CLSA-2026:1774612806 TuxCare License Agreement 0 - Initial package for Amazon Linux 2 ELS None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Initial package for Amazon Linux 2 ELS

0 tuxcare-amazonlinux2-els els-os-release-1.0.0-0.amzn2.x86_64.rpm 233caeee7a3773f0cfa4de18450851c6d3bca3f0f15726231a724a323558596b CLSA-2026:1774612906 TuxCare License Agreement 0 - Add support oraclelinux7-els None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add support oraclelinux7-els

0 tuxcare-amazonlinux2-els els-define-1.0-6.amzn2.x86_64.rpm 1e126eb6e566ab2cfca9da54a8989fef27cd12495f7ac06c0cb5004fb41834eb CLSA-2026:1775044490 TuxCare License Agreement 0 - Set priority=10 on ELS repo to match Amazon Linux 2 default repo priority, ensuring ELS packages are not deprioritized by yum-plugin-priorities None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Set priority=10 on ELS repo to match Amazon Linux 2 default repo priority, ensuring ELS packages are not deprioritized by yum-plugin-priorities

0 tuxcare-amazonlinux2-els els-os-release-1.0.0-1.amzn2.x86_64.rpm 96c13b73817cb039dcd5552b5a94b4b1d0fd8db4ac5175b623e2d01f3388d1e1 CLSA-2026:1776185052 TuxCare License Agreement 0 - CVE-2018-16869: fix side-channel padding oracle in RSA decryption - CVE-2021-3580: add input validation to rsa_decrypt family of functions Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-16869: fix side-channel padding oracle in RSA decryption - CVE-2021-3580: add input validation to rsa_decrypt family of functions

0 tuxcare-amazonlinux2-els nettle-2.7.1-9.amzn2.tuxcare.els1.i686.rpm 3be2715830dee06a738af4628514edc71e93027d6c3825f4c0a852f79a830da5 nettle-2.7.1-9.amzn2.tuxcare.els1.x86_64.rpm 72820eeb52832250dc5bbfffa500558cce500911edddd2d6b2cdae4229073f9b nettle-devel-2.7.1-9.amzn2.tuxcare.els1.x86_64.rpm 0a93e20aece1a3cb34db58a30197348dc88ac3c95e92ffcd50cefc220131a06f CLSA-2026:1776249117 TuxCare License Agreement 0 - CVE-2016-9840: fix improper pointer arithmetic in inftrees.c - CVE-2016-9843: fix pre-decrement pointer in crc32_big in crc32.c Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-9840: fix improper pointer arithmetic in inftrees.c - CVE-2016-9843: fix pre-decrement pointer in crc32_big in crc32.c

0 tuxcare-amazonlinux2-els minizip-1.2.7-19.amzn2.0.3.tuxcare.els1.i686.rpm 6c84eaf827e7711f3a33f5b532dcbc028d35926d3c49c0d096583b47a709079d minizip-1.2.7-19.amzn2.0.3.tuxcare.els1.x86_64.rpm 553db060265edce5a485858d8f9ac72db65b806d375135eae52b5fc64bf91fc3 minizip-devel-1.2.7-19.amzn2.0.3.tuxcare.els1.x86_64.rpm f90a9a3c390ce6ac01389a6cba6c62a9f7abbe891be8daa4a08e799a7e24d358 zlib-1.2.7-19.amzn2.0.3.tuxcare.els1.i686.rpm e2adc29fdb0b2836763e8e06443439252002a1a46f3ca66a3210e16585c10bce zlib-1.2.7-19.amzn2.0.3.tuxcare.els1.x86_64.rpm 17a7ab648f06970ae22115b4f0a30b167cb627c67aa16db452ade180fbcd6571 zlib-devel-1.2.7-19.amzn2.0.3.tuxcare.els1.x86_64.rpm 5c611bf95f910951c1891e2d0e37405f616950b3e72d78d08a0047589d4e3d65 zlib-static-1.2.7-19.amzn2.0.3.tuxcare.els1.x86_64.rpm b65e2dcda52224df978399b90a5af1122192abb41ee610ce82efb01cc4e84629 CLSA-2026:1776242108 TuxCare License Agreement 0 - CVE-2022-25313: prevent stack exhaustion in build_model - CVE-2024-50602: make XML_StopParser refuse to stop/suspend an unstarted parser Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-25313: prevent stack exhaustion in build_model - CVE-2024-50602: make XML_StopParser refuse to stop/suspend an unstarted parser

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.6.amzn2.tuxcare.els1.i686.rpm d30c30f451a0f7fbf58add663632a47afcfac6c5bb6fe12ba7c41b33eb6141a7 expat-2.1.0-15.0.6.amzn2.tuxcare.els1.x86_64.rpm 52d76be5f8450fb4316be3cf5d69064ebc25f796b3f8c4ba71a20001ad3435f6 expat-devel-2.1.0-15.0.6.amzn2.tuxcare.els1.x86_64.rpm ef38253db1dc9d08ab2244ebc34d5c56b39d5ab158ea9fcc7745158a2b2b3728 expat-static-2.1.0-15.0.6.amzn2.tuxcare.els1.x86_64.rpm f9148fda419d2c0b91cda0b5df95d1c1b2b8c8a8403549141f50d3ff16fe8572 CLSA-2026:1776426948 TuxCare License Agreement 0 - CVE-2024-0553: timing side-channel in RSA-PSK key exchange - CVE-2023-5981: side-channel in RSA-PSK authentication Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-0553: timing side-channel in RSA-PSK key exchange - CVE-2023-5981: side-channel in RSA-PSK authentication

0 tuxcare-amazonlinux2-els gnutls-3.3.29-9.amzn2.0.3.tuxcare.els1.i686.rpm 416ecbc3f3f8e8a099c753009fbaae6359f0dbabf558615ab595005c8f410fd6 gnutls-3.3.29-9.amzn2.0.3.tuxcare.els1.x86_64.rpm e08bd1a4d845d72339c981f64d33027f588f26d358f368554c1dd47fbde3a461 gnutls-c++-3.3.29-9.amzn2.0.3.tuxcare.els1.i686.rpm b6d6150a1acba98457c8ba107016e9cf5d17c6b46c3ed7cfbb6a62715ecde3e1 gnutls-c++-3.3.29-9.amzn2.0.3.tuxcare.els1.x86_64.rpm 1d325ad44be82c2a762c7ddf514f148e316c0290e1c680d5ec218924ff723579 gnutls-dane-3.3.29-9.amzn2.0.3.tuxcare.els1.i686.rpm 7bdc9e48535d6b02ec5ae98bdaa58dcefec186b97b0d65dd53fdaf21aaf9854e gnutls-dane-3.3.29-9.amzn2.0.3.tuxcare.els1.x86_64.rpm 04ef3ff15d642638da5307b30e7a2cbc4f9ef365e27f26b4a0f2d3c2880a50cf gnutls-devel-3.3.29-9.amzn2.0.3.tuxcare.els1.i686.rpm 26e3365535cceeb67ef0d86e6c9009293cce7a2503005a526ac3105d2220b1ea gnutls-devel-3.3.29-9.amzn2.0.3.tuxcare.els1.x86_64.rpm 61058d0cf67e41f3c6339a0324dbd5db9fb4909b186abebfd30d412b481b2960 gnutls-utils-3.3.29-9.amzn2.0.3.tuxcare.els1.x86_64.rpm efd4a05ee7d27552c9b6de90c4773ebb12d4226816edd899e1842cc7880ecdcb CLSA-2026:1776432987 TuxCare License Agreement 0 - CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent O(n^2) parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) - CVE-2024-28757: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2017-9233: fix external entity infinite loop in entityValueInitProcessor and entityValueProcessor - CVE-2023-52425: add reparse deferral heuristic to prevent O(n^2) parsing of large tokens in small buffer refills; fix buffer growth calculation - CVE-2013-0340: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757) - CVE-2024-28757: add billion laughs (entity expansion bomb) attack protection with amplification limit (100x max, 8 MiB activation threshold); includes fix for isolated external parser bypass (CVE-2024-28757)

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.7.amzn2.tuxcare.els1.i686.rpm c43b0d78d6aa8741a064da1c39baeff58d57be6c5409f04f3b39e2013f9dafd1 expat-2.1.0-15.0.7.amzn2.tuxcare.els1.x86_64.rpm 7db730ff49a007a11803115f0d880e8db2e5c0027e2f7f1c7f57af3740501c73 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els1.x86_64.rpm ecf448c910436e001b11129460cc08277082e29c3357959b271c941a662ac789 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els1.x86_64.rpm be31fcc39d9331c5285bd5cbea7365fc0fecce3d6e33a544fde9c5aa61006197 CLSA-2026:1776443810 TuxCare License Agreement 0 - Fix test_deeply_nested_content_model test on 32 bit systems caused by CVE-2026-4224.patch - Add explicit IPv6 group-length validation in CVE-2024-11168.patch (_check_bracketed_host) to fix test_check_bracketed_host failure on i686 where platform inet_pton is lenient about group length Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix test_deeply_nested_content_model test on 32 bit systems caused by CVE-2026-4224.patch - Add explicit IPv6 group-length validation in CVE-2024-11168.patch (_check_bracketed_host) to fix test_check_bracketed_host failure on i686 where platform inet_pton is lenient about group length

0 tuxcare-amazonlinux2-els python-2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64.rpm 5866eb8f853af2f92df0299e0b6feb5b553a52d92e94e0868b6ca4b2ca9bfd3b python-debug-2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64.rpm 724f2d4e38e79d352b74c4a02ea582e81938f6e4b9c93fa89a137afdeef203fb python-devel-2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64.rpm dfc931458c84ddbd790160565202b17f0c77f0415656372e556dd70daabfab17 python-libs-2.7.18-1.amzn2.0.18.tuxcare.els2.i686.rpm 8e2edcf44c9d6fc5f3c7b860c4ef700ea1998b16731060d9fe04c9e442754186 python-libs-2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64.rpm b75f5a98f3a1444f481edac4df357d6ace8d0ef2faeeddef31ec621eebb41cd9 python-test-2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64.rpm ac76bf4f92ee70af770ce2abf820125d50cfb705181d92be51f8735eb72a92e3 python-tools-2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64.rpm 227f684b854066d1ebd240cbbab71fe992c76cc3ababf108438cb61309ce8575 tkinter-2.7.18-1.amzn2.0.18.tuxcare.els2.x86_64.rpm 5de0933fd8bf05432192180e26f633741115f59d2ca4cc9d177fdd8030d05087 CLSA-2026:1776697118 TuxCare License Agreement 0 - CVE-2018-5744: fix memory leak when processing messages with duplicate keytag EDNS options Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-5744: fix memory leak when processing messages with duplicate keytag EDNS options

0 tuxcare-amazonlinux2-els bind-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 7133642723a46d3bb66953bbe2ea42d1f6489d7d021aa6ec579bec3acb13f9bc bind-chroot-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm f13c0de18aa9a70353044e1c75119d016a6e51e2453810166ca0a81aee721c65 bind-devel-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 90351f9b56430d17ceadb3bd5c2b0c074febfafc6b6aa767281a0f61064ba776 bind-export-devel-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm add2022bdaebe44499b6bcbee9e36feccf8a733388661df0ecf574e48caf308c bind-export-libs-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.i686.rpm 5b8376825dcdb26d0eee11a2c576ea3dfd3e25464a3301e9e846c5915dfadd46 bind-export-libs-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 64da695241e0f125d1aeeecc135da16bd6aa24cfe0eefcd1d7cd216ba8fe5120 bind-libs-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.i686.rpm ea60298f7769a0d30df3cf60e65084e723a4c6807d87af672c7d375be2e0d6f2 bind-libs-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 65f84948306f17c3aa404e37746726a9aeb9e7ca6e411be88c7e10eb094c4cae bind-libs-lite-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.i686.rpm c2d550a6e9bbaf1f8ad15667ff9af7df5bce574fb5dd19f03e70989039e21b56 bind-libs-lite-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 8cddf109ccf683e274aa0c415722df1fd4672ad9fee8a25fb6d458d8742ec48c bind-license-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.noarch.rpm b63205188d771d24b3a62f5bc72407a3d9ff0630c4df5e3c28100748f140b9ba bind-lite-devel-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 8c875b252fa3e5e8a44ecc5b3bf4d78771e436024058cd512707002dc9ff18e2 bind-pkcs11-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 6f8fa9b38dba125d8e9577c02dea82a73b6672d502b26b1305a80643330b1dc8 bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 9fc87688a62ee02feba0dd4c7f90142b6c09d30536b92aec591878b7c718346c bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.i686.rpm 893ee2dfc379615bf0b31df33cfa6779119a28b7cb202bf54f5e04ed2804faf4 bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 8602e5167d88c881d7b47aa11f1bbedd3ab448b4f160672fdc8da81731c1173b bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm c8ba8ad31b25d32dd794cc952997d338d1ee73b9b0d13240c9761473c67a0fee bind-sdb-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm c680871c3355356ed2bd5188f96bacd830d34e08e62e0b07503cd1d4318184ab bind-sdb-chroot-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 6e69bbf845691c613c2281d469a5f1eee5c1a7e33ba39a4ed0c2239a2ede6d03 bind-utils-9.11.4-26.P2.amzn2.13.14.tuxcare.els1.x86_64.rpm 29d2da8970f80fb9c73aa9179c983805ae44d3f47551ef4d7e1d7a9af1242a7a CLSA-2026:1776783894 TuxCare License Agreement 0 - CVE-2019-9641: fix integer overflows in exif_process_IFD_in_TIFF on 32-bit - CVE-2019-9023: fix heap buffer over-reads in oniguruma multibyte parsing Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-9641: fix integer overflows in exif_process_IFD_in_TIFF on 32-bit - CVE-2019-9023: fix heap buffer over-reads in oniguruma multibyte parsing

