CLSA-2025:1747851041 TuxCare License Agreement 0 - CVE-2024-38428: properly re-implement userinfo parsing (rfc2396) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-38428: properly re-implement userinfo parsing (rfc2396)

0 tuxcare-rhel7-els wget-1.14-18.el7_6.1.tuxcare.els1.x86_64.rpm 85df657571b2423647df487b7dee6098e3f5eb09cb119165996381c9c4c31691 CLSA-2025:1747854497 TuxCare License Agreement 0 - Version was updated Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Version was updated

0 tuxcare-rhel7-els expat-2.1.0-15.0.1.el7_9.tuxcare.els1.i686.rpm 3b70f6b7c6ed21025f408f7165471e808940fc32d66d1f33b8ef529ad11da1f2 expat-2.1.0-15.0.1.el7_9.tuxcare.els1.x86_64.rpm f6207bb8725e4c10f7db53acc5346624afe46199ef2309a65b9ab4725cee5990 expat-devel-2.1.0-15.0.1.el7_9.tuxcare.els1.i686.rpm 21e7e206f218f80ec3cbfd77055a2330e745136147763b544b7d04a4a1d97efb expat-devel-2.1.0-15.0.1.el7_9.tuxcare.els1.x86_64.rpm c354b2d370d80fbd8549c4f38d01814ce9887178ab6928ccd155adafe6734629 expat-static-2.1.0-15.0.1.el7_9.tuxcare.els1.i686.rpm a5a3df197f6b364a1ccc67526b83564961cf67272968bff0cc34005bbbe0590a expat-static-2.1.0-15.0.1.el7_9.tuxcare.els1.x86_64.rpm 6c885994daa27a5361e489a0c1a718ced8871a159a5d9f74e6156adc1016b76f CLSA-2025:1747855403 TuxCare License Agreement 0 - CVE-2021-28651: fix memory leak in RFC 2169 response parsing - CVE-2021-28652: fix broken cache manager URL parsing - CVE-2021-31806: fix memory management bug - CVE-2021-31807: fix integer overflow problem - CVE-2021-31808: fix input validation bug - CVE-2021-33620: handle more partial responses Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-28651: fix memory leak in RFC 2169 response parsing - CVE-2021-28652: fix broken cache manager URL parsing - CVE-2021-31806: fix memory management bug - CVE-2021-31807: fix integer overflow problem - CVE-2021-31808: fix input validation bug - CVE-2021-33620: handle more partial responses

0 tuxcare-rhel7-els squid-3.5.20-17.0.3.el7_9.10.tuxcare.els1.x86_64.rpm 0d732b6ffc8c7e357189f43a5add20da776167fb00f572047947877167c5d207 squid-migration-script-3.5.20-17.0.3.el7_9.10.tuxcare.els1.x86_64.rpm 6cd079614888f1a0bf518a3137200a1fc799486cdf38467e66273277cd3cf89d squid-sysvinit-3.5.20-17.0.3.el7_9.10.tuxcare.els1.x86_64.rpm 304fd886c6e8a0aedddaa2b06e6aa3a949e641495ade2c6988f3d5b71970d7dd CLSA-2025:1747926350 TuxCare License Agreement 0 - Version was updated Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Version was updated

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64.rpm efaa7df5965c5291ee49a9928a4f7f96be9da8fb2079eecde4261ac2641429c9 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64.rpm 4bf3697eed081cdda4a78746c11898e430c842732a6f386c824922fa7811e066 python-devel-2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64.rpm b2bafbc9aff135f77e9068fb3367eea6f20a75e7db22a129b2f527094f43f1c0 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els1.i686.rpm aa5c44bc6c91a6603e7bbb6126fc4bcd0315e76cc5600dac267242dcdace31db python-libs-2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64.rpm 947bb564f137768fb191dcbeb2e3c9846c6ed36f67f0eb6200889c9fa39f0475 python-test-2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64.rpm fed046177d36e1c6ea6cfe7e52b49e2b49050ae81ccfdda2ec3d7aab6c14d8d9 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64.rpm 4d79b6496cdcaa72719c9db8cbf1eaf451449b416c97d01b7382659a880d4516 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els1.x86_64.rpm 651bd82eab19c4f15f08898acd837fbd2c067b400c9b49227fdeea0059987550 CLSA-2025:1748001506 TuxCare License Agreement 0 - CVE-2024-3596: implement support for Message-Authenticator in libkrad Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-3596: implement support for Message-Authenticator in libkrad

0 tuxcare-rhel7-els krb5-devel-1.15.1-55.el7_9.tuxcare.els2.i686.rpm b1ef69cb404be09e41e2d7e45ada2ffbe5466062da921b5bb302d06439210854 krb5-devel-1.15.1-55.el7_9.tuxcare.els2.x86_64.rpm b35e40382632dd7f7dbea8b9c00c600f47bf21f0e016ea3fd55c24b40913d8a9 krb5-libs-1.15.1-55.el7_9.tuxcare.els2.i686.rpm 714cbee8571cf916db119a18cd6c2a569767087500c8d6cc1a301d4548a6d883 krb5-libs-1.15.1-55.el7_9.tuxcare.els2.x86_64.rpm 65c60ee1a0246f087d1eee6754fe140936682b56e9284ffd1e9010eaf46a7368 krb5-pkinit-1.15.1-55.el7_9.tuxcare.els2.x86_64.rpm a806c5ab20ee5a86edabbd4e9e798e5f62d047a82b684544f82c69eceeef0f7e krb5-server-1.15.1-55.el7_9.tuxcare.els2.i686.rpm 3ae582b57b596800b40fe326ddaab29ebce214ff14eb41721fdc589d4d47c15a krb5-server-1.15.1-55.el7_9.tuxcare.els2.x86_64.rpm 279775e32546479108b5062b9303a0247b040b507a0705d5ad8aea461fede5cf krb5-server-ldap-1.15.1-55.el7_9.tuxcare.els2.i686.rpm 10ce711a969d49f460edd1cc87a97d26ae091322873881368310a9fdef3032a1 krb5-server-ldap-1.15.1-55.el7_9.tuxcare.els2.x86_64.rpm 762bf2ee09cd81cbc0a98233fa07a4d6b0f6472195f73f973464d5d779434421 krb5-workstation-1.15.1-55.el7_9.tuxcare.els2.x86_64.rpm 37b2a837ff2fe38c8293094b77979b3938b766879c41044ff0af017b35b768f5 libkadm5-1.15.1-55.el7_9.tuxcare.els2.i686.rpm 8c5b3059042924e61a8f5113bb3dbd94475d0b94ebceb139fe4ac9ce04c0c509 libkadm5-1.15.1-55.el7_9.tuxcare.els2.x86_64.rpm 9deff2e8902465b3ddf20d054f0087ecf95e31c7a099fb5f6137e2b129567308 CLSA-2025:1748282366 TuxCare License Agreement 0 - CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32415: fix heap buffer overflow in xmlSchemaIDCFillNodeTables

0 tuxcare-rhel7-els libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els4.i686.rpm 99221d43ac28338891b54b94b998a95d9e779ed8baffc006270175a039825aeb libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els4.x86_64.rpm 06d73a4ee0488a3ef2b314efaf39ba137670f5e89fb4e328df0fc11b5603bede libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els4.i686.rpm 41fc70fb2aeeb38507c3a7c39b985a8a26b22f6562b223e085fd3e956009b9db libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els4.x86_64.rpm 06b5e981c71e3aa8e48b0345407248f52feb4044d1cc6f4853dea6dfa605ca15 libxml2-python-2.9.1-6.0.3.el7_9.6.tuxcare.els4.x86_64.rpm 8f19f123718ff16aaa06e6a52f3b816ac69fc2693093dc4112a909aacd873bf5 libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els4.i686.rpm 38610c2f66c644bef3e08b335c3db935e66b07e8892535511a0045f57abb2d04 libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els4.x86_64.rpm 4e721ded3bc0a95e0520a394980004197847af37ac7853d33e5c5a5025b97b10 CLSA-2025:1748464675 TuxCare License Agreement 0 - CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-32004: detect dubious ownership of local repositories, backport the necessary functions

0 tuxcare-rhel7-els emacs-git-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm d1563a98192f8622c85dc210068ea7c4416cb9c97950c9cc424ff1f463a9b8ac emacs-git-el-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm 24a25fbf32290fc260435f39d11460b943cf07489a2f1f2ce05332f323b810ce git-1.8.3.1-25.el7_9.tuxcare.els3.x86_64.rpm 8d58a866f7db084f541888f937f70641aece93a841cb5249f506a43ab186d09a git-all-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm 21512c19f5db0b2515abefea66968eed347ad5a108e0c7799317f3a97e919026 git-bzr-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm e874b3f26ad5fd08f196d87aeb99656d06dd1f1425f27c08715e3e1338c384fd git-cvs-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm 5bb2da69fccb698e72e4be2cd8cbaeec8309f44b316b83320894d7675f10ae28 git-daemon-1.8.3.1-25.el7_9.tuxcare.els3.x86_64.rpm df2393541f17cbf83a820b81d4b43586241a61b19eb8ff13f8c721816e3465be git-email-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm d5e27545f640a31ff533ff7dce1ff21d4773f89641edfcef68d1932d12df573c git-gnome-keyring-1.8.3.1-25.el7_9.tuxcare.els3.x86_64.rpm 748f6d005f895b4eceba037cf062c5725f207b186cb6469f396ed8a8261d5017 git-gui-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm cd180a1729ae5cd358631faf7a2d5c52e876ca5d63069210b643f77e6d6032c1 git-hg-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm cfabff1d9739acdaa91b557919a702c505e444959d50682f019a95ab92e92431 git-instaweb-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm 184739b0f11f8c813578899bd7b48e22115c3edc6d25d364da840b326beee281 git-p4-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm 2f267dd8adb1589edbcb198a8be76e2b39a99c3bbb1f9fa17d9f9cdeb6c0e86c git-svn-1.8.3.1-25.el7_9.tuxcare.els3.x86_64.rpm 1edb7e1fc5a7c2b721f49f2fe38f437bdf5eeb32d2c632f7e9140edc6473d5b8 gitk-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm 6160e47d122ef06b55c21a7e32034a558cfd5e1fc628dfd4d1bfe5474e4eb338 gitweb-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm 17b1f6719b3d437dae1618c1b53b3b64bf09f05be9fb6a9fd7bfc97a39e89fef perl-Git-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm cd898948ce418e85761fb03fc6692ebe4fda3c7bb0baf5f0e4173827879488e2 perl-Git-SVN-1.8.3.1-25.el7_9.tuxcare.els3.noarch.rpm 2d5a1d5397b84e8877ef3656b96da61be354f5468164f03684959eff23773b88 CLSA-2025:1748638011 TuxCare License Agreement 0 - ELS-1267: merge spec for centos7, rhel7 and oracle7 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- ELS-1267: merge spec for centos7, rhel7 and oracle7

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els2.x86_64.rpm 99df0212f417b458e4085bb0a0e9cf7d11a799156deb44ba55aaa6e5e54aee1b httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els2.x86_64.rpm 3c54cdb53e6776a426c6f0273dec2dc12fd9d3ff9cf42f73e9f1a2650da3559a httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els2.noarch.rpm ab74d3d4304743c5c29bd16886f909dea233cb56cfc6a193a757e0ca90835746 httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els2.x86_64.rpm c0b36104826838f9fde355a166357c2e0124b8eb2c50994f53e9e5c0d1db09ee mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els2.x86_64.rpm af3829fdfbea4764267b2e24110dd2ccdccc6e353228e11560f26a893b5a9f81 mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els2.x86_64.rpm b78866b6ff0c308ae24872653fc3f3d61e526b23fabcbb3ca5bff39d361b4e7d mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els2.x86_64.rpm 429ce65f011759bf2ae35021fc9fab2910da5be975a98cc3a87283bf86500256 mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els2.x86_64.rpm b392326e9f0a13baeb5986f4928e91a28ae445ae15bddbc8a1e18b48cf66b7d7 CLSA-2025:1748638245 TuxCare License Agreement 0 - CVE-2024-9287: fix path names quoting to prevent command injection in virtual environment activation scripts Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-9287: fix path names quoting to prevent command injection in virtual environment activation scripts

0 tuxcare-rhel7-els python3-3.6.8-21.0.1.el7_9.tuxcare.els2.i686.rpm f9d7bcafcd72e0508e9eafc0859dea08a3ff686ab7baf4ca96603c540c68f539 python3-3.6.8-21.0.1.el7_9.tuxcare.els2.x86_64.rpm 57cb7ede9e8a0fffa5085d298357e0762f0fe902971f19e7e19264825d6caab1 python3-debug-3.6.8-21.0.1.el7_9.tuxcare.els2.i686.rpm a1af3ae06a3df3d4dbd4ab3ea551731483eeebb1617cdb48f14cb8d8c1476e1d python3-debug-3.6.8-21.0.1.el7_9.tuxcare.els2.x86_64.rpm 52c2ff1bcb8715e768ecb2aefe90508be40a112f0b914f76b8ff39a89f72f6fa python3-devel-3.6.8-21.0.1.el7_9.tuxcare.els2.i686.rpm e81d8e756f8dd9c1c88848d9e29f053eb18ee467335660e1c796e72d91e16666 python3-devel-3.6.8-21.0.1.el7_9.tuxcare.els2.x86_64.rpm 26d20fbc55fb1e8df51a3080f303fcecc55113828d7b645de62805e75e2a774a python3-idle-3.6.8-21.0.1.el7_9.tuxcare.els2.i686.rpm 8ecc0884e961ab78440bc60857d0d0d3c253d7c2e79e2c1df8fff4a64a98b1ef python3-idle-3.6.8-21.0.1.el7_9.tuxcare.els2.x86_64.rpm 8ac9fdb33a1da1cd2e1c8c4471d87428e6ce4afaf0857c9fc12de4652658ff93 python3-libs-3.6.8-21.0.1.el7_9.tuxcare.els2.i686.rpm fa69655737eac654fdf8588fc3b1c32e9247c9fc2007fc9e1e80d2931768cc01 python3-libs-3.6.8-21.0.1.el7_9.tuxcare.els2.x86_64.rpm 999e008c695df926df18873cc0b7dea110572c13f76d0474ff2cde946dd59107 python3-test-3.6.8-21.0.1.el7_9.tuxcare.els2.i686.rpm 987f54f74d0d268ea50737006697f6106ca258bd26dfc477c3569334cfdd031b python3-test-3.6.8-21.0.1.el7_9.tuxcare.els2.x86_64.rpm 1442c40ac7e8c9b68a8b77720bb3289dff0caba21945a7c0ca1813837dff67c9 python3-tkinter-3.6.8-21.0.1.el7_9.tuxcare.els2.i686.rpm e8313d56eb8ee1e843a823d7cffcffe40795be6f699dd42bb726f0e987dff490 python3-tkinter-3.6.8-21.0.1.el7_9.tuxcare.els2.x86_64.rpm 9b2c451848bb6f33a0aae4347a508c3a3045d7bae641c83291719a92891d57af CLSA-2025:1749479602 TuxCare License Agreement 0 - Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Keep the broken pkcs11 tests disabled. - Added CVE-2024-0567 PoC test. - CVE-2023-5981-pre1: improve level of randomness for each operations, always use _gnutls_switch_lib_state for pk wrappers. - CVE-2023-5981-pre2: add constant time/cache operations to prevent or minimaze timining or cache side channel attacks. - CVE-2023-5981: removes branching that depends on secret data to prevent potential side-channel attack. - CVE-2024-0553: minimize branching after decryption.

0 tuxcare-rhel7-els gnutls-3.3.29-9.el7_6.tuxcare.els1.i686.rpm d5bf0696d773b7441b8fb1018d3d2e9070e86b2366f8782b793c879c92aa051a gnutls-3.3.29-9.el7_6.tuxcare.els1.x86_64.rpm 7dfb0534f7cbf5686fb904b7115fb6b2f7f56b0c35716e65e33197cf9566f3ae gnutls-c++-3.3.29-9.el7_6.tuxcare.els1.i686.rpm 197d9b2ce621b1d0c83e5353457d9b0bf5bd468f3edeccaeb4f5591f64412f73 gnutls-c++-3.3.29-9.el7_6.tuxcare.els1.x86_64.rpm e8275b6af9bfd9bfff4dced62cdccf6e077a6707d4f0b80f3891cb72058c6a26 gnutls-dane-3.3.29-9.el7_6.tuxcare.els1.i686.rpm 06682831492f1b05d0f56aaf0dd20e89e3157f1e4d6d75435209802055e31645 gnutls-dane-3.3.29-9.el7_6.tuxcare.els1.x86_64.rpm 9f7a01039aca3a7c82eced86053c51dbdbcf3ab0692266a712a3c6f88c98281a gnutls-devel-3.3.29-9.el7_6.tuxcare.els1.i686.rpm 35fbb7093d9a4da1f1b6de893e6a126788f78572c3d3b73c1f40569d625a29cb gnutls-devel-3.3.29-9.el7_6.tuxcare.els1.x86_64.rpm fc294a5c4ca515ca75d3f659484da85130459d75da564073df1cdd5687feb8a0 gnutls-utils-3.3.29-9.el7_6.tuxcare.els1.x86_64.rpm 1bb958c0f5875aff64a5141dc020306ae79ef066329394e4223ec52b4faa6836 CLSA-2025:1749568472 TuxCare License Agreement 0 - Upgrade openjdk-shenandoah-jdk8u-shenandoah-jdk8u452-b09. That fixes the following CVE: CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade openjdk-shenandoah-jdk8u-shenandoah-jdk8u452-b09. That fixes the following CVE: CVE-2025-21587, CVE-2025-30691 and CVE-2025-30698

0 tuxcare-rhel7-els java-1.8.0-openjdk-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm ed97436d29a46ba91402a8a15354792e43cbaefdadfc441614c157d603e362b8 java-1.8.0-openjdk-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 31a77c8ea1f51b37d57a8becf42403f87b1f4929ebfb65f7aead1193cbe91a89 java-1.8.0-openjdk-accessibility-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 43242e464b0c7c312c81447870cc03a4aa276e746f9b7af738b1fb085b3b7bbc java-1.8.0-openjdk-accessibility-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm a7fc4e3dc5b5d127b537e88e572e44b6f88108af61dcd2d9c561a8e156589508 java-1.8.0-openjdk-accessibility-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 03a016b7d1e79fe91eb74484dc32e2f9ad17595255f7e845baa133fdca83cb1b java-1.8.0-openjdk-accessibility-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 620754bf47ba9ed0a8b37e78bd760bd77e189688c38afe679954c5251db92505 java-1.8.0-openjdk-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 9b64191687fde048a2a2779da88b4a2cc82db4cdfaa1ff2739608aa65ed67647 java-1.8.0-openjdk-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 420d8ff5ade0446fa647cd0155bfcc4e92f1f1afeb7376c8e7a874d91188a62b java-1.8.0-openjdk-demo-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm ac2018f95ca2e577ece9dd5a53e637733f2f80d768491907b9dd2175af61e08f java-1.8.0-openjdk-demo-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm ec62b613f9e6536e3021a24d764070d91a0864762e6855b2e865f42560698318 java-1.8.0-openjdk-demo-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 8267a740dc930bb01e6e04280c4612915e30e1f6fab47ada656b5c3907919496 java-1.8.0-openjdk-demo-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 32e8e6f53adb050be48c05d70a7799130365219a04bb580c782c9d8f1d59129e java-1.8.0-openjdk-devel-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 0c679beeabe44851c759cbd466f8e1f428538b25c21dbcb70235d6225c545c4e java-1.8.0-openjdk-devel-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 2f3ba902350e87dea88180ec4b0692384b4d8a16b128eb5e9cc0b4a1c7ff3714 java-1.8.0-openjdk-devel-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 1365bce9af4137cabbb9d6ea92ca7083a16f40020f1e1c0644d8549ec3321f6c java-1.8.0-openjdk-devel-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 4f11096e48289543d9bc5b6d084eabbde709e6cad25e4c5293c644cd45ab9c37 java-1.8.0-openjdk-headless-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm cf6ccf874a7d01308f9ea1502e5df88f95ee869e9932a990d2692a1547a67407 java-1.8.0-openjdk-headless-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 13c86254d4c1b54a4a6f153c4d9158e1f4fe6f1bf6b529f3f34057a9ea5a4b42 java-1.8.0-openjdk-headless-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 04f8ce51c6d2309268c4ac7c7ada7419defab060232f3fd9fa74568abd275b03 java-1.8.0-openjdk-headless-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 392a15c849b5084db6afdc87c78a93077950c9f20f6bf172ec34cd9463af87c5 java-1.8.0-openjdk-javadoc-1.8.0.452.b09-1.el7_9.tuxcare.els1.noarch.rpm 2f7b5f36973fdbb77fb8ba6a89d65eccc051c509299a59adedd9246c91e513de java-1.8.0-openjdk-javadoc-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.noarch.rpm 3990157a8ce6197379699929a5b3e76bc18cbe2b3d6489ea3619705ac62ab009 java-1.8.0-openjdk-javadoc-zip-1.8.0.452.b09-1.el7_9.tuxcare.els1.noarch.rpm 3d09175bfa24231fd4dada6a9b9c3ca69554b0e6c46b414dbf12ae05f3b10305 java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.noarch.rpm dfc226ec5b993ad7765e6004bad81d8526d0b7ababfe58b1029ff2de8e4cabf6 java-1.8.0-openjdk-src-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 23f4af0855a2a0e3c616fe39c37b2a485fdaa4a53ef1de5bd1d2b486cac9b47b java-1.8.0-openjdk-src-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm 8b3ad522f8080a78ac68d4548746b3745a3dd15d65b052598da280bd3ea627c1 java-1.8.0-openjdk-src-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.i686.rpm 6b7154b0034f8c004dc80597a665954bce9fe375960f48a5a1828b993ea5f959 java-1.8.0-openjdk-src-debug-1.8.0.452.b09-1.el7_9.tuxcare.els1.x86_64.rpm e1536617eb7912a34421a8f4cf145820780a5b9d50867fd25a9b45fec276b613 CLSA-2025:1749570465 TuxCare License Agreement 0 - CVE-2024-10041: fix possibility of leakage of secret information stored in memory - CVE-2024-22365: fix potential DoS via mkfifo because the openat call lacks O_DIRECTORY Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-10041: fix possibility of leakage of secret information stored in memory - CVE-2024-22365: fix potential DoS via mkfifo because the openat call lacks O_DIRECTORY

0 tuxcare-rhel7-els pam-1.1.8-23.0.1.el7.tuxcare.els1.i686.rpm 5970602e0f3c2b8126c931d68d7cb5b5e86fca837e5491bf478b7380031c0091 pam-1.1.8-23.0.1.el7.tuxcare.els1.x86_64.rpm b921d0fbbc4afd12b6fb65f37dcc6874916f28eb9927e6b2dca6861aa111e9e2 pam-devel-1.1.8-23.0.1.el7.tuxcare.els1.i686.rpm 01a5280225c448920dced1c578683a56dd9658ce4d3faa187d13ddda680b2970 pam-devel-1.1.8-23.0.1.el7.tuxcare.els1.x86_64.rpm 16934c93d1eab9eabe1640e40c84f1af144451928588603f6a6ddebbc1d17b7c CLSA-2025:1749821936 TuxCare License Agreement 0 - CVE-2025-32728: fix logic error in DisableForwarding option Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32728: fix logic error in DisableForwarding option

0 tuxcare-rhel7-els openssh-7.4p1-23.0.3.el7_9.tuxcare.els2.x86_64.rpm fa09131d77d27f190885abdeb7740d39032e38299c3d20358555265320861345 openssh-askpass-7.4p1-23.0.3.el7_9.tuxcare.els2.x86_64.rpm f6f5366ae736f82cc5e7edcff836c6c6c93bb63bf20ea87e337dc5016319dcf4 openssh-cavs-7.4p1-23.0.3.el7_9.tuxcare.els2.x86_64.rpm 1ec3127bf711f1daa53acbebed6bffe7688302f997333998540f93b15da6926e openssh-clients-7.4p1-23.0.3.el7_9.tuxcare.els2.x86_64.rpm b33843bc0905dfe5d05ed236e4befa4b0071d456fd08b7680f34dcd2f3f5809e openssh-keycat-7.4p1-23.0.3.el7_9.tuxcare.els2.x86_64.rpm 99b0597c59a7069cc57018b4159b020f980573d25253ca388823696b35a56218 openssh-ldap-7.4p1-23.0.3.el7_9.tuxcare.els2.x86_64.rpm 8d503e849ca252fd0fee6f632745e504304fab33c8db73b02e50d1da01462895 openssh-server-7.4p1-23.0.3.el7_9.tuxcare.els2.x86_64.rpm 4a7f2824ead02724a30ed60818c9a7ff06edc9c9b89319b6ffaeac9a19dd7817 openssh-server-sysvinit-7.4p1-23.0.3.el7_9.tuxcare.els2.x86_64.rpm e8088793ed75aeccb269febf4ac3dfd17f137a76efe548574313955fa87b5e6f pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els2.i686.rpm fdf231b40c7052c5165fcd19fd6b52eed32c1f7ed734a09033534029fd3ed0bd pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els2.x86_64.rpm f4cb824ee25214792561a5b2e363a6f5c79d849cec0af0fc77f05648303f2487 CLSA-2025:1750353839 TuxCare License Agreement 0 - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - netfilter: validate user input for expected length {CVE-2024-35896} - nfs: fix UAF in direct writes {CVE-2024-26958} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702} - xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014} - netfilter: validate user input for expected length {CVE-2024-35896} - nfs: fix UAF in direct writes {CVE-2024-26958} - Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982} - RDMA/srpt: Do not register event handler until srpt device is fully setup {CVE-2024-26872}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm 23a82a722988b15ab3f1aa2a12c0f951484cb516ff3cae4c69e2a443405702bc kernel-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm 5a81535d57c56ea35b9aeaa1d0ab783223c56f7c21a08e0e3da2664925ee5cef kernel-debug-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm f1fa80deae2ce67f86a50149105d04823885e9509fbf75b15278b76e8c27bc90 kernel-debug-devel-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm 6f1654eb27d01da046da79423228c3a3e457d730954f1a188eb28ac242033ba5 kernel-devel-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm 95cc336139742d471f3fcce876b4b16c71491b1da9555762b155c36daa17645e kernel-headers-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm 9d18548b28d21223b3fdba4280d3c69c74bc77f846be5283eb05c6222bc87456 kernel-tools-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm 6412501458227266c1cc5e386d28b1fbce4398bff35c46eb8372fbef58b916df kernel-tools-libs-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm 578cebdac0a1e6296cb342bd7f5de7e3c78701aa433a0914aee0ca079e99b1ca kernel-tools-libs-devel-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm badd860550395e240a0fe876fa1d9af92812e0412cb7197a2583a04cee54abb9 perf-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm ee47ea868dedfb871486a202e65e46cf50b68f889c65124432d98bd70347966a python-perf-3.10.0-1160.119.1.el7.tuxcare.els21.x86_64.rpm 395935a06197e491a7f8894bdb22cb1da16cd29438ed16879c266ab16807f546 CLSA-2025:1750688636 TuxCare License Agreement 0 - CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted code Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-11023: sanitize HTML content passed to DOM manipulation methods to prevent execution of untrusted code

0 tuxcare-rhel7-els cpp-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm ed0ed788e9c87cadbb6ab57d66c1031091e541d6e8bdbcdab2a869af5c564857 gcc-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 4325433d9e1073a6b456b95f3ce07f62eb64d4be4a951aad88bf72b47d76edac gcc-c++-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm add537422c16757f2c6aaf50a888ebe5f955d1af8ea81d035ebcacaee1baf8b5 gcc-gfortran-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm a14fcaac5530fa9e9f4c2960dba170a9d3f169151b41e430506ef24168c89f4d gcc-gnat-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm e1e6725b8bf558b4083563b3e4c5e9b8037a633790bf13c7028bbf7b0ad06bae gcc-go-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm a22de3331d05d29f53edf41bda8296f53b885b97f4af31cd066b5fd4de59122f gcc-objc++-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 3af06dba16d0cd951607e8f5920efef6a63975599380514b7b1287e54d37910e gcc-objc-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 795ffd20a9f179671be5ef8dd081d675f9ee994d0bba6a755863baeae551be37 gcc-plugin-devel-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 14686377df8158f57fd3e7b1d4067202bd35ad194e8956cba71c55074bacde31 libasan-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm b3c66181d9c2af8ec1f89ae9fe8c2af3fefb00fdb15f03537d2efc8c746eb2c1 libasan-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 3b7c368b84f6ee7d42a528d2df25dd3864cc4ec7ad1c245bf7e297b4c15cdf7e libasan-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm a20742d68c9d5d998c12310be8e9704c6123d5fe052b316be4fe3b3b662d7dfc libasan-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 1955df8aa53cce5865fdf44f828373913a995a97a609f029f07cf213436763e9 libatomic-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm b22134041b1436248b4ad8ae49dc5bd91fe393dca5e0a09f9f064e8631efca34 libatomic-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm da6b69512fa6fb40f70ab9171eb73769aee3257815e7a71f7ef9c2cf90a630c1 libatomic-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 586daaa69bdf578bb7b500a255dadfcf93b85411148ed445bcba473a2d8830c1 libatomic-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 78a257ea3614fc8995833f88e2bd6f820dcf2d45e4d3ba389b61f9647386cba5 libgcc-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 113dfab17cf41e3abd51e57493d0ee72e8881f44ace24d4b6a0cd1c21b6405af libgcc-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm b57d1ed5aec545474977ca88ed972aae2cd94c85eaf1d865fc998769401447bf libgfortran-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm a8eb229c150979f018adc8ea6e9fd8c717b2726e4cf00ee0c03211eca8f85ffc libgfortran-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 5745a55b836de89b52a64746cf24bcc5ed635277af9951ea7f84d2b4ca5be604 libgfortran-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm d7a2f824b0712b4611c87931d8b0c9bdedb886d12b0e763ade9ee7bc4cd3d6bd libgfortran-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm f044fcc3b0ab721ba37ae6b632a26e461dde32bc6fe04499593e2a218242dfb9 libgnat-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 3d7098b56588dd9eddef59b8849706f456f7f9ee75503a77d60d643db292ab43 libgnat-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 6baad10f54fd2a84645f722d3a82fe5d3844659889e5adf38c5cbdeca9c66ced libgnat-devel-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 34437de5f6a5e418066a5f7b3d18e3e8f738475ff09adc2aadc4f1b1a41c971b libgnat-devel-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm f6acdf1f19bf3edb9d17034491cbccff61256e3a98c3ebfb309241ad4f1469c6 libgnat-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm aff9091e24745c72dc5f3f482a372bacd888144adc9dbaf66a19fa18aa87b516 libgnat-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 9154eb286f86036438eb0a9b48fb8c927c9f81a7aff1b794f113739839ddaf35 libgo-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 70155a5cf4eb78c389de66bbdf5ae5717865467dd847eacc820c71cd3e2e99b5 libgo-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 347dbba53375b9a5ea38ce234891f7df99731b98ceb35d5682d41620590543f1 libgo-devel-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 459212800fffaf63f7b660982ec1cd355f10635ef6fa4207dba62b5e3e40b2d8 libgo-devel-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 5d813ec3c64924666a009f1e0b484b4c25b3f4d17b01a9f5040fd1ef7e2431cc libgo-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm d39e14c766c105d7a140bb593ac828dc8896cc08c2c848b7aa61c8bc6d082ea6 libgo-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 61f081d1c34a6cf67d1d02a1571c361a85e8854c4383487fb64a4bf06e5556e8 libgomp-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm a7196b90df9f2694f29bec141918336973f1d818c05a55a4b9ffc22d87c0b545 libgomp-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 61a85e0bc9166916f665bfb608ab940dc773c8e1b2d06e2fd694e3e77693bbab libitm-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm e693064509663ea3c5ca4ab87bb8afe721ccad186e734f5299ed70d06d9f1633 libitm-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 26e1d7918a871ff4ec5353ddb4583cd42f1a39c9206630d18f0014324c7421d7 libitm-devel-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 9da4ff6acb603b488330d46722e25639bbc47ae8908f0a071384e37034932d2d libitm-devel-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 84b199602d1ea77768d0959bb5f79f23d224fc0fe6d5e810201c7fe699896649 libitm-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 59497c1dacc3fe6fd47eb19b0569b57060d83436397bfd57f14475f00359547e libitm-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 2ef40b8b643b1b68c2069c76292b6dafb3400998e4a4c3107e53ced169ade6ad libmudflap-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm ae488c443038b5961e900272baf9e13d56c6f930c9dbdd82c444695757189bc5 libmudflap-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 8189631815c24ac8622aefe30f67a233746ff2b7e70070a1159775f2d201ba3f libmudflap-devel-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 189d00a2fb9dd3444aed7b5e8cc874bff09e06e300139a45fc5e4f0a8c5754c2 libmudflap-devel-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm b56fe06d1ee9035f719415205ba488d7643a79178ba4e2c50ba46c4aeee72667 libmudflap-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 9c9ecb808b2a4ade7736abf9f95beb5c3b70b358855cdd06ad529c90127d9efb libmudflap-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm b06fc9b345175cf62e71dab2e4532cc674b3b23cd3929191a646d633e28629fc libobjc-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 7722c5e17299a53a4fe937c9e86fd78caf18b952e8fbad2a9f2bbfa488a53607 libobjc-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 9ed3020fb0505732dcc10b27a212f0821127be6f50a36e2ec1881ac02aa84f19 libquadmath-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 742b5eb819ae283b7f440d86693888bd1bf2ea901f8339a97ac9bc11ec58d93a libquadmath-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 7f1935b0ce86629141323c86d6e7780aafada8d234b176fcff7b2f01064b41ad libquadmath-devel-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm cb0b2b31cd24c91184c164c202c1e9f0f3b06f6c36e05266149d6310f91d796d libquadmath-devel-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 90a7d9be6c5e645984adf4dddc327b00cea909c26f60990c7acffe95cc1869d2 libquadmath-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 4818c14cd92de28bd7f3dba698cc3d3c26dd03eae929518232830df50839520e libquadmath-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 694c7611084e666550d759d881ff48a0dc1cf6585c72301f31530a83f596416e libstdc++-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm e479f0698aed9dbd65305002685750143cf3830a79004252cbd6da9312dbb647 libstdc++-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm f981d3df5a27f7ec2901166e14ce0bf3c248140b9f68390089661f3d5063b808 libstdc++-devel-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 4293ad38de83a8580fa6fd357b8a165695eb682cde2e13a2e6d34d1fded8a89b libstdc++-devel-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 4069086ff3c6110e5cfeed96c5d6653a46317948eda3af607e428c22f66c482e libstdc++-docs-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm a66181720d017910875b4873aed936ad483a8a3bc16cb3bd7ba4f9b0bfd29134 libstdc++-static-4.8.5-44.0.3.el7.tuxcare.els1.i686.rpm 05e02f6cc89d45ce6f8c818404560aea44a5eb5c0778fb166ab1421d4dd7fb41 libstdc++-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 53003fc6db55551e9ea9a313d06964716a27112a318d7fb33dd26db264269af7 libtsan-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm b6b6ab60723bc1bc9d7e9fe4302239bc4e265df4d8ac21310bb0df105936716b libtsan-static-4.8.5-44.0.3.el7.tuxcare.els1.x86_64.rpm 09326bb8e117065fb56c85f0cb53e32c4f82ed7fc85aadabd37545731bc13521 CLSA-2025:1751142056 TuxCare License Agreement 0 - CVE-2024-12747: fix symlink race condition in sender Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12747: fix symlink race condition in sender

0 tuxcare-rhel7-els rsync-3.1.2-12.el7_9.tuxcare.els4.x86_64.rpm 43067c362f3fecf2d694271a321a656605a6e550e4741d27b9d4c6836048a964 CLSA-2025:1751285777 TuxCare License Agreement 0 - CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write - Debrand to Cloudlinux Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45781: fs/ufs: OOB write in the heap - CVE-2024-45782: fs/hfs: strcpy() using the volume name - CVE-2024-56737: fs/hfs: Fix stack OOB write with grub_strcpy() - CVE-2025-0678: squash4: Integer overflow may lead to heap based out-of-bounds write when reading data - CVE-2025-1125: fs/hfs: Integer overflow may lead to heap based out-of-bounds write - Debrand to Cloudlinux

0 tuxcare-rhel7-els grub2-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm aa879bb970a9264d02ffa79150dab454d8b4d43774e8e4a399c05be36ba6f451 grub2-common-2.02-0.87.el7_9.14.tuxcare.els1.noarch.rpm 6159bc1a02b89bb6c9c35f1b43eaf457c5881c372ce11aaa4d90629f8331b22f grub2-efi-ia32-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm a6860873b0f07f66c32ce5f8a3a8de04ba1b7b051b38df2202058ab9eaadeacb grub2-efi-ia32-cdboot-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm 4b5aae16cdf115512561b1efd70728a922926f159809b648f16568cd8f17f076 grub2-efi-ia32-modules-2.02-0.87.el7_9.14.tuxcare.els1.noarch.rpm b9f95802ea336dc896d97324a5d1c762c43e343d288cea5cdaee34b6c1db6f55 grub2-efi-x64-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm 1013385ece8b29912f85f8430c78330bef0052f9e1104d09ab9360b605b4a04a grub2-efi-x64-cdboot-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm f461702cea7db46621ddec0ea4067143bdada6cb325faa603ca16b36d1ed02f1 grub2-efi-x64-modules-2.02-0.87.el7_9.14.tuxcare.els1.noarch.rpm ce5b683d424fec40480fd5b0f2713b2030139ce6c7347c95619c37b60567bc1c grub2-pc-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm badbccde4c961dbd0ecf0ce95aba698e49659714b828c077f28a612cdc71e835 grub2-pc-modules-2.02-0.87.el7_9.14.tuxcare.els1.noarch.rpm 7a05093f90aa6ea7b4e908beff2cd6afb80de408815d710040245b0e11b140da grub2-tools-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm ce5b6eb27f096ffe71ff64bd23dcb8f27b700d34355a75a5c41b45c2848eea4a grub2-tools-extra-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm a88ec640a8fac474eb9104ec5128ee3bdad0f661450b5c70ea499a23bd1e23e4 grub2-tools-minimal-2.02-0.87.el7_9.14.tuxcare.els1.x86_64.rpm 46238ea0083efb5b3bdb7beda7d73b822c58fda2035c6aa31fe2e2c95a0567b7 CLSA-2025:1751895848 TuxCare License Agreement 0 - CVE-2025-32462: fix privilege escalation vulnerability by restricting unauthorized users from gaining elevated system privileges via the Sudo host option Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32462: fix privilege escalation vulnerability by restricting unauthorized users from gaining elevated system privileges via the Sudo host option

0 tuxcare-rhel7-els sudo-1.8.23-10.el7_9.3.tuxcare.els3.x86_64.rpm 56a8790f88d8dc948aff5fab324d76e694a2f329e2e9e0e36c41a6283bad98dc sudo-devel-1.8.23-10.el7_9.3.tuxcare.els3.i686.rpm 1d8472e978139fc955ac5275b9bc0f69699a26c2612ef8f3476b804e0b70005e sudo-devel-1.8.23-10.el7_9.3.tuxcare.els3.x86_64.rpm 0b3d075951d471ed718b367ee4f0454ab47d8445bc403ecbb932cd415e852abf CLSA-2025:1752089185 TuxCare License Agreement 0 - CVE-2025-32906: fix out-of-bound read vulnerability - CVE-2025-32911: fix use-after-free vulnerability - CVE-2025-32913: fix NULL pointer dereference Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32906: fix out-of-bound read vulnerability - CVE-2025-32911: fix use-after-free vulnerability - CVE-2025-32913: fix NULL pointer dereference

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.1.el7.tuxcare.els4.i686.rpm f88e734688d2ed76bdd8a94c0684f52de6921bf782b6dfc0f4a338229e58a1a2 libsoup-2.62.2-2.0.1.el7.tuxcare.els4.x86_64.rpm d1527781349216334112abbb1aa6277387c65c856ef14042dd46fd0374017b1c libsoup-devel-2.62.2-2.0.1.el7.tuxcare.els4.i686.rpm 616b522967ac44d7d056e2df46b1b35dacbd44bc79e8300b73a7f4749139a855 libsoup-devel-2.62.2-2.0.1.el7.tuxcare.els4.x86_64.rpm 4bb97fe69f4d727e2d9f65de1f9e24311a80e4753973f8baffd2c8d0128df2c9 CLSA-2025:1752655539 TuxCare License Agreement 0 - CVE-2025-48384: config: quote values containing CR character Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-48384: config: quote values containing CR character

0 tuxcare-rhel7-els emacs-git-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 5014ed3270a3afe9271fba032149191e7a1fabeaa4d1e3436250349977712894 emacs-git-el-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm e0babd5794443623d7030ce73f00a3ed3e62c5aa1dd04f4a1dd1c7f942a5ff31 git-1.8.3.1-25.el7_9.tuxcare.els4.x86_64.rpm a7c84fb91f5903381c142442f14140b98aa60284afee6d980bc066c7b1c70342 git-all-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 4441707e087f080a8fb8ba6b9bd8a49402bead3e103671e23b17f2885d38fc1c git-bzr-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 9590e61df591f0a1a16e0693e98179d1e04bdb32d0ee8788869db6e9d5a430d8 git-cvs-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 420507d2650da8adbf9ab5495a970b804e65e8dcb8e7509fd50313a9de5ccc78 git-daemon-1.8.3.1-25.el7_9.tuxcare.els4.x86_64.rpm 013f7bd785b48b0c41320c730454fb64e991760e4fc4906cb0112ffb33be8c50 git-email-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm d6a1821c6ef437f85d3bf744ae4f9a67ec4f92bc3dd03602d8d5a8e8ea9cce82 git-gnome-keyring-1.8.3.1-25.el7_9.tuxcare.els4.x86_64.rpm 2596d940a3d6435f6bfbfcc24aaca68ee995ec32c5ae363fcb1d9821938fcf7a git-gui-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 98caadec69f0e412000e4235636b66d4bd89104564e73dbeb635829460d08fa8 git-hg-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 31da69db01d2c5452347d672e4e055e82fb64cd803a7bbbc472edb3983901f24 git-instaweb-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 58f9e4edb21382c31a09b3a01f2ce124cbc895d1195ff441a6d867d8c07fc8fc git-p4-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 36c53961568b6a8e6f2c4a036e8ec8262c8a2f3200e05e139519f8a3242e1a96 git-svn-1.8.3.1-25.el7_9.tuxcare.els4.x86_64.rpm b156960e5544fc93709b25c18918cb35efb68ed64f0c0ab70578db3c43e87127 gitk-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 7ffddf61193d206f60ae35a488c6b45b6fd3dfe368d10cdd877d87bf255a4ee9 gitweb-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm b0c056c157d6ca52cec43b0cf487e6c78aa3929f8ad081b506402573aa51ada8 perl-Git-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 41235c44800907b1df802036a01a6cc9842b894a876dda5e1401f5b292067fb5 perl-Git-SVN-1.8.3.1-25.el7_9.tuxcare.els4.noarch.rpm 59166a7124c3bafbc6a0d9de3103f8198c96b43d14eefa2c62d177881fdb90b9 CLSA-2025:1753124055 TuxCare License Agreement 0 - CVE-2025-32050: fix overflow in append_param_quoted() - CVE-2025-32052: fix heap buffer overflow in soup_content_sniffer_sniff() - CVE-2025-32053: fix heap buffer overflow in sniff_feed_or_html() - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in soup_header_parse_quality_list() - CVE-2025-46421: strip authentication credentails on cross-origin redirect - CVE-2025-2784: fix heap buffer over-read when sniffing content via the skip_insight_whitespace() function Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32050: fix overflow in append_param_quoted() - CVE-2025-32052: fix heap buffer overflow in soup_content_sniffer_sniff() - CVE-2025-32053: fix heap buffer overflow in sniff_feed_or_html() - CVE-2025-32907: soup-message-headers: correct merge of ranges - CVE-2025-46420: fix leak in soup_header_parse_quality_list() - CVE-2025-46421: strip authentication credentails on cross-origin redirect - CVE-2025-2784: fix heap buffer over-read when sniffing content via the skip_insight_whitespace() function

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.1.el7.tuxcare.els5.i686.rpm 0e9d03d86bd7ec30b6c8518f8773c19b1c60c128937f334f7819cdcd834dd62b libsoup-2.62.2-2.0.1.el7.tuxcare.els5.x86_64.rpm e971544f7919856913fb5a9f1b97a8385878e9aa02f13ed5c83e77395e1777c1 libsoup-devel-2.62.2-2.0.1.el7.tuxcare.els5.i686.rpm 2514a5ee4be562ec0f8bfdc749d2d58aab1e9ccfb1bc09b33d151fd0f1388869 libsoup-devel-2.62.2-2.0.1.el7.tuxcare.els5.x86_64.rpm 0e00813f9df6aecc87828d5e716401ac965039328fae6e15e817b81d8fc98ca8 CLSA-2025:1753298958 TuxCare License Agreement 0 - CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file

0 tuxcare-rhel7-els libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els5.i686.rpm 306b5f5fae3675a83ca8b093d2214985c80f13efd056c22c723f2d333c545b43 libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els5.x86_64.rpm 414ac3c14631ad5effee9d90d77d45073ba9dfdc990f433244add2d54ccf122b libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els5.i686.rpm cfe4bcda91c3466ce67a08bb9597b4777682fd3fbe765481c0745cb700d7153a libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els5.x86_64.rpm f5b4146836cdb44d0da37e9f4298eed7611e504092ff1d68183206dcc57dac03 libxml2-python-2.9.1-6.0.3.el7_9.6.tuxcare.els5.x86_64.rpm 39cdc6585db15f06f6340b70b4b3cd00a4cf7db90e58c63dd655b159233990c4 libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els5.i686.rpm 3e4a888eaf5c4da8819c19da34f9d91529889e2afed5427fd399742fdd3994cb libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els5.x86_64.rpm 7d7281cdffdd484a0db33907969475fddad0e8eecb842af3d63fa311f02d00c6 CLSA-2025:1753769145 TuxCare License Agreement 0 - CVE-2025-1220: error if host contains null bytes in the middle of the string Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1220: error if host contains null bytes in the middle of the string

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 4469fa08ede98b2cd81fcb31ff49cc2cee6bde52d2864ef9c8ec963ed8fa53af php-bcmath-5.4.16-48.el7.tuxcare.els10.x86_64.rpm d140c871dd6eead638a396faee380dc329747bce1efb6c77fdfd29d446a1b08b php-cli-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 7e5cdbeff273ff2647f05f4936061ba8dcb74d3704b89b4e135a99d1565527c8 php-common-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 47525bb537d9a40895c38cf9dabdd4f6bd368efefe6cf5b1c8c08d7b5ba6e5a0 php-dba-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 6873cd2061db841e58da34d75b5e086e82b693c6cd4e8d3de4db51eff064b991 php-devel-5.4.16-48.el7.tuxcare.els10.x86_64.rpm d57b740537db66e35731ae9c3110dacf55606725d17a33799ff54e360da1bad9 php-embedded-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 9b04f4ed951f71ae3a98c9f402ab2d5fb7619992b69dc1b693f054d9ac04980e php-enchant-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 6a123942fd6a07ee43215a22e8d078cc9dbe7291c4a0f5262f080408bcd83ac7 php-fpm-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 3dc8e6e91eb54eebf94d8357665361ca3e06c520cce7ac941411af9bfa7ae7e1 php-gd-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 1c6cc69ca3df0da85eeee0e0bd9fbeb63d7270b6a47e562d7aeaeea3dfa0a314 php-intl-5.4.16-48.el7.tuxcare.els10.x86_64.rpm d92cb501a34bc43a87cea653f224df6e9f708ca0f258e177cc0855aaf7ff6e65 php-ldap-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 3812ccdc57396706d933f96caa49f658eee9ff94f4b68ec5672e6748cf3b82f3 php-mbstring-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 28d293da0b4bb403b1ba1f4372813113dbdb9f2c57761e3f4f8e8e4b86c7b553 php-mysql-5.4.16-48.el7.tuxcare.els10.x86_64.rpm e5c25a3a5c544b9919670db965e0199b04f7e13bfed7770982f463b96e93ed62 php-mysqlnd-5.4.16-48.el7.tuxcare.els10.x86_64.rpm f082bd20c68f22e7ab7c7a99986086aa781e87a80fe1508a664b7df07e798d6e php-odbc-5.4.16-48.el7.tuxcare.els10.x86_64.rpm a7d5f7166528aea143ee22127e97b45dc4e928491529399e0f1deb8c96a170c1 php-pdo-5.4.16-48.el7.tuxcare.els10.x86_64.rpm c93baf261dd8cba8a32ce78336a946a5f5564bb32a37f75d16a6818f20f43826 php-pgsql-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 70c2795e7e0d9650f14fe75c9d7fe770aac29f74ccb13deba91c31c6f95b9ac6 php-process-5.4.16-48.el7.tuxcare.els10.x86_64.rpm e3977702b42af7b3e3ca90661511a37e746698a34b66f875c658386c4cbefff3 php-pspell-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 502a9d48bdca8c71fb7e17cd789c24be4cd6957a853c1e343d3308ee9742d034 php-recode-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 667cce2f785ec29545c99aab2665262b0e5646e53dd8bd95204b0e81e1dd2515 php-snmp-5.4.16-48.el7.tuxcare.els10.x86_64.rpm a526a80c3733be58dff3fa1fe15a9dfb54ce1eb2098e3a21a2a6728cca15be9f php-soap-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 980e1c5e3989a4b7e9a7d6db11d259be49628be2f1715fb086253b63a20069b0 php-xml-5.4.16-48.el7.tuxcare.els10.x86_64.rpm ed0bb42522cf2daee0a4e9bfa280c62ebc039f0a6fb0d7e1c22ce22050066e94 php-xmlrpc-5.4.16-48.el7.tuxcare.els10.x86_64.rpm 1fbb7d27669431ebc4c873207a0e68228a5231c674dc3607dec597f4b41cb08c CLSA-2025:1753963973 TuxCare License Agreement 0 - CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els11.x86_64.rpm bf7f322eec230979f073081204141fd06c56c42fc0aa28be18aa213976d08091 php-bcmath-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 4e52b5e0f48229e16b8440d30c2d081aa72ce7f015ff5314f2b696ada612c73b php-cli-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 99c511ccf5954bbfc1dc102e7af8d9f865a1635ba2ba41086444077fd09b5738 php-common-5.4.16-48.el7.tuxcare.els11.x86_64.rpm fb151bf08cfa99e2444a542b8b2d9525ea5b3ce9c32307be86c82605da914fc6 php-dba-5.4.16-48.el7.tuxcare.els11.x86_64.rpm e43d8a6429a9b1cd884037401f833658324a184685884ad18a0ee639d5fd2398 php-devel-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 730665d29ab34b97d94569168b335c701e6e5fce7ae9dd41d5e3315a4031c552 php-embedded-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 6e1c067fbe1ce26f9cb58196b78877081319ff4242353a621cf9233cd529e0d6 php-enchant-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 58df820d9d3e24d9304f056b8f162e1c02d3f6445d767ace22fa8b604d06f892 php-fpm-5.4.16-48.el7.tuxcare.els11.x86_64.rpm edda9b2c7945185ed577f374954e9efaaa55b9f68672472484eee0cb77aa2979 php-gd-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 4709ffc462459158bfb56ea26e2bacce4e7bbb684607095dff8c26759983da6f php-intl-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 5f8eb483b0d79edf7fb57a34ad753b21be2080f409bff1ff1267f13b43a78675 php-ldap-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 4c07fef2ba2a0519d125fdac95f62455a78a066747d36f937ac35168ed1e3ccc php-mbstring-5.4.16-48.el7.tuxcare.els11.x86_64.rpm d51e2d5168c0dfa11dd3e14adf5da09df00c739ddf379b0769b687167a7aad9b php-mysql-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 1aa585c3f9ba7d26d5638d3d688128f1395657c2d2c1895ff67605ef2a7c76aa php-mysqlnd-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 836d36e79938d934dbf56224ebd9200cf6e335286845dac264524ab7f74db291 php-odbc-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 3dee9cab5ae4dadbc8018b809c35d39a939f783abdd95c50f3772d65118a200b php-pdo-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 9a08b12d9045375b6ccf153a056ab75755d2614582a131c8f1c3c0c8ed6455be php-pgsql-5.4.16-48.el7.tuxcare.els11.x86_64.rpm c1cec31fb4585be4905ce5dd3f8cc0b8c8da510304e4790c45e117535961586b php-process-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 4c95cc5d8e915c7a8ea6fad792dd7b9409fd069bd923b503862558873c10b78b php-pspell-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 380c607374dcdd6efd2375996b8e5ff66da5b57a1e76cd8a72502940fb36a0fc php-recode-5.4.16-48.el7.tuxcare.els11.x86_64.rpm f8d9a1fbbf5f5995fcbbc6b8ba0a63b5762a5dd0e7c3e897deb7d6069a841933 php-snmp-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 937ee388682949d754f00bec036d0026a8844b61ea720e24132d07c1274e50a3 php-soap-5.4.16-48.el7.tuxcare.els11.x86_64.rpm 5b0b2780e475d98651b010ca42f6142d6b7fa8d4c979225b3dc566fdd7e10c37 php-xml-5.4.16-48.el7.tuxcare.els11.x86_64.rpm d326a6057db4a814ce58909c1a18a8825aeea6f34e77b40ceeeb8d3d893e22df php-xmlrpc-5.4.16-48.el7.tuxcare.els11.x86_64.rpm f09d1f614b18f30c80018413257a2e284c395c805ccb38252b8e72870d89072e CLSA-2025:1753966983 TuxCare License Agreement 0 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u462-b08 (GA). That fixes following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u462-b08 (GA). That fixes following CVEs: - CVE-2025-30749: better Glyph drawing - CVE-2025-30754: enhance TLS protocol support - CVE-2025-30761: improve scripting supports - CVE-2025-50106: glyph out-of-memory access and crash

0 tuxcare-rhel7-els java-1.8.0-openjdk-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm 262d978f0c659e527b1a3a7825ae15c19f5ce92da93a2a908cb6dc2453fcea08 java-1.8.0-openjdk-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm 40962baf3bdf93e194a17863f181ffd94fab3b3dd3736d2901994cf2f300512b java-1.8.0-openjdk-accessibility-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm cff53b3947220d3d2009cf15631bbb7d76bf4a9de9847fc51c7dd35647e7eb9a java-1.8.0-openjdk-accessibility-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm ee3866b5ec822bf94de6ea3e10c5bd364faf1e49ce8f82073e227a4e4348426b java-1.8.0-openjdk-accessibility-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm 3203e01c3d0314dfd202deac4e26e11000b1ddc1b37e63d31cf81a6fbf0fc635 java-1.8.0-openjdk-accessibility-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm b7c995252db2d2e7a4bcc32bd0b8549e9e1c75d439625bf36a590b03acf8d817 java-1.8.0-openjdk-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm f543aa059048678352b2c2cd42bb7bc204e45bcac0477243c8a3b6cf36893ac9 java-1.8.0-openjdk-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm 9f77c20d2386087619d2616937b11e710e62b0ca42d8283202be95d6f3b61d25 java-1.8.0-openjdk-demo-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm f2424380e6b4fb68389e6ad47c8e6aaf3e51fa9e17df5e98e6caafee6e03a48e java-1.8.0-openjdk-demo-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm 45cf2ce60289364866e103953eb40f81c0a10e2e2d5b4c6d1c0352ae2c668d02 java-1.8.0-openjdk-demo-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm 4717aea2aebbb8e57b6106a9083d5170b4bd7019f7901a930b41ca4ef92295ce java-1.8.0-openjdk-demo-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm 011bf456119141648de1c6a1c5d43cc40ea13a69183dfcc7e3c42d75a5dff308 java-1.8.0-openjdk-devel-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm 49de84abc122defcde7fab863f664039e66b457d7a8da7d63b5b263b33a03bbf java-1.8.0-openjdk-devel-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm 04b9eb21ff8f7d7bff3fcfd14643d71509e8cd76a1fa879bcf49f947af2b4297 java-1.8.0-openjdk-devel-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm 3cf87e13875b6ffd700f78a6d124022371ec7c2ce88fe7486b51f82efa0aea3d java-1.8.0-openjdk-devel-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm 8510b936fd922ca999ce51a947ad5c6114a8b660502e4f12fd30926acd5e734d java-1.8.0-openjdk-headless-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm 785e01bc73047daeb45dfafd1b28f4da4cfa22583737ffbb362000c5ffb3301b java-1.8.0-openjdk-headless-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm 1bbea8c136562208bc2c02a204fa46c39eda00bddb6e1664b3d551b8cd266cd6 java-1.8.0-openjdk-headless-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm fa80aae040a53b5f6436707077fe5db7586d44e4a657655bdff85f0c56eb09df java-1.8.0-openjdk-headless-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm c0f726477cf4b2586ab33c10bd4bf7d2dd879922dc33377ada89b2744f8445f5 java-1.8.0-openjdk-javadoc-1.8.0.462.b08-1.el7_9.tuxcare.els1.noarch.rpm a1c71bea48e6d3842a0356f23fac04f36380e4b0d25301721193d0f6eba6af8a java-1.8.0-openjdk-javadoc-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.noarch.rpm b93f64d6f3d7733f6c7fd9d4903b5f59af3856d065d874df5403e7d8b9992daa java-1.8.0-openjdk-javadoc-zip-1.8.0.462.b08-1.el7_9.tuxcare.els1.noarch.rpm 4ce00b66d37bfb8d368bf9b00e5d16e9a1b0e8bb5d344d15d07a34251b806201 java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.noarch.rpm 86982a01a8f80a0f1f4f3b9e262e6af39dceb8368b62840362254fa488218091 java-1.8.0-openjdk-src-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm 656331377aa2cb96177c70974c7774682698479b47c42643e078cd30434e1989 java-1.8.0-openjdk-src-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm 10a5855fbda01774832bb40864501c8d499983673001bd5aa04a6c6e89ef5f3b java-1.8.0-openjdk-src-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.i686.rpm 29048a6edd4cef17fb0f56c815256c45fe612ebb5b0f0d9fab4f9a85f439b816 java-1.8.0-openjdk-src-debug-1.8.0.462.b08-1.el7_9.tuxcare.els1.x86_64.rpm f3b604aa28a8e1d982dcd90aea78553a73e981181fcb61a1c9c4ab82e518b140 CLSA-2025:1754381195 TuxCare License Agreement 0 - CVE-2025-6491: fix buffer overflow vulnerability Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6491: fix buffer overflow vulnerability

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els12.x86_64.rpm b29349b5526f35d71ad8494e2346d2a6af1f8f636b0f0ee61fbaca19ce62f2e9 php-bcmath-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 1a581ef1a04066a1a0aec4dfd7f79bdd02bdbeb0cae792063f6e9ee5847eba2d php-cli-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 15435f5e59176093cf7528ab012594407cb4481aed7435f2853c25e4a6b8d4ac php-common-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 32a98290f461ffa82bee16efdfb2f387e1a112b1936c7a6be6b24c4eca576623 php-dba-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 44e1e9290932b9bc92783af21da177371308dc84d569acfe8b1ccaf57d4fe3d1 php-devel-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 71f080695ce66f3b946780e1fca1e0cf067bd1bcbb3fedee64642936a2dd13de php-embedded-5.4.16-48.el7.tuxcare.els12.x86_64.rpm a86195d587034a16b930c54e7c8f9f0fd55fcd20394ba110439662a3c98d43b6 php-enchant-5.4.16-48.el7.tuxcare.els12.x86_64.rpm f84c6982b6dc5639cced3b8ae7befadaf56dc5557f5dc6b17b3e9e89687c82d1 php-fpm-5.4.16-48.el7.tuxcare.els12.x86_64.rpm cc0906ca3f994a8cd543c1116d2fb5e47ebf509fa133956ae978f235b300e226 php-gd-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 0ce922757494b89e7bc679f029d924c94596b3e2e40f961c7d895169e83a171e php-intl-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 8dca0c141e87127c1010c6871558f7c03856efbde78dffd88ceb09482c06d894 php-ldap-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 562b2c3d74eabfef310cd4337388f07b232aab449703fddbb6fbaee94fcc904c php-mbstring-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 9ee64e65e716551105e9252b690d42620456ccf1d1adb39d654ae358bb5d722c php-mysql-5.4.16-48.el7.tuxcare.els12.x86_64.rpm afceb13b44a51dd0daee73a8c8274a30ad51cb03ee8667d915949872b814b217 php-mysqlnd-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 82c84df90481aedd55627f99c679eda75e95583ca0b1979228f090d0e7857023 php-odbc-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 3ca87c55e361ad598d692879a1672348c80d1a5c85601887c7e10d32c527666a php-pdo-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 90dce41c6835efc2a405b171c05ea820a00bfa739dce77d28edc4152448f106e php-pgsql-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 52035322e068374504936d97b41ad1d2bcfd899d9ea47a4fe970aceca2524c12 php-process-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 4d5f51acfbbad9ac37f11c997c0946b6568d12d4f0ca4d9db3b726af06276497 php-pspell-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 65d088c86eb2523c0dc7d7a4e0290c7e7781ea1d51c154ada0212ab2a322fb13 php-recode-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 2ee664e1ef9169a206e940b14510f45bdf553a1d2195556be0b9692d56040da6 php-snmp-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 9f8739a00fdd7c5efe44f8bc3fb8119e022835dbc4dc14954d64cf86936c00eb php-soap-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 5a09e2937ecd885358470050f4605903980cc2f79d317162df4dcf2088edabab php-xml-5.4.16-48.el7.tuxcare.els12.x86_64.rpm 2fad76a40fe05703ae10d3130ed443a3455bf22d1f1ec2760644acea31e3bed7 php-xmlrpc-5.4.16-48.el7.tuxcare.els12.x86_64.rpm cd2976da0eae657168b713d96fa9e135d922b6e8ac23f1314e744d1116effad5 CLSA-2025:1754649298 TuxCare License Agreement 0 - CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-46901: fix mod_dav_svn denial-of-service via control characters in paths

0 tuxcare-rhel7-els mod_dav_svn-1.7.14-16.el7.tuxcare.els1.x86_64.rpm ba28206012444d13de4139d6cf87399771a56e9a1c1b11c5ad88240da5358334 subversion-1.7.14-16.el7.tuxcare.els1.i686.rpm 849186ea9845fdf1fcd0232b019343f731477b04a186d4c3dbd505f6e3ff2d17 subversion-1.7.14-16.el7.tuxcare.els1.x86_64.rpm 94e93361ded19a6f66b92a51673558acf63ac2af733eb535f62418a03d062df5 subversion-devel-1.7.14-16.el7.tuxcare.els1.i686.rpm d11081f124bafdb139276ced55c8d1c8bd8ef113906304695560cd52a9883d0d subversion-devel-1.7.14-16.el7.tuxcare.els1.x86_64.rpm cc4d106c52cdec325ec447d984f6797f7911ac7a045b991d33eccab81644a308 subversion-gnome-1.7.14-16.el7.tuxcare.els1.i686.rpm 7b83f3f0cb65956fb2a14115ca8526d2f5ae91296810917efd94ea61334f6b13 subversion-gnome-1.7.14-16.el7.tuxcare.els1.x86_64.rpm fa1eb7aff0a9e2cb4f42feb7e67f626553108e8ebba63fc6327e9d95781c33c5 subversion-javahl-1.7.14-16.el7.tuxcare.els1.i686.rpm 14cee34198637ee2f338531236c81454c4d37b03fdeea489980f1e686dbbe502 subversion-javahl-1.7.14-16.el7.tuxcare.els1.x86_64.rpm 0f41c117df0feaed8cf95c468add573388a624d067d28846a455f5f279bf7ebc subversion-kde-1.7.14-16.el7.tuxcare.els1.i686.rpm 536e761a4faafa0c793b6409ec7127c0f70386ff889fc4b4fd3013a21edf487d subversion-kde-1.7.14-16.el7.tuxcare.els1.x86_64.rpm a93ebdda7ffd43e5abb0d74b1a97cc87756bbbf2df560c1a949a9a671f110ba7 subversion-libs-1.7.14-16.el7.tuxcare.els1.i686.rpm 71ef66eb24b970c2ad2f5d9dbd3e9618a8aea5ba91428b73baacfd4fb5cbb6ca subversion-libs-1.7.14-16.el7.tuxcare.els1.x86_64.rpm c6248c775053631f1d8a35d6ae0f3a14639459d52b96b2e3b422d5f3968b068e subversion-perl-1.7.14-16.el7.tuxcare.els1.i686.rpm 0d4e764d3eb735848c310257baaec9cc61ed64b2a1353ca44da636b37cfa9d72 subversion-perl-1.7.14-16.el7.tuxcare.els1.x86_64.rpm d08f7c099a213db30c4e4ee4209f85938e07344bb5e1671c096173f16f7dafc5 subversion-python-1.7.14-16.el7.tuxcare.els1.x86_64.rpm 95573753e142a85341d26ac9b7961111d8464a6e134ab1ddf071e335693a0ba9 subversion-ruby-1.7.14-16.el7.tuxcare.els1.i686.rpm 9cc02c0c4d7010b334c71b6d5ff90f093cfe0ee1e7215fe7d94aa01fe788ea4b subversion-ruby-1.7.14-16.el7.tuxcare.els1.x86_64.rpm 96be8c88015c1751e5cd9f9d5199cc8b11642627e5a1eca7865bbf4710eb6add subversion-tools-1.7.14-16.el7.tuxcare.els1.x86_64.rpm 6317680caf7f518bf383b2425e9c94e2853fc3dbea4b0c2122849d37273d4445 CLSA-2025:1754940505 TuxCare License Agreement 0 - CVE-2025-27613: fix issue where untrusted repositories could create and truncate files, with the fix implemented in versions 2.43.7 and later Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27613: fix issue where untrusted repositories could create and truncate files, with the fix implemented in versions 2.43.7 and later

0 tuxcare-rhel7-els emacs-git-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 31313136d6b52d93c8849d08cd35a55b118865c0b17202c728272f6b5be4bb4a emacs-git-el-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 4db94612bf3c45bde46301d9103877c4cac245924c4d37f40c269e2ed8f88ff0 git-1.8.3.1-25.el7_9.tuxcare.els5.x86_64.rpm fdb662c598a013cb278335567697bac51839286aee28612325c2a572d223237d git-all-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm eeed9168209b896c2a2aae7b0e110f4a9940dc4583e73ce3cfbde323ea451a0a git-bzr-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm bc8d6255f1523a3f9930a5915fd830bcbb5f4f3bc3cabeb03a806c5520af1d74 git-cvs-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 6e0a58b07f2c2a5bda51b206deaf53e23862874b82f16d064ad42823da860ccd git-daemon-1.8.3.1-25.el7_9.tuxcare.els5.x86_64.rpm 8f6064a96387c60dd2de970a1870bb573f99efcc8ca84e79b70b5eb85c6a5a54 git-email-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm e9e1453709f72a14939f2d97a0e2e15ebe0e0026f8f4c944882a69cc3c04b66d git-gnome-keyring-1.8.3.1-25.el7_9.tuxcare.els5.x86_64.rpm 04e38b659bb474c7b272a8c7473f9863bfdb1f848fc3459e8807c3c0b4670b6f git-gui-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm d7664a6c92ef43412e32388560fb2f2b44c8dbd4b291a55d8d13a779f026ab64 git-hg-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 14707a64dc9bbb678cda3c1e4b1fea1b819043a650368595dabda01b8e8b6ee4 git-instaweb-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 54497f98855b21d5a3670d11711e63201ce5acb227012196e3a4d15b31597813 git-p4-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 40f6de56ad0d05b9e367d131403b31f5dff49dba80737ecab70db9bb4ef28afc git-svn-1.8.3.1-25.el7_9.tuxcare.els5.x86_64.rpm 711541ec508be26de06d8e97b124c4e36fee5bfb9db14d4910b79c7a58ac7770 gitk-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 60df83390d2f366b0fbd06d924014ba882ad71936bb1a5e5866e2f09e91a61e9 gitweb-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 24b0164a07b7416ca0a0e1f83193fc956ba2ec6f768bed1333cf3c47a1a07c17 perl-Git-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm dab1aa02260eb14dd81cd29a4153b93043d812ebbef4fd5984221f2766a9c7f6 perl-Git-SVN-1.8.3.1-25.el7_9.tuxcare.els5.noarch.rpm 089aebb1b0b80b2140647f7f7d76c9f49bb644180b97be8127e7cc01a107ae6f CLSA-2025:1755617684 TuxCare License Agreement 0 - CVE-2024-5564: validate route information option length Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-5564: validate route information option length

0 tuxcare-rhel7-els libndp-1.2-9.el7.tuxcare.els1.i686.rpm b365f1631ed4bce6ffad04bf0e69d5f3977f6a6421b7844e067eda1b7211f5d8 libndp-1.2-9.el7.tuxcare.els1.x86_64.rpm e0328a4d4d863525944b1a1b69fc25a8656d5e0cbc4f5c8e210972d2cfce5454 libndp-devel-1.2-9.el7.tuxcare.els1.i686.rpm 5f59dd55edcf72e37a7c28a84a442b2ddc3fa975ac74713e41abd9150fc44e93 libndp-devel-1.2-9.el7.tuxcare.els1.x86_64.rpm 1387635c616878121f44214e52a4effb1e692acddce402c48c319df0650683aa CLSA-2025:1755681073 TuxCare License Agreement 0 - Fix deleting job when iSCSi used - /dev/lve is added into the list of private devices Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix deleting job when iSCSi used - /dev/lve is added into the list of private devices

0 tuxcare-rhel7-els libgudev1-219-78.el7_9.9.tuxcare.els2.i686.rpm 13565443afc9da14c5c95a7fef126d0301419e12543a819922982c0acc179180 libgudev1-219-78.el7_9.9.tuxcare.els2.x86_64.rpm d1a822a949ea3a221df69134e750a5c9cb8eb0816de6f26502061fd5a9c6bc2e libgudev1-devel-219-78.el7_9.9.tuxcare.els2.i686.rpm 568786acac1bfcf3d5c80379159fa816fa1e6a4c6a6cb46b862f3e1bdbde8ed7 libgudev1-devel-219-78.el7_9.9.tuxcare.els2.x86_64.rpm 1ab701fc0cc60a4cb4b70064f9f39f6cddcf59bb7a03ae79509ba04ffc2fb523 systemd-219-78.el7_9.9.tuxcare.els2.x86_64.rpm 453038a6921d2f4484461adf33ac1ac14491e7c629d388b2dad3e6ddda92a56d systemd-devel-219-78.el7_9.9.tuxcare.els2.i686.rpm 012c8fa9eebbd75e445f4b74c75a1664564b0e5c1ac0cae3b5109c748c3ef9ab systemd-devel-219-78.el7_9.9.tuxcare.els2.x86_64.rpm 1658613c8eba924e96f20807128fcfde82db829e8007bff56932a4efb384426f systemd-journal-gateway-219-78.el7_9.9.tuxcare.els2.x86_64.rpm fc66849747974f0d456fe16f5f089a0f4d3897594e824365f5ad95f0ec27c202 systemd-libs-219-78.el7_9.9.tuxcare.els2.i686.rpm f8cee6f8e3b4a4ddaffa2e2ddd1fb679d3b29e9812277ac2abfdbfa6950b305f systemd-libs-219-78.el7_9.9.tuxcare.els2.x86_64.rpm 0dafe6c5b9b17a0d4b43f2491128033aa6e0c9c5c724230aa523341cfba6539d systemd-networkd-219-78.el7_9.9.tuxcare.els2.x86_64.rpm c49545aa15dbd98fa57e54bbf0d8c0e86232a18fd4d0c14d98f884ea1ab1f621 systemd-python-219-78.el7_9.9.tuxcare.els2.x86_64.rpm 5884af119d851adc778664ef88dd4b18a039bb48c27c3617634b6de9e6b2f4df systemd-resolved-219-78.el7_9.9.tuxcare.els2.i686.rpm 83bb26a10f568dd241e599eefcbadd0499c5d8dae1324045496ec4d607c8445e systemd-resolved-219-78.el7_9.9.tuxcare.els2.x86_64.rpm fff5c3e8a20b5c3c2c520775ff3b29c237959cb8b326bc72f1f4252acdd16b5e systemd-sysv-219-78.el7_9.9.tuxcare.els2.x86_64.rpm 96643362b4c517084f49f5b7386e534545236fb7b153e553d0a6cef1229fb4f0 CLSA-2025:1755791708 TuxCare License Agreement 0 - Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0(ver:0x0A70C005), cpuid:0x00A70F52(ver:0x0A705206), cpuid:0x00A00F82(ver:0x0A00820C), cpuid:0x00A40F41(ver:0x0A404107), cpuid:0x00A70F80(ver:0x0A708007), cpuid:0x00A20F10(ver:0x0A20102D), cpuid:0x00A70F41(ver:0x0A704107), cpuid:0x00A60F12(ver:0x0A601209), cpuid:0x00A10F81(ver:0x0A108108), cpuid:0x00A50F00(ver:0x0A500011), cpuid:0x00A20F12(ver:0x0A201210); - Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10(ver:0x08701034), cpuid:0x00860F01(ver:0x0860010D), cpuid:0x00860F81(ver:0x08608108); - Update AMD CPU microcode for processor family 0x17: cpuid:0x008A0F00(ver:0x08A0000A); Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Addition AMD CPU microcode for processor family 0x19: cpuid:0x00A70FC0(ver:0x0A70C005), cpuid:0x00A70F52(ver:0x0A705206), cpuid:0x00A00F82(ver:0x0A00820C), cpuid:0x00A40F41(ver:0x0A404107), cpuid:0x00A70F80(ver:0x0A708007), cpuid:0x00A20F10(ver:0x0A20102D), cpuid:0x00A70F41(ver:0x0A704107), cpuid:0x00A60F12(ver:0x0A601209), cpuid:0x00A10F81(ver:0x0A108108), cpuid:0x00A50F00(ver:0x0A500011), cpuid:0x00A20F12(ver:0x0A201210); - Addition AMD CPU microcode for processor family 0x17: cpuid:0x00870F10(ver:0x08701034), cpuid:0x00860F01(ver:0x0860010D), cpuid:0x00860F81(ver:0x08608108); - Update AMD CPU microcode for processor family 0x17: cpuid:0x008A0F00(ver:0x08A0000A);

0 tuxcare-rhel7-els iwl100-firmware-39.31.5.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm bd4848cabcfd195eb4bfd0da74c43e1d28bffad764014477df76a05a54d034b9 iwl1000-firmware-39.31.5.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm 4a10a06c3f0b3291df8199acb214296778a24a4773d0bf894335c03d1f57253e iwl105-firmware-18.168.6.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm 02bab4a19b2f096464487ee4eeaa60a860d912459d546ec70b3512876f3723d3 iwl135-firmware-18.168.6.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm b07daa9ab280734c43d247a5a39f300798518961860e46339e629a948d1a21ca iwl2000-firmware-18.168.6.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm 2cfe58f3257ceea948317797c475c2183f4d02ea87a78bdd7040773f9372acdd iwl2030-firmware-18.168.6.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm c4a1bee7c47299978f524adac6efbd7cf161890c60aef739f4ecbbe7d3991b86 iwl3160-firmware-25.30.13.0-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm fe4298b4077de629ca38f57ad91942e083e1c8f0ce0b407f1f6a7d2e2f584d7b iwl3945-firmware-15.32.2.9-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm 4f3c2fb79c1b8cdbeb6e8ba8e7eb4533bdce56bd43e4dba1e0bb6567afa9c1f6 iwl4965-firmware-228.61.2.24-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm 446e2a6eb18dce049683cdf32c823eb3f10d9e2dc853377930ddc07daa9ad871 iwl5000-firmware-8.83.5.1_1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm b874869ae24862c85aff02323ce66db2ff3f4db11b0b8b26dec8ad4e6a5d0f29 iwl5150-firmware-8.24.2.2-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm ee195b53c74b465e1c99a3edfcab639b8dbd34a9b1ee62e5de04550c8552c278 iwl6000-firmware-9.221.4.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm b915645b6aa15c81e1c9fa48210fb7787e8a83f0f3687445b55087223cfa1f4d iwl6000g2a-firmware-18.168.6.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm aacc49cf076192a82204d076c935fd91d87df2c9ed2cbde07f3d337ab4bb375b iwl6000g2b-firmware-18.168.6.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm da1eba259bd666b5b0e955ca7a2cd47b7a985c48c01e9fbf5d0b9f99841bd628 iwl6050-firmware-41.28.5.1-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm 07cff7f3d40c965dc188c81c889b998a0fe59ae126484f155724b206183d9754 iwl7260-firmware-25.30.13.0-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm b07160ac1010a9630f7de73ffa27d1679f1905ef750b753a61085a76ccb17dfc linux-firmware-20200421-83.git78c0348.el7_9.tuxcare.els3.noarch.rpm 7bb816c1a8bfe1ba85cc1f04d3ee00f0fcd2556a6f12212242b00dfdb610b37b CLSA-2025:1755791979 TuxCare License Agreement 0 - CVE-2025-24528: fix buffer overflow vulnerability in iprop log file writing Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24528: fix buffer overflow vulnerability in iprop log file writing

0 tuxcare-rhel7-els krb5-devel-1.15.1-55.el7_9.99.tuxcare.els3.i686.rpm e994409c1d948fac5bbd95248839336c6789730d12ca026a1d2945bc7965aa1f krb5-devel-1.15.1-55.el7_9.99.tuxcare.els3.x86_64.rpm aeee6ae53052bf8b497475783e0a9375a19d8a26abb596bbb2da34f1e1cd9662 krb5-libs-1.15.1-55.el7_9.99.tuxcare.els3.i686.rpm b2cf8f171956f297cfdc1fd0cb5a41242a6c2f8bcce0346f4c164b9a5c60fe90 krb5-libs-1.15.1-55.el7_9.99.tuxcare.els3.x86_64.rpm c2221226ed0ccb7b593884995004a7413f0acf62ef539508cf6c22c317280da8 krb5-pkinit-1.15.1-55.el7_9.99.tuxcare.els3.x86_64.rpm bfa50e14d85dd2896786ed002e14e18b0e08aa3629af05dcddb47d09d76175bb krb5-server-1.15.1-55.el7_9.99.tuxcare.els3.i686.rpm 50e4cc44b17eb70bd86fee1d7cd29e6c760f8131c4c36d1d58bdba2823830526 krb5-server-1.15.1-55.el7_9.99.tuxcare.els3.x86_64.rpm 8e044df69f81d2c628b45df8a0d93bad8197dd667dc1f7633dfec13d8628f655 krb5-server-ldap-1.15.1-55.el7_9.99.tuxcare.els3.i686.rpm eb158f66f4aa47820a2803e553a9a356929b68947f64743c7cddebc39dfe0fa8 krb5-server-ldap-1.15.1-55.el7_9.99.tuxcare.els3.x86_64.rpm 827051cdce6e514b7008c2d0724b99fdf887fa853d35af11b3f9bf28302145a0 krb5-workstation-1.15.1-55.el7_9.99.tuxcare.els3.x86_64.rpm 694a2eb53adcc1e1c6ca6511bca2446e3792ce0f50fc205289d8700d7b82f467 libkadm5-1.15.1-55.el7_9.99.tuxcare.els3.i686.rpm c60950d68254bb88177fadf8b0ff2ef3bb279576f57063599ddeba56acf29b6f libkadm5-1.15.1-55.el7_9.99.tuxcare.els3.x86_64.rpm 61ecf18bc180ca4642be02bda8fc5839f1c0e1133ea4beab98cf3a2ba6710d91 CLSA-2025:1755886078 TuxCare License Agreement 0 - CVE-2024-52337: sanitize API arguments to prevent log spoofing by both escaping ' characters and restricting newlines from being inserted Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52337: sanitize API arguments to prevent log spoofing by both escaping ' characters and restricting newlines from being inserted

