197} - netfilter: nf_tables: always release netdev hooks from notifier {CVE-2023-54200} - wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO {CVE-2023-54029} - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` {CVE-2023-53719} - soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow {CVE-2023-54259} - vfio/type1: fix cap_migration information leak {CVE-2023-54137} - drm/client: Fix memory leak in drm_client_target_cloned {CVE-2023-54091} - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() {CVE-2025-39742} - crypto: ccp - Fix crash when rebind ccp device for ccp.ko {CVE-2025-38581} - iwlwifi: Add missing check for alloc_ordered_workqueue {CVE-2025-38602} - net: bridge: fix soft lockup in br_multicast_query_expired() {CVE-2025-39773} - net: drop UFO packets in udp_rcv_segment() {CVE-2025-38622} - iommu: Fix error unwind in iommu_group_alloc() {CVE-2023-53482} - qed: allow sleep in qed_mcp_trace_dump() {CVE-2023-53509} - cifs: Fix xid leak in cifs_flock() {CVE-2022-50460} - platform/x86: dell-sysman: Fix reference leak {CVE-2023-53631} - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure {CVE-2025-38695} - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls {CVE-2025-38608} - bpf: prevent decl_tag from being referenced in func_proto {CVE-2022-50862} - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock {CVE-2025-39736} - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() {CVE-2025-39737} - drm/amd/display: Fix potential null dereference {CVE-2023-53498} - x86/MCE/AMD: Use an u64 for bank_map {CVE-2023-53474} - kobject: Add sanity check for kset->kobj.ktype in kset_register() {CVE-2023-53480} Important TuxCare License Agreement CVE-2022-50497 CVE-2022-50771 CVE-2023-54229 CVE-2025-38100 CVE-2022-50460 CVE-2026-23084 CVE-2025-39847 CVE-2025-38319 CVE-2022-50829 CVE-2023-53456 CVE-2023-54275 CVE-2023-54055 CVE-2022-50419 CVE-2025-71238 CVE-2025-38095 CVE-2025-39736 CVE-2025-38161 CVE-2023-54021 CVE-2025-38009 CVE-2023-53498 CVE-2025-39773 CVE-2023-53481 CVE-2023-53279 CVE-2026-23144 CVE-2023-54259 CVE-2023-53509 CVE-2025-38528 CVE-2025-38540 CVE-2022-50822 CVE-2026-23089 CVE-2025-71082 CVE-2023-54120 CVE-2022-49948 CVE-2022-50551 CVE-2022-50411 CVE-2025-71133 CVE-2023-53309 CVE-2023-53188 CVE-2023-54197 CVE-2025-38324 CVE-2022-50347 CVE-2023-54170 CVE-2025-38460 CVE-2025-38035 CVE-2023-53167 CVE-2023-53181 CVE-2025-38514 CVE-2023-53731 CVE-2023-53488 CVE-2022-49907 CVE-2023-53391 CVE-2022-49410 CVE-2025-38231 CVE-2022-50248 CVE-2023-53315 CVE-2025-37992 CVE-2025-39756 CVE-2025-37985 CVE-2023-53806 CVE-2023-54029 CVE-2023-53369 CVE-2023-53375 CVE-2023-54123 CVE-2025-38122 CVE-2023-53431 CVE-2025-39764 CVE-2025-39889 CVE-2025-39713 CVE-2025-38700 CVE-2026-22980 CVE-2025-39737 CVE-2023-53474 CVE-2025-40096 CVE-2023-53211 CVE-2025-39676 CVE-2025-38644 CVE-2025-37940 CVE-2025-68301 CVE-2023-53709 CVE-2023-53320 CVE-2026-23204 CVE-2023-54014 CVE-2025-38470 CVE-2023-53631 CVE-2025-38617 CVE-2023-53176 CVE-2025-68800 CVE-2023-54317 CVE-2022-50862 CVE-2025-38466 CVE-2025-38115 CVE-2023-54024 CVE-2023-53426 CVE-2025-37990 CVE-2022-50699 CVE-2022-50740 CVE-2025-38181 CVE-2023-54263 CVE-2025-38344 CVE-2022-50384 CVE-2026-23133 CVE-2022-50490 CVE-2025-37998 CVE-2023-54031 CVE-2023-53193 CVE-2023-54090 CVE-2025-39967 CVE-2025-38721 CVE-2023-54053 CVE-2023-53684 CVE-2023-53648 CVE-2025-39673 CVE-2025-38345 CVE-2022-50720 CVE-2022-50809 CVE-2026-43078 CVE-2025-38608 CVE-2025-38386 CVE-2025-39845 CVE-2022-50733 CVE-2023-54006 CVE-2022-50761 CVE-2025-71068 CVE-2025-38701 CVE-2025-38048 CVE-2025-39953 CVE-2023-54179 CVE-2023-54207 CVE-2025-39782 CVE-2023-53747 CVE-2025-37767 CVE-2023-53867 CVE-2022-50366 CVE-2026-23001 CVE-2022-50423 CVE-2025-38412 CVE-2026-23216 CVE-2025-38474 CVE-2025-38285 CVE-2025-38337 CVE-2025-38305 CVE-2025-38071 CVE-2025-38190 CVE-2025-37997 CVE-2025-38184 CVE-2023-53419 CVE-2025-38581 CVE-2025-39795 CVE-2025-38430 CVE-2026-22984 CVE-2025-71116 CVE-2023-53344 CVE-2025-38391 CVE-2022-50777 CVE-2025-38334 CVE-2025-38066 CVE-2023-53450 CVE-2025-38439 CVE-2025-38126 CVE-2023-53201 CVE-2023-53445 CVE-2026-22990 CVE-2023-53200 CVE-2023-54064 CVE-2025-39844 CVE-2022-50351 CVE-2023-53520 CVE-2025-38457 CVE-2025-38222 CVE-2022-49870 CVE-2022-50736 CVE-2023-53199 CVE-2023-53150 CVE-2025-38706 CVE-2025-38601 CVE-2025-38312 CVE-2023-54137 CVE-2022-49770 CVE-2023-54091 CVE-2022-50315 CVE-2022-49892 CVE-2025-38023 CVE-2023-54048 CVE-2025-38387 CVE-2025-39812 CVE-2025-39813 CVE-2022-50220 CVE-2023-54214 CVE-2023-53189 CVE-2023-54156 CVE-2025-38037 CVE-2026-22977 CVE-2023-53400 CVE-2025-38468 CVE-2025-38293 CVE-2023-54096 CVE-2025-23155 CVE-2025-38695 CVE-2026-23099 CVE-2023-53814 CVE-2025-71091 CVE-2025-71093 CVE-2023-53719 CVE-2026-23171 CVE-2025-39742 CVE-2023-53482 CVE-2025-71112 CVE-2023-54131 CVE-2023-54011 CVE-2025-38174 CVE-2025-38063 CVE-2023-53251 CVE-2023-54166 CVE-2026-22991 CVE-2023-53271 CVE-2026-23191 CVE-2026-23060 CVE-2022-49900 CVE-2023-53411 CVE-2026-23076 CVE-2023-53234 CVE-2022-50142 CVE-2025-38061 CVE-2023-54146 CVE-2023-54325 CVE-2022-50712 CVE-2023-54176 CVE-2025-38072 CVE-2025-38214 CVE-2023-53246 CVE-2023-54100 CVE-2023-52693 CVE-2023-53479 CVE-2025-71154 CVE-2025-39808 CVE-2025-38251 CVE-2025-38622 CVE-2023-53480 CVE-2026-23209 CVE-2025-71089 CVE-2025-38602 CVE-2025-39677 CVE-2023-54169 CVE-2025-38502 CVE-2025-39798 CVE-2022-50845 CVE-2026-31431 CVE-2025-38166 CVE-2023-53368 CVE-2026-22992 CVE-2022-50286 CVE-2025-38112 CVE-2023-53208 CVE-2023-54200 CVE-2022-49917 CVE-2025-68725 CVE-2022-49444 CVE-2025-38197 CVE-2023-54040 CVE-2026-23097 CVE-2026-23193 CVE-2023-53295 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113} - Bluetooth: bcsp: receive data only if registered {CVE-2025-40308} - xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788} - xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788} - USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429} - net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708} - net: usb: kaweth: validate USB endpoints {CVE-2026-23312} - net: usb: kalmia: validate USB endpoints {CVE-2026-23365} - net: usb: pegasus: validate USB endpoints {CVE-2026-23290} - net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156} - USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429} - USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156} - nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399} - tpm: Cap the number of PCR banks {CVE-2025-71077} - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704} - dm: fix a race condition in retrieve_deps {CVE-2023-54324} - ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127} - mlx5: fix skb leak while fifo resync and push {CVE-2023-54238} - mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251} - bonding: annotate data-races around slave->last_rx {CVE-2026-23212} - RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302} - bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441} - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215} - trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829} - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850} - team: prevent adding a device which is already a team device lower {CVE-2024-58071} - net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594} - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108} - rxrpc: Fix handling of received connection abort {CVE-2024-58053} - bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911} - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690} - net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680} - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713} - drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905} - dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134} - smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709} - PM: runtime: Fix a race condition related to device removal {CVE-2026-23452} - ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436} - nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448} - sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062} - cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870} - mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136} - memcg: fix soft lockup in the OOM process {CVE-2024-57977} - resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878} - r8169: add tally counter fields added with RTL8125 {CVE-2024-49973} - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215} - ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066} - wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273} - net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606} - extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308} - tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675} - bridge: switchdev: Fix memory leaks when changing VLAN protocol {CVE-2022-49812} - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() {CVE-2022-49890} - net: genl: fix error path memory leak in policy dumping {CVE-2022-50042} - kprobes: don't call disarm_kprobe() for disabled kprobes {CVE-2022-50008} - lib/fonts: fix undefined behavior in bit shift for get_default_font {CVE-2022-50511} - net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088} - arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored {CVE-2022-50675} - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478} - efivarfs: force RO when remounting if SetVariable is not supported {CVE-2023-52463} - Fix page corruption caused by racy check in __free_pages {CVE-2023-52739} - mptcp: deal with large GSO size {CVE-2023-52778} - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new {CVE-2023-52887} - drm/i915/active: Fix misuse of non-idle barriers as fence trackers {CVE-2023-53087} - ext4: fix task hung in ext4_xattr_delete_inode {CVE-2023-53089} - ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent {CVE-2023-53070} - bnxt_en: Avoid order-5 memory allocation for TPA data {CVE-2023-53134} - tcp: tcp_make_synack() can be called from process context {CVE-2023-53121} - i40e: Fix kernel crash during reboot when adapter is in recovery mode {CVE-2023-53114} - skbuff: Fix a race between coalescing and releasing SKBs {CVE-2023-53186} - blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() {CVE-2023-53421} - arm64: mm: fix VA-range sanity check {CVE-2023-53989} - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() {CVE-2024-26633} - SUNRPC: double free xprt_ctxt while still in use {CVE-2023-54269} - KVM: Always flush async #PF workqueue when vCPU is being destroyed {CVE-2024-26976} - drm/amdgpu: validate the parameters of bo mapping operations more clearly {CVE-2024-26922} - tracing/trigger: Fix to return error if failed to alloc snapshot {CVE-2024-26920} - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989} - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). {CVE-2024-36933} - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056} - scsi: qla2xxx: During vport delete send async logout explicitly {CVE-2024-42289} - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() {CVE-2022-49731} - ixgbevf: Fix resource leak in ixgbevf_init_module() {CVE-2022-49028} - mmc: core: Avoid bitfield RMW for claim/retune flags {CVE-2026-43484} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() {CVE-2026-45835} - cpufreq: Init completion before kobject_init_and_add() {CVE-2022-50473} - USB: gadget: Fix use-after-free during usb config switch {CVE-2022-50704} - IB/mad: Don't call to function that might sleep while in atomic context {CVE-2022-50472} - null_blk: fix poll request timeout handling {CVE-2023-53531} - drm/i915/gvt: fix vgpu debugfs clean in remove {CVE-2023-53625} - mlxsw: spectrum_acl_erp: Fix object nesting warning {CVE-2024-43880} - drm/drm_vma_manager: Add drm_vma_node_allow_once() {CVE-2023-53001} - drm/amd/display: fix mapping to non-allocated address {CVE-2023-53753} - ipv6: Fix an uninit variable access bug in __ip6_make_skb() {CVE-2023-54265} - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). {CVE-2023-54004} - netlink: terminate outstanding dump on socket close {CVE-2024-53140} - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN {CVE-2024-53135} - scsi: qla2xxx: Fix use after free on unload {CVE-2024-56623} - net: Fix icmp host relookup triggering ip_rt_bug {CVE-2024-56647} - spi: spi-imx: Add check for spi_imx_setupxfer() {CVE-2025-37801} - netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126} - net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop {CVE-2026-23300} - ethtool: check device is present when getting link settings {CVE-2024-46679} - nfsd: return -EINVAL when namelen is 0 {CVE-2024-47692} - x86/ioapic: Handle allocation failures gracefully {CVE-2024-49927} - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error {CVE-2024-49959} - secretmem: disable memfd_secret() if arch cannot set direct map {CVE-2024-50182} - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures {CVE-2024-53190} - iommu/arm-smmu: Defer probe of clients after smmu device bound {CVE-2024-56568} - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers {CVE-2025-21885} - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs {CVE-2025-37805} - page_pool: avoid infinite loop to schedule delayed worker {CVE-2025-37859} - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() {CVE-2025-38441} - tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539} - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681} - ipv6: add NULL checks for idev in SRv6 paths {CVE-2026-23442} - sunrpc: fix cache_request leak in cache_release {CVE-2026-31400} - netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP {CVE-2026-31424} - netfilter: xt_multiport: validate range encoding in checkentry {CVE-2026-31681} - net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684} - vxlan: validate ND option lengths in vxlan_na_create {CVE-2026-31738} - gfs2: fiemap page fault fix {CVE-2026-43262} - e1000/e1000e: Fix leak in DMA error cleanup {CVE-2026-43445} - ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279} Important TuxCare License Agreement CVE-2024-26680 CVE-2023-54238 CVE-2024-56647 CVE-2023-53704 CVE-2024-53140 CVE-2024-56568 CVE-2025-71273 CVE-2024-36933 CVE-2024-42289 CVE-2022-50675 CVE-2024-53190 CVE-2025-37805 CVE-2025-37859 CVE-2026-45835 CVE-2023-53070 CVE-2023-53114 CVE-2024-26976 CVE-2023-53001 CVE-2023-53089 CVE-2026-43484 CVE-2024-26922 CVE-2026-43429 CVE-2023-54004 CVE-2024-49959 CVE-2025-21708 CVE-2025-40134 CVE-2026-23452 CVE-2025-38127 CVE-2023-54324 CVE-2026-43445 CVE-2026-43088 CVE-2026-23312 CVE-2024-58053 CVE-2025-38681 CVE-2024-47692 CVE-2022-49308 CVE-2023-52778 CVE-2026-43448 CVE-2023-52478 CVE-2024-50108 CVE-2026-31424 CVE-2026-43279 CVE-2022-50008 CVE-2024-49973 CVE-2024-38594 CVE-2024-50182 CVE-2026-31788 CVE-2022-49731 CVE-2023-53753 CVE-2024-56623 CVE-2022-49812 CVE-2026-43262 CVE-2026-23290 CVE-2023-53531 CVE-2022-49675 CVE-2024-46679 CVE-2024-41056 CVE-2023-53441 CVE-2022-50511 CVE-2024-47713 CVE-2025-37801 CVE-2026-23365 CVE-2024-43880 CVE-2026-31709 CVE-2025-37911 CVE-2024-49878 CVE-2022-50472 CVE-2023-52739 CVE-2026-43066 CVE-2022-50251 CVE-2024-53135 CVE-2023-52463 CVE-2024-53215 CVE-2025-39850 CVE-2024-58071 CVE-2026-23126 CVE-2023-54265 CVE-2026-43436 CVE-2024-26633 CVE-2022-50473 CVE-2024-57977 CVE-2025-39829 CVE-2025-38215 CVE-2025-38441 CVE-2023-53087 CVE-2024-26920 CVE-2026-31681 CVE-2024-35989 CVE-2023-52887 CVE-2026-23300 CVE-2025-21885 CVE-2022-49890 CVE-2022-50042 CVE-2026-31684 CVE-2025-38539 CVE-2023-53186 CVE-2023-54302 CVE-2024-49927 CVE-2025-22062 CVE-2024-53136 CVE-2026-31400 CVE-2022-50704 CVE-2025-40308 CVE-2023-53134 CVE-2025-21690 CVE-2024-49905 CVE-2026-31738 CVE-2026-43156 CVE-2026-23399 CVE-2026-23212 CVE-2023-53121 CVE-2023-53989 CVE-2026-46113 CVE-2022-49028 CVE-2024-49870 CVE-2025-71077 CVE-2023-53625 CVE-2023-53421 CVE-2021-47606 CVE-2026-23442 CVE-2023-54269 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050} - ALSA: usb-audio: Use the right limit for PCM OOB check - ALSA: usb-audio: Prevent excessive number of frames {CVE-2026-23208} - xen/privcmd: fix double free via VMA splitting {CVE-2026-31787} - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path {CVE-2026-43328} - cpufreq: governor: Free dbs_data directly when gov->init() fails {CVE-2026-43328} - rcu: Fix rcu_read_unlock() deadloop due to softirq - rcu: Fix racy re-initialization of irq_work causing hangs - RDMA/efa: Fix possible deadlock {CVE-2026-31493} - RDMA/efa: Fix use of completion ctx after free {CVE-2026-31493} - RDMA/efa: Improve admin completion context state machine {CVE-2026-31493} - RDMA/efa: Check stored completion CTX command ID with received one {CVE-2026-31493} - RDMA/efa: Extend admin timeout error print - RDMA/efa: Properly handle unexpected AQ completions {CVE-2026-31493} - rcu: Fix rcu_read_unlock() deadloop due to IRQ work {CVE-2025-39744} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported {CVE-2025-22075} - kernel/printk/index.c: fix memory leak with using debugfs_lookup() {CVE-2023-53402} - wifi: iwlwifi: don't warn when if there is a FW error {CVE-2025-38096} - md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() {CVE-2023-53210} - exfat: fix the infinite loop in exfat_readdir() {CVE-2024-57940} - af_netlink: Fix shift out of bounds in group mask calculation {CVE-2022-49197} - xfrm_user: fix info leak in build_mapping() {CVE-2026-43089} - udf: Fix preallocation discarding at indirect extent boundary {CVE-2022-48946} - efi: Do not import certificates from UEFI Secure Boot for T2 Macs {CVE-2022-49357} - kernel/resource: fix kfree() of bootmem memory again {CVE-2022-49190} - smb: client: fix warning in cifs_smb3_do_mount() {CVE-2023-53230} - sctp: Fix null-ptr-deref in reuseport_add_sock(). {CVE-2024-44935} - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages {CVE-2024-50208} - drm/amdgpu: avoid using null object of framebuffer {CVE-2024-41093} - firmware: cs_dsp: Return error if block header overflows file {CVE-2024-42238} - ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738} - net: hinic: fix memory leak when reading function table {CVE-2022-50438} - device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() {CVE-2022-49752} - libceph: fix race between delayed_work() and ceph_monc_stop() {CVE-2024-42232} - usbnet: fix memory leak in error case {CVE-2022-49657} - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU {CVE-2025-71111} - seccomp: Move copy_seccomp() to no failure path. {CVE-2022-50661} - net/mlx5: fs, lock FTE when checking if active {CVE-2024-53121} - nvme-pci: fix freeing of the HMB descriptor table {CVE-2024-56756} - leds: class: Protect brightness_show() with led_cdev->led_access mutex {CVE-2024-56587} - bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener {CVE-2023-52986} - RDMA/uverbs: Prevent integer overflow issue {CVE-2024-57890} - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT {CVE-2026-23125} - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() {CVE-2022-49800} - kprobes: Fix check for probe enabled in kill_kprobe() {CVE-2022-50266} - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 {CVE-2024-26870} - i915/perf: Fix NULL deref bugs with drm_dbg() calls {CVE-2023-52788} - can: mcp251x: fix deadlock in error path of mcp251x_open {CVE-2026-23357} - regmap-irq: Use the new num_config_regs property in regmap_add_irq_chip_fwnode {CVE-2022-50558} - wifi: cfg80211: Set correct chandef when starting CAC {CVE-2024-49937} - netfilter: nf_tables: prevent nf_skb_duplicated corruption {CVE-2024-49952} - can: isotp: fix potential CAN frame reception race in isotp_rcv() {CVE-2022-48830} - bpf: Fix memory leaks in __check_func_call {CVE-2022-49837} - configfs: fix a race in configfs_{,un}register_subsystem() {CVE-2022-48931} - RDMA/mad: Improve handling of timed out WRs of mad agent {CVE-2024-50095} - cifs: Fix connections leak when tlink setup failed {CVE-2022-49822} - usb: atm: cxacru: fix endpoint checking in cxacru_bind() {CVE-2024-41097} - tcp: add sanity checks to rx zerocopy {CVE-2024-26640} - NFSD: Prevent a potential integer overflow {CVE-2024-53146} - bpf, cpumap: Handle skb as well when clean up ptr_ring {CVE-2023-53660} - team: fix null-ptr-deref when team device type is changed {CVE-2023-52574} - fbdev: efifb: Register sysfs groups through driver core {CVE-2024-49925} - bpf: devmap: provide rxq after redirect {CVE-2024-50162} - net: phy: micrel: Allow probing without .driver_data {CVE-2022-49472} - inotify: Avoid reporting event with invalid wd {CVE-2023-54119} - USB: hub: Ignore non-compliant devices with too many configs or interfaces {CVE-2025-21776} - wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode {CVE-2024-58096} - RDMA/irdma: Fix data race on CQP request done {CVE-2023-54292} - fscache: Fix oops due to race with cookie_lru and use_cookie {CVE-2022-48989} - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() {CVE-2023-52450} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c {CVE-2024-56727} - wifi: iwlwifi: fix debug actions order {CVE-2025-38045} - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' {CVE-2022-50553} - net: ipv4: fix one memleak in __inet_del_ifa() {CVE-2023-53995} - exfat: fix memory leak in exfat_load_bitmap() {CVE-2024-50013} - vp_vdpa: fix id_table array not null terminated error {CVE-2024-53110} - intel_th: Fix a resource leak in an error handling path {CVE-2022-50143} - leds: led-class: Only Add LED to leds_list when it is fully ready {CVE-2026-23101} - usb: gadget: core: Check for unset descriptor {CVE-2024-44960} - drm/amdkfd: Fix lock dependency warning with srcu {CVE-2023-52632} - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() {CVE-2025-38458} - PM / devfreq: Check governor before using governor->name {CVE-2025-38609} - tls: fix missing memory barrier in tls_init {CVE-2024-36489} - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() {CVE-2025-37830} - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery {CVE-2024-40977} - nvdimm: Fix firmware activation deadlock scenarios {CVE-2022-49446} - wifi: mac80211: sdata can be NULL during AMPDU start {CVE-2022-48875} - can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods {CVE-2022-49024} - wifi: ath10k: Fix memory leak in management tx {CVE-2024-50236} - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] {CVE-2025-21666} - netdevsim: fix memory leak in nsim_bus_dev_new() {CVE-2022-50772} - fs: relax assertions on failure to encode file handles {CVE-2024-57924} - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c {CVE-2024-56707} - ceph: fix deadlock or deadcode of misusing dget() {CVE-2023-52583} - bpf, verifier: Fix memory leak in array reallocation for stack state {CVE-2022-49878} - ip6_gre: make ip6gre_header() robust {CVE-2025-71098} - ACPICA: Avoid walking the Namespace if start_node is NULL {CVE-2025-71118} - net/mlx5e: kTLS, Fix incorrect page refcounting {CVE-2024-53138} - gve: Clear napi->skb before dev_kfree_skb_any() {CVE-2024-40937} - atm: clip: Fix memory leak of struct clip_vcc. {CVE-2025-38546} - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt {CVE-2025-71131} - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration {CVE-2024-45006} - irqchip: Fix refcount leak in platform_irqchip_probe {CVE-2023-53610} - CDC-NCM: avoid overflow in sanity checking {CVE-2022-48938} - Bluetooth: Fix crash when replugging CSR fake controllers {CVE-2022-48982} - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() {CVE-2022-50521} - ptp: Ensure info->enable callback is always set {CVE-2025-21814} - perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() {CVE-2022-50820} - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() {CVE-2022-50556} - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU {CVE-2023-54036} - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() {CVE-2024-40959} - drm/amdgpu: Fix smatch static checker warning {CVE-2024-46835} - svcrdma: Address an integer overflow {CVE-2024-53151} - dma-debug: fix a possible deadlock on radix_lock {CVE-2024-47143} - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check {CVE-2024-41072} - regulator: core: fix use_count leakage when handling boot-on {CVE-2022-50250} - tpm: use try_get_ops() in tpm-space.c {CVE-2022-49286} - ata: libata-transport: fix error handling in ata_tdev_add() {CVE-2022-49823} - padata: Always leave BHs disabled when running ->parallel() {CVE-2022-50382} - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak {CVE-2026-23108} - serial: core: check uartclk for zero to avoid divide by zero {CVE-2024-43893} - cifs: fix potential memory leaks in session setup {CVE-2023-53008} - tty: fix out-of-bounds access in tty_driver_lookup_tty() {CVE-2023-54198} - nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() {CVE-2023-53697} - HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() {CVE-2026-43136} - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf {CVE-2025-71120} - drm/ioc32: stop speculation on the drm_compat_ioctl path {CVE-2026-31781} - ext4: fix i_disksize exceeding i_size problem in paritally written case {CVE-2023-53270} - wifi: nl80211: fix NULL-ptr deref in offchan check {CVE-2023-53113} - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() {CVE-2023-53717} - ASoC: SOF: Add some bounds checking to firmware data {CVE-2024-26927} - regulator: core: Prevent integer underflow {CVE-2022-50582} - power: supply: fix null pointer dereferencing in power_supply_get_battery_info {CVE-2022-50276} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450} - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724} - nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366} - netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190} - netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051} - xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110} Important TuxCare License Agreement CVE-2022-50266 CVE-2022-49823 CVE-2025-21814 CVE-2025-21776 CVE-2022-50553 CVE-2025-68724 CVE-2022-49446 CVE-2026-43190 CVE-2023-53697 CVE-2023-53402 CVE-2025-71111 CVE-2024-43893 CVE-2025-38096 CVE-2023-53210 CVE-2026-23208 CVE-2023-52450 CVE-2025-71098 CVE-2024-42238 CVE-2022-50556 CVE-2023-54292 CVE-2024-53138 CVE-2026-43328 CVE-2024-44935 CVE-2024-57890 CVE-2022-49752 CVE-2024-58096 CVE-2026-43110 CVE-2024-53151 CVE-2024-56756 CVE-2022-49822 CVE-2024-40959 CVE-2022-48946 CVE-2025-39744 CVE-2024-44960 CVE-2022-48830 CVE-2026-43050 CVE-2023-53610 CVE-2023-53660 CVE-2022-49197 CVE-2026-23108 CVE-2023-53995 CVE-2022-50143 CVE-2023-53270 CVE-2023-52574 CVE-2024-50162 CVE-2025-37830 CVE-2025-38546 CVE-2026-31399 CVE-2024-50013 CVE-2026-43450 CVE-2026-23357 CVE-2025-71118 CVE-2022-49878 CVE-2026-23125 CVE-2024-50208 CVE-2024-56587 CVE-2024-57924 CVE-2024-36489 CVE-2026-43136 CVE-2022-49800 CVE-2024-56707 CVE-2023-53717 CVE-2022-49472 CVE-2022-48875 CVE-2026-31685 CVE-2022-49286 CVE-2022-50382 CVE-2025-38045 CVE-2024-53146 CVE-2026-43089 CVE-2026-23101 CVE-2024-50095 CVE-2024-26927 CVE-2022-48982 CVE-2022-49657 CVE-2025-22075 CVE-2024-53121 CVE-2024-26870 CVE-2024-45006 CVE-2026-43051 CVE-2026-43158 CVE-2025-21738 CVE-2024-42232 CVE-2022-50276 CVE-2023-54036 CVE-2024-53110 CVE-2026-31781 CVE-2024-49937 CVE-2024-40977 CVE-2025-71131 CVE-2022-49837 CVE-2026-23455 CVE-2023-52632 CVE-2025-71120 CVE-2022-49024 CVE-2022-50521 CVE-2023-53008 CVE-2023-52986 CVE-2024-40937 CVE-2022-49190 CVE-2022-50661 CVE-2026-31787 CVE-2022-50772 CVE-2026-31493 CVE-2022-48938 CVE-2024-46835 CVE-2025-68366 CVE-2025-38458 CVE-2024-47143 CVE-2022-50820 CVE-2023-52583 CVE-2024-49952 CVE-2025-21666 CVE-2024-41072 CVE-2022-48989 CVE-2022-50582 CVE-2023-54198 CVE-2024-49925 CVE-2023-52788 CVE-2023-53113 CVE-2023-53230 CVE-2022-48931 CVE-2022-50558 CVE-2024-56727 CVE-2023-54119 CVE-2025-38609 CVE-2024-50236 CVE-2024-57940 CVE-2022-50438 CVE-2024-26640 CVE-2024-41097 CVE-2022-49357 CVE-2024-41093 CVE-2022-50250 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags - clk: Fix clk_hw_get_clk() when dev is NULL {CVE-2022-49187} - x86/sgx: Add overflow check in sgx_validate_offset_length() {CVE-2022-49785} - ext4: init quota for 'old.inode' in 'ext4_rename' {CVE-2022-50346} - skbuff: Account for tail adjustment during pull operations {CVE-2022-50365} - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory {CVE-2022-50409} - scsi: qla2xxx: Delay module unload while fabric scan in progress {CVE-2025-71235} - HID: alps: fix NULL pointer dereference in alps_raw_event() {CVE-2026-31625} - rxrpc: fix reference count leak in rxrpc_server_keyring() {CVE-2026-31634} - drm/i915/gt: Check set_default_submission() before deferencing {CVE-2026-31540} - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects {CVE-2023-54010} - drm/amdgpu: fix the waring dereferencing hive {CVE-2024-46805} - drm/amd/display: Add NULL check for function pointer in dcn20_set_output_transfer_func {CVE-2024-49911} - tracing: Prevent bad count for tracing_cpumask_write {CVE-2024-56763} - HID: wacom: fix when get product name maybe null pointer {CVE-2024-56629} - thermal: int340x: Add NULL check for adev {CVE-2025-23136} - wifi: mac80211: Purge vif txq in ieee80211_do_stop() {CVE-2025-37794} - Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb {CVE-2026-31510} - wifi: cfg80211: ocb: don't leave if not joined {CVE-2023-53992} - mmc: core: Fix kernel panic when remove non-standard SDIO card {CVE-2022-50640} - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() {CVE-2022-50645} - serial: amba-pl011: avoid SBSA UART accessing DMACR register {CVE-2022-50625} - inet_diag: Initialize pad field in struct inet_diag_req_v2 {CVE-2024-42106} - regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt {CVE-2022-49481} - net/core: Fix ETH_P_1588 flow dissector {CVE-2023-52580} - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() {CVE-2023-52560} - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg {CVE-2024-38596} - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 {CVE-2024-26660} - block: prevent division by zero in blk_rq_stat_sum() {CVE-2024-35925} - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() {CVE-2024-36286} - tipc: fix a possible memleak in tipc_buf_append {CVE-2024-36954} - ipv6: prevent possible NULL deref in fib6_nh_init() {CVE-2024-40961} - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER {CVE-2024-42090} - ipv6: prevent possible NULL dereference in rt6_probe() {CVE-2024-40960} - drm/radeon: check bo_va->bo is non-NULL before using it {CVE-2024-41060} - dma: fix call order in dmam_free_coherent {CVE-2024-43856} - scsi: qla2xxx: Fix for possible memory corruption {CVE-2024-42288} - ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt {CVE-2024-26774} - netfilter: flowtable: incorrect pppoe tuple {CVE-2024-27015} - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() {CVE-2024-40919} - Bluetooth: btintel: Fix null ptr deref in btintel_read_version {CVE-2024-35933} - netdevsim: prevent bad user input in nsim_dev_health_break_write() {CVE-2024-56716} - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow {CVE-2024-53120} - EDAC/bluefield: Fix potential integer overflow {CVE-2024-53161} - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() {CVE-2024-53217} - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() {CVE-2024-50304} - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race {CVE-2024-50082} - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() {CVE-2025-21996} - HID: appleir: Fix potential NULL dereference at raw event handle {CVE-2025-21948} - filemap: Fix bounds checking in filemap_read() {CVE-2024-50272} - efi: fix potential NULL deref in efi_mem_reserve_persistent {CVE-2023-52976} - perf/x86/amd: fix potential integer overflow on shift of a int {CVE-2022-49748} - ext4: fix infinite loop when replaying fast_commit {CVE-2024-43828} - kthread: unpark only parked kthread {CVE-2024-50019} - xhci: tegra: fix checked USB2 port number {CVE-2024-50075} - Bluetooth: Call iso_exit() on module unload {CVE-2024-50078} - scsi: target: core: Fix null-ptr-deref in target_alloc_device() {CVE-2024-50153} - drm/radeon: Fix encoder->possible_clones {CVE-2024-50201} - squashfs: harden sanity check in squashfs_read_xattr_id_table {CVE-2023-52979} - xsk: fix an integer overflow in xp_create_and_assign_umem() {CVE-2025-21997} - can: j1939: j1939_session_new(): fix skb reference counting {CVE-2024-56645} - ice: Do not use WQ_MEM_RECLAIM flag for workqueue {CVE-2023-52743} - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection {CVE-2024-56533} - sched/core: Prevent rescheduling when interrupts are disabled {CVE-2024-58090} - HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections {CVE-2024-57986} - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow {CVE-2025-22086} - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs {CVE-2025-22045} - Bluetooth: btrtl: Prevent potential NULL dereference {CVE-2025-37792} - tracing/histograms: Fix memory leak problem {CVE-2022-49648} - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error {CVE-2025-21924} - ext4: fix another off-by-one fsmap error on 1k block filesystems {CVE-2023-53143} - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open {CVE-2024-46791} - crypto: ecdh - explicitly zeroize private_key {CVE-2024-42098} - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl {CVE-2025-22044} - geneve: do not assume mac header is set in geneve_xmit_skb() {CVE-2024-56636} - tracing/timerlat: Fix a race during cpuhp processing {CVE-2024-49866} - x86/mtrr: Check if fixed MTRRs exist before saving them {CVE-2024-44948} - genirq/irq_sim: Initialize work context pointers properly {CVE-2025-38408} - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() {CVE-2025-38664} - mm/ksm: fix flag-dropping behavior in ksm_madvise {CVE-2025-40040} - objtool: Fix SEGFAULT {CVE-2022-50879} - tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() {CVE-2022-49307} - can: af_can: fix NULL pointer dereference in can_rx_register() {CVE-2022-49863} - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() {CVE-2022-49869} - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map {CVE-2022-49832} - tty: vt: initialize unicode screen buffer {CVE-2022-50222} - mfd: max77620: Fix refcount leak in max77620_initialise_fps {CVE-2022-50108} - pnode: terminate at peers of source {CVE-2022-50280} - mm: /proc/pid/smaps_rollup: fix no vma's null-deref {CVE-2022-50380} - chardev: fix error handling in cdev_device_add() {CVE-2022-50282} - net: hinic: fix the issue of CMDQ memory leaks {CVE-2022-50387} - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() {CVE-2022-50349} - tracing: Do not register unsupported perf events {CVE-2025-71125} - ASoC: amd: fix memory leak in acp3x pdm dma ops {CVE-2026-23190} - can: j1939: make j1939_session_activate() fail if device is no longer