Tuxcare Errata System 0.0.1 5.10 2026-08-29T10:33:33 Red Hat Enterprise Linux 7 - CVE-2024-38428: properly re-implement userinfo parsing (rfc2396) Critical TuxCare License Agreement CVE-2024-38428 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Version was updated Critical TuxCare License Agreement CVE-2024-45491 CVE-2024-45490 CVE-2024-45492 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-28651: fix memory leak in RFC 2169 response parsing - CVE-2021-28652: fix broken cache manager URL parsing - CVE-2021-31806: fix memory management bug - CVE-2021-31807: fix integer overflow problem - CVE-2021-31808: fix input validation bug - CVE-2021-33620: handle more partial responses Important TuxCare License Agreement CVE-2024-45802 CVE-2024-25617 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Version was updated Important TuxCare License Agreement CVE-2024-7592 CVE-2024-6232 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes Important TuxCare License Agreement CVE-2025-0840 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-3596: implement support for Message-Authenticator in libkrad Critical TuxCare License Agreement CVE-2024-37371 CVE-2024-37370 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables Important TuxCare License Agreement CVE-2025-27113 CVE-2025-32415 CVE-2025-32414 CVE-2024-25062 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks Important TuxCare License Agreement CVE-2021-3156 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions Critical TuxCare License Agreement CVE-2024-32002 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - ELS-1267: merge spec for centos7, rhel7 and oracle7 Critical TuxCare License Agreement CVE-2024-38477 CVE-2024-38476 CVE-2021-40438 CVE-2024-38474 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-9287: fix path names quoting to prevent command injection in virtual environment activation scripts Important TuxCare License Agreement CVE-2024-9287 CVE-2024-7592 CVE-2024-6232 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1217: fix handling of folded headers by the http stream parser - CVE-2025-1734: fix validation of http headers with missing colon - CVE-2025-1861: fix incorrect http redirect location truncation Important TuxCare License Agreement CVE-2024-11234 CVE-2024-11233 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption. Important TuxCare License Agreement CVE-2024-0553 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade openjdk-shenandoah-jdk8u-shenandoah-jdk8u452-b09. That fixes the following CVE: CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 Important TuxCare License Agreement CVE-2025-30698 CVE-2024-21217 CVE-2024-20919 CVE-2024-21145 CVE-2024-21235 CVE-2024-20952 CVE-2024-20918 CVE-2025-21587 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-10041: fix possibility of leakage of secret information stored in memory - CVE-2024-22365: fix potential DoS via mkfifo because the openat call lacks O_DIRECTORY Moderate TuxCare License Agreement CVE-2024-22365 CVE-2024-10041 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32728: fix logic error in DisableForwarding option Low TuxCare License Agreement CVE-2025-32728 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - netfilter: validate user input for expected length {CVE-2024-35896} - nfs: fix UAF in direct writes {CVE-2024-26958} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872} Important TuxCare License Agreement CVE-2023-51779 CVE-2024-36883 CVE-2024-39487 CVE-2024-41071 CVE-2023-52885 CVE-2021-30178 CVE-2021-38160 CVE-2021-47118 CVE-2021-46936 CVE-2022-42719 CVE-2023-35824 CVE-2023-52435 CVE-2023-3567 CVE-2021-3612 CVE-2024-26668 CVE-2023-6610 CVE-2023-6606 CVE-2022-3424 CVE-2021-37159 CVE-2025-21702 CVE-2024-53197 CVE-2023-4387 CVE-2023-40283 CVE-2023-3111 CVE-2023-2124 CVE-2023-1989 CVE-2023-1838 CVE-2023-1829 CVE-2022-20141 CVE-2022-1652 CVE-2022-1353 CVE-2022-1055 CVE-2021-45868 CVE-2021-45485 CVE-2021-43976 CVE-2021-43389 CVE-2021-4159 CVE-2021-4157 CVE-2021-4149 CVE-2021-40490 CVE-2021-3679 CVE-2024-38600 CVE-2024-26898 CVE-2024-26882 CVE-2024-38538 CVE-2024-42148 CVE-2024-46673 CVE-2024-46724 CVE-2024-46813 CVE-2024-47742 CVE-2024-49882 CVE-2024-49860 CVE-2024-53150 CVE-2024-53142 CVE-2024-53156 CVE-2024-56759 CVE-2024-56605 CVE-2024-56551 CVE-2024-50143 CVE-2024-50234 CVE-2024-46744 CVE-2025-21969 CVE-2025-21920 CVE-2024-50267 CVE-2024-43839 CVE-2024-47745 CVE-2024-38570 CVE-2024-50055 CVE-2024-27043 CVE-2025-21993 CVE-2024-49967 CVE-2021-43975 CVE-2021-41864 CVE-2021-0129 CVE-2023-1380 CVE-2022-3566 CVE-2022-0850 CVE-2023-42753 CVE-2023-39197 CVE-2023-3141 CVE-2021-3640 CVE-2021-34693 CVE-2023-52752 CVE-2023-52628 CVE-2023-52469 CVE-2023-52445 CVE-2023-52340 CVE-2023-51780 CVE-2023-4623 CVE-2022-29581 CVE-2022-28390 CVE-2022-2639 CVE-2022-25265 CVE-2022-2196 CVE-2022-21499 CVE-2022-20368 CVE-2021-3609 CVE-2021-31916 CVE-2021-3178 CVE-2021-28971 CVE-2021-28964 CVE-2024-49889 CVE-2024-44970 CVE-2024-46750 CVE-2024-46800 CVE-2024-42301 CVE-2024-0775 CVE-2024-35849 CVE-2024-43900 CVE-2024-43882 CVE-2024-46722 CVE-2024-46738 CVE-2024-46723 CVE-2024-50073 CVE-2024-47701 CVE-2024-49960 CVE-2024-50033 CVE-2024-53227 CVE-2024-56606 CVE-2024-53239 CVE-2024-53104 CVE-2024-57980 CVE-2024-56604 CVE-2024-26689 CVE-2024-49991 CVE-2024-36960 CVE-2024-42228 CVE-2024-57798 CVE-2024-47659 CVE-2024-50115 CVE-2024-27008 CVE-2024-41014 CVE-2024-23307 CVE-2022-1419 CVE-2022-1679 CVE-2023-3268 CVE-2022-45886 CVE-2022-26365 CVE-2024-46756 CVE-2024-38627 CVE-2022-3629 CVE-2024-36971 CVE-2024-27020 CVE-2024-26934 CVE-2024-26923 CVE-2024-26855 CVE-2023-6932 CVE-2023-6931 CVE-2023-1513 CVE-2023-1118 CVE-2023-1077 CVE-2022-45934 CVE-2022-45919 CVE-2022-42895 CVE-2022-1048 CVE-2022-1016 CVE-2022-1011 CVE-2022-0812 CVE-2021-47383 CVE-2021-47194 CVE-2021-46906 CVE-2024-26872 CVE-2024-26791 CVE-2021-3659 CVE-2022-4095 CVE-2022-41858 CVE-2021-3923 CVE-2022-33740 CVE-2021-47153 CVE-2021-46932 CVE-2023-51042 CVE-2023-45862 CVE-2021-47171 CVE-2021-20292 CVE-2020-26555 CVE-2019-25162 CVE-2024-50302 CVE-2024-46758 CVE-2024-46757 CVE-2024-41013 CVE-2024-38555 CVE-2022-42720 CVE-2022-41674 CVE-2022-3640 CVE-2022-36280 CVE-2022-3565 CVE-2022-33742 CVE-2022-33741 CVE-2022-3028 CVE-2021-20322 CVE-2021-20321 CVE-2020-27820 CVE-2020-13974 CVE-2018-10087 CVE-2024-49894 CVE-2024-50007 CVE-2024-35896 CVE-2024-26958 CVE-2024-44987 CVE-2024-46731 CVE-2024-50035 CVE-2024-49950 CVE-2024-53057 CVE-2024-53173 CVE-2024-56650 CVE-2024-50282 CVE-2025-37785 CVE-2024-56603 CVE-2024-46818 CVE-2024-44940 CVE-2024-39494 CVE-2024-53141 CVE-2024-42280 CVE-2024-53103 CVE-2024-26982 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted code Moderate TuxCare License Agreement CVE-2020-11023 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-12747: fix symlink race condition in sender Important TuxCare License Agreement CVE-2024-12088 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write - Debrand to Cloudlinux Important TuxCare License Agreement CVE-2025-0678 CVE-2024-56737 CVE-2024-45782 CVE-2024-45781 CVE-2025-1125 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32462: fix privilege escalation vulnerability by restricting unauthorized users from gaining elevated system privileges via the Sudo host option Important TuxCare License Agreement CVE-2025-32462 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32906: fix out-of-bound read vulnerability - CVE-2025-32911: fix use-after-free vulnerability - CVE-2025-32913: fix NULL pointer dereference Critical TuxCare License Agreement CVE-2025-32906 CVE-2025-32911 CVE-2025-32913 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-48384: config: quote values containing CR character Important TuxCare License Agreement CVE-2025-48384 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32050: fix overflow in append_param_quoted() - CVE-2025-32052: fix heap buffer overflow in soup_content_sniffer_sniff() - CVE-2025-32053: fix heap buffer overflow in sniff_feed_or_html() - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in soup_header_parse_quality_list() - CVE-2025-46421: strip authentication credentails on cross-origin redirect - CVE-2025-2784: fix heap buffer over-read when sniffing content via the skip_insight_whitespace() function Moderate TuxCare License Agreement CVE-2025-46420 CVE-2025-32907 CVE-2025-32053 CVE-2025-32052 CVE-2025-46421 CVE-2025-32050 CVE-2025-2784 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file Critical TuxCare License Agreement CVE-2025-49794 CVE-2025-49796 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1220: error if host contains null bytes in the middle of the string Moderate TuxCare License Agreement CVE-2025-1220 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases Important TuxCare License Agreement CVE-2025-1735 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u462-b08 (GA). That fixes following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash Important TuxCare License Agreement CVE-2025-30761 CVE-2025-50106 CVE-2025-30754 CVE-2025-30749 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-6965: fix memory corruption issue caused by a query where the number of aggregate terms could exceed the number of columns available. Critical TuxCare License Agreement CVE-2025-6965 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-6491: fix buffer overflow vulnerability Moderate TuxCare License Agreement CVE-2025-6491 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths Moderate TuxCare License Agreement CVE-2024-46901 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-27613: fix issue where untrusted repositories could create and truncate files, with the fix implemented in versions 2.43.7 and later Moderate TuxCare License Agreement CVE-2025-27613 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-4408: reapply patch without dns_name_t ABI change. Important TuxCare License Agreement CVE-2024-1737 CVE-2024-11187 CVE-2024-1975 CVE-2023-50387 CVE-2023-50868 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes Important TuxCare License Agreement CVE-2025-24855 CVE-2024-55549 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-5564: validate route information option length Important TuxCare License Agreement CVE-2024-5564 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix deleting job when iSCSi used - /dev/lve is added into the list of private devices Important TuxCare License Agreement CVE-2023-26604 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-27363: fix OOB write when parsing font subglyph structures Important TuxCare License Agreement CVE-2025-27363 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c Important TuxCare License Agreement CVE-2024-56171 CVE-2025-24928 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0(ver:0x0A70C005), cpuid:0x00A70F52(ver:0x0A705206), cpuid:0x00A00F82(ver:0x0A00820C), cpuid:0x00A40F41(ver:0x0A404107), cpuid:0x00A70F80(ver:0x0A708007), cpuid:0x00A20F10(ver:0x0A20102D), cpuid:0x00A70F41(ver:0x0A704107), cpuid:0x00A60F12(ver:0x0A601209), cpuid:0x00A10F81(ver:0x0A108108), cpuid:0x00A50F00(ver:0x0A500011), cpuid:0x00A20F12(ver:0x0A201210); - Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10(ver:0x08701034), cpuid:0x00860F01(ver:0x0860010D), cpuid:0x00860F81(ver:0x08608108); - Update AMD CPU microcode for processor family 0x17: cpuid:0x008A0F00(ver:0x08A0000A); Important TuxCare License Agreement CVE-2023-31315 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-24528: fix buffer overflow vulnerability in iprop log file writing Moderate TuxCare License Agreement CVE-2025-24528 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-52337: sanitize API arguments to prevent log spoofing by both escaping ' characters and restricting newlines from being inserted Moderate TuxCare License Agreement CVE-2024-52337 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-50868: avoid availabiluty of the remote attackers to cause a denial of service using DNSSEC Important TuxCare License Agreement CVE-2023-50387 CVE-2023-50868 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-0624: net: Fix OOB write in grub_net_search_config_file() Important TuxCare License Agreement CVE-2025-0624 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1244: fix man.el shell injection vulnerability Important TuxCare License Agreement CVE-2025-1244 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-1736: fix incorrect validation of CRLF in http headers Important TuxCare License Agreement CVE-2025-1736 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText() - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey() - CVE-2025-26598: Xi: Fix barrier device search - CVE-2025-26599: always initialize the border clip in compAllocPixmap() - CVE-2025-26600: dix: Dequeue pending events on frozen device on removal - CVE-2025-26601: postpone actual changes in SyncChangeAlarmAttributes() Important TuxCare License Agreement CVE-2025-26598 CVE-2025-26599 CVE-2025-26600 CVE-2025-26601 CVE-2025-26594 CVE-2025-26595 CVE-2025-26596 CVE-2025-26597 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-46846: fix Request/Response chunk smuggling in HTTP/1.1 and ICAP Moderate TuxCare License Agreement CVE-2023-46846 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-54574: fix heap buffer overflow in URN parsing Critical TuxCare License Agreement CVE-2025-54574 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2016-9840: fix undefined behavior in inftrees.c Important TuxCare License Agreement CVE-2016-9840 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2014-9474: Fix of a buffer overflow due to incorrect GMP documentation for mpn_set_str Critical TuxCare License Agreement CVE-2014-9474 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations Important TuxCare License Agreement CVE-2025-7425 CVE-2025-6021 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-6020: fix potential privilege escalation in pam_namspace Important TuxCare License Agreement CVE-2025-6020 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-49178: fix request handling flaw causing potential denial of service Moderate TuxCare License Agreement CVE-2025-49178 CVE-2025-49175 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Update Intel CPU microcode to 20250812: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa000100; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003d0; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x123; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000410; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002e0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x25; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000362; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002b3; Moderate TuxCare License Agreement CVE-2024-28956 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdk_pixbuf__jpeg_image_load_increment() Important TuxCare License Agreement CVE-2025-7345 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-4802: prevent untrusted LD_LIBRARY_PATH from loading dynamically shared libraries in statically compiled binaries that call dlopen Important TuxCare License Agreement CVE-2025-4802 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110} - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919} - aio: mark AIO pseudo-fs noexec {CVE-2016-10044} - cifs: potential buffer overflow in handling symlinks {CVE-2022-49058} - NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232} - nfsd: register pernet ops last, unregister first {CVE-2025-38232} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - net: atm: add lec_mutex {CVE-2025-38180} - SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174} - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399} - scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - drivers:md:fix a potential use-after-free bug {CVE-2022-50022} - ext4: avoid resizing to a partial cluster size {CVE-2022-50020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - dlm: fix plock invalid read {CVE-2022-49407} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495} - ext4: Fix possible corruption when moving a directory {CVE-2023-53137} - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305} - ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229} - dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - md-raid10: fix KASAN warning {CVE-2022-50211} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386} - media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200} Important TuxCare License Agreement CVE-2025-23150 CVE-2022-50211 CVE-2025-38403 CVE-2025-38232 CVE-2025-38495 CVE-2025-38494 CVE-2025-38399 CVE-2025-38386 CVE-2025-38332 CVE-2025-38229 CVE-2025-38212 CVE-2025-38200 CVE-2025-38180 CVE-2025-38085 CVE-2025-38079 CVE-2025-37878 CVE-2025-37823 CVE-2024-53174 CVE-2024-42305 CVE-2023-53137 CVE-2023-53125 CVE-2022-50229 CVE-2022-49770 CVE-2022-49407 CVE-2022-49122 CVE-2022-49114 CVE-2022-49058 CVE-2022-48919 CVE-2025-38556 CVE-2025-38498 CVE-2025-38457 CVE-2021-47110 CVE-2016-10044 CVE-2025-38352 CVE-2025-38177 CVE-2022-50022 CVE-2022-50020 CVE-2025-38000 CVE-2022-49788 CVE-2025-21928 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Bump release to override the rhel els Important TuxCare License Agreement CVE-2021-28651 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent {CVE-2025-38350} Important TuxCare License Agreement CVE-2025-37932 CVE-2025-37798 CVE-2025-38350 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2019-9169: fix heap-based buffer over-read in proceed_next_node function in posix/regexec.c Critical TuxCare License Agreement CVE-2019-9169 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2017-9224: fix out-of-bounds read of a stack in match_at function - CVE-2017-9226: fix out-of-bounds write or read of a heap in next_state_val function - CVE-2017-9227: fix out-of-bounds read of a stack in mbc_enc_len function Critical TuxCare License Agreement CVE-2017-9224 CVE-2017-9227 CVE-2017-9226 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Port side-channel silent functions from 3.4.1. Partially fix for CVE-2018-16869 - CVE-2018-16869: Add side-channel silent memory, math, PKCS1, RSA functions - Added tests for side-channel silent implementations Moderate TuxCare License Agreement CVE-2018-16869 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-32990: fix memory corruption in when parsing a template file Important TuxCare License Agreement CVE-2025-32990 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-47252: escape user-supplied data in mod_ssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack Important TuxCare License Agreement CVE-2024-47252 CVE-2025-49812 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - spec: up spec/misc to 1160.136.1, spectre mitigation is off by default - hugetlb, mempolicy: fix the mbind hugetlb migration - net: atm: fix use after free in lec_send() - net: atlantic: fix aq_vec index out of range error - block: initialize flush request via blk_mq_rq_ctx_init() - ALSA: usb-audio: Fix a DMA to stack memory bug - namei: ->d_inode of a pinned dentry is stable only for positives - namei: results of d_is_negative() should be checked after dentry revalidation - namei: d_is_negative() should be checked before ->d_seq validation - VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk - scsi: smartpqi: Fix DMA direction for RAID requests - scsi: smartpqi: Fix duplicate device nodes for tape changers - VFS: Impose ordering on accesses of d_inode and d_flags - neighbour: fix data-races around n->output - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options - cipso: fix total option length computation - proc: Use new_inode not new_inode_pseudo - lockd: skip shutdown of rpc clients with outstanding notifications - SUNRPC: ECONNRESET might require a rebind - SUNRPC: ECONNREFUSED should cause a rebind - x86/fpu: Prevent FPU state corruption - x86, fpu: Introduce per-cpu in_kernel_fpu state - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA - x86/bugs: Fix BHI documentation {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry {CVE-2024-2201} - Documentation/hw-vuln: Document the interaction between IBRS and STIBP - x86/bugs: Add X86_FEATURE_RETPOLINE - x86/bugs: Extend VMware Retbleed workaround to Nehalem - gfs2: Fix length of holes reported at end-of-file - gfs2: Only do glock put in gfs2_create_inode for free inodes - gfs2: Fix use-after-free in gfs2_logd after withdraw - gfs2: fix use-after-free in trans_drain - gfs2: Clean up revokes on normal withdraws - GFS2: gfs2_free_extlen can return an extent that is too long - gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe - GFS2: Refactor gfs2_remove_from_journal - GFS2: Only set PageChecked for jdata pages - gfs2: keep bios separate for each journal - gfs2: Remove active journal side effect from gfs2_write_log_header - gfs2: clean_journal improperly set sd_log_flush_head - partial "GFS2: Introduce new gfs2_log_header_v2" - gfs2: change from write to read lock for sd_log_flush_lock in journal replay - GFS2: Reduce code redundancy writing log headers - gfs2: Grab glock reference sooner in gfs2_add_revoke - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - gfs2: Fix occasional glock use-after-free - gfs2: Make sure we don't miss any delayed withdraws - gfs2: Fix bad comment for trans_drain - gfs2: add some much needed cleanup for log flushes that fail - gfs2: fix trans slab error when withdraw occurs inside log_flush - gfs2: initialize transaction tr_ailX_lists earlier - GFS2: Remove extra "if" in gfs2_log_flush() - gfs2: fix use-after-free on transaction ail lists - gfs2: Trim the ordered write list in gfs2_ordered_write() - GFS2: Clean up releasepage - gfs2: Only set PageChecked if we have a transaction - gfs2: Fix case in which ail writes are done to jdata holes - gfs2: simplify gfs2_block_map - gfs2: Remove unused gfs2_iomap_alloc argument - netfilter: ipset: fix ip_set_list allocation failure - gfs2: Be more careful with the quota sync generation - gfs2: Get rid of some unnecessary quota locking - gfs2: Add some missing quota locking - gfs2: Fold qd_fish into gfs2_quota_sync - gfs2: quota need_sync cleanup - gfs2: Fix and clean up function do_qc - gfs2: Revert "Add quota_change type" - gfs2: Revert "ignore negated quota changes" - gfs2: qd_check_sync cleanups - gfs2: Check quota consistency on mount - gfs2: Minor gfs2_quota_init error path cleanup - gfs2: fix kernel BUG in gfs2_quota_cleanup - gfs2: Clean up quota.c:print_message - gfs2: Clean up gfs2_alloc_parms initializers - gfs2: Two quota=account mode fixes - gfs2: Remove useless assignment - gfs2: simplify slot_get - gfs2: Simplify qd2offset - gfs2: Remove quota allocation info from quota file - gfs2: use constant for array size - gfs2: Set qd_sync_gen in do_sync - gfs2: Remove useless err set - gfs2: Small gfs2_quota_lock cleanup - gfs2: move qdsb_put and reduce redundancy - gfs2: Don't try to sync non-changes - gfs2: Simplify function need_sync - gfs2: remove unneeded pg_oflow variable - gfs2: remove unneeded variable done - gfs2: pass sdp to gfs2_write_buf_to_page - gfs2: pass sdp in to gfs2_write_disk_quota - gfs2: Pass sdp to gfs2_adjust_quota - gfs2: remove dead code for quota writes - gfs2: Use qd_sbd more consequently - gfs2: replace 'found' with dedicated list iterator variable - gfs2: Some whitespace cleanups - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold - tcp: fix zero cwnd in tcp_cwnd_reduction - epoll: fix use-after-free in eventpoll_release_file - kernel.spec: run initramfs generation in %post (not only in %posttrans) Important TuxCare License Agreement CVE-2024-2201 CVE-2025-22004 CVE-2022-50066 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix spec-file for CVE-2019-9169 Critical TuxCare License Agreement CVE-2019-9169 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-52533: fix off-by-one error leading to buffer overflow in gsocks4aproxy.c Important TuxCare License Agreement CVE-2024-52533 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2017-9228: fix heap out-of-bounds write in bitset_set_range() and parse_char_class() functions Critical TuxCare License Agreement CVE-2017-9228 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-46835: prevent malicious creating and overwriting of user's files Low TuxCare License Agreement CVE-2025-46835 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - ASoC: topology: Clean up route loading {CVE-2024-41069} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966} - media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} - inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103} - scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - virtio-net: Add validation for used length {CVE-2021-47352} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} - mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} - net: fix information leakage in /proc/net/ptype {CVE-2022-48757} - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974} - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - net: ti: fix UAF in tlan_remove_one {CVE-2021-47310} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields {CVE-2023-52578} - media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884} - media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885} - xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039} - xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037} - xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038} - ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386} - ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292} Important TuxCare License Agreement CVE-2021-47103 CVE-2022-48760 CVE-2023-52578 CVE-2024-26961 CVE-2024-40978 CVE-2024-40929 CVE-2023-52835 CVE-2023-52594 CVE-2021-47497 CVE-2024-35965 CVE-2024-53214 CVE-2024-40901 CVE-2024-26974 CVE-2023-52864 CVE-2023-52764 CVE-2023-52530 CVE-2023-0386 CVE-2022-49292 CVE-2022-48757 CVE-2022-48695 CVE-2022-45885 CVE-2022-45884 CVE-2022-23039 CVE-2022-23038 CVE-2022-23037 CVE-2021-47352 CVE-2021-47321 CVE-2021-47310 CVE-2024-41069 CVE-2024-56616 CVE-2025-21704 CVE-2024-52332 CVE-2024-35966 CVE-2024-39499 CVE-2024-38621 CVE-2024-36921 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2007-4559: implement PEP 706 - a filter in the tarfile module to prevent directory traversal vulnerability Low TuxCare License Agreement CVE-2007-4559 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2019-1547: fix side-channel vulnerability in ECDSA when using explicit EC parameters without cofactor - CVE-2025-9230: fix incorrect check of unwrapped key size Moderate TuxCare License Agreement CVE-2019-1547 CVE-2025-9230 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Bump package Release to 21.0.5 - CVE-2025-8194: tarfile: validate archives to ensure member offsets are non-negative Important TuxCare License Agreement CVE-2025-8194 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - ext4: fix possible UAF when remounting r/o a mmp-protected file system {CVE-2021-47342} - ext4: fix memory leak in ext4_fill_super - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658} - net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477} - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() {CVE-2022-48701} - fix: virtio-net: Add validation for used length {CVE-2021-47352} Important TuxCare License Agreement CVE-2024-56658 CVE-2021-47342 CVE-2022-48701 CVE-2022-48827 CVE-2023-52868 CVE-2022-48738 CVE-2021-47391 CVE-2024-38659 CVE-2025-38477 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-58060: fix authentication bypass by checking password when AuthType is set to anything but Basic. Important TuxCare License Agreement CVE-2025-58060 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-35235: patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item Moderate TuxCare License Agreement CVE-2024-35235 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2016-9840: fix improper pointer arithmetic in inftrees.c Important TuxCare License Agreement CVE-2016-9840 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-4948: fix integer underflow in soup_multipart_new_from_message() - CVE-2025-32049: fix Denial of Service attack to websocket server - CVE-2025-32914: fix OOB Read through soup_multipart_new_from_message() Important TuxCare License Agreement CVE-2025-32049 CVE-2025-32914 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") Important TuxCare License Agreement CVE-2024-12718 CVE-2025-4330 CVE-2025-4138 CVE-2025-4517 CVE-2025-4435 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs Important TuxCare License Agreement CVE-2025-8194 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - email_err_data directive now defaults to 'off' for security (previously 'on') Important TuxCare License Agreement CVE-2025-62168 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic Important TuxCare License Agreement CVE-2025-11021 CVE-2025-4945 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-9632: fix buffer overflow in _XkbSetCompatMap() - CVE-2025-62229: fix use-after-free condition due improper error handling during notification creation leading to DoS - CVE-2025-62230: fix use-after-free condition due freeing certain data structures without properly detaching related resources - CVE-2025-62231: fix unsigned short overflow in XkbSetCompatMap() function Important TuxCare License Agreement CVE-2024-9632 CVE-2025-62230 CVE-2025-62231 CVE-2025-62229 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u472-b08 (GA). Moderate TuxCare License Agreement CVE-2025-53066 CVE-2025-53057 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-8508: limit number of name compression calculations per packet to prevent denial of service attacks. Moderate TuxCare License Agreement CVE-2024-8508 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-11.0.29+7 (GA). Important TuxCare License Agreement CVE-2025-21587 CVE-2024-21147 CVE-2023-48161 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186} - can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} - ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403} - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} Important TuxCare License Agreement CVE-2023-53322 CVE-2024-35886 CVE-2022-50367 CVE-2025-38068 CVE-2022-2978 CVE-2025-38004 CVE-2025-38051 CVE-2022-50403 CVE-2025-38157 CVE-2025-38415 CVE-2025-38459 CVE-2025-39955 CVE-2025-38729 CVE-2022-50410 CVE-2022-43945 CVE-2025-38245 CVE-2025-40186 CVE-2025-39863 CVE-2025-39757 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-58098: fix passes the shell-escaped query string to #exec cmd="..." directives Important TuxCare License Agreement CVE-2025-58098 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-52005: add sideband.allowControlCharacters config which gives a possibility to avoid control characters in sideband - CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration Important TuxCare License Agreement CVE-2024-52006 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-32021: fix symlink bypass, abort when hardlinked source and target file differ Important TuxCare License Agreement CVE-2024-32021 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-31484: add verify_SSL=>1 to HTTP::Tiny to verify https server identity Important TuxCare License Agreement CVE-2023-31484 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively Moderate TuxCare License Agreement CVE-2024-50349 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() - nfsd: don't ignore the return code of svc_proc_register() {CVE-2025-22026} - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull {CVE-2023-53104} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class - HID: stop exporting hid_snto32() - HID: simplify snto32() - HID: core: fix shift-out-of-bounds in hid_report_raw_event {CVE-2022-48978} - HID: core: detect and skip invalid inputs to snto32() - HID: core: don't use negative operands when shift Important TuxCare License Agreement CVE-2022-2978 CVE-2025-22026 CVE-2023-53104 CVE-2022-48978 CVE-2023-53297 CVE-2022-50367 CVE-2022-50356 CVE-2025-40271 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input Important TuxCare License Agreement CVE-2025-68973 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-14523: reject duplicate Host headers to prevent request smuggling, cache poisoning, and host-based access control bypass attacks Important TuxCare License Agreement CVE-2025-14523 