Tuxcare Errata System 0.0.1 5.10 2026-10-25T12:50:00 TuxCare 9.8 - CVE-2026-42217: reject IDManifest variable-length integers whose shift reaches 64 bits, avoiding undefined behaviour in readVariableLengthInteger() Critical TuxCare License Agreement CVE-2026-42217 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-32775: buffer overwrite via underflow in exif_mnote_data_get_value() Important TuxCare License Agreement CVE-2026-32775 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-32316: heap overflow in jvp_string_append/copy_replace_bad() - CVE-2026-49839: heap out-of-bounds write in jv_load_file() (--rawfile) Important TuxCare License Agreement CVE-2026-49839 CVE-2026-32316 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-6276: cookie leak via stale custom Host cookiehost on handle reuse Important TuxCare License Agreement CVE-2026-6276 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-45853: reject zip header fields longer than 65535 bytes in minizip's zipOpenNewFileInZip4_64() to avoid an integer overflow and heap buffer overflow Critical TuxCare License Agreement CVE-2023-45853 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2025-27830: fix potential buffer overflow with DollarBlend in font serialization - CVE-2025-27831: prevent Unicode decoding overrun in txtwrite/docxwrite devices - CVE-2025-27835: fix confusion between bytes and shorts in glyph to Unicode conversion - CVE-2025-27836: fix potential print buffer overflow in BJ10V device - CVE-2024-29508: fix heap-based pointer disclosure in pdf_base_font_alloc - CVE-2025-48708: fix argument sanitization to redact values supplied with '#' separator - CVE-2024-46955: out-of-bounds read when reading a color in Indexed color space - CVE-2025-59798: buffer overrun in pdf_write_cmap in the pdfwrite device - CVE-2025-59799: stack buffer overflow in pdfmark_coerce_dest in the pdfwrite device - CVE-2023-52722: reject non-standard eexec seeds in SAFER mode (psi/zmisc1.c) Moderate TuxCare License Agreement CVE-2025-27830 CVE-2024-46955 CVE-2025-27835 CVE-2023-52722 CVE-2024-29508 CVE-2025-59799 CVE-2025-27836 CVE-2025-48708 CVE-2025-59798 CVE-2025-27831 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-40468: fix integer overflow of the result-buffer offset in do_sub() - CVE-2026-40469: fix integer overflow of the result-buffer size in do_sub() on 32-bit builds Critical TuxCare License Agreement CVE-2026-40469 CVE-2026-40468 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-69720: stack buffer overflow in infocmp analyze_string() Important TuxCare License Agreement CVE-2025-69720 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-35945: memory leak in nghttp2_session_mem_send_internal() Important TuxCare License Agreement CVE-2023-35945 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-52194: undefined float-to-int conversion in ircam_read_header() Important TuxCare License Agreement CVE-2025-52194 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-3731: heap out-of-bounds read in sftp_extensions_get_name/data() Important TuxCare License Agreement CVE-2026-3731 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-60000: pre-auth resource exhaustion in input_gssapi_errtok(), GSSAPI error tokens were not counted against MaxAuthTries Important TuxCare License Agreement CVE-2026-60000 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-18924: link HTTP/2 server-push transfers to the parent handle's share in duphandle() so the pushed handle does not outlive shared state Important TuxCare License Agreement CVE-2026-18924 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-5773: wrong SMB connection reuse across shares - CVE-2026-8458: stale Negotiate service name on reused connections - CVE-2026-8932: connection reuse ignoring mTLS private key options Important TuxCare License Agreement CVE-2025-15079 CVE-2026-8932 CVE-2026-8458 CVE-2026-5773 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-4504: heap buffer over-read in scan_ps() on a trailing backslash Important TuxCare License Agreement CVE-2023-4504 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-40528: buffer overflow in do_key_value() on long profile key values Important TuxCare License Agreement CVE-2026-40528 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-50292: udev property injection via phys in libinput-device-group Critical TuxCare License Agreement CVE-2026-50292 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-72712: infinite loop in Packet:parse_options() on zero-length option Important TuxCare License Agreement CVE-2026-72712 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2024-49394: protect In-Reply-To and References under the cryptographic signature (add to protected headers) - CVE-2024-49395: fix missing display of encryption recipients in GPGME - CVE-2026-43859: use memcpy() instead of strfcpy() in hmac_md5() so a binary MD5 digest of an over-long IMAP CRAM-MD5 secret is not truncated at an embedded NUL - CVE-2026-43860: copy the full MD5_DIGEST_LEN bytes of the hashed IMAP CRAM-MD5 secret in hmac_md5() instead of one byte less - CVE-2026-43861: reject a percent-encoded NUL (%00) as an invalid character in url_pct_decode() - CVE-2026-43862: check that the GSSAPI security-level token is at least 4 bytes before reading it in imap_auth_gss(), and read it as uint32_t - CVE-2026-43863: treat a negative gpgme_data_read() return as an error in data_object_to_stream() instead of looping forever - CVE-2026-43864: check key and key->subkeys for NULL in show_sig_summary() Moderate TuxCare License Agreement CVE-2026-43862 CVE-2024-49394 CVE-2026-43863 CVE-2026-43860 CVE-2024-49395 CVE-2026-43859 CVE-2026-43861 CVE-2026-43864 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Rebase to 5.1.0-6.el9_8.1; vendor Patch005/006 carry the upstream fixes for CVE-2026-40468 and CVE-2026-40469 (our patches dropped) - CVE-2023-4156: fix heap out-of-bounds read in format_tree() in builtin.c Important TuxCare License Agreement CVE-2023-4156 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-51257: out-of-bounds write in jas_icctxt_input() - CVE-2025-8836: reachable assertion in jpc_floorlog2() via cp_create() - CVE-2025-8837: use-after-free in jpc_dec_dump() Important TuxCare License Agreement CVE-2025-8836 CVE-2023-51257 CVE-2025-8837 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-10921: fix HDR file parsing heap-based buffer overflow vulnerability; bound linesize by the size of one scanline and correct the run length check added for CVE-2026-2050 Important TuxCare License Agreement CVE-2025-10921 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-14199: auth proxy cache key collision in getProxyCacheKey() - Stop exporting GOEXPERIMENT=boringcrypto: golang 1.26.7-2.el9_8 defaults to GOFIPS140=certified and refuses the experiment Important TuxCare License Agreement CVE-2026-14199 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-12495, CVE-2025-12839, CVE-2025-12840: heap buffer overflows in OpenEXRCore chunk reading (memset on a failed read in exr_read_chunk(), packed/unpacked size mismatch of uncompressed tiles, tiled chunk sizes for scanline parts in internal_exr_compute_chunk_offset_size()) Important TuxCare License Agreement CVE-2025-12840 CVE-2025-12495 CVE-2025-12839 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-42960: in scrub_normalize(), mark additional-section glue as allowed only for NS rrsets in the authority section, so address records can no longer be cached as a side effect of a delegation response - CVE-2026-80225: bound the number of pipelined queries drained from one TCP/DoT connection per event-loop visit to NUM_TCP_PER_SELECT and defer the remainder through a zero-delay timer, so a single connection can no longer monopolise a worker event loop - CVE-2026-85501: add the val-validation-attempts and val-hash-attempts limits (default 32 each) to bound DNSSEC signature and hash work per validation, and require only the answer and authority sections to be secure (reply_an_ns_rrsets_secure), so the additional section is no longer validated Critical TuxCare License Agreement CVE-2026-80225 CVE-2026-85501 CVE-2026-42960 CVE-2026-81634 CVE-2026-81642 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-25210: add an integer overflow check before the tag buffer doubling in doContent(), so the reallocation size can no longer wrap - CVE-2026-56407: cap the entity value pool length against signed integer overflow in doProlog() before it is stored into m_declEntity->textLen - CVE-2026-56408: add the upstream integer overflow guard to copyString(); with XML_Char == char as built here the guard is inert, and it takes effect only in an XML_UNICODE build where sizeof(XML_Char) > 1 Critical TuxCare License Agreement CVE-2026-56131 CVE-2026-56408 CVE-2026-25210 CVE-2026-66046 CVE-2026-56407 CVE-2026-76957 CVE-2026-93990 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-54679: integer overflow in jvp_string_append() on 32-bit Moderate TuxCare License Agreement CVE-2026-54679 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-18147: remove the redirect from the Web UI password reset page Important TuxCare License Agreement CVE-2026-18147 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-27144: count the separators before splitting compact JWS/JWE input in the vendored go-jose/v3 so tokens with many dots no longer cause unbounded allocation Important TuxCare License Agreement CVE-2025-27144 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-84782: reset s->init_off on DTLS handshake retransmit and skip retransmission while a handshake write is suspended - CVE-2026-35189: compute relative CRLDP names on demand instead of for every cached certificate - CVE-2026-72897: refresh ssl_pkey_num and valid_flags in SSL_set_SSL_CTX - CVE-2026-54872: pin the scalar width in the EC ladder so BN_add padding no longer depends on the secret nonce - CVE-2026-75805: skip the issuer/serial comparison for CSR-based CMP revocation requests - CVE-2026-75806: fail short TLS 1.2/DTLS AEAD records without sending an alert Important TuxCare License Agreement CVE-2026-72897 CVE-2026-35189 CVE-2026-84782 CVE-2026-54872 CVE-2026-75806 CVE-2026-75805 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-39804: stack overflow in xattr_decoder() on a large PAX xattr value Low TuxCare License Agreement CVE-2023-39804 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Upgrade to openjdk-11.0.32.1+1 (GA). The following CVEs were fixed: - CVE-2026-60589: improve resource resolving - CVE-2026-61308: enhance HTTP connections - CVE-2026-70907: enhance TLS server - Update bundled FreeType to 2.14.3 following JDK-8385390 Important TuxCare License Agreement CVE-2026-33416 CVE-2026-34268 CVE-2025-21502 CVE-2026-21925 CVE-2026-21933 CVE-2026-46968 CVE-2026-22007 CVE-2026-70907 CVE-2026-21945 CVE-2025-30761 CVE-2025-65018 CVE-2026-47058 CVE-2025-30698 CVE-2026-61308 CVE-2025-53066 CVE-2026-34282 CVE-2026-47059 CVE-2026-60147 CVE-2026-22016 CVE-2026-60589 CVE-2025-30754 CVE-2025-50059 CVE-2026-23865 CVE-2026-47063 CVE-2025-53057 CVE-2026-47057 CVE-2025-30691 CVE-2026-46917 CVE-2026-25646 CVE-2025-66293 CVE-2025-64720 CVE-2026-47010 CVE-2026-22013 CVE-2026-22021 CVE-2026-47021 CVE-2026-22018 CVE-2025-21587 CVE-2026-47027 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Harden the PCX loader against a 16-bit truncation of the expected bytes per line (width 65536, 8 bpp) that bypasses the check added for CVE-2026-4887 Important TuxCare License Agreement CVE-2026-78465 CVE-2026-0797 CVE-2025-10920 CVE-2025-10924 CVE-2026-18306 CVE-2026-18308 CVE-2026-40917 CVE-2026-58381 CVE-2026-82328 CVE-2026-18307 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-49288: fix use-after-free in StoreEntry::startWriting() reachable via oversized replies with collapsed_forwarding enabled - CVE-2025-59362: fix mishandling of ASN.1 encoding of long SNMP OIDs in lib/snmplib/asn1.c (asn_build_objid) - CVE-2026-33515: fix validation of packet sizes and URLs in ICP - CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions - CVE-2026-50012: fix heap buffer overflow in cache digest reply handling when the on-the-wire payload exceeds the advertised mask size Important TuxCare License Agreement CVE-2026-47729 CVE-2026-50012 CVE-2025-59362 CVE-2026-33515 CVE-2023-49288 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-34479: fix Log4j1XmlLayout invalid XML 1.0 character escape Important TuxCare License Agreement CVE-2026-34479 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Enable this branch to build pcre2 for tuxcare9.8esu; the AlmaLinux 9.8 vendor source package (pcre2-10.40-6.el9) is byte-identical to the 9.6 one already used here, so no source change is required Critical TuxCare License Agreement CVE-2026-89158 CVE-2026-89157 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Rebase to ghostscript-9.54.0-19.el9_8.1; CVE-2026-39919 fixed by vendor - CVE-2026-103226: bound the control stack in the Type 1 to Type 2 font conversion used by pdfwrite - CVE-2025-27830: count every $Blend procedure entry in the length and bound the formatting of its numbers so the serialized procedure cannot overflow its buffer (upstream Bug 706923 and gs_snprintf) Moderate TuxCare License Agreement CVE-2026-103226 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-58470: integer overflow in parse_content_range() Moderate TuxCare License Agreement CVE-2026-58470 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-58058: fix out-of-bounds read and length underflow in IPv6 extension header parsing in libnetutil Moderate TuxCare License Agreement CVE-2026-58058 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-13321: check every NSEC record of an RRset against the signer zone, not only the first one, on top of the vendor fix - CVE-2026-19668: bound the DS to DNSKEY matching in validate_dnskey() so a crafted DS and DNSKEY pair cannot force unbounded key tag and digest work - CVE-2026-77119: ignore an NSEC3 whose zone does not enclose the DS name when proving an insecure delegation Important TuxCare License Agreement CVE-2026-13321 CVE-2026-19941 CVE-2026-19666 CVE-2026-19668 CVE-2026-19662 CVE-2026-78301 CVE-2026-19033 CVE-2026-75029 CVE-2026-5950 CVE-2026-19667 CVE-2026-77119 CVE-2026-80274 CVE-2025-8677 CVE-2026-3592 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-41056: fix possible corruption in sdsResize - CVE-2026-23631: delay full resync processing in readSyncBulkPayload while a timed-out script is still running on the replica Important TuxCare License Agreement CVE-2023-41056 CVE-2026-23631 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-11395: oci-archive, storage/pkg/archive: prevent writes outside the destination when extracting a crafted tar archive Moderate TuxCare License Agreement CVE-2025-11395 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling a regular expression with a repeated fixed string on 32-bit builds - CVE-2026-57432: fix pack/unpack SSize_t overflow when computing structure size Critical TuxCare License Agreement CVE-2026-8376 CVE-2026-57432 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2024-47606: fix integer overflow when allocating system memory Critical TuxCare License Agreement CVE-2024-47606 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-0989: limit the RelaxNG include depth - CVE-2026-0990: prevent unbounded recursion in catalog URI resolution - CVE-2026-0992: ignore repeated nextCatalog entries in XML catalogs - CVE-2025-8732: limit SGML catalog include depth, skip repeated CATALOG entries - CVE-2025-27113: fix compilation of the explicit child axis in patterns Important TuxCare License Agreement CVE-2026-0990 CVE-2026-0992 CVE-2026-0989 CVE-2025-8732 CVE-2025-27113 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-56288: fix a null pointer dereference in another_hunk() on malformed unified and normal diff hunks with no-newline markers - CVE-2026-56289: fix an infinite loop in locate_hunk() on hunks with a null range and a huge line number Moderate TuxCare License Agreement CVE-2026-56288 CVE-2026-56289 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2024-31047: compute pixel count, width and base offset with 64-bit arithmetic in exrmultipart convert() to prevent integer overflow Moderate TuxCare License Agreement CVE-2024-31047 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-103531: stack buffer overflow in setcos_construct_fci_44() when type, security or proprietary file attributes exceed 64 bytes Moderate TuxCare License Agreement CVE-2026-103531 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-41080: seed the hash flooding protection with a full 16-byte SipHash key and 16 bytes of entropy instead of a single unsigned long, and add XML_SetHashSalt16Bytes() so callers can supply a 16-byte salt Moderate TuxCare License Agreement CVE-2026-56412 CVE-2026-41080 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-2906: fix divide-by-zero in CP2179 timetag info response dissector Moderate TuxCare License Agreement CVE-2023-2906 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-48005: mod_auth_digest: track the nonce count per nonce and record it only for a fully verified request - CVE-2026-73636: mod_auth_digest: enforce one-time nonces also when the client entry was garbage-collected - CVE-2026-73637: mod_auth_digest: do not use shared memory client entries outside the client lock - mod_auth_digest: RFC 2069 clients and AuthDigestQop none are no longer accepted (upstream 2.4.69 behaviour) Important TuxCare License Agreement CVE-2026-73636 CVE-2026-73637 CVE-2026-48005 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-53859: buffer over-read in mail plain/login/cram-md5 auth handlers - CVE-2026-28753: auth_http/XCLIENT injection via a resolved client host name - CVE-2026-40701: use-after-free in ngx_ssl_ocsp_resolve_handler() - CVE-2026-42934: buffer over-read in recode_from_utf8() on split sequences - CVE-2026-42946: buffer over-read in scgi/uwsgi status line fallback parsing - CVE-2026-48142: buffer over-read in recode_from_utf8() on invalid sequences Important TuxCare License Agreement CVE-2026-48142 CVE-2026-40701 CVE-2026-42946 CVE-2025-53859 CVE-2026-28753 CVE-2026-42934 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-56153: mod_charset_lite: bound the partial character buffer in finish_partial_char() - CVE-2026-46729: mod_heartmonitor: validate the heartbeat request body and query - CVE-2026-56154: mod_rewrite: copy the lookahead Vary value out of the subrequest pool - CVE-2026-63292: mod_vhost_alias: reject host name segments that overflow the interpolation buffer - CVE-2026-63718: mod_proxy_uwsgi: drop hop-by-hop headers from backend responses Critical TuxCare License Agreement CVE-2026-56154 CVE-2026-63292 CVE-2026-63718 CVE-2026-56153 CVE-2026-46729 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-86138: prevent integer overflow in dictionary QName string allocation - CVE-2026-86143: prevent integer overflow before invoking output buffer