registered {CVE-2025-71182} - net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021} - RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() {CVE-2026-23335} - udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n {CVE-2026-23439} - xfrm: clear trailing padding in build_polexpire() {CVE-2026-31664} - wifi: rt2x00usb: fix devres lifetime {CVE-2026-31672} - mmc: vub300: fix NULL-deref on disconnect {CVE-2026-31651} - wifi: brcmsmac: Fix dma_free_coherent() size {CVE-2026-31661} - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change {CVE-2024-50044} - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes {CVE-2024-41095} - smb: client: fix deadlock in smb2_find_smb_tcon() {CVE-2024-39468} - drm/amdgpu: Fixed bug on error when unloading amdgpu {CVE-2023-52912} - usb: typec: ucsi: Fix null pointer dereference in trace {CVE-2024-46719} - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 {CVE-2024-46819} - netfilter: flowtable: initialise extack before use {CVE-2024-45018} - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() {CVE-2024-47668} - drm/amd/display: Check null pointer before dereferencing se {CVE-2024-50049} - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption {CVE-2024-49858} - drm/amd/pm: ensure the fw_info is not null before using it {CVE-2024-49890} - wifi: iwlwifi: mvm: pause TCM when the firmware is stopped {CVE-2024-47673} - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() {CVE-2024-49962} - drm/amd/display: Check stream before comparing them {CVE-2024-49896} - wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() {CVE-2024-56593} - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() {CVE-2025-21689} - sctp: properly validate chunk size in sctp_sf_ootb() {CVE-2024-50299} - USB: usbtmc: prevent kernel-usb-infoleak {CVE-2024-47671} - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX {CVE-2024-58017} - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() {CVE-2025-21848} - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() {CVE-2023-52936} - linux/dim: Fix divide by 0 in RDMA DIM {CVE-2022-49670} - scsi: st: Fix array overflow in st_setup() {CVE-2025-37857} - usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe() {CVE-2022-50825} - samples/bpf: Fix buffer overflow in tcp_basertt {CVE-2023-54312} - debugobjects: Don't wake up kswapd from fill_pool() {CVE-2023-54268} - regmap-irq: Fix out-of-bounds access when allocating config buffers {CVE-2023-53768} - RDMA/core: Fix GID entry ref leak when create_ah fails {CVE-2023-54003} - drm: Don't unref the same fb many times by mistake due to deadlock handling {CVE-2023-52486} - pstore/ram: Fix crash when setting number of cpus to an odd number {CVE-2023-52619} - net: usb: qmi_wwan: fix memory leak for not ip packets {CVE-2024-43861} - HID: i2c-hid-of: fix NULL-deref on failed power up {CVE-2024-26717} - netfilter: nf_tables: set dormant flag on hook register failure {CVE-2024-26835} - md: fix kmemleak of rdev->serial {CVE-2024-26900} - spi: fix null pointer dereference within spi_sync {CVE-2024-36930} - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() {CVE-2024-56748} - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() {CVE-2024-56747} - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport {CVE-2024-56688} - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag {CVE-2025-21699} - sock_map: Add a cond_resched() in sock_hash_free() {CVE-2024-47710} - net: stmmac: Fix zero-division error when disabling tc cbs {CVE-2024-49977} - net/mlx5: Fix error path in multi-packet WQE transmit {CVE-2024-50001} - HID: core: remove unnecessary WARN_ON() in implement() {CVE-2024-39509} - tipc: fix memory leak in tipc_link_xmit {CVE-2025-37757} - ima: Fix potential memory leak in ima_init_crypto() {CVE-2022-49627} - net: tun: unlink NAPI from device on destruction {CVE-2022-49672} - iommu/amd: Fix pci device refcount leak in ppr_notifier() {CVE-2022-50505} - rxrpc: Fix bug due to prealloc collision {CVE-2025-38544} - ext4: zero i_disksize when initializing the bootloader inode {CVE-2023-53101} - scsi: hisi_sas: Add cond_resched() for no forced preemption model {CVE-2024-56589} - net: fix NULL pointer dereference in l3mdev_l3_rcv {CVE-2025-22103} - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path {CVE-2025-37788} - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini {CVE-2023-53237} - samples/bpf: Fix fout leak in hbm's run_bpf_prog {CVE-2023-53290} - regulator: core: fix NULL dereference on unbind due to stale coupling data {CVE-2025-38668} - PM / devfreq: Fix leak in devfreq_dev_release() {CVE-2023-53518} - coresight: trbe: remove cpuhp instance node before remove cpuhp state {CVE-2022-50319} - net: phy: fix null-ptr-deref while probe() failed {CVE-2022-49021} - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() {CVE-2022-49002} - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() {CVE-2022-48972} - watch_queue: Free the page array when watch_queue is dismantled {CVE-2022-49148} - samples/landlock: Fix path_list memory leak {CVE-2021-47654} - net: tun: Fix memory leaks of napi_get_frags {CVE-2022-49871} - ftrace: Fix null pointer dereference in ftrace_add_mod() {CVE-2022-49802} - netdevsim: Fix memory leak of nsim_dev->fa_cookie {CVE-2022-49803} - tracing: Fix memory leak in tracing_read_pipe() {CVE-2022-49801} - mtd: core: fix possible resource leak in init_mtd() {CVE-2022-50304} - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() {CVE-2022-50321} - xfrm_user: fix info leak in build_report() {CVE-2026-31671} - regulator: core: fix resource leak in regulator_register() {CVE-2022-50724} - x86/tdx: Fix data leak in mmio_read() {CVE-2024-46794} - x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_SMAP=n {CVE-2021-47430} - ceph: remove the incorrect Fw reference check when dirtying pages {CVE-2024-50179} - nfs: Fix KMSAN warning in decode_getfattr_attrs() {CVE-2024-53066} - blk-cgroup: Fix class @block_class's subsystem refcount leakage {CVE-2025-21745} - cifs: Fix lost destroy smbd connection when MR allocate failed {CVE-2023-54260} - cifs: Fix xid leak in cifs_ses_add_channel() {CVE-2022-50856} - phy: tegra: xusb: Clear the driver reference in usb-phy dev {CVE-2023-54083} - drm/ttm: Don't leak a resource on swapout move error {CVE-2023-53844} - team: Move team device type change at the end of team_port_add {CVE-2025-68340} - udp: Fix wildcard bind conflict check when using hash2 {CVE-2026-31503} - KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock {CVE-2026-31592} - HID: core: clamp report_size in s32ton() to avoid undefined shift {CVE-2026-31624} - af_key: validate families in pfkey_send_migrate() {CVE-2026-31515} - nvme-pci: ensure we're polling a polled queue {CVE-2026-31523} - module: Fix kernel panic when a symbol st_shndx is out of bounds {CVE-2026-31521} - ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581} Important TuxCare License Agreement CVE-2023-54010 CVE-2022-50825 CVE-2025-37857 CVE-2024-46819 CVE-2024-43828 CVE-2023-53844 CVE-2024-40960 CVE-2024-26660 CVE-2023-54260 CVE-2024-50201 CVE-2022-50319 CVE-2024-46791 CVE-2024-41060 CVE-2023-52560 CVE-2024-35933 CVE-2023-52743 CVE-2024-40919 CVE-2025-37788 CVE-2024-44948 CVE-2022-49832 CVE-2022-49801 CVE-2024-47671 CVE-2026-31634 CVE-2024-56747 CVE-2022-50856 CVE-2022-50346 CVE-2025-21924 CVE-2024-43856 CVE-2024-43861 CVE-2025-21689 CVE-2023-52912 CVE-2024-50049 CVE-2026-31503 CVE-2022-50625 CVE-2022-49670 CVE-2024-47710 CVE-2024-56629 CVE-2023-52936 CVE-2024-50044 CVE-2023-52976 CVE-2025-21848 CVE-2026-43284 CVE-2025-40040 CVE-2024-57986 CVE-2024-49858 CVE-2022-49748 CVE-2026-31625 CVE-2022-49307 CVE-2025-38544 CVE-2026-31661 CVE-2024-49890 CVE-2025-71182 CVE-2022-50349 CVE-2024-56748 CVE-2025-22044 CVE-2024-56636 CVE-2024-46794 CVE-2024-49977 CVE-2025-21997 CVE-2022-49627 CVE-2024-50153 CVE-2024-42098 CVE-2024-56716 CVE-2026-23190 CVE-2023-53768 CVE-2022-49869 CVE-2024-58090 CVE-2024-45018 CVE-2024-56688 CVE-2024-26900 CVE-2022-49863 CVE-2024-49962 CVE-2024-42288 CVE-2022-50879 CVE-2024-56593 CVE-2024-50078 CVE-2022-50108 CVE-2025-23136 CVE-2022-50380 CVE-2024-26717 CVE-2022-50505 CVE-2026-23335 CVE-2025-71235 CVE-2023-54312 CVE-2022-50640 CVE-2025-21745 CVE-2024-36954 CVE-2024-50299 CVE-2024-50304 CVE-2026-31624 CVE-2021-47654 CVE-2023-53143 CVE-2025-38664 CVE-2024-53217 CVE-2023-52619 CVE-2022-49648 CVE-2021-47430 CVE-2026-23439 CVE-2024-56533 CVE-2024-39509 CVE-2026-23021 CVE-2023-52486 CVE-2022-50280 CVE-2024-42090 CVE-2022-49672 CVE-2024-35925 CVE-2026-31523 CVE-2025-22103 CVE-2023-53992 CVE-2025-71125 CVE-2024-26774 CVE-2024-49911 CVE-2024-36286 CVE-2022-50387 CVE-2022-50321 CVE-2026-31515 CVE-2023-54268 CVE-2024-46805 CVE-2026-31540 CVE-2024-49866 CVE-2024-42106 CVE-2024-53120 CVE-2023-54083 CVE-2024-50075 CVE-2025-37794 CVE-2022-50645 CVE-2022-50222 CVE-2023-54003 CVE-2025-21948 CVE-2022-49481 CVE-2024-56763 CVE-2023-53290 CVE-2025-38408 CVE-2024-50001 CVE-2024-56645 CVE-2025-37792 CVE-2024-47673 CVE-2022-49187 CVE-2022-49785 CVE-2024-36930 CVE-2024-53161 CVE-2022-50304 CVE-2024-27015 CVE-2026-31510 CVE-2024-46719 CVE-2026-31651 CVE-2024-41095 CVE-2023-52979 CVE-2024-50179 CVE-2024-58017 CVE-2025-21699 CVE-2026-31671 CVE-2022-49148 CVE-2022-49021 CVE-2024-50019 CVE-2023-53101 CVE-2026-31581 CVE-2024-26835 CVE-2024-39468 CVE-2024-40961 CVE-2025-22045 CVE-2026-31672 CVE-2022-48972 CVE-2022-50409 CVE-2024-50082 CVE-2025-37757 CVE-2022-50365 CVE-2025-38668 CVE-2022-50282 CVE-2022-49871 CVE-2026-31592 CVE-2024-38596 CVE-2023-52580 CVE-2023-53518 CVE-2026-31664 CVE-2023-53237 CVE-2025-21996 CVE-2025-68340 CVE-2024-47668 CVE-2022-49802 CVE-2022-50724 CVE-2025-22086 CVE-2026-31521 CVE-2022-49803 CVE-2024-49896 CVE-2024-50272 CVE-2022-49002 CVE-2024-56589 CVE-2024-53066 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size Moderate TuxCare License Agreement CVE-2026-47729 CVE-2026-50012 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-55655: gate the client-side abstract X11 socket behind SSH_INSECURE_ABSTRACT_SOCKET_ENABLED to prevent MITM of forwarded X11 via abstract UNIX socket pre-binding; backport downstream f5884eb Moderate TuxCare License Agreement CVE-2026-55655 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebase to 2.4.0 to fix CVE-2026-54369 and CVE-2026-54370 Important TuxCare License Agreement CVE-2026-54370 CVE-2026-54369 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - spi: spi-fsl-lpspi: fix teardown order issue (UAF) {CVE-2026-31485} - Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786} - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037} - net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419} - bonding: do not set usable_slaves for broadcast mode {CVE-2026-31419} - net: bonding: update the slave array for broadcast mode {CVE-2026-31419} - dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125} - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448} - net: Fix an unsafe loop on the list {CVE-2024-50024} - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy {CVE-2025-21636} - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx {CVE-2023-54300} - wifi: nl80211: reject cooked mode if it is set along with other flags {CVE-2025-21909} - drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream {CVE-2024-49913} - xfrm: validate new SA's prefixlen using SA family when sel.family is unset {CVE-2024-50142} - serial: imx: Introduce timeout when waiting on transmitter empty {CVE-2024-40967} - iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind {CVE-2023-53501} - octeontx2-af: Add validation before accessing cgx and lmac {CVE-2023-53654} - sctp: sysctl: rto_min/max: avoid using current->nsproxy {CVE-2025-21639} - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices {CVE-2023-52984} - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start {CVE-2024-49944} - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451} - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR {CVE-2022-48703} - x86/mm: Fix pti_clone_pgtable() alignment assumption {CVE-2024-44965} - net: usb: asix_devices: add phy_mask for ax88772 mdio bus {CVE-2025-38725} - ALSA: hda: Do not unset preset when cleaning up codec {CVE-2023-52736} - drm/amd/display: Add NULL check for function pointer in dcn32_set_output_transfer_func {CVE-2024-49909} - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE {CVE-2024-53144} - fuse: Initialize beyond-EOF page contents before setting uptodate {CVE-2024-44947} - sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637} - dm stats: check for and propagate alloc_percpu failure {CVE-2023-53044} - netpoll: Fix race condition in netpoll_owner_active {CVE-2024-41005} - tracing: Fix overflow in get_free_elt() {CVE-2024-43890} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() {CVE-2025-39902} - xen/netfront: stop tx queues during live migration {CVE-2022-48969} - Bluetooth: btusb: clamp SCO altsetting table indices {CVE-2026-31497} - ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free {CVE-2025-38105} - can: j1939: make j1939_sk_bind() fail if device is no longer registered {CVE-2025-39925} - nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() {CVE-2023-52508} - smb: client: Don't log plaintext credentials in cifs_set_cifscreds {CVE-2026-23303} - cifs: Fix integer overflow while processing acdirmax mount option {CVE-2025-21963} - netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416} - drm/amdgpu/vkms: fix a possible null pointer dereference {CVE-2023-52815} - drm/amd/amdgpu: Check tbo resource pointer {CVE-2024-46807} - bonding: fix null pointer deref in bond_ipsec_offload_ok {CVE-2024-44990} - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower {CVE-2024-50237} - trace_events_hist: add check for return value of 'create_hist_field' {CVE-2023-53005} - drm/amdkfd: Add sync after creating vram bo {CVE-2023-53009} - bpf: Send signals asynchronously if !preemptible {CVE-2025-21728} - drm/client: fix null pointer dereference in drm_client_modeset_probe {CVE-2024-43894} - ext4: correct grp validation in ext4_mb_good_group {CVE-2023-53861} - RDMA/irdma: Initialize free_qp completion before using it {CVE-2026-31492} - usb: udc: remove warning when queue disabled ep {CVE-2024-35822} - bpf: Remove tst_run from lwt_seg6local_prog_ops. {CVE-2024-46754} - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet {CVE-2024-56590} - tls: stop recv() if initial process_rx_list gave us non-DATA {CVE-2024-58239} - iommu/vt-d: Clean up si_domain in the init_dmars() error path {CVE-2022-50482} - ext4: update s_journal_inum if it changes after journal replay {CVE-2023-53091} - cifs: Fix xid leak in cifs_copy_file_range() {CVE-2022-50643} - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit {CVE-2024-49938} - nbd: null check for nla_nest_start {CVE-2024-27025} - netfilter: ipset: Hold module reference while requesting a module {CVE-2024-56637} - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 {CVE-2024-46817} - Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() {CVE-2026-31512} - Bluetooth: MGMT: Add error handling to pair_device() {CVE-2024-43884} - netfilter: nf_conntrack_expect: skip expectations in other netns via proc {CVE-2026-31496} - nvme-pci: fix mempool alloc size {CVE-2022-50756} - fs: fix fd table size alignment properly {CVE-2024-45025} - gpio: sim: fix a memory leak {CVE-2023-52706} - ice: switch: fix potential memleak in ice_add_adv_recipe() {CVE-2022-48709} - netfilter: ebtables: fix memory leak when blob is malformed {CVE-2022-48641} - mfd: syscon: Fix null pointer dereference in of_syscon_register() {CVE-2023-52467} - netfilter: ipset: drop logically empty buckets in mtype_del {CVE-2026-31418} - scsi: megaraid_sas: Fix for a potential deadlock {CVE-2024-57807} - ALSA: hda: Fix possible null-ptr-deref when assigning a stream {CVE-2023-52806} - drm/amd/display: Avoid NULL dereference of timing generator {CVE-2023-52753} - netfilter: nft_socket: fix sk refcount leaks {CVE-2024-46855} - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken {CVE-2025-38099} - objtool: Fix memory leak in create_static_call_sections() {CVE-2023-53423} - ceph: defer stopping mdsc delayed_work - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga {CVE-2023-52819} - rethook: fix a potential memleak in rethook_alloc() {CVE-2022-49795} - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() {CVE-2022-49787} - scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() {CVE-2023-53132} - cifs: fix small mempool leak in SMB2_negotiate() {CVE-2022-49938} - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() {CVE-2022-50191} - watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource {CVE-2022-50110} - drm/ttm: fix bulk_move corruption when adding a entry {CVE-2023-53444} - clk: Fix memory leak in devm_clk_notifier_register() {CVE-2023-53674} - md: raid1: fix potential OOB in raid1_remove_disk() {CVE-2023-53722} - wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU {CVE-2023-54052} - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags {CVE-2024-49923} - recordmcount: Fix memory leaks in the uwrite function {CVE-2023-53318} - crypto: cavium - prevent integer overflow loading firmware {CVE-2022-50330} - integrity: Fix memory leakage in keyring allocation error path {CVE-2022-50395} - mmc: toshsd: fix return value check of mmc_add_host() {CVE-2022-50886} - RDMA/efa: Fix wrong resources deallocation order {CVE-2023-54201} - inet: read sk->sk_family once in inet_recv_error() {CVE-2024-26679} - ALSA: pcm: Add sanity NULL check for the default mmap fault handler {CVE-2024-53180} - net_sched: Prevent creation of classes with TC_H_ROOT {CVE-2025-21971} - net: usb: smsc95xx: Limit packet length to skb->len {CVE-2023-53062} - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() {CVE-2024-35930} - devres: Fix memory leakage caused by driver API devm_free_percpu() {CVE-2024-43871} - rdma/cxgb4: Prevent potential integer overflow on 32bit {CVE-2024-57973} - ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects {CVE-2023-53708} - rxrpc: Fix missing locking causing hanging calls {CVE-2024-50294} - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() {CVE-2024-50008} - ELF: fix kernel.randomize_va_space double read {CVE-2024-46826} - crypto: bcm - add error check in the ahash_hmac_init function {CVE-2024-56681} - drm/amd/pm: fix null pointer access {CVE-2025-38705} - ALSA: line6: Fix racy access to midibuf {CVE-2024-44954} - ALSA: us122l: Use snd_card_free_when_closed() at disconnection {CVE-2024-56532} - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node {CVE-2023-52662} - drm/amd/display: Initialize denominators' default to 1 {CVE-2024-49899} - ipmi: fix use after free in _ipmi_destroy_user() {CVE-2022-50677} - Bluetooth: Fix memory leak in hci_req_sync_complete() {CVE-2024-35978} - null_blk: fix validation of block size {CVE-2024-41077} - ionic: Fix netdev notifier unregister on failure {CVE-2024-56715} - cifs: Fix integer overflow while processing acregmax mount option {CVE-2025-21964} - pm: cpupower: bench: Prevent NULL dereference on malloc failure {CVE-2025-37841} - nvmet-tcp: fix kernel crash if commands allocation fails {CVE-2024-46737} - netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() {CVE-2024-50259} - wireguard: allowedips: avoid unaligned 64-bit memory accesses {CVE-2024-42247} - drm/amd/pm: Prevent division by zero {CVE-2025-37770} - drm/sched: Increment job count before swapping tail spsc queue {CVE-2025-38515} - i2c: qup: jump out of the loop in case of timeout {CVE-2025-38671} - brcmfmac: return error when getting invalid max_flowrings from dongle {CVE-2022-50358} - PNP: fix name memory leak in pnp_alloc_dev() {CVE-2022-50278} - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN {CVE-2025-38393} - regmap: Fix race condition in hwspinlock irqsave routine {CVE-2026-23071} - drm/amd/pm: Prevent division by zero {CVE-2025-37768} - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() {CVE-2022-49780} - RDMA/cm: Fix leaking the multicast GID table reference {CVE-2025-71084} - netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116} - drop_monitor: fix incorrect initialization order {CVE-2025-21862} - wifi: nl80211: disallow setting special AP channel widths {CVE-2024-43912} - net/mlx5: Fix steering rules cleanup {CVE-2023-53079} - usbnet: Fix using smp_processor_id() in preemptible code warnings {CVE-2025-40164} - mptcp: fix slab-use-after-free in __inet_lookup_established {CVE-2026-31669} - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc {CVE-2024-58009} - fs/binfmt_elf: Fix memory leak in load_elf_binary() {CVE-2022-50466} - drm/amdgpu: set the right AMDGPU sg segment limitation {CVE-2024-56594} - bridge: mcast: Fix use-after-free during router port configuration {CVE-2025-38248} - xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663} - fuse: reject oversized dirents in page cache {CVE-2026-31694} - drm/amd/display: Do not skip unrelated mode changes in DSC validation {CVE-2026-31488} - net/mlx5: Collect command failures data only for known commands {CVE-2023-53340} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr {CVE-2025-68183} - scsi: sg: Do not sleep in atomic context {CVE-2025-40259} - scsi: sd: Fix off-by-one error in sd_read_block_characteristics() {CVE-2024-47682} - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586} - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449} - nbd: fix race between timeout and normal completion {CVE-2024-49855} - iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() {CVE-2025-21724} Important TuxCare License Agreement CVE-2023-53861 CVE-2023-53501 CVE-2026-31497 CVE-2024-57973 CVE-2024-58239 CVE-2024-46855 CVE-2024-53144 CVE-2024-56594 CVE-2023-53674 CVE-2025-37841 CVE-2022-50191 CVE-2024-46737 CVE-2025-21909 CVE-2025-21862 CVE-2024-35822 CVE-2023-52815 CVE-2024-46817 CVE-2024-49909 CVE-2022-50330 CVE-2023-53005 CVE-2024-43884 CVE-2025-21639 CVE-2025-38705 CVE-2023-52662 CVE-2024-49899 CVE-2025-40164 CVE-2024-49938 CVE-2025-21971 CVE-2026-31586 CVE-2022-48709 CVE-2024-58009 CVE-2024-56637 CVE-2024-46807 CVE-2026-31419 CVE-2024-47682 CVE-2024-56532 CVE-2023-53318 CVE-2026-31492 CVE-2024-46826 CVE-2026-43449 CVE-2025-38393 CVE-2026-31496 CVE-2024-26679 CVE-2023-52753 CVE-2024-49944 CVE-2026-31663 CVE-2022-50358 CVE-2022-50756 CVE-2026-43116 CVE-2024-56681 CVE-2025-38725 CVE-2023-54300 CVE-2024-41005 CVE-2026-31512 CVE-2024-50142 CVE-2022-48641 CVE-2024-43894 CVE-2022-50482 CVE-2022-50466 CVE-2025-21728 CVE-2023-53444 CVE-2026-31669 CVE-2025-21963 CVE-2022-50110 CVE-2023-54052 CVE-2026-23303 CVE-2024-49923 CVE-2022-49938 CVE-2023-53722 CVE-2025-21636 CVE-2022-50886 CVE-2025-40259 CVE-2022-50643 CVE-2024-44954 CVE-2025-38671 CVE-2022-48969 CVE-2023-53708 CVE-2022-48703 CVE-2024-45025 CVE-2023-53079 CVE-2026-43037 CVE-2026-31488 CVE-2025-21964 CVE-2024-56715 CVE-2026-31694 CVE-2023-52806 CVE-2024-46754 CVE-2024-27025 CVE-2024-50024 CVE-2024-44965 CVE-2024-50008 CVE-2024-35978 CVE-2023-54201 CVE-2024-43912 CVE-2023-53132 CVE-2024-53180 CVE-2024-44990 CVE-2025-37768 CVE-2026-31416 CVE-2024-50294 CVE-2023-53091 CVE-2024-44947 CVE-2025-21637 CVE-2026-23071 CVE-2023-53044 CVE-2024-49855 CVE-2023-53423 CVE-2025-39902 CVE-2022-50677 CVE-2025-71084 CVE-2024-41077 CVE-2022-49787 CVE-2026-31786 CVE-2023-53009 CVE-2024-50237 CVE-2023-53654 CVE-2023-52467 CVE-2025-68183 CVE-2025-38099 CVE-2024-42247 CVE-2026-43451 CVE-2024-43871 CVE-2023-53062 CVE-2026-46243 CVE-2024-43890 CVE-2022-50278 CVE-2024-57807 CVE-2025-21724 CVE-2023-52508 CVE-2025-38515 CVE-2024-49913 CVE-2025-38248 CVE-2023-52736 CVE-2022-49795 CVE-2024-40967 CVE-2025-39925 CVE-2024-50259 CVE-2022-50395 CVE-2022-49780 CVE-2023-53340 CVE-2026-43125 CVE-2024-35930 CVE-2026-31485 CVE-2023-52984 CVE-2023-52706 CVE-2026-23448 CVE-2026-31418 CVE-2025-37770 CVE-2025-38105 CVE-2023-52819 CVE-2024-56590 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-41862: NULL-terminate the GSSAPI receive buffer on error packets so a modified server cannot make libpq over-read into its error message Important TuxCare License Agreement CVE-2026-6477 CVE-2022-41862 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42923: cap NSEC3 hash calculations in the negative-cache DS proof and reject oversized NSEC3 salt - CVE-2024-43168: reject negative port numbers in outgoing-port-permit/avoid to prevent an out-of-bounds write Moderate TuxCare License Agreement CVE-2026-42923 CVE-2024-43168 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-47063: enhance jar handling - CVE-2026-46917: improve DTLS handshaking - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - Rebase FIPS patch from the rh-openjdk fips branch (06df8f9bd4) for 11.0.32 Important TuxCare License Agreement CVE-2026-47058 CVE-2026-47057 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34380: fix signed 32-bit integer overflow in the PXR24 decoder bounds check, where (uint64_t) (w * 3) wrapped to a small positive value and allowed an out-of-bounds write through dout - CVE-2026-34378: fix signed 32-bit integer overflow in srcbuffer pointer arithmetic in the unpack_* routines, reached via an oversized dataWindow width Moderate TuxCare License Agreement CVE-2026-34380 CVE-2026-34378 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-15169: fix UMTS FP dissector out-of-bounds write by bounding both the MAC-is PDU index and the per-PDU MAC-is SDU count to the 16-element subframe descriptor arrays Important TuxCare License Agreement CVE-2026-6520 CVE-2023-1992 CVE-2026-6868 CVE-2026-7378 CVE-2026-5653 CVE-2026-15163 CVE-2026-15169 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to jdk-17.0.20+8 (GA) - CVE-2026-41254: fix integer overflow in the bundled Little CMS CubeSize function that could lead to information disclosure or denial of service when processing crafted colour profiles (bundled LCMS updated to 2.19.1) - CVE-2026-46917: improve DTLS handshaking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47027: enhance Jar file processing - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47063: enhance Jar handling - CVE-2026-60147: improve certification checking Important TuxCare License Agreement CVE-2026-33416 CVE-2026-41254 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-12912: heap-based buffer overflow in PixarLog 8BITABGR decode with stride 3 Important TuxCare License Agreement CVE-2026-12912 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964: fix out-of-bounds reads in the Phase One / Fujifilm metadata decoders (phase_one_correct / fuji 0xf00c); backport upstream 0.21.4 fixes Critical TuxCare License Agreement CVE-2025-43963 CVE-2025-43961 CVE-2025-43964 CVE-2025-43962 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-68119: use safer flag/argument syntax in cmd/go VCS commands and reject module versions prefixed with '-' or '/' Important TuxCare License Agreement CVE-2025-68119 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-14957: fix a remotely triggerable assertion failure in add_decoded_cert() when the peer certificate public key cannot be extracted Important TuxCare License Agreement CVE-2026-14957 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-42946: fix buffer over-read and excessive memory allocation in ngx_http_scgi_module and ngx_http_uwsgi_module when an upstream server returns an unrecognized status line; reset r->state before falling back to header parsing so the header parser no longer resumes from a status-line state and reads through an uninitialized r->header_name_start, and reuse r->header_name_start to backtrack the buffer position for status lines split across reads Important TuxCare License Agreement CVE-2026-42946 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-0213: bound the space appended to the window status line so it cannot be written past the end of NameBuff - CVE-2024-43802: check that the typeahead buffer has room before advancing the offset when flushing mapped characters - CVE-2026-28422: account for the byte length of a multi-byte fill character when sizing the status line buffer and when padding item groups - CVE-2022-0351: limit expression recursion depth so a deeply nested condition cannot exhaust the stack Important TuxCare License Agreement CVE-2024-43802 CVE-2022-0351 CVE-2026-28422 CVE-2022-0213 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27820: zlib: fix buffer overflow in Zlib::GzipReader#ungetc by always growing the output buffer before the memmove Critical TuxCare License Agreement CVE-2026-27820 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-64505: fix heap buffer over-read in png_do_quantize caused by out-of-range palette indices in malformed PNG files Moderate TuxCare License Agreement CVE-2025-64505 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-9698: fix stack overflow and buffer overflow in DBI.xs error handling and preparse() Critical TuxCare License Agreement CVE-2026-9698 CVE-2026-10879 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - net_sched: hfsc: Fix a UAF vulnerability in class handling {CVE-2025-37797} - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error {CVE-2025-38089} - net: ch9200: fix uninitialised access during mii_nway_restart {CVE-2025-38086} - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() {CVE-2025-22121} - locking/csd_lock: Change csdlock_debug from early_param to __setup {CVE-2022-50091} - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes {CVE-2025-21991} - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead {CVE-2022-49977} - NFSv4/pnfs: Fix a use-after-free bug in open {CVE-2022-50072} - NFSv4: Don't hold the layoutget locks across multiple RPC calls {CVE-2022-49316} - mm/khugepaged: fix ->anon_vma race {CVE-2023-52935} Important TuxCare License Agreement CVE-2025-21991 CVE-2025-38086 CVE-2022-50091 CVE-2022-49316 CVE-2022-49316 CVE-2022-49977 CVE-2025-37797 CVE-2025-38089 CVE-2025-22121 CVE-2022-50072 CVE-2023-52935 CVE-2023-52935 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-5342: fix out-of-bounds read in nikon_load_padded_packed_raw() by sizing the row buffer from the final raw_width instead of the load_flags value pinned before raw_width adjustment (ELSCVE-152809) Moderate TuxCare License Agreement CVE-2026-5342 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-11972: break the block-skip loop in tarfile _Stream.seek() at EOF, so a crafted stream-mode archive declaring a huge member size no longer makes archive parsing take exponentially longer Important TuxCare License Agreement CVE-2026-11972 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-13595: libblkid: fix use-after-free in nested partition probing by switching parts pool from array-of-structs to array-of-pointers so blkid_partition addresses stay stable across pool growth Moderate TuxCare License Agreement CVE-2026-13595 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-45447: fix use-after-free of the caller-owned BIO in PKCS7_verify with an empty digestAlgorithms SET (RHSA-2026:44438) Critical TuxCare License Agreement CVE-2026-45447 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34978: reject ".." path traversal in the RSS notifier notify-recipient-uri, both in notifier/rss.c and when the subscription is created in the scheduler, and refuse to write when the target path exists and is not a regular file; previously a remote IPP client could make the lp-owned notifier clobber root-managed state such as CacheDir/job.cache - CVE-2026-34979: fix heap buffer overflow when building filter option strings; ipp_length() skipped NOVALUE, MIMETYPE, NAMELANG, TEXTLANG, URI and URISCHEME attributes that get_options() does emit, so the allocated options buffer was undersized Moderate TuxCare License Agreement CVE-2026-34979 CVE-2026-34978 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-57062: require a minimum AES-GCM authentication tag length of 12 octets in gpgsm CMS decryption; a 4-octet aes-ICVlen was previously accepted, weakening the integrity guarantee of the message Moderate TuxCare License Agreement CVE-2026-57062 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - rebase from Thunderbird 115.4.1 to 140.12.0 ESR - CVE-2022-3032: When receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked - CVE-2023-0430: Certificate OCSP revocation status was not checked when verifying S/Mime signatures - CVE-2023-0547: OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted - CVE-2023-0616: If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions - CVE-2023-1945: Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash - CVE-2023-4573: When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash - CVE-2023-4574: When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished - CVE-2023-4575: When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished - CVE-2023-4577: When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash - CVE-2023-4578: When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error - CVE-2023-4580: Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information - CVE-2023-4581: Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm - CVE-2023-5169: A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process - CVE-2023-5171: During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash - CVE-2023-5724: Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash - CVE-2023-5725: A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data - CVE-2023-5732: An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited - CVE-2023-6204: On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element - CVE-2023-6205: It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash - CVE-2023-6206: The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts - CVE-2023-6207: Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5 - CVE-2023-6208: When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard - CVE-2023-6209: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host - CVE-2023-6212: Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2023-6856: The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver - CVE-2023-6857: When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary - CVE-2023-6859: A use-after-free condition affected TLS socket creation when under memory pressure - CVE-2023-6860: The `VideoBridge` allowed any content process to use textures produced by remote decoders - CVE-2023-6862: A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start- up - CVE-2023-6863: The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor - CVE-2023-6864: Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2023-23598: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to `DataTransfer.setData`. This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7 - CVE-2023-23599: When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within - CVE-2023-23601: Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird < 102.7 - CVE-2023-23602: A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored - CVE-2023-25728: The Content-Security-Policy-Report-Only header could allow an attacker to leak a child iframe's unredacted URI when interaction with that iframe triggers a redirect - CVE-2023-25730: A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks - CVE-2023-25737: An invalid downcast from nsTextNode to SVGElement could have lead to undefined behavior - CVE-2023-25742: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash - CVE-2023-25751: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly - CVE-2023-25752: When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds - CVE-2023-28164: Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks - CVE-2023-29533: A website could have obscured the fullscreen notification by using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls - CVE-2023-29535: Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced - CVE-2023-29536: An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash - CVE-2023-29539: When handling the filename directive in the Content- Disposition header, the filename would be truncated if the filename contained a NULL character - CVE-2023-29548: A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result - CVE-2023-32206: An out-of-bound read could have led to a crash in the RLBox Expat driver - CVE-2023-32211: A type checking bug would have led to invalid code being compiled - CVE-2023-37207: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks - CVE-2023-50761: The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time - CVE-2023-50762: When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user - CVE-2024-0746: A Linux user opening the print preview dialog could have caused the browser to crash - CVE-2024-0750: A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions - CVE-2024-0751: A malicious devtools extension could have been used to escalate privileges - CVE-2024-1546: When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of- bounds memory read - CVE-2024-1547: Through a series of API calls and redirects, an attacker- controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8 - CVE-2024-1548: A website could have obscured the fullscreen notification by using a dropdown select input element - CVE-2024-1549: If a website set a large custom cursor, portions of the cursor could have overlapped with the permission dialog, potentially resulting in user confusion and unexpected granted permissions - CVE-2024-1550: A malicious website could have used a combination of exiting fullscreen mode and `requestPointerLock` to cause the user's mouse to be re-positioned unexpectedly, which could have led to user confusion and inadvertently granting permissions they did not intend to grant - CVE-2024-1551: Set-Cookie response headers were being incorrectly honored in multipart HTTP responses - CVE-2024-1553: Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-2608: `AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding()` and `AppendEncodedCharacters()` could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write - CVE-2024-2609: The permission prompt input delay could expire while the window is not in focus - CVE-2024-2610: Using a markup injection an attacker could have stolen nonce values - CVE-2024-2611: A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions - CVE-2024-2612: If an attacker could find a way to trigger a particular code path in `SafeRefPtr`, it could have triggered a crash or potentially be leveraged to achieve code execution - CVE-2024-2614: Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-2616: To harden ICU against exploitation, the behavior for out- of-memory conditions was changed to crash instead of attempt to continue - CVE-2024-3302: There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed - CVE-2024-3852: GetBoundName could return the wrong version of an object when JIT optimizations were applied - CVE-2024-3857: The JIT created incorrect code for arguments in certain cases - CVE-2024-3859: On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font - CVE-2024-3861: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use- after-free - CVE-2024-3864: Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code - CVE-2024-4767: If the `browser.privatebrowsing.autostart` preference is enabled, IndexedDB files were not properly deleted when the window was closed - CVE-2024-4768: A bug in popup notifications' interaction with WebAuthn made it easier for an attacker to trick a user into granting permissions - CVE-2024-4769: When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses - CVE-2024-4770: When saving a page to PDF, certain font styles could have led to a potential use-after-free crash - CVE-2024-4777: Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-5688: If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant - CVE-2024-5690: By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system - CVE-2024-5691: By tricking the browser with a `X-Frame-Options` header, a sandboxed iframe could have presented a button that, if clicked by a user, would bypass restrictions to open a new window - CVE-2024-5693: Offscreen Canvas did not properly track cross-origin tainting, which could be used to access image data from another site in violation of same-origin policy - CVE-2024-5696: By manipulating the text in an `&lt;input&gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash - CVE-2024-5700: Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-6600: Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128 - CVE-2024-6601: A race condition could lead to a cross-origin container obtaining permissions of the top-level origin - CVE-2024-6602: A mismatch between allocator and deallocator could have led to memory corruption - CVE-2024-6603: In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption - CVE-2024-6604: Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-6606: Clipboard code failed to check the index on an array access - CVE-2024-6607: It was possible to prevent a user from exiting pointerlock when pressing escape and to overlay customValidity notifications from a `&lt;select&gt;` element over certain permission prompts - CVE-2024-6608: It was possible to move the cursor using pointerlock from an iframe - CVE-2024-6609: When almost out-of-memory an elliptic curve key which was never allocated could have been freed again - CVE-2024-6610: Form validation popups could capture escape key presses - CVE-2024-6611: A nested iframe, triggering a cross-site navigation, could send SameSite=Strict or Lax cookies - CVE-2024-6612: CSP violations generated links in the console tab of the developer tools, pointing to the violating resource - CVE-2024-6613: The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces - CVE-2024-6614: The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces - CVE-2024-7518: Select options could obscure the fullscreen notification dialog - CVE-2024-7521: Incomplete WebAssembly exception handing could have led to a use-after-free - CVE-2024-7522: Editor code failed to check an attribute value - CVE-2024-7525: It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site - CVE-2024-7526: ANGLE failed to initialize parameters which lead to reading from uninitialized memory - CVE-2024-7527: Unexpected marking work at the start of sweeping could have led to a use-after-free - CVE-2024-7529: The date picker could partially obscure security prompts - CVE-2024-7652: An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash - CVE-2024-8394: When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash - CVE-2024-9392: A compromised content process could have allowed for the arbitrary loading of cross-origin pages - CVE-2024-9393: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin - CVE-2024-9394: An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin - CVE-2024-9396: It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption - CVE-2024-9397: A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking - CVE-2024-9398: By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed - CVE-2024-9399: A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition - CVE-2024-9400: A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation - CVE-2024-9401: Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-10458: A permission leak could have occurred from a trusted site to an untrusted site via `embed` or `object` elements - CVE-2024-10459: An attacker could have caused a use-after-free when accessibility was enabled, leading to a potentially exploitable crash - CVE-2024-10460: The origin of an external protocol handler prompt could have been obscured using a data: URL within an `iframe`. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132 - CVE-2024-10461: In multipart/x-mixed-replace responses, `Content- Disposition: attachment` in the response header was not respected and did not force a download, which could allow XSS attacks - CVE-2024-10462: Truncation of a long URL could have allowed origin spoofing in a permission prompt - CVE-2024-10463: Video frames could have been leaked between origins in some situations - CVE-2024-10464: Repeated writes to history interface attributes could have been used to cause a Denial of Service condition in the browser - CVE-2024-10465: A clipboard "paste" button could persist across tabs which allowed a spoofing attack - CVE-2024-10466: By sending a specially crafted push message, a remote server could have hung the parent process, causing the browser to become unresponsive - CVE-2024-10467: Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2024-10468: Potential race conditions in IndexedDB could have caused memory corruption, leading to a potentially exploitable crash - CVE-2024-11159: Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext - CVE-2024-11692: An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possible spoofing attacks - CVE-2024-11693: The executable file warning was not presented when downloading .library-ms files - CVE-2024-11694: Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension - CVE-2024-11695: A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack - CVE-2024-11696: The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification - CVE-2024-11697: When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog - CVE-2024-11700: Malicious websites may have been able to perform user intent confirmation through tapjacking - CVE-2024-11701: The incorrect domain may have been displayed in the address bar during an interrupted navigation attempt - CVE-2024-11702: Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled - CVE-2024-11704: A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path - CVE-2024-11705: `NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes - CVE-2024-11706: A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files - CVE-2024-11708: Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure - CVE-2025-0237: The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks - CVE-2025-0238: Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash - CVE-2025-0239: When using Alt-Svc, ALPN did not properly validate certificates when the original server is redirecting to an insecure site - CVE-2025-0240: Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use- after-free - CVE-2025-0241: When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash - CVE-2025-0242: Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-0247: Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-0510: Thunderbird displayed an incorrect sender address if the From field of an email used the invalid group name syntax that is described in CVE-2024-49040 - CVE-2025-1009: An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash - CVE-2025-1010: An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash - CVE-2025-1012: A race during concurrent delazification could have led to a use-after-free - CVE-2025-1013: A race condition could have led to private browsing tabs being opened in normal browsing windows. This could have resulted in a potential privacy leak - CVE-2025-1014: Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed - CVE-2025-1015: The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If another user imported the address book, clicking on the link could result in opening a web page inside Thunderbird, and that page could execute (unprivileged) JavaScript - CVE-2025-1016: Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 115.19, Firefox ESR 128.6, Thunderbird 115.19, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1018: The fullscreen notification is prematurely hidden when fullscreen is re-requested quickly by the user. This could have been leveraged to perform a potential spoofing attack - CVE-2025-1019: The z-order of the browser windows could be manipulated to hide the fullscreen notification. This could potentially be leveraged to perform a spoofing attack - CVE-2025-1931: It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash - CVE-2025-1932: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later - CVE-2025-1933: On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type - CVE-2025-1934: It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it - CVE-2025-1935: A web page could trick a user into setting that site as the default handler for a custom URL protocol - CVE-2025-1936: URLs retrieve local file content packaged in a ZIP archive. The null and everything after it was ignored when retrieving the content from the archive, but the fake extension after the null was used to determine the type of content. This could have been used to hide code in a web extension disguised as something else like an image - CVE-2025-1937: Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1938: Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-1942: When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string - CVE-2025-3028: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free - CVE-2025-3029: A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack - CVE-2025-3030: Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-3031: An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function - CVE-2025-3032: Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks - CVE-2025-3033: This bug only affects Firefox on Windows. Other operating systems are unaffected.* - CVE-2025-5262: A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash - CVE-2025-5986: A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content - CVE-2025-8027: On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits - CVE-2025-8028: On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address - CVE-2025-8029: Thunderbird executed `javascript:` URLs when used in `object` and `embed` tags - CVE-2025-8030: Insufficient escaping in the “Copy as cURL” feature could potentially be used to trick a user into executing unexpected code - CVE-2025-8031: The `username:password` part was not correctly stripped from URLs in CSP reports potentially leaking HTTP Basic Authentication credentials - CVE-2025-8032: XSLT document loading did not correctly propagate the source document which bypassed its CSP - CVE-2025-8033: The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref - CVE-2025-8034: Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-8035: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-8036: Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding - CVE-2025-8037: Setting a nameless cookie with an equals sign in the value shadowed other cookies. Even if the nameless cookie was set over HTTP and the shadowed cookie included the `Secure` attribute - CVE-2025-9179: An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process - CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component - CVE-2025-9181: Uninitialized memory in the JavaScript Engine component - CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics: WebRender component - CVE-2025-9184: Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-9185: Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-10527: Sandbox escape due to use-after-free in the Graphics: Canvas2D component - CVE-2025-10528: Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component - CVE-2025-10529: Same-origin policy bypass in the Layout component - CVE-2025-10532: Incorrect boundary conditions in the JavaScript: GC component - CVE-2025-10533: Integer overflow in the SVG component - CVE-2025-10536: Information disclosure in the Networking: Cache component - CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance() - CVE-2025-11709: A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures - CVE-2025-11710: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process - CVE-2025-11711: There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable - CVE-2025-11712: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This could have contributed to an XSS on a site that unsafely serves files without a content-type header - CVE-2025-11713: Insufficient escaping in the “Copy as cURL” feature could have been used to trick a user into executing unexpected code on Windows. This did not affect the application when running on other operating systems - CVE-2025-11714: Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component - CVE-2025-14323: Privilege escalation in the DOM: Notifications component - CVE-2025-14328: Privilege escalation in the Netmonitor component - CVE-2025-14329: Privilege escalation in the Netmonitor component - CVE-2025-14331: Same-origin policy bypass in the Request Handling component - CVE-2025-26695: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address - CVE-2025-26696: Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted - CVE-2026-0818: When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles from the outer messages were active. If the user had additionally allowed loading of the remote content referenced by the outer email message, and the email was crafted by the sender using a combination of CSS rules and fonts and animations, then it was possible to extract the secret contents of the email - CVE-2026-0879: Sandbox escape due to incorrect boundary conditions in the Graphics component - CVE-2026-0882: Use-after-free in the IPC component - CVE-2026-0883: Information disclosure in the Networking component - CVE-2026-0884: Use-after-free in the JavaScript Engine component - CVE-2026-0885: Use-after-free in the JavaScript: GC component - CVE-2026-0886: Incorrect boundary conditions in the Graphics component - CVE-2026-0887: Clickjacking issue, information disclosure in the PDF Viewer component - CVE-2026-0890: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component - CVE-2026-2447: Heap buffer overflow in libvpx - CVE-2026-2769: Use-after-free in the Storage: IndexedDB component - CVE-2026-2772: Use-after-free in the Audio/Video: Playback component - CVE-2026-2773: Incorrect boundary conditions in the Web Audio component - CVE-2026-2774: Integer overflow in the Audio/Video component - CVE-2026-2779: Incorrect boundary conditions in the Networking: JAR component - CVE-2026-2782: Privilege escalation in the Netmonitor component - CVE-2026-2786: Use-after-free in the JavaScript Engine component - CVE-2026-2787: Use-after-free in the DOM: Window and Location component - CVE-2026-2788: Incorrect boundary conditions in the Audio/Video: GMP component - CVE-2026-2789: Use-after-free in the Graphics: ImageLib component - CVE-2026-2790: Same-origin policy bypass in the Networking: JAR component - CVE-2026-3889: Spoofing issue in Thunderbird - CVE-2026-4371: A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data - CVE-2026-4692: Sandbox escape in the Responsive Design Mode component - CVE-2026-4694: Incorrect boundary conditions, integer overflow in the Graphics component - CVE-2026-4710: Incorrect boundary conditions in the Audio/Video component - CVE-2026-4718: Undefined behavior in the WebRTC: Signaling component - CVE-2026-4721: Memory safety bugs present in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-5731: Memory safety bugs present in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-8090: Use-after-free in the DOM: Networking component - CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback component - CVE-2026-8092: Memory safety bugs present in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-8094: Other issue in the WebRTC component - CVE-2026-12289: Privilege escalation in the Graphics: WebRender component - CVE-2026-12305: Memory safety bug fixed in Firefox 152 - CVE-2026-12306: Memory safety bug fixed in Firefox 152 - CVE-2026-12309: Memory safety bug fixed in Firefox 152 - CVE-2026-12324: Incorrect boundary conditions in the Graphics: CanvasWebGL component Critical TuxCare License Agreement CVE-2024-2611 CVE-2024-9396 CVE-2024-0746 CVE-2024-3861 CVE-2026-0882 CVE-2025-1942 CVE-2026-5731 CVE-2024-11694 CVE-2024-5690 CVE-2025-3030 CVE-2025-1015 CVE-2023-6209 CVE-2024-6613 CVE-2025-8036 CVE-2026-8092 CVE-2024-10465 CVE-2024-9401 CVE-2024-10460 CVE-2025-9180 CVE-2024-11692 CVE-2024-9400 CVE-2025-1938 CVE-2023-28164 CVE-2025-8037 CVE-2024-7525 CVE-2025-8030 CVE-2023-6859 CVE-2026-4694 CVE-2026-0883 CVE-2024-11708 CVE-2024-2614 CVE-2026-12305 CVE-2024-7652 CVE-2025-0239 CVE-2023-4581 CVE-2024-11697 CVE-2026-0887 CVE-2025-9184 CVE-2024-6603 CVE-2024-11693 CVE-2024-2609 CVE-2025-11713 CVE-2024-11706 CVE-2024-5700 CVE-2023-4573 CVE-2024-11700 CVE-2026-12324 CVE-2026-0885 CVE-2023-6857 CVE-2025-3032 CVE-2024-6606 CVE-2024-2612 CVE-2025-8031 CVE-2024-5688 CVE-2026-12306 CVE-2024-7529 CVE-2024-1548 CVE-2023-29533 CVE-2023-5732 CVE-2025-8033 CVE-2023-23598 CVE-2023-6864 CVE-2024-4770 CVE-2024-9392 CVE-2025-1018 CVE-2023-0616 CVE-2023-1945 CVE-2023-0430 CVE-2024-4777 CVE-2025-14323 CVE-2023-6207 CVE-2024-7527 CVE-2025-11714 CVE-2023-50761 CVE-2023-50762 CVE-2025-10533 CVE-2024-11701 CVE-2024-10466 CVE-2024-1547 CVE-2024-2610 CVE-2024-3864 CVE-2025-9182 CVE-2024-3859 CVE-2024-7518 CVE-2026-12309 CVE-2023-4580 CVE-2026-2447 CVE-2026-8090 CVE-2023-6206 CVE-2024-6604 CVE-2023-25742 CVE-2024-2616 CVE-2025-8034 CVE-2024-11696 CVE-2025-1937 CVE-2023-25752 CVE-2026-0884 CVE-2026-2789 CVE-2026-8094 CVE-2024-4768 CVE-2026-12289 CVE-2025-10536 CVE-2023-25728 CVE-2024-9394 CVE-2024-10461 CVE-2026-0818 CVE-2026-4371 CVE-2026-2787 CVE-2024-6607 CVE-2024-6608 CVE-2023-5171 CVE-2023-6863 CVE-2022-3032 CVE-2024-3852 CVE-2024-11702 CVE-2024-6609 CVE-2023-4575 CVE-2026-2788 CVE-2025-1935 CVE-2025-8032 CVE-2024-1551 CVE-2023-32211 CVE-2023-5725 CVE-2025-3033 CVE-2026-4721 CVE-2024-6612 CVE-2024-4767 CVE-2025-14322 CVE-2023-0547 CVE-2025-3028 CVE-2026-4692 CVE-2024-6601 CVE-2023-32206 CVE-2026-3889 CVE-2025-11709 CVE-2026-2782 CVE-2025-3029 CVE-2025-1012 CVE-2023-25751 CVE-2023-4574 CVE-2024-1550 CVE-2025-9179 CVE-2024-11704 CVE-2025-0510 CVE-2025-8028 CVE-2026-8091 CVE-2024-1546 CVE-2025-1013 CVE-2024-10467 CVE-2025-1010 CVE-2023-5169 CVE-2026-0890 CVE-2026-2786 CVE-2024-11705 CVE-2024-0751 CVE-2026-2772 CVE-2025-10532 CVE-2023-6212 CVE-2024-7522 CVE-2025-1019 CVE-2025-1014 CVE-2026-2790 CVE-2024-6602 CVE-2024-9398 CVE-2024-7526 CVE-2025-11710 CVE-2025-11712 CVE-2026-2774 CVE-2024-10463 CVE-2026-2773 CVE-2025-9181 CVE-2024-2608 CVE-2024-8394 CVE-2025-1936 CVE-2023-4578 CVE-2025-1931 CVE-2025-26696 CVE-2023-37207 CVE-2024-10464 CVE-2026-4710 CVE-2025-1016 CVE-2024-5691 CVE-2023-29535 CVE-2023-25730 CVE-2023-6208 CVE-2026-2769 CVE-2023-6862 CVE-2024-6614 CVE-2026-0886 CVE-2024-6611 CVE-2024-10459 CVE-2024-5696 CVE-2025-1933 CVE-2024-3302 CVE-2026-0879 CVE-2023-4577 CVE-2024-6610 CVE-2025-5262 CVE-2024-1549 CVE-2026-4718 CVE-2025-11711 CVE-2024-11695 CVE-2025-0237 CVE-2023-29548 CVE-2024-5693 CVE-2024-9397 CVE-2024-0750 CVE-2025-11708 CVE-2025-8027 CVE-2025-1932 CVE-2023-29536 CVE-2025-8035 CVE-2024-9393 CVE-2025-0240 CVE-2023-6205 CVE-2025-5986 CVE-2025-0238 CVE-2026-2779 CVE-2024-10462 CVE-2025-1009 CVE-2023-25737 CVE-2023-5724 CVE-2024-4769 CVE-2025-3031 CVE-2024-9399 CVE-2024-3857 CVE-2025-9185 CVE-2024-7521 CVE-2024-6600 CVE-2023-23602 CVE-2025-10528 CVE-2023-6204 CVE-2025-14329 CVE-2025-0242 CVE-2025-8029 CVE-2023-6856 CVE-2023-23599 CVE-2025-0247 CVE-2025-1934 CVE-2023-29539 CVE-2024-10458 CVE-2025-10529 CVE-2025-10527 CVE-2024-10468 CVE-2025-14331 CVE-2023-23601 CVE-2025-14328 CVE-2025-26695 CVE-2024-11159 CVE-2023-6860 CVE-2024-1553 CVE-2025-0241 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32280: rebuild with newer golang to fix uncontrolled resource consumption in crypto/x509 chain building, where attacker-supplied intermediate certificates differing only in non-critical extensions bypass the dedup check and cause excessive work past the signature-check limit (denial of service); fix carried by golang >= 1.22.9-1.tuxcare.els9 via upstream Go commit 7b4ed1d7 (release-branch.go1.26), CL 758320 Important TuxCare License Agreement CVE-2026-32280 CVE-2026-39821 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-58010: fix one-byte heap over-read in gvs_tuple_is_normal() by changing the offset bounds check from '>' to '>=' (glib/gvariant-serialiser.c) - CVE-2026-58011: validate the days field in g_date_time_add_full() to prevent an out-of-bounds read in g_date_time_get_ymd() (glib/gdatetime.c) - CVE-2026-58012: fix buffer over-read in g_regex_replace() with G_REGEX_RAW by splitting UTF-8 vs raw code paths in string_append() (glib/gregex.c) - CVE-2026-58013: fix out-of-bounds read in g_io_channel_read_line_backend() by bounding memcmp() length to the remaining buffer (glib/giochannel.c) Important TuxCare License Agreement CVE-2026-58010 CVE-2026-58012 CVE-2026-58013 CVE-2026-58011 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-68276: refuse to create wide-area record browsers when wide-area lookups are disabled; an unprivileged local user could crash avahi-daemon over D-Bus by passing AVAHI_LOOKUP_USE_WIDE_AREA to RecordBrowserNew, reaching an assertion in avahi_wide_area_scan_cache - CVE-2026-34933: reject publish flags that set both AVAHI_PUBLISH_USE_WIDE_AREA and AVAHI_PUBLISH_USE_MULTICAST; the conflicting pair tripped an assertion in transport_flags_from_domain and crashed avahi-daemon from any unprivileged local D-Bus caller Moderate TuxCare License Agreement CVE-2026-34933 CVE-2025-68276 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27879: cap the resampled series length in Series.Resample() at 1,000,000 points; the length was derived straight from the caller-supplied time range and interval and then allocated, so a crafted resample query could exhaust memory - CVE-2026-28375: bound the testdata data-source result sizes that were taken unchecked from client-controlled maxDataPoints and line counts - log lines, randomWalkTable, the simulation engine and the USA scenario are each clamped to 10000 points Moderate TuxCare License Agreement CVE-2026-28375 CVE-2026-27879 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-47022: handle glibc CPU set allocation failures - Skip tests/hwloc/linux/gather subdir in %check (DMI round-trip flake under mock) Moderate TuxCare License Agreement CVE-2022-47022 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2022-4603: prevent out-of-range access to pppdump packet buffers Moderate TuxCare License Agreement CVE-2022-4603 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-64506: fix heap buffer over-read in png_write_image_8bit when 8-bit input is written with the convert_to_8bit flag set Moderate TuxCare License Agreement CVE-2025-64506 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-27142: escape URLs in the url= portion of html/template <meta> content attributes, closing a cross-site scripting vector - CVE-2026-39823: skip ASCII whitespace around the url= separator so the new <meta> content escaper cannot be bypassed Moderate TuxCare License Agreement CVE-2026-27142 CVE-2026-39823 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - update to 140.13.0 ESR (MFSA 2026-72; includes MFSA 2026-64 / 140.12.1 fixes) - CVE-2026-14899: The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. Exploit code for this issue is public - CVE-2026-15719: Site isolation issue in the DOM: Navigation component. Exploit code for this issue is public - CVE-2026-16349: Same-origin policy bypass in the DOM: Navigation component - CVE-2026-16350: Incorrect boundary conditions in the Audio/Video: cubeb component - CVE-2026-16351: Sandbox escape due to use-after-free in the DOM: Navigation component - CVE-2026-16352: Sandbox escape due to use-after-free in the Disability Access APIs component - CVE-2026-16353: Invalid pointer in the DOM: Bindings (WebIDL) component - CVE-2026-16354: Information disclosure in the Graphics: ImageLib component - CVE-2026-16355: JIT miscompilation in the JavaScript Engine: JIT component - CVE-2026-16356: Sandbox escape due to use-after-free in the Disability Access APIs component - CVE-2026-16357: Incorrect boundary conditions in the Graphics component - CVE-2026-16358: Site isolation issue in the Graphics: WebRender component - CVE-2026-16359: Incorrect boundary conditions in the Audio/Video: GMP component - CVE-2026-16360: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-16361: Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-16362: Use-after-free in the WebRTC: Audio/Video component - CVE-2026-16363: JIT miscompilation in the JavaScript: WebAssembly component - CVE-2026-16368: Incorrect boundary conditions in the JavaScript: WebAssembly component - CVE-2026-16369: Integer overflow in the JavaScript: WebAssembly component - CVE-2026-16371: Privilege escalation in the DOM: Navigation component - CVE-2026-16374: Information disclosure in the Framework component in DevTools - CVE-2026-16375: Site isolation issue in the Networking: HTTP component - CVE-2026-16377: Mitigation bypass in the PDF Viewer component - CVE-2026-16379: Privilege escalation in the DOM: Content Processes component - CVE-2026-16381: Same-origin policy bypass in the Networking: DNS component - CVE-2026-16383: Mitigation bypass in the DOM: Networking component - CVE-2026-16387: Site isolation issue in the Networking component - CVE-2026-16390: Mitigation bypass in the Enterprise Policies component - CVE-2026-16391: Information disclosure in the Storage: IndexedDB component - CVE-2026-16396: Privilege escalation in WebExtensions - CVE-2026-16405: Information disclosure in the Networking: WebSockets component - CVE-2026-16412: Memory safety bugs present in Thunderbird ESR 140.12 and Thunderbird 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code - CVE-2026-57962: Memory exhaustion via a malicious LDAP address-book server - CVE-2026-57963: Content injection via HTML chat messages (Matrix/XMPP) Important TuxCare License Agreement CVE-2026-16377 CVE-2026-16352 CVE-2026-16360 CVE-2026-16356 CVE-2026-16351 CVE-2026-16375 CVE-2026-16383 CVE-2026-16354 CVE-2026-16369 CVE-2026-16353 CVE-2026-16350 CVE-2026-16355 CVE-2026-16357 CVE-2026-57963 CVE-2026-16381 CVE-2026-16412 CVE-2026-16371 CVE-2026-16358 CVE-2026-16390 CVE-2026-16361 CVE-2026-14899 CVE-2026-16391 CVE-2026-16396 CVE-2026-16387 CVE-2026-16379 CVE-2026-16349 CVE-2026-16359 CVE-2026-15718 CVE-2026-16368 CVE-2026-16405 CVE-2026-57962 CVE-2026-16362 CVE-2026-15719 CVE-2026-16374 CVE-2026-16363 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50031: buffer overflow in ipmi-oem dell/fujitsu response handling Important TuxCare License Agreement CVE-2026-50031 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2024-0743: add defensive check for large ssl_DefSend return values in ssl_SendSavedWriteData to prevent pendingBuf.len underflow (Mozilla bug 1867408, MFSA-2024-13, fixed upstream in NSS 3.90.2) Important TuxCare License Agreement CVE-2024-0743 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-61866: fix a memory leak in the JNG encoder by destroying the cloned JPEG image and image info when the JPEG-alpha blob cannot be opened Important TuxCare License Agreement CVE-2026-61866 CVE-2026-28493 CVE-2026-53462 CVE-2026-23874 CVE-2026-56379 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-17543: fix SQL injection in ext/pgsql by dropping the E prefix in php_pgsql_add_quotes (GHSA-7qpv-r5mr-78m4) Critical TuxCare License Agreement CVE-2026-17543 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-4873: do not reuse a clear-text STARTTLS connection when the new transfer requires TLS, so an IMAP, SMTP or POP3 request that mandates TLS is not sent over an unencrypted connection - CVE-2026-6253: restore the proxy credentials set via options on every redirect so credentials belonging to the first proxy are not disclosed to a second, different proxy - CVE-2026-6429: drop credentials that were not set through CURLOPT_USERNAME on redirect so a netrc password established for the first host is not sent to the redirect target over a reused connection or proxy - CVE-2026-8924: trim trailing dots from the request and cookie domains before the public suffix list check so a trailing-dot domain cannot set a super cookie scoped to an unrelated site Moderate TuxCare License Agreement CVE-2026-8924 CVE-2026-6429 CVE-2026-6253 CVE-2026-4873 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-8286: require a matching SSL configuration before reusing a pooled connection for a clear-text transfer that upgrades via STARTTLS Important TuxCare License Agreement CVE-2026-8286 CVE-2026-9547 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-56407: cap entity textLen against signed integer overflow in doProlog - CVE-2026-56408: waterproof copyString against SIZE_MAX overflow in xmlparse.c Important TuxCare License Agreement CVE-2026-56408 CVE-2026-56407 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-15308: fix quadratic complexity (CPU DoS) in incremental HTMLParser feed() by buffering pending data until a parse threshold Important TuxCare License Agreement CVE-2026-4224 CVE-2026-15308 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-40701: fix resolver use-after-free in OCSP; the resolve context was leaked when a client SSL connection was terminated while resolving an OCSP responder, so completion of the resolve touched freed memory - CVE-2025-53859: fix buffer over-read in ngx_mail_smtp_module; login and password storage could be left in an inconsistent state after base64 decoding errors in the plain/login/cram-md5 auth methods - CVE-2026-28753: validate the host name resolved from the client address against the character set of RFC 1034 section 3.5, preventing CRLF injection into auth_http and smtp proxy requests - CVE-2026-42934: fix buffer over-read in ngx_http_charset_module recode_from_utf8(); pass the saved byte count rather than the last saved