0 tuxcare-rhel7-els tuned-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 835a99d58d1647baf57b728fc6d8370a7dc076248d551adc767a20f72fabb049 tuned-gtk-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 66d5d0c182fa30291b7d1e68360505d1b1edb92f25d98da9a3cc416d348a6437 tuned-profiles-atomic-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 7327f5e171c772a4e032c500a0962998480e45859effbdde056784b1b54e81b8 tuned-profiles-compat-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm e8ccb83b99299f62da196ae094cd51d8ca0dd6650e89681e7fe3023dd86aea8e tuned-profiles-cpu-partitioning-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 8f8c1b58acf08568b67394067156adfc4604ed309e03eccb6bc90f188ec4260f tuned-profiles-mssql-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 451d25e316b44ad4c60ddb52a7a160a207f3dfd27d7464182f66e52ad8b9646b tuned-profiles-nfv-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 1349e23c038f2b218b65ac96701cc6c8ea1e73b44e5acf2568c311331b44c1a0 tuned-profiles-nfv-guest-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm ada10e11d1a990bf5a42c712ceedd58e7ddc23859d2fc7ae164a617d4dc1c97c tuned-profiles-nfv-host-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 46bf90268863bfaa51d9fc3ad3e9d3792ae09d18dda1b39e99ffce2226dd63be tuned-profiles-oracle-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 1e1c71a808b1635bc28485b1fe5ff4591d22aaf2f38533f3b013aefcfd58573b tuned-profiles-realtime-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm a9b655cd5cc92bfb2aca1260fe36784a413e3273601ec7663d568a587e3240a5 tuned-profiles-sap-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm b2fad922ba0ab385bf713f1fd39a80e0a1c03542147111519356b42b71fc9f20 tuned-profiles-sap-hana-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 4fbf930e59d963f9a58c0cbe6ba4ef2fc8308dc47a1428ca5d2fd70e2536c83e tuned-utils-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 3837db04a8d82c9770bd4d3e883bf85b24d8bd163993e6e5bd518435afa507df tuned-utils-systemtap-2.11.0-99.el7_9.tuxcare.els1.noarch.rpm 8b05ab90ba6065e0394024980859ba91a7a5a5c6dbcd25ca12be414721308bda CLSA-2025:1756230743 TuxCare License Agreement 0 - CVE-2023-50868: avoid availabiluty of the remote attackers to cause a denial of service using DNSSEC Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-50868: avoid availabiluty of the remote attackers to cause a denial of service using DNSSEC

0 tuxcare-rhel7-els unbound-1.6.6-5.el7_8.tuxcare.els3.x86_64.rpm 210262c7fc4806a089917de2219577157e18eb3e642b630c957500d57cd0b644 unbound-devel-1.6.6-5.el7_8.tuxcare.els3.i686.rpm 2bc8c04c5f1e07f8c2c6028c13bffd68fbce3b4531dd1e0c867289986346b3ba unbound-devel-1.6.6-5.el7_8.tuxcare.els3.x86_64.rpm 50b08a865c1c065a2afa8db461258e048749939b9ac02a909f5cf589175bbec8 unbound-libs-1.6.6-5.el7_8.tuxcare.els3.i686.rpm 25199a797ed4da534a96042ce43e97c4e8d21d1b46d5599187573df8c4d26729 unbound-libs-1.6.6-5.el7_8.tuxcare.els3.x86_64.rpm c123a8e68f6ec2fe6957d1979c52e186afddae795502b191789c4569a84e6e3a unbound-python-1.6.6-5.el7_8.tuxcare.els3.x86_64.rpm 660dbce95f6d6637c5b4a10240784c6b894e4552d990e02120d9aed771138c55 CLSA-2025:1756231459 TuxCare License Agreement 0 - CVE-2025-0624: net: Fix OOB write in grub_net_search_config_file() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0624: net: Fix OOB write in grub_net_search_config_file()

0 tuxcare-rhel7-els grub2-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm 429e7b0d56f1712d66a82ffd6897102501edddb6a6d406ddd70ef2c6155b9be6 grub2-common-2.02-0.87.el7_9.14.tuxcare.els2.noarch.rpm 2bfa5cf02d45b76c66d5977d430cc088b3c8d29205c7af9da212d068a8a2f07e grub2-efi-ia32-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm 85e8eb2a997a52ad9fbd2cfcfadc745368db2b8cb8a46c593b8fb9061b96e20b grub2-efi-ia32-cdboot-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm 2ec34fc45500d43e0a04009a005a2bf5218ad05be848672813f5275d851e596c grub2-efi-ia32-modules-2.02-0.87.el7_9.14.tuxcare.els2.noarch.rpm 55cb850a2bc05f9223a9fc8fb807def1bd3d1bb153dfe5c020cf8f6cd3175691 grub2-efi-x64-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm c269fdfaa9bd5c909534e9550088ad4a3ab41aa50bb85f5099198fbeff9af70e grub2-efi-x64-cdboot-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm 7c7afd3338b4861ab19c52b640af4a846ae21104ae6f707ba2f05f5938610c33 grub2-efi-x64-modules-2.02-0.87.el7_9.14.tuxcare.els2.noarch.rpm 6c8dc93b00380e80ae65a48d848a9500270db7767fe078b797a54f173472794b grub2-pc-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm 102efa5b8ca9af12591935885f8e06494e13cc31349e157fb410b21163b56926 grub2-pc-modules-2.02-0.87.el7_9.14.tuxcare.els2.noarch.rpm f580daea60982cecafec9c57810dfb05b04a911eb1cc01d8ef0c6de41e11f2b5 grub2-tools-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm de46a1b729ad53831b2e6f28e1e53a1efb3ab6be42cad268a34458be8970c3da grub2-tools-extra-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm 2e9210c5a119fc23d5d42b5050eb25d3a070ea469a7e694c72140fdc5f8461ea grub2-tools-minimal-2.02-0.87.el7_9.14.tuxcare.els2.x86_64.rpm a15253a6437edfc690a9c85e25c5c0d7b0d031a34615026a693757d0acd8dc88 CLSA-2025:1756233744 TuxCare License Agreement 0 - Bump the release None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump the release

0 tuxcare-rhel7-els cpp-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 173fbd3ccefa6fdfd9862ea2498e8d12fd7e7e9c7009cb1e43664d628546d3d8 gcc-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm ed904448efb182333bb71594e4c8a138b1ad8c9077069bd7e474bc41f8d18e70 gcc-c++-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 45ff240b44d9ce49dc12c490e71540630a912c8e4b10d4ca072a05c5294b1843 gcc-gfortran-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm d74aaa97ca5c0db0a28d7ba18c427867f5c8798490802a385901c686340ec2a2 gcc-gnat-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 0189b831ed389222e00634145a926bdc1564ff379a630805a8533362f0125454 gcc-go-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm cfe9de785eaf5de3e7122998e5789156a825e73aae7684c070012ea2fb1c0524 gcc-objc++-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm fe36e2a3809bf61e51fd5ac87483fe2773e436f6d1e936579549bbf36a88a072 gcc-objc-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 226b5aba5ac7e2a5fc94be419950a678ca82cfd6d31db344c75d9c7bcbed2680 gcc-plugin-devel-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 92e9ffac42b959f63368a144712ad00dbfe0d0dc88aae3bcb4245c8ea4b4619d libasan-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm c18c6017e9aae76db494a1b1e97403d8a5793bcd0b5e6bf2f3b061c2de0b333f libasan-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm ed2116944315ff0d173e9d1b376ba4c30b96908c9e869191c06f99d2002992b4 libasan-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm d42cc9c81a28242d8ddc4f57f92a69288566a838933bb10c68605fbf66e9cc3d libasan-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 295f21ac72285f90569c9ee99d9e7cda8031493ace4a57fda56709952e817c09 libatomic-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 551401726e0a270347e324ac4711372e1dfdb89f5fe67b7d498fd9a6cd54facc libatomic-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 3d137fe037a202df88dbf0dcb08300516c8fd372a28a3539eedd2f3ba76d566c libatomic-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm f7492f6905cf41d2c5f9365c4b3572245c00b8b30813bf169562f6483b0aebd7 libatomic-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm d1de7b0ec804c5e0dcf9beaced9c2350460f1aa772e8eb9fe93f0c567d36c570 libgcc-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 048f46057ee4c36c9be8d44f9aca454ca0bda7679aa76e7d73b2b173dbd34c4a libgcc-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 9593ba23cf979252d02a92ef06c00accc1689392fc40f21861c1887b4f1b52c9 libgfortran-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm eded663b91a4d0f6a1e46a25d0c4223229d2cda8123fd546a61088d5b3a867d5 libgfortran-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm f4cfd607ed28fd0e8fae9dc308798a08a1cf45b4010a8509698e1503f387416f libgfortran-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 31aea94510441dbc20435dee4a79aefd1be7d60804dcb484439affc0245dbc09 libgfortran-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 35b6e02a8d8ee8059241aac556183d7df0f681eabf13efe52923508559ee0384 libgnat-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 8121e186798c5f667614f30fb51aeec44b1e5b348485ca691510849f8c8c895f libgnat-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm b07a42b01150743c640380893f095faf49efab71815154625039c0edef6d11f4 libgnat-devel-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 77bcf32e2a34d44669cc01966213997b2da35b55e92f139383a1831daaf071d7 libgnat-devel-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 43f95cb0e5b91f3aba6de2f05bab5c699eb16c7dc29c1640bc5f309fe2df7ea9 libgnat-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 197c1675ba27a7abdb6564b441bd52677506b5706d56f380c2c1bf99f9f8fcd3 libgnat-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 30ebdb4514832586e745f87116bd5c623f2ec62795187d61e943347ee6fc4321 libgo-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 99f12826a5677d1b3649198f1eb15afe1f0bede616c903321db6528ad9960471 libgo-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm d01b329e672d3f95374f14ba2ce7513505cfbc0633f7d831dda7c90ff693082e libgo-devel-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 959a8e51c9aa01f2fc209717c5699a4145722a998a209523dd6e0f65e5242961 libgo-devel-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm d8ecb3bb4389d6fbae622cde92ed8b4f751acf6045d532a45363b1d40342a7e5 libgo-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm bad31ec41a7cfdad799b8c2317baef272aaf9a9b8b42861c156b8402c803b511 libgo-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 2591249ead934a395ced8b8434ceb946986d0367e9891493045969d29f2921e0 libgomp-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm f911241b4b323f73fb9d18f9356b010c5ea719197104b3dc11121dc10acbace6 libgomp-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 4b446bf9b6bf10fcb28f0dbdb5ebcf218a13d7a3b92867db7e3c984ea558f322 libitm-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm d4dfb468f0444653d278ff42567e9aedfcf76dfb44bc9f0940e00384821f2dfe libitm-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm a18252205531d9ef82a4e8adbe238479f50410f73802f1c6c2f1cc6d8ed08377 libitm-devel-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 8e7657e23f325757f4cede81b45b88cb562c0c277e8260354f682357b413199e libitm-devel-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 365256f6f6d33360375bec6837786578def06919c1b9c97ac8888fd7dba15d8f libitm-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 1307776880ae6dba6b5b6185dc93f0dd05f1b93eda0a4cc06ed23001825cc623 libitm-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 94367919c1a39f3d64b8b4201d5cc8bd3fd75ec0d057d858e26bf33fdc16fc42 libmudflap-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm b451e8c3d13ae8686e904fdcfa68a9cbd91637e87985ce1ad096fe56358732b7 libmudflap-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm ba41035440323da2367398c74a3df1157f60ccfd2282d2b827cf5152faa76d7f libmudflap-devel-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm d2ae40392880781fdfe522ab4fa5cdaf2a9e2ba3e5f4aad2bb1af35afce97024 libmudflap-devel-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm cc556e0aaf55b1cd1a53a67754515d64fce9f66282760d796331c6aac84dd77d libmudflap-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm b8da73c4e50c09b304998b53fd7ff50c345d6f9f1bb7844f4d015101fa9b4b17 libmudflap-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 5e517972c594bb9d8a197af0ec780b3f5ce1cc03610bae5f68af6242e4a4b850 libobjc-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm ce3367368115eddb3d22f7421dbd8e41f9df7e80cde45ea8875e9e3b5d09fede libobjc-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 83f1a208fac15791b9a68f2e8cba523fe4e3a788f28f70579e5d0f7d5cb6c8d8 libquadmath-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 558b4ed946a99c55132079eb986320f8f6bb02b93afc60b45e6448f6a95e07ba libquadmath-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 43c3f64556bc5b395b7042899c959d6503085d379b9f29080a9711d211eb6c7d libquadmath-devel-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 235b1879e2e263807e7494d4dafd6886c3eb72e23ff3abd5413f0ef7f8ed8368 libquadmath-devel-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 082409358952d64b4b93988f615617ced82285dfb520fb94b0296b8a12dbd935 libquadmath-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 5fecc9e64da4993aa90637a3070ff2a3b528a8713e348430eebb91ffdfdfb33e libquadmath-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 47776e2cb9049646e038b6bc8c4a3a562e0cba57aa1efa6ed8e961e7c247fd11 libstdc++-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 7cc820e7db4888577bebbd4640a3bba9bbf9aec55aa28abebd00021b3b573c3f libstdc++-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 2ac1702fc72ae2405b3ca53dac3a9c8666aa0d5d19285150de8f8cce43e0656e libstdc++-devel-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 6500b2bfd4d817bf238e3a198b4b730d4d8a56f63f144a2c7dfe33fb769ddfd4 libstdc++-devel-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 98ca3700d907ecb4e738cb65b4e38736a113a1856d64ba262d848f805bef500e libstdc++-docs-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 8db50dc724c662603c75e904c4e179c31d68fed7da92c7694c3a1e76984df98e libstdc++-static-4.8.5-45.0.3.el7.tuxcare.els1.i686.rpm 549476297c52adf7cf3869fb17eab2bdebc2bd3d9370f11da078c2125e53645e libstdc++-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 3e4e1b61d8283f974f4c415a3a7af42c5e4e423514522c5d0a20e0ad62f82ba9 libtsan-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 2998b5ee6fe139fea986119ab43b9f15dddd50d423f844b37c7da1c3c9b8515a libtsan-static-4.8.5-45.0.3.el7.tuxcare.els1.x86_64.rpm 98e238a22da87c59b19eb1600090a891b2d17cdbcdb4eab9a56c037f20fcd762 CLSA-2025:1756323821 TuxCare License Agreement 0 - CVE-2025-1736: fix incorrect validation of CRLF in http headers Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1736: fix incorrect validation of CRLF in http headers

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els13.x86_64.rpm c746e53173532ddf8c83c885bd6b0ba4d427eed088318c7c4b4c4e4ad8c4afa0 php-bcmath-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 00e03de70c679529126469d5530b064d144dfefbc06030648d18561ba5f74f29 php-cli-5.4.16-48.el7.tuxcare.els13.x86_64.rpm f8f417914c1547e44dff761b644b6335ff0e5accd35a828691e379c81470093a php-common-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 51b5b8f9b4ace10ed144a62e4bcf71e42e8b3f0b34e0b68246e61894d53b9e31 php-dba-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 6dc358c919c7992ea6c92c230d5b1a086e5920eaaaa99f7bf7beffa173c25967 php-devel-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 284582ec90084df5d211e95218a615096aef1809d3a6ea208531cad07bd843dc php-embedded-5.4.16-48.el7.tuxcare.els13.x86_64.rpm c8985e385caeac22c8ec3457892216f20f742532f8fd1fdee936054d7639d9b0 php-enchant-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 9f8e5821d3113048c2b76cd6f1c8437754989cb1ddcd92c6856d8d5a813cb164 php-fpm-5.4.16-48.el7.tuxcare.els13.x86_64.rpm a90ec0a4609a7a3fe7bf649b61df35fdf404c82517168f640018532f703cb231 php-gd-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 00e555cdbe2fad0bec946e3ece7d2751d06440f0ae5da8351d487c431e2c75a2 php-intl-5.4.16-48.el7.tuxcare.els13.x86_64.rpm d37da7652ba72af9acbd568f2f1d4ca5c9bbe7ac8966a756bd7266e4434aeeb4 php-ldap-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 3aff3ed99401b33521021723e996648d9439e9d61d1304f3465145e8c1213ce6 php-mbstring-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 43892912028377a5f89736244dfbbd89f130011dda8e3ac8e5124ab002a9f624 php-mysql-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 30ea45947098230654cab6bbdba822fea7911e75a654f0bfcfa00747f6a14162 php-mysqlnd-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 027be81d038805805337e5b0c0e7f3a5aa1675ee303dc3f347b94a0e8ff74174 php-odbc-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 51b79b85b514c9dc9c641bc874038e2ae38d31e6182b3622829d7d4841def547 php-pdo-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 2f3ff355a2cf33a8f8580640126ce91efd066bf8e3f23edcd2de66ae9e4c8e53 php-pgsql-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 333bcb76a833f45c80348989b5706d2469cad5d0cc14206c4fbcebaad0d27f51 php-process-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 92af23e8c4275088e83153c58e6e513d970e75095f4c13df5015a5bcc433d797 php-pspell-5.4.16-48.el7.tuxcare.els13.x86_64.rpm af648852204effc4234c836900bd674a8c9f36cb58cebb896f611e8683f6d9ef php-recode-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 4012e6625e5855795f0618fe62dc4199e7a380304ac0b60d2e276800e6eda1cf php-snmp-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 8132d75f42c4f0597b050d60f720caadd59403070ccfd478f708071a9d05823d php-soap-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 5bae0658d4a1abbc2dc2b92877f8f0b38c072984c369ee57dab04b00f297df64 php-xml-5.4.16-48.el7.tuxcare.els13.x86_64.rpm 24c99aed7f6a4479ef515f6ad43fe9fde516ef83f346e766c27c83806ff58dd7 php-xmlrpc-5.4.16-48.el7.tuxcare.els13.x86_64.rpm ef825d864ef2ec9218062d624c9bc01d437f1b4abb0ff91782453a8fc5e7bed7 CLSA-2025:1756408410 TuxCare License Agreement 0 - CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText() - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey() - CVE-2025-26598: Xi: Fix barrier device search - CVE-2025-26599: always initialize the border clip in compAllocPixmap() - CVE-2025-26600: dix: Dequeue pending events on frozen device on removal - CVE-2025-26601: postpone actual changes in SyncChangeAlarmAttributes() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-26594: refuse to free the root cursor and keep its ref - CVE-2025-26595: fix buffer overflow in XkbVModMaskText() - CVE-2025-26596: xkb: fix computation of XkbSizeKeySyms - CVE-2025-26597: xkb: fix buffer overflow in XkbChangeTypesOfKey() - CVE-2025-26598: Xi: Fix barrier device search - CVE-2025-26599: always initialize the border clip in compAllocPixmap() - CVE-2025-26600: dix: Dequeue pending events on frozen device on removal - CVE-2025-26601: postpone actual changes in SyncChangeAlarmAttributes()

0 tuxcare-rhel7-els xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm 01489236ed2a9309f72334b49844669d7fa8bdff94ef2c4f17621c594fb5b470 xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm bcea2c9e926e4fe697d561bb6124fd9712afafc5e64ff5d82ab53f904f05959a xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm ebd7fd5ca9f6294c11090180038ed2d3ad6e095e9ba5ee0668b25c119bfe85e1 xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm 4fbb79d5ec7a80f024f2a72ba26f2ea7c3b489744beaa437a9866935facb0984 xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm 0514046b7c404868ebc78508bb595ad7e12e9698eaa29346ff1227359e64c078 xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm b87497feaacc1daccfdfaf2139bbf3074dcabda134c3011d2e8b4653c5a66e0f xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm 4c3d2d8648f7bd635df2d5ac341efe89213ab7a7770095dfd4dfc2dece0dab76 xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els1.i686.rpm 16a184bf86c4be04d843dffbb8d122c6b8dd1865a13609b1e5361baeff3874ee xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els1.x86_64.rpm 72f37fc74c7fcdd1ca5776932a9550ecce5b9029ea9bdbd21058f5fba8d33e1e xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els1.noarch.rpm a73196918f73e6f81ce03e813a33cbbaf216cb3a7565802b7ef704f75293f770 CLSA-2025:1756751473 TuxCare License Agreement 0 - CVE-2023-46846: fix Request/Response chunk smuggling in HTTP/1.1 and ICAP Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-46846: fix Request/Response chunk smuggling in HTTP/1.1 and ICAP

0 tuxcare-rhel7-els squid-3.5.20-17.0.5.el7_9.13.tuxcare.els1.x86_64.rpm 2f61849536da6672ee4b7c3999fa698a32f311e8e470dc103cf9d06ba58d4681 squid-migration-script-3.5.20-17.0.5.el7_9.13.tuxcare.els1.x86_64.rpm b9530480916ed2f99b43f21a825064e3c9df6677e30edce3816d5a4ab1ebf4b1 squid-sysvinit-3.5.20-17.0.5.el7_9.13.tuxcare.els1.x86_64.rpm 68c9340c82ca00f6d93c98652d0613bdecec6415f4a3df85cabfc4179a2f3797 CLSA-2025:1757010850 TuxCare License Agreement 0 - CVE-2025-54574: fix heap buffer overflow in URN parsing Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-54574: fix heap buffer overflow in URN parsing

0 tuxcare-rhel7-els squid-3.5.20-17.0.5.el7_9.13.tuxcare.els2.x86_64.rpm 69499f8c7279fcb1c59cf82e68643ab4dab3d420ede8fcbf46e6a4aaf1e2dbeb squid-migration-script-3.5.20-17.0.5.el7_9.13.tuxcare.els2.x86_64.rpm 0b7100c56549e2039f725aa3e0204466f8cfb92e9ef40531d0b589e575440bf8 squid-sysvinit-3.5.20-17.0.5.el7_9.13.tuxcare.els2.x86_64.rpm df409d78eff70409b98092a17b88430e0edcbf32ed63ea4a920e459019d5e3c5 CLSA-2025:1757246101 TuxCare License Agreement 0 - CVE-2016-9840: fix undefined behavior in inftrees.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-9840: fix undefined behavior in inftrees.c

0 tuxcare-rhel7-els minizip-1.2.7-21.el7_9.tuxcare.els2.i686.rpm 232863b43a7760f093dd3d4dbd8a4cb9b005ef2a47335c49c8eb7a3d5e934894 minizip-1.2.7-21.el7_9.tuxcare.els2.x86_64.rpm ef551f1219bfb71cff4e1f81c957229b6d17fa2a5d113e5a955f686c76d55046 minizip-devel-1.2.7-21.el7_9.tuxcare.els2.i686.rpm 32f0aed9790e8131870642f9c0aaf0ebaac4cff02aaefa6e156a5f56e72d3a9b minizip-devel-1.2.7-21.el7_9.tuxcare.els2.x86_64.rpm d0aae0135f0cc1c378cdf5989d6946a95d485daacdefcbbc506f233689265656 zlib-1.2.7-21.el7_9.tuxcare.els2.i686.rpm d705b8a5b4fb08f04d5f3f140d95fd15fd8f7dd620380e4161456fbba6e8f81d zlib-1.2.7-21.el7_9.tuxcare.els2.x86_64.rpm 3651601d6a47b84bd58aa32f0942949133c37f611e757565c77052021485c524 zlib-devel-1.2.7-21.el7_9.tuxcare.els2.i686.rpm ab831472a85bb65276dffccf4d20129c13f9e4b7e41bd09131fb078375e8d98e zlib-devel-1.2.7-21.el7_9.tuxcare.els2.x86_64.rpm 21e09dfb6dbf280295d2d09fec5b7049db05dadf886c95f6768b67b63148a513 zlib-static-1.2.7-21.el7_9.tuxcare.els2.i686.rpm c13f444c54fa882887bc9ff4ad4fd324d833843f6b6298c096d0c1ffe27cc723 zlib-static-1.2.7-21.el7_9.tuxcare.els2.x86_64.rpm 0f92c516ff5c5607dfe95a37bef7368a0e2552b745e49ffd0621571751940fbc CLSA-2025:1757409276 TuxCare License Agreement 0 - CVE-2014-9474: Fix of a buffer overflow due to incorrect GMP documentation for mpn_set_str Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2014-9474: Fix of a buffer overflow due to incorrect GMP documentation for mpn_set_str

0 tuxcare-rhel7-els mpfr-3.1.1-4.el7.tuxcare.els1.i686.rpm 28a0fa812701032c676657d0b1a96261631c9a95e9d56c7f1cb666c66b64ba32 mpfr-3.1.1-4.el7.tuxcare.els1.x86_64.rpm a521250a2fb7bd126f3b90be2f9af2221b3c792fd18ac44b3c3703ec9a897acc mpfr-devel-3.1.1-4.el7.tuxcare.els1.i686.rpm 49685b52d1225371fcc4749a9958d300c6830a2d291db9b0d0d96a7047ba88c2 mpfr-devel-3.1.1-4.el7.tuxcare.els1.x86_64.rpm 82820558837760559be9783d5f46c84eb30bcba059e48fd7006d6cd113caa259 CLSA-2025:1757413554 TuxCare License Agreement 0 - CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-7425: fix heap-use-after-free in xmlFreeID caused by 'atype' corruption - CVE-2025-6021: fix integer overflows in buffer size calculations

0 tuxcare-rhel7-els libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm e6c8302b1f9c7367f70b19d065265d1429e980e6c9ed49cac6af7693be68f29e libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm 3233501a4c46f7bc126ef99eb925217ef0082b6f81499940c4374c830ad81556 libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm e9725f3b53e88c1f6c174d0eb49ebda8784e93f79bd01b97b679e42f807ea6c1 libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm b8bd9b1cd590ddca334898a30d13bf6c248a0e18e3de8d51510b7cc178db1bd9 libxml2-python-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm ea943904cc8be62cfa802d90f8d45e874f44c91cf66bb6af20f6569427a5556a libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els7.i686.rpm eed511eb5ddb220134cf02988150b0c156f7666fa5662e75bd9963601821aefa libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els7.x86_64.rpm 40b6a9f6a45374e55d540e2f872bc404672f52269dc8e93676dd5ccf3348306b CLSA-2025:1757499160 TuxCare License Agreement 0 - CVE-2025-49180: fix integer overflow in the RandR extension affecting the RRChangeProviderProperty function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49180: fix integer overflow in the RandR extension affecting the RRChangeProviderProperty function

0 tuxcare-rhel7-els xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 5918bd4875186f8a2c0bbe5b6e7ff6330e217f750bdcf94b97fb5f69102f283d xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 346e38a6ee344626a5ce126479d53c2cc7bc827a807877c800c7e71b80182006 xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm dc1ba7dc244c6837559924c02b7695020b69cf841d0d08f1f33032794602b1fa xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 8122e6db5f71c8ccec3c8d2a19232998052843ce721bac5bef1bdf2ceb9e5703 xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 82f7ac0ef1fffacfde658d1b99ddbbacf9084648b52ba56b9e7af3997adf2da1 xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 2d64233a52b8197145b68a6b7180c0a9511a781a61296c98204223a63c909400 xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm e76c6410f16333cca8ee22b1751e2510722d5d3a2fe8d18f20689fbfd7f1b5fa xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els4.i686.rpm 64bef251bd53b96ecd25172254c94d702f3481bfb7053cc6dbb0607430808d5f xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 0bc2a96e6b15318a2c7ade8a42a1c6588f96ac1933a8eba6a087ca5897492067 xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els4.noarch.rpm 21f5b766f57564a53ff4bbc582e30eccd5250f202f43d2ff67b8b15e94cf9620 CLSA-2025:1757574151 TuxCare License Agreement 0 - CVE-2025-6020: fix potential privilege escalation in pam_namspace Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6020: fix potential privilege escalation in pam_namspace

0 tuxcare-rhel7-els pam-1.1.8-23.0.1.el7.tuxcare.els2.i686.rpm 6fde53d80a9d58a41377aef5bac34108781c2c66e9b2d975429af786e8e5c5b9 pam-1.1.8-23.0.1.el7.tuxcare.els2.x86_64.rpm 72e64fa784d0db46bb4a41d1b300adc88e3bed9b37fb07b993a33f7ee51310fd pam-devel-1.1.8-23.0.1.el7.tuxcare.els2.i686.rpm 195517cbd0fe02ee289df0de868034d13352c8fd43a61f90d18961a61132898c pam-devel-1.1.8-23.0.1.el7.tuxcare.els2.x86_64.rpm 92d3104eea081f22f3e23dfaac12fa210aaa7fda3a252a35b6edfba4543e8656 CLSA-2025:1757662405 TuxCare License Agreement 0 - CVE-2025-49178: fix request handling flaw causing potential denial of service Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49178: fix request handling flaw causing potential denial of service

0 tuxcare-rhel7-els xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els6.x86_64.rpm 4577c7199254afdd856417642f94daf1165dc2ea1f99120464951cbdca777974 xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els6.x86_64.rpm 8d0493af965ce82e3836d3352c782eef072834a983ba01f5a57f0f45b76c517d xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els6.x86_64.rpm 42e41fcd3895772a282e67c19be6651ddc6a4ea7a016ef13ad5342df609f95f6 xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els6.x86_64.rpm b828f6367762b2b14b61961c49e9cb642260e5b5e3dce437f5d11198c047c92b xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els6.x86_64.rpm c1b55725c1e6486ff70a5c2c088ca26b3e1f8c77d6f057db28565aab56345466 xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els6.x86_64.rpm 23aa3ab0b24bd9cb3f0de96d014678fc5964ece2d6cffa18486ff1ec4fefd0a3 xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els6.x86_64.rpm 5f682770e37af94ea1d7236a882a3a01acfc2e35c68db3bdbb580869127e6d32 xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els6.i686.rpm aae9e4f3472988df5984f29a8ae50415f0dd8e52b4fa255a5f05923d6ad1463b xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els6.x86_64.rpm 50be146e409cce95e485e65aaa44eaa285a7cd5c8212cd711ee683472391efdc xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els6.noarch.rpm ba1af8bc1ef51636409a399857cc2c56b3ede5443391149e44582d0bf8a55afa CLSA-2025:1757662580 TuxCare License Agreement 0 - Update Intel CPU microcode to 20250812: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa000100; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003d0; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x123; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000410; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002e0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x25; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000362; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002b3; Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update Intel CPU microcode to 20250812: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Addition of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) at revision 0xa000100; - Addition of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) at revision 0x10003d0; - Addition of cpuid:B0650/0x80 (ARL-U A1) microcode (in microcode.dat) at revision 0xa; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Addition of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) at revision 0x123; - Addition of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C0664/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06A2/0x82 microcode (in microcode.dat) at revision 0x119; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c0003e0; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000620; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x38; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x436; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12c; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4124; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Update of cpuid:50657/0xbf (CLX-SP/W/X B1/L1) microcode (in microcode.dat) from revision 0x5003707 up to 0x5003901; - Update of cpuid:5065B/0xbf (CPX-SP A1) microcode (in microcode.dat) from revision 0x7002904 up to 0x7002b01; - Update of cpuid:606A6/0x87 (ICX-SP D0) microcode (in microcode.dat) from revision 0xd0003f5 up to 0xd000410; - Update of cpuid:606C1/0x10 (ICL-D B0) microcode (in microcode.dat) from revision 0x10002c0 up to 0x10002e0; - Update of cpuid:706A8/0x01 (GLK-R R0) microcode (in microcode.dat) from revision 0x24 up to 0x26; - Update of cpuid:706E5/0x80 (ICL-U/Y D1) microcode (in microcode.dat) from revision 0xc6 up to 0xca; - Update of cpuid:806C1/0x80 (TGL-UP3/UP4 B1) microcode (in microcode.dat) from revision 0xb8 up to 0xbc; - Update of cpuid:806C2/0xc2 (TGL-R C0) microcode (in microcode.dat) from revision 0x38 up to 0x3c; - Update of cpuid:806D1/0xc2 (TGL-H R0) microcode (in microcode.dat) from revision 0x52 up to 0x56; - Update of cpuid:806EC/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c0003e0 up to 0x2c000401; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000620 up to 0x2b000643; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0x9 up to 0xa; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x436 up to 0x437; - Update of cpuid:906ED/0x22 (CFL-H/S/Xeon E R0) microcode (in microcode.dat) from revision 0x102 up to 0x104; - Update of cpuid:A0652/0x20 (CML-H R1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0653/0x22 (CML-S 6+2 G1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0655/0x22 (CML-S 10+2 Q0) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0660/0x80 (CML-U 6+2 A0) microcode (in microcode.dat) from revision 0xfe up to 0x102; - Update of cpuid:A0661/0x80 (CML-U 6+2 v2 K1) microcode (in microcode.dat) from revision 0xfc up to 0x100; - Update of cpuid:A0671/0x02 (RKL-S B0) microcode (in microcode.dat) from revision 0x63 up to 0x64; - Update of cpuid:A06A4/0xe6 (MTL-H/U C0) microcode (in microcode.dat) from revision 0x20 up to 0x25; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000330 up to 0x3000362; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12c up to 0x12f; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4124 up to 0x4129; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1c up to 0x1d; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x38 up to 0x3a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x21000291 up to 0x210002b3;

0 tuxcare-rhel7-els microcode_ctl-2.1-73.25.el7_9.tuxcare.els1.x86_64.rpm 152c1ff16e8314b942a921a9eea420c6542f24359334370b46e1fdf5a561d1b7 CLSA-2025:1757662747 TuxCare License Agreement 0 - CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdk_pixbuf__jpeg_image_load_increment() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdk_pixbuf__jpeg_image_load_increment()

0 tuxcare-rhel7-els gdk-pixbuf2-2.36.12-3.el7.tuxcare.els1.i686.rpm ffe3f5d0a221393576c5c8009300a00e3a8f71cd1efa98ee0002e5fdc48f11c8 gdk-pixbuf2-2.36.12-3.el7.tuxcare.els1.x86_64.rpm 9eefcda8ac9723bf5ff7b537bb6f08fe9e6fc8cc33f75b4a9d308f88adb45e42 gdk-pixbuf2-devel-2.36.12-3.el7.tuxcare.els1.i686.rpm 3bed593db5e0ea15e2bccf0b663922779b99b158a254ed94c4d0c0356c6be4c4 gdk-pixbuf2-devel-2.36.12-3.el7.tuxcare.els1.x86_64.rpm ac23b2130bb07541aaf839fc84b757569bfbc2146a066f4450730eb643084ff9 gdk-pixbuf2-tests-2.36.12-3.el7.tuxcare.els1.x86_64.rpm 8f721e64aec2ebc2c724cfa51435b82950be342831be8d22e5d0b68dd14318c9 CLSA-2025:1757690477 TuxCare License Agreement 0 - CVE-2025-4802: prevent untrusted LD_LIBRARY_PATH from loading dynamically shared libraries in statically compiled binaries that call dlopen Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4802: prevent untrusted LD_LIBRARY_PATH from loading dynamically shared libraries in statically compiled binaries that call dlopen

0 tuxcare-rhel7-els glibc-2.17-326.el7_9.99.tuxcare.els1.i686.rpm 299fda485885ce321db133bcc1a12a20f5a3ce2d5c1bb214139eb8f580d9eb02 glibc-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm 8bc2baa7bddd0ed0ef21516b7227eee99b8744e1e73f25d46cad7569e51b06d5 glibc-common-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm bd4c5728341ecec876e5038b0e73c571969ff6e69214bd6422cb2256631b22d2 glibc-devel-2.17-326.el7_9.99.tuxcare.els1.i686.rpm 8f1e6daf78e067c06dc27510fb8d2c92c34532a1badfcc25a356b43bc2328b2b glibc-devel-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm c1aa8b0b86e667f70214dccafcc06de22b052b33d338bbda3a57f14245f20a3d glibc-headers-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm 8d38261532bca8906efe36c845d739284f10d942159b6abd449d4719ff4d02c4 glibc-static-2.17-326.el7_9.99.tuxcare.els1.i686.rpm 90ad769650bb1d420d610bd286c7dfeeca6b4f7359879d5101df201e7c39c845 glibc-static-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm 52463f218f08cbb3dc433d3fd82862c565a83e998cb45d4773e696de261999fc glibc-utils-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm 8ee8cd6a31b25a0a852b6400c3344e32de0cf9f52e125131edba6979f269a3dc nscd-2.17-326.el7_9.99.tuxcare.els1.x86_64.rpm 4730db6e75a47b2d663115e81b690c7ec64cb2a3bc29752f50ad0794df6bb1d4 CLSA-2025:1757693980 TuxCare License Agreement 0 - x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110} - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919} - aio: mark AIO pseudo-fs noexec {CVE-2016-10044} - cifs: potential buffer overflow in handling symlinks {CVE-2022-49058} - NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232} - nfsd: register pernet ops last, unregister first {CVE-2025-38232} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - net: atm: add lec_mutex {CVE-2025-38180} - SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174} - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399} - scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - drivers:md:fix a potential use-after-free bug {CVE-2022-50022} - ext4: avoid resizing to a partial cluster size {CVE-2022-50020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - dlm: fix plock invalid read {CVE-2022-49407} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495} - ext4: Fix possible corruption when moving a directory {CVE-2023-53137} - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305} - ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229} - dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - md-raid10: fix KASAN warning {CVE-2022-50211} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386} - media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- x86/kvm: Disable kvmclock on all CPUs on shutdown {CVE-2021-47110} - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352} - cifs: fix double free race when mount fails in cifs_get_root() {CVE-2022-48919} - aio: mark AIO pseudo-fs noexec {CVE-2016-10044} - cifs: potential buffer overflow in handling symlinks {CVE-2022-49058} - NFSD: fix race between nfsd registration and exports_proc {CVE-2025-38232} - nfsd: register pernet ops last, unregister first {CVE-2025-38232} - do_change_type(): refuse to operate on unmounted/not ours mounts {CVE-2025-38498} - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180} - net: atm: add lec_mutex {CVE-2025-38180} - SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174} - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() {CVE-2025-38399} - scsi: target: Fix crash during SPEC_I_PT handling {CVE-2025-38399} - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085} - drivers:md:fix a potential use-after-free bug {CVE-2022-50022} - ext4: avoid resizing to a partial cluster size {CVE-2022-50020} - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928} - net/sched: Abort __tc_modify_qdisc if parent class does not exist {CVE-2025-38457} - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788} - dlm: fix plock invalid read {CVE-2022-49407} - net: usb: smsc75xx: Limit packet length to skb->len {CVE-2023-53125} - scsi: libfc: Fix use after free in fc_exch_abts_resp() {CVE-2022-49114} - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38495} - ext4: Fix possible corruption when moving a directory {CVE-2023-53137} - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} - sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177} - ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305} - ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50229} - dm ioctl: prevent potential spectre v1 gadget {CVE-2022-49122} - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823} - md-raid10: fix KASAN warning {CVE-2022-50211} - scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332} - ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386} - media: cxusb: no longer judge rbuf when the write fails {CVE-2025-38229} - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} - ext4: fix off-by-one error in do_split {CVE-2025-23150} - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init {CVE-2025-37878} - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000} - i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm ca8c30363f0eb3455fb004bc0750a6a2c0f3f2d25ad7aed7201d1dbc34576fff kernel-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm 280b89c4a0f9758f2157b1b6365d649691ffdc9473747d1109fd49025fc26e21 kernel-debug-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm 17818bc2aa3775e6ed595eed722b4a60dafc6f324b27880856808fcdc5a74ee4 kernel-debug-devel-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm 005927f40da8a7ad27eed445ea7bf0d29e74227bc30203553f9fd624bdcf9fea kernel-devel-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm 957419bae847d382aa1f8ef25a0f21741c90e15c1fd7d8a292f8ad4377d40492 kernel-headers-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm 31284fd321da6925413726b3478ddd5063b399f98a2fec77cf304817ddd11e8b kernel-tools-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm 0b05d46fe5db2a958abbc3a0423768948aea091289d84dfd368c3de6f1cb87f4 kernel-tools-libs-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm b623ed43f45406648bcb774197ddd10a54d904cf453ff8352255b38f24100fcd kernel-tools-libs-devel-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm 3c78b5dffcbe4d8639df603a3390faad1f4e2385cf47ee34fa8f946a6a62515c perf-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm bf98461a6cab328cf7bd512f9e0734e76d83ce1dc0f8d445cbf6c5751c06a630 python-perf-3.10.0-1160.136.1.el7.tuxcare.els24.x86_64.rpm 2410cb129d8725eccbebee1bba46f1e14b390b7a8f02be72e9101f4ba2b61634 CLSA-2025:1757698482 TuxCare License Agreement 0 - Bump release to override the rhel els Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump release to override the rhel els

0 tuxcare-rhel7-els squid-3.5.20-17.0.5.el7_9.99.tuxcare.els1.x86_64.rpm 4cc9252264a52fd5caf41356f8bb7f50f9e64991f959a72df88a5863d74f3c89 squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els1.x86_64.rpm 6aaf4ba3a588425ee23f41798cd163302e9d2826512de6a8e05b63261c68c806 squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els1.x86_64.rpm 51abc0fd6bd7cb9090698cd112a3f7d71041f81abcf4bd07b72b64ed05e3e8e1 CLSA-2025:1757922878 TuxCare License Agreement 0 - net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent {CVE-2025-38350} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350} - sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000} - sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932} - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798} - sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350} - sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350} - sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm 6df80d4cd764b089eeac1d1d4fc7fbbb2433322fa79cd0267ec220bbd4429211 kernel-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm 9ba472427fbdaa6b81bb37e25c7e4e632d22f7bd6db4bf73a17b101ab84032a0 kernel-debug-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm 5639b925667ae4d01e2d037874a71de642b26f370d6481dd4c7e8e176809bece kernel-debug-devel-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm 2e98e5e6de6a26180ecddd7cbcfb4387014c7a56dc9e13c108b09a0860030124 kernel-devel-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm aafc76f48be70d6f364a5865c722e51bc29ca0275b369a1c57616902a5ec5830 kernel-headers-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm 3cc404960e057c067cdc0ff643949ae4a3fc63c5dc5690b5f9b8a449110c1660 kernel-tools-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm f8f535b943e08faafdfbe1ebdcc6a38b7871c92d7c61060260f54957354d121d kernel-tools-libs-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm 1688d9e914b10b102ef21341ab16095b11c946b877d719890708b46cc146b73c kernel-tools-libs-devel-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm 41e3370b47c8b380f68436725bd91a65de797b0a8613e84c2a29984b18f9cad7 perf-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm d624d74df3afaa0f5af1c04175bc9b4f54ba2275932b56b5213f5b463a4bf061 python-perf-3.10.0-1160.137.1.el7.tuxcare.els24.x86_64.rpm a81dde906ec21eb16402d87a2d7e7eb3df9ae79eb54d72a3526f9866ec0fe2c6 CLSA-2025:1757923104 TuxCare License Agreement 0 - CVE-2019-9169: fix heap-based buffer over-read in proceed_next_node function in posix/regexec.c Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-9169: fix heap-based buffer over-read in proceed_next_node function in posix/regexec.c

0 tuxcare-rhel7-els glibc-2.17-326.el7_9.99.tuxcare.els2.i686.rpm e3cd11781fb64b740798115dcb1772de2c1b6a5d535466703ec2b1a2ba00134c glibc-2.17-326.el7_9.99.tuxcare.els2.x86_64.rpm 8421905031677d23d1b523888189c0952399743d5765968f661285a2dd634eb6 glibc-common-2.17-326.el7_9.99.tuxcare.els2.x86_64.rpm 16adb63d6aef514c6936d437ce8422c2140701510fc988847dfc6e6f7cd3658a glibc-devel-2.17-326.el7_9.99.tuxcare.els2.i686.rpm 41878ec2f03dba9fe87c21a7c227e749d6cf2c599e1b126dd3205b5790069773 glibc-devel-2.17-326.el7_9.99.tuxcare.els2.x86_64.rpm 4fb0ebb5f2945bdcb64ec03d8f60764efb6a464f3d84561b328e0748ace92857 glibc-headers-2.17-326.el7_9.99.tuxcare.els2.x86_64.rpm 56bd4e2f7d48764b58a0310df3cbacb56a5e4acfdb440697cb09d4c962824974 glibc-static-2.17-326.el7_9.99.tuxcare.els2.i686.rpm ce7b5c126c0e595dc388bdbe832e416e8e7fe5c6c2a4acccb8be47838a9ea952 glibc-static-2.17-326.el7_9.99.tuxcare.els2.x86_64.rpm e0458148c0dde724a736a70d6b7d22836d8cd934f544e9ea1143355523313b7d glibc-utils-2.17-326.el7_9.99.tuxcare.els2.x86_64.rpm a2b24ff7fa7cfaa766d63f28d41bc1503896a4c01b000d0f559e799bae63d81e nscd-2.17-326.el7_9.99.tuxcare.els2.x86_64.rpm dd8ec03da3a52e9350befd87570be6e5318e26026de7fcdf996adbc888ec4451 CLSA-2025:1757944976 TuxCare License Agreement 0 - CVE-2017-9224: fix out-of-bounds read of a stack in match_at function - CVE-2017-9226: fix out-of-bounds write or read of a heap in next_state_val function - CVE-2017-9227: fix out-of-bounds read of a stack in mbc_enc_len function Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2017-9224: fix out-of-bounds read of a stack in match_at function - CVE-2017-9226: fix out-of-bounds write or read of a heap in next_state_val function - CVE-2017-9227: fix out-of-bounds read of a stack in mbc_enc_len function

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 102e78f0bb2a850705c5a2c68100041b33e7fbcf1853ffd2517884a52f3860da php-bcmath-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 9c4db490f62e526b6cc3ca802862cac2302aeec5e6a254fd0628f07420f16549 php-cli-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 464d0276e699787caa9e92a42eb59bab9b504db97f90b484a1482ef633087fde php-common-5.4.16-48.el7.tuxcare.els14.x86_64.rpm d5b9c5e77c7c87fae18763a3cbf60a7a09cab5f4e6bd5188aa0aab86fa940b0d php-dba-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 91d18c58cd47234fcaff68c750e326259a4e766c67650862918069aac5633336 php-devel-5.4.16-48.el7.tuxcare.els14.x86_64.rpm f7e0693d56a1fed21d859069778063a344b67a71b3f489162360e12b63ad5a16 php-embedded-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 20bc8833cefea394f5cd5c30e0977c0cbcc7d9db01359ac9873df8008d86eada php-enchant-5.4.16-48.el7.tuxcare.els14.x86_64.rpm ba81d4dcc805dc7514653eb8e81f71d3257cfcc61735b131f0a731877fdfa920 php-fpm-5.4.16-48.el7.tuxcare.els14.x86_64.rpm bd06d055feb0803ace34325f74fdf30f2762df43d3fb7965c8409b99af7c95b0 php-gd-5.4.16-48.el7.tuxcare.els14.x86_64.rpm dae996a7fac77bc286df17b520ab69728e000e8a8b135a19574ee150c54d0617 php-intl-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 83055f1b5be88f6a7a4fac968cbe177b4691b05b1334ffc53fa0d7b81aa111cb php-ldap-5.4.16-48.el7.tuxcare.els14.x86_64.rpm b423c2d6b1c1b77e589f6ab5b643caf77f26e5d8acdc53f64b853d023bdcd909 php-mbstring-5.4.16-48.el7.tuxcare.els14.x86_64.rpm d778c0e563d1adece8fbaf0f5e8294c7b2346821ddebc538f087aabc22601742 php-mysql-5.4.16-48.el7.tuxcare.els14.x86_64.rpm b45abbae8a1faee33aeb63653eb415d94e7327d673a854f4c2d9243fe2494b27 php-mysqlnd-5.4.16-48.el7.tuxcare.els14.x86_64.rpm da753d61efd63bb52c86dd361ddffbf299687dcc180c19d8f18df7f766632a75 php-odbc-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 9bbb8bec3f61d2bba23f48d0f2981bef486ca590bf1b5aa943b7490309d02b7a php-pdo-5.4.16-48.el7.tuxcare.els14.x86_64.rpm fb638f11dec161261360e72cd2947b37aaaa904f01f0b1ecb657b7c13a872863 php-pgsql-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 4e62cea8f727106c060c629b4ba4b443897d0ba9cf23a809bd35fa7b70f81b61 php-process-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 84cc473d1f530a2045b58a73228285c9202f2efd5ab87cf8d7a4c0c6fa5a2a03 php-pspell-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 7cd8300a58cbdeff96952c64d4143e64d215071055668502a681ba4254444b83 php-recode-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 5e58d9fac438af313295317feda5474ed5396750434165b6658c57dffc55a78e php-snmp-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 64814f28ec91559e5eefb7e02a25d54b9465e720f1ea540d7710b4d0e3074183 php-soap-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 346aa8d0adfb3846f49664fd7db06fafc1de7af1b8dbfb5b1dd8b4040b860a39 php-xml-5.4.16-48.el7.tuxcare.els14.x86_64.rpm b2558b26b0bb33c4c7f361a21d80b08970c63d32008f407bffa1d1729bd49931 php-xmlrpc-5.4.16-48.el7.tuxcare.els14.x86_64.rpm 6a32398bd58b9b97ec3e8f54cf2c1092e50dd256ff697ad8705d9f3a76b22078 CLSA-2025:1757947030 TuxCare License Agreement 0 - Port side-channel silent functions from 3.4.1. Partially fix for CVE-2018-16869 - CVE-2018-16869: Add side-channel silent memory, math, PKCS1, RSA functions - Added tests for side-channel silent implementations Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Port side-channel silent functions from 3.4.1. Partially fix for CVE-2018-16869 - CVE-2018-16869: Add side-channel silent memory, math, PKCS1, RSA functions - Added tests for side-channel silent implementations

0 tuxcare-rhel7-els nettle-2.7.1-9.el7_9.tuxcare.els1.i686.rpm c6fc31f74cb8f69ea3d2bc5b58a965460d5c85b00c9976cfa7e3191e248d8830 nettle-2.7.1-9.el7_9.tuxcare.els1.x86_64.rpm 633003b0a93c376705063b1381ab1a0237b9483c6b31563c36556e1b80280bd0 nettle-devel-2.7.1-9.el7_9.tuxcare.els1.i686.rpm 961618b4f3b2cf840d6f8dd878b4417870657571dd6f473fb627e2a81d9b21d8 nettle-devel-2.7.1-9.el7_9.tuxcare.els1.x86_64.rpm 519d4feb6025b49fd07daf413c73557ce197515e58c49902524194310519551a CLSA-2025:1758022425 TuxCare License Agreement 0 - CVE-2025-32990: fix memory corruption in when parsing a template file Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32990: fix memory corruption in when parsing a template file

0 tuxcare-rhel7-els gnutls-3.3.29-9.el7_6.tuxcare.els2.i686.rpm 77d0dcee178a9a70c2659eb2390b76f9df616a0d316f11d7b46b2c7da3c49f2e gnutls-3.3.29-9.el7_6.tuxcare.els2.x86_64.rpm 22d9f23a9e1f02f8de3c61250d050117811c3f9b5a353fe046c14a19fc6b9192 gnutls-c++-3.3.29-9.el7_6.tuxcare.els2.i686.rpm cba3bb24cc2c9550e8e4daa7b07e0e5c701782472c42eeaa94cc3ff29a37ddb7 gnutls-c++-3.3.29-9.el7_6.tuxcare.els2.x86_64.rpm d42c054914a42a9c5844b1a2233a500e6aa22da22d442e20ce356e455d5b0890 gnutls-dane-3.3.29-9.el7_6.tuxcare.els2.i686.rpm f02185dd04931a92df8621ec4c021552dade8efb536093d96de41d65cd044470 gnutls-dane-3.3.29-9.el7_6.tuxcare.els2.x86_64.rpm a8baab5f46fe4e50963248889fd17c869e389922029c8cf7ac24e7ebab767720 gnutls-devel-3.3.29-9.el7_6.tuxcare.els2.i686.rpm 059629f7348023e68554ee07dea4af741be6d4667b89ed8313f6e2c65460e1f3 gnutls-devel-3.3.29-9.el7_6.tuxcare.els2.x86_64.rpm 793c3ca0c04f0e8043d0ca137fb7b28a16c7a1b7c6e9748bfdf71d724ba591de gnutls-utils-3.3.29-9.el7_6.tuxcare.els2.x86_64.rpm 4df35d7c597854bb824494f8124c0bd80e3d427f9f7069e166ddbd39b8acab0a CLSA-2025:1758031287 TuxCare License Agreement 0 - CVE-2024-47252: escape user-supplied data in mod_ssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-47252: escape user-supplied data in mod_ssl to prevent untrusted SSL/TLS clients from inserting escape characters into log files - CVE-2025-49812: remove support for TLS upgrade to prevent HTTP desynchronisation attack

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els6.x86_64.rpm 4565e4c0edd672a71fdebbbb2f77207b6338d0969b77ad97325a5b79b2edcfb8 httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els6.x86_64.rpm 918607e6bdeaa463a690493a5e989893637c419db4c3ac0edfc313f597be416b httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els6.noarch.rpm f4f2818391af51e67aa196ed8727c8870ac621d9c94ceb42aca59e4aaff80cf8 httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els6.x86_64.rpm 939702658a60415da964013835ca4d8aa728edfaf115fb8086e5de0efe0b0925 mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els6.x86_64.rpm 8dc11afbecdbfb9312c4d400c832dd6a0d69f9b4630ace471552f01842c77eef mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els6.x86_64.rpm 8229cddc38c3bc7829bbe4b2243353423c196e38ddecf03e3f3786a0dbeea1d1 mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els6.x86_64.rpm a25009e6240ed05e4e653bfb462fb6bc1c0609ef562505d30597b3d4a6e0f9b7 mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els6.x86_64.rpm f33e0925e7b5f0900964032ca3b36eb04f45ef869327a8126ebd1cf46eac38dc CLSA-2025:1756482270 TuxCare License Agreement 0 - spec: up spec/misc to 1160.136.1, spectre mitigation is off by default - hugetlb, mempolicy: fix the mbind hugetlb migration - net: atm: fix use after free in lec_send() - net: atlantic: fix aq_vec index out of range error - block: initialize flush request via blk_mq_rq_ctx_init() - ALSA: usb-audio: Fix a DMA to stack memory bug - namei: ->d_inode of a pinned dentry is stable only for positives - namei: results of d_is_negative() should be checked after dentry revalidation - namei: d_is_negative() should be checked before ->d_seq validation - VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk - scsi: smartpqi: Fix DMA direction for RAID requests - scsi: smartpqi: Fix duplicate device nodes for tape changers - VFS: Impose ordering on accesses of d_inode and d_flags - neighbour: fix data-races around n->output - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options - cipso: fix total option length computation - proc: Use new_inode not new_inode_pseudo - lockd: skip shutdown of rpc clients with outstanding notifications - SUNRPC: ECONNRESET might require a rebind - SUNRPC: ECONNREFUSED should cause a rebind - x86/fpu: Prevent FPU state corruption - x86, fpu: Introduce per-cpu in_kernel_fpu state - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA - x86/bugs: Fix BHI documentation {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry {CVE-2024-2201} - Documentation/hw-vuln: Document the interaction between IBRS and STIBP - x86/bugs: Add X86_FEATURE_RETPOLINE - x86/bugs: Extend VMware Retbleed workaround to Nehalem - gfs2: Fix length of holes reported at end-of-file - gfs2: Only do glock put in gfs2_create_inode for free inodes - gfs2: Fix use-after-free in gfs2_logd after withdraw - gfs2: fix use-after-free in trans_drain - gfs2: Clean up revokes on normal withdraws - GFS2: gfs2_free_extlen can return an extent that is too long - gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe - GFS2: Refactor gfs2_remove_from_journal - GFS2: Only set PageChecked for jdata pages - gfs2: keep bios separate for each journal - gfs2: Remove active journal side effect from gfs2_write_log_header - gfs2: clean_journal improperly set sd_log_flush_head - partial "GFS2: Introduce new gfs2_log_header_v2" - gfs2: change from write to read lock for sd_log_flush_lock in journal replay - GFS2: Reduce code redundancy writing log headers - gfs2: Grab glock reference sooner in gfs2_add_revoke - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - gfs2: Fix occasional glock use-after-free - gfs2: Make sure we don't miss any delayed withdraws - gfs2: Fix bad comment for trans_drain - gfs2: add some much needed cleanup for log flushes that fail - gfs2: fix trans slab error when withdraw occurs inside log_flush - gfs2: initialize transaction tr_ailX_lists earlier - GFS2: Remove extra "if" in gfs2_log_flush() - gfs2: fix use-after-free on transaction ail lists - gfs2: Trim the ordered write list in gfs2_ordered_write() - GFS2: Clean up releasepage - gfs2: Only set PageChecked if we have a transaction - gfs2: Fix case in which ail writes are done to jdata holes - gfs2: simplify gfs2_block_map - gfs2: Remove unused gfs2_iomap_alloc argument - netfilter: ipset: fix ip_set_list allocation failure - gfs2: Be more careful with the quota sync generation - gfs2: Get rid of some unnecessary quota locking - gfs2: Add some missing quota locking - gfs2: Fold qd_fish into gfs2_quota_sync - gfs2: quota need_sync cleanup - gfs2: Fix and clean up function do_qc - gfs2: Revert "Add quota_change type" - gfs2: Revert "ignore negated quota changes" - gfs2: qd_check_sync cleanups - gfs2: Check quota consistency on mount - gfs2: Minor gfs2_quota_init error path cleanup - gfs2: fix kernel BUG in gfs2_quota_cleanup - gfs2: Clean up quota.c:print_message - gfs2: Clean up gfs2_alloc_parms initializers - gfs2: Two quota=account mode fixes - gfs2: Remove useless assignment - gfs2: simplify slot_get - gfs2: Simplify qd2offset - gfs2: Remove quota allocation info from quota file - gfs2: use constant for array size - gfs2: Set qd_sync_gen in do_sync - gfs2: Remove useless err set - gfs2: Small gfs2_quota_lock cleanup - gfs2: move qdsb_put and reduce redundancy - gfs2: Don't try to sync non-changes - gfs2: Simplify function need_sync - gfs2: remove unneeded pg_oflow variable - gfs2: remove unneeded variable done - gfs2: pass sdp to gfs2_write_buf_to_page - gfs2: pass sdp in to gfs2_write_disk_quota - gfs2: Pass sdp to gfs2_adjust_quota - gfs2: remove dead code for quota writes - gfs2: Use qd_sbd more consequently - gfs2: replace 'found' with dedicated list iterator variable - gfs2: Some whitespace cleanups - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold - tcp: fix zero cwnd in tcp_cwnd_reduction - epoll: fix use-after-free in eventpoll_release_file - kernel.spec: run initramfs generation in %post (not only in %posttrans) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- spec: up spec/misc to 1160.136.1, spectre mitigation is off by default - hugetlb, mempolicy: fix the mbind hugetlb migration - net: atm: fix use after free in lec_send() - net: atlantic: fix aq_vec index out of range error - block: initialize flush request via blk_mq_rq_ctx_init() - ALSA: usb-audio: Fix a DMA to stack memory bug - namei: ->d_inode of a pinned dentry is stable only for positives - namei: results of d_is_negative() should be checked after dentry revalidation - namei: d_is_negative() should be checked before ->d_seq validation - VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk - scsi: smartpqi: Fix DMA direction for RAID requests - scsi: smartpqi: Fix duplicate device nodes for tape changers - VFS: Impose ordering on accesses of d_inode and d_flags - neighbour: fix data-races around n->output - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options - cipso: fix total option length computation - proc: Use new_inode not new_inode_pseudo - lockd: skip shutdown of rpc clients with outstanding notifications - SUNRPC: ECONNRESET might require a rebind - SUNRPC: ECONNREFUSED should cause a rebind - x86/fpu: Prevent FPU state corruption - x86, fpu: Introduce per-cpu in_kernel_fpu state - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI {CVE-2024-2201} - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto {CVE-2024-2201} - x86/bugs: Fix BHI handling of RRSBA - x86/bugs: Fix BHI documentation {CVE-2024-2201} - x86/bugs: Fix return type of spectre_bhi_state() {CVE-2024-2201} - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default {CVE-2024-2201} - x86/bhi: Add BHI mitigation knob {CVE-2024-2201} - x86/bhi: Enumerate Branch History Injection (BHI) bug {CVE-2024-2201} - x86/bhi: Define SPEC_CTRL_BHI_DIS_S {CVE-2024-2201} - x86/bhi: Add support for clearing branch history at syscall entry {CVE-2024-2201} - Documentation/hw-vuln: Document the interaction between IBRS and STIBP - x86/bugs: Add X86_FEATURE_RETPOLINE - x86/bugs: Extend VMware Retbleed workaround to Nehalem - gfs2: Fix length of holes reported at end-of-file - gfs2: Only do glock put in gfs2_create_inode for free inodes - gfs2: Fix use-after-free in gfs2_logd after withdraw - gfs2: fix use-after-free in trans_drain - gfs2: Clean up revokes on normal withdraws - GFS2: gfs2_free_extlen can return an extent that is too long - gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe - GFS2: Refactor gfs2_remove_from_journal - GFS2: Only set PageChecked for jdata pages - gfs2: keep bios separate for each journal - gfs2: Remove active journal side effect from gfs2_write_log_header - gfs2: clean_journal improperly set sd_log_flush_head - partial "GFS2: Introduce new gfs2_log_header_v2" - gfs2: change from write to read lock for sd_log_flush_lock in journal replay - GFS2: Reduce code redundancy writing log headers - gfs2: Grab glock reference sooner in gfs2_add_revoke - gfs2: fix glock reference problem in gfs2_trans_remove_revoke - gfs2: Fix occasional glock use-after-free - gfs2: Make sure we don't miss any delayed withdraws - gfs2: Fix bad comment for trans_drain - gfs2: add some much needed cleanup for log flushes that fail - gfs2: fix trans slab error when withdraw occurs inside log_flush - gfs2: initialize transaction tr_ailX_lists earlier - GFS2: Remove extra "if" in gfs2_log_flush() - gfs2: fix use-after-free on transaction ail lists - gfs2: Trim the ordered write list in gfs2_ordered_write() - GFS2: Clean up releasepage - gfs2: Only set PageChecked if we have a transaction - gfs2: Fix case in which ail writes are done to jdata holes - gfs2: simplify gfs2_block_map - gfs2: Remove unused gfs2_iomap_alloc argument - netfilter: ipset: fix ip_set_list allocation failure - gfs2: Be more careful with the quota sync generation - gfs2: Get rid of some unnecessary quota locking - gfs2: Add some missing quota locking - gfs2: Fold qd_fish into gfs2_quota_sync - gfs2: quota need_sync cleanup - gfs2: Fix and clean up function do_qc - gfs2: Revert "Add quota_change type" - gfs2: Revert "ignore negated quota changes" - gfs2: qd_check_sync cleanups - gfs2: Check quota consistency on mount - gfs2: Minor gfs2_quota_init error path cleanup - gfs2: fix kernel BUG in gfs2_quota_cleanup - gfs2: Clean up quota.c:print_message - gfs2: Clean up gfs2_alloc_parms initializers - gfs2: Two quota=account mode fixes - gfs2: Remove useless assignment - gfs2: simplify slot_get - gfs2: Simplify qd2offset - gfs2: Remove quota allocation info from quota file - gfs2: use constant for array size - gfs2: Set qd_sync_gen in do_sync - gfs2: Remove useless err set - gfs2: Small gfs2_quota_lock cleanup - gfs2: move qdsb_put and reduce redundancy - gfs2: Don't try to sync non-changes - gfs2: Simplify function need_sync - gfs2: remove unneeded pg_oflow variable - gfs2: remove unneeded variable done - gfs2: pass sdp to gfs2_write_buf_to_page - gfs2: pass sdp in to gfs2_write_disk_quota - gfs2: Pass sdp to gfs2_adjust_quota - gfs2: remove dead code for quota writes - gfs2: Use qd_sbd more consequently - gfs2: replace 'found' with dedicated list iterator variable - gfs2: Some whitespace cleanups - gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold - tcp: fix zero cwnd in tcp_cwnd_reduction - epoll: fix use-after-free in eventpoll_release_file - kernel.spec: run initramfs generation in %post (not only in %posttrans)

0 tuxcare-rhel7-els bpftool-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm 2f6f72edbf7e9f49d0abde1c7ceb68e754d61b542ad2e9d850dc91662d1630c5 kernel-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm cc892c13464640b4b27a863286488c1cfe4bd091c01aef229c99d635cf0fcfb3 kernel-debug-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm a9e32331fe80dc68fb28ecefe4e0edf064d904201ae7b128389745062fb9c777 kernel-debug-devel-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm 82ddc324d1bc2a46248c6f9b271cdaf63b7544624a14c62285d0d9154aafbbfe kernel-devel-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm 99b5dbda73473da297c6ba803e6c754f1a7b39f3d34d20faef663545404ac697 kernel-headers-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm e0ba607430c2961c7080dd8e4e787394e39f42ef9bcba2cf7182e276300d7e72 kernel-tools-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm 65a61431c8f6976e922b583ead914c24c3d6631d56ef779cd17c62cdeadc83f0 kernel-tools-libs-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm 52435dae5c52ce818c20f233e92d5f57187a67a30a1f3be21167b3c87714293b kernel-tools-libs-devel-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm 02f7b4b95375ffc63e906f5ac75ea0f2c995963c2e8b8e46826449c3f85a1ee2 perf-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm f29a88ee7eb59b5c76cde0ea76f916f36690b64ee2d76639e9ef785bf9ac5547 python-perf-3.10.0-1160.136.1.el7.tuxcare.els23.x86_64.rpm 9e5ec132eda8c9cfa86df5f5a639d88c93da076fe00646e43a6cce008b6ef6de CLSA-2025:1758228486 TuxCare License Agreement 0 - Fix spec-file for CVE-2019-9169 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix spec-file for CVE-2019-9169

0 tuxcare-rhel7-els glibc-2.17-326.el7_9.99.tuxcare.els3.i686.rpm 09872619cf9b5b19b35f8e87a105af4bd94f593d833ccc534fedf7940bff79c5 glibc-2.17-326.el7_9.99.tuxcare.els3.x86_64.rpm cfe15af5ae28f89829dbcb82fa34ef6001f44890cf55ae9c2a577bfee4d3a261 glibc-common-2.17-326.el7_9.99.tuxcare.els3.x86_64.rpm bb32c1d064019066a3cb89cd23df1e9dd909266e783bd5f13646ab1c5e7c217e glibc-devel-2.17-326.el7_9.99.tuxcare.els3.i686.rpm c0a8cc48f33bdd64df4dd567943c95febf548d1630bf078de9f92e38dbd6898f glibc-devel-2.17-326.el7_9.99.tuxcare.els3.x86_64.rpm ccb2f6c054ce6ffb6be4b62419ccc13c24b05add38edf8a1c67873626767ab15 glibc-headers-2.17-326.el7_9.99.tuxcare.els3.x86_64.rpm c90d20d35496cbed24b6497fcba9848218b29b15150c6d15c4f4acfae7f46832 glibc-static-2.17-326.el7_9.99.tuxcare.els3.i686.rpm b8f9bb33a417564124be09a316bde55e8d5538cfc804c63e194756811f7e194d glibc-static-2.17-326.el7_9.99.tuxcare.els3.x86_64.rpm 9f832128528ec0cffdf6dee35798688debc2db9681fb0941303bc597774dc62a glibc-utils-2.17-326.el7_9.99.tuxcare.els3.x86_64.rpm cd32f7155ea796fc435eef96b4de118afcd9b34f0d65f4bf650a5cee3504a020 nscd-2.17-326.el7_9.99.tuxcare.els3.x86_64.rpm 9a7761b92d49ee13feb1f006a92a668f89f183d66fa8acf0759bb6eba8ca8a05 CLSA-2025:1758892974 TuxCare License Agreement 0 - CVE-2017-9228: fix heap out-of-bounds write in bitset_set_range() and parse_char_class() functions Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2017-9228: fix heap out-of-bounds write in bitset_set_range() and parse_char_class() functions

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els15.x86_64.rpm f1ee137c7fb5ffc3819975b71ae42c2b95c03466dbf559f766466df73bbbfb47 php-bcmath-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 28343d947b0442a87e31ab81325e36c3153cb5f5246f727b0a94f4ea3ce2c348 php-cli-5.4.16-48.el7.tuxcare.els15.x86_64.rpm f73bf87efd86777ff9fe7889129abbf071bf4c55f0b8ae2eeeb4202d9a32f7e6 php-common-5.4.16-48.el7.tuxcare.els15.x86_64.rpm d21b53188fc0ea5b9769fe0876b3dc679b252abb99647edd51d54b4fc4d4fcb4 php-dba-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 8a3f966ce503aaad1c7eb85acce679f03d13429219f3777ee8d0deb4e2fc5bed php-devel-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 129fb24d930788a4bfe8a1910460338d9e8d6f9441e8a321acd17d21eb9086b4 php-embedded-5.4.16-48.el7.tuxcare.els15.x86_64.rpm e37eb0c4da10d3ea4eba684ab7b76e05ea8355f4cfe88972d2b98c3af2aa46a6 php-enchant-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 9da4e28e2f76b51423b2a176bda8f8490d2f4149aa5b91978ec415f260f80a87 php-fpm-5.4.16-48.el7.tuxcare.els15.x86_64.rpm fe680c285ed7654c62127b9aa6b19fcb853be071c84ac526534ccf4bf760aeee php-gd-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 190694cc6eab0b52ae26da1698abcdf8fa520ffc5245965e0a43e3c989a86f94 php-intl-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 0bca87d9235d81236d502447a871748d2e0f6181218f6a69dc14f1a340c74a30 php-ldap-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 79b53611e9a791e70391a4e334b35df510ea2aef918348a0eb774ce3c1d6ed2d php-mbstring-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 664edaa21dccd3eb0549c9194cf1ed1504170df3ec21b137ed7288744c35a6ad php-mysql-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 1348477cd51a5f344ac93faa5264385d8d6331eb8765dd3a92efc34be7638f3e php-mysqlnd-5.4.16-48.el7.tuxcare.els15.x86_64.rpm f80fbd10df570280b0d7ba6db2f75d9df1182bf261f53982cf7d5923ddbe28fc php-odbc-5.4.16-48.el7.tuxcare.els15.x86_64.rpm f9f4c47ccb5af9df3466512fa63caedce3fe77a50f473fb3f26147c983c3fd59 php-pdo-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 2f8a199b3daa677cdbca3e2a66102d3d8b79d19b776db349c891f62fa8045ab7 php-pgsql-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 9b55270fe0790bce155ee865f4f3804d227e70b178802fb33d142569468913d2 php-process-5.4.16-48.el7.tuxcare.els15.x86_64.rpm a8db7af15c25da4458f507c8a31131f0847e24c7299fe4e12dd7e4e8b6bb9c1e php-pspell-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 739c5043453f3ee96a38f3b4fa0a55587f12834f0d85badc6cfcf228ed2d3107 php-recode-5.4.16-48.el7.tuxcare.els15.x86_64.rpm e5cb06685f01c31dbc58ab90546fe5d1872c357c6f0e144c21383c386544f98b php-snmp-5.4.16-48.el7.tuxcare.els15.x86_64.rpm ceabcdef18cdf74fa6cc87347e001625ec7581dcb4a54d4f7b437f6ebb1b1b10 php-soap-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 865d3484cc9872f789ae87a9cdf5412aa54fbfdb0512420601254ff935b1a1b5 php-xml-5.4.16-48.el7.tuxcare.els15.x86_64.rpm 39779111ffa04334718f67dec60251286d2427b5696b8a7de84465c5f550f9a7 php-xmlrpc-5.4.16-48.el7.tuxcare.els15.x86_64.rpm b3363cbd92db11f4821a29c8a324623e6c3354478e4a731ea64d50197cad3117 CLSA-2025:1759167915 TuxCare License Agreement 0 - CVE-2025-46835: prevent malicious creating and overwriting of user's files Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-46835: prevent malicious creating and overwriting of user's files

0 tuxcare-rhel7-els emacs-git-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm 19bc5b25ef9da0e8d777c60a3e50bbad15f2c5a7bc4942f8ce07f3fe832ca9ad emacs-git-el-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm 50f9ac915986d6ef6bf344162d7723179bc37338cec268098095ce617f8031e5 git-1.8.3.1-25.el7_9.tuxcare.els6.x86_64.rpm 0eabeadd384b8d9359bc68cea0b22712774b6469408cf696be13ddafd3be60ea git-all-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm ee504bbd6dc31721cae6f16876e3702d8f6dae13a459c9142edce5bfc3033087 git-bzr-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm 33f5bf24dc227b6d0271597cb8c140f3920e7544ffbf1ddde8b8d622a846d085 git-cvs-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm 8ab5c7b12dcf156811974ad4f8f1d6075b7057ac81359b922da5ce108b2fc31d git-daemon-1.8.3.1-25.el7_9.tuxcare.els6.x86_64.rpm 952befc1b7c88d03854fa1a4436b428c0b3861a3c5666ffcae8554efde19162a git-email-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm f175cc631c078deb43a763dbcbf75c2344576fbd6ee3881b974ffe5bf40c734d git-gnome-keyring-1.8.3.1-25.el7_9.tuxcare.els6.x86_64.rpm b3d657a47137b5f60bd189df5d92b527751cb5f8a1a5033170e049284542a806 git-gui-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm ddd35dc99ab43bbf8ba421e4e9a1c23417b7dcb6513a637ceed61f3f6062b7eb git-hg-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm b44c6b97a8e6a041e232cfb2dd5cd13ce245d73b1daa82ca3a1258a4af8d2c72 git-instaweb-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm 7e13713f7768a543a4c0e4587724ca71f888b54e15ecc10d6c1f32fb7e71ecee git-p4-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm 1ca7fdf90ecf4218e43a6541317051247cba9f1fef3cb56159054fd18501887a git-svn-1.8.3.1-25.el7_9.tuxcare.els6.x86_64.rpm b0bcdb71f38db866f7145d42d48bb281326191d0beef3037994f3042d6bf2ebe gitk-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm b3634dc94c1214816530d327b3f4356cd7eea3ba3fb29e01595ffd5c4dffe4e0 gitweb-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm a43ae57ffda8b3f1cac64586e4de83d447eed7c09a9f73b566e57264f59b10a0 perl-Git-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm 65741a1a3e2ed9c11997868d7bafc7a4b22c5745145970f5e5871b8d3a060408 perl-Git-SVN-1.8.3.1-25.el7_9.tuxcare.els6.noarch.rpm db12012a13d006e21a2b8bc148829a6926f07b694b69fdef6c77fd9fc45b5ef4 CLSA-2025:1759432250 TuxCare License Agreement 0 - ASoC: topology: Clean up route loading {CVE-2024-41069} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966} - media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} - inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103} - scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - virtio-net: Add validation for used length {CVE-2021-47352} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} - mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} - net: fix information leakage in /proc/net/ptype {CVE-2022-48757} - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974} - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - net: ti: fix UAF in tlan_remove_one {CVE-2021-47310} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields {CVE-2023-52578} - media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884} - media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885} - xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039} - xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037} - xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038} - ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386} - ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- ASoC: topology: Clean up route loading {CVE-2024-41069} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966} - media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} - inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103} - scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - virtio-net: Add validation for used length {CVE-2021-47352} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978} - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929} - wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921} - mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961} - platform/x86: wmi: Fix opening of char device {CVE-2023-52864} - media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764} - wifi: mac80211: fix potential key use-after-free {CVE-2023-52530} - net: fix information leakage in /proc/net/ptype {CVE-2022-48757} - crypto: qat - resolve race condition during AER recovery {CVE-2024-26974} - perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835} - net: ti: fix UAF in tlan_remove_one {CVE-2021-47310} - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594} - net: bridge: use DEV_STATS_INC() {CVE-2023-52578} - net: add atomic_long_t to net_device_stats fields {CVE-2023-52578} - media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884} - media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885} - xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039} - xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037} - xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038} - ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386} - ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 9010034a9786c1ae295688c7b4903a33432cb80ed0975e968140cea79ec14615 kernel-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 7cccede6ccb68947b64663a21d706f63b6100f7017c18d80e9d0e815f026e566 kernel-debug-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 10c7ffb54ff322ba7fed358d1714e157be8155bcc86903dfd984a873c6c33f97 kernel-debug-devel-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 3aa6ee2bd5998acfe8c7644b517b1388586d44991bd98b8c16766b9a80db0e28 kernel-devel-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 0cf1480536253528ac4156e3f9efe26dc37ab6f10a5d141aadfe6810fef3c183 kernel-headers-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 0b2235e9231206dbf7f37da699ffef2c57bd7e022b0df237a9fa0f3b5b77739b kernel-tools-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 3798beed89b188d186afe7fda88a42528231d9c29d08e644a7e8b4971471b878 kernel-tools-libs-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 828fd5a62b9cf8cbbd51015632c596d2feeb066d55bc12faad7c37e004fe5c25 kernel-tools-libs-devel-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 5bb5b64f24ece1a99da6db2ed79811d84c3d34c0db5c515777102b19310cd1ef perf-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 58941d21ce7c1a147d0f9fe796a2d0117c1d2a354987e65ba22abbf3bdcd1662 python-perf-3.10.0-1160.137.1.el7.tuxcare.els25.x86_64.rpm 63f215b8db6f940065469730e348625ea48a3e098db34af6ccb69fe9df0e7c71 CLSA-2025:1759780820 TuxCare License Agreement 0 - CVE-2007-4559: implement PEP 706 - a filter in the tarfile module to prevent directory traversal vulnerability Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2007-4559: implement PEP 706 - a filter in the tarfile module to prevent directory traversal vulnerability

0 tuxcare-rhel7-els python3-3.6.8-21.0.1.el7_9.tuxcare.els3.i686.rpm 5a5d8c1d45049491ed1ff4a74aa7ded443026df1713a83d312f9a7f9ba60c31c python3-3.6.8-21.0.1.el7_9.tuxcare.els3.x86_64.rpm 01c08f14a027a026ad005b545d9f151998bf3d1b3fc06e8758bf48c53f1bd48e python3-debug-3.6.8-21.0.1.el7_9.tuxcare.els3.i686.rpm fe394f9dc57600bd9c77b4ac713831a8a961994654b04a6a8c280b30d0eadef9 python3-debug-3.6.8-21.0.1.el7_9.tuxcare.els3.x86_64.rpm 84a772aefd858c19d953bc74c037d933cc7b6b53629c26d551fc7f7eb96cd457 python3-devel-3.6.8-21.0.1.el7_9.tuxcare.els3.i686.rpm 6036b314221633c906e7806f8bd0ab91bb062ddaee10efa048b901444c3da817 python3-devel-3.6.8-21.0.1.el7_9.tuxcare.els3.x86_64.rpm 2a8e99c2ed28ea53a1a9ab977fd0d372dd0e1e0bdad96ed557670afb980a1350 python3-idle-3.6.8-21.0.1.el7_9.tuxcare.els3.i686.rpm 20d7fb23da53996c6edb8377c6ceb33cb1018d3cf09b2ef80ee7cf97859d236b python3-idle-3.6.8-21.0.1.el7_9.tuxcare.els3.x86_64.rpm e3c9a7e0c1b1cf24c5c60a5fc6cb27580124bd33bbacc515fd12a859a8e46eff python3-libs-3.6.8-21.0.1.el7_9.tuxcare.els3.i686.rpm 6f58a9a5124dd479afd2374376e1a46e6ecd8b0467ddd0775c18977133ae27f4 python3-libs-3.6.8-21.0.1.el7_9.tuxcare.els3.x86_64.rpm 5c89f6f2afd2511a347cc345eec21512cda8023f5ab39a7aac7e5d08f47f145b python3-test-3.6.8-21.0.1.el7_9.tuxcare.els3.i686.rpm 7604dc0ac4304c08fe3d25283a407942bb841f1b8dfef7fe5d6735b1052e8c87 python3-test-3.6.8-21.0.1.el7_9.tuxcare.els3.x86_64.rpm 7183a13f9eb1ccd75166c67e8daf265f7a0b31fb1aa00d40b578a5a75fa35d03 python3-tkinter-3.6.8-21.0.1.el7_9.tuxcare.els3.i686.rpm 508725699110daf1628e5e13792b3c74002aeb3b4dd11f9e71cc5f2e28843731 python3-tkinter-3.6.8-21.0.1.el7_9.tuxcare.els3.x86_64.rpm c4ccdb768b4bf18500c7a2fd94f74f99a0d51111765b605a84ddc59f45f36369 CLSA-2025:1760023124 TuxCare License Agreement 0 - CVE-2019-1547: fix side-channel vulnerability in ECDSA when using explicit EC parameters without cofactor - CVE-2025-9230: fix incorrect check of unwrapped key size Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-1547: fix side-channel vulnerability in ECDSA when using explicit EC parameters without cofactor - CVE-2025-9230: fix incorrect check of unwrapped key size

0 tuxcare-rhel7-els openssl-1.0.2k-26.el7_9.tuxcare.els6.x86_64.rpm cec2ae28670c8a47e810b9fc2015ce54b4b782a598009e1eec82bbd3097cdb7f openssl-devel-1.0.2k-26.el7_9.tuxcare.els6.i686.rpm b4fa75d20745d311fd4f101311360c1ad3821de12be6899ec0b9d5ca89332a76 openssl-devel-1.0.2k-26.el7_9.tuxcare.els6.x86_64.rpm 9ef7c5f18497c547c333cd03aac4dc251c87e209f895648e0c9c3115a98b00e4 openssl-libs-1.0.2k-26.el7_9.tuxcare.els6.i686.rpm 22a14141b3afb5f3a7c6eaa18276868c715dcd70ceb2dcdde83571c330884c2b openssl-libs-1.0.2k-26.el7_9.tuxcare.els6.x86_64.rpm 74ed13859b102f7207790de30c7267dbdd96f5b8d09ea0c2194854d66c1cc52e openssl-perl-1.0.2k-26.el7_9.tuxcare.els6.x86_64.rpm 4375a49c195589f0776b4874a82b8bae4cf2c3372340bf14f8a50d50b276774e openssl-static-1.0.2k-26.el7_9.tuxcare.els6.i686.rpm 33ad539cae681fe23b9e65fad69993ea6193d4c94090beab7514a8c4baa5250a openssl-static-1.0.2k-26.el7_9.tuxcare.els6.x86_64.rpm adf0171533f5fa9339c08306a25a60148b601ff7c23f5821baa1c11d4eb83b9d CLSA-2025:1760983006 TuxCare License Agreement 0 - Bump package Release to 21.0.5 - CVE-2025-8194: tarfile: validate archives to ensure member offsets are non-negative Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump package Release to 21.0.5 - CVE-2025-8194: tarfile: validate archives to ensure member offsets are non-negative

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els1.i686.rpm 966f25a6b7a01da503bd1307c96c467d73a2a1100f2a2458bca0769c209bd6de python3-3.6.8-21.0.5.el7_9.tuxcare.els1.x86_64.rpm 754cadbfa36e92439c2fca3b5160a4684c155ff54ab3e732c4833c157aff57d2 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els1.i686.rpm 52cb26874b076729de6458f9ac296150ad915d2e92643c7142b3a47a28ef9c4f python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els1.x86_64.rpm 0439630d5800fb3499d2a2666988c01b1e53ac7e93c75009d57e99929d174df4 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els1.i686.rpm d06c5969811ee4561cd410a5f6a22bddc5a4d84b74225b20aa4d7f2013100825 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els1.x86_64.rpm 8b272b9d427b06218eead3ad18f3f65928f8e56fbfd89c5849925a65e56587d3 python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els1.i686.rpm 5bbca323a1fe9b14e7cab63b0c983fcba550447594cb362536443352c99d8836 python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els1.x86_64.rpm 2a8fb992dfcf1b111c1545f9b70246024255466fe253d4e13c2b158b6c814224 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els1.i686.rpm fddab031e6f4d1a526cc6d7d05b7beb6effd41628b1466ba1ec41c0c3570f400 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els1.x86_64.rpm 68cf7b7ff903a377a4239cb6312e5e21bd15668551d72d398c30c11d96dd2f03 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els1.i686.rpm 33fa2bde157ef4bf028ab1fc09273f45c7d86644191646047952d7f541f78b74 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els1.x86_64.rpm a9e9f64b1976c548d3ef9204ac7b70f4307b006b105d2af32de52de998224e4f python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els1.i686.rpm d52b1e7953bfd3f110ca7aa9f7226df9b01d606c31489d29dfff0d15d28c301b python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els1.x86_64.rpm 4c70d0801e090712f7e4a89e7602723daa1032f7eb5bb7051eac7e48cbc64823 CLSA-2025:1761056680 TuxCare License Agreement 0 - Additional fix for CVE-2025-49176 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Additional fix for CVE-2025-49176

0 tuxcare-rhel7-els xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els7.x86_64.rpm d93a98e521764aca3d5ab22b1e988ebe067f8e1a8ea7ea60eff62a501dcdee96 xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els7.x86_64.rpm 03866130b46aadf05ced3d06ff8fcbf8d6bee0d55cb188a9e6afaf7b6247fec2 xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els7.x86_64.rpm ecd4f70712b9bd974be30db36190a3cef4d7519459013491b51e65835c848e20 xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els7.x86_64.rpm a110719febfe9482abbb5b1842d9578dfaaba8ea49cf255a41f70df2dd902e3e xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els7.x86_64.rpm 89e9c0236a7a4f9d32cdec3521bb8c9f8cb2d79765047ce03da7e7ec6fd43132 xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els7.x86_64.rpm 69be50830ca987d20a61ef3673b8bb5e057e991fd8edfd456fcef53d2983377d xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els7.x86_64.rpm e5556e006cc43e651b2ffcf255b3ccec20ba099e98d1e651588e0d5cdccbcf0b xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els7.i686.rpm ba34bb243ddbaac09b61fe6985860efe6a7b63cf6fe956951eb4d87d524d5a1f xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els7.x86_64.rpm eee665455e10e01abe61d4e7d355e619d92f40f3b2d62d098812c2166ff50d10 xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els7.noarch.rpm ccb4849ac401e11bdfc4059ca31cb3a0bebee9956cbdd369fc441def5dd96426 CLSA-2025:1762244848 TuxCare License Agreement 0 - ext4: fix possible UAF when remounting r/o a mmp-protected file system {CVE-2021-47342} - ext4: fix memory leak in ext4_fill_super - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658} - net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477} - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() {CVE-2022-48701} - fix: virtio-net: Add validation for used length {CVE-2021-47352} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- ext4: fix possible UAF when remounting r/o a mmp-protected file system {CVE-2021-47342} - ext4: fix memory leak in ext4_fill_super - net: defer final 'struct net' free in netns dismantle {CVE-2024-56658} - net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477} - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() {CVE-2022-48701} - fix: virtio-net: Add validation for used length {CVE-2021-47352}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm 87a8e1628eac9153c4e34b36c6726d5587de40ffcc13c76a892af49512cda643 kernel-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm 21d788c3b761aaab098510c5e307f98771485a1751859cc5e8fca079f4e6100e kernel-debug-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm 80a1582afab10549a9b49cf21442a3bc831c5b16f0360b9f1de162ba9db63101 kernel-debug-devel-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm a85de6ff808fb434219b39c037b383b78809e956b059ad0b5601a684ed15f8a0 kernel-devel-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm 7e6777b21988a419922de0186d0b7bab670a5e572720bb6fe60b111b0ec787db kernel-headers-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm 94292ca800ffbb6106621e1480f57ee4cee9000d38478f286e87d75b03e0ca99 kernel-tools-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm 5f672c14c3280938772f6f00b7be83947000116a30159e522de22a51d7571d65 kernel-tools-libs-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm e42b699655be5bcb8cf4792295d27c12b8f307d9ba638e3deeaf930935eff17d kernel-tools-libs-devel-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm c1f543ac351ef6b6ea98ab0b6bd9004fda01b6b8a0f819bd23901e9009b90c7c perf-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm efb166ddcbb8ce03c851e9cdd46fca1366463c68c34cffbb31ec06070c2fc501 python-perf-3.10.0-1160.139.1.el7.tuxcare.els2.x86_64.rpm ca58e2d8dbd252983fff938a3dd5f9ee1c39b05e0d5b66be1c43970f813b88bc CLSA-2025:1762422944 TuxCare License Agreement 0 - CVE-2025-58060: fix authentication bypass by checking password when AuthType is set to anything but Basic. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58060: fix authentication bypass by checking password when AuthType is set to anything but Basic.