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm a56fb1a1bf2019ff87f8ad4eb6b2c23f7854caf60be41291925a19c54ab5c69d php-bcmath-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm f1d2d0857177c752c5a10fcde807e66abaf988746ed9e024973907a996bf5e12 php-cli-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm cce1b832d58f1973f91bdb4fd1c181744998fb09b1d00b0c038e2d4e35fb1f4b php-common-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 2e8ae7a018682536e593884400bce0bb8c6696e79794ee6707f7bc84c87a9683 php-dba-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 3a75abd2fd271bd910e8290aa64cab6de8d2a70e6359c6ae87a3490cf2fffd5e php-devel-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 5f55db2791c36fc93ee185f1ec9cebaa10ddc263b29366918c74802725ef0947 php-embedded-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 344cb147918b8cec82c8bb14a4cdce950e8945644d8262a186b0de0b14685f38 php-enchant-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 70980b341608498012acc8be97480ccba9aaded8c73298c829167bbfdca2339c php-fpm-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 460722d0f2637cfc307b89b3e3c4e2e2aef6d2346b64b85d2fd917670d4e2126 php-gd-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm b388e56749f014441859802de448d643e46f2b30fb610c6399f6ee39ce2be927 php-intl-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm c3062fcaa0ffd761a8a7fab6522bd087dc3b2e34d0024ff29a3298b5b05c2c2b php-ldap-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 6942e23c75baf1a17054ea74456e09bf745160d0b2c5c7cba9a51b37717b5221 php-mbstring-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm b79310db13886aa832ca7e081d079d5312243338728b0fca7e28bae0d959ac4a php-mysqlnd-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 96c6b63e669c1dd714a9353fb156c5c1735328fd4bb3c098585c669ec622203e php-odbc-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 8d8bd6b1b83519a1b9d4e5ec9d638b795dd16e77c90217ad435514b62299fa89 php-pdo-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm f61653ebfd76d309905706e887c14930dc28e615e1f7e88a65212693eb753a7b php-pgsql-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 014c6adf66aa1b55e1180f76b71a28a1ccb9351878bbdf8fd0930d59804dd90f php-process-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 838a4ec31a2d712bd1906cb60fd13a706851620b258d8e094692e79ced5bbb03 php-pspell-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm b304d8f208f684f71fa3b899d09d0537c14e9193d03f084d7eaaf64837f8e68c php-recode-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm de5c2c736a865810cc34e2dae60d0b855452b8aa8399ddeb3bb33974a47c409d php-snmp-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 99a21ac083a07b0ef93b13c30b6ec309e53cf04b42aa04051c00bd0f8fb66f78 php-soap-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm c3855e55c590da90798fc4ebbada879fb55fb9376b6bcadd443b6fe079fa1293 php-xml-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm 1434f5574038129fe0a42c1c6a24e75fd013c8e2867c1918ac934cd7f62394d3 php-xmlrpc-5.4.16-46.amzn2.0.6.tuxcare.els3.x86_64.rpm bc56668c1a21a93224ef65331fd52adced14aa445ef9625dbed56e0de682c55e CLSA-2026:1776810014 TuxCare License Agreement 0 - CVE-2021-20313: fix sensitive data leak in TransformSignature - CVE-2021-20311: fix divide by zero in RGBTransformImage - CVE-2021-20312: fix integer overflow in WriteTHUMBNAILImage - CVE-2025-62171: fix integer overflow in BMP decoder Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-20313: fix sensitive data leak in TransformSignature - CVE-2021-20311: fix divide by zero in RGBTransformImage - CVE-2021-20312: fix integer overflow in WriteTHUMBNAILImage - CVE-2025-62171: fix integer overflow in BMP decoder

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.24.tuxcare.els2.i686.rpm a1ece023656dca30869c9eef5bde13ad71b38c2541e308c5eff9592624845fbe ImageMagick-6.9.10.97-1.amzn2.0.24.tuxcare.els2.x86_64.rpm 9c27999484d2c06bd97ec2b02a61c8e26bcbc047b0a63a91c5c8a91933d75711 ImageMagick-c++-6.9.10.97-1.amzn2.0.24.tuxcare.els2.i686.rpm d5c28f75e6305687813019f4306d009315a8187d86052d435780f27573002bee ImageMagick-c++-6.9.10.97-1.amzn2.0.24.tuxcare.els2.x86_64.rpm bc67ec7ab263cffa241894e1308f18d270204c166c41cae9acca32df9aef864d ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.24.tuxcare.els2.x86_64.rpm 05c335ebaf1dcf674d29edebd20a9f4e974f7b99bc2730f53db2e443d0ee3403 ImageMagick-devel-6.9.10.97-1.amzn2.0.24.tuxcare.els2.x86_64.rpm 95f9accab60dbd7253a8a9f7ef84c167257d1b34ffb0f0296e89a4c0feeaebac ImageMagick-doc-6.9.10.97-1.amzn2.0.24.tuxcare.els2.x86_64.rpm cc05eda68190144480e8275bed2b8760f4db680900568204f9a98048baa4bb05 ImageMagick-perl-6.9.10.97-1.amzn2.0.24.tuxcare.els2.x86_64.rpm 3ec6a5cd9209c9d1adcacbedeae06ad04563f8663139f5f0b6958b164d97a817 CLSA-2026:1776847056 TuxCare License Agreement 0 - fix CVE-2025-57803: integer overflow in ReadBMPImage via unguarded bytes_per_line calculation Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- fix CVE-2025-57803: integer overflow in ReadBMPImage via unguarded bytes_per_line calculation

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.24.tuxcare.els3.i686.rpm 12d65f823520e2ab06b9116cc6f940f32f369a20aac99f60e92567c6cd2100ce ImageMagick-6.9.10.97-1.amzn2.0.24.tuxcare.els3.x86_64.rpm f0fe6d4d9032d2954dddbe9022f12e233491a5473b0634f6ac8047ae709257d7 ImageMagick-c++-6.9.10.97-1.amzn2.0.24.tuxcare.els3.i686.rpm 4bb04e99bf8040a085d248dbb074a296d093ce8d6b18fe8202aac52ee928ea86 ImageMagick-c++-6.9.10.97-1.amzn2.0.24.tuxcare.els3.x86_64.rpm a89dd3f334d431587c85b1e49267c870801fb1cdf83a3130f656d732901bc584 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.24.tuxcare.els3.x86_64.rpm dc2acbd96434b159bb02ce7a9f8ddde7095e612f65aca5641ee7ce95686e1429 ImageMagick-devel-6.9.10.97-1.amzn2.0.24.tuxcare.els3.x86_64.rpm a759b91f233660359b9a0c900f54bb106c5512da29b69163bd355dd05f8035ab ImageMagick-doc-6.9.10.97-1.amzn2.0.24.tuxcare.els3.x86_64.rpm 0a61b7311f33364846f063745c68c38bc715e1f06807e92f5c583fed2dcfb738 ImageMagick-perl-6.9.10.97-1.amzn2.0.24.tuxcare.els3.x86_64.rpm d4f660c53f567d33372a76341903645d84d7d5376cc64250f154efe3e03da3c9 CLSA-2026:1776964435 TuxCare License Agreement 0 - Fix CVE-2026-25897: integer overflow in Sun decoder on 32-bit systems Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2026-25897: integer overflow in Sun decoder on 32-bit systems

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.24.tuxcare.els1.x86_64.rpm 2da69c1e6c9ccb5decd9c8ae2b68b9891f6debb237ad535db958225ff9bab380 ImageMagick-c++-6.9.10.97-1.amzn2.0.24.tuxcare.els1.x86_64.rpm 7e8ca7b15dbdd5848ec648135651aa118ead022da0261c5f16f8aeab3fa108d4 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.24.tuxcare.els1.x86_64.rpm f1417fd4cbd957e7c587d7ac033ee4cd2b4da764e7d34c263477c6ead65ccef7 ImageMagick-devel-6.9.10.97-1.amzn2.0.24.tuxcare.els1.x86_64.rpm 605531dbaee96ac93f1fe9d6f91fee7df7f76988a45ca72db4bd43d86219ac4d ImageMagick-doc-6.9.10.97-1.amzn2.0.24.tuxcare.els1.x86_64.rpm dd5f6b5a6b898bb2d81f39971857562fc74e9f7f36a9a958e6540c2e2333a505 ImageMagick-perl-6.9.10.97-1.amzn2.0.24.tuxcare.els1.x86_64.rpm 1ef57dc2da1baf3b0b24c644d533f8c7ab96f4b0dc7fe3e1477c32ea2cd8cc84 CLSA-2026:1776964620 TuxCare License Agreement 0 - CVE-2021-23240: fix race condition in selinux_edit_copy_tfiles allowing privilege escalation via symlink attack - CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-23240: fix race condition in selinux_edit_copy_tfiles allowing privilege escalation via symlink attack - CVE-2023-42465: make sudo less vulnerable to ROWHAMMER attacks

0 tuxcare-amazonlinux2-els sudo-1.8.23-10.amzn2.3.8.tuxcare.els1.x86_64.rpm 538b80388c619e550350e5d9d403752b30347b5e15da580ac786612cec13f664 sudo-devel-1.8.23-10.amzn2.3.8.tuxcare.els1.x86_64.rpm c82f909ad5d8ee165db80dc0b92d2e093862d5fbe1523dcf01dc30210a451639 CLSA-2026:1776964888 TuxCare License Agreement 0 - Fix CVE-2017-7375: add validation for parsed entity references in xmlParsePEReference - Fix CVE-2017-7376: fix buffer overflow in URL port handling - Fix CVE-2024-25062: use-after-free in xmlreader with DTD validation and XInclude Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2017-7375: add validation for parsed entity references in xmlParsePEReference - Fix CVE-2017-7376: fix buffer overflow in URL port handling - Fix CVE-2024-25062: use-after-free in xmlreader with DTD validation and XInclude

0 tuxcare-amazonlinux2-els libxml2-2.9.1-6.amzn2.5.24.tuxcare.els1.x86_64.rpm 32cf1e8552234e514f218bc1a6bb34091a459c1a31dfa1ea0ea99c8aad1c3a4d libxml2-devel-2.9.1-6.amzn2.5.24.tuxcare.els1.x86_64.rpm 46dc8501046bed76272af0567d8a5f9744cd5e203d23a9464f7e53de7cd9e75c libxml2-python-2.9.1-6.amzn2.5.24.tuxcare.els1.x86_64.rpm 63873442657c37a87d2257353397903f2b29d48133bf0a3687675561c26091af libxml2-static-2.9.1-6.amzn2.5.24.tuxcare.els1.x86_64.rpm 5bf4b306ef521be34ba4e27b233914c2b365ee7efe97b9a348cd7ada4dd9fefa CLSA-2026:1777321434 TuxCare License Agreement 0 - CVE-2024-38428: fix userinfo parsing in url_skip_credentials() per RFC 2396 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-38428: fix userinfo parsing in url_skip_credentials() per RFC 2396

0 tuxcare-amazonlinux2-els wget-1.14-18.amzn2.1.tuxcare.els1.x86_64.rpm faa8ff0366b5b24f4e167d25cf230f6e9902a45b279d436eecb27b82f52186b0 CLSA-2026:1777311496 TuxCare License Agreement 0 - CVE-2018-8740: NULL pointer dereference in sqlite3EndTable() when the sqlite_master schema is corrupted with a CREATE TABLE AS entry - CVE-2018-20346: integer overflow in the FTS3 segment reader path (fts3ScanInteriorNode, fts3SegReaderNext) on crafted shadow table data - CVE-2018-20506: heap corruption in the FTS3 merge path (nodeReaderNext) triggered by a crafted FTS3 shadow table Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-8740: NULL pointer dereference in sqlite3EndTable() when the sqlite_master schema is corrupted with a CREATE TABLE AS entry - CVE-2018-20346: integer overflow in the FTS3 segment reader path (fts3ScanInteriorNode, fts3SegReaderNext) on crafted shadow table data - CVE-2018-20506: heap corruption in the FTS3 merge path (nodeReaderNext) triggered by a crafted FTS3 shadow table

0 tuxcare-amazonlinux2-els lemon-3.7.17-8.amzn2.1.3.tuxcare.els2.x86_64.rpm 60253cd6a2848f261c9d6fa326e47b7aba07e9d934481df1c36eda6d901178eb sqlite-3.7.17-8.amzn2.1.3.tuxcare.els2.i686.rpm b4ef5f88c49af8b4257643a1873fadbb3aa00c775eb03ba20286a18b02d40e7d sqlite-3.7.17-8.amzn2.1.3.tuxcare.els2.x86_64.rpm c1e3bd82a6c72fdcdb8f9faa55d84210b75c76dce04e548560ef93ce023218e0 sqlite-devel-3.7.17-8.amzn2.1.3.tuxcare.els2.x86_64.rpm 3e80d9e289ca4bf335f752908b0e33e47379373e1f9cb6f212693085756dfee7 sqlite-doc-3.7.17-8.amzn2.1.3.tuxcare.els2.noarch.rpm cf3c74732907f76b3a48cf8413fceb1793da7531858cdfc0daf0d873b51a35a6 sqlite-tcl-3.7.17-8.amzn2.1.3.tuxcare.els2.x86_64.rpm 0f6180a2d06e78c79d1bef3bd6a0d8cde02448c2a56082532d285a88a6c92236 CLSA-2026:1777385648 TuxCare License Agreement 0 - CVE-2016-10195: fix remote stack overread in evdns name_parse() Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-10195: fix remote stack overread in evdns name_parse()