write callbacks Critical TuxCare License Agreement CVE-2026-86138 CVE-2026-86143 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-42772, CVE-2026-54873: replace the QUIC stream reassembly list with an rbtree-based quic_strm_reas.c and cap packet-buffer pinning per stream - CVE-2026-84784: advance cur_retire_prior_to only when RETIRE_CONNECTION_ID is acknowledged - CVE-2026-35191: credit unvalidated amplification once per datagram - CVE-2026-75804: report connection-level QUIC flow control errors Important TuxCare License Agreement CVE-2026-84784 CVE-2026-54873 CVE-2026-35191 CVE-2026-75804 CVE-2026-42772 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-1467: validate the URI host, including an IPv6 zone ID, when a message is created or its URI is set; SoupServer answers an invalid request host with 400 - CVE-2026-3632: CR/LF in the URI host can no longer reach the Host header (CVE-2026-1467 host validation) - CVE-2026-3633: reject an HTTP method that is not an RFC 9110 token; SoupServer answers one with 400 - CVE-2026-66339: do not send Proxy-Authorization on a connection that does not go via the proxy (inside a CONNECT tunnel, direct) - CVE-2026-1539: strip Proxy-Authorization on a cross-origin redirect, including credentials negotiated through a 407 - CVE-2026-12547: use cached proxy credentials only for the proxy they came from - CVE-2026-3099: reject replayed and unissued nonces in SoupAuthDomainDigest, with a bounded nonce table and stale=TRUE renewal Important TuxCare License Agreement CVE-2026-3633 CVE-2026-3099 CVE-2026-1801 CVE-2026-66338 CVE-2026-12549 CVE-2026-2708 CVE-2026-1467 CVE-2026-66339 CVE-2026-1539 CVE-2025-4945 CVE-2026-12548 CVE-2026-2443 CVE-2026-3632 CVE-2026-66337 CVE-2025-11021 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-48715: fix stack buffer overflow in radvdump print_ff() Route Information option parser via crafted ICMPv6 Router Advertisement Important TuxCare License Agreement CVE-2026-48715 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-41579: symlink escape in /dev setup and mountCgroupV1() - Build with GOFIPS140=off: golang 1.26.7-2.el9_8 defaults to certified, which cannot unpack its FIPS module under the read-only /usr/share/gocode GOPATH Important TuxCare License Agreement CVE-2026-41579 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-33948: fix NUL truncation in JSON parser (validation bypass) - CVE-2026-33947: fix unbounded recursion in jv_setpath/jv_getpath/delpaths - CVE-2026-40612: limit containment check depth - CVE-2026-41256: fix NUL truncation in program files loaded with -f - CVE-2026-41257: fix signed-int overflow in stack_reallocate - CVE-2026-43894: cap numeric literal length to DEC_MAX_DIGITS - CVE-2026-43895: reject embedded NUL bytes in module import paths - CVE-2026-43896: limit recursive object merge depth - CVE-2026-44777: detect circular module imports - CVE-2026-47770: guard deep structural equality and comparison recursion - CVE-2024-53427: reject NaN with payload in jvp_literal_number_new() - CVE-2025-9403: replace reparse assertion in run_jq_tests() with a test failure Moderate TuxCare License Agreement CVE-2026-43894 CVE-2026-41256 CVE-2026-47770 CVE-2026-33947 CVE-2026-43896 CVE-2026-43895 CVE-2024-53427 CVE-2026-44777 CVE-2026-33948 CVE-2026-40612 CVE-2026-41257 CVE-2025-9403 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-76844: reset strm.next_in and strm.avail_in in gz_write() when a direct write fails, so a later gzwrite() after gzclearerr() cannot copy past the input buffer Important TuxCare License Agreement CVE-2026-76844 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-0672: http.cookies: reject control characters in Morsel keys, values and parameters so they cannot inject extra header lines - CVE-2026-3644: http.cookies: reject control characters passed through Morsel.update(), |=, pickling and js_output() - CVE-2026-0864: configparser: normalize CR, CRLF and LF line endings in written values so a value cannot inject new sections or options - CVE-2026-4224: pyexpat: guard the recursion in conv_content_model() so a deeply nested DTD content model raises RecursionError instead of overflowing the C stack - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error instead of resuming from an invalid internal state - CVE-2026-11972: tarfile: stop _Stream.seek() at end of data so a truncated stream raises ReadError instead of looping forever - CVE-2026-82049: tarfile: resolve the hard link target before linking so that, with the data filter, a hard link to a symlink cannot recreate the symlink outside the destination - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable), widening the hash salt from 8 to 16 bytes; with PYTHONHASHSEED=0 the zero hash secret now also reaches libexpat Important TuxCare License Agreement CVE-2026-0864 CVE-2026-11972 CVE-2026-3644 CVE-2026-9669 CVE-2026-4224 CVE-2026-0672 CVE-2026-7210 CVE-2026-82049 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - rebase onto AlmaLinux 9.8 2:8.2.2637-26.el9_8.23 - carry all TuxCare ELS backports: CVE-2023-0049, CVE-2023-0051, CVE-2023-0288, CVE-2023-0433, CVE-2023-2610, CVE-2023-4733, CVE-2023-4734, CVE-2023-4735, CVE-2023-4738, CVE-2023-4750, CVE-2023-4751, CVE-2023-4781, CVE-2023-5344, CVE-2023-5535, CVE-2026-26269, CVE-2026-39881, CVE-2026-52860 - also fixed by the vendor in this build: CVE-2026-73073 Important TuxCare License Agreement CVE-2023-4781 CVE-2023-2610 CVE-2023-4733 CVE-2026-39881 CVE-2023-5535 CVE-2023-4750 CVE-2023-0051 CVE-2023-0049 CVE-2026-52860 CVE-2023-4734 CVE-2023-5344 CVE-2026-26269 CVE-2023-0433 CVE-2023-4751 CVE-2023-0288 CVE-2023-4738 CVE-2023-4735 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-63686: mod_xml2enc: on a charset conversion failure in xml2enc_ffunc(), pass the unconverted remainder through raw and remove the filter, and treat APR_INCOMPLETE as non-fatal Important TuxCare License Agreement CVE-2026-63686 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-90616: symlink following in flatpak_ensure_data_dir() and /var binds Important TuxCare License Agreement CVE-2024-42472 CVE-2026-90616 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-21720: bound the avatar cache to 2000 entries so a signed-in user cannot grow it without limit - CVE-2026-28383: carry the upstream test for the oversized plugin resource request body Important TuxCare License Agreement CVE-2026-28383 CVE-2026-21722 CVE-2025-4123 CVE-2026-21720 CVE-2026-28376 CVE-2026-28380 CVE-2026-28379 CVE-2026-21727 CVE-2026-33378 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-33818: unbounded recursion in encoding/asn1 Unmarshal - CVE-2026-39820: quadratic string concatenation in net/mail consumeComment - CVE-2026-39821: ASCII-only Punycode labels accepted by x/net/idna process() - CVE-2026-42499: quadratic string concatenation in net/mail consumePhrase - CVE-2026-56853: missing ReadHeaderTimeout in net/http unencrypted HTTP/2 check - CVE-2026-56858: XSS via JS regexp context tracking in html/template - CVE-2026-56859: unbounded recursion in encoding/xml DecodeElement - CVE-2026-56860: quadratic complexity in net/url resolvePath - CVE-2026-56862: unlimited post-handshake KeyUpdate messages in crypto/tls - Rebuild with golang >= 1.26.7-1.el9_8 for the standard library fixes Important TuxCare License Agreement CVE-2026-56853 CVE-2026-39820 CVE-2026-42499 CVE-2026-33818 CVE-2026-56862 CVE-2026-56860 CVE-2026-39821 CVE-2026-56859 CVE-2026-56858 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-19445: _ssl: look the SNI servername callback's SSLContext up from the SSL object instead of the borrowed servername arg, and unregister the callback in context_dealloc(), so the callback is no longer reached through a released SSLContext - CVE-2026-19553: ssl: SSLObject._create() now warns with DeprecationWarning when check_hostname is set and server_hostname is None, and rejects server_hostname or session in server mode with ValueError Critical TuxCare License Agreement CVE-2026-19553 CVE-2026-19445 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-30571: umask race in archive_write_disk_new() - CVE-2025-5918: out-of-bounds read when skipping past EOF in file_skip() - CVE-2025-25724: unchecked strftime() result in list_item_verbose() Important TuxCare License Agreement CVE-2023-30571 CVE-2025-5918 CVE-2025-25724 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-96808: symlink path traversal out of the base directory in revokefs Important TuxCare License Agreement CVE-2026-96808 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-46433: fix heap out-of-bounds read in lldpd_decode when stripping VLAN tag Moderate TuxCare License Agreement CVE-2026-46433 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-0672: http.cookies: reject control characters in Morsel keys, values and parameters so they cannot inject extra header lines - CVE-2026-4224: pyexpat: guard the recursion in conv_content_model() so a deeply nested DTD content model raises RecursionError instead of overflowing the C stack - CVE-2026-11940: tarfile: re-filter the member used for the hard-link extraction fallback so a deeper symlink cannot be recreated outside the destination - CVE-2026-11972: tarfile: stop _Stream.seek() at end of data so a truncated stream raises ReadError instead of looping forever - CVE-2026-3644: http.cookies: reject control characters passed through Morsel.update(), |=, pickling and js_output() - CVE-2026-0864: configparser: normalize CR, CRLF and LF line