0 tuxcare-rhel7-els cups-1.6.3-52.el7_9.tuxcare.els2.x86_64.rpm e1616c22d2a3f59e037e780fad0118627d77e34def6cff1013196062325f36c9 cups-client-1.6.3-52.el7_9.tuxcare.els2.x86_64.rpm 70bb53b5ddc122b2a8700646d6d89c71f3075d5e75865bd4a0ab94d1df3d4507 cups-devel-1.6.3-52.el7_9.tuxcare.els2.i686.rpm 2cb6f3af72fc66efaca690ddca669ff6b923312054bffb8fce65b41a15e4c996 cups-devel-1.6.3-52.el7_9.tuxcare.els2.x86_64.rpm 41937efa5d78b37dd5ec0507f57a8cd23d78941008d8b92579b2439c1b652675 cups-filesystem-1.6.3-52.el7_9.tuxcare.els2.noarch.rpm a0579b335d5d11c861ab7a68d2cbc678738b841d8002f6f6d1cf798ad029a5b9 cups-ipptool-1.6.3-52.el7_9.tuxcare.els2.x86_64.rpm 4c76fac7498247c33ac706191b8ab15e76293e5ab211120893e51158ee72de1d cups-libs-1.6.3-52.el7_9.tuxcare.els2.i686.rpm 99f3a8fde6aa7f02fbd96d77d75ace15f6fb053ede83a87c92c3b9c7cd591a7e cups-libs-1.6.3-52.el7_9.tuxcare.els2.x86_64.rpm 558c476df3f7c16a469e6ed1d2ca92c4429ff058dc2ca4bbe18bf233d31cee9b cups-lpd-1.6.3-52.el7_9.tuxcare.els2.x86_64.rpm 91310c7c8949e837907a803619922093b252a6a37cae850569894c4d0c65e592 CLSA-2025:1762537354 TuxCare License Agreement 0 - CVE-2024-35235: patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-35235: patch arbitrary chmod vulnerability in cupsd process when starting server with symbolic link Listen configuration item

0 tuxcare-rhel7-els cups-1.6.3-52.el7_9.tuxcare.els3.x86_64.rpm 9ba8126f86ad1f68fb8e45940135f2487439d170fde6c18bbddad0c1c00c139f cups-client-1.6.3-52.el7_9.tuxcare.els3.x86_64.rpm 67a588e44d8da6ca7f600ef81e74768a84e9c62b687df1ed475acb53178abea3 cups-devel-1.6.3-52.el7_9.tuxcare.els3.i686.rpm 1719f4c6efd99a5496fe04048d868a82311df1dfbf3d8ec29dfea7677979e984 cups-devel-1.6.3-52.el7_9.tuxcare.els3.x86_64.rpm 2445d52aeb98f42e48bc58d3b5cafcec0f73afc2bef1cb04814f222580edaf97 cups-filesystem-1.6.3-52.el7_9.tuxcare.els3.noarch.rpm 0761709574b77892559fd178ad7174b8c299bdf8636c3f5300571193e01b6e17 cups-ipptool-1.6.3-52.el7_9.tuxcare.els3.x86_64.rpm d50f712cc75ef227a37053dedf2ea91e5cd6b518a42a25e5d54cb3518da2add6 cups-libs-1.6.3-52.el7_9.tuxcare.els3.i686.rpm 8bcb41ed35993fc49b24815ce80037a56471319bec120ac6cb8ed5caf6723ec6 cups-libs-1.6.3-52.el7_9.tuxcare.els3.x86_64.rpm 753f62a9703a8718bab2173e015c5483b2fcc537a656effa91f4c3786bbd4122 cups-lpd-1.6.3-52.el7_9.tuxcare.els3.x86_64.rpm aeea92ebcbbb127201786fdc32187cfd8030511e1a6a940c234d56cd6b390cde CLSA-2025:1762540173 TuxCare License Agreement 0 - CVE-2016-9840: fix improper pointer arithmetic in inftrees.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-9840: fix improper pointer arithmetic in inftrees.c

0 tuxcare-rhel7-els rsync-3.1.2-12.0.1.el7_9.tuxcare.els2.x86_64.rpm f042f8ebcce505d60337261666bb2c35f9304e967ebda92f67cd120c836e5194 CLSA-2025:1762784629 TuxCare License Agreement 0 - CVE-2025-4948: fix integer underflow in soup_multipart_new_from_message() - CVE-2025-32049: fix Denial of Service attack to websocket server - CVE-2025-32914: fix OOB Read through soup_multipart_new_from_message() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4948: fix integer underflow in soup_multipart_new_from_message() - CVE-2025-32049: fix Denial of Service attack to websocket server - CVE-2025-32914: fix OOB Read through soup_multipart_new_from_message()

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.5.el7.tuxcare.els1.i686.rpm dfd5773c7577f9cb2a297efa0cfff632c79cdcd378dd8dfd3e075e80dd6cea60 libsoup-2.62.2-2.0.5.el7.tuxcare.els1.x86_64.rpm da1eee49d4fe85e37404864864fd1ef7a32030652072bca7bc1850872bc6835f libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els1.i686.rpm 7893b61e8afc592103b9b1be088b35c0845f04ef646da8eca5f1555ed6e1af1d libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els1.x86_64.rpm a9182f7d24d55f483a702828e5c500204f2b922a53f9871f36ba3bba86f9de5c CLSA-2025:1762958892 TuxCare License Agreement 0 - CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data") Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12718, CVE-2025-4138, CVE-2025-4330, CVE-2025-4435, CVE-2025-4517: fix multiple tarfile extraction filter bypasses (filter="tar"/filter="data")

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els2.i686.rpm c7930e706c78afb43ea8e77dc01d0573445c922ca236d824c6bc937a8a54fa62 python3-3.6.8-21.0.5.el7_9.tuxcare.els2.x86_64.rpm 29fb18b576b7ff69cf1c27b880df6bbc377e101ae8b18a31aac7c41324d4398a python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els2.i686.rpm c5603fd786488e19a878016c5711c4eaaca7a9611c9671830d96fe25384fd749 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els2.x86_64.rpm f0ea874a31002a38b1dd03a3967ba398b7d970e00bec4794cc716d1d69a13c0f python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els2.i686.rpm fb11a56e151db7edafc1cc999282a1b43e5f1427b7650557b22de3d72335663a python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els2.x86_64.rpm e4bc5e638d002ef8a12487662a8faa8e90f084d83265e3481155c337db7f0d2a python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els2.i686.rpm a5f188bd879162dce56aaec0cff115e7af4648efa34a22423dc5b9bec3486978 python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els2.x86_64.rpm aa30d6d6e3c5bd8da2ebb0539b193e06d25038400efeaad36e5a8cd094069888 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els2.i686.rpm f1ecd8fbf27f42532d06464dfed0e174e6a20d1b40b6f86b0167497da74409a5 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els2.x86_64.rpm d865e10e6c2155dfdd4de91b0cab951d158dc310322eda06fe7fe4d7c240d555 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els2.i686.rpm 26c09d2d71ae419d749ecdcb73b64e01188d95c75c90fe5430fa510211b0d243 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els2.x86_64.rpm 84aaa22586162e699fdd2e4e8d1122c3b0a1b487c6920d4ec22d64f5c1bf4912 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els2.i686.rpm 8ee9848a16c84121b0236d0a987ec2dc3de0341e8112f0feb91645cd39ef8a38 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els2.x86_64.rpm 43076a018f108ed7bce3d58b3b3168067fd68bbc176ba59221bc4b499f31cfe5 CLSA-2025:1763033941 TuxCare License Agreement 0 - CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-8194: fix infinite loop and deadlock in TarFile extraction and entry enumeration APIs

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64.rpm e8aa5334d92dec763330714258e0f5cf4c103c2f9d80b028637798ab214b79be python-debug-2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64.rpm 826c3a451a0be1c58deb73f524097e802a8a630d583b29be2da6c3528c8cab38 python-devel-2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64.rpm 7dc761d884edba4a33a567a5b225e13d8af6d812287176dccb0b476a01b755f2 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els2.i686.rpm a3400b1e363e6e589454780f8a8b4f32016e421ff7c1a2981978135de5f64fb4 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64.rpm 8989cefdb206a06edd804db6e428b95fd94fe27aaad14da8c8302fcd0f5197fd python-test-2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64.rpm e75996848ec1d36f2593bc2a35b4c43ca8e3da8be186c2d781cb0e8e9b3224cf python-tools-2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64.rpm 9fe156f4d84b63ba60689ca698d609dd77b12872b8af691dd1c7768c66dbcaff tkinter-2.7.5-94.0.1.el7_9.tuxcare.els2.x86_64.rpm a2dda192c914ffd5716295b5bb57c0183e18416f8d41f4eb233fcdae2eb808f7 CLSA-2025:1764152160 TuxCare License Agreement 0 - CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - email_err_data directive now defaults to 'off' for security (previously 'on') Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-62168: fix failure to redact HTTP authentication credentials in error handling to prevent information disclosure - email_err_data directive now defaults to 'off' for security (previously 'on')

0 tuxcare-rhel7-els squid-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm 7c19c191901a6c5d3ae91b6f6f28e819544224b7e2a04fdc520bdfa0a6d4afc6 squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm dbfcf82de63d3a418f86ce8a98c016291aafccba2d6dc461290da1f3c6d2a461 squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els2.x86_64.rpm ddff5a5cca530154d44af24ebea810cf087dd150e36a772b3a786d63aa4076e6 CLSA-2025:1764678192 TuxCare License Agreement 0 - CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-4945: fix integer overflow vulnerability in date/time parsing - CVE-2025-11021: fix out-of-bounds memory read in cookie date handling logic

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.5.el7.tuxcare.els2.i686.rpm 1758d22c9e8fb60ecbee27a6d9611e44ef7904e90cfc179ae53c2c6f61dbead1 libsoup-2.62.2-2.0.5.el7.tuxcare.els2.x86_64.rpm 4055d23787c104fe2958ee100c9a5ebf78ad2b0c12c05e8d35fd25dbf91df791 libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els2.i686.rpm ed341ea436e068976fe2de90e3b80c17521589768cec8768b54b086f2d96f9db libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els2.x86_64.rpm f4e262948a7523d4fd3c16a5c25efbf75707338bb7dd506d2aa15a521a316e86 CLSA-2025:1765209523 TuxCare License Agreement 0 - CVE-2025-9632: fix buffer overflow in _XkbSetCompatMap() - CVE-2025-62229: fix use-after-free condition due improper error handling during notification creation leading to DoS - CVE-2025-62230: fix use-after-free condition due freeing certain data structures without properly detaching related resources - CVE-2025-62231: fix unsigned short overflow in XkbSetCompatMap() function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-9632: fix buffer overflow in _XkbSetCompatMap() - CVE-2025-62229: fix use-after-free condition due improper error handling during notification creation leading to DoS - CVE-2025-62230: fix use-after-free condition due freeing certain data structures without properly detaching related resources - CVE-2025-62231: fix unsigned short overflow in XkbSetCompatMap() function

0 tuxcare-rhel7-els xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm 3bf095304e76860708729cc40a0bcb1b19fd629435a9a71f3c5cdacab07cb055 xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm c07c8a1763938fdb81bfa77608b0afb3eb23bf8d08a725a4b5654706021173c1 xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm 96bfe9ee16923351a97fda093aa43b33e01ce6c94a6b3cccd2d138ca1e00466f xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm 47df6c4b1d5eaa646db9990c47bc6f39b18d127cf6635c84631876411c984612 xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm f439615b112074e48503dc08848a446a4ca948e427fa39d9b8f0ecbaf8f09606 xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm ebe15308269395c42ee1e14405c37afd546e0d27c2965f5f5e28a8c36fc2b420 xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm 6829ba0f62ff2e87afd2ed166184a567b645e1050e8a5a0765ea26098b25cabf xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els8.i686.rpm f863a3c2c87cf3e9cefe96b73f3c42cf28f39aa27f693eb3362c2e14435e92cf xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els8.x86_64.rpm 77613d97a128256f7d86966bf1342b9c5b322a02c142c1868a918c0d7b385eb6 xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els8.noarch.rpm 2d21f1227ff554acbc252f5073afefe90bb9b82df8f62a2779e3382b9636adbb CLSA-2025:1765214354 TuxCare License Agreement 0 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u472-b08 (GA). Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u472-b08 (GA).

0 tuxcare-rhel7-els java-1.8.0-openjdk-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm c06f1978fd828f4e0ed23ec220a48ae03dd6eea179c1f574c97540f1986c3cc0 java-1.8.0-openjdk-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm 59e7d6936db148fa237f4a73931987ee8488403f4f3e745bd875e58515633b27 java-1.8.0-openjdk-accessibility-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm 8401da2f64c0c64aec23ecbad7b85fff76cf20fc6d7d43ffb77b995a793c0b11 java-1.8.0-openjdk-accessibility-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm 0aeee43e2dfc40e4221ee44492bc6a8a577f7d3ae95559cfdf182d094b324a92 java-1.8.0-openjdk-accessibility-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm 3c65a771ba542e9cb7139dabba0f22cb9d158241fd932468c1d4505f24fc39d2 java-1.8.0-openjdk-accessibility-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm cf32ceca2e80c426cc5b338bd704579543fc5873f82052306b855f9c06fc2888 java-1.8.0-openjdk-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm a0028f5d0e533114e7f3d3af96d9aecfe74361cc1fb3dbc9e9f175c4a5b6b3ae java-1.8.0-openjdk-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm 4016ff2c40f82e5895aec68dcdc5e318902dc27e41d0c1aae94260d0ebd1751e java-1.8.0-openjdk-demo-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm 6bcbdb173e6bc29b96875374ee180bd4df37ab029ef8c761d5065c7a6bf5e432 java-1.8.0-openjdk-demo-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm d1d57f006d0bfb3a7facdd64a63ca45f706522c1bca9f0835feabbf22ea4965b java-1.8.0-openjdk-demo-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm 37631b65b74bc43973e02b4051db18149e9efcebec0a13231ee3cf9c6dddfd28 java-1.8.0-openjdk-demo-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm a9de36e7c9ce274f3f0eb0efd093f7dc775ed1e788d6ee9f3433e3cdae20b521 java-1.8.0-openjdk-devel-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm be39a11de6c60d711c21f4cd843c4998bbedd37f8ea5473bdfddff8c3bdceaf7 java-1.8.0-openjdk-devel-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm 08e6ae8fa2c4376575d0ea3fe66a7d0d410e93ada6a623eb1ae1d457508253eb java-1.8.0-openjdk-devel-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm ebd03b41318c46a01da6adff665936093ded29c66a73e6b14884e153a68ff54b java-1.8.0-openjdk-devel-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm f1f0c84d2f95ab5399313073a16661a97622bbfbf3a13d2bf85fb0d5bf9173ef java-1.8.0-openjdk-headless-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm c5dfa67f17b7e47713b7f784205e4fc1e7a673cbdef624c166355c57ba80cd16 java-1.8.0-openjdk-headless-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm 2e3f9e603b67dfe531b2b3ed8685eb9b3dcee248c2b7c6d6a3275a0d6f443e8b java-1.8.0-openjdk-headless-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm 273a067c4a60d227462a99f5a9a6939e9bd70aacaf30a370bf166037279604a1 java-1.8.0-openjdk-headless-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm d476604177e218156793f8eeef25aa5947483b4a16ba64790f0afbc6a19810e5 java-1.8.0-openjdk-javadoc-1.8.0.472.b08-1.el7_9.tuxcare.els1.noarch.rpm 12854a24e4cd7167ca569ea6be9cd3689d2a0b51ce9fbb8aab68656c774b9046 java-1.8.0-openjdk-javadoc-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.noarch.rpm f075a843bb6bef9161c9fa8ce97a3313003df9848a1ec23f57eb15562480b292 java-1.8.0-openjdk-javadoc-zip-1.8.0.472.b08-1.el7_9.tuxcare.els1.noarch.rpm 45a4921fe05eb050ac7368a21fde3b2e017ebec9d33bc0d1db39c5cb910fd796 java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.noarch.rpm f7161de4ecf1de26b23daefc6ebc06935ceb3bd12c23d7f7832cd4d982cc905d java-1.8.0-openjdk-src-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm 88d24d1fecfb2d8d202cc5e3542d88a0b1eac9a0cea37adfa6ef296089bc8d05 java-1.8.0-openjdk-src-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm a1028ba5d0e0833d469864166b59a85a79e63115e76ebf507378ecec79716962 java-1.8.0-openjdk-src-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.i686.rpm 9e2ef1103f4523755a29d3649f6d6670b9e8bc1b98eb15f3478a78d4699800a3 java-1.8.0-openjdk-src-debug-1.8.0.472.b08-1.el7_9.tuxcare.els1.x86_64.rpm efb96c052cccd00085d68dbfc167bca4277d9c8c9f45d6ee726b6fdcb1ab747b CLSA-2025:1765901537 TuxCare License Agreement 0 - CVE-2024-8508: limit number of name compression calculations per packet to prevent denial of service attacks. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-8508: limit number of name compression calculations per packet to prevent denial of service attacks.

0 tuxcare-rhel7-els unbound-1.6.6-5.el7_8.tuxcare.els4.x86_64.rpm 7651cbc235b9db955ec6830e9f87b9daa92698484bc7388204e3dc0b5b4b2c43 unbound-devel-1.6.6-5.el7_8.tuxcare.els4.i686.rpm 82ff6700ef2b9aa284d5ce45de7bd77cd2f75becc275ca978d003e5497f50cc6 unbound-devel-1.6.6-5.el7_8.tuxcare.els4.x86_64.rpm 3c489886911610fced345dcca0c42fafdfcea9e4eb3167cb1f6d193a5f8a2614 unbound-libs-1.6.6-5.el7_8.tuxcare.els4.i686.rpm 30d950e0041a11923f262aecdc65eae4e6a5e17d17235ee75a73d70e31371f5b unbound-libs-1.6.6-5.el7_8.tuxcare.els4.x86_64.rpm 795f3d01914675cf490b54927373e3c9023d04f3c762475b7347c020f6ffe68f unbound-python-1.6.6-5.el7_8.tuxcare.els4.x86_64.rpm 531ca1af3a49d41a98532419acd6f97e511e068bd7d3be194cdcf684e2898ad0 CLSA-2025:1767098038 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.29+7 (GA). Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.29+7 (GA).

0 tuxcare-rhel7-els java-11-openjdk-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm e7e7531c4b781926257ceb9dddd86d964851527fa7f6d93939b780bec8cf26b9 java-11-openjdk-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 60cf3e0ad79b751e17aff75498a55fca3f975664ef6deb681807eef00ad2a98c java-11-openjdk-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm a1cd5a4b8bd43da99edea51cc285ea8d400bf533e57200c97b21731523dfddc0 java-11-openjdk-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 34ca42f27ac2aaebe44aece559e6c270c993f86fbe93a661a5f857f7cf24418c java-11-openjdk-demo-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm f725bdcecec524ea61773fc3c13126f303025814401e921db6a52a07ff8b1b05 java-11-openjdk-demo-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 9de855855b66f49e7aa7f28e78300fa6d7a45a9c73a80a565f654b9bd2f2702a java-11-openjdk-demo-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 5c2b8224fefcf48aeab9291b427a083fb697bfee6284b9c58a19eee57d4748d9 java-11-openjdk-demo-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 5c9daff215720cdcfeb4c9746e8757ac80494e101672d2ea1168b8d867ee0944 java-11-openjdk-devel-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm c03d6e966c1aebfcc43f4efef7db56c7020dc1d81879138f0bdd531739d65955 java-11-openjdk-devel-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm d30d542e4d3d69562e69b34f265e0d06a926a1c79591a1447ac1ccf31b4e3a65 java-11-openjdk-devel-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm b277a89997330f9b124659527fc08ddc1b86fd1961a849f5664d83d80416bd5c java-11-openjdk-devel-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm b4ede31cbefcd100cea84cefc7532c6a3e60e11fbc551b564db72c82c3eb3c52 java-11-openjdk-headless-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 3292695d001e57b8f9619781aeb8c3cc2e6d7b0deb64f736d5060e9cb4923ba6 java-11-openjdk-headless-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 4cae128130abfb9c303a87934cc6232de1fd93ad6207b369c71523be05ff1e98 java-11-openjdk-headless-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 4d88fba3cb1943e6e092bd514701492a02a639085923a3e6814a1e0ed08e8f46 java-11-openjdk-headless-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 8e41a7a95739457f5e227eb00c52b9a3c5fe80cd4d607df2ba75872afbe335aa java-11-openjdk-javadoc-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 883f4c58ee73d74d0fb76c3e0d0f870681d52402381488b9c086fb48731932a5 java-11-openjdk-javadoc-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 3d63c1df6eae4accabf6727654e75241db4d20b1c6f01db7448dc0752706f1ce java-11-openjdk-javadoc-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm a9d3b710f0327cfef9ee4c703ac674593b73d9b168160695815570fb150cff5b java-11-openjdk-javadoc-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 175c66b369e718cd98127060fe345aad6246222e5a5fb743768874ba75f6c789 java-11-openjdk-javadoc-zip-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 6d83bad4daffbecc273ebbfede625c5dc720c9620c8491ca98ee28115bb347b9 java-11-openjdk-javadoc-zip-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 230b1aa8847b635170a7920da97a615b8c5460ed8ca2a9b554050cedb037ca05 java-11-openjdk-javadoc-zip-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm a9da94711d26283d62778a3a25355403dc954ce2f28b49ac20d547085f38dc33 java-11-openjdk-javadoc-zip-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 6d94ae83055ee79ca72121a4c23fec1f85fa5ca023b577633e68bbbecfd6c056 java-11-openjdk-jmods-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 9bc8871ec0c33036602a976d06bf977f286e4b88518164d3775c33eeacf3eded java-11-openjdk-jmods-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm d2bf85b50a098493ff0e8ecda969586c8f9f95230a29965c6eb6a9ba1d26863c java-11-openjdk-jmods-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm bbf17a75655871dea8a351f9d4ab99e12508acd373888ceea1f8c7af33c00822 java-11-openjdk-jmods-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 7db26844b5a97b3658c6ac4b56c9a1b61de1090fc469ff7197b29ae464b08e55 java-11-openjdk-src-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 2901f4e2e00f9c656f4820beffaf05b670efc5fdc7d02d3e29444b5b1a5cbb60 java-11-openjdk-src-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm e5e86eb31d9274b80b4cdd6ad670285e88aa8c7f9072c4e888e0d811e19c879e java-11-openjdk-src-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 8fce1328f8f996cb6f64d83b808e2e9eca22858948c2426900f7d03d9819df7d java-11-openjdk-src-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 69239d73c34feb22c610e57957d2bb0a52b15e5f71acdbfe27ca686a011c5458 java-11-openjdk-static-libs-11.0.29.0.7-1.el7_9.tuxcare.els1.i686.rpm 2eb90762cfe88dbd559e8328f9fe7cff2e657690ddd0ceff6c2534666574dfcf java-11-openjdk-static-libs-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 17d979c9664615845ee06c7e9b8f2f4ed04f0de5cf2559b4c7604e6fd86e695f java-11-openjdk-static-libs-debug-11.0.29.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 22628d6571046996fcd84a05cf67724680f16bd5115ddca15d8b10a92651e89a CLSA-2026:1767867718 TuxCare License Agreement 0 - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186} - can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} - ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403} - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-40186} - can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004} - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} - ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757} - ext4: fix undefined behavior in bit shift for ext4_check_flag_values {CVE-2022-50403} - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978} - ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729} - ipv6: Fix infinite recursion in fib6_dump_done(). {CVE-2024-35886} - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm be32fdf0933f47fb73e9fc23014dfa1cda02acfd95a1fa6557b1317ca7d392a6 kernel-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm 30b75fe02d8efbae4a14cd52cc1bf152ab02daa0a34b3f8ff208684ddbc93903 kernel-debug-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm f40b59817bac3ddbfad8089000223a1b712ba4f6ba263369842fecaa386f4ae5 kernel-debug-devel-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm d9c89492fcf7134244691de9f7d7401f06bdccd3f8401c367b099f65c156d324 kernel-devel-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm 3890c194cb5b0d08336001b937aa102f1753e0428a7c39acb2b9690985c9ce1a kernel-headers-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm 8fe1272656ef884507c1f418c6be16fa47bc47e57eb2d5e6978a4e0641aa8d8d kernel-tools-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm b10c2de73839da95d9c647eba3e086a4de2c34015b5f4aad682c38bace5f757b kernel-tools-libs-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm 3ec8e9ec2b384591c265f3d1df469e9c612ca12e5997bd109b232f4cc663a2f5 kernel-tools-libs-devel-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm 81264e7cb15783751a88a600f2419b2e28313e8099757754425be19c69cc56e2 perf-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm ebe5a6d4613214b760aa5b2d8b8b0464d0da0e26f95423ead7022db2927a36a6 python-perf-3.10.0-1160.139.1.el7.tuxcare.els4.x86_64.rpm 53d4094a3b09bc5e70e07c27506fca00a8d940f86325ec77944517626c3370fd CLSA-2026:1767950193 TuxCare License Agreement 0 - CVE-2025-58098: fix passes the shell-escaped query string to #exec cmd="..." directives Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-58098: fix passes the shell-escaped query string to #exec cmd="..." directives

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els7.x86_64.rpm 72690b8c1e00440b8ff6ee2f9c1c11e5e6a6b0f76f8b10d47d62386f797732da httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els7.x86_64.rpm 4fd8eaf368d8a9cdf409b075775bb6632c000e811880f3cc9a7e2c7f33187a5e httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els7.noarch.rpm 310f3e3ca90375424e27ee274aec5a3fe72ac5145662d76aad32af9b825e3938 httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els7.x86_64.rpm a879b9576d90ceadc305ea02df5bfc3aadfe3006642372236b0b0127b667f7c4 mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els7.x86_64.rpm d3cc68142e6b8cfab1fe5d49093f9096fc39315ab182012f80876c1c73911e05 mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els7.x86_64.rpm 8c742e0d336187ec4e095f3c978590bb6a52a9c336014615e38a3e64b420a911 mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els7.x86_64.rpm 624e1900ea35d672c1bca362721aee1eefc1699766dbafe843de95774235c422 mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els7.x86_64.rpm 3793b915690f900e58f9b9095c2df45119adfeac2fa1646cecb2b44442a76f5a CLSA-2026:1768211438 TuxCare License Agreement 0 - CVE-2025-52005: add sideband.allowControlCharacters config which gives a possibility to avoid control characters in sideband - CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-52005: add sideband.allowControlCharacters config which gives a possibility to avoid control characters in sideband - CVE-2024-52006: fix newline confusion in credential helpers that can lead to credential exfiltration

0 tuxcare-rhel7-els emacs-git-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm ac13754f4caf75ad063c497ec97fe1bdff2fa534e043270d89868cfc641fdd65 emacs-git-el-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm 7b2b5c39d18275022b8294f9fd2772fd5ef2c6e312c2fdfdbb112989d2ed6e17 git-1.8.3.1-25.el7_9.tuxcare.els7.x86_64.rpm 8d74928bed592d671ab0c54ded861fc740b241f801b481b5163057bc1a379831 git-all-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm 2a0166d023d1695b3959dc44ee247e1b56d62153690031a56e1655aa7ff37e5d git-bzr-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm c5160eaeb497ec6dc4a65e31183ff0ed49b119f9cdf3198b1885ce04f5639c26 git-cvs-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm 81feabfeff7e37f6f779c325da03ec3e61cde8c8e9cba00fb0c78ec18b68015c git-daemon-1.8.3.1-25.el7_9.tuxcare.els7.x86_64.rpm 77c8f620bf0a3b90878e4cee1e9b358305c702216efed1b0f3e0aeb45671c83d git-email-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm c40dd43a216f46a49d001b7c9c333dabce779b5a77f8d880675d399199a4cbb0 git-gnome-keyring-1.8.3.1-25.el7_9.tuxcare.els7.x86_64.rpm e878e7cd05c5f3e31cd08d9a529d7f3165ad6a5a8d08b31d6de51a3e0b3a638c git-gui-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm 7d256bb1d4542f59c6c1fbf59f430cb27ef81015558b53677954514eb9c2e2d9 git-hg-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm 90c167186a3604486e026b096fea67baf97a5d56ff3a4925266a52175eaff18e git-instaweb-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm f52999b722fda05cb0cee70639bb6889eaaf073e4bcb28771e607f1fbf800074 git-p4-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm 84a1d960600e4ca283a893bdceb6467a8f18a01ac6a30d245d26c5d286a2df14 git-svn-1.8.3.1-25.el7_9.tuxcare.els7.x86_64.rpm beb907408a628c1e13baa3820a756db69b530e2e1f6b08b8ac2cbf034e7865a9 gitk-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm a913a6a3a2e8f2808a4babe501d327bd794bf4c4809e27071e58a45a732def32 gitweb-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm b61b2fa18d464bbcba3e4d1c0ce05533dc6b4aebeed58744f3201dde152047a5 perl-Git-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm db56099f41a97a96bd8767353eb91cd3351d2deb4f0de6b9e1effd1e438599a8 perl-Git-SVN-1.8.3.1-25.el7_9.tuxcare.els7.noarch.rpm aa49d220962d030f7b4ccbe4417d97332aac5ef2b4ae7a1b4919974b1c2f7288 CLSA-2026:1768223578 TuxCare License Agreement 0 - CVE-2024-32021: fix symlink bypass, abort when hardlinked source and target file differ Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-32021: fix symlink bypass, abort when hardlinked source and target file differ

0 tuxcare-rhel7-els emacs-git-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm c045c409457f0f5754cf62b8074a41152149e5a9e10f5ad407819e53f42b936c emacs-git-el-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm cd49feae314e0ddcd349890eefe2a03922bb70e38d34ee9e8c1de9f831fd5689 git-1.8.3.1-25.el7_9.tuxcare.els8.x86_64.rpm b561b39099b226717b8700a0d315d8cc9d673084e6b7624dd20b5d4ee55097e7 git-all-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm 4e1bfdcf04dcf78a581fc548bbd4367f27bc4e52b10e08dde9b4c6d54368200e git-bzr-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm a5b53010c80210bfb436ca368c37a4af386aaf1b503ff6a9cb2013e7fc770acb git-cvs-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm 0e77467a0b94cf800d844edcca58f5a217813621762d8cd238b2c68d60a7e765 git-daemon-1.8.3.1-25.el7_9.tuxcare.els8.x86_64.rpm f8c4fa55822b57ccbf8b7aeba7f067fa2a7d31c9b9fbad41cbe6eb3d05692ede git-email-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm 1fe9eb354110a5bd8c73b23d2e25ab62b55ae79f1c86ff874e793574fac5319b git-gnome-keyring-1.8.3.1-25.el7_9.tuxcare.els8.x86_64.rpm b2cdba6a7bf4220fe3dc1dcf5b7e1c8eee596ec44e233a0b3bc3a13549f33e37 git-gui-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm 29db8a668b44e0f6f4689382e8cde7d18758892a1fc04e53ff9242723a76e45f git-hg-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm 4f7baaad76f75203d5c60c690a7383dbe8e560bb8aabaeecbb2b42d6c65ba878 git-instaweb-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm ca6e6034c35e5dc92c4b114e8ade43677c3b354f37740871de2a0ee5218f88e2 git-p4-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm ac65da863f276d176a7fa6c36db595025f16119437a12a5bd16e3feab4ff96a3 git-svn-1.8.3.1-25.el7_9.tuxcare.els8.x86_64.rpm eabd5606f1736f1fbd07292f76be52e6b821d8172633cc84831a8023cac53128 gitk-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm ff0956e1539f281eeb615ab01e8bb7a4cdd193f4e29056ca3eaba77a313748cf gitweb-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm 55a93cd6fe17ec100d7eb559b9f04802ffcd66e22d4843d3c23ef85636ef0c08 perl-Git-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm 62fa46fa5d1fae950da3367b72c65a20f9eb93b79f6a3969088d2552b444af62 perl-Git-SVN-1.8.3.1-25.el7_9.tuxcare.els8.noarch.rpm 27d898479f0fda1977dc10f9218ba8c280d6b77dd31ec0a56654314b512aaecd CLSA-2026:1768224107 TuxCare License Agreement 0 - CVE-2023-31484: add verify_SSL=>1 to HTTP::Tiny to verify https server identity Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-31484: add verify_SSL=>1 to HTTP::Tiny to verify https server identity

0 tuxcare-rhel7-els perl-5.16.3-299.el7_9.tuxcare.els1.x86_64.rpm e8f09cdc912a7a3a8bd353de86ffb49abf5633e5d7dd2202546f83dd338f1453 perl-CPAN-1.9800-299.el7_9.tuxcare.els1.noarch.rpm b1f784adba1f355062b7343c8196dde7b2149485a5b5f868b2399a2448fd5cc4 perl-ExtUtils-CBuilder-0.28.2.6-299.el7_9.tuxcare.els1.noarch.rpm c7af63fe91fe6744d3ffb97904c2ee332a810c8551538fd7cad582a71159ebce perl-ExtUtils-Embed-1.30-299.el7_9.tuxcare.els1.noarch.rpm e8d8c01b896d5968ab15d59ed230e1a228ba84626fb7bd7652a082abd43f9d5c perl-ExtUtils-Install-1.58-299.el7_9.tuxcare.els1.noarch.rpm 21ed3c7c46757c7ce0598d9172d3fabeb6e3a9cbf635a205572b14543ed1446e perl-IO-Zlib-1.10-299.el7_9.tuxcare.els1.noarch.rpm 0fcc559a869547cbfa2b0ed1b75e28eaeb8cda8b791256e93120d15c0410bd5b perl-Locale-Maketext-Simple-0.21-299.el7_9.tuxcare.els1.noarch.rpm 367b697dab28ba896d07136688d532aaef470d1f98f2c3a75a3c5cfe8872091e perl-Module-CoreList-2.76.02-299.el7_9.tuxcare.els1.noarch.rpm 4f508ac816e2c4cc770ac63300b30eabe6af1ee0cda3e8f69280c5141f061f2a perl-Module-Loaded-0.08-299.el7_9.tuxcare.els1.noarch.rpm 8b4c98cf56efbaa7c4b0d85915dcd846274eeeb36829167d08461c8a002144d3 perl-Object-Accessor-0.42-299.el7_9.tuxcare.els1.noarch.rpm bff5d9c63e7afaf6862b09df52517f10f1ea781eb380f459094e4f2af778bec4 perl-Package-Constants-0.02-299.el7_9.tuxcare.els1.noarch.rpm 5d6d91aec46e8682861b4403dc24c987cf7e9e040dcd411436631de4a2146b69 perl-Pod-Escapes-1.04-299.el7_9.tuxcare.els1.noarch.rpm c8a8cfd703028e45aa4696cb2e7b65e34635ca7d93d35cd80c530b39637aba48 perl-Time-Piece-1.20.1-299.el7_9.tuxcare.els1.x86_64.rpm e34e689168c693e277bfa4893a6946ca026a553d6242bc2dff67489a0c768c8b perl-core-5.16.3-299.el7_9.tuxcare.els1.x86_64.rpm e98d7ffb711c55c073296c9d8302db12e5c6d7faec5d91cc709042b6f941cc05 perl-devel-5.16.3-299.el7_9.tuxcare.els1.i686.rpm 3195e5052e4c49dae2747032ad9252f1504c24be7096cd8fcfc9f8546ce207c1 perl-devel-5.16.3-299.el7_9.tuxcare.els1.x86_64.rpm a425c43f07f8483730db563ca21460b1249b2bdbea63d066d3d7b2020bf2e89c perl-libs-5.16.3-299.el7_9.tuxcare.els1.i686.rpm 3119892397d65992e8d5168f02781e03954e115736fda5e44a523f6cf28afc93 perl-libs-5.16.3-299.el7_9.tuxcare.els1.x86_64.rpm e1105a6888fe53493515a2495711ab78757a9eeb1992192777d5b2573dd28e6a perl-macros-5.16.3-299.el7_9.tuxcare.els1.x86_64.rpm 5a65c3cefe7985b69f1e5c8022c588783d7d0389de52f3f9f7f91f8895b2b731 perl-tests-5.16.3-299.el7_9.tuxcare.els1.x86_64.rpm 5c6e9a9ee12181ba05b20ff6b482ef6d76e3d7ad20c3cdd1ebda013d98c6a1fb CLSA-2026:1768825166 TuxCare License Agreement 0 - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() - nfsd: don't ignore the return code of svc_proc_register() {CVE-2025-22026} - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull {CVE-2023-53104} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class - HID: stop exporting hid_snto32() - HID: simplify snto32() - HID: core: fix shift-out-of-bounds in hid_report_raw_event {CVE-2022-48978} - HID: core: detect and skip invalid inputs to snto32() - HID: core: don't use negative operands when shift Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271} - fs: fix UAF/GPF bug in nilfs_mdt_destroy {CVE-2022-2978} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356} - ALSA: usb-audio: Fix size validation in convert_chmap_v3() - nfsd: don't ignore the return code of svc_proc_register() {CVE-2025-22026} - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull {CVE-2023-53104} - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class - HID: stop exporting hid_snto32() - HID: simplify snto32() - HID: core: fix shift-out-of-bounds in hid_report_raw_event {CVE-2022-48978} - HID: core: detect and skip invalid inputs to snto32() - HID: core: don't use negative operands when shift

0 tuxcare-rhel7-els bpftool-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm bb37dc50cdd1313b7740482fcba764447efe328dc777c8bd66aae9724445511d kernel-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm 2977c85c0028d7c517fc25c2c83f4ba04227b5e470c0e0e7158d0aeb648b9cb4 kernel-debug-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm 942c5b232e1662a38573738d0c985592cea3332cb24a07b85bc0f850f327b1f3 kernel-debug-devel-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm 4f56d43b4c98185e3121bf541e0fa362768e02a4c96fb6366c35939258b6dd17 kernel-devel-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm c490282d40f665223c29894edcad350558ef065807ecbdceea0fd538a2e59ef6 kernel-headers-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm d6b42fa89716a03b58d059561e35673f756d6ee4117cdcd598ace9980dd64688 kernel-tools-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm 1c3c3e304142089ff67a941e6e715a9c43e575da0636c14a325a46c871864d96 kernel-tools-libs-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm b81484e62efdb189954a12672891089c5dab1d02e89652071845b69334ea4900 kernel-tools-libs-devel-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm c097e9f91ca8726866710caa62c96eb592a0c008e251dbcf7707b25b17b1b793 perf-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm b2c858cd0b2c024d87fd467fb8dc07ea0c31556808dca5f3714a13dcabe556e2 python-perf-3.10.0-1160.142.1.el7.tuxcare.els1.x86_64.rpm 5f022cca1599cbf1fdfcd70b2b8cdf75a106ad0beda53ebe3284d45b1392a7e8 CLSA-2026:1769182554 TuxCare License Agreement 0 - CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-68973: fix memory corruption in the armor parser that leads to out-of-bounds write for malicious input

0 tuxcare-rhel7-els gnupg2-2.0.22-5.el7_5.tuxcare.els1.x86_64.rpm 56101522630cf30ea746d9a3f7ff7deb9e500acdeda7ae44a1d0f8ace39ca9a8 gnupg2-smime-2.0.22-5.el7_5.tuxcare.els1.x86_64.rpm 49470072b0c8e60a0edcc83b46af907db5d4cbbf123e25067e2421c87aed263b CLSA-2026:1769598900 TuxCare License Agreement 0 - CVE-2025-14523: reject duplicate Host headers to prevent request smuggling, cache poisoning, and host-based access control bypass attacks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14523: reject duplicate Host headers to prevent request smuggling, cache poisoning, and host-based access control bypass attacks

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.5.el7.tuxcare.els3.i686.rpm f73cb5783554fcd97561961b580983faa8541d32568b32b42da807adf6ef43c9 libsoup-2.62.2-2.0.5.el7.tuxcare.els3.x86_64.rpm f65eecdbe8ec27bd537ef628b8329014c0815c7664db079dea61fe65e4ee751f libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els3.i686.rpm cf43fe918aebafbbce1fb5922a6947cd12de0b69fe26d3adaa7766a29c2a3e4b libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els3.x86_64.rpm 189103e3489ea27d77aa3193336b41ae91dd20d2c66d1b616bd198521b49ea0a CLSA-2026:1770028764 TuxCare License Agreement 0 - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-53705} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282} - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} - firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432} - net: openvswitch: fix nested key length validation in the set() action - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - fix: crypto: lzo - Fix compression buffer overrun - fix: NFSD: Protect against send buffer overflow in NFSv2 READ - cifs: fix oops during encryption {CVE-2022-50341} - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - fix smb3-encryption breakage when CONFIG_DEBUG_SG=y - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406} - mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832} - mm: fix zswap writeback race condition - Bluetooth: prefetch channel before killing sock - Bluetooth: Fix l2cap_disconnect_req deadlock - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827} - Bluetooth: Fix refcount use-after-free issue - Bluetooth: Check state in l2cap_disconnect_rsp - Bluetooth: L2CAP: Fix build errors in some archs - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Bluetooth: use the correct print format for L2CAP debug statements - i40e: fix Jumbo Frame support after iPXE boot - i40e: Report MFS in decimal base instead of hex - i40e: Fix unexpected MFS warning message - i40e: Add a check to see if MFS is set - bitops: Add non-atomic bitops for pointers - bitfield: Add FIELD_MODIFY() helper Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} - ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-53705} - libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285} - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write {CVE-2023-53282} - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} - firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432} - net: openvswitch: fix nested key length validation in the set() action - wifi: mac80211_hwsim: drop short frames {CVE-2023-53321} - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422} - fix: crypto: lzo - Fix compression buffer overrun - fix: NFSD: Protect against send buffer overflow in NFSv2 READ - cifs: fix oops during encryption {CVE-2022-50341} - SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL - fix smb3-encryption breakage when CONFIG_DEBUG_SG=y - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406} - mm: zswap: fix missing folio cleanup in writeback race path {CVE-2024-26832} - mm: fix zswap writeback race condition - Bluetooth: prefetch channel before killing sock - Bluetooth: Fix l2cap_disconnect_req deadlock - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827} - Bluetooth: Fix refcount use-after-free issue - Bluetooth: Check state in l2cap_disconnect_rsp - Bluetooth: L2CAP: Fix build errors in some archs - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression - Bluetooth: use the correct print format for L2CAP debug statements - i40e: fix Jumbo Frame support after iPXE boot - i40e: Report MFS in decimal base instead of hex - i40e: Fix unexpected MFS warning message - i40e: Add a check to see if MFS is set - bitops: Add non-atomic bitops for pointers - bitfield: Add FIELD_MODIFY() helper

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm ab8ff2381af1343aa4544dcfb6e91b0345837b3eb2e17702b4ebca7c7e1a4633 kernel-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm 3bf4e636d04f40a27a4bdc4be4accf338dc36072232f7cffa886cfea3715e3bc kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm 7aeaca79b9d6a93503ac6ba1577978041c91ab5a4fe01a3a7f5825fe9e2eb2ee kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm f0b9bf99ccae1b8b01cfa7a54b90a427975cc161eca12dfa22a5ba748f1c9141 kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm e6716e2aee667b352da5af7ee1cf574ef5c070f88cbe996aa3bd082ad3209bab kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm 3329cc59d97683f51933cd39d3e2c287cd8a661ea46bb5411f4aae719bcde44b kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm 57b70f1cf5b448292a4150b9c5e58750280ebc11ab3fcc97e520a225c69527b8 kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm ebc853a8fc9100179d05b57434383c89997b684165ec34fe34ea4a598ca22769 kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm 1a5d4b012134319156a225db1cadeecb98028c83b23a6887bbffd339ad89715b perf-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm 74dcf918087392e50b7836aaf7aec585a0305b59ca3b6287912743268e8ba774 python-perf-3.10.0-1160.144.1.el7.tuxcare.els1.x86_64.rpm 7177cf697b85a208ceae112a043f883ba22b4628790a0f2242c8f88bc3b9a55c CLSA-2026:1770118623 TuxCare License Agreement 0 - Update to openjdk-shenandoah-jdk8u-shenandoah-jdk8u482-b03. - CVE-2026-21945: Security component vulnerability allowing unauthenticated attacker with network access to cause hang or crash (DoS). Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update to openjdk-shenandoah-jdk8u-shenandoah-jdk8u482-b03. - CVE-2026-21945: Security component vulnerability allowing unauthenticated attacker with network access to cause hang or crash (DoS).

0 tuxcare-rhel7-els java-1.8.0-openjdk-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm b4801475fc4f6c2a504fafb2a133b5d13bdf57b4f147da06b44d0955ff3435cc java-1.8.0-openjdk-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm 016f2fcefd7a11f65ad6673eeeb7aba2904856ac3ae1b1c9e8d48f0bdd63f21e java-1.8.0-openjdk-accessibility-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm c0b18da3486bcfa72222e21678c8ebfed63587a3d128a97cc43c0fd5aaf1d27e java-1.8.0-openjdk-accessibility-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm 45640c2c9a5a89cbcd320f34742b36763b60cb9afb7c7499f7b3be1f2885f6b4 java-1.8.0-openjdk-accessibility-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm cf75ee5822a8b520b0a0f4104e0edfd7b93ec2999f4bba310ba6b36f4f538a89 java-1.8.0-openjdk-accessibility-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm 21dce738a0f7d789500fc2b70a037e47572df4224374ecda354b28ba4251494c java-1.8.0-openjdk-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm edfb2a38d0c9e3e472fa3a9a3c7391163d04fac4f2af454e9c2f52c5a02ee869 java-1.8.0-openjdk-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm 681bd1aaab58de85602e52566645b54a249c49068cd36e7e2544ae4bd0f45459 java-1.8.0-openjdk-demo-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm 030196dd1ff8852094b2be790f3b0abb5db16abffbb6f3bca0a9e4966c26a107 java-1.8.0-openjdk-demo-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm 9750228435b227edd0a20a73c009b5c605efed11919dae2c4e3cc3f1167d7bb4 java-1.8.0-openjdk-demo-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm 9684ccf06f0092bf7ebe644f0cf4046bec8a6b29f469c010a071b2b4889c75e0 java-1.8.0-openjdk-demo-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm b015f6957e9b4a3a1953bd6ec4d769cae64d7885ef406d11cd1d5145b7741497 java-1.8.0-openjdk-devel-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm e59cd2bf435f037d8b6b2fde8b51dc40a07c25232e3532e09f82ba3591332005 java-1.8.0-openjdk-devel-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm bde717f8073f297c661c205f480c749b91f65fc2be7acd6a47b9e98751a45d4c java-1.8.0-openjdk-devel-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm 2a01d1548ef15127610f149a8638784077de8aa3092da53b1f1450b716379e75 java-1.8.0-openjdk-devel-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm e5035d1b4e10bd5d8ce1d3161bdb87218c013471054d34bd929948a0b3cf64f1 java-1.8.0-openjdk-headless-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm 455d6d8ce347a30ee1cdcbab9f0396c85adc453f9fdc338aa70a6791168cf03b java-1.8.0-openjdk-headless-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm c81396d1a1be20c7b860ff4fce393950ee33b1646f6530e86234a2f410d29633 java-1.8.0-openjdk-headless-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm 9f85773323287eefb66e138ecadc12074617487ca863c719144740da28323b40 java-1.8.0-openjdk-headless-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm 293f3419b00b063b0fe218ba3168e2545f80e99fc5e5088dc813e1a78cdde2ff java-1.8.0-openjdk-javadoc-1.8.0.482.b03-1.el7_9.tuxcare.els1.noarch.rpm 64bd18bb37e7084c2c244c4ee847f98628480945eb5767a2a5e95e9f11c1ebab java-1.8.0-openjdk-javadoc-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.noarch.rpm ec79ca698442f790aea0374b60614e07e6419b10cf9b74d4368466c148ccaf92 java-1.8.0-openjdk-javadoc-zip-1.8.0.482.b03-1.el7_9.tuxcare.els1.noarch.rpm cc7c9ddb9d76c8c7346045f4d6e58834306a297b567b8a10aee63abf34baca48 java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.noarch.rpm 5de27a85f538de4da3d61b4b36e6179ca5309c83b84f298d966fc9798087e772 java-1.8.0-openjdk-src-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm d7bf61919ee855c6cb5354ad553a496bca6bc591aae7c0eb5a3b9e1b95fd094c java-1.8.0-openjdk-src-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm 6a0c8da34121328ccfe1dcb7a2aa5b4a19a5506df449fa5a46b128775d23783b java-1.8.0-openjdk-src-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.i686.rpm 9ed3a8cc9f75b017edb318e466ea9edbcbd5aace2e7d1544c259c75b9bdd5940 java-1.8.0-openjdk-src-debug-1.8.0.482.b03-1.el7_9.tuxcare.els1.x86_64.rpm 9e739c66c4df6ba42b2f51ad2e7467f712a5a814d27af0a3dcfe623d82194786 CLSA-2026:1770213583 TuxCare License Agreement 0 - Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000410; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000650; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3d; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x43a; - Addition of cpuid:A06E1/0x97 microcode (in microcode.dat) at revision 0x1000273; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x132; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x6133; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x11a; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002c0; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Removal of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0xa up to 0xb; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x437 up to 0x43a; - Update of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) from revision 0xa000100 up to 0xa000124; - Update of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) from revision 0x10003d0 up to 0x10003f0; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000362 up to 0x3000382; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12f up to 0x132; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4129 up to 0x6133; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4129 up to 0x6133; - Update of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) from revision 0x123 up to 0x125; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1d up to 0x1e; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C0664/0x82 microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C06A2/0x82 microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x210002b3 up to 0x210002c0; None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Update Intel CPU microcode to 20251111: - Addition of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000410; - Addition of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000650; - Addition of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3d; - Addition of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x43a; - Addition of cpuid:A06E1/0x97 microcode (in microcode.dat) at revision 0x1000273; - Addition of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x132; - Addition of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x6133; - Addition of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x11a; - Addition of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002c0; - Removal of cpuid:50656/0xbf (CLX-SP B0) microcode (in microcode.dat) at revision 0x4003605; - Removal of cpuid:806F8/0x10 (SPR-HBM B3) microcode (in microcode.dat) at revision 0x2c000401; - Removal of cpuid:806F8/0x87 (SPR-SP E5/S3) microcode (in microcode.dat) at revision 0x2b000643; - Removal of cpuid:90672/0x07 (ADL-HX/S 8+8 C0) microcode (in microcode.dat) at revision 0x3a; - Removal of cpuid:906A3/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in microcode.dat) at revision 0x437; - Removal of cpuid:B0671/0x32 (RPL-S B0) microcode (in microcode.dat) at revision 0x12f; - Removal of cpuid:B06A2/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in microcode.dat) at revision 0x4129; - Removal of cpuid:C0662/0x82 (ARL-HX 8P/S B0) microcode (in microcode.dat) at revision 0x119; - Removal of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x21000291; - Removal of cpuid:C06F2/0x87 (EMR-SP A1) microcode (in microcode.dat) at revision 0x210002b3; - Update of cpuid:806F4/0x10 microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F4/0x87 (SPR-SP E0/S1) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F5/0x10 (SPR-HBM B1) microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F5/0x87 (SPR-SP E2) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F6/0x10 microcode (in microcode.dat) from revision 0x2c000401 up to 0x2c000410; - Update of cpuid:806F6/0x87 (SPR-SP E3) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:806F7/0x87 (SPR-SP E4/S2) microcode (in microcode.dat) from revision 0x2b000643 up to 0x2b000650; - Update of cpuid:90675/0x07 (ADL-S 6+0 K0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:906A4/0x40 (AZB A0) microcode (in microcode.dat) from revision 0xa up to 0xb; - Update of cpuid:906A4/0x80 (ADL-P 2+8 R0) microcode (in microcode.dat) from revision 0x437 up to 0x43a; - Update of cpuid:A06D1/0x20 (GNR-AP/SP H0) microcode (in microcode.dat) from revision 0xa000100 up to 0xa000124; - Update of cpuid:A06D1/0x95 (GNR-AP/SP B0) microcode (in microcode.dat) from revision 0x10003d0 up to 0x10003f0; - Update of cpuid:A06F3/0x01 (SRF-SP C0) microcode (in microcode.dat) from revision 0x3000362 up to 0x3000382; - Update of cpuid:B0674/0x32 microcode (in microcode.dat) from revision 0x12f up to 0x132; - Update of cpuid:B06A3/0xe0 (RPL-U 2+8 Q0) microcode (in microcode.dat) from revision 0x4129 up to 0x6133; - Update of cpuid:B06A8/0xe0 microcode (in microcode.dat) from revision 0x4129 up to 0x6133; - Update of cpuid:B06D1/0x80 (LNL B0) microcode (in microcode.dat) from revision 0x123 up to 0x125; - Update of cpuid:B06E0/0x19 (ADL-N A0) microcode (in microcode.dat) from revision 0x1d up to 0x1e; - Update of cpuid:B06F2/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F5/0x07 (ADL C0) microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F6/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:B06F7/0x07 microcode (in microcode.dat) from revision 0x3a up to 0x3d; - Update of cpuid:C0652/0x82 (ARL-H A1) microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C0664/0x82 microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C06A2/0x82 microcode (in microcode.dat) from revision 0x119 up to 0x11a; - Update of cpuid:C06F1/0x87 (EMR-SP A0) microcode (in microcode.dat) from revision 0x210002b3 up to 0x210002c0;

0 tuxcare-rhel7-els microcode_ctl-2.1-73.26.el7_9.tuxcare.els1.x86_64.rpm 9f2c319b012e0e6c64630ccc97f88986fd32f5c4652fb15fe796a66b14171755 CLSA-2026:1770392948 TuxCare License Agreement 0 - CVE-2025-13601: Fix heap-based buffer overflow by correcting buffer size calculation in g_escape_uri_string() function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-13601: Fix heap-based buffer overflow by correcting buffer size calculation in g_escape_uri_string() function

0 tuxcare-rhel7-els glib2-2.56.1-9.el7_9.tuxcare.els4.i686.rpm 9293101618e8386b2d5d7a5f8b61b36c28c01b57d1d71d439f4635573027aa8e glib2-2.56.1-9.el7_9.tuxcare.els4.x86_64.rpm 2618ca7632ce14a8a3a2ca92bf91017263b487bcf46e5f5c9dc324aca741b1f5 glib2-devel-2.56.1-9.el7_9.tuxcare.els4.i686.rpm cd1faf98c640c415fb720847f24a2ebb57c6b844911c80447b552a5ecb290031 glib2-devel-2.56.1-9.el7_9.tuxcare.els4.x86_64.rpm 8bb3cad5cf0248b41fb4f8d7d419254b2b2152be3037b65f6bf4f89a5dc47f05 glib2-doc-2.56.1-9.el7_9.tuxcare.els4.noarch.rpm 3d8d2df079b34479d6e768afb736f2aba2aceab58a67380318e269500d944aae glib2-fam-2.56.1-9.el7_9.tuxcare.els4.x86_64.rpm 848f2e492732b93e96bfb2364ad4d72f186e2f3076f65946890bf0ca150ca365 glib2-static-2.56.1-9.el7_9.tuxcare.els4.i686.rpm 092288e13f1b3d0f99d82d863347bbcb17e7aa5e67972a4e0909aa76578c2536 glib2-static-2.56.1-9.el7_9.tuxcare.els4.x86_64.rpm b4133f601a8abbcbba6f249e3cd2f4bdec64cc3709532c5abd525cd219cef8af glib2-tests-2.56.1-9.el7_9.tuxcare.els4.x86_64.rpm 1fa71930f10a7ab4aaff7aba6d00860ca7dbda58ec883483c9d200c9ca573dba CLSA-2026:1770735752 TuxCare License Agreement 0 - CVE-2026-24515: Fix a null pointer dereference in the XML parser caused by the failure to copy user data for unknown encoding handlers Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-24515: Fix a null pointer dereference in the XML parser caused by the failure to copy user data for unknown encoding handlers

0 tuxcare-rhel7-els expat-2.1.0-15.0.1.el7_9.tuxcare.els2.i686.rpm d3422fa4041df0a1720f25e6bf7adb1d3822b5955142f44ffe22b750610cd2f8 expat-2.1.0-15.0.1.el7_9.tuxcare.els2.x86_64.rpm 4cd3269fc4892edaed6f9f4d3ac122debdedede9f003b5667ff491fc604f0da3 expat-devel-2.1.0-15.0.1.el7_9.tuxcare.els2.i686.rpm 1583d089f6a378e42af724cfa442700d296d755796af4f05841e06373d298b60 expat-devel-2.1.0-15.0.1.el7_9.tuxcare.els2.x86_64.rpm 40b9d31f66a9702cb2cabab3a281681d00bcfd9dd0866abeb56a89152e5ad742 expat-static-2.1.0-15.0.1.el7_9.tuxcare.els2.i686.rpm 1ed52359cc63878d531f1dcc6c6a3ebe1141364284a7ae801f372d9a1acfec62 expat-static-2.1.0-15.0.1.el7_9.tuxcare.els2.x86_64.rpm cf74d0b293fb358daee69e8f50e93dbba091c16e4856c3f95e9b3c346c8784ef CLSA-2026:1770821221 TuxCare License Agreement 0 - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex()

0 tuxcare-rhel7-els openssl-1.0.2k-26.el7_9.tuxcare.els7.x86_64.rpm 5ddd5dcb9ff2b9cd7717ca904ffff03bf243f5bdca5c9aa57775b8f0aff58720 openssl-devel-1.0.2k-26.el7_9.tuxcare.els7.i686.rpm 1194b2ffffc35e5d349d334d03b8cd4e2c518493f5221af036387fe7f2fb8122 openssl-devel-1.0.2k-26.el7_9.tuxcare.els7.x86_64.rpm c287b3152e92cd4bda4c54cb00abdb839ff38368e4ddc08535a557dfe6f52534 openssl-libs-1.0.2k-26.el7_9.tuxcare.els7.i686.rpm a661952fcd21e80c7bccd63f39e773124f2d804b7032b16c4f3ca6f82046832e openssl-libs-1.0.2k-26.el7_9.tuxcare.els7.x86_64.rpm 9ea0424e09879238fc9471dfbcd23a0a9b53db4fcdb05e89861b5e15b0b204f8 openssl-perl-1.0.2k-26.el7_9.tuxcare.els7.x86_64.rpm 838676f395b7a8454457859492676537d159f9edc6b4ca76ac13d45798c9e27d openssl-static-1.0.2k-26.el7_9.tuxcare.els7.i686.rpm 492fb8b158bfed5d4f45b6c7889d3963fed29ef00009459572b4d6466a10aef5 openssl-static-1.0.2k-26.el7_9.tuxcare.els7.x86_64.rpm cf5c8559c9abd6bd6f2457693e5f37c2a60905c1d83218b83c1dfcb19275a2dd CLSA-2026:1771009112 TuxCare License Agreement 0 - update to CKBI 2.82 from NSS 3.120 - updated certificates: - # Certificate "ePKI Root Certification Authority" - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Comodo AAA Services root" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - removed certificates: - # Certificate "Baltimore CyberTrust Root" - added certificates: - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate " OISTE Server Root RSA G1" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.82 from NSS 3.120 - updated certificates: - # Certificate "ePKI Root Certification Authority" - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Comodo AAA Services root" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - removed certificates: - # Certificate "Baltimore CyberTrust Root" - added certificates: - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate " OISTE Server Root RSA G1"

0 tuxcare-rhel7-els nss-3.90.0-2.el7_9.tuxcare.els4.i686.rpm 7bca88194a66021dd5c807475ea7bb57f72894b7f6bbdfd7594eac7bdb76e072 nss-3.90.0-2.el7_9.tuxcare.els4.x86_64.rpm 76a16375372aef1d9a08bb4a5e9e0f9256b0dee0030739922c77ec1a183da30c nss-devel-3.90.0-2.el7_9.tuxcare.els4.i686.rpm d9e1c434a01242e0987b19c22271657884fca24227b6047b10467dfa9aca276e nss-devel-3.90.0-2.el7_9.tuxcare.els4.x86_64.rpm 04b9a068bea406bb082cd8b67bca25264ce0de88fe1c86f95365a780e44799a7 nss-pkcs11-devel-3.90.0-2.el7_9.tuxcare.els4.i686.rpm 24f43e145959be72be3b4ec6cefb81449054be6f5d5066a0b6f064a90db4655a nss-pkcs11-devel-3.90.0-2.el7_9.tuxcare.els4.x86_64.rpm 5f5fb37e891491b36d5120713f48fa2eb49d8d36cfb30908b0dd11430f14ad08 nss-sysinit-3.90.0-2.el7_9.tuxcare.els4.x86_64.rpm 3cfdc004ff59545d3978653b981b4aff0e748c31bc8497335ee709d53cc00896 nss-tools-3.90.0-2.el7_9.tuxcare.els4.x86_64.rpm 5ec77033c6d32307ddff38c5d6d157687e4cbcafce538213bbe5b1d4e64d24f4 CLSA-2026:1771240859 TuxCare License Agreement 0 - vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - scsi: bfa: Double-free fix {CVE-2025-38699} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - bna: ensure the copied buf is NUL terminated {CVE-2024-36934} - i40e: fix idx validation in config queues msg {CVE-2025-39971} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- vsock: Do not allow binding to VMADDR_PORT_ANY {CVE-2025-38618} - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} - scsi: bfa: Double-free fix {CVE-2025-38699} - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} - bna: ensure the copied buf is NUL terminated {CVE-2024-36934} - i40e: fix idx validation in config queues msg {CVE-2025-39971}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm ab8a992e7de3ecb7660fb47583273e78fb734ac8a57c74b1b1283486b24fea5f kernel-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm 06ea9aa6ecbc46bc0a1c8c1702431dc7be47b17329597826e6ac73017ffd65bf kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm fe6d7e05c57d27f5072f1f06761b2fd437e0ba6195aec10d8773e0bf0f371dff kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm 5482f6e7803e4222cd97be746c5b3ef514d4e0f781c95bdda17412a38cacdd7e kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm dc43f3090a96cf9fc5486f56c5845e629752bf0799dad926412764fd4382db23 kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm cb3e8afdb05978acd917b85b433adbd0b494fc266f4fe0fb928bd0c4fbf1bf01 kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm 61cf9f0c7a3170270dcff0a2676455f2d15c3c29e2640a03e00bdce72b4be7ce kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm 4e024557023924bd2fc08833257fa15cd0b00fffef73750711d6fa89f462ad14 kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm faa5ebef9b2bc2aae03899d2376c6f8dbb29282b2e6e8c8451d44f79399425d9 perf-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm 71710524cb7d551c49b71fa4e34bc420b403bd29a255026bc9c9d5f8048303e3 python-perf-3.10.0-1160.144.1.el7.tuxcare.els2.x86_64.rpm 73cf698a60075c4e21baa903618bd439304ebfabb9743ca3f73469aae3089498 CLSA-2026:1771417949 TuxCare License Agreement 0 - CVE-2025-61662: fix use-after-free in gettext/gettext due to unregistered gettext command on module unload Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-61662: fix use-after-free in gettext/gettext due to unregistered gettext command on module unload

0 tuxcare-rhel7-els grub2-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm 1eecab826354099f721ed63d1468c293a1fdf4da1264589d7e44a4d372128f5a grub2-common-2.02-0.87.el7_9.14.tuxcare.els4.noarch.rpm 065cab611c36259ea358d1f91473a56844a0295a535f2051d3cd786af1c5af41 grub2-efi-ia32-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm 5168b0962136c5e2624a1196f23da2965bfadd45555a5a9a3e23cf0aa7d831d4 grub2-efi-ia32-cdboot-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm 8f5d0167b8a97ce521faee3d6d12646d89e9e0af51372a32deaf9cf6c1a59aad grub2-efi-ia32-modules-2.02-0.87.el7_9.14.tuxcare.els4.noarch.rpm b598f9aff08c7a9d57299da10288ee66cd355934fd2079a55ab100c9767532ca grub2-efi-x64-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm caae58d73b9ed128bf40fb730e208a8954dc6472602a9f904d49ac007134306c grub2-efi-x64-cdboot-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm 3902dbaaa718f9ceb11acc7c0579891024b401faad459bfeecd9e430f60488a7 grub2-efi-x64-modules-2.02-0.87.el7_9.14.tuxcare.els4.noarch.rpm 68d7c0a597946d07685845781889ba596c40227c20a353cc697a16442b9b5702 grub2-pc-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm 043592c66ac5865cf7824651c8fa2164839dc35efdbbdfed8dbb8c896ad7bba4 grub2-pc-modules-2.02-0.87.el7_9.14.tuxcare.els4.noarch.rpm 9ec0aedea2d30d3c25e234d193bd90f1d9bb82a800ffaff8011d8b2d42514bb7 grub2-tools-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm cc05ae7e000ae779a1f0b74f2182de466fc8871368db86c8dfae568e214c9b92 grub2-tools-extra-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm 674234af861d101bb17dd38cb2a0f07d1a25fd35c53634afa4b25067555be20a grub2-tools-minimal-2.02-0.87.el7_9.14.tuxcare.els4.x86_64.rpm dc3c66f4f786fc2c9a4350b815b979e61561918abb7532d54822edd94b49945f CLSA-2026:1771519029 TuxCare License Agreement 0 - CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soup_filter_input_stream_read_until() - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum() with excessively long passwords Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1761: fix stack-based buffer overflow in multipart HTTP response parsing caused by incorrect length calculation in soup_filter_input_stream_read_until() - CVE-2026-0719: fix stack-based buffer overflow in NTLM authentication caused by integer overflow in md4sum() with excessively long passwords

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.5.el7.tuxcare.els4.i686.rpm c9dd5f3ffdf19ed371af478a1934ddb1e800a58b5d6d4d3a513d71774fc45d8d libsoup-2.62.2-2.0.5.el7.tuxcare.els4.x86_64.rpm d8bb5a0056a67e16fd7651872edb4904b19fbf6a7cc7341391adf9c417123259 libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els4.i686.rpm 6c7e4fddc6866bfdb1414dd0cf3809a0a5e480cbbcd488d025ff62f2f3f26fbe libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els4.x86_64.rpm 1b76ca1196977ceb6fc11a949ef332b66538a5ba4234c27af825acf4353b1762 CLSA-2026:1771854105 TuxCare License Agreement 0 - CVE-2025-14087: fix integer overflow in GVariant parser leading to heap corruption via buffer underflow when processing malicious input strings Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-14087: fix integer overflow in GVariant parser leading to heap corruption via buffer underflow when processing malicious input strings

0 tuxcare-rhel7-els glib2-2.56.1-9.el7_9.tuxcare.els5.i686.rpm ec42d9fd3253b80ec0c2857d93f776b9d40b0619f154d3ea64ef22a3c027ab0d glib2-2.56.1-9.el7_9.tuxcare.els5.x86_64.rpm 695474e066da584f3b9ad51b47fcd5caad5296ebebbce8a9dfd796bed50b3415 glib2-devel-2.56.1-9.el7_9.tuxcare.els5.i686.rpm 7626fcfd3779f535a90fdaff70243c1e5b836c420f8f41b7ec2357cc9aabb211 glib2-devel-2.56.1-9.el7_9.tuxcare.els5.x86_64.rpm febe0aa14f4322454a771e1570ad53618844d56498d3a6abc82f956b41a54c76 glib2-doc-2.56.1-9.el7_9.tuxcare.els5.noarch.rpm 7de107f7944e9467ed11c44cfe1a31fafe204f7c2a788ed40344601f95534c1a glib2-fam-2.56.1-9.el7_9.tuxcare.els5.x86_64.rpm d6cc4d1762c14a0876dc46eb076db58272e3b30969081f8aea983afba77752b3 glib2-static-2.56.1-9.el7_9.tuxcare.els5.i686.rpm 363de67883db06fb3f91550124f881fdefa121ce78c66538ce6ce5bbd067cdb3 glib2-static-2.56.1-9.el7_9.tuxcare.els5.x86_64.rpm b843b370147a0dc44e8f5cd503ee06caf5bcc29f7e51aad63078b04fba93362b glib2-tests-2.56.1-9.el7_9.tuxcare.els5.x86_64.rpm ed1301e4d79f3adc6826d6212030e15cfd850fd74ec8f7d25d279b634a244c93 CLSA-2026:1772038463 TuxCare License Agreement 0 - CVE-2015-20107: fix shell command injection vulnerability in the mailcap module Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2015-20107: fix shell command injection vulnerability in the mailcap module

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64.rpm 402f3e1a2fd64c6c3839b8bac8d14d5006fe90aff1dfe6fa2e08b1d9081a02a6 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64.rpm 9ecc7ac918b4e9e5f2bb704de73eec08c121ae6de3601b1f9a00d2456608070e python-devel-2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64.rpm c665bf4dafca3f4917d501281919ae3f8002c7eb85e6b21ceaa0bc04ef165dfa python-libs-2.7.5-94.0.1.el7_9.tuxcare.els3.i686.rpm 6e8d7d054fc62b60543970af1aa9218112f1c83f6acd7f1706f279d134957fd0 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64.rpm 141e0fc193854e307bff267452261270831bf9e2468056445cf1ad0db4c95904 python-test-2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64.rpm 278b22a914d3d5867ebf9d64f64a4670cc51779b88bc9f9028886f6fd7bb08b5 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64.rpm 77bcfd50e36a0218b7854275b7f2807f68fe9c06a79524d4939fbb4f44ca8751 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els3.x86_64.rpm a8a31e9d041c35672b7d965c71c151e910d4a6db05f38203a400717fe528cbf1 CLSA-2026:1772101499 TuxCare License Agreement 0 - CVE-2024-42516: fix HTTP response splitting by reordering header validation to occur after full response header assembly. Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-42516: fix HTTP response splitting by reordering header validation to occur after full response header assembly.