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-53705} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282} - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} - firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432} - net: openvswitch: fix nested key length validation in the set() action - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - fix: crypto: lzo - Fix compression buffer overrun - fix: NFSD: Protect against send buffer overflow in NFSv2 READ - cifs: fix oops during encryption {CVE-2022-50341} - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - fix smb3-encryption breakage when CONFIG_DEBUG_SG=y - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406} - mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832} - mm: fix zswap writeback race condition - Bluetooth: prefetch channel before killing sock - Bluetooth: Fix l2cap_disconnect_req deadlock - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827} - Bluetooth: Fix refcount use-after-free issue - Bluetooth: Check state in l2cap_disconnect_rsp - Bluetooth: L2CAP: Fix build errors in some archs - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Bluetooth: use the correct print format for L2CAP debug statements - i40e: fix Jumbo Frame support after iPXE boot - i40e: Report MFS in decimal base instead of hex - i40e: Fix unexpected MFS warning message - i40e: Add a check to see if MFS is set - bitops: Add non-atomic bitops for pointers - bitfield: Add FIELD_MODIFY() helper Important TuxCare License Agreement CVE-2022-50422 CVE-2024-26832 CVE-2023-53705 CVE-2022-50419 CVE-2023-53827 CVE-2022-50406 CVE-2025-39817 CVE-2022-50341 CVE-2023-53432 CVE-2023-53282 CVE-2023-53321 CVE-2023-53297 CVE-2023-53675 CVE-2025-68285 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Update to openjdk-shenandoah-jdk8u-shenandoah-jdk8u482-b03. - CVE-2026-21945: Security component vulnerability allowing unauthenticated attacker with network access to cause hang or crash (DoS). Important TuxCare License Agreement CVE-2026-21945 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-13601: Fix heap-based buffer overflow by correcting buffer size calculation in g_escape_uri_string() function Important TuxCare License Agreement CVE-2025-13601 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-24515: Fix a null pointer dereference in the XML parser caused by the failure to copy user data for unknown encoding handlers Low TuxCare License Agreement CVE-2026-24515 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() Important TuxCare License Agreement CVE-2025-69421 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - scsi: bfa: Double-free fix {CVE-2025-38699} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - bna: ensure the copied buf is NUL terminated {CVE-2024-36934} - i40e: fix idx validation in config queues msg {CVE-2025-39971} Important TuxCare License Agreement CVE-2025-38572 CVE-2025-38702 CVE-2025-38618 CVE-2025-39945 CVE-2025-38574 CVE-2025-38699 CVE-2025-39691 CVE-2023-53521 CVE-2025-38680 CVE-2025-39971 CVE-2025-38685 CVE-2024-36934 CVE-2025-39760 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-61662: fix use-after-free in gettext/gettext due to unregistered gettext command on module unload Important TuxCare License Agreement CVE-2025-61662 CVE-2025-0622 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soup_filter_input_stream_read_until() - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum() with excessively long passwords Important TuxCare License Agreement CVE-2026-1761 CVE-2026-0719 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-14087: fix integer overflow in GVariant parser leading to heap corruption via buffer underflow when processing malicious input strings Critical TuxCare License Agreement CVE-2025-14087 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2015-20107: fix shell command injection vulnerability in the mailcap module Important TuxCare License Agreement CVE-2015-20107 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-42516: fix HTTP response splitting by reordering header validation to occur after full response header assembly. Moderate TuxCare License Agreement CVE-2024-42516 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2016-9843: avoid pre-decrement of pointer in big-endian CRC calculation Critical TuxCare License Agreement CVE-2016-9843 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - media: rc: fix races with imon_disconnect() {CVE-2025-39993} - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237} - net/atm: remove the atmdev_ops {get, set}sockopt methods {CVE-2022-50410} - i40e: add validation for ring_len param {CVE-2025-39973} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - isofs: Prevent the use of too small fid {CVE-2025-37780} - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} Important TuxCare License Agreement CVE-2025-21772 CVE-2025-39911 CVE-2025-40304 CVE-2024-53237 CVE-2025-40322 CVE-2025-39853 CVE-2025-39973 CVE-2025-37749 CVE-2025-39860 CVE-2025-38102 CVE-2025-37923 CVE-2025-38724 CVE-2025-37780 CVE-2025-40248 CVE-2025-40277 CVE-2024-58014 CVE-2023-53259 CVE-2025-39993 CVE-2025-38249 CVE-2025-40240 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-12084: fix quadratic algorithm when building nested XML elements with appendChild Moderate TuxCare License Agreement CVE-2025-12084 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix CVE-2026-25210: integer overflow in doContent tag buffer reallocation Important TuxCare License Agreement CVE-2026-25210 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2018-20685: fix a vulnerability scp client where a malicious server could bypass intended access restrictions and modify target directory permissions via crafted filenames - CVE-2019-6109: fix scp client where a malicious server could manipulate the client's progress display output due to missing character encoding - CVE-2019-6111: fix scp client vulnerability that allowed a malicious server to overwrite arbitrary files in the client's target directory, including subdirectories, when performing transfers Moderate TuxCare License Agreement CVE-2019-6111 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-15366: reject control characters in IMAP commands Important TuxCare License Agreement CVE-2025-15366 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-33526: fix heap use-after-free due to double rfc1738_escape in ICP error handling - CVE-2026-33515: fix validation of ICP packet sizes and URLs to prevent out-of-bounds reads - CVE-2026-32748: fix HttpRequest use-after-free in ICP v3 query handling Low TuxCare License Agreement CVE-2026-33526 CVE-2026-32748 CVE-2026-33515 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-15366: reject control characters in IMAP commands to prevent command injection Important TuxCare License Agreement CVE-2025-15366 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-15367: reject control characters in POP3 commands to prevent command injection via newlines Important TuxCare License Agreement CVE-2025-15367 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} - media: imon: reorganize serialization {CVE-2025-39993} - usb: xhci: Fix inverted ring_xrun_event check in handle_tx_event() {CVE-2025-37882} - Revert "VFS: Impose ordering on accesses of d_inode and d_flags" - Revert "VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk" - Revert "namei: d_is_negative() should be checked before ->d_seq validation" - Revert "namei: results of d_is_negative() should be checked after dentry revalidation" - Revert "namei: ->d_inode of a pinned dentry is stable only for positives" - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} - net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204} - net: add skb_header_pointer_careful() helper {CVE-2026-23204} - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074} Important TuxCare License Agreement CVE-2026-23089 CVE-2026-23204 CVE-2026-23074 CVE-2026-23191 CVE-2024-56570 CVE-2025-68349 CVE-2026-23193 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-11082: fix heap buffer overflow in _bfd_elf_parse_eh_frame - CVE-2025-5244: fix NULL deref in elf_gc_sweep for empty SEC_GROUP - CVE-2025-5245: fix SEGV in debug_type_samep / debug_write_type - CVE-2025-7545: fix heap buffer issue in objcopy copy_section - CVE-2025-7546: fix corrupted group section handling in elf.c Important TuxCare License Agreement CVE-2025-7545 CVE-2025-11082 CVE-2025-5244 CVE-2025-5245 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-45539: reject '#' as part of the URI to prevent ACL bypass via path_end rules Important TuxCare License Agreement CVE-2023-45539 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent O(n^2) parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) - CVE-2024-28757: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) Important TuxCare License Agreement CVE-2023-52425 CVE-2024-28757 CVE-2013-0340 CVE-2017-9233 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-28116: fix out-of-bounds read in WCCPv2 message parsing via stricter bounds validation of security, service, router, view, and capability items Moderate TuxCare License Agreement CVE-2021-28116 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2022-39377: check an overflow and exit if it be - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377 Important TuxCare License Agreement CVE-2023-33204 CVE-2022-39377 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-40778: reject forged records in answer sections to prevent cache poisoning via crafted responses - build tests improved Important TuxCare License Agreement CVE-2025-40778 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present - CVE-2016-3189: fix use-after-free in bzip2recover Critical TuxCare License Agreement CVE-2016-3189 CVE-2019-12900 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-21707: fix NUL byte truncation in XML/DOM URI file loading - CVE-2022-31628: fix phar wrapper denial of service when loading compressed quine archives - CVE-2022-31629: discard HTTP variables that mangle into __Host- or __Secure- prefixes Moderate TuxCare License Agreement CVE-2022-31629 CVE-2022-31628 CVE-2021-21707 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request Important TuxCare License Agreement CVE-2026-5119 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-33900: fix integer truncation in viff encoder leading to heap out-of-bounds write on 32-bit builds - CVE-2026-33905: fix out-of-bounds read in -sample operation via sample:offset define - CVE-2026-34238: fix integer overflow in despeckle operation causing heap buffer overflow on 32-bit builds - CVE-2026-40310: fix heap out-of-bounds write in JP2 encoder on invalid sampling index - CVE-2026-40311: fix heap use-after-free reading and printing values from an invalid XMP profile Important TuxCare License Agreement CVE-2026-40310 CVE-2026-33900 CVE-2026-33905 CVE-2026-34238 CVE-2026-40311 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2022-3821: fix buffer-over-run in format_timespan Moderate TuxCare License Agreement CVE-2022-3821 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd - CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used Critical TuxCare License Agreement CVE-2022-29155 CVE-2021-27212 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-11.0.30+7 (GA). The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 - CVE-2025-65018: update libpng to 1.6.51 Important TuxCare License Agreement CVE-2026-21945 CVE-2025-64720 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix CVE-2021-33582 - Denial of service via string hashing algorithm collisions Important TuxCare License Agreement CVE-2021-33582 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-1299: reject newline injection in email module's BytesGenerator when serializing headers - Skip test.test_xml_etree.XMLPullParserTest.test_simple_xml during RPM build; unrelated expat-2.1.0-15.0.7.tuxcare.els1 regression breaks XMLPullParser chunked-feed semantics in TuxCare ELS el7 build chroots Important TuxCare License Agreement CVE-2026-1299 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-42574: add -Wbidi-chars warning for Unicode bidirectional text Important TuxCare License Agreement CVE-2021-42574 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-23239: fix potential directory existence info leak in sudoedit - CVE-2023-28486: escape control characters in log messages - CVE-2023-28487: escape control characters in sudoreplay output Moderate TuxCare License Agreement CVE-2023-28487 CVE-2023-28486 CVE-2021-23239 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Make this package installable on a system having an either Cloudlinux or RHEL7 signed kernel - SBAT variables are used now Important TuxCare License Agreement CVE-2023-40547 CVE-2023-40548 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-3580: add input validation to RSA decrypt family and length check to _pkcs1_sec_decrypt Important TuxCare License Agreement CVE-2021-3580 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-12086: prevent server from reading arbitrary client files via path traversal - CVE-2025-10158: fix invalid access to files array in sender - Add upstream stability fix (RsyncProject/rsync PR #706): use-after-free in generator - Enable Amazon Linux 2 ELS Moderate TuxCare License Agreement CVE-2024-12086 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els. - CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1; this release reships those fixes to the additional platforms. Important TuxCare License Agreement CVE-2024-32487 CVE-2022-48624 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-27533: telnet: only accept option arguments in ascii Important TuxCare License Agreement CVE-2023-27533 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job Important TuxCare License Agreement CVE-2026-34980 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-66862: fix buffer overflow in gnu_special cplus-dem.c - CVE-2025-66863: fix denial of service in d_discriminator cp-demangle.c - CVE-2025-66865: fix denial of service in d_print_comp_inner cp-demangle.c Low TuxCare License Agreement CVE-2025-66863 CVE-2025-66862 CVE-2025-66865 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-3521: validate and require subkey binding signatures on PGP public keys Moderate TuxCare License Agreement CVE-2021-3521 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-49288: fix use-after-free in store_client lifetime by locking StoreEntry for the duration of the store_client object Important TuxCare License Agreement CVE-2023-49288 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-28389: fix NULL pointer dereference in dh_cms_set_shared_info and ecdh_cms_set_shared_info when the CMS KeyEncryptionAlgorithmIdentifier parameter field is omitted Important TuxCare License Agreement CVE-2026-28389 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-28390: fix NULL pointer dereference in rsa_cms_decrypt() when CMS RSA-OAEP pSourceFunc is missing its parameter Important TuxCare License Agreement CVE-2026-28390 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-35386: fix client-side command execution via control characters in usernames by adding iscntrl rejection to valid_ruser Important TuxCare License Agreement CVE-2026-35386 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-35414: fix incorrect matching of the authorized_keys principals="" option against certificate principals containing comma characters Important TuxCare License Agreement CVE-2026-35414 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Fix CVE-2026-35385 Important TuxCare License Agreement CVE-2026-35385 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-4519: reject leading dashes in webbrowser URLs that could be treated as command-line options by external browsers; also close a %action-substitution bypass of the check in UnixBrowser.open() Important TuxCare License Agreement CVE-2026-4519 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-40145: fix double free in gdImageGd2Ptr Important TuxCare License Agreement CVE-2021-40145 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-3426: remove the pydoc getfile feature to prevent directory traversal Critical TuxCare License Agreement