0 tuxcare-amazonlinux2-els libevent-2.0.21-4.amzn2.0.3.tuxcare.els1.i686.rpm 861ddb9f408786f0bcbb574def580ecda48243ccff37adf3687d0d73d41bdd2d libevent-2.0.21-4.amzn2.0.3.tuxcare.els1.x86_64.rpm 471a9291111b99d0ebaaef8d35e681a74643f45a8bd868f84709352a8e075614 libevent-devel-2.0.21-4.amzn2.0.3.tuxcare.els1.x86_64.rpm a6f0a26162a7fd434147f7713fa7f025e16dadfd7eaf3277f40ff97e047de63f libevent-doc-2.0.21-4.amzn2.0.3.tuxcare.els1.noarch.rpm 52caa013e063edb8a5f03f217fdf28911347c45b844f9e0c3618092ba928ca1c CLSA-2026:1777451293 TuxCare License Agreement 0 - CVE-2019-18276: when effective UID is not equal to its real UID the saved UID is not dropped Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-18276: when effective UID is not equal to its real UID the saved UID is not dropped

0 tuxcare-amazonlinux2-els bash-4.2.46-34.amzn2.tuxcare.els1.x86_64.rpm 4e6a630c494a409e599bf178590aa6bf78c6351032bfb755a7cf6bfb66ff240d bash-doc-4.2.46-34.amzn2.tuxcare.els1.x86_64.rpm 3bec6c24629a3eb3fa3e00cc7533aa78a9841c9030fcea4398f58b5bf40a3e05 CLSA-2026:1777454678 TuxCare License Agreement 0 - CVE-2018-14882: icmp6 rpl missing bounds check buffer over-read - CVE-2018-14464: add missing bounds check in lmp_print_data_link_subobjs - CVE-2019-15166: lmp_print_data_link_subobjs missing bounds checks (covered by the same backport) - CVE-2018-14461: ldp fix bounds check in ft session tlv - CVE-2018-16301: reject -F files larger than INT_MAX in read_infile Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-14882: icmp6 rpl missing bounds check buffer over-read - CVE-2018-14464: add missing bounds check in lmp_print_data_link_subobjs - CVE-2019-15166: lmp_print_data_link_subobjs missing bounds checks (covered by the same backport) - CVE-2018-14461: ldp fix bounds check in ft session tlv - CVE-2018-16301: reject -F files larger than INT_MAX in read_infile

0 tuxcare-amazonlinux2-els tcpdump-4.9.2-4.amzn2.1.0.1.tuxcare.els3.x86_64.rpm ec2baf9f116cb3c7d24d731d9abbff932e663b0dbde27da6b80afcbb0f254f5f CLSA-2026:1777455138 TuxCare License Agreement 0 - CVE-2018-10103: disable possibly-buggy SMB printer by default - CVE-2018-10105: disable possibly-buggy SMB printer by default Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-10103: disable possibly-buggy SMB printer by default - CVE-2018-10105: disable possibly-buggy SMB printer by default

0 tuxcare-amazonlinux2-els tcpdump-4.9.2-4.amzn2.1.0.1.tuxcare.els1.x86_64.rpm 04d2a0e1338398f56891625d66dc30207dcdae23e7e95585b66fcf89dc194b36 CLSA-2026:1777458706 TuxCare License Agreement 0 - CVE-2018-16229: dccp buffer over-read in timestamp options - CVE-2018-14466: fix rx parser over-read in serviceId - CVE-2018-16452: cap smb_fdata recursion to prevent stack exhaustion - CVE-2018-16451: add missing bounds checks in smb print_trans() - CVE-2018-16228: already mitigated upstream by Patch0015 (filename references the unrelated CVE-2018-19519 but its body is the HNCP print_prefix fix) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-16229: dccp buffer over-read in timestamp options - CVE-2018-14466: fix rx parser over-read in serviceId - CVE-2018-16452: cap smb_fdata recursion to prevent stack exhaustion - CVE-2018-16451: add missing bounds checks in smb print_trans() - CVE-2018-16228: already mitigated upstream by Patch0015 (filename references the unrelated CVE-2018-19519 but its body is the HNCP print_prefix fix)

0 tuxcare-amazonlinux2-els tcpdump-4.9.2-4.amzn2.1.0.1.tuxcare.els4.x86_64.rpm 8600ef26469593302e8f2674eca9588e911c58e57f7d2bbfaba9036ba008e6ea CLSA-2026:1777471422 TuxCare License Agreement 0 - CVE-2024-12086: prevent server from reading arbitrary client files via path traversal - CVE-2025-10158: fix invalid access to files array in sender - Add upstream stability fix (RsyncProject/rsync PR #706): use-after-free in generator - Enable Amazon Linux 2 ELS Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12086: prevent server from reading arbitrary client files via path traversal - CVE-2025-10158: fix invalid access to files array in sender - Add upstream stability fix (RsyncProject/rsync PR #706): use-after-free in generator - Enable Amazon Linux 2 ELS

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els3.x86_64.rpm 62ecdf7d6c39c808d3cef4c9641846d6283e36868d7e4ff04ede64f7a4f83519 CLSA-2026:1777464365 TuxCare License Agreement 0 - CVE-2018-14462: add missing bounds check in icmp_print() before reading icmp_cksum - CVE-2018-14881: bgp parser buffer over-read in bgp_capabilities_print() (BGP_CAPCODE_RESTART) - CVE-2018-14879: fix buffer overflow in get_next_file() command-line parser - CVE-2018-16227: ieee 802.11 parser missing bounds check on mesh flags subfield Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-14462: add missing bounds check in icmp_print() before reading icmp_cksum - CVE-2018-14881: bgp parser buffer over-read in bgp_capabilities_print() (BGP_CAPCODE_RESTART) - CVE-2018-14879: fix buffer overflow in get_next_file() command-line parser - CVE-2018-16227: ieee 802.11 parser missing bounds check on mesh flags subfield

0 tuxcare-amazonlinux2-els tcpdump-4.9.2-4.amzn2.1.0.1.tuxcare.els6.x86_64.rpm 5442032bb270c0107a6aff9380791b1ff66da5c2ee3a35b688f923dfdedb81a5 CLSA-2026:1777476417 TuxCare License Agreement 0 - CVE-2026-3441: bounds-check XTY_LD x_scnlen csect index in xcoff_link_add_symbols to prevent heap-based out-of-bounds read - CVE-2026-3442: validate r_symndx before sym_hashes[] indexing in xcoff_link_add_symbols to prevent out-of-bounds read Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3441: bounds-check XTY_LD x_scnlen csect index in xcoff_link_add_symbols to prevent heap-based out-of-bounds read - CVE-2026-3442: validate r_symndx before sym_hashes[] indexing in xcoff_link_add_symbols to prevent out-of-bounds read

0 tuxcare-amazonlinux2-els binutils-2.29.1-31.amzn2.0.2.tuxcare.els10.x86_64.rpm 690f27cda5a9a4f84108b9884707ebe3c963f8195da1610f933f06c33c376f68 binutils-devel-2.29.1-31.amzn2.0.2.tuxcare.els10.x86_64.rpm beda2bf324495f9bae7f5025cb406ad9b26ea90116edb84b492b0e0a44ed196d CLSA-2026:1777476699 TuxCare License Agreement 0 - CVE-2017-16548: enforce trailing NUL on received xattr names in receive_xattr() - CVE-2017-17434: sanitize xname strings in read_ndx_and_attrs() and check fnamecmp against the daemon filter list Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2017-16548: enforce trailing NUL on received xattr names in receive_xattr() - CVE-2017-17434: sanitize xname strings in read_ndx_and_attrs() and check fnamecmp against the daemon filter list

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els4.x86_64.rpm f5aa87d09fac95b163bce16935dd9ec60c4256e7d5ff6840e5cc020c646e2dc6 CLSA-2026:1777479584 TuxCare License Agreement 0 - CVE-2018-10546: fail on invalid multibyte sequences in iconv stream filter - CVE-2018-10548: fix NULL pointer dereference in ldap_get_dn return handling - CVE-2018-14883: fix integer overflow in exif_thumbnail_extract bounds check - CVE-2018-20783: add bounds checks to phar manifest header reads - CVE-2019-6977: fix out of bounds write in gdImageColorMatch palette buffer - CVE-2019-9637: harden cross-device rename umask, chown and chmod ordering - CVE-2019-9638: fix uninitialized read in exif_process_IFD_in_MAKERNOTE Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-10546: fail on invalid multibyte sequences in iconv stream filter - CVE-2018-10548: fix NULL pointer dereference in ldap_get_dn return handling - CVE-2018-14883: fix integer overflow in exif_thumbnail_extract bounds check - CVE-2018-20783: add bounds checks to phar manifest header reads - CVE-2019-6977: fix out of bounds write in gdImageColorMatch palette buffer - CVE-2019-9637: harden cross-device rename umask, chown and chmod ordering - CVE-2019-9638: fix uninitialized read in exif_process_IFD_in_MAKERNOTE

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 568ac3f3a85b0ccc3ce91bdc3fc3df8eed087d48cd73fcfd1a9efdd793827bcd php-bcmath-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm c49a864344e86907feba5e86f0bcabc32ef8588974a35b5de8bf5c58c66b2798 php-cli-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 128cec5090aa3be6121618fe5de1efcf0d1d95cccd62ecab696e3537519cb948 php-common-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm c059eda0fe0b6412a3619a4a80897ffe57770ac6b06900886fd5ede621dc033a php-dba-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 161dfe110f57a197e4b62b9bc5293bb42e0b0fe7b83fcd0d04c6ad7777aeae43 php-devel-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm bd91080d759f52046dc6b52c9244f666465eefe204f621f350a0169920c940cf php-embedded-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm a2dfef90662682b2998b45a7198d42d8da8187d3e3f307baf12bb5ddf030cd1d php-enchant-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm a6cef389b21e7e21e0cdbf7b3a3fcf5bdb8b0721bcb1da17398917e77118eaf6 php-fpm-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm ea1b1ac40f53f2efeb91893ae4fb372466f756ab7651a3691bc8a6754c15c2a8 php-gd-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 15e56920d9ba294f15b43543772d83b9df4f15424d55e03961eac31905f8a4b3 php-intl-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm dc04b3ba40fdf2c2c433a116447eb5a61dbdbbc7564802341991589b2342c8dc php-ldap-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 848c067307a53557f07e0a81bc5ae12e769bed768074ab49c91ef347fede202e php-mbstring-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 9fbbfd98708a241c2fad2db7aad146f2bdb7ebaa1db5fb688b8d355dfd66b463 php-mysqlnd-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 13a49356e8bc6db549342d6d2af06f63d04b2b500764c0216de7c1709da4665a php-odbc-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm d4956f1ba4d75ffbfc7693fdcea05115944785c3398d72048d41b6978923ac43 php-pdo-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 9d8382b7084b5f7dd50e60808cb2259238ee84d4b7bda570bb43d2b86b7fc5e3 php-pgsql-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 91e5ca80d29aa31b29384363747ad21e4f8ebf08c41468fb417c6e47dcc4b648 php-process-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm ec41f835cf965061b9f7ba7d66b6dc2c31495803c117f5ff7ad0ebd3cdff6263 php-pspell-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 4d5e9eec503d2f090708fc7ecb2c44319ebacd55dcc1711d33bc70e1c0e67c4e php-recode-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 17c7c26fcb187c5e1fcdb407398df4d18e143f897403d061f4e484e6555aae5d php-snmp-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 8aaed86890ac1244714adcf6b980ff161165bdcc02b0174df5bf88f659d66785 php-soap-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 52ca371d5cdeebed9e2925b173535e3273ffca23c49c5c931f5757ebaf6aaaa5 php-xml-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm 1615e0819caa8cb844ee1b47232301604d3f5418ce8fbb5527723d3a7dbf0c67 php-xmlrpc-5.4.16-46.amzn2.0.6.tuxcare.els4.x86_64.rpm e283d24e9b4dc66f7ba8d17e11071748be3d65723c3827816fa6d94501f72f21 CLSA-2026:1777480156 TuxCare License Agreement 0 - CVE-2019-13012: fix insecure permissions in GKeyfile settings backend when creating directories and writing settings files Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-13012: fix insecure permissions in GKeyfile settings backend when creating directories and writing settings files