index to ngx_utf8_decode() and advance past the whole saved sequence on invalid UTF-8 Moderate TuxCare License Agreement CVE-2026-40701 CVE-2025-53859 CVE-2026-28753 CVE-2026-42934 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-8927: flush the proxy Digest authentication state when the proxy read from an environment variable differs from the one that state was established for, so a Proxy-Authorization header computed for one proxy is not sent to a different proxy on a reused handle - CVE-2026-8932: compare the client certificate type and the private key, its type, password and blob when matching a connection for reuse and when matching a cached TLS session, so a transfer cannot silently inherit another handle's authenticated client identity Important TuxCare License Agreement CVE-2026-8927 CVE-2026-8932 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-50252: draw outgoing UDP ports from a shared randomized pool so a source port can no longer be mapped to a worker thread for cache poisoning Critical TuxCare License Agreement CVE-2026-50252 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to shenandoah-jdk8u502-b07 - Security fixes from OpenJDK 8u502-b07: - CVE-2026-41254: update LittleCMS to 2.19.1 - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47063: enhance jar handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47027: enhance jar file processing - CVE-2026-47021: enhance XBM image support - CVE-2026-60147: improve certification checking - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47059: enhance AWT ImagingLib - CVE-2026-47010: enhance JPEG handling Important TuxCare License Agreement CVE-2026-41254 CVE-2021-35561 CVE-2021-35550 CVE-2026-46968 CVE-2021-35565 CVE-2021-35556 CVE-2026-47058 CVE-2021-35603 CVE-2026-47059 CVE-2026-60147 CVE-2026-47063 CVE-2021-35559 CVE-2022-21283 CVE-2021-35586 CVE-2021-35578 CVE-2026-47057 CVE-2021-35564 CVE-2026-47010 CVE-2026-47021 CVE-2020-2655 CVE-2026-47027 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - fix CVE-2026-54513: validate array element type in BasicPolymorphicTypeValidator allowIfSubTypeIsArray Important TuxCare License Agreement CVE-2026-54513 CVE-2026-54514 CVE-2026-54515 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-37460: validate RFPOPTION sub-TLV length before accessing its data Important TuxCare License Agreement CVE-2026-37460 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-8458: tie the requested SASL/SPNEGO service name to the connection and compare it when matching an existing connection for reuse, so a Negotiate authenticated connection is not reused for a transfer that asked for a different service - CVE-2026-8926: discard a .netrc entry that matches the host but whose login does not match the user given in the URL, so the password that belongs to another user of that host is no longer returned as a successful lookup Moderate TuxCare License Agreement CVE-2026-8926 CVE-2026-8458 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-9538: cap per-entry size during read to avoid memory exhaustion from a crafted oversized tar header (MAX_FILE_SIZE cap) Important TuxCare License Agreement CVE-2026-9538 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Fix release version format: place .el9 before .tuxcare.els1 suffix; bump rpmrelease to 2 Important TuxCare License Agreement CVE-2026-33416 CVE-2026-34268 CVE-2026-22007 CVE-2020-2816 CVE-2026-22016 CVE-2026-23865 CVE-2026-22013 CVE-2026-22021 CVE-2026-22018 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-24912: drop pending RADIUS request only when accepting the response Low TuxCare License Agreement CVE-2025-24912 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-2271: validate the Creator-block field length in the PSP loader; read_creator_block() used a 32-bit length straight from the file for allocation, so a length of 0xFFFFFFFF made g_malloc(len+1) wrap to g_malloc(0) and the following read overflowed the heap Important TuxCare License Agreement CVE-2026-2271 CVE-2026-66758 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Upgrade to openjdk-11.0.27+6. The following CVEs were fixed: - CVE-2025-30698: fix buffered image handling to avoid unauthorized access to accessible data - CVE-2025-30691: improve compiler transformations to avoid unauthorized access to accessible data - CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time - CVE-2024-21147: out-of-bounds array index in range check elimination - CVE-2024-21138: infinite loop vunlerability in SymbolTable - CVE-2024-21131: UTF8 size overflow - CVE-2024-21235: incorrect range check because of integer conversion error in LoopNode - CVE-2024-21140: int overflow/underflow in range check elimination - CVE-2024-21217: out-of-memory because of unbounded allocation in MessageFormat - CVE-2024-21210: integer overflow in array indexing in SuperWord - CVE-2024-21145: out-of-bounds access in MaskFill - CVE-2024-21208: improper handling of maxHeaderSize in HTTP client - CVE-2025-21502: enhance array handling Important TuxCare License Agreement CVE-2025-21502 CVE-2020-14577 CVE-2020-2593 CVE-2020-14593 CVE-2021-35561 CVE-2020-2601 CVE-2021-35550 CVE-2021-35565 CVE-2024-21208 CVE-2020-14782 CVE-2024-21145 CVE-2021-2163 CVE-2021-35556 CVE-2020-14779 CVE-2022-21305 CVE-2020-14562 CVE-2020-2767 CVE-2020-2755 CVE-2024-21210 CVE-2020-14781 CVE-2022-21365 CVE-2020-2778 CVE-2025-30698 CVE-2022-21248 CVE-2020-2816 CVE-2021-35603 CVE-2022-21341 CVE-2022-21293 CVE-2022-21271 CVE-2020-2800 CVE-2022-21291 CVE-2020-2583 CVE-2021-2369 CVE-2022-21277 CVE-2020-2773 CVE-2020-14797 CVE-2020-14583 CVE-2022-21294 CVE-2022-21296 CVE-2024-21217 CVE-2020-2756 CVE-2020-2757 CVE-2022-21340 CVE-2020-14621 CVE-2024-21140 CVE-2021-2432 CVE-2020-2654 CVE-2020-14803 CVE-2024-21235 CVE-2022-21366 CVE-2021-2341 CVE-2024-21131 CVE-2020-2781 CVE-2021-35559 CVE-2020-14796 CVE-2022-21283 CVE-2020-14573 CVE-2020-14792 CVE-2021-35586 CVE-2021-35578 CVE-2022-21360 CVE-2024-21138 CVE-2025-30691 CVE-2020-2805 CVE-2020-2803 CVE-2020-2604 CVE-2024-21147 CVE-2021-35564 CVE-2022-21299 CVE-2020-14556 CVE-2020-2830 CVE-2020-2754 CVE-2021-2388 CVE-2021-35567 CVE-2020-2590 CVE-2024-21144 CVE-2020-2655 CVE-2022-21282 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-14380: load DBI::Profile packages via Module::Load instead of interpolating the caller-influenced package name into a string eval - CVE-2026-14739: set a hard limit of 99999 '?' placeholders and grow the preparse() buffer to 7x the statement length Important TuxCare License Agreement CVE-2026-14739 CVE-2026-14380 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-24880: validate HTTP/1.1 chunk extensions with a new ChunkExtension state machine instead of skipping them unparsed, so a CRLF embedded in a quoted extension value can no longer desync Tomcat from a front-end proxy and smuggle a request - CVE-2026-25854: collapse leading slashes on the request URI and redirect via sendRedirect in the LoadBalancerDrainingValve so a protocol-relative URI can no longer be reflected into the Location header as an open redirect - CVE-2026-34483: escape the request URI and query string in the access log %r, %q and %U elements so log fields cannot be forged through unescaped output - CVE-2026-34487: stop logging the Kubernetes bearer token by dropping it from the tokenStream.failedConnection message and dropping the request headers from the cloud stream provider debug log Moderate TuxCare License Agreement CVE-2026-34487 CVE-2026-50229 CVE-2026-25854 CVE-2026-34483 CVE-2026-24880 CVE-2026-53404 CVE-2025-61795 CVE-2026-55955 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion Moderate TuxCare License Agreement CVE-2025-59529 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2021-26291: block external HTTP repositories by default (MNG-7116, MNG-7117, MNG-7118, MNG-7128) Critical TuxCare License Agreement CVE-2021-26291 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available {CVE-2026-64561} - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level {CVE-2026-63807} - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak {CVE-2025-40035} - thunderbolt: Limit XDomain response copy to actual frame size {CVE-2026-53146} - drm/gud: Fix UBSAN warning {CVE-2022-50628} - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740} - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests {CVE-2023-54108} - fs: udf: fix OOB read in lengthAllocDescs handling {CVE-2025-40044} - tipc: Fix use-after-free in tipc_mon_reinit_self(). {CVE-2025-40280} - isofs: Fix out of bound access for corrupted isofs image {CVE-2021-47478} - pppoe: drop PFC frames {CVE-2026-53003} - nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free {CVE-2026-46304} - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery {CVE-2026-43466} - scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails {CVE-2026-45997} - irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions {CVE-2022-49716} - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006} - can: dev: can_set_termination(): allow sleeping GPIOs {CVE-2024-56625} - cxl/mem: Fix shutdown order {CVE-2023-52849} - pinctrl: check the return value of pinmux_ops::get_function_name() {CVE-2025-40030} - usb: usbtmc: Flush anchored URBs in usbtmc_release {CVE-2026-31758} - RDMA/siw: Fix potential NULL pointer dereference in header processing {CVE-2026-23242} - ASoC: wm_adsp: Fix NULL dereference when removing firmware controls {CVE-2026-53350} - net: bcmgenet: fix off-by-one in bcmgenet_put_txcb {CVE-2026-53088} - HID: multitouch: Check to ensure report responses match the request {CVE-2026-43047} - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23058} - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle {CVE-2023-53250} - usb: storage: Fix memory leak in USB bulk transport {CVE-2025-68288} - wifi: rtw88: check for PCI upstream bridge existence {CVE-2026-46092} - crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed {CVE-2026-31697} - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() {CVE-2022-48650} - HID: apple: avoid memory leak in apple_report_fixup() {CVE-2026-31520} - HID: magicmouse: avoid memory leak in magicmouse_report_fixup() {CVE-2026-31522} - scsi: qla2xxx: Avoid fcport pointer dereference {CVE-2023-53603} - RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() {CVE-2026-46178} - scsi: mpi3mr: Add NULL checks when resetting request and reply queues {CVE-2026-43473} - HID: roccat: fix use-after-free in roccat_report_event {CVE-2026-43111} - tap: free page on error paths in tap_get_user_xdp() {CVE-2026-46320} - net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode {CVE-2026-43180} - usb: xhci: Fix memory leak in xhci_disable_slot() {CVE-2026-43432} - PCI: Fix reset_method_store() memory leak {CVE-2024-56745} - rbd: fix null-ptr-deref when device_add_disk() fails {CVE-2026-46079} - net: stmmac: fix integer underflow in chain mode {CVE-2026-31649} - be2net: pass wrb_params in case of OS2BMC {CVE-2025-40264} - thunderbolt: Validate XDomain request packet size before type cast {CVE-2026-53147} - Input: uinput - fix circular locking dependency with ff-core {CVE-2026-31667} - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency {CVE-2023-52855} - nbd: defer config put in recv_work {CVE-2025-68372} - net: hns3: using the num_tqps in the vf driver to apply for resources {CVE-2025-71064} - serial: imx: fix tx statemachine deadlock {CVE-2023-52456} - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() {CVE-2024-47734} - dm-thin: fix metadata refcount underflow {CVE-2026-46107} - net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown {CVE-2026-23454} - usb: atm: cxacru: fix a flaw in existing endpoint checks {CVE-2025-21916} - md/raid5: validate payload size before accessing journal metadata {CVE-2026-46070} - wifi: rtw89: fix potential race condition between napi_init and napi_enable {CVE-2023-53452} - ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl {CVE-2021-47634} - ubi: ubi_create_volume: Fix use-after-free when volume creation failed {CVE-2022-49388} - virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false {CVE-2026-31469} - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd {CVE-2025-40275} - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used {CVE-2025-38113} - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() {CVE-2025-40211} - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() {CVE-2026-45982} - libceph: define and enforce CEPH_MAX_KEY_LEN {CVE-2026-43304} - ACPI: pfr_update: Fix the driver update version check {CVE-2025-39701} - spi: imx: fix use-after-free on unbind {CVE-2026-45996} - Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253} - ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access {CVE-2026-46094} - xdp: produce a warning when calculated tailroom is negative {CVE-2026-23343} - vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check {CVE-2023-53543} - iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406} - topology: Keep the cpumask unchanged when printing cpumap {CVE-2024-57917} - Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers {CVE-2026-43059} - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early {CVE-2025-39861} - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' {CVE-2025-38593} - mm/damon/sysfs: fix use-after-free in state_show() {CVE-2025-39877} - KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation {CVE-2026-43133} - Bluetooth: SMP: force responder MITM requirements before building the pairing response {CVE-2026-43334} - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860} - scsi: megaraid_sas: Fix invalid node index {CVE-2025-38239} - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file {CVE-2024-42138} - kdb: Fix buffer overflow during tab-complete {CVE-2024-39480} - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() {CVE-2026-43233} - bpf: Fix stack-out-of-bounds write in devmap {CVE-2026-23359} - mm/debug_vm_pgtable: clear page table entries at destroy_args() {CVE-2025-39776} - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry {CVE-2026-43114} - gve: Account for stopped queues when reading NIC stats {CVE-2024-42162} - gve: Fix stats report corruption on queue count change {CVE-2026-23262} - amba: use generic driver_override infrastructure - Drivers: hv: vmbus: use generic driver_override infrastructure - vdpa: use generic driver_override infrastructure {CVE-2026-53118} - PCI: use generic driver_override infrastructure {CVE-2026-53120} - spi: use generic driver_override infrastructure {CVE-2026-31487} - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} - driver core: generalize driver_override in struct device {CVE-2026-31688} - arm64: topology: fix possible overflow in amu_fie_setup() {CVE-2022-48657} - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing {CVE-2025-68185} - NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324} - rxrpc: Fix key reference count leak from call->key {CVE-2026-31639} - rxrpc: Only put the call ref if one was acquired {CVE-2026-31638} - bpf: Set run context for rawtp test_run callback {CVE-2024-40908} - ethtool: Fix uninitialized number of lanes {CVE-2023-53798} - xsk: fix refcount underflow in error path {CVE-2023-53698} - net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs {CVE-2026-23340} - net: fix fanout UAF in packet_release() via NETDEV_UP race {CVE-2026-31504} - net: avoid race between device unregistration and ethnl ops {CVE-2025-21701} - net: sched: Disallow replacing of child qdisc from one parent to another {CVE-2025-21700} - libceph: Fix potential out-of-bounds access in osdmap_decode() {CVE-2026-52958} - libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() {CVE-2026-46024} - libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954} - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined {CVE-2025-71224} - wifi: mac80211: prohibit deactivating all links {CVE-2024-58061} - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() {CVE-2025-21937} - Bluetooth: SMP: derive legacy responder STK authentication from MITM state {CVE-2026-31773} - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() {CVE-2025-21936} - Bluetooth: fix memory leak in error path of hci_alloc_dev() {CVE-2026-53252} - netfilter: nf_tables: unconditionally flush pending work before notifier {CVE-2024-42109} - netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm {CVE-2025-39894} - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case {CVE-2026-23456} - iavf: Fix out-of-bounds when setting channels on remove {CVE-2023-53659} - ipv6: prevent possible UaF in addrconf_permanent_addr() {CVE-2026-43339} - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet {CVE-2026-53112} Important TuxCare License Agreement CVE-2025-39776 CVE-2025-21936 CVE-2025-40275 CVE-2026-43304 CVE-2026-31649 CVE-2025-39701 CVE-2026-46304 CVE-2025-40030 CVE-2026-31504 CVE-2026-31639 CVE-2024-56745 CVE-2026-46024 CVE-2024-58061 CVE-2026-45997 CVE-2022-48650 CVE-2026-43111 CVE-2026-64561 CVE-2025-39894 CVE-2025-21701 CVE-2022-49716 CVE-2026-23359 CVE-2023-53250 CVE-2024-57917 CVE-2026-46178 CVE-2023-53543 CVE-2025-21700 CVE-2026-23456 CVE-2023-52849 CVE-2026-23262 CVE-2025-40035 CVE-2026-43114 CVE-2026-53118 CVE-2023-53603 CVE-2026-23343 CVE-2026-46070 CVE-2025-68372 CVE-2026-31773 CVE-2025-40264 CVE-2025-71224 CVE-2021-47634 CVE-2025-40280 CVE-2024-42162 CVE-2026-45996 CVE-2026-31667 CVE-2025-40211 CVE-2026-53147 CVE-2025-68185 CVE-2022-50628 CVE-2026-43466 CVE-2023-52456 CVE-2026-43473 CVE-2023-54108 CVE-2026-23242 CVE-2025-39860 CVE-2026-43334 CVE-2026-52958 CVE-2026-43432 CVE-2026-31697 CVE-2026-46079 CVE-2024-47734 CVE-2026-46006 CVE-2024-39480 CVE-2024-42138 CVE-2025-21916 CVE-2026-43059 CVE-2025-68288 CVE-2026-31688 CVE-2026-46092 CVE-2025-21937 CVE-2025-40324 CVE-2024-40908 CVE-2026-46320 CVE-2026-43233 CVE-2026-43133 CVE-2025-39877 CVE-2022-49388 CVE-2026-31469 CVE-2025-38113 CVE-2025-38239 CVE-2026-43180 CVE-2024-56625 CVE-2026-53350 CVE-2026-23454 CVE-2026-31487 CVE-2025-71064 CVE-2026-52954 CVE-2026-43339 CVE-2026-31522 CVE-2024-42109 CVE-2025-38593 CVE-2023-52855 CVE-2026-45982 CVE-2026-53146 CVE-2021-47478 CVE-2026-31527 CVE-2026-53088 CVE-2026-46094 CVE-2025-40044 CVE-2026-23340 CVE-2026-31520 CVE-2026-46107 CVE-2022-48657 CVE-2026-53120 CVE-2022-50406 CVE-2023-53452 CVE-2026-31758 CVE-2022-49740 CVE-2026-53252 CVE-2023-53698 CVE-2026-53003 CVE-2023-53659 CVE-2026-31638 CVE-2025-39861 CVE-2026-53112 CVE-2026-43047 CVE-2023-53798 CVE-2026-53253 CVE-2026-23058 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-59843: reject a peer-supplied maximum packet size of zero to prevent infinite loops in channel writes - CVE-2026-59848: track outstanding SFTP request IDs and reject responses with unknown IDs to prevent unbounded client memory growth - CVE-2026-59845: handle ProxyCommand fork failures before storing the PID to prevent cleanup from signaling unrelated processes Moderate TuxCare License Agreement CVE-2026-59848 CVE-2026-59843 CVE-2026-59845 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-58459: prevent command injection in gpsprof gnuplot output Critical TuxCare License Agreement CVE-2026-58459 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Update to jdk-17.0.19+10 (RHSA-2026:9686) - Set fipsver to 62c0f885e30 - CVE-2026-22016: fix JAXP component vulnerability allowing unauthenticated remote attackers to gain unauthorized access to sensitive data in Java SE - CVE-2026-34282: fix Hotspot component vulnerability allowing unauthorized update, insert or delete access to Java SE accessible data Important TuxCare License Agreement CVE-2026-21945 CVE-2026-34282 CVE-2022-21277 CVE-2026-22016 CVE-2022-21366 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-59890: normalize Unicode form (NFC) on both the MANIFEST.in pattern and the candidate path before matching, so an exclude directive cannot be bypassed by a decomposed (NFD) file name Moderate TuxCare License Agreement CVE-2026-59890 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3494: replace the server_audit plugin's hand-rolled SQL parser with thd_sql_command(); emit MYSQL_AUDIT_GENERAL_STATUS inside Prepared_statement::execute; update thd->update_server_status guard in sp_instr_stmt::execute to include audit-enabled path - CVE-2026-44171: reject unsafe absolute, leading-dot, and parent-traversal paths during mbstream archive extraction Important TuxCare License Agreement CVE-2026-44171 CVE-2026-3494 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-7260: fix phar circular symlink crash by replacing recursive phar_get_link_source() with an iterative Floyd cycle-detection walk in ext/phar/util.c (GHSA-vc5h-9ppw-p5f3); add regression test ext/phar/tests/tar/ghsa-vc5h-9ppw-p5f3-symlink-circular.phpt Important TuxCare License Agreement CVE-2026-7260 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - Add wireshark-0019-epan-add-simple-recursion-checks.patch: backport the increment/decrement_dissection_depth() API, a prerequisite for the recursion-depth fixes below (3.4.10 has no such API) - CVE-2023-1994: GQUIC dissector: fix a NULL pointer dereference - CVE-2024-4853: editcap: do not memmove more than the allocated buffer holds - CVE-2024-4855: editcap, libwiretap: do not use the array of initial decryption secrets after it has been freed - CVE-2026-15164: ciscodump: do not try to write more than PACKET_MAX_SIZE - CVE-2026-15167: DBS Etherwatch reader: keep buffer slack for an extra byte - CVE-2023-1993: LISP dissector: do not read past the LCAF payload length - CVE-2026-6867: SMB2 dissector: put bounds on total chained compression - CVE-2026-15172: FMP/NOTIFY dissector: stop precomputing the HandleList length - CVE-2026-15174: catapult-dct2000 dissector: cap the E-DCH no_ddi_entries count at MAX_EDCH_DDIS - CVE-2026-5407: SMB2 dissector: check for offset overflow in two more places - CVE-2026-6534: USB HID dissector: skip items with a report size of zero - CVE-2026-6522: RPKI-RTR dissector: check for overflow in the unknown PDU type case - CVE-2026-5404: K12 reader: fix a possible stack overflow when writing - CVE-2026-6529: iLBC codec plugin: report the proper decoded length in the multiframe case - CVE-2026-6530: DCP-ETSI dissector: reject a Reed-Solomon reassembly whose total size is not fcount * plen - CVE-2026-6870: GSM RP dissector: stop using a global for reassembly state - CVE-2026-6869: WebSocket dissector: put bounds on zlib decompression - CVE-2026-6521: OpenFlow v5 dissector: bound the OXM, action and match walks so a crafted message cannot drive an infinite loop - CVE-2026-6526: HTTP dissector: check the strstr() results before dereferencing them - CVE-2026-6532: kismet dissector: fix a heap buffer overflow - CVE-2026-5401: AFP Spotlight dissector: add recursion checks - CVE-2026-5406: fcswils dissector: add recursion checks - CVE-2026-5408: BT DHT dissector: add recursion checks - CVE-2026-6538: BEEP dissector: prevent overflow and add recursion checks - CVE-2026-6527: asn2wrs and the generated ASN.1 dissectors: treat open types as potentially cyclic and add recursion checks - CVE-2026-6535: epan: fix potential overflows in zlib decompression Moderate TuxCare License Agreement CVE-2026-5407 CVE-2026-6527 CVE-2026-15164 CVE-2026-6526 CVE-2026-6870 CVE-2026-6521 CVE-2026-15174 CVE-2026-6869 CVE-2026-6522 CVE-2026-6529 CVE-2026-6532 CVE-2026-5408 CVE-2024-4853 CVE-2026-6530 CVE-2026-5401 CVE-2026-6535 CVE-2026-5406 CVE-2023-1994 CVE-2026-6538 CVE-2024-4855 CVE-2026-6867 CVE-2026-15172 CVE-2026-6534 CVE-2026-5404 CVE-2023-1993 CVE-2026-15167 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-52194: fix undefined behavior on float samplerate cast in ircam_read_header by using psf_lrintf (upstream 7ff854d1) Important TuxCare License Agreement CVE-2025-52194 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-34002: add bounds check in xkb CheckModifierMap() to prevent out-of-bounds read of the modifier map request data Critical TuxCare License Agreement CVE-2026-34002 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-15146: validate the address advertised in an FTP PASV/LPSV response against the control connection's peer, so a malicious FTP server cannot redirect the data connection to an arbitrary host (SSRF) Moderate TuxCare License Agreement CVE-2026-15146 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-3276: replace quadratic canonical ordering in unicodedata.normalize() with counting sort for long combining-mark runs Moderate TuxCare License Agreement CVE-2026-3276 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-59847: fix incorrect return-code check of EVP_EncryptFinal / EVP_DecryptFinal that could bypass AES-GCM tag verification - CVE-2026-59850: reject SSH_MSG_CHANNEL_DATA received after remote close to avoid processing data on closed channels Important TuxCare License Agreement CVE-2026-59850 CVE-2026-59847 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-64685: check for unexpected end-of-file before importing each BGR channel to prevent a heap buffer over-read Moderate TuxCare License Agreement CVE-2026-64685 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2026-32288: archive/tar - limit old GNU sparse-map extension data and cap sparse entries across all supported encodings to prevent excessive memory consumption Moderate TuxCare License Agreement CVE-2025-61730 CVE-2025-47912 CVE-2025-22870 CVE-2025-61724 CVE-2025-58185 CVE-2025-58189 CVE-2026-32288 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2025-49506: non-constant-time password and hash comparisons in apr_password_validate() leak information through a timing side channel Critical TuxCare License Agreement CVE-2026-32327 CVE-2026-34502 CVE-2025-49506 CVE-2026-34501 cpe:/o:almalinux:almalinux:9::baseos AlmaLinux 9 - CVE-2023-7207: path traversal via absolute symlink targets under --no-absolute-filenames; drop cpio-2.13-revert-CVE-2015-1197-fix.patch and apply the upstream symlink-placeholder fix instead Moderate TuxCare License Agreement CVE-2023-7207 cpe:/o:almalinux:almalinux:9::baseos /etc/tuxcare-release TuxCare Enterprise Support for AlmaLinux release 9\.2 1 minizip-compat minizip-compat-devel zlib zlib-devel zlib-static binutils binutils-devel binutils-gold cross-binutils-aarch64 cross-binutils-ppc64le cross-binutils-s390x perl perl-Attribute-Handlers perl-AutoLoader perl-AutoSplit perl-B perl-Benchmark perl-Class-Struct perl-Config-Extensions perl-DBM_Filter perl-Devel-Peek perl-Devel-SelfStubber perl-DirHandle perl-Dumpvalue perl-DynaLoader perl-English perl-Errno perl-ExtUtils-Constant perl-ExtUtils-Embed perl-ExtUtils-Miniperl perl-Fcntl perl-File-Basename perl-File-Compare perl-File-Copy perl-File-DosGlob perl-File-Find perl-File-stat perl-FileCache perl-FileHandle perl-FindBin perl-GDBM_File perl-Getopt-Std perl-Hash-Util perl-Hash-Util-FieldHash perl-I18N-Collate perl-I18N-LangTags perl-I18N-Langinfo perl-IO perl-IPC-Open3 perl-Locale-Maketext-Simple perl-Math-Complex perl-Memoize perl-Module-Loaded perl-NDBM_File perl-NEXT perl-Net perl-ODBM_File perl-Opcode perl-POSIX perl-Pod-Functions perl-Pod-Html perl-Safe perl-Search-Dict perl-SelectSaver perl-SelfLoader perl-Symbol perl-Sys-Hostname perl-Term-Complete perl-Term-ReadLine perl-Test perl-Text-Abbrev perl-Thread perl-Thread-Semaphore perl-Tie perl-Tie-File perl-Tie-Memoize perl-Time perl-Time-Piece perl-Unicode-UCD perl-User-pwent perl-autouse perl-base perl-blib perl-debugger perl-deprecate perl-devel perl-diagnostics perl-doc perl-encoding-warnings perl-fields perl-filetest perl-if perl-interpreter perl-less perl-lib perl-libnetcfg perl-libs perl-locale perl-macros perl-meta-notation perl-mro perl-open perl-overload perl-overloading perl-ph perl-sigtrap perl-sort perl-subs perl-tests perl-utils perl-vars perl-vmsish python-unversioned-command python3 python3-debug python3-devel python3-idle python3-libs python3-test python3-tkinter openldap openldap-clients openldap-compat openldap-devel httpd httpd-core httpd-devel httpd-filesystem httpd-manual httpd-tools mod_ldap mod_lua mod_proxy_html mod_session mod_ssl microcode_ctl openssl openssl-devel openssl-libs openssl-perl openssh openssh-askpass openssh-clients openssh-keycat openssh-server openssh-sk-dummy pam_ssh_agent_auth grub2-common grub2-efi-aa64-modules grub2-efi-x64 grub2-efi-x64-cdboot grub2-efi-x64-modules grub2-emu grub2-emu-modules grub2-pc grub2-pc-modules grub2-tools grub2-tools-efi grub2-tools-extra grub2-tools-minimal lemon sqlite sqlite-analyzer sqlite-devel sqlite-doc sqlite-libs sqlite-tcl sqlite-tools gnutls gnutls-c++ gnutls-dane gnutls-devel gnutls-utils libxml2 libxml2-devel libxml2-static python3-libxml2 python3-rpm rpm rpm-apidocs rpm-build rpm-build-libs rpm-cron rpm-devel rpm-libs rpm-plugin-audit rpm-plugin-fapolicyd rpm-plugin-ima rpm-plugin-prioreset rpm-plugin-selinux rpm-plugin-syslog rpm-plugin-systemd-inhibit rpm-sign rpm-sign-libs bind bind-chroot bind-devel bind-dnssec-doc bind-dnssec-utils bind-doc bind-libs bind-license bind-utils python3-bind libssh libssh-config libssh-devel sudo sudo-devel sudo-python-plugin bpftool kernel kernel-abi-stablelists kernel-core kernel-cross-headers kernel-debug kernel-debug-core kernel-debug-devel kernel-debug-devel-matched kernel-debug-modules kernel-debug-modules-core kernel-debug-modules-extra kernel-debug-modules-internal kernel-debug-modules-partner kernel-debug-uki-virt kernel-devel kernel-devel-matched kernel-doc kernel-headers kernel-ipaclones-internal kernel-modules kernel-modules-core kernel-modules-extra kernel-modules-internal kernel-modules-partner kernel-selftests-internal kernel-tools kernel-tools-libs kernel-tools-libs-devel kernel-uki-virt perf python3-perf rtla curl curl-minimal libcurl libcurl-devel libcurl-minimal expat expat-devel expat-static less iwl100-firmware iwl1000-firmware iwl105-firmware iwl135-firmware iwl2000-firmware iwl2030-firmware iwl3160-firmware iwl3945-firmware iwl4965-firmware iwl5000-firmware iwl5150-firmware iwl6000-firmware iwl6000g2a-firmware iwl6000g2b-firmware iwl6050-firmware iwl7260-firmware libertas-sd8686-firmware libertas-sd8787-firmware libertas-usb8388-firmware libertas-usb8388-olpc-firmware linux-firmware linux-firmware-whence liquidio-firmware netronome-firmware file file-devel file-libs file-static python3-file-magic compat-libpthread-nonshared glibc glibc-all-langpacks glibc-benchtests glibc-common glibc-devel glibc-doc glibc-gconv-extra glibc-headers glibc-langpack-aa glibc-langpack-af glibc-langpack-agr glibc-langpack-ak glibc-langpack-am glibc-langpack-an glibc-langpack-anp glibc-langpack-ar glibc-langpack-as glibc-langpack-ast glibc-langpack-ayc glibc-langpack-az glibc-langpack-be glibc-langpack-bem glibc-langpack-ber glibc-langpack-bg glibc-langpack-bhb glibc-langpack-bho glibc-langpack-bi glibc-langpack-bn glibc-langpack-bo glibc-langpack-br glibc-langpack-brx glibc-langpack-bs glibc-langpack-byn glibc-langpack-ca glibc-langpack-ce glibc-langpack-chr glibc-langpack-ckb glibc-langpack-cmn glibc-langpack-crh glibc-langpack-cs glibc-langpack-csb glibc-langpack-cv glibc-langpack-cy glibc-langpack-da glibc-langpack-de glibc-langpack-doi glibc-langpack-dsb glibc-langpack-dv glibc-langpack-dz glibc-langpack-el glibc-langpack-en glibc-langpack-eo glibc-langpack-es glibc-langpack-et glibc-langpack-eu glibc-langpack-fa glibc-langpack-ff glibc-langpack-fi glibc-langpack-fil glibc-langpack-fo glibc-langpack-fr glibc-langpack-fur glibc-langpack-fy glibc-langpack-ga glibc-langpack-gd glibc-langpack-gez glibc-langpack-gl glibc-langpack-gu glibc-langpack-gv glibc-langpack-ha glibc-langpack-hak glibc-langpack-he glibc-langpack-hi glibc-langpack-hif glibc-langpack-hne glibc-langpack-hr glibc-langpack-hsb glibc-langpack-ht glibc-langpack-hu glibc-langpack-hy glibc-langpack-ia glibc-langpack-id glibc-langpack-ig glibc-langpack-ik glibc-langpack-is glibc-langpack-it glibc-langpack-iu glibc-langpack-ja glibc-langpack-ka glibc-langpack-kab glibc-langpack-kk glibc-langpack-kl glibc-langpack-km glibc-langpack-kn glibc-langpack-ko glibc-langpack-kok glibc-langpack-ks glibc-langpack-ku glibc-langpack-kw glibc-langpack-ky glibc-langpack-lb glibc-langpack-lg glibc-langpack-li glibc-langpack-lij glibc-langpack-ln glibc-langpack-lo glibc-langpack-lt glibc-langpack-lv glibc-langpack-lzh glibc-langpack-mag glibc-langpack-mai glibc-langpack-mfe glibc-langpack-mg glibc-langpack-mhr glibc-langpack-mi glibc-langpack-miq glibc-langpack-mjw glibc-langpack-mk glibc-langpack-ml glibc-langpack-mn glibc-langpack-mni glibc-langpack-mnw glibc-langpack-mr glibc-langpack-ms glibc-langpack-mt glibc-langpack-my glibc-langpack-nan glibc-langpack-nb glibc-langpack-nds glibc-langpack-ne glibc-langpack-nhn glibc-langpack-niu glibc-langpack-nl glibc-langpack-nn glibc-langpack-nr glibc-langpack-nso glibc-langpack-oc glibc-langpack-om glibc-langpack-or glibc-langpack-os glibc-langpack-pa glibc-langpack-pap glibc-langpack-pl glibc-langpack-ps glibc-langpack-pt glibc-langpack-quz glibc-langpack-raj glibc-langpack-ro glibc-langpack-ru glibc-langpack-rw glibc-langpack-sa glibc-langpack-sah glibc-langpack-sat glibc-langpack-sc glibc-langpack-sd glibc-langpack-se glibc-langpack-sgs glibc-langpack-shn glibc-langpack-shs glibc-langpack-si glibc-langpack-sid glibc-langpack-sk glibc-langpack-sl glibc-langpack-sm glibc-langpack-so glibc-langpack-sq glibc-langpack-sr glibc-langpack-ss glibc-langpack-st glibc-langpack-sv glibc-langpack-sw glibc-langpack-szl glibc-langpack-ta glibc-langpack-tcy glibc-langpack-te glibc-langpack-tg glibc-langpack-th glibc-langpack-the glibc-langpack-ti glibc-langpack-tig glibc-langpack-tk glibc-langpack-tl glibc-langpack-tn glibc-langpack-to glibc-langpack-tpi glibc-langpack-tr glibc-langpack-ts glibc-langpack-tt glibc-langpack-ug glibc-langpack-uk glibc-langpack-unm glibc-langpack-ur glibc-langpack-uz glibc-langpack-ve glibc-langpack-vi glibc-langpack-wa glibc-langpack-wae glibc-langpack-wal glibc-langpack-wo glibc-langpack-xh glibc-langpack-yi glibc-langpack-yo glibc-langpack-yue glibc-langpack-yuw glibc-langpack-zh glibc-langpack-zu glibc-locale-source glibc-minimal-langpack glibc-nss-devel glibc-static glibc-utils libnsl nscd nss_db nss_hesiod sysroot-aarch64-el9-glibc sysroot-i386-el9-glibc sysroot-x86_64-el9-glibc pam pam-devel pam-docs procps-ng procps-ng-devel procps-ng-i18n cpp cross-gcc-aarch64 cross-gcc-c++-aarch64 gcc gcc-c++ gcc-gdb-plugin gcc-gfortran gcc-offload-nvptx gcc-plugin-annobin gcc-plugin-devel libasan libasan-static libatomic libatomic-static libgcc libgccjit libgccjit-devel libgfortran libgfortran-static libgomp libgomp-offload-nvptx libitm libitm-devel libitm-static liblsan liblsan-static libquadmath libquadmath-devel libquadmath-static libstdc++ libstdc++-devel libstdc++-docs libstdc++-static libtsan libtsan-static libubsan