endings in written values so a value cannot inject new sections or options - CVE-2026-9669: bz2: refuse to reuse a BZ2Decompressor after a decompression error instead of resuming from an invalid internal state - CVE-2026-15308: html.parser: buffer incremental feed() input so unterminated markup fed in small chunks is no longer parsed in quadratic time - CVE-2026-82049: tarfile: resolve the hard link target before linking so that, with the data filter, a hard link to a symlink cannot recreate the symlink outside the destination - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable), widening the hash salt from 8 to 16 bytes; with PYTHONHASHSEED=0 the zero hash secret now also reaches libexpat Important TuxCare License Agreement CVE-2026-0864 CVE-2025-12084 CVE-2026-11972 CVE-2026-3644 CVE-2026-9669 CVE-2026-4224 CVE-2026-0672 CVE-2026-15308 CVE-2026-11940 CVE-2026-7210 CVE-2026-82049 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-24912: drop a pending RADIUS request from the retransmit list only after a handler has accepted the response, so an injected response with a matching identifier cannot cancel a legitimate pending request Important TuxCare License Agreement CVE-2025-24912 CVE-2026-58374 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-21637: uncaught exception from SNICallback in loadSNI() crashes the TLS server Critical TuxCare License Agreement CVE-2024-22020 CVE-2026-6733 CVE-2025-23167 CVE-2024-28863 CVE-2026-48934 CVE-2026-48928 CVE-2026-48930 CVE-2026-21637 CVE-2026-21714 CVE-2025-22150 CVE-2026-48618 CVE-2026-21710 CVE-2025-23085 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-96807: symlink attack on the per-app .ld.so cache directory in regenerate_ld_cache() Low TuxCare License Agreement CVE-2026-96807 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-1218: fix packet over-reads in the mysqlnd wire protocol parser (GHSA-r6x9-5r99-36j7); reset row zvals released on a row decode error to avoid a use-after-free (downstream correction) - CVE-2025-14181: fix heap buffer overflow from signed overflow in the SOAP HTTP chunked response size check (GHSA-cj93-vc83-wgqv) - CVE-2026-91765: bound recursion depth in ext/soap XML parsing and decoding (GHSA-rgrp-mwpx-f6rm) - CVE-2026-6103: fix phar tar entry injection via overflowing TAR size field (GHSA-j3wh-g957-2m85) - CVE-2026-92842: fix heap out-of-bounds read in convert.* stream filters with a NUL byte in line-break-chars (GHSA-88hq-2827-7pg6) - CVE-2026-91769: do not fall back to the certificate CN when it presents a subjectAltName service identity (GHSA-vvx9-73fr-5jjx) - CVE-2026-91767: fix out-of-bounds read in php_openssl_matches_wildcard_name() (GHSA-xr7j-rvgx-xq5p) - CVE-2026-91766: strip Authorization, Cookie and Proxy-Authorization user headers on cross-origin redirects in the http wrapper (GHSA-fpwc-w8rq-cr92) - CVE-2026-93682: fix out-of-bounds read on an empty Location header in the http wrapper redirect (GH-23467) - CVE-2026-91768: compare all 128 bits of IPv6 addresses against FastCGI listen.allowed_clients (GHSA-62xp-839h-2637) Important TuxCare License Agreement CVE-2026-91766 CVE-2026-91767 CVE-2026-6103 CVE-2025-14181 CVE-2026-93682 CVE-2026-92842 CVE-2026-91768 CVE-2026-91765 CVE-2026-91769 CVE-2025-1218 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2024-43204: mod_headers: RequestHeader no longer changes the response Content-Type; "Header set" and "Header setifempty" of Content-Type no longer mark it as trusted - CVE-2026-33523: reject control characters in the reason phrase of forwarded status lines, including interim responses - CVE-2026-59797: mod_ssl: do not allow file() and filesize() in SSLRequire expressions from .htaccess files - CVE-2026-79768: mod_userdir: reject "." as a user name so that "/~./" no longer maps onto the base directory of an absolute UserDir - Also ships the els4 fixes: CVE-2026-63045, CVE-2026-29170, CVE-2026-42528, CVE-2026-93546, CVE-2026-58415 Moderate TuxCare License Agreement CVE-2026-58415 CVE-2024-43204 CVE-2026-63045 CVE-2026-59797 CVE-2026-93546 CVE-2026-33523 CVE-2026-29170 CVE-2026-42528 CVE-2026-79768 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-2369: fix integer underflow in sniff_unknown() on a zero-length resource Critical TuxCare License Agreement CVE-2026-2369 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-65182: ensure the security constraint with the longest matching path is selected (upstream tomcat 9.0.121) - CVE-2026-65183: improve the security of Unix domain sockets in the NIO and APR connectors (upstream tomcat 9.0.121 and 9.0.123) - CVE-2026-65905: fix incorrect rejection at the upper boundary of the DIGEST nonceCount window (upstream tomcat 9.0.121) - CVE-2026-65927: correct the rule index reset for [N], chain rule and query string processing in the rewrite valve (upstream tomcat 9.0.121) - CVE-2026-66422: separate the Context role mapping from security-role-ref (upstream tomcat 9.0.121) - CVE-2026-68525: refresh the security constraints after FORM authentication when the restored request changes the HTTP method, so a constraint that limits POST but not GET is re-evaluated instead of being bypassed (upstream tomcat 9.0.121) - CVE-2026-68569: various improvements to the DataSourceRealm and JDBCRealm (upstream tomcat 9.0.121, plus 45a3c1ef from the 9.0.x branch for a DataSourceRealm without a role store); a JDBCRealm in the default strict allRolesMode now needs a role store - CVE-2026-68763: return the unused HTTP/2 connection window allocation and drop the stream from the backlog when a stream is replaced after a reset, and keep backLogSize consistent, preventing a flow control allocation leak (upstream tomcat 9.0.121) - CVE-2026-73180: track the WebSocket sessions of an authenticated HTTP session by a key held in a session attribute rather than the live session id, so they are still closed when the HTTP session ends after its id has changed (upstream tomcat 9.0.121) Important TuxCare License Agreement CVE-2026-73180 CVE-2026-65182 CVE-2026-68569 CVE-2026-65927 CVE-2026-68763 CVE-2026-65905 CVE-2026-65183 CVE-2026-66422 CVE-2026-68525 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-107885: Don't allow clients to hold a job open longer than the multiple-operation-time-out value Important TuxCare License Agreement CVE-2026-107885 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-59031: remove the unsafe decode2text.sh attachment conversion script Moderate TuxCare License Agreement CVE-2025-59031 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-9496: strip the committish in addGitSha() of the bundled npm pacote copy with indexOf/slice instead of a backtracking regular expression, so a crafted git spec can no longer consume excessive CPU Important TuxCare License Agreement CVE-2026-9496 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Rebase to gimp-3.0.4-4.el9_8.14 Important TuxCare License Agreement CVE-2026-97185 CVE-2026-90947 CVE-2026-92248 CVE-2026-90948 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-103111: fix out-of-bounds write when growing the JIT stack for a single stack allocation larger than half the stack growth rate Important TuxCare License Agreement CVE-2026-103111 CVE-2026-89161 CVE-2026-89156 CVE-2026-89160 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-4408: fix excessive CPU use when parsing DNS messages with many different names in the bundled BIND 9.11 export libraries Important TuxCare License Agreement CVE-2023-4408 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2024-52005: fix ANSI escape sequence injection in sideband messages by masking control characters by default - Resolves: ELSCVE-197836 Important TuxCare License Agreement CVE-2024-52005 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2024-41123: rexml: fix ReDoS in REXML::Source when parsing input with many >]/]]> sequences or without a terminator - CVE-2024-41946: rexml: enforce the entity expansion limit in the SAX2 and pull parsers - CVE-2024-43398: rexml: fix DoS in the tree parser on deep elements with same-local-name namespaced attributes (the affected bundled rexml 3.2.5 parser/source files are synced with rexml 3.3.9, which carries these fixes and their prerequisites) - CVE-2025-58767: rexml: fix DoS when parsing XML with multiple XML declarations; only one well-formed XML declaration is accepted Critical TuxCare License Agreement CVE-2026-27820 CVE-2025-58767 CVE-2025-27221 CVE-2025-61594 CVE-2026-42257 CVE-2026-47241 CVE-2024-43398 CVE-2024-41946 CVE-2026-47240 CVE-2024-41123 CVE-2024-39908 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-4800: validate the `imports` key names in the bundled lodash 4.17.21 `_.template` and merge `imports` with own properties only, so a polluted Object.prototype key can no longer be spliced into the compiled template's Function() parameter list Critical TuxCare License Agreement CVE-2026-4800 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-107570: fix heap out-of-bounds write in convert_file_from_to() when the colon-separated charset list contains a zero-length entry Important TuxCare License Agreement CVE-2026-107570 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-11395: oci-archive, storage/pkg/archive: prevent writes outside the destination when extracting a crafted tar archive Moderate TuxCare License Agreement CVE-2025-11395 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-47360: mod_session_cookie: remove the session cookie also when the session was already loaded under a