CVE-2021-3733 CVE-2021-23336 CVE-2023-27043 CVE-2022-37454 CVE-2022-48566 CVE-2021-3426 CVE-2021-4189 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-30630: do not let --dump-bin overwrite an existing file Important TuxCare License Agreement CVE-2023-30630 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-4519: reject leading dashes in webbrowser URLs to prevent CLI option injection in pydoc/subprocess Important TuxCare License Agreement CVE-2026-4519 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-28388: fix NULL pointer dereference in check_delta_base() when delta CRL lacks CRL Number extension Important TuxCare License Agreement CVE-2026-28388 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Merge of the Amazon Linux 2 cups package (cups-1.6.3-51.amzn2.0.9) Moderate TuxCare License Agreement CVE-2023-32324 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-27857: fix excessive memory usage from many '(' in IMAP commands Important TuxCare License Agreement CVE-2026-27857 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-33845: fix DTLS handshake parsing integer underflow leading to OOB read Critical TuxCare License Agreement CVE-2026-33845 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-24072: mod_rewrite/mod_setenvif: use AP_EXPR_FLAG_RESTRICTED in htaccess to prevent reading server-side files via ap_expr from .htaccess - CVE-2026-29169: mod_dav_lock: NULL pointer dereference in dav_generic_refresh_locks (use dp_scan instead of dp) - CVE-2026-33006: mod_auth_digest: timing attack — use constant-time compare for nonce/digest verification - CVE-2026-33007: mod_authn_socache: NULL pointer dereference when r->uri has no '/' in directory context - CVE-2026-33523: scan outgoing status line for newlines and control characters to prevent HTTP response splitting - CVE-2026-33857: mod_proxy_ajp: off-by-one OOB reads in ajp_msg_get/peek length checks - CVE-2026-34032: mod_proxy_ajp: improper null termination and OOB read in ajp_msg_get_string - CVE-2026-34059: mod_proxy_ajp: heap over-read in ajp_parse_data when message is too small Low TuxCare License Agreement CVE-2026-34059 CVE-2026-29169 CVE-2026-33006 CVE-2026-24072 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-33007 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode by deferring xmlFree(URI) until after the error path has consumed the value Important TuxCare License Agreement CVE-2021-3516 CVE-2022-49043 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-3733: fix ReDoS in urllib2 AbstractBasicAuthHandler regex; the legacy '(?:.*,)*' prefix is replaced with the upstream-3.x form '(?:^|,)' and the scheme charset excludes ',' to prevent quadratic backtracking on crafted WWW-Authenticate headers - CVE-2021-23336: stop accepting ';' as a default query-string separator in urlparse.parse_qs/parse_qsl and cgi.parse* / FieldStorage; only '&' is used by default, with an opt-in 'separator' kwarg for callers that need legacy behavior - Additional tests for CVE-2021-23336: drop obsolete legacy-';' entries from Lib/test/test_cgi.py parse_strict_test_cases Moderate TuxCare License Agreement CVE-2021-3733 CVE-2021-23336 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-2369: fix integer underflow in sniff_unknown() on zero-length buffer that caused an out-of-bounds read in the content sniffer Critical TuxCare License Agreement CVE-2026-2369 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - fix: "vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}" - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2026-23397} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak {CVE-2026-23108} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag {CVE-2026-23105} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021} - ipv4: ip_gre: make ipgre_header() robust {CVE-2026-23011} - libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - via_wdt: fix critical boot hang due to unnamed resource allocation {CVE-2025-71114} - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU {CVE-2025-71111} - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} - Revert "fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322}" - driver core: fix potential null-ptr-deref in device_add() {CVE-2023-54321} - btrfs: output extra debug info if we failed to find an inline backref {CVE-2023-53672} - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb {CVE-2023-53548} - udf: Do not bother merging very long extents {CVE-2023-53506} - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release(CVE-2023-53484) - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} - ext4: remove a BUG_ON in ext4_mb_release_group_pa() {CVE-2023-53450} - md/raid10: fix wrong setting of max_corr_read_errors {CVE-2023-53313} - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() {CVE-2022-50521} - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} - ntb_netdev: Use dev_kfree_skb_any() in interrupt context {CVE-2022-50476} - i2c: ismt: use correct length when copy buffer {CVE-2022-50394} - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() {CVE-2022-50349} - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315} - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network {CVE-2022-49865} - KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943} - kvm: avoid speculation-based attacks from out-of-range memslot accesses {CVE-2021-47277} - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() {CVE-2021-47219} - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() {CVE-2021-47191} - USB: core: Add routines for endpoint checks in old drivers - xen: sync some headers with xen tree - squashfs: fix memory leak in squashfs_fill_super {CVE-2025-38415} - pptp: fix pptp_xmit() error path {CVE-2025-38574} - Revert "net/sched: sch_hfsc: Ensure inner classes have fsc curve" {CVE-2023-4623} Important TuxCare License Agreement CVE-2022-50497 CVE-2023-53313 CVE-2023-53622 CVE-2025-71082 CVE-2025-71111 CVE-2025-71114 CVE-2022-50476 CVE-2026-23397 CVE-2021-47277 CVE-2022-50349 CVE-2022-48943 CVE-2026-23108 CVE-2023-53619 CVE-2026-23388 CVE-2022-49865 CVE-2026-23216 CVE-2026-23021 CVE-2023-54321 CVE-2025-71116 CVE-2023-53450 CVE-2022-50315 CVE-2026-23105 CVE-2021-47191 CVE-2022-50521 CVE-2023-53484 CVE-2021-47219 CVE-2023-53587 CVE-2026-31581 CVE-2022-50394 CVE-2026-23076 CVE-2023-53668 CVE-2026-23011 CVE-2023-53672 CVE-2023-53506 CVE-2023-53548 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-31486: HTTP::Tiny verifies TLS certificates by default Important TuxCare License Agreement CVE-2023-31486 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2022-36760: mod_proxy_ajp: fix possible request smuggling via invalid Transfer-Encoding Critical TuxCare License Agreement CVE-2022-36760 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-51764: fix SMTP smuggling (backport of 2.11.11-smuggling-patch) Moderate TuxCare License Agreement CVE-2023-51764 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass Important TuxCare License Agreement CVE-2026-3833 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-28780: mod_proxy_ajp: heap-based buffer overflow in ajp_msg_check_header() — message size check did not subtract AJP_HEADER_LEN, letting a crafted AJP reply write 4 bytes past the end of the heap buffer Important TuxCare License Agreement CVE-2026-28780 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-7261: SOAP UAF on SoapServer::handle header-handler failure - CVE-2026-7262: SOAP to_zval_map NULL pointer dereference Critical TuxCare License Agreement CVE-2026-7262 CVE-2026-7261 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-43964: fix buffer over-read on enhanced status code without trailing text Important TuxCare License Agreement CVE-2026-43964 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-5201: fix heap buffer overflow due to unvalidated JPEG color component count in gdk_pixbuf__jpeg_image_load() Important TuxCare License Agreement CVE-2026-5201 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2022-2806: ovirt plugin: filter out all password keys in answer files Moderate TuxCare License Agreement CVE-2022-2806 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-27447: fix authorization bypass via case-insensitive username comparison in scheduler Moderate TuxCare License Agreement CVE-2026-27447 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-4692: fix OOB write when parsing NTFS $ATTRIBUTE_LIST entries Important TuxCare License Agreement CVE-2023-4692 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-4091: fix open_file() access check that allowed a client with read-only share access to truncate files via SMB2 OVERWRITE; the access check now uses open_access_mask instead of the requested access_mask Important TuxCare License Agreement CVE-2023-42669 CVE-2023-4091 CVE-2022-32742 CVE-2023-34966 CVE-2022-2127 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-4016: fix possible buffer overflow in ps -C option Low TuxCare License Agreement CVE-2023-4016 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-4641: fix password leak in gpasswd Moderate TuxCare License Agreement CVE-2023-4641 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-45186: fix quadratic runtime in attribute collision detection by using a hash table for default attribute names instead of an O(n^2) loop Important TuxCare License Agreement CVE-2026-45186 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-20251: fix race condition in the password lockout code that allowed determined attackers to exceed the configured bad-password count by issuing concurrent authentication / SAMR password-change requests for the same account; the bad-password-count read and the follow-up increment now run under a per-user named mutex in both check_sam_security() and pass_oem_change() Moderate TuxCare License Agreement CVE-2021-20251 CVE-2023-34967 CVE-2021-44141 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-3445: fix signature verification bypass via signature placed in the main RPM header Important TuxCare License Agreement CVE-2021-3445 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-49180: fix integer overflow in the RandR extension affecting the RRChangeProviderProperty function Important TuxCare License Agreement CVE-2025-49180 CVE-2025-49179 CVE-2025-49176 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-33278: fix dangling pointer use-after-free in dns_msg_deepcopy_region() Critical TuxCare License Agreement CVE-2026-33278 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-43618: fix integer overflow in compressed-token decoder allowing remote memory disclosure via crafted compressed stream Important TuxCare License Agreement CVE-2026-43618 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u492-b09 (GA). That fixes following CVEs: - CVE-2026-22003: hotspot DoS via sandboxed Java Web Start/applets with untrusted code (resource exhaustion) - CVE-2026-22007: Security component, local high-complexity low-impact info disclosure - CVE-2026-22013: JGSS, remote (user-interaction) high-confidentiality info disclosure - CVE-2026-22016: JAXP, remote unauth high-confidentiality info disclosure - CVE-2026-22018: Libraries, remote high-complexity DoS (low impact) - CVE-2026-22021: JSSE/HTTPS, remote unauth DoS (low impact) - CVE-2026-34268: Security component, local high-complexity low-impact info disclosure - CVE-2026-34282: Networking, remote unauth DoS (high availability impact) Important TuxCare License Agreement CVE-2026-34268 CVE-2026-22007 CVE-2026-34282 CVE-2026-22016 CVE-2026-22003 CVE-2026-22013 CVE-2026-22021 CVE-2026-22018 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-29518: fix TOCTOU symlink race in daemon file handling exposed when "use chroot = no" Important TuxCare License Agreement CVE-2026-29518 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-42050: fix stack-based buffer overflow in XTileImage() triggered by a malicious MIFF file when right-clicking a tile to invoke the Load / Update menu item Low TuxCare License Agreement CVE-2026-42050 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-42960: fix cache poisoning while following delegation - CVE-2026-42959: fix crash during DNSSEC validation of malicious content - CVE-2026-41292: limit incoming EDNS options to prevent DoS Critical TuxCare License Agreement CVE-2026-42960 CVE-2026-42959 CVE-2026-41292 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-1519: limit NSEC3 iterations during DNSSEC insecure delegation validation to prevent excessive CPU consumption Important TuxCare License Agreement CVE-2026-1519 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures Low TuxCare License Agreement CVE-2026-9256 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-43566: fix mkdir_internal() symlink race that allowed an SMB1 or NFS client to create a directory outside the exported share; pin the parent via vfs_ChDir() and validate the relative path before SMB_VFS_MKDIR() Low TuxCare License Agreement CVE-2021-43566 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-8376: heap buffer overflow in regex compilation with repeated fixed string on 32-bit builds Critical TuxCare License Agreement CVE-2026-8376 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-41035: fix use-after-free in receive_xattr() qsort by using post-filter xattr count Important TuxCare License Agreement CVE-2026-41035 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-35535: make privilege change before running the mailer fatal to prevent privilege escalation Important TuxCare License Agreement CVE-2026-35535 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-41080: fix hash-flooding DoS caused by insufficient salt entropy by backporting SipHash-2-4 keyed hashing with a 16-byte salt sourced from /dev/urandom Low TuxCare License Agreement CVE-2026-41080 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-4480: fix unauthenticated RCE in the printing %J substitution by masking shell-unsafe characters in the client-supplied job name Critical TuxCare License Agreement CVE-2026-4480 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-7210: use 16-byte salt for Expat hash-flooding protection (xml.parsers.expat, xml.etree.ElementTree) Critical TuxCare License Agreement CVE-2026-7210 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-3711: fix SM2 decryption buffer overflow; check the plaintext buffer is large enough when decrypting SM2; add extended tests for SM2 - CVE-2022-3996: fix X.509 policy constraints double-locking denial of service - CVE-2023-0464: fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: fix X509_VERIFY_PARAM_add0_policy() does not enable policy check - CVE-2023-2650: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt translates - CVE-2024-13176: fix timing side-channel in ECDSA signature computation - CVE-2024-5535: validate provided client list in SSL_select_next_proto - CVE-2025-9230: fix out-of-bounds read and write in RFC 3211 KEK unwrap - CVE-2025-69419: fix one-byte write-before-buffer in PKCS#12 BMPString conversion - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() - CVE-2026-28387: fix use-after-free / double-free in dane_match() - CVE-2026-28388: fix NULL dereference in check_delta_base() - CVE-2026-28389: fix NULL dereference in dh/ecdh_cms_set_shared_info() - CVE-2026-28390: fix NULL dereference in rsa_cms_decrypt() Critical TuxCare License Agreement CVE-2025-69419 CVE-2026-28389 CVE-2026-28390 CVE-2026-28388 CVE-2025-69421 CVE-2026-28387 CVE-2023-0464 CVE-2022-3996 CVE-2021-3711 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS) - CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS) Important TuxCare License Agreement CVE-2026-3039 CVE-2026-5946 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-45447: fix use-after-free in PKCS7_verify() when SignedData digestAlgorithms is an empty ASN.1 SET Critical TuxCare License Agreement CVE-2026-45447 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-7210: seed Expat's hash-flooding protection with a full 16 bytes (128 bits) of entropy via XML_SetHashSalt16Bytes() when the loaded libexpat provides it (detected via a weak symbol), instead of the brute-forceable 8-byte XML_SetHashSalt(); the pyexpat CAPI gains a SetHashSalt16Bytes