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els8.x86_64.rpm 1a67538c30cace8d62752adf162181dd3e1dc4b500f9152fb30b73051daa7865 httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els8.x86_64.rpm 07cff1fc17b91b2fc4c3e74a878828f2b250c5843302fb5b40cc3a1359e02bdf httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els8.noarch.rpm dc4da070f38e78643c5fd42171193c06b6e7bc85944fa92124fdebfab569c43d httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els8.x86_64.rpm 3d93a9ddbf5feb7edc85ced6cbb112a5524b21fdd79fb613c270b3e8293ec827 mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els8.x86_64.rpm 523866d2c771b23eac045512e18742d4713a16099e1f00e98a6c570c7c944f7b mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els8.x86_64.rpm 1c0c463136abb5ae9cd10ad8cbc331690cf17299096ee4dfa3ac27e1af1fcc1e mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els8.x86_64.rpm 75f9d43c6ccadf3c95e62f945bbf983c2c62c66178f9bd6291a3609a1a393cc0 mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els8.x86_64.rpm 210d8e221d85e556c9992d725754777b1a77e5903186feabe4e93e8d977690e6 CLSA-2026:1772644297 TuxCare License Agreement 0 - update to CKBI 2.82 from NSS 3.120 - updated certificates: - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Comodo AAA Services root" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - removed certificates: - # Certificate "Baltimore CyberTrust Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Swisscom Root CA 1" - # Certificate "A-Trust-nQual-03" - # Certificate "KISA RootCA 1" - added certificates: - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate " OISTE Server Root RSA G1" None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- update to CKBI 2.82 from NSS 3.120 - updated certificates: - # Certificate "GlobalSign Root CA" - # Certificate "Entrust.net Premium 2048 Secure Server CA" - # Certificate "Comodo AAA Services root" - # Certificate "XRamp Global CA Root" - # Certificate "Go Daddy Class 2 CA" - # Certificate "Starfield Class 2 CA" - removed certificates: - # Certificate "Baltimore CyberTrust Root" - # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia" - # Certificate "Certipost E-Trust TOP Root CA" - # Certificate "Swisscom Root CA 1" - # Certificate "A-Trust-nQual-03" - # Certificate "KISA RootCA 1" - added certificates: - # Certificate "TrustAsia SMIME ECC Root CA" - # Certificate "TrustAsia SMIME RSA Root CA" - # Certificate "TrustAsia TLS ECC Root CA" - # Certificate "TrustAsia TLS RSA Root CA" - # Certificate "SwissSign RSA SMIME Root CA 2022 - 1" - # Certificate "SwissSign RSA TLS Root CA 2022 - 1" - # Certificate "OISTE Client Root ECC G1" - # Certificate "OISTE Client Root RSA G1" - # Certificate "OISTE Server Root ECC G1" - # Certificate " OISTE Server Root RSA G1"

0 tuxcare-rhel7-els ca-certificates-2026.2.82_v7.0.306-72.el7_9.tuxcare.els1.noarch.rpm 889341f9c487c276c497d2c8883c51390cf47d56b13fb7d79c2660e98b756876 CLSA-2026:1773046740 TuxCare License Agreement 0 - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - media: rc: fix races with imon_disconnect() {CVE-2025-39993} - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237} - net/atm: remove the atmdev_ops {get, set}sockopt methods {CVE-2022-50410} - i40e: add validation for ring_len param {CVE-2025-39973} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - isofs: Prevent the use of too small fid {CVE-2025-37780} - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} - media: rc: fix races with imon_disconnect() {CVE-2025-39993} - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} - partitions: mac: fix handling of bogus partition table {CVE-2025-21772} - tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923} - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277} - Bluetooth: fix use-after-free in device_for_each_child() {CVE-2024-53237} - net/atm: remove the atmdev_ops {get, set}sockopt methods {CVE-2022-50410} - i40e: add validation for ring_len param {CVE-2025-39973} - vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248} - sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240} - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() {CVE-2024-58014} - isofs: Prevent the use of too small fid {CVE-2025-37780} - net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749} - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860} - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() {CVE-2025-38249} - fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322} - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds {CVE-2025-40304}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm 03ae4e67e8956b7c1f38d9ecedea0436c79684e47c105e0a61f800df70673e58 kernel-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm 286e6bfd55f5c09a9a177536e76eb4b2dfdd6e10154a7613eb431439b0b98897 kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm d0e452216b05886ddc2f1ebf5eb83bbbe4a114919cfd255341886f29882cbc99 kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm efa3b61b8d235c10d8fb681e2588b4dea72325139400d914231417db5d1467f9 kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm e5d2eddc89d84fdc0c5961044002ffa5286a1bfb4a5a25e4dc33daf6924f2719 kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm 032176a4d3229e5e510f748b397b1b8cb5892608199f0da7cebf33c9e786dd36 kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm 7ba2dead295b0f1a3c1fbd1ea610eb2cc96660251ec3916c56282a17873225d7 kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm bf614d71b6c2562bc150fa0f59a49418f4286668c7bd35dfec6d29ce919c9c4f kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm 1c2a2b58ce09e292dccdbdb0cb1d8250f73843e54c01032134fe4e762e8e30ae perf-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm 30d9e79fe05988df7e9818ef14bd3f15112964847b940b9fd316e9b8da0debdb python-perf-3.10.0-1160.144.1.el7.tuxcare.els3.x86_64.rpm 4196f39c95b05d6141e838e116bec476f9c9aa78d1f37336136f308456eb77d9 CLSA-2026:1773924658 TuxCare License Agreement 0 - Fix CVE-2026-25210: integer overflow in doContent tag buffer reallocation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2026-25210: integer overflow in doContent tag buffer reallocation

0 tuxcare-rhel7-els expat-2.1.0-15.0.1.el7_9.tuxcare.els3.i686.rpm f946612021d1f5e4cb4dd6ed00c98b50ca6c29db246645f4cdc5ea734b72db0c expat-2.1.0-15.0.1.el7_9.tuxcare.els3.x86_64.rpm 013814ab4ef546ac6f4f2937264200e369e710fed5e8f2a4c42bf810a151550b expat-devel-2.1.0-15.0.1.el7_9.tuxcare.els3.i686.rpm 538066e18c99968edd4f25170d3857f0992ea7ffa2b960bdbd3f61f07bafd285 expat-devel-2.1.0-15.0.1.el7_9.tuxcare.els3.x86_64.rpm 1b6d6d8f4de26c4415f827e4504b3401d85772903042e5e82542ac0007877667 expat-static-2.1.0-15.0.1.el7_9.tuxcare.els3.i686.rpm 1fc3a4aad6e2b14809f5f9b7d9e27b4fb9360a8afbf04a6f086e47a01d86ccb5 expat-static-2.1.0-15.0.1.el7_9.tuxcare.els3.x86_64.rpm 3b94c75b0cfa57069ca16b3328bf17e9bb721983b4ae570408c75c22b9dde416 CLSA-2026:1774528630 TuxCare License Agreement 0 - CVE-2018-20685: fix a vulnerability scp client where a malicious server could bypass intended access restrictions and modify target directory permissions via crafted filenames - CVE-2019-6109: fix scp client where a malicious server could manipulate the client's progress display output due to missing character encoding - CVE-2019-6111: fix scp client vulnerability that allowed a malicious server to overwrite arbitrary files in the client's target directory, including subdirectories, when performing transfers Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-20685: fix a vulnerability scp client where a malicious server could bypass intended access restrictions and modify target directory permissions via crafted filenames - CVE-2019-6109: fix scp client where a malicious server could manipulate the client's progress display output due to missing character encoding - CVE-2019-6111: fix scp client vulnerability that allowed a malicious server to overwrite arbitrary files in the client's target directory, including subdirectories, when performing transfers

0 tuxcare-rhel7-els openssh-7.4p1-23.0.3.el7_9.tuxcare.els3.x86_64.rpm c7dc5bf9d8d408afce072d0fad3b48436a691d266a9eff9e4a50656e4d36759b openssh-askpass-7.4p1-23.0.3.el7_9.tuxcare.els3.x86_64.rpm cabcc3cc6a8abb849e3b78b64fa13b813694d5a8e7dbce9152db57f2773650cf openssh-cavs-7.4p1-23.0.3.el7_9.tuxcare.els3.x86_64.rpm ff94e6b0a3ef519ee34674681c74efa407857a51e8e96db7410514925c05dd18 openssh-clients-7.4p1-23.0.3.el7_9.tuxcare.els3.x86_64.rpm 32ac4a032722117092fa7af36fa231c4599e93de45b34aa126e5b4455215cb1c openssh-keycat-7.4p1-23.0.3.el7_9.tuxcare.els3.x86_64.rpm 514534a9b958ac3d4151c102af44bf1dee11e9686b8a54a5e0c9356df7e6dd60 openssh-ldap-7.4p1-23.0.3.el7_9.tuxcare.els3.x86_64.rpm 143ece639c77b5adc6d0e89b7b481414fd7c0c28aaaec1957ada7cc44eacbf69 openssh-server-7.4p1-23.0.3.el7_9.tuxcare.els3.x86_64.rpm 056804c520937f7d58e5768db5a10a30158de54a203aa0a78f22d19c3eb371d3 openssh-server-sysvinit-7.4p1-23.0.3.el7_9.tuxcare.els3.x86_64.rpm 78c0ceaccb909a5d7aaa4e2553a8a68a8cf5e74a47bfd3aaace7eb9c5420887b pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els3.i686.rpm 19d52075d0dd20c71f7a640eccb90799d494486e1d82232d3a5cdfd21e9085ea pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els3.x86_64.rpm 999a52bcac2ecfe58ce01c8f7b682a6d2e868609a72c4cff7670333a48a0f737 CLSA-2026:1774613805 TuxCare License Agreement 0 - CVE-2025-15366: reject control characters in IMAP commands Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15366: reject control characters in IMAP commands

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els5.i686.rpm 3d5e70ccc721840cde489ecf7c7746f247913913279bdb54c35bebcfdbd457cd python3-3.6.8-21.0.5.el7_9.tuxcare.els5.x86_64.rpm d8cff552236f0452166e1cefa76aefb7887b56ad1393995dbe317a793ae300e7 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els5.i686.rpm a72e0cd847aa0f5269c9bab8b06ac82c9c299085a8e74df32d2552eb9e11afad python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els5.x86_64.rpm 814c269b1eccf1c12d0458d0ae999b990a570d628e13aa276814c4a215c91cad python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els5.i686.rpm 7e765090430c47f35fb739ac1992b3a5ed930ef9a0de324e410386a96269c889 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els5.x86_64.rpm 01f62460306549241f0b10cd3349a284cf1f72008d12c2496a648e5109fedd40 python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els5.i686.rpm 0f1846c6218c73309843073d1c060ea030e7b40f7cbd0f2dae71fe5c5cccbcee python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els5.x86_64.rpm 2ff3fb94bd2b2bde857d4f497f1bc2fe78bc9f198edc7e6d87b4f2348a5cff04 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els5.i686.rpm ffbac9bcfc15877dc3c8e95444645b88cf109282537a8a7e7428481a5628c41a python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els5.x86_64.rpm c45e0fc5d4986907f6a6aacc77fbfda1d57f846a576cd331fa4492032b079206 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els5.i686.rpm ae91de03eb536febe56f46cee963a7702a9ec943d28cd580a4772007253aece5 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els5.x86_64.rpm cf5c472c9a9544532cec68ffc0d1a21ec21740dd6a8a52e987bfbe610fd5b65d python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els5.i686.rpm 4a4cf251825fd51573d2547a4b927620a38f5cbba145db592f5f9bea9cefd5fb python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els5.x86_64.rpm f08f8f76eab601e310c3128475ec1befb261ab5a2e6ffadca6ddbce0dee4b006 CLSA-2026:1774877548 TuxCare License Agreement 0 - CVE-2026-33526: fix heap use-after-free due to double rfc1738_escape in ICP error handling - CVE-2026-33515: fix validation of ICP packet sizes and URLs to prevent out-of-bounds reads - CVE-2026-32748: fix HttpRequest use-after-free in ICP v3 query handling Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33526: fix heap use-after-free due to double rfc1738_escape in ICP error handling - CVE-2026-33515: fix validation of ICP packet sizes and URLs to prevent out-of-bounds reads - CVE-2026-32748: fix HttpRequest use-after-free in ICP v3 query handling

0 tuxcare-rhel7-els squid-3.5.20-17.0.5.el7_9.99.tuxcare.els4.x86_64.rpm dcde70f7f75c8e6c5236abd5f7094e6b9c1c030eef944d9a02f3b159837b11e6 squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els4.x86_64.rpm 34a2baa3e3f0af4eaa8339463fbc532f9d2c5ebd812cbeefc9f6270c5663ae9f squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els4.x86_64.rpm e0145b12177722f7c6c40451e99b17c11c3f6e9b8f4e7c11a29c0322ea94a463 CLSA-2026:1775058202 TuxCare License Agreement 0 - CVE-2025-15366: reject control characters in IMAP commands to prevent command injection Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15366: reject control characters in IMAP commands to prevent command injection

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els5.x86_64.rpm 3d8e49f63881be0978344f33230b55135d19c611e49ef7155d1102535290cf1a python-debug-2.7.5-94.0.1.el7_9.tuxcare.els5.x86_64.rpm c0f0e952a786c58f971f07658428320df9b04d9478439eeb665b51adfaf871df python-devel-2.7.5-94.0.1.el7_9.tuxcare.els5.x86_64.rpm 9807637e129b26304833a504165bd9d192f021b485b472451158a7ec3283b685 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els5.i686.rpm 90a716c86dfcb5bdaf41cdb3fed8d6775ad8c85663ebe1dc7e285152d01531ad python-libs-2.7.5-94.0.1.el7_9.tuxcare.els5.x86_64.rpm 887e65e7cb1159fa4738fbef8274c7dc16b55e15b294919fc358ea4ef8ff0f42 python-test-2.7.5-94.0.1.el7_9.tuxcare.els5.x86_64.rpm 4b0ee6af9e4d78a3423d863739048923231b9656e6238ec752e30e0801cb7c02 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els5.x86_64.rpm 186cc9ea056a5de4cc703fa57d3790b345c07096caae05e5484aa1111ad8f6c8 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els5.x86_64.rpm f848b921710137b0a9ce1640e6c5ed86fd8487e62e951020157e1d583017e829 CLSA-2026:1775059689 TuxCare License Agreement 0 - CVE-2025-15367: reject control characters in POP3 commands to prevent command injection via newlines Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-15367: reject control characters in POP3 commands to prevent command injection via newlines

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els6.x86_64.rpm c7cf75b38381e0c1de8fca7c5a91f65df0f06484dc11af37ce80aa87a8b60bf8 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els6.x86_64.rpm 295aa0113ba620014f7e7e94f671bf5c62883720af56041cc2a7421b046f52ac python-devel-2.7.5-94.0.1.el7_9.tuxcare.els6.x86_64.rpm 2b9e276b199ede2915acea16771af868d03436daa72f56d68f2b27121f94f5b9 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els6.i686.rpm 327bd89b4b1a2aacca1d3cc384669cc3e2c33cbb391b8c416a4bc126ed7d6e69 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els6.x86_64.rpm c8f828b18bdf7b8b1bdad3c3f4167b93ab23e16373e8daa64b4832a56170cc2f python-test-2.7.5-94.0.1.el7_9.tuxcare.els6.x86_64.rpm 2e3dc4423e051503b31520ca63ecf7d39e044a321113f380ea205b31582c7ce0 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els6.x86_64.rpm d703299f778e3ee7da6938edbe97280ec5c86f88a51f1a5e222196e70d193916 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els6.x86_64.rpm c945eab3390325f566f11661b4e368942b2ef21c70e9c9188f8b471f3b437481 CLSA-2026:1775657177 TuxCare License Agreement 0 - ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} - media: imon: reorganize serialization {CVE-2025-39993} - usb: xhci: Fix inverted ring_xrun_event check in handle_tx_event() {CVE-2025-37882} - Revert "VFS: Impose ordering on accesses of d_inode and d_flags" - Revert "VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk" - Revert "namei: d_is_negative() should be checked before ->d_seq validation" - Revert "namei: results of d_is_negative() should be checked after dentry revalidation" - Revert "namei: ->d_inode of a pinned dentry is stable only for positives" - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} - net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204} - net: add skb_header_pointer_careful() helper {CVE-2026-23204} - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570} - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} - media: imon: reorganize serialization {CVE-2025-39993} - usb: xhci: Fix inverted ring_xrun_event check in handle_tx_event() {CVE-2025-37882} - Revert "VFS: Impose ordering on accesses of d_inode and d_flags" - Revert "VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk" - Revert "namei: d_is_negative() should be checked before ->d_seq validation" - Revert "namei: results of d_is_negative() should be checked after dentry revalidation" - Revert "namei: ->d_inode of a pinned dentry is stable only for positives" - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} - net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204} - net: add skb_header_pointer_careful() helper {CVE-2026-23204} - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm 798d21a03ff2204285405c30cf2c91ce2c913ff3a9ca47e49505b67bf962b735 kernel-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm bf369f1e583b5f19c0a7cfaa546eef02f357a1d216b8836725f21acfe1809f17 kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm 5fa08bb8858c6169d1d54664be1fb8545be417df0c5ae920a4068a98784d04bf kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm 211d14336e82da64bbc68425b81f057b3d0577443510364794fd59f0023fa8da kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm dbdb82b98b09d8374ebda2e708443bba2fb5d63853e436eef0da149b4a0fa6b6 kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm 717e132f9073154e7dad7d83788c1418a391db6f44a26c2049ede0f490c409b7 kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm c09099332b78081469e3f726bc50ed7edc046a60172f33267f8965bd3d741540 kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm dbe5acf882be4d2fb242f55643d13d684faca03c42e127f7e142a706409a985b kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm 33ff89ecfd3775f23bc1f2125b26f821dbbf9dbed71370f2b97b130607819261 perf-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm 519538cc05ee813c0b6145f480e178d057ade16e8a622797a1ca889de7ecae7d python-perf-3.10.0-1160.144.1.el7.tuxcare.els4.x86_64.rpm c80c09ac413a80a9f6287fa6627537f8e97e8962e3c0b7fcbb727fbd793e95a6 CLSA-2026:1776331045 TuxCare License Agreement 0 - CVE-2025-11082: fix heap buffer overflow in _bfd_elf_parse_eh_frame - CVE-2025-5244: fix NULL deref in elf_gc_sweep for empty SEC_GROUP - CVE-2025-5245: fix SEGV in debug_type_samep / debug_write_type - CVE-2025-7545: fix heap buffer issue in objcopy copy_section - CVE-2025-7546: fix corrupted group section handling in elf.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-11082: fix heap buffer overflow in _bfd_elf_parse_eh_frame - CVE-2025-5244: fix NULL deref in elf_gc_sweep for empty SEC_GROUP - CVE-2025-5245: fix SEGV in debug_type_samep / debug_write_type - CVE-2025-7545: fix heap buffer issue in objcopy copy_section - CVE-2025-7546: fix corrupted group section handling in elf.c

0 tuxcare-rhel7-els binutils-2.27-44.base.el7_9.1.tuxcare.els4.x86_64.rpm 48146bb88569b940a5cfbce636fa3bafc87442910a4a0497407001a4113a9f94 binutils-devel-2.27-44.base.el7_9.1.tuxcare.els4.i686.rpm f40c3858095361f9b229e2b4985b2fa2d3ea23f7276225ca037a4be981ec7724 binutils-devel-2.27-44.base.el7_9.1.tuxcare.els4.x86_64.rpm 86522fbffd39a9f0c9c98b901bf61860b29607ea958301f96114faa43c31c0b3 CLSA-2026:1776343034 TuxCare License Agreement 0 - CVE-2023-45539: reject '#' as part of the URI to prevent ACL bypass via path_end rules Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-45539: reject '#' as part of the URI to prevent ACL bypass via path_end rules

0 tuxcare-rhel7-els haproxy-1.5.18-9.el7_9.1.tuxcare.els1.x86_64.rpm f6cbbe2a4d09009332b0ed072322906f212c66b31077a2071a3145803aeb55fc CLSA-2026:1768300651 TuxCare License Agreement 0 - CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-50349: fix ANSI escape sequence vulnerability that occurs when asking for credentials interactively

0 tuxcare-rhel7-els emacs-git-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm d22899535c8bbafaf31a3cb8e26c52264e23d84e36fa0929c9bb459731ed65e6 emacs-git-el-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 15057c212f02a7ebe3a19829d9483184635f00bdeb8079f2f337bf6e66369969 git-1.8.3.1-25.el7_9.tuxcare.els9.x86_64.rpm 39637f0a2dc65fe992c08ee475f7b0f7134f8e67cbbc0f16a95814cbdbdc5c27 git-all-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm cb0bab54cf8fd7c0fce2d3399c57d787800d2caf5b0a2d0af3ff1611d49ecf65 git-bzr-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm dc98a7a82526632d5a9339a222c6daf985d5b71e3fad2fca4bcd0973f036fb8f git-cvs-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 6e26949e22f604107fed6de44873719489d6fadf54905b678847b153d97a09bc git-daemon-1.8.3.1-25.el7_9.tuxcare.els9.x86_64.rpm 283ddb1776f66888a14c25e9b188abf964be9df0ae46060f7eaa8931329e2bd0 git-email-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 0303dd02a23c056fee9007dd933ffb07168a33674a60212a964761b26d907e69 git-gnome-keyring-1.8.3.1-25.el7_9.tuxcare.els9.x86_64.rpm a0faebcd4c28a4d0a9c5087c94f4737500e283a6d18c3e3516079142cadd678d git-gui-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 4f43a333140d6cfdfc581c6ab7a57ad1db351369fa086f224298f00793e2c038 git-hg-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 5d9d03a84f1a12e67ba24a80c032e5353cd736c7cdd179492d79066c6bbf30e0 git-instaweb-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 88e91597906ac6729b067c331c449bd66c5fddc459924540e277eaede0fad9b5 git-p4-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm b903500bbf4799204131f2e129251667e3ee2b99cfc1f9f91bdc50104d33c59b git-svn-1.8.3.1-25.el7_9.tuxcare.els9.x86_64.rpm f6bf7be3d6893fa038e49c6dbcb26a33239e2499ec4cf9c85601b6a7f6237303 gitk-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 7d713ae2ecc76baf6e6ed78ba57b373bbd74293144885b34318edf161c25064b gitweb-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 6f0ddbe850decb2bfcef7c0c43c280878018d93bf719981af13acd2ce05ade86 perl-Git-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm 99c07ed71eb499657a73f33b04d1814c00bb14069cee9375f2e19cde24962843 perl-Git-SVN-1.8.3.1-25.el7_9.tuxcare.els9.noarch.rpm c910a81553f067bd11ae4f829a56fcff574e27fbcee69e5cf6a40d97b5b8d1d0 CLSA-2026:1776441769 TuxCare License Agreement 0 - CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent O(n^2) parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) - CVE-2024-28757: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent O(n^2) parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) - CVE-2024-28757: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757)

0 tuxcare-rhel7-els expat-2.1.0-15.0.7.el7_9.tuxcare.els1.i686.rpm 2ab704f1f93aecedf9114eafe271b2c4b3a705f286236a641c197b18d249d06a expat-2.1.0-15.0.7.el7_9.tuxcare.els1.x86_64.rpm 37de151dc3f4a53fbe0cf2bca3bda6711f755a21e333601240d08cbce6b8bcf0 expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els1.i686.rpm 5480fc17783a572f119217c0440a96b3c7a679b6b228a0df41f32e9094531fa8 expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els1.x86_64.rpm e4c85cfe5b0dd2aa875a672657fab5cd2f4139295e09893cd9c91cb6bcacd506 expat-static-2.1.0-15.0.7.el7_9.tuxcare.els1.i686.rpm 45b7d811d33ad374230c3e6a03532144bc65dfa93506c44e053155fa0b4302c0 expat-static-2.1.0-15.0.7.el7_9.tuxcare.els1.x86_64.rpm 84bb60d8ebfd36d4186be2231a272893097991a0459e70373fbab14d698c649f CLSA-2025:1754337993 TuxCare License Agreement 0 - CVE-2025-6965: fix memory corruption issue caused by a query where the number of aggregate terms could exceed the number of columns available. Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-6965: fix memory corruption issue caused by a query where the number of aggregate terms could exceed the number of columns available.

0 tuxcare-rhel7-els lemon-3.7.17-8.el7_7.1.tuxcare.els2.x86_64.rpm 9b545d984bcc2f896cc5fae23cff7074d19778f5378874fae5a8b96e2c3efa95 sqlite-3.7.17-8.el7_7.1.tuxcare.els2.i686.rpm dabb5248cb16ace66749c9b6872f6463fae2ed6609f3055089a938b966da842b sqlite-3.7.17-8.el7_7.1.tuxcare.els2.x86_64.rpm b46a80dcdfb59b19b11db7586acc99fbaad54d86db42fbd8408cc8242c4ae5c1 sqlite-devel-3.7.17-8.el7_7.1.tuxcare.els2.i686.rpm 0660b8fc7d5f63d334e75ab15a7f8e51ddd686975ef0503e53d74711667d6f0e sqlite-devel-3.7.17-8.el7_7.1.tuxcare.els2.x86_64.rpm 8856b9708bad92f8c3555c2a3d7c334e0fde54cf98bdfaf647b49cb032a8bbb7 sqlite-doc-3.7.17-8.el7_7.1.tuxcare.els2.noarch.rpm 3292bf8b272073f753c8827821fdb1103807e9742a63643508b1da1c9a08ec23 sqlite-tcl-3.7.17-8.el7_7.1.tuxcare.els2.x86_64.rpm d6fd94977852ab978653fb717021d6a67eee34184bab9f2046206a721ee3ca0b CLSA-2026:1776877737 TuxCare License Agreement 0 - CVE-2021-28116: fix out-of-bounds read in WCCPv2 message parsing via stricter bounds validation of security, service, router, view, and capability items Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-28116: fix out-of-bounds read in WCCPv2 message parsing via stricter bounds validation of security, service, router, view, and capability items

0 tuxcare-rhel7-els squid-3.5.20-17.0.5.el7_9.99.tuxcare.els5.x86_64.rpm 5faf56b1a67e8af708884dbddc3eba3f5edee305c392c459adb14d5d2e63efde squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els5.x86_64.rpm 7815b1ab86dd6e2ec38b0a52193b79de441a23b043ad55c422a3e035a45db842 squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els5.x86_64.rpm d0f79708703a4841b39d42fd32cb2f09f5bd3a1aa52f8b03655dfdeb95a59fab CLSA-2026:1776880278 TuxCare License Agreement 0 - CVE-2022-39377: check an overflow and exit if it be - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-39377: check an overflow and exit if it be - CVE-2023-33204: fix possible buffer overflow in an incomplete fix for CVE-2022-39377

0 tuxcare-rhel7-els sysstat-10.1.5-20.el7_9.tuxcare.els1.x86_64.rpm 12aa659b1a779896868964ae8447dafe6becea9993d74c7a090548c1f95df46a CLSA-2026:1776935009 TuxCare License Agreement 0 - CVE-2025-40778: reject forged records in answer sections to prevent cache poisoning via crafted responses - build tests improved Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-40778: reject forged records in answer sections to prevent cache poisoning via crafted responses - build tests improved

0 tuxcare-rhel7-els bind-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm 94465097c34378b1f86e8e8f0509f9cd7a6fb0684564fd6fdc3f6bb859242d89 bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm 4d2eaf3b86e275d15c4c96a09d339aca46a96b3a1c9a81d324d883afd31a25fb bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els11.i686.rpm 1c731e806d16af08a2256c5f85f106a3303060b164ef7318d4674acb1887ce7a bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm a7f11c2813198d3e038d6393a9def4b6ee2aa4b9866b95d526caed834742bca8 bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els11.i686.rpm 9e8897a044d9e42aa2b24db6ad2b21c13722ed28d312f026105c7fc80401150c bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm b34c9d8c6d165eb4052f7e152d4621ecb7998fcd936009def608a231c63d0e6b bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els11.i686.rpm 241fa0341946f8e3558e053ad4ca2a63d0d88f69a22748a1ae4cfc8bc752309f bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm 0fc0eaf10d5ba0fdc7b3024e322f9e2cb2a88098b8ed9d01fc53611a3c0d843c bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els11.i686.rpm 10e77fedc7e1eb735ef1a24a9343a92976994813c5ea3ebb2c0af04625983972 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm bee5e1670d102b725ff8ed73371c117e7c4034ac00fee7ce207d364e45e61e6c bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els11.i686.rpm 8bd613b9373358a1f4aed948e23917482076ce49a372ffeb0bf74d0778d37adc bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm d62811ede33bed486eaf35830ef3588445b7b2d1eab0b28fbbc12590596a25ae bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els11.noarch.rpm 2e3c4fc171ca75f1a485af43164f049db81ae5c8681ee5893df128d381129cc7 bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els11.i686.rpm d5dd52de59dddc3a56c022a834fbc4a956503d30e17c978b33e4c0c7b8f02257 bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm 23953530c34f51dbf99d2c2f045b87040c69f4407f45e76ab882c8157a6c0e73 bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm 0f44da35e98c427d600dfa5a854a6dd047faacbbae32d1ffd03442daf83fcb3c bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els11.i686.rpm 20b67e14d5de3ef03f7fc7577069f86fd7dc0a423aed32df76773c81ec625fb4 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm b347c0e92d51e0bd971ac2b4b0f1b17b0a2be7787c047a8a79b63bbff4b62d9e bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els11.i686.rpm 692f5c79835e2c444933cb1d3f9839b8717b312849e5b1a17b3797cd0e39f218 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm dfde1e30300cc86abe513581b2be6f2baecf7d07284c63119bab7200514f0e98 bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm 9fcfc20493de43fc93c44e2775c97d5cb9786f3a59f005216f1a7c0bfad2fe40 bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm b11ccd95ec85c2f3e58f4734d6a8f6635373487dbaf5670cc80b5e44ba74adbd bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm 47a6a070fef8a712af8d501171c8c136c1f9c55abd394471c9ef87d70de26902 bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els11.x86_64.rpm 3e302c40e4ed7f606b332add6b2d4368c65ddf142b9fdee0af7acac5b276b78d CLSA-2026:1776965760 TuxCare License Agreement 0 - CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present - CVE-2016-3189: fix use-after-free in bzip2recover Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present - CVE-2016-3189: fix use-after-free in bzip2recover

0 tuxcare-rhel7-els bzip2-1.0.6-13.el7.tuxcare.els1.x86_64.rpm 47ad5a0110b9ac833daa6f3c4a0cae6be63f51e1da196f74008a738f2935c5a9 bzip2-devel-1.0.6-13.el7.tuxcare.els1.i686.rpm 19c49bf54b76d39cb06834f05bfc457e2ee5ec8def4138615089a6525a914e5a bzip2-devel-1.0.6-13.el7.tuxcare.els1.x86_64.rpm 9c165bddd64fdf866876d1ac4f4c8082d28dbe204b01f6f5b06b7ec5ebd68572 bzip2-libs-1.0.6-13.el7.tuxcare.els1.i686.rpm 6af553b49f0b6ada175c5945e64a2069d7fc7fffc71c58c33017d6dcfffe7a94 bzip2-libs-1.0.6-13.el7.tuxcare.els1.x86_64.rpm af7e049e43e616f51bddfef787af253891dd15d6bd9e80749eae3b689e51e1e5 CLSA-2026:1776972009 TuxCare License Agreement 0 - CVE-2021-21707: fix NUL byte truncation in XML/DOM URI file loading - CVE-2022-31628: fix phar wrapper denial of service when loading compressed quine archives - CVE-2022-31629: discard HTTP variables that mangle into __Host- or __Secure- prefixes Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-21707: fix NUL byte truncation in XML/DOM URI file loading - CVE-2022-31628: fix phar wrapper denial of service when loading compressed quine archives - CVE-2022-31629: discard HTTP variables that mangle into __Host- or __Secure- prefixes

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els16.x86_64.rpm d5d65c46c4c7d70545c32c0d411a5c605e5d84bc6f4a83718bed7579dc0b8d5d php-bcmath-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 88d8a8ab5e4ea59a362131257a853565cddec5ca6757f0708693f0b1c6a6a606 php-cli-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 7163fda4dc8ab12686a8561813423e48e0c477f2c2b7c78261b17004db417cbb php-common-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 4aa2aa1c2ad50f8687789a36280fc2bfeb1439132d61dd5c5238bdfd78b86b3a php-dba-5.4.16-48.el7.tuxcare.els16.x86_64.rpm b39ba8fd8279c941daf30f3a8e08e785399d333eaed4a238f828da98b142434a php-devel-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 2dbbd8a2379fda28864bd7132e83644e41a06411aaf50100fe3401816ec33e0d php-embedded-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 0842638b8a1dee022a0e8cfbd5be520d85c4c62c1e19528fe814f61d148ac21e php-enchant-5.4.16-48.el7.tuxcare.els16.x86_64.rpm bbb47dc6c310207beb9e22bf1e9dd85418547cab6612fb9029dd8bc1c922379f php-fpm-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 80a31d7549d9bbc52e70ea9f9142f6429814ca511cb2d40fc67df86ab9f34088 php-gd-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 3a24faf684446de01a2e521cba6a5444112f5fb0a0073fb8a3370918b04f40e5 php-intl-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 01faa56b2d0e64e3b7ad5f700dde7c152dd949d3595c4ba9dd070e0abeb61a17 php-ldap-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 8b11011d8e57babdd426c4c86435f1ed03712090ac6684e9037528f56a4f1f30 php-mbstring-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 7a9b92576de93acb34731fee41943b41c3b89599f15d8228f3fe224e7b66f93d php-mysql-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 2d77a55f4695f48ee71c288ad1dfa56e5a997300d475a1e947d123dc14ea571d php-mysqlnd-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 54b42aa5af65acb9fa38313c0a53fafee4907590beb0bbf72ab5b7194dd3ec60 php-odbc-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 2a2a848bab98e564644317756fb46244753d4dd99417166e02b4e74c93f9c3e5 php-pdo-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 74b3c4c05e14d7653196995a07951e0ecedd1193e7c8ca96130f7c7da529b1d2 php-pgsql-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 55ed64e141bd066e67ac8ac273be6d7e893d4787c58254aecc07fc0500c1bcd5 php-process-5.4.16-48.el7.tuxcare.els16.x86_64.rpm fc487c1a8c08b8089c06a2b2c61a302cc72c046cafd5d94775697ad7af376d7e php-pspell-5.4.16-48.el7.tuxcare.els16.x86_64.rpm af9832fa4211a9f65d4b08c4548faba5733d743295383feab4f60d96bf89f672 php-recode-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 78dcc288307f1c92ee01b6eb3443be5a6e4ead3538149744198dd43cacade074 php-snmp-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 148b87138ebbdf20b435a2b3193aeb05c4ef06bc1001775f50b84f420bf2d9de php-soap-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 556a368a0db11cc67210b768b7ac6b54573216a027f3f418ad3edf6d424a863c php-xml-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 577da69bc00e67fbbb0408040456a5b02bba40484f315d87f29bfefe48f1f832 php-xmlrpc-5.4.16-48.el7.tuxcare.els16.x86_64.rpm 6a1f4ba019d68236d77625fb9764645bef9cd5982ded792ebbd9b6faccf587cb CLSA-2026:1777035524 TuxCare License Agreement 0 - CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.5.el7.tuxcare.els5.i686.rpm 115a5cd52043a0dd79f6b8d4a5b23b9ea4cfde412578562996a3b84ad4c5985a libsoup-2.62.2-2.0.5.el7.tuxcare.els5.x86_64.rpm baaa9b5ca9c713abc823a1b158a8ce68e3ba13f1bee28ebdc2d6fa9caaae4da9 libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els5.i686.rpm e22178787d38c93f77041bc41d7c0657cba7e59ffd9bd10fd7a0b07d8bcfcf47 libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els5.x86_64.rpm 3c98da1104091f2b28aa53cde8eafbcfed47fe95c84257c2b9eba9588ef7c56e CLSA-2026:1777056224 TuxCare License Agreement 0 - CVE-2022-3821: fix buffer-over-run in format_timespan Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-3821: fix buffer-over-run in format_timespan

0 tuxcare-rhel7-els libgudev1-219-78.el7_9.9.tuxcare.els3.i686.rpm 54b2c9cacb0468d2c3de46dad08e2380a23b12a9813e29e5beefca725b2e587b libgudev1-219-78.el7_9.9.tuxcare.els3.x86_64.rpm 382904c5ac9be64fa1e43d6c5f9aa574c441799bd91b07a39c96d9659f446de2 libgudev1-devel-219-78.el7_9.9.tuxcare.els3.i686.rpm 65f838caacd748cedb691bfca8c707704e3a243b07d81c4b996998642c86cbbd libgudev1-devel-219-78.el7_9.9.tuxcare.els3.x86_64.rpm b8638ff5a511450469927689a1313d69c417f42a7cb0cef1c624205a315003a8 systemd-219-78.el7_9.9.tuxcare.els3.x86_64.rpm ca6eb8d67f18d5722e7c8cb4bf8e3238a01e65112548787e6e60b05b231331a2 systemd-devel-219-78.el7_9.9.tuxcare.els3.i686.rpm b4ba5884fae8d63b571e5aff8ac19aab9361274a285bb2c766f7769b615f5026 systemd-devel-219-78.el7_9.9.tuxcare.els3.x86_64.rpm 298388afc42c30f532f485c4eb411ff6ad10097dbed2a327c6c82a2321040650 systemd-journal-gateway-219-78.el7_9.9.tuxcare.els3.x86_64.rpm 9ec19c959da669d72f93508d65b5e20c590a89c14697bc94c70f48e3a044dfb9 systemd-libs-219-78.el7_9.9.tuxcare.els3.i686.rpm 44db0b2d1189b5d5fedfb0f18ac36ea379c337babf94e54835c7e19f6e3691ce systemd-libs-219-78.el7_9.9.tuxcare.els3.x86_64.rpm bc56e6c06ba0d147193f6c20940ad2a28ebc3d20d67c7d4b401ff73a8ee3ab1d systemd-networkd-219-78.el7_9.9.tuxcare.els3.x86_64.rpm 2fa3a40d0fab5cdd76a4dd199fbefec3cba5e5f9e21fa676e688016250cfb549 systemd-python-219-78.el7_9.9.tuxcare.els3.x86_64.rpm 3010d25724e2709e55907250085a3b6cf8e2f0c4481507284dc40817c37ce2c6 systemd-resolved-219-78.el7_9.9.tuxcare.els3.i686.rpm e986922508ff35bc63554c739070a952d281c19beae96a4056a953065f6f5fbf systemd-resolved-219-78.el7_9.9.tuxcare.els3.x86_64.rpm e4f758afd3a4353c02f802250c119b4cc6e2ce4ffa698cc3da4aa670961c32d6 systemd-sysv-219-78.el7_9.9.tuxcare.els3.x86_64.rpm daf1844e5f011d383419eb0871707e71a1af9d79eff7f43335b2c7bbb9f7ea9a CLSA-2026:1777051819 TuxCare License Agreement 0 - CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd - CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-29155: fix a SQL injection vulnerability in the back-sql backend to slapd - CVE-2021-27212: fix denial of service (daemon exit) via a short timestamp if slapd is used

0 tuxcare-rhel7-els openldap-2.4.44-25.el7_9.tuxcare.els1.i686.rpm 81cd8bacb60e2f4ea4f887531095a1aa5540d02ea347b5713e95ab1beb0c5e83 openldap-2.4.44-25.el7_9.tuxcare.els1.x86_64.rpm 18ee3d3186153e93351ae90b9e7aadf43f9801b8913618ff50141b3f049d76f0 openldap-clients-2.4.44-25.el7_9.tuxcare.els1.x86_64.rpm 3080d26e3fd602de1eed5d907bb9905c11ab54c6a51a9388215a0fad5b67d8c9 openldap-devel-2.4.44-25.el7_9.tuxcare.els1.i686.rpm ee21389e651188c9615cd5a5004e430e0c44f2180e0bc4e73e8d92a2f046fa7b openldap-devel-2.4.44-25.el7_9.tuxcare.els1.x86_64.rpm ebd4267d4fd0c3e57b88686137cb8e38b0c2d37296fab35589f844a98462a363 openldap-servers-2.4.44-25.el7_9.tuxcare.els1.x86_64.rpm 1483eaa4a7fb108fd0daa234b1c556790b4585bbf5cda5eb3f86db2888116a89 openldap-servers-sql-2.4.44-25.el7_9.tuxcare.els1.x86_64.rpm bf17f4fdd4c8810cf5df7bb8eee91f0c67be4504b9ee368860eb7ee2a0fb6111 CLSA-2026:1777279578 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.30+7 (GA). The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 - CVE-2025-65018: update libpng to 1.6.51 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.30+7 (GA). The following CVEs were fixed: - CVE-2026-21945: enhance certificate checking - CVE-2026-21932: enhance handling of URIs - CVE-2026-21933: improve HttpServer request handling - CVE-2026-21925: improve JMX connections - CVE-2025-64720: update libpng to 1.6.51 - CVE-2025-65018: update libpng to 1.6.51

0 tuxcare-rhel7-els java-11-openjdk-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm d12120780023a699fcc2ce60a3d6e22f09335f9e09d293820072f9a9672dd6b4 java-11-openjdk-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 04aec11a246fb27d889724bc47b7aab6122b479446bb4739fc7e0dced812fd2d java-11-openjdk-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 328d4d9cbf5b5c475c93cba8542b232a3ebc5930fc97d24e670f1e0f66efe112 java-11-openjdk-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 892fbcc1156ce784236f0729e64b5a6278eb62aaec392024de24bdbccfe14d35 java-11-openjdk-demo-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 157bd88f7bdad8129b225fd561d690d82405f3783e8961cdf3000fe135b73658 java-11-openjdk-demo-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 4ca2e220087a35894be9a63fa32198b69912c4f6fd828ef2be19a7a6fbef18d8 java-11-openjdk-demo-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm f35dc8e64e07a023b1b3bdde76361808ba64c2dd93c4c0b32218d4a172303f0d java-11-openjdk-demo-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm cb71f84bc7aebc95a95e926421f291aca3330a9ae2e3fcffd31da30f92f9f80d java-11-openjdk-devel-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 52c2ca1724e5e39fc4bd417f77ea400ab16bcb34cc58c0a4c3fd11209a3c60cf java-11-openjdk-devel-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 3c042c136d6156bb2678bad08976c33dbd131618144ad227b332f99b9bf58c41 java-11-openjdk-devel-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm d6283cb663b1f79ce879130fd587699791a9b9ff5124c4ad30dd9ae6f4200002 java-11-openjdk-devel-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm fbe7941d4c138b7277588d9080908654350d1fc9d9c5a4448cffc3b9dac9edfd java-11-openjdk-headless-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 3034a0ca3d2eb14b44d7cab420fbd5713efc556d358c34e6529af8bdf28fcb5d java-11-openjdk-headless-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 913365e2815a5bf62812cc7df52e3c5a80fe21800045c121e78e1e25051776b4 java-11-openjdk-headless-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm fcdc553110c4146748e67644c30a9b0cdeffaf54ec1434f0c1ab2eb12e7d15b4 java-11-openjdk-headless-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm de99c2c99d0b91697a49a32b8d097d5afca8eae9459e2a5be8f65e3912b9a9c8 java-11-openjdk-javadoc-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 9e7662ba6701cf6da76d150a2bca15eb347da8d4f9f5a03341e749e7876c6ac7 java-11-openjdk-javadoc-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 8d8497a274cc0609a11e8c9d9271024c9d1736789e1101a2208c302f64fd64e1 java-11-openjdk-javadoc-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm e0bf7b884f514f5887407168af8040608b30881f99d5952ec500673ebcd9580f java-11-openjdk-javadoc-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 72484dbd27bc6bd07294b83ba4c0c1b32ff9e6c143790be7e7377d6643264d01 java-11-openjdk-javadoc-zip-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 10e484ef827e756bfe85e3ce5ef3ea169dbda3223f7b73416abfc47528a68c54 java-11-openjdk-javadoc-zip-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm dcf7883515aad5fdfa3dfe564c357dcd072ab9b5335ba76e9b0c428f40d8e562 java-11-openjdk-javadoc-zip-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 899a7e208457252e8285cc617f4e8664235d795e4e34901e86a86b5c2933bec5 java-11-openjdk-javadoc-zip-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm c85f91ad34e12293688d4454a9527ea4837a828ab2a50564de3864f5b1815cf6 java-11-openjdk-jmods-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 0fa4951104fff8c4e13b6e99948aed672bd9739a981829e5d97b0b1295cf8a6d java-11-openjdk-jmods-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm bae2e704ef9f43f59cc5a1f790475f2ec1d76afa991fdd78b28f1a0e378db62f java-11-openjdk-jmods-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm cef81ac4a3c6b928a0e665cdc618db6436c48a0c29e1a0cac16a8d6e4d4c130b java-11-openjdk-jmods-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 67799a00652950a41707fea172a916b654750a59122e0bcba0f830864de3e0bd java-11-openjdk-src-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm da9137e4c8d0966e687a33bad71183bb27b7ae2d8d55fc9f67fc9f2cba06055e java-11-openjdk-src-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm eb594714062ef86e5065ddd1d953e5d66154dbb37c17d2d9331fa2ae79cc8acb java-11-openjdk-src-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 7df99d896d925cf9e6733590662ee0e38f47eee4fa5d09ee4441ff4073b11527 java-11-openjdk-src-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 636d5b128295f3f9aad881aa0637b7520f72e5b232796397e5dda49ac289999c java-11-openjdk-static-libs-11.0.30.0.7-1.el7_9.tuxcare.els1.i686.rpm 0168e8bad192d183f2ad4ff99f03fb51eb36e6470415b701b738a766d11930a5 java-11-openjdk-static-libs-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 3b05aa2809a23fc8a2d2100436b0cd37ee4339bdc7705ea1fd4bfaf9f7c5b732 java-11-openjdk-static-libs-debug-11.0.30.0.7-1.el7_9.tuxcare.els1.x86_64.rpm 2a9a8ba67f3cf188a47bcd41154c050d784ef0183dc6abfb36aa17c813a24f5a CLSA-2026:1777279920 TuxCare License Agreement 0 - Fix CVE-2021-33582 - Denial of service via string hashing algorithm collisions Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2021-33582 - Denial of service via string hashing algorithm collisions

0 tuxcare-rhel7-els cyrus-imapd-2.4.17-15.el7.tuxcare.els1.x86_64.rpm dc06d430c2a3607621b60f8af575b512a7843fba07e89c0f0a3fc4cadf7824f2 cyrus-imapd-devel-2.4.17-15.el7.tuxcare.els1.i686.rpm 3d9d87fde7c95e9a14401a937cc3ee2ccb101e61c23f4c151220ce55a233ea9c cyrus-imapd-devel-2.4.17-15.el7.tuxcare.els1.x86_64.rpm 669ba0c23491782cfcf6d599f5e73267cbb97d522e4a8da394d54d5afd54d3a4 cyrus-imapd-utils-2.4.17-15.el7.tuxcare.els1.x86_64.rpm ae57da373d4f044600135a875ee87dbf07233586b9a0bbb25fbbb1f1b5fefcdf CLSA-2026:1777308690 TuxCare License Agreement 0 - CVE-2026-1299: reject newline injection in email module's BytesGenerator when serializing headers - Skip test.test_xml_etree.XMLPullParserTest.test_simple_xml during RPM build; unrelated expat-2.1.0-15.0.7.tuxcare.els1 regression breaks XMLPullParser chunked-feed semantics in TuxCare ELS el7 build chroots Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1299: reject newline injection in email module's BytesGenerator when serializing headers - Skip test.test_xml_etree.XMLPullParserTest.test_simple_xml during RPM build; unrelated expat-2.1.0-15.0.7.tuxcare.els1 regression breaks XMLPullParser chunked-feed semantics in TuxCare ELS el7 build chroots

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els6.i686.rpm 15dacc184510970b7f0c67b699f7a2fe29d47e875972014779e505641530637e python3-3.6.8-21.0.5.el7_9.tuxcare.els6.x86_64.rpm 5e35c5018da2f937f0ebb3b4e68bb7119922e3c2e58b26596e2257feed6e3791 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els6.i686.rpm c8f8d66c4a62edbb2684bab38eaf52e101b31c98289c3d7b883da37ec28afacc python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els6.x86_64.rpm ddf376a46c771388afb1d4a574699e76dcef531c6e48a56995e13337ab92a407 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els6.i686.rpm bb6f26140a78cde0d4e0618bee5fc9f5b450df9bb6ec43019fe4b8bf291da75e python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els6.x86_64.rpm 28fd1e5c8e85777081833f6b5b1a83ac0eb668496ebf4bdb8e02a8e5854654ae python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els6.i686.rpm 4a6d65b773ff566657026c7332f209170d94c1614d2cf433515531832ddbc790 python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els6.x86_64.rpm b9035c9e7ee1b9d2aa1424f2831a5dc5d9df65a05bfe2cb4e7edc8983f742f44 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els6.i686.rpm a9d2cc16bd9c9a248d389f03f475925fdf8258d68a6561d3a993d5406264f91e python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els6.x86_64.rpm cc199694680c7074cd5e4b712ed25f31adb02a3c9c40121c948e39289b6c27d9 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els6.i686.rpm 031b5d91fb4e90e3ed29a270462b0617ba4be62333b905fa15b1ee033dfa2337 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els6.x86_64.rpm 8d4030b3da0746ea60eb213c1d4784e8d1a79948950749e1abf674a6f05dbd53 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els6.i686.rpm f5a72b2254a72e67a7fa1458ee97a36dd36c2dafab12cba857262a99aba6d6f7 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els6.x86_64.rpm 0eddc4a3c45d79a083f7892a75662b73bb445b94a3cd042e28cb5959892f0396 CLSA-2026:1777310036 TuxCare License Agreement 0 - CVE-2021-42574: add -Wbidi-chars warning for Unicode bidirectional text Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-42574: add -Wbidi-chars warning for Unicode bidirectional text

0 tuxcare-rhel7-els cpp-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 3ed4d45499ea2e801d5acc3e2e8987b6f1c5a24e47771a860f9c534a0e19d140 gcc-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm c669f60b332b4c5931d3f5dc2ba2ec707be3cac09ec248390a82fc26159df565 gcc-c++-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 92f7fdc2a290514b34bfc79580f0ec487b23a8eb87f359522bede0878dd516ec gcc-gfortran-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm c18143ad41c0e87dcb5951a5bf3120efd660a8d8fb5d4256350e584967c5764d gcc-gnat-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm f63c48b5174ce094149f4fd4411b5d26a02f6df0ed8dc773d030c9bf8cc67009 gcc-go-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 9222385dd8b1a744da92eae40d709fd35d7e4e9379dd6839bc882e31f48cbdba gcc-objc++-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 7668272c26b87db8120ff53f4b05cb1154d871a82b8e7a37cfae2072f25fef9a gcc-objc-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm ead684a7a492666a1e53f090afea022d343c5c51a22136132d4d5071090b1f83 gcc-plugin-devel-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 1b1da074a098825932f8af790e0dc48112391d0297312c73866d304f8b0997bd libasan-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm f11d9cac0682212a03f37170d1f29be4818861e0c793ff954186f39ce53ae084 libasan-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm b7e5a9ae7560813f5234d99b6c4a6718bbd77c52116e8a329a1b73272db3b182 libasan-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 5b89674e1d3f31819afaeb1e2a5c3714465bbed47c041c1a5c0e98abec44d377 libasan-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 8a3e29f92d40e5fea0a0f6b83205791603ae31864d9811096df77f7d9ded1e1e libatomic-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm fd25ce5c5d86c807175c4356a653d58d7aff7938520a7d382425410c7d1f179a libatomic-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm a8f031339b51a684598d1a3691451889bd6e02b8c22481993456a24a79390c5c libatomic-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm a103b637974accd32979df1c555fe9aa9889f4ffda3042f3287d9733af4def74 libatomic-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm e19152f53bf81b81d813a06bf5542f952721440722964e599aeaffd24e9b4460 libgcc-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 12de90fade5959052fa7fa1fa86efe414955bfe2c25e2e561e0315094acdb349 libgcc-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm d81a4935a66448f68bfa395493c04bc67dcc5375228f1e8f7cbabfce9a98a0ce libgfortran-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 1789326df6339304c68aa175bca1b8f4a66de722796f11bebe398aae09f0a304 libgfortran-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm bb09a9840d549dfac6e5a53b1e4bc7371c599d9a9424eaaab016f668704482aa libgfortran-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 8232104b5bfd0f9c07c44a5c36361922c5638c60c9dbf3555374f6b9877bd5ca libgfortran-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm d2e512fd8359bbe480672177d4ce3ba85a29acf24dc84f832cdb000d14840879 libgnat-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm e30cdb2c8abce5768c5064a05a2457f789e2bd49e164d696f7ac95d40a11cde0 libgnat-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 3e7901078586ff4e876b176c828c2badb50526898becb217a20810d51c440373 libgnat-devel-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm ce5f24da92c3ab8c3fd6b1a522c141cb432aefe4e81ea7d361adc7955da7097a libgnat-devel-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 7e4e24d1a1d8da83385fc19823a6985404e4d58c5353f7dddf5f29e88a9f463b libgnat-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 74ab58a039f9f8aee07d842e3f459e9d3047a96c8bab3a73c01eb291287721c7 libgnat-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 6fc59be0a5dec5c4d3191601c8fc5693c3752dcc1ef12265358e952515762b3c libgo-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 6dec29917f09e326250cdbbf4cf673ebd015446dda19b77a3eb5019fb72d59ff libgo-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 10ab792aa865c1b9a39122442db0e9fce78d5520d02e5411cee4122b06a4557e libgo-devel-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm f4d49b91461eeacb1d93b790ac8389c06e37098d884b5c0e6b7382291d0ee2fe libgo-devel-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm d1203eba7428d26d9d744b9e59b85920954dedca6154c45e618922eb1953a995 libgo-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 7280e16ba1f4a5717fd470674500958a1ac58e5a715f136ed09f6ab41b35a9b1 libgo-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 4152a0bb1f940f087760a8d9b8e5ef45bf84d38fb1823aabcb489362da76c3f0 libgomp-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm d1930159062b54662069baac00f7d0f23d9ed94b42a4e70c0690fe20e1ff2296 libgomp-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 396a1b867495d973e87d069aa9ff375b18e88f525d6e28dcfdf28069f5b82bab libitm-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm e46576c4942f16563ecb135914bca7547feb8601d7fab863b138041e974901e3 libitm-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 699ac1ba174214d50df9386aba1c22e8e4865db4e93bb60654059d2b4074f56c libitm-devel-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 3d44f9a4739b688302c92fcd31c416b605ba67249e81d63aa8af7d2f094ec97e libitm-devel-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm d0d4fd61cfcce6e6f2fe2c52b8417ddffac28d5eea1b9ddb713bc3ad6658e3ab libitm-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm a2e134db17563ace9a0e8661bc44129dfd1ffb3a5914a3128497fc3a526e6801 libitm-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 44d03b81bc17972ad579a2900dd6fba01c42c9dcb2602daea8fa836c794490d4 libmudflap-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm f27b22b7a421ca3c98f24524f1656cc2bee5030ce0f7e5d64d2c3200ecae0bd9 libmudflap-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 2a7293403b26c7434caad4e7412b94e1483c9c8994aeef7c365a3d76e7863e96 libmudflap-devel-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 324cef2e01bb4f823866281a8ab8190ce0d54b1f9c2223d790f12d5612ec5fc1 libmudflap-devel-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 8f8688d036ac3dd5b2239b9075e166c81f3b8882ec9519c5be6fb7a030fb0457 libmudflap-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 627b372ef91f23789f2a2fb9b2115cba6bbfc93248e77ac0fd40b9b36a56450c libmudflap-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 47159d64adfd9c28a2f8eb730892a41fcf0feb948b11ef938094fb6bd2da6802 libobjc-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm e80441061cd11e82fdbf9f456826652a7d9679ae4953eb9f3d473bd729939536 libobjc-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm a3c3a70233feb6d336c080fcb1a5f7c7f5808a153c8a66f52b60a7fc359742b9 libquadmath-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 78c19db76b928bae02d3782cfb3ca17ebbed08eb14eee212955b2c2101974403 libquadmath-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 17fca9657c7133189c7709f2d0144a2c9340c19cca91afacf1e6b82722c53372 libquadmath-devel-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 57cb215ddcaec833b0167b478a8eb66eae8c67e9bf46f435cefc0cf7a912a75b libquadmath-devel-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm ea2db6507b310b3bf2f5cb0e17c2eac1445bd2e3e5b5374a8b7b745f226547bd libquadmath-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 8be53a849a3b4b5292af904cb61f567bd44dfbcf0b34afefd5ad21d2a098c35d libquadmath-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 0f98a1d2a939b1aa270d817e464270d566e26e8d544758dede70179a6369446e libstdc++-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm bdef893e130caea1bd37271e8d8251de349058567bcd0d8db4c44b7dba2be3de libstdc++-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 27adf12544a04b15c5a04015289453fa6befc47b57446cdcbad2bc0633c33382 libstdc++-devel-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 07ecddb7387d66ea68e26e0f447b658bfe7e505d2965f160b4ea6a9cb4796859 libstdc++-devel-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 3b9527ff3120f3d866fea6a80b6269013c566eb5e53b084274ab6332313eaf61 libstdc++-docs-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 48031255a3f5396991fcb65f790ca2f63d58e1e877d2d8490039aff0ae5dc6d5 libstdc++-static-4.8.5-45.0.3.el7.tuxcare.els3.i686.rpm 27d16ea68123f39fc2b15b9e9c297704186ce6b8f69f093a74074267c4a0d5cc libstdc++-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 775212fe2b1462ba24618b698fc47d5fdb5ec531ee19c4d7f80720b8a307476e libtsan-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 475c8d4772d5cd4940b81cd7a5cf0a6cd69db79f37e4bfb83800798531c32642 libtsan-static-4.8.5-45.0.3.el7.tuxcare.els3.x86_64.rpm 073914e6d19130ff2751181757e1cc8f4a5bff4f66e7e9cd025c21bf53f8158b CLSA-2026:1777378006 TuxCare License Agreement 0 - CVE-2021-23239: fix potential directory existence info leak in sudoedit - CVE-2023-28486: escape control characters in log messages - CVE-2023-28487: escape control characters in sudoreplay output Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-23239: fix potential directory existence info leak in sudoedit - CVE-2023-28486: escape control characters in log messages - CVE-2023-28487: escape control characters in sudoreplay output

0 tuxcare-rhel7-els sudo-1.8.23-10.0.1.el7_9.3.tuxcare.els2.x86_64.rpm 73e4acf32697a2a72ea08ebb06ecdf69d42cb2b256fdd1d17612f86860a92a48 sudo-devel-1.8.23-10.0.1.el7_9.3.tuxcare.els2.i686.rpm ae9e113cb8262d5e8562686eb7d56360c1ebc93f528caca904d179d923f4fbd0 sudo-devel-1.8.23-10.0.1.el7_9.3.tuxcare.els2.x86_64.rpm f1e80da1d79644ddf5336ebbc7194de2e18456edd3431410b2a8788144379359 CLSA-2026:1777452099 TuxCare License Agreement 0 - CVE-2021-3580: add input validation to RSA decrypt family and length check to _pkcs1_sec_decrypt Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3580: add input validation to RSA decrypt family and length check to _pkcs1_sec_decrypt

0 tuxcare-rhel7-els nettle-2.7.1-9.el7_9.tuxcare.els2.i686.rpm 72522d081e495a5fb580614c68e4bb287ec2883143242607d71612e246d7c7f6 nettle-2.7.1-9.el7_9.tuxcare.els2.x86_64.rpm ad9de14756368a6f9d5e7085a813f80d3bff0bf877c608ad2f4208b890781e57 nettle-devel-2.7.1-9.el7_9.tuxcare.els2.i686.rpm 6e7d33662b1ff08d72aa34457657e1f2cacd80c8acd8cd500a784c65735d8abb nettle-devel-2.7.1-9.el7_9.tuxcare.els2.x86_64.rpm 75b87a6a689936633b4b9f7edc31aa0f6af420e437f1d0ecdbeeaf405919e366 CLSA-2026:1777471237 TuxCare License Agreement 0 - Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els. - CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1; this release reships those fixes to the additional platforms. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Extend ELS coverage to rhel7els, oraclelinux7els and cloudlinux7els. - CVE-2022-48624 and CVE-2024-32487 were already fixed in 458-10.tuxcare.els1; this release reships those fixes to the additional platforms.

0 tuxcare-rhel7-els less-458-10.el7_9.tuxcare.els2.x86_64.rpm 8824674a31522a961993e028a9c17384699518dc434d27e0843f77e5bb2acb19 CLSA-2026:1777480298 TuxCare License Agreement 0 - CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34980: filter control characters from option values in the scheduler to prevent PPD keyword injection via Print-Job

0 tuxcare-rhel7-els cups-1.6.3-52.el7_9.tuxcare.els4.x86_64.rpm e03758cef868a75d539e3d179161ed93deac35adc1ceba6df5d4783b68aade11 cups-client-1.6.3-52.el7_9.tuxcare.els4.x86_64.rpm a86e8c685c3fc7f42bd7dd2821b1709c6a732250fe07d0b9df1af44f9acd17d1 cups-devel-1.6.3-52.el7_9.tuxcare.els4.i686.rpm 51b8a3ae5f8897d17431a10f5c5aa37d8607c208aa8ce9c1f6fb2123d3b55b2d cups-devel-1.6.3-52.el7_9.tuxcare.els4.x86_64.rpm d7aadcbd653682926e04367c9ac29bb9ecc6b2dd298cbbcd5155262ce247d698 cups-filesystem-1.6.3-52.el7_9.tuxcare.els4.noarch.rpm 2b8d4e340d59455fc360cc54e97449f9a519c13e9ddae75300253ea7f2fd1ca2 cups-ipptool-1.6.3-52.el7_9.tuxcare.els4.x86_64.rpm 4a27028f01be84c48c7b3d0d648de947ea1fe23304baac70f518b72881c441d6 cups-libs-1.6.3-52.el7_9.tuxcare.els4.i686.rpm 1e34e200cb2a18068801ce64c288fddb6254808eeae793e55f370205650acb73 cups-libs-1.6.3-52.el7_9.tuxcare.els4.x86_64.rpm 5d0fd38083b4d7f46b1ba575ac9c1973a699b6f6c8508b127476278aa5d9fd57 cups-lpd-1.6.3-52.el7_9.tuxcare.els4.x86_64.rpm af5601739cf6359b1b1024260065dbc00ea24c436bb0645aa012820546a7b95d CLSA-2026:1777538339 TuxCare License Agreement 0 - CVE-2025-66862: fix buffer overflow in gnu_special cplus-dem.c - CVE-2025-66863: fix denial of service in d_discriminator cp-demangle.c - CVE-2025-66865: fix denial of service in d_print_comp_inner cp-demangle.c Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-66862: fix buffer overflow in gnu_special cplus-dem.c - CVE-2025-66863: fix denial of service in d_discriminator cp-demangle.c - CVE-2025-66865: fix denial of service in d_print_comp_inner cp-demangle.c

0 tuxcare-rhel7-els binutils-2.27-44.base.el7_9.1.tuxcare.els6.x86_64.rpm f060a29e9a9bddc6a4660f5846bbfcce298194333d74164b3a755527fa836d03 binutils-devel-2.27-44.base.el7_9.1.tuxcare.els6.i686.rpm e36a1c80bcd74dee4666adbc24f8c40fdb9827eb539117c94e5f5a8894eefd35 binutils-devel-2.27-44.base.el7_9.1.tuxcare.els6.x86_64.rpm 9643381dab0f2feb661455d9850b88dbf59b22916e9b0969c18a0972d5ff8050 CLSA-2026:1777539405 TuxCare License Agreement 0 - CVE-2021-3521: validate and require subkey binding signatures on PGP public keys Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3521: validate and require subkey binding signatures on PGP public keys

0 tuxcare-rhel7-els rpm-4.11.3-48.0.3.el7_9.tuxcare.els1.x86_64.rpm 25592f3ec1bda0913f264052c815732c5fade62be96ed1b744a6e6a7aa82211d rpm-apidocs-4.11.3-48.0.3.el7_9.tuxcare.els1.noarch.rpm 2929c5d47d569c5ffe47f0bad5da1a0f5ed6e7cd8879784682acfcd469a86b36 rpm-build-4.11.3-48.0.3.el7_9.tuxcare.els1.x86_64.rpm 2070142f4c72468c472ce363cbe4247aa3504b7f3e34ad9f88468f75f80b52b7 rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els1.i686.rpm 43b0ccd2774b40640a7a950bcd405b6a2d8443fcb9308fbc601a597a2c237042 rpm-build-libs-4.11.3-48.0.3.el7_9.tuxcare.els1.x86_64.rpm 4e9cc68922c4b002037377655c98fe3c7166388ade82a453ac81350121ccfbf3 rpm-cron-4.11.3-48.0.3.el7_9.tuxcare.els1.noarch.rpm 771b3cf84f9843360d220f8a2df8eb774276382a523e7c39e308a66618640593 rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els1.i686.rpm f7770a52f24e29e04c5a93b7f388c9d0ede8557a152228c8deddcc601cea27da rpm-devel-4.11.3-48.0.3.el7_9.tuxcare.els1.x86_64.rpm 6749e7db21992ffb3f6feb60a1e2e7dbd87d9cfcff3ed1ce6f084d2425de87bc rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els1.i686.rpm 9c8d4c7969340b276799a30ef7b11bc592465928a9d0e113addd766a33b0ec47 rpm-libs-4.11.3-48.0.3.el7_9.tuxcare.els1.x86_64.rpm e64516efe5c56e6054d5b4612efe5bc1254e0737455b4aab3fdad7a34173e9da rpm-plugin-systemd-inhibit-4.11.3-48.0.3.el7_9.tuxcare.els1.x86_64.rpm e7114ef79564598fbf6195815ad6dd1ca17ccb21573b5534efd53ee22c7df03c rpm-python-4.11.3-48.0.3.el7_9.tuxcare.els1.x86_64.rpm 9a23cb9f526713bb843869e38c87212d4b5ace306525011968bb1f3efeb7c054 rpm-sign-4.11.3-48.0.3.el7_9.tuxcare.els1.x86_64.rpm 7e8e40e0c53bdcf30bd2f03cc2e506f13184a1579c6cf603cb0a7301a47311dc CLSA-2026:1777539711 TuxCare License Agreement 0 - CVE-2023-49288: fix use-after-free in store_client lifetime by locking StoreEntry for the duration of the store_client object Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-49288: fix use-after-free in store_client lifetime by locking StoreEntry for the duration of the store_client object

0 tuxcare-rhel7-els squid-3.5.20-17.0.5.el7_9.99.tuxcare.els6.x86_64.rpm cfbd94c33336b545a56fd7fc0de9ea38b11a9ed79061360409e3390a8edb3fce squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els6.x86_64.rpm 4286a4760120115d980263e7a93ecd509f771054598b7ab6fb0a540eab7acf21 squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els6.x86_64.rpm cc5a375c94b89c5691403baeefc5c386892a89ef1ef4d97009f4e20edeea58f8 CLSA-2026:1777553052 TuxCare License Agreement 0 - CVE-2026-28389: fix NULL pointer dereference in dh_cms_set_shared_info and ecdh_cms_set_shared_info when the CMS KeyEncryptionAlgorithmIdentifier parameter field is omitted Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28389: fix NULL pointer dereference in dh_cms_set_shared_info and ecdh_cms_set_shared_info when the CMS KeyEncryptionAlgorithmIdentifier parameter field is omitted

0 tuxcare-rhel7-els openssl-1.0.2k-26.el7_9.tuxcare.els8.x86_64.rpm 7100195034cc9e578f5d9890cf4d2bb3a70814386a5b9d3a01c82bc9feebd25c openssl-devel-1.0.2k-26.el7_9.tuxcare.els8.i686.rpm f486f0d8f89cb2c892fb541bee8251a1eb27d63c8e52e813d14c40bfadbfe9d4 openssl-devel-1.0.2k-26.el7_9.tuxcare.els8.x86_64.rpm e770e66393e5c235523c86c886eb26416e0ba36905c89bdd7c0ceeb848abe295 openssl-libs-1.0.2k-26.el7_9.tuxcare.els8.i686.rpm dcdcf2bde01987fe455c797bf9d9a357b133fd83699d9bbb99c212a883ae16a6 openssl-libs-1.0.2k-26.el7_9.tuxcare.els8.x86_64.rpm 0f4f7536796bb9b434ad2ca7d6530196902a9313808c7fb6bf23de86363adf57 openssl-perl-1.0.2k-26.el7_9.tuxcare.els8.x86_64.rpm c45a4011f21f468c23d62542a4e6f2513a5bb1579069ee1c1ebb498b465021a7 openssl-static-1.0.2k-26.el7_9.tuxcare.els8.i686.rpm 1828bb7897539f23b9ecb739bd735a083fd8d37166de7f8001df3a215b9e12a6 openssl-static-1.0.2k-26.el7_9.tuxcare.els8.x86_64.rpm 77fb0e1202fd9966797f3f2f79bcd1c5c073c48efe4932eb04fe5aaac04137a2 CLSA-2026:1777567430 TuxCare License Agreement 0 - CVE-2026-28390: fix NULL pointer dereference in rsa_cms_decrypt() when CMS RSA-OAEP pSourceFunc is missing its parameter Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28390: fix NULL pointer dereference in rsa_cms_decrypt() when CMS RSA-OAEP pSourceFunc is missing its parameter

0 tuxcare-rhel7-els openssl-1.0.2k-26.el7_9.tuxcare.els9.x86_64.rpm 7378230468c7218e84b57e4cd06f7d7c8d985359563967263da38bc6b7ed335e openssl-devel-1.0.2k-26.el7_9.tuxcare.els9.i686.rpm 11dc6789b890f50f017b5240a136e86d112c3e4f3baedb49c41069305badd117 openssl-devel-1.0.2k-26.el7_9.tuxcare.els9.x86_64.rpm d984eaae50d58cb3aefcf89331033ed1d0d668d6ef4529c0889459668459853a openssl-libs-1.0.2k-26.el7_9.tuxcare.els9.i686.rpm 303ac859f3bc1ea35018b2ab8157be8c502ae6ee2143f5fffd97444ca042bfa9 openssl-libs-1.0.2k-26.el7_9.tuxcare.els9.x86_64.rpm 05c1c9df75388b57c5ecc38fcb0c9d59a3df8c69e0f7aa7a059df8870d70067a openssl-perl-1.0.2k-26.el7_9.tuxcare.els9.x86_64.rpm 1a6844dc5e048584a5aa200cbde1ac36a14dadd95da3cc36c99553a553254fb7 openssl-static-1.0.2k-26.el7_9.tuxcare.els9.i686.rpm f6c19a390ff2eb510db116edb71fbc62c0ec5b9f6cf343d22bcb271096fb78cd openssl-static-1.0.2k-26.el7_9.tuxcare.els9.x86_64.rpm f55fa178853874833a8c22526b3adf433f65e669edc09df3c0a5fe18aa0d96a3 CLSA-2026:1777586051 TuxCare License Agreement 0 - CVE-2026-35386: fix client-side command execution via control characters in usernames by adding iscntrl rejection to valid_ruser Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35386: fix client-side command execution via control characters in usernames by adding iscntrl rejection to valid_ruser

0 tuxcare-rhel7-els openssh-7.4p1-23.0.3.el7_9.tuxcare.els5.x86_64.rpm 438047a0bd7fed7f0cf32411c1d7cb9e0d554be95051c888e56f0c8c075358ed openssh-askpass-7.4p1-23.0.3.el7_9.tuxcare.els5.x86_64.rpm 6cfa55a50fcf5e30f7221f359d1350358a04e1b9804f932db824a29337723e9e openssh-cavs-7.4p1-23.0.3.el7_9.tuxcare.els5.x86_64.rpm c1d625a176d848409529a5bf4b1e630a12baf7786297c1aba8d1b8e0437056d5 openssh-clients-7.4p1-23.0.3.el7_9.tuxcare.els5.x86_64.rpm bcaba330c9333d4a3a06b563f6a3324ec6adf7cb1008d48032c155089361ebdf openssh-keycat-7.4p1-23.0.3.el7_9.tuxcare.els5.x86_64.rpm 9aa75d1cf5c6026d1b9f9d9d1ccf6529c0c8babcbec907e01081172dfe987c21 openssh-ldap-7.4p1-23.0.3.el7_9.tuxcare.els5.x86_64.rpm 3eb2ff50715b3b22310cc0608ede9c4b0dba0530ad57f8ad8b1e5376090ccc40 openssh-server-7.4p1-23.0.3.el7_9.tuxcare.els5.x86_64.rpm 3523e35e7f2aa7506f3d669c9c05062f07daa84025f76262572326e1cb534728 openssh-server-sysvinit-7.4p1-23.0.3.el7_9.tuxcare.els5.x86_64.rpm ed63a7fa6be3ba0ab641fdcf297aefccaf425d5be25c907bf7d000afbc1f74a2 pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els5.i686.rpm f4d7d0c501b840e9a03c2ebb1b22cb6a347c3f905f65138e4eb113fea2a7e801 pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els5.x86_64.rpm fe2b65a25f70175ea4e2736080dcf28dd9bea6704f5d7ba7ab742ae5061b0f7b CLSA-2026:1777466052 TuxCare License Agreement 0 - CVE-2026-35414: fix incorrect matching of the authorized_keys principals="" option against certificate principals containing comma characters Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35414: fix incorrect matching of the authorized_keys principals="" option against certificate principals containing comma characters

0 tuxcare-rhel7-els openssh-7.4p1-23.0.3.el7_9.tuxcare.els4.x86_64.rpm dedb31e6172dd85e375b8136fa523dcb6e06fd39e2fd52a948bfc01f485b17f3 openssh-askpass-7.4p1-23.0.3.el7_9.tuxcare.els4.x86_64.rpm 49ef20c6e72c2617d4488b53924ade6d002ff091b679550aaea907b8c831d46e openssh-cavs-7.4p1-23.0.3.el7_9.tuxcare.els4.x86_64.rpm 765ea88e3d4b13fa2f91f45e89d7ac373cace1743f3421168295325a589afb52 openssh-clients-7.4p1-23.0.3.el7_9.tuxcare.els4.x86_64.rpm 2ae74ff4d6781afb284746f54d9bc5a01e663d56f982b222645d3e0d343351b8 openssh-keycat-7.4p1-23.0.3.el7_9.tuxcare.els4.x86_64.rpm 6ca29f3ed837a2a5f2eefc7f7fa000c800344b79b0006eee55557bac7725713e openssh-ldap-7.4p1-23.0.3.el7_9.tuxcare.els4.x86_64.rpm 48d878ef6aa65950c2f501a2491588762f53abb2a5a7b7f164684e63446443d6 openssh-server-7.4p1-23.0.3.el7_9.tuxcare.els4.x86_64.rpm 8985100eb7daa0d3e7ce57c3b3d6a62166412335e25cf9af3fdd9b920d3484f9 openssh-server-sysvinit-7.4p1-23.0.3.el7_9.tuxcare.els4.x86_64.rpm db7eb62c5397fed6bf9749736c9dc4b27408f73e9a0a5173f1d4046539c56c63 pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els4.i686.rpm 1cfc9b38f1777ce635768aca3048922c73b289dfe1eea314de44875f56360d1c pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els4.x86_64.rpm 929a6ae385c27afa1cb92d6ba2e53286ed0e3469e07bd1d8bd9ab7f63b79503b CLSA-2026:1777941345 TuxCare License Agreement 0 - Fix CVE-2026-35385 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2026-35385

0 tuxcare-rhel7-els openssh-7.4p1-23.0.3.el7_9.tuxcare.els6.x86_64.rpm bae5674b9ff69a1d117ac28b636ee8dece2292b72af3fdbf54c6888a694db1bd openssh-askpass-7.4p1-23.0.3.el7_9.tuxcare.els6.x86_64.rpm 3e49b84421e4a2427bd71341e45d3ab50ede933c4fbfa5f8bdd6e7a09bd69e1e openssh-cavs-7.4p1-23.0.3.el7_9.tuxcare.els6.x86_64.rpm a038ac50f620acc141ccf653f3b48c2e78f69a2569f42a37c00aefc56a55dc29 openssh-clients-7.4p1-23.0.3.el7_9.tuxcare.els6.x86_64.rpm 8417db84e2da3809009e8cb5557da2706ca8c48838285a30d7df2a38d79ced6d openssh-keycat-7.4p1-23.0.3.el7_9.tuxcare.els6.x86_64.rpm 154c7bf35a37c91a139148454d14292eeec128f43a55435b36de1c9c758154a0 openssh-ldap-7.4p1-23.0.3.el7_9.tuxcare.els6.x86_64.rpm 7108c0e2a69d0aabee0db50994028aaef952fc85b4042a1110d6202498518f87 openssh-server-7.4p1-23.0.3.el7_9.tuxcare.els6.x86_64.rpm 5b4dce929d79baa6c4cc56f9024380a412b0157038011aa84e2343a808b2c7d2 openssh-server-sysvinit-7.4p1-23.0.3.el7_9.tuxcare.els6.x86_64.rpm 37fee590e3202d695848e73f2a570fde364ca6f1f1c153ed15afc0c5c24935d3 pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els6.i686.rpm 9a9da2724b08d085e1fdaff91dc6fa5abea1239ec9988bd72056465abd51a322 pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els6.x86_64.rpm 7ed6c7dd8c218847439b33ba68ae21f83b90c6d2ec0013241e59d2fa23b5da7d CLSA-2026:1777946871 TuxCare License Agreement 0 - CVE-2026-4519: reject leading dashes in webbrowser URLs that could be treated as command-line options by external browsers; also close a %action-substitution bypass of the check in UnixBrowser.open() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4519: reject leading dashes in webbrowser URLs that could be treated as command-line options by external browsers; also close a %action-substitution bypass of the check in UnixBrowser.open()