different SessionCookieRemove setting - mod_session_cookie: as in 2.4.69, with SessionCookieRemove On the session is empty for later loads in the same request, so a SessionMaxAge refresh, a SessionHeader update or a mod_auth_form login can lose session data Moderate TuxCare License Agreement CVE-2026-47360 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-66471: fix unbounded decompression of HTTP responses in bundled urllib3 Important TuxCare License Agreement CVE-2025-66471 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-19445: ssl: resolve the SSLContext for the SNI servername callback from the connection instead of the borrowed SSL_CTX argument, and unregister the callback in context_dealloc, so a context released after sni_callback switched the connection is no longer used after it is freed Critical TuxCare License Agreement CVE-2026-19445 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-15176: reject alias URI to path mapping in ngx_http_map_uri_to_path() after rewrite changed the URI Critical TuxCare License Agreement CVE-2026-15176 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-53705: fix integer overflow in the wavpack decoder output buffer size calculation Important TuxCare License Agreement CVE-2026-53705 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-66418: limit the Content-Encoding decompression chain to 5 links in bundled urllib3 - CVE-2025-66471: fix unbounded decompression of HTTP responses in bundled urllib3 Important TuxCare License Agreement CVE-2025-66418 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Add Alma9_8ESU; carry the tuxcare9.6esu CVE fixes - CVE-2023-7207: path traversal via absolute symlink targets under --no-absolute-filenames; drop cpio-2.13-revert-CVE-2015-1197-fix.patch and apply the upstream symlink-placeholder fix instead - CVE-2026-66485: avoid stack exhaustion from archive-controlled paths - CVE-2026-66486: quote file names in diagnostics and listings Moderate TuxCare License Agreement CVE-2023-7207 CVE-2026-66485 CVE-2026-66486 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-19553: ssl: validate the SSLContext.wrap_bio() parameters like wrap_socket() does, rejecting server_hostname and session in server mode and warning when check_hostname is set with no server_hostname, so the peer identity is no longer silently left unverified Important TuxCare License Agreement CVE-2026-19553 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-65637: require an authority (an :authority pseudo header or a Host header) for every HTTP/2 request (upstream tomcat 9.0.121) Important TuxCare License Agreement CVE-2026-65637 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Rebase onto the vendor's 1:1.1.1k-5.el9_8.6 sources - Drop the TuxCare CVE-2026-63072 patch; the vendor now ships its own fix (openssl-1.1.1-cve-2026-63072.patch, same upstream commit a0c8ec557d9c) Important TuxCare License Agreement CVE-2026-63072 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-64505: heap buffer over-read in png_do_quantize() - CVE-2026-34757: use-after-free in png_set_PLTE() and related setters Moderate TuxCare License Agreement CVE-2025-64505 CVE-2026-34757 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-16527: missing client certificate check on the pmproxy REST API when -Q is set, allowing unauthenticated /store requests Important TuxCare License Agreement CVE-2026-16527 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-39742: fix a null pointer read in getarg.c when an option is missing its parameters - CVE-2023-48161: fix a heap out-of-bounds read of the color map in gif2rgb multi-file output Important TuxCare License Agreement CVE-2025-31344 CVE-2023-48161 CVE-2023-39742 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-6245: out-of-bounds read in pam_passkey_child_read_data() - CVE-2026-12610: use-after-free of the certmap context in p11_child_done() - CVE-2026-68742: out-of-bounds read in sss_nss_protocol_parse_addr() - CVE-2026-68743: out-of-bounds read in extract_authtok_v1() - CVE-2026-90462: access granted on zero results in the LDAP ppolicy check - CVE-2026-90996: empty-body underflow in the NSS request parsers Important TuxCare License Agreement CVE-2026-6245 CVE-2026-90462 CVE-2026-68743 CVE-2026-90996 CVE-2026-12610 CVE-2026-68742 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-105840: reject absolute path names in restricted mode in lrz (received files) and lsz (sent files), not only in PUBDIR builds - CVE-2026-105841: remove the pipe mode that ran received files through a shell command when lrz was invoked as rzCOMMAND - CVE-2026-105842: allocate the received path name with strdup() instead of a fixed PATH_MAX*2 buffer, and NUL-terminate the ZFILE subpacket Important TuxCare License Agreement CVE-2026-105840 CVE-2026-105841 CVE-2026-105842 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2023-44488: crash in vp9_change_config() on smaller width, bigger size - CVE-2023-6349: heap overflow in vp9_change_config() on a larger frame size Important TuxCare License Agreement CVE-2023-44488 CVE-2023-6349 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Add tuxcare9.8esu; carry fixes for CVE-2025-55304, CVE-2025-54080, CVE-2026-25884, CVE-2026-27596 and CVE-2026-27631 Important TuxCare License Agreement CVE-2026-25884 CVE-2026-27596 CVE-2025-55304 CVE-2025-54080 CVE-2026-27631 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-14257: cap the number of brace expansion results at 100000 by default and expand chained brace groups iteratively instead of recursing, in the bundled npm brace-expansion copies Important TuxCare License Agreement CVE-2023-38552 CVE-2023-39333 CVE-2026-14257 CVE-2026-69152 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-15224: libssh: require a private key or CURLSSH_AUTH_AGENT before attempting public key authentication - CVE-2025-14524: SASL: do not send the OAuth2 bearer token after a redirect unless CURLOPT_UNRESTRICTED_AUTH is set - CVE-2026-5545: do not reuse a connection with Negotiate auth in progress as an NTLM upgrade candidate Moderate TuxCare License Agreement CVE-2026-8924 CVE-2025-15224 CVE-2025-14524 CVE-2026-5545 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-53939: fix all-zero AES-CBC-HMAC content-encryption key Critical TuxCare License Agreement CVE-2026-53939 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-46469: avoid division by zero in qtdemux_parse_trak when zero audio channels are signalled - CVE-2026-46470: avoid division by zero in qtdemux_audio_caps when zero audio channels are signalled for raw LPCM - CVE-2026-1940: fix out-of-bounds read in gst_wavparse_adtl_chunk on odd-sized adtl sub-chunks Critical TuxCare License Agreement CVE-2026-46470 CVE-2026-46469 CVE-2026-1940 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - Rebase onto the vendor's 2.72.0-16.el9_8.8 sources - CVE-2026-102556: heap buffer overflow from WebSocket Pong signal type confusion - CVE-2026-102557: heap buffer overflow during WebSocket message reassembly - CVE-2026-102558: heap buffer overflow during WebSocket receive-buffer growth - CVE-2026-102559: heap buffer overflow during WebSocket client-frame masking - CVE-2026-102560: heap buffer overflow during outgoing permessage-deflate buffer growth - All TuxCare ELS patches are retained unchanged: chunked and Content-Length framing in soup-body-input-stream.c, soup-headers.c and soup-message-io.c; header and Range parsing in soup-headers.c and soup-message-headers.c; soup_filter_input_stream_read_until(); cookie and date formatting in soup-cookie.c and soup-date.c; URI host and HTTP method validation in soup-uri.c, soup-message.c and soup-message-server-io.c; Proxy-Authorization handling in soup-auth-manager.c and soup-session.c; digest nonce replay in soup-auth-domain-digest.c; and sniff_unknown() in soup-content-sniffer.c Critical TuxCare License Agreement CVE-2026-102559 CVE-2026-102556 CVE-2026-102558 CVE-2026-102557 CVE-2026-102560 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-109618: fix code execution via state corruption after an out-of-memory error (GHSA-w8hw-w9fx-j79w) - CVE-2026-109619: fix code execution via stale global state between requests (GHSA-6wmf-4rv5-p3rp) Low TuxCare License Agreement CVE-2026-109619 CVE-2026-109618 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - rebase onto the 1:2.3.16-18.el9_8.8 vendor sources, which fix CVE-2026-27852, CVE-2026-33263, CVE-2026-33605, CVE-2026-40018, CVE-2026-42007, CVE-2026-42391 and CVE-2026-73208 - retain the TuxCare removal of the unsafe src/plugins/fts/decode2text.sh attachment conversion script Important TuxCare License Agreement CVE-2026-33605 CVE-2026-33263 CVE-2026-40018 CVE-2026-73208 CVE-2026-42391 CVE-2026-27852 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-2297: importlib: SourcelessFileLoader reads .pyc files through io.open_code() Moderate TuxCare License Agreement CVE-2026-17084 CVE-2026-18503 CVE-2025-15282 CVE-2026-6879 CVE-2025-13462 CVE-2026-19672 CVE-2026-1502 CVE-2026-15310 CVE-2025-13837 CVE-2026-87910 CVE-2026-2297 CVE-2026-3276 CVE-2026-8328 CVE-2026-15806 CVE-2026-6019 CVE-2026-7774 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-0840: fix stack-buffer-overflow in objdump disassemble_bytes by bounding --insn-width Important TuxCare License Agreement CVE-2025-0840 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-55059: use dataWindow().min.y when mapping the row index in SampleCountChannel::set(int, unsigned int[]) and bounds-check the