libubsan-static krb5-devel krb5-libs krb5-pkinit krb5-server krb5-server-ldap krb5-workstation libkadm5 shadow-utils shadow-utils-subid shadow-utils-subid-devel glib2 glib2-devel glib2-doc glib2-static glib2-tests systemd systemd-boot-unsigned systemd-container systemd-devel systemd-journal-remote systemd-libs systemd-oomd systemd-pam systemd-resolved systemd-rpm-macros systemd-standalone-sysusers systemd-standalone-tmpfiles systemd-udev wget cups cups-client cups-devel cups-filesystem cups-ipptool cups-libs cups-lpd cups-printerapp python3-unbound unbound unbound-devel unbound-libs squid haproxy python3.11 python3.11-debug python3.11-devel python3.11-idle python3.11-libs python3.11-test python3.11-tkinter libgcrypt libgcrypt-devel ctdb libnetapi libnetapi-devel libsmbclient libsmbclient-devel libwbclient libwbclient-devel python3-samba python3-samba-dc python3-samba-devel python3-samba-test samba samba-client samba-client-libs samba-common samba-common-libs samba-common-tools samba-dc-libs samba-dcerpc samba-devel samba-krb5-printing samba-ldb-ldap-modules samba-libs samba-pidl samba-test samba-test-libs samba-tools samba-usershares samba-vfs-iouring samba-winbind samba-winbind-clients samba-winbind-krb5-locator samba-winbind-modules samba-winexe vim-X11 vim-common vim-enhanced vim-filesystem vim-minimal git git-all git-core git-core-doc git-credential-libsecret git-daemon git-email git-gui git-instaweb git-subtree git-svn gitk gitweb perl-Git perl-Git-SVN php php-bcmath php-cli php-common php-dba php-dbg php-devel php-embedded php-enchant php-ffi php-fpm php-gd php-gmp php-intl php-ldap php-mbstring php-mysqlnd php-odbc php-opcache php-pdo php-pgsql php-process php-snmp php-soap php-xml tomcat tomcat-admin-webapps tomcat-docs-webapp tomcat-el-3.0-api tomcat-jsp-2.3-api tomcat-lib tomcat-servlet-4.0-api tomcat-webapps rsync rsync-daemon postfix postfix-cdb postfix-ldap postfix-lmdb postfix-mysql postfix-pcre postfix-perl-scripts postfix-pgsql postfix-sqlite libvirt libvirt-client libvirt-client-qemu libvirt-daemon libvirt-daemon-config-network libvirt-daemon-config-nwfilter libvirt-daemon-driver-interface libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-kvm libvirt-devel libvirt-docs libvirt-libs libvirt-lock-sanlock libvirt-nss libvirt-wireshark ncurses ncurses-base ncurses-c++-libs ncurses-compat-libs ncurses-devel ncurses-libs ncurses-static ncurses-term mysql mysql-common mysql-devel mysql-errmsg mysql-libs mysql-server mysql-test flatpak flatpak-devel flatpak-libs flatpak-selinux flatpak-session-helper flatpak-tests bubblewrap dhcp-client dhcp-common dhcp-devel dhcp-devel-doc dhcp-libs-static dhcp-relay dhcp-server tigervnc tigervnc-icons tigervnc-license tigervnc-selinux tigervnc-server tigervnc-server-minimal tigervnc-server-module ghostscript ghostscript-doc ghostscript-gtk ghostscript-tools-dvipdf ghostscript-tools-fonts ghostscript-tools-printing ghostscript-x11 libgs libgs-devel postgresql postgresql-contrib postgresql-docs postgresql-plperl postgresql-plpython3 postgresql-pltcl postgresql-private-devel postgresql-private-libs postgresql-server postgresql-server-devel postgresql-static postgresql-test postgresql-test-rpm-macros postgresql-upgrade postgresql-upgrade-devel freeradius freeradius-devel freeradius-doc freeradius-krb5 freeradius-ldap freeradius-mysql freeradius-perl freeradius-postgresql freeradius-rest freeradius-sqlite freeradius-unixODBC freeradius-utils python3-freeradius avahi avahi-autoipd avahi-compat-howl avahi-compat-howl-devel avahi-compat-libdns_sd avahi-compat-libdns_sd-devel avahi-devel avahi-dnsconfd avahi-glib avahi-glib-devel avahi-gobject avahi-gobject-devel avahi-libs avahi-tools avahi-ui avahi-ui-devel avahi-ui-gtk3 avahi-ui-tools libtiff libtiff-devel libtiff-static libtiff-tools c-ares c-ares-devel dnsmasq dnsmasq-utils poppler poppler-cpp poppler-cpp-devel poppler-devel poppler-glib poppler-glib-devel poppler-glib-doc poppler-qt5 poppler-qt5-devel poppler-utils libjpeg-turbo libjpeg-turbo-devel libjpeg-turbo-utils turbojpeg turbojpeg-devel nginx nginx-all-modules nginx-core nginx-filesystem nginx-mod-devel nginx-mod-http-image-filter nginx-mod-http-perl nginx-mod-http-xslt-filter nginx-mod-mail nginx-mod-stream cups-filters cups-filters-devel cups-filters-libs autocorr-af autocorr-bg autocorr-ca autocorr-cs autocorr-da autocorr-de autocorr-dsb autocorr-el autocorr-en autocorr-es autocorr-fa autocorr-fi autocorr-fr autocorr-ga autocorr-hr autocorr-hsb autocorr-hu autocorr-is autocorr-it autocorr-ja autocorr-ko autocorr-lb autocorr-lt autocorr-mn autocorr-nl autocorr-pl autocorr-pt autocorr-ro autocorr-ru autocorr-sk autocorr-sl autocorr-sr autocorr-sv autocorr-tr autocorr-vi autocorr-vro autocorr-zh libreoffice libreoffice-base libreoffice-calc libreoffice-core libreoffice-data libreoffice-draw libreoffice-emailmerge libreoffice-filters libreoffice-gdb-debug-support libreoffice-glade libreoffice-graphicfilter libreoffice-gtk3 libreoffice-help-ar libreoffice-help-bg libreoffice-help-bn libreoffice-help-ca libreoffice-help-cs libreoffice-help-da libreoffice-help-de libreoffice-help-dz libreoffice-help-el libreoffice-help-en libreoffice-help-eo libreoffice-help-es libreoffice-help-et libreoffice-help-eu libreoffice-help-fi libreoffice-help-fr libreoffice-help-gl libreoffice-help-gu libreoffice-help-he libreoffice-help-hi libreoffice-help-hr libreoffice-help-hu libreoffice-help-id libreoffice-help-it libreoffice-help-ja libreoffice-help-ko libreoffice-help-lt libreoffice-help-lv libreoffice-help-nb libreoffice-help-nl libreoffice-help-nn libreoffice-help-pl libreoffice-help-pt-BR libreoffice-help-pt-PT libreoffice-help-ro libreoffice-help-ru libreoffice-help-si libreoffice-help-sk libreoffice-help-sl libreoffice-help-sv libreoffice-help-ta libreoffice-help-tr libreoffice-help-uk libreoffice-help-zh-Hans libreoffice-help-zh-Hant libreoffice-impress libreoffice-langpack-af libreoffice-langpack-ar libreoffice-langpack-as libreoffice-langpack-bg libreoffice-langpack-bn libreoffice-langpack-br libreoffice-langpack-ca libreoffice-langpack-cs libreoffice-langpack-cy libreoffice-langpack-da libreoffice-langpack-de libreoffice-langpack-dz libreoffice-langpack-el libreoffice-langpack-en libreoffice-langpack-eo libreoffice-langpack-es libreoffice-langpack-et libreoffice-langpack-eu libreoffice-langpack-fa libreoffice-langpack-fi libreoffice-langpack-fr libreoffice-langpack-fy libreoffice-langpack-ga libreoffice-langpack-gl libreoffice-langpack-gu libreoffice-langpack-he libreoffice-langpack-hi libreoffice-langpack-hr libreoffice-langpack-hu libreoffice-langpack-id libreoffice-langpack-it libreoffice-langpack-ja libreoffice-langpack-kk libreoffice-langpack-kn libreoffice-langpack-ko libreoffice-langpack-lt libreoffice-langpack-lv libreoffice-langpack-mai libreoffice-langpack-ml libreoffice-langpack-mr libreoffice-langpack-nb libreoffice-langpack-nl libreoffice-langpack-nn libreoffice-langpack-nr libreoffice-langpack-nso libreoffice-langpack-or libreoffice-langpack-pa libreoffice-langpack-pl libreoffice-langpack-pt-BR libreoffice-langpack-pt-PT libreoffice-langpack-ro libreoffice-langpack-ru libreoffice-langpack-si libreoffice-langpack-sk libreoffice-langpack-sl libreoffice-langpack-sr libreoffice-langpack-ss libreoffice-langpack-st libreoffice-langpack-sv libreoffice-langpack-ta libreoffice-langpack-te libreoffice-langpack-th libreoffice-langpack-tn libreoffice-langpack-tr libreoffice-langpack-ts libreoffice-langpack-uk libreoffice-langpack-ve libreoffice-langpack-xh libreoffice-langpack-zh-Hans libreoffice-langpack-zh-Hant libreoffice-langpack-zu libreoffice-librelogo libreoffice-math libreoffice-nlpsolver libreoffice-officebean libreoffice-officebean-common libreoffice-ogltrans libreoffice-opensymbol-fonts libreoffice-pdfimport libreoffice-postgresql libreoffice-pyuno libreoffice-sdk libreoffice-sdk-doc libreoffice-ure libreoffice-ure-common libreoffice-wiki-publisher libreoffice-writer libreoffice-x11 libreoffice-xsltfilter libreofficekit libreofficekit-devel libxslt libxslt-devel ruby ruby-default-gems ruby-devel ruby-doc ruby-libs rubygem-bigdecimal rubygem-bundler rubygem-io-console rubygem-irb rubygem-json rubygem-minitest rubygem-power_assert rubygem-psych rubygem-rake rubygem-rbs rubygem-rdoc rubygem-rexml rubygem-rss rubygem-test-unit rubygem-typeprof rubygems rubygems-devel net-snmp net-snmp-agent-libs net-snmp-devel net-snmp-gui net-snmp-libs net-snmp-perl net-snmp-utils python3-net-snmp libsndfile libsndfile-devel libsndfile-utils libX11 libX11-common libX11-devel libX11-xcb libndp libndp-devel pixman pixman-devel gmp gmp-c++ gmp-devel gmp-static buildah buildah-tests LibRaw LibRaw-devel LibRaw-samples LibRaw-static liblouis liblouis-devel liblouis-doc liblouis-utils python3-louis libsoup libsoup-devel libsoup-doc mod_auth_openidc harfbuzz harfbuzz-devel harfbuzz-icu gtk-update-icon-cache gtk3 gtk3-devel gtk3-devel-docs gtk3-immodule-xim gtk3-immodules gtk3-tests freetype freetype-demos freetype-devel jasper jasper-devel jasper-libs jasper-utils /etc/tuxcare-release TuxCare Enterprise Support for AlmaLinux release 9\.2 1 grafana golang golang-bin golang-docs golang-misc golang-race golang-src golang-tests corosync corosync-vqsim corosynclib corosynclib-devel podman podman-docker podman-gvproxy podman-plugins podman-remote podman-tests libbpf libbpf-devel libbpf-static giflib giflib-devel giflib-utils gstreamer1-plugins-base gstreamer1-plugins-base-devel gstreamer1-plugins-base-tools gstreamer1-plugins-good gstreamer1-plugins-good-gtk gstreamer1-plugins-good-qt webkit2gtk3 webkit2gtk3-devel webkit2gtk3-jsc webkit2gtk3-jsc-devel openexr openexr-devel openexr-libs open-vm-tools open-vm-tools-desktop open-vm-tools-devel open-vm-tools-salt-minion open-vm-tools-sdmp open-vm-tools-test yelp yelp-devel yelp-libs squashfs-tools redis redis-devel redis-doc libipa_hbac libipa_hbac-devel libsss_autofs libsss_certmap libsss_certmap-devel libsss_idmap libsss_idmap-devel libsss_nss_idmap libsss_nss_idmap-devel libsss_simpleifp libsss_simpleifp-devel libsss_sudo python3-libipa_hbac python3-libsss_nss_idmap python3-sss python3-sss-murmur python3-sssdconfig sssd sssd-ad sssd-client sssd-common sssd-common-pac sssd-dbus sssd-idp sssd-ipa sssd-kcm sssd-krb5 sssd-krb5-common sssd-ldap sssd-nfs-idmap sssd-polkit-rules sssd-proxy sssd-tools sssd-winbind-idmap gawk gawk-all-langpacks gawk-devel gawk-doc bsdcat bsdcpio bsdtar libarchive libarchive-devel libfastjson libfastjson-devel jose libjose libjose-devel xdg-utils emacs emacs-common emacs-devel emacs-filesystem emacs-lucid emacs-nox emacs-terminal java-11-openjdk java-11-openjdk-demo java-11-openjdk-devel java-11-openjdk-headless java-11-openjdk-javadoc java-11-openjdk-javadoc-zip java-11-openjdk-jmods java-11-openjdk-src java-11-openjdk-static-libs java-1.8.0-openjdk java-1.8.0-openjdk-demo java-1.8.0-openjdk-demo-fastdebug java-1.8.0-openjdk-demo-slowdebug java-1.8.0-openjdk-devel java-1.8.0-openjdk-devel-fastdebug java-1.8.0-openjdk-devel-slowdebug java-1.8.0-openjdk-fastdebug java-1.8.0-openjdk-headless java-1.8.0-openjdk-headless-fastdebug java-1.8.0-openjdk-headless-slowdebug java-1.8.0-openjdk-javadoc java-1.8.0-openjdk-javadoc-zip java-1.8.0-openjdk-slowdebug java-1.8.0-openjdk-src java-1.8.0-openjdk-src-fastdebug java-1.8.0-openjdk-src-slowdebug jq jq-devel libreswan nodejs nodejs-devel nodejs-docs nodejs-full-i18n nodejs-libs npm v8-devel traceroute dovecot dovecot-devel dovecot-mysql dovecot-pgsql dovecot-pigeonhole graphviz-devel graphviz-gd graphviz-lua graphviz-ocaml graphviz-perl graphviz-python3 graphviz-ruby graphviz-tcl gstreamer1-plugins-bad-free gstreamer1-plugins-bad-free-devel java-17-openjdk java-17-openjdk-demo java-17-openjdk-demo-fastdebug java-17-openjdk-demo-slowdebug java-17-openjdk-devel java-17-openjdk-devel-fastdebug java-17-openjdk-devel-slowdebug java-17-openjdk-fastdebug java-17-openjdk-headless java-17-openjdk-headless-fastdebug java-17-openjdk-headless-slowdebug java-17-openjdk-javadoc java-17-openjdk-javadoc-zip java-17-openjdk-jmods java-17-openjdk-jmods-fastdebug java-17-openjdk-jmods-slowdebug java-17-openjdk-slowdebug java-17-openjdk-src java-17-openjdk-src-fastdebug java-17-openjdk-src-slowdebug java-17-openjdk-static-libs java-17-openjdk-static-libs-fastdebug java-17-openjdk-static-libs-slowdebug iptraf-ng wpa_supplicant iputils iputils-ninfod libblockdev libblockdev-crypto libblockdev-crypto-devel libblockdev-devel libblockdev-dm libblockdev-dm-devel libblockdev-fs libblockdev-fs-devel libblockdev-kbd libblockdev-kbd-devel libblockdev-loop libblockdev-loop-devel libblockdev-lvm libblockdev-lvm-dbus libblockdev-lvm-dbus-devel libblockdev-lvm-devel libblockdev-mdraid libblockdev-mdraid-devel libblockdev-mpath libblockdev-mpath-devel libblockdev-nvdimm libblockdev-nvdimm-devel libblockdev-nvme libblockdev-nvme-devel libblockdev-part libblockdev-part-devel libblockdev-plugins-all libblockdev-swap libblockdev-swap-devel libblockdev-tools libblockdev-utils libblockdev-utils-devel python3-blockdev taglib taglib-devel bluez bluez-cups bluez-hid2hci bluez-libs bluez-libs-devel bluez-mesh bluez-obexd mod_dav_svn python3-subversion subversion subversion-devel subversion-gnome subversion-javahl subversion-libs subversion-perl subversion-ruby subversion-tools libvpx libvpx-devel libvpx-utils iperf3 iperf3-devel orc orc-compiler orc-devel orc-doc go-toolset zziplib zziplib-devel zziplib-utils nspr nspr-devel nss nss-devel nss-pkcs11-devel nss-softokn nss-softokn-devel nss-softokn-freebl nss-softokn-freebl-devel nss-sysinit nss-tools nss-util nss-util-devel protobuf protobuf-compiler protobuf-devel protobuf-emacs protobuf-lite protobuf-lite-devel protobuf-lite-static protobuf-static protobuf-vim python3-protobuf gimp gimp-devel gimp-devel-tools gimp-libs lldpd lldpd-devel gdk-pixbuf2 gdk-pixbuf2-devel gdk-pixbuf2-modules gdk-pixbuf2-tests yajl yajl-devel perl-HTTP-Tiny perl-CPAN perl-CPAN-tests pki-jackson-databind cloud-init tpm2-tss tpm2-tss-devel qemu-guest-agent qemu-img qemu-kvm qemu-kvm-audio-pa qemu-kvm-block-curl qemu-kvm-block-rbd qemu-kvm-common qemu-kvm-core qemu-kvm-device-display-virtio-gpu qemu-kvm-device-display-virtio-gpu-pci qemu-kvm-device-display-virtio-vga qemu-kvm-device-usb-host qemu-kvm-device-usb-redirect qemu-kvm-docs qemu-kvm-tests qemu-kvm-tools qemu-kvm-ui-egl-headless qemu-kvm-ui-opengl qemu-pr-helper opensc libmicrohttpd libmicrohttpd-devel libmicrohttpd-doc exiv2 exiv2-devel exiv2-doc exiv2-libs protobuf-c protobuf-c-compiler protobuf-c-devel libpq libpq-devel containernetworking-plugins frr frr-selinux doxygen2man libqb libqb-devel libqb-tests qt5-qtbase qt5-qtbase-common qt5-qtbase-devel qt5-qtbase-examples qt5-qtbase-gui qt5-qtbase-mysql qt5-qtbase-odbc qt5-qtbase-postgresql qt5-qtbase-private-devel qt5-qtbase-static qt5-qtbase-tests postgresql-jdbc postgresql-jdbc-javadoc apr apr-devel freeglut freeglut-devel libuv libuv-devel libuv-static delve mod_security mod_security-mlogc skopeo skopeo-tests toolbox toolbox-tests dpdk dpdk-devel dpdk-doc dpdk-tools git-lfs icu libicu libicu-devel libicu-doc mod_http2 389-ds-base 389-ds-base-devel 389-ds-base-libs 389-ds-base-snmp python3-lib389 grafana-pcp perl-App-cpanminus perl-App-cpanminus-tests perl-FCGI libtasn1 libtasn1-devel libtasn1-tools mod_jk python3.11-urllib3 qt5-qt3d qt5-qt3d-devel qt5-qt3d-examples qt5-qt3d-tests edk2-aarch64 edk2-ovmf edk2-tools edk2-tools-doc pmix pmix-devel pmix-pmi pmix-pmi-devel pmix-tools libudisks2 libudisks2-devel udisks2 udisks2-iscsi udisks2-lsm udisks2-lvm2 xorg-x11-server-Xwayland xorg-x11-server-Xwayland-devel python3.11-cryptography varnish varnish-devel varnish-docs ipa-client ipa-client-common ipa-client-epn ipa-client-samba ipa-common ipa-python-compat ipa-selinux ipa-server ipa-server-common ipa-server-dns ipa-server-trust-ad python3-ipaclient python3-ipalib python3-ipaserver python3-ipatests NetworkManager-libreswan NetworkManager-libreswan-gnome runc pcp pcp-conf pcp-devel pcp-doc pcp-export-pcp2elasticsearch pcp-export-pcp2graphite pcp-export-pcp2influxdb pcp-export-pcp2json pcp-export-pcp2spark pcp-export-pcp2xml pcp-export-pcp2zabbix pcp-export-zabbix-agent pcp-gui pcp-import-collectl2pcp pcp-import-ganglia2pcp pcp-import-iostat2pcp pcp-import-mrtg2pcp pcp-import-sar2pcp pcp-libs pcp-libs-devel pcp-pmda-activemq pcp-pmda-apache pcp-pmda-bash pcp-pmda-bcc pcp-pmda-bind2 pcp-pmda-bonding pcp-pmda-bpf pcp-pmda-bpftrace pcp-pmda-cifs pcp-pmda-cisco pcp-pmda-dbping pcp-pmda-denki pcp-pmda-dm pcp-pmda-docker pcp-pmda-ds389 pcp-pmda-ds389log pcp-pmda-elasticsearch pcp-pmda-gfs2 pcp-pmda-gluster pcp-pmda-gpfs pcp-pmda-gpsd pcp-pmda-hacluster pcp-pmda-haproxy pcp-pmda-infiniband pcp-pmda-json pcp-pmda-libvirt pcp-pmda-lio pcp-pmda-lmsensors pcp-pmda-logger pcp-pmda-lustre pcp-pmda-lustrecomm pcp-pmda-mailq pcp-pmda-memcache pcp-pmda-mic pcp-pmda-mongodb pcp-pmda-mounts pcp-pmda-mssql pcp-pmda-mysql pcp-pmda-named pcp-pmda-netcheck pcp-pmda-netfilter pcp-pmda-news pcp-pmda-nfsclient pcp-pmda-nginx pcp-pmda-nvidia-gpu pcp-pmda-openmetrics pcp-pmda-openvswitch pcp-pmda-oracle pcp-pmda-pdns pcp-pmda-perfevent pcp-pmda-podman pcp-pmda-postfix pcp-pmda-postgresql pcp-pmda-rabbitmq pcp-pmda-redis pcp-pmda-roomtemp pcp-pmda-rsyslog pcp-pmda-samba pcp-pmda-sendmail pcp-pmda-shping pcp-pmda-slurm pcp-pmda-smart pcp-pmda-snmp pcp-pmda-sockets pcp-pmda-statsd pcp-pmda-summary pcp-pmda-systemd pcp-pmda-trace pcp-pmda-unbound pcp-pmda-weblog pcp-pmda-zimbra pcp-pmda-zswap pcp-selinux pcp-system-tools pcp-testsuite pcp-zeroconf perl-PCP-LogImport perl-PCP-LogSummary perl-PCP-MMV perl-PCP-PMDA python3-pcp cockpit cockpit-bridge cockpit-doc cockpit-packagekit cockpit-pcp cockpit-storaged cockpit-system cockpit-tests cockpit-ws pki-jackson-core NetworkManager NetworkManager-adsl NetworkManager-bluetooth NetworkManager-cloud-setup NetworkManager-config-connectivity-redhat NetworkManager-config-server NetworkManager-dispatcher-routing-rules NetworkManager-initscripts-updown NetworkManager-libnm NetworkManager-libnm-devel NetworkManager-ovs NetworkManager-ppp NetworkManager-team NetworkManager-tui NetworkManager-wifi NetworkManager-wwan pki-servlet-4.0-api pki-servlet-engine tpm2-tools python3.11-setuptools python3.11-setuptools-wheel lasso lasso-devel perl-lasso python3-lasso compat-openssl11 osbuild-composer osbuild-composer-core osbuild-composer-dnf-json osbuild-composer-tests osbuild-composer-worker pki-jackson-jaxrs-json-provider pki-jackson-jaxrs-providers pki-jackson-jaxrs-providers-datatypes pki-jackson-jaxrs-providers-javadoc pki-jackson-jaxrs-providers-parent pki-jackson-module-jaxb-annotations pki-jackson-modules-base libnbd libnbd-bash-completion libnbd-devel nbdfuse ocaml-libnbd ocaml-libnbd-devel python3-libnbd gstreamer1 gstreamer1-devel pki-jackson-annotations pki-jackson-annotations-javadoc gnome-remote-desktop tracker-miners libpng libpng-devel libpng-static libpng-tools python3.11-pip python3.11-pip-wheel libnghttp2 libnghttp2-devel nghttp2 python3-setuptools python3-setuptools-wheel go-filesystem go-rpm-macros go-rpm-templates go-srpm-macros wireshark wireshark-cli wireshark-devel gegl04 gegl04-devel gegl04-devel-docs gegl04-tools keylime keylime-base keylime-registrar keylime-selinux keylime-tenant keylime-verifier python3-keylime mod_md mariadb mariadb-backup mariadb-common mariadb-devel mariadb-embedded mariadb-embedded-devel mariadb-errmsg mariadb-gssapi-server mariadb-oqgraph-engine mariadb-pam mariadb-server mariadb-server-galera mariadb-server-utils mariadb-test gpsd-minimal gpsd-minimal-clients tar gnupg2 gnupg2-smime brotli brotli-devel libbrotli python3-brotli ImageMagick ImageMagick-c++ ImageMagick-c++-devel ImageMagick-devel ImageMagick-djvu ImageMagick-doc ImageMagick-libs ImageMagick-perl libpng15 munge munge-devel munge-libs butane butane-redistributable libnfsidmap libnfsidmap-devel nfs-stats-utils nfs-utils nfs-utils-coreos nfsv4-client-utils capstone capstone-devel capstone-java python3-capstone opencryptoki opencryptoki-devel opencryptoki-icsftok opencryptoki-libs opencryptoki-swtok pyOpenSSL-doc python3-pyOpenSSL gd gd-devel gd-progs colord colord-devel colord-devel-docs colord-extra-profiles colord-libs colord-tests libexif libexif-devel libexif-doc perl-XML-Parser plexus-utils plexus-utils-javadoc pcre2 pcre2-devel pcre2-static pcre2-syntax pcre2-tools pcre2-utf16 pcre2-utf32 bpftrace unzip libXpm libXpm-devel exim exim-greylist exim-mon exim-mysql exim-pgsql freeipmi freeipmi-bmc-watchdog freeipmi-devel freeipmi-ipmidetectd freeipmi-ipmiseld libcap libcap-devel libcap-static mod_proxy_cluster firewall-applet firewall-config firewalld firewalld-filesystem python3-firewall memcached memcached-devel memcached-selinux cyrus-imapd cyrus-imapd-devel cyrus-imapd-doc-extra cyrus-imapd-libs cyrus-imapd-utils cyrus-imapd-virusscan perl-Cyrus python3-tbb tbb tbb-devel tbb-doc nano thunderbird mpg123 mpg123-devel mpg123-libs mpg123-plugins-pulseaudio PackageKit PackageKit-command-not-found PackageKit-cron PackageKit-glib PackageKit-glib-devel PackageKit-gstreamer-plugin PackageKit-gtk3-module ansible-core ansible-test motif motif-devel motif-static mutt openjpeg2 openjpeg2-devel openjpeg2-devel-docs openjpeg2-tools exfatprogs xz xz-devel xz-libs xz-lzma-compat xz-static aide log4j log4j-jcl log4j-slf4j log4j-web gdb gdb-doc gdb-gdbserver gdb-headless gdb-minimal OpenIPMI OpenIPMI-devel OpenIPMI-lanserv OpenIPMI-libs OpenIPMI-perl python3-openipmi qt5-qtsvg qt5-qtsvg-devel qt5-qtsvg-examples qt5-qtsvg-tests libluksmeta libluksmeta-devel luksmeta libsolv libsolv-demo libsolv-devel libsolv-tools perl-solv python3-solv ruby-solv glusterfs glusterfs-api glusterfs-api-devel glusterfs-cli glusterfs-client-xlators glusterfs-cloudsync-plugins glusterfs-devel glusterfs-fuse glusterfs-libs glusterfs-rdma python3-gluster hostapd hostapd-logwatch socat byacc ant ant-antlr ant-apache-bcel ant-apache-bsf ant-apache-oro ant-apache-regexp ant-apache-resolver ant-apache-xalan2 ant-commons-logging ant-commons-net ant-imageio ant-javadoc ant-javamail ant-jdepend ant-jmf ant-jsch ant-junit ant-junit5 ant-lib ant-manual ant-swing ant-testutil ant-xz hplip hplip-common hplip-libs libsane-hpaio evince evince-devel evince-dvi evince-libs evince-nautilus evince-previewer evince-thumbnailer perl-IO-Compress perl-IO-Compress-tests libblkid libblkid-devel libfdisk libfdisk-devel libmount libmount-devel libsmartcols libsmartcols-devel libuuid libuuid-devel python3-libmount util-linux util-linux-core util-linux-user uuidd dracut dracut-caps dracut-config-generic dracut-config-rescue dracut-live dracut-network dracut-squash dracut-tools perl-Archive-Tar radvd gzip coreutils coreutils-common coreutils-single libinput libinput-devel libinput-test libinput-utils python3-rrdtool rrdtool rrdtool-devel rrdtool-doc rrdtool-lua rrdtool-perl rrdtool-ruby rrdtool-tcl perl-XML-LibXML blas blas-devel blas-static blas64 blas64_ lapack lapack-devel lapack-static lapack64 lapack64_ oci-seccomp-bpf-hook patch libXfont2 libXfont2-devel wavpack wavpack-devel leptonica leptonica-devel leptonica-tools cifs-utils cifs-utils-devel cifs-utils-info pam_cifscreds firefox firefox-x11 jsoup jsoup-javadoc ldns ldns-devel ldns-doc ldns-utils perl-ldns python3-ldns acl libacl libacl-devel perl-DBI hwloc hwloc-devel hwloc-gui hwloc-libs hwloc-plugins network-scripts-ppp ppp ppp-devel maven maven-javadoc maven-lib maven-openjdk11 maven-openjdk17 maven-openjdk8 apr-util apr-util-bdb apr-util-devel apr-util-ldap apr-util-mysql apr-util-odbc apr-util-openssl apr-util-pgsql apr-util-sqlite cpio x86_64 0:1.2.11-39.el9.tuxcare.els1 D36CB86CB86B3716 d07bf2a08d50eb66 i686|x86_64 0:1.2.11-39.el9.tuxcare.els1 i686|x86_64 0:2.35.2-37.el9.tuxcare.els1 x86_64 0:2.35.2-37.el9.tuxcare.els1 x86_64 4:5.32.1-480.el9.tuxcare.els1 0:1.01-480.el9.tuxcare.els1 0:5.74-480.el9.tuxcare.els1 x86_64 0:1.80-480.el9.tuxcare.els1 0:1.23-480.el9.tuxcare.els1 0:0.66-480.el9.tuxcare.els1 0:0.03-480.el9.tuxcare.els1 0:0.06-480.el9.tuxcare.els1 x86_64 0:1.28-480.el9.tuxcare.els1 0:1.06-480.el9.tuxcare.els1 0:1.05-480.el9.tuxcare.els1 0:2.27-480.el9.tuxcare.els1 x86_64 0:1.47-480.el9.tuxcare.els1 0:1.11-480.el9.tuxcare.els1 x86_64 0:1.30-480.el9.tuxcare.els1 0:0.25-480.el9.tuxcare.els1 0:1.35-480.el9.tuxcare.els1 0:1.09-480.el9.tuxcare.els1 x86_64 0:1.13-480.el9.tuxcare.els1 0:2.85-480.el9.tuxcare.els1 0:1.100.600-480.el9.tuxcare.els1 0:2.34-480.el9.tuxcare.els1 x86_64 0:1.12-480.el9.tuxcare.els1 0:1.37-480.el9.tuxcare.els1 0:1.10-480.el9.tuxcare.els1 0:2.03-480.el9.tuxcare.els1 0:1.51-480.el9.tuxcare.els1 x86_64 0:1.18-480.el9.tuxcare.els1 0:1.12-480.el9.tuxcare.els1 x86_64 0:0.23-480.el9.tuxcare.els1 x86_64 0:1.20-480.el9.tuxcare.els1 0:1.02-480.el9.tuxcare.els1 0:0.44-480.el9.tuxcare.els1 x86_64 0:0.19-480.el9.tuxcare.els1 x86_64 0:1.43-480.el9.tuxcare.els1 0:1.21-480.el9.tuxcare.els1 1:0.21-480.el9.tuxcare.els1 0:1.59-480.el9.tuxcare.els1 0:1.03-480.el9.tuxcare.els1 1:0.08-480.el9.tuxcare.els1 x86_64 0:1.15-480.el9.tuxcare.els1 0:0.67-480.el9.tuxcare.els1 x86_64 0:1.16-480.el9.tuxcare.els1 x86_64 0:1.48-480.el9.tuxcare.els1 x86_64 0:1.94-480.el9.tuxcare.els1 0:1.13-480.el9.tuxcare.els1 0:1.25-480.el9.tuxcare.els1 0:2.41-480.el9.tuxcare.els1 0:1.07-480.el9.tuxcare.els1 0:1.26-480.el9.tuxcare.els1 0:1.08-480.el9.tuxcare.els1 x86_64 0:1.23-480.el9.tuxcare.els1 0:1.403-480.el9.tuxcare.els1 0:1.17-480.el9.tuxcare.els1 0:1.31-480.el9.tuxcare.els1 0:3.05-480.el9.tuxcare.els1 0:2.13-480.el9.tuxcare.els1 0:4.6-480.el9.tuxcare.els1 0:1.1-480.el9.tuxcare.els1 x86_64 0:1.3401-480.el9.tuxcare.els1 0:0.75-480.el9.tuxcare.els1 0:1.56-480.el9.tuxcare.els1 0:0.04-480.el9.tuxcare.els1 i686|x86_64 4:5.32.1-480.el9.tuxcare.els1 0:5.32.1-480.el9.tuxcare.els1 0:0.13-480.el9.tuxcare.els1 0:0.60.800-480.el9.tuxcare.els1 x86_64 0:0.65-480.el9.tuxcare.els1 4:5.32.1-480.el9.tuxcare.els1 0:0.02-480.el9.tuxcare.els1 x86_64 0:5.32.1-480.el9.tuxcare.els1 0:2.04-480.el9.tuxcare.els1 0:1.04-480.el9.tuxcare.els1 0:3.9.16-1.el9_2.2.tuxcare.els1 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els1 i686|x86_64 0:2.6.2-3.el9.tuxcare.els1 x86_64 0:2.6.2-3.el9.tuxcare.els1 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els1 0:2.4.53-11.el9_2.5.tuxcare.els1 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els1 4:20220809-2.20231114.2.el9_2.tuxcare.els1 x86_64 4:5.32.1-480.el9.tuxcare.els2 0:1.01-480.el9.tuxcare.els2 0:5.74-480.el9.tuxcare.els2 x86_64 0:1.80-480.el9.tuxcare.els2 0:1.23-480.el9.tuxcare.els2 0:0.66-480.el9.tuxcare.els2 0:0.03-480.el9.tuxcare.els2 0:0.06-480.el9.tuxcare.els2 x86_64 0:1.28-480.el9.tuxcare.els2 0:1.06-480.el9.tuxcare.els2 0:1.05-480.el9.tuxcare.els2 0:2.27-480.el9.tuxcare.els2 x86_64 0:1.47-480.el9.tuxcare.els2 0:1.11-480.el9.tuxcare.els2 x86_64 0:1.30-480.el9.tuxcare.els2 0:0.25-480.el9.tuxcare.els2 0:1.35-480.el9.tuxcare.els2 0:1.09-480.el9.tuxcare.els2 x86_64 0:1.13-480.el9.tuxcare.els2 0:2.85-480.el9.tuxcare.els2 0:1.100.600-480.el9.tuxcare.els2 0:2.34-480.el9.tuxcare.els2 x86_64 0:1.12-480.el9.tuxcare.els2 0:1.37-480.el9.tuxcare.els2 0:1.10-480.el9.tuxcare.els2 0:2.03-480.el9.tuxcare.els2 0:1.51-480.el9.tuxcare.els2 x86_64 0:1.18-480.el9.tuxcare.els2 0:1.12-480.el9.tuxcare.els2 x86_64 0:0.23-480.el9.tuxcare.els2 x86_64 0:1.20-480.el9.tuxcare.els2 0:1.02-480.el9.tuxcare.els2 0:0.44-480.el9.tuxcare.els2 x86_64 0:0.19-480.el9.tuxcare.els2 x86_64 0:1.43-480.el9.tuxcare.els2 0:1.21-480.el9.tuxcare.els2 1:0.21-480.el9.tuxcare.els2 0:1.59-480.el9.tuxcare.els2 0:1.03-480.el9.tuxcare.els2 1:0.08-480.el9.tuxcare.els2 x86_64 0:1.15-480.el9.tuxcare.els2 0:0.67-480.el9.tuxcare.els2 x86_64 0:1.16-480.el9.tuxcare.els2 x86_64 0:1.48-480.el9.tuxcare.els2 x86_64 0:1.94-480.el9.tuxcare.els2 0:1.13-480.el9.tuxcare.els2 0:1.25-480.el9.tuxcare.els2 0:2.41-480.el9.tuxcare.els2 0:1.07-480.el9.tuxcare.els2 0:1.26-480.el9.tuxcare.els2 0:1.08-480.el9.tuxcare.els2 x86_64 0:1.23-480.el9.tuxcare.els2 0:1.403-480.el9.tuxcare.els2 0:1.17-480.el9.tuxcare.els2 0:1.31-480.el9.tuxcare.els2 0:3.05-480.el9.tuxcare.els2 0:2.13-480.el9.tuxcare.els2 0:4.6-480.el9.tuxcare.els2 0:1.1-480.el9.tuxcare.els2 x86_64 0:1.3401-480.el9.tuxcare.els2 0:0.75-480.el9.tuxcare.els2 0:1.56-480.el9.tuxcare.els2 0:0.04-480.el9.tuxcare.els2 i686|x86_64 4:5.32.1-480.el9.tuxcare.els2 0:5.32.1-480.el9.tuxcare.els2 0:0.13-480.el9.tuxcare.els2 0:0.60.800-480.el9.tuxcare.els2 x86_64 0:0.65-480.el9.tuxcare.els2 4:5.32.1-480.el9.tuxcare.els2 0:0.02-480.el9.tuxcare.els2 x86_64 0:5.32.1-480.el9.tuxcare.els2 0:2.04-480.el9.tuxcare.els2 0:1.04-480.el9.tuxcare.els2 x86_64 0:8.7p1-30.el9_2.tuxcare.els3 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els3 1:2.06-61el9_2.1.alma.tuxcare.els1 x86_64 1:2.06-61el9_2.1.alma.tuxcare.els1 x86_64 0:3.34.1-6.el9_1.tuxcare.els1 i686|x86_64 0:3.34.1-6.el9_1.tuxcare.els1 0:3.34.1-6.el9_1.tuxcare.els1 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els1 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els1 x86_64 0:4.16.1.3-22.el9.tuxcare.els1 0:4.16.1.3-22.el9.tuxcare.els1 i686|x86_64 0:4.16.1.3-22.el9.tuxcare.els1 x86_64 0:8.7p1-30.el9_2.tuxcare.els4 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els4 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els1 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els1 32:9.16.23-11.el9_2.2.tuxcare.els1 i686|x86_64 0:0.10.4-8.el9.tuxcare.els1 0:0.10.4-8.el9.tuxcare.els1 x86_64 0:1.9.5p2-9.el9.tuxcare.els1 i686|x86_64 0:0.10.4-8.el9.tuxcare.els2 0:0.10.4-8.el9.tuxcare.els2 x86_64 0:1.9.5p2-9.el9.tuxcare.els2 0:3.9.16-1.el9_2.2.tuxcare.els2 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els2 x86_64 0:7.76.1-23.el9_2.4.tuxcare.els1 i686|x86_64 0:7.76.1-23.el9_2.4.tuxcare.els1 x86_64 0:7.76.1-23.el9_2.4.tuxcare.els2 i686|x86_64 0:7.76.1-23.el9_2.4.tuxcare.els2 1:2.06-61.el9_2.1.alma.tuxcare.els2 x86_64 1:2.06-61.el9_2.1.alma.tuxcare.els2 i686|x86_64 0:2.5.0-1.el9.tuxcare.els1 x86_64 0:2.5.0-1.el9.tuxcare.els1 x86_64 0:590-2.el9_2.tuxcare.els1 x86_64 0:590-2.el9_2.tuxcare.els2 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els2 0:2.4.53-11.el9_2.5.tuxcare.els2 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els2 0:39.31.5.1-135.el9_2.alma.1.tuxcare.els3 1:39.31.5.1-135.el9_2.alma.1.tuxcare.els3 0:18.168.6.1-135.el9_2.alma.1.tuxcare.els3 1:25.30.13.0-135.el9_2.alma.1.tuxcare.els3 0:15.32.2.9-135.el9_2.alma.1.tuxcare.els3 0:228.61.2.24-135.el9_2.alma.1.tuxcare.els3 0:8.83.5.1_1-135.el9_2.alma.1.tuxcare.els3 0:8.24.2.2-135.el9_2.alma.1.tuxcare.els3 0:9.221.4.1-135.el9_2.alma.1.tuxcare.els3 0:41.28.5.1-135.el9_2.alma.1.tuxcare.els3 0:20230310-135.el9_2.alma.1.tuxcare.els3 2:20230310-135.el9_2.alma.1.tuxcare.els3 x86_64 0:5.39-12.1.el9_2.tuxcare.els1 i686|x86_64 0:5.39-12.1.el9_2.tuxcare.els1 0:5.39-12.1.el9_2.tuxcare.els1 x86_64 0:2.34-60.el9_2.7.tuxcare.els1 i686|x86_64 0:2.34-60.el9_2.7.tuxcare.els1 0:2.34-60.el9_2.7.tuxcare.els1 i686|x86_64 0:1.5.1-14.el9.tuxcare.els1 x86_64 0:1.5.1-14.el9.tuxcare.els1 i686|x86_64 0:3.3.17-11.el9.tuxcare.els1 0:3.3.17-11.el9.tuxcare.els1 x86_64 0:11.3.1-4.3.el9.alma.tuxcare.els1 i686|x86_64 0:11.3.1-4.3.el9.alma.tuxcare.els1 i686|x86_64 0:1.20.1-9.el9_2.tuxcare.els1 x86_64 0:1.20.1-9.el9_2.tuxcare.els1 i686|x86_64 0:0.10.4-8.el9.tuxcare.els3 0:0.10.4-8.el9.tuxcare.els3 x86_64 0:2.34-60.el9_2.7.tuxcare.els2 i686|x86_64 0:2.34-60.el9_2.7.tuxcare.els2 0:2.34-60.el9_2.7.tuxcare.els2 x86_64 2:4.9-6.el9.tuxcare.els1 i686|x86_64 2:4.9-6.el9.tuxcare.els1 x86_64 0:7.76.1-23.el9_2.4.tuxcare.els3 i686|x86_64 0:7.76.1-23.el9_2.4.tuxcare.els3 x86_64 0:8.7p1-30.el9_2.tuxcare.els5 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els5 i686|x86_64 0:1.20.1-9.el9_2.tuxcare.els2 x86_64 0:1.20.1-9.el9_2.tuxcare.els2 0:3.9.16-1.el9_2.2.tuxcare.els3 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els3 x86_64 0:8.7p1-30.el9_2.tuxcare.els6 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els6 i686|x86_64 0:2.68.4-6.el9.tuxcare.els1 0:2.68.4-6.el9.tuxcare.els1 x86_64 0:2.68.4-6.el9.tuxcare.els1 i686|x86_64 0:252-14.el9_2.3.tuxcare.els1 x86_64 0:252-14.el9_2.3.tuxcare.els1 0:252-14.el9_2.3.tuxcare.els1 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els3 0:2.4.53-11.el9_2.5.tuxcare.els3 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els3 1:2.06-61.el9_2.1.alma.tuxcare.els4 x86_64 1:2.06-61.el9_2.1.alma.tuxcare.els4 i686|x86_64 0:2.5.0-1.el9.tuxcare.els2 x86_64 0:2.5.0-1.el9.tuxcare.els2 x86_64 0:1.21.1-7.el9.tuxcare.els1 0:3.9.16-1.el9_2.2.tuxcare.els4 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els4 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els3 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els3 32:9.16.23-11.el9_2.2.tuxcare.els3 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els4 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els4 32:9.16.23-11.el9_2.2.tuxcare.els4 i686|x86_64 0:1.20.1-9.el9_2.tuxcare.els3 x86_64 0:1.20.1-9.el9_2.tuxcare.els3 0:3.9.16-1.el9_2.2.tuxcare.els5 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els5 0:3.9.16-1.el9_2.2.tuxcare.els6 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els6 0:39.31.5.1-135.el9_2.alma.1.tuxcare.els4 1:39.31.5.1-135.el9_2.alma.1.tuxcare.els4 0:18.168.6.1-135.el9_2.alma.1.tuxcare.els4 1:25.30.13.0-135.el9_2.alma.1.tuxcare.els4 0:15.32.2.9-135.el9_2.alma.1.tuxcare.els4 0:228.61.2.24-135.el9_2.alma.1.tuxcare.els4 0:8.83.5.1_1-135.el9_2.alma.1.tuxcare.els4 0:8.24.2.2-135.el9_2.alma.1.tuxcare.els4 0:9.221.4.1-135.el9_2.alma.1.tuxcare.els4 0:41.28.5.1-135.el9_2.alma.1.tuxcare.els4 0:20230310-135.el9_2.alma.1.tuxcare.els4 2:20230310-135.el9_2.alma.1.tuxcare.els4 i686|x86_64 0:2.68.4-6.el9.tuxcare.els2 0:2.68.4-6.el9.tuxcare.els2 x86_64 0:2.68.4-6.el9.tuxcare.els2 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els4 0:2.4.53-11.el9_2.5.tuxcare.els4 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els4 i686|x86_64 0:1.20.1-9.el9_2.tuxcare.els5 x86_64 0:1.20.1-9.el9_2.tuxcare.els5 i686|x86_64 0:2.5.0-1.el9.tuxcare.els3 x86_64 0:2.5.0-1.el9.tuxcare.els3 0:3.9.16-1.el9_2.2.tuxcare.els7 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els7 i686|x86_64 0:1.20.1-9.el9_2.tuxcare.els6 x86_64 0:1.20.1-9.el9_2.tuxcare.els6 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els1 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els1 1:2.3.3op2-16.el9_2.1.tuxcare.els1 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els3 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els3 1:2.3.3op2-16.el9_2.1.tuxcare.els3 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els4 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els4 1:2.3.3op2-16.el9_2.1.tuxcare.els4 x86_64 0:1.16.2-3.el9.tuxcare.els1 i686|x86_64 0:1.16.2-3.el9.tuxcare.els1 0:3.9.16-1.el9_2.2.tuxcare.els8 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els8 x86_64 7:5.5-5.el9_2.1.tuxcare.els1 