pointer appended at the end of the struct (capsule magic unchanged) and _Py_HashSecret_t gains a 16-byte hashsalt16 field. Both call sites fall back to the legacy 8-byte API when the salt is all zeros (hash randomization off, the default) so Expat keeps self-seeding. Paired with the libexpat CVE-2026-41080 backport that exports the symbol; requires expat >= 2.1.0-15.0.7.el7_9.tuxcare.els3, the release shipping it Critical TuxCare License Agreement CVE-2026-7210 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values - CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output() - CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow - CVE-2025-13462: skip TarInfo AREGTYPE->DIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile Important TuxCare License Agreement CVE-2025-13462 CVE-2026-4224 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-46692: validate distributed pixel cache region on read and write to prevent a heap buffer over-write Critical TuxCare License Agreement CVE-2026-46692 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-29469: guard xmlDictComputeFastKey against namelen <= 0 to prevent out-of-bounds read when hashing zero-length or negative-length keys - CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered by malformed XML when default error handler interacts with freed memory - CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it cannot overread the buffer when scanning for newline / carriage-return - CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely Moderate TuxCare License Agreement CVE-2022-29824 CVE-2021-3541 CVE-2023-45322 CVE-2023-28484 CVE-2025-9714 CVE-2021-3537 CVE-2023-29469 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-29167: mod_ldap: use-after-free in per-directory configuration — deep-copy the client certificate list (and referenced path/password strings) into the connection pool instead of a shallow header copy - CVE-2026-29170: mod_proxy_ftp: cross-site scripting in the generated FTP directory listing — escape href filenames with ap_os_escape_path() wrapped in ap_escape_html() instead of ap_escape_uri() - CVE-2026-34355: mod_proxy_html: heap buffer overflow reachable from an untrusted backend — replace hand-rolled buffer management with the ap_varbuf API - CVE-2026-42535: mod_dav_fs: deny WebDAV access to/within the .DAV state directory in dav_fs_get_resource() - CVE-2026-42536: mod_xml2enc: heap buffer overflow in fix_skipto — keep the buffer length (bblen) accounting in sync when advancing the buffer Critical TuxCare License Agreement CVE-2026-34355 CVE-2026-42536 CVE-2026-29170 CVE-2026-42535 CVE-2026-29167 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-46559: fix heap buffer overflow (out-of-bounds write) in JP2 encoder by bounding tcp_distoratio and tcp_rates option parsing to array extents Important TuxCare License Agreement CVE-2026-46559 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-49218: fix denial of service in DICOM reader by rejecting an image decoded with zero columns or rows Important TuxCare License Agreement CVE-2026-49218 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-53460: fix unbounded memory allocation in AcquireAlignedMemory() leading to out-of-memory denial of service Important TuxCare License Agreement CVE-2026-53460 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-4408: escape/mask client-controlled username before %u substitution in 'check password script' to prevent unauthenticated remote command execution; restrict _samr_ValidatePassword to DCs Critical TuxCare License Agreement CVE-2026-4408 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-33901: fix heap buffer overflow (out-of-bounds write) in the MVG decoder when copying an over-long token into a fixed-size buffer - CVE-2026-33908: fix stack exhaustion denial of service in DestroyXMLTree() by imposing a recursion depth limit on deeply nested XML - CVE-2026-45031: fix list-length resource policy bypass in the PSD decoder by validating the layer count against the list limit - CVE-2026-45664: fix excessive resource use in the MNG coder by bounding the number of LOOP/ENDL operations - CVE-2026-46520: fix heap out-of-bounds write in the IPL coder when writing multiple images with differing dimensions - CVE-2026-46522: fix infinite loop (CPU exhaustion) in the MIFF decoder on a crafted file - CVE-2026-46523: fix heap use-after-free in the MSL coder by disabling blob support for the MSL format Important TuxCare License Agreement CVE-2026-46523 CVE-2026-46520 CVE-2026-46522 CVE-2026-48994 CVE-2026-42326 CVE-2026-45624 CVE-2026-46521 CVE-2026-48734 CVE-2026-45031 CVE-2026-33901 CVE-2026-33908 CVE-2026-45664 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-58016: fix D-Bus introspection XML parser <node> element nesting state handling Critical TuxCare License Agreement CVE-2026-58016 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-11979: add bounds checks in xmlcatalog --shell usershell() to prevent stack buffer overflows when parsing overly long command lines Important TuxCare License Agreement CVE-2026-11979 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-58014: fix one-byte heap under-read in g_key_file_get_locale_string_list with an empty value - CVE-2026-58015: validate DBUS_COOKIE_SHA1 cookie_context to prevent server-controlled path traversal / arbitrary file read Important TuxCare License Agreement CVE-2026-58015 CVE-2026-58014 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-11.0.31+11 (GA). The following CVEs were fixed: - CVE-2025-66293: update bundled libpng to 1.6.57 - CVE-2026-22007: enhance crypto algorithm support - CVE-2026-22013: improve Kerberos credentialing - CVE-2026-22016: enhance path factories - CVE-2026-22018: enhance Zip file reading - CVE-2026-22021: enhance certificate chain validation - CVE-2026-22695: update bundled libpng to 1.6.57 - CVE-2026-22801: update bundled libpng to 1.6.57 - CVE-2026-23865: update bundled freetype - CVE-2026-25646: update bundled libpng to 1.6.57 - CVE-2026-33416: update bundled libpng to 1.6.57 - CVE-2026-33636: update bundled libpng to 1.6.57 - CVE-2026-34268: enhance key generation - CVE-2026-34282: enhance TLS connection handling Important TuxCare License Agreement CVE-2026-33416 CVE-2026-34268 CVE-2026-22007 CVE-2026-34282 CVE-2026-22016 CVE-2026-22801 CVE-2026-23865 CVE-2026-22695 CVE-2026-25646 CVE-2025-66293 CVE-2026-22013 CVE-2026-22021 CVE-2026-33636 CVE-2026-22018 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-0672: reject control characters in the Cookie module - add the _has_control_character() helper and validate in Morsel.__setitem__, Morsel.setdefault(), Morsel.set() and BaseCookie.output(). Applied as the prerequisite for CVE-2026-3644; Python 2.7.5 shipped neither fix. - CVE-2026-3644: reject control characters in Morsel.update(), the unpickling path (Morsel.__setstate__) and Morsel.js_output(). - CVE-2026-4224: guard conv_content_model() in pyexpat with Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() to avoid a C stack overflow when parsing a deeply nested content model in an inline DTD with a registered ElementDeclHandler. - CVE-2025-13462: skip the old-v7 AREGTYPE -> DIRTYPE normalization in tarfile when reading a follow-up header (GNU long name/link or PAX extended header), so crafted multi-block members are no longer misinterpreted. Important TuxCare License Agreement CVE-2025-13462 CVE-2026-3644 CVE-2026-4224 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb) Important TuxCare License Agreement CVE-2026-49975 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499} - net: usb: pegasus: validate USB endpoints {CVE-2026-23290} Important TuxCare License Agreement CVE-2026-43499 CVE-2026-23290 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-58470: fix integer overflow in parse_content_range() - CVE-2026-58471: fix heap buffer overflow in convert_fname() during filename charset conversion - CVE-2026-58472: fix integer/heap buffer overflow in html_quote_string() Important TuxCare License Agreement CVE-2026-58472 CVE-2026-58471 CVE-2026-58470 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-15308: fix quadratic complexity in html.parser.HTMLParser incremental parsing of long unterminated constructs (DoS) Important TuxCare License Agreement CVE-2026-15308 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-56361: out-of-bounds access in AcquireKernelBuiltIn() when a user kernel offset equals the kernel width or height - CVE-2026-56367: heap overflow from an unchecked rows*channels multiplication in the PSD RLE size reader - CVE-2026-56368: memory leak of the quantum info buffer in the raw pixel writers (bgr, cmyk, gray, rgb, ycbcr) on output blob reopen failure - CVE-2026-56370: out-of-bounds write in ConnectedComponentsImage() via crafted connected-components:keep and :remove index ranges - CVE-2026-56378: out-of-bounds read in the PCD Huffman decoder from an unbounded output pointer Critical TuxCare License Agreement CVE-2026-56361 CVE-2026-56368 CVE-2026-56370 CVE-2026-56367 CVE-2026-56378 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-34000: fix out-of-bounds read in XKB geometry key alias bounds check in _CheckSetGeom() - CVE-2026-34002: fix out-of-bounds read in XKB modifier map handling in CheckModifierMap() and add further request-bounds validation Critical TuxCare License Agreement CVE-2026-34000 CVE-2026-34002 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-43965: fix incorrect buffer size calculation (CWE-131) in the MIFF decoder caused by image depth not being resynchronized after SetQuantumFormat Important TuxCare License Agreement CVE-2025-43965 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-15308: fix quadratic-complexity CPU denial-of-service in the HTMLParser incremental parser - accumulate feed() data in a buffer and only join/rescan once enough has piled up, instead of re-concatenating and re-scanning the whole unparsed buffer on every feed() call. Backported from upstream CPython (gh-153030, GH-153031). Important TuxCare License Agreement CVE-2026-15308 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-13221: regex trie 16-bit field overflow in Perl_study_chunk produces silently incorrect matches - CVE-2026-57432: integer overflow in S_measure_struct leads to out-of-bounds heap read in pack/unpack Critical TuxCare License Agreement CVE-2026-57432 CVE-2026-13221 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2025-54389: escape filenames in error/log messages to prevent terminal escape sequence injection Moderate TuxCare License Agreement CVE-2025-54389 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-61857: check ResizeQuantumMemory() return value in ParseEntities() (magick/xml-tree.c) to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffman_image clone on temp-file open failure in WriteGROUP4Image() (coders/tiff.c) to fix a memory leak - CVE-2026-61870: relinquish pixel_info before throwing on colormap allocation failure in WriteVIFFImage() (coders/viff.c) to fix a memory leak Important TuxCare License Agreement CVE-2026-61870 CVE-2026-61863 CVE-2026-61857 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-42533: add script-engine buffer overrun protection to fix heap buffer overflow when a map regex capture (or a non-cacheable variable) is used in a string expression Low TuxCare License Agreement CVE-2026-42533 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling (peerDigestSwapInMask) by bounding mask data against the declared mask_size Moderate TuxCare License Agreement CVE-2026-47729 CVE-2026-50012 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-61866: fix a memory leak (CWE-401) in the JNG encoder (WriteOneJNGImage) when the blob for the grayscale JPEG alpha channel cannot be opened Important TuxCare License Agreement CVE-2026-61866 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in server_request_tun() (upstream 8dfe7ed6) - CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS (upstream 5d04ca6a) Important TuxCare License Agreement CVE-2026-59999 CVE-2026-60000 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-41992: out-of-bounds read in the LZH decoder from stale shared decompression state (left/right) reused across a .Z then .lzh file in a single gzip -d invocation Important TuxCare License Agreement CVE-2026-41992 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2021-3326: fix assertion failure in iconv ISO-2022-JP-3 module Critical TuxCare License Agreement CVE-2024-2961 CVE-2024-33599 CVE-2021-3326 CVE-2021-35942 CVE-2022-23219 CVE-2022-23218 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - i40e: remove read access to debugfs files {CVE-2025-39901} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50638} - usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607} - md: fix resync softlockup when bitmap size is less than array size {CVE-2023-53357} - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() {CVE-2021-47288} - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051} - netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685} - scsi: pm8001: Fix use-after-free for aborted TMF sas_task {CVE-2022-48791} - media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110} - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455} - netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190} - selinux: Add boundary check in put_entry() {CVE-2022-50200} - tracing: Only have rmmod clear buffers that its events were active in {CVE-2022-49006} - ASoC: core: Fix use-after-free in snd_soc_exit() {CVE-2022-49842} - nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790} - scsi: qla4xxx: Add length check when parsing nlattrs {CVE-2023-53456} - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448} - xen/privcmd: fix double free via VMA splitting {CVE-2026-31787} - ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021} - ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452} - igb: Fix igb_down hung on surprise removal {CVE-2023-53148} - dm raid: fix accesses beyond end of raid member array {CVE-2022-49674} - md: suspend array while updating raid_disks via sysfs {CVE-2025-71225} - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} - atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050} - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572} - drivers: base: Free devm resources when unregistering a device {CVE-2023-53596} - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} - usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720} - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093} - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395} - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output {CVE-2023-53676} - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING {CVE-2022-50430} Critical TuxCare License Agreement CVE-2023-53357 CVE-2023-53456 CVE-2026-31452 CVE-2026-43427 CVE-2026-43190 CVE-2022-48790 CVE-2025-39901 CVE-2023-53148 CVE-2022-50638 CVE-2026-43110 CVE-2025-71225 CVE-2022-49674 CVE-2026-43050 CVE-2022-49006 CVE-2026-31607 CVE-2022-50021 CVE-2026-31405 CVE-2022-48791 CVE-2022-50366 CVE-2026-31685 CVE-2022-50093 CVE-2026-31720 CVE-2026-43020 CVE-2026-43052 CVE-2022-50200 CVE-2026-43051 CVE-2022-49842 CVE-2026-23455 CVE-2023-53285 CVE-2023-52572 CVE-2025-71093 CVE-2026-31787 CVE-2023-53395 CVE-2023-53676 CVE-2022-50430 CVE-2023-53596 CVE-2026-23448 CVE-2021-47288 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113} - btrfs: fix use-after-free after failure to create a snapshot {CVE-2022-48733} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408} - xfs: delete attr leaf freemap entries when empty {CVE-2026-43158} - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664} - media: dvbdev: adopts refcnt to avoid UAF {CVE-2022-50274} - igbvf: fix double free in `igbvf_probe` {CVE-2021-47589} - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() {CVE-2021-47576} - ALSA: seq: Fix race of snd_seq_timer_open() {CVE-2021-47281} - net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088} - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields {CVE-2021-47485} - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740} - proc/vmcore: fix clearing user buffer by properly using