row and pixel setters to prevent a heap out-of-bounds write Critical TuxCare License Agreement CVE-2026-55059 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-107823: escape definer user and host names in view frm Important TuxCare License Agreement CVE-2026-107823 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-24294: resolv: limit decoded DNS names to 255 octets and bound the compression pointers followed per name, preventing CPU exhaustion on crafted DNS responses Moderate TuxCare License Agreement CVE-2025-24294 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-39821: reject xn-- labels that decode to all-ASCII in the vendored golang.org/x/net/idna package; the vendor fix is inert when built with Go 1.26 Important TuxCare License Agreement CVE-2026-39821 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2025-43961: out-of-bounds read in the Fujifilm 0xf00c tag parser in parse_tiff_ifd - CVE-2025-43962: out-of-bounds read in phase_one_correct tag 0x412 processing with large w0/w1 values - CVE-2025-43963: out-of-bounds access in phase_one_correct, split_col and split_row not checked for tags 0x041f/0x0431 - CVE-2025-43964: phase_one_correct tag 0x412 processing does not enforce minimum w0/w1 values - CVE-2026-5342: out-of-bounds read in nikon_load_padded_packed_raw Critical TuxCare License Agreement CVE-2025-43963 CVE-2025-43961 CVE-2025-43964 CVE-2025-43962 CVE-2026-5342 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-97205: limit pending asynchronous operations per request to NGX_HTTP_MAX_BLOCKED so the 8-bit r->main->blocked counter cannot wrap Critical TuxCare License Agreement CVE-2026-97205 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-33186: reject gRPC :path values that omit the leading slash in Server.handleStream (vendored google.golang.org/grpc) Critical TuxCare License Agreement CVE-2026-33186 CVE-2026-32281 CVE-2026-32280 CVE-2026-32283 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-39821: reject xn-- labels that decode to all-ASCII in the vendored golang.org/x/net/idna package; the check shipped in x/net v0.56.0 is compiled out when built with Go 1.26 - require golang >= 1.26.6: the Go standard library fixes come from the build toolchain, an older golang would silently reopen them Important TuxCare License Agreement CVE-2026-39821 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-105482: reject names and local addresses with null bytes in the dns resolve*() and setLocalAddress() APIs, so c-ares can no longer silently truncate the queried name - CVE-2026-106069, CVE-2026-106072: reject non-canonical IP spellings in tls.checkServerIdentity() and restore IPv6 IP SAN matching, broken by the CVE-2026-48618 fix since els15 - CVE-2026-105481: check for unread data in the OS socket buffer before http.Agent reuses a keep-alive socket and destroy the socket if any Low TuxCare License Agreement CVE-2026-105482 CVE-2026-105481 CVE-2026-106069 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-56862: rebuild with newer golang 1.26.7-1.el9_8 so crypto/tls no longer treats post-handshake handshake messages as state-advancing, bounding unlimited KeyUpdate key derivation - CVE-2026-33818: rebuild with newer golang 1.26.7-1.el9_8 which caps encoding/asn1 decode nesting depth, preventing stack exhaustion from deeply nested ASN.1 input Important TuxCare License Agreement CVE-2026-56862 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-68497: rebase onto 2.21.6-1.1; the fix (upstream #6127) is part of 2.21.6 Important TuxCare License Agreement CVE-2026-68497 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-111497: reject invalid block switch commands in the decoder instead of silently ignoring them Critical TuxCare License Agreement CVE-2026-111497 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-93517: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (GLX RenderLarge heap buffer overflow) - CVE-2026-93518: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (XKB ResizeKeyType numeric truncation) - CVE-2026-93519: rebuild against xorg-x11-server-source 1.20.11-34.el9_8.5 (XFixes pointer barrier event list buffer overflow) - Exclude i686: the buildroot has no pkgconfig(xkbcomp) and AlmaLinux 9 does not ship tigervnc.i686 Important TuxCare License Agreement CVE-2026-93518 CVE-2026-93517 CVE-2026-93519 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-110264: regexp: fix out-of-bounds repeat stack access in Onigmo by rejecting patterns whose range-repeat or null-check count overflows the internal ID type - CVE-2026-93577, CVE-2026-97229: regexp: fix wrapped jump offsets in Onigmo by checking the quantifier expansion size without integer overflow and rejecting compiled programs too big for their offset type Critical TuxCare License Agreement CVE-2026-110264 CVE-2026-93577 CVE-2026-97229 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 TuxCare 9.8 - CVE-2026-106555: reset the GSSAPI client state before each authentication attempt - CVE-2026-106553: store delegated GSSAPI credentials only after successful GSSAPI user authorization - CVE-2026-106583: reject '$' and '\' in a user name given on the ssh command line - CVE-2026-106585: reject compressed packets that inflate beyond the maximum packet size - CVE-2026-60001: enforce the minimum per-attempt delay in GSSAPI and keyboard-interactive authentication (vendor patch) - CVE-2026-59998: document the GSSAPIStrictAcceptorCheck caveat (vendor patch) - CVE-2026-59997: fix the internal-sftp server argument parsing limit (vendor patch) Important TuxCare License Agreement CVE-2026-106555 CVE-2026-106583 CVE-2026-59997 CVE-2026-59998 CVE-2026-60001 CVE-2026-106553 CVE-2026-106585 cpe:/o:almalinux:almalinux:9::baseos cpe:/o:resf:rocky_linux:9.8 /etc/tuxcare-release TuxCare Enterprise Support for .* release 9\.8 1 openexr openexr-devel openexr-libs libexif libexif-devel libexif-doc jq jq-devel curl curl-minimal libcurl libcurl-devel libcurl-minimal minizip-compat minizip-compat-devel zlib zlib-devel zlib-static ghostscript ghostscript-doc ghostscript-gtk ghostscript-tools-dvipdf ghostscript-tools-fonts ghostscript-tools-printing ghostscript-x11 libgs libgs-devel gawk gawk-all-langpacks gawk-devel gawk-doc ncurses ncurses-base ncurses-c++-libs ncurses-compat-libs ncurses-devel ncurses-libs ncurses-static ncurses-term libnghttp2 libnghttp2-devel nghttp2 libsndfile libsndfile-devel libsndfile-utils libssh libssh-config libssh-devel openssh openssh-askpass openssh-clients openssh-keycat openssh-server openssh-sk-dummy pam_ssh_agent_auth cups cups-client cups-devel cups-filesystem cups-ipptool cups-libs cups-lpd cups-printerapp opensc libinput libinput-devel libinput-test libinput-utils nmap nmap-ncat mutt jasper jasper-devel jasper-libs jasper-utils gegl04 gegl04-devel gegl04-devel-docs gegl04-tools grafana grafana-selinux python3-unbound unbound unbound-devel unbound-dracut unbound-libs expat expat-devel expat-static ipa-client ipa-client-common ipa-client-encrypted-dns ipa-client-epn ipa-client-samba ipa-common ipa-python-compat ipa-selinux ipa-selinux-luna ipa-selinux-nfast ipa-server ipa-server-common ipa-server-dns ipa-server-encrypted-dns ipa-server-trust-ad python3-ipaclient python3-ipalib python3-ipaserver python3-ipatests openssl openssl-devel openssl-fips-provider openssl-libs openssl-perl tar java-11-openjdk java-11-openjdk-demo java-11-openjdk-devel java-11-openjdk-headless java-11-openjdk-javadoc java-11-openjdk-javadoc-zip java-11-openjdk-jmods java-11-openjdk-src java-11-openjdk-static-libs gimp gimp-devel gimp-devel-tools gimp-libs squid log4j log4j-jcl log4j-slf4j log4j-web pcre2 pcre2-devel pcre2-static pcre2-syntax pcre2-tools pcre2-utf16 pcre2-utf32 wget bind bind-chroot bind-devel bind-dnssec-doc bind-dnssec-utils bind-doc bind-libs bind-license bind-utils python3-bind redis redis-devel redis-doc skopeo skopeo-tests perl perl-Attribute-Handlers perl-AutoLoader perl-AutoSplit perl-B perl-Benchmark perl-Class-Struct perl-Config-Extensions perl-DBM_Filter perl-Devel-Peek perl-Devel-SelfStubber perl-DirHandle perl-Dumpvalue perl-DynaLoader perl-English perl-Errno perl-ExtUtils-Constant perl-ExtUtils-Embed perl-ExtUtils-Miniperl perl-Fcntl perl-File-Basename perl-File-Compare perl-File-Copy perl-File-DosGlob perl-File-Find perl-File-stat perl-FileCache perl-FileHandle perl-FindBin perl-GDBM_File perl-Getopt-Std perl-Hash-Util perl-Hash-Util-FieldHash perl-I18N-Collate perl-I18N-LangTags perl-I18N-Langinfo perl-IO perl-IPC-Open3 perl-Locale-Maketext-Simple perl-Math-Complex perl-Memoize perl-Module-Loaded perl-NDBM_File perl-NEXT perl-Net perl-ODBM_File perl-Opcode perl-POSIX perl-Pod-Functions perl-Pod-Html perl-Safe perl-Search-Dict perl-SelectSaver perl-SelfLoader perl-Symbol perl-Sys-Hostname perl-Term-Complete perl-Term-ReadLine perl-Test perl-Text-Abbrev perl-Thread perl-Thread-Semaphore perl-Tie perl-Tie-File perl-Tie-Memoize perl-Time perl-Time-Piece perl-Unicode-UCD perl-User-pwent perl-autouse perl-base perl-blib perl-debugger perl-deprecate perl-devel perl-diagnostics perl-doc perl-encoding-warnings perl-fields perl-filetest perl-if perl-interpreter perl-less perl-lib perl-libnetcfg perl-libs perl-locale perl-macros perl-meta-notation perl-mro perl-open perl-overload perl-overloading perl-ph perl-sigtrap perl-sort perl-subs perl-tests perl-utils perl-vars perl-vmsish gstreamer1 gstreamer1-devel libxml2 libxml2-devel libxml2-static python3-libxml2 patch httpd httpd-core httpd-devel httpd-filesystem httpd-manual httpd-tools