i686|x86_64 0:1.5.1-14.el9.tuxcare.els2 x86_64 0:1.5.1-14.el9.tuxcare.els2 x86_64 7:5.5-5.el9_2.1.tuxcare.els3 x86_64 0:2.4.17-6.el9.tuxcare.els1 x86_64 0:2.4.17-6.el9.tuxcare.els3 0:3.9.16-1.el9_2.2.tuxcare.els9 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els9 x86_64 7:5.5-5.el9_2.1.tuxcare.els4 x86_64 0:1.16.2-3.el9.tuxcare.els2 i686|x86_64 0:1.16.2-3.el9.tuxcare.els2 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els2 x86_64 7:5.5-5.el9_2.1.tuxcare.els5 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els1 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els1 0:4.17.5-103.el9_2.alma.tuxcare.els1 x86_64 2:8.2.2637-20.el9_1.tuxcare.els1 2:8.2.2637-20.el9_1.tuxcare.els1 x86_64 2:8.2.2637-20.el9_1.tuxcare.els2 2:8.2.2637-20.el9_1.tuxcare.els2 x86_64 0:2.39.3-1.el9_2.tuxcare.els1 0:2.39.3-1.el9_2.tuxcare.els1 x86_64 2:8.2.2637-20.el9_1.tuxcare.els3 2:8.2.2637-20.el9_1.tuxcare.els3 x86_64 0:2.39.3-1.el9_2.tuxcare.els2 0:2.39.3-1.el9_2.tuxcare.els2 x86_64 0:2.39.3-1.el9_2.tuxcare.els3 0:2.39.3-1.el9_2.tuxcare.els3 x86_64 0:8.0.30-1.el9_2.tuxcare.els1 x86_64 2:8.2.2637-20.el9_1.tuxcare.els4 2:8.2.2637-20.el9_1.tuxcare.els4 1:9.0.62-11.el9_2.3.tuxcare.els1 x86_64 2:8.2.2637-20.el9_1.tuxcare.els5 2:8.2.2637-20.el9_1.tuxcare.els5 x86_64 0:3.2.3-19.el9.tuxcare.els1 0:3.2.3-19.el9.tuxcare.els1 1:9.0.62-11.el9_2.3.tuxcare.els2 x86_64 2:8.2.2637-20.el9_1.tuxcare.els7 2:8.2.2637-20.el9_1.tuxcare.els7 x86_64 0:1.16.2-3.el9.tuxcare.els3 i686|x86_64 0:1.16.2-3.el9.tuxcare.els3 x86_64 2:8.2.2637-20.el9_1.tuxcare.els9 2:8.2.2637-20.el9_1.tuxcare.els9 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els3 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els3 0:4.17.5-103.el9_2.alma.tuxcare.els3 x86_64 2:3.5.9-19.el9.tuxcare.els1 x86_64 0:8.0.30-1.el9_2.tuxcare.els3 x86_64 7:5.5-5.el9_2.1.tuxcare.els7 1:9.0.62-11.el9_2.3.tuxcare.els3 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els5 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els5 0:4.17.5-103.el9_2.alma.tuxcare.els5 i686|x86_64 0:2.68.4-6.el9.tuxcare.els3 0:2.68.4-6.el9.tuxcare.els3 x86_64 0:2.68.4-6.el9.tuxcare.els3 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els4 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els4 0:4.17.5-103.el9_2.alma.tuxcare.els4 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els5 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els5 32:9.16.23-11.el9_2.2.tuxcare.els5 x86_64 0:2.39.3-1.el9_2.tuxcare.els4 0:2.39.3-1.el9_2.tuxcare.els4 x86_64 0:9.0.0-10.3.el9_2.alma.1.tuxcare.els1 x86_64 0:6.2-8.20210508.el9.tuxcare.els1 0:6.2-8.20210508.el9.tuxcare.els1 i686|x86_64 0:6.2-8.20210508.el9.tuxcare.els1 1:9.0.62-11.el9_2.3.tuxcare.els4 1:9.0.62-11.el9_2.3.tuxcare.els7 x86_64 0:8.0.40-1.el9_2.tuxcare.els1 x86_64 0:8.0.30-1.el9_2.tuxcare.els4 x86_64 0:9.0.0-10.3.el9_2.alma.1.tuxcare.els2 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els6 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els6 0:4.17.5-103.el9_2.alma.tuxcare.els6 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els2 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els2 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els6 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els6 32:9.16.23-11.el9_2.2.tuxcare.els6 i686|x86_64 0:1.20.1-9.el9_2.tuxcare.els7 x86_64 0:1.20.1-9.el9_2.tuxcare.els7 1:9.0.62-11.el9_2.3.tuxcare.els5 i686|x86_64 0:1.12.7-2.el9.tuxcare.els1 0:1.12.7-2.el9.tuxcare.els1 x86_64 0:1.12.7-2.el9.tuxcare.els1 x86_64 0:9.0.0-10.3.el9_2.alma.1.tuxcare.els3 1:9.0.62-11.el9_2.3.tuxcare.els8 0:39.31.5.1-135.el9_2.alma.1.tuxcare.els5 1:39.31.5.1-135.el9_2.alma.1.tuxcare.els5 0:18.168.6.1-135.el9_2.alma.1.tuxcare.els5 1:25.30.13.0-135.el9_2.alma.1.tuxcare.els5 0:15.32.2.9-135.el9_2.alma.1.tuxcare.els5 0:228.61.2.24-135.el9_2.alma.1.tuxcare.els5 0:8.83.5.1_1-135.el9_2.alma.1.tuxcare.els5 0:8.24.2.2-135.el9_2.alma.1.tuxcare.els5 0:9.221.4.1-135.el9_2.alma.1.tuxcare.els5 0:41.28.5.1-135.el9_2.alma.1.tuxcare.els5 0:20230310-135.el9_2.alma.1.tuxcare.els5 2:20230310-135.el9_2.alma.1.tuxcare.els5 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els3 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els4 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els5 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els6 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els7 i686|x86_64 0:1.12.7-2.el9.tuxcare.els2 0:1.12.7-2.el9.tuxcare.els2 x86_64 0:1.12.7-2.el9.tuxcare.els2 x86_64 7:5.5-5.el9_2.1.tuxcare.els8 x86_64 0:0.4.1-6.el9.tuxcare.els1 0:3.9.16-1.el9_2.2.tuxcare.els10 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els10 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els7 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els7 32:9.16.23-11.el9_2.2.tuxcare.els7 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els9 x86_64 12:4.4.2-18.b1.el9.tuxcare.els1 12:4.4.2-18.b1.el9.tuxcare.els1 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els5 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els5 1:2.3.3op2-16.el9_2.1.tuxcare.els5 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els3 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els3 i686|x86_64 0:1.12.7-2.el9.tuxcare.els4 0:1.12.7-2.el9.tuxcare.els4 x86_64 0:1.12.7-2.el9.tuxcare.els4 x86_64 0:8.7p1-30.el9_2.tuxcare.els7 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els7 x86_64 0:11.3.1-4.3.el9.alma.tuxcare.els2 i686|x86_64 0:11.3.1-4.3.el9.alma.tuxcare.els2 i686|x86_64 0:2.5.0-1.el9.tuxcare.els4 x86_64 0:2.5.0-1.el9.tuxcare.els4 i686|x86_64 0:1.12.7-2.el9.tuxcare.els3 0:1.12.7-2.el9.tuxcare.els3 x86_64 0:1.12.7-2.el9.tuxcare.els3 x86_64 0:8.0.41-1.el9_2.tuxcare.els1 i686|x86_64 0:2.35.2-37.el9.tuxcare.els2 x86_64 0:2.35.2-37.el9.tuxcare.els2 1:9.0.62-11.el9_2.3.tuxcare.els9 1:2.06-61.el9_2.1.alma.tuxcare.els8 x86_64 1:2.06-61.el9_2.1.alma.tuxcare.els8 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els4 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els4 0:3.9.16-1.el9_2.2.tuxcare.els11 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els11 x86_64 0:1.12.0-13.el9_2.tuxcare.els2 0:1.12.0-13.el9_2.tuxcare.els2 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els1 0:9.54.0-11.el9_2.tuxcare.els1 x86_64 0:9.54.0-11.el9_2.tuxcare.els1 x86_64 0:13.11-1.el9_2.tuxcare.els1 0:13.11-1.el9_2.tuxcare.els1 1:9.0.62-11.el9_2.3.tuxcare.els10 x86_64 0:13.11-1.el9_2.tuxcare.els6 0:13.11-1.el9_2.tuxcare.els6 x86_64 0:1.12.0-13.el9_2.tuxcare.els8 0:1.12.0-13.el9_2.tuxcare.els8 x86_64 0:3.0.21-37.el9_2.tuxcare.els1 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els5 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els5 i686|x86_64 0:0.8-12.el9_2.1.tuxcare.els1 x86_64 0:0.8-12.el9_2.1.tuxcare.els1 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els1 x86_64 0:4.4.0-8.el9_2.tuxcare.els1 i686|x86_64 0:1.17.1-5.el9_2.1.tuxcare.els1 x86_64 0:1.12.0-13.el9_2.tuxcare.els9 0:1.12.0-13.el9_2.tuxcare.els9 x86_64 0:1.12.0-13.el9_2.tuxcare.els10 0:1.12.0-13.el9_2.tuxcare.els10 i686|x86_64 0:1.10.0-11.el9_2.tuxcare.1 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d*))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7 0:5.14.0-284.1101.el9_2.tuxcare.7 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els1 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els1 i686|x86_64 0:3.7.6-23.el9_2.tuxcare.3.els1 x86_64 0:3.7.6-23.el9_2.tuxcare.3.els1 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els2 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els2 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els10 x86_64 0:2.85-6.el9.tuxcare.els1 i686|x86_64 0:21.01.0-14.el9.tuxcare.els1 0:21.01.0-14.el9.tuxcare.els1 x86_64 0:21.01.0-14.el9.tuxcare.els1 i686|x86_64 0:2.0.90-6.el9_2.tuxcare.els1 x86_64 0:2.0.90-6.el9_2.tuxcare.els1 x86_64 0:1.12.0-13.el9_2.tuxcare.els13 0:1.12.0-13.el9_2.tuxcare.els13 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els1 x86_64 0:1.28.7-11.el9_2.1.tuxcare.els1 i686|x86_64 0:1.28.7-11.el9_2.1.tuxcare.els1 i686|x86_64 0:1.17.1-5.el9_2.1.tuxcare.els3 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els2 0:9.54.0-11.el9_2.tuxcare.els2 x86_64 0:9.54.0-11.el9_2.tuxcare.els2 1:7.1.8.1-8.el9_2.alma.tuxcare.els1 x86_64 1:7.1.8.1-8.el9_2.alma.tuxcare.els1 i686|x86_64 0:1.1.34-9.el9.tuxcare.els1 4:20220809-2.20250211.1.el9_2.tuxcare.els1 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els2 0:3.0.4-160.el9_0.tuxcare.els2 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els2 0:2.2.33-160.el9_0.tuxcare.els2 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els2 0:1.3.5-160.el9_0.tuxcare.els2 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els2 0:5.14.2-160.el9_0.tuxcare.els2 0:1.2.0-160.el9_0.tuxcare.els2 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els2 0:13.0.3-160.el9_0.tuxcare.els2 0:1.4.0-160.el9_0.tuxcare.els2 0:6.3.3-160.el9_0.tuxcare.els2 0:3.2.5-160.el9_0.tuxcare.els2 0:0.2.9-160.el9_0.tuxcare.els2 0:3.3.7-160.el9_0.tuxcare.els2 0:0.15.2-160.el9_0.tuxcare.els2 0:3.2.33-160.el9_0.tuxcare.els2 x86_64 1:5.9.1-11.el9_2.tuxcare.els1 i686|x86_64 1:5.9.1-11.el9_2.tuxcare.els1 x86_64 0:2.85-6.el9_2.tuxcare.els2 i686|x86_64 0:1.0.31-7.el9.tuxcare.els1 x86_64 0:1.0.31-7.el9.tuxcare.els1 i686|x86_64 0:1.7.0-7.el9.tuxcare.els1 0:1.7.0-7.el9.tuxcare.els1 i686|x86_64 0:1.8-4.el9.tuxcare.els1 x86_64 0:1.8-4.el9.tuxcare.els1 i686|x86_64 0:0.40.0-5.el9_2.tuxcare.els1 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els2 x86_64 0:4.4.0-8.el9_2.tuxcare.els2 i686|x86_64 1:6.2.0-10.el9.tuxcare.els1 x86_64 1:6.2.0-10.el9.tuxcare.els1 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els3 0:9.54.0-11.el9_2.tuxcare.els3 x86_64 0:9.54.0-11.el9_2.tuxcare.els3 x86_64 1:1.29.1-2.el9_2.tuxcare.els1 i686|x86_64 0:0.20.2-5.el9_2.tuxcare.els1 x86_64 0:0.20.2-5.el9_2.tuxcare.els1 i686|x86_64 0:3.16.1-4.el9_2.tuxcare.els1 x86_64 0:3.16.1-4.el9_2.tuxcare.els1 0:3.16.1-4.el9_2.tuxcare.els1 i686|x86_64 0:1.7.0-7.el9_2.tuxcare.els3 0:1.7.0-7.el9_2.tuxcare.els3 i686|x86_64 0:2.5.0-1.el9.tuxcare.els5 x86_64 0:2.5.0-1.el9.tuxcare.els5 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els1 0:2.72.0-8.el9_2.tuxcare.els1 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els4 x86_64 0:4.4.0-8.el9_2.tuxcare.els4 1:9.0.62-11.el9_2.3.tuxcare.els11 x86_64 0:1.28.7-11.el9_2.1.tuxcare.els2 i686|x86_64 0:1.28.7-11.el9_2.1.tuxcare.els2 i686|x86_64 0:1.1.34-9.el9.tuxcare.els2 i686|x86_64 0:1.7.0-7.el9_2.tuxcare.els4 0:1.7.0-7.el9_2.tuxcare.els4 1:7.1.8.1-8.el9_2.alma.tuxcare.els2 x86_64 1:7.1.8.1-8.el9_2.alma.tuxcare.els2 x86_64 0:2.4.9.4-1.el9.tuxcare.els1 i686|x86_64 0:2.7.4-8.el9.tuxcare.els1 x86_64 0:3.24.31-2.el9.tuxcare.els1 i686|x86_64 0:3.24.31-2.el9.tuxcare.els1 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els2 0:2.72.0-8.el9_2.tuxcare.els2 i686|x86_64 0:2.10.4-9.el9.tuxcare.els1 x86_64 0:2.10.4-9.el9.tuxcare.els1 x86_64 0:8.0.30-1.el9_2.tuxcare.els5 i686|x86_64 0:3.16.1-4.el9_2.tuxcare.els3 x86_64 0:3.16.1-4.el9_2.tuxcare.els3 0:3.16.1-4.el9_2.tuxcare.els3 x86_64 0:2.0.28-3.el9.tuxcare.els1 i686|x86_64 0:2.0.28-3.el9.tuxcare.els1 x86_64 1:1.29.1-2.el9_2.tuxcare.els3 x86_64 0:2.4.9.4-1.el9.tuxcare.els2 1:7.1.8.1-8.el9_2.alma.tuxcare.els3 x86_64 1:7.1.8.1-8.el9_2.alma.tuxcare.els3 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els4 0:3.0.4-160.el9_0.tuxcare.els4 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els4 0:2.2.33-160.el9_0.tuxcare.els4 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els4 0:1.3.5-160.el9_0.tuxcare.els4 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els4 0:5.14.2-160.el9_0.tuxcare.els4 0:1.2.0-160.el9_0.tuxcare.els4 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els4 0:13.0.3-160.el9_0.tuxcare.els4 0:1.4.0-160.el9_0.tuxcare.els4 0:6.3.3-160.el9_0.tuxcare.els4 0:3.3.3-160.el9_0.tuxcare.els4 0:0.2.9-160.el9_0.tuxcare.els4 0:3.3.7-160.el9_0.tuxcare.els4 0:0.15.2-160.el9_0.tuxcare.els4 0:3.2.33-160.el9_0.tuxcare.els4 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els3 0:2.72.0-8.el9_2.tuxcare.els3 x86_64 0:2.4.9.4-1.el9.tuxcare.els3 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els1 x86_64 0:1.19.13-1.el9_2.tuxcare.els1 0:1.19.13-1.el9_2.tuxcare.els1 x86_64 0:1.19.13-1.el9_2.tuxcare.els2 0:1.19.13-1.el9_2.tuxcare.els2 x86_64 1:1.29.5-1.el9_2.tuxcare.els2 x86_64 0:3.1.7-1.el9.tuxcare.els1 i686|x86_64 0:3.1.7-1.el9.tuxcare.els1 1:7.1.8.1-8.el9_2.alma.tuxcare.els5 x86_64 1:7.1.8.1-8.el9_2.alma.tuxcare.els5 x86_64 0:1.28.7-11.el9_2.1.tuxcare.els3 i686|x86_64 0:1.28.7-11.el9_2.1.tuxcare.els3 x86_64 2:4.4.1-13.el9_2.tuxcare.els1 2:4.4.1-13.el9_2.tuxcare.els1 x86_64 0:13.11-1.el9_2.tuxcare.els9 0:13.11-1.el9_2.tuxcare.els9 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[2-9]\d|1[3-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els13 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els13 0:5.14.0-284.1101.el9_2.tuxcare.7.els13 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els13 i686|x86_64 0:5.2.1-9.el9.tuxcare.els1 x86_64 0:5.2.1-9.el9.tuxcare.els1 i686|x86_64 0:3.7.6-23.el9_2.tuxcare.3.els2 x86_64 0:3.7.6-23.el9_2.tuxcare.3.els2 i686|x86_64 0:1.18.4-5.el9.tuxcare.els1 x86_64 0:1.18.4-5.el9.tuxcare.els1 i686|x86_64 0:1.18.4-6.el9.tuxcare.els1 x86_64 0:1.18.4-6.el9.tuxcare.els1 x86_64 0:1.19.13-1.el9_2.tuxcare.els6 0:1.19.13-1.el9_2.tuxcare.els6 i686|x86_64 0:2.38.5-1.el9.3.tuxcare.els1 x86_64 0:1.19.13-1.el9_2.tuxcare.els8 0:1.19.13-1.el9_2.tuxcare.els8 i686|x86_64 0:1.18.4-6.el9.tuxcare.els3 x86_64 0:1.18.4-6.el9.tuxcare.els3 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els2 i686|x86_64 0:1.18.4-5.el9.tuxcare.els4 x86_64 0:1.18.4-5.el9.tuxcare.els4 x86_64 0:1.19.13-1.el9_2.tuxcare.els3 0:1.19.13-1.el9_2.tuxcare.els3 i686|x86_64 0:1.18.4-6.el9.tuxcare.els6 x86_64 0:1.18.4-6.el9.tuxcare.els6 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[2-9]\d|1[4-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els14 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els14 0:5.14.0-284.1101.el9_2.tuxcare.7.els14 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els14 i686|x86_64 0:1.18.4-5.el9.tuxcare.els7 x86_64 0:1.18.4-5.el9.tuxcare.els7 i686|x86_64 0:1.18.4-6.el9.tuxcare.els8 x86_64 0:1.18.4-6.el9.tuxcare.els8 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els5 0:2.72.0-8.el9_2.tuxcare.els5 x86_64 0:3.1.1-2.el9.tuxcare.els1 i686|x86_64 0:3.1.1-2.el9.tuxcare.els1 i686|x86_64 0:1.18.4-6.el9.tuxcare.els15 x86_64 0:1.18.4-6.el9.tuxcare.els15 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els4 0:9.54.0-11.el9_2.tuxcare.els4 x86_64 0:9.54.0-11.el9_2.tuxcare.els4 x86_64 0:12.1.5-1.el9.3.alma.1.tuxcare.els1 x86_64 2:40.3-2.el9.tuxcare.els1 i686|x86_64 2:40.3-2.el9.tuxcare.els1 x86_64 0:4.4-8.git1.el9.tuxcare.els1 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els8 0:9.54.0-11.el9_2.tuxcare.els8 x86_64 0:9.54.0-11.el9_2.tuxcare.els8 x86_64 2:4.4.1-13.el9_2.tuxcare.els2 2:4.4.1-13.el9_2.tuxcare.els2 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els7 0:2.72.0-8.el9_2.tuxcare.els7 1:9.0.62-11.el9_2.3.tuxcare.els12 x86_64 0:6.2.7-1.el9.tuxcare.els1 i686|x86_64 0:6.2.7-1.el9.tuxcare.els1 0:6.2.7-1.el9.tuxcare.els1 x86_64 0:12.1.5-1.el9.3.alma.1.tuxcare.els2 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els9 0:2.72.0-8.el9_2.tuxcare.els9 i686|x86_64 0:1.18.4-6.el9.tuxcare.els16 x86_64 0:1.18.4-6.el9.tuxcare.els16 i686|x86_64 0:1.18.4-5.el9.tuxcare.els8 x86_64 0:1.18.4-5.el9.tuxcare.els8 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els3 x86_64 0:2.39.3-1.el9_2.tuxcare.els5 0:2.39.3-1.el9_2.tuxcare.els5 i686|x86_64 0:2.8.2-3.el9_2.alma.tuxcare.els1 x86_64 0:2.8.2-3.el9_2.alma.tuxcare.els1 0:2.8.2-3.el9_2.alma.tuxcare.els1 0:3.9.16-1.el9_2.2.tuxcare.els12 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els12 x86_64 0:8.7p1-30.el9_2.tuxcare.els8 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els8 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els11 x86_64 0:8.0.42-1.el9_2.tuxcare.els1 x86_64 0:5.1.0-6.el9.tuxcare.els1 0:5.1.0-6.el9.tuxcare.els1 x86_64 0:3.5.3-4.el9.tuxcare.els1 i686|x86_64 0:3.5.3-4.el9.tuxcare.els1 x86_64 0:4.4-8.git1.el9.tuxcare.els2 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els7 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els7 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els6 x86_64 0:2.34-60.el9_2.7.tuxcare.els3 i686|x86_64 0:2.34-60.el9_2.7.tuxcare.els3 0:2.34-60.el9_2.7.tuxcare.els3 i686|x86_64 0:0.99.9-3.el9.tuxcare.els1 x86_64 0:0.99.9-3.el9.tuxcare.els1 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els9 0:9.54.0-11.el9_2.tuxcare.els9 x86_64 0:9.54.0-11.el9_2.tuxcare.els9 x86_64 0:11-3.el9.tuxcare.els1 i686|x86_64 0:11-3.el9.tuxcare.els1 x86_64 0:2.44.4-1.el9.tuxcare.els1 0:1.1.3-11.el9.tuxcare.els1 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[2-9]\d|1[5-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els15 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els15 0:5.14.0-284.1101.el9_2.tuxcare.7.els15 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els15 x86_64 0:2.44.4-1.el9.tuxcare.els5 x86_64 1:27.2-8.el9_2.1.tuxcare.els3 1:27.2-8.el9_2.1.tuxcare.els3 x86_64 1:1.35.4-1.el9_2.tuxcare.els2 x86_64 0:6.2.7-1.el9.tuxcare.els3 i686|x86_64 0:6.2.7-1.el9.tuxcare.els3 0:6.2.7-1.el9.tuxcare.els3 i686|x86_64 0:1.5.1-14.el9.tuxcare.els3 x86_64 0:1.5.1-14.el9.tuxcare.els3 x86_64 0:2.4.9.4-1.el9.tuxcare.els4 x86_64 0:3.2.3-19.el9.tuxcare.els2 0:3.2.3-19.el9.tuxcare.els2 x86_64 1:1.20.1-14.el9.1.alma.1.tuxcare.els3 1:1.20.1-14.el9.1.alma.1.tuxcare.els3 x86_64 1:1.8.0.402.b06-3.tuxcare.els1.el9 1:1.8.0.402.b06-3.tuxcare.els1.el9 x86_64 0:1.9.5p2-9.el9.tuxcare.els3 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els9 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els9 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els12 i686|x86_64 0:1.6-14.el9.tuxcare.els1 x86_64 0:4.9-4.el9_2.tuxcare.els1 x86_64 1:27.2-8.el9_2.1.tuxcare.els5 1:27.2-8.el9_2.1.tuxcare.els5 x86_64 0:1.12.0-13.el9_2.tuxcare.els18 0:1.12.0-13.el9_2.tuxcare.els18 x86_64 0:2.44.4-1.el9.tuxcare.els9 x86_64 1:16.20.2-3.el9.tuxcare.els1 1:16.20.2-3.el9.tuxcare.els1 i686|x86_64 1:16.20.2-3.el9.tuxcare.els1 x86_64 1:8.19.4_1.16.20.2-3.el9.tuxcare.els1 x86_64 2:9.4.146.26_1.16.20.2-3.el9.tuxcare.els1 x86_64 0:2.44.4-1.el9.tuxcare.els10 x86_64 1:1.20.1-14.el9.1.alma.1.tuxcare.els2 1:1.20.1-14.el9.1.alma.1.tuxcare.els2 x86_64 1:16.20.2-3.el9_2.tuxcare.els2 1:16.20.2-3.el9_2.tuxcare.els2 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els2 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els2 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els2 0:3.9.16-1.el9_2.2.tuxcare.els13 i686 0:3.9.16-1.el9_2.2.tuxcare.els13 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els13 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[2-9]\d|1[6-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els16 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els16 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els16 x86_64 3:2.1.0-16.el9.tuxcare.els1 i686|x86_64 1:2.3.16-8.el9.tuxcare.els1 x86_64 1:2.3.16-8.el9.tuxcare.els1 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els6 0:3.0.4-160.el9_0.tuxcare.els6 0:2.2.33-160.el9_0.tuxcare.els6 0:5.14.2-160.el9_0.tuxcare.els6 0:6.3.3-160.el9_0.tuxcare.els6 0:3.3.3-160.el9_0.tuxcare.els6 0:0.2.9-160.el9_0.tuxcare.els6 0:3.3.7-160.el9_0.tuxcare.els6 0:3.2.33-160.el9_0.tuxcare.els6 i686|x86_64 0:2.44.0-25.el9.tuxcare.els1 x86_64 0:2.44.0-25.el9.tuxcare.els1 x86_64 0:2.39.3-1.el9_2.tuxcare.els7 0:2.39.3-1.el9_2.tuxcare.els7 i686|x86_64 0:1.18.4-6.el9_2.tuxcare.els1 x86_64 1:17.0.15.0.6-1.el9.tuxcare.els1 x86_64 1:1.8.0.452.b09-3.tuxcare.els1.el9 1:1.8.0.452.b09-3.tuxcare.els1.el9 x86_64 0:2.4.9.4-1.el9.tuxcare.els5 x86_64 0:1.2.1-4.el9.tuxcare.els1 x86_64 0:6.2.7-1.el9.tuxcare.els4 i686|x86_64 0:6.2.7-1.el9.tuxcare.els4 0:6.2.7-1.el9.tuxcare.els4 i686|x86_64 0:0.20.2-5.el9_2.tuxcare.els2 x86_64 0:0.20.2-5.el9_2.tuxcare.els2 x86_64 1:2.10-4.el9.tuxcare.els1 x86_64 1:27.2-8.el9_2.1.tuxcare.els6 1:27.2-8.el9_2.1.tuxcare.els6 x86_64 0:8.0.30-1.el9_2.tuxcare.els7 i686|x86_64 1:2.3.16-8.el9.tuxcare.els2 x86_64 1:2.3.16-8.el9.tuxcare.els2 x86_64 0:20210202-8.el9_2.1.tuxcare.els1 i686|x86_64 0:0.8-12.el9_2.1.tuxcare.els2 x86_64 0:0.8-12.el9_2.1.tuxcare.els2 x86_64 1:17.0.16.0.8-1.el9.tuxcare.els1 x86_64 0:3.5.3-4.el9.tuxcare.els2 i686|x86_64 0:3.5.3-4.el9.tuxcare.els2 x86_64 0:6.2.7-1.el9.tuxcare.els5 i686|x86_64 0:6.2.7-1.el9.tuxcare.els5 0:6.2.7-1.el9.tuxcare.els5 i686|x86_64 0:2.28-4.el9.tuxcare.els1 x86_64 0:2.28-4.el9.tuxcare.els1 x86_64 1:1.8.0.462.b08-1.tuxcare.els1.el9 1:1.8.0.462.b08-1.tuxcare.els1.el9 x86_64 0:3.34.1-6.el9_1.tuxcare.els2 i686|x86_64 0:3.34.1-6.el9_1.tuxcare.els2 0:3.34.1-6.el9_1.tuxcare.els2 x86_64 1:16.20.2-3.el9_2.tuxcare.els3 1:16.20.2-3.el9_2.tuxcare.els3 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els3 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els3 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els3 i686|x86_64 0:1.18.4-6.el9_2.tuxcare.els4 i686|x86_64 0:1.12-6.el9.tuxcare.els1 x86_64 0:1.16.2-3.el9.tuxcare.els4 i686|x86_64 0:1.16.2-3.el9.tuxcare.els4 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els10 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els10 1:9.0.62-11.el9_2.3.tuxcare.els13 x86_64 0:5.64-2.el9.tuxcare.els1 i686|x86_64 0:5.64-2.el9.tuxcare.els1 x86_64 0:1.14.1-5.el9.tuxcare.els1 0:1.14.1-5.el9.tuxcare.els1 i686|x86_64 0:1.9.0-7.el9_2.alma.1.tuxcare.els1 x86_64 0:1.9.0-7.el9_2.alma.1.tuxcare.els1 i686|x86_64 0:3.9-10.el9.alma.tuxcare.els1 x86_64 0:3.9-10.el9.alma.tuxcare.els1 x86_64 0:5.64-2.el9.tuxcare.els2 i686|x86_64 0:5.64-2.el9.tuxcare.els2 i686|x86_64 0:0.4.31-6.el9.tuxcare.els1 x86_64 0:0.4.31-6.el9.tuxcare.els1 0:0.4.31-6.el9.tuxcare.els1 x86_64 0:1.22.5-1.el9_2.tuxcare.els3 0:1.22.5-1.el9_2.tuxcare.els3 x86_64 0:6.2-8.20210508.el9.tuxcare.els2 0:6.2-8.20210508.el9.tuxcare.els2 i686|x86_64 0:6.2-8.20210508.el9.tuxcare.els2 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els7 0:3.0.4-160.el9_0.tuxcare.els7 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els7 0:2.2.33-160.el9_0.tuxcare.els7 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els7 0:1.3.5-160.el9_0.tuxcare.els7 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els7 0:5.14.2-160.el9_0.tuxcare.els7 0:1.2.0-160.el9_0.tuxcare.els7 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els7 0:13.0.3-160.el9_0.tuxcare.els7 0:1.4.0-160.el9_0.tuxcare.els7 0:6.3.3-160.el9_0.tuxcare.els7 0:3.3.3-160.el9_0.tuxcare.els7 0:0.2.9-160.el9_0.tuxcare.els7 0:3.3.7-160.el9_0.tuxcare.els7 0:0.15.2-160.el9_0.tuxcare.els7 0:3.2.33-160.el9_0.tuxcare.els7 i686|x86_64 0:0.13.71-9.el9.tuxcare.els1 x86_64 0:0.13.71-9.el9.tuxcare.els1 i686|x86_64 0:0.8-12.el9_2.1.tuxcare.els3 x86_64 0:0.8-12.el9_2.1.tuxcare.els3 x86_64 0:6.2.7-1.el9.tuxcare.els6 i686|x86_64 0:6.2.7-1.el9.tuxcare.els6 0:6.2.7-1.el9.tuxcare.els6 i686|x86_64 0:1.20.1-9.el9_2.tuxcare.els8 x86_64 0:1.20.1-9.el9_2.tuxcare.els8 x86_64 1:16.20.2-3.el9_2.tuxcare.els7 1:16.20.2-3.el9_2.tuxcare.els7 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els7 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els7 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els7 x86_64 1:16.20.2-3.el9_2.tuxcare.els8 1:16.20.2-3.el9_2.tuxcare.els8 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els8 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els8 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els8 x86_64 0:2.48.5-1.el9.tuxcare.els1 i686|x86_64 0:3.9-10.el9.alma.tuxcare.els2 x86_64 0:3.9-10.el9.alma.tuxcare.els2 i686|x86_64 0:1.9.0-7.el9_2.alma.1.tuxcare.els2 x86_64 0:1.9.0-7.el9_2.alma.1.tuxcare.els2 x86_64 0:2.34-60.el9_2.7.tuxcare.els4 i686|x86_64 0:2.34-60.el9_2.7.tuxcare.els4 0:2.34-60.el9_2.7.tuxcare.els4 x86_64 0:1.22.5-1.el9_2.tuxcare.els6 0:1.22.5-1.el9_2.tuxcare.els6 x86_64 1:1.35.4-1.el9_2.tuxcare.els3 x86_64 1:16.20.2-3.el9_2.tuxcare.els5 1:16.20.2-3.el9_2.tuxcare.els5 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els5 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els5 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els5 i686|x86_64 0:4.35.0-3.el9_2.tuxcare.els6 i686|x86_64 0:3.90.0-3.el9_2.tuxcare.els7 x86_64 0:3.90.0-3.el9_2.tuxcare.els7 x86_64 0:2.39.3-1.el9_2.tuxcare.els8 0:2.39.3-1.el9_2.tuxcare.els8 1:9.0.62-11.el9_2.3.tuxcare.els14 i686|x86_64 0:3.14.0-13.el9.tuxcare.els1 0:3.14.0-13.el9.tuxcare.els1 x86_64 0:3.14.0-13.el9.tuxcare.els1 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els9 0:3.9.16-1.el9_2.2.tuxcare.els14 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els14 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els8 0:2.4.53-11.el9_2.5.tuxcare.els8 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els8 x86_64 0:3.2.3-19.el9.tuxcare.els3 0:3.2.3-19.el9.tuxcare.els3 x86_64 1:16.20.2-3.el9_2.tuxcare.els9 1:16.20.2-3.el9_2.tuxcare.els9 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els9 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els9 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els9 x86_64 2:2.99.8-3.el9.tuxcare.els1 i686|x86_64 2:2.99.8-3.el9.tuxcare.els1 i686|x86_64 0:0.10.4-8.el9.tuxcare.els4 0:0.10.4-8.el9.tuxcare.els4 x86_64 2:2.99.8-3.el9.tuxcare.els4 i686|x86_64 2:2.99.8-3.el9.tuxcare.els4 i686|x86_64 0:1.0.4-10.el9.tuxcare.els1 4:20220809-2.20250812.1.el9_2.tuxcare.els1 i686|x86_64 0:2.42.6-3.el9.tuxcare.els1 x86_64 0:2.42.6-3.el9.tuxcare.els1 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[2-9]\d|19))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els19 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els19 0:5.14.0-284.1101.el9_2.tuxcare.7.els19 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els19 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els13 x86_64 0:8.0.30-1.el9_2.tuxcare.els8 x86_64 0:4.9-4.el9_2.tuxcare.els3 x86_64 0:4.9-4.el9_2.tuxcare.els4 i686|x86_64 0:2.1.0-21.el9.tuxcare.els1 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els8 0:3.0.4-160.el9_0.tuxcare.els8 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els8 0:2.2.33-160.el9_0.tuxcare.els8 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els8 0:1.3.5-160.el9_0.tuxcare.els8 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els8 0:5.14.2-160.el9_0.tuxcare.els8 0:1.2.0-160.el9_0.tuxcare.els8 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els8 0:13.0.3-160.el9_0.tuxcare.els8 0:1.4.0-160.el9_0.tuxcare.els8 0:6.3.3-160.el9_0.tuxcare.els8 0:3.3.3-160.el9_0.tuxcare.els8 0:0.2.9-160.el9_0.tuxcare.els8 0:3.3.7-160.el9_0.tuxcare.els8 0:0.15.2-160.el9_0.tuxcare.els8 0:3.2.33-160.el9_0.tuxcare.els8 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[2-9]\d|1[8-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els18 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els18 0:5.14.0-284.1101.el9_2.tuxcare.7.els18 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els18 i686|x86_64 0:3.14.0-13.el9.tuxcare.els2 0:3.14.0-13.el9.tuxcare.els2 x86_64 0:3.14.0-13.el9.tuxcare.els2 x86_64 0:2.39.3-1.el9_2.tuxcare.els9 0:2.39.3-1.el9_2.tuxcare.els9 i686|x86_64 0:1.0.31-7.el9.tuxcare.els2 x86_64 0:1.0.31-7.el9.tuxcare.els2 x86_64 1:16.20.2-3.el9_2.tuxcare.els10 1:16.20.2-3.el9_2.tuxcare.els10 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els10 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els10 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els10 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els10 x86_64 0:13.11-1.el9_2.tuxcare.els11 0:13.11-1.el9_2.tuxcare.els11 x86_64 1:16.20.2-3.el9_2.tuxcare.els12 1:16.20.2-3.el9_2.tuxcare.els12 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els12 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els12 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els12 x86_64 2:2.99.8-3.el9.tuxcare.els5 i686|x86_64 2:2.99.8-3.el9.tuxcare.els5 i686|x86_64 0:1.0.4-10.el9.tuxcare.els2 x86_64 2:2.99.8-3.el9.tuxcare.els6 i686|x86_64 2:2.99.8-3.el9.tuxcare.els6 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[3-9]\d|2[0-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els20 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els20 0:5.14.0-284.1101.el9_2.tuxcare.7.els20 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els20 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els5 x86_64 0:4.4.0-8.el9_2.tuxcare.els5 i686|x86_64 0:1.0.4-10.el9.tuxcare.els3 i686|x86_64 0:2.42.6-3.el9.tuxcare.els2 x86_64 0:2.42.6-3.el9.tuxcare.els2 x86_64 2:2.99.8-3.el9.tuxcare.els7 i686|x86_64 2:2.99.8-3.el9.tuxcare.els7 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els6 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els6 1:2.3.3op2-16.el9_2.1.tuxcare.els6 i686|x86_64 0:3.7.6-23.el9_2.tuxcare.4.els1 x86_64 0:3.7.6-23.el9_2.tuxcare.4.els1 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els11 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els11 x86_64 0:3.1.1-2.el9.tuxcare.els2 i686|x86_64 0:3.1.1-2.el9.tuxcare.els2 0:0.076-460.el9.tuxcare.els1 0:2.29-2.el9.tuxcare.els1 x86_64 0:2.0.28-3.el9.tuxcare.els2 i686|x86_64 0:2.0.28-3.el9.tuxcare.els2 x86_64 2:4.4.1-13.el9_2.tuxcare.els4 2:4.4.1-13.el9_2.tuxcare.els4 x86_64 0:13.11-1.el9_2.tuxcare.els12 0:13.11-1.el9_2.tuxcare.els12 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els3 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els3 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[3-9]\d|2[1-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els21 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els21 0:5.14.0-284.1101.el9_2.tuxcare.7.els21 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els21 0:2.14.1-2.el9.tuxcare.els1 0:22.1-10.el9.alma.tuxcare.els2 x86_64 0:2.0.28-3.el9.tuxcare.els4 i686|x86_64 0:2.0.28-3.el9.tuxcare.els4 i686|x86_64 0:3.0.3-8.el9.tuxcare.els1 x86_64 17:7.2.0-14.el9.5.alma.1.tuxcare.els1 i686|x86_64 0:0.22.0-2.el9.tuxcare.els1 0:22.1-10.el9.alma.tuxcare.els3 i686|x86_64 1:0.9.72-4.el9.tuxcare.els1 1:0.9.72-4.el9.tuxcare.els1 x86_64 0:0.27.5-2.el9.tuxcare.els1 i686|x86_64 0:0.27.5-2.el9.tuxcare.els1 0:0.27.5-2.el9.tuxcare.els1 x86_64 0:6.2.7-1.el9.tuxcare.els7 i686|x86_64 0:6.2.7-1.el9.tuxcare.els7 0:6.2.7-1.el9.tuxcare.els7 x86_64 0:2.34-60.el9_2.7.tuxcare.els5 i686|x86_64 0:2.34-60.el9_2.7.tuxcare.els5 0:2.34-60.el9_2.7.tuxcare.els5 x86_64 0:12.1.5-1.el9.3.alma.1.tuxcare.els3 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[3-9]\d|2[2-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els22 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els22 0:5.14.0-284.1101.el9_2.tuxcare.7.els22 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els22 i686|x86_64 0:1.3.3-12.el9.tuxcare.els1 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els7 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els7 1:2.3.3op2-16.el9_2.1.tuxcare.els7 x86_64 1:16.20.2-3.el9_2.tuxcare.els13 1:16.20.2-3.el9_2.tuxcare.els13 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els13 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els13 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els13 x86_64 17:7.2.0-14.el9.5.alma.1.tuxcare.els2 i686|x86_64 0:21.01.0-14.el9.tuxcare.els2 0:21.01.0-14.el9.tuxcare.els2 x86_64 0:21.01.0-14.el9.tuxcare.els2 i686|x86_64 0:13.5-1.el9.tuxcare.els1 x86_64 0:1.22.5-1.el9_2.tuxcare.els7 0:1.22.5-1.el9_2.tuxcare.els7 x86_64 17:7.2.0-14.el9.5.alma.1.tuxcare.els5 x86_64 0:2.39.3-1.el9_2.tuxcare.els10 0:2.39.3-1.el9_2.tuxcare.els10 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[3-9]\d|2[3-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els23 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els23 0:5.14.0-284.1101.el9_2.tuxcare.7.els23 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els23 x86_64 2:4.4.1-13.el9_2.tuxcare.els5 2:4.4.1-13.el9_2.tuxcare.els5 x86_64 1:1.2.0-1.el9.tuxcare.els1 x86_64 0:8.3.1-5.el9.2.alma.tuxcare.els1 0:8.3.1-5.el9.2.alma.tuxcare.els1 x86_64 0:2.0.6-2.el9.tuxcare.els1 i686|x86_64 0:2.0.6-2.el9.tuxcare.els1 i686|x86_64 0:5.15.3-1.el9.tuxcare.els1 0:5.15.3-1.el9.tuxcare.els1 x86_64 0:5.15.3-1.el9.tuxcare.els1 0:42.2.28-1.el9.tuxcare.els1 x86_64 0:6.2.7-1.el9.tuxcare.els8 i686|x86_64 0:6.2.7-1.el9.tuxcare.els8 0:6.2.7-1.el9.tuxcare.els8 i686|x86_64 0:1.7.0-11.el9.tuxcare.els1 i686|x86_64 0:0.10.4-8.el9.tuxcare.els6 0:0.10.4-8.el9.tuxcare.els6 x86_64 1:16.20.2-3.el9_2.tuxcare.els14 1:16.20.2-3.el9_2.tuxcare.els14 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els14 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els14 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els14 x86_64 0:2.48.7-1.el9.tuxcare.els1 i686|x86_64 0:3.2.1-9.el9.tuxcare.els1 x86_64 0:8.3.1-5.el9.2.alma.tuxcare.els2 0:8.3.1-5.el9.2.alma.tuxcare.els2 i686|x86_64 1:1.42.0-1.el9.tuxcare.els1 x86_64 1:1.42.0-1.el9.tuxcare.els1 x86_64 0:1.9.1-1.el9.tuxcare.els1 x86_64 0:8.3.1-5.el9.2.alma.tuxcare.els3 0:8.3.1-5.el9.2.alma.tuxcare.els3 x86_64 0:2.9.6-1.el9.tuxcare.els1 x86_64 2:1.11.2-0.1.el9.tuxcare.els1 x86_64 0:0.0.99.3-10.el9.tuxcare.els1 (^5\.14\.0\-284\.(\d{3,}|[2-9]\d|1[1-9])(?:\.(\d{2,}|[1-9]))?\.el9_2\.tuxcare(\.(\d{2,}|[5-9]))(\.els(\d{2,}|[2-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.11.1.el9_2.tuxcare.5.els2 x86_64 0:5.14.0-284.11.1.el9_2.tuxcare.5.els2 0:5.14.0-284.11.1.el9_2.tuxcare.5.els2 (^5\.14\.0\-284\.(\d{3,}|[2-9]\d|1[1-9])(?:\.(\d{2,}|[1-9]))?\.el9_2\.tuxcare(\.