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els7.x86_64.rpm 3fada9af4d4ac40138e60b6baec9ff9d18ff2756568e4ee6d0cc6c6c67f979b5 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els7.x86_64.rpm efe6078ca1102fe4a839edb15612ec3a86bc10466acbeb4de8d6487690b8abdf python-devel-2.7.5-94.0.1.el7_9.tuxcare.els7.x86_64.rpm 5d53664d6e178e9bde85f7cea3de65877f982ff8e0a7d7399994899922205356 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els7.i686.rpm 74e5ee5767f49939bd3ff3baaa98142cd694c755c168c8fefb039166425dcb25 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els7.x86_64.rpm 5d1a3f1233d60f5229eb59404325af478ebb1479e61f928c0315ac4a28c21732 python-test-2.7.5-94.0.1.el7_9.tuxcare.els7.x86_64.rpm f938baf4e96ae430aa372ef01851f6ea50ea3ad2a2b67972d94acf9019f32352 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els7.x86_64.rpm 30599075d6bf9efc7726247f8b3647b0ef34cc6b682b8aceacb350b9b24d4084 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els7.x86_64.rpm ad89993f40280a8922602f3672918cd4e65437d39c9072655b54dcebd88311e4 CLSA-2026:1777970160 TuxCare License Agreement 0 - CVE-2021-40145: fix double free in gdImageGd2Ptr Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-40145: fix double free in gdImageGd2Ptr

0 tuxcare-rhel7-els gd-2.0.35-27.el7_9.tuxcare.els1.i686.rpm 956af567a8abd9f4bebfdc943b4ccc388a61c20f233424e7039406eb1d4fe530 gd-2.0.35-27.el7_9.tuxcare.els1.x86_64.rpm a915c4c9facf52d1570d120ddee452ea2171e7faaae7f0247fa08b4e1fddac07 gd-devel-2.0.35-27.el7_9.tuxcare.els1.i686.rpm eed070c5962f03b5182dda6d0f71d040acb22de16b52e6eaff4f05301485b266 gd-devel-2.0.35-27.el7_9.tuxcare.els1.x86_64.rpm febfc7446ffedca433f4309531f68267c1e49372760678e8397844c130981a53 gd-progs-2.0.35-27.el7_9.tuxcare.els1.x86_64.rpm 74723c582332328e5d1c09e8a4864670d3c71b08d34b400701fb4b5515be777b CLSA-2026:1777973694 TuxCare License Agreement 0 - CVE-2021-3426: remove the pydoc getfile feature to prevent directory traversal Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3426: remove the pydoc getfile feature to prevent directory traversal

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els8.i686.rpm 3fd4e1697377f7028d28995ddd19a9bfa0df8111ba789c5b09315ed7e052038f python3-3.6.8-21.0.5.el7_9.tuxcare.els8.x86_64.rpm f8fd3819f700d5a2cb544c1421ca918a0c8aafe1a208db54971d539d0662a708 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els8.i686.rpm 80f00b81001a2011c54e7df709a730fbeb2a45ab2f8e88bd72ce2c493d7d50ff python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els8.x86_64.rpm e013ad88d94e9ede95d862912bd6112b5b674055cdf85e61eda2ccefb55a6417 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els8.i686.rpm 0fe6c2418f24cf601f5fad461502c7d361811be416048b2b1663d4f450d4352e python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els8.x86_64.rpm 8edfffd8a720a691e4d7a0b8ac7f32072686119dcffd8fb0e4c421510a9f69da python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els8.i686.rpm 81a158a0f3233f3c42647186daec05d1f8503ed789be7fffdf329d0aad3d1404 python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els8.x86_64.rpm 8b4e807e88636282fac4e608789b5210aa9f289b2a8cff234bce32bcf31054aa python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els8.i686.rpm 6849344a7c2bda6c87524bcc4130b82cbe8046bf6a2eb7f90772e1264b819e31 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els8.x86_64.rpm 7eb88b3812fd46d4a969dfcaf22ff5ea633702d449486d04f8fbbb5328a81c6e python3-test-3.6.8-21.0.5.el7_9.tuxcare.els8.i686.rpm becac4dd5b71b94954634df4da4e3c9604106c26498085a7e02b9422540b980d python3-test-3.6.8-21.0.5.el7_9.tuxcare.els8.x86_64.rpm 00f588f761597b62355129a1dae9e9f1a503a8d1eb4abdd0c447cf6634308231 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els8.i686.rpm cb001155768a2c5a358f2b8c89f315c3f09d41368920dd76b79f217be2a7c9ec python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els8.x86_64.rpm d727c26ae22d9296e831de19aad096585faadc9a277cb222b6f03f18d44fda75 CLSA-2026:1777996005 TuxCare License Agreement 0 - CVE-2023-30630: do not let --dump-bin overwrite an existing file Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-30630: do not let --dump-bin overwrite an existing file

0 tuxcare-rhel7-els dmidecode-3.2-5.el7_9.1.tuxcare.els1.x86_64.rpm e5231597d46f72f4fb73afd8559a573a8cd2bdf752e283e7b17999d4869f2b86 CLSA-2026:1778002076 TuxCare License Agreement 0 - CVE-2026-4519: reject leading dashes in webbrowser URLs to prevent CLI option injection in pydoc/subprocess Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4519: reject leading dashes in webbrowser URLs to prevent CLI option injection in pydoc/subprocess

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els9.i686.rpm ae381b05f23de5823dda46cee261fdff8bea9dfa01f4045cefc49c872f65cf0b python3-3.6.8-21.0.5.el7_9.tuxcare.els9.x86_64.rpm cc2f9cb540e09a6f0d2d3549c99fcfbc99c588017d6c36824df1f8e4a393e36f python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els9.i686.rpm 440af786f122980cba4697754c13c5152eea3a479bee7529e290ecd86be20b6d python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els9.x86_64.rpm 08e85860bb1558529bd24417c7260774be9d7a9b5f9ca3517e0f2ddc11bdfa38 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els9.i686.rpm 22b9a17b0a75ad0aa51393462ddf247af934d9634701355586882f04f7c49a09 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els9.x86_64.rpm be2526289c5c5de143bee9a912cc68f41f33e7dea02e621121154c46d41f132c python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els9.i686.rpm 23773974fe01cfa3160b6ca17626f8b859ad23157b2a8fa4f0efbccc4da279ef python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els9.x86_64.rpm 410a2390daf95226b083a1f994a0b17d68502f3c3ad4484ef9802146e0cc7c63 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els9.i686.rpm 2cbfdcd38fdfc335979b9ad14a34d5d908e683bf1adfd64037968d1dcb90ae8f python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els9.x86_64.rpm c40054b5e6cc9054b52633eb9215a21f56778e1213cadbe401568d5a88eb5f84 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els9.i686.rpm 6454bccb3a18803839ee26b982082a7fcf7b3d51dc2555b94184bb68c86fe365 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els9.x86_64.rpm 03390bb75d5def43f247ddd237defd808b9f1bb6a6fcd7b3b2d2e029421074b1 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els9.i686.rpm 712b5921667d2c749b90485426d065c42e360dc4f37caaee5a437f07f2b35dd7 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els9.x86_64.rpm 52be5b7673e97490e15aeb9f5cfb7702ba63655b38b2bd1ff7eacdd69f45e094 CLSA-2026:1778020314 TuxCare License Agreement 0 - CVE-2026-28388: fix NULL pointer dereference in check_delta_base() when delta CRL lacks CRL Number extension Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28388: fix NULL pointer dereference in check_delta_base() when delta CRL lacks CRL Number extension

0 tuxcare-rhel7-els openssl-1.0.2k-26.el7_9.tuxcare.els10.x86_64.rpm c49654bf5ea8d153105343213724b310e4e6eba81ce59627b3e2050e2544069c openssl-devel-1.0.2k-26.el7_9.tuxcare.els10.i686.rpm 6e89e78abdef0703a95b0138772701321f4f2c5c25bb20ab3c73756a8b6c183f openssl-devel-1.0.2k-26.el7_9.tuxcare.els10.x86_64.rpm 0278b68a638c58b57b09a32678d9a04cbff112e832ad760b79fc6ce954bf0af0 openssl-libs-1.0.2k-26.el7_9.tuxcare.els10.i686.rpm 3dc89ba8ff7845a399f1440fbbc8f960d42a54d352149b11e45a079cfa3ae77a openssl-libs-1.0.2k-26.el7_9.tuxcare.els10.x86_64.rpm c46c2bd8dda3b7a0b01353aacde44ab3432b1d06b74963de734ee4c94e77a461 openssl-perl-1.0.2k-26.el7_9.tuxcare.els10.x86_64.rpm 676b55c95c148af9f311f33d7d2ec1e6591f1e4e9bdbd2ada96a3e2706bda216 openssl-static-1.0.2k-26.el7_9.tuxcare.els10.i686.rpm 86c8c064adbfede6964cf8ac8c388eeb7eb13c2793171e52a3609f2ef715b092 openssl-static-1.0.2k-26.el7_9.tuxcare.els10.x86_64.rpm 43160cfee6a308775aa54b25fe69820245b68fc1c71d639fa012d3b6f7158861 CLSA-2026:1773479849 TuxCare License Agreement 0 - CVE-2025-12084: fix quadratic algorithm when building nested XML elements with appendChild Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-12084: fix quadratic algorithm when building nested XML elements with appendChild

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64.rpm b8127b5c617531f045a8ee0f4ba781fb520af3398586c794890f6646761fdd19 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64.rpm 4abc0790f1790e267fef0210ebb1ddd78eb7c913b3566927aa9073e5cdb72a4c python-devel-2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64.rpm 727c1fc5af20f80f89a596e90e71f615be7c3153221d4dd320f7684cfb6f800a python-libs-2.7.5-94.0.1.el7_9.tuxcare.els4.i686.rpm 8b70a84e62a0d5ec5da1b92a7ca7573217c0a2e56fcbe163633b1836c19d23c2 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64.rpm f9cc68d312daf4f6f192b266f63fbf4640ac8bfc83c0a9c0fde7738faa273c72 python-test-2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64.rpm 521b827e0bd571f111c75b2547e8c013ceee747cec21efecd27d181ba8d5bbdc python-tools-2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64.rpm 54a59c7c4497ccca1afdca4d8236a3785507c501d99035235a7ddaf572aa9b4f tkinter-2.7.5-94.0.1.el7_9.tuxcare.els4.x86_64.rpm b476e2353df8a164c63cdbd650089fe1786c43a55c33803a7c57159e5ae4151e CLSA-2026:1778166693 TuxCare License Agreement 0 - Merge of the Amazon Linux 2 cups package (cups-1.6.3-51.amzn2.0.9) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Merge of the Amazon Linux 2 cups package (cups-1.6.3-51.amzn2.0.9)

0 tuxcare-rhel7-els cups-1.6.3-52.el7_9.tuxcare.els5.x86_64.rpm 584c0cd600c15b1a3befe8d44f508a3108da3714b9c7db2b4c2b9487a35bc633 cups-client-1.6.3-52.el7_9.tuxcare.els5.x86_64.rpm 765230a82744979950a7a80be0c322831900d80d9b00b938decc5a25fbe68cb4 cups-devel-1.6.3-52.el7_9.tuxcare.els5.i686.rpm 086fa457da70da9e951f9d69b5a816d7c16d64c6373fc4b2de3d6bf7d3617a74 cups-devel-1.6.3-52.el7_9.tuxcare.els5.x86_64.rpm 767a73d800443a4c4843b953b7a8d6bd579082b2478af216b59aa935f7a47e22 cups-filesystem-1.6.3-52.el7_9.tuxcare.els5.noarch.rpm ba306e7c64163c7b02492cf7f49455f6850ffd3261a380c19903f71bfc86cc44 cups-ipptool-1.6.3-52.el7_9.tuxcare.els5.x86_64.rpm 871577fa399debc5c2fb89106bdb7d3cd5ea9c3e48b64e699b1500d50fac55f3 cups-libs-1.6.3-52.el7_9.tuxcare.els5.i686.rpm d9062c25653c27f713323693eef9c68ad964c51420a770710703766179ad88ca cups-libs-1.6.3-52.el7_9.tuxcare.els5.x86_64.rpm 20f6f9e243a6efcdfb137f828891f9168dcf80e4c6c2e222ba162ec57e14541f cups-lpd-1.6.3-52.el7_9.tuxcare.els5.x86_64.rpm ffad474919b8d68c8401fd9a68acfaacb87c13199d9a0a42b6622ddcc2719789 CLSA-2026:1778238067 TuxCare License Agreement 0 - CVE-2026-27857: fix excessive memory usage from many '(' in IMAP commands Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27857: fix excessive memory usage from many '(' in IMAP commands

0 tuxcare-rhel7-els dovecot-2.2.36-8.el7.tuxcare.els1.i686.rpm 8b11ed804165d350ba5e7811a0d7451526862ca30db54469bfbdc85544eda7e0 dovecot-2.2.36-8.el7.tuxcare.els1.x86_64.rpm d696bf3227ad49f9e84ab8365943a8eafe87f83bc4c66f36cf2abd6ceede05ee dovecot-devel-2.2.36-8.el7.tuxcare.els1.i686.rpm d902bde15c07bb6d72c6aebf4ad21d47be2c8318fc5a82df40017fac917f2948 dovecot-devel-2.2.36-8.el7.tuxcare.els1.x86_64.rpm a9deae3e4c3e939ce000cdac32f879bf3ee48dc723e91c955d05a706d4f00cbc dovecot-mysql-2.2.36-8.el7.tuxcare.els1.x86_64.rpm 7051212a8bd0ed6dbf9e39c41ff3431558b98ae644c570b16d0b3f5e801080d5 dovecot-pgsql-2.2.36-8.el7.tuxcare.els1.x86_64.rpm 2feaec90ce1d7d4b4de158833958f05b4a063ce2ee7b29c6275dc1e91d36a21f dovecot-pigeonhole-2.2.36-8.el7.tuxcare.els1.x86_64.rpm 4f94196177f5bcabdb1187659b7a1981075e0bb9c7715b4a8fbf3a64004a10c8 CLSA-2026:1778239503 TuxCare License Agreement 0 - CVE-2026-33845: fix DTLS handshake parsing integer underflow leading to OOB read Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33845: fix DTLS handshake parsing integer underflow leading to OOB read

0 tuxcare-rhel7-els gnutls-3.3.29-9.el7_6.tuxcare.els3.i686.rpm 3f5c6916e525b5d888baede77de8e412ed8306318083b641c61f737f0d45583c gnutls-3.3.29-9.el7_6.tuxcare.els3.x86_64.rpm 953d1a55cd8bebdb277792da7d79acb5e4c4c87028623526faa97d7178219805 gnutls-c++-3.3.29-9.el7_6.tuxcare.els3.i686.rpm efd29634372a9ddb5d4cfe757c6bac2e7f787894dd85e87de0052a570f500771 gnutls-c++-3.3.29-9.el7_6.tuxcare.els3.x86_64.rpm e94534163c5ac9d18f21dffc46d58e784a5be6ea09049d593c1f22517cd814f6 gnutls-dane-3.3.29-9.el7_6.tuxcare.els3.i686.rpm aa1b714f207ccb0578558c4e8a7ed1ef05d35906a0849e3c23a2ea605becc07a gnutls-dane-3.3.29-9.el7_6.tuxcare.els3.x86_64.rpm 309a7867ab0c02ac6e3d8d24c48f4997f4a5fa7c5a990032f827ce83efbf20b5 gnutls-devel-3.3.29-9.el7_6.tuxcare.els3.i686.rpm c0f1e1f1f7996da828f6fe05b9a55e72c0b6297e79688e835cb7f0ef9c2e60c4 gnutls-devel-3.3.29-9.el7_6.tuxcare.els3.x86_64.rpm e4546ee5f0fbc075bbe3b9756dd700847c161a0ab8cfc700ed0e50f99f5a0d32 gnutls-utils-3.3.29-9.el7_6.tuxcare.els3.x86_64.rpm b07cca185d746a45c95094b76a955a5ed97042b2d1b9a6df35a6aeaad32f456e CLSA-2026:1778254552 TuxCare License Agreement 0 - CVE-2026-24072: mod_rewrite/mod_setenvif: use AP_EXPR_FLAG_RESTRICTED in htaccess to prevent reading server-side files via ap_expr from .htaccess - CVE-2026-29169: mod_dav_lock: NULL pointer dereference in dav_generic_refresh_locks (use dp_scan instead of dp) - CVE-2026-33006: mod_auth_digest: timing attack — use constant-time compare for nonce/digest verification - CVE-2026-33007: mod_authn_socache: NULL pointer dereference when r->uri has no '/' in directory context - CVE-2026-33523: scan outgoing status line for newlines and control characters to prevent HTTP response splitting - CVE-2026-33857: mod_proxy_ajp: off-by-one OOB reads in ajp_msg_get/peek length checks - CVE-2026-34032: mod_proxy_ajp: improper null termination and OOB read in ajp_msg_get_string - CVE-2026-34059: mod_proxy_ajp: heap over-read in ajp_parse_data when message is too small Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-24072: mod_rewrite/mod_setenvif: use AP_EXPR_FLAG_RESTRICTED in htaccess to prevent reading server-side files via ap_expr from .htaccess - CVE-2026-29169: mod_dav_lock: NULL pointer dereference in dav_generic_refresh_locks (use dp_scan instead of dp) - CVE-2026-33006: mod_auth_digest: timing attack — use constant-time compare for nonce/digest verification - CVE-2026-33007: mod_authn_socache: NULL pointer dereference when r->uri has no '/' in directory context - CVE-2026-33523: scan outgoing status line for newlines and control characters to prevent HTTP response splitting - CVE-2026-33857: mod_proxy_ajp: off-by-one OOB reads in ajp_msg_get/peek length checks - CVE-2026-34032: mod_proxy_ajp: improper null termination and OOB read in ajp_msg_get_string - CVE-2026-34059: mod_proxy_ajp: heap over-read in ajp_parse_data when message is too small

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els10.x86_64.rpm d67a306f655c08b4b182fc921d33d671705b4f048f273190d838f6f6428a5364 httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els10.x86_64.rpm 5cc3131f8b0959b4025d6367eeb7cf654225084360ed855ed6fc250817ceb415 httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els10.noarch.rpm df5f66a57ecc89b3fdcd0f6a81c85bae3e60c0079d4dd38d3036e34b5870f5b5 httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els10.x86_64.rpm b52a098996ba9b0386e0b622ff2ad371def9dcf8f228fa5a79de446d254e64a4 mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els10.x86_64.rpm 7b8ac104344e5aa629f06ebdd78a040b6744b90f6564d0ffd9ea2a3a109bb289 mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els10.x86_64.rpm 9bc485ad71caee685ba15853d09fe50c42b43b05b18ccafaecff3dd10a39a5c1 mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els10.x86_64.rpm c90d72cf4b99758ea39977bf1e10e8416e4afd3944f55531841fe42b3828187c mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els10.x86_64.rpm 203938a42dbe33085e23537fc1c952d72d000e1cd55be37b74100fe18f82f2aa CLSA-2026:1778491896 TuxCare License Agreement 0 - CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode by deferring xmlFree(URI) until after the error path has consumed the value Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-49043: fix use-after-free in xmlXIncludeAddNode by deferring xmlFree(URI) until after the error path has consumed the value

0 tuxcare-rhel7-els libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els3.i686.rpm e5dd675b48877f48fcb62ad92f661b4df5c595e880fb5c3e030a23bcff324da8 libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els3.x86_64.rpm 7054e043a5d2f71b640159cc1d8c755996a11655fa94ce02c464017a48df0b4f libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els3.i686.rpm fb453788da5fb2863c5b2ed5e2dcc38eb3e0a5d7fa6096b4c21c3a2adc1b31c5 libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els3.x86_64.rpm 0ee959cf34c9e3997fe880f80487f08b528e7a4d55a0d9244442b0a765ce4e38 libxml2-python-2.9.1-6.0.11.el7_9.6.tuxcare.els3.x86_64.rpm 4eef2e8169ff5ec3f1aa9b3b49259430de37656de176f1cedc4931c84f459dc6 libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els3.i686.rpm 4d0bb60a5046db887a84edf527be846ced64195f3ed1b28a559474095670fce5 libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els3.x86_64.rpm 77ae06dde9b1dda0bd19d13121f8e7a161a98a7013206927e73e2c9cd4f42f6a CLSA-2026:1778535928 TuxCare License Agreement 0 - CVE-2021-3733: fix ReDoS in urllib2 AbstractBasicAuthHandler regex; the legacy '(?:.*,)*' prefix is replaced with the upstream-3.x form '(?:^|,)' and the scheme charset excludes ',' to prevent quadratic backtracking on crafted WWW-Authenticate headers - CVE-2021-23336: stop accepting ';' as a default query-string separator in urlparse.parse_qs/parse_qsl and cgi.parse* / FieldStorage; only '&' is used by default, with an opt-in 'separator' kwarg for callers that need legacy behavior - Additional tests for CVE-2021-23336: drop obsolete legacy-';' entries from Lib/test/test_cgi.py parse_strict_test_cases Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3733: fix ReDoS in urllib2 AbstractBasicAuthHandler regex; the legacy '(?:.*,)*' prefix is replaced with the upstream-3.x form '(?:^|,)' and the scheme charset excludes ',' to prevent quadratic backtracking on crafted WWW-Authenticate headers - CVE-2021-23336: stop accepting ';' as a default query-string separator in urlparse.parse_qs/parse_qsl and cgi.parse* / FieldStorage; only '&' is used by default, with an opt-in 'separator' kwarg for callers that need legacy behavior - Additional tests for CVE-2021-23336: drop obsolete legacy-';' entries from Lib/test/test_cgi.py parse_strict_test_cases

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els8.x86_64.rpm 24d0b66c5bfa495cddaa58be87dc77b4a0b92e5e5bdb54de80122c4985fb7152 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els8.x86_64.rpm 4c5d350f84ed33ad68628a59550717b75ba34628c2ebde4c7605c6d9b343010d python-devel-2.7.5-94.0.1.el7_9.tuxcare.els8.x86_64.rpm 9744b2230bd232bf3132543dab0fac067dffc998e485e9764293e8a7252187a6 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els8.i686.rpm 06ebec3b16641bb015734310a0ff372931af26c78d822bc4162624761d599d63 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els8.x86_64.rpm d0c5210c988c6ef757dfe1ee7b2e8e502e44e32887cc319e63e6ad4c70e89ba8 python-test-2.7.5-94.0.1.el7_9.tuxcare.els8.x86_64.rpm 9c00647faaea9f7291bbc5d941a6436283d2fe588cada091194abdcf99fef450 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els8.x86_64.rpm 63a8029add26e0de629486d1781e3ec6ae24a548db7d04fcdcd2f2b3ff6c2251 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els8.x86_64.rpm dbc18bffc444528c193fd6e336c7255d60aaff0186a5e39380736b9fd467ea56 CLSA-2026:1778759582 TuxCare License Agreement 0 - fix: "vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}" - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2026-23397} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak {CVE-2026-23108} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag {CVE-2026-23105} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021} - ipv4: ip_gre: make ipgre_header() robust {CVE-2026-23011} - libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - via_wdt: fix critical boot hang due to unnamed resource allocation {CVE-2025-71114} - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU {CVE-2025-71111} - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} - Revert "fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322}" - driver core: fix potential null-ptr-deref in device_add() {CVE-2023-54321} - btrfs: output extra debug info if we failed to find an inline backref {CVE-2023-53672} - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb {CVE-2023-53548} - udf: Do not bother merging very long extents {CVE-2023-53506} - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release(CVE-2023-53484) - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} - ext4: remove a BUG_ON in ext4_mb_release_group_pa() {CVE-2023-53450} - md/raid10: fix wrong setting of max_corr_read_errors {CVE-2023-53313} - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() {CVE-2022-50521} - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} - ntb_netdev: Use dev_kfree_skb_any() in interrupt context {CVE-2022-50476} - i2c: ismt: use correct length when copy buffer {CVE-2022-50394} - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() {CVE-2022-50349} - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315} - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network {CVE-2022-49865} - KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943} - kvm: avoid speculation-based attacks from out-of-range memslot accesses {CVE-2021-47277} - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() {CVE-2021-47219} - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() {CVE-2021-47191} - USB: core: Add routines for endpoint checks in old drivers - xen: sync some headers with xen tree - squashfs: fix memory leak in squashfs_fill_super {CVE-2025-38415} - pptp: fix pptp_xmit() error path {CVE-2025-38574} - Revert "net/sched: sch_hfsc: Ensure inner classes have fsc curve" {CVE-2023-4623} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix: "vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}" - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2026-23397} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak {CVE-2026-23108} - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag {CVE-2026-23105} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - net: usb: pegasus: fix memory leak in update_eth_regs_async() {CVE-2026-23021} - ipv4: ip_gre: make ipgre_header() robust {CVE-2026-23011} - libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - via_wdt: fix critical boot hang due to unnamed resource allocation {CVE-2025-71114} - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU {CVE-2025-71111} - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} - Revert "fbdev: bitblit: bound-check glyph index in bit_putcs* {CVE-2025-40322}" - driver core: fix potential null-ptr-deref in device_add() {CVE-2023-54321} - btrfs: output extra debug info if we failed to find an inline backref {CVE-2023-53672} - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb {CVE-2023-53548} - udf: Do not bother merging very long extents {CVE-2023-53506} - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release(CVE-2023-53484) - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} - ext4: remove a BUG_ON in ext4_mb_release_group_pa() {CVE-2023-53450} - md/raid10: fix wrong setting of max_corr_read_errors {CVE-2023-53313} - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() {CVE-2022-50521} - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} - ntb_netdev: Use dev_kfree_skb_any() in interrupt context {CVE-2022-50476} - i2c: ismt: use correct length when copy buffer {CVE-2022-50394} - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() {CVE-2022-50349} - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315} - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network {CVE-2022-49865} - KVM: x86/mmu: make apf token non-zero to fix bug {CVE-2022-48943} - kvm: avoid speculation-based attacks from out-of-range memslot accesses {CVE-2021-47277} - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() {CVE-2021-47219} - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() {CVE-2021-47191} - USB: core: Add routines for endpoint checks in old drivers - xen: sync some headers with xen tree - squashfs: fix memory leak in squashfs_fill_super {CVE-2025-38415} - pptp: fix pptp_xmit() error path {CVE-2025-38574} - Revert "net/sched: sch_hfsc: Ensure inner classes have fsc curve" {CVE-2023-4623}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm b300bca45552dd43bf2e69bbc1f3974af60b58eebd8d81f0443edf44ba02d068 kernel-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm 88cdcb7e217d63aa418d3d740a5c421a5f1a12bcaadbc97b9805847ed733d19c kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm 524fbbf2f8dc9afaa530384a358b0912aeb96040fc4d02ed952a8401baf1a24a kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm 4825840190ce121e6fcd434ccbc444a2dfe98e482adcf4baa273f63904fc9573 kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm bd502947b12ac90fc7604e1d23bf25dbddc7021ed60a502546dee87c338dfec0 kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm af52370a230a0243997037222b2698bc1f324ad5fbb19cb594946d26c541ea75 kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm 2768dbbcc384ce8e060a61244919d7fed41840a947c8df2de12df1d29f0922bf kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm 66be2ac96a5e7a21f75e34b3fcc7f5c414feb4493a6bd4448be7977ddcd8c5f0 kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm e545778e3c848babb9dbeb0dc25469c02a165816292f77f8a5a8717fcca000bf perf-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm 3c14c27719fc853c0f3495027aab1623ca73ef97a89d63834de0c17836251e80 python-perf-3.10.0-1160.144.1.el7.tuxcare.els5.x86_64.rpm 31084d0b3444f9e03f21c74daba1e98c0cac1c0cc70866c789da9bff90626c80 CLSA-2026:1778787308 TuxCare License Agreement 0 - CVE-2023-31486: HTTP::Tiny verifies TLS certificates by default Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-31486: HTTP::Tiny verifies TLS certificates by default

0 tuxcare-rhel7-els perl-5.16.3-299.el7_9.tuxcare.els2.x86_64.rpm 0ace8960eea42657fa92a4cc1d217664622377082e6a9c571761fb02f595096a perl-CPAN-1.9800-299.el7_9.tuxcare.els2.noarch.rpm 19199e885b5a323a7beff9b61a22dc76dc26f5279c90b7a1e9c43850459eaec0 perl-ExtUtils-CBuilder-0.28.2.6-299.el7_9.tuxcare.els2.noarch.rpm fba042eefabd5aa70812297345f545ae25909e3704bd15e2ce2408c92decd7e1 perl-ExtUtils-Embed-1.30-299.el7_9.tuxcare.els2.noarch.rpm 4554af1cad74fda0dba8c6a30a4e6a718e53f85661630e1f535cb6c09a758f7a perl-ExtUtils-Install-1.58-299.el7_9.tuxcare.els2.noarch.rpm be3e1e5dd06e3729935ad8914f9b1f897d49056aaf9c33a93c27eceda73772ab perl-IO-Zlib-1.10-299.el7_9.tuxcare.els2.noarch.rpm 51d7445a486101fd0b3fba4c1151c88c612fa13e8b81d8f13ef443f4224f1668 perl-Locale-Maketext-Simple-0.21-299.el7_9.tuxcare.els2.noarch.rpm 2e221c38ad79d521e7d6b80c1337b8ee183de32f7a147dc8ff2b42f1e046ec57 perl-Module-CoreList-2.76.02-299.el7_9.tuxcare.els2.noarch.rpm cf6f6f278d0007a01fd2423a622bad21a74cf58b5d9ea8eafef868ba29b2c010 perl-Module-Loaded-0.08-299.el7_9.tuxcare.els2.noarch.rpm 8608248ca5a73022c6e0320815c67e5ffdbf9103afce7e218bc447d38f2fef3f perl-Object-Accessor-0.42-299.el7_9.tuxcare.els2.noarch.rpm 5b5456c53f0cb1ae3b0e09492250db3cff01c0c6755bee0cc2dacac2f8599b5b perl-Package-Constants-0.02-299.el7_9.tuxcare.els2.noarch.rpm bac8ec029db26e89c508ee521a9a64916aeff2ffef80a2efa2e83d16c0804cff perl-Pod-Escapes-1.04-299.el7_9.tuxcare.els2.noarch.rpm f617407e94ba34f4f303c71d1885e3d2693d66f971d76ba80e7efd6ac1f5ea57 perl-Time-Piece-1.20.1-299.el7_9.tuxcare.els2.x86_64.rpm 55d8191aa78f4eb90ffcca987bdbc9306506453fd0f359670294bede3a00e888 perl-core-5.16.3-299.el7_9.tuxcare.els2.x86_64.rpm ac36fac7cfc03715ae3c39ddee6eb4fb17abf9d8598bec72ed5da08a069b0632 perl-devel-5.16.3-299.el7_9.tuxcare.els2.i686.rpm 623922d29eb63c9d25a6c3fc7de59e957baf8c6a842271fc96d61bd038be24c6 perl-devel-5.16.3-299.el7_9.tuxcare.els2.x86_64.rpm 0e0cb1cf1df62e4943baebc74b4b392db9b245d4a5335f143ecfa91ec50d070a perl-libs-5.16.3-299.el7_9.tuxcare.els2.i686.rpm 862a903d317e5b78b74a287f270d431d35d86dd36f8ee3f3fe4527ed6d8bb172 perl-libs-5.16.3-299.el7_9.tuxcare.els2.x86_64.rpm e1e3de2edb8d2e2db0619e220af33d3e6b217d3d86c32ffa53fd3e43a82f4ce5 perl-macros-5.16.3-299.el7_9.tuxcare.els2.x86_64.rpm 8e6b9a7c37d3981c25cfda13c00719b96f348faa07db28b0db8a82ccd4fb8c14 perl-tests-5.16.3-299.el7_9.tuxcare.els2.x86_64.rpm e1b06895ba978f5f001175e5ea82c2d18f55a4e74caaadf79daea172d09ab278 CLSA-2026:1778789558 TuxCare License Agreement 0 - CVE-2022-36760: mod_proxy_ajp: fix possible request smuggling via invalid Transfer-Encoding Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-36760: mod_proxy_ajp: fix possible request smuggling via invalid Transfer-Encoding

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els9.x86_64.rpm b8e05f22408ebe28502ed5cab9a908e74c04b4c380cfe61b8060d9427de21a69 httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els9.x86_64.rpm a8bca320c65b2448c37cf0c61b544d289c3e235030a60aab2cfab43975d5737a httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els9.noarch.rpm 8198f6e5cd6bf5e857514b8bce3d829459578baa0b5ded70e667b17ccc215d1e httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els9.x86_64.rpm 33bb019ac1ed089873522ed22f1ea941dc2e0ed54f8f643b114df38cb1f9ec03 mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els9.x86_64.rpm 1532dcff79ff0fc11d367df3052bcaff3b939b0c31d2e8cc33347138c2ca210b mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els9.x86_64.rpm 46c7a7d6a7e826635095324e894f934af59d072566ea89584e9d6fa729167eb9 mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els9.x86_64.rpm fe6e768cf5326c0b8c24f6535a44d9a1f58a8759cc48f4c29f38e765d349e78e mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els9.x86_64.rpm 0e0b01df31d3f42f386fa40f53c9610fec763e233194ed25b9594995d999f385 CLSA-2026:1778834899 TuxCare License Agreement 0 - CVE-2023-51764: fix SMTP smuggling (backport of 2.11.11-smuggling-patch) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-51764: fix SMTP smuggling (backport of 2.11.11-smuggling-patch)

0 tuxcare-rhel7-els postfix-2.10.1-9.el7.tuxcare.els1.x86_64.rpm fe9b2d443d21cd1e28427df5fd5d3b1a1eba5335de1b3c60eaa2c75c72e72812 postfix-perl-scripts-2.10.1-9.el7.tuxcare.els1.x86_64.rpm 0bdeb29f33db259229e39744f71bfc4412a99204f37b65256b03b17d62dd64b9 postfix-sysvinit-2.10.1-9.el7.tuxcare.els1.noarch.rpm e1800c15ccc63b9768a38eb54ec538e254ef342d74b739d2eaf7106c82746d6c CLSA-2026:1779129626 TuxCare License Agreement 0 - CVE-2026-28780: mod_proxy_ajp: heap-based buffer overflow in ajp_msg_check_header() — message size check did not subtract AJP_HEADER_LEN, letting a crafted AJP reply write 4 bytes past the end of the heap buffer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28780: mod_proxy_ajp: heap-based buffer overflow in ajp_msg_check_header() — message size check did not subtract AJP_HEADER_LEN, letting a crafted AJP reply write 4 bytes past the end of the heap buffer

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els11.x86_64.rpm 5011c861c5b2503db1b9bdf11df5258e947268b5ef9eec4db4ed972a9f528107 httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els11.x86_64.rpm 6bea828ef70d184bca9721fea3f6e6063c2b3a8d5ab53a479608b9e21c33cf70 httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els11.noarch.rpm 3bbeec845f1c9677a0ccb5dd9eb3d181558993b219317654c9862ac755b43dab httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els11.x86_64.rpm 52336078c91f25fe8fb98aefcaddf9d3df945e72d0ca51c5c79d2f1cb819f18b mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els11.x86_64.rpm 96f58933a51c6986521e3e46ff05e89880c01407b6b34dc43843f74f1d66cf62 mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els11.x86_64.rpm 0fbade52ba4a9f18e52e240b47d892358426e348a24c89f77af5f799c59dcce1 mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els11.x86_64.rpm 60c162f3b5351b8c408a0f81d1e3a2f931eb5987f26c939e8745c13686b82bfc mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els11.x86_64.rpm 55132940ebc42a8749d7e5c2b0579b3cde7d684963f831afefed130ef43a4277 CLSA-2026:1779107085 TuxCare License Agreement 0 - CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3833: fix nameConstraints dNSName/rfc822Name case-sensitive memcmp bypass

0 tuxcare-rhel7-els gnutls-3.3.29-9.el7_6.tuxcare.els4.i686.rpm a3cc38eeda44991c7190c3925975db4384a9da08534680991bb0fa31a1b0e223 gnutls-3.3.29-9.el7_6.tuxcare.els4.x86_64.rpm 8857248b82c79f98b69703d54bf385e765a70235b5df6827939d21ff0177a239 gnutls-c++-3.3.29-9.el7_6.tuxcare.els4.i686.rpm afb57ca845d72ca1699d73fb69eee0a965d844f1959f77f3a099fb90e2cbd3e5 gnutls-c++-3.3.29-9.el7_6.tuxcare.els4.x86_64.rpm 3598c57831ac8d91f1029838598524d68218fc548dfe2543b0dd74e73dca4212 gnutls-dane-3.3.29-9.el7_6.tuxcare.els4.i686.rpm 0b28d512c96c3582c96c091b916b1acfee1afa03c3bc71a5746229628ef4f3f3 gnutls-dane-3.3.29-9.el7_6.tuxcare.els4.x86_64.rpm b84d1b4f1283381562a9683a5a3ae22327c5e988465e058e800d77bcbef3037c gnutls-devel-3.3.29-9.el7_6.tuxcare.els4.i686.rpm 96383515ebca3c97f6a1cb0fd74e13a31dc9b721a1f2027401ddca3ad1158dbd gnutls-devel-3.3.29-9.el7_6.tuxcare.els4.x86_64.rpm 477f4d91bbcde4fe238ec57dce202261c97575d94787fbabd81f25b68602ca12 gnutls-utils-3.3.29-9.el7_6.tuxcare.els4.x86_64.rpm dd735eb8d958cbce542a7ba7a90ba21d7c1b7f740dc94d87d86790442fe631d9 CLSA-2026:1779182686 TuxCare License Agreement 0 - CVE-2026-43964: fix buffer over-read on enhanced status code without trailing text Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43964: fix buffer over-read on enhanced status code without trailing text

0 tuxcare-rhel7-els postfix-2.10.1-9.el7.tuxcare.els2.x86_64.rpm 985336ddd959a5869350cdb6c84439d21a219beaf346c478b7c4dcdce94befcc postfix-perl-scripts-2.10.1-9.el7.tuxcare.els2.x86_64.rpm 0705ae228b6dd594546e1f37b0c9545835775947f58135b0693c2a0f684cbbf8 postfix-sysvinit-2.10.1-9.el7.tuxcare.els2.noarch.rpm e5a131827a93229fe5ead9ad2d3fc19974b6a66adab198c80c3524c996dc91cc CLSA-2026:1779204267 TuxCare License Agreement 0 - CVE-2026-5201: fix heap buffer overflow due to unvalidated JPEG color component count in gdk_pixbuf__jpeg_image_load() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5201: fix heap buffer overflow due to unvalidated JPEG color component count in gdk_pixbuf__jpeg_image_load()

0 tuxcare-rhel7-els gdk-pixbuf2-2.36.12-3.el7.tuxcare.els2.i686.rpm b87a1f4e8f7e1a209d52d56df7d9ce0db2e7bc96078f390bdbaa3c758948a92d gdk-pixbuf2-2.36.12-3.el7.tuxcare.els2.x86_64.rpm 805678a31641d6277efa85a39aeb63117459fef7bdcebe0904714eb92e7bff49 gdk-pixbuf2-devel-2.36.12-3.el7.tuxcare.els2.i686.rpm 597686a35757b201277fa165143111a6d3560011b9272c92aca6d0f70fd7d071 gdk-pixbuf2-devel-2.36.12-3.el7.tuxcare.els2.x86_64.rpm 7e8a72428064036b8516e35130f67d8863965621074bd7c935dd9a11902cfdd0 gdk-pixbuf2-tests-2.36.12-3.el7.tuxcare.els2.x86_64.rpm 0442a6f09727e87c77d597b64ca69bdd6eb9e18b79f44dcc38acbb7aa3795ba6 CLSA-2026:1779212122 TuxCare License Agreement 0 - CVE-2022-2806: ovirt plugin: filter out all password keys in answer files Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-2806: ovirt plugin: filter out all password keys in answer files

0 tuxcare-rhel7-els sos-3.9-5.el7_9.12.tuxcare.els1.noarch.rpm f2eda77a09f2dbb9b6e1261c08214e5cbdc4a0fefd83a5e3cb75ea1d94b39492 CLSA-2026:1779219098 TuxCare License Agreement 0 - CVE-2023-4692: fix OOB write when parsing NTFS $ATTRIBUTE_LIST entries Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4692: fix OOB write when parsing NTFS $ATTRIBUTE_LIST entries

0 tuxcare-rhel7-els grub2-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm 0577378383e98746a67880e25db5a46a5daba99fc9ed44975ecee6f683c71bad grub2-common-2.02-0.87.el7_9.14.tuxcare.els5.noarch.rpm f531ff652289d83f62b4d210b98b6c82081b177d488cbe175e2d04cf3937e98f grub2-efi-ia32-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm ca7c5e9f67ec2c5033064372ab1ea3da91bc1903698109f65fcff5625b1b7003 grub2-efi-ia32-cdboot-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm e14458ee88350b830742588e332adafbd112fdc49568bb1bb7d8421baca6f391 grub2-efi-ia32-modules-2.02-0.87.el7_9.14.tuxcare.els5.noarch.rpm ec414447385789ac4a47b0276806d4955100923b04d4dc6718ff5548bb5dad7c grub2-efi-x64-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm c96c44f48c9aefc0735b8cb60d7194121e436481876e15a656203aa026f76429 grub2-efi-x64-cdboot-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm a6140b2b7432fecc60e8042dbabdd90e809200c18443c49ab568228f16ce5de3 grub2-efi-x64-modules-2.02-0.87.el7_9.14.tuxcare.els5.noarch.rpm 3b387bfbe239ef5308334a707f49aa4793ac4b5f0fd63d0b82363ff8cd745502 grub2-pc-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm 44b0f1b333049e0824e89602e6b33b46ce4650fd05f0b5ad3421915763217a9b grub2-pc-modules-2.02-0.87.el7_9.14.tuxcare.els5.noarch.rpm cb097d8d359ef74aa05055932c639a6e4ec017f9b85138b44888739b234c8fb4 grub2-tools-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm 12d4de5899be95d78feaabec06b63094fa3eae03872081e55789603c5365d062 grub2-tools-extra-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm 6dad158feefc02510f8bd0be0f67f1f313fd537a1fa14bcbf24bdc4f9344ba8a grub2-tools-minimal-2.02-0.87.el7_9.14.tuxcare.els5.x86_64.rpm 8d7b6698509ca1e5fcd9c7b359a853120894623b45638e2e10373a0cb589f78e CLSA-2026:1779224622 TuxCare License Agreement 0 - CVE-2023-4091: fix open_file() access check that allowed a client with read-only share access to truncate files via SMB2 OVERWRITE; the access check now uses open_access_mask instead of the requested access_mask Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4091: fix open_file() access check that allowed a client with read-only share access to truncate files via SMB2 OVERWRITE; the access check now uses open_access_mask instead of the requested access_mask

0 tuxcare-rhel7-els ctdb-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 53175251470ab3e12c58817213723f0ca229572df66ff886fe3be62efdbac41a ctdb-tests-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm e6b2220185f9572d37f5bfe296d119e1f84eab10610658cb2f1e4adbfa7bcf52 libsmbclient-4.10.16-25.el7_9.tuxcare.els5.i686.rpm 079361d2f05bd6dc1904290334622b2fc0be62d032bd561c92dca1256488a69d libsmbclient-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 38080c1bfbcadf2cc7a91bc5ada82a991351026bd967aaf7498594b319d65047 libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els5.i686.rpm 92db846a6ca17b536c599f9a387e2d2acde6e92548d6762f1e08f9d5dcf6452b libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 604436ce286e9e098c21cec4f387c8ac36cb3dbbd90f49a92f76657df09533ba libwbclient-4.10.16-25.el7_9.tuxcare.els5.i686.rpm 7cf12ac4435c8794c2e3f3a77dabedcdb3f55f654524fad96eee550ddba7d81d libwbclient-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 1a1c35b87f43f3e4f783c3f823f1b223187127d80885de3690e17b5e4e4b1e34 libwbclient-devel-4.10.16-25.el7_9.tuxcare.els5.i686.rpm cd027f73b93edac0a08c4d2d3f5ab3f5f45a0d93f94b3fd4d65c4726609655dd libwbclient-devel-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm a4fd11a7c7f733276da2d626c32028102c061c23a82d19fb9d48c55086be017f samba-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 7649da478cda52fdb47208a04d23614cbb0eb6c2855a1ba81f26ca5c86507fde samba-client-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 1179b98f0ee14d13c9d2f0ff0d0ea8d06bf9219c09b88e3bd36d8f40d106cd41 samba-client-libs-4.10.16-25.el7_9.tuxcare.els5.i686.rpm 3e8abfb286c0069ca09bea5fd91151bb006e056e48aff90b96c0af75340b65b1 samba-client-libs-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 218652e5e597405223f809adfe322b251c3d64e603fa73b8cd28b2d14563d31e samba-common-4.10.16-25.el7_9.tuxcare.els5.noarch.rpm 134df8563cd488027687432a07ef7034af7faa2b0a21a13165f6e554c1018e35 samba-common-libs-4.10.16-25.el7_9.tuxcare.els5.i686.rpm bb9672a3f4087ce4b05dec05f7b35f7764c441cc1ca0d8e61544bdbc485f0ac8 samba-common-libs-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm a945677147303b2d9b325eab61eceb78c71dcc6a34ecf12e02f09bb4facb6511 samba-common-tools-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 681a39483ebe4944fc66c73451ca0ccd8e31e5056f176cb6fd688c88f8c5a187 samba-dc-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 702fa0cce365fcd8bfb75064c4ed7d7d69976a705160dd3521967a50a7bd951d samba-dc-libs-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 3ab973cf064a16bec64ee05f2c0ae2b4e6e0fcb7fd1339cad51bfabf989750b1 samba-devel-4.10.16-25.el7_9.tuxcare.els5.i686.rpm e91976d502964e172f65168f41169b80b0d59a3f836f5a24970f8ca6816172f6 samba-devel-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 6d58aeec214bd71c5466f4be6b776b9010c9c62599aa71fd974ab6b49069fe30 samba-krb5-printing-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 0c1d9da33a69a1292520740272dcbeac6f73569dbdbc97642f73d6284723e9c6 samba-libs-4.10.16-25.el7_9.tuxcare.els5.i686.rpm 38db2bae3738d5a952134fba74fef50d970d1d9c90f32d824a0393b1ae1c4d0b samba-libs-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 40974521344c8fcd81177880b8597506688a6942c099be9af71f05a408a9e8a1 samba-pidl-4.10.16-25.el7_9.tuxcare.els5.noarch.rpm 4c2cf015d8fef2c91e9eaba19f9e6ffcdd40cd46132ac2f844b8854d04dc07bf samba-python-4.10.16-25.el7_9.tuxcare.els5.i686.rpm 5b6dc07c37ebef5315bf68b3b417830d3e2055ee638820cff9c154f9bef10ab2 samba-python-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 57eaea86399aaf777cf5e0c943e9b4474485e077e7d0a22efaf783e61c331224 samba-python-test-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm cb5dd1aed9c139c7355c5356f9a105ab441f389c321a634bbc3c8a4a828e60ba samba-test-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm da6a8f942d178b09afd07428b784a6b77a87bbd9c8bfa317f4358e310d7b6bd2 samba-test-libs-4.10.16-25.el7_9.tuxcare.els5.i686.rpm 2835a3583e3b1bca57bcad084e4ea0bbc3321f24f90c1f1d7792dd966c0f71e3 samba-test-libs-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 5d90a017c895b996d89983d7c21f19adefa68c711619c0199bfd087f4031d8ec samba-vfs-glusterfs-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 49621372a09491c8aa7605a93f094ac455aa16bd98c2df61fe401d68d679581c samba-winbind-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 224b0d3a3ee6df43913bd001e282cb174e5a1f04fd54a2c1e8a86001bd5d60f3 samba-winbind-clients-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 37f7b62eba20c9c72ba269952ea47c4f9d39527bb4fc07a611af221806524217 samba-winbind-krb5-locator-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 924360bc9a44f29224f69797533a95d7750697a8336e0d4e1f73c9f2b769e523 samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els5.i686.rpm 0b42e3f8fde1488e9482b5360da51ce68d11832afeeeac98117c217fbf822ae5 samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els5.x86_64.rpm 4a95c494f40fa04f5110ee30a3530018d4638a60e57e2901625b360d608e450e CLSA-2026:1779267440 TuxCare License Agreement 0 - CVE-2023-4016: fix possible buffer overflow in ps -C option Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4016: fix possible buffer overflow in ps -C option

0 tuxcare-rhel7-els procps-ng-3.3.10-28.el7.tuxcare.els1.i686.rpm e102061cde5d4c31b4ef0290bfd89b3d664076551296736c52cc4a64b06fb42b procps-ng-3.3.10-28.el7.tuxcare.els1.x86_64.rpm 5a75a2e00e20b778b7235a9dbe88595e392c3c75843ed388710a6e3890ce268c procps-ng-devel-3.3.10-28.el7.tuxcare.els1.i686.rpm dcd1dd906414d66946f61df66a448ab3e6aa7701076163a602e8b3d825ac16ce procps-ng-devel-3.3.10-28.el7.tuxcare.els1.x86_64.rpm 0811454efe59e8b0ad9373998eae074dc71fe323ded10a6baae1c49044e998fa procps-ng-i18n-3.3.10-28.el7.tuxcare.els1.x86_64.rpm 5d03f2adb75889f332ffba29a64e02ccd3ccadb2f310f541d613426fdf0b71be CLSA-2025:1751297888 TuxCare License Agreement 0 - Make this package installable on a system having an either Cloudlinux or RHEL7 signed kernel - SBAT variables are used now Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Make this package installable on a system having an either Cloudlinux or RHEL7 signed kernel - SBAT variables are used now

0 tuxcare-rhel7-els mokutil-15.8-2.el7.tuxcare.els1.x86_64.rpm f9fbf9d6adeaa20a6fdcc55e6ff27900a17ffba5732dfb584abfbc6f33842abd shim-ia32-15.8-2.el7.tuxcare.els1.x86_64.rpm 2274d8a2968709d7a344d48506ffccf711aeeaada35062acc0ba628a25168437 shim-x64-15.8-2.el7.tuxcare.els1.x86_64.rpm 8ec9980aa7ae5f59c4d411b0622fde823d528e906e4f9145d4aa96307916a9df CLSA-2026:1779354447 TuxCare License Agreement 0 - CVE-2023-4641: fix password leak in gpasswd Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4641: fix password leak in gpasswd

0 tuxcare-rhel7-els shadow-utils-4.6-5.el7.tuxcare.els1.x86_64.rpm 36dacedb4fc29c861a3a94c87685d3be1be80f9e1b7730e2611474401ea43aae CLSA-2026:1779358954 TuxCare License Agreement 0 - CVE-2026-45186: fix quadratic runtime in attribute collision detection by using a hash table for default attribute names instead of an O(n^2) loop Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45186: fix quadratic runtime in attribute collision detection by using a hash table for default attribute names instead of an O(n^2) loop

0 tuxcare-rhel7-els expat-2.1.0-15.0.7.el7_9.tuxcare.els2.i686.rpm 054cf78093044617b26ef744a19c537f8e2458ba4cd748fe65470cfef66ecd4b expat-2.1.0-15.0.7.el7_9.tuxcare.els2.x86_64.rpm a054f4c4882eb3bf37bd9ec1c41e20f1d73bf97eebe6a2f878e5b0e77db4d9dc expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els2.i686.rpm 651298ff59c7f8a292bf85b8877bced6c09864226d3be0a105823c1054970116 expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els2.x86_64.rpm fbc740fe300aa47f9261d50cd5663e73308ba998a242bf484695a3e72ca3818f expat-static-2.1.0-15.0.7.el7_9.tuxcare.els2.i686.rpm f61e11476488786d235277f21e7c7d398bcbe441ceb756fea9a96955097942e6 expat-static-2.1.0-15.0.7.el7_9.tuxcare.els2.x86_64.rpm 226d7996b3d2fe13ea8bfab36aab48102c9c8ef9723e3833cb6d4f4edba89312 CLSA-2026:1779365436 TuxCare License Agreement 0 - CVE-2021-20251: fix race condition in the password lockout code that allowed determined attackers to exceed the configured bad-password count by issuing concurrent authentication / SAMR password-change requests for the same account; the bad-password-count read and the follow-up increment now run under a per-user named mutex in both check_sam_security() and pass_oem_change() Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-20251: fix race condition in the password lockout code that allowed determined attackers to exceed the configured bad-password count by issuing concurrent authentication / SAMR password-change requests for the same account; the bad-password-count read and the follow-up increment now run under a per-user named mutex in both check_sam_security() and pass_oem_change()

0 tuxcare-rhel7-els ctdb-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 73daab7809565c7f7d4005c63ed92aa3c6c14f7f674e15336fe235cf8e67ebed ctdb-tests-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 035526bb76047f2797c35068defe3785e313b37385983c0d8d52fe2199f9d296 libsmbclient-4.10.16-25.el7_9.tuxcare.els8.i686.rpm 900f784071c09645105e423c74630adf35826071de09ac8b7248ed1a4b9cd83f libsmbclient-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm d54ab0d9106c236c95f506b29516a9b7dd4eb1da473b931e82bbdd5e7ea61aab libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els8.i686.rpm e37ccf7f70027176af9691943c60cd93b228f8f414acf7fd517fe06193f280fd libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm ddf3485a606c0db3c3cf5abf9d95aa429c3f352fcaf170b9a10896fa96ffc7a5 libwbclient-4.10.16-25.el7_9.tuxcare.els8.i686.rpm 78e9ef6ed25b1b608e0b68e1ba375b2dfae9312c67f2efa7158b5c87a1863b93 libwbclient-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm d4a74208ff7902546d11abad683a991d63a5f8f615dd013186deabc83ae4f748 libwbclient-devel-4.10.16-25.el7_9.tuxcare.els8.i686.rpm fae53d60c6eb84d52af6c325af637ea7f57c70e7e7102bec417a56b4c26da751 libwbclient-devel-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 3db18b75decd7b979b073b077bbbb24f85449c172cf8b347159eeead8a18ab8e samba-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm bd6218f0b4c3ea737799921fcd8135239a54c8144e48fc0eb0d28ef3f70d962f samba-client-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 30677fb15d6fac1ab5dac7e9773fbf6fe76e64472f69551172a79593d85aafae samba-client-libs-4.10.16-25.el7_9.tuxcare.els8.i686.rpm d7a6604bd27dfa0d3a8db279864447de68a333407cc306ff02d75e017755143d samba-client-libs-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 7ed672a0a9beef96d860f86ab1a412c57471aed1f69410fbdd1eecea3ef99539 samba-common-4.10.16-25.el7_9.tuxcare.els8.noarch.rpm 299bce7c9b458c139d7b8798387547bdac712b81c626c3f14296c0211e73de7e samba-common-libs-4.10.16-25.el7_9.tuxcare.els8.i686.rpm 875c4425567956b0855305a6c654c57d1f9771d95227c8fdc272fd6c69b176c8 samba-common-libs-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm d71c3936cba5819095b17a2651870c33f6e1437ddd446a91a78a09adfdc29ec7 samba-common-tools-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm f6a9f7f88e99fe1520ca3d57117fdcd5cae76643de687e73f0432271e618f785 samba-dc-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 2de1fc9c24589e2d612818b02037f95ffd081d04fde97008dadbbe26ab740ad8 samba-dc-libs-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 692f0499fd645ba11b60eed532fafc7dd2dc4fa42e618d65789ad0898c88d7f7 samba-devel-4.10.16-25.el7_9.tuxcare.els8.i686.rpm eac979ad385ac1056de49d165b807de5a378aa34c830cbb3de5fb85e22841431 samba-devel-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 2be0aadaa912a4950d256f196ce92d1b97ca9c063658dd3a8dd549413bf6f515 samba-krb5-printing-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 1e4b4d644bf14607d7a42a439c33079997d0cca3869be1e87a70be8fe8d0326f samba-libs-4.10.16-25.el7_9.tuxcare.els8.i686.rpm 8386014c61cf72565bc8ce13021b14222d2a40d22534fc41f72d7fc9a0403476 samba-libs-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 5ebf6f51cb29606047cac8019f01c9d82e33f5af7d57a9d5d34d4585b039a4b6 samba-pidl-4.10.16-25.el7_9.tuxcare.els8.noarch.rpm 41c8ae43bd277c8632279c58ab9386ccbed9abfed35b6ddeb06afee7338cf23f samba-python-4.10.16-25.el7_9.tuxcare.els8.i686.rpm 8e74998e361ae84b618cf8f2c3cac4cc78872ce32295da1c9dbe66a06771c168 samba-python-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 2fb48f1322cbf5a8c56e4faaa38250b440aaf87141082c2ac8ac42f42d81e398 samba-python-test-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 216dfeaed4f063fa530c2e8161351ef90426d8d296e4c058047c4ddaeb33b90a samba-test-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 436775bf99c0a88e8cf0fd08f60a237914c84787bec58f4d2abb331baacaec53 samba-test-libs-4.10.16-25.el7_9.tuxcare.els8.i686.rpm f742a755ff669cd5087601fd9e6d5fef0f0e3454ef7b21a56bbc9ddf83f43395 samba-test-libs-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 4bbf852532c6577bb9706ea23c2befa11d58c206545597890acecdac49936742 samba-vfs-glusterfs-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 012e066f9173440d205af8902dc8733b28ff2a4dffbfd01dbecb5c537c321993 samba-winbind-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 3bda83c7a949f5ed1f6fbc0dc5ed83435f4f7ddff270d5396ef7a2cdb3a5b895 samba-winbind-clients-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 0c499ee63e6c7d2ecf4c095d06a845e82696b471e33093711162e38d0d3e57c0 samba-winbind-krb5-locator-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm a19f310f69d640724d932bebcd302d647c8bfd39d7d23692063aefd36ea1c2d5 samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els8.i686.rpm cf81ee498ae2b3e852ed979c2740d1896f2dfc891d0879ca1e14d19bfc0cbd60 samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els8.x86_64.rpm 6fa39e2eec61493e226ac2e527689488010dc657c404a9891b9ee2fd2a770491 CLSA-2026:1779434064 TuxCare License Agreement 0 - CVE-2021-3445: fix signature verification bypass via signature placed in the main RPM header Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3445: fix signature verification bypass via signature placed in the main RPM header

0 tuxcare-rhel7-els libdnf-0.22.5-2.el7_9.tuxcare.els1.x86_64.rpm c0abd0cca5470ed63defcb2baa2e62be738b6f846c6d5f2281d7f805695a575c libdnf-devel-0.22.5-2.el7_9.tuxcare.els1.x86_64.rpm 67c4cef537754577a3f058f0bb30ba03ccb93e1298538b2aba9060d43147a8cc python2-hawkey-0.22.5-2.el7_9.tuxcare.els1.x86_64.rpm 2992ca53bb7c7886c327e4c73c9aba83a6946b2a19cc5b8e71c6a7b0d3a67b60 python2-libdnf-0.22.5-2.el7_9.tuxcare.els1.x86_64.rpm f54919d8444821972ecfa0337743e6372dbdecd941dc57763a8b428de68d2f0b CLSA-2025:1757499161 TuxCare License Agreement 0 - CVE-2025-49180: fix integer overflow in the RandR extension affecting the RRChangeProviderProperty function Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-49180: fix integer overflow in the RandR extension affecting the RRChangeProviderProperty function

0 tuxcare-rhel7-els xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 5918bd4875186f8a2c0bbe5b6e7ff6330e217f750bdcf94b97fb5f69102f283d xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 346e38a6ee344626a5ce126479d53c2cc7bc827a807877c800c7e71b80182006 xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm dc1ba7dc244c6837559924c02b7695020b69cf841d0d08f1f33032794602b1fa xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 8122e6db5f71c8ccec3c8d2a19232998052843ce721bac5bef1bdf2ceb9e5703 xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 82f7ac0ef1fffacfde658d1b99ddbbacf9084648b52ba56b9e7af3997adf2da1 xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 2d64233a52b8197145b68a6b7180c0a9511a781a61296c98204223a63c909400 xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm e76c6410f16333cca8ee22b1751e2510722d5d3a2fe8d18f20689fbfd7f1b5fa xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els4.i686.rpm 64bef251bd53b96ecd25172254c94d702f3481bfb7053cc6dbb0607430808d5f xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els4.x86_64.rpm 0bc2a96e6b15318a2c7ade8a42a1c6588f96ac1933a8eba6a087ca5897492067 xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els4.noarch.rpm 21f5b766f57564a53ff4bbc582e30eccd5250f202f43d2ff67b8b15e94cf9620 CLSA-2026:1779467038 TuxCare License Agreement 0 - CVE-2026-33278: fix dangling pointer use-after-free in dns_msg_deepcopy_region() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33278: fix dangling pointer use-after-free in dns_msg_deepcopy_region()

0 tuxcare-rhel7-els unbound-1.6.6-5.el7_8.tuxcare.els5.x86_64.rpm 20dd8a45155917cdeee5d8377fb082ecd5285babb20b088d7dca1361c0eff501 unbound-devel-1.6.6-5.el7_8.tuxcare.els5.i686.rpm 103f8fa735df9d8a2f70c511de068c01c3f6f2478113609fdd3c20cde7341aff unbound-devel-1.6.6-5.el7_8.tuxcare.els5.x86_64.rpm ecbf06daaa9fad08be4760cf07fb96846402a18e3864cd0cae12ea5ebc7d49e5 unbound-libs-1.6.6-5.el7_8.tuxcare.els5.i686.rpm 3574e60e1b3818c5d7e3491149c88bc149dc1991401152c72267a3452f737edc unbound-libs-1.6.6-5.el7_8.tuxcare.els5.x86_64.rpm a3313619bd47888336c6dff8c1a87ed4410e398e1ace25464e845349b28d5dae unbound-python-1.6.6-5.el7_8.tuxcare.els5.x86_64.rpm f65fd0bd28a3decf25ef23f585944b926d3b09ac31ec6ecca74b85f2d8a8edfb CLSA-2026:1779711183 TuxCare License Agreement 0 - CVE-2026-43618: fix integer overflow in compressed-token decoder allowing remote memory disclosure via crafted compressed stream Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43618: fix integer overflow in compressed-token decoder allowing remote memory disclosure via crafted compressed stream

0 tuxcare-rhel7-els rsync-3.1.2-12.0.1.el7_9.tuxcare.els6.x86_64.rpm 12cf01e169ecf9966ceef4ebb76419e2a4ae668460da8c1ccb479bdfd71977e7 CLSA-2026:1779737361 TuxCare License Agreement 0 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u492-b09 (GA). That fixes following CVEs: - CVE-2026-22003: hotspot DoS via sandboxed Java Web Start/applets with untrusted code (resource exhaustion) - CVE-2026-22007: Security component, local high-complexity low-impact info disclosure - CVE-2026-22013: JGSS, remote (user-interaction) high-confidentiality info disclosure - CVE-2026-22016: JAXP, remote unauth high-confidentiality info disclosure - CVE-2026-22018: Libraries, remote high-complexity DoS (low impact) - CVE-2026-22021: JSSE/HTTPS, remote unauth DoS (low impact) - CVE-2026-34268: Security component, local high-complexity low-impact info disclosure - CVE-2026-34282: Networking, remote unauth DoS (high availability impact) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u492-b09 (GA). That fixes following CVEs: - CVE-2026-22003: hotspot DoS via sandboxed Java Web Start/applets with untrusted code (resource exhaustion) - CVE-2026-22007: Security component, local high-complexity low-impact info disclosure - CVE-2026-22013: JGSS, remote (user-interaction) high-confidentiality info disclosure - CVE-2026-22016: JAXP, remote unauth high-confidentiality info disclosure - CVE-2026-22018: Libraries, remote high-complexity DoS (low impact) - CVE-2026-22021: JSSE/HTTPS, remote unauth DoS (low impact) - CVE-2026-34268: Security component, local high-complexity low-impact info disclosure - CVE-2026-34282: Networking, remote unauth DoS (high availability impact)

0 tuxcare-rhel7-els java-1.8.0-openjdk-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 12a8f3fa1c34647582c3df3fde4b5bc99fa1547bea7841d4bf766e3882755f92 java-1.8.0-openjdk-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm 03efe1217563e0adcee6ad4ec70b6d13f1330793825ec2c662a8800c9ddca502 java-1.8.0-openjdk-accessibility-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 9dd5b1046fe6929fc69feec0f4a404de86eb9da4716cf3d16d394a5f2c6d4920 java-1.8.0-openjdk-accessibility-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm b7a7ef810523eacabb90f405b01b39b3518b9756c9ae1da20c00faf2b464f582 java-1.8.0-openjdk-accessibility-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm c3cc7419b16c305f8388d6ebaf1f688012ba17c32dcbabd99a7fde534f1f31ae java-1.8.0-openjdk-accessibility-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm 710df6b9027b6d9a7421524be0b1852a7492a64717e390da21c7c256d0b6a039 java-1.8.0-openjdk-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 72522db6277b862bec6f5afab5d6bbc1c073d78bb2e574203b9e3c4605ce052d java-1.8.0-openjdk-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm 42c42267563db8295dc580eed91aec68ea9a9f32948499e758d834892114cb69 java-1.8.0-openjdk-demo-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 739eabf0cbda20c0d2183a03c5034423d75c5f2481c5c1186406ff7d0478817e java-1.8.0-openjdk-demo-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm 745ac87b1e4ab62f446cfcc5cb245b4585aa1f80ffcfb8397ca924b84ed7cd1c java-1.8.0-openjdk-demo-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm bea0b2cfea18e9dc4e5381091e8cdf8659dd852204b0244dc029be369369c45b java-1.8.0-openjdk-demo-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm 4d782dc8bf84a0f7320907e627d424dd2674c08f8788a7e8a5a2e50cdb553421 java-1.8.0-openjdk-devel-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 6b6d512897f1878e4900574bc0d8e3f12f360bcf54ac279fba8452a857ee7539 java-1.8.0-openjdk-devel-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm 76df04f5dfc14712081685debeb9bd346e21013cda1ff7ebdbaa61b16332df49 java-1.8.0-openjdk-devel-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 2e5a6e0949c98a8065b02e268db776ab9832a060c007f8e22aaaad7706e83a92 java-1.8.0-openjdk-devel-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm 7fc783d2c12e2bb738d2398751ecaf7474da84eea3f585820eb2231f441ea696 java-1.8.0-openjdk-headless-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 4b898797aa0dcc53319e36cdd98eb14c658b3ad547ec0d4f2964f42de23c8aa1 java-1.8.0-openjdk-headless-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm e204adc00d6c1ce7ea39a7b240d4b74fda6a3f0826d27e67ee2c08604c2887a7 java-1.8.0-openjdk-headless-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 5a8f4c0a199df7ae888e529e34082dbfdfdcb3b90d88ed4e076eb3a4b6dd3740 java-1.8.0-openjdk-headless-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm b528f04175a27e7df6551eb81bab1d7ba404e83f2c2f11493af809195f3faa27 java-1.8.0-openjdk-javadoc-1.8.0.492.b09-1.el7_9.tuxcare.els1.noarch.rpm 148e320213107c559367727fbcf71c5db03baeb00212e621946ec9779298105c java-1.8.0-openjdk-javadoc-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.noarch.rpm 1b5fcd8be054fa0561250ee783107085694d4a24ae3d6c8f68b8bdab8a75cce2 java-1.8.0-openjdk-javadoc-zip-1.8.0.492.b09-1.el7_9.tuxcare.els1.noarch.rpm ddb8e5d7e15e31d0bee3d7420d46997b770181cd281831b6538c1961571142d1 java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.noarch.rpm 82dea36ef4e30e4385a91f870b870abc85d1f343538a55e4badf82f56e4a6435 java-1.8.0-openjdk-src-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 95ef31c025f496981b57abb0b5eee9154546fb8537936a86abe73abd8a5bf8fa java-1.8.0-openjdk-src-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm 7ec1b98244db19c6080d9508e3c80d8fe7c203f3253e50a15b9728c035bbdb80 java-1.8.0-openjdk-src-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.i686.rpm 748f6a9e0758e089080a2ef45522ed285c43ffc0272b8fb52d64928787c2d4d3 java-1.8.0-openjdk-src-debug-1.8.0.492.b09-1.el7_9.tuxcare.els1.x86_64.rpm d95bc81d8fb0bd68c53c46453321d899849abfebcdd71fbec14183ec9755066b CLSA-2026:1779746464 TuxCare License Agreement 0 - CVE-2026-29518: fix TOCTOU symlink race in daemon file handling exposed when "use chroot = no" Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-29518: fix TOCTOU symlink race in daemon file handling exposed when "use chroot = no"

0 tuxcare-rhel7-els rsync-3.1.2-12.0.1.el7_9.tuxcare.els7.x86_64.rpm 819cfefe3657c705f3bc6ab85f0359bd20322decdb15bdc28f892f7661c67846 CLSA-2026:1779956012 TuxCare License Agreement 0 - CVE-2026-42050: fix stack-based buffer overflow in XTileImage() triggered by a malicious MIFF file when right-clicking a tile to invoke the Load / Update menu item Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42050: fix stack-based buffer overflow in XTileImage() triggered by a malicious MIFF file when right-clicking a tile to invoke the Load / Update menu item

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els13.i686.rpm 85027a0a3c7789f66d3fae14177db0e389f5fee27eaffc818b8487781fa6a113 ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els13.x86_64.rpm bce9e2cef1f074d89c85a73731b498b890e97fc99697baa36742923e8771767f ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els13.i686.rpm 208c346050a5d43da47411653a6e12c18aae7960177c79df4006580280fac479 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els13.x86_64.rpm e032ef9baa0801c5d62212e0bdbf3dc9f2051ae26fc7530ca6e17c4c9f85cfb2 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els13.i686.rpm 958a238323e3b2d0e116139612bda688235eca37751ba3dcd73a539de73aacdb ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els13.x86_64.rpm 150d45d8e2d4f8fa88235ea285e1f08a117b44f9f37030d1dbdbda1b1b241255 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els13.i686.rpm 8851e85e59e12068257136c388aa2dc68d9f39faa66d895bbe294a5649793ade ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els13.x86_64.rpm bdb349011e21fa8b5255b5eeb39cd80bc7d23bd061b64dc5334ed01f25619537 ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els13.x86_64.rpm 0b1ef0f188f6bed3a0550b56c1343c784f6acdb846197273580c454b211934dc ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els13.x86_64.rpm a2b36ee7afdbb243270e78abe7e185eeeaeffb05653bc738148ad29cb93760e9 CLSA-2026:1779960293 TuxCare License Agreement 0 - CVE-2026-1519: limit NSEC3 iterations during DNSSEC insecure delegation validation to prevent excessive CPU consumption Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-1519: limit NSEC3 iterations during DNSSEC insecure delegation validation to prevent excessive CPU consumption

0 tuxcare-rhel7-els bind-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm 2ace1618c9d92ace18b113f83eb1423866a5cd7f96befa43f68bd107cb3470d6 bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm a3edd4f301de46a87c10679ac166a6de264eda2d9aecbaa26d47aa4983368c74 bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els12.i686.rpm 575c4896bd147349813aaeedba0ca047a6f01974a05be7e32602b9cb88bf24d0 bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm 6322e17a9ba4afec981e541bd55afefbadb7033b7e8b37be4e4918876640775f bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els12.i686.rpm b1eea5158faba6442fce5ebd7408fb7ef2252436e2bf4ec7153bd28dc437d51a bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm 254bdcb3382275ad4945023167fda24a8d118d574c79ecfa832eac53ea31c89b bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els12.i686.rpm 0b00b118ca646fd3660e340b3836fe6d4ef524d403c9b86d8a821af4e5cdd29b bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm e328e65fa5e3ebf5b1a646e04854f94786f827b43d356e6a5d2937b9f08739f5 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els12.i686.rpm 766637708b06f57433bc3ccde66f67e89b39f8b215d48decc06f6667356aca84 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm 04b04dd0d5f9ca46e470e0c285dd591e97278d0211c916278ea42714d55be81c bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els12.i686.rpm b4f22b7baa26eb3016f7127a1e186c33ade9d302a79f6f79af247cc7eced6612 bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm 07faf3bbc366e65719a3f011a592d58fa4b6fbdc921b56434d51667f71591c26 bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els12.noarch.rpm f45d01001a3566f0c9c880b3d24a0e095e7bbf8a800da9424271f254b9838e4d bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els12.i686.rpm ef314caacd0408e5336054d73990aec445bd987317b77163827a9f0a1766f3ed bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm ef936e807e653a229245893a40bef7884ff737e25114d3285f98e33bc83a4e05 bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm 66dbf2d6a2da2c9cdb9ffefd47e03a9fcdaf9bc52443318e481f6c20f6b84647 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els12.i686.rpm 8f972f9530b4f9b03ebf3b90586a69fc4dca012a7e40f9345fe43fffcd5080df bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm 59d3c57036773a4b9631c80a145c9ca090254d5c4d1c03c97b76ad8ee56d4956 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els12.i686.rpm 835c253a6753bf92c83f4e216bb40e7b3c7d163863804c1ca018ee9e003b799a bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm b482ba274b436251f4bf4206350c4c186215af7f8f5a08be83f4434f8eb37a99 bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm bf153cfeb2b8ab00150af6b3836a84690160fcd9cf63a97876a35af2fdcd8e8d bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm acfcb3a8ea093f73fbf92237a1f779a2873d728e8a6eb02e67af03516c181485 bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm 16c387d2642a8844c4fd03c2819ea8423b7f333b5eb58eda86d59ffef40310e6 bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els12.x86_64.rpm c7a9cbc0b8bc5e5b2fd5ad7c3412aecf8e611d938a4faa37cbc90c1dd0e8c927 CLSA-2026:1780070780 TuxCare License Agreement 0 - CVE-2021-43566: fix mkdir_internal() symlink race that allowed an SMB1 or NFS client to create a directory outside the exported share; pin the parent via vfs_ChDir() and validate the relative path before SMB_VFS_MKDIR() Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-43566: fix mkdir_internal() symlink race that allowed an SMB1 or NFS client to create a directory outside the exported share; pin the parent via vfs_ChDir() and validate the relative path before SMB_VFS_MKDIR()

0 tuxcare-rhel7-els ctdb-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 0822b3c2b45678c16f59c77754005169a93543f5ee91d8623a54ab3026f1fab8 ctdb-tests-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 840d638b4e2555b11a84a1406e824b17d5ac3f9b6bca9ee187205513611f8ed2 libsmbclient-4.10.16-25.el7_9.tuxcare.els9.i686.rpm 8e79dbf39a4797a5d721bfff4182b7f8146490281ac58b06f640d7cb6ac027f1 libsmbclient-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 16fefa66747043916b59ca676a47cdbca050df3ed1605aacb7872e30849d8a37 libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els9.i686.rpm 928593886922b93330dead0b87ddd4c009415ac5c919e8cdbc1b73a48d13dc9e libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 4d7390820919c492f255be0f53e7b2f5e6db81f319317ab9fb05b20bb3584dfc libwbclient-4.10.16-25.el7_9.tuxcare.els9.i686.rpm c7c3ee371cf9df059be9c3654dfdd41bccb38576514cf94f05cd8d010f037e29 libwbclient-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 78498e061f91c4045de6210be8578fdc20abbb862f4058c97111748cb07fe577 libwbclient-devel-4.10.16-25.el7_9.tuxcare.els9.i686.rpm 4936e2b97d92e636675737d14e54f1c6485647f09f8102b87d00d346bf8f8d0c libwbclient-devel-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 986dbbde031f2b05cb97e63c96e6b21a15cf838a93a8ed9ee9cbfec15ff7d224 samba-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 25091ff163cb3acdeddebe63073e57de2f51ca6d3edbe4118b886b0c8c594753 samba-client-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 4444bdf2b2620ba907393dca8ea1e6a931fafada95bb00ee3b6ddcc51bb4f6d1 samba-client-libs-4.10.16-25.el7_9.tuxcare.els9.i686.rpm 2cb2ae0e70aaa9bf55c10040d2aa411dcada6bf63f876b455dc86b6bbdf9b37b samba-client-libs-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 63480f2891463ff8674b4652bcce98920747917648e008123108ceb43a3f6f50 samba-common-4.10.16-25.el7_9.tuxcare.els9.noarch.rpm 62d90007be27f7d7a3114d2f54c3531d02e3f217ac5a6f5660d70b6e064428e1 samba-common-libs-4.10.16-25.el7_9.tuxcare.els9.i686.rpm f781d30ab5551f594fe26f1732bedafe6939a0817dfde4f3a0ef9b5c76baa182 samba-common-libs-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 7c96b0a08137778daaef2a2584e5bb025a5f1810a862b9de7455b23c9f2c025b samba-common-tools-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm a1717057a9c3bfcb3b9cba8ebdd0e25247dac24985981a2694d4512ac3364912 samba-dc-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 2255c3c86daa83ea325289e8f3483e30aa9f8ad03d7cc996ea37b99113237d48 samba-dc-libs-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 54cc794c40ccb40bbc7c59d0c05348bca9f06d4f37510b81cce46e4010633266 samba-devel-4.10.16-25.el7_9.tuxcare.els9.i686.rpm db823b85eecdfeaf01c9bcb5de83cd58783aa149e11ffd540a66992447ec207d samba-devel-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 916866670c995ef1c4f69adec341d66d163b5326c9382bae728c685be3f293cc samba-krb5-printing-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm a59eac768f3642cb8395645a2bee6414eaad8dcab45ded8d38ca74419a5bb1c6 samba-libs-4.10.16-25.el7_9.tuxcare.els9.i686.rpm 3664041be93534d2126b5fdd25cf63cf43a2924bcbf341ddde32fe6508157266 samba-libs-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 687482bb0e8f72de07f62332128be5ebf437865e74af7a7769eae9cd2a165822 samba-pidl-4.10.16-25.el7_9.tuxcare.els9.noarch.rpm ac72df9addbe1216cdf90ac3494c12bf44245191108b0fb9be8e45d7feefa943 samba-python-4.10.16-25.el7_9.tuxcare.els9.i686.rpm d98db672c619e06edac29b62bf229475010450b2f052e9985d157366de8c9c6f samba-python-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm eead61c06466c0cfe3922b41b937bb359c82738513c8bd657df3528d3af01e93 samba-python-test-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm efcd6ed7d17ab629781863c1d4b6cda467bb3bd0a4993be2d75f7144cb1c584d samba-test-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 6b41f57031d8644f2055d6e99b5de3716ab77a007017251330ca421805d9a2df samba-test-libs-4.10.16-25.el7_9.tuxcare.els9.i686.rpm 8fef52b2a97f6d2ef9a704f14339e8e1101d0b71b3bdc83370f76c0821666c90 samba-test-libs-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm db33951959f5b519e4df365625bc2a8915f9309a1cef24e84495394e044765ea samba-vfs-glusterfs-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm e987ef1a233cc856a95ac4b25e2165bc1e8806a69437dd51cff69990ff679e69 samba-winbind-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 8d70bac4c626511dd9a02f775dd766b040a920aa6af0dd28a736751694422e67 samba-winbind-clients-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm ba50b6c29be9f9cd41402a93a1b6dcbc3061c09e1750bd90ab2f9241f5fa05f6 samba-winbind-krb5-locator-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 123d1928f82c128dbe6fd439197a1014755d5e86f9df663a1269a09baebf9fa7 samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els9.i686.rpm c8b7f27b98dcf86a246a1eed6e6cdfaf2f8e0fde46526b1d9448f7730a05f71f samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els9.x86_64.rpm 49902cc850c33596c5157c0a98aa642f61ecaf112cc6710e0efb344491a5291e CLSA-2026:1780136761 TuxCare License Agreement 0 - CVE-2026-8376: heap buffer overflow in regex compilation with repeated fixed string on 32-bit builds Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8376: heap buffer overflow in regex compilation with repeated fixed string on 32-bit builds