clear_user() - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() - ASoC: ops: Correct bounds check for second channel on SX controls {CVE-2022-48951} - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951} - nfsd: fix use-after-free due to delegation race {CVE-2021-47506} Important TuxCare License Agreement CVE-2022-50274 CVE-2021-47506 CVE-2023-52664 CVE-2026-31408 CVE-2021-47281 CVE-2026-43088 CVE-2022-48733 CVE-2021-47485 CVE-2021-47566 CVE-2021-47589 CVE-2026-43158 CVE-2022-48951 CVE-2021-47576 CVE-2021-47571 CVE-2022-49740 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - xfrm: Duplicate SPI Handling {CVE-2025-39965} - xfrm: state: use atomic_inc_not_zero to increment refcount - padata: Fix pd UAF once and for all {CVE-2025-38584} - padata: Remove broken queue flushing {CVE-2023-52854} - padata: ensure padata_do_serial() runs on the correct CPU - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ipvs: use explicitly signed chars - vt: Clear selection before changing the font {CVE-2022-49948} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - igb: Do not free q_vector unless new one was allocated {CVE-2022-50252} - scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084} - dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258} - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - net_sched: hfsc: Fix a UAF vulnerability in class handling - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} Important TuxCare License Agreement CVE-2023-53117 CVE-2025-39797 CVE-2022-49948 CVE-2022-49907 CVE-2022-3640 CVE-2023-53000 CVE-2022-50085 CVE-2025-38718 CVE-2024-35967 CVE-2025-39751 CVE-2025-37839 CVE-2025-39965 CVE-2023-53373 CVE-2022-48900 CVE-2025-37882 CVE-2023-53365 CVE-2022-50408 CVE-2022-49870 CVE-2022-50252 CVE-2022-50084 CVE-2022-23042 CVE-2023-52854 CVE-2024-35962 CVE-2023-53305 CVE-2022-20566 CVE-2025-38250 CVE-2022-21546 CVE-2022-50386 CVE-2022-49918 CVE-2022-50258 CVE-2022-49917 CVE-2025-38584 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803} Important TuxCare License Agreement CVE-2024-0584 CVE-2025-38323 CVE-2016-2070 CVE-2025-37803 CVE-2023-52922 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - smb: client: reject userspace cifs.spnego descriptions - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475} - cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s {CVE-2026-43427} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450} Important TuxCare License Agreement CVE-2026-31778 CVE-2023-52741 CVE-2023-52475 CVE-2022-48788 CVE-2026-31602 CVE-2022-49029 CVE-2023-52988 CVE-2023-53075 CVE-2026-46243 CVE-2026-43040 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-8286: url: fix connection reuse for starttls protocols Important TuxCare License Agreement CVE-2026-8286 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-6100: clear dangling next_in pointer after MemoryError in bz2/lzma decompress to avoid use-after-free on decompressor reuse - CVE-2026-11972: break tarfile._Stream.seek block-skip loop at EOF to avoid a hang on crafted streaming archives Critical TuxCare License Agreement CVE-2026-6100 CVE-2026-11972 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-50252: DNS cache poisoning via per-thread source port partitioning; with 'so-reuseport: yes' and multiple threads the outgoing source port revealed the worker thread, lowering effective port entropy Critical TuxCare License Agreement CVE-2026-50252 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() - i40e: increase max descriptors for XL710 - e1000e: fix heap overflow in e1000_set_eeprom - vsock: avoid to close connected socket after the timeout - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: lost matching-pair of trace in ext4_truncate - ext4: allow ext4_truncate() to return an error - net: sched: sch_teql: fix null-pointer dereference - drm/virtio: move drm_connector_update_edid_property() call - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() - cifs: serialise setting of cifsInodeInfo::oplock - cifs: serialise DIO and buffered IO - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - iavf: Fix reset error handling - RDMA/rxe: Fix incomplete state save in rxe_requester - scsi: qla2xxx: Fix bsg_done() causing double free - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402} - net: check iov bounds in memcpy_from_msg() {CVE-2018-16885} - md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163} - RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110} - xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree {CVE-2026-43125} - RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852} - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181} - net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116} - ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090} - rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-53166} - RDMA/rxe: Zero out index member of struct rxe_queue Important TuxCare License Agreement CVE-2026-43163 CVE-2026-31532 CVE-2026-23243 CVE-2026-43198 CVE-2018-16885 CVE-2023-35823 CVE-2026-31402 CVE-2026-46116 CVE-2026-45852 CVE-2026-43037 CVE-2026-53166 CVE-2026-46181 CVE-2026-31684 CVE-2026-46090 CVE-2025-38024 CVE-2026-43125 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-11972: stop tarfile._Stream.seek() from spinning past end of stream - the loop read whole blocks according to the member size declared in the header and ignored what read() returned, so a header announcing a huge size (e.g. 2**64) kept it going against an already exhausted stream and hung any application walking an untrusted archive opened in streaming mode (mode='r|'). Backported from upstream CPython (gh-151981, GH-151982). Important TuxCare License Agreement CVE-2026-11972 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-44186: mod_proxy_ftp: fix infinite loop parsing the Retry-After delay in an FTP response - advance the scan pointer so the whitespace-prefixed digit search terminates Critical TuxCare License Agreement CVE-2024-39573 CVE-2024-38475 CVE-2021-26690 CVE-2022-26377 CVE-2022-29404 CVE-2022-31813 CVE-2026-44186 CVE-2022-23943 CVE-2023-31122 CVE-2022-22721 CVE-2022-22719 CVE-2022-28615 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-13321: reject validly-signed NSEC records whose Next Domain Name points outside the signer's zone, preventing cross-zone DNSSEC cache poisoning Important TuxCare License Agreement CVE-2026-13321 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-45447: fix use-after-free of a caller-owned BIO in PKCS7_verify() when the SignedData digestAlgorithms field is an empty ASN.1 SET Critical TuxCare License Agreement CVE-2026-45447 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-8927: url: detect proxy changes read from environment to flush proxy Digest state - CVE-2026-8932: tls: fix incomplete mTLS config in connection reuse and session cache Important TuxCare License Agreement CVE-2026-8927 CVE-2026-8932 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-56407: prevent signed integer overflow of the entity textLen field by capping the entityValuePool length at INT_MAX in doProlog Important TuxCare License Agreement CVE-2026-56407 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-52532: fix infinite loop and unbounded memory consumption while reading certain patterns of WebSocket data Important TuxCare License Agreement CVE-2024-52532 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash - CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals - CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state Critical TuxCare License Agreement CVE-2026-9672 CVE-2026-17543 CVE-2026-7260 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-42009: fix DTLS handshake_compare qsort comparator contract violation (undefined behaviour) - CVE-2026-33846: add DTLS reassembly fragment length/bounds checks (heap overwrite) - CVE-2026-42012: URI subjectAltName now precludes Common Name fallback in hostname verification - CVE-2026-42013: oversized subjectAltName now precludes Common Name fallback in hostname verification - CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread Important TuxCare License Agreement CVE-2026-42009 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so that recursive query patterns which continuously trigger cache-database maintenance can no longer exceed max-cache-size and exhaust host memory (DoS) - CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock bucketed and process it in quanta, so that the queue introduced above does not starve cache cleanup under load and let cache memory grow without bound - CVE-2023-6516 follow-up: handle a node being re-queued for tree pruning gracefully instead of asserting, and do not append a parent to a pruning list it is already on, avoiding an assertion failure (DoS) and pruning-list corruption reachable through normal cache activity - CVE-2023-6516 follow-up: adopt the pruning design upstream settled on in 9.16.49 - run tree pruning on a dedicated task with an unlimited quantum instead of sharing the quantum-1 cache database task, clean every eligible ancestor in a single pass, and re-create both tasks when the cache is flushed so that pruning keeps working after "rndc flush" Important TuxCare License Agreement CVE-2023-6516 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-0743: fix undefined behavior with large ssl_DefSend return values Important TuxCare License Agreement CVE-2024-0743 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-34180: avoid truncating a long ASN.1 content length to int in asn1_ex_c2i(), which caused a heap buffer over-read for primitive elements larger than 2GB - CVE-2026-42766: reject a CMS PasswordRecipientInfo whose keyDerivationAlgorithm is absent instead of dereferencing NULL Important TuxCare License Agreement CVE-2026-34180 CVE-2026-42766 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under a random subdomain attack; superseded generations of a cached RRset stayed linked while validation kept the node referenced, so the cache grew far past max-cache-size - CVE-2026-11622: also reference-count the DNAME zone cut headers and initialise the counter for headers faulted in from a 'map' file, two gaps the upstream 9.11 fix leaves open Important TuxCare License Agreement CVE-2026-11622 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-61868: relinquish scanline and destroy chroma_image on blob open failure in ReadYUVImage() (coders/yuv.c) to fix a memory leak - CVE-2026-61869: destroy quantum_info before throwing on pixel and colormap allocation failure in WriteMIFFImage() (coders/miff.c) to fix a memory leak Important TuxCare License Agreement CVE-2026-61869 CVE-2026-61868 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47063: enhance Jar handling - Rebase jdk8009550-rh910107-search_for_versioned_libpcsclite.patch on top of upstream JDK-8252412, which reworked the PCSC.framework lookup. Important TuxCare License Agreement CVE-2026-46968 CVE-2025-50106 CVE-2026-47058 CVE-2025-30749 CVE-2026-47063 CVE-2026-47057 CVE-2026-47010 CVE-2026-47021 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2024-30205: org-file-contents: consider all remote files unsafe Important TuxCare License Agreement CVE-2024-30205 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Re-tag base release to 9.0.3 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.56.1-9.0.3.el7_9 Important TuxCare License Agreement CVE-2026-58010 CVE-2026-58012 CVE-2026-58013 CVE-2026-58011 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-27858: fix pre-auth memory exhaustion in managesieve-login from an oversized AUTHENTICATE initial response Important TuxCare License Agreement CVE-2026-27858 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564} - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc {CVE-2023-52760} - bpf: Fix truncation handling for mod32 dst reg wrt zero {CVE-2021-3444} Important TuxCare License Agreement CVE-2021-3444 CVE-2023-52760 CVE-2026-64564 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 (GA). That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via TLS (enhance TLS certificate handling) - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity compromise (enhance JPEG handling) - CVE-2026-47021: 2D, remote unauthenticated DoS with low availability impact (enhance XBM image support) - CVE-2026-47057: Scripting, improve Nashorn index handling - CVE-2026-47058: Scripting, enhance DataView implementation - CVE-2026-47063: Libraries, enhance Jar handling - The same upstream release also closes the remaining CVEs of the Oracle July 2026 CPU, tracked under separate ELS tickets: - CVE-2026-47027: Libraries, enhance Jar file processing - CVE-2026-47059: 2D, enhance AWT ImagingLib - CVE-2026-60147: Security, improve certification checking - CVE-2026-41254: bundled Little CMS updated to 2.19.1 Important TuxCare License Agreement CVE-2026-46968 CVE-2026-47058 CVE-2026-47063 CVE-2024-21131 CVE-2024-21138 CVE-2026-47057 CVE-2024-21068 CVE-2026-47010 CVE-2026-47021 CVE-2024-21144 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-0864: normalize CR and CRLF line endings when writing multi-line values in ConfigParser - RawConfigParser.write() escaped only '\n' (to '\n\t'), so an attacker-controlled value containing a bare carriage return was written out verbatim and injected unexpected keys and values into the resulting configuration file. Applied at both write() call sites, for the DEFAULT section and for named sections; Python 2.7 has no _write_section(). Backported from upstream CPython (gh-143927, GH-143929). Important TuxCare License Agreement CVE-2026-0864 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-6473: tsearch: bound StartSel/StopSel/FragmentDelimiter length to PG_INT16_MAX in ts_headline() - CVE-2026-6473: contrib/ltree: guard lquery parsing against numvar and totallen wraparound - CVE-2026-6473: regex: add overflow-checked MALLOC_ARRAY/REALLOC_ARRAY and bound NFA state/color products in newdfa() and compact() Critical TuxCare License Agreement CVE-2026-6637 CVE-2026-6637 CVE-2024-10979 CVE-2021-23214 CVE-2025-8714 CVE-2026-6473 CVE-2026-6473 CVE-2026-6474 CVE-2026-6474 CVE-2026-6477 CVE-2026-6477 CVE-2026-6478 CVE-2026-6478 CVE-2024-7348 CVE-2025-1094 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-14669: to_char(): bound TZ/tz timezone abbreviation length to prevent a heap buffer overrun in DCH_to_char() - CVE-2022-2625: extensions: forbid CREATE OR REPLACE and CREATE ... IF NOT EXISTS from absorbing free-standing objects Important TuxCare License Agreement CVE-2022-2625 CVE-2026-14669 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-66338: reject chunk-size lines that violate RFC 9112 (leading whitespace, sign prefix, "0x" prefix or trailing garbage) in soup_body_input_stream_read_chunked() to prevent HTTP request smuggling Important TuxCare License Agreement CVE-2026-66338 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-0864: normalize CR and CRLF line endings to LF+TAB when writing multi-line configparser values, preventing configuration injection via attacker-controlled values Important TuxCare License Agreement CVE-2026-0864 cpe:/o:redhat:enterprise_linux:7 Red Hat Enterprise Linux 7 - CVE-2026-42766: fix NULL pointer dereference during password-based CMS decryption when the optional keyDerivationAlgorithm field is absent - CVE-2026-34180: fix heap buffer over-read caused by integer truncation of ASN.1 primitive content lengths above 2 GB on 64-bit platforms Important TuxCare License Agreement CVE-2026-34180 CVE-2026-42766 cpe:/o:redhat:enterprise_linux:7 /etc/els-release Red Hat Enterprise Linux Server release 7\.9 \(ELS by TuxCare\) 1 wget expat expat-devel expat-static squid squid-migration-script squid-sysvinit python python-debug python-devel python-libs python-test python-tools tkinter binutils binutils-devel krb5-devel krb5-libs krb5-pkinit krb5-server krb5-server-ldap krb5-workstation libkadm5 libxml2 libxml2-devel libxml2-python libxml2-static sudo sudo-devel emacs-git emacs-git-el git git-all git-bzr git-cvs git-daemon git-email git-gnome-keyring git-gui git-hg git-instaweb git-p4 git-svn gitk gitweb perl-Git perl-Git-SVN httpd httpd-devel httpd-manual httpd-tools mod_ldap mod_proxy_html