0 tuxcare-amazonlinux2-els glib2-2.56.1-9.amzn2.0.13.tuxcare.els1.x86_64.rpm 2324d1d690ff17b173d5cfa1f9997a16958dd0159424b8e35eb5ec2c9aec6829 glib2-devel-2.56.1-9.amzn2.0.13.tuxcare.els1.x86_64.rpm 4403cf578eab1ce0ee4bedf5d0d07b37247ab57b046f484c87c4ab70552d94f6 glib2-doc-2.56.1-9.amzn2.0.13.tuxcare.els1.noarch.rpm 56f55879c88300aa9c399ad4da25b8101373180092b741089e6b7faa4e074385 glib2-fam-2.56.1-9.amzn2.0.13.tuxcare.els1.x86_64.rpm a50407e41b12c5ddd89b702f9424d2f716bb0890702a3eefc573879d5cff463a glib2-static-2.56.1-9.amzn2.0.13.tuxcare.els1.x86_64.rpm 4939bc6af9c701af22b989b63ccefc92e3e269590b3b0bc6105bb89c430a8089 glib2-tests-2.56.1-9.amzn2.0.13.tuxcare.els1.x86_64.rpm bb29801cecbf7a2d51ab971dba6b65914983b4087765a8e541e32aca92e71c50 CLSA-2026:1777480794 TuxCare License Agreement 0 - CVE-2026-28388: NULL pointer dereference in check_delta_base() when a delta CRL omits the required CRL Number extension - CVE-2026-28389: NULL pointer dereference in dh_cms_set_shared_info() and ecdh_cms_set_shared_info() when the CMS KeyEncryptionAlgorithmIdentifier parameter field is omitted - CVE-2026-28390: NULL pointer dereference in rsa_cms_decrypt() when the CMS RSA-OAEP pSourceFunc parameter field is omitted Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-28388: NULL pointer dereference in check_delta_base() when a delta CRL omits the required CRL Number extension - CVE-2026-28389: NULL pointer dereference in dh_cms_set_shared_info() and ecdh_cms_set_shared_info() when the CMS KeyEncryptionAlgorithmIdentifier parameter field is omitted - CVE-2026-28390: NULL pointer dereference in rsa_cms_decrypt() when the CMS RSA-OAEP pSourceFunc parameter field is omitted

0 tuxcare-amazonlinux2-els openssl-1.0.2k-24.amzn2.0.17.tuxcare.els1.x86_64.rpm b2085e20c2ba1372a39279f4282bf965ed44dd7ac662b0472e5944bc82364591 openssl-devel-1.0.2k-24.amzn2.0.17.tuxcare.els1.x86_64.rpm 6ddf1a335cf0608cbfa72da83421859f173ca34c247f636cbafdafbdc6e81788 openssl-libs-1.0.2k-24.amzn2.0.17.tuxcare.els1.i686.rpm be861f64d4a7d7c4619f196ee85573da1cb977d40d339532e0ad5265cb7ea3ae openssl-libs-1.0.2k-24.amzn2.0.17.tuxcare.els1.x86_64.rpm 09b20d0ebba811af952b345ae3f42157a01553eb2002a8caac0c9f6555c74f9c openssl-perl-1.0.2k-24.amzn2.0.17.tuxcare.els1.x86_64.rpm e1f77722e2e55d3d8c52ecaf43bcf24ead559277c3d6d3e5ae99a94a179c5370 openssl-static-1.0.2k-24.amzn2.0.17.tuxcare.els1.x86_64.rpm 3257d0849b050f12d1f31ab92b5a52639969c96d137e6ab61e250d529b91d8be CLSA-2026:1777541497 TuxCare License Agreement 0 - CVE-2019-5815: fix dangling pointer / type confusion in xsltNumberFormatGetMultipleLevel by saving and restoring the XPath context node around xmlXPathNext* iterator calls Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-5815: fix dangling pointer / type confusion in xsltNumberFormatGetMultipleLevel by saving and restoring the XPath context node around xmlXPathNext* iterator calls

0 tuxcare-amazonlinux2-els libxslt-1.1.28-6.amzn2.0.5.tuxcare.els1.i686.rpm d0867dbdc1deec9ce98e85498c55a2008c1b906f193796aa52e6b83e98aa469d libxslt-1.1.28-6.amzn2.0.5.tuxcare.els1.x86_64.rpm e53486a550cfc032ad97830cb8fe37a19b731583842e5e7311b84c7616852b9b libxslt-devel-1.1.28-6.amzn2.0.5.tuxcare.els1.x86_64.rpm 3fb83f1c4fdfe8c3b23fb84c0e9e91dda8407d9471b48909d77b057d3809d8de libxslt-python-1.1.28-6.amzn2.0.5.tuxcare.els1.x86_64.rpm 85de1f6bff3688ce7573ae096049491e9f90b81ba4b57d841a9d7769042028bb CLSA-2026:1777556717 TuxCare License Agreement 0 - CVE-2020-12658: gssproxy worker thread exits while holding cond_mutex, leaving the lock held and stalling subsequent thread shutdown Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-12658: gssproxy worker thread exits while holding cond_mutex, leaving the lock held and stalling subsequent thread shutdown

0 tuxcare-amazonlinux2-els gssproxy-0.7.0-17.amzn2.tuxcare.els1.x86_64.rpm afc9a846c2698e4bdd043bc5b9146027756eaef20ee60e9226db5aaffcaeeafd CLSA-2026:1777558572 TuxCare License Agreement 0 - CVE-2025-69720: add limit-check in infocmp -i to prevent buffer overflow in analyze_string() when a sibling string capability exceeds MAX_TERMINFO_LENGTH Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-69720: add limit-check in infocmp -i to prevent buffer overflow in analyze_string() when a sibling string capability exceeds MAX_TERMINFO_LENGTH

0 tuxcare-amazonlinux2-els ncurses-6.0-8.20170212.amzn2.1.8.tuxcare.els1.x86_64.rpm 75cc94a1d852ec020a411c2c07e46c399185c2f31e527f416febf3f9eacaf6d7 ncurses-base-6.0-8.20170212.amzn2.1.8.tuxcare.els1.noarch.rpm ad41f6cde409d1b1443a56497bb5e2ccb592fc7fb04beb05369a87af2aa7407c ncurses-c++-libs-6.0-8.20170212.amzn2.1.8.tuxcare.els1.i686.rpm bd266616cf55f268009bc067cb9425a7ebe4f3ecfbdf65d732e2bd5da02fdee6 ncurses-c++-libs-6.0-8.20170212.amzn2.1.8.tuxcare.els1.x86_64.rpm dab80b4016acf242d1eb4ad0a61ef1005e96894073e5e628a7678eb3100f6768 ncurses-compat-libs-6.0-8.20170212.amzn2.1.8.tuxcare.els1.i686.rpm 19c44e5c7879814e07d0cdea6618e77fff4a3685bf6aed3fa8c365be5d739e8d ncurses-compat-libs-6.0-8.20170212.amzn2.1.8.tuxcare.els1.x86_64.rpm e70a7af892cec0eadeef3ecd309c8f4de82a38779ad7a3dced720ef6efef7972 ncurses-devel-6.0-8.20170212.amzn2.1.8.tuxcare.els1.x86_64.rpm 7e51b2b6c45e10df9c4db815f50d2fd97b3398e4fca4a42e2d2ca05aa2e6740b ncurses-libs-6.0-8.20170212.amzn2.1.8.tuxcare.els1.i686.rpm d1906881262521b5623699740b61ca23686a517bcc57da38cb77c320e88276f3 ncurses-libs-6.0-8.20170212.amzn2.1.8.tuxcare.els1.x86_64.rpm ab49838d011de4d659ef67f3446967fe8d31d0286d515fb70de8177fb5d3fe62 ncurses-static-6.0-8.20170212.amzn2.1.8.tuxcare.els1.x86_64.rpm 1d436808e7408300678b40e2e1934f15a5860ee52ce9b5e15b0616c9c2f1217e ncurses-term-6.0-8.20170212.amzn2.1.8.tuxcare.els1.noarch.rpm c1f86cdc06bd5f8659f783e8b6eb07e3245a48f68aaea15915acc434d0c9b9ac CLSA-2026:1777890238 TuxCare License Agreement 0 - CVE-2019-16866: fix uninitialized memory read on crafted NOTIFY query Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-16866: fix uninitialized memory read on crafted NOTIFY query

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.12.tuxcare.els1.x86_64.rpm 6ae37e9c6130cc1531e7f9d2996dce7680615a24082f7001467fd118e7ba46a5 python3-unbound-1.7.3-15.amzn2.0.12.tuxcare.els1.x86_64.rpm 8ff728e02f90bf18c8a6d9d6cfc53b53bfa2c6966add320e796b9722ce5df7a5 unbound-1.7.3-15.amzn2.0.12.tuxcare.els1.x86_64.rpm b41363b9fefdbd3118669322f79e6dbefd1763ad4d8728449a4b9c295122fd2e unbound-devel-1.7.3-15.amzn2.0.12.tuxcare.els1.x86_64.rpm 9f3c6867f462aac33b045b33da7032948cbc16daa15fcee9d52da7b5bd5765f9 unbound-libs-1.7.3-15.amzn2.0.12.tuxcare.els1.i686.rpm d3529f7c4ac6747ef6b56239c40139c921c69060a2e8a311142e79bf327bf9bf unbound-libs-1.7.3-15.amzn2.0.12.tuxcare.els1.x86_64.rpm 8e303b4ad27c8d7b828b936ad092c6c15170e99d6ad9b6891922035dfcf7fe36 CLSA-2026:1777938824 TuxCare License Agreement 0 - CVE-2018-12015: Archive::Tar path traversal - remove existing block-device or out-of-CWD symlink targets before overwriting during extraction Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-12015: Archive::Tar path traversal - remove existing block-device or out-of-CWD symlink targets before overwriting during extraction

0 tuxcare-amazonlinux2-els perl-5.16.3-299.amzn2.0.3.tuxcare.els1.x86_64.rpm 418c22d6996458201f2b7f27aa1b474d87a4adf5d750e32deff3c384bf31c8da perl-CPAN-1.9800-299.amzn2.0.3.tuxcare.els1.noarch.rpm 597ff86d9add722121c4ffd08386691cbb26df4ba4b07cbde45086c7a89a1774 perl-ExtUtils-CBuilder-0.28.2.6-299.amzn2.0.3.tuxcare.els1.noarch.rpm 637ebd3e20696fb068080878ddcad30780b70585839ec88e0b0ee2b15ea83065 perl-ExtUtils-Embed-1.30-299.amzn2.0.3.tuxcare.els1.noarch.rpm 0a3f18fc18f84340a6ca927820175cb4c5df9092513fbcfcffa53079f13a29da perl-ExtUtils-Install-1.58-299.amzn2.0.3.tuxcare.els1.noarch.rpm ba537ceff29889357e933cb24529af4db174ee267f87c7c6a73aac4672f0cd07 perl-IO-Zlib-1.10-299.amzn2.0.3.tuxcare.els1.noarch.rpm 9518b7c3f2f06b3a428ccbd75089ec344cee1da15583c425927c9eb0017e59e0 perl-Locale-Maketext-Simple-0.21-299.amzn2.0.3.tuxcare.els1.noarch.rpm 919de2b3c2b8c3315848d70dfd28a03655fa6683d5f4e061f64948fa86159b6f perl-Module-CoreList-2.76.02-299.amzn2.0.3.tuxcare.els1.noarch.rpm 509621c88df24b2823761f1882b367ca97791ea9ca7e480dd58c46fbdbc2f9a7 perl-Module-Loaded-0.08-299.amzn2.0.3.tuxcare.els1.noarch.rpm 47785a1535aec6ff16313e651e9d514fd43091636af89b76ce3f2cb745fa71c3 perl-Object-Accessor-0.42-299.amzn2.0.3.tuxcare.els1.noarch.rpm 09d8fc0ee317c54317a9b4687070427e815fb60b71b401a059687a9b3aca8807 perl-Package-Constants-0.02-299.amzn2.0.3.tuxcare.els1.noarch.rpm 4f6f5677a4e86ca45474d67c6ea4ca9173a8a3fa5989bac99137935d9613a321 perl-Pod-Escapes-1.04-299.amzn2.0.3.tuxcare.els1.noarch.rpm 734f8dc81ade42b5e201485f3f9855355cc4e65d427fd1831bda582b28511493 perl-Time-Piece-1.20.1-299.amzn2.0.3.tuxcare.els1.x86_64.rpm 3188602d24162fa82717f1cd0f249d9eb06ed1101ad884a485e64a76143967fc perl-core-5.16.3-299.amzn2.0.3.tuxcare.els1.x86_64.rpm b811dfe4209c2b659f9cc87bbfe30feab37e254a07d2d0a3fffa1a9e3252893a perl-devel-5.16.3-299.amzn2.0.3.tuxcare.els1.x86_64.rpm a6dc15733b6169801d3aa5f21862ce19f5ff06ce49e45c026442e8063116fd22 perl-libs-5.16.3-299.amzn2.0.3.tuxcare.els1.i686.rpm 1c3848a36c2e413e4de32194e113dbbef1f7c22da267d5df640698a6e3ea417a perl-libs-5.16.3-299.amzn2.0.3.tuxcare.els1.x86_64.rpm 64fae9132c215f283b54749db9c02d5723226a68703d93f4134dfd1f62e5eeff perl-macros-5.16.3-299.amzn2.0.3.tuxcare.els1.x86_64.rpm 2c572df0f42a4f93dbe580dd271aa0b51f4b2b6b35daa602125f21c34a2326a8 perl-tests-5.16.3-299.amzn2.0.3.tuxcare.els1.x86_64.rpm 24d7209d397e1ee0b3795db8c7cf6f6f322df1a15a589c20494d988f20a44af7 CLSA-2026:1777940378 TuxCare License Agreement 0 - CVE-2018-1123: ps DoS via outbuf overflows in pr_args/pr_comm/pr_fname caused by passing literal OUTBUF_SIZE instead of remaining buffer size - CVE-2018-1125: pgrep stack-buffer overflow in cmdline assembly via strncpy/strncat loop with int-bytes wraparound Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-1123: ps DoS via outbuf overflows in pr_args/pr_comm/pr_fname caused by passing literal OUTBUF_SIZE instead of remaining buffer size - CVE-2018-1125: pgrep stack-buffer overflow in cmdline assembly via strncpy/strncat loop with int-bytes wraparound