0 tuxcare-rhel7-els perl-5.16.3-299.el7_9.tuxcare.els3.x86_64.rpm f8f90ef238cfcd7023e54b883dad87cbb62d28b15eff6c2384537b4b089bd9d5 perl-CPAN-1.9800-299.el7_9.tuxcare.els3.noarch.rpm d2d100370aa409dc7e3b5b22a573e9313bb883ae0187344c45d0bda24f5ee8ad perl-ExtUtils-CBuilder-0.28.2.6-299.el7_9.tuxcare.els3.noarch.rpm af9c42eb4d4d11d46dcc50033330c3fbe432d4cf9ae4fbea7572934cfd942e74 perl-ExtUtils-Embed-1.30-299.el7_9.tuxcare.els3.noarch.rpm f6f6430687fc3b569e81f99dc8462d47b055694cf331b807c566380e3fbb8c54 perl-ExtUtils-Install-1.58-299.el7_9.tuxcare.els3.noarch.rpm 6897d04fb0087c549fea3ff2cf16bcfa9416ef3ecfacdef567f39f309cc71271 perl-IO-Zlib-1.10-299.el7_9.tuxcare.els3.noarch.rpm 85e91a44e5396353a047f3774aef61aaab25aed0766f5814d2081ba8a5dca430 perl-Locale-Maketext-Simple-0.21-299.el7_9.tuxcare.els3.noarch.rpm 8290044c727d82f313af41f394ff9a3fdd8b02e15727753823b046b1718bcb05 perl-Module-CoreList-2.76.02-299.el7_9.tuxcare.els3.noarch.rpm 4aa93c4324d4ef304756cbc940418b4e965b630ea55e15ee28ca73a77a9636c1 perl-Module-Loaded-0.08-299.el7_9.tuxcare.els3.noarch.rpm d6511cf895c428bace13f24cbb06d7b1a6e8847aaf1dc4cb5574d6ca56ea120c perl-Object-Accessor-0.42-299.el7_9.tuxcare.els3.noarch.rpm b32298fa52a726ad781ecf591717b9c373abb1de7fc9af4a740929ce16823a0f perl-Package-Constants-0.02-299.el7_9.tuxcare.els3.noarch.rpm 6a46199e51590d3b65d00111f0f45405c659510d3a7e5097164408bc3d1ccba0 perl-Pod-Escapes-1.04-299.el7_9.tuxcare.els3.noarch.rpm 5b308b718d7020a616780b57f0384928778573272c6b5b440fb587db81a797df perl-Time-Piece-1.20.1-299.el7_9.tuxcare.els3.x86_64.rpm fee2bbb94c60f2bc9068ebe6f9b0cd87392cdcc7f69dc7addeceae0274678b89 perl-core-5.16.3-299.el7_9.tuxcare.els3.x86_64.rpm 62c496c749fca71c64169656fb76d82a43f0c5a1ab722d53bb1acf77721f242a perl-devel-5.16.3-299.el7_9.tuxcare.els3.i686.rpm c10cbce0a463e71f944f3301fc947dd1a63559a8cafb16b13cb4596f5f89b298 perl-devel-5.16.3-299.el7_9.tuxcare.els3.x86_64.rpm 49eb429dc0169ba813899233f033958e0784221eee90933c9e7f4dacef59332a perl-libs-5.16.3-299.el7_9.tuxcare.els3.i686.rpm 4c3c58acf62983c74f2dcf8ace4a7767abb8b9e8f8991df563670653e2b5dbb7 perl-libs-5.16.3-299.el7_9.tuxcare.els3.x86_64.rpm ba93773a07c4d99015793fdc0959b0a97345982dd72040c58374ad62c3ff48cb perl-macros-5.16.3-299.el7_9.tuxcare.els3.x86_64.rpm 107f59c414b77dd28b766331b87167af4ccdf67369373e9c33e02802c4a80bb2 perl-tests-5.16.3-299.el7_9.tuxcare.els3.x86_64.rpm 9ebef2249158556e220de7e74a154f93ebf4a23e20f696f03fc318cfbd7240c7 CLSA-2026:1780648384 TuxCare License Agreement 0 - CVE-2026-41080: fix hash-flooding DoS caused by insufficient salt entropy by backporting SipHash-2-4 keyed hashing with a 16-byte salt sourced from /dev/urandom Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41080: fix hash-flooding DoS caused by insufficient salt entropy by backporting SipHash-2-4 keyed hashing with a 16-byte salt sourced from /dev/urandom

0 tuxcare-rhel7-els expat-2.1.0-15.0.7.el7_9.tuxcare.els3.i686.rpm c251def904968fa58df14a0ff5d92b275e00aa6f21ee1e2a99ccbd65ae69ee31 expat-2.1.0-15.0.7.el7_9.tuxcare.els3.x86_64.rpm 7ed67c1867c7605e1a454ceae9fa13294b0431d7289226a0d9c476e8be77d7f2 expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els3.i686.rpm 6fdf2e063af8cc927b287e1cd7815bee687fa4baec9169f9e7ee5de61ed34133 expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els3.x86_64.rpm 83dd86a66bf59bf8027964124a42a601eb0146652b5b28a275d5fee3f0f55b07 expat-static-2.1.0-15.0.7.el7_9.tuxcare.els3.i686.rpm 0147b83126b58201e492d2797979ac75030d9a994d878ae9b0e71c79706c0181 expat-static-2.1.0-15.0.7.el7_9.tuxcare.els3.x86_64.rpm 99698deb1dcb3b87af138bbb8dd77054d75b20b16d4caa65004da4f89a7bb564 CLSA-2026:1780672424 TuxCare License Agreement 0 - CVE-2026-4480: fix unauthenticated RCE in the printing %J substitution by masking shell-unsafe characters in the client-supplied job name Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4480: fix unauthenticated RCE in the printing %J substitution by masking shell-unsafe characters in the client-supplied job name

0 tuxcare-rhel7-els ctdb-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm aaf853b3003739bcb81cb2ab65520992f2cb4808838507b518946054dddcbdbd ctdb-tests-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 986707a67960b28aea991d78a449bc8e4711c645e15bcc1a97b9f5cfbbfc7ea4 libsmbclient-4.10.16-25.el7_9.tuxcare.els10.i686.rpm 5c7919a1420d3cae5ebb90264534bcfe4a46dfc88a15154791a4f815b144d8b3 libsmbclient-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm f241a879ec1479142183e7b02760e2ea2a5820a7b4ba3ec2e92f455c2fc7a0c3 libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els10.i686.rpm 15d67790403b8b2bae60dbe53821c8cf9837e8f4b8738177370e29d91c6c602a libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm f56844b6214e9b580db4ec8bc61df4dfec446fbb665f87e707da9dfadc3d2d96 libwbclient-4.10.16-25.el7_9.tuxcare.els10.i686.rpm 0c7e49af13577a9786e8b92e617675d5e7509df60b970be18cc1512c43d19241 libwbclient-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 0d97d5c7e23b2f38e94c61b9fda3799a2283a25068ad35c9146159594be9e9f7 libwbclient-devel-4.10.16-25.el7_9.tuxcare.els10.i686.rpm c6ad021e5f01e7e11d45da14eb9e862688dd282d6f2affc2fe2327fde81fd367 libwbclient-devel-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 972278afeff8685fed5de51268c5757abee54c53772949321a495802a3e2ed1d samba-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 88a7a41f1fc9d79c9bee0c8576eacfd04ff8af265682f5a1ddfc2210489e280f samba-client-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm f05621a0cb15f8e4e34ca9b9825eb8c43844bac7af309919fe031107201e5291 samba-client-libs-4.10.16-25.el7_9.tuxcare.els10.i686.rpm 360530e6b4c7103a050f68ecd81e0c113877bb89f9a6d9ced2be4babc5ec4b8e samba-client-libs-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm c2ae0de79fc3f2ef410fa589626613ea81a780ebb4911c80b3731068f4dd5bc5 samba-common-4.10.16-25.el7_9.tuxcare.els10.noarch.rpm 2d266e6bd55aad2030885954f024e95bed83dc7cfc4278100b890c80a61375f5 samba-common-libs-4.10.16-25.el7_9.tuxcare.els10.i686.rpm e4cec171bea4b470591838b0b6610110e23c102ecd88af132be821a9551ace4e samba-common-libs-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 66b5710b516cf4e20ab6d20aef568cdb474f56f6c810cd8963547ecd068c6ebb samba-common-tools-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 4aaf48d52733bdeffbf93c82ae896dabb4dba57d0b44a40f54164bdb2568fa29 samba-dc-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 51ea2ce0bff3394d4167f0cadd0f041fcc722e1b839f8e973c0f71c9c3a6e9e5 samba-dc-libs-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 8275a210b35ec2ea3da8d8a53b2aa977a9013e9f9c07058b93c1508a32768e19 samba-devel-4.10.16-25.el7_9.tuxcare.els10.i686.rpm cbfd487c4a22144206cb40d09fe988d8807c3869a0895630e9a154f413ad5497 samba-devel-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 60728138876de60d6ec8364ce8c72ea81330681850dcf742be3159c02a146149 samba-krb5-printing-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm adbc5a75a1332d89d2d48182e0de9e89a0ac6439affba3ff2552917abb2183ad samba-libs-4.10.16-25.el7_9.tuxcare.els10.i686.rpm 78b507122767a64b93c248738c6ff0181cf4e771925675fe1f6e5ffb75f47c4f samba-libs-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm d69220db0226004f8ab2c0410104c75bbded2f9c31fac5c55e2d1e0e44dc76a4 samba-pidl-4.10.16-25.el7_9.tuxcare.els10.noarch.rpm 4d95c6259f88e1e085a13513aed009d85f8fb2a1ce8d5b1851ef324f6b5f966f samba-python-4.10.16-25.el7_9.tuxcare.els10.i686.rpm ef5a168bbd39f2fd08f69b3261848b6485f88c5d275caf91f53b3cfea4daa0d7 samba-python-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 2ef539783a6d13b0f64b237b11992497c0eabf1d910c29b2063cbd1925b3e849 samba-python-test-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 5ec138c03ebfe0022191a7c6aae20e1851e60b99da74eae553cd31364d06762a samba-test-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 574b65f055c8725511085b8a9ed9e91c97dc9915cd36ef8e996f0ec80aaa4f51 samba-test-libs-4.10.16-25.el7_9.tuxcare.els10.i686.rpm 091476d61e353481dd5ce04ccf609c83c415d099ef07c03ec827399cef6e1e4c samba-test-libs-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 6646fe606d93edbba1ba25e77a17b9eff91e8f932d113be449c8a8e20e85f73a samba-vfs-glusterfs-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 5b783f04a2ebc43211face9e612eba6ad3662f5bba6b5fa2d06baf396b0e9568 samba-winbind-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 4743f0310e775e5c70d936b75be585f4516d8e30adffdd9afaa4c10ee050acb2 samba-winbind-clients-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm cbdb36280c331cd7247a081b1046d8e0d34546b270c77d5f2540ee7b37e30451 samba-winbind-krb5-locator-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm d9c6d432f061df36fbbcf6bea2863aee568cdfb42689253dec51dd2671de518b samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els10.i686.rpm 8817494b506e81dd7a5e8216ea3130a81c46677f647fda4bbeb8ac4ff3606384 samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els10.x86_64.rpm 4d6de56ac966e921e4119ce6a5f0a5da51686f4b1244d9ab70c46a9b3b1f899a CLSA-2026:1780700238 TuxCare License Agreement 0 - CVE-2026-7210: use 16-byte salt for Expat hash-flooding protection (xml.parsers.expat, xml.etree.ElementTree) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7210: use 16-byte salt for Expat hash-flooding protection (xml.parsers.expat, xml.etree.ElementTree)

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els11.i686.rpm 9e457e82dca37a1180740f6cfe17beedd3cc9f4bf485dd574fe9b4a225f6fbc9 python3-3.6.8-21.0.5.el7_9.tuxcare.els11.x86_64.rpm e6edac6ed9d481de82e4c8f85fd662bd85ae3cffa4a49a82572a80a2a13a5278 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els11.i686.rpm 9aabba55bb3a4bd901023b9a707fbf2ba03a85eb84583e6fc5e6a8ec9fef095d python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els11.x86_64.rpm 817ac21aeeaf0973239b3a2884ee2eca5b2d697dda88f10d977d1fba8ce4c062 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els11.i686.rpm 6251f52b4e7793a85c35968e29fc38348a1fa13d38be8309aed190b14d58e162 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els11.x86_64.rpm 2234283e541980fae0eba8c9285b246375508aea612447b7c9532a3f3c9c7ffb python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els11.i686.rpm e22c828139ad15489897fa13820e7b5def810f942b8b3b159adaae37d45fd8f3 python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els11.x86_64.rpm 51570db0f1998d5d45276f4cca1a0555d3c957400b80438455123311bbff096b python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els11.i686.rpm 968afe1c6881cbb99f677a294a0fbae605121267ee498a3554af25d12f352226 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els11.x86_64.rpm 9b3f98b90955fc44b798597caec2b6fb5fac4fa94797c74900c2d2ba72af390f python3-test-3.6.8-21.0.5.el7_9.tuxcare.els11.i686.rpm 26d262c11f01b3bae8e9a163fea3adffc51fb7dc708745ce217097c7bceaec04 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els11.x86_64.rpm e1b906ab163eb33517daa53b5b2c6773f7811636e545260f2379cedd90d647f6 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els11.i686.rpm 06cd78517cb6628ac2199bc67492e168da2e0968fb3657a5766cad8f227805d3 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els11.x86_64.rpm 5ce87e60383f6aa140d0e3c5a52b1876ded676e41e4c632a7594092aad34282a CLSA-2026:1780682107 TuxCare License Agreement 0 - CVE-2021-3711: fix SM2 decryption buffer overflow; check the plaintext buffer is large enough when decrypting SM2; add extended tests for SM2 - CVE-2022-3996: fix X.509 policy constraints double-locking denial of service - CVE-2023-0464: fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: fix X509_VERIFY_PARAM_add0_policy() does not enable policy check - CVE-2023-2650: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt translates - CVE-2024-13176: fix timing side-channel in ECDSA signature computation - CVE-2024-5535: validate provided client list in SSL_select_next_proto - CVE-2025-9230: fix out-of-bounds read and write in RFC 3211 KEK unwrap - CVE-2025-69419: fix one-byte write-before-buffer in PKCS#12 BMPString conversion - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() - CVE-2026-28387: fix use-after-free / double-free in dane_match() - CVE-2026-28388: fix NULL dereference in check_delta_base() - CVE-2026-28389: fix NULL dereference in dh/ecdh_cms_set_shared_info() - CVE-2026-28390: fix NULL dereference in rsa_cms_decrypt() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3711: fix SM2 decryption buffer overflow; check the plaintext buffer is large enough when decrypting SM2; add extended tests for SM2 - CVE-2022-3996: fix X.509 policy constraints double-locking denial of service - CVE-2023-0464: fix excessive resource use verifying X.509 policy constraints - CVE-2023-0466: fix X509_VERIFY_PARAM_add0_policy() does not enable policy check - CVE-2023-2650: restrict the size of OBJECT IDENTIFIERs that OBJ_obj2txt translates - CVE-2024-13176: fix timing side-channel in ECDSA signature computation - CVE-2024-5535: validate provided client list in SSL_select_next_proto - CVE-2025-9230: fix out-of-bounds read and write in RFC 3211 KEK unwrap - CVE-2025-69419: fix one-byte write-before-buffer in PKCS#12 BMPString conversion - CVE-2025-69421: fix NULL dereference in PKCS12_item_decrypt_d2i_ex() - CVE-2026-28387: fix use-after-free / double-free in dane_match() - CVE-2026-28388: fix NULL dereference in check_delta_base() - CVE-2026-28389: fix NULL dereference in dh/ecdh_cms_set_shared_info() - CVE-2026-28390: fix NULL dereference in rsa_cms_decrypt()

0 tuxcare-rhel7-els openssl11-1.1.1k-7.el7.tuxcare.els1.x86_64.rpm f9b779108826b14020bbfc9b694c13afda70b5ca484f2ca3fc1f30052eb55758 openssl11-devel-1.1.1k-7.el7.tuxcare.els1.x86_64.rpm 3c38f53dbba4d8c21752b70af81912b8e04936f2787b1758708393000fb1e988 openssl11-libs-1.1.1k-7.el7.tuxcare.els1.x86_64.rpm 08eb84b15455449610462c4216157220ac1135721a2ee2af034877bade202f02 openssl11-static-1.1.1k-7.el7.tuxcare.els1.x86_64.rpm e8948978e75de189e65f482ca0e661f61cdc220f2acfd2ac339d71868d8a8f8b CLSA-2026:1779179106 TuxCare License Agreement 0 - CVE-2026-7261: SOAP UAF on SoapServer::handle header-handler failure - CVE-2026-7262: SOAP to_zval_map NULL pointer dereference Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7261: SOAP UAF on SoapServer::handle header-handler failure - CVE-2026-7262: SOAP to_zval_map NULL pointer dereference

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 6b6016abd330b45355c8ff2fa00c994b3ed4c054ba54d41f3ddf1a9ff39b3f14 php-bcmath-5.4.16-48.el7.tuxcare.els18.x86_64.rpm a8f95edb9a03a7c7702daddf5a7e3d229f633743181fcf05caef3acd5797b677 php-cli-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 8812a0094c7a8e7cc82f49bac3860018dde0cba75f125f46176db3aaa87b73fb php-common-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 5c5b0ab00737f6d9939f9427c7c02a7d3bcb787ced8f8fe0a580d7858beb4b5d php-dba-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 28424b873d0697ab1dfddb7a1f4c1b458072c26bfd0c856af8af403b23a43ac5 php-devel-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 09fdf04f39c66f8c18a6a461b20582a7db4c896a782a0562fb52a54a45e495e0 php-embedded-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 1546f9f8f4da4733e1841a5439a89580f091a1ebfecbc1d659af04e98b7adfdc php-enchant-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 9c86a14f401d884d44ceddb7ff7a13c578dcb4cf42af53f0e2c9ee3cf536b33b php-fpm-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 7389db835fab8ca2227e46a037f7a1c6e24e483285c983097a81924c9b2461df php-gd-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 28f5c2018f1783da6c0b49c966ddc3ce7f70627f2ede25bc8ac2fcd05faf1a6f php-intl-5.4.16-48.el7.tuxcare.els18.x86_64.rpm cbdb5afb78483f22a56ac2d5048a3e77ca206c69d3da358651d5920a5c2d1d39 php-ldap-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 4c246b5b21d32ab236b0b20316a20dd64c3d374d6b56b60d901a5565f6b5de63 php-mbstring-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 757b4173f901d49301c6522b7e15260e9f1af9750aca87030c9d91c68408922d php-mysql-5.4.16-48.el7.tuxcare.els18.x86_64.rpm d3b897e40bd3b941721f61ad82ab24cc599c6c40cbbf27f2198dfdbd132c0265 php-mysqlnd-5.4.16-48.el7.tuxcare.els18.x86_64.rpm cabfed5353d25ca4dc08622b6ddcc09490d20d17ebc27f852dc6130a2c8c659b php-odbc-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 2acdb3f7d1293afc580d19bff75e3a28bf8f5f5c5c3b4854980bd10406464bcd php-pdo-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 09b5f6e0a6884bc1f531fec0aba4c645bbce6483eb6daab2e58693a4c7a8b9ec php-pgsql-5.4.16-48.el7.tuxcare.els18.x86_64.rpm ebd3aa05a604ce94254fc8ea337272092af39746bbba3459f45f05bbbb10984d php-process-5.4.16-48.el7.tuxcare.els18.x86_64.rpm a03b2811aba6218a06aa64abfa83e42a43e26ee3c6cade0975663d9be6823923 php-pspell-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 3b5aeb1fc1b15c256f74ca74acfe7ffb2c684df41a88ba3496f11d4d51df0454 php-recode-5.4.16-48.el7.tuxcare.els18.x86_64.rpm de3a489a11c5399fbf57ad7031c27703029b08122b1a2c7427ebbc88219a7c4c php-snmp-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 932990559aa406f2caf21d8ab5d9ab0838ee30ab089a6a6d4d5f1cbcb2ece00e php-soap-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 070f5531fee5c101e734fddcb1a37304bd1dfa20803dca2d58880989d3b69201 php-xml-5.4.16-48.el7.tuxcare.els18.x86_64.rpm a5d6ad3a6351903a953ec1e8f62616a820a1fa21cec17e37874ccb162f7d3e3e php-xmlrpc-5.4.16-48.el7.tuxcare.els18.x86_64.rpm 8fc1926c02643148a35bc873c8ccdf9595138daf93bc7f900547e6f51a6a0068 CLSA-2026:1781606759 TuxCare License Agreement 0 - CVE-2026-46692: validate distributed pixel cache region on read and write to prevent a heap buffer over-write Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-46692: validate distributed pixel cache region on read and write to prevent a heap buffer over-write

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els14.i686.rpm 30b4d68437e244a168bffc484a27ab283e989de217f7d09e47f516c1c2f28a05 ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els14.x86_64.rpm 6ba32125ec911be98802e3823e2890f34d486eb66b137b3fe2eb40fbe6be119e ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els14.i686.rpm 19656734b9b7bbde582266d5c413596714ecbb8b2f67d0785984de5efca36fbe ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els14.x86_64.rpm 8ec382dbfa6bc2802470d08d08c3ac1a8bc4b48b109175c6d0dd5a5ccd67eac6 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els14.i686.rpm ab4e3ba9870091b02fb8e4034142b66050e6cdfa91e929cf401662f9594fc4d0 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els14.x86_64.rpm e10a011bb1c3d102b53a7a02f23ce657dd24bd82de2b5d680b1f94e80e25063a ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els14.i686.rpm 5e43ad24ad1d0c88c936e43818df03e7e473eff8441cfbac1cf08d5ab0ec683d ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els14.x86_64.rpm 9363ef576abccda7c62a4bf3b292e918cf7ed03dbe71de4c8e2849dc129dd79f ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els14.x86_64.rpm 8b5b9e33033226d8e4769673179fb4214e1648a26ad111b44060aae8de0c8624 ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els14.x86_64.rpm 277eb35209deea7f7f3c383b1b05663e032d2e91e1728926d0e1135015ed67d5 CLSA-2026:1781627270 TuxCare License Agreement 0 - CVE-2026-29167: mod_ldap: use-after-free in per-directory configuration — deep-copy the client certificate list (and referenced path/password strings) into the connection pool instead of a shallow header copy - CVE-2026-29170: mod_proxy_ftp: cross-site scripting in the generated FTP directory listing — escape href filenames with ap_os_escape_path() wrapped in ap_escape_html() instead of ap_escape_uri() - CVE-2026-34355: mod_proxy_html: heap buffer overflow reachable from an untrusted backend — replace hand-rolled buffer management with the ap_varbuf API - CVE-2026-42535: mod_dav_fs: deny WebDAV access to/within the .DAV state directory in dav_fs_get_resource() - CVE-2026-42536: mod_xml2enc: heap buffer overflow in fix_skipto — keep the buffer length (bblen) accounting in sync when advancing the buffer Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-29167: mod_ldap: use-after-free in per-directory configuration — deep-copy the client certificate list (and referenced path/password strings) into the connection pool instead of a shallow header copy - CVE-2026-29170: mod_proxy_ftp: cross-site scripting in the generated FTP directory listing — escape href filenames with ap_os_escape_path() wrapped in ap_escape_html() instead of ap_escape_uri() - CVE-2026-34355: mod_proxy_html: heap buffer overflow reachable from an untrusted backend — replace hand-rolled buffer management with the ap_varbuf API - CVE-2026-42535: mod_dav_fs: deny WebDAV access to/within the .DAV state directory in dav_fs_get_resource() - CVE-2026-42536: mod_xml2enc: heap buffer overflow in fix_skipto — keep the buffer length (bblen) accounting in sync when advancing the buffer

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els12.x86_64.rpm 163bb34a5c0d407a18833f2450345a5e47e961a70da942e33ad12187acd73f85 httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els12.x86_64.rpm 3b164ded5cefd6a3864ec0ebf1132030a942d656dc8e62157e4581f13b1fc6ce httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els12.noarch.rpm 0a0efef8990c51d19c33e127ce4cee28678a18f8a4bffce7e80b51874992a6a1 httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els12.x86_64.rpm b8d4eaae6b723e917b775ac22e54f5f053a48164bf030ee1f8d3022bb5d0455c mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els12.x86_64.rpm f3d93b8cb2d83fb3f6517be4379f3fdb2a584ef047835f4bc0a957d2889d5328 mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els12.x86_64.rpm b177504626ea6b39ee5e2de6d2274916a45b62187ee0c304a9dd08fe9773c034 mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els12.x86_64.rpm 886fdb2b235826150e2d72a12a8683491699216633493ee01cd46b1e7e79112e mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els12.x86_64.rpm 48b22086b6ae40f6efd0d07607d643a2e415aec5b3171ed679dc2d59c20b99ae CLSA-2026:1782140731 TuxCare License Agreement 0 - CVE-2026-46559: fix heap buffer overflow (out-of-bounds write) in JP2 encoder by bounding tcp_distoratio and tcp_rates option parsing to array extents Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-46559: fix heap buffer overflow (out-of-bounds write) in JP2 encoder by bounding tcp_distoratio and tcp_rates option parsing to array extents

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els15.i686.rpm b6e2c5daa76a73b8987b12380b0308683d3ab40226c4db65e4dde78317aa30f3 ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els15.x86_64.rpm c4e71f4ad0371e39bb1fb3677edd7f002de0219c7eeeed72245d12a01100a1b0 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els15.i686.rpm ab2548eeaf6b16ca432903020cbce1da66265b943af7612e5cd9b4330e22bccf ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els15.x86_64.rpm 4a89d80f24b4fe7cb7e23a4b4b46462b1c7925ed215b53582ef3e1a066e4d06f ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els15.i686.rpm e6f3fcd94479962d164b734af77fa1c672f28b22a146a38e7cd345ccd1e642ef ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els15.x86_64.rpm fdf4ddc0e499bb5cb7bca806592e3057fdb0809956f82cb611f8a329aea131b5 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els15.i686.rpm 2c4d229e6acb54daba668ff1f47f1fe76adcd21aa4149ad64792aaf3cc856777 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els15.x86_64.rpm fa6efb2afc0f83f55673ec037a6dc2f920bff37b73e77c8572510c78987fe598 ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els15.x86_64.rpm 6f678fb21c5667695e1dc4626be1060741cc7fc2a50547bc5c120a52cc65e7cb ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els15.x86_64.rpm cba7638d4fea7fc6129831bfee3136e3fd138d03ca5e8c9fcd6ef18d17bd345f CLSA-2026:1782213853 TuxCare License Agreement 0 - CVE-2026-49218: fix denial of service in DICOM reader by rejecting an image decoded with zero columns or rows Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-49218: fix denial of service in DICOM reader by rejecting an image decoded with zero columns or rows

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els16.i686.rpm 07e62e95acb116d10e5bef848e5940cd13ba09817063e6eb71c45a3324bc733d ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els16.x86_64.rpm a9ed820fa87b475f5d3209f7ec39714e67ef703f02c0d2f2e3e40c0c5245462f ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els16.i686.rpm 641fb74746ae29030a7ba0c5bdd028892758a0670d966ae86e95d82ab7e55722 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els16.x86_64.rpm 69026f934144ca8406cb893bfc6c30370d3c55f66b884a7fd6331b1346130f67 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els16.i686.rpm 03d38dd95aec93360e38a0199aa869190127ae612b51e30cbc8dfeb3dac52749 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els16.x86_64.rpm ee7c5adde61324953d988a181e0673c11ebbda632c34ed73a48c987055c121d6 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els16.i686.rpm 3c36df332d799de6ab3835575ddc8dc88e40d951773d52b836a5252ab885dfd8 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els16.x86_64.rpm fa691a25589b4f938db87f9b2390826516ea9d3312cdc369f5f33372b7f464df ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els16.x86_64.rpm 0b211c9f1455b0b72175f32fb771db882f321db9a98178c6eb772d039bfce76d ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els16.x86_64.rpm a011bd4af42de8f07333d6e4af882f36877a8c74e83ac8237d0cbb6371199dea CLSA-2026:1781209312 TuxCare License Agreement 0 - CVE-2026-45447: fix use-after-free in PKCS7_verify() when SignedData digestAlgorithms is an empty ASN.1 SET Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45447: fix use-after-free in PKCS7_verify() when SignedData digestAlgorithms is an empty ASN.1 SET

0 tuxcare-rhel7-els openssl-1.0.2k-26.el7_9.tuxcare.els11.x86_64.rpm bc1d1004f9ebddf7bdafab8360ac5999ff69aae4bec615d177fa7176b539ecec openssl-devel-1.0.2k-26.el7_9.tuxcare.els11.i686.rpm a53285df77ea7095f6b619e366300b07f57480b8dda7390941e03e76d72340f6 openssl-devel-1.0.2k-26.el7_9.tuxcare.els11.x86_64.rpm 3046c35b88cb83e223f486e40dc5704d9fdcc638e25c94f0b01f8ea713f0eccf openssl-libs-1.0.2k-26.el7_9.tuxcare.els11.i686.rpm fd40ea0b48628b8133a3018a3b555829e035b67b2fd1110fe3e4c30438e50acd openssl-libs-1.0.2k-26.el7_9.tuxcare.els11.x86_64.rpm dcb2669978d566b6fd3253da2a058c5e92b70c2e072ce58d80eeacedbc2ea356 openssl-perl-1.0.2k-26.el7_9.tuxcare.els11.x86_64.rpm 1b669f11a2677488f36c56e9c117c26291d1b77c2afae2d96052a206f87c8efa openssl-static-1.0.2k-26.el7_9.tuxcare.els11.i686.rpm 8b1035cfa63ab0cd902fc6eb50c6a2db62adedd598408d5cdc255fb6f955cd4f openssl-static-1.0.2k-26.el7_9.tuxcare.els11.x86_64.rpm 1f5c6b54d437acde260427a835efa9c27026458df67a733015d875083fa2ac9f CLSA-2025:1748365696 TuxCare License Agreement 0 - CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-42465: Make sudo less vulnerable to ROWHAMMER attacks

0 tuxcare-rhel7-els sudo-1.8.23-10.el7_9.3.tuxcare.els2.x86_64.rpm e61c9ac60d4ccbe9a04814011de964df41c34a2d725183bbe8a148b79c3ca572 sudo-devel-1.8.23-10.el7_9.3.tuxcare.els2.i686.rpm f770863b9e111b4fd0bdc863194b24187f5e7660b25385c43f77ebbdc296bb9f sudo-devel-1.8.23-10.el7_9.3.tuxcare.els2.x86_64.rpm 23869fcc0bf40a4eef7e3fc03a9ed5ff4691b4180d7e2fa9a1790575d2138ad2 CLSA-2026:1780564889 TuxCare License Agreement 0 - CVE-2026-35535: make privilege change before running the mailer fatal to prevent privilege escalation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35535: make privilege change before running the mailer fatal to prevent privilege escalation

0 tuxcare-rhel7-els sudo-1.8.23-10.0.1.el7_9.3.tuxcare.els3.x86_64.rpm 1ef3c488cdfb9fcd57e4c8db3e4f37a44cbec020480873f241303b11e97f1d48 sudo-devel-1.8.23-10.0.1.el7_9.3.tuxcare.els3.i686.rpm 11e032614a3fe3c99e3d6b9f1a85ceb26f06405d9773e54612a097c97a9c3316 sudo-devel-1.8.23-10.0.1.el7_9.3.tuxcare.els3.x86_64.rpm 39856fb023c8d11e3b6db2a93fef640e2e15064fae4ae9f5d95ff76eb3f827aa CLSA-2026:1781252690 TuxCare License Agreement 0 - CVE-2026-7210: seed Expat's hash-flooding protection with a full 16 bytes (128 bits) of entropy via XML_SetHashSalt16Bytes() when the loaded libexpat provides it (detected via a weak symbol), instead of the brute-forceable 8-byte XML_SetHashSalt(); the pyexpat CAPI gains a SetHashSalt16Bytes pointer appended at the end of the struct (capsule magic unchanged) and _Py_HashSecret_t gains a 16-byte hashsalt16 field. Both call sites fall back to the legacy 8-byte API when the salt is all zeros (hash randomization off, the default) so Expat keeps self-seeding. Paired with the libexpat CVE-2026-41080 backport that exports the symbol; requires expat >= 2.1.0-15.0.7.el7_9.tuxcare.els3, the release shipping it Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7210: seed Expat's hash-flooding protection with a full 16 bytes (128 bits) of entropy via XML_SetHashSalt16Bytes() when the loaded libexpat provides it (detected via a weak symbol), instead of the brute-forceable 8-byte XML_SetHashSalt(); the pyexpat CAPI gains a SetHashSalt16Bytes pointer appended at the end of the struct (capsule magic unchanged) and _Py_HashSecret_t gains a 16-byte hashsalt16 field. Both call sites fall back to the legacy 8-byte API when the salt is all zeros (hash randomization off, the default) so Expat keeps self-seeding. Paired with the libexpat CVE-2026-41080 backport that exports the symbol; requires expat >= 2.1.0-15.0.7.el7_9.tuxcare.els3, the release shipping it

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els9.x86_64.rpm 3e069353b808ab50a1c5c3679bd9a48f75971d764f51704eb747161422870893 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els9.x86_64.rpm 2d9f79968d7173e26538bef77ca0375e4941a827cd7d34b0714c881e57ec39bf python-devel-2.7.5-94.0.1.el7_9.tuxcare.els9.x86_64.rpm 8774df532a6484d0c64fb7de9073f3f2321a3fb056a5502c0ecfd47ef3fff3d7 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els9.i686.rpm 1ef6e0a70c9d957e78098ff3c927fdd088eaf8f802ee5e24fb213786c74794af python-libs-2.7.5-94.0.1.el7_9.tuxcare.els9.x86_64.rpm a094eeed4f26950807aad89b50a02dc2b98a7e0b17f05c88c0f44808ee70744a python-test-2.7.5-94.0.1.el7_9.tuxcare.els9.x86_64.rpm 9bdd3c4b0fedf7c71e27a1859175faa253f11818969ef6b4a5a21f1f215a8cc2 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els9.x86_64.rpm 1eb69aa5d4af487f823782acfdd7a51b3c6d6386e9b7d195ad7a45116367ef44 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els9.x86_64.rpm 030c0bcfb31ce46515b0d4165952208ee7fa7f51916779685b2e3bb8e4aac0b2 CLSA-2026:1781527577 TuxCare License Agreement 0 - CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values - CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output() - CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow - CVE-2025-13462: skip TarInfo AREGTYPE->DIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0672: reject control characters in http.cookies.Morsel fields and values - CVE-2026-3644: complete CVE-2026-0672 fix: reject control chars in Morsel.update(), |=, unpickling and js_output() - CVE-2026-4224: avoid unbound C recursion in pyexpat conv_content_model to prevent C stack overflow - CVE-2025-13462: skip TarInfo AREGTYPE->DIRTYPE normalization on GNU longname/longlink follow-up headers in tarfile

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els12.i686.rpm 483826fad48c6b3b6c21dd150b8fb563c55b0f7dacc747e8b5f2f9c86705ea72 python3-3.6.8-21.0.5.el7_9.tuxcare.els12.x86_64.rpm 65679b38f9c1d9857e5c670d31d679fe34c514a941d1c641495436f0031437f4 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els12.i686.rpm bcf6ca00da7cd12d98113fc2eca1263b6d84896ee186568215b26de1608a9a16 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els12.x86_64.rpm eab18843ccf2fd34b3e4ddf5d0dd88d87182831b4bb94bd40abf809c995ecb23 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els12.i686.rpm f0ea79aff1d30eaea635d92165cb5cb8d7644723fcbb7d1bf0200f912e1fcdfa python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els12.x86_64.rpm 7d405dd373fe76707c572e58b8b4797f9dac67185562ce722391be1fc4f4fd5e python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els12.i686.rpm 9da04ce04bffbaa6fe81a7aed49f95b5a0c0d4991905be7324f1ad0bda9f5f8e python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els12.x86_64.rpm e2ecf532ea4a37e33ee7a9526dc087ea4a1f0e7866d312a4a62535edbaaf09c2 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els12.i686.rpm 8c802d07e21ae710f9ee25fb1785298ad4e67d9f885a5512433df18f8421b854 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els12.x86_64.rpm 47c0f118f8e06553d2f184cafb6748712838eea468ad04a785582f24f189b253 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els12.i686.rpm 2546126d7a107a3586fd7e319dbb87daf4826d986372765033998f7244af5e1d python3-test-3.6.8-21.0.5.el7_9.tuxcare.els12.x86_64.rpm 2cad84e07032d64f3e9422141f9e37832425dc8eba10c8cf0d46c3420a0b8496 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els12.i686.rpm 2de34a54ceb58c5e74943f1f982dd11eccc6f64f4d4855528a2dea907729f104 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els12.x86_64.rpm 6766ef4604167f8cf178e4aef4ed9ae8705c767c1e9de4156af63dfb533a957b CLSA-2026:1779957589 TuxCare License Agreement 0 - CVE-2026-42960: fix cache poisoning while following delegation - CVE-2026-42959: fix crash during DNSSEC validation of malicious content - CVE-2026-41292: limit incoming EDNS options to prevent DoS Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42960: fix cache poisoning while following delegation - CVE-2026-42959: fix crash during DNSSEC validation of malicious content - CVE-2026-41292: limit incoming EDNS options to prevent DoS

0 tuxcare-rhel7-els unbound-1.6.6-5.el7_8.tuxcare.els6.x86_64.rpm 31971f456aaae8792f4794b91e4d3e8aa34386bed06e59375c6b767e6f6afa93 unbound-devel-1.6.6-5.el7_8.tuxcare.els6.i686.rpm 73ce3acc14714eeb73e9ad9018fbb9dedbce27f5c56e9b9f44945a3888021e66 unbound-devel-1.6.6-5.el7_8.tuxcare.els6.x86_64.rpm 7e5c0c9e2f5ee4f5ce0f1f64ed0a340f007202e2fe2568d6900eb5c633c8f198 unbound-libs-1.6.6-5.el7_8.tuxcare.els6.i686.rpm 0eec79f743bcea72dff8b8cd2fa6bde083e72bdaa50fee739e1a614eb56447f9 unbound-libs-1.6.6-5.el7_8.tuxcare.els6.x86_64.rpm cc1067f424b3a6d00e9041b2aebc072aaf7d3748dddee86a2cbfaffd8edf5ecd unbound-python-1.6.6-5.el7_8.tuxcare.els6.x86_64.rpm d42f848eb956880c3e94ebf6f926e82953713aa8bc30965cf02978003347e4ba CLSA-2026:1780388397 TuxCare License Agreement 0 - CVE-2026-41035: fix use-after-free in receive_xattr() qsort by using post-filter xattr count Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41035: fix use-after-free in receive_xattr() qsort by using post-filter xattr count

0 tuxcare-rhel7-els rsync-3.1.2-12.0.1.el7_9.tuxcare.els8.x86_64.rpm aedc0489f01a343b7b415ceabc878c0de2ce9b00f26ea9771a11383d0cef7fae CLSA-2025:1755708467 TuxCare License Agreement 0 - CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-24928: fix stack-based buffer overflow in xmlSnprintfElements in valid.c - CVE-2024-56171: fix use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c

0 tuxcare-rhel7-els libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els6.i686.rpm dc864906be4101dd04d6fca279fb967d0978fe79d7d33618393d55a7fa8b2f2b libxml2-2.9.1-6.0.3.el7_9.6.tuxcare.els6.x86_64.rpm 13bed8c486ec8cc68cd4a856503df78d2461e3b85aef2b8cec9ba6434f1b8888 libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els6.i686.rpm cd87b220ed78e346326fec3a0d2f2a207928612b817a6f0a7a22214583a9f65f libxml2-devel-2.9.1-6.0.3.el7_9.6.tuxcare.els6.x86_64.rpm 36d81b5411d789cd208616c07705a2893804ead35cc48f9e29ff4e22d3b9d80b libxml2-python-2.9.1-6.0.3.el7_9.6.tuxcare.els6.x86_64.rpm 4033af7c80c08d66d416624cb0f866d61482cd06e609c8cad04b2401e84d1d0e libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els6.i686.rpm 9aafb1856f0dbc8271420e3016a2f4f3d70795a586577437839fab67d6324595 libxml2-static-2.9.1-6.0.3.el7_9.6.tuxcare.els6.x86_64.rpm 9b2a256ccb07a10b1d61f6942f3ef98fb2465dd1714083cc4bd709196d0ef57a CLSA-2026:1779992757 TuxCare License Agreement 0 - CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9256: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures

0 tuxcare-rhel7-els nginx-1.20.1-10.el7.tuxcare.els3.x86_64.rpm f85cfb94808691dd199f0e02e45cc41aad1d9ce5c2c5a9f017e1e0eac05cee76 nginx-all-modules-1.20.1-10.el7.tuxcare.els3.noarch.rpm 76152b308e54203984302e83fd754010c78118bb42d6c456242d947d15b83f32 nginx-filesystem-1.20.1-10.el7.tuxcare.els3.noarch.rpm c20e455e2094708daff30cfcf00e4cd3dd899d1d889cd530b921a891b05aec62 nginx-mod-devel-1.20.1-10.el7.tuxcare.els3.x86_64.rpm f0853d7f0dec1ca90bc3bda3da2de71768c24198ca537c5926279878271d5686 nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els3.x86_64.rpm 5ed434cbc8a13025e80a1ad896ef3af28d74d97b08895bda139ec63df523dcf1 nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els3.x86_64.rpm 73c4dd8fef39e278e72738ab1072bf34e71c009f51e5f899e2d08395fe42182e nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els3.x86_64.rpm 3064c07b1161f6c1dad74412d9c28e5e0c33ecd6c1296aa5596b8ea698e4da1c nginx-mod-mail-1.20.1-10.el7.tuxcare.els3.x86_64.rpm 769e180fd328dc68f44c02c52d78dc0f46ce375c58e4e883377c5da077ea4899 nginx-mod-stream-1.20.1-10.el7.tuxcare.els3.x86_64.rpm f95c7583433b50e97300616dc3f67a52617fc7451571fd1414c724df4d9ba1ba CLSA-2026:1780971959 TuxCare License Agreement 0 - CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS) - CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3039: fix GSS-API resource leak in TKEY negotiation that could cause memory exhaustion (DoS) - CVE-2026-5946: disable recursion, UPDATE and NOTIFY for non-IN classes and reject ANY/NONE meta-classes to prevent assertion-failure crashes (DoS)

0 tuxcare-rhel7-els bind-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 03162f2b6a138f434585ba1f2d54c78fc1da5d1726c91b2187a1067a5e8844af bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm e8716f91d069c15278c10eb475861d98cf85b0d0b7c1f933b16250c2f5a2dd46 bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els13.i686.rpm 36285d705448e07c7434e5fb7a19a148689cb649896fd07ff45b68aaab3580ca bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm d4aad4daf19d47caaaee8614bd894201b0aa3e7a02f71773540222c078b975f1 bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els13.i686.rpm b0e857c7c6f3c616de597e4afc54ecba9f028d13a5aa1d78e28adfdf38fac05e bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 617f8b8dc16a88a7de51628fe674bb76608542746bf3d9bb3c4a65ac5a22c116 bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els13.i686.rpm 94736212e56f885d64fa67ac00976922fd63368a0854206b377f43979d1217b2 bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 74250dc75026670c18935d9f42aa8fc6a52a756e3f26e02b7e8ec6038fbd98f7 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els13.i686.rpm 826e20d92c03d3e413287ea4ac67d50a6c3b162a117eb14e2ae47d4aec64e1ba bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 4b6cd07ac66bf6544e596abc31b6bde5407114c82a40f863278953f81931368f bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els13.i686.rpm ef20c8bd76f9120d66da051cf96857591f4811272a0f248577ad46b77aa65ee1 bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 342b3a61e69264880aa5d471fc321009b124c09cb3bc03bb9c13fb0ec99eecc0 bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els13.noarch.rpm 14ed2f239ee494d6d9d80a907919091c9a9ecca192d55025017f31674203bf9e bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els13.i686.rpm 6c4860bc15a7c99b31b3dfb279f77093646f12f2c0ba6fd571eb325ea780ba8d bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 164c150cb09efc5002823efff1cdb3fd2200df2a841580fe48cce074aa3372c8 bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 3ca0c3a0e53777ad68a2c309a5120adc2c7c2880bfbe7dde118071d72293d239 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els13.i686.rpm a616246a08088294c93e0e534eb8dbc275fc35070bed4e6b81135df89bea0388 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 58789fb93e169fa8a7955cb804e53ffbef500cac7f0f9d48549744b176e92ba0 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els13.i686.rpm ea620df65f348a5cf8babda6e1acb8583e38d7fb776fdbed8314e32aa7fbe7a6 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm f08f4a224500a44a7e57e4ee95750d61eb96e0da1e08e884f35afdde79e27416 bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm be35c038686a10cb80bcb94da26428bcce8449114bdfcfdb9462eb4a450f4cec bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm 33e0d6e29d18767b462e4ebd0e916531a2e2f66645feeb77bee8256e577a3753 bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm d58f40a79edc92f1e404071d4a3322584357c60a305182799a990c63c11836b0 bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els13.x86_64.rpm fcd0499c2a13c859ff8d7493f12ac2e88a3a5ef4b96dc691e83ee3334ca44d7f CLSA-2026:1777463367 TuxCare License Agreement 0 - CVE-2023-27533: telnet: only accept option arguments in ascii Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-27533: telnet: only accept option arguments in ascii

0 tuxcare-rhel7-els curl-7.29.0-59.0.3.el7_9.2.tuxcare.els2.x86_64.rpm f5f2278724eddf317df5fbb09c71b3d974cfc60969b5a4d429c8f280bdfd24d6 libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els2.i686.rpm 69b649191d5c6b6a4c5bde7f63335132e9cac77970acc0e3227c50e3a2c828a4 libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els2.x86_64.rpm 2694a32fdad3685fdc67738ee8ff80c5bb244edcd1b945d55b80d6e06583c8bb libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els2.i686.rpm 3b3ae3508c4a9e30f890783bef6f4cfedfd812f25ab28809f0e205dfdcf0fce3 libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els2.x86_64.rpm ef24208f39ca50e941814f78128a65b10d1515c8d1a0989764c9735261a56e1e CLSA-2025:1755617495 TuxCare License Agreement 0 - CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-55549: fix use-after-free issue related to exclusion of result prefixes

0 tuxcare-rhel7-els libxslt-1.1.28-6.el7.tuxcare.els3.i686.rpm 35ff27503a5ddfe6d2c48830e360adf2d33463ac87b8e49e3164284f60feb7e7 libxslt-1.1.28-6.el7.tuxcare.els3.x86_64.rpm fb91423b32d8c690a68278e734c847c8dce7f14aa1e0db60faa9532dadfaf18c libxslt-devel-1.1.28-6.el7.tuxcare.els3.i686.rpm 29340f8ca8426ded1c91e95dab6d8802bf57862035ade965ea9d2557fffc9cac libxslt-devel-1.1.28-6.el7.tuxcare.els3.x86_64.rpm 8ec92f80176941734a3c8d4b5d5c79d089a20183e4d5d93cc936a653a235b50f libxslt-python-1.1.28-6.el7.tuxcare.els3.x86_64.rpm b49cc9cb045741116aeb63890bc819b2197043d5e86a9e13e5cd514ac7f3e4da CLSA-2026:1779215547 TuxCare License Agreement 0 - CVE-2026-27447: fix authorization bypass via case-insensitive username comparison in scheduler Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27447: fix authorization bypass via case-insensitive username comparison in scheduler

0 tuxcare-rhel7-els cups-1.6.3-52.el7_9.tuxcare.els6.x86_64.rpm ed0ab2c790256b9a48bd412a2479e220257b4bde1d9e05fb8743a2bf652c9afb cups-client-1.6.3-52.el7_9.tuxcare.els6.x86_64.rpm e1e4325bc6e532c7cbec177892b820c70e33b9ae9493b3dd569f7d46d2a15778 cups-devel-1.6.3-52.el7_9.tuxcare.els6.i686.rpm fa0ce4eb7f6cbe81ef7006b827c856164fa0e19a1e0d8b825d20297509a97559 cups-devel-1.6.3-52.el7_9.tuxcare.els6.x86_64.rpm 0a92eb242e28f8f0a0ab4ebe4162ff300299f25abed2d8765f8da1f7dd737395 cups-filesystem-1.6.3-52.el7_9.tuxcare.els6.noarch.rpm a1acca865cbae020a321c655b39e73cab12f90404eaee70b05b3a951af2c8a4c cups-ipptool-1.6.3-52.el7_9.tuxcare.els6.x86_64.rpm 177fe0b73dad49987b410200864ec88d5aee73e78d97576f04f8f6770a2ff969 cups-libs-1.6.3-52.el7_9.tuxcare.els6.i686.rpm e62802a84d42cd0551b2af418e29eb795bb69f586af995512d9c4c74dc343c6f cups-libs-1.6.3-52.el7_9.tuxcare.els6.x86_64.rpm b6032313d80439fc576487bcf03e5537a2b70e5f4dd18b8356263a9133d2f61c cups-lpd-1.6.3-52.el7_9.tuxcare.els6.x86_64.rpm 10f99f376cf8fecaebe8676703c53327b66dbd41d30860b421d9e6807e19bce7 CLSA-2026:1781607534 TuxCare License Agreement 0 - CVE-2023-29469: guard xmlDictComputeFastKey against namelen <= 0 to prevent out-of-bounds read when hashing zero-length or negative-length keys - CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered by malformed XML when default error handler interacts with freed memory - CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it cannot overread the buffer when scanning for newline / carriage-return - CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-29469: guard xmlDictComputeFastKey against namelen <= 0 to prevent out-of-bounds read when hashing zero-length or negative-length keys - CVE-2023-45322: fix use-after-free in xmlNodeDumpOutputInternal triggered by malformed XML when default error handler interacts with freed memory - CVE-2024-34459: bound the backwards trim in xmlHTMLPrintFileContext so it cannot overread the buffer when scanning for newline / carriage-return - CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely

0 tuxcare-rhel7-els libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els5.i686.rpm ebd3cc8ef86992455da35dab560d2be722f32c84c367b532b74a248f8476e05f libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els5.x86_64.rpm dfca955f7eeb5d9482727771ebaaf9dbf6b9fcb3a4e4b8b02b0e2c3cd2a1f404 libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els5.i686.rpm 4118f00dd15d163b172ca6c94f33427ac6152ada16e9096bd808156456f14c4c libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els5.x86_64.rpm 16af94f0925ddd3ccd93aed3d3726fa0a2d5dbfba8e0bc03ed2eaeec695b9c20 libxml2-python-2.9.1-6.0.11.el7_9.6.tuxcare.els5.x86_64.rpm f3fb6f3d0370f936042e93aebee734199e06e4ffc258871f3f634af0ea9519e1 libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els5.i686.rpm 36c2d63f2b1922816e5e3015c9d54244300e30a27af8ec99750af95c08db5d28 libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els5.x86_64.rpm e6d5616dd4f16f850cf0b2374be733f71987b253f1ccdb314ff7a86931f0f090 CLSA-2026:1782808833 TuxCare License Agreement 0 - CVE-2026-53460: fix unbounded memory allocation in AcquireAlignedMemory() leading to out-of-memory denial of service Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53460: fix unbounded memory allocation in AcquireAlignedMemory() leading to out-of-memory denial of service

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els17.i686.rpm 2fb9f7f5177676bcb43b0412d9f3643a5980ffd71ee8bd4de23477eb5f71814f ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els17.x86_64.rpm f24fcb980fed230acf7727bf46ea2f7a4fa414add470cbd94de261dfa06c720c ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els17.i686.rpm 0e873d6b256e1b31cbd3e00c1b146b8d816b90d721f91cf225f5cf7f2f8d3352 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els17.x86_64.rpm 85d2ec1946f492a736eb467ac7494babc206b2f2bc198ed7c09e63724fc7c1a5 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els17.i686.rpm b38d9326b1ac534d0366830a7123ae4122f6c3db2988d8e0fe90725e32959708 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els17.x86_64.rpm c490e776d385e05845edec1cab1490dbdebdc99d514d8bffc7e466953eae9485 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els17.i686.rpm a00a4d63ae448729ca40cbdca27670b34a0e996589dffb22b113e543e1f9b01f ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els17.x86_64.rpm 2bd4f6c7d5612c47859bd34d32aa1f6d9bc4be9f68f2051e314a50891312c769 ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els17.x86_64.rpm a495d0c19320ad65aac46aaef1cc56c38317e4589987efcc0941ea7dd1327fa9 ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els17.x86_64.rpm b5f385637e6d5a93cd19f4ad53cbe374741e6a9af18da48178e1aa6bc896c43c CLSA-2026:1782988187 TuxCare License Agreement 0 - CVE-2026-4408: escape/mask client-controlled username before %u substitution in 'check password script' to prevent unauthenticated remote command execution; restrict _samr_ValidatePassword to DCs Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4408: escape/mask client-controlled username before %u substitution in 'check password script' to prevent unauthenticated remote command execution; restrict _samr_ValidatePassword to DCs

0 tuxcare-rhel7-els ctdb-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 792d05e5520402646d0752f148f6f2618a8edc813d140b0c5980f6c373f94f33 ctdb-tests-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 6189ee11974a309c44aa4927b827816b9010eb5a98577e3bc1c4bd7108c64268 libsmbclient-4.10.16-25.el7_9.tuxcare.els11.i686.rpm 0911b7deefac7961bf94e5da62542116456660e4c2aa6cf57ffb8c1a907b2cf4 libsmbclient-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 330b163d0669c60dae49e4d6ae31d595436b1e6bfc3d35dadc37d2e032d7e350 libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els11.i686.rpm 2d84fcd4a73fc2b4c9504cf5c0b199125e88f5a55068ee37534224d675fd63d1 libsmbclient-devel-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 4710d3626266e7653199ca28233be343f9d60410a9a2225db66790c5d0585e41 libwbclient-4.10.16-25.el7_9.tuxcare.els11.i686.rpm c3e0392640c4c874665c1d89ebbe70b903bd0ef49b866107c4cf14c2aa5fc159 libwbclient-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm e682911e41001c987dfa25809e0e6e1c23cf14309f18bb1aeb6f54d73eba3bee libwbclient-devel-4.10.16-25.el7_9.tuxcare.els11.i686.rpm 31907cbc78224664aae1b8c4124a4b2e8fb7af61dd62eeb5546edeacd522f492 libwbclient-devel-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 4d7eddf40c3d7dbfaeaf3178e14139773eb6d3b98ce9b26bd6cef689845fc9cb samba-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 466286e88ebadd8dedcb5e3e7fec60f6fab9a410d72620521c1a5e7f71055ae5 samba-client-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 52420d9d80e2932767f00188735183b9d1d6922e9c2c1df4a9e2aceedc4e3160 samba-client-libs-4.10.16-25.el7_9.tuxcare.els11.i686.rpm 4eef4a174adb57b602039cdee8f7b4d200b21afa71c58832454e05419a7ede35 samba-client-libs-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 3432fbe5feceed9f61da8a214d0623709ee3838d8209489fc7c1a9140f3dfdac samba-common-4.10.16-25.el7_9.tuxcare.els11.noarch.rpm 187cb910b3d2d91d0f4edd8158931d502f042585935e85604234525a4cab2a04 samba-common-libs-4.10.16-25.el7_9.tuxcare.els11.i686.rpm 8247c16f6117e4e13bea6c6563ba4ef8ea756bb56c3ddbcdfa274812aa9d6efa samba-common-libs-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 9bfbc5292cd542aaff77228260430d4b3187869df11963db4dfe217ca6f59ccc samba-common-tools-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm e0b2d984c103f2fbce44a544345a8b8f8914dc26dc3f30ad4888868a63367e00 samba-dc-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 628ec901a099234bc007db0a107427b21f9be0e7474315feb0d1d3ee4703a446 samba-dc-libs-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 3e73122bc2b7b73d7bbb84b76aacde48b8f09dd402794355bda9e52569c753f7 samba-devel-4.10.16-25.el7_9.tuxcare.els11.i686.rpm a3349816a72de35f22384189bbfdb408141e1ba5268ef170902a0963a4bbf032 samba-devel-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 1da7b6ebf6a4738de447d9a84ef7ea0957339abbbc970f8f44e33fdf8fab8958 samba-krb5-printing-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 6800298e42952d5cfd806285fa0cb7e11fefd3280d3845888d499c548c29b6f6 samba-libs-4.10.16-25.el7_9.tuxcare.els11.i686.rpm 8b1760f8539d4222e285fa067f12b3a08a76d5e436027785c6fc3cc2ff1439e1 samba-libs-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm e03e983cfbc97c98342b4ac4354eb99ccd238a189c12ece83d427945dcc3e5a1 samba-pidl-4.10.16-25.el7_9.tuxcare.els11.noarch.rpm de7d95454b5a763b2f5f93b0edab53a5cf9abc7bbdae7bcea34fd14c0ee17cb5 samba-python-4.10.16-25.el7_9.tuxcare.els11.i686.rpm 776ddb6bd2a90c685f1073c10fc60546ccda6f71583167951df55aa745279ad4 samba-python-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 6dd84981513ad6ce086c818a62c431305163ca902edb32debac459b53bfc2bb2 samba-python-test-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 116b78c1de17d89e81aedf05dcc34722fefd0e74280f8b76e0e07083fa7078a0 samba-test-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm cd4d4551ed04e3367859c3c5931a3a6d9e6921307d35e9ef6c6abecce434d168 samba-test-libs-4.10.16-25.el7_9.tuxcare.els11.i686.rpm e49624c87cbad792d95acf387519d08775a6232e774512ccff10dce26594d8b4 samba-test-libs-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 0eb45a0c6cbc0e9fac46511f8380de7b77ad7ee33513b98cee8453881e4eb826 samba-vfs-glusterfs-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm fbbdc31c37742812f91451c71709b43d62203035d765efb1a9471a5c268c9898 samba-winbind-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 497beb351d6ad93e1a9ba806869b82c147d281b0e7ecc5ebf6d337d688fb6618 samba-winbind-clients-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm abef1228a36cbfd7f53aea6b9631904e616f21047eb3b2efd97d3aac5bfdb866 samba-winbind-krb5-locator-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm d592b31e2fcb1806bad06517fd94798a4dcd30c501022d351abbe37000892a1d samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els11.i686.rpm 11ba2aa930f369759e9c2c26936a44a96f62f61d7b5d63497ee196d2b90684ba samba-winbind-modules-4.10.16-25.el7_9.tuxcare.els11.x86_64.rpm 9582c25b8008b0b65ec9c7436c37a8b9831f92c3bbcafe3ee7f9dc9311400857 CLSA-2026:1778662869 TuxCare License Agreement 0 - CVE-2026-2369: fix integer underflow in sniff_unknown() on zero-length buffer that caused an out-of-bounds read in the content sniffer Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-2369: fix integer underflow in sniff_unknown() on zero-length buffer that caused an out-of-bounds read in the content sniffer

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.5.el7.tuxcare.els6.i686.rpm fc56d7c17e2ff9510f829edf32f25817d5d1a696f18820fc940da5774568c4b6 libsoup-2.62.2-2.0.5.el7.tuxcare.els6.x86_64.rpm 9250f023674a40766bb228bd77a92d7bc43ffdd92db833d1ca8ad9feed5f2ede libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els6.i686.rpm 85fe2c9049dec7de8e4baf6214413eef59c09458990976860545afd7d8edcbee libsoup-devel-2.62.2-2.0.5.el7.tuxcare.els6.x86_64.rpm ec4898d51d56247b7ff0a6aa10101b622160c903d4d7a3750be8088ec9fd9791 CLSA-2025:1755681299 TuxCare License Agreement 0 - CVE-2025-27363: fix OOB write when parsing font subglyph structures Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-27363: fix OOB write when parsing font subglyph structures

0 tuxcare-rhel7-els freetype-2.8-14.el7_9.1.tuxcare.els2.i686.rpm 3895cdf3e8500d8d12517933d5b2d42e850eeeb32a8cc2275a44786407f20c04 freetype-2.8-14.el7_9.1.tuxcare.els2.x86_64.rpm 55c5e3a154785ba6c407dbc1f2e1b68a0b192ca66e1bbc55946230a56bae49ee freetype-demos-2.8-14.el7_9.1.tuxcare.els2.x86_64.rpm 2d839fee9a0572a392930fbdecbedffb531101a99557f9d523104dd1b38265b7 freetype-devel-2.8-14.el7_9.1.tuxcare.els2.i686.rpm c97db6f24f18a35a8b9e1e1f18c7c791ba6df5618e82760d30f463f03874319c freetype-devel-2.8-14.el7_9.1.tuxcare.els2.x86_64.rpm 294fc2b91bac1219a32efe9fac1726fde7632dad289a7d2153c4e33daf8c32d7 CLSA-2025:1755512368 TuxCare License Agreement 0 - CVE-2023-4408: reapply patch without dns_name_t ABI change. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-4408: reapply patch without dns_name_t ABI change.

0 tuxcare-rhel7-els bind-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm eb43fcdc9733fb75b6a643cc54bb4b1bb4f52d7c45be4fc60d85ee64c3ed8e60 bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm c866e03e0661ee4321d06b7390028eaddc913251ac1f9cee8749261224069dfb bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els10.i686.rpm 5a1f7efcd56dfebc6cd33ea1dba08a75ffa8640f0e967b7b62ddaa52732f5d7b bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm ac9faca3936d40870b8f329f7c8f9385e37e8ef8554c178ad242b2e75b5127dd bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els10.i686.rpm 308c33133c9a440a1bd628c89f1b4ae19b5af743805200e63688455e608d004a bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 7809275bf5ebd9654521f57d269841f53a48eaa02afa3b5d73dc3dfb70caea60 bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els10.i686.rpm 633db18bbb8e49c58e389bd0676793c5061d333a4bdc1b1a5d64e5345b0aeedf bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 89b1f8eaa65a91f76231f6e7f48a6bc4fc8a775de13ddca6663cf23ef1adbc54 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els10.i686.rpm 11aa8903f5622a56649ff1331a161bbbf01bd287e6f3052ec2651e3256f1e83a bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 39dbcb726e16012c2d12afc8f8167db82f3f181c544e01519d9e55fe13c7bf2a bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els10.i686.rpm 39eec3321ccb1337364a87e6e06f76c5fe8c87cfefb349578d464968c14efd0a bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 4ab29abc1185cdd691aded93d0f00c8b948faf02133822da782449d67a9f03a3 bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els10.noarch.rpm f378f7e0453277d5cd048f68408ad9b20df4a171dcbac92dcc909ad76f3c513b bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els10.i686.rpm a72182ba60016b4fa7b3aa9743379203a9189553139fc2c2a57c4c7a90af2d94 bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm a56534c43e07d4d2ebaad82b2cdec9b654202d376c732a9e7b44296097d6fc7f bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 3ae7b8f32271e0cdbf03dce9944c4135492b4e6f9b2c57909f2cf686cdaa9035 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els10.i686.rpm ea1409d6315539f55e52dabc727c621dd9cacd76f92491b69a2e7ac76c8c44a9 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 6a7c32b08a213916ebffe6675935a410da66c69af892271f8120fa5daca92242 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els10.i686.rpm dd013392a623d477049b33f69f99c3c2f6ee44af2475e4fb087f5644101ec204 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm a3cbca979f2a98453cc90f1b0f1fcf2992db1875f44fa70b938bf876a26b46f4 bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 540cb100891f15026fc407fde3e9f0a1f0054edd2f41e52ff81c1b2375dca6e0 bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 6aa3fbd830efd49fecc12cb90d7ab0c85d715f69f03eb9fa8243ee2d1cd7154d bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm 0553add7e76025be498a48050b46b376196080a2a42dfb05a8279ac7aca11a4a bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els10.x86_64.rpm ccc33f71a7d25f16ba8549f6526574fdde545c45377a477218f9d7047a80d0d7 CLSA-2026:1777469554 TuxCare License Agreement 0 - CVE-2024-12086: prevent server from reading arbitrary client files via path traversal - CVE-2025-10158: fix invalid access to files array in sender - Add upstream stability fix (RsyncProject/rsync PR #706): use-after-free in generator - Enable Amazon Linux 2 ELS Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12086: prevent server from reading arbitrary client files via path traversal - CVE-2025-10158: fix invalid access to files array in sender - Add upstream stability fix (RsyncProject/rsync PR #706): use-after-free in generator - Enable Amazon Linux 2 ELS

0 tuxcare-rhel7-els rsync-3.1.2-12.0.1.el7_9.tuxcare.els3.x86_64.rpm 1ca3d098f1f2ed42e5d06fa5d615ec41b68ab0cc7c8900c65b7b62a386c57c13 CLSA-2026:1777046565 TuxCare License Agreement 0 - CVE-2026-33900: fix integer truncation in viff encoder leading to heap out-of-bounds write on 32-bit builds - CVE-2026-33905: fix out-of-bounds read in -sample operation via sample:offset define - CVE-2026-34238: fix integer overflow in despeckle operation causing heap buffer overflow on 32-bit builds - CVE-2026-40310: fix heap out-of-bounds write in JP2 encoder on invalid sampling index - CVE-2026-40311: fix heap use-after-free reading and printing values from an invalid XMP profile Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33900: fix integer truncation in viff encoder leading to heap out-of-bounds write on 32-bit builds - CVE-2026-33905: fix out-of-bounds read in -sample operation via sample:offset define - CVE-2026-34238: fix integer overflow in despeckle operation causing heap buffer overflow on 32-bit builds - CVE-2026-40310: fix heap out-of-bounds write in JP2 encoder on invalid sampling index - CVE-2026-40311: fix heap use-after-free reading and printing values from an invalid XMP profile

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els12.i686.rpm 0b3cfc445d256e0060506f610986f3f0b1fa08fb70c786d32ca33d4c6e4c4517 ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els12.x86_64.rpm b18dfac472b75d1af46e86449b4035a2a579a692926675972726e3868bf25e6c ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els12.i686.rpm 45265aefe969935f090f5946acf05c569f9a6212b4a5ea1fde8d56266466c84d ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els12.x86_64.rpm c773603ec24b7df5dc4ceb162885e949c3a162cab93f8d5c530b5a51e8692413 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els12.i686.rpm 4ac57be2d0cbe16b107f33a02cc58553f5e9314c85e317a8bed01d95041378ee ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els12.x86_64.rpm 5e108f621aeb91fa396996bc3f88d29e57d985f50a725f9f5491ed978a972a90 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els12.i686.rpm b4182126e81ec84aa99b5c2841d92f17f2ca955d41d70312d8eed1aca842385a ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els12.x86_64.rpm a35027745abf1e3cace7aa5dd46bf4657d75b66e71428dcfc32674e864f94b46 ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els12.x86_64.rpm d5a5a4824a1eb71fda4d507ec2f7003ac99a1b645c0f84eeafcc766cf851e80b ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els12.x86_64.rpm ed3eae778bca9fab28122cf13533bfcda99baf344dd7eb4dd24ce0dce24049c9 CLSA-2025:1748639500 TuxCare License Agreement 0 - CVE-2025-1217: fix handling of folded headers by the http stream parser - CVE-2025-1734: fix validation of http headers with missing colon - CVE-2025-1861: fix incorrect http redirect location truncation Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1217: fix handling of folded headers by the http stream parser - CVE-2025-1734: fix validation of http headers with missing colon - CVE-2025-1861: fix incorrect http redirect location truncation

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 0267b02a00f0f7653cf18ac70b3846f726f97fe8661a921fd06230c70a357f4c php-bcmath-5.4.16-48.el7.tuxcare.els9.x86_64.rpm f0d63ccd1a0b12a43cc0131757da4b7f57ede79e9307c95a756cbb899fd6376f php-cli-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 45fc65d92b7535ee98aceea9b2fb2378c7c53ded33e124afb6b53cd891ee258b php-common-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 383e81fc2217c83c2ba8977270fc819a40ac57892e866a6463612748ffb65c23 php-dba-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 4dce60ae08dab86a276f1169ad21a8526662c19fb9ca997978c582b3a215f511 php-devel-5.4.16-48.el7.tuxcare.els9.x86_64.rpm bdbb8ad53e76957efc59a46380df98c67a9268b3e8474b8d32dce660a918d237 php-embedded-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 86331d4949b85d03767749786d629c00270b89ae4a4b0366925e1b54d6a5079b php-enchant-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 463d23d347c96d12bae754b3006002f1568c2b9d93439ad3b818f2087aaf7efd php-fpm-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 9650331c9391116edbeffffecf65b873ba0b709d225191a84b46bb82ff2a38a3 php-gd-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 2234daef919c96a7071f05cc6dbb85b3d72a38332fb04afc30e6a30a0167fb6f php-intl-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 04f2960cb98c183f0ac6e1e713029ff3b9bad581bb8f8d764f456c0caa707820 php-ldap-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 5171c4833854c96b5c4d3addd9b0efbe5be148db35a228f8c5fa9bcfdd715d6b php-mbstring-5.4.16-48.el7.tuxcare.els9.x86_64.rpm b95974b9aa4460aff9a41e96d538533ffdd4cf9d8d5477dbd3e78d0fbd286328 php-mysql-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 6c9cb79d0910f08453dfb95517ceee369c6daaf4d0cfcbec1a464319c40f43a4 php-mysqlnd-5.4.16-48.el7.tuxcare.els9.x86_64.rpm e93a1b51ba798bbdd3f1b81d49d6eaf373024b00acc94384af75e732b328d0c3 php-odbc-5.4.16-48.el7.tuxcare.els9.x86_64.rpm e176c124839789112b015407113ac36cd5a22aea421751607f0872359453383f php-pdo-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 992f7216ddff001f76f88d96dacf792d0d394914bc42eadb3d8ff78cd0fd1014 php-pgsql-5.4.16-48.el7.tuxcare.els9.x86_64.rpm e4cd35bc5f4080d29e3711789c43bbe573a81ed6c273de21463756a5f1063cd9 php-process-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 19e7e7a11b8c6baf4218b9ce69e6fff1cdf4092b84a85729ddf2b3399873b8fd php-pspell-5.4.16-48.el7.tuxcare.els9.x86_64.rpm c1b435128b63f2533081664f6b75d93ff7f43c26b59d634c2b8d013fc1b9e452 php-recode-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 6d2942263c6c5fadc9146840effb021553a5dadb7be4665d9bd263a4d86f407d php-snmp-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 5e151466abce704d03a31fcfb106aa4fb9a06829ba9b7d6bcbe2c6e97e070f2f php-soap-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 21619f83318a19a9bddfc4a032295a334d8c910e81b66a5c03b180c8ccd5bd6a php-xml-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 528d3e04a0b22ba6a3bdc4ce8571668ad57105bf57e3bc8358370aa4a45cd6c8 php-xmlrpc-5.4.16-48.el7.tuxcare.els9.x86_64.rpm 06968668a5883deef2a9cf50886815d57344da99fb2d88b6c464f464e8c44033 CLSA-2025:1747926654 TuxCare License Agreement 0 - CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0840: fix stack-buffer-overflow at objdump disassemble_bytes

0 tuxcare-rhel7-els binutils-2.27-44.base.el7_9.1.tuxcare.els2.x86_64.rpm 12f5d462b41024a18746470a7915c6a9b46077a262c9e2e9150f9b36067c4cb3 binutils-devel-2.27-44.base.el7_9.1.tuxcare.els2.i686.rpm b20356f1627971e3278dd82ee258c94eb6e9f16f22886d67795ecc516a30dae1 binutils-devel-2.27-44.base.el7_9.1.tuxcare.els2.x86_64.rpm b3462596940e6124bb06ffb0bf8cbed67b8c758546689fc83b716e0b500fe275 CLSA-2025:1756317560 TuxCare License Agreement 0 - CVE-2025-1244: fix man.el shell injection vulnerability Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1244: fix man.el shell injection vulnerability

0 tuxcare-rhel7-els emacs-24.3-23.el7_9.1.tuxcare.els4.x86_64.rpm 2839b4f8cf693972bdf02366e7f66b5dce80a5797ec3d5a52953292233621e88 emacs-common-24.3-23.el7_9.1.tuxcare.els4.x86_64.rpm a8945a03f405a3c40b3dee5a9ca82f49ead2012b54e7a374170d2c382762a887 emacs-el-24.3-23.el7_9.1.tuxcare.els4.noarch.rpm 867128003a0055415c1dc46c02827be4ad0049541569c500a067acc6aa6551ad emacs-filesystem-24.3-23.el7_9.1.tuxcare.els4.noarch.rpm cd21097f44a12fbbf9d8331a2a84d17b2595d97b2c89b4b3a6029592a4408bc4 emacs-nox-24.3-23.el7_9.1.tuxcare.els4.x86_64.rpm ba6707fcbd691396a83a83e47d51923da03d922e182f9d5aed54dd01909841bc emacs-terminal-24.3-23.el7_9.1.tuxcare.els4.noarch.rpm 6cd2063ad55a22b713dac8526b55f6eb6938a404ed3e173c16dd2df3351e6db0 CLSA-2025:1758705749 TuxCare License Agreement 0 - CVE-2024-52533: fix off-by-one error leading to buffer overflow in gsocks4aproxy.c Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52533: fix off-by-one error leading to buffer overflow in gsocks4aproxy.c

0 tuxcare-rhel7-els glib2-2.56.1-9.el7_9.tuxcare.els3.i686.rpm 1d78ea4b07dbdaaeb9111a87f51f1b4e5a840afba49cbcedc7891e97db245965 glib2-2.56.1-9.el7_9.tuxcare.els3.x86_64.rpm 9b8d91ff7b3e254dc3c98557bd92b90b214f86225a2fa958ad6056fc77bcbb7e glib2-devel-2.56.1-9.el7_9.tuxcare.els3.i686.rpm a8a30c45dbea077ac75d247c6cc8debd6f1cf15bf93db36ef5fe30d74696ca6d glib2-devel-2.56.1-9.el7_9.tuxcare.els3.x86_64.rpm 677671aa29556adac6d017efcd5b134a6a4054eaeef40fa79bc6a72aa441a0dc glib2-doc-2.56.1-9.el7_9.tuxcare.els3.noarch.rpm 9c999595fc21c3f298375ac1a6d1cc7d913ad12230b8cae823890f69314405d4 glib2-fam-2.56.1-9.el7_9.tuxcare.els3.x86_64.rpm 71277bfe5dd39361a36e9f6a2b82213b4a670c65e1465fe642da362dc9931be1 glib2-static-2.56.1-9.el7_9.tuxcare.els3.i686.rpm b3dab99d26791e6340ef28bf8dfa3ce2e161dbc4116cb169d784073c3bf3c408 glib2-static-2.56.1-9.el7_9.tuxcare.els3.x86_64.rpm 46403462557268ad2a5b8a1b17e485560570555694e40fdc93defe0fd303dff0 glib2-tests-2.56.1-9.el7_9.tuxcare.els3.x86_64.rpm 5036ad95faad071dc153fe3e68cfb7bc52501ab4b64fa30af7c3709606836e14 CLSA-2026:1783415795 TuxCare License Agreement 0 - CVE-2026-33901: fix heap buffer overflow (out-of-bounds write) in the MVG decoder when copying an over-long token into a fixed-size buffer - CVE-2026-33908: fix stack exhaustion denial of service in DestroyXMLTree() by imposing a recursion depth limit on deeply nested XML - CVE-2026-45031: fix list-length resource policy bypass in the PSD decoder by validating the layer count against the list limit - CVE-2026-45664: fix excessive resource use in the MNG coder by bounding the number of LOOP/ENDL operations - CVE-2026-46520: fix heap out-of-bounds write in the IPL coder when writing multiple images with differing dimensions - CVE-2026-46522: fix infinite loop (CPU exhaustion) in the MIFF decoder on a crafted file - CVE-2026-46523: fix heap use-after-free in the MSL coder by disabling blob support for the MSL format Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33901: fix heap buffer overflow (out-of-bounds write) in the MVG decoder when copying an over-long token into a fixed-size buffer - CVE-2026-33908: fix stack exhaustion denial of service in DestroyXMLTree() by imposing a recursion depth limit on deeply nested XML - CVE-2026-45031: fix list-length resource policy bypass in the PSD decoder by validating the layer count against the list limit - CVE-2026-45664: fix excessive resource use in the MNG coder by bounding the number of LOOP/ENDL operations - CVE-2026-46520: fix heap out-of-bounds write in the IPL coder when writing multiple images with differing dimensions - CVE-2026-46522: fix infinite loop (CPU exhaustion) in the MIFF decoder on a crafted file - CVE-2026-46523: fix heap use-after-free in the MSL coder by disabling blob support for the MSL format