(\d{2,}|[5-9]))(\.els(\d{2,}|[3-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.11.1.el9_2.tuxcare.5.els3 x86_64 0:5.14.0-284.11.1.el9_2.tuxcare.5.els3 0:5.14.0-284.11.1.el9_2.tuxcare.5.els3 x86_64 2:22.11-3.el9.tuxcare.els1 2:22.11-3.el9.tuxcare.els1 x86_64 1:1.2.0-1.el9.tuxcare.els2 x86_64 0:3.2.0-1.el9.tuxcare.els1 x86_64 0:67.1-9.el9.tuxcare.els1 i686|x86_64 0:67.1-9.el9.tuxcare.els1 0:67.1-9.el9.tuxcare.els1 x86_64 0:1.15.19-4.el9.4.tuxcare.els2 x86_64 0:6.2.21-1.el9.tuxcare.els1 i686|x86_64 0:6.2.21-1.el9.tuxcare.els1 0:6.2.21-1.el9.tuxcare.els1 x86_64 0:2.2.4-5.el9.tuxcare.els2 0:2.2.4-5.el9.tuxcare.els2 x86_64 0:3.2.0-1.el9.tuxcare.els2 x86_64 0:5.1.1-1.el9_2.tuxcare.els1 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els6 x86_64 0:4.4.0-8.el9_2.tuxcare.els6 0:1.7044-14.el9.tuxcare.els1 x86_64 1:0.79-8.el9.tuxcare.els1 i686|x86_64 0:4.16.0-9.el9.tuxcare.els1 x86_64 0:4.16.0-9.el9.tuxcare.els1 x86_64 0:5.72-4.el9.tuxcare.els1 i686|x86_64 0:5.72-4.el9.tuxcare.els1 x86_64 0:1.2.48-23.el9.tuxcare.els1 0:1.26.12-1.el9.tuxcare.els1 i686|x86_64 0:5.15.3-1.el9.tuxcare.els2 x86_64 0:5.15.3-1.el9.tuxcare.els2 0:20221207gitfff6d81270b5-9.el9_2.tuxcare.els1 x86_64 0:20221207gitfff6d81270b5-9.el9_2.tuxcare.els1 i686|x86_64 0:3.2.3-3.el9.tuxcare.els1 x86_64 0:3.2.3-3.el9.tuxcare.els1 i686|x86_64 0:2.9.4-7.el9.tuxcare.els1 x86_64 0:2.9.4-7.el9.tuxcare.els1 i686|x86_64 0:21.1.3-7.el9.tuxcare.els1 x86_64 0:1.12.0-13.el9_2.tuxcare.els19 0:1.12.0-13.el9_2.tuxcare.els19 x86_64 0:37.0.2-5.el9.tuxcare.els1 x86_64 0:1.12.0-13.el9_2.tuxcare.els21 0:1.12.0-13.el9_2.tuxcare.els21 i686|x86_64 0:6.6.2-3.el9_2.1.tuxcare.els1 x86_64 0:6.6.2-3.el9_2.1.tuxcare.els1 x86_64 0:4.10.1-9.el9_2.alma.1.tuxcare.els2 0:4.10.1-9.el9_2.alma.1.tuxcare.els2 i686|x86_64 0:3.7.6-23.el9_2.tuxcare.4.els2 x86_64 0:3.7.6-23.el9_2.tuxcare.4.els2 x86_64 0:1.2.14-1.el9.3.tuxcare.els1 x86_64 4:1.1.4-1.el9_1.tuxcare.els2 i686|x86_64 0:21.1.3-7.el9.tuxcare.els5 i686|x86_64 0:21.1.3-7.el9.tuxcare.els7 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els10 0:2.72.0-8.el9_2.tuxcare.els10 x86_64 4:1.2.8-1.el9_1.tuxcare.els1 i686|x86_64 0:21.1.3-7.el9.tuxcare.els9 0:20221207gitfff6d81270b5-9.el9_2.tuxcare.els2 x86_64 0:20221207gitfff6d81270b5-9.el9_2.tuxcare.els2 x86_64 7:5.5-5.el9_2.1.tuxcare.els10 i686|x86_64 0:5.15.3-1.el9.tuxcare.els3 0:5.15.3-1.el9.tuxcare.els3 x86_64 0:5.15.3-1.el9.tuxcare.els3 i686|x86_64 0:21.1.3-7.el9.tuxcare.els11 i686|x86_64 0:2.8.2-3.el9_2.alma.tuxcare.els2 x86_64 0:2.8.2-3.el9_2.alma.tuxcare.els2 0:2.8.2-3.el9_2.alma.tuxcare.els2 i686|x86_64 0:3.9-10.el9_2.alma.tuxcare.els3 x86_64 0:3.9-10.el9_2.alma.tuxcare.els3 x86_64 0:7.76.1-23.el9_2.4.tuxcare.els4 i686|x86_64 0:7.76.1-23.el9_2.4.tuxcare.els4 0:20221207gitfff6d81270b5-9.el9_2.tuxcare.els3 x86_64 0:20221207gitfff6d81270b5-9.el9_2.tuxcare.els3 x86_64 0:6.0.1-5.el9_2.alma.tuxcare.els1 i686|x86_64 0:6.0.1-5.el9_2.alma.tuxcare.els1 0:6.0.1-5.el9_2.alma.tuxcare.els1 i686|x86_64 0:21.1.3-7.el9.tuxcare.els13 x86_64 2:4.4.1-13.el9_2.tuxcare.els6 2:4.4.1-13.el9_2.tuxcare.els6 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els8 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els8 32:9.16.23-11.el9_2.2.tuxcare.els8 x86_64 0:286.2-1.el9_2.tuxcare.els1 0:286.2-1.el9_2.tuxcare.els1 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[3-9]\d|2[4-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els24 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els24 0:5.14.0-284.1101.el9_2.tuxcare.7.els24 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els24 x86_64 0:2.50.1-1.el9.tuxcare.els1 x86_64 1:1.42.2-8.el9_2.tuxcare.els1 1:1.42.2-8.el9_2.tuxcare.els1 i686|x86_64 1:1.42.2-8.el9_2.tuxcare.els1 x86_64 0:2.4.17-6.el9.tuxcare.els4 x86_64 0:1.22.5-1.el9_2.tuxcare.els8 0:1.22.5-1.el9_2.tuxcare.els8 1:9.0.50-1.el9.tuxcare.els1 x86_64 0:5.2-2.el9_1.tuxcare.els1 0:65.5.1-2.el9.tuxcare.els2 i686|x86_64 0:2.7.0-11.el9.tuxcare.els1 x86_64 0:2.7.0-11.el9.tuxcare.els1 x86_64 1:1.39.6-1.el9_2.tuxcare.els1 i686|x86_64 1:1.1.1k-4.el9_0.tuxcare.els1 x86_64 0:76-2.el9_2.2.alma.tuxcare.els1 i686|x86_64 0:1.14.2-1.el9.tuxcare.els1 0:1.14.2-1.el9.tuxcare.els1 x86_64 0:1.14.2-1.el9.tuxcare.els1 x86_64 0:7.76.1-23.el9_2.4.tuxcare.els5 i686|x86_64 0:7.76.1-23.el9_2.4.tuxcare.els5 i686|x86_64 0:1.18.4-4.el9.tuxcare.els1 0:2.14.1-1.el9.tuxcare.els1 0:2.14.1-2.el9.tuxcare.els2 i686|x86_64 0:2.5.0-1.el9.tuxcare.els6 x86_64 0:2.5.0-1.el9.tuxcare.els6 x86_64 0:4.12-2.el9_2.tuxcare.els1 x86_64 2:2.99.8-3.el9.tuxcare.els8 i686|x86_64 2:2.99.8-3.el9.tuxcare.els8 x86_64 2:8.2.2637-20.el9_1.tuxcare.els11 2:8.2.2637-20.el9_1.tuxcare.els11 x86_64 0:40.0-7.el9.tuxcare.els1 x86_64 0:3.1.2-3.el9_2.tuxcare.els1 i686|x86_64 2:1.6.37-12.el9.tuxcare.els1 x86_64 2:1.6.37-12.el9.tuxcare.els1 x86_64 1:1.39.6-1.el9_2.tuxcare.els2 0:22.3.1-2.el9.tuxcare.els1 i686|x86_64 0:21.01.0-14.el9.tuxcare.els3 0:21.01.0-14.el9.tuxcare.els3 x86_64 0:21.01.0-14.el9.tuxcare.els3 x86_64 0:1.22.9-1.el9_2.tuxcare.els2 0:1.22.9-1.el9_2.tuxcare.els2 x86_64 2:4.4.1-13.el9_2.tuxcare.els7 2:4.4.1-13.el9_2.tuxcare.els7 i686|x86_64 0:1.43.0-5.el9_2.1.tuxcare.els1 x86_64 0:1.43.0-5.el9_2.1.tuxcare.els1 i686|x86_64 0:0.22.0-2.el9_2.tuxcare.els2 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[3-9]\d|2[5-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els25 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els25 0:5.14.0-284.1101.el9_2.tuxcare.7.els25 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els25 0:53.0.0-12.el9.tuxcare.els1 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els4 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els4 x86_64 0:3.2.0-1.el9_2.tuxcare.els1 0:3.2.0-1.el9_2.tuxcare.els1 i686|x86_64 0:0.22.0-2.el9_2.tuxcare.els3 1:9.0.62-11.el9_2.3.tuxcare.els15 x86_64 1:3.4.10-4.el9.tuxcare.els1 i686|x86_64 1:3.4.10-4.el9.tuxcare.els1 x86_64 0:1.9.1-1.el9.tuxcare.els2 x86_64 0:2.50.1-1.el9.tuxcare.els4 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els11 i686|x86_64 0:0.4.34-2.el9.tuxcare.els1 x86_64 0:0.4.34-2.el9.tuxcare.els1 x86_64 2:4.4.1-13.el9_2.tuxcare.els8 2:4.4.1-13.el9_2.tuxcare.els8 x86_64 1:11.0.29.0.7-1.el9.tuxcare.els1 i686|x86_64 0:252-14.el9_2.3.tuxcare.els2 x86_64 0:252-14.el9_2.3.tuxcare.els2 0:252-14.el9_2.3.tuxcare.els2 x86_64 0:8.0.44-1.el9_2.tuxcare.els1 x86_64 0:0.27.5-2.el9.tuxcare.els2 i686|x86_64 0:0.27.5-2.el9.tuxcare.els2 0:0.27.5-2.el9.tuxcare.els2 x86_64 1:3.4.10-4.el9.tuxcare.els2 i686|x86_64 1:3.4.10-4.el9.tuxcare.els2 x86_64 0:6.5.2-6.el9_2.alma.1.tuxcare.els1 0:6.5.2-6.el9_2.alma.1.tuxcare.els1 x86_64 2:1.11.2-0.1.el9.tuxcare.els2 x86_64 0:2.50.1-1.el9.tuxcare.els5 x86_64 2:4.4.1-13.el9_2.tuxcare.els9 2:4.4.1-13.el9_2.tuxcare.els9 x86_64 2:8.2.2637-20.el9_1.tuxcare.els12 2:8.2.2637-20.el9_1.tuxcare.els12 i686|x86_64 0:0.22.0-2.el9_2.tuxcare.els4 x86_64 0:8.0.30-1.el9_2.tuxcare.els9 i686|x86_64 0:1.5.1-14.el9.tuxcare.els4 x86_64 0:1.5.1-14.el9.tuxcare.els4 i686|x86_64 0:2.35.2-37.el9.tuxcare.els3 x86_64 0:2.35.2-37.el9.tuxcare.els3 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els9 0:2.4.53-11.el9_2.5.tuxcare.els9 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els9 x86_64 2:2.99.8-4.el9.2.tuxcare.els2 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els2 x86_64 1:2.4.19-1.el9.tuxcare.els1 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[3-9]\d|2[6-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els26 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els26 0:5.14.0-284.1101.el9_2.tuxcare.7.els26 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els26 x86_64 0:8.7p1-30.el9_2.tuxcare.els9 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els9 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els9 0:3.0.4-160.el9_0.tuxcare.els9 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els9 0:2.2.33-160.el9_0.tuxcare.els9 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els9 0:1.3.5-160.el9_0.tuxcare.els9 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els9 0:5.14.2-160.el9_0.tuxcare.els9 0:1.2.0-160.el9_0.tuxcare.els9 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els9 0:13.0.3-160.el9_0.tuxcare.els9 0:1.4.0-160.el9_0.tuxcare.els9 0:6.3.3-160.el9_0.tuxcare.els9 0:3.3.3-160.el9_0.tuxcare.els9 0:0.2.9-160.el9_0.tuxcare.els9 0:3.3.7-160.el9_0.tuxcare.els9 0:0.15.2-160.el9_0.tuxcare.els9 0:3.2.33-160.el9_0.tuxcare.els9 x86_64 0:1.28.7-11.el9_2.1.tuxcare.els4 i686|x86_64 0:1.28.7-11.el9_2.1.tuxcare.els4 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els10 0:2.4.53-11.el9_2.5.tuxcare.els10 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els10 i686|x86_64 2:1.6.37-12.el9.tuxcare.els2 x86_64 2:1.6.37-12.el9.tuxcare.els2 i686|x86_64 2:1.6.37-12.el9.tuxcare.els4 x86_64 2:1.6.37-12.el9.tuxcare.els4 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els14 i686|x86_64 0:13.5-1.el9.tuxcare.els2 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els11 0:2.72.0-8.el9_2.tuxcare.els11 x86_64 0:8.0.30-1.el9_2.tuxcare.els10 (^5\.14\.0\-284\.(\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[1-9])(?:\.(\d*))?\.el9_2\.tuxcare(\.(\d{2,}|[7-9]))(\.els(\d{3,}|[3-9]\d|2[7-9]))?\.(x86_64|i686)$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els27 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els27 0:5.14.0-284.1101.el9_2.tuxcare.7.els27 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els27 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els10 0:3.0.4-160.el9_0.tuxcare.els10 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els10 0:2.2.33-160.el9_0.tuxcare.els10 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els10 0:1.3.5-160.el9_0.tuxcare.els10 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els10 0:5.14.2-160.el9_0.tuxcare.els10 0:1.2.0-160.el9_0.tuxcare.els10 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els10 0:13.0.3-160.el9_0.tuxcare.els10 0:1.4.0-160.el9_0.tuxcare.els10 0:6.3.3-160.el9_0.tuxcare.els10 0:3.3.3-160.el9_0.tuxcare.els10 0:0.2.9-160.el9_0.tuxcare.els10 0:3.3.7-160.el9_0.tuxcare.els10 0:0.15.2-160.el9_0.tuxcare.els10 0:3.2.33-160.el9_0.tuxcare.els10 x86_64 3:10.5.22-1.el9_2.alma.1.tuxcare.els1 x86_64 2:1.39.6-1.el9_2.tuxcare.els4 x86_64 2:4.4.1-13.el9_2.tuxcare.els10 2:4.4.1-13.el9_2.tuxcare.els10 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els12 0:2.72.0-8.el9_2.tuxcare.els12 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els8 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els8 1:2.3.3op2-16.el9_2.1.tuxcare.els8 1:9.0.50-1.el9.tuxcare.els2 x86_64 3:10.5.29-1.el9_2.alma.1.tuxcare.els1 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els15 0:3.9.16-1.el9_2.2.tuxcare.els15 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els15 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els11 0:3.0.4-160.el9_0.tuxcare.els11 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els11 0:2.2.33-160.el9_0.tuxcare.els11 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els11 0:1.3.5-160.el9_0.tuxcare.els11 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els11 0:5.14.2-160.el9_0.tuxcare.els11 0:1.2.0-160.el9_0.tuxcare.els11 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els11 0:13.0.3-160.el9_0.tuxcare.els11 0:1.4.0-160.el9_0.tuxcare.els11 0:6.3.3-160.el9_0.tuxcare.els11 0:3.3.3-160.el9_0.tuxcare.els11 0:0.2.9-160.el9_0.tuxcare.els11 0:3.3.7-160.el9_0.tuxcare.els11 0:0.15.2-160.el9_0.tuxcare.els11 0:3.2.33-160.el9_0.tuxcare.els11 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els9 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els9 1:2.3.3op2-16.el9_2.1.tuxcare.els9 x86_64 0:13.11-1.el9_2.tuxcare.els14 0:13.11-1.el9_2.tuxcare.els14 x86_64 1:3.25-1.el9.3.tuxcare.els1 x86_64 2:1.34-7.el9.tuxcare.els1 x86_64 0:2.3.3-2.el9_0.tuxcare.els1 x86_64 0:8.0.30-1.el9_2.tuxcare.els11 1:9.0.50-1.el9.tuxcare.els3 x86_64 2:2.99.8-4.el9.2.tuxcare.els3 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els3 x86_64 1:16.20.2-3.el9_2.tuxcare.els15 1:16.20.2-3.el9_2.tuxcare.els15 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els15 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els15 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els15 x86_64 1:5.9.1-11.el9_2.tuxcare.els2 i686|x86_64 1:5.9.1-11.el9_2.tuxcare.els2 0:1.26.12-5.el9.tuxcare.els2 i686|x86_64 0:2.68.4-6.el9.tuxcare.els4 0:2.68.4-6.el9.tuxcare.els4 x86_64 0:2.68.4-6.el9.tuxcare.els4 x86_64 0:1.22.9-1.el9_2.tuxcare.els3 0:1.22.9-1.el9_2.tuxcare.els3 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els8 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els8 i686|x86_64 0:2.5.0-1.el9.tuxcare.els7 x86_64 0:2.5.0-1.el9.tuxcare.els7 i686|x86_64 0:1.0.9-7.el9_2.tuxcare.els1 x86_64 0:1.0.9-7.el9_2.tuxcare.els1 i686|x86_64 0:2.72.0-8.el9_2.tuxcare.els14 0:2.72.0-8.el9_2.tuxcare.els14 i686|x86_64 2:1.6.37-12.el9_2.tuxcare.els5 x86_64 2:1.6.37-12.el9_2.tuxcare.els5 x86_64 0:6.9.13.25-1.el9_2.tuxcare.els2 x86_64 1:16.20.2-3.el9_2.tuxcare.els16 1:16.20.2-3.el9_2.tuxcare.els16 i686|x86_64 1:16.20.2-3.el9_2.tuxcare.els16 x86_64 1:8.19.4_1.16.20.2-3.el9_2.tuxcare.els16 x86_64 2:9.4.146.26_1.16.20.2-3.el9_2.tuxcare.els16 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els(?:\d{3,}|[3-9]\d|2[8-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els28 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els28 0:5.14.0-284.1101.el9_2.tuxcare.7.els28 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els28 x86_64 1:1.8.0.482.b08-1.tuxcare.els1.el9 1:1.8.0.482.b08-1.tuxcare.els1.el9 1:2.06-61.el9_2.1.alma.tuxcare.els9 x86_64 1:2.06-61.el9_2.1.alma.tuxcare.els9 x86_64 0:6.9.13.25-1.el9_2.tuxcare.els3 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els4 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els4 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els5 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els5 x86_64 0:1.22.9-1.el9_2.tuxcare.els4 0:1.22.9-1.el9_2.tuxcare.els4 i686|x86_64 2:1.6.37-12.el9_2.tuxcare.els6 x86_64 2:1.6.37-12.el9_2.tuxcare.els6 x86_64 0:6.9.13.25-1.el9_2.tuxcare.els4 x86_64 2:2.99.8-4.el9.2.tuxcare.els4 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els4 x86_64 0:1.22.9-1.el9_2.tuxcare.els5 0:1.22.9-1.el9_2.tuxcare.els5 x86_64 0:5.1.1-1.el9_2.tuxcare.els2 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els12 i686|x86_64 0:2.68.4-6.el9.tuxcare.els5 0:2.68.4-6.el9.tuxcare.els5 x86_64 0:2.68.4-6.el9.tuxcare.els5 x86_64 0:2.34-60.el9.7.tuxcare.els7 i686|x86_64 0:2.34-60.el9.7.tuxcare.els7 0:2.34-60.el9.7.tuxcare.els7 x86_64 0:1.22.9-1.el9_2.tuxcare.els6 0:1.22.9-1.el9_2.tuxcare.els6 i686|x86_64 0:1.5.30-14.el9.tuxcare.els1 i686|x86_64 0:3.14.0-16.el9.tuxcare.els2 0:3.14.0-16.el9.tuxcare.els2 x86_64 0:3.14.0-16.el9.tuxcare.els2 x86_64 2:1.39.6-1.el9_2.tuxcare.els5 x86_64 4:1.2.8-1.el9_1.tuxcare.els2 x86_64 2:4.4.1-13.el9_2.tuxcare.els11 2:4.4.1-13.el9_2.tuxcare.els11 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els13 x86_64 2:8.2.2637-22.el9_1.1.tuxcare.els3 2:8.2.2637-22.el9_1.1.tuxcare.els3 x86_64 0:0.5.13-13.el9_2.tuxcare.els1 i686|x86_64 0:0.5.13-13.el9_2.tuxcare.els1 x86_64 0:2.2.4-5.el9_2.tuxcare.els3 0:2.2.4-5.el9_2.tuxcare.els3 x86_64 1:1.2.0-1.el9.tuxcare.els3 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els7 x86_64 0:4.4.0-8.el9_2.tuxcare.els7 x86_64 0:5.1.1-1.el9_2.tuxcare.els3 x86_64 0:0.17.0-1.el9.tuxcare.els1 0:0.17.0-1.el9.tuxcare.els1 x86_64 2:1.11.2-0.1.el9.tuxcare.els3 0:3.9.16-1.el9_2.2.tuxcare.els17 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els17 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els4 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els4 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els(?:\d{3,}|[3-9]\d|29))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els29 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els29 0:5.14.0-284.1101.el9_2.tuxcare.7.els29 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els29 x86_64 0:13.11-1.el9_2.tuxcare.els15 0:13.11-1.el9_2.tuxcare.els15 x86_64 0:1.28.7-11.el9_2.1.tuxcare.els5 i686|x86_64 0:1.28.7-11.el9_2.1.tuxcare.els5 i686|x86_64 1:2.5.4-18.el9_2.tuxcare.els1 x86_64 1:2.5.4-18.el9_2.tuxcare.els1 x86_64 0:1.9.1-1.el9.tuxcare.els3 x86_64 0:3.2.0-1.el9.tuxcare.els3 x86_64 0:13.11-1.el9_2.tuxcare.els16 0:13.11-1.el9_2.tuxcare.els16 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els18 x86_64 0:3.2.0-1.el9_2.tuxcare.els2 0:3.2.0-1.el9_2.tuxcare.els2 x86_64 0:76-2.el9_2.2.alma.tuxcare.els2 0:3.9.16-1.el9_2.2.tuxcare.els18 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els18 x86_64 0:8.0.45-1.el9_2.tuxcare.els1 i686|x86_64 1:1.1.1k-4.el9_0.tuxcare.els2 x86_64 2:2.99.8-4.el9.2.tuxcare.els5 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els5 x86_64 0:2.34-60.el9.7.tuxcare.els8 i686|x86_64 0:2.34-60.el9.7.tuxcare.els8 0:2.34-60.el9.7.tuxcare.els8 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els8 x86_64 0:4.4.0-8.el9_2.tuxcare.els8 i686|x86_64 0:1.9.0-7.el9_2.alma.1.tuxcare.els3 x86_64 0:1.9.0-7.el9_2.alma.1.tuxcare.els3 i686|x86_64 0:0.10.4-8.el9.tuxcare.els7 0:0.10.4-8.el9.tuxcare.els7 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els7 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els7 i686|x86_64 0:2.5.0-1.el9.tuxcare.els8 x86_64 0:2.5.0-1.el9.tuxcare.els8 0:3.9.16-1.el9_2.2.tuxcare.els19 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els19 x86_64 0:0.27.5-2.el9.tuxcare.els3 i686|x86_64 0:0.27.5-2.el9.tuxcare.els3 0:0.27.5-2.el9.tuxcare.els3 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els9 x86_64 0:4.4.0-8.el9_2.tuxcare.els9 x86_64 2:8.2.2637-22.el9_1.1.tuxcare.els4 2:8.2.2637-22.el9_1.1.tuxcare.els4 i686|x86_64 0:4.0.2-10.el9.tuxcare.els1 0:4.0.2-10.el9.tuxcare.els1 x86_64 0:4.0.2-10.el9.tuxcare.els1 x86_64 0:3.5.3-6.el9_2.tuxcare.els2 i686|x86_64 0:3.5.3-6.el9_2.tuxcare.els2 1:9.0.62-11.el9_2.3.tuxcare.els16 i686|x86_64 0:2.5.0-1.el9.tuxcare.els9 x86_64 0:2.5.0-1.el9.tuxcare.els9 i686|x86_64 0:4.0.2-10.el9.tuxcare.els2 0:4.0.2-10.el9.tuxcare.els2 x86_64 0:4.0.2-10.el9.tuxcare.els2 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els19 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els20 x86_64 0:2.50.1-1.el9.tuxcare.els6 x86_64 0:3.1.1-2.el9.tuxcare.els3 i686|x86_64 0:3.1.1-2.el9.tuxcare.els3 i686|x86_64 0:2.5.0-1.el9.tuxcare.els10 x86_64 0:2.5.0-1.el9.tuxcare.els10 x86_64 2:8.2.2637-22.el9_1.1.tuxcare.els6 2:8.2.2637-22.el9_1.1.tuxcare.els6 x86_64 0:2.3.3-2.el9_0.tuxcare.els2 x86_64 7:5.5-5.el9_2.1.tuxcare.els11 x86_64 0:2.50.1-1.el9.tuxcare.els7 x86_64 0:3.19.0-2.el9.tuxcare.els1 i686|x86_64 0:3.19.0-2.el9.tuxcare.els1 x86_64 0:6.9.13.25-1.el9_2.tuxcare.els5 x86_64 1:3.4.10-4.el9.tuxcare.els3 i686|x86_64 1:3.4.10-4.el9.tuxcare.els3 x86_64 7:5.5-5.el9_2.1.tuxcare.els12 x86_64 0:1.22.9-1.el9_2.tuxcare.els7 0:1.22.9-1.el9_2.tuxcare.els7 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els10 0:9.54.0-11.el9_2.tuxcare.els10 x86_64 0:9.54.0-11.el9_2.tuxcare.els10 x86_64 2:2.99.8-4.el9.2.tuxcare.els6 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els6 x86_64 0:3.1.1-3.el9.tuxcare.els3 i686|x86_64 0:3.1.1-3.el9.tuxcare.els3 0:3.9.16-1.el9_2.2.tuxcare.els20 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els20 1:9.0.50-1.el9.2.tuxcare.els3 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els12 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els12 x86_64 0:3.5.3-6.el9_2.tuxcare.els3 i686|x86_64 0:3.5.3-6.el9_2.tuxcare.els3 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els14 x86_64 0:6.2.21-1.el9_2.tuxcare.els2 i686|x86_64 0:6.2.21-1.el9_2.tuxcare.els2 0:6.2.21-1.el9_2.tuxcare.els2 0:3.9.16-1.el9_2.2.tuxcare.els21 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els21 0:21.0.0-1.el9.tuxcare.els1 i686|x86_64 0:252-14.el9_2.3.tuxcare.els3 x86_64 0:252-14.el9_2.3.tuxcare.els3 0:252-14.el9_2.3.tuxcare.els3 1:9.0.62-11.el9_2.3.tuxcare.els17 i686|x86_64 0:0.10.4-8.el9.tuxcare.els8 0:0.10.4-8.el9.tuxcare.els8 i686|x86_64 0:4.16.0-9.el9.tuxcare.els2 x86_64 0:4.16.0-9.el9.tuxcare.els2 i686|x86_64 0:2.68.4-6.el9.tuxcare.els6 0:2.68.4-6.el9.tuxcare.els6 x86_64 0:2.68.4-6.el9.tuxcare.els6 0:3.9.16-1.el9_2.2.tuxcare.els22 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els22 i686|x86_64 0:1.6-14.el9.tuxcare.els2 i686|x86_64 0:1.5.30-14.el9.tuxcare.els2 x86_64 0:1.22.9-1.el9_2.tuxcare.els8 0:1.22.9-1.el9_2.tuxcare.els8 x86_64 0:8.7p1-30.el9_2.tuxcare.els10 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els10 x86_64 0:3.5.3-6.el9_2.tuxcare.els4 i686|x86_64 0:3.5.3-6.el9_2.tuxcare.els4 x86_64 0:3.1.7-1.el9.tuxcare.els2 i686|x86_64 0:3.1.7-1.el9.tuxcare.els2 i686|x86_64 0:1.18.4-6.el9_2.tuxcare.els5 i686|x86_64 0:2.3.2-3.el9.tuxcare.els1 x86_64 0:2.3.2-3.el9.tuxcare.els1 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els9 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els9 i686|x86_64 0:2.72.0-10.el9_2.3.tuxcare.els3 0:2.72.0-10.el9_2.3.tuxcare.els3 x86_64 0:1.4.5-4.el9.tuxcare.els1 i686|x86_64 0:1.4.5-4.el9.tuxcare.els1 0:1.4.5-4.el9.tuxcare.els1 i686|x86_64 0:2.72.0-10.el9_2.3.tuxcare.els4 0:2.72.0-10.el9_2.3.tuxcare.els4 i686|x86_64 0:1.1.34-9.el9.tuxcare.els3 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els5 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els5 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els10 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els10 1:2.3.3op2-16.el9_2.1.tuxcare.els10 i686|x86_64 0:0.6.22-6.el9.tuxcare.els1 x86_64 0:0.6.22-6.el9.tuxcare.els1 i686|x86_64 0:1.18.4-6.el9.tuxcare.els17 x86_64 0:1.18.4-6.el9.tuxcare.els17 i686|x86_64 0:1.18.4-5.el9.tuxcare.els9 x86_64 0:1.18.4-5.el9.tuxcare.els9 x86_64 1:16.20.2-8.el9_2.tuxcare.els11 1:16.20.2-8.el9_2.tuxcare.els11 i686|x86_64 1:16.20.2-8.el9_2.tuxcare.els11 x86_64 1:8.19.4_1.16.20.2-8.el9_2.tuxcare.els11 x86_64 2:9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els11 x86_64 2:2.99.8-4.el9.2.tuxcare.els7 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els7 i686|x86_64 0:2.72.0-10.el9_2.3.tuxcare.els5 0:2.72.0-10.el9_2.3.tuxcare.els5 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els6 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els6 x86_64 0:3.5.3-6.el9_2.tuxcare.els5 i686|x86_64 0:3.5.3-6.el9_2.tuxcare.els5 i686|x86_64 0:5.2.1-9.el9.tuxcare.els3 x86_64 0:5.2.1-9.el9.tuxcare.els3 x86_64 0:2.46-9.el9.tuxcare.els1 x86_64 0:1.12.0-13.el9_2.tuxcare.els22 0:1.12.0-13.el9_2.tuxcare.els22 x86_64 2:8.2.2637-22.el9_1.1.tuxcare.els7 2:8.2.2637-22.el9_1.1.tuxcare.els7 i686|x86_64 0:1.12.7-2.el9.tuxcare.els5 0:1.12.7-2.el9.tuxcare.els5 x86_64 0:1.12.7-2.el9.tuxcare.els5 x86_64 0:3.1.1-3.el9.tuxcare.els4 i686|x86_64 0:3.1.1-3.el9.tuxcare.els4 x86_64 2:8.2.2637-22.el9_1.1.tuxcare.els9 2:8.2.2637-22.el9_1.1.tuxcare.els9 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els7 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els7 0:3.3.0-10.el9.tuxcare.els1 x86_64 17:7.2.0-14.el9.5.alma.1.tuxcare.els6 i686|x86_64 0:2.3.2-3.el9.tuxcare.els2 x86_64 0:2.3.2-3.el9.tuxcare.els2 x86_64 1:3.4.10-4.el9.tuxcare.els5 i686|x86_64 1:3.4.10-4.el9.tuxcare.els5 i686|x86_64 0:10.40-2.el9.tuxcare.els1 x86_64 0:10.40-2.el9.tuxcare.els1 0:10.40-2.el9.tuxcare.els1 x86_64 1:3.4.10-4.el9.tuxcare.els6 i686|x86_64 1:3.4.10-4.el9.tuxcare.els6 i686|x86_64 0:1.6-14.el9.tuxcare.els3 x86_64 2:8.2.2637-22.el9_1.1.tuxcare.els11 2:8.2.2637-22.el9_1.1.tuxcare.els11 x86_64 0:3.5.3-6.el9_2.tuxcare.els6 i686|x86_64 0:3.5.3-6.el9_2.tuxcare.els6 x86_64 1:3.4.10-4.el9.tuxcare.els7 i686|x86_64 1:3.4.10-4.el9.tuxcare.els7 x86_64 2:1.39.6-1.el9_2.tuxcare.els6 x86_64 2:8.2.2637-22.el9_1.1.tuxcare.els15 2:8.2.2637-22.el9_1.1.tuxcare.els15 x86_64 1:11.0.30.0.7-1.el9.tuxcare.els1 x86_64 1:16.20.2-8.el9_2.tuxcare.els13 1:16.20.2-8.el9_2.tuxcare.els13 i686|x86_64 1:16.20.2-8.el9_2.tuxcare.els13 x86_64 1:8.19.4_1.16.20.2-8.el9_2.tuxcare.els13 x86_64 2:9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els13 1:9.0.62-11.el9.3.tuxcare.els18 x86_64 2:2.99.8-4.el9.2.tuxcare.els8 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els8 x86_64 0:0.27.5-2.el9.tuxcare.els4 i686|x86_64 0:0.27.5-2.el9.tuxcare.els4 0:0.27.5-2.el9.tuxcare.els4 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els16 2:8.2.2637-22.el9_2.1.tuxcare.els16 x86_64 0:6.9.13.25-1.el9_2.tuxcare.els6 x86_64 0:8.7p1-30.el9_2.tuxcare.els11 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els11 x86_64 0:2.52.3-1.el9.tuxcare.els8 i686|x86_64 0:2.42.6-3.el9.tuxcare.els3 x86_64 0:2.42.6-3.el9.tuxcare.els3 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els17 2:8.2.2637-22.el9_2.1.tuxcare.els17 i686|x86_64 0:2.72.0-10.el9_2.3.tuxcare.els6 0:2.72.0-10.el9_2.3.tuxcare.els6 0:3.9.16-1.el9_2.2.tuxcare.els24 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els24 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els21 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els22 x86_64 0:1.12.0-13.el9_2.tuxcare.els23 0:1.12.0-13.el9_2.tuxcare.els23 i686|x86_64 0:21.1.3-7.el9.tuxcare.els14 i686|x86_64 0:0.20.2-5.el9_2.tuxcare.els3 x86_64 0:0.20.2-5.el9_2.tuxcare.els3 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els18 2:8.2.2637-22.el9_2.1.tuxcare.els18 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els11 0:2.4.53-11.el9_2.5.tuxcare.els11 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els11 i686|x86_64 0:2.35.2-37.el9.tuxcare.els6 x86_64 0:2.35.2-37.el9.tuxcare.els6 x86_64 0:8.7p1-30.el9_2.tuxcare.els12 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els12 i686|x86_64 2:1.6.37-12.el9_2.tuxcare.els7 x86_64 2:1.6.37-12.el9_2.tuxcare.els7 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els20 2:8.2.2637-22.el9_2.1.tuxcare.els20 x86_64 0:1.9.5p2-9.el9.tuxcare.els4 x86_64 0:2.39.3-1.el9_2.tuxcare.els11 0:2.39.3-1.el9_2.tuxcare.els11 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els13 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els13 i686|x86_64 0:1.14.2-1.el9.tuxcare.els2 0:1.14.2-1.el9.tuxcare.els2 x86_64 0:1.14.2-1.el9.tuxcare.els2 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els22 2:8.2.2637-22.el9_2.1.tuxcare.els22 i686|x86_64 0:2.35.2-37.el9.tuxcare.els7 x86_64 0:2.35.2-37.el9.tuxcare.els7 i686|x86_64 1:2.3.16-8.el9.tuxcare.els3 x86_64 1:2.3.16-8.el9.tuxcare.els3 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els11 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els11 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els10 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els10 x86_64 1:1.8.0.492.b09-1.tuxcare.els1.el9 1:1.8.0.492.b09-1.tuxcare.els1.el9 x86_64 0:0.16.0-2.el9.tuxcare.els1 i686|x86_64 0:0.10.4-8.el9.tuxcare.els9 0:0.10.4-8.el9.tuxcare.els9 i686|x86_64 0:5.15.3-1.el9.tuxcare.els4 0:5.15.3-1.el9.tuxcare.els4 x86_64 0:5.15.3-1.el9.tuxcare.els4 x86_64 0:0.0.99.3-10.el9_2.tuxcare.els2 i686|x86_64 0:21.1.3-7.el9.tuxcare.els15 i686|x86_64 0:0.8-12.el9_2.1.tuxcare.els4 x86_64 0:0.8-12.el9_2.1.tuxcare.els4 x86_64 17:7.2.0-14.el9.5.alma.1.tuxcare.els7 x86_64 0:6.0.1-5.el9_2.alma.tuxcare.els2 i686|x86_64 0:6.0.1-5.el9_2.alma.tuxcare.els2 0:6.0.1-5.el9_2.alma.tuxcare.els2 x86_64 1:3.4.10-4.el9.tuxcare.els8 i686|x86_64 1:3.4.10-4.el9.tuxcare.els8 i686|x86_64 0:1.43.0-5.el9_2.1.tuxcare.els2 x86_64 0:1.43.0-5.el9_2.1.tuxcare.els2 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els23 x86_64 0:6.0-56.el9_2.tuxcare.els1 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els23 2:8.2.2637-22.el9_2.1.tuxcare.els23 i686|x86_64 0:1.6-14.el9.tuxcare.els4 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els12 x86_64 0:4.4.0-8.el9_2.tuxcare.els12 i686|x86_64 0:3.5.13-8.el9_1.tuxcare.els1 i686|x86_64 0:2.68.4-6.el9.tuxcare.els7 0:2.68.4-6.el9.tuxcare.els7 x86_64 0:2.68.4-6.el9.tuxcare.els7 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els11 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els11 1:2.3.3op2-16.el9_2.1.tuxcare.els11 x86_64 0:3.2.3-19.el9.tuxcare.els4 0:3.2.3-19.el9.tuxcare.els4 i686|x86_64 0:0.10.4-8.el9.tuxcare.els11 0:0.10.4-8.el9.tuxcare.els11 x86_64 0:8.3.1-5.el9_2.2.alma.tuxcare.els4 0:8.3.1-5.el9_2.2.alma.tuxcare.els4 x86_64 2:1.11.2-0.1.el9.tuxcare.els4 x86_64 0:8.0.30-1.el9_2.tuxcare.els12 x86_64 7:5.5-5.el9_2.1.tuxcare.els13 i686|x86_64 1:2.3.16-8.el9.tuxcare.els4 x86_64 1:2.3.16-8.el9.tuxcare.els4 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els25 2:8.2.2637-22.el9_2.1.tuxcare.els25 x86_64 0:4.99.1-1.el9_2.tuxcare.els1 x86_64 4:5.32.1-481.1.el9.tuxcare.els1 0:1.01-481.1.el9.tuxcare.els1 0:5.74-481.1.el9.tuxcare.els1 x86_64 0:1.80-481.1.el9.tuxcare.els1 0:1.23-481.1.el9.tuxcare.els1 0:0.66-481.1.el9.tuxcare.els1 0:0.03-481.1.el9.tuxcare.els1 0:0.06-481.1.el9.tuxcare.els1 x86_64 0:1.28-481.1.el9.tuxcare.els1 0:1.06-481.1.el9.tuxcare.els1 0:1.05-481.1.el9.tuxcare.els1 0:2.27-481.1.el9.tuxcare.els1 x86_64 0:1.47-481.1.el9.tuxcare.els1 0:1.11-481.1.el9.tuxcare.els1 x86_64 0:1.30-481.1.el9.tuxcare.els1 0:0.25-481.1.el9.tuxcare.els1 0:1.35-481.1.el9.tuxcare.els1 0:1.09-481.1.el9.tuxcare.els1 x86_64 0:1.13-481.1.el9.tuxcare.els1 0:2.85-481.1.el9.tuxcare.els1 0:1.100.600-481.1.el9.tuxcare.els1 0:2.34-481.1.el9.tuxcare.els1 x86_64 0:1.12-481.1.el9.tuxcare.els1 0:1.37-481.1.el9.tuxcare.els1 0:1.10-481.1.el9.tuxcare.els1 0:2.03-481.1.el9.tuxcare.els1 0:1.51-481.1.el9.tuxcare.els1 x86_64 0:1.18-481.1.el9.tuxcare.els1 0:1.12-481.1.el9.tuxcare.els1 x86_64 0:0.23-481.1.el9.tuxcare.els1 x86_64 0:1.20-481.1.el9.tuxcare.els1 0:1.02-481.1.el9.tuxcare.els1 0:0.44-481.1.el9.tuxcare.els1 x86_64 0:0.19-481.1.el9.tuxcare.els1 x86_64 0:1.43-481.1.el9.tuxcare.els1 0:1.21-481.1.el9.tuxcare.els1 1:0.21-481.1.el9.tuxcare.els1 0:1.59-481.1.el9.tuxcare.els1 0:1.03-481.1.el9.tuxcare.els1 1:0.08-481.1.el9.tuxcare.els1 x86_64 0:1.15-481.1.el9.tuxcare.els1 0:0.67-481.1.el9.tuxcare.els1 x86_64 0:1.16-481.1.el9.tuxcare.els1 x86_64 0:1.48-481.1.el9.tuxcare.els1 x86_64 0:1.94-481.1.el9.tuxcare.els1 0:1.13-481.1.el9.tuxcare.els1 0:1.25-481.1.el9.tuxcare.els1 0:2.41-481.1.el9.tuxcare.els1 0:1.07-481.1.el9.tuxcare.els1 0:1.26-481.1.el9.tuxcare.els1 0:1.08-481.1.el9.tuxcare.els1 x86_64 0:1.23-481.1.el9.tuxcare.els1 0:1.403-481.1.el9.tuxcare.els1 0:1.17-481.1.el9.tuxcare.els1 0:1.31-481.1.el9.tuxcare.els1 0:3.05-481.1.el9.tuxcare.els1 0:2.13-481.1.el9.tuxcare.els1 0:4.6-481.1.el9.tuxcare.els1 0:1.1-481.1.el9.tuxcare.els1 x86_64 0:1.3401-481.1.el9.tuxcare.els1 0:0.75-481.1.el9.tuxcare.els1 0:1.56-481.1.el9.tuxcare.els1 0:0.04-481.1.el9.tuxcare.els1 i686|x86_64 4:5.32.1-481.1.el9.tuxcare.els1 0:5.32.1-481.1.el9.tuxcare.els1 0:0.13-481.1.el9.tuxcare.els1 0:0.60.800-481.1.el9.tuxcare.els1 x86_64 0:0.65-481.1.el9.tuxcare.els1 4:5.32.1-481.1.el9.tuxcare.els1 0:0.02-481.1.el9.tuxcare.els1 x86_64 0:5.32.1-481.1.el9.tuxcare.els1 0:2.04-481.1.el9.tuxcare.els1 0:1.04-481.1.el9.tuxcare.els1 i686|x86_64 1:2.3.16-8.el9.tuxcare.els5 x86_64 1:2.3.16-8.el9.tuxcare.els5 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els21 2:8.2.2637-22.el9_2.1.tuxcare.els21 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els26 2:8.2.2637-22.el9_2.1.tuxcare.els26 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els12 0:2.4.53-11.el9_2.5.tuxcare.els12 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els12 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els24 i686|x86_64 0:1.6.9-1.el9.tuxcare.els1 x86_64 0:1.6.9-1.el9.tuxcare.els1 i686|x86_64 0:2.35.2-37.el9.tuxcare.els8 x86_64 0:2.35.2-37.el9.tuxcare.els8 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els12 0:3.0.4-160.el9_0.tuxcare.els12 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els12 0:2.2.33-160.el9_0.tuxcare.els12 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els12 0:1.3.5-160.el9_0.tuxcare.els12 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els12 0:5.14.2-160.el9_0.tuxcare.els12 0:1.2.0-160.el9_0.tuxcare.els12 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els12 0:13.0.3-160.el9_0.tuxcare.els12 0:1.4.0-160.el9_0.tuxcare.els12 0:6.3.3-160.el9_0.tuxcare.els12 0:3.3.3-160.el9_0.tuxcare.els12 0:0.2.9-160.el9_0.tuxcare.els12 0:3.3.7-160.el9_0.tuxcare.els12 0:0.15.2-160.el9_0.tuxcare.els12 0:3.2.33-160.el9_0.tuxcare.els12 x86_64 2:1.11.2-0.1.el9.tuxcare.els5 i686|x86_64 0:2.48-9.el9_2.tuxcare.els1 x86_64 0:2.48-9.el9_2.tuxcare.els1 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els11 0:9.54.0-11.el9_2.tuxcare.els11 x86_64 0:9.54.0-11.el9_2.tuxcare.els11 x86_64 0:3.1.1-3.el9.tuxcare.els6 i686|x86_64 0:3.1.1-3.el9.tuxcare.els6 i686|x86_64 0:3.7.6-23.el9_2.tuxcare.4.els3 x86_64 0:3.7.6-23.el9_2.tuxcare.4.els3 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els7 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els7 0:4.17.5-103.el9_2.alma.tuxcare.els7 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els(?:\d{3,}|[4-9]\d|3[2-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els32 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els32 0:5.14.0-284.1101.el9_2.tuxcare.7.els32 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els32 i686|x86_64 0:2.35.2-37.el9.tuxcare.els10 x86_64 0:2.35.2-37.el9.tuxcare.els10 x86_64 0:1.21.1-7.el9.tuxcare.els2 x86_64 2:1.34-7.el9.tuxcare.els2 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els8 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els8 x86_64 0:6.2.21-1.el9_2.tuxcare.els3 i686|x86_64 0:6.2.21-1.el9_2.tuxcare.els3 0:6.2.21-1.el9_2.tuxcare.els3 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els13 0:2.4.53-11.el9_2.5.tuxcare.els13 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els13 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els27 2:8.2.2637-22.el9_2.1.tuxcare.els27 x86_64 0:1.3.18-1.el9.tuxcare.els1 x86_64 2:2.99.8-4.el9.2.tuxcare.els11 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els11 x86_64 0:1.15.19-4.el9.4.tuxcare.els3 x86_64 2:3.5.9-19.el9.tuxcare.els2 x86_64 0:4.10.1-9.el9_2.alma.1.tuxcare.els3 0:4.10.1-9.el9_2.alma.1.tuxcare.els3 0:1.2.1-1.el9_2.tuxcare.els1 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els10 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els10 i686|x86_64 2:1.6.37-12.el9_2.tuxcare.els8 x86_64 2:1.6.37-12.el9_2.tuxcare.els8 x86_64 0:2.2.4-5.el9_2.tuxcare.els4 0:2.2.4-5.el9_2.tuxcare.els4 x86_64 0:3.5.3-6.el9_2.tuxcare.els7 i686|x86_64 0:3.5.3-6.el9_2.tuxcare.els7 x86_64 0:1.14.1-5.el9_2.tuxcare.els2 0:1.14.1-5.el9_2.tuxcare.els2 i686|x86_64 0:1.1.34-9.el9.tuxcare.els4 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els(?:\d{3,}|[4-9]\d|3[5-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els35 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els35 0:5.14.0-284.1101.el9_2.tuxcare.7.els35 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els35 i686|x86_64 0:2.72.0-10.el9_2.3.tuxcare.els7 0:2.72.0-10.el9_2.3.tuxcare.els7 i686|x86_64 0:2.35.2-37.el9.tuxcare.els11 x86_64 0:2.35.2-37.el9.tuxcare.els11 x86_64 0:1.6.9-7.el9.tuxcare.els1 x86_64 17:7.2.0-14.el9.5.alma.1.tuxcare.els8 i686|x86_64 0:3.0.4-160.el9_0.tuxcare.els13 0:3.0.4-160.el9_0.tuxcare.els13 i686|x86_64 0:3.0.0-160.el9_0.tuxcare.els13 0:2.2.33-160.el9_0.tuxcare.els13 i686|x86_64 0:0.5.7-160.el9_0.tuxcare.els13 0:1.3.5-160.el9_0.tuxcare.els13 i686|x86_64 0:2.5.1-160.el9_0.tuxcare.els13 0:5.14.2-160.el9_0.tuxcare.els13 0:1.2.0-160.el9_0.tuxcare.els13 i686|x86_64 0:3.3.2-160.el9_0.tuxcare.els13 0:13.0.3-160.el9_0.tuxcare.els13 0:1.4.0-160.el9_0.tuxcare.els13 0:6.3.3-160.el9_0.tuxcare.els13 0:3.3.3-160.el9_0.tuxcare.els13 0:0.2.9-160.el9_0.tuxcare.els13 0:3.3.7-160.el9_0.tuxcare.els13 0:0.15.2-160.el9_0.tuxcare.els13 0:3.2.33-160.el9_0.tuxcare.els13 i686|x86_64 0:0.22.0-2.el9_2.tuxcare.els6 x86_64 0:3.4.1-7.el9.tuxcare.els1 0:3.4.1-7.el9.tuxcare.els1 i686|x86_64 0:3.4.1-7.el9.tuxcare.els1 x86_64 0:2020.3-8.el9.tuxcare.els1 i686|x86_64 0:2020.3-8.el9.tuxcare.els1 x86_64 0:8.0.30-1.el9_2.tuxcare.els14 i686|x86_64 0:2.5.0-1.el9.tuxcare.els11 x86_64 0:2.5.0-1.el9.tuxcare.els11 x86_64 0:5.6.1-5.el9.tuxcare.els1 i686|x86_64 0:1.6-14.el9.tuxcare.els6 i686|x86_64 0:1.5.30-14.el9.tuxcare.els3 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els1 x86_64 0:1.22.9-1.el9_2.tuxcare.els9 0:1.22.9-1.el9_2.tuxcare.els9 i686|x86_64 0:0.22.0-2.el9_2.tuxcare.els5 x86_64 0:1.2.48-23.el9.tuxcare.els2 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els9 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els9 32:9.16.23-11.el9_2.2.tuxcare.els9 i686|x86_64 0:2.35.2-37.el9.tuxcare.els12 x86_64 0:2.35.2-37.el9.tuxcare.els12 i686|x86_64 0:3.7.6-23.el9_2.tuxcare.4.els4 