0 tuxcare-amazonlinux2-els procps-ng-3.3.10-26.amzn2.tuxcare.els1.i686.rpm 8c6743662db22525520eec9d1aaceb5fae3e1116e4ad21bcc469e0a36a7885cd procps-ng-3.3.10-26.amzn2.tuxcare.els1.x86_64.rpm a7eca0516e2b3a606bc341f31bb932590e73e7a050e8d06cddb6d1fc1d6c6348 procps-ng-devel-3.3.10-26.amzn2.tuxcare.els1.x86_64.rpm 2551875eadbb38324ddec946408f3d2f680d99c29c35e9e21bdd30a90cb2fcfe procps-ng-i18n-3.3.10-26.amzn2.tuxcare.els1.x86_64.rpm 1bb9629917f050c817c6e070088356d5639801ca55dcba849eae0a1dd3dcd5f8 CLSA-2026:1777940600 TuxCare License Agreement 0 - CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-14342: mount.cifs shell command injection via username mount option when built with systemd-ask-password support

0 tuxcare-amazonlinux2-els cifs-utils-6.2-10.amzn2.0.5.tuxcare.els3.x86_64.rpm 0a596a9298557f27ea949e6b1c8a7a9c431ce3bd420de7ff45c76fe6974de9e8 cifs-utils-devel-6.2-10.amzn2.0.5.tuxcare.els3.x86_64.rpm a24bd5a16274fc3f3c7fe4cf0587bbdb37d858596f6d009da476c5cf9f19cd0c CLSA-2026:1777945944 TuxCare License Agreement 0 - CVE-2018-5764: prevent client from resetting protect_args during the second parse_arguments pass on the daemon Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-5764: prevent client from resetting protect_args during the second parse_arguments pass on the daemon

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els5.x86_64.rpm a115b8b036723714e133b6f21d15183231b6e1fbc68841c372f6a393956118d7 CLSA-2026:1777947232 TuxCare License Agreement 0 - CVE-2016-10196: fix stack-based buffer overflow in evutil_parse_sockaddr_port - CVE-2016-10197: fix DoS via empty hostname in search_make_new Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-10196: fix stack-based buffer overflow in evutil_parse_sockaddr_port - CVE-2016-10197: fix DoS via empty hostname in search_make_new

0 tuxcare-amazonlinux2-els libevent-2.0.21-4.amzn2.0.3.tuxcare.els2.i686.rpm 370af800a6d76c0fae41b7caf5fc4e506dfc6767d20ad2480fb10f998e3dbec5 libevent-2.0.21-4.amzn2.0.3.tuxcare.els2.x86_64.rpm ea506618078d7647fa460c83252440867fab23a464373dde06b3cb8be13e86e2 libevent-devel-2.0.21-4.amzn2.0.3.tuxcare.els2.x86_64.rpm 014aabc13198c0e29574f1065daee28ebee7f70ca99e907e3feb6328c7acfee9 libevent-doc-2.0.21-4.amzn2.0.3.tuxcare.els2.noarch.rpm 60d42e85b793a33043381eec086a8816f19f9d1876ef86b8a13bf9fe40470dd8 CLSA-2026:1777973430 TuxCare License Agreement 0 - Import CVE-2026-5121 (zisofs pz_log2_bs validation) from amzn2 stock 0.6 - Bump amzn_buildid to .6 to leapfrog amzn2 stock 3.1.2-14.amzn2.0.6 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Import CVE-2026-5121 (zisofs pz_log2_bs validation) from amzn2 stock 0.6 - Bump amzn_buildid to .6 to leapfrog amzn2 stock 3.1.2-14.amzn2.0.6

0 tuxcare-amazonlinux2-els bsdcpio-3.1.2-14.amzn2.0.6.tuxcare.els7.x86_64.rpm b5b217e07b456f8a7a1893372e44d50355f7fe69bc42c9e2eaf7326a0b4b1ce7 bsdtar-3.1.2-14.amzn2.0.6.tuxcare.els7.x86_64.rpm 0cbf2e7743fcf937dbcae412257cba891ed824ded777b68e6960fd1c57c61038 libarchive-3.1.2-14.amzn2.0.6.tuxcare.els7.i686.rpm f930a5ca437c55cd273a7fc9ee639a9a1330da5691eb65dd0720d9ecfa92ab4d libarchive-3.1.2-14.amzn2.0.6.tuxcare.els7.x86_64.rpm 02629649ecdd1b72e47a750a6bc69b4b2115835b8df2b17af660c2ce1560ffb7 libarchive-devel-3.1.2-14.amzn2.0.6.tuxcare.els7.x86_64.rpm 74cf7622643aa1c31b4dbf1bc880bbb0b85eb651eab94f8054c0fda9949ecb3d CLSA-2026:1777979854 TuxCare License Agreement 0 - CVE-2018-21010: heap buffer overflow in color_apply_icc_profile when RGB components have differing widths or heights; reject such inputs after cleaning up the LCMS transform handle and profiles. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-21010: heap buffer overflow in color_apply_icc_profile when RGB components have differing widths or heights; reject such inputs after cleaning up the LCMS transform handle and profiles.

0 tuxcare-amazonlinux2-els openjpeg-1.5.1-19.amzn2.tuxcare.els1.x86_64.rpm fdc36312d4ea8c05f3cd09801d435b1373e588b1d632677d041f215c47976eaf openjpeg-devel-1.5.1-19.amzn2.tuxcare.els1.x86_64.rpm 3e8c64384a38dc43b3f7371fe2e775f5019882fd88b3b53038c480c9877a5271 openjpeg-libs-1.5.1-19.amzn2.tuxcare.els1.i686.rpm e4d86d2f28b14f93c4c176ea3464350fd271afa1b3d52d42eb9b6d20c89eb584 openjpeg-libs-1.5.1-19.amzn2.tuxcare.els1.x86_64.rpm 48f51cc9b535f3a230b5273466930c955520132249177b768ed8c64177301fc1 CLSA-2026:1777984660 TuxCare License Agreement 0 - CVE-2020-27153: use-after-free in shared/att.c when bt_att_cancel is called from a disc_att_send_op callback during disconnect Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-27153: use-after-free in shared/att.c when bt_att_cancel is called from a disc_att_send_op callback during disconnect

0 tuxcare-amazonlinux2-els bluez-5.44-7.amzn2.0.4.tuxcare.els1.x86_64.rpm 9059bf149728cb4ceb96199e64da28b39fa586ee1af4a8b551744ecd9857c8e1 bluez-cups-5.44-7.amzn2.0.4.tuxcare.els1.x86_64.rpm 4e8025ab9b014a71ec9cdb0b8e58e9545bfb496262742ec8dc6eb05c13c9c4e3 bluez-hid2hci-5.44-7.amzn2.0.4.tuxcare.els1.x86_64.rpm 4728500c746432fb588f59c87495850162234d9cd8163e4fba4686a4d85d6f6d bluez-libs-5.44-7.amzn2.0.4.tuxcare.els1.i686.rpm e15962a050b3bd9336bbdb2b3a92ae8ed9a0c92bd0835903a41ad120c34d95ba bluez-libs-5.44-7.amzn2.0.4.tuxcare.els1.x86_64.rpm 5770e2400c2aecda8c3d0441104bcc64d4a7b2035a1f6eab490d7b2c632f0590 bluez-libs-devel-5.44-7.amzn2.0.4.tuxcare.els1.x86_64.rpm 492b7b9b804f837310097dbee3a42b24a9e7a51ff0623afb2ac432618eb25193 CLSA-2026:1777999798 TuxCare License Agreement 0 - Leapfrog amzn2 stock 0.26 (override Amazon's 6.9.10.97-1.amzn2.0.26 release) - Import CVE-2026-{33535/33536} from amzn2 stock 0.24 - Import CVE-2026-{33899/33908/40169/40310/40311/40312} from amzn2 stock 0.25 - Replace TuxCare CVE-2026-33905.patch with Amazon's two-part split CVE-2026-33905_{0/1}.patch, functionally equivalent, same upstream commits 140fc7b and 8d73954b - Skip CVE-2026-33901 patch shipped in amzn2 stock 0.25, since amzn2 stock 0.26 reverted it Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Leapfrog amzn2 stock 0.26 (override Amazon's 6.9.10.97-1.amzn2.0.26 release) - Import CVE-2026-{33535/33536} from amzn2 stock 0.24 - Import CVE-2026-{33899/33908/40169/40310/40311/40312} from amzn2 stock 0.25 - Replace TuxCare CVE-2026-33905.patch with Amazon's two-part split CVE-2026-33905_{0/1}.patch, functionally equivalent, same upstream commits 140fc7b and 8d73954b - Skip CVE-2026-33901 patch shipped in amzn2 stock 0.25, since amzn2 stock 0.26 reverted it

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.26.tuxcare.els5.i686.rpm ed30141d4f343befc6d41803e0e0c001b98b673c6b1df53bbe52c9130a3b5e2b ImageMagick-6.9.10.97-1.amzn2.0.26.tuxcare.els5.x86_64.rpm 0bcc4c9c8ba4672fc41ee6045d8167943e748ffb637929c688874956872cd669 ImageMagick-c++-6.9.10.97-1.amzn2.0.26.tuxcare.els5.i686.rpm 4e640121acc9ce46a0fec50b5dcf013b0313fdfaf4ba35fe8790ac72b8142b61 ImageMagick-c++-6.9.10.97-1.amzn2.0.26.tuxcare.els5.x86_64.rpm f6197c6a301edde7268efc92c8383e9570dc7ce4ac6b1c2a7c3cecb63afcf77d ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.26.tuxcare.els5.x86_64.rpm eb9510e9d7523ffd0195cc510e96b65997fbf0d86da129709c029b7f2004867a ImageMagick-devel-6.9.10.97-1.amzn2.0.26.tuxcare.els5.x86_64.rpm 699cf4e3bb1b9498c0b13a3cd2bf5dc7acd0588da3645a72ebe87dc59e8a84ef ImageMagick-doc-6.9.10.97-1.amzn2.0.26.tuxcare.els5.x86_64.rpm 35e0864f4b761d75eda4716dfb48398f515b38dba5dd258c39d1123a0e2bd201 ImageMagick-perl-6.9.10.97-1.amzn2.0.26.tuxcare.els5.x86_64.rpm fa828dfc0f0c074efd3c97ea8d69a050bb02e1b3001e34cf9bb63e932adb8419 CLSA-2026:1778051737 TuxCare License Agreement 0 - CVE-2025-32365: fix out-of-bounds read in JBIG2Bitmap::combine due to misplaced isOk check Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-32365: fix out-of-bounds read in JBIG2Bitmap::combine due to misplaced isOk check

0 tuxcare-amazonlinux2-els poppler-0.26.5-43.amzn2.1.6.tuxcare.els1.i686.rpm 15c5ec75ee4f861defc7e819ce6617777bf6d0819e024f50b8ec89d13366b8dc poppler-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm b420a46d8ad85405d5a5c6dd0f149cffe7329903d5f9058f99d952a1d37c2292 poppler-cpp-0.26.5-43.amzn2.1.6.tuxcare.els1.i686.rpm 860e278421902a9fa62e4f1f8b50cac7b373dfce1b300ac38fc937b6b5294209 poppler-cpp-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm 683469642d727528f37da14dfa18a9c6265a0f610023c8fce8db349a99c4cb18 poppler-cpp-devel-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm c2695cc15d0b712a37ebdde1035c63729487002b14dd3767cfa55bdc233f286d poppler-demos-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm 722666408621160c8ffeca683889aafbaaa7d0717d04c747e91b42e8faa18f24 poppler-devel-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm e7d8a555861af680ee72ef2156eddaf7225bdc7e3060ea13bed79dffda15f626 poppler-glib-0.26.5-43.amzn2.1.6.tuxcare.els1.i686.rpm 4f0038be7e58414f951221e56d7295a7cfd54b9b6e939052b063ec89c8dd72e0 poppler-glib-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm a16de24ee65d14856d6ba53b426165dfb1087bbc0ca6f14ad7c1b565828f984b poppler-glib-devel-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm a23a6e5e6924a7d06700962141809d57c9de90d337ef01d9377c24241db738ea poppler-qt-0.26.5-43.amzn2.1.6.tuxcare.els1.i686.rpm bf5fbdc4216c8c8d0e1a2b3271b015a36c9fabc02bca6edf837939c2898a313f poppler-qt-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm d0b78e239ead1db36cf77ce8605dc42ebbdbff0881b8fd6984316c25f6ebea1e poppler-qt-devel-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm b0b531ad67ec636202fa3d017ea45fce5daf4240f03edeecb136afa86d9e5e93 poppler-utils-0.26.5-43.amzn2.1.6.tuxcare.els1.x86_64.rpm af62bdf07b79cad91bf8f774bc990dcfdee230840d4aec468b6925e37d319345 CLSA-2026:1778068286 TuxCare License Agreement 0 - CVE-2026-26269: stack buffer overflow in netbeans special_keys() - CVE-2026-28417: OS command injection via crafted netrw URL - CVE-2026-28421: heap-buffer-overflow / SEGV in swap file recovery - CVE-2026-33412: command injection in glob() via shell newline - CVE-2026-39881: OS command injection in netbeans defineAnnoType Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-26269: stack buffer overflow in netbeans special_keys() - CVE-2026-28417: OS command injection via crafted netrw URL - CVE-2026-28421: heap-buffer-overflow / SEGV in swap file recovery - CVE-2026-33412: command injection in glob() via shell newline - CVE-2026-39881: OS command injection in netbeans defineAnnoType