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els19.i686.rpm 33cfed1b1559045f0e1cccc624a9d1414823bfc7ad911311e2a6c17df676d7b8 ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els19.x86_64.rpm 33767bd49bb7bc5b37e6ed5ba669dc44f2ffb4d58ebc6939dbe4e99759c6d7ae ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els19.i686.rpm 1f6b54c330224d6ec1c474bc4882b61cd4894aa93c5dadd4f040f1bf115871f1 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els19.x86_64.rpm ae24b20c60b6bbd58e33f351162a7c9dfc99fe7bb53649570fad6266be30fcc0 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els19.i686.rpm 286c1c27232a5d4b5c7656580131ebbb9de4dbb723088b8fbe8b9c3ef0854841 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els19.x86_64.rpm c1d8b5e8965d258dfc261b94911fa4737d2d66f3f0a46a3086e267bb79e64acd ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els19.i686.rpm 05b2e0b8432db5439b7ef5d274f1f2f237ac326a3c66040acff48b276b1f9a23 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els19.x86_64.rpm 52192442dda05f51c6a85c15cab4d488a2a2db305ff391146f82de1d8065ba34 ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els19.x86_64.rpm 79e7c9feaf2185d4230168774b74742a25b51b7345af1383b51a5ec4d3d25053 ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els19.x86_64.rpm 0e75620c3bbd7c675644b0987769c8cadab0b62dd066494cb2ff623415f24956 CLSA-2026:1783514794 TuxCare License Agreement 0 - CVE-2026-58016: fix D-Bus introspection XML parser <node> element nesting state handling Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58016: fix D-Bus introspection XML parser <node> element nesting state handling

0 tuxcare-rhel7-els glib2-2.56.1-9.el7_9.tuxcare.els6.i686.rpm 17c632abd5178a5983a81c72c82c413108523f5e4a63755fdc9e8fd54f137ee3 glib2-2.56.1-9.el7_9.tuxcare.els6.x86_64.rpm c959c431d050a064f3479d697104a36f96003b48a57132116a68a253aa6f4be6 glib2-devel-2.56.1-9.el7_9.tuxcare.els6.i686.rpm ab3e1a1c9b64baea9a4a6d6c53be9ac61d1ea0d7ec24f9d61f072190b7da40f1 glib2-devel-2.56.1-9.el7_9.tuxcare.els6.x86_64.rpm 4212a23590dd52d271f3cb15da1f44dcaac6d9fd4ba2b1fab809ffe437104215 glib2-doc-2.56.1-9.el7_9.tuxcare.els6.noarch.rpm 20f5386ad0bcb44981efdd11d0c8d75f511593a9e04176609dd3178e74d7d9c1 glib2-fam-2.56.1-9.el7_9.tuxcare.els6.x86_64.rpm 1326009d2224bc0d03812490073285bd4daf19c568e65313d59b35798c82ba92 glib2-static-2.56.1-9.el7_9.tuxcare.els6.i686.rpm 058a928ff8e67298ea866538813cf43140f11087a790ba0f1de034ab37c60609 glib2-static-2.56.1-9.el7_9.tuxcare.els6.x86_64.rpm 2e1cd4c8795276003b2fd339447bb32ed0952f0f77f846d5961ca30ac2ead6f4 glib2-tests-2.56.1-9.el7_9.tuxcare.els6.x86_64.rpm 21c0186d7bb314e0a50f39ddee021631f4af018696fa50136a8a86878176ac36 CLSA-2026:1783587973 TuxCare License Agreement 0 - CVE-2026-11979: add bounds checks in xmlcatalog --shell usershell() to prevent stack buffer overflows when parsing overly long command lines Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11979: add bounds checks in xmlcatalog --shell usershell() to prevent stack buffer overflows when parsing overly long command lines

0 tuxcare-rhel7-els libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els6.i686.rpm 50a857ca1fb6ec4949d56e764775886d06bfb869f823cb3599a5fce1f4e8446b libxml2-2.9.1-6.0.11.el7_9.6.tuxcare.els6.x86_64.rpm 10f83383e49d0c24c0f6a105685c62983cffb88be0d15f68345cdc029013eca6 libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els6.i686.rpm 7d62a56a0a391e1ed66b2b876f084efccfcbdf929fe669f9af63fe992a617def libxml2-devel-2.9.1-6.0.11.el7_9.6.tuxcare.els6.x86_64.rpm 85f9e01ceee9703c69614bb56eddb8b6674a454c73cfde87db0d02988d2e47e5 libxml2-python-2.9.1-6.0.11.el7_9.6.tuxcare.els6.x86_64.rpm 0e8bb90fa24fe58af86252c32fec111b77ea38aae8555e4611e9146ff43fa065 libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els6.i686.rpm e4de46bdf5fe012760f29ce46faeaf5963d4e369cb044555b18431a89317b26a libxml2-static-2.9.1-6.0.11.el7_9.6.tuxcare.els6.x86_64.rpm 755fd1b575caa6c27ad1463199f7f794098d7a0c3bc79a54b917a78c1e4f4b4d CLSA-2026:1783670904 TuxCare License Agreement 0 - CVE-2026-58014: fix one-byte heap under-read in g_key_file_get_locale_string_list with an empty value - CVE-2026-58015: validate DBUS_COOKIE_SHA1 cookie_context to prevent server-controlled path traversal / arbitrary file read Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58014: fix one-byte heap under-read in g_key_file_get_locale_string_list with an empty value - CVE-2026-58015: validate DBUS_COOKIE_SHA1 cookie_context to prevent server-controlled path traversal / arbitrary file read

0 tuxcare-rhel7-els glib2-2.56.1-9.el7_9.tuxcare.els8.i686.rpm d4119a23ef34d5a96c711c13a50650bd07364fc8120dcaa1bc02a71ceb15a2f2 glib2-2.56.1-9.el7_9.tuxcare.els8.x86_64.rpm a967f5437449688797e1f7459d8b56f240b702d5b9f288a30282d950063df4ce glib2-devel-2.56.1-9.el7_9.tuxcare.els8.i686.rpm 90f16eb527462f18f4cee15dda3b55373509a6a3f38a603b22a74dab12313e3f glib2-devel-2.56.1-9.el7_9.tuxcare.els8.x86_64.rpm 1461c218af8bf7485059aaddd78988e3454a29cd4249dd04c3e95cdea9cf621c glib2-doc-2.56.1-9.el7_9.tuxcare.els8.noarch.rpm 37769e1e0fb7b172a46324f4f86ec32c5d66ed84154d814a46e12cc55cf523aa glib2-fam-2.56.1-9.el7_9.tuxcare.els8.x86_64.rpm 2f02e66c32050b6a5218639fc21f9cacec5bf0535d5d4faa187e5e3af2166fac glib2-static-2.56.1-9.el7_9.tuxcare.els8.i686.rpm a1d3194dc8895e53aeff11a6dbebe478e79d0d0f79963a29c0d56971df20295b glib2-static-2.56.1-9.el7_9.tuxcare.els8.x86_64.rpm 27389f4ed9927da16aa24d2e78f56c36bedeb20d4f601bdfd258cbce8a80a77b glib2-tests-2.56.1-9.el7_9.tuxcare.els8.x86_64.rpm de8d698669f6f415ccf714c7325995bc08f7fc050ee29777ad3301add77e478d CLSA-2026:1783693981 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.31+11 (GA). The following CVEs were fixed: - CVE-2025-66293: update bundled libpng to 1.6.57 - CVE-2026-22007: enhance crypto algorithm support - CVE-2026-22013: improve Kerberos credentialing - CVE-2026-22016: enhance path factories - CVE-2026-22018: enhance Zip file reading - CVE-2026-22021: enhance certificate chain validation - CVE-2026-22695: update bundled libpng to 1.6.57 - CVE-2026-22801: update bundled libpng to 1.6.57 - CVE-2026-23865: update bundled freetype - CVE-2026-25646: update bundled libpng to 1.6.57 - CVE-2026-33416: update bundled libpng to 1.6.57 - CVE-2026-33636: update bundled libpng to 1.6.57 - CVE-2026-34268: enhance key generation - CVE-2026-34282: enhance TLS connection handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.31+11 (GA). The following CVEs were fixed: - CVE-2025-66293: update bundled libpng to 1.6.57 - CVE-2026-22007: enhance crypto algorithm support - CVE-2026-22013: improve Kerberos credentialing - CVE-2026-22016: enhance path factories - CVE-2026-22018: enhance Zip file reading - CVE-2026-22021: enhance certificate chain validation - CVE-2026-22695: update bundled libpng to 1.6.57 - CVE-2026-22801: update bundled libpng to 1.6.57 - CVE-2026-23865: update bundled freetype - CVE-2026-25646: update bundled libpng to 1.6.57 - CVE-2026-33416: update bundled libpng to 1.6.57 - CVE-2026-33636: update bundled libpng to 1.6.57 - CVE-2026-34268: enhance key generation - CVE-2026-34282: enhance TLS connection handling

0 tuxcare-rhel7-els java-11-openjdk-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 76c94dee126443d5440057cdfeac64188e3a2cf6f2648cb985d73d61c7ac71cf java-11-openjdk-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 86f8293d712708aa182f458176da982886d3c4df46db4e223a1764a98fb06444 java-11-openjdk-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 33a96aaf58b6d65293ea6e97a82f2d6fd2f616bac5731fe108f9ed33bb3e1031 java-11-openjdk-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm bb646ea6837264a3e2111795769c6ff552f4b2b23ec8e244f03131cdf2aa2943 java-11-openjdk-demo-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 2fd29553e8cd2c00cdc7d034db507afb55fa1d68cebc18498d65339f4da76492 java-11-openjdk-demo-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 4d73283f125a0585eee3b4b9aa530186cfcec0a70982214141f2b420e091b288 java-11-openjdk-demo-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 1256493beb091493a76953401d45865552e86a16b20bc5faf061e93ea4af7f42 java-11-openjdk-demo-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 19a5f6e9d5015b7eb2738a77b93e0d3b49956e3f47d53b5d48e42e172233d8d6 java-11-openjdk-devel-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm c852aba2142790a72b3598fd9150c950ad0f64c9489fcf2503326118fd1d8709 java-11-openjdk-devel-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm ba6285f675853343a36334fd8e9e7756284073a628451d6297d46c94c771720f java-11-openjdk-devel-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 8b4ec45c8d396e9162c320ea012fa29923b0ec2c1e1187c87114067951dfbecc java-11-openjdk-devel-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 6feaaf00bc39fb979a55dc7a030ed34db0a2403515e5a7fd036cbbc4b885ee29 java-11-openjdk-headless-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm bb35b8479d3e9e1ffee01e3d3aa1350976523f009ac29620648038c70a127df1 java-11-openjdk-headless-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 3397a5c1abde36b191732be6ab68e9f504f83ab76e68ba85c0f11a2e4a9523af java-11-openjdk-headless-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 3a3141999b585e4388e0222f52e88675b934064840b0fb3f00a840e1baf0a327 java-11-openjdk-headless-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm e55f7b1cb77d0884c5b83e80747578fcb78b441f01d6beb56a5e4560826d6e3d java-11-openjdk-javadoc-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 048db6a4631e3bca85942bba5677d83ed209c94cb357fd2faf6498dfa15dbb43 java-11-openjdk-javadoc-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm b89a5805fcb800e85e2a1ccfb0cfb78801ff8e4046b10c08e3ed4ee24ecfe447 java-11-openjdk-javadoc-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm cc43111c9fcfdb289314f248c16814f335beb7da5cfd0210539e33019008a599 java-11-openjdk-javadoc-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 3f13f7456e8de8c7faa320fc12d2d8abd6b9667ea1d09d2c539ca19374aa6a4f java-11-openjdk-javadoc-zip-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm d171c9b62fca5842986d67541bfd2715d12e79c0b780b9eb8b6322c6b3bfa765 java-11-openjdk-javadoc-zip-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm c08571c77fd48dbff242808fc6683b79ce65285dae0911a6091b12257136e955 java-11-openjdk-javadoc-zip-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm ab3185f9a388c8f4aa58ff989c3ba8bff9bf98e7e22a1330cfe4f97c4061413a java-11-openjdk-javadoc-zip-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm f35443b98429477f907f038f487da20c9bd1e5a952c3e1cb2ab50a1255ed9feb java-11-openjdk-jmods-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 3acbec6774427ff4d61375714bdd8a139d28c1a8d7bd9a172f7674e5de26cb65 java-11-openjdk-jmods-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm e0cb1904ef56d77fc5a04db1efec7f068e9c0ff16c8052403a552d069e32f7fc java-11-openjdk-jmods-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 50bf3068225942f0b1b43675c5744ca8a308d9631a41eeaa051873902ec31ff3 java-11-openjdk-jmods-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 8fc9a75d35b20b08400dac96c98771a8d28efcaf85a9d08c081bf44115672013 java-11-openjdk-src-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 81ed3de0a29de695446112ef3526fd49c11e2c3206e3357ec569523c11cc2dce java-11-openjdk-src-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 1ac135914d4c6f5eae6ea05e0d29af37e4e8d18db5fedda8f4139e0e107ff2e1 java-11-openjdk-src-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm 3c873ec02ed1bb56c00147fff0e7210c7f2865542fe6a9173d06fe9886f9bc02 java-11-openjdk-src-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 66a95b46e14698eb75725d92bca32cf563fe5ab70ec0e2a277175a3f79d62310 java-11-openjdk-static-libs-11.0.31.0.11-1.el7_9.tuxcare.els1.i686.rpm e58081f69991cbcf8bc57b0897b7b47b55ef5b8f3a256e127a3ce65c5fca4b72 java-11-openjdk-static-libs-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm fac40c00ff2b68d3ff622fed7593fc34122ad66fda626a525a447cf5be1b164b java-11-openjdk-static-libs-debug-11.0.31.0.11-1.el7_9.tuxcare.els1.x86_64.rpm 185b4039ff35ae199ddc9f6e5c01a28a57b355b6c8f54d3be14ee54c05dab9dc CLSA-2026:1783703079 TuxCare License Agreement 0 - CVE-2026-0672: reject control characters in the Cookie module - add the _has_control_character() helper and validate in Morsel.__setitem__, Morsel.setdefault(), Morsel.set() and BaseCookie.output(). Applied as the prerequisite for CVE-2026-3644; Python 2.7.5 shipped neither fix. - CVE-2026-3644: reject control characters in Morsel.update(), the unpickling path (Morsel.__setstate__) and Morsel.js_output(). - CVE-2026-4224: guard conv_content_model() in pyexpat with Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() to avoid a C stack overflow when parsing a deeply nested content model in an inline DTD with a registered ElementDeclHandler. - CVE-2025-13462: skip the old-v7 AREGTYPE -> DIRTYPE normalization in tarfile when reading a follow-up header (GNU long name/link or PAX extended header), so crafted multi-block members are no longer misinterpreted. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0672: reject control characters in the Cookie module - add the _has_control_character() helper and validate in Morsel.__setitem__, Morsel.setdefault(), Morsel.set() and BaseCookie.output(). Applied as the prerequisite for CVE-2026-3644; Python 2.7.5 shipped neither fix. - CVE-2026-3644: reject control characters in Morsel.update(), the unpickling path (Morsel.__setstate__) and Morsel.js_output(). - CVE-2026-4224: guard conv_content_model() in pyexpat with Py_EnterRecursiveCall()/Py_LeaveRecursiveCall() to avoid a C stack overflow when parsing a deeply nested content model in an inline DTD with a registered ElementDeclHandler. - CVE-2025-13462: skip the old-v7 AREGTYPE -> DIRTYPE normalization in tarfile when reading a follow-up header (GNU long name/link or PAX extended header), so crafted multi-block members are no longer misinterpreted.

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els11.x86_64.rpm e183b1179a872c9cfab7a66b2e130d2105d2d8e6c079ecf125cade2cfffb1260 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els11.x86_64.rpm e477ca84e0bb0a679659e7249486430fb47f7cabc166f94d6075300f88dd95f2 python-devel-2.7.5-94.0.1.el7_9.tuxcare.els11.x86_64.rpm 7718374074ec8cf0e0c0006177b89f16127eb9969da41e4fa11927a69f16c0fb python-libs-2.7.5-94.0.1.el7_9.tuxcare.els11.i686.rpm a669eee69b61b10089b46e129514df4afb98cb12ac090708da1c218bee7a793f python-libs-2.7.5-94.0.1.el7_9.tuxcare.els11.x86_64.rpm 64eaca941cefef3de6ac5fc205ecbe465b58be42cee593d957c200df6a737070 python-test-2.7.5-94.0.1.el7_9.tuxcare.els11.x86_64.rpm 588a52049b9ab72b2a4e103f032baca01e074f0144b338b9c108e2017a10ea92 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els11.x86_64.rpm 3dc4440fd1474199848a741197d8866a1e02b00bd777d9ae9e82258aa7e6ce5b tkinter-2.7.5-94.0.1.el7_9.tuxcare.els11.x86_64.rpm 026a1bb9b8ada668c6efdc0da2638daa3d876b5b769dd1cfb4887c99f8b82a52 CLSA-2026:1783792262 TuxCare License Agreement 0 - CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-49975: add max_headers directive (default 1000) to cap HTTP/2 request-header memory exhaustion (HTTP/2 Bomb)

0 tuxcare-rhel7-els nginx-1.20.1-10.el7.tuxcare.els5.x86_64.rpm f4b594ad742816a61f666ce7d74657d096c8e4b5c0a759c450ecdaa55285dbb1 nginx-all-modules-1.20.1-10.el7.tuxcare.els5.noarch.rpm afa29f097dcfffa71fe5e8221a5ea08be0b46cb6eb4807fb2fbd78e08de63adc nginx-filesystem-1.20.1-10.el7.tuxcare.els5.noarch.rpm 48e32d4786f7e2fe62faae6a4b1b70e3784b74ade344ab5c52def5222521ce74 nginx-mod-devel-1.20.1-10.el7.tuxcare.els5.x86_64.rpm 9a58de924369fb7a22cdb802aae85d67e0f743361932e36d18910f446a435b18 nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els5.x86_64.rpm 0c641aea3af20a8c4004029f3dd3f9fd1c9789491d2df61bf38b3bac2967616d nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els5.x86_64.rpm c130d30e74a927022d6165fd1aa8e361bd9a75ebd01b7d92a6fc421ba2eec7aa nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els5.x86_64.rpm 6ff40f58cce216bf76d51fe82b849bec344208ae7a2527c9146f5e78c7674b3a nginx-mod-mail-1.20.1-10.el7.tuxcare.els5.x86_64.rpm be7003808d7296ee2315f0a9dd78f4938fc511923815b5b47a736785090de9f6 nginx-mod-stream-1.20.1-10.el7.tuxcare.els5.x86_64.rpm 75e080758b10bd4b026caa2af24ce62c6a8c2e4d69699e170b5f69e53fca2612 CLSA-2026:1783859235 TuxCare License Agreement 0 - rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499} - net: usb: pegasus: validate USB endpoints {CVE-2026-23290} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499} - net: usb: pegasus: validate USB endpoints {CVE-2026-23290}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm 244a4cbbbc46ab6d3222005ca90aab2a7da44c380911da5b1c9084faea9d9cb6 kernel-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm 1f284a39dff129f78edef916ad34917660333a00e4fd330e89879edea6689003 kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm e12314e8b35bc40158d158a887a8749588b376d4f7c9fdf9659fa81184c29222 kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm a9b88021af39ab4568615ace65b120ffe8b7eb8a43047d6710e95d32dc92a65f kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm 3de0d6a23bd61f6d5bb512f52b8cd4e71dd4c3564175ced2ac94b0025e79c130 kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm 56836ce45c80d96cd299955f2e5e6625344ec2abfbd4a7247104406b66f34fbf kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm 4bd8cfb9831e5d8f67d9326706a35eebe4a709377618ed7bd149d9dfed297e64 kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm fa6feb29b082b1d9d109179234c08f0b3653ae98a820a66576c61950702208dc kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm 19abb3a2c3d670f326d2659ee950d3f64c830be7e4e1a21837f13c9a76258b10 perf-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm 8243054827b893e3ac907f89194e03e75c736a49f750feade6735a5a83f547b8 python-perf-3.10.0-1160.144.1.el7.tuxcare.els9.x86_64.rpm 840595f5aa39de63da8cea15e66bacd6f813f9fb6e995e1f45c061659bbacb56 CLSA-2026:1772213835 TuxCare License Agreement 0 - CVE-2016-9843: avoid pre-decrement of pointer in big-endian CRC calculation Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-9843: avoid pre-decrement of pointer in big-endian CRC calculation

0 tuxcare-rhel7-els minizip-1.2.7-21.0.1.el7_9.tuxcare.els2.i686.rpm 1fb6c03da56cd1365b38dfc9e4f859e21806b97cb49d6cf3e82774beb034a36f minizip-1.2.7-21.0.1.el7_9.tuxcare.els2.x86_64.rpm b7d41c13748280253b72d6f497ba0dea708b9dc84f7d70260138613afeaba583 minizip-devel-1.2.7-21.0.1.el7_9.tuxcare.els2.i686.rpm f47425c57f7714ad0dbfcb63373b2f90285edf022559b89b9bf38699c6a43d53 minizip-devel-1.2.7-21.0.1.el7_9.tuxcare.els2.x86_64.rpm 19ca101980cb364c7ca91707cdf2ae013e48f3dfa6a56c3659a74d1f6d481187 zlib-1.2.7-21.0.1.el7_9.tuxcare.els2.i686.rpm 4253eaf2d071f6a0b1e4e38d99e590a5911235e086e1fc52133671bdb8e83072 zlib-1.2.7-21.0.1.el7_9.tuxcare.els2.x86_64.rpm f5653d8445835f71e442c717aa7240f5117f8a2ffb96e2c84e35be382523edd4 zlib-devel-1.2.7-21.0.1.el7_9.tuxcare.els2.i686.rpm 4678a149e86fa494b8de9f5103eb8257d33790de669b066faa2a83ce2f7a0cb2 zlib-devel-1.2.7-21.0.1.el7_9.tuxcare.els2.x86_64.rpm e5718f3ab5cc98d260fdc380c63434447dfd7f2994e8833a70af111a8ae2e362 zlib-static-1.2.7-21.0.1.el7_9.tuxcare.els2.i686.rpm c869f713dcd265836533f9590ded9c23386ccb28a5e647af18416e5cf42036a9 zlib-static-1.2.7-21.0.1.el7_9.tuxcare.els2.x86_64.rpm ac13774efd08d7399929168f97e693a7e3e005dc0fcc2e93b97d7060f5d50cee CLSA-2026:1783973180 TuxCare License Agreement 0 - CVE-2026-58470: fix integer overflow in parse_content_range() - CVE-2026-58471: fix heap buffer overflow in convert_fname() during filename charset conversion - CVE-2026-58472: fix integer/heap buffer overflow in html_quote_string() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58470: fix integer overflow in parse_content_range() - CVE-2026-58471: fix heap buffer overflow in convert_fname() during filename charset conversion - CVE-2026-58472: fix integer/heap buffer overflow in html_quote_string()

0 tuxcare-rhel7-els wget-1.14-18.el7_6.1.tuxcare.els2.x86_64.rpm 274c0f0097f979708f7f6a81d9cd8feb8844a9a25184be350cb141d680ec116f CLSA-2026:1784019126 TuxCare License Agreement 0 - CVE-2026-15308: fix quadratic complexity in html.parser.HTMLParser incremental parsing of long unterminated constructs (DoS) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15308: fix quadratic complexity in html.parser.HTMLParser incremental parsing of long unterminated constructs (DoS)

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els13.i686.rpm 9f71ab5479d2c3fd3d313a8f09377d67cf54211705a0d6483e3e4065cc493076 python3-3.6.8-21.0.5.el7_9.tuxcare.els13.x86_64.rpm 05c8cb5f89aeb94235008d36803aacc00a7ebf89825b99ccced053cabd5f4585 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els13.i686.rpm 65cb649deb7cd4b6963079e07032b455b77e205329767251b8fbc876cd7ef77c python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els13.x86_64.rpm b6de61cd0b15498c261db5809709e6a463afb250683c65c3d0610cfa7634dc73 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els13.i686.rpm eec5059e7604398cb45ecd577bf406297d037999f05271c09c69e0c12b281d70 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els13.x86_64.rpm 6abdeb762e918f683ae4646ddcbca20f13396fb266dc3d51fe2e2306e68032da python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els13.i686.rpm 0a3d10ae346e4d9c1835348b87840b50ebb90d65553b66e7bba3e0da959aacda python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els13.x86_64.rpm 625dd0694778d71f4c7d8b139ed56a91a890c27e51e233da8cbbd06cf75ef9eb python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els13.i686.rpm 678bebf55bdfc44522277c8b53c1efad6a5e7c20a88ef981363971393f425de4 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els13.x86_64.rpm fc79b02c37ef0a097111279d4cce3e406d0e6b721d3fa7f9963da1264ffc59c0 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els13.i686.rpm e737b5c9db796875587aa1ea9ca38a9de2ff49f3ed8994260b03b317223d2e09 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els13.x86_64.rpm 2b04391819c90a59f12cd8da367be3ba5453aa75a5f6f81c92a0712559a04d9d python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els13.i686.rpm 69a6dbb89a81247f2c7388445c645003e043149fee3a2d115c86df2dfa817df0 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els13.x86_64.rpm 7d73e67a34e1ea428705b5d889053014fdd34c941c8ac69b53bd42c9f72db204 CLSA-2026:1784033437 TuxCare License Agreement 0 - CVE-2026-56361: out-of-bounds access in AcquireKernelBuiltIn() when a user kernel offset equals the kernel width or height - CVE-2026-56367: heap overflow from an unchecked rows*channels multiplication in the PSD RLE size reader - CVE-2026-56368: memory leak of the quantum info buffer in the raw pixel writers (bgr, cmyk, gray, rgb, ycbcr) on output blob reopen failure - CVE-2026-56370: out-of-bounds write in ConnectedComponentsImage() via crafted connected-components:keep and :remove index ranges - CVE-2026-56378: out-of-bounds read in the PCD Huffman decoder from an unbounded output pointer Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56361: out-of-bounds access in AcquireKernelBuiltIn() when a user kernel offset equals the kernel width or height - CVE-2026-56367: heap overflow from an unchecked rows*channels multiplication in the PSD RLE size reader - CVE-2026-56368: memory leak of the quantum info buffer in the raw pixel writers (bgr, cmyk, gray, rgb, ycbcr) on output blob reopen failure - CVE-2026-56370: out-of-bounds write in ConnectedComponentsImage() via crafted connected-components:keep and :remove index ranges - CVE-2026-56378: out-of-bounds read in the PCD Huffman decoder from an unbounded output pointer

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els20.i686.rpm 3b09b33c6875fbcf5d80390b5c86a2abf674c5fbf8486c71c77089202fd78033 ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els20.x86_64.rpm 41ad703e0760cc9261b4126e179f6076af94ae7e03bec3ab12b3077d6d96bd89 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els20.i686.rpm e0c9a40db8282f4a3fb1009ec176c2a45083913fb687b64cfc98d06be554613c ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els20.x86_64.rpm 9b7ae681c460a50041c5a334077e4a8e29b936e621743650d67b3bc1bb741599 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els20.i686.rpm b3033d944b3f7b7f72ea6686babadbe7ad79bdecfe5815a9907c79ba861c3007 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els20.x86_64.rpm f644fb1af2c7ffa0bc0f208e3b7640a9bd5acb357d8e0c3c125ff0c7886b42e3 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els20.i686.rpm 2a787ffa33a352c6a6ec92dab24a818e9955321acdf157862aa7a2532fbb7a27 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els20.x86_64.rpm f48448ffc0d3ef31cadc49a9ed2c1fb4e65cb9f5dc1a641d68ee50565fa3af91 ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els20.x86_64.rpm b57d2bf8453df8ac4c7c1c6b49c9e9860ab8343a5ef64f213a489a83f7c6e93c ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els20.x86_64.rpm ed53fed00feb7dbae398dc0550ab14c15848630e3a5cfb05b28acf362e151c6d CLSA-2026:1784125845 TuxCare License Agreement 0 - CVE-2026-34000: fix out-of-bounds read in XKB geometry key alias bounds check in _CheckSetGeom() - CVE-2026-34002: fix out-of-bounds read in XKB modifier map handling in CheckModifierMap() and add further request-bounds validation Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34000: fix out-of-bounds read in XKB geometry key alias bounds check in _CheckSetGeom() - CVE-2026-34002: fix out-of-bounds read in XKB modifier map handling in CheckModifierMap() and add further request-bounds validation

0 tuxcare-rhel7-els xorg-x11-server-Xdmx-1.20.4-99.el7_9.tuxcare.els10.x86_64.rpm a54d752021d66ea6d8261579e219e8c8f74a1c51bdfa76ddf6a1af86a22d78a5 xorg-x11-server-Xephyr-1.20.4-99.el7_9.tuxcare.els10.x86_64.rpm 8019e4c6e85405c959a735efe64de86465ee62298d0f72ceec3f5052d03b7052 xorg-x11-server-Xnest-1.20.4-99.el7_9.tuxcare.els10.x86_64.rpm 659ecd55c7f44f86d27c7309212266e3263e72f9c5b89a5da74cdc4bc4256b59 xorg-x11-server-Xorg-1.20.4-99.el7_9.tuxcare.els10.x86_64.rpm 1cc5e30d9b5008ecba66b0291fda431486b1b4d10b5b908f8fa84cd6a8d8af88 xorg-x11-server-Xvfb-1.20.4-99.el7_9.tuxcare.els10.x86_64.rpm d858eab9f2531bd293c42f57c55ab14d9c81aa7f3bc717512070c9dc82609fff xorg-x11-server-Xwayland-1.20.4-99.el7_9.tuxcare.els10.x86_64.rpm a9fec145c12458ff5687a87091d12d6f7af428503ed03e3a10f317ec4eba0c50 xorg-x11-server-common-1.20.4-99.el7_9.tuxcare.els10.x86_64.rpm e6519306b5e29d55b991a4ee75f436ca653159108a2f65a61ef898f9c3737f3e xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els10.i686.rpm 915f479d454e0de363d6e961d0df734d32a85a386b04d64829774b3ec118f0f6 xorg-x11-server-devel-1.20.4-99.el7_9.tuxcare.els10.x86_64.rpm 985d5bc4c33831d87ebef644d4b506fce6e5f980396f90141f8d7ca0736712da xorg-x11-server-source-1.20.4-99.el7_9.tuxcare.els10.noarch.rpm 457e5c57fbaabc8cf3a507f407fd3a2685f520994ffb895fed7d29e1cab7abdf CLSA-2026:1784126697 TuxCare License Agreement 0 - CVE-2025-43965: fix incorrect buffer size calculation (CWE-131) in the MIFF decoder caused by image depth not being resynchronized after SetQuantumFormat Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-43965: fix incorrect buffer size calculation (CWE-131) in the MIFF decoder caused by image depth not being resynchronized after SetQuantumFormat

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els21.i686.rpm 77ccc2448cba5e2068cb995863febcf789e87e035203e42e6ed67721abfbabb2 ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els21.x86_64.rpm 46501b38d8a75194c8d2036bb9526bce5ca3e667f1d8df08e7fd68e3369bdb45 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els21.i686.rpm 2ee951e7e59688503205c9d8266a8a85fdcda16b2650e9e808840f2d94799c64 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els21.x86_64.rpm 1ebe2efbd5e13223eb2f34477d74f19671757685f189016c3851ab51b345d3a8 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els21.i686.rpm b2b9ea1911e83d7d5079c02c0cf4a34d377d9bf7bd037da9f9f3a3e8008e1bbd ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els21.x86_64.rpm b9d496bcf51be5def85b566c800fd43a34f760e8018f1c5d76911a5497302424 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els21.i686.rpm 87e5efb564ceb806a0946e88e5ce2960f50ed3000a57e96d789d600502d7854c ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els21.x86_64.rpm d9c6178aa2f3bb91fd5e75bf37309b972797075b8be257b498214ca77a486cb1 ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els21.x86_64.rpm c314b86829d77dcd37f8bdebb33852258a3465cfaace9190bb74cf9ef3716993 ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els21.x86_64.rpm 12d7197905d6d81f4b1ee5ea18880b1590da6a0f7409da67fe6c443e0187505e CLSA-2026:1784218124 TuxCare License Agreement 0 - CVE-2026-15308: fix quadratic-complexity CPU denial-of-service in the HTMLParser incremental parser - accumulate feed() data in a buffer and only join/rescan once enough has piled up, instead of re-concatenating and re-scanning the whole unparsed buffer on every feed() call. Backported from upstream CPython (gh-153030, GH-153031). Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15308: fix quadratic-complexity CPU denial-of-service in the HTMLParser incremental parser - accumulate feed() data in a buffer and only join/rescan once enough has piled up, instead of re-concatenating and re-scanning the whole unparsed buffer on every feed() call. Backported from upstream CPython (gh-153030, GH-153031).

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els12.x86_64.rpm d40f45ae4589d84206799cc26731f245a0639818dec5e019c2971965da68aa23 python-debug-2.7.5-94.0.1.el7_9.tuxcare.els12.x86_64.rpm d07f9f453729b950a7a7cf9124c265fb757e36b27e308050da3d6fe99051c79f python-devel-2.7.5-94.0.1.el7_9.tuxcare.els12.x86_64.rpm 97a55e222745e17bd770a44052dcfbfd12db5ade6388ab871bc821f065b4ce83 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els12.i686.rpm c325e7bc85dc496cceab00614dcc93062b88fc6aa85cb7a0088c046883d4d276 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els12.x86_64.rpm 02911e815387b1a76958267b49ff098cfacdec67e5096329837f0e75ed68a779 python-test-2.7.5-94.0.1.el7_9.tuxcare.els12.x86_64.rpm 9e73e56de94a7c766c53ef287a061df91bd8b2e4df0223a0e82fa696894df072 python-tools-2.7.5-94.0.1.el7_9.tuxcare.els12.x86_64.rpm fcaba9f6c4ae040e28c5cb4139fed9034891943a436ddfb2b7426c18e66343e3 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els12.x86_64.rpm 5476d27090dd9a9bdaa1345d6666547def0546657b66b96e143f118732bdfdb8 CLSA-2026:1784296519 TuxCare License Agreement 0 - CVE-2026-13221: regex trie 16-bit field overflow in Perl_study_chunk produces silently incorrect matches - CVE-2026-57432: integer overflow in S_measure_struct leads to out-of-bounds heap read in pack/unpack Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-13221: regex trie 16-bit field overflow in Perl_study_chunk produces silently incorrect matches - CVE-2026-57432: integer overflow in S_measure_struct leads to out-of-bounds heap read in pack/unpack

0 tuxcare-rhel7-els perl-5.16.3-299.el7_9.tuxcare.els4.x86_64.rpm 576c5522dcc9b84572371868a21e3fa2d475a022f47331974957c686d381f960 perl-CPAN-1.9800-299.el7_9.tuxcare.els4.noarch.rpm 90039b3e7c84f55db3a8260077005af1732b1154018ca35ddfa029446ed2ed0d perl-ExtUtils-CBuilder-0.28.2.6-299.el7_9.tuxcare.els4.noarch.rpm 84b5e1ac8e18060e00c17cccbc998f2fc10938eb19ddd0486df30502aabe8933 perl-ExtUtils-Embed-1.30-299.el7_9.tuxcare.els4.noarch.rpm c004ffb0844a94acbdeb620e614bce60b2e7408a20b2935ca731c773e64b47b8 perl-ExtUtils-Install-1.58-299.el7_9.tuxcare.els4.noarch.rpm edf9e43228ba2ed2dcf2b2922752f37a790957f6c6b110d4f0135838d555af72 perl-IO-Zlib-1.10-299.el7_9.tuxcare.els4.noarch.rpm 4e2253ef1deb7a776ca7faf5f4da34a5a463976512826476028b2e581dbd654d perl-Locale-Maketext-Simple-0.21-299.el7_9.tuxcare.els4.noarch.rpm 5fc3f7c3adf92ac9c2cec076a291e6427ad8e4c8f45ce611c558e045165fc7ae perl-Module-CoreList-2.76.02-299.el7_9.tuxcare.els4.noarch.rpm fdea5b2b8491e929d899ffef19f69ea3d7d9fa1527074c74d5286a0b51a663a7 perl-Module-Loaded-0.08-299.el7_9.tuxcare.els4.noarch.rpm 43f4e4c93f864c3752e5f3d929723b04b6b0679564fcb476b17cabf02f729266 perl-Object-Accessor-0.42-299.el7_9.tuxcare.els4.noarch.rpm 29d353977e4d7d1b770971b465908b3d870d31cd3f9ac48d4a2e85ea1d032e14 perl-Package-Constants-0.02-299.el7_9.tuxcare.els4.noarch.rpm 2f243d616b1377713f0f1cfdbc0bed5763de635a562a405cb6698cf7971a3b42 perl-Pod-Escapes-1.04-299.el7_9.tuxcare.els4.noarch.rpm 83dfaaa98cd1fd8f3210afffe03f2142f91515f89668904b98bca98bdb90e622 perl-Time-Piece-1.20.1-299.el7_9.tuxcare.els4.x86_64.rpm 5e5e6a45b7582dba47ae7045ce40c7b3318dc213a2bdee3850948e9d7ebe0bed perl-core-5.16.3-299.el7_9.tuxcare.els4.x86_64.rpm 896d3f8514564b798c49879d3cd367a77dd1562ad8440fb676895c6dec4528f9 perl-devel-5.16.3-299.el7_9.tuxcare.els4.i686.rpm ab7f9f01d5503cb12d5d665bb96c221b3b46b662365ca35c9696c27ddde307cf perl-devel-5.16.3-299.el7_9.tuxcare.els4.x86_64.rpm 6a10e48184fc2942cbb2885efe3c1da61a304d0fa8862e4c5ee1c39c2eb803ec perl-libs-5.16.3-299.el7_9.tuxcare.els4.i686.rpm d49b3324ca0915411f2cd1888ef075d0fc6d4bd8812bbef9d53a63be6606f3eb perl-libs-5.16.3-299.el7_9.tuxcare.els4.x86_64.rpm dc219670f8d39975cbb23f5353842e6f7aeffbf76bcb6cc275cb7522fb02a863 perl-macros-5.16.3-299.el7_9.tuxcare.els4.x86_64.rpm 4418f463029b218dbf0524d0e0be204330a0e7e7138649b4faebecfc5020fc75 perl-tests-5.16.3-299.el7_9.tuxcare.els4.x86_64.rpm 7c74de1cd1c9fda9dce0f2464557afe4d25ca287f1de99b7847bd0e424c87212 CLSA-2026:1784559273 TuxCare License Agreement 0 - CVE-2025-54389: escape filenames in error/log messages to prevent terminal escape sequence injection Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-54389: escape filenames in error/log messages to prevent terminal escape sequence injection

0 tuxcare-rhel7-els aide-0.15.1-13.el7_9.1.tuxcare.els1.x86_64.rpm 6407837ba27b996fd1e662f40729eadb20f33c07d2d86f9c74c768ccd33f3e0b CLSA-2026:1784734364 TuxCare License Agreement 0 - CVE-2026-61857: check ResizeQuantumMemory() return value in ParseEntities() (magick/xml-tree.c) to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffman_image clone on temp-file open failure in WriteGROUP4Image() (coders/tiff.c) to fix a memory leak - CVE-2026-61870: relinquish pixel_info before throwing on colormap allocation failure in WriteVIFFImage() (coders/viff.c) to fix a memory leak Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-61857: check ResizeQuantumMemory() return value in ParseEntities() (magick/xml-tree.c) to avoid a NULL-pointer dereference - CVE-2026-61863: destroy the huffman_image clone on temp-file open failure in WriteGROUP4Image() (coders/tiff.c) to fix a memory leak - CVE-2026-61870: relinquish pixel_info before throwing on colormap allocation failure in WriteVIFFImage() (coders/viff.c) to fix a memory leak

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm e0f6a77a5ab24459f06a63eeaf4a3bb1e383e3dfe53df14fc196f0645e618d1d ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm 6e1a65e8e9d511685f65855662822152631163fc8f903f2a8a34bc64bc1c24f5 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm 746c63e6ea4b06a4779f4d39efdd54c48bf2ca2a65ae660cb81ae3d51736cfcf ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm de184456d027e759de3298de749051eef985f76e51898786e150d383892f74b9 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm 577dd0ed9fb430c3c7fc30063e733fe431629396dd8f4ab16b6122eceb20343a ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm 003014529317348d675f291a378dfe65e7e7e3fb1ee5334d68a93e4fcd69316e ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.i686.rpm 588202a79f7914706b4114d8458ab57247b28d9dec9543d4d3d6cdcba9b69a6b ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm d6237c56376608840ca28e18cb9aff180dc4b57ff22b9b444ff8d79b53fae634 ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm c408f7aa723c33d64e5cde0bd2970b4f0d9e72aba5967f762f4952d56edd4ce9 ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els22.x86_64.rpm ca8c8356b3d57c1c81126616eb81ea3ddd937a217bf18245bb9eb18a08967815 CLSA-2026:1784803678 TuxCare License Agreement 0 - CVE-2026-42533: add script-engine buffer overrun protection to fix heap buffer overflow when a map regex capture (or a non-cacheable variable) is used in a string expression Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42533: add script-engine buffer overrun protection to fix heap buffer overflow when a map regex capture (or a non-cacheable variable) is used in a string expression

0 tuxcare-rhel7-els nginx-1.20.1-10.el7.tuxcare.els6.x86_64.rpm 67d59fd9d31592030d5a11141eb31b2519b84ebd04c9d013ea2d029677b24ed7 nginx-all-modules-1.20.1-10.el7.tuxcare.els6.noarch.rpm 67e9676f89d46fce447bb425ee93374490e58045f1c685378998748414492b39 nginx-filesystem-1.20.1-10.el7.tuxcare.els6.noarch.rpm 7084741cef8e02ae890fa5b6023a0e581e18f00f75817a5c84873bc79059aa7c nginx-mod-devel-1.20.1-10.el7.tuxcare.els6.x86_64.rpm 16ec9dcde2fdfd55551bb75812a206afe1f9b4b606a8c97fd5738850cc6ac50a nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els6.x86_64.rpm ddfbd55eb870ee4917f22fef010070dd3be6150f46e66c98da66aa03c58f88e1 nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els6.x86_64.rpm 29ce7d0511c45f1c02627fd00df57092e2ecc5325cb73a756caf693a81b8c319 nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els6.x86_64.rpm 8aa438f013ee86142c245e2d4cd1c4f2d110dc605363f99e50be5f1dde7877b1 nginx-mod-mail-1.20.1-10.el7.tuxcare.els6.x86_64.rpm 8ab43a633bf1c6c898c8ea6427ef6e62a43826264f8998a573234c08e5f2781a nginx-mod-stream-1.20.1-10.el7.tuxcare.els6.x86_64.rpm 831f48c1fc33a47dd2dd9797df74b7dcbb0e3ed640c6ebccda0702680967f253 CLSA-2026:1784805083 TuxCare License Agreement 0 - CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling (peerDigestSwapInMask) by bounding mask data against the declared mask_size Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-47729: fix out-of-bounds read in FTP gateway directory-listing parser when a listing entry date is not followed by a filename - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling (peerDigestSwapInMask) by bounding mask data against the declared mask_size

0 tuxcare-rhel7-els squid-3.5.20-17.0.5.el7_9.99.tuxcare.els7.x86_64.rpm 752499fda21cafd97332f58ad720b12b007c15562a73133164d60811c773b00d squid-migration-script-3.5.20-17.0.5.el7_9.99.tuxcare.els7.x86_64.rpm 87131d9c9bec7dd0ea3a9a22f31acd5149114cbba8cc7f3d481800955b3c2c1c squid-sysvinit-3.5.20-17.0.5.el7_9.99.tuxcare.els7.x86_64.rpm fe60da3d17f65acf7ac2a592b8d38e641dbb116ca2a59375a601b9b6c6769f05 CLSA-2026:1784810162 TuxCare License Agreement 0 - CVE-2026-61866: fix a memory leak (CWE-401) in the JNG encoder (WriteOneJNGImage) when the blob for the grayscale JPEG alpha channel cannot be opened Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-61866: fix a memory leak (CWE-401) in the JNG encoder (WriteOneJNGImage) when the blob for the grayscale JPEG alpha channel cannot be opened

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els23.i686.rpm e46fa02999ecbc8135d0a25a62b7efdfe9d87286db384229c2b8aff175408b7d ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm 73e1cb3c07c8a7d4c476d9734fe496821427ae1c63d87050c148897f773eeabd ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els23.i686.rpm 2f4a9bc516bff8bc14e4240a3780668c653537c8a1d15feb988f8dca3758958e ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm ea5055cdbb68acf70c07bd5865c2fd2a189526b0f36084923ab4ca6c63ecf39d ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els23.i686.rpm 34473b023d9041a711f86f250d0dc04907d117e65423a94160fbe09bc16e647f ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm 24e8dd8bc4e4226d73579ef6c6cd256e2f01807317aa07037b5fc2142a6fad5f ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els23.i686.rpm f1a10af35184328d48ac76713d95773bae67d72967f53caf6bfb51606362dab8 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm 6c45852105256a63de8e97d904d9893a8777ccd73c794b8ff78d3b44de85707b ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm cecd0f0af52339169a51a9156162a28eb83408c3aa2b1355c93c99a968c0db35 ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els23.x86_64.rpm d21ef46b33b9e96782a33d62106e1202cb03f66f8904bbf317e648cef12c5484 CLSA-2026:1784846496 TuxCare License Agreement 0 - CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in server_request_tun() (upstream 8dfe7ed6) - CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS (upstream 5d04ca6a) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in server_request_tun() (upstream 8dfe7ed6) - CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS (upstream 5d04ca6a)

0 tuxcare-rhel7-els openssh-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm 4e1e889ea83057ac8d656a42691597ec8b6f46075c2d1df82ef57c664219a3cd openssh-askpass-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm 9e868c3ef8c067d1cdd5c491e5e3c2a451c492c06612ab669bd1e8447a2ddc02 openssh-cavs-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm f1b813a47c3f5bd144f012b5ecfde9a4061ba23b12d02e84e0deb91181b7e01c openssh-clients-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm c792648d2460bede3df5600f24b78c96a85fce461e939aca4ade1d6798d99dbb openssh-keycat-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm 123f69e0b6d861ce9c52b758100d94f304cdaf27abb76f408392d526ead93285 openssh-ldap-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm a3aca38d55be25b0907dbe2c6746cd566a7958b9719c9aa20546c9eb3bfb1e59 openssh-server-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm b233b49521b9a87d52814ce2b79bdcd432a2ce6e99b07726405e780a3a9905e2 openssh-server-sysvinit-7.4p1-23.0.3.el7_9.tuxcare.els7.x86_64.rpm 1c0c1e882f2bd95cca6a5fff2e8d1b68dd1c952d0918648d03bf4e0a374c5a06 pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els7.i686.rpm b2829f43108efc02adb114e20b07ad086d669b8f8eaa205c8c33cd6f10c48e85 pam_ssh_agent_auth-0.10.3-2.23.0.3.el7_9.tuxcare.els7.x86_64.rpm 95a40ca5b1ddae70810207f21977daa9464610da932752fc91214673e913dca5 CLSA-2026:1785139899 TuxCare License Agreement 0 - CVE-2026-41992: out-of-bounds read in the LZH decoder from stale shared decompression state (left/right) reused across a .Z then .lzh file in a single gzip -d invocation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41992: out-of-bounds read in the LZH decoder from stale shared decompression state (left/right) reused across a .Z then .lzh file in a single gzip -d invocation

0 tuxcare-rhel7-els gzip-1.5-11.el7_9.tuxcare.els1.x86_64.rpm b07a2b037e291be5dc13ec769bf6ed8ae653b9d531048fc44e13ae79e8b8ff06 CLSA-2026:1777481470 TuxCare License Agreement 0 - CVE-2021-3326: fix assertion failure in iconv ISO-2022-JP-3 module Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3326: fix assertion failure in iconv ISO-2022-JP-3 module

0 tuxcare-rhel7-els glibc-2.17-326.el7_9.99.tuxcare.els4.i686.rpm ed906e1880b8951b8aacba426f9bc057c52066986b4dbecf0c26046492681070 glibc-2.17-326.el7_9.99.tuxcare.els4.x86_64.rpm e7c57412dd11ed52d775bcc3cfe1e25647030801c0fec3129eb6a1bf6c5b6e25 glibc-common-2.17-326.el7_9.99.tuxcare.els4.x86_64.rpm 64b16f6587d9d70ac4ce57f71f8400d005b9b297ec07af4144a75b38785167d3 glibc-devel-2.17-326.el7_9.99.tuxcare.els4.i686.rpm e80c85e942c4fee8b0030efc8fd7ccd3354c5156a280da1e5e86615f40221a93 glibc-devel-2.17-326.el7_9.99.tuxcare.els4.x86_64.rpm 9f1ba29f4da6cffa60601fb7ff25dba480d37f14eb6b0921716700fef387c210 glibc-headers-2.17-326.el7_9.99.tuxcare.els4.x86_64.rpm 70952235f9f1e10acc4106520cfbf211373739fd40e1fa058686e0d1561bf7fe glibc-static-2.17-326.el7_9.99.tuxcare.els4.i686.rpm 8db9ecca6f6b247ab4d03f25691810b634744678fae5a8b164bd34e0f29daf7f glibc-static-2.17-326.el7_9.99.tuxcare.els4.x86_64.rpm d0bd72d9c0632be4f735d3dfdd02d263da818529251b0f4ed14938b143c7c423 glibc-utils-2.17-326.el7_9.99.tuxcare.els4.x86_64.rpm bdfe6cc92f719b664e57033c217f068b32b91f400d1e20e066a1252a884929e1 nscd-2.17-326.el7_9.99.tuxcare.els4.x86_64.rpm 6e942881a4fb0553e886e63bcd90e4d0da0cd4b49c66bf36d3f3f2a8cbfb2f67 CLSA-2026:1782229978 TuxCare License Agreement 0 - i40e: remove read access to debugfs files {CVE-2025-39901} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50638} - usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607} - md: fix resync softlockup when bitmap size is less than array size {CVE-2023-53357} - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() {CVE-2021-47288} - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051} - netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685} - scsi: pm8001: Fix use-after-free for aborted TMF sas_task {CVE-2022-48791} - media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110} - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455} - netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190} - selinux: Add boundary check in put_entry() {CVE-2022-50200} - tracing: Only have rmmod clear buffers that its events were active in {CVE-2022-49006} - ASoC: core: Fix use-after-free in snd_soc_exit() {CVE-2022-49842} - nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790} - scsi: qla4xxx: Add length check when parsing nlattrs {CVE-2023-53456} - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448} - xen/privcmd: fix double free via VMA splitting {CVE-2026-31787} - ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021} - ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452} - igb: Fix igb_down hung on surprise removal {CVE-2023-53148} - dm raid: fix accesses beyond end of raid member array {CVE-2022-49674} - md: suspend array while updating raid_disks via sysfs {CVE-2025-71225} - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} - atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050} - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572} - drivers: base: Free devm resources when unregistering a device {CVE-2023-53596} - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} - usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720} - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093} - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395} - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output {CVE-2023-53676} - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING {CVE-2022-50430} Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- i40e: remove read access to debugfs files {CVE-2025-39901} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50638} - usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607} - md: fix resync softlockup when bitmap size is less than array size {CVE-2023-53357} - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() {CVE-2021-47288} - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357} - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051} - netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685} - scsi: pm8001: Fix use-after-free for aborted TMF sas_task {CVE-2022-48791} - media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110} - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455} - netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190} - selinux: Add boundary check in put_entry() {CVE-2022-50200} - tracing: Only have rmmod clear buffers that its events were active in {CVE-2022-49006} - ASoC: core: Fix use-after-free in snd_soc_exit() {CVE-2022-49842} - nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790} - scsi: qla4xxx: Add length check when parsing nlattrs {CVE-2023-53456} - net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448} - xen/privcmd: fix double free via VMA splitting {CVE-2026-31787} - ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021} - ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452} - igb: Fix igb_down hung on surprise removal {CVE-2023-53148} - dm raid: fix accesses beyond end of raid member array {CVE-2022-49674} - md: suspend array while updating raid_disks via sysfs {CVE-2025-71225} - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} - atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050} - cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572} - drivers: base: Free devm resources when unregistering a device {CVE-2023-53596} - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} - usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720} - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093} - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395} - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output {CVE-2023-53676} - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING {CVE-2022-50430}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm a829b5d906b73b16922168d51cebfc40f0fe5cb433bf43cefddeea2533c81614 kernel-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm 955ca15b40043aa75bd5558c6672377399ea560c81d88134db9032f2d944d9a9 kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm 8a7d2716b5d5f5063aa5479b1bd19d034ca7170a5b229340714ec9bbe64d2b14 kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm 5f1ab7ed76bfb432d5cbc9868703b3e33b49ce62d0d75746a0284741d9511400 kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm aa96a37811fbb49cf4cafa1e3ed5820bd19fc4bc6702eaad9cd6e9593215bd81 kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm 60f11f0ff8ea8126bd022c2d66ebb51891e4abaee3eb4211a6aa59f3fd9a6a99 kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm eafe32a38ac043e86e2ec5b8730e8b006b1c9efaf5ac26d65b4c0f8eb3a033f7 kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm 38754fafdf114c0f5b64d94f538916fe00cf3cbefe1355dd9cbc9ace138c3dab kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm 0cb7cf6663302d3a14a12ed62b8b0e13024e708c882c853ec6b736df60ae66ba perf-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm 5cadf30acdd2d1da5def19440e3d8fb020efc02b0a439af4d8d94b1e70e79b66 python-perf-3.10.0-1160.144.1.el7.tuxcare.els7.x86_64.rpm 34c50c19d58afebd03c86db2ef647c9f2eedcb124eb08bbc5c90c25e579cd00d CLSA-2026:1783354994 TuxCare License Agreement 0 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113} - btrfs: fix use-after-free after failure to create a snapshot {CVE-2022-48733} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408} - xfs: delete attr leaf freemap entries when empty {CVE-2026-43158} - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664} - media: dvbdev: adopts refcnt to avoid UAF {CVE-2022-50274} - igbvf: fix double free in `igbvf_probe` {CVE-2021-47589} - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() {CVE-2021-47576} - ALSA: seq: Fix race of snd_seq_timer_open() {CVE-2021-47281} - net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088} - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields {CVE-2021-47485} - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740} - proc/vmcore: fix clearing user buffer by properly using clear_user() - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() - ASoC: ops: Correct bounds check for second channel on SX controls {CVE-2022-48951} - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951} - nfsd: fix use-after-free due to delegation race {CVE-2021-47506} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113} - btrfs: fix use-after-free after failure to create a snapshot {CVE-2022-48733} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408} - xfs: delete attr leaf freemap entries when empty {CVE-2026-43158} - net: atlantic: eliminate double free in error handling logic {CVE-2023-52664} - media: dvbdev: adopts refcnt to avoid UAF {CVE-2022-50274} - igbvf: fix double free in `igbvf_probe` {CVE-2021-47589} - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() {CVE-2021-47576} - ALSA: seq: Fix race of snd_seq_timer_open() {CVE-2021-47281} - net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088} - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields {CVE-2021-47485} - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads {CVE-2022-49740} - proc/vmcore: fix clearing user buffer by properly using clear_user() - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() - ASoC: ops: Correct bounds check for second channel on SX controls {CVE-2022-48951} - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() {CVE-2022-48951} - nfsd: fix use-after-free due to delegation race {CVE-2021-47506}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm ea670bbbc64d9bbd87178ddc8738a92fd6faf90775da5dfeb733ea7dc3031e55 kernel-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm e736f3b54690715b59c7d2db7d13c9a1cb055347c5288e66911309aab5bbd510 kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm 81197e131812cafe7b7bb5c13c818ac638739d7b10363ac8d5796422c0723fdb kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm cbe8daa7b64f1e90ed966d073a2acca6467d1fb95d08513e01daa1fc7b38e983 kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm 31bcdcd5406b8e0290aa779fb09c3b0e9dfc00c6f944588329d8e1535d809d0f kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm 2e1e19e8cbef4bf9ee3256f3994dcea6beddbfd4cfb54af4f3d0d03f018e641d kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm 4255bd5a98f07dea19e16c0a5d93a902be377b6e4b03f61fcf71d81c14709f6f kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm 22c9efa8d03e3b48774edda6d4439c7875fbed1c39a7b0a2a678aa63caf59c64 kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm 4e709910d1d609436b931bcee74e7ec5f3711839baa5e37b87af6b3b3cb33219 perf-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm 48827a19e3608a452636993823484cd7090995a1faa560e320b74b432ee55d9c python-perf-3.10.0-1160.144.1.el7.tuxcare.els8.x86_64.rpm f17a8dc84af1099196229e0346b4662144ea8b70f054fdca7f0aea30b6f117e1 CLSA-2025:1766600619 TuxCare License Agreement 0 - xfrm: Duplicate SPI Handling {CVE-2025-39965} - xfrm: state: use atomic_inc_not_zero to increment refcount - padata: Fix pd UAF once and for all {CVE-2025-38584} - padata: Remove broken queue flushing {CVE-2023-52854} - padata: ensure padata_do_serial() runs on the correct CPU - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ipvs: use explicitly signed chars - vt: Clear selection before changing the font {CVE-2022-49948} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - igb: Do not free q_vector unless new one was allocated {CVE-2022-50252} - scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084} - dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258} - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - net_sched: hfsc: Fix a UAF vulnerability in class handling - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- xfrm: Duplicate SPI Handling {CVE-2025-39965} - xfrm: state: use atomic_inc_not_zero to increment refcount - padata: Fix pd UAF once and for all {CVE-2025-38584} - padata: Remove broken queue flushing {CVE-2023-52854} - padata: ensure padata_do_serial() runs on the correct CPU - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ipvs: use explicitly signed chars - vt: Clear selection before changing the font {CVE-2022-49948} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - igb: Do not free q_vector unless new one was allocated {CVE-2022-50252} - scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084} - dm raid: fix address sanitizer warning in raid_resume {CVE-2022-50085} - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870} - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258} - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882} - Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250} - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control {CVE-2025-39751} - jbd2: remove wrong sb->s_sequence check {CVE-2025-37839} - net_sched: hfsc: Fix a UAF vulnerability in class handling - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm 4c671b611f37bb602d4c30526bd52a2aa70b60bbce8d5982c54f8dd15bceb508 kernel-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm 8d997e64944a60f8cb471ba08aae18810d09ed7a4c23d6ce2c821a872072ee08 kernel-debug-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm d83c015f1d692e0e78e19b18316fba37f84fe1e04acce167079308ff2f5ecd58 kernel-debug-devel-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm 3a1ef6a2667f072a8bf9a290c8cdbcaad6901656e86cf6080bc19dbe8e905c6b kernel-devel-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm a35607e04b438a23cba0894c28f7c72ded7e84d99021ed6da1edbe06fe8fc532 kernel-headers-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm d7fe2f78edcff1d7eb168fe53f4cd56e7122c6cafb30568e1d91a5d41c06e3c5 kernel-tools-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm 06f34408df7499d00ff0795bde1dd7bce6664714c96f3a6cfe9024fad47857e0 kernel-tools-libs-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm a63200cd9fa78d39b052bde62c36d8ac20616d24efefb8b4ff6fc1ba0e322f22 kernel-tools-libs-devel-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm 36ba87986a4c92bea99c7f718e3ff04cc658ca9304f035fd224f88d07a7f7849 perf-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm 8ff09a1d66b0b4a024974e7158eefcd05a3e15893fae8d2a3f90eca11a16f8cf python-perf-3.10.0-1160.139.1.el7.tuxcare.els3.x86_64.rpm 8a5937c699b5f94efd31a9ab78245f3af6704f36c7ef0d2597f52ee3dba50493 CLSA-2025:1755708215 TuxCare License Agreement 0 - can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803} None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922} - udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm 4f01dd990efb6b8de16c34064b0be0c27690c9b0c5f447ec6b097f38d6480180 kernel-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm 03478fceeb861e4ca428f4216fd4adbf8b2b01f8e435fd029c518ab6649c3192 kernel-debug-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm f1a3184d430ab87bbf70d136f8891b1962fb602251156a3d6dc16332b0c9ebbe kernel-debug-devel-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm 224b5e487d81997778b4a9edca5bc8250c19d075615b01f06caf282b79cf13e2 kernel-devel-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm 55225668a159567924b5cf023b4690fb74ec62a57675beb7544c472aecfbdcbd kernel-headers-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm 3fc8e10ca9ab7070d9113b791bd00fadd7a1b5c89d8a34636bb2dc944070c9d4 kernel-tools-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm aef1cd4ae57f33a20f2e74da6120c5654b59c09b9aaac78f2a48e0d4fa57b33d kernel-tools-libs-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm 4c118a3cdcce044b8f2650aa7400e1ddaec7899527dcadcb81b6e44cacb529b7 kernel-tools-libs-devel-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm 97e96205a0f966f36d3d44a8b854706833b603abab724274b8e332192db7cac8 perf-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm e94b82d2f3f9bd1e390371265a54fd24b635d5531194cc8ae8cdafd6a4067de0 python-perf-3.10.0-1160.119.1.el7.tuxcare.els22.x86_64.rpm d17c32cb5ee8b3b8164c72c50f8adda6a2d3754224c95f80e28f99459bc22109 CLSA-2026:1782226648 TuxCare License Agreement 0 - smb: client: reject userspace cifs.spnego descriptions - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475} - cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s {CVE-2026-43427} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- smb: client: reject userspace cifs.spnego descriptions - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - nvme-rdma: fix possible use-after-free in transport error_recovery work {CVE-2022-48788} - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails {CVE-2022-49029} - Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475} - cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741} - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988} - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s {CVE-2026-43427} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm d590d8e900ea1d621a103ee7db669ae692fc9ac62d1f59e2c69b5e6b4ab43a4a kernel-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm 5c54583c3c22cee8e42345f4bf3b894ea4793182c2e94a676a30933f624fc3d2 kernel-debug-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm 366e2e8d039d9ee823021a2097c6ccb363715ba339747e97d5350eb12d8ae857 kernel-debug-devel-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm 964af7ca6c0a8163362eb15cb7aafbb62a229f896388688d4590fc59f2a759b5 kernel-devel-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm b44aabaff6a77ab52d3ff85cd0496e873a7f39e1fdc173fb1ca7fef062e19a73 kernel-headers-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm 81698f6cc2b08411de260d02cc2f970927fb3e3f97b570e9ca76f8da72e4e9f9 kernel-tools-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm e2cc8644630ff00fedf5d5324f11964c3dacc66d2549e4031a910553677fbdbc kernel-tools-libs-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm fa22b30ee6eeb072c700bb9e2e1fb00164dad58755a7d8bb8f3fa8c6959b3a8a kernel-tools-libs-devel-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm 239ed88d953d4348c15b2cf492c8ba9979631ae5f16afb64e8c25681efda7fa2 perf-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm 268d84bc5c7cc480287da532a722ea9ffa3523add898974ce3bef64e58761dc8 python-perf-3.10.0-1160.144.1.el7.tuxcare.els6.x86_64.rpm 89ae21b06b3524e0cc24a669d1bebc5398d0fd7ae62faeaf314ee00d6c4d254a CLSA-2026:1785400317 TuxCare License Agreement 0 - CVE-2026-8286: url: fix connection reuse for starttls protocols Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8286: url: fix connection reuse for starttls protocols

0 tuxcare-rhel7-els curl-7.29.0-59.0.3.el7_9.2.tuxcare.els3.x86_64.rpm 3b278d4fc2d996a6e4e1f9630da04a90821a89aaf0e1cfd29f2442c4d3293a20 libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els3.i686.rpm 552c746c21b750d580a2df8c7e01c7442b54c8d770d473b0cc8292be631f1f79 libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els3.x86_64.rpm e7858c26118947c2ff3b7fb206dec614f9285b0b32a46d792812155184788f32 libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els3.i686.rpm 2920282e7a5f71997d9bb018796ee7f00d834b326b03649b227d0ed859b666ef libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els3.x86_64.rpm 135be864a2c87c26e0fc75ecc4554b797b3f61bc8d58f5b450384ae3f9904d2e CLSA-2026:1785401154 TuxCare License Agreement 0 - CVE-2026-6100: clear dangling next_in pointer after MemoryError in bz2/lzma decompress to avoid use-after-free on decompressor reuse - CVE-2026-11972: break tarfile._Stream.seek block-skip loop at EOF to avoid a hang on crafted streaming archives Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6100: clear dangling next_in pointer after MemoryError in bz2/lzma decompress to avoid use-after-free on decompressor reuse - CVE-2026-11972: break tarfile._Stream.seek block-skip loop at EOF to avoid a hang on crafted streaming archives

0 tuxcare-rhel7-els python3-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm de997ef50ade619b37a1b7f7c538d80ca8ca890a6cc1d1dce308632dd47548ca python3-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm 6b8701420793fe9e3e0d89772b662f016a4f348ca4a3f0b2e69b7c529733b2ab python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm 19b039c626a1c5bd20992d037a7467485f0b7a569c3dfe4405a1e04c9b2d7c76 python3-debug-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm c6cc1058b1f960b52860843b7776e51a7d5df4442bbfd0a6d938f1fecb1d7a68 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm af821ab77b8a864bbde36fc2cddb036fcea661e460968617f47b3429abbce114 python3-devel-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm 19f60a9a58c824bb19851de3c8578aa5b44363c71206a9faeada9ac6d01d3a4d python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm 5418e87785de77295573c494389088f1ca30c18a56c43a131c5cae52853da1ec python3-idle-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm 5b6a24aff01c7473809f7cfbd931b10e881fb66111a2c2735e7a1920aab49444 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm b82845267601dd08c53062f7baddd3b7b26fe82e783490cc395647c0d75783a9 python3-libs-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm 014ad1b9557d8f013ba4886a6944c2e609d30472fe408f5f36fc3d4713f2e765 python3-test-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm 671d891681bd0478ecb571b96528c884cb126f524519083d670f8affc3ccd82e python3-test-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm 752d7f0f7171d02995ef12ccae8f3fe7a4508a02fb9df599994b4a616362ee5c python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els14.i686.rpm 3cebf82ab49a4ef8ca8cda0be286aee5d9017cc6e69ef4847bba0ab80a8bc122 python3-tkinter-3.6.8-21.0.5.el7_9.tuxcare.els14.x86_64.rpm 01c910f10dd55074a0d449297669e73a2d2fc5a92f123adc05e46b0bd0ff381c CLSA-2026:1785410023 TuxCare License Agreement 0 - CVE-2026-50252: DNS cache poisoning via per-thread source port partitioning; with 'so-reuseport: yes' and multiple threads the outgoing source port revealed the worker thread, lowering effective port entropy Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50252: DNS cache poisoning via per-thread source port partitioning; with 'so-reuseport: yes' and multiple threads the outgoing source port revealed the worker thread, lowering effective port entropy

0 tuxcare-rhel7-els unbound-1.6.6-5.el7_8.tuxcare.els7.x86_64.rpm ea127ddba9d2f413d02d4b4892281d6aa20855edf9550002fb1dd471f04389d4 unbound-devel-1.6.6-5.el7_8.tuxcare.els7.i686.rpm c37bc32ca7b2f554d2105b083b20d83aed7e2e35365c7d17e76d01d4d4dfb453 unbound-devel-1.6.6-5.el7_8.tuxcare.els7.x86_64.rpm 981cb6a2cadabdab31c65cf07fda83b5c79271eaa7281c070b1d1f086752eb4d unbound-libs-1.6.6-5.el7_8.tuxcare.els7.i686.rpm abafd35af4e473a7ee0c657aad5e0a7a27ee3b51665714f79ccfe08218b02296 unbound-libs-1.6.6-5.el7_8.tuxcare.els7.x86_64.rpm 0190bdaee339060533c191ce540b74ba0a05bdb0f741356c827efeecb3f1378c unbound-python-1.6.6-5.el7_8.tuxcare.els7.x86_64.rpm 3b5b118b0d6640de2585a340e0e97e80e9935ca12d250b5248b20b60b96035f2 CLSA-2026:1785752193 TuxCare License Agreement 0 - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() - i40e: increase max descriptors for XL710 - e1000e: fix heap overflow in e1000_set_eeprom - vsock: avoid to close connected socket after the timeout - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: lost matching-pair of trace in ext4_truncate - ext4: allow ext4_truncate() to return an error - net: sched: sch_teql: fix null-pointer dereference - drm/virtio: move drm_connector_update_edid_property() call - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() - cifs: serialise setting of cifsInodeInfo::oplock - cifs: serialise DIO and buffered IO - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - iavf: Fix reset error handling - RDMA/rxe: Fix incomplete state save in rxe_requester - scsi: qla2xxx: Fix bsg_done() causing double free - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402} - net: check iov bounds in memcpy_from_msg() {CVE-2018-16885} - md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163} - RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110} - xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree {CVE-2026-43125} - RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852} - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181} - net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116} - ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090} - rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-53166} - RDMA/rxe: Zero out index member of struct rxe_queue Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() - i40e: increase max descriptors for XL710 - e1000e: fix heap overflow in e1000_set_eeprom - vsock: avoid to close connected socket after the timeout - ext4: fix use-after-free in ext4_orphan_cleanup - ext4: lost matching-pair of trace in ext4_truncate - ext4: allow ext4_truncate() to return an error - net: sched: sch_teql: fix null-pointer dereference - drm/virtio: move drm_connector_update_edid_property() call - cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level() - cifs: serialise setting of cifsInodeInfo::oplock - cifs: serialise DIO and buffered IO - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() - iavf: Fix reset error handling - RDMA/rxe: Fix incomplete state save in rxe_requester - scsi: qla2xxx: Fix bsg_done() causing double free - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402} - net: check iov bounds in memcpy_from_msg() {CVE-2018-16885} - md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163} - RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() {CVE-2026-43037} - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110} - xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158} - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree {CVE-2026-43125} - RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852} - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181} - net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684} - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116} - ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090} - rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-53166} - RDMA/rxe: Zero out index member of struct rxe_queue

0 tuxcare-rhel7-els bpftool-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 2c15b15f1cc324ad292f6bf45f38bd3ba864e78b70f00b073993e305abd7ba06 kernel-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 53e74adeed2b4a508f6f220dbfc3a82fd525dd63effce622f773711fd2f569e7 kernel-debug-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 080c6caa10d0464453522aa8494c0384013cbc2a5d4bdd71a580693e84dba64f kernel-debug-devel-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 5206e7cd31ae1f6953d4246632ccb46be8b36142591f51fda6726bc432b26b63 kernel-devel-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 78bbde5334eb93a1be2322934ab16b2265d38ba67700d1a6dcb5c1bc20ffbd38 kernel-headers-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 58b33868bcfac92cc8bace4540482615c0aeef8986606a7282121b2d46f4ab95 kernel-tools-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 05ce354b9e6d3807e95692c3300e42bbba7113cfe472a51540712964623442e7 kernel-tools-libs-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 715f90b55f854f68b392f97a63930bf2930a4c0c99602c16bcfc8ab5fcfc0e8a kernel-tools-libs-devel-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm b3524dfda5a771b70975ee12c81dbd9c4fbd7b775ad41fbf0041c5bb41e1fabe perf-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm af16de6b85724a2bf2293215859ed55d9f21ab64b019455c50276ee521427ff3 python-perf-3.10.0-1160.156.1.el7.tuxcare.els1.x86_64.rpm 4ac4e1b70c36ef1e79476e72687497039e640f9b64f28929b555c4c3b211775b CLSA-2026:1785844339 TuxCare License Agreement 0 - CVE-2026-11972: stop tarfile._Stream.seek() from spinning past end of stream - the loop read whole blocks according to the member size declared in the header and ignored what read() returned, so a header announcing a huge size (e.g. 2**64) kept it going against an already exhausted stream and hung any application walking an untrusted archive opened in streaming mode (mode='r|'). Backported from upstream CPython (gh-151981, GH-151982). Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11972: stop tarfile._Stream.seek() from spinning past end of stream - the loop read whole blocks according to the member size declared in the header and ignored what read() returned, so a header announcing a huge size (e.g. 2**64) kept it going against an already exhausted stream and hung any application walking an untrusted archive opened in streaming mode (mode='r|'). Backported from upstream CPython (gh-151981, GH-151982).