mod_session mod_ssl python3 python3-debug python3-devel python3-idle python3-libs python3-test python3-tkinter php php-bcmath php-cli php-common php-dba php-devel php-embedded php-enchant php-fpm php-gd php-intl php-ldap php-mbstring php-mysql php-mysqlnd php-odbc php-pdo php-pgsql php-process php-pspell php-recode php-snmp php-soap php-xml php-xmlrpc gnutls gnutls-c++ gnutls-dane gnutls-devel gnutls-utils java-1.8.0-openjdk java-1.8.0-openjdk-accessibility java-1.8.0-openjdk-accessibility-debug java-1.8.0-openjdk-debug java-1.8.0-openjdk-demo java-1.8.0-openjdk-demo-debug java-1.8.0-openjdk-devel java-1.8.0-openjdk-devel-debug java-1.8.0-openjdk-headless java-1.8.0-openjdk-headless-debug java-1.8.0-openjdk-javadoc java-1.8.0-openjdk-javadoc-debug java-1.8.0-openjdk-javadoc-zip java-1.8.0-openjdk-javadoc-zip-debug java-1.8.0-openjdk-src java-1.8.0-openjdk-src-debug pam pam-devel openssh openssh-askpass openssh-cavs openssh-clients openssh-keycat openssh-ldap openssh-server openssh-server-sysvinit pam_ssh_agent_auth bpftool kernel kernel-debug kernel-debug-devel kernel-devel kernel-headers kernel-tools kernel-tools-libs kernel-tools-libs-devel perf python-perf cpp gcc gcc-c++ gcc-gfortran gcc-gnat gcc-go gcc-objc gcc-objc++ gcc-plugin-devel libasan libasan-static libatomic libatomic-static libgcc libgfortran libgfortran-static libgnat libgnat-devel libgnat-static libgo libgo-devel libgo-static libgomp libitm libitm-devel libitm-static libmudflap libmudflap-devel libmudflap-static libobjc libquadmath libquadmath-devel libquadmath-static libstdc++ libstdc++-devel libstdc++-docs libstdc++-static libtsan libtsan-static rsync grub2 grub2-common grub2-efi-ia32 grub2-efi-ia32-cdboot grub2-efi-ia32-modules grub2-efi-x64 grub2-efi-x64-cdboot grub2-efi-x64-modules grub2-pc grub2-pc-modules grub2-tools grub2-tools-extra grub2-tools-minimal libsoup libsoup-devel lemon sqlite sqlite-devel sqlite-doc sqlite-tcl mod_dav_svn subversion subversion-devel subversion-gnome subversion-javahl subversion-kde subversion-libs subversion-perl subversion-python subversion-ruby subversion-tools bind bind-chroot bind-devel bind-export-devel bind-export-libs bind-libs bind-libs-lite bind-license bind-lite-devel bind-pkcs11 bind-pkcs11-devel bind-pkcs11-libs bind-pkcs11-utils bind-sdb bind-sdb-chroot bind-utils libxslt libxslt-devel libxslt-python libndp libndp-devel libgudev1 libgudev1-devel systemd systemd-devel systemd-journal-gateway systemd-libs systemd-networkd systemd-python systemd-resolved systemd-sysv freetype freetype-demos freetype-devel iwl100-firmware iwl1000-firmware iwl105-firmware iwl135-firmware iwl2000-firmware iwl2030-firmware iwl3160-firmware iwl3945-firmware iwl4965-firmware iwl5000-firmware iwl5150-firmware iwl6000-firmware iwl6000g2a-firmware iwl6000g2b-firmware iwl6050-firmware iwl7260-firmware linux-firmware tuned tuned-gtk tuned-profiles-atomic tuned-profiles-compat tuned-profiles-cpu-partitioning tuned-profiles-mssql tuned-profiles-nfv tuned-profiles-nfv-guest tuned-profiles-nfv-host tuned-profiles-oracle tuned-profiles-realtime tuned-profiles-sap tuned-profiles-sap-hana tuned-utils tuned-utils-systemtap unbound unbound-devel unbound-libs unbound-python emacs emacs-common emacs-el emacs-filesystem emacs-nox emacs-terminal xorg-x11-server-Xdmx xorg-x11-server-Xephyr xorg-x11-server-Xnest xorg-x11-server-Xorg xorg-x11-server-Xvfb xorg-x11-server-Xwayland xorg-x11-server-common xorg-x11-server-devel xorg-x11-server-source minizip minizip-devel zlib zlib-devel zlib-static mpfr mpfr-devel microcode_ctl gdk-pixbuf2 gdk-pixbuf2-devel gdk-pixbuf2-tests glibc glibc-common glibc-devel glibc-headers glibc-static glibc-utils nscd nettle nettle-devel glib2 glib2-devel glib2-doc glib2-fam glib2-static glib2-tests openssl openssl-devel openssl-libs openssl-perl openssl-static cups cups-client cups-devel cups-filesystem cups-ipptool cups-libs cups-lpd java-11-openjdk java-11-openjdk-debug java-11-openjdk-demo java-11-openjdk-demo-debug java-11-openjdk-devel java-11-openjdk-devel-debug java-11-openjdk-headless java-11-openjdk-headless-debug java-11-openjdk-javadoc java-11-openjdk-javadoc-debug java-11-openjdk-javadoc-zip java-11-openjdk-javadoc-zip-debug java-11-openjdk-jmods java-11-openjdk-jmods-debug java-11-openjdk-src java-11-openjdk-src-debug java-11-openjdk-static-libs java-11-openjdk-static-libs-debug perl perl-CPAN perl-ExtUtils-CBuilder perl-ExtUtils-Embed perl-ExtUtils-Install perl-IO-Zlib perl-Locale-Maketext-Simple perl-Module-CoreList perl-Module-Loaded perl-Object-Accessor perl-Package-Constants perl-Pod-Escapes perl-Time-Piece perl-core perl-devel perl-libs perl-macros perl-tests gnupg2 gnupg2-smime haproxy sysstat bzip2 bzip2-devel bzip2-libs ImageMagick ImageMagick-c++ ImageMagick-c++-devel ImageMagick-devel ImageMagick-doc ImageMagick-perl openldap openldap-clients openldap-devel openldap-servers openldap-servers-sql cyrus-imapd cyrus-imapd-devel cyrus-imapd-utils mokutil shim-ia32 shim-x64 less curl libcurl libcurl-devel rpm rpm-apidocs rpm-build rpm-build-libs rpm-cron rpm-devel rpm-libs rpm-plugin-systemd-inhibit rpm-python rpm-sign gd gd-devel gd-progs dmidecode dovecot dovecot-devel dovecot-mysql dovecot-pgsql dovecot-pigeonhole postfix postfix-perl-scripts postfix-sysvinit sos ctdb ctdb-tests libsmbclient libsmbclient-devel libwbclient libwbclient-devel samba samba-client samba-client-libs samba-common samba-common-libs samba-common-tools samba-dc samba-dc-libs samba-devel samba-krb5-printing samba-libs samba-pidl samba-python samba-python-test samba-test samba-test-libs samba-vfs-glusterfs samba-winbind samba-winbind-clients samba-winbind-krb5-locator samba-winbind-modules procps-ng procps-ng-devel procps-ng-i18n shadow-utils libdnf libdnf-devel python2-hawkey python2-libdnf postgresql postgresql-contrib postgresql-devel postgresql-docs postgresql-libs postgresql-plperl postgresql-plpython postgresql-pltcl postgresql-server postgresql-static postgresql-test postgresql-upgrade nginx nginx-all-modules nginx-filesystem nginx-mod-devel nginx-mod-http-image-filter nginx-mod-http-perl nginx-mod-http-xslt-filter nginx-mod-mail nginx-mod-stream openssl11 openssl11-devel openssl11-libs openssl11-static aide gzip nss nss-devel nss-pkcs11-devel nss-sysinit nss-tools x86_64 0:1.14-18.el7_6.1.tuxcare.els1 199e2f91fd431d51 d07bf2a08d50eb66 i686|x86_64 0:2.1.0-15.0.1.el7_9.tuxcare.els1 x86_64 7:3.5.20-17.0.3.el7_9.10.tuxcare.els1 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els1 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els1 x86_64 0:2.27-44.base.el7_9.1.tuxcare.els2 i686|x86_64 0:2.27-44.base.el7_9.1.tuxcare.els2 i686|x86_64 0:1.15.1-55.el7_9.tuxcare.els2 x86_64 0:1.15.1-55.el7_9.tuxcare.els2 i686|x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els4 x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els4 x86_64 0:1.8.23-10.el7_9.3.tuxcare.els2 i686|x86_64 0:1.8.23-10.el7_9.3.tuxcare.els2 0:1.8.3.1-25.el7_9.tuxcare.els3 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els3 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els2 0:2.4.6-99.0.5.el7_9.1.tuxcare.els2 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els2 i686|x86_64 0:3.6.8-21.0.1.el7_9.tuxcare.els2 x86_64 0:5.4.16-48.el7.tuxcare.els9 i686|x86_64 0:3.3.29-9.el7_6.tuxcare.els1 x86_64 0:3.3.29-9.el7_6.tuxcare.els1 i686|x86_64 1:1.8.0.452.b09-1.el7_9.tuxcare.els1 1:1.8.0.452.b09-1.el7_9.tuxcare.els1 i686|x86_64 0:1.1.8-23.0.1.el7.tuxcare.els1 x86_64 0:7.4p1-23.0.3.el7_9.tuxcare.els2 i686|x86_64 0:0.10.3-2.23.0.3.el7_9.tuxcare.els2 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[2-9]\d|119)(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[1-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.119.1.el7.tuxcare.els21 x86_64 0:4.8.5-44.0.3.el7.tuxcare.els1 i686|x86_64 0:4.8.5-44.0.3.el7.tuxcare.els1 x86_64 0:3.1.2-12.el7_9.tuxcare.els4 x86_64 1:2.02-0.87.el7_9.14.tuxcare.els1 1:2.02-0.87.el7_9.14.tuxcare.els1 x86_64 0:1.8.23-10.el7_9.3.tuxcare.els3 i686|x86_64 0:1.8.23-10.el7_9.3.tuxcare.els3 i686|x86_64 0:2.62.2-2.0.1.el7.tuxcare.els4 0:1.8.3.1-25.el7_9.tuxcare.els4 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els4 i686|x86_64 0:2.62.2-2.0.1.el7.tuxcare.els5 i686|x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els5 x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els5 x86_64 0:5.4.16-48.el7.tuxcare.els10 x86_64 0:5.4.16-48.el7.tuxcare.els11 i686|x86_64 1:1.8.0.462.b08-1.el7_9.tuxcare.els1 1:1.8.0.462.b08-1.el7_9.tuxcare.els1 x86_64 0:3.7.17-8.el7_7.1.tuxcare.els2 i686|x86_64 0:3.7.17-8.el7_7.1.tuxcare.els2 0:3.7.17-8.el7_7.1.tuxcare.els2 x86_64 0:5.4.16-48.el7.tuxcare.els12 x86_64 0:1.7.14-16.el7.tuxcare.els1 i686|x86_64 0:1.7.14-16.el7.tuxcare.els1 0:1.8.3.1-25.el7_9.tuxcare.els5 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els5 x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els10 i686|x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els10 33:9.11.4-26.P2.el7_9.16.tuxcare.els10 i686|x86_64 0:1.1.28-6.el7.tuxcare.els3 x86_64 0:1.1.28-6.el7.tuxcare.els3 i686|x86_64 0:1.2-9.el7.tuxcare.els1 i686|x86_64 1:219-78.el7_9.9.tuxcare.els2 x86_64 1:219-78.el7_9.9.tuxcare.els2 i686|x86_64 0:2.8-14.el7_9.1.tuxcare.els2 x86_64 0:2.8-14.el7_9.1.tuxcare.els2 i686|x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els6 x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els6 0:39.31.5.1-83.git78c0348.el7_9.tuxcare.els3 1:39.31.5.1-83.git78c0348.el7_9.tuxcare.els3 0:18.168.6.1-83.git78c0348.el7_9.tuxcare.els3 0:25.30.13.0-83.git78c0348.el7_9.tuxcare.els3 0:15.32.2.9-83.git78c0348.el7_9.tuxcare.els3 0:228.61.2.24-83.git78c0348.el7_9.tuxcare.els3 0:8.83.5.1_1-83.git78c0348.el7_9.tuxcare.els3 0:8.24.2.2-83.git78c0348.el7_9.tuxcare.els3 0:9.221.4.1-83.git78c0348.el7_9.tuxcare.els3 0:41.28.5.1-83.git78c0348.el7_9.tuxcare.els3 0:20200421-83.git78c0348.el7_9.tuxcare.els3 i686|x86_64 0:1.15.1-55.el7_9.99.tuxcare.els3 x86_64 0:1.15.1-55.el7_9.99.tuxcare.els3 0:2.11.0-99.el7_9.tuxcare.els1 x86_64 0:1.6.6-5.el7_8.tuxcare.els3 i686|x86_64 0:1.6.6-5.el7_8.tuxcare.els3 x86_64 1:2.02-0.87.el7_9.14.tuxcare.els2 1:2.02-0.87.el7_9.14.tuxcare.els2 x86_64 1:24.3-23.el7_9.1.tuxcare.els4 1:24.3-23.el7_9.1.tuxcare.els4 x86_64 0:5.4.16-48.el7.tuxcare.els13 x86_64 0:1.20.4-99.el7_9.tuxcare.els1 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els1 0:1.20.4-99.el7_9.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|13[6-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[3-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.136.1.el7.tuxcare.els23 x86_64 7:3.5.20-17.0.5.el7_9.13.tuxcare.els1 x86_64 7:3.5.20-17.0.5.el7_9.13.tuxcare.els2 i686|x86_64 0:1.2.7-21.el7_9.tuxcare.els2 i686|x86_64 0:3.1.1-4.el7.tuxcare.els1 i686|x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els7 x86_64 0:2.9.1-6.0.3.el7_9.6.tuxcare.els7 x86_64 0:1.20.4-99.el7_9.tuxcare.els4 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els4 0:1.20.4-99.el7_9.tuxcare.els4 i686|x86_64 0:1.1.8-23.0.1.el7.tuxcare.els2 x86_64 0:1.20.4-99.el7_9.tuxcare.els6 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els6 0:1.20.4-99.el7_9.tuxcare.els6 x86_64 2:2.1-73.25.el7_9.tuxcare.els1 i686|x86_64 0:2.36.12-3.el7.tuxcare.els1 x86_64 0:2.36.12-3.el7.tuxcare.els1 i686|x86_64 0:2.17-326.el7_9.99.tuxcare.els1 x86_64 0:2.17-326.el7_9.99.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|13[6-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[4-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.136.1.el7.tuxcare.els24 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|13[7-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[4-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.137.1.el7.tuxcare.els24 i686|x86_64 0:2.17-326.el7_9.99.tuxcare.els2 x86_64 0:2.17-326.el7_9.99.tuxcare.els2 x86_64 0:5.4.16-48.el7.tuxcare.els14 i686|x86_64 0:2.7.1-9.el7_9.tuxcare.els1 i686|x86_64 0:3.3.29-9.el7_6.tuxcare.els2 x86_64 0:3.3.29-9.el7_6.tuxcare.els2 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els6 0:2.4.6-99.0.5.el7_9.1.tuxcare.els6 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els6 i686|x86_64 0:2.17-326.el7_9.99.tuxcare.els3 x86_64 0:2.17-326.el7_9.99.tuxcare.els3 i686|x86_64 0:2.56.1-9.el7_9.tuxcare.els3 0:2.56.1-9.el7_9.tuxcare.els3 x86_64 0:2.56.1-9.el7_9.tuxcare.els3 x86_64 0:5.4.16-48.el7.tuxcare.els15 0:1.8.3.1-25.el7_9.tuxcare.els6 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els6 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|13[7-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{3,}|[3-9]\d|2[5-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.137.1.el7.tuxcare.els25 i686|x86_64 0:3.6.8-21.0.1.el7_9.tuxcare.els3 x86_64 1:1.0.2k-26.el7_9.tuxcare.els6 i686|x86_64 1:1.0.2k-26.el7_9.tuxcare.els6 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|139)(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[2-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.139.1.el7.tuxcare.els2 x86_64 1:1.6.3-52.el7_9.tuxcare.els2 i686|x86_64 1:1.6.3-52.el7_9.tuxcare.els2 1:1.6.3-52.el7_9.tuxcare.els2 x86_64 1:1.6.3-52.el7_9.tuxcare.els3 i686|x86_64 1:1.6.3-52.el7_9.tuxcare.els3 1:1.6.3-52.el7_9.tuxcare.els3 x86_64 0:3.1.2-12.0.1.el7_9.tuxcare.els2 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els1 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els2 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els2 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els2 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els2 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els2 x86_64 0:1.20.4-99.el7_9.tuxcare.els8 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els8 0:1.20.4-99.el7_9.tuxcare.els8 i686|x86_64 1:1.8.0.472.b08-1.el7_9.tuxcare.els1 1:1.8.0.472.b08-1.el7_9.tuxcare.els1 x86_64 0:1.6.6-5.el7_8.tuxcare.els4 i686|x86_64 0:1.6.6-5.el7_8.tuxcare.els4 i686|x86_64 1:11.0.29.0.7-1.el7_9.tuxcare.els1 x86_64 1:11.0.29.0.7-1.el7_9.tuxcare.els1 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[4-9]\d|139)(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[4-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.139.1.el7.tuxcare.els4 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els7 0:2.4.6-99.0.5.el7_9.1.tuxcare.els7 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els7 0:1.8.3.1-25.el7_9.tuxcare.els7 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els7 0:1.8.3.1-25.el7_9.tuxcare.els8 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els8 x86_64 4:5.16.3-299.el7_9.tuxcare.els1 0:1.9800-299.el7_9.tuxcare.els1 1:0.28.2.6-299.el7_9.tuxcare.els1 0:1.30-299.el7_9.tuxcare.els1 0:1.58-299.el7_9.tuxcare.els1 1:1.10-299.el7_9.tuxcare.els1 1:0.21-299.el7_9.tuxcare.els1 1:2.76.02-299.el7_9.tuxcare.els1 1:0.08-299.el7_9.tuxcare.els1 1:0.42-299.el7_9.tuxcare.els1 1:0.02-299.el7_9.tuxcare.els1 1:1.04-299.el7_9.tuxcare.els1 x86_64 0:1.20.1-299.el7_9.tuxcare.els1 x86_64 0:5.16.3-299.el7_9.tuxcare.els1 i686|x86_64 4:5.16.3-299.el7_9.tuxcare.els1 0:1.8.3.1-25.el7_9.tuxcare.els9 x86_64 0:1.8.3.1-25.el7_9.tuxcare.els9 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[5-9]\d|14[2-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[1-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.142.1.el7.tuxcare.els1 x86_64 0:2.0.22-5.el7_5.tuxcare.els1 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els3 (^3\.10\.0\-1160\.(\d{4,}|[2-9]\d{2}|1[5-9]\d|14[4-9])(?:\.(\d{2,}|[1-9]))?\.el7\.tuxcare(\.(\d*))?(\.els(\d{2,}|[1-9]))?\.