mod_ldap mod_lua mod_proxy_html mod_session mod_ssl wireshark wireshark-cli wireshark-devel nginx nginx-all-modules nginx-core nginx-filesystem nginx-mod-devel nginx-mod-http-image-filter nginx-mod-http-perl nginx-mod-http-xslt-filter nginx-mod-mail nginx-mod-stream libsoup libsoup-devel libsoup-doc radvd runc python-unversioned-command python3 python3-debug python3-devel python3-idle python3-libs python3-test python3-tkinter vim-X11 vim-common vim-enhanced vim-filesystem vim-minimal flatpak flatpak-devel flatpak-libs flatpak-selinux flatpak-session-helper flatpak-tests ignition ignition-edge ignition-grub ignition-validate bsdcat bsdcpio bsdtar libarchive libarchive-devel lldpd lldpd-devel python3.11 python3.11-debug python3.11-devel python3.11-idle python3.11-libs python3.11-test python3.11-tkinter hostapd hostapd-logwatch nodejs nodejs-devel nodejs-docs nodejs-full-i18n nodejs-libs npm v8-devel php php-bcmath php-cli php-common php-dba php-dbg php-devel php-embedded php-enchant php-ffi php-fpm php-gd php-gmp php-intl php-ldap php-mbstring php-mysqlnd php-odbc php-opcache php-pdo php-pgsql php-process php-snmp php-soap php-xml tomcat tomcat-admin-webapps tomcat-docs-webapp tomcat-el-3.0-api tomcat-jsp-2.3-api tomcat-lib tomcat-servlet-4.0-api tomcat-webapps dovecot dovecot-devel dovecot-mysql dovecot-pgsql dovecot-pigeonhole dhcp-client dhcp-common dhcp-devel dhcp-devel-doc dhcp-libs-static dhcp-relay dhcp-server git git-all git-core git-core-doc git-credential-libsecret git-daemon git-email git-gui git-instaweb git-subtree git-svn gitk gitweb perl-Git perl-Git-SVN ruby ruby-default-gems ruby-devel ruby-doc ruby-libs rubygem-bigdecimal rubygem-bundler rubygem-io-console rubygem-irb rubygem-json rubygem-minitest rubygem-power_assert rubygem-psych rubygem-rake rubygem-rbs rubygem-rdoc rubygem-rexml rubygem-rss rubygem-test-unit rubygem-typeprof rubygems rubygems-devel buildah buildah-tests python3.11-pip python3.11-pip-wheel gstreamer1-plugins-good gstreamer1-plugins-good-gtk gstreamer1-plugins-good-qt cpio compat-openssl11 libpng15 pcp pcp-conf pcp-devel pcp-doc pcp-export-pcp2elasticsearch pcp-export-pcp2graphite pcp-export-pcp2influxdb pcp-export-pcp2json pcp-export-pcp2openmetrics pcp-export-pcp2spark pcp-export-pcp2xml pcp-export-pcp2zabbix pcp-export-zabbix-agent pcp-geolocate pcp-gui pcp-import-collectl2pcp pcp-import-ganglia2pcp pcp-import-iostat2pcp pcp-import-mrtg2pcp pcp-import-sar2pcp pcp-libs pcp-libs-devel pcp-pmda-activemq pcp-pmda-amdgpu pcp-pmda-apache pcp-pmda-bash pcp-pmda-bcc pcp-pmda-bind2 pcp-pmda-bonding pcp-pmda-bpf pcp-pmda-bpftrace pcp-pmda-cifs pcp-pmda-cisco pcp-pmda-dbping pcp-pmda-denki pcp-pmda-dm pcp-pmda-docker pcp-pmda-ds389 pcp-pmda-ds389log pcp-pmda-elasticsearch pcp-pmda-farm pcp-pmda-gfs2 pcp-pmda-gluster pcp-pmda-gpfs pcp-pmda-gpsd pcp-pmda-hacluster pcp-pmda-haproxy pcp-pmda-infiniband pcp-pmda-json pcp-pmda-libvirt pcp-pmda-lio pcp-pmda-lmsensors pcp-pmda-logger pcp-pmda-lustre pcp-pmda-lustrecomm pcp-pmda-mailq pcp-pmda-memcache pcp-pmda-mic pcp-pmda-mongodb pcp-pmda-mounts pcp-pmda-mssql pcp-pmda-mysql pcp-pmda-named pcp-pmda-netcheck pcp-pmda-netfilter pcp-pmda-news pcp-pmda-nfsclient pcp-pmda-nginx pcp-pmda-nvidia-gpu pcp-pmda-openmetrics pcp-pmda-openvswitch pcp-pmda-oracle pcp-pmda-pdns pcp-pmda-perfevent pcp-pmda-podman pcp-pmda-postfix pcp-pmda-postgresql pcp-pmda-rabbitmq pcp-pmda-redis pcp-pmda-resctrl pcp-pmda-roomtemp pcp-pmda-rsyslog pcp-pmda-samba pcp-pmda-sendmail pcp-pmda-shping pcp-pmda-slurm pcp-pmda-smart pcp-pmda-snmp pcp-pmda-sockets pcp-pmda-statsd pcp-pmda-summary pcp-pmda-systemd pcp-pmda-trace pcp-pmda-unbound pcp-pmda-uwsgi pcp-pmda-weblog pcp-pmda-zimbra pcp-pmda-zswap pcp-selinux pcp-system-tools pcp-testsuite pcp-zeroconf perl-PCP-LogImport perl-PCP-LogSummary perl-PCP-MMV perl-PCP-PMDA python3-pcp giflib giflib-devel giflib-utils libipa_hbac libipa_hbac-devel libsss_autofs libsss_certmap libsss_certmap-devel libsss_idmap libsss_idmap-devel libsss_nss_idmap libsss_nss_idmap-devel libsss_simpleifp libsss_simpleifp-devel libsss_sudo python3-libipa_hbac python3-libsss_nss_idmap python3-sss python3-sss-murmur python3-sssdconfig sssd sssd-ad sssd-client sssd-common sssd-common-pac sssd-dbus sssd-idp sssd-ipa sssd-kcm sssd-krb5 sssd-krb5-common sssd-ldap sssd-nfs-idmap sssd-passkey sssd-polkit-rules sssd-proxy sssd-tools sssd-winbind-idmap lrzsz libvpx libvpx-devel libvpx-utils exiv2 exiv2-devel exiv2-doc exiv2-libs cjose cjose-devel binutils binutils-devel binutils-gold cross-binutils-aarch64 cross-binutils-ppc64le cross-binutils-s390x /etc/dnf/modules.d/mariadb.module \[mariadb\][\w\W]* 1 mariadb mariadb-backup mariadb-common mariadb-devel mariadb-embedded mariadb-embedded-devel mariadb-errmsg mariadb-gssapi-server mariadb-oqgraph-engine mariadb-pam mariadb-server mariadb-server-galera mariadb-server-utils mariadb-test git-lfs LibRaw LibRaw-devel LibRaw-samples LibRaw-static osbuild-composer osbuild-composer-core osbuild-composer-tests osbuild-composer-worker delve pki-jackson-databind brotli brotli-devel libbrotli python3-brotli tigervnc tigervnc-icons tigervnc-license tigervnc-selinux tigervnc-server tigervnc-server-minimal tigervnc-server-module D36CB86CB86B3716 d07bf2a08d50eb66 aarch64|i686|x86_64 0:3.1.1-3.el9_8.4.tuxcare.els1 aarch64|i686|x86_64 0:0.6.22-6.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 0:1.6-19.el9_8.2.tuxcare.els1 aarch64|i686|x86_64 0:7.76.1-40.el9_8.7.tuxcare.els1 aarch64|i686|x86_64 0:1.2.11-40.el9.tuxcare.els1 aarch64|i686|x86_64 0:9.54.0-19.el9_6.tuxcare.els6 0:9.54.0-19.el9_6.tuxcare.els6 aarch64|i686|x86_64 0:5.1.0-6.el9.tuxcare.els1 0:5.1.0-6.el9.tuxcare.els1 aarch64|i686|x86_64 0:6.2-12.20210508.el9.tuxcare.els1 0:6.2-12.20210508.el9.tuxcare.els1 aarch64|i686|x86_64 0:1.43.0-6.el9_8.2.tuxcare.els1 aarch64|i686|x86_64 0:1.0.31-9.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 0:0.10.4-19.el9_8.tuxcare.els1 0:0.10.4-19.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:9.9p1-11.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:0.10.4-8.11.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:7.76.1-40.el9_8.7.tuxcare.els4 aarch64|i686|x86_64 0:7.76.1-40.el9_8.7.tuxcare.els3 aarch64|i686|x86_64 1:2.3.3op2-39.el9_8.tuxcare.els1 1:2.3.3op2-39.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:0.23.0-6.el9.tuxcare.els1 aarch64|i686|x86_64 0:1.19.3-8.el9_7.tuxcare.els1 aarch64|i686|x86_64 3:7.92-5.el9.tuxcare.els1 aarch64|i686|x86_64 5:2.2.6-2.el9.tuxcare.els4 aarch64|i686|x86_64 0:5.1.0-6.el9_8.1.tuxcare.els1 0:5.1.0-6.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 0:2.0.28-4.el9.tuxcare.els1 aarch64|i686|x86_64 0:0.4.62-1.el9_8.2.tuxcare.els1 aarch64|x86_64 0:10.2.6-23.el9_8.3.tuxcare.els1 aarch64|i686|x86_64 0:3.1.1-3.el9_8.4.tuxcare.els2 aarch64|i686|x86_64 0:1.24.2-3.el9_8.8.tuxcare.els1 aarch64|i686|x86_64 0:2.5.0-6.el9_8.5.tuxcare.els1 aarch64|i686|x86_64 0:1.6-19.el9_8.2.tuxcare.els2 aarch64|i686|x86_64 0:4.13.4-1.el9_8.tuxcare.els1 0:4.13.4-1.el9_8.tuxcare.els1 aarch64|x86_64 0:4.13.4-1.el9_8.tuxcare.els1 aarch64|x86_64 0:10.2.6-23.el9_8.3.tuxcare.els2 aarch64|i686|x86_64 1:3.5.8-1.el9_8.tuxcare.els1 aarch64|i686|x86_64 2:1.34-13.el9_8.tuxcare.els1 aarch64|i686|x86_64 1:11.0.32.1.1-1.el9.tuxcare.els1 aarch64|i686|x86_64 2:3.0.4-4.el9_8.10.tuxcare.els3 aarch64|i686|x86_64 7:5.5-26.el9_8.tuxcare.els1 0:2.17.2-1.el9.tuxcare.els1 aarch64|i686|x86_64 0:10.40-6.el9_8.tuxcare.els4 0:10.40-6.el9_8.tuxcare.els4 aarch64|i686|x86_64 0:9.54.0-19.el9_8.1.tuxcare.els1 0:9.54.0-19.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 0:1.21.1-11.el9_8.tuxcare.els1 aarch64|i686|x86_64 3:7.92-5.el9.tuxcare.els2 aarch64|i686|x86_64 32:9.16.23-40.el9_8.9.tuxcare.els2 32:9.16.23-40.el9_8.9.tuxcare.els2 aarch64|i686|x86_64 0:6.2.24-1.el9_8.tuxcare.els1 0:6.2.24-1.el9_8.tuxcare.els1 aarch64|x86_64 2:1.22.2-8.el9_8.tuxcare.els1 aarch64|i686|x86_64 4:5.32.1-484.el9_8.tuxcare.els1 0:1.01-484.el9_8.tuxcare.els1 0:5.74-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.80-484.el9_8.tuxcare.els1 0:1.23-484.el9_8.tuxcare.els1 0:0.66-484.el9_8.tuxcare.els1 0:0.03-484.el9_8.tuxcare.els1 0:0.06-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.28-484.el9_8.tuxcare.els1 0:1.06-484.el9_8.tuxcare.els1 0:1.05-484.el9_8.tuxcare.els1 0:2.27-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.47-484.el9_8.tuxcare.els1 0:1.11-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.30-484.el9_8.tuxcare.els1 0:0.25-484.el9_8.tuxcare.els1 0:1.35-484.el9_8.tuxcare.els1 0:1.09-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.13-484.el9_8.tuxcare.els1 0:2.85-484.el9_8.tuxcare.els1 0:1.100.600-484.el9_8.tuxcare.els1 0:2.34-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.12-484.el9_8.tuxcare.els1 0:1.37-484.el9_8.tuxcare.els1 0:1.10-484.el9_8.tuxcare.els1 0:2.03-484.el9_8.tuxcare.els1 0:1.51-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.18-484.el9_8.tuxcare.els1 0:1.12-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:0.23-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.20-484.el9_8.tuxcare.els1 0:1.02-484.el9_8.tuxcare.els1 0:0.44-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:0.19-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.43-484.el9_8.tuxcare.els1 0:1.21-484.el9_8.tuxcare.els1 1:0.21-484.el9_8.tuxcare.els1 0:1.59-484.el9_8.tuxcare.els1 0:1.03-484.el9_8.tuxcare.els1 1:0.08-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.15-484.el9_8.tuxcare.els1 0:0.67-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.16-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.48-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.94-484.el9_8.tuxcare.els1 0:1.13-484.el9_8.tuxcare.els1 0:1.25-484.el9_8.tuxcare.els1 0:2.41-484.el9_8.tuxcare.els1 0:1.07-484.el9_8.tuxcare.els1 0:1.26-484.el9_8.tuxcare.els1 0:1.08-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.23-484.el9_8.tuxcare.els1 0:1.403-484.el9_8.tuxcare.els1 0:1.17-484.el9_8.tuxcare.els1 0:1.31-484.el9_8.tuxcare.els1 0:3.05-484.el9_8.tuxcare.els1 0:2.13-484.el9_8.tuxcare.els1 0:4.6-484.el9_8.tuxcare.els1 0:1.1-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.3401-484.el9_8.tuxcare.els1 0:0.75-484.el9_8.tuxcare.els1 0:1.56-484.el9_8.tuxcare.els1 0:0.04-484.el9_8.tuxcare.els1 0:5.32.1-484.el9_8.tuxcare.els1 0:0.13-484.el9_8.tuxcare.els1 0:0.60.800-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:0.65-484.el9_8.tuxcare.els1 4:5.32.1-484.el9_8.tuxcare.els1 0:0.02-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:5.32.1-484.el9_8.tuxcare.els1 0:2.04-484.el9_8.tuxcare.els1 0:1.04-484.