0 tuxcare-rhel7-els python-2.7.5-94.0.1.el7_9.tuxcare.els13.x86_64.rpm 7d982f072c628c9ac623fd9e300e21cbd8a9e64bd6819a0461a97d1405495b0c python-debug-2.7.5-94.0.1.el7_9.tuxcare.els13.x86_64.rpm 8e672389e670e31979a30a544e00d1abb106af4fc5ea148ea8a1d4a090d7a037 python-devel-2.7.5-94.0.1.el7_9.tuxcare.els13.x86_64.rpm 52192389f53bcedf9e49209e1347a785157a9dd9b82952169abc67c6d3695822 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els13.i686.rpm 7cf9304225dec34fe5cf7eb8b716eccceb213e7010a58108aff1e7332973ea96 python-libs-2.7.5-94.0.1.el7_9.tuxcare.els13.x86_64.rpm 00ead1b8e79dcaaacdd6337576afa0d8633ed6082f6dbf1706c3505858f3412f python-test-2.7.5-94.0.1.el7_9.tuxcare.els13.x86_64.rpm 7498d9745c274251d20d58c5f39bb809a151a97222664d95f6174cda711f8dfd python-tools-2.7.5-94.0.1.el7_9.tuxcare.els13.x86_64.rpm ea63878728af50f5a5aa2c66fd203d0fec10cdacda102df1ced65e99763069b3 tkinter-2.7.5-94.0.1.el7_9.tuxcare.els13.x86_64.rpm 1b232f529939c9109c78dc855951b723aace9d32f9cdb3aa212ca2e4554b4a08 CLSA-2026:1782160524 TuxCare License Agreement 0 - CVE-2026-44186: mod_proxy_ftp: fix infinite loop parsing the Retry-After delay in an FTP response - advance the scan pointer so the whitespace-prefixed digit search terminates Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-44186: mod_proxy_ftp: fix infinite loop parsing the Retry-After delay in an FTP response - advance the scan pointer so the whitespace-prefixed digit search terminates

0 tuxcare-rhel7-els httpd-2.4.6-99.0.5.el7_9.1.tuxcare.els13.x86_64.rpm fc76a9c5df6f346117edd46dbabd5cf4e5f01ce9d3e8a6f57da2c8e8d5f1d93f httpd-devel-2.4.6-99.0.5.el7_9.1.tuxcare.els13.x86_64.rpm aede2aad32449d4a6fda6514501e72c4239e0a12f0627a3fbb1370c6dbe7cc34 httpd-manual-2.4.6-99.0.5.el7_9.1.tuxcare.els13.noarch.rpm 9dae869152bcdd42d56497edeb146b8542870c66ac7864ae6e6b1828731f829a httpd-tools-2.4.6-99.0.5.el7_9.1.tuxcare.els13.x86_64.rpm 7ce605d477a713cb1a0d7ca58f7bd893224e49bd922096d9b89ac094fd8eff46 mod_ldap-2.4.6-99.0.5.el7_9.1.tuxcare.els13.x86_64.rpm 704eb57d5aff80588b25244b947f73e76a52cc78efa380650357ab92b6ae89d2 mod_proxy_html-2.4.6-99.0.5.el7_9.1.tuxcare.els13.x86_64.rpm 117c00a554e45dcb392fa6d160f837e2f72543b06238633e795b87fe45ec51ed mod_session-2.4.6-99.0.5.el7_9.1.tuxcare.els13.x86_64.rpm 4f735e85e443e01ab9280e5fa693dd22f379cfe491a8c94ae1cf98eab19edfb3 mod_ssl-2.4.6-99.0.5.el7_9.1.tuxcare.els13.x86_64.rpm ba6d60cacf70c8b44bdf557fc7f53c488c595286da11dbe169be454bda62f882 CLSA-2026:1785885689 TuxCare License Agreement 0 - CVE-2026-13321: reject validly-signed NSEC records whose Next Domain Name points outside the signer's zone, preventing cross-zone DNSSEC cache poisoning Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-13321: reject validly-signed NSEC records whose Next Domain Name points outside the signer's zone, preventing cross-zone DNSSEC cache poisoning

0 tuxcare-rhel7-els bind-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 151c25b32c7b7368f2c2a4177f8e8c279e3cdba3b32ae544b5b2f9bb679438c3 bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 15e0fb497586ae171a392a76f64ed6a7e6d017ac2a00e9d6fc0286d6f89da2a1 bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els14.i686.rpm 82a193aaca3d2801b14814772773c3b94ba0d077b056de8cc9aa96eac9b5d2ed bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm d714200cd48e85e66e64e62b11b4a8ced9a6e6943c7c34d9a6611a036401fd5f bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els14.i686.rpm 5a242ead157f46cdc0c3721c4427f3187e7560b6051f6a65831b4319f18e29b8 bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 909d5c2ef71560c47ddb9f8e51313241fae71c237b7bb337371fea112f584a16 bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els14.i686.rpm 1a36aad62b2a7f7635acd104dff638ddef5fc0217b2d105f5a6b473eac8664f8 bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 778058060d1922e8e8c0ffb480405213b29bb459626df3d9a4896bb15180fe1f bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els14.i686.rpm 33fde9775bb6426825bac04aae4b88ea17221b4ea74ad15cd096ddc83883d6c2 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 7b5066c61bc24b44239134f24a24efabe74ef8669aabd20adf51c545edeecc8d bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els14.i686.rpm 70d0c297f63e0f86d0494661a6aa2ec6b8958ed11f24358a28ad8620d3dcdd4b bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 37e57fc2738fc7ab0055e1034ac4b146e687404b6486e969628c3f0bac3a391a bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els14.noarch.rpm 495376dd6295d8bbcf499b2678de42af966b92a66ca3846ac5d7e00b625e6f79 bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els14.i686.rpm 166c02962d0c8a90c9b71b3c652fca5af94386f2a40bdd4700125ae9d0e4a39d bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm d9549b8888923e30120afb09d7dc4d32dfe716632b402c0b3e2a3a6e28273c38 bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 9be4af260fa851a67933ba8650631eed5cac8e640a490dc15afcd2ba68560a8c bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els14.i686.rpm 1f6ed9115321be47a2758052ac8b962c858096033deb8ed0d26ef837fcd251c3 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 3f8863ef0d101f1c4a72bef424a41f5dbf96ec27f22f21bee13e6c08e1a57183 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els14.i686.rpm fb2dab5b4f8859034acbecf8dfe3dc1a56454498c749e4a2be47eb5e3d0611c6 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 1288fb9c9e0f74ecfd8205ff3cf7b3387eeca5dba3ffeee8d3129029c04f074e bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 09b582245f7312646174ae9b4ee53909df362438ad9780a3fe8235525ece693a bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 290d3826055f1e032f0965387f8aa588d3bb4baf679d68164989b1be1f016286 bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm 5336031fd7763578a4652e333dfc652c0ac2262efa1cee666753ef1a25a10188 bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els14.x86_64.rpm a4d81e81191c9e75212f0e545e5aa98c47b0c9778d018d83c52cba930b0184b5 CLSA-2026:1786005845 TuxCare License Agreement 0 - CVE-2026-45447: fix use-after-free of a caller-owned BIO in PKCS7_verify() when the SignedData digestAlgorithms field is an empty ASN.1 SET Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45447: fix use-after-free of a caller-owned BIO in PKCS7_verify() when the SignedData digestAlgorithms field is an empty ASN.1 SET

0 tuxcare-rhel7-els openssl11-1.1.1k-7.el7.tuxcare.els3.x86_64.rpm 4051f832abcb67c8b0d6ac5521c97a576b2e8fa3a65c2b44ec1f0a53174d994a openssl11-devel-1.1.1k-7.el7.tuxcare.els3.x86_64.rpm eb1264b379849429000caa72a900b504ca256e38aa955c68b1bb2207ea480f4a openssl11-libs-1.1.1k-7.el7.tuxcare.els3.x86_64.rpm 7b31a8bf24893ba40f6e08e9763592b7fa212b25e97e25b316ab52bf21523fb0 openssl11-static-1.1.1k-7.el7.tuxcare.els3.x86_64.rpm dc1d53145eb3f1010dbb350e77329327d6ffcf73dc1c2d63a421c3fba28e00e9 CLSA-2026:1786026662 TuxCare License Agreement 0 - CVE-2026-8927: url: detect proxy changes read from environment to flush proxy Digest state - CVE-2026-8932: tls: fix incomplete mTLS config in connection reuse and session cache Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8927: url: detect proxy changes read from environment to flush proxy Digest state - CVE-2026-8932: tls: fix incomplete mTLS config in connection reuse and session cache

0 tuxcare-rhel7-els curl-7.29.0-59.0.3.el7_9.2.tuxcare.els5.x86_64.rpm e3d71f58fe5babc5eb8b78124127ddcd030e679f1a71534128b8a3eebee3a92b libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els5.i686.rpm 34f77131d3f755b44cd40b096567eee3f501cac6b8597681f56cabcad5987305 libcurl-7.29.0-59.0.3.el7_9.2.tuxcare.els5.x86_64.rpm 02f830fa7a4e7d9e5664c3dbf9e7ff6b2c73d6fd3cf4be90133dab0181b96897 libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els5.i686.rpm 0d758beb43838e013b9d5a005c401372e19cf213c9d943e8264bacc287930aed libcurl-devel-7.29.0-59.0.3.el7_9.2.tuxcare.els5.x86_64.rpm 43c54968110db23cfd4549fcc1ae5c2042c1dc0d9968ee8e9c23530f5f137303 CLSA-2026:1786027135 TuxCare License Agreement 0 - CVE-2026-56407: prevent signed integer overflow of the entity textLen field by capping the entityValuePool length at INT_MAX in doProlog Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56407: prevent signed integer overflow of the entity textLen field by capping the entityValuePool length at INT_MAX in doProlog

0 tuxcare-rhel7-els expat-2.1.0-15.0.7.el7_9.tuxcare.els4.i686.rpm d819fe61f79d9753cad4089fdd06a34bc6bfc8a6eecfb653d3dd6c5be82a51ac expat-2.1.0-15.0.7.el7_9.tuxcare.els4.x86_64.rpm 927bc4ab08ddbbd317388250869cda26918df57cfaa76938f69c209154490d31 expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els4.i686.rpm e93c5a82aa780dd7d6445e260f6df6e4eef7e8cc80cc25670220c4d5047fe718 expat-devel-2.1.0-15.0.7.el7_9.tuxcare.els4.x86_64.rpm e507303161690eeac2407037938fa82bf077154de00184369fcb8087272afbf4 expat-static-2.1.0-15.0.7.el7_9.tuxcare.els4.i686.rpm 5a6c14b2c3682ece7d2a661a7b377b6f1fb079e443ff8d2f373f549bb34d3484 expat-static-2.1.0-15.0.7.el7_9.tuxcare.els4.x86_64.rpm b011a445820bef04fddd9c817992647bbd6cf91117bb884f5017d9c7c765277c CLSA-2026:1786097919 TuxCare License Agreement 0 - CVE-2024-52532: fix infinite loop and unbounded memory consumption while reading certain patterns of WebSocket data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-52532: fix infinite loop and unbounded memory consumption while reading certain patterns of WebSocket data

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.11.el7.tuxcare.els2.i686.rpm 4600c62fd84cc251d1010f40e323ac461aff12eb7297556a4683f241fbaa070e libsoup-2.62.2-2.0.11.el7.tuxcare.els2.x86_64.rpm c6a8f4198b90815324b9b1e2731abc19dd4311ca9e2144e6e05a319dc82952b0 libsoup-devel-2.62.2-2.0.11.el7.tuxcare.els2.i686.rpm b59da65e3fe190fe42b0e723c21cec90a91be8102662b79b7450b8ac6bbb887b libsoup-devel-2.62.2-2.0.11.el7.tuxcare.els2.x86_64.rpm bd13e796f0cace3e742163b1f52753e090f293aa3ba0b22fa2a8a241bc4da97c CLSA-2026:1786125022 TuxCare License Agreement 0 - Re-tag base release to 2.0.11 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.62.2-2.0.11.el7 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Re-tag base release to 2.0.11 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.62.2-2.0.11.el7

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.11.el7.tuxcare.els1.i686.rpm 2d53ab678c67e98d5b171ca33bd5dfcab9979d86311c5815639e0d9fbbfc9051 libsoup-2.62.2-2.0.11.el7.tuxcare.els1.x86_64.rpm 095d90985f2b539a835b75fc839dd6f69c9d861187fe041a0658ed8377e087bd libsoup-devel-2.62.2-2.0.11.el7.tuxcare.els1.i686.rpm 47f0986fdaa1eb7934a57b71405c310a25c08f30d9eae546a78b32d3841e0418 libsoup-devel-2.62.2-2.0.11.el7.tuxcare.els1.x86_64.rpm ff115a74748185cccdb51130376f10365068b5d7d15dc5fecef002a9890d8030 CLSA-2026:1786125226 TuxCare License Agreement 0 - Re-tag base release to 23.0.5 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 7.4p1-23.0.5.el7_9 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Re-tag base release to 23.0.5 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 7.4p1-23.0.5.el7_9

0 tuxcare-rhel7-els openssh-7.4p1-23.0.5.el7_9.tuxcare.els1.x86_64.rpm fe1460fc855dfdbffdcb2f4780538eee4ae9bbba6da4bdf606c2401f39015f2c openssh-askpass-7.4p1-23.0.5.el7_9.tuxcare.els1.x86_64.rpm 53e5c2f8a5e496632d46f3734ec9fdbfc1edc3d23fb80cea07ed1a868a6e6f27 openssh-cavs-7.4p1-23.0.5.el7_9.tuxcare.els1.x86_64.rpm 613df3f43a1477aa8109adb923f177c6c85b56f69d8346b99facb5f73add6262 openssh-clients-7.4p1-23.0.5.el7_9.tuxcare.els1.x86_64.rpm d50ba4754f772b5da292283cc8e6225ba2ca988dbe7b0b13970f3ef6849ad618 openssh-keycat-7.4p1-23.0.5.el7_9.tuxcare.els1.x86_64.rpm 12337f7af74390039c0a9c736491304d6c4e681e5e4ab8db4f9bac43fd3a5073 openssh-ldap-7.4p1-23.0.5.el7_9.tuxcare.els1.x86_64.rpm 7f0dde53e560c2cccbbe4973488a254820b8abb1e39ba252607fcf2416253fc4 openssh-server-7.4p1-23.0.5.el7_9.tuxcare.els1.x86_64.rpm 82db06f8ae9542ee6a8236d6430e4379febe9e3e88e8945a18583dde9677ce4c openssh-server-sysvinit-7.4p1-23.0.5.el7_9.tuxcare.els1.x86_64.rpm 6af2482ba13c69df8117c158fc13f3bf5b1bf26b74810cd98df91f56c9f75eb6 pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els1.i686.rpm 640aca643c09ec69609f2a74a740adf2c78c2d7895d836d9841783291b6dccce pam_ssh_agent_auth-0.10.3-2.23.0.5.el7_9.tuxcare.els1.x86_64.rpm 1f71705b3877c546cf1b73cb9a31e606d92378794cc19f62b97fd3321876c4e2 CLSA-2026:1786125449 TuxCare License Agreement 0 - Re-tag base release to 26.0.1 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 1.0.2k-26.0.1.el7_9 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Re-tag base release to 26.0.1 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 1.0.2k-26.0.1.el7_9

0 tuxcare-rhel7-els openssl-1.0.2k-26.0.1.el7_9.tuxcare.els1.x86_64.rpm d81fbc90af49614889364534df9efe2fa97a738c7847abc2784d76bdce98b6e0 openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els1.i686.rpm d52b5bff873d24afd07de84facc48cea954e918f471b3002dfd1af744a6d7948 openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els1.x86_64.rpm e38b22c982f911a06cd4b4b9d98c2e2a1a13445050f67f382ab5dd1ccf6b33e0 openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els1.i686.rpm 73868030f27a7cc98bccdcb017933a1af115d06f04ab6c11fef59a6f39eba983 openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els1.x86_64.rpm 3d921aa30e71d40e1a9bf380b3631d1d8fa495bae8fc161403f8f8643e7546f4 openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els1.x86_64.rpm 93dc9b9062d07fa84f79e370a6382e08fc50345e4a8b01c5e759c3a9a75f1aae openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els1.i686.rpm b2c50c50d7a41ca3d8f2fabe2d6de8f6801eb3801dfe2a1c520536545cd52b72 openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els1.x86_64.rpm 5848ee14bb1dc44300a58481d1f28a93e6ebf62660ce4bd3e54a1e912bb4d6d5 CLSA-2026:1786125672 TuxCare License Agreement 0 - Re-tag base release to 299.0.1 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 5.16.3-299.0.1.el7_9 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Re-tag base release to 299.0.1 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 5.16.3-299.0.1.el7_9

0 tuxcare-rhel7-els perl-5.16.3-299.0.1.el7_9.tuxcare.els1.x86_64.rpm 6128b5555569a9a95d56a827c3ff7d8ed9defa1636c6a20f52e9e11fd93551c7 perl-CPAN-1.9800-299.0.1.el7_9.tuxcare.els1.noarch.rpm 980b62c27fffaba2b798b6100f9a48443862a29979f90371246f1f15e8d533a7 perl-ExtUtils-CBuilder-0.28.2.6-299.0.1.el7_9.tuxcare.els1.noarch.rpm 704da66e3980af76c8f043cc5c0ad01985b84aab7ff4014a4fe0fe8cfff74f22 perl-ExtUtils-Embed-1.30-299.0.1.el7_9.tuxcare.els1.noarch.rpm 18032ecc9a7efa470ed41419c6f17f3c6cbe392b6164c4a0a973555c223929a0 perl-ExtUtils-Install-1.58-299.0.1.el7_9.tuxcare.els1.noarch.rpm 15114a0ded401ae1eb5d3cdf02ca77c019e83d50f0b2078d5f5654e095c04ed5 perl-IO-Zlib-1.10-299.0.1.el7_9.tuxcare.els1.noarch.rpm 5b82ab6fb0e12325e7880f808b335a7ab28b32d970e9a6c150d916e75a3d3ab4 perl-Locale-Maketext-Simple-0.21-299.0.1.el7_9.tuxcare.els1.noarch.rpm f21b641ce2cccc0d494223418e501b3a2d0b26d075e634417ed8a11bbd3b1182 perl-Module-CoreList-2.76.02-299.0.1.el7_9.tuxcare.els1.noarch.rpm 1f7e53433b9e9c7b6a4de2cad3971ea0d50fd318cc26258e626c9fc6bf8bc5a5 perl-Module-Loaded-0.08-299.0.1.el7_9.tuxcare.els1.noarch.rpm c7ab6aa3f32ccafb818e43e734404d101502e53204c9935dd8aede83800cc99f perl-Object-Accessor-0.42-299.0.1.el7_9.tuxcare.els1.noarch.rpm a2d62054db9ec84b2cecd9e12ffdbd1699035159b3c8a455045636427a9fa7df perl-Package-Constants-0.02-299.0.1.el7_9.tuxcare.els1.noarch.rpm b9faa4a6a53ae30ebac5303ae00857e51879e10c02b4257ea51ecb473b9151e7 perl-Pod-Escapes-1.04-299.0.1.el7_9.tuxcare.els1.noarch.rpm d35b31a3b4d64bb6cc16ddea6a2261267b92fb5f8b1c39792d9216c53b9a3f1b perl-Time-Piece-1.20.1-299.0.1.el7_9.tuxcare.els1.x86_64.rpm b7e536e39b464c7709fa82865774bd7cbc44f7c8a6bb15df948ccd42bcbe88ea perl-core-5.16.3-299.0.1.el7_9.tuxcare.els1.x86_64.rpm a432777c690603afc30e2477cca48d240648d0d52050f8ed277ab7b5562ec658 perl-devel-5.16.3-299.0.1.el7_9.tuxcare.els1.i686.rpm f9abebf6d70bc8ba2086ec97d28aa5fbafa2e004fcd9df730e774f80fc68aef6 perl-devel-5.16.3-299.0.1.el7_9.tuxcare.els1.x86_64.rpm 2114346cd62558dad089aaf8e59122c807371bdc6265b1dfc1f8a0e4f9df882a perl-libs-5.16.3-299.0.1.el7_9.tuxcare.els1.i686.rpm 6106382ff6c76e69751fafba1fcd28d8bb785eb826fedeae06cde3e2c527afff perl-libs-5.16.3-299.0.1.el7_9.tuxcare.els1.x86_64.rpm 3827396f6f293f9801ca71739fb276f9d6fc63d4f8ef1a25836a0cb1276f26e3 perl-macros-5.16.3-299.0.1.el7_9.tuxcare.els1.x86_64.rpm 78df8a27837a1ae3f85855d86bb70ff323a4a6cf0efa0d91290fb6eb7bfbc948 perl-tests-5.16.3-299.0.1.el7_9.tuxcare.els1.x86_64.rpm 2477b6f3ac8465092d1a4763211efe2e0c6412f8056509e042c10841ca87a3f5 CLSA-2026:1786125919 TuxCare License Agreement 0 - Re-tag base release to 21.0.9 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 3.6.8-21.0.9.el7_9 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Re-tag base release to 21.0.9 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 3.6.8-21.0.9.el7_9

0 tuxcare-rhel7-els python3-3.6.8-21.0.9.el7_9.tuxcare.els1.i686.rpm 5982737cd468a6622c341bcc3272b6f753cdc2312d511f5fbecd1c139b4040c9 python3-3.6.8-21.0.9.el7_9.tuxcare.els1.x86_64.rpm 928ee21eb772ee8db3502899f663844d3e38688837a038ee625fc74fe1a29c1a python3-debug-3.6.8-21.0.9.el7_9.tuxcare.els1.i686.rpm afde57be2a7ba1d1b92884a705623f50980fa28087f15983d48f60f185f834f8 python3-debug-3.6.8-21.0.9.el7_9.tuxcare.els1.x86_64.rpm 8f53eb313ef91b7abf65893aaf7eeb890e43e103854cc0c62b57c52a5bb2c1cf python3-devel-3.6.8-21.0.9.el7_9.tuxcare.els1.i686.rpm a3d17d48906ddae66e50fad2cb4cd1cd31d52770fa0bde4fd2a18aff29d881fc python3-devel-3.6.8-21.0.9.el7_9.tuxcare.els1.x86_64.rpm 682990849d6a02e131ea3543de925f5af8d829f1612825e1780c354bc3259388 python3-idle-3.6.8-21.0.9.el7_9.tuxcare.els1.i686.rpm 6de5f67446d43d58d2d0d864d8c4f5195fc452e0fb2bcafaf55109c03dc66d93 python3-idle-3.6.8-21.0.9.el7_9.tuxcare.els1.x86_64.rpm 5082fb72d32b75541a89d50de77003475ec10810ce0cc85500d997942cd25096 python3-libs-3.6.8-21.0.9.el7_9.tuxcare.els1.i686.rpm 26483ffaeb7aa08e0128bc081ec650b8a83d59e87b6fa0daedaaab80b38fd78b python3-libs-3.6.8-21.0.9.el7_9.tuxcare.els1.x86_64.rpm ad6fd7cb2188a51bd3b3ba2f056949a1b58304715632967df785065cd8c23839 python3-test-3.6.8-21.0.9.el7_9.tuxcare.els1.i686.rpm 7aadeec72dbd1c03f34b4d3dcb6209699045608af9a8932bce082b880177a5e7 python3-test-3.6.8-21.0.9.el7_9.tuxcare.els1.x86_64.rpm eb7cbda310999e0cc4329534dc468d6556917531e79c266c31ca332290939a0f python3-tkinter-3.6.8-21.0.9.el7_9.tuxcare.els1.i686.rpm 6a3208c8e38c7a1f4a38b541d6869bbdc062fa820fbff0b53649be599b76f3df python3-tkinter-3.6.8-21.0.9.el7_9.tuxcare.els1.x86_64.rpm 5bae6d2e0fb7bacc5b8c12c6764a9250dcb5ea8f09aeb95dd10c7be1c3ba4040 CLSA-2026:1786225264 TuxCare License Agreement 0 - Re-tag base release to 94.0.5 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.7.5-94.0.5.el7_9 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Re-tag base release to 94.0.5 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.7.5-94.0.5.el7_9

0 tuxcare-rhel7-els python-2.7.5-94.0.5.el7_9.tuxcare.els1.x86_64.rpm 54c6837aa0d52bf4e5d59cb9da3206a959ddf61a0051d67da03de704cdfdfb4c python-debug-2.7.5-94.0.5.el7_9.tuxcare.els1.x86_64.rpm 25fdf176493ca363ef94daec895cfde6d4616f9a87355607704ac87b6b0916f1 python-devel-2.7.5-94.0.5.el7_9.tuxcare.els1.x86_64.rpm 0557acfabbce6994344f2c92ba5f89b0fbca9f726b99e69fdfd8affe2565cafb python-libs-2.7.5-94.0.5.el7_9.tuxcare.els1.i686.rpm 3e757f868e45d4300506188120c5767b000ee22e5ecc32f7d2015344c8346640 python-libs-2.7.5-94.0.5.el7_9.tuxcare.els1.x86_64.rpm 007f199529abeb5f4c588094c2c81bc8928498e79f7cc0bde09c88c735011365 python-test-2.7.5-94.0.5.el7_9.tuxcare.els1.x86_64.rpm 212abb984abc9e07daa80035ff58ece56011575cd86fb8d3feffc1f079bedca8 python-tools-2.7.5-94.0.5.el7_9.tuxcare.els1.x86_64.rpm c443027e2299f330aeef030461d7b9afd1c068e5fa2033f51d9b9ea283d2c1b9 tkinter-2.7.5-94.0.5.el7_9.tuxcare.els1.x86_64.rpm b779db2b3293aec1ed79a74ad94b94a752283117dbc4cbb4e28de62b2965c456 CLSA-2026:1786447704 TuxCare License Agreement 0 - CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash - CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals - CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7260: fix stack exhaustion on circular symlinks in tar-based phar archives; also backport upstream bug #69720 (NULL pointer dereference in phar_get_fp_offset()), without which the fix only relocates the crash - CVE-2026-17543: fix SQL injection in ext/pgsql via backslash breakout from E'...' literals - CVE-2026-9672: fix bundled libgd GIF decoder LZW table reset, end-code handling and uninitialised state

0 tuxcare-rhel7-els php-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 9c1224fb6a73a465b8bb099c743be01defb363512ec211d685046ef3e8b05d7c php-bcmath-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 59db9021039fe714f595e41d43edfb879eb12ccfb49500577fa242f9a376b390 php-cli-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 14e6f27df7740915b51cefc25d237c2ee9715a2ada5d00f8ac26e31d2c47c094 php-common-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 95b8d5b5e18703b3916b236a04c517407af8e0631b2e936f9b9209b00d583a4d php-dba-5.4.16-48.el7.tuxcare.els19.x86_64.rpm d8bf5a0449063f2a0b9acd75f4260e85b5abd044615f6290023a44eb20ed0d21 php-devel-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 1ab0c500c571d50918106f5ec5d3f7cbd56ed9dd4f3db5fa2ec04675b4b083bd php-embedded-5.4.16-48.el7.tuxcare.els19.x86_64.rpm f28500114331901361bbf26969a7f889b300a43870807360ec464c589de4d8c1 php-enchant-5.4.16-48.el7.tuxcare.els19.x86_64.rpm d35fb8efd682aeabdc2c4414fc2c38956595c63acd51d4b520ecf08450df20ce php-fpm-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 83969d1bd68203425ac6f9ec8ada290f477b8da97c899ea4e24275536a7ae237 php-gd-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 02d936dda6384ecf683fd9975e8494b70b254058c8eecc2752d0334a143dac19 php-intl-5.4.16-48.el7.tuxcare.els19.x86_64.rpm ed44addc3b99713929bbd7b2beb718ea0b64a6eb19684070836273312ae57593 php-ldap-5.4.16-48.el7.tuxcare.els19.x86_64.rpm e0bc08082dca956681888234c3574ba3c5c81af5762cee02eaab8ea2652876e9 php-mbstring-5.4.16-48.el7.tuxcare.els19.x86_64.rpm f903648fbfef0e5323701ab0d6d07281e9e966628614c0da4a62bf59221d2cde php-mysql-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 414472836586fbe517a7a5d93e92b32271b655af9f51aea871858ff999eae1b6 php-mysqlnd-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 729223e9d01352d942e23db5bcad71bd5eb0008150d1f45226731b6fa512dd3e php-odbc-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 323d78a6fcda601e703f89ab023640218bce5a0d445127b1dfd8871b91e93684 php-pdo-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 5a8432593b7c8cef4ea76a387709012cffbfa5367813a86cd094880ed20cc04b php-pgsql-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 9f486c6c6971a07579bd8bad8833867ee9265cdb647627cc54474ba6a2fec959 php-process-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 4afbc181eb30482f7a65dd57d96705565a7379e5b126ebf621664f01b5cdebb2 php-pspell-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 2672cd68875ab2b2c8335f62665dc1befb335cc41ebb2dedc3f72cf30cf1d5c0 php-recode-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 5efa13337b453c293dc3e20db9d84a90651e362b47de68dad58835b5ecca2c71 php-snmp-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 80f06407952548d1bc5eac30f55da093f4fd71327c61088ec662e59c91db706c php-soap-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 6f0b19b5d2bcc75438a2912de48175f91bdb2cb722b219a6470ee8663b3306e6 php-xml-5.4.16-48.el7.tuxcare.els19.x86_64.rpm 67c5f54dbe515b8d4b02a289e321f3f8684a43257fb6d5d1475046cfe07b5f71 php-xmlrpc-5.4.16-48.el7.tuxcare.els19.x86_64.rpm f3011c196fbe91f81a01d96531f3cab96eb3c423f1fdb5c7bc747e6abf9f8a11 CLSA-2026:1783520053 TuxCare License Agreement 0 - CVE-2026-42009: fix DTLS handshake_compare qsort comparator contract violation (undefined behaviour) - CVE-2026-33846: add DTLS reassembly fragment length/bounds checks (heap overwrite) - CVE-2026-42012: URI subjectAltName now precludes Common Name fallback in hostname verification - CVE-2026-42013: oversized subjectAltName now precludes Common Name fallback in hostname verification - CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42009: fix DTLS handshake_compare qsort comparator contract violation (undefined behaviour) - CVE-2026-33846: add DTLS reassembly fragment length/bounds checks (heap overwrite) - CVE-2026-42012: URI subjectAltName now precludes Common Name fallback in hostname verification - CVE-2026-42013: oversized subjectAltName now precludes Common Name fallback in hostname verification - CVE-2026-5260: guard PKCS#11 RSA decryption against short-ciphertext heap overread

0 tuxcare-rhel7-els gnutls-3.3.29-9.el7_6.tuxcare.els5.i686.rpm a1fe276e64ae68aaa33732398bc44b6d138030957e948daa7ed4d9df7cda91de gnutls-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm a607b7bfa58c6346253585d7cd5c5019d951655acfa60397fbe0e5312bbb3ad2 gnutls-c++-3.3.29-9.el7_6.tuxcare.els5.i686.rpm 1c83d5ac69aa7127e37b1f4e20cb1509da104c62ff9516d147935af555637cb2 gnutls-c++-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm 94bda2b0dc97e033f665251665ed176cdcdbbd3019559417e25a2fdd9b5b7957 gnutls-dane-3.3.29-9.el7_6.tuxcare.els5.i686.rpm e02b4908aaf606ed0f0704d4a8aba3df01ff6953ad781ca7f50bb0b8bc3ea372 gnutls-dane-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm af4320bc36934b5c773674d64e8daa6fdec5982867b8a9f47e7293363685ab6b gnutls-devel-3.3.29-9.el7_6.tuxcare.els5.i686.rpm adcb2fd72ed5cbe268ed9fc8519918cf6b2766354ac2614e62fe8d9c25cbe3dd gnutls-devel-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm fd67d7f88e54629e5aaf6a070eb95085bd8be6535b22b21e044a89fc66b8c44f gnutls-utils-3.3.29-9.el7_6.tuxcare.els5.x86_64.rpm c9ef9adc47effab69ba5eeac92a0769e0398be1813358a9aad47b69d80d667c7 CLSA-2026:1786525602 TuxCare License Agreement 0 - CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so that recursive query patterns which continuously trigger cache-database maintenance can no longer exceed max-cache-size and exhaust host memory (DoS) - CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock bucketed and process it in quanta, so that the queue introduced above does not starve cache cleanup under load and let cache memory grow without bound - CVE-2023-6516 follow-up: handle a node being re-queued for tree pruning gracefully instead of asserting, and do not append a parent to a pruning list it is already on, avoiding an assertion failure (DoS) and pruning-list corruption reachable through normal cache activity - CVE-2023-6516 follow-up: adopt the pruning design upstream settled on in 9.16.49 - run tree pruning on a dedicated task with an unlimited quantum instead of sharing the quantum-1 cache database task, clean every eligible ancestor in a single pass, and re-create both tasks when the cache is flushed so that pruning keeps working after "rndc flush" Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so that recursive query patterns which continuously trigger cache-database maintenance can no longer exceed max-cache-size and exhaust host memory (DoS) - CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock bucketed and process it in quanta, so that the queue introduced above does not starve cache cleanup under load and let cache memory grow without bound - CVE-2023-6516 follow-up: handle a node being re-queued for tree pruning gracefully instead of asserting, and do not append a parent to a pruning list it is already on, avoiding an assertion failure (DoS) and pruning-list corruption reachable through normal cache activity - CVE-2023-6516 follow-up: adopt the pruning design upstream settled on in 9.16.49 - run tree pruning on a dedicated task with an unlimited quantum instead of sharing the quantum-1 cache database task, clean every eligible ancestor in a single pass, and re-create both tasks when the cache is flushed so that pruning keeps working after "rndc flush"

0 tuxcare-rhel7-els bind-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 7b5695a2fbaf4bc5e1af06f73f7bf71a28d257f649d62611afa25ad23471f705 bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 05f0a9afee3b82600c85865611e1f17decef663867c009b5927f2671d2f1b2d7 bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els15.i686.rpm cf73a5386a1c664899198f1fba80c266e1b0e4433879f31e1596e4bfcb39337f bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 68b8bdd0ec97b4cb7d84779826862328fe95427610121aa9c192c9c24ec0a8ae bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els15.i686.rpm 2a746862bf926aee7ba5b351eea94beb00736a2ab7b5861ab53eb9e5f4ec6734 bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm e937049c1c5b1917e080327c42502067a24144378fc6560f0fb402fe321ea429 bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els15.i686.rpm 5ea917f13b5e0869afface5c520c1eccc0b1ed91be9de6e325e53c8238e2fb20 bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm a7e9b9b2d9d602b5a7ca0f8dabc52b067ba63483aba24f9074ee17e3479bf804 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els15.i686.rpm 64e509cee36fb90e5c987701cf7e32e6ee4a7fc0485b026011d3b6e31dcba468 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 8da30e0b7a5d36c13423718970839d288befd89c94651b8dd53847b220faf9fa bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els15.i686.rpm a411df365cc5ca527b8322d654053a6633a6e1658985c3cddfbd51445f1f143f bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 02cf766f0321a4ac672b5b9d353b44adad76f5758f81921019eebf84d6ac26cc bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els15.noarch.rpm 1bf82f22a5eb2dd06e4269cc77679b42c2f51a3485ecb92d0758c7efd5406bd6 bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els15.i686.rpm f12d183a2aba266e1f8888d8775181554b77154f38d7d58aa24fdf184771744c bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm a4dda4b1d67d63ad9057cf25ce72afd5f5ae7f20540c5e662158b288e9f66b35 bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm fd22421284e9c1cf010038062c15cfedf6b1849a23031357d32ac9206cf514f6 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els15.i686.rpm 257a1540582d808b4ca43fa5bd93808b24542d8d630010b851e6a45d2bfea8de bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 60112db03d21f27d6ef804ee3e5e58a383aa5857e56b1178f1d3ab5872655e2a bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els15.i686.rpm 69548b3403d22cb4794c2f5cb6bf5d79862293bcd973e67130a40d26f6760a78 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 80bd638647a370d3f550d94e30884a93fe8e7e283cba1b6780a58415fd488957 bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm e24e5a4d81c050079457667ea886cf746c6c0aa02d957e1c1ac959c527dcd5d3 bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 9b7ffbd30625018dd1b9543074115127ea72bb40bb555ef1ab883e2c927644ca bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 96717eebf5e58a24f46499617efd3e1068cdf6dc95bdaf0561f0592a9b90fb81 bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els15.x86_64.rpm 895105569ce62f3d31bd62c96abed82962e344e272b963d152bc0daa3312ca71 CLSA-2026:1786540921 TuxCare License Agreement 0 - CVE-2024-0743: fix undefined behavior with large ssl_DefSend return values Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0743: fix undefined behavior with large ssl_DefSend return values

0 tuxcare-rhel7-els nss-3.90.0-2.el7_9.tuxcare.els5.i686.rpm ac8fbfca7b131bf12e9f6131a1a9578c9ef2a9500033a9ffe16317d416c8c9d4 nss-3.90.0-2.el7_9.tuxcare.els5.x86_64.rpm ab543ba57bb6d658d453751872fe19c98e1f4fb3a8a3febe3b32e3b48a10dffe nss-devel-3.90.0-2.el7_9.tuxcare.els5.i686.rpm e897723d94de67e8bbd3e6d654e7e4345379da795d4c227db935fef86b5cf516 nss-devel-3.90.0-2.el7_9.tuxcare.els5.x86_64.rpm 0e21d7db499ea8c9fac28f8a1b1e309b3e1f53f0dc651d498aae0fd9ddc46d9e nss-pkcs11-devel-3.90.0-2.el7_9.tuxcare.els5.i686.rpm 04b8cf7e7329b1d6a842812b9f9f842a9140211ddd1b66450ddbd44f8749862b nss-pkcs11-devel-3.90.0-2.el7_9.tuxcare.els5.x86_64.rpm 295df09d8cc2bc0f1d423c03eb137db7df875b9d9ec0daa9274ffb1bd7e8ffe5 nss-sysinit-3.90.0-2.el7_9.tuxcare.els5.x86_64.rpm d9fd656559d09a21fbd87cf72c24029e27333bd7e4d097ac4a5f8ce2a2db4aad nss-tools-3.90.0-2.el7_9.tuxcare.els5.x86_64.rpm 92f8d840fc5dbdb36efe5327df3294324e7280c94505d2fa9480910f54c3c2bd CLSA-2026:1786544972 TuxCare License Agreement 0 - CVE-2026-34180: avoid truncating a long ASN.1 content length to int in asn1_ex_c2i(), which caused a heap buffer over-read for primitive elements larger than 2GB - CVE-2026-42766: reject a CMS PasswordRecipientInfo whose keyDerivationAlgorithm is absent instead of dereferencing NULL Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34180: avoid truncating a long ASN.1 content length to int in asn1_ex_c2i(), which caused a heap buffer over-read for primitive elements larger than 2GB - CVE-2026-42766: reject a CMS PasswordRecipientInfo whose keyDerivationAlgorithm is absent instead of dereferencing NULL

0 tuxcare-rhel7-els openssl11-1.1.1k-7.el7.tuxcare.els4.x86_64.rpm 0db9cd59ad14d0828c5c18bef1e5aa0e5b243fafc33634b404aff9ec4110da48 openssl11-devel-1.1.1k-7.el7.tuxcare.els4.x86_64.rpm 01944963c6b10b8e1943ff5168b5bc3a7707909b1af2677e0fec6f6c47329f9d openssl11-libs-1.1.1k-7.el7.tuxcare.els4.x86_64.rpm 93854941980ebd0857910393ec907d82354a4e5ffc80a6b6a9acb49d04c395d8 openssl11-static-1.1.1k-7.el7.tuxcare.els4.x86_64.rpm 19d1b67023b0ee476081276ee7557ffe861e858e3171a22a96f85653cc257c89 CLSA-2026:1786551745 TuxCare License Agreement 0 - CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under a random subdomain attack; superseded generations of a cached RRset stayed linked while validation kept the node referenced, so the cache grew far past max-cache-size - CVE-2026-11622: also reference-count the DNAME zone cut headers and initialise the counter for headers faulted in from a 'map' file, two gaps the upstream 9.11 fix leaves open Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11622: runaway memory usage in a DNSSEC validating resolver under a random subdomain attack; superseded generations of a cached RRset stayed linked while validation kept the node referenced, so the cache grew far past max-cache-size - CVE-2026-11622: also reference-count the DNAME zone cut headers and initialise the counter for headers faulted in from a 'map' file, two gaps the upstream 9.11 fix leaves open

0 tuxcare-rhel7-els bind-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm d1cdb650e978d52e79b88b7b3eb1068d13be0ae617189c66937f0386a2f4310e bind-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 066ddce4b679e45a64359ad1b2da8216cfc5984027d763ab366fb351d31f2e82 bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els16.i686.rpm c64430c0dad0494778c62acfd079893108ce93e8b8cd73bd929594ec079e7d3f bind-devel-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm cd3ab86ef77236aa30a38177108bdb3d67a1e4b8800731157c37ffbbac7cd51d bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els16.i686.rpm 04db9581cfae418dc029bded849869bbe90c319017eed96e18a8e3b844d49d58 bind-export-devel-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 095c5e1440db04759d3b73861b56bd31159e5dfb4d532986250add3e4cb47468 bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els16.i686.rpm 84b40ce0a69db4efc2fb7c23eff7fe25fb91b81000f0edb195b1d3cf6da6ef1f bind-export-libs-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 94717da7eb569374e4db980a9bf8c48c229ab7d576c1125712cbc030af164593 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els16.i686.rpm 7d30a071f2da38f2735fdf3162807a5c8d82018c7ed88cd7692eb6908c38d100 bind-libs-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 7577998bac53bfac54df4f22bde9ef7c87b809d30bc708bdcd4172de6c485ba8 bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els16.i686.rpm 95bfc8e3980c6127fceeae1de94f18e174013eaa45b5a8debc96b40827a9cdb6 bind-libs-lite-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 1c5cad25368aad6b284116d4fa9f55b5de4f1676108520c0b470e9618d0c3f0a bind-license-9.11.4-26.P2.el7_9.16.tuxcare.els16.noarch.rpm 1862e9779a32c15167563949f3f09aa4feecdbbb8fc541d432e10d804aaabac3 bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els16.i686.rpm 2f5380ffbc4e221707d072f5eb4ad60f7dd25e04f5ee9242daa4cb39fcc95744 bind-lite-devel-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm dcf1e96af005761e2b87a38d28fa5273a9f95f8f18ba48957c505b437b84e550 bind-pkcs11-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm cdd722535edd1b6bdd36d41ad270532d581e3e0c5f6a4aaa0c0c7f95f77b0f20 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els16.i686.rpm af246d5d87f8e69bf6e175b3c42e5b83721380c582183f6bb0e5d50afa029e24 bind-pkcs11-devel-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 752449a0adbef62eb8e8c2cbe296ed11f7a2f2f0d37eb510a81645beca8136d6 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els16.i686.rpm 795a9677de2ec92e9253d26793f122138abf99f3cb78cbd8175a05b2420a8622 bind-pkcs11-libs-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 532162ab67264cabb55360670791298e86f96ce75ad7adfcfd3c2b30a2dba688 bind-pkcs11-utils-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 52acfa4e7fb6fb7f4275f09b3c729f63cccf418b71f03ea18231379c84a30de9 bind-sdb-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 29cbbe87526e222dec665a0f57e72a3a82dfc808a716ffe68612025b917e2ae4 bind-sdb-chroot-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 2f6e02cfcb7aacac49c92e30f522a8888bc298c61ffcfe84dce1421587aff3a6 bind-utils-9.11.4-26.P2.el7_9.16.tuxcare.els16.x86_64.rpm 1bfb1ab1754e563ab0620a5958f7fe2b9d8117dbbda9377372ce86a5278104b3 CLSA-2026:1786553061 TuxCare License Agreement 0 - CVE-2026-61868: relinquish scanline and destroy chroma_image on blob open failure in ReadYUVImage() (coders/yuv.c) to fix a memory leak - CVE-2026-61869: destroy quantum_info before throwing on pixel and colormap allocation failure in WriteMIFFImage() (coders/miff.c) to fix a memory leak Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-61868: relinquish scanline and destroy chroma_image on blob open failure in ReadYUVImage() (coders/yuv.c) to fix a memory leak - CVE-2026-61869: destroy quantum_info before throwing on pixel and colormap allocation failure in WriteMIFFImage() (coders/miff.c) to fix a memory leak

0 tuxcare-rhel7-els ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els25.i686.rpm dc7382503372618dec5fe3773e9a686909f1ad1aa13f7f4175a6e73c5a09a968 ImageMagick-6.9.10.68-7.0.3.el7_9.tuxcare.els25.x86_64.rpm 326718787a435f151ef652ae807ab9d3fd76531d1352779be4e4972794bbd70f ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els25.i686.rpm 3836de3189b22f6627a00b903b5a9518be4a8ac775e70e0a56131fe6d664f817 ImageMagick-c++-6.9.10.68-7.0.3.el7_9.tuxcare.els25.x86_64.rpm 7b839510fb56ea2950b047a5679e7841fb23af37f234444cffa41b8c7a2e1af1 ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els25.i686.rpm 39e2867ec24be5488fb23e9e0296df2fcef5801cf116165dce3619ea03a5233a ImageMagick-c++-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els25.x86_64.rpm 8d3b2d1fb9fe47a032dbcfd6889e1127904456616a75dce934a9bb7ba09765b7 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els25.i686.rpm f61335ba7073674c7ab75bb3e7d4d23b496e4550410d1b2baafa32b6c7709492 ImageMagick-devel-6.9.10.68-7.0.3.el7_9.tuxcare.els25.x86_64.rpm 074a3a5bec699d3dc36ef4d1eb90e955cd790bf354051662423357808926778f ImageMagick-doc-6.9.10.68-7.0.3.el7_9.tuxcare.els25.x86_64.rpm 30bec966546647fdb50b8053ebe24a2997a6c1bb3fe58889d43e1a45b1a52bc2 ImageMagick-perl-6.9.10.68-7.0.3.el7_9.tuxcare.els25.x86_64.rpm d36f61b02e72ff6f16162ccfad9e2f09790070994ae686fb16d4a033027567dc CLSA-2026:1786707117 TuxCare License Agreement 0 - Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47063: enhance Jar handling - Rebase jdk8009550-rh910107-search_for_versioned_libpcsclite.patch on top of upstream JDK-8252412, which reworked the PCSC.framework lookup. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-11.0.32+9 (GA). The following CVEs were fixed: - CVE-2026-46968: enhance TLS certificate handling - CVE-2026-47010: enhance JPEG handling - CVE-2026-47021: enhance XBM image support - CVE-2026-47057: improve Nashorn index handling - CVE-2026-47058: enhance DataView implementation - CVE-2026-47063: enhance Jar handling - Rebase jdk8009550-rh910107-search_for_versioned_libpcsclite.patch on top of upstream JDK-8252412, which reworked the PCSC.framework lookup.

0 tuxcare-rhel7-els java-11-openjdk-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm eeb83301375c77f2a19a98024fc558bf5fcf9aa40ac49124726506e7d644a274 java-11-openjdk-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 989f57314130676683334a614d4249d096c6d6353a724149c417660d97cb4dfe java-11-openjdk-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 250a9b79164139798ccf3ed51b0816de07fd69be1e349a2816037f447198ef31 java-11-openjdk-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 97087ba9503ed0c1195036ed8c6cd11f0eb519b1ac7364f8db6ecd60ca6be9f9 java-11-openjdk-demo-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 55eab2ab8e662ff7060a9d80d06365d103dc188d27f9988c2b166cc23201914b java-11-openjdk-demo-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm a003cf533a8ecdba3d6711c894d71ad180c64aebfc479d0c16efe4e17b2f7377 java-11-openjdk-demo-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm e3971588c25adec5348f1ea53757af693893dd234129e1c372e0779a6ea2c1d7 java-11-openjdk-demo-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 1b36347ea5f3b91fb68aacfa07e566480fd844e2161d75516a80c8cb774af8f0 java-11-openjdk-devel-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 735783ee0443601f0bc229d28990f154d63cee1fe46f1d9b5128cb052dc3bdb8 java-11-openjdk-devel-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 38442463fe630c43853f39356b5a72fdaeeec164859d36ef00b8c9245fa80c86 java-11-openjdk-devel-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm ee402f886118866770c9dc256488c43980160a007714a2546fd6f20f92c1cac7 java-11-openjdk-devel-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 26a3b8ed1accc67e430bc79f8d85fbe865fb6be52cbfcdb835a4ae29ebef5f88 java-11-openjdk-headless-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 612b490436cb86ac079749a620fc67251c0acff22758725d27fa58a60bc683ae java-11-openjdk-headless-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm ccba571824fa7022872e8e029cfb374e4c47608ff9c74b6ada5d9cfd7e794702 java-11-openjdk-headless-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 22f070cbcc790bf4b6079871fdecced05c67c744a0344dfaab7be3e9adc1ee17 java-11-openjdk-headless-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 989adf6e2bae5de4fe624e3f936ff0651351d207b37609777932d4dd8268581f java-11-openjdk-javadoc-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 27b8523a47bce82e1a0c2f13524e13b2959563dd5b95d68c5d885c0cd6b8b67a java-11-openjdk-javadoc-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm ffa86976c541aa820c2f85736aa1ba66900a6eabd2c884e65a6d8cb96a656dcd java-11-openjdk-javadoc-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 88370032aac03d95f467480be25e5923ec0f186c33a5d827b76bb7c86a922c3c java-11-openjdk-javadoc-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm adb53d249bb611d3c0d5240b91c507ce99a87137e5cf614053718e7cd5c6cd02 java-11-openjdk-javadoc-zip-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 7d6438db72c91f95f94b90182901a2f71af1304175a65dc5a12fa87601466445 java-11-openjdk-javadoc-zip-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 862cfd0fe690478f4d2536ff6c0ad2ca9bb788f54866ffd45bda48da439ea799 java-11-openjdk-javadoc-zip-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm ef428e992743b97032e3e76cb823e1c987ba6cfdbf9cd5f149e86930c7c06a85 java-11-openjdk-javadoc-zip-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm d6566bdbe14d04a3ec84d4a7643f7e74f6a87e62c279c7c5a1948cc558738a7a java-11-openjdk-jmods-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 850e03b22d2681ee7766907e1734c8b133ba569b71756bedc2921a373b018f84 java-11-openjdk-jmods-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm f63a97ab125ff20717e3316163a39d6794aa17f031f846862ce5be33fca38935 java-11-openjdk-jmods-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 21ace540c27f4c4d2ff436143ed5e70bdd008dddf19609e315670bf8e57aced5 java-11-openjdk-jmods-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 238abfdc6100221331a788ec189db52694ebed99becca3a64b4f52fbf04b0b1e java-11-openjdk-src-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm ca6696c570c8bd31a77ad8eee9129b637f0274f28d64354ad587949b22000f4d java-11-openjdk-src-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 04e1c9c41c8c113c4695b67a2662736b27a25a8c89bda5576d4c9a687bbbea4e java-11-openjdk-src-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm 25bc8f5bc0a7d53bf8e30d8291a3e76db3c0ebb28ef1369e94dc7ae8b6a05bc8 java-11-openjdk-src-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm fa8a967a4e6a3a014d2dc6959ed985ffad66dec130c41bc650c6bc952427475a java-11-openjdk-static-libs-11.0.32.0.9-1.el7_9.tuxcare.els1.i686.rpm acddb0fecaf1ef6b5a2c0d90bbf8fee16b077250f23202f14be6a9be44632ae7 java-11-openjdk-static-libs-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 67ba5d6692af7642f1abc26086c5435cf32cdee65d2133c4293c01524a0fff55 java-11-openjdk-static-libs-debug-11.0.32.0.9-1.el7_9.tuxcare.els1.x86_64.rpm 5c735f1a7137551a4c9f673862cfda2942078549655f90b4ad54974127ffc12f CLSA-2026:1787212961 TuxCare License Agreement 0 - CVE-2024-30205: org-file-contents: consider all remote files unsafe Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-30205: org-file-contents: consider all remote files unsafe

0 tuxcare-rhel7-els emacs-24.3-23.0.1.el7_9.1.tuxcare.els2.x86_64.rpm 727652a2f0e038a4fffc79218091b4f4565c9d1654a49a01eb736f6fe9249427 emacs-common-24.3-23.0.1.el7_9.1.tuxcare.els2.x86_64.rpm e085f00baeff079fcfd0069148bfa112ca9bc2a2c4fc75f0a4477b4167d4c913 emacs-el-24.3-23.0.1.el7_9.1.tuxcare.els2.noarch.rpm cb6b50fb1e774e309e3fa56198bc7719232b1c511553cc44260b1cbf7a6cdd01 emacs-filesystem-24.3-23.0.1.el7_9.1.tuxcare.els2.noarch.rpm af229b11c18a5753851109945812d11596c1500f5f556d51dc6cf02150304414 emacs-nox-24.3-23.0.1.el7_9.1.tuxcare.els2.x86_64.rpm 7a5b0792c225c1f86e25a77aeeaf86b4fd27caa980db41901f6c5784319669f0 emacs-terminal-24.3-23.0.1.el7_9.1.tuxcare.els2.noarch.rpm b1a5f2fad40b8ea5e19d9d9bffb306d482f19ed8bd6acad5550f9cef339f7012 CLSA-2026:1786124808 TuxCare License Agreement 0 - Re-tag base release to 9.0.3 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.56.1-9.0.3.el7_9 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Re-tag base release to 9.0.3 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 2.56.1-9.0.3.el7_9

0 tuxcare-rhel7-els glib2-2.56.1-9.0.3.el7_9.tuxcare.els1.i686.rpm 3856e58aa4b173229dcf3e7cdab565b59520b52040c2657a490e348f3d905d01 glib2-2.56.1-9.0.3.el7_9.tuxcare.els1.x86_64.rpm bbd1ba156e6818a99b7d1d6a4d1852b9c047185c1025affddb23d21605cf9f53 glib2-devel-2.56.1-9.0.3.el7_9.tuxcare.els1.i686.rpm c06b042f55e08b5816fa6b8393f1b66e177503e54d6574de8d3b2bcc7bb58769 glib2-devel-2.56.1-9.0.3.el7_9.tuxcare.els1.x86_64.rpm 2a9a17a603cfa88fd55db1851784b58fe421edd36d45b639551ccb1f9a09e66a glib2-doc-2.56.1-9.0.3.el7_9.tuxcare.els1.noarch.rpm 8327beef059fadc767d55f8fd2740c4a69b6d150d2292449eab14de15dcdc65b glib2-fam-2.56.1-9.0.3.el7_9.tuxcare.els1.x86_64.rpm 826505970a7786b26035ec598987a34617c4710076896aff3142a21a81a4b666 glib2-static-2.56.1-9.0.3.el7_9.tuxcare.els1.i686.rpm 6fc77befabb8a70aadff9b5371a1f1782d38c560f6ea2b4ef743c890c23f83dd glib2-static-2.56.1-9.0.3.el7_9.tuxcare.els1.x86_64.rpm b8576bb79cdde164cf6f516c1936bdef65f1d71ac7df79e533e600a19d4b2f18 glib2-tests-2.56.1-9.0.3.el7_9.tuxcare.els1.x86_64.rpm 6ff622506d3a2cc2af901faea992671dbd0a075153bbd98eaaa47d02ec8fdcc9 CLSA-2026:1787232011 TuxCare License Agreement 0 - CVE-2026-27858: fix pre-auth memory exhaustion in managesieve-login from an oversized AUTHENTICATE initial response Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-27858: fix pre-auth memory exhaustion in managesieve-login from an oversized AUTHENTICATE initial response

0 tuxcare-rhel7-els dovecot-2.2.36-8.el7.tuxcare.els3.i686.rpm 5b918cb98a7b1483d4c5b633609ad7224fb1aae3d7a1a10bdc9b6b591f0faf08 dovecot-2.2.36-8.el7.tuxcare.els3.x86_64.rpm 7a324d76dd692ed66d5f84b5907e590767bfbcd095cf9d6d502f3f67500d0c87 dovecot-devel-2.2.36-8.el7.tuxcare.els3.i686.rpm fea0f7cccb4fbbca1e856aa6aa809a6aa5191119de9ca9d302d2d76bb6eb0143 dovecot-devel-2.2.36-8.el7.tuxcare.els3.x86_64.rpm 672fdc0c51c786c2bab06da5ddb418e3dcdfc5d17dc44981116a94f10c445ba3 dovecot-mysql-2.2.36-8.el7.tuxcare.els3.x86_64.rpm 65e2592ce53da9333cec156194d4f4460845e627e66bee6c6a37d15db30b2438 dovecot-pgsql-2.2.36-8.el7.tuxcare.els3.x86_64.rpm eb5fe6e473c8900fe3ff4d1d8f97000edf84cb546f8ee1c6e3b6a11d03562afd dovecot-pigeonhole-2.2.36-8.el7.tuxcare.els3.x86_64.rpm 6bad6da6401d9d1aa577e96b2330a024d5042f3ccba5b5830802cc033eb14c62 CLSA-2026:1787249757 TuxCare License Agreement 0 - CVE-2026-49975: improve the max_headers patch to preserve binary compatibility with externally-built nginx modules None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-49975: improve the max_headers patch to preserve binary compatibility with externally-built nginx modules

0 tuxcare-rhel7-els nginx-1.20.1-10.el7.tuxcare.els7.x86_64.rpm 38302911b04402436165844ca7f4b2a595c2124d5a6dae3a0db87434e734f03c nginx-all-modules-1.20.1-10.el7.tuxcare.els7.noarch.rpm e0f7c10b55c0b26d3fcc67e4a52d376074f2cf6acc771e9c65587ecd2b926ec9 nginx-filesystem-1.20.1-10.el7.tuxcare.els7.noarch.rpm 42c43cefa0b4395130e1ad3aefc5d24210d3ef0edd87e1301b48d4d5db1f35d7 nginx-mod-devel-1.20.1-10.el7.tuxcare.els7.x86_64.rpm 6bae606e3cc78feb21472c6a6aaebe7ab7360f4dda65cf92dbb0deaf7ce7bd22 nginx-mod-http-image-filter-1.20.1-10.el7.tuxcare.els7.x86_64.rpm 1fe2fca75f2be2105760edf2e1072f3405481d50dc169c3ca353f0458fb1af01 nginx-mod-http-perl-1.20.1-10.el7.tuxcare.els7.x86_64.rpm 5c70774012d42bd6f0859bf1b70b5cc16412ebffbe2614fd627d7165e48886e6 nginx-mod-http-xslt-filter-1.20.1-10.el7.tuxcare.els7.x86_64.rpm 1d55fd1c95ab7d56ebcfc588b495c373914805f1650ff5a2eeb5aeacf09e5aae nginx-mod-mail-1.20.1-10.el7.tuxcare.els7.x86_64.rpm dfa53261b35cb27d6e0e339bbf9eb7227e4cdb03b6acb98f098c90db5ddd9e2d nginx-mod-stream-1.20.1-10.el7.tuxcare.els7.x86_64.rpm 886672f590c55085fc059b091c6b3438a5c4aa403f2efeb821d9538e76e7aa08 CLSA-2026:1787307122 TuxCare License Agreement 0 - sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564} - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc {CVE-2023-52760} - bpf: Fix truncation handling for mod32 dst reg wrt zero {CVE-2021-3444} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564} - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc {CVE-2023-52760} - bpf: Fix truncation handling for mod32 dst reg wrt zero {CVE-2021-3444}

0 tuxcare-rhel7-els bpftool-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm 3976bcc3533cec6953ae8d3e64456584b379565e35aec578279913964c860d8b kernel-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm 2ec014cd1467a7cd507e46f5685efa38d408507530be9d47781d07fa0bd81f6f kernel-debug-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm e11741445c49baea7e3a0f6449b7cfcf7c7d7090a99a8dc1405f0c3878995c17 kernel-debug-devel-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm 9b16f33475cf9591466dc7c142402c2ab00a8b14cbd55612636900d7c680d07c kernel-devel-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm 2c7908bf01bc9737e8893cf09bd4113fccd84ebb77abc7eaed8cef1ece2c2eee kernel-headers-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm 016c90cda108ca1ef01663732b46f2b841bec95d28ed4dcba91982d9d2532a90 kernel-tools-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm 32e154fdaff59889e06ec48714f8b82960be633a79bc42ea8902f122412a76f4 kernel-tools-libs-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm 938faff1bdb6b15accc9446697bbcf45cb99eccf9c3d4a6c6bbc1d73d6f90cdb kernel-tools-libs-devel-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm 3da65975d7479cd25765f38ab0938f63e382ef3223f32c99bd91a4ca202a3473 perf-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm c28f38bcdb2a1369914155cd08fe59c3de624aeb634aef77c5f4afdca1676b68 python-perf-3.10.0-1160.156.1.el7.tuxcare.els2.x86_64.rpm af0be90fa4be6d8fa8c0fb73ff9acaaa6080994878623952e0e5852d5b6d8064 CLSA-2026:1787220312 TuxCare License Agreement 0 - Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 (GA). That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via TLS (enhance TLS certificate handling) - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity compromise (enhance JPEG handling) - CVE-2026-47021: 2D, remote unauthenticated DoS with low availability impact (enhance XBM image support) - CVE-2026-47057: Scripting, improve Nashorn index handling - CVE-2026-47058: Scripting, enhance DataView implementation - CVE-2026-47063: Libraries, enhance Jar handling - The same upstream release also closes the remaining CVEs of the Oracle July 2026 CPU, tracked under separate ELS tickets: - CVE-2026-47027: Libraries, enhance Jar file processing - CVE-2026-47059: 2D, enhance AWT ImagingLib - CVE-2026-60147: Security, improve certification checking - CVE-2026-41254: bundled Little CMS updated to 2.19.1 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u502-b07 (GA). That fixes following CVEs: - CVE-2026-46968: JSSE, remote high-complexity high-integrity compromise via TLS (enhance TLS certificate handling) - CVE-2026-47010: ImageIO, remote high-complexity low-impact integrity compromise (enhance JPEG handling) - CVE-2026-47021: 2D, remote unauthenticated DoS with low availability impact (enhance XBM image support) - CVE-2026-47057: Scripting, improve Nashorn index handling - CVE-2026-47058: Scripting, enhance DataView implementation - CVE-2026-47063: Libraries, enhance Jar handling - The same upstream release also closes the remaining CVEs of the Oracle July 2026 CPU, tracked under separate ELS tickets: - CVE-2026-47027: Libraries, enhance Jar file processing - CVE-2026-47059: 2D, enhance AWT ImagingLib - CVE-2026-60147: Security, improve certification checking - CVE-2026-41254: bundled Little CMS updated to 2.19.1

0 tuxcare-rhel7-els java-1.8.0-openjdk-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm bc520ca40b37615347a7f5e66baa5d40ad007c3c2235a4cf91fac029ce610bf9 java-1.8.0-openjdk-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm 9d560b9e66ff71f04b82fa61bb72a7d95aaac5bab03589b9d322c925b6bdd925 java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm d0d3179910a7d9c0fbfd04fcb50e1df2ee1363fb2be4840ce5e70a9dfc3b227d java-1.8.0-openjdk-accessibility-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm c0e38043975a432e698f47c037b1f8c0ff1d3765bf581a0a484eaba5eaaf2494 java-1.8.0-openjdk-accessibility-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm 37029ec7b9deb2cbd7ee8fd68610b12b65548112cb7079bfe2a00c5143b746cc java-1.8.0-openjdk-accessibility-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm 1e99dfe471fe09dfcfe4cfd61e27b3d63f4a6ad413e7d3b938e08c91ec5c42b5 java-1.8.0-openjdk-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm dcb559893648610c383cdbc8e080ca7aeb43f42ea241aecb9b3e678dfb19fb47 java-1.8.0-openjdk-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm f278115f86b052fb4b28b4794d7b7996f44572a538613d55faac6b2fb5a421ed java-1.8.0-openjdk-demo-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm b812b7561e5c5e75d59b44e8bf2b4192943e4b7b05e2913ddf42c9ff222c8ab7 java-1.8.0-openjdk-demo-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm f91a3968c3ad2151a4575aa3fa9ee8700d2e5c1e499f5c3516fae148a1f5f22b java-1.8.0-openjdk-demo-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm 470a58a66fa7bcf670a6c908907a94147730b6a6a652040be4bd5d594a3ed1ba java-1.8.0-openjdk-demo-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm 67b8dc7923bdafaa1290945cfb5806c4865e9d75543c7e0fe515a65e35b94b07 java-1.8.0-openjdk-devel-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm 8b5d4464d5e2168c4cb08ab578051816f045191f86f392fbba033525b19faacf java-1.8.0-openjdk-devel-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm 01fa25a409ecc3867db3a604573745279c7fd0133d7b042f844c7be57caef0e8 java-1.8.0-openjdk-devel-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm 6db0ddb3a9b6436e0c5910cf925463318537421a38537b152e42b02990a65fef java-1.8.0-openjdk-devel-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm afd303e74524bd12c9ca7eff9477e7628389f5f04ac9eec85dc335f6a390bffb java-1.8.0-openjdk-headless-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm b357cfa735cf0c3fb29902510d92c2af0275d202fe5673f13410e0dc380b7ab1 java-1.8.0-openjdk-headless-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm 5453ace802cd192e1e8a144183e7468e19ec007c10037ad95989b039619dceea java-1.8.0-openjdk-headless-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm a3a951bbef4726db16dbce606f8049e0c568d9b5989b0848025a1a51a4b71f3d java-1.8.0-openjdk-headless-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm 4379fc808c6ea915f78f8723c7b7a732c251cc0c254728235d6d0744e27f046c java-1.8.0-openjdk-javadoc-1.8.0.502.b07-1.el7_9.tuxcare.els1.noarch.rpm 467a7a2c724de9006353edb618b12655b6aa9d6c991ffdfc691b597c54953ca6 java-1.8.0-openjdk-javadoc-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.noarch.rpm 2699340c4b7ac60c051c879a2059003fe1c354e83f1a7d54ec3f9c535dcb99be java-1.8.0-openjdk-javadoc-zip-1.8.0.502.b07-1.el7_9.tuxcare.els1.noarch.rpm 69caf41e78de4e5eaa5058f1640aa5e29f07429725c5cd56f3173d555fadd376 java-1.8.0-openjdk-javadoc-zip-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.noarch.rpm 57bd2486a761800e509500c22730f46f9192c3f4d72ed4d00934f98f88a51158 java-1.8.0-openjdk-src-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm f88a1706990f701afad86879f0f66d206e4f1f1157eabee66563ecae2496e5e8 java-1.8.0-openjdk-src-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm 665157b096b8d5e9c357bec09e9cadbe168b9cf19900c1017b82dc4e99dfa758 java-1.8.0-openjdk-src-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.i686.rpm 97fe9f8d537327797fc92fbbcbf35230c315579c8bd43e530ed0e6d5a6f96ecf java-1.8.0-openjdk-src-debug-1.8.0.502.b07-1.el7_9.tuxcare.els1.x86_64.rpm d274cff677b93ab28b47f221cd813fd15e214c31da77ee3af0b2535812936b9c CLSA-2026:1787395689 TuxCare License Agreement 0 - CVE-2026-6473: tsearch: bound StartSel/StopSel/FragmentDelimiter length to PG_INT16_MAX in ts_headline() - CVE-2026-6473: contrib/ltree: guard lquery parsing against numvar and totallen wraparound - CVE-2026-6473: regex: add overflow-checked MALLOC_ARRAY/REALLOC_ARRAY and bound NFA state/color products in newdfa() and compact() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6473: tsearch: bound StartSel/StopSel/FragmentDelimiter length to PG_INT16_MAX in ts_headline() - CVE-2026-6473: contrib/ltree: guard lquery parsing against numvar and totallen wraparound - CVE-2026-6473: regex: add overflow-checked MALLOC_ARRAY/REALLOC_ARRAY and bound NFA state/color products in newdfa() and compact()

0 tuxcare-rhel7-els postgresql-9.2.24-9.0.3.el7_9.tuxcare.els3.i686.rpm ecd5401b9bdd95e18c77655e32c55f751bc80ad0ac50e8fef31845216cec3f2a postgresql-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm fa3587b2ae74e47e6689e94be6a0b04a2c714914f21169aa5c296eed5c25d586 postgresql-contrib-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm 3a54f90a07e937c5f034a900aca88c7a57f9b956f727c944ac0f36d507b2429e postgresql-devel-9.2.24-9.0.3.el7_9.tuxcare.els3.i686.rpm 0a9bebbad42a129c9e4403d3fee0220ddeff7ef6afadcf112433588a8c4d1cad postgresql-devel-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm a8794948d3b46a96a9b569dbeae2017463af94a7829236393a28402665b365e8 postgresql-docs-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm c8a582a382a4216fb8f74ad6ca4d095daaccf9d3c77c2a7a0a0965c2ec30a8f1 postgresql-libs-9.2.24-9.0.3.el7_9.tuxcare.els3.i686.rpm b234af42b7dcfd30911efc9f831b972398cb929eda3b3cc27adbb02ff0eec482 postgresql-libs-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm d4acdfba3fe2fa33c166bd871ed82ccf74d8f265beef496581a161614f13a073 postgresql-plperl-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm defd77ade7efa93a0bd7a1aba5cdffeefa33ebd97c03fdbbfdd837cf6a91379e postgresql-plpython-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm 512e6de7f7ed9f15ddec71ed1a0a7c471f5717c874cfa518209070b25263f4f5 postgresql-pltcl-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm bc858e1490b025fa61e862f8ceec310dcc5cc3ff565f1525b95395a476fce327 postgresql-server-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm 0dc45a6c529b74b262f09269898a069865f61ab7899a5053456ff15f4a083a55 postgresql-static-9.2.24-9.0.3.el7_9.tuxcare.els3.i686.rpm c325de9509e7b67b28cedb342dfd44a464894f76e3727b374d7572925d1bb96c postgresql-static-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm 878a853275bfa84248ef7d2f2620507040f0e30118fb3a10c4588d7b4b9d96a4 postgresql-test-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm c35bcce356fc10cbd1db067c39fa71e4b79a92bd01661b1282042321d1e1b56c postgresql-upgrade-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm e5e3a2468e81e5a250deeab155dc3e98daf8d398d3150bd786656387e072006c CLSA-2026:1787646114 TuxCare License Agreement 0 - CVE-2026-0864: normalize CR and CRLF line endings when writing multi-line values in ConfigParser - RawConfigParser.write() escaped only '\n' (to '\n\t'), so an attacker-controlled value containing a bare carriage return was written out verbatim and injected unexpected keys and values into the resulting configuration file. Applied at both write() call sites, for the DEFAULT section and for named sections; Python 2.7 has no _write_section(). Backported from upstream CPython (gh-143927, GH-143929). Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0864: normalize CR and CRLF line endings when writing multi-line values in ConfigParser - RawConfigParser.write() escaped only '\n' (to '\n\t'), so an attacker-controlled value containing a bare carriage return was written out verbatim and injected unexpected keys and values into the resulting configuration file. Applied at both write() call sites, for the DEFAULT section and for named sections; Python 2.7 has no _write_section(). Backported from upstream CPython (gh-143927, GH-143929).

0 tuxcare-rhel7-els python-2.7.5-94.0.5.el7_9.tuxcare.els2.x86_64.rpm 3efb349265e8fd6481ade12bb684595bc793217adf2c72bf431fe20fcff5443a python-debug-2.7.5-94.0.5.el7_9.tuxcare.els2.x86_64.rpm dd777c743d3ff25b193cf520be794517a3cf489ed43dfe1deef8183f8f231c29 python-devel-2.7.5-94.0.5.el7_9.tuxcare.els2.x86_64.rpm 335e4694f4cd2eb4fb66a936cd538b661c45b7b5c34a4af5d3400c82ccff9c4e python-libs-2.7.5-94.0.5.el7_9.tuxcare.els2.i686.rpm a4a5cdc26c679a7a992b127640dc5095200dec66e8f1ffa9dd1ddb633b1540b2 python-libs-2.7.5-94.0.5.el7_9.tuxcare.els2.x86_64.rpm c411d2eaefcc7542b1d0a9fdfa210e823d1acb4e9bd1edd4e0f41c1048720cdc python-test-2.7.5-94.0.5.el7_9.tuxcare.els2.x86_64.rpm cc3e3e7f39b4b29f61e5191b25a25dc8345647472178134bcee795455d584957 python-tools-2.7.5-94.0.5.el7_9.tuxcare.els2.x86_64.rpm 2b081d160d5199a301b216fc09f793e085b9380ac9749e3380bc7704dcaa2560 tkinter-2.7.5-94.0.5.el7_9.tuxcare.els2.x86_64.rpm 475a15c3020e0fdec26f82ab8e5a2459ca9d67ef9e0313575286da24efc13fef CLSA-2026:1779465604 TuxCare License Agreement 0 - CVE-2026-6473: tsearch: bound StartSel/StopSel/FragmentDelimiter length to PG_INT16_MAX in ts_headline() - CVE-2026-6473: contrib/ltree: guard lquery parsing against numvar and totallen wraparound - CVE-2026-6473: regex: add overflow-checked MALLOC_ARRAY/REALLOC_ARRAY and bound NFA state/color products in newdfa() and compact() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6473: tsearch: bound StartSel/StopSel/FragmentDelimiter length to PG_INT16_MAX in ts_headline() - CVE-2026-6473: contrib/ltree: guard lquery parsing against numvar and totallen wraparound - CVE-2026-6473: regex: add overflow-checked MALLOC_ARRAY/REALLOC_ARRAY and bound NFA state/color products in newdfa() and compact()

0 tuxcare-rhel7-els postgresql-9.2.24-9.0.3.el7_9.tuxcare.els3.i686.rpm ecd5401b9bdd95e18c77655e32c55f751bc80ad0ac50e8fef31845216cec3f2a postgresql-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm fa3587b2ae74e47e6689e94be6a0b04a2c714914f21169aa5c296eed5c25d586 postgresql-contrib-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm 3a54f90a07e937c5f034a900aca88c7a57f9b956f727c944ac0f36d507b2429e postgresql-devel-9.2.24-9.0.3.el7_9.tuxcare.els3.i686.rpm 0a9bebbad42a129c9e4403d3fee0220ddeff7ef6afadcf112433588a8c4d1cad postgresql-devel-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm a8794948d3b46a96a9b569dbeae2017463af94a7829236393a28402665b365e8 postgresql-docs-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm c8a582a382a4216fb8f74ad6ca4d095daaccf9d3c77c2a7a0a0965c2ec30a8f1 postgresql-libs-9.2.24-9.0.3.el7_9.tuxcare.els3.i686.rpm b234af42b7dcfd30911efc9f831b972398cb929eda3b3cc27adbb02ff0eec482 postgresql-libs-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm d4acdfba3fe2fa33c166bd871ed82ccf74d8f265beef496581a161614f13a073 postgresql-plperl-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm defd77ade7efa93a0bd7a1aba5cdffeefa33ebd97c03fdbbfdd837cf6a91379e postgresql-plpython-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm 512e6de7f7ed9f15ddec71ed1a0a7c471f5717c874cfa518209070b25263f4f5 postgresql-pltcl-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm bc858e1490b025fa61e862f8ceec310dcc5cc3ff565f1525b95395a476fce327 postgresql-server-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm 0dc45a6c529b74b262f09269898a069865f61ab7899a5053456ff15f4a083a55 postgresql-static-9.2.24-9.0.3.el7_9.tuxcare.els3.i686.rpm c325de9509e7b67b28cedb342dfd44a464894f76e3727b374d7572925d1bb96c postgresql-static-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm 878a853275bfa84248ef7d2f2620507040f0e30118fb3a10c4588d7b4b9d96a4 postgresql-test-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm c35bcce356fc10cbd1db067c39fa71e4b79a92bd01661b1282042321d1e1b56c postgresql-upgrade-9.2.24-9.0.3.el7_9.tuxcare.els3.x86_64.rpm e5e3a2468e81e5a250deeab155dc3e98daf8d398d3150bd786656387e072006c CLSA-2026:1787648210 TuxCare License Agreement 0 - CVE-2026-14669: to_char(): bound TZ/tz timezone abbreviation length to prevent a heap buffer overrun in DCH_to_char() - CVE-2022-2625: extensions: forbid CREATE OR REPLACE and CREATE ... IF NOT EXISTS from absorbing free-standing objects Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-14669: to_char(): bound TZ/tz timezone abbreviation length to prevent a heap buffer overrun in DCH_to_char() - CVE-2022-2625: extensions: forbid CREATE OR REPLACE and CREATE ... IF NOT EXISTS from absorbing free-standing objects

0 tuxcare-rhel7-els postgresql-9.2.24-9.0.3.el7_9.tuxcare.els4.i686.rpm 1de2ebf79c8bd52b1f72273b4191f5106590f02715cebc16fe7136def709fae2 postgresql-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm 6995f9ed24e3facc7db557adf3ed0c2dc54020bf54b580b6ddfd221e2d918f53 postgresql-contrib-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm 5a8601ed9898cbfc2b4aae10c68429bdb0a3f7f32a02cc928f8dfba2e84e693d postgresql-devel-9.2.24-9.0.3.el7_9.tuxcare.els4.i686.rpm 14a0268a2cd3921b2802938e3eccbe5cd96e77b479db11bd4b1e73c976595dbd postgresql-devel-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm 9198a038b78e1fbba66b397303232bad324669d226afb299598d67c3934068f4 postgresql-docs-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm cc087110edab0860a7a91b15c7c9e7c3cdc06cb29fae643a92ca94098a665397 postgresql-libs-9.2.24-9.0.3.el7_9.tuxcare.els4.i686.rpm 604eb11260fd048f033bcffe985474171a0dbab5d928927d5aff77a6a5a8232e postgresql-libs-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm 6bb42d064a30b28470b62d730209be38db34d5b487330323d0c8b8065d50bf9a postgresql-plperl-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm 7ca6d5ee745302da8acbdb0965cfa3fdb76bdae6dc2643dd051d0ee327c58803 postgresql-plpython-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm dae4c1bbbcee7f34dbd9b21863dcb56c02a3a8f936d5c8268b615d3bbef247e7 postgresql-pltcl-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm f0c610561d7cc8019cabf55a2f51aec86cedfc57756c765e2d98c9e12393a2be postgresql-server-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm b97b2e38edc514ce97fdac2691455fda70bb7066c78840ef951e0cc7801a2cd3 postgresql-static-9.2.24-9.0.3.el7_9.tuxcare.els4.i686.rpm e29f02a31b4c5c79ce903ec76888831b703f3b19e7d6074ac922b1297d44a156 postgresql-static-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm 35798c5c58a182a8521a6917e4a5ebc70040c9e00bc954304ba4cc092f13a97c postgresql-test-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm c0ea0d699f11650777c01e677aca3bb3559496be00d0b1774be552a19482c3b6 postgresql-upgrade-9.2.24-9.0.3.el7_9.tuxcare.els4.x86_64.rpm 58e6bc994e94c1e3e157ea3e489893b2bcc59dbec4d400b6b5ca596a16c4d03f CLSA-2026:1787732034 TuxCare License Agreement 0 - CVE-2026-66338: reject chunk-size lines that violate RFC 9112 (leading whitespace, sign prefix, "0x" prefix or trailing garbage) in soup_body_input_stream_read_chunked() to prevent HTTP request smuggling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-66338: reject chunk-size lines that violate RFC 9112 (leading whitespace, sign prefix, "0x" prefix or trailing garbage) in soup_body_input_stream_read_chunked() to prevent HTTP request smuggling

0 tuxcare-rhel7-els libsoup-2.62.2-2.0.11.el7.tuxcare.els3.i686.rpm d973924bae786def85ae07f566bde845bb7012978daded0f99477c4978c569d8 libsoup-2.62.2-2.0.11.el7.tuxcare.els3.x86_64.rpm a2651f18401acf43d2a01ea9d764a997680201feef151335f1621fc1cb7bc087 libsoup-devel-2.62.2-2.0.11.el7.tuxcare.els3.i686.rpm 4cc49b20f6fea62016e7890885e7c451155618fdd2b93040ec32967546a365f2 libsoup-devel-2.62.2-2.0.11.el7.tuxcare.els3.x86_64.rpm 309fa0d453ce7430428c0dd019304e0860c24df41d0764d8fab133336876df2c CLSA-2026:1787836996 TuxCare License Agreement 0 - CVE-2026-0864: normalize CR and CRLF line endings to LF+TAB when writing multi-line configparser values, preventing configuration injection via attacker-controlled values Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0864: normalize CR and CRLF line endings to LF+TAB when writing multi-line configparser values, preventing configuration injection via attacker-controlled values

0 tuxcare-rhel7-els python3-3.6.8-21.0.9.el7_9.tuxcare.els2.i686.rpm 93b6b5aea8b76548c570b11fa0a9f2da6620fddd1c5af898e134d11dcf3fe5af python3-3.6.8-21.0.9.el7_9.tuxcare.els2.x86_64.rpm a2d921d5cee11f93c0b9ede3f83b72906ff4d634f97ecda1e316322740997c9b python3-debug-3.6.8-21.0.9.el7_9.tuxcare.els2.i686.rpm 737d0b414b2b109d85387bd8c778365ae6fa5707de70f482d7105fa7e4e003af python3-debug-3.6.8-21.0.9.el7_9.tuxcare.els2.x86_64.rpm 14919800af481940be250852d9ab1d02992faf949e106dac42603645171a6bda python3-devel-3.6.8-21.0.9.el7_9.tuxcare.els2.i686.rpm 6ef457899d9192bd65a7dfdc026a84354ad99dc28df2f5543bf6bfa81c823ff9 python3-devel-3.6.8-21.0.9.el7_9.tuxcare.els2.x86_64.rpm ed77765e145000af86e3c6ad7764a1e3a42d2ba465db44611b37385f4c392f30 python3-idle-3.6.8-21.0.9.el7_9.tuxcare.els2.i686.rpm e57c1f246f2fb33cd5fc9cb10c1c4c8c5566f83bfca66d320847a6caf35c41d6 python3-idle-3.6.8-21.0.9.el7_9.tuxcare.els2.x86_64.rpm 4232628ef8264146c26f0a9bc716452ee6c47bd667b3dded13f226cc1b667d0a python3-libs-3.6.8-21.0.9.el7_9.tuxcare.els2.i686.rpm 8db5f0342ae886b9362278d1f559ad631662f984fa4da21e3b126b224d4a41e1 python3-libs-3.6.8-21.0.9.el7_9.tuxcare.els2.x86_64.rpm 033d99ace02ccdbc0a037d7e6d60aef9fe8bcf92b2d26eeae48cde2c880bec88 python3-test-3.6.8-21.0.9.el7_9.tuxcare.els2.i686.rpm c1a1f8d9b8a90a66968d96d1efeb410f880243dec017ec9cbc5b2283f51877f1 python3-test-3.6.8-21.0.9.el7_9.tuxcare.els2.x86_64.rpm 085a59eb254af054fa35f02f717951bf75aff3b81cd0fc87dad3375d684e2f8d python3-tkinter-3.6.8-21.0.9.el7_9.tuxcare.els2.i686.rpm 08ea413939ce91d1b80fce4edd6a8ad7c7377c5695cc78f880af3b44302cabea python3-tkinter-3.6.8-21.0.9.el7_9.tuxcare.els2.x86_64.rpm 54390cb92ed9bd98dd6d90a11260e261ab1f496fceca7dbb305420bc220536da CLSA-2026:1787999580 TuxCare License Agreement 0 - CVE-2026-42766: fix NULL pointer dereference during password-based CMS decryption when the optional keyDerivationAlgorithm field is absent - CVE-2026-34180: fix heap buffer over-read caused by integer truncation of ASN.1 primitive content lengths above 2 GB on 64-bit platforms Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42766: fix NULL pointer dereference during password-based CMS decryption when the optional keyDerivationAlgorithm field is absent - CVE-2026-34180: fix heap buffer over-read caused by integer truncation of ASN.1 primitive content lengths above 2 GB on 64-bit platforms

0 tuxcare-rhel7-els openssl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm a2276fc6d7307509363ee57b62eb58b505e97453783d24d8df07dd6a0ca4c0d9 openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm 7ec450dcbdcb21dc590fb652b82800d47613a9d8ebf63bde0df9dec822b5b1cd openssl-devel-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm 0b07c2da30d4722766f0eef43d966f59c7034d59589d30967f1d87f28eb2d595 openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm 5734dae8df014abd9de0bd8fca79f6876c3013a8e6fc7d965c56a271dd53422f openssl-libs-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm 21347bdc55919e48601c57e7434a5400305c4636d8370440afd877a8f805f5dc openssl-perl-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm d93878cd26ae4931219d139ef2066859680d0483fd5353f53bc55e80d4313dc9 openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.i686.rpm 5a80741644eab1eef686ad3e14ab2e19d811580856ac2ffa176ed9427ee2f8cb openssl-static-1.0.2k-26.0.1.el7_9.tuxcare.els2.x86_64.rpm d8a3e8e6a41f6c0477cdd5806536beaad6c5ee1adafab9c6abd9f9f2c4dccd84