x86_64 0:3.7.6-23.el9_2.tuxcare.4.els4 i686|x86_64 0:5.2.1-9.el9.tuxcare.els4 x86_64 0:5.2.1-9.el9.tuxcare.els4 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els11 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els11 i686|x86_64 0:0.22.0-2.el9_2.tuxcare.els7 1:2.06-61.el9_2.1.alma.tuxcare.els10 x86_64 1:2.06-61.el9_2.1.alma.tuxcare.els10 i686|x86_64 0:3.9-10.el9_2.alma.tuxcare.els4 x86_64 0:3.9-10.el9_2.alma.tuxcare.els4 x86_64 0:3.2.3-19.el9_2.tuxcare.els5 0:3.2.3-19.el9_2.tuxcare.els5 x86_64 0:2.85-6.el9_2.tuxcare.els3 x86_64 0:3.2.3-19.el9_2.tuxcare.els6 0:3.2.3-19.el9_2.tuxcare.els6 1:9.0.62-12.el9_2.1.tuxcare.els1 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els30 2:8.2.2637-22.el9_2.1.tuxcare.els30 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els15 x86_64 1:1.42.2-8.el9_2.tuxcare.els2 1:1.42.2-8.el9_2.tuxcare.els2 i686|x86_64 1:1.42.2-8.el9_2.tuxcare.els2 x86_64 0:1.16.2-3.el9_2.tuxcare.els5 i686|x86_64 0:1.16.2-3.el9_2.tuxcare.els5 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els3 x86_64 17:7.2.0-15.el9_2.1.alma.1.tuxcare.els1 x86_64 0:1.12.0-13.el9_2.tuxcare.els24 0:1.12.0-13.el9_2.tuxcare.els24 x86_64 0:1.26.2-5.el9_2.tuxcare.els1 i686|x86_64 0:1.26.2-5.el9_2.tuxcare.els1 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els29 2:8.2.2637-22.el9_2.1.tuxcare.els29 x86_64 0:13.11-1.el9_2.tuxcare.els18 0:13.11-1.el9_2.tuxcare.els18 x86_64 2:4.4.1-13.el9_2.tuxcare.els12 2:4.4.1-13.el9_2.tuxcare.els12 x86_64 0:9.0.0-10.3.el9_2.alma.1.tuxcare.els4 x86_64 0:1.2.4-2.el9_2.tuxcare.els1 i686|x86_64 0:1.2.4-2.el9_2.tuxcare.els1 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els9 x86_64 0:2.34-61.el9_2.1.tuxcare.els2 i686|x86_64 0:2.34-61.el9_2.1.tuxcare.els2 0:2.34-61.el9_2.1.tuxcare.els2 i686|x86_64 0:3.0.4-160.el9_2.tuxcare.els14 0:3.0.4-160.el9_2.tuxcare.els14 i686|x86_64 0:3.0.0-160.el9_2.tuxcare.els14 0:2.2.33-160.el9_2.tuxcare.els14 i686|x86_64 0:0.5.7-160.el9_2.tuxcare.els14 0:1.3.5-160.el9_2.tuxcare.els14 i686|x86_64 0:2.5.1-160.el9_2.tuxcare.els14 0:5.14.2-160.el9_2.tuxcare.els14 0:1.2.0-160.el9_2.tuxcare.els14 i686|x86_64 0:3.3.2-160.el9_2.tuxcare.els14 0:13.0.3-160.el9_2.tuxcare.els14 0:1.4.0-160.el9_2.tuxcare.els14 0:6.3.3-160.el9_2.tuxcare.els14 0:3.3.3-160.el9_2.tuxcare.els14 0:0.2.9-160.el9_2.tuxcare.els14 0:3.3.7-160.el9_2.tuxcare.els14 0:0.15.2-160.el9_2.tuxcare.els14 0:3.2.33-160.el9_2.tuxcare.els14 0:3.9.16-1.el9_2.2.tuxcare.els25 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els25 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els13 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els13 0:20221207gitfff6d81270b5-9.el9_2.tuxcare.els4 x86_64 0:20221207gitfff6d81270b5-9.el9_2.tuxcare.els4 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els4 x86_64 0:2.14.2-5.el9_2.tuxcare.els1 1:9.0.62-12.el9_2.1.tuxcare.els2 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els32 2:8.2.2637-22.el9_2.1.tuxcare.els32 i686|x86_64 0:2.3.4-27.el9_2.tuxcare.els1 x86_64 0:2.3.4-27.el9_2.tuxcare.els1 i686|x86_64 0:2.3.2-3.el9_2.tuxcare.els3 x86_64 0:2.3.2-3.el9_2.tuxcare.els3 x86_64 5:2.2.6-1.el9_2.tuxcare.els1 i686|x86_64 0:2.4.0-7.el9_2.tuxcare.els1 0:2.4.0-7.el9_2.tuxcare.els1 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els25 i686|x86_64 0:0.10.4-8.el9_2.tuxcare.els12 0:0.10.4-8.el9_2.tuxcare.els12 x86_64 0:1.1.3-3.el9_2.tuxcare.els1 x86_64 0:5.2.5-8.tuxcare.els1 i686|x86_64 0:5.2.5-8.tuxcare.els1 x86_64 0:0.16-100.el9_2.tuxcare.els1 i686|x86_64 0:3.7.6-23.el9_2.tuxcare.4.els5 x86_64 0:3.7.6-23.el9_2.tuxcare.4.els5 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|[2-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els2 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els2 0:5.14.0-284.1101.el9_2.tuxcare.11.els2 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els2 0:2.17.2-1.el9_2.tuxcare.els1 x86_64 0:11.3.1-4.3.el9_2.alma.tuxcare.els3 i686|x86_64 0:11.3.1-4.3.el9_2.alma.tuxcare.els3 x86_64 0:3.2.3-19.el9_2.tuxcare.els7 0:3.2.3-19.el9_2.tuxcare.els7 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els12 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els12 1:2.3.3op2-16.el9_2.1.tuxcare.els12 x86_64 0:10.2-10.el9_2.tuxcare.els1 0:10.2-10.el9_2.tuxcare.els1 i686|x86_64 0:2.0.32-3.el9_2.tuxcare.els1 x86_64 0:2.0.32-3.el9_2.tuxcare.els1 i686|x86_64 0:5.15.3-1.tuxcare.els1.el9_2 x86_64 0:5.15.3-1.tuxcare.els1.el9_2 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els26 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els12 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els12 32:9.16.23-11.el9_2.2.tuxcare.els12 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els10 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els10 32:9.16.23-11.el9_2.2.tuxcare.els10 i686|x86_64 0:9-12.el9_2.tuxcare.els1 x86_64 0:9-12.el9_2.tuxcare.els1 i686|x86_64 0:3.7.6-23.el9_2.tuxcare.4.els7 x86_64 0:3.7.6-23.el9_2.tuxcare.4.els7 x86_64 0:1.16.2-3.el9_2.tuxcare.els6 i686|x86_64 0:1.16.2-3.el9_2.tuxcare.els6 x86_64 0:3.2.3-19.el9_2.tuxcare.els8 0:3.2.3-19.el9_2.tuxcare.els8 x86_64 0:3.2.3-19.el9_2.tuxcare.els9 0:3.2.3-19.el9_2.tuxcare.els9 x86_64 32:9.16.23-11.el9_2.2.tuxcare.els11 i686|x86_64 32:9.16.23-11.el9_2.2.tuxcare.els11 32:9.16.23-11.el9_2.2.tuxcare.els11 0:3.9.16-1.el9_2.2.tuxcare.els26 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els26 x86_64 0:1.16.2-3.el9_2.tuxcare.els8 i686|x86_64 0:1.16.2-3.el9_2.tuxcare.els8 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els12 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els12 x86_64 0:4.99.1-1.el9_2.tuxcare.els2 i686|x86_64 0:1.0.31-7.el9_2.tuxcare.els3 x86_64 0:1.0.31-7.el9_2.tuxcare.els3 x86_64 4:5.32.1-481.1.el9_2.tuxcare.els2 0:1.01-481.1.el9_2.tuxcare.els2 0:5.74-481.1.el9_2.tuxcare.els2 x86_64 0:1.80-481.1.el9_2.tuxcare.els2 0:1.23-481.1.el9_2.tuxcare.els2 0:0.66-481.1.el9_2.tuxcare.els2 0:0.03-481.1.el9_2.tuxcare.els2 0:0.06-481.1.el9_2.tuxcare.els2 x86_64 0:1.28-481.1.el9_2.tuxcare.els2 0:1.06-481.1.el9_2.tuxcare.els2 0:1.05-481.1.el9_2.tuxcare.els2 0:2.27-481.1.el9_2.tuxcare.els2 x86_64 0:1.47-481.1.el9_2.tuxcare.els2 0:1.11-481.1.el9_2.tuxcare.els2 x86_64 0:1.30-481.1.el9_2.tuxcare.els2 0:0.25-481.1.el9_2.tuxcare.els2 0:1.35-481.1.el9_2.tuxcare.els2 0:1.09-481.1.el9_2.tuxcare.els2 x86_64 0:1.13-481.1.el9_2.tuxcare.els2 0:2.85-481.1.el9_2.tuxcare.els2 0:1.100.600-481.1.el9_2.tuxcare.els2 0:2.34-481.1.el9_2.tuxcare.els2 x86_64 0:1.12-481.1.el9_2.tuxcare.els2 0:1.37-481.1.el9_2.tuxcare.els2 0:1.10-481.1.el9_2.tuxcare.els2 0:2.03-481.1.el9_2.tuxcare.els2 0:1.51-481.1.el9_2.tuxcare.els2 x86_64 0:1.18-481.1.el9_2.tuxcare.els2 0:1.12-481.1.el9_2.tuxcare.els2 x86_64 0:0.23-481.1.el9_2.tuxcare.els2 x86_64 0:1.20-481.1.el9_2.tuxcare.els2 0:1.02-481.1.el9_2.tuxcare.els2 0:0.44-481.1.el9_2.tuxcare.els2 x86_64 0:0.19-481.1.el9_2.tuxcare.els2 x86_64 0:1.43-481.1.el9_2.tuxcare.els2 0:1.21-481.1.el9_2.tuxcare.els2 1:0.21-481.1.el9_2.tuxcare.els2 0:1.59-481.1.el9_2.tuxcare.els2 0:1.03-481.1.el9_2.tuxcare.els2 1:0.08-481.1.el9_2.tuxcare.els2 x86_64 0:1.15-481.1.el9_2.tuxcare.els2 0:0.67-481.1.el9_2.tuxcare.els2 x86_64 0:1.16-481.1.el9_2.tuxcare.els2 x86_64 0:1.48-481.1.el9_2.tuxcare.els2 x86_64 0:1.94-481.1.el9_2.tuxcare.els2 0:1.13-481.1.el9_2.tuxcare.els2 0:1.25-481.1.el9_2.tuxcare.els2 0:2.41-481.1.el9_2.tuxcare.els2 0:1.07-481.1.el9_2.tuxcare.els2 0:1.26-481.1.el9_2.tuxcare.els2 0:1.08-481.1.el9_2.tuxcare.els2 x86_64 0:1.23-481.1.el9_2.tuxcare.els2 0:1.403-481.1.el9_2.tuxcare.els2 0:1.17-481.1.el9_2.tuxcare.els2 0:1.31-481.1.el9_2.tuxcare.els2 0:3.05-481.1.el9_2.tuxcare.els2 0:2.13-481.1.el9_2.tuxcare.els2 0:4.6-481.1.el9_2.tuxcare.els2 0:1.1-481.1.el9_2.tuxcare.els2 x86_64 0:1.3401-481.1.el9_2.tuxcare.els2 0:0.75-481.1.el9_2.tuxcare.els2 0:1.56-481.1.el9_2.tuxcare.els2 0:0.04-481.1.el9_2.tuxcare.els2 i686|x86_64 4:5.32.1-481.1.el9_2.tuxcare.els2 0:5.32.1-481.1.el9_2.tuxcare.els2 0:0.13-481.1.el9_2.tuxcare.els2 0:0.60.800-481.1.el9_2.tuxcare.els2 x86_64 0:0.65-481.1.el9_2.tuxcare.els2 4:5.32.1-481.1.el9_2.tuxcare.els2 0:0.02-481.1.el9_2.tuxcare.els2 x86_64 0:5.32.1-481.1.el9_2.tuxcare.els2 0:2.04-481.1.el9_2.tuxcare.els2 0:1.04-481.1.el9_2.tuxcare.els2 x86_64 0:6.9.13.25-1.el9_2.tuxcare.els7 i686|x86_64 0:1.12.7-2.el9_2.tuxcare.els6 0:1.12.7-2.el9_2.tuxcare.els6 x86_64 0:1.12.7-2.el9_2.tuxcare.els6 0:3.9.16-1.el9_2.2.tuxcare.els27 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els27 i686|x86_64 1:2.3.16-8.el9_2.tuxcare.els6 x86_64 1:2.3.16-8.el9_2.tuxcare.els6 x86_64 0:5.6.1-5.el9_2.tuxcare.els2 i686|x86_64 0:2.5.0-1.el9_2.tuxcare.els12 x86_64 0:2.5.0-1.el9_2.tuxcare.els12 i686|x86_64 0:0.22.0-2.el9_2.tuxcare.els8 x86_64 0:3.2.3-19.el9_2.tuxcare.els10 0:3.2.3-19.el9_2.tuxcare.els10 x86_64 0:1.22.9-1.el9_2.tuxcare.els13 0:1.22.9-1.el9_2.tuxcare.els13 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els8 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els8 0:4.17.5-103.el9_2.alma.tuxcare.els8 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els33 2:8.2.2637-22.el9_2.1.tuxcare.els33 x86_64 0:1.16.2-3.el9_2.tuxcare.els9 i686|x86_64 0:1.16.2-3.el9_2.tuxcare.els9 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els9 i686|x86_64 0:5.15.3-1.el9_2.tuxcare.els1 x86_64 0:5.15.3-1.el9_2.tuxcare.els1 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els27 x86_64 0:76-2.el9_2.2.alma.tuxcare.els3 x86_64 0:2.34-61.el9_2.1.tuxcare.els4 i686|x86_64 0:2.34-61.el9_2.1.tuxcare.els4 0:2.34-61.el9_2.1.tuxcare.els4 1:9.0.62-12.el9_2.1.tuxcare.els3 x86_64 0:8.0.46-1.el9_2.tuxcare.els1 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els10 x86_64 0:1.22.9-1.el9_2.tuxcare.els15 0:1.22.9-1.el9_2.tuxcare.els15 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els28 x86_64 0:286.2-1.el9_2.tuxcare.els2 0:286.2-1.el9_2.tuxcare.els2 0:42.2.28-1.el9.tuxcare.els2 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els17 i686|x86_64 0:0.7.22-4.el9_2.tuxcare.els1 x86_64 0:0.7.22-4.el9_2.tuxcare.els1 x86_64 0:8.3.1-5.el9_2.2.alma.tuxcare.els5 0:8.3.1-5.el9_2.2.alma.tuxcare.els5 0:3.9.16-1.el9_2.2.tuxcare.els28 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els28 i686|x86_64 1:1.1.1k-4.el9_0.tuxcare.els3 x86_64 0:6.0-57.4.el9.tuxcare.els1 i686|x86_64 0:2.35.2-37.el9.tuxcare.els13 x86_64 0:2.35.2-37.el9.tuxcare.els13 x86_64 0:3.1.1-3.el9.tuxcare.els7 i686|x86_64 0:3.1.1-3.el9.tuxcare.els7 i686|x86_64 0:21.01.0-14.el9.tuxcare.els4 0:21.01.0-14.el9.tuxcare.els4 x86_64 0:21.01.0-14.el9.tuxcare.els4 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els7 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els15 0:2.4.53-11.el9_2.5.tuxcare.els15 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els15 x86_64 0:2.10-1.el9.tuxcare.els1 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els18 i686|x86_64 0:5.2.1-9.el9.tuxcare.els5 x86_64 0:5.2.1-9.el9.tuxcare.els5 x86_64 0:1.22.9-1.el9_2.tuxcare.els16 0:1.22.9-1.el9_2.tuxcare.els16 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|[4-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els4 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els4 0:5.14.0-284.1101.el9_2.tuxcare.11.els4 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els4 i686|x86_64 0:21.01.0-14.el9.tuxcare.els5 0:21.01.0-14.el9.tuxcare.els5 x86_64 0:21.01.0-14.el9.tuxcare.els5 x86_64 2:1.11.2-0.1.el9.tuxcare.els6 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els11 x86_64 0:3.34.1-6.el9_1.tuxcare.els3 i686|x86_64 0:3.34.1-6.el9_1.tuxcare.els3 0:3.34.1-6.el9_1.tuxcare.els3 i686|x86_64 0:1.0.4-10.el9.tuxcare.els4 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els16 0:2.4.53-11.el9_2.5.tuxcare.els16 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els16 x86_64 0:3.7.6-23.el9_2.tuxcare.4.els10 x86_64 0:1.7.4.1-5.el9.tuxcare.els1 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els10 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els10 0:4.17.5-103.el9_2.alma.tuxcare.els10 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els18 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els18 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els19 0:2.4.53-11.el9_2.5.tuxcare.els19 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els19 x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els9 i686|x86_64 0:4.17.5-103.el9_2.alma.tuxcare.els9 0:4.17.5-103.el9_2.alma.tuxcare.els9 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els13 x86_64 0:2.4.53-11.el9_2.5.tuxcare.els20 0:2.4.53-11.el9_2.5.tuxcare.els20 x86_64 1:2.4.53-11.el9_2.5.tuxcare.els20 x86_64 0:2.52.4-1.el9.tuxcare.els9 x86_64 0:2.2.4-5.el9_2.tuxcare.els5 0:2.2.4-5.el9_2.tuxcare.els5 x86_64 0:2.0.20210109-4.el9.tuxcare.els1 0:1.10.9-7.el9.tuxcare.els1 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els14 i686|x86_64 0:3.0.4-160.el9_2.tuxcare.els15 0:3.0.4-160.el9_2.tuxcare.els15 i686|x86_64 0:3.0.0-160.el9_2.tuxcare.els15 0:2.2.33-160.el9_2.tuxcare.els15 i686|x86_64 0:0.5.7-160.el9_2.tuxcare.els15 0:1.3.5-160.el9_2.tuxcare.els15 i686|x86_64 0:2.5.1-160.el9_2.tuxcare.els15 0:5.14.2-160.el9_2.tuxcare.els15 0:1.2.0-160.el9_2.tuxcare.els15 i686|x86_64 0:3.3.2-160.el9_2.tuxcare.els15 0:13.0.3-160.el9_2.tuxcare.els15 0:1.4.0-160.el9_2.tuxcare.els15 0:6.3.3-160.el9_2.tuxcare.els15 0:3.3.3-160.el9_2.tuxcare.els15 0:0.2.9-160.el9_2.tuxcare.els15 0:3.3.7-160.el9_2.tuxcare.els15 0:0.15.2-160.el9_2.tuxcare.els15 0:3.2.33-160.el9_2.tuxcare.els15 x86_64 0:3.21.2-6.el9.alma.tuxcare.els1 i686|x86_64 0:3.21.2-6.el9.alma.tuxcare.els1 i686|x86_64 0:21.1.3-7.el9.tuxcare.els16 x86_64 0:40.5-2.el9.tuxcare.els1 i686|x86_64 0:40.5-2.el9.tuxcare.els1 x86_64 0:2.4.17-6.el9.tuxcare.els5 0:22.1-10.el9.alma.tuxcare.els4 x86_64 2:1.39.6-1.el9_2.tuxcare.els9 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els15 0:2.102-4.el9.tuxcare.els1 i686|x86_64 0:1.6-14.el9.tuxcare.els7 x86_64 0:1.12.0-13.el9_2.tuxcare.els25 0:1.12.0-13.el9_2.tuxcare.els25 x86_64 0:1.22.9-1.el9_2.tuxcare.els17 0:1.22.9-1.el9_2.tuxcare.els17 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els20 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els20 x86_64 0:5.2-2.el9_1.tuxcare.els2 i686|x86_64 0:1.20.1-9.el9_2.tuxcare.els9 x86_64 0:1.20.1-9.el9_2.tuxcare.els9 x86_64 0:3.2.3-19.el9_2.tuxcare.els11 0:3.2.3-19.el9_2.tuxcare.els11 i686|x86_64 0:2.37.4-11.el9_2.tuxcare.els3 x86_64 0:2.37.4-11.el9_2.tuxcare.els3 x86_64 1:3.0.7-20.el9_2.tuxcare.1.els19 i686|x86_64 1:3.0.7-20.el9_2.tuxcare.1.els19 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els36 2:8.2.2637-22.el9_2.1.tuxcare.els36 x86_64 2:4.4.1-13.el9_2.tuxcare.els13 2:4.4.1-13.el9_2.tuxcare.els13 x86_64 0:1.12.0-13.el9_2.tuxcare.els26 0:1.12.0-13.el9_2.tuxcare.els26 x86_64 4:1.2.8-1.el9_1.tuxcare.els3 i686|x86_64 0:2.9.13-3.el9_2.1.tuxcare.els14 x86_64 0:2.9.13-3.el9_2.1.tuxcare.els14 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els37 2:8.2.2637-22.el9_2.1.tuxcare.els37 x86_64 0:6.9.13.25-1.el9_2.tuxcare.els9 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els16 x86_64 0:057-21.git20230214.el9.tuxcare.els1 0:2.38-6.el9.tuxcare.els1 x86_64 0:1.12.0-13.el9_2.tuxcare.els27 0:1.12.0-13.el9_2.tuxcare.els27 i686|x86_64 0:1.6-14.el9_2.tuxcare.els9 0:2.14.1-2.el9_2.tuxcare.els3 i686|x86_64 0:2.68.4-6.el9.tuxcare.els8 0:2.68.4-6.el9.tuxcare.els8 x86_64 0:2.68.4-6.el9.tuxcare.els8 x86_64 1:16.20.2-8.el9_2.tuxcare.els14 1:16.20.2-8.el9_2.tuxcare.els14 i686|x86_64 1:16.20.2-8.el9_2.tuxcare.els14 x86_64 1:8.19.4_1.16.20.2-8.el9_2.tuxcare.els14 x86_64 2:9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els14 x86_64 5:2.2.6-1.el9_2.tuxcare.els2 x86_64 0:6.9.13.25-1.el9_2.tuxcare.els13 i686|x86_64 0:0.20.2-5.el9_2.tuxcare.els5 x86_64 0:0.20.2-5.el9_2.tuxcare.els5 x86_64 1:2.4.19-1.el9.tuxcare.els2 i686|x86_64 0:0.20.2-5.el9_2.tuxcare.els4 x86_64 0:0.20.2-5.el9_2.tuxcare.els4 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|[6-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els6 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els6 0:5.14.0-284.1101.el9_2.tuxcare.11.els6 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els6 x86_64 3:10.5.29-1.el9_2.alma.1.tuxcare.els2 x86_64 0:1.15.19-5.el9_2.0.tuxcare.els1 i686|x86_64 0:1.1.34-9.el9.tuxcare.els5 x86_64 0:2.19-5.el9_2.tuxcare.els1 x86_64 1:3.4.10-4.el9_2.tuxcare.els9 i686|x86_64 1:3.4.10-4.el9_2.tuxcare.els9 x86_64 5:2.2.6-1.el9_2.tuxcare.els3 i686|x86_64 0:21.01.0-14.el9_2.tuxcare.els6 0:21.01.0-14.el9_2.tuxcare.els6 x86_64 0:21.01.0-14.el9_2.tuxcare.els6 x86_64 0:1.12-1.el9_2.tuxcare.els1 x86_64 3:10.5.29-1.el9_2.alma.1.tuxcare.els3 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els18 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els17 i686|x86_64 0:0.7.22-4.el9_2.tuxcare.els2 x86_64 0:0.7.22-4.el9_2.tuxcare.els2 i686|x86_64 0:3.0.4-160.el9_2.tuxcare.els16 0:3.0.4-160.el9_2.tuxcare.els16 i686|x86_64 0:3.0.0-160.el9_2.tuxcare.els16 0:2.2.33-160.el9_2.tuxcare.els16 i686|x86_64 0:0.5.7-160.el9_2.tuxcare.els16 0:1.3.5-160.el9_2.tuxcare.els16 i686|x86_64 0:2.5.1-160.el9_2.tuxcare.els16 0:5.14.2-160.el9_2.tuxcare.els16 0:1.2.0-160.el9_2.tuxcare.els16 i686|x86_64 0:3.3.2-160.el9_2.tuxcare.els16 0:13.0.3-160.el9_2.tuxcare.els16 0:1.4.0-160.el9_2.tuxcare.els16 0:6.3.3-160.el9_2.tuxcare.els16 0:3.3.3-160.el9_2.tuxcare.els16 0:0.2.9-160.el9_2.tuxcare.els16 0:3.3.7-160.el9_2.tuxcare.els16 0:0.15.2-160.el9_2.tuxcare.els16 0:3.2.33-160.el9_2.tuxcare.els16 x86_64 0:2.4.17-6.el9.tuxcare.els6 x86_64 0:8.32-34.el9.tuxcare.els1 1:9.0.62-12.el9_2.1.tuxcare.els4 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els19 i686|x86_64 0:2.35.2-37.el9.tuxcare.els14 x86_64 0:2.35.2-37.el9.tuxcare.els14 x86_64 0:1.6.9-7.el9.tuxcare.els2 x86_64 1:16.20.2-8.el9_2.tuxcare.els15 1:16.20.2-8.el9_2.tuxcare.els15 i686|x86_64 1:16.20.2-8.el9_2.tuxcare.els15 x86_64 1:8.19.4_1.16.20.2-8.el9_2.tuxcare.els15 x86_64 2:9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els15 x86_64 0:8.7p1-30.el9_2.tuxcare.els13 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els13 i686|x86_64 0:3.0.4-160.el9_2.tuxcare.els17 0:3.0.4-160.el9_2.tuxcare.els17 i686|x86_64 0:3.0.0-160.el9_2.tuxcare.els17 0:2.2.33-160.el9_2.tuxcare.els17 i686|x86_64 0:0.5.7-160.el9_2.tuxcare.els17 0:1.3.5-160.el9_2.tuxcare.els17 i686|x86_64 0:2.5.1-160.el9_2.tuxcare.els17 0:5.14.2-160.el9_2.tuxcare.els17 0:1.2.0-160.el9_2.tuxcare.els17 i686|x86_64 0:3.3.2-160.el9_2.tuxcare.els17 0:13.0.3-160.el9_2.tuxcare.els17 0:1.4.0-160.el9_2.tuxcare.els17 0:6.3.3-160.el9_2.tuxcare.els17 0:3.3.3-160.el9_2.tuxcare.els17 0:0.2.9-160.el9_2.tuxcare.els17 0:3.3.7-160.el9_2.tuxcare.els17 0:0.15.2-160.el9_2.tuxcare.els17 0:3.2.33-160.el9_2.tuxcare.els17 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els10 x86_64 2:40.3-2.el9_2.tuxcare.els2 i686|x86_64 2:40.3-2.el9_2.tuxcare.els2 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els13 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els13 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|[8-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els8 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els8 0:5.14.0-284.1101.el9_2.tuxcare.11.els8 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els8 i686|x86_64 0:0.7.22-4.el9_2.tuxcare.els3 x86_64 0:0.7.22-4.el9_2.tuxcare.els3 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els23 i686|x86_64 0:1.19.3-7.el9_2.tuxcare.els1 x86_64 0:1.19.3-7.el9_2.tuxcare.els1 x86_64 0:4.12-2.el9_2.tuxcare.els2 i686|x86_64 0:1.18.4-6.el9.tuxcare.els18 x86_64 0:1.18.4-6.el9.tuxcare.els18 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els38 2:8.2.2637-22.el9_2.1.tuxcare.els38 x86_64 2:2.99.8-4.el9.2.tuxcare.els12 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els12 x86_64 0:5.1.1-1.el9_2.tuxcare.els4 x86_64 4:1.2.8-1.el9_1.tuxcare.els4 x86_64 0:1.21.1-7.el9.tuxcare.els3 x86_64 2:4.4.1-13.el9_2.tuxcare.els14 2:4.4.1-13.el9_2.tuxcare.els14 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els19 i686|x86_64 0:2.5.0-1.el9_2.tuxcare.els13 x86_64 0:2.5.0-1.el9_2.tuxcare.els13 x86_64 1:16.20.2-8.el9_2.tuxcare.els16 1:16.20.2-8.el9_2.tuxcare.els16 i686|x86_64 1:16.20.2-8.el9_2.tuxcare.els16 x86_64 1:8.19.4_1.16.20.2-8.el9_2.tuxcare.els16 x86_64 2:9.4.146.26_1.16.20.2-8.el9_2.tuxcare.els16 x86_64 0:3.1.1-3.el9.tuxcare.els8 i686|x86_64 0:3.1.1-3.el9.tuxcare.els8 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els13 0:9.54.0-11.el9_2.tuxcare.els13 x86_64 0:9.54.0-11.el9_2.tuxcare.els13 i686|x86_64 0:1.18.4-6.el9_2.tuxcare.els7 x86_64 0:4.12-2.el9_2.tuxcare.els3 x86_64 2:1.39.6-1.el9_2.tuxcare.els11 x86_64 2:2.99.8-4.el9.2.tuxcare.els13 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els13 0:3.9.16-1.el9_2.2.tuxcare.els29 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els29 x86_64 0:1.22.9-1.el9_2.tuxcare.els18 0:1.22.9-1.el9_2.tuxcare.els18 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els39 2:8.2.2637-22.el9_2.1.tuxcare.els39 i686|x86_64 0:2.72.0-10.el9_2.3.tuxcare.els8 0:2.72.0-10.el9_2.3.tuxcare.els8 x86_64 0:5.1.0-6.el9.tuxcare.els2 0:5.1.0-6.el9.tuxcare.els2 x86_64 0:8.7p1-30.el9_2.tuxcare.els20 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els20 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|9))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els9 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els9 0:5.14.0-284.1101.el9_2.tuxcare.11.els9 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els9 i686|x86_64 0:2.5.0-1.el9_2.tuxcare.els14 x86_64 0:2.5.0-1.el9_2.tuxcare.els14 i686|x86_64 0:3.16.1-4.el9_2.tuxcare.els4 x86_64 0:3.16.1-4.el9_2.tuxcare.els4 0:3.16.1-4.el9_2.tuxcare.els4 x86_64 0:1.7.2-21.el9_2.tuxcare.els1 i686|x86_64 0:1.7.2-21.el9_2.tuxcare.els1 i686|x86_64 0:21.1.3-7.el9.tuxcare.els17 x86_64 2:1.11.2-0.1.el9_2.tuxcare.els7 x86_64 0:4.12-2.el9_2.tuxcare.els4 x86_64 2:4.4.1-13.el9_2.tuxcare.els18 2:4.4.1-13.el9_2.tuxcare.els18 x86_64 2:4.4.1-13.el9_2.tuxcare.els17 2:4.4.1-13.el9_2.tuxcare.els17 x86_64 0:1.21.1-7.el9_2.tuxcare.els4 x86_64 4:5.32.1-481.1.el9_2.tuxcare.els3 0:1.01-481.1.el9_2.tuxcare.els3 0:5.74-481.1.el9_2.tuxcare.els3 x86_64 0:1.80-481.1.el9_2.tuxcare.els3 0:1.23-481.1.el9_2.tuxcare.els3 0:0.66-481.1.el9_2.tuxcare.els3 0:0.03-481.1.el9_2.tuxcare.els3 0:0.06-481.1.el9_2.tuxcare.els3 x86_64 0:1.28-481.1.el9_2.tuxcare.els3 0:1.06-481.1.el9_2.tuxcare.els3 0:1.05-481.1.el9_2.tuxcare.els3 0:2.27-481.1.el9_2.tuxcare.els3 x86_64 0:1.47-481.1.el9_2.tuxcare.els3 0:1.11-481.1.el9_2.tuxcare.els3 x86_64 0:1.30-481.1.el9_2.tuxcare.els3 0:0.25-481.1.el9_2.tuxcare.els3 0:1.35-481.1.el9_2.tuxcare.els3 0:1.09-481.1.el9_2.tuxcare.els3 x86_64 0:1.13-481.1.el9_2.tuxcare.els3 0:2.85-481.1.el9_2.tuxcare.els3 0:1.100.600-481.1.el9_2.tuxcare.els3 0:2.34-481.1.el9_2.tuxcare.els3 x86_64 0:1.12-481.1.el9_2.tuxcare.els3 0:1.37-481.1.el9_2.tuxcare.els3 0:1.10-481.1.el9_2.tuxcare.els3 0:2.03-481.1.el9_2.tuxcare.els3 0:1.51-481.1.el9_2.tuxcare.els3 x86_64 0:1.18-481.1.el9_2.tuxcare.els3 0:1.12-481.1.el9_2.tuxcare.els3 x86_64 0:0.23-481.1.el9_2.tuxcare.els3 x86_64 0:1.20-481.1.el9_2.tuxcare.els3 0:1.02-481.1.el9_2.tuxcare.els3 0:0.44-481.1.el9_2.tuxcare.els3 x86_64 0:0.19-481.1.el9_2.tuxcare.els3 x86_64 0:1.43-481.1.el9_2.tuxcare.els3 0:1.21-481.1.el9_2.tuxcare.els3 1:0.21-481.1.el9_2.tuxcare.els3 0:1.59-481.1.el9_2.tuxcare.els3 0:1.03-481.1.el9_2.tuxcare.els3 1:0.08-481.1.el9_2.tuxcare.els3 x86_64 0:1.15-481.1.el9_2.tuxcare.els3 0:0.67-481.1.el9_2.tuxcare.els3 x86_64 0:1.16-481.1.el9_2.tuxcare.els3 x86_64 0:1.48-481.1.el9_2.tuxcare.els3 x86_64 0:1.94-481.1.el9_2.tuxcare.els3 0:1.13-481.1.el9_2.tuxcare.els3 0:1.25-481.1.el9_2.tuxcare.els3 0:2.41-481.1.el9_2.tuxcare.els3 0:1.07-481.1.el9_2.tuxcare.els3 0:1.26-481.1.el9_2.tuxcare.els3 0:1.08-481.1.el9_2.tuxcare.els3 x86_64 0:1.23-481.1.el9_2.tuxcare.els3 0:1.403-481.1.el9_2.tuxcare.els3 0:1.17-481.1.el9_2.tuxcare.els3 0:1.31-481.1.el9_2.tuxcare.els3 0:3.05-481.1.el9_2.tuxcare.els3 0:2.13-481.1.el9_2.tuxcare.els3 0:4.6-481.1.el9_2.tuxcare.els3 0:1.1-481.1.el9_2.tuxcare.els3 x86_64 0:1.3401-481.1.el9_2.tuxcare.els3 0:0.75-481.1.el9_2.tuxcare.els3 0:1.56-481.1.el9_2.tuxcare.els3 0:0.04-481.1.el9_2.tuxcare.els3 i686|x86_64 4:5.32.1-481.1.el9_2.tuxcare.els3 0:5.32.1-481.1.el9_2.tuxcare.els3 0:0.13-481.1.el9_2.tuxcare.els3 0:0.60.800-481.1.el9_2.tuxcare.els3 x86_64 0:0.65-481.1.el9_2.tuxcare.els3 4:5.32.1-481.1.el9_2.tuxcare.els3 0:0.02-481.1.el9_2.tuxcare.els3 x86_64 0:5.32.1-481.1.el9_2.tuxcare.els3 0:2.04-481.1.el9_2.tuxcare.els3 0:1.04-481.1.el9_2.tuxcare.els3 x86_64 0:1.22.9-1.el9_2.tuxcare.els19 0:1.22.9-1.el9_2.tuxcare.els19 i686|x86_64 0:9.54.0-11.el9_2.tuxcare.els12 0:9.54.0-11.el9_2.tuxcare.els12 x86_64 0:9.54.0-11.el9_2.tuxcare.els12 x86_64 0:3.19.0-2.el9.tuxcare.els2 i686|x86_64 0:3.19.0-2.el9.tuxcare.els2 x86_64 1:2.0206-5.el9.tuxcare.els1 i686|x86_64 0:3.9.0-8.el9_2.tuxcare.els1 x86_64 0:3.9.0-8.el9_2.tuxcare.els1 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els24 i686|x86_64 0:1.10.0-12.el9_2.tuxcare.els2 x86_64 0:8.7p1-30.el9_2.tuxcare.els21 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els21 x86_64 0:2.2.4-5.el9_2.tuxcare.els6 0:2.2.4-5.el9_2.tuxcare.els6 x86_64 0:2.85-6.el9_2.tuxcare.els4 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els11 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els11 x86_64 0:1.2.8-1.el9_2.tuxcare.els1 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els25 x86_64 0:3.21.2-6.el9.alma.tuxcare.els2 i686|x86_64 0:3.21.2-6.el9.alma.tuxcare.els2 x86_64 0:115.4.1-1.el9_2.alma.tuxcare.els27 x86_64 0:2.7.6-16.el9_2.tuxcare.els1 x86_64 0:2.2.4-5.el9_2.tuxcare.els7 0:2.2.4-5.el9_2.tuxcare.els7 i686|x86_64 0:2.0.3-12.el9.tuxcare.els3 x86_64 0:5.1.0-6.el9_2.tuxcare.els3 0:5.1.0-6.el9_2.tuxcare.els3 i686|x86_64 0:2.8.2-3.el9_2.alma.tuxcare.els3 x86_64 0:2.8.2-3.el9_2.alma.tuxcare.els3 0:2.8.2-3.el9_2.alma.tuxcare.els3 x86_64 17:7.2.0-15.el9_2.1.alma.1.tuxcare.els2 1:9.0.62-12.el9_2.1.tuxcare.els7 i686|x86_64 0:5.4.0-5.el9.tuxcare.els1 i686|x86_64 0:0.4.34-2.el9.tuxcare.els2 x86_64 0:0.4.34-2.el9.tuxcare.els2 i686|x86_64 0:1.80.0-4.el9_2.1.tuxcare.els1 x86_64 0:1.80.0-4.el9_2.1.tuxcare.els1 x86_64 0:7.0-1.el9.tuxcare.els1 i686|x86_64 0:7.0-1.el9.tuxcare.els1 x86_64 0:115.4.0-1.el9_2.alma.1.tuxcare.els1 0:1.13.1-10.el9.tuxcare.els1 i686|x86_64 0:21.01.0-14.el9_2.tuxcare.els7 0:21.01.0-14.el9_2.tuxcare.els7 x86_64 0:21.01.0-14.el9_2.tuxcare.els7 0:1.13.1-10.el9.tuxcare.els2 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els(?:\d{3,}|[4-9]\d|3[4-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els34 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els34 0:5.14.0-284.1101.el9_2.tuxcare.7.els34 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els34 i686|x86_64 0:1.7.1-11.el9_2.tuxcare.els1 x86_64 0:1.7.1-11.el9_2.tuxcare.els1 0:1.7.1-11.el9_2.tuxcare.els1 x86_64 0:2.52.5-1.el9.tuxcare.els10 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|[1-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els1 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els1 0:5.14.0-284.1101.el9_2.tuxcare.11.els1 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els1 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els(?:\d{3,}|[4-9]\d|3[0-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els30 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els30 0:5.14.0-284.1101.el9_2.tuxcare.7.els30 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els30 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|[7-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els7 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els7 0:5.14.0-284.1101.el9_2.tuxcare.11.els7 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els7 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|[3-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els3 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els3 0:5.14.0-284.1101.el9_2.tuxcare.11.els3 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els3 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{2,}|[7-9]))(?:\.els(?:\d{3,}|[4-9]\d|3[1-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els31 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els31 0:5.14.0-284.1101.el9_2.tuxcare.7.els31 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els31 x86_64 7:5.5-5.el9_2.1.tuxcare.els14 x86_64 0:8.7p1-30.el9_2.tuxcare.els22 x86_64 0:0.10.4-5.30.el9_2.tuxcare.els22 x86_64 0:2.4.0-1.el9_2.tuxcare.els1 i686|x86_64 0:2.4.0-1.el9_2.tuxcare.els1 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare(?:\.(?:\d{3,}|[2-9]\d|1[1-9]))(?:\.els(?:\d{2,}|[5-9]))?\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els5 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els5 0:5.14.0-284.1101.el9_2.tuxcare.11.els5 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els5 i686|x86_64 0:13.5-1.el9.tuxcare.els4 x86_64 0:1.16.2-3.el9_2.tuxcare.els10 i686|x86_64 0:1.16.2-3.el9_2.tuxcare.els10 x86_64 1:11.0.32.0.9-1.el9.tuxcare.els1 x86_64 0:3.1.1-3.el9.tuxcare.els9 i686|x86_64 0:3.1.1-3.el9.tuxcare.els9 x86_64 1:3.4.10-4.el9_2.tuxcare.els12 i686|x86_64 1:3.4.10-4.el9_2.tuxcare.els12 x86_64 1:17.0.20.0.8-1.el9.tuxcare.els1 i686|x86_64 0:4.4.0-8.el9_2.tuxcare.els13 x86_64 0:4.4.0-8.el9_2.tuxcare.els13 i686|x86_64 0:0.20.2-5.el9_2.tuxcare.els6 x86_64 0:0.20.2-5.el9_2.tuxcare.els6 x86_64 0:1.22.9-1.el9_2.tuxcare.els20 0:1.22.9-1.el9_2.tuxcare.els20 x86_64 0:4.12-2.el9_2.tuxcare.els5 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els12 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els12 x86_64 2:8.2.2637-22.el9_2.1.tuxcare.els40 2:8.2.2637-22.el9_2.1.tuxcare.els40 i686|x86_64 0:3.0.4-160.el9_2.tuxcare.els18 0:3.0.4-160.el9_2.tuxcare.els18 i686|x86_64 0:3.0.0-160.el9_2.tuxcare.els18 0:2.2.33-160.el9_2.tuxcare.els18 i686|x86_64 0:0.5.7-160.el9_2.tuxcare.els18 0:1.3.5-160.el9_2.tuxcare.els18 i686|x86_64 0:2.5.1-160.el9_2.tuxcare.els18 0:5.14.2-160.el9_2.tuxcare.els18 0:1.2.0-160.el9_2.tuxcare.els18 i686|x86_64 0:3.3.2-160.el9_2.tuxcare.els18 0:13.0.3-160.el9_2.tuxcare.els18 0:1.4.0-160.el9_2.tuxcare.els18 0:6.3.3-160.el9_2.tuxcare.els18 0:3.3.3-160.el9_2.tuxcare.els18 0:0.2.9-160.el9_2.tuxcare.els18 0:3.3.7-160.el9_2.tuxcare.els18 0:0.15.2-160.el9_2.tuxcare.els18 0:3.2.33-160.el9_2.tuxcare.els18 i686|x86_64 0:1.5.30-14.el9.tuxcare.els4 x86_64 0:1.643-9.el9_2.tuxcare.els1 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare\.(?:\d{2,}|[8-9])(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare\.7\.els(?:\d{3,}|[2-9]\d|1[7-9])\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.7.els17 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.7.els17 0:5.14.0-284.1101.el9_2.tuxcare.7.els17 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.7.els17 i686|x86_64 0:0.20.2-5.el9_2.tuxcare.els7 x86_64 0:0.20.2-5.el9_2.tuxcare.els7 0:3.9.16-1.el9_2.2.tuxcare.els30 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els30 i686|x86_64 0:2.37.4-11.el9_2.tuxcare.els4 x86_64 0:2.37.4-11.el9_2.tuxcare.els4 i686|x86_64 1:1.1.1k-4.el9_0.tuxcare.els4 x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els13 i686|x86_64 1:2.3.3op2-16.el9_2.1.tuxcare.els13 1:2.3.3op2-16.el9_2.1.tuxcare.els13 x86_64 0:2.3.3-2.el9_0.tuxcare.els4 x86_64 0:140.12.0-1.el9_2.alma.1.tuxcare.els1 x86_64 0:3.2.0-1.el9_2.tuxcare.els5 i686|x86_64 0:2.68.4-6.el9.tuxcare.els9 0:2.68.4-6.el9.tuxcare.els9 x86_64 0:2.68.4-6.el9.tuxcare.els9 i686|x86_64 0:0.8-12.el9_2.1.tuxcare.els5 x86_64 0:0.8-12.el9_2.1.tuxcare.els5 x86_64 0:9.0.9-4.el9_2.alma.1.tuxcare.els20 x86_64 0:2.4.1-5.el9_2.tuxcare.els1 i686|x86_64 0:2.4.1-5.el9_2.tuxcare.els1 x86_64 0:2.4.9-5.el9.tuxcare.els1 i686|x86_64 0:2.4.9-5.el9.tuxcare.els1 i686|x86_64 2:1.6.37-12.el9_2.tuxcare.els9 x86_64 2:1.6.37-12.el9_2.tuxcare.els9 x86_64 0:1.22.9-1.el9_2.tuxcare.els22 0:1.22.9-1.el9_2.tuxcare.els22 x86_64 0:140.13.0-1.el9_2.alma.1.tuxcare.els1 i686|x86_64 0:1.6.9-1.el9.tuxcare.els2 x86_64 0:1.6.9-1.el9.tuxcare.els2 i686|x86_64 0:4.35.0-6.el9_2.tuxcare.1.els3 i686|x86_64 0:3.90.0-6.el9_2.tuxcare.1.els3 x86_64 0:3.90.0-6.el9_2.tuxcare.1.els3 x86_64 0:6.9.13.50-1.el9_2.tuxcare.els2 x86_64 0:8.0.30-1.el9_2.tuxcare.els15 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els16 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els16 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els15 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els15 i686|x86_64 0:2.5.0-1.el9_2.tuxcare.els15 x86_64 0:2.5.0-1.el9_2.tuxcare.els15 i686|x86_64 0:3.11.2-2.el9_2.2.tuxcare.els30 x86_64 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els13 1:1.20.1-14.el9_2.1.alma.1.tuxcare.els13 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els17 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els17 x86_64 0:1.16.2-3.el9_2.tuxcare.els11 i686|x86_64 0:1.16.2-3.el9_2.tuxcare.els11 x86_64 1:1.8.0.502.b07-1.el9.tuxcare.els1 1:1.8.0.502.b07-1.el9.tuxcare.els1 0:2.14.1-2.el9_2.tuxcare.els6 x86_64 0:8.3.1-5.el9_2.2.alma.tuxcare.els6 0:8.3.1-5.el9_2.2.alma.tuxcare.els6 x86_64 0:7.76.1-31.el9_2.1.tuxcare.els18 i686|x86_64 0:7.76.1-31.el9_2.1.tuxcare.els18 0:2.38-6.el9.tuxcare.els2 x86_64 1:1.8.0.492.b09-2.el9.tuxcare.els1 1:1.8.0.492.b09-2.el9.tuxcare.els1 x86_64 0:2.10-1.el9.tuxcare.els2 x86_64 2:2.99.8-4.el9.2.tuxcare.els14 i686|x86_64 2:2.99.8-4.el9.2.tuxcare.els14 x86_64 1:11.0.27.0.6-1.el9.tuxcare.els1 x86_64 0:1.643-9.el9_2.tuxcare.els2 1:9.0.62-12.el9_2.1.tuxcare.els8 i686|x86_64 0:0.8-12.el9_2.1.tuxcare.els6 x86_64 0:0.8-12.el9_2.1.tuxcare.els6 1:3.6.3-15.el9_2.tuxcare.els1 (^5\.14\.0\-((?:(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\.\d+)*|284\.(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[1-9]\d|110[2-9])(?:\.\d+)*|284\.1101\.\d+(?:\.\d+)*)\.el9_2\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare\.(?:\d{3,}|[2-9]\d|1[2-9])(?:\.els\d*)?\.(?:x86_64|i686)|(?:284\.1101)\.el9_2\.tuxcare\.11\.els(?:\d{2,})\.(?:x86_64|i686))$) x86_64 0:7.0.0-284.1101.el9_2.tuxcare.11.els10 x86_64 0:5.14.0-284.1101.el9_2.tuxcare.11.els10 0:5.14.0-284.1101.el9_2.tuxcare.11.els10 i686|x86_64 2:1.0.0-2.el9_2.tuxcare.11.els10 i686|x86_64 0:0.10.4-8.el9_2.tuxcare.els14 0:0.10.4-8.el9_2.tuxcare.els14 x86_64 1:3.25-1.el9.3.tuxcare.els2 x86_64 1:17.0.19.0.10-1.el9.tuxcare.els1 0:53.0.0-12.el9.tuxcare.els2 x86_64 3:10.5.29-1.el9_2.alma.1.tuxcare.els4 x86_64 0:8.0.30-1.el9_2.tuxcare.els16 x86_64 1:3.4.10-4.el9_2.tuxcare.els13 i686|x86_64 1:3.4.10-4.el9_2.tuxcare.els13 i686|x86_64 0:1.0.31-7.el9_2.tuxcare.els4 x86_64 0:1.0.31-7.el9_2.tuxcare.els4 x86_64 0:1.12.0-13.el9_2.tuxcare.els28 0:1.12.0-13.el9_2.tuxcare.els28 x86_64 0:1.21.1-7.el9_2.tuxcare.els5 0:3.9.16-1.el9_2.2.tuxcare.els31 i686|x86_64 0:3.9.16-1.el9_2.2.tuxcare.els31 i686|x86_64 0:0.10.4-8.el9_2.tuxcare.els13 0:0.10.4-8.el9_2.tuxcare.els13 x86_64 0:6.9.13.52-2.el9_2.tuxcare.els2 x86_64 0:1.22.9-1.el9_2.tuxcare.els25 0:1.22.9-1.el9_2.tuxcare.els25 i686|x86_64 0:1.6.1-20.el9_2.1.tuxcare.els2 x86_64 0:1.6.1-20.el9_2.1.tuxcare.els2 x86_64 0:2.13-16.el9_2.tuxcare.els1