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.22.12-3.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:2.9.13-14.el9_8.5.tuxcare.els1 aarch64|i686|x86_64 0:2.7.6-16.el9.tuxcare.els1 aarch64|i686|x86_64 0:3.1.1-3.el9_8.4.tuxcare.els3 aarch64|i686|x86_64 0:0.23.0-6.el9.tuxcare.els2 aarch64|i686|x86_64 0:2.5.0-6.el9_8.5.tuxcare.els2 aarch64|i686|x86_64 1:3.4.10-8.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 0:2.4.62-13.el9_8.6.tuxcare.els2 0:2.4.62-13.el9_8.6.tuxcare.els2 aarch64|i686|x86_64 1:2.4.62-13.el9_8.6.tuxcare.els2 aarch64|i686|x86_64 2:1.20.1-28.el9_8.6.alma.1.tuxcare.els1 2:1.20.1-28.el9_8.6.alma.1.tuxcare.els1 aarch64|i686|x86_64 0:2.4.62-13.el9_8.6.tuxcare.els1 0:2.4.62-13.el9_8.6.tuxcare.els1 aarch64|i686|x86_64 1:2.4.62-13.el9_8.6.tuxcare.els1 aarch64|i686|x86_64 0:2.9.13-14.el9_8.5.tuxcare.els2 aarch64|i686|x86_64 1:3.5.8-1.el9_8.tuxcare.els2 aarch64|i686|x86_64 0:2.72.0-16.el9_8.3.tuxcare.els3 0:2.72.0-16.el9_8.3.tuxcare.els3 aarch64|i686|x86_64 0:2.19-5.el9_8.tuxcare.els1 aarch64|x86_64 4:1.4.2-3.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.6-19.el9_8.2.tuxcare.els3 aarch64|i686|x86_64 0:1.2.11-40.el9.tuxcare.els2 0:3.9.25-7.el9_8.3.tuxcare.els1 aarch64|i686|x86_64 0:3.9.25-7.el9_8.3.tuxcare.els1 aarch64|i686|x86_64 2:8.2.2637-26.el9_8.23.tuxcare.els1 2:8.2.2637-26.el9_8.23.tuxcare.els1 aarch64|i686|x86_64 0:2.4.62-13.el9_8.6.tuxcare.els3 0:2.4.62-13.el9_8.6.tuxcare.els3 aarch64|i686|x86_64 1:2.4.62-13.el9_8.6.tuxcare.els3 aarch64|i686|x86_64 0:1.12.9-4.el9_8.1.tuxcare.els1 0:1.12.9-4.el9_8.1.tuxcare.els1 aarch64|x86_64 0:10.2.6-23.el9_8.3.tuxcare.els5 aarch64|x86_64 0:2.26.0-1.el9_8.tuxcare.els1 0:3.9.25-7.el9_8.3.tuxcare.els2 aarch64|i686|x86_64 0:3.9.25-7.el9_8.3.tuxcare.els2 aarch64|i686|x86_64 0:3.5.3-11.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.12.9-4.el9_8.1.tuxcare.els2 0:1.12.9-4.el9_8.1.tuxcare.els2 aarch64|i686|x86_64 0:1.0.18-6.el9.tuxcare.els1 aarch64|i686|x86_64 0:3.11.13-10.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:2.11-2.el9.tuxcare.els2 aarch64|i686|x86_64 1:16.20.2-8.el9_8.tuxcare.els20 1:16.20.2-8.el9_8.tuxcare.els20 aarch64|i686|x86_64 1:8.19.4_1.16.20.2-8.el9_8.tuxcare.els20 aarch64|i686|x86_64 2:9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els20 aarch64|i686|x86_64 0:1.12.9-4.el9_8.1.tuxcare.els3 0:1.12.9-4.el9_8.1.tuxcare.els3 aarch64|i686|x86_64 0:8.0.30-8.el9_8.tuxcare.els3 aarch64|i686|x86_64 0:2.4.62-13.el9_8.6.tuxcare.els5 0:2.4.62-13.el9_8.6.tuxcare.els5 aarch64|i686|x86_64 1:2.4.62-13.el9_8.6.tuxcare.els5 aarch64|i686|x86_64 0:2.72.0-16.el9_8.3.tuxcare.els4 0:2.72.0-16.el9_8.3.tuxcare.els4 1:9.0.120-2.el9_8.tuxcare.els1 aarch64|i686|x86_64 1:2.3.3op2-39.el9_8.tuxcare.els2 1:2.3.3op2-39.el9_8.tuxcare.els2 aarch64|i686|x86_64 1:2.3.16-18.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 1:16.20.2-8.el9_8.tuxcare.els22 1:16.20.2-8.el9_8.tuxcare.els22 aarch64|i686|x86_64 1:8.19.4_1.16.20.2-8.el9_8.tuxcare.els22 aarch64|i686|x86_64 2:9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els22 aarch64|i686|x86_64 2:3.0.4-4.el9_8.14.tuxcare.els1 aarch64|i686|x86_64 0:10.40-6.el9_8.tuxcare.els5 0:10.40-6.el9_8.tuxcare.els5 aarch64|i686|x86_64 12:4.4.2-20.b1.el9.tuxcare.els1 12:4.4.2-20.b1.el9.tuxcare.els1 aarch64|i686|x86_64 0:2.52.0-1.el9.tuxcare.els1 0:2.52.0-1.el9.tuxcare.els1 aarch64|i686|x86_64 0:3.0.7-168.el9_8.tuxcare.els2 0:3.0.7-168.el9_8.tuxcare.els2 aarch64|i686|x86_64 0:3.0.0-168.el9_8.tuxcare.els2 0:2.2.33-168.el9_8.tuxcare.els2 aarch64|i686|x86_64 0:0.5.7-168.el9_8.tuxcare.els2 0:1.3.5-168.el9_8.tuxcare.els2 aarch64|i686|x86_64 0:2.5.1-168.el9_8.tuxcare.els2 0:5.14.2-168.el9_8.tuxcare.els2 0:1.2.1-168.el9_8.tuxcare.els2 aarch64|i686|x86_64 0:3.3.2-168.el9_8.tuxcare.els2 0:13.0.3-168.el9_8.tuxcare.els2 0:1.4.0-168.el9_8.tuxcare.els2 0:6.3.4.1-168.el9_8.tuxcare.els2 0:3.2.5-168.el9_8.tuxcare.els2 0:0.2.9-168.el9_8.tuxcare.els2 0:3.3.7-168.el9_8.tuxcare.els2 0:0.15.2-168.el9_8.tuxcare.els2 0:3.2.33-168.el9_8.tuxcare.els2 aarch64|x86_64 0:10.2.6-23.el9_8.3.tuxcare.els6 aarch64|i686|x86_64 5:2.2.6-2.el9.tuxcare.els5 aarch64|x86_64 2:1.43.3-2.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:2.4.62-13.el9_8.6.tuxcare.els6 0:2.4.62-13.el9_8.6.tuxcare.els6 aarch64|i686|x86_64 1:2.4.62-13.el9_8.6.tuxcare.els6 0:22.3.1-6.el9.tuxcare.els1 aarch64|i686|x86_64 0:3.11.13-10.el9_8.tuxcare.els2 aarch64|i686|x86_64 2:1.20.1-28.el9_8.6.alma.1.tuxcare.els2 2:1.20.1-28.el9_8.6.alma.1.tuxcare.els2 aarch64|i686|x86_64 0:1.22.12-7.el9_8.8.tuxcare.els1 0:22.3.1-6.el9.tuxcare.els2 aarch64|i686|x86_64 0:2.13-16.el9.tuxcare.els3 aarch64|i686|x86_64 0:3.11.13-10.el9_8.tuxcare.els3 1:9.0.120-2.el9_8.tuxcare.els2 aarch64|i686|x86_64 1:1.1.1k-5.el9_8.6.tuxcare.els1 aarch64|i686|x86_64 0:1.5.30-15.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 0:6.3.7-8.el9_8.4.tuxcare.els1 0:6.3.7-8.el9_8.4.tuxcare.els1 aarch64|x86_64 0:6.3.7-8.el9_8.4.tuxcare.els1 x86_64 0:6.3.7-8.el9_8.4.tuxcare.els1 aarch64|i686|x86_64 0:5.2.1-10.el9_8.2.tuxcare.els1 aarch64|i686|x86_64 0:2.9.8-4.el9_8.1.tuxcare.els1 0:2.9.8-4.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 0:0.12.20-55.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:1.9.0-10.el9_8.tuxcare.els1 aarch64|i686|x86_64 0:0.27.5-2.el9.tuxcare.els5 0:0.27.5-2.el9.tuxcare.els5 aarch64|i686|x86_64 1:16.20.2-8.el9_8.tuxcare.els23 1:16.20.2-8.el9_8.tuxcare.els23 aarch64|i686|x86_64 1:8.19.4_1.16.20.2-8.el9_8.tuxcare.els23 aarch64|i686|x86_64 2:9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els23 aarch64|i686|x86_64 0:7.76.1-40.el9_8.8.tuxcare.els2 aarch64|i686|x86_64 0:0.6.1-17.el9.tuxcare.els1 aarch64|i686|x86_64 0:1.22.12-7.el9_8.8.tuxcare.els2 aarch64|i686|x86_64 0:2.72.0-16.el9_8.8.tuxcare.els1 0:2.72.0-16.el9_8.8.tuxcare.els1 aarch64|i686|x86_64 0:8.0.30-8.el9_8.tuxcare.els4 aarch64|i686|x86_64 1:2.3.16-18.el9_8.8.tuxcare.els1 0:3.9.25-7.el9_8.3.tuxcare.els6 aarch64|i686|x86_64 0:3.9.25-7.el9_8.3.tuxcare.els6 aarch64|i686|x86_64 0:2.35.2-72.el9.tuxcare.els1 x86_64 0:2.35.2-72.el9.tuxcare.els1 aarch64|i686|x86_64 0:3.1.1-3.el9_8.4.tuxcare.els4 \nstream\s*=\s*10\.11\b[\w\W]*\nstate\s*=\s*(enabled|1|true)|\nstate\s*=\s*(enabled|1|true)[\w\W]*\nstream\s*=\s*10\.11\b aarch64|x86_64 3:10.11.18-1.module_el9.8.0+322+536acc20.alma.1.tuxcare.els2 aarch64|i686|x86_64 0:3.0.7-168.el9_8.tuxcare.els3 0:3.0.7-168.el9_8.tuxcare.els3 aarch64|i686|x86_64 0:3.0.0-168.el9_8.tuxcare.els3 0:2.2.33-168.el9_8.tuxcare.els3 aarch64|i686|x86_64 0:0.5.7-168.el9_8.tuxcare.els3 0:1.3.5-168.el9_8.tuxcare.els3 aarch64|i686|x86_64 0:2.5.1-168.el9_8.tuxcare.els3 0:5.14.2-168.el9_8.tuxcare.els3 0:1.2.1-168.el9_8.tuxcare.els3 aarch64|i686|x86_64 0:3.3.2-168.el9_8.tuxcare.els3 0:13.0.3-168.el9_8.tuxcare.els3 0:1.4.0-168.el9_8.tuxcare.els3 0:6.3.4.1-168.el9_8.tuxcare.els3 0:3.2.5-168.el9_8.tuxcare.els3 0:0.2.9-168.el9_8.tuxcare.els3 0:3.3.7-168.el9_8.tuxcare.els3 0:0.15.2-168.el9_8.tuxcare.els3 0:3.2.33-168.el9_8.tuxcare.els3 aarch64|x86_64 0:3.7.1-4.el9_8.3.tuxcare.els1 aarch64|i686|x86_64 0:0.21.1-2.el9_8.1.tuxcare.els1 aarch64|i686|x86_64 2:1.20.1-28.el9_8.6.alma.1.tuxcare.els3 2:1.20.1-28.el9_8.6.alma.1.tuxcare.els3 aarch64|x86_64 0:2.26.0-1.el9_8.tuxcare.els2 aarch64|x86_64 0:165.1-5.el9_8.alma.1.tuxcare.els1 aarch64|i686|x86_64 1:16.20.2-8.el9_8.tuxcare.els24 1:16.20.2-8.el9_8.tuxcare.els24 aarch64|i686|x86_64 1:8.19.4_1.16.20.2-8.el9_8.tuxcare.els24 aarch64|i686|x86_64 2:9.4.146.26_1.16.20.2-8.el9_8.tuxcare.els24 aarch64|x86_64 0:1.26.1-1.el9_8.tuxcare.els1 0:2.21.6-1.el9_8.1.tuxcare.els2 aarch64|i686|x86_64 0:1.0.9-10.el9_8.tuxcare.els1 aarch64|x86_64 0:1.15.0-7.el9_8.2.tuxcare.els1 0:1.15.0-7.el9_8.2.tuxcare.els1 aarch64|i686|x86_64 0:3.0.7-168.el9_8.tuxcare.els4 0:3.0.7-168.el9_8.tuxcare.els4 aarch64|i686|x86_64 0:3.0.0-168.el9_8.tuxcare.els4 0:2.2.33-168.el9_8.tuxcare.els4 aarch64|i686|x86_64 0:0.5.7-168.el9_8.tuxcare.els4 0:1.3.5-168.el9_8.tuxcare.els4 aarch64|i686|x86_64 0:2.5.1-168.el9_8.tuxcare.els4 0:5.14.2-168.el9_8.tuxcare.els4 0:1.2.1-168.el9_8.tuxcare.els4 aarch64|i686|x86_64 0:3.3.2-168.el9_8.tuxcare.els4 0:13.0.3-168.el9_8.tuxcare.els4 0:1.4.0-168.el9_8.tuxcare.els4 0:6.3.4.1-168.el9_8.tuxcare.els4 0:3.2.5-168.el9_8.tuxcare.els4 0:0.2.9-168.el9_8.tuxcare.els4 0:3.3.7-168.el9_8.tuxcare.els4 0:0.15.2-168.el9_8.tuxcare.els4 0:3.2.33-168.el9_8.tuxcare.els4 aarch64|i686|x86_64 0:9.9p1-13.el9_8.alma.1.tuxcare.els2 aarch64|i686|x86_64 0:0.10.4-8.13.el9_8.alma.1.tuxcare.els2