(x86_64|i686)$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els1 i686|x86_64 1:1.8.0.482.b03-1.el7_9.tuxcare.els1 1:1.8.0.482.b03-1.el7_9.tuxcare.els1 i686|x86_64 0:2.56.1-9.el7_9.tuxcare.els4 0:2.56.1-9.el7_9.tuxcare.els4 x86_64 0:2.56.1-9.el7_9.tuxcare.els4 i686|x86_64 0:2.1.0-15.0.1.el7_9.tuxcare.els2 x86_64 1:1.0.2k-26.el7_9.tuxcare.els7 i686|x86_64 1:1.0.2k-26.el7_9.tuxcare.els7 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[2-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els2 x86_64 1:2.02-0.87.el7_9.14.tuxcare.els4 1:2.02-0.87.el7_9.14.tuxcare.els4 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els4 i686|x86_64 0:2.56.1-9.el7_9.tuxcare.els5 0:2.56.1-9.el7_9.tuxcare.els5 x86_64 0:2.56.1-9.el7_9.tuxcare.els5 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els3 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els3 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els8 0:2.4.6-99.0.5.el7_9.1.tuxcare.els8 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els8 i686|x86_64 0:1.2.7-21.0.1.el7_9.tuxcare.els2 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[3-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els3 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els4 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els4 i686|x86_64 0:2.1.0-15.0.1.el7_9.tuxcare.els3 x86_64 0:7.4p1-23.0.3.el7_9.tuxcare.els3 i686|x86_64 0:0.10.3-2.23.0.3.el7_9.tuxcare.els3 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els5 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els4 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els5 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els5 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els6 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els6 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[4-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els4 x86_64 0:2.27-44.base.el7_9.1.tuxcare.els4 i686|x86_64 0:2.27-44.base.el7_9.1.tuxcare.els4 x86_64 0:1.5.18-9.el7_9.1.tuxcare.els1 i686|x86_64 0:2.1.0-15.0.7.el7_9.tuxcare.els1 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els5 x86_64 0:10.1.5-20.el7_9.tuxcare.els1 x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els11 i686|x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els11 33:9.11.4-26.P2.el7_9.16.tuxcare.els11 x86_64 0:1.0.6-13.el7.tuxcare.els1 i686|x86_64 0:1.0.6-13.el7.tuxcare.els1 x86_64 0:5.4.16-48.el7.tuxcare.els16 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els5 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els12 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els12 i686|x86_64 1:219-78.el7_9.9.tuxcare.els3 x86_64 1:219-78.el7_9.9.tuxcare.els3 i686|x86_64 0:2.4.44-25.el7_9.tuxcare.els1 x86_64 0:2.4.44-25.el7_9.tuxcare.els1 i686|x86_64 1:11.0.30.0.7-1.el7_9.tuxcare.els1 x86_64 1:11.0.30.0.7-1.el7_9.tuxcare.els1 x86_64 0:2.4.17-15.el7.tuxcare.els1 i686|x86_64 0:2.4.17-15.el7.tuxcare.els1 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els6 x86_64 0:4.8.5-45.0.3.el7.tuxcare.els3 i686|x86_64 0:4.8.5-45.0.3.el7.tuxcare.els3 x86_64 0:1.8.23-10.0.1.el7_9.3.tuxcare.els2 i686|x86_64 0:1.8.23-10.0.1.el7_9.3.tuxcare.els2 x86_64 0:15.8-2.el7.tuxcare.els1 i686|x86_64 0:2.7.1-9.el7_9.tuxcare.els2 x86_64 0:3.1.2-12.0.1.el7_9.tuxcare.els3 x86_64 0:458-10.el7_9.tuxcare.els2 x86_64 0:7.29.0-59.0.3.el7_9.2.tuxcare.els2 i686|x86_64 0:7.29.0-59.0.3.el7_9.2.tuxcare.els2 x86_64 1:1.6.3-52.el7_9.tuxcare.els4 i686|x86_64 1:1.6.3-52.el7_9.tuxcare.els4 1:1.6.3-52.el7_9.tuxcare.els4 x86_64 0:2.27-44.base.el7_9.1.tuxcare.els6 i686|x86_64 0:2.27-44.base.el7_9.1.tuxcare.els6 x86_64 0:4.11.3-48.0.3.el7_9.tuxcare.els1 0:4.11.3-48.0.3.el7_9.tuxcare.els1 i686|x86_64 0:4.11.3-48.0.3.el7_9.tuxcare.els1 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els6 x86_64 1:1.0.2k-26.el7_9.tuxcare.els8 i686|x86_64 1:1.0.2k-26.el7_9.tuxcare.els8 x86_64 1:1.0.2k-26.el7_9.tuxcare.els9 i686|x86_64 1:1.0.2k-26.el7_9.tuxcare.els9 x86_64 0:7.4p1-23.0.3.el7_9.tuxcare.els5 i686|x86_64 0:0.10.3-2.23.0.3.el7_9.tuxcare.els5 x86_64 0:7.4p1-23.0.3.el7_9.tuxcare.els4 i686|x86_64 0:0.10.3-2.23.0.3.el7_9.tuxcare.els4 x86_64 0:7.4p1-23.0.3.el7_9.tuxcare.els6 i686|x86_64 0:0.10.3-2.23.0.3.el7_9.tuxcare.els6 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els7 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els7 i686|x86_64 0:2.0.35-27.el7_9.tuxcare.els1 x86_64 0:2.0.35-27.el7_9.tuxcare.els1 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els8 x86_64 1:3.2-5.el7_9.1.tuxcare.els1 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els9 x86_64 1:1.0.2k-26.el7_9.tuxcare.els10 i686|x86_64 1:1.0.2k-26.el7_9.tuxcare.els10 x86_64 1:1.6.3-52.el7_9.tuxcare.els5 i686|x86_64 1:1.6.3-52.el7_9.tuxcare.els5 1:1.6.3-52.el7_9.tuxcare.els5 i686|x86_64 1:2.2.36-8.el7.tuxcare.els1 x86_64 1:2.2.36-8.el7.tuxcare.els1 i686|x86_64 0:3.3.29-9.el7_6.tuxcare.els3 x86_64 0:3.3.29-9.el7_6.tuxcare.els3 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els10 0:2.4.6-99.0.5.el7_9.1.tuxcare.els10 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els10 i686|x86_64 0:2.9.1-6.0.11.el7_9.6.tuxcare.els3 x86_64 0:2.9.1-6.0.11.el7_9.6.tuxcare.els3 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els8 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els8 i686|x86_64 0:2.62.2-2.0.5.el7.tuxcare.els6 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[5-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els5 x86_64 4:5.16.3-299.el7_9.tuxcare.els2 0:1.9800-299.el7_9.tuxcare.els2 1:0.28.2.6-299.el7_9.tuxcare.els2 0:1.30-299.el7_9.tuxcare.els2 0:1.58-299.el7_9.tuxcare.els2 1:1.10-299.el7_9.tuxcare.els2 1:0.21-299.el7_9.tuxcare.els2 1:2.76.02-299.el7_9.tuxcare.els2 1:0.08-299.el7_9.tuxcare.els2 1:0.42-299.el7_9.tuxcare.els2 1:0.02-299.el7_9.tuxcare.els2 1:1.04-299.el7_9.tuxcare.els2 x86_64 0:1.20.1-299.el7_9.tuxcare.els2 x86_64 0:5.16.3-299.el7_9.tuxcare.els2 i686|x86_64 4:5.16.3-299.el7_9.tuxcare.els2 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els9 0:2.4.6-99.0.5.el7_9.1.tuxcare.els9 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els9 x86_64 2:2.10.1-9.el7.tuxcare.els1 2:2.10.1-9.el7.tuxcare.els1 i686|x86_64 0:3.3.29-9.el7_6.tuxcare.els4 x86_64 0:3.3.29-9.el7_6.tuxcare.els4 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els11 0:2.4.6-99.0.5.el7_9.1.tuxcare.els11 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els11 x86_64 0:5.4.16-48.el7.tuxcare.els18 x86_64 2:2.10.1-9.el7.tuxcare.els2 2:2.10.1-9.el7.tuxcare.els2 i686|x86_64 0:2.36.12-3.el7.tuxcare.els2 x86_64 0:2.36.12-3.el7.tuxcare.els2 0:3.9-5.el7_9.12.tuxcare.els1 x86_64 1:1.6.3-52.el7_9.tuxcare.els6 i686|x86_64 1:1.6.3-52.el7_9.tuxcare.els6 1:1.6.3-52.el7_9.tuxcare.els6 x86_64 1:2.02-0.87.el7_9.14.tuxcare.els5 1:2.02-0.87.el7_9.14.tuxcare.els5 x86_64 0:4.10.16-25.el7_9.tuxcare.els5 i686|x86_64 0:4.10.16-25.el7_9.tuxcare.els5 0:4.10.16-25.el7_9.tuxcare.els5 i686|x86_64 0:3.3.10-28.el7.tuxcare.els1 x86_64 0:3.3.10-28.el7.tuxcare.els1 x86_64 2:4.6-5.el7.tuxcare.els1 i686|x86_64 0:2.1.0-15.0.7.el7_9.tuxcare.els2 x86_64 0:4.10.16-25.el7_9.tuxcare.els8 i686|x86_64 0:4.10.16-25.el7_9.tuxcare.els8 0:4.10.16-25.el7_9.tuxcare.els8 x86_64 0:0.22.5-2.el7_9.tuxcare.els1 i686|x86_64 0:9.2.24-9.0.3.el7_9.tuxcare.els3 x86_64 0:9.2.24-9.0.3.el7_9.tuxcare.els3 x86_64 0:1.6.6-5.el7_8.tuxcare.els5 i686|x86_64 0:1.6.6-5.el7_8.tuxcare.els5 x86_64 0:3.1.2-12.0.1.el7_9.tuxcare.els6 i686|x86_64 1:1.8.0.492.b09-1.el7_9.tuxcare.els1 1:1.8.0.492.b09-1.el7_9.tuxcare.els1 x86_64 0:3.1.2-12.0.1.el7_9.tuxcare.els7 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els13 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els13 x86_64 0:1.6.6-5.el7_8.tuxcare.els6 i686|x86_64 0:1.6.6-5.el7_8.tuxcare.els6 x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els12 i686|x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els12 33:9.11.4-26.P2.el7_9.16.tuxcare.els12 x86_64 1:1.20.1-10.el7.tuxcare.els3 1:1.20.1-10.el7.tuxcare.els3 x86_64 0:4.10.16-25.el7_9.tuxcare.els9 i686|x86_64 0:4.10.16-25.el7_9.tuxcare.els9 0:4.10.16-25.el7_9.tuxcare.els9 x86_64 4:5.16.3-299.el7_9.tuxcare.els3 0:1.9800-299.el7_9.tuxcare.els3 1:0.28.2.6-299.el7_9.tuxcare.els3 0:1.30-299.el7_9.tuxcare.els3 0:1.58-299.el7_9.tuxcare.els3 1:1.10-299.el7_9.tuxcare.els3 1:0.21-299.el7_9.tuxcare.els3 1:2.76.02-299.el7_9.tuxcare.els3 1:0.08-299.el7_9.tuxcare.els3 1:0.42-299.el7_9.tuxcare.els3 1:0.02-299.el7_9.tuxcare.els3 1:1.04-299.el7_9.tuxcare.els3 x86_64 0:1.20.1-299.el7_9.tuxcare.els3 x86_64 0:5.16.3-299.el7_9.tuxcare.els3 i686|x86_64 4:5.16.3-299.el7_9.tuxcare.els3 x86_64 0:3.1.2-12.0.1.el7_9.tuxcare.els8 x86_64 0:1.8.23-10.0.1.el7_9.3.tuxcare.els3 i686|x86_64 0:1.8.23-10.0.1.el7_9.3.tuxcare.els3 i686|x86_64 0:2.1.0-15.0.7.el7_9.tuxcare.els3 x86_64 0:4.10.16-25.el7_9.tuxcare.els10 i686|x86_64 0:4.10.16-25.el7_9.tuxcare.els10 0:4.10.16-25.el7_9.tuxcare.els10 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els11 x86_64 1:1.1.1k-7.el7.tuxcare.els1 x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els13 i686|x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els13 33:9.11.4-26.P2.el7_9.16.tuxcare.els13 x86_64 1:1.0.2k-26.el7_9.tuxcare.els11 i686|x86_64 1:1.0.2k-26.el7_9.tuxcare.els11 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els9 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els9 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els12 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els14 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els14 i686|x86_64 0:2.9.1-6.0.11.el7_9.6.tuxcare.els5 x86_64 0:2.9.1-6.0.11.el7_9.6.tuxcare.els5 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els12 0:2.4.6-99.0.5.el7_9.1.tuxcare.els12 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els12 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els15 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els15 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els16 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els16 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els17 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els17 x86_64 0:4.10.16-25.el7_9.tuxcare.els11 i686|x86_64 0:4.10.16-25.el7_9.tuxcare.els11 0:4.10.16-25.el7_9.tuxcare.els11 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els19 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els19 i686|x86_64 0:2.56.1-9.el7_9.tuxcare.els6 0:2.56.1-9.el7_9.tuxcare.els6 x86_64 0:2.56.1-9.el7_9.tuxcare.els6 i686|x86_64 0:2.9.1-6.0.11.el7_9.6.tuxcare.els6 x86_64 0:2.9.1-6.0.11.el7_9.6.tuxcare.els6 i686|x86_64 0:2.56.1-9.el7_9.tuxcare.els8 0:2.56.1-9.el7_9.tuxcare.els8 x86_64 0:2.56.1-9.el7_9.tuxcare.els8 i686|x86_64 1:11.0.31.0.11-1.el7_9.tuxcare.els1 x86_64 1:11.0.31.0.11-1.el7_9.tuxcare.els1 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els11 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els11 x86_64 1:1.20.1-10.el7.tuxcare.els5 1:1.20.1-10.el7.tuxcare.els5 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|9))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els9 x86_64 0:1.14-18.el7_6.1.tuxcare.els2 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els13 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els20 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els20 x86_64 0:1.20.4-99.el7_9.tuxcare.els10 i686|x86_64 0:1.20.4-99.el7_9.tuxcare.els10 0:1.20.4-99.el7_9.tuxcare.els10 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els21 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els21 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els12 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els12 x86_64 4:5.16.3-299.el7_9.tuxcare.els4 0:1.9800-299.el7_9.tuxcare.els4 1:0.28.2.6-299.el7_9.tuxcare.els4 0:1.30-299.el7_9.tuxcare.els4 0:1.58-299.el7_9.tuxcare.els4 1:1.10-299.el7_9.tuxcare.els4 1:0.21-299.el7_9.tuxcare.els4 1:2.76.02-299.el7_9.tuxcare.els4 1:0.08-299.el7_9.tuxcare.els4 1:0.42-299.el7_9.tuxcare.els4 1:0.02-299.el7_9.tuxcare.els4 1:1.04-299.el7_9.tuxcare.els4 x86_64 0:1.20.1-299.el7_9.tuxcare.els4 x86_64 0:5.16.3-299.el7_9.tuxcare.els4 i686|x86_64 4:5.16.3-299.el7_9.tuxcare.els4 x86_64 0:0.15.1-13.el7_9.1.tuxcare.els1 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els22 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els22 x86_64 1:1.20.1-10.el7.tuxcare.els6 1:1.20.1-10.el7.tuxcare.els6 x86_64 7:3.5.20-17.0.5.el7_9.99.tuxcare.els7 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els23 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els23 x86_64 0:7.4p1-23.0.3.el7_9.tuxcare.els7 i686|x86_64 0:0.10.3-2.23.0.3.el7_9.tuxcare.els7 x86_64 0:1.5-11.el7_9.tuxcare.els1 i686|x86_64 0:2.17-326.el7_9.99.tuxcare.els4 x86_64 0:2.17-326.el7_9.99.tuxcare.els4 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[7-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els7 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[8-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els8 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[4-9]\d)(?:\.\d+)*|1160\.139\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.139\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.139\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[3-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.139.1.el7.tuxcare.els3 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[2-9]\d)(?:\.\d+)*|1160\.119\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.119\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.119\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{3,}|[3-9]\d|2[2-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.119.1.el7.tuxcare.els22 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[5-9]\d|14[5-9])(?:\.\d+)*|1160\.144\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.144\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.144\.1)\.el7\.tuxcare(?:\.\d+)?(?:\.els(?:\d{2,}|[6-9]))?\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.144.1.el7.tuxcare.els6 x86_64 0:7.29.0-59.0.3.el7_9.2.tuxcare.els3 i686|x86_64 0:7.29.0-59.0.3.el7_9.2.tuxcare.els3 i686|x86_64 0:3.6.8-21.0.5.el7_9.tuxcare.els14 x86_64 0:1.6.6-5.el7_8.tuxcare.els7 i686|x86_64 0:1.6.6-5.el7_8.tuxcare.els7 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[6-9]\d|15[7-9])(?:\.\d+)*|1160\.156\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.156\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.156\.1)\.el7\.tuxcare\.\d+(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.156\.1)\.el7\.tuxcare\.els(?:\d{2,}|[1-9])\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.156.1.el7.tuxcare.els1 x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els13 i686|x86_64 0:2.7.5-94.0.1.el7_9.tuxcare.els13 x86_64 0:2.4.6-99.0.5.el7_9.1.tuxcare.els13 0:2.4.6-99.0.5.el7_9.1.tuxcare.els13 x86_64 1:2.4.6-99.0.5.el7_9.1.tuxcare.els13 x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els14 i686|x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els14 33:9.11.4-26.P2.el7_9.16.tuxcare.els14 x86_64 1:1.1.1k-7.el7.tuxcare.els3 x86_64 0:7.29.0-59.0.3.el7_9.2.tuxcare.els5 i686|x86_64 0:7.29.0-59.0.3.el7_9.2.tuxcare.els5 i686|x86_64 0:2.1.0-15.0.7.el7_9.tuxcare.els4 i686|x86_64 0:2.62.2-2.0.11.el7.tuxcare.els2 x86_64 0:5.4.16-48.el7.tuxcare.els19 i686|x86_64 0:3.3.29-9.el7_6.tuxcare.els5 x86_64 0:3.3.29-9.el7_6.tuxcare.els5 x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els15 i686|x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els15 33:9.11.4-26.P2.el7_9.16.tuxcare.els15 i686|x86_64 0:3.90.0-2.el7_9.tuxcare.els5 x86_64 0:3.90.0-2.el7_9.tuxcare.els5 x86_64 1:1.1.1k-7.el7.tuxcare.els4 x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els16 i686|x86_64 33:9.11.4-26.P2.el7_9.16.tuxcare.els16 33:9.11.4-26.P2.el7_9.16.tuxcare.els16 i686|x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els25 x86_64 0:6.9.10.68-7.0.3.el7_9.tuxcare.els25 i686|x86_64 1:11.0.32.0.9-1.el7_9.tuxcare.els1 x86_64 1:11.0.32.0.9-1.el7_9.tuxcare.els1 x86_64 1:24.3-23.0.1.el7_9.1.tuxcare.els2 1:24.3-23.0.1.el7_9.1.tuxcare.els2 i686|x86_64 0:2.56.1-9.0.3.el7_9.tuxcare.els1 0:2.56.1-9.0.3.el7_9.tuxcare.els1 x86_64 0:2.56.1-9.0.3.el7_9.tuxcare.els1 i686|x86_64 1:2.2.36-8.el7.tuxcare.els3 x86_64 1:2.2.36-8.el7.tuxcare.els3 (^3\.10\.0\-((?:(?:\d{5,}|[2-9]\d{3}|1[2-9]\d{2}|11[7-9]\d|116[1-9])(?:\.\d+)*|1160\.(?:\d{4,}|[2-9]\d{2}|1[6-9]\d|15[7-9])(?:\.\d+)*|1160\.156\.(?:\d{2,}|[2-9])(?:\.\d+)*|1160\.156\.1\.\d+(?:\.\d+)*)\.el7\.tuxcare(?:\.\d+)?(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.156\.1)\.el7\.tuxcare\.\d+(?:\.els\d*)?\.(?:x86_64|i686)|(?:1160\.156\.1)\.el7\.tuxcare\.els(?:\d{2,}|[2-9])\.(?:x86_64|i686))$) x86_64 0:3.10.0-1160.156.1.el7.tuxcare.els2 i686|x86_64 1:1.8.0.502.b07-1.el7_9.tuxcare.els1 1:1.8.0.502.b07-1.el7_9.tuxcare.els1 x86_64 0:2.7.5-94.0.5.el7_9.tuxcare.els2 i686|x86_64 0:2.7.5-94.0.5.el7_9.tuxcare.els2 i686|x86_64 0:9.2.24-9.0.3.el7_9.tuxcare.els4 x86_64 0:9.2.24-9.0.3.el7_9.tuxcare.els4 i686|x86_64 0:2.62.2-2.0.11.el7.tuxcare.els3 i686|x86_64 0:3.6.8-21.0.9.el7_9.tuxcare.els2 x86_64 1:1.0.2k-26.0.1.el7_9.tuxcare.els2 i686|x86_64 1:1.0.2k-26.0.1.el7_9.tuxcare.els2