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.5.tuxcare.els1.x86_64.rpm 49bc6f03039dc13c87526f1292c55ea625f18599d68522b4dcebddc3e264bc9a vim-common-9.0.2153-1.amzn2.0.5.tuxcare.els1.x86_64.rpm 9cb28ccfc49e0ef527705138aac6881d1d30331b1fe65a78ab61cc7e4a41268c vim-data-9.0.2153-1.amzn2.0.5.tuxcare.els1.noarch.rpm 41606cbde3a45c2f37be5a289a301b2d37e01466f4ea3f86d1127238a563039f vim-enhanced-9.0.2153-1.amzn2.0.5.tuxcare.els1.x86_64.rpm 35ed6c853b7bb8780b493d36ffaed4052460be3b2decd6deb6ceb1d9d5108dba vim-filesystem-9.0.2153-1.amzn2.0.5.tuxcare.els1.noarch.rpm 3f6218f19b07e041320f6c2cd47098ceedf9a41328b086febef0bacf66b7f6d4 vim-minimal-9.0.2153-1.amzn2.0.5.tuxcare.els1.x86_64.rpm 0bdcb44471c0ec0ffe67ccd5608896491bec03b7a760d1f15472e1f4627bdf3d xxd-9.0.2153-1.amzn2.0.5.tuxcare.els1.x86_64.rpm 4139b11b649fa46a69c7fe3babca629753cb7a8a289cf4691277a702f2e1dfb9 CLSA-2026:1778145193 TuxCare License Agreement 0 - CVE-2019-19906: fix off-by-one heap write in _sasl_add_string Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-19906: fix off-by-one heap write in _sasl_add_string

0 tuxcare-amazonlinux2-els cyrus-sasl-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm 2073c46ecd86fe10f2cf52982f7982fc8950ea9466aa8fdc4b608313bc84cc73 cyrus-sasl-devel-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm 82bf428421d32e6522a81fb0759b9a31e06b4c6924f3dbc13fb86d0fb150db60 cyrus-sasl-gs2-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm 1021ec7f632880e00c042efcaf8e1edad88f057dc7de54c2f69c8e607ea375b8 cyrus-sasl-gs2-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm a7108b9f3bc2e0fcde40a253c0b20958ae22ae601653c5df30e9bb4ae66afd67 cyrus-sasl-gssapi-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm 5039e8e4e07e6cc3a522a4a9287c650d7a5b1759fdb43e98c2fecd67a271bf44 cyrus-sasl-gssapi-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm e509a9446b21d9f030acf5de1c0a7e1a945dd75405fbbf4b74dea27388cdf0f1 cyrus-sasl-ldap-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm a47878fa042cb6e2f19ebbe8a09f914a158fb3473afd543e4e965c2d2ea54451 cyrus-sasl-ldap-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm ccaaf8ac194d57f2e99aa77256a805b476bc9b451503a15804563e81b126c9ec cyrus-sasl-lib-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm da7cda7f145e781336ee3e342ed283af9dacd21131d930eefaa4c4162002a158 cyrus-sasl-lib-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm 39bb45ed8c0298b5c9b06ce8a45c030eecfd6a545408114264fc6ffe67e99ff2 cyrus-sasl-md5-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm 182be664d55caa6777ca605a47e5d313afea1e8aea7ab731cd66a5522fb40d1e cyrus-sasl-md5-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm 69aa145760c5d798e75b9d7d9d1ac3bd5855972fc04680fb22e1f6b919c515c1 cyrus-sasl-ntlm-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm ffeb21bbeb67fbb40d28fefae4eb9497fc3b0a2d259ee140eb0e22f901d82955 cyrus-sasl-ntlm-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm b16bc9921256bdc4855886305e4f5d0ccac16fa5dcd91ccc865135264adcb50a cyrus-sasl-plain-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm 11b13ee23106528ac0a0163a87cc213531a391db10fcbcb684ad7e8b56199b93 cyrus-sasl-plain-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm 4658008220476af1ad8d62c2e5cbdce484af40350190928336c7dcca5c0d2829 cyrus-sasl-scram-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm e18f946216762ec38cda3ae4ddf65933572be9959a900349e40b747d501dd8d3 cyrus-sasl-scram-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm 641dcbfd77660b8c586133086f35777b304e8913d4bfc30f86691bb69abaec78 cyrus-sasl-sql-2.1.26-24.amzn2.0.1.tuxcare.els1.i686.rpm b9236afc3fcf8514b5f37e059091e4704a19ebc78e533719273b52b173b47289 cyrus-sasl-sql-2.1.26-24.amzn2.0.1.tuxcare.els1.x86_64.rpm ffbdc8a8affe3d1e043576298b26c063a2409238ffbca4f8e37997c9988de0cc CLSA-2026:1778145611 TuxCare License Agreement 0 - CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check

0 tuxcare-amazonlinux2-els python-2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64.rpm efb59060848dd02be7be4e309c57830431a843f4b90c7bd12d6ea1bafee0c5da python-debug-2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64.rpm fa5ea4f2e4738d4bbcb9750849d9ea2b0b3346a49310f351c218c3e2a820e3b2 python-devel-2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64.rpm f484119d1b2d95f2d4505eb77e6ca62eafcb19eca733487231c2ca2a5511ffcc python-libs-2.7.18-1.amzn2.0.18.tuxcare.els3.i686.rpm d24a9f031343eef05b0062013088893f083ca3a7acdce1078b801cbb98e0409d python-libs-2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64.rpm ebc7c086615922c6502b2dac4653bcb1c04ee26b49716f8b212e236996798fdd python-test-2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64.rpm 48323bdf8dde6d62ebca57bfb1c5afe69bf9225966fc21a89f5bea93537db12f python-tools-2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64.rpm cb52d9d8d71b050a494f490e0db935773bf429160ef35255c89b02f78b6fcccd tkinter-2.7.18-1.amzn2.0.18.tuxcare.els3.x86_64.rpm 975453b6b01c3ef94ddcb749108a2cfa2d73f3f5f78bb6bc36a3ab66ebd5c800 CLSA-2026:1778171800 TuxCare License Agreement 0 - CVE-2026-4878: TOCTOU race in cap_set_file() allowed an attacker to swap the target with a symlink between path lookup and xattr write; perform xattr writes via an O_NOFOLLOW/O_PATH file descriptor instead of the user-supplied path Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4878: TOCTOU race in cap_set_file() allowed an attacker to swap the target with a symlink between path lookup and xattr write; perform xattr writes via an O_NOFOLLOW/O_PATH file descriptor instead of the user-supplied path

0 tuxcare-amazonlinux2-els libcap-2.54-1.amzn2.0.3.tuxcare.els1.i686.rpm 723888bcc6c7c0d63db74d9416eaff0fe81e6e9cd2170e49e0f44b2fe51cd88f libcap-2.54-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 42ca616d2413c0f8ef4e5300333f0bf27798cf7c26ff913ae7026f0776b94aeb libcap-devel-2.54-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 880a18349f295b769094fa5045f4654619ac53577282f955d9b22a0bc20a5ed9 libcap-static-2.54-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 735debd3c8c5a852b6fde0d3ea954b950440fd2fb3537d2fc9191cb008f4668f CLSA-2026:1778171991 TuxCare License Agreement 0 - CVE-2024-45802: disable ESI processor to prevent DoS via input validation and resource lifetime bugs in ESI handling Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-45802: disable ESI processor to prevent DoS via input validation and resource lifetime bugs in ESI handling

0 tuxcare-amazonlinux2-els squid-3.5.20-17.amzn2.7.26.tuxcare.els1.x86_64.rpm 2f686fadb750b0ffe877d68b8011cf593b3c9e8ae4fe3072f6affbde5bb31c99 squid-migration-script-3.5.20-17.amzn2.7.26.tuxcare.els1.x86_64.rpm 07061811b37d13d1584f2e62e5e92124062e7573b85ded17dd6d167e57d9a90e squid-sysvinit-3.5.20-17.amzn2.7.26.tuxcare.els1.x86_64.rpm 3ecf2498551b4982ccdd7f8351823c194e5e51a96cac32cc2af7e0ac67b369a0 CLSA-2026:1778174338 TuxCare License Agreement 0 - CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request

0 tuxcare-amazonlinux2-els libsoup-2.56.0-6.amzn2.0.7.tuxcare.els1.i686.rpm 86d44e58dbc44adf5461f541e19c1e7104b4d62bd9308320a36c5ea3d4d089a5 libsoup-2.56.0-6.amzn2.0.7.tuxcare.els1.x86_64.rpm d4257b33173c95e81d1113a8df75912c47db3565a7ce65fd90d5956a0c6ec847 libsoup-devel-2.56.0-6.amzn2.0.7.tuxcare.els1.x86_64.rpm 3a9cbffcaf82ebb2add51823f0eb410cfc66c776c22f37dc1dc7fd5aa4295481 CLSA-2026:1778218859 TuxCare License Agreement 0 - CVE-2021-3618: fix HTTP/TLS cross-protocol confusion (ALPACA), backport from 8.17.1 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-3618: fix HTTP/TLS cross-protocol confusion (ALPACA), backport from 8.17.1

0 tuxcare-amazonlinux2-els sendmail-8.14.7-5.amzn2.0.1.tuxcare.els1.x86_64.rpm 0039f3b5a8a5707234bf2b04655d1f28ed2a9e77974c7ba5cbe623d46ae1b751 sendmail-cf-8.14.7-5.amzn2.0.1.tuxcare.els1.noarch.rpm 20236ef5ad64945af5ba50e4911e604743be4f9662f90dcc404c16d7bc624dcf sendmail-devel-8.14.7-5.amzn2.0.1.tuxcare.els1.x86_64.rpm ea65c7b31471284894c5169e50481f49cc007f8248821ba6a12c226d59bd343a sendmail-doc-8.14.7-5.amzn2.0.1.tuxcare.els1.noarch.rpm cdb5680ba0edae13aeafd04abf2525dc943763a6686e2f671cfabfb099f83893 sendmail-milter-8.14.7-5.amzn2.0.1.tuxcare.els1.i686.rpm 3eabe19ddf1a91be2d5dc214b723d956b2f9c08cebed799129aae863d4818284 sendmail-milter-8.14.7-5.amzn2.0.1.tuxcare.els1.x86_64.rpm d6f3bd75aaf4314487264f9ab6bd65dc08912028bda84236291ca34521fa7d83 sendmail-sysvinit-8.14.7-5.amzn2.0.1.tuxcare.els1.noarch.rpm cd03f33594b7551ced73a23daf653de2443adaa6d07224f11d0388befc825b96 CLSA-2026:1778219363 TuxCare License Agreement 0 - Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist via .0/.1 leapfrog over stock 1.900.1-33.amzn2.0.1) - Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch) - Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference in JP2 component reference handling) - Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference in CDEF box channel reference handling) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Add Amazon Linux 2 ELS support (mirrors centos7els branch with .amzn2 dist via .0/.1 leapfrog over stock 1.900.1-33.amzn2.0.1) - Import CVE-2020-27828 patch from amzn2 stock SRPM (out-of-bounds write in jpc encoder; jasper-2.0.14-CVE-2020-27828.patch) - Import CVE-2021-3443 patch from amzn2 stock SRPM (NULL pointer dereference in JP2 component reference handling) - Import CVE-2021-3467 patch from amzn2 stock SRPM (NULL pointer dereference in CDEF box channel reference handling)

0 tuxcare-amazonlinux2-els jasper-1.900.1-33.amzn2.0.1.tuxcare.els6.x86_64.rpm bad3aca027082006e525783314b37d2af7f22d399eb187654d6eeb846908d0a3 jasper-devel-1.900.1-33.amzn2.0.1.tuxcare.els6.x86_64.rpm 7539d12013f4ac825953897c084afa8fbed3c62939c49cb4b56a98bb25885012 jasper-libs-1.900.1-33.amzn2.0.1.tuxcare.els6.i686.rpm 3e6e43b40a8805168ebcd780b5eb43917a0efe762ff95fe0845b5dcb7376d3da jasper-libs-1.900.1-33.amzn2.0.1.tuxcare.els6.x86_64.rpm ba797dd0ec660e0345258c07d04097e74812cff1a74eed79883aa5ed5ab797f7 jasper-utils-1.900.1-33.amzn2.0.1.tuxcare.els6.x86_64.rpm dc0744a340d4c9a581591b905b99e05e62540da315ae5bd4bc3ea7aa7a2cb907 CLSA-2026:1778255025 TuxCare License Agreement 0 - CVE-2026-7598: integer overflow in userauth_password() and userauth_list() username_len allows out-of-bounds memory write - Skip mansyntax.sh test Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7598: integer overflow in userauth_password() and userauth_list() username_len allows out-of-bounds memory write - Skip mansyntax.sh test

0 tuxcare-amazonlinux2-els libssh2-1.4.3-12.amzn2.2.6.tuxcare.els1.i686.rpm eaff535dac24d8028b1c2f9f8f5d59ca8156bd16ca5730eb90be467cef8ca543 libssh2-1.4.3-12.amzn2.2.6.tuxcare.els1.x86_64.rpm 30f89fe2067cfa407cd00329ae1cf03a011fa0b108dd4d70e27798f9f03b2a40 libssh2-devel-1.4.3-12.amzn2.2.6.tuxcare.els1.x86_64.rpm a5077fff47ddb8869104b419b97c5b48a2806c2b0076f86a7ded63af2be3f317 libssh2-docs-1.4.3-12.amzn2.2.6.tuxcare.els1.noarch.rpm e732c8dac29b5b6d1f14a418bed6c0f0ce7298b7267110129b433ef3f0596934 CLSA-2026:1778269029 TuxCare License Agreement 0 - CVE-2023-52355: cap libtiff allocations via TIFFOpenOptionsSetMaxSingleMemAlloc and add -M memory-limit option to tiff2ps, tiffcp, tiffinfo, and tiffsplit so that crafted TIFF files can no longer trigger out-of-memory denial of service Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-52355: cap libtiff allocations via TIFFOpenOptionsSetMaxSingleMemAlloc and add -M memory-limit option to tiff2ps, tiffcp, tiffinfo, and tiffsplit so that crafted TIFF files can no longer trigger out-of-memory denial of service

0 tuxcare-amazonlinux2-els libtiff-4.0.3-35.amzn2.0.30.tuxcare.els1.i686.rpm 94beeee1d8246418c4f86693007414d9e438428eef2f8de2598cb5cb4426c60a libtiff-4.0.3-35.amzn2.0.30.tuxcare.els1.x86_64.rpm e50235f1a2243b2a22c9ec59989ffede9186fc5d4fa6a0c5ea3c86295cdac444 libtiff-devel-4.0.3-35.amzn2.0.30.tuxcare.els1.x86_64.rpm ff501d2d553e17e7432003e5a98f70322ca7d868567d77824a9123406df6c634 libtiff-static-4.0.3-35.amzn2.0.30.tuxcare.els1.x86_64.rpm e788d2cacec82db7aa73b7d48103754f778a165bcc1823932aa40c20537f6d06 libtiff-tools-4.0.3-35.amzn2.0.30.tuxcare.els1.x86_64.rpm c36bde51178af3f395fd4f1e83e84eea4b7b2856973246381f3db5520af9c5e5 CLSA-2026:1778275511 TuxCare License Agreement 0 - CVE-2025-0167: .netrc parser leaks 'default' credentials across redirects because parsenetrc() returns NETRC_SUCCESS for a 'default' block that carries no login/password, letting the caller mark the connection as netrc-sourced and reuse stale credentials on follow-ups - Fix internal testing on i686 Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0167: .netrc parser leaks 'default' credentials across redirects because parsenetrc() returns NETRC_SUCCESS for a 'default' block that carries no login/password, letting the caller mark the connection as netrc-sourced and reuse stale credentials on follow-ups - Fix internal testing on i686

0 tuxcare-amazonlinux2-els curl-8.3.0-1.amzn2.0.12.tuxcare.els1.x86_64.rpm e665da84a0cf4dee34cc668df65c3f4eeee1aa05d5781e12cc63616d8a570d33 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els1.i686.rpm cab30dcbd86c9f167eae9f9a85d2e717bdac01ded6d624aefb653aad5db8ae77 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els1.x86_64.rpm 550809e6b5a17e6213e105ef66f2a9e4ebf90ce264245c7a0f94c73e1919a6a0 libcurl-devel-8.3.0-1.amzn2.0.12.tuxcare.els1.x86_64.rpm b37547963a5af9709afde9c9e2d4ee05de97c28a0e0cb1747174bd3401f24065 CLSA-2026:1778488111 TuxCare License Agreement 0 - CVE-2022-0934: Fix write-after-free in DHCPv6 relay handling that could be triggered by a crafted packet, leading to denial of service - rfc3315: fix bad reply to DHCPCONFIRM messages (wrong message type) - rfc3315: fix integer underflow and heap overflow in log6_opts STATUS_CODE - rfc3315: fix DHCPv6 "use multicast" response which previously failed Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-0934: Fix write-after-free in DHCPv6 relay handling that could be triggered by a crafted packet, leading to denial of service - rfc3315: fix bad reply to DHCPCONFIRM messages (wrong message type) - rfc3315: fix integer underflow and heap overflow in log6_opts STATUS_CODE - rfc3315: fix DHCPv6 "use multicast" response which previously failed

0 tuxcare-amazonlinux2-els dnsmasq-2.76-17.amzn2.1.5.3.tuxcare.els3.x86_64.rpm a9c31de9363997b97e1cc7216a4b383128637c0f99ea02080e9dd93625120acf dnsmasq-utils-2.76-17.amzn2.1.5.3.tuxcare.els3.x86_64.rpm 11a0308561a5c22f3ccd82c21b486f8c93209adc5495b417aa481d9ec06c61f8 CLSA-2026:1778613830 TuxCare License Agreement 0 - CVE-2018-14651: server: don't allow '/' in basename Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-14651: server: don't allow '/' in basename

0 tuxcare-amazonlinux2-els glusterfs-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 124b71a805de97fa9e9a6a591d97f58a7410ceed101afce2cae564e8e4d82fcb glusterfs-api-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 376012949dd7bb5165930587483fa24af87c14fdd8fdfd26e4ec0fee8db50e14 glusterfs-api-devel-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 1946cdcf4674936c6756489a66ad547a29b361b00310b1ac9b23ecfd01099330 glusterfs-cli-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 5b86629015ff6e8c852bc0ab89907192293f63f117a475699889f8b004d2708a glusterfs-client-xlators-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm d43a407a6999eaa34732f54631388d89e8990720757a56c8cbfe52ef999bdd22 glusterfs-devel-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 346a6eaa3b8f6e705677776ce3244e24b54e0b07754034bf34159e8469a91a47 glusterfs-fuse-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 065a269b255299d9f66b380791e65afd474230c8626729f64d716e60a58d42fd glusterfs-libs-3.12.2-18.amzn2.0.2.tuxcare.els1.i686.rpm aa6dff16b74f3ae4bce1ca038e1a025a6398b1c3a59da1998d31c8befee7de76 glusterfs-libs-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 251bfe89975c6c06fbe5e261f957fc96af5692f49575026cb833a611de1e2854 glusterfs-rdma-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 737155b4941436c03dcac13277224e4e7bbfda473f87a7efc3795d10257ef53f python2-gluster-3.12.2-18.amzn2.0.2.tuxcare.els1.x86_64.rpm 175f239628ea6df4e22ca8c11f5da6d7257b8731c8a3e2f1739d0bbbd19fe475 CLSA-2026:1778663481 TuxCare License Agreement 0 - CVE-2019-1010180: fix bfd library out-of-bounds read on ELF section size larger than file size Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-1010180: fix bfd library out-of-bounds read on ELF section size larger than file size

0 tuxcare-amazonlinux2-els gdb-8.0.1-36.amzn2.0.2.tuxcare.els1.x86_64.rpm f7e83624dd32cede85fc0b2bbfcc1346904595214a46eae177f404b2b90d8e0a gdb-doc-8.0.1-36.amzn2.0.2.tuxcare.els1.noarch.rpm 3b437bf55972d5a6d8330bbaaacfe18921a74452827675c83749bb1694391770 gdb-gdbserver-8.0.1-36.amzn2.0.2.tuxcare.els1.x86_64.rpm d0bf207277f38e721b383f331faa4e7a2a2b4be0a3e6acdf506712e1f557faed CLSA-2026:1778663877 TuxCare License Agreement 0 - CVE-2026-6735: escape proc->request_uri before emitting it on the PHP-FPM status page to block stored XSS via crafted request URIs Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6735: escape proc->request_uri before emitting it on the PHP-FPM status page to block stored XSS via crafted request URIs

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 5b5453ce26608bd549394fe7a7fd17ba6824fd1e3c4e4380609b501347f55660 php-bcmath-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 504c3f779379a8cac1c278e07ef6b9e6657b32bb4b626ca000e9a274162144d4 php-cli-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm a64464fd68e3549d3a3dc31a3a66111c4c3deb808e424b0dac82765e800468fc php-common-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm f1d342bb7ab9b2ace9ce7e4dfd592431d17e4e18ad067c20de5e3050b6a5281a php-dba-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 890c79d72611404483de5d74a1c72924c9f001f6064095f9a77a064357602fb5 php-devel-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm ff99dc43fc04452297f083c5f28418d2995e02a970d282fe2aca0507223775ac php-embedded-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 83a60c240095f86840e99b160f1b63c57fa2d4dae469606ea5cb6708414e4970 php-enchant-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 6cfc4b14a2af85fbb9223a4e0e8c2ccf154a92e6456547a06f899092a852ef0b php-fpm-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 0254e6a0db2ca3906fa38010b3be3ddd8db31e0f59c142e0941950b2128256f9 php-gd-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 2f1847ece03247a4c2a28939a4cb7e9636ddf3982a6688f1eda2726ccf5ad143 php-intl-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 4b91ada4cb3aa413b8111d732eb84c9dd3b3a7643fd50a1f2f7c72a9112a7e89 php-ldap-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm d131b4c8673a88bfe76db7e541d1ec6ca3b73c4041b962d0aa5f3e48e71ca316 php-mbstring-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm afadbd3fa2ce32e4aaeb5782e290928274b332a8150d53c30181166d4b3be803 php-mysqlnd-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm cb1d9f830481dbb4bb3ba25c0627e2ea3eee2f496b259ad67290b94b89de09d9 php-odbc-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm bce0b409bfd5e122b7eb646a563fdafb1e414e2a824ae3fd1f2b5056bb068ba4 php-pdo-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 96af4fbd9e49d03ef9e18b9a7aab9f1a5847f80c0b0538d8fee96131387a0ba4 php-pgsql-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 157e1660ae7805a6ef3e0fee5da3188cca7526f42e8ca3131e2691aa1880f3d4 php-process-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 328a30ddda5fa7e9c9de35b7d4f54aefc18b1d9052020d55c4e788aa4c49b0b9 php-pspell-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 7ffe0946cc47e6cc7fd1db7a74bca21325b0d389a952227d18f4b6f4776cb5e3 php-recode-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 8568fdabe2ee4e29c6fdec85e1c253605cbb58839ea3ef970473faa78a02b517 php-snmp-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 122bddb5c55a4cc27fab3dc1a3c8c4a82439306c630f7e878bade1bd634819e2 php-soap-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm b9301f3884e30d46014965bd7e6da3b98f420e0480067cbf17cde351e2729db9 php-xml-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 6ef637141ada9f3d38c221e11acd4b1b4c2a9b168c80c6678538c74aee15eb02 php-xmlrpc-5.4.16-46.amzn2.0.6.tuxcare.els5.x86_64.rpm 58af24464c60d4f4f9192c0f33d95108899408e01b6a3e28ca9fc6cf17303b2a CLSA-2026:1778784326 TuxCare License Agreement 0 - CVE-2018-13410: off-by-one in malloc size for unzip command buffer used by -T/-TT (Info-ZIP Zip 3.0) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-13410: off-by-one in malloc size for unzip command buffer used by -T/-TT (Info-ZIP Zip 3.0)

0 tuxcare-amazonlinux2-els zip-3.0-11.amzn2.0.2.tuxcare.els1.x86_64.rpm eac51184d77e4a0e1b64203f67ecdd867ca3bb6a9c62b8471fad34ad5e46e8dd CLSA-2026:1778785352 TuxCare License Agreement 0 - CVE-2026-34059: fix ajp_parse_data message length check - CVE-2026-29169: fix mod_dav_lock NULL deref - CVE-2026-33006: fix mod_auth_digest timing attack - CVE-2026-24072: restrict ap_expr in htaccess - CVE-2026-33523: scan outgoing status line for newlines and controls - CVE-2026-33857: fix length checks in AJP msg_get functions - CVE-2026-34032: fix ajp_msg_get_string buffer checks - CVE-2026-33007: validate URL earlier in mod_authn_socache - CVE-2026-28780: fix ajp_msg_check_header boundary check (companion to CVE-2026-33857) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34059: fix ajp_parse_data message length check - CVE-2026-29169: fix mod_dav_lock NULL deref - CVE-2026-33006: fix mod_auth_digest timing attack - CVE-2026-24072: restrict ap_expr in htaccess - CVE-2026-33523: scan outgoing status line for newlines and controls - CVE-2026-33857: fix length checks in AJP msg_get functions - CVE-2026-34032: fix ajp_msg_get_string buffer checks - CVE-2026-33007: validate URL earlier in mod_authn_socache - CVE-2026-28780: fix ajp_msg_check_header boundary check (companion to CVE-2026-33857)

0 tuxcare-amazonlinux2-els httpd-2.4.66-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 53df017886958ba084052ab2cd15826999cfd44eb4fb309c8aed7431b97a7dc0 httpd-devel-2.4.66-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 02a832b05609cd4c30444fb2717d3a12e7470ba434affb182f4c58462fd66fdb httpd-filesystem-2.4.66-1.amzn2.0.1.tuxcare.els1.noarch.rpm c171e0f5286ce15a16fcef6a414ce68e2ce7498fc4fd23b8683a6f86baf54ac9 httpd-manual-2.4.66-1.amzn2.0.1.tuxcare.els1.noarch.rpm abe4996c6f2c2fb7a62b70ecf3b8664089ea0ba519aca628a8911d3966b68d2c httpd-tools-2.4.66-1.amzn2.0.1.tuxcare.els1.x86_64.rpm a81bf9b8eb3cee43689b3701a84b41eae92ff118cbbba1ab492ed8b8bacc9828 mod_ldap-2.4.66-1.amzn2.0.1.tuxcare.els1.x86_64.rpm e1d56922f373780d93533e5ceff4b9e26b3a169c850601bb8c42a6099f55788d mod_md-2.4.66-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 57a0742266c4a1c6ceb08f35a379477c9e0df7a6e4611fd6531b9fa73a98ff18 mod_proxy_html-2.4.66-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 768626459c94cc4af18d89d6f914e9e9598eb056a2e761d9cc2c85e6e6fb62d8 mod_session-2.4.66-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 25f3d51ccb6d693d8ecb1b96adb5e59b4ec96b6a490f90725e06f19676ae7676 mod_ssl-2.4.66-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 18cfc33b43a1bb21eef938c676cf82d716c0cf2112a97c623aeabad6e25b9506 CLSA-2026:1778796429 TuxCare License Agreement 0 - CVE-2020-35492: stack buffer overflow in _inplace_src_spans() in src/cairo-image-compositor.c via a crafted input file causing out-of-bounds write through the r->_buf stack mask pointer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-35492: stack buffer overflow in _inplace_src_spans() in src/cairo-image-compositor.c via a crafted input file causing out-of-bounds write through the r->_buf stack mask pointer

0 tuxcare-amazonlinux2-els cairo-1.15.12-4.amzn2.0.1.tuxcare.els1.i686.rpm c3e6d5d051ba72e07cf60c8d404ef49d4828b8be2ff78138d6b6c43cb85e2907 cairo-1.15.12-4.amzn2.0.1.tuxcare.els1.x86_64.rpm 9a8b08b5369d63b880cab72e191dca91b0cc956bc7a41d6034c76cc9b31cadfe cairo-devel-1.15.12-4.amzn2.0.1.tuxcare.els1.x86_64.rpm 74d6720b9247ea8e911cc62ec04e58794742cb87b84369500d53f7ccb2f188c8 cairo-gobject-1.15.12-4.amzn2.0.1.tuxcare.els1.i686.rpm 9d81e13a6e1ed32374fbe8d638b1da35fc50a76f2d4104d09e7415f112235e57 cairo-gobject-1.15.12-4.amzn2.0.1.tuxcare.els1.x86_64.rpm 6f4f5d47022d69a15eef2223a1880a0259f07cb624cde1e889cbedf028755d92 cairo-gobject-devel-1.15.12-4.amzn2.0.1.tuxcare.els1.x86_64.rpm 9cdad0f2305047a643603856ad52d632658cf794a5d7dd7d52c0d185563df1cd cairo-tools-1.15.12-4.amzn2.0.1.tuxcare.els1.x86_64.rpm cbd4429d32758167d7e8cbb52062c6ad7129b913163086da7f45a0bc87b47787 CLSA-2026:1778888181 TuxCare License Agreement 0 - CVE-2026-43964: buffer over-read in dsn_split() due to off-by-one cursor advance when an enhanced status code is not followed by additional text Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43964: buffer over-read in dsn_split() due to off-by-one cursor advance when an enhanced status code is not followed by additional text

0 tuxcare-amazonlinux2-els postfix-2.10.1-6.amzn2.0.4.tuxcare.els1.x86_64.rpm e688080b34a6a61fddc67269c1c6107d9a20b0f06b14c8c0760699f4aaa303e9 postfix-perl-scripts-2.10.1-6.amzn2.0.4.tuxcare.els1.x86_64.rpm 7672452b2986210bb0fc27b53400bab7c0c3835cc6c4412748dd247136c89d08 postfix-sysvinit-2.10.1-6.amzn2.0.4.tuxcare.els1.noarch.rpm ad43b425a2d3f0d5d269c951bdb1c124d26538a0d6f12bb1637b8d4cbdeb1513 CLSA-2026:1778935621 TuxCare License Agreement 0 - CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-32775: fix buffer overwrite via integer underflow in MakerNote entry value handling - CVE-2026-40385: fix unsigned 32-bit integer overflow in Nikon MakerNote handling - CVE-2026-40386: fix integer underflow in Fuji/Olympus MakerNote size checks

0 tuxcare-amazonlinux2-els libexif-0.6.22-2.amzn2.tuxcare.els1.i686.rpm 9aab99885d4f10bd27a9adabda3fac6859e0e17cbfdee13161a897cd88f41953 libexif-0.6.22-2.amzn2.tuxcare.els1.x86_64.rpm f25f7274fe316a8a3d285cb5a2b83dc0f40b0989c094bcfba9bd5cb2235a0c9f libexif-devel-0.6.22-2.amzn2.tuxcare.els1.x86_64.rpm 5000309deade306a778b78111ab4d4c10a8b92ce339253bb0a136cf3f64f065a libexif-doc-0.6.22-2.amzn2.tuxcare.els1.x86_64.rpm fe2a95e7ffffe1b67fc8cdbd0bb4fc259a3a46a0074cf08addd35501acff58f0 CLSA-2026:1778937004 TuxCare License Agreement 0 - Extend platform coverage to amazonlinux2els - Include amzn2 test-build patches: Fix-warnings-in-test_flacpicture.patch, taglib-1.8-fix-cxx11.patch (test suite only, no runtime change) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Extend platform coverage to amazonlinux2els - Include amzn2 test-build patches: Fix-warnings-in-test_flacpicture.patch, taglib-1.8-fix-cxx11.patch (test suite only, no runtime change)

0 tuxcare-amazonlinux2-els taglib-1.8-8.20130218git.amzn2.tuxcare.els2.i686.rpm c50f091aed9f34c74228be4ae09691c8827deef305889518fbd4162a4205dd91 taglib-1.8-8.20130218git.amzn2.tuxcare.els2.x86_64.rpm 7036be987d18f8425d649a92e61e9b12b9f38202452751e7f8f15cb5c40130f1 taglib-devel-1.8-8.20130218git.amzn2.tuxcare.els2.x86_64.rpm 778b0855659a5135bb1e40e0ffe0f7db3ac0a8181030257772b0d004d1599815 taglib-doc-1.8-8.20130218git.amzn2.tuxcare.els2.noarch.rpm 3332b3a7155f7446e2d098534d9e2a12479d33059c3eceb27b2db6c09cfc27d7 CLSA-2026:1778938368 TuxCare License Agreement 0 - CVE-2020-24330: drop root gid in tcsd before dropping uid - CVE-2020-24331: require tcsd.conf as root:tss with mode 0640 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-24330: drop root gid in tcsd before dropping uid - CVE-2020-24331: require tcsd.conf as root:tss with mode 0640

0 tuxcare-amazonlinux2-els trousers-0.3.14-2.amzn2.0.2.tuxcare.els1.i686.rpm 54306ab693832422e7f3132e1538c332dd73d01abdd354397fac0587cea0173a trousers-0.3.14-2.amzn2.0.2.tuxcare.els1.x86_64.rpm e21a4e4fe2d52ab32ac77f1c3629368eeeecbf27f097da4ed0e7c25dcc4546da trousers-devel-0.3.14-2.amzn2.0.2.tuxcare.els1.x86_64.rpm c2d66fe59a4938fe398988f0fa70438d0a52ce4ddf4c39b68ac98939a0e55752 trousers-static-0.3.14-2.amzn2.0.2.tuxcare.els1.x86_64.rpm 68734c1d4deb212e63150e956f67b24a5aedee897bbd66f2b588195824b17c8f CLSA-2026:1779130382 TuxCare License Agreement 0 - CVE-2026-6276: when a libcurl easy handle is reused, a stale custom Host: cookiehost survives into the next request and leaks cookies meant for the spoofed host to the real peer; Curl_http_host() now Curl_safefree()s aptr->cookiehost on every entry under the existing !CURL_DISABLE_COOKIES guard Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6276: when a libcurl easy handle is reused, a stale custom Host: cookiehost survives into the next request and leaks cookies meant for the spoofed host to the real peer; Curl_http_host() now Curl_safefree()s aptr->cookiehost on every entry under the existing !CURL_DISABLE_COOKIES guard

0 tuxcare-amazonlinux2-els curl-8.3.0-1.amzn2.0.12.tuxcare.els2.x86_64.rpm 4513d751c7c1ac4d0a8b04a5b06bbc21c123dcd6413d4a51cad67a5a4f8fb042 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els2.i686.rpm 264678e928ccb3f3ef54aa127d79425e8daf57f4854d629afff13f6f0e48f227 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els2.x86_64.rpm fc51dfdac6328372a42729f25fcacc61306303355d8990a31cf69d3a21f29d7e libcurl-devel-8.3.0-1.amzn2.0.12.tuxcare.els2.x86_64.rpm 0003ded0a7142f3447b42dadc1f2eeecef405d631b99580df916b672857348d7 CLSA-2026:1778489206 TuxCare License Agreement 0 - Rebase onto Amazon Linux 2 7.4p1-22.amzn2.0.12 (ALAS2-2026-3262 / CVE-2026-35385) so the TuxCare ELS package is not superseded by the upstream security update - CVE-2026-35414: rewrite match_principals_option() to split the authorized_keys principals="" list with strsep() and exact-match each entry against cert->principals[i], so that certificate principals containing comma characters are matched correctly Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto Amazon Linux 2 7.4p1-22.amzn2.0.12 (ALAS2-2026-3262 / CVE-2026-35385) so the TuxCare ELS package is not superseded by the upstream security update - CVE-2026-35414: rewrite match_principals_option() to split the authorized_keys principals="" list with strsep() and exact-match each entry against cert->principals[i], so that certificate principals containing comma characters are matched correctly

0 tuxcare-amazonlinux2-els openssh-7.4p1-22.amzn2.0.12.tuxcare.els1.x86_64.rpm b267ee01afdf103d3593f8a3b22d29cb8bd63de0fbd5c40f7004cf5269603f41 openssh-askpass-7.4p1-22.amzn2.0.12.tuxcare.els1.x86_64.rpm 168e612815a959564fc0db70c84ac660f483f0e3de9ebc46f74140a35e6e9ee3 openssh-cavs-7.4p1-22.amzn2.0.12.tuxcare.els1.x86_64.rpm f211dab5f052bad9751cdeea97b4f1113705a21f6dfe19ab556fb876b909e58e openssh-clients-7.4p1-22.amzn2.0.12.tuxcare.els1.x86_64.rpm dbdfa99021e5d053f6e8cfab1227fdefc6b56d75fa06a8c181986f38b0d909e0 openssh-keycat-7.4p1-22.amzn2.0.12.tuxcare.els1.x86_64.rpm 26b30e69efbc55c5ade5cbc0a5451d9c961fc9e2737b64c89499572270a89f42 openssh-ldap-7.4p1-22.amzn2.0.12.tuxcare.els1.x86_64.rpm f5ae62fb33461dfa5eb37c20e151b5c64b71a68ea42e5dcc3c2f0b2595126815 openssh-server-7.4p1-22.amzn2.0.12.tuxcare.els1.x86_64.rpm b22908aeea59a2bda1bb9fb614fc3c04b6883d92ae31e483e1bf143a4d6cef88 openssh-server-sysvinit-7.4p1-22.amzn2.0.12.tuxcare.els1.x86_64.rpm a0d3f9b7a7c390180c496bd63a05203fa10ce69455a2e152532fb74bc8e2d615 pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.12.tuxcare.els1.x86_64.rpm 30c5eb788ac9dd8cbd369e0ce938590ccb9502f3c375291a48025245696d2da7 CLSA-2026:1779273053 TuxCare License Agreement 0 - CVE-2026-4890: fix NSEC bitmap parsing infinite loop in DNSSEC validation - CVE-2026-4891: verify rdlen field in RRSIG packets - CVE-2026-4892: fix buffer overflow in helper.c with large DHCPv6 CLIDs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4890: fix NSEC bitmap parsing infinite loop in DNSSEC validation - CVE-2026-4891: verify rdlen field in RRSIG packets - CVE-2026-4892: fix buffer overflow in helper.c with large DHCPv6 CLIDs

0 tuxcare-amazonlinux2-els dnsmasq-2.76-17.amzn2.1.5.3.tuxcare.els4.x86_64.rpm 97b08b1069b5e4da5ba6d9bbfd0928d9a519de0f8db5c877bdec4b3d253f8515 dnsmasq-utils-2.76-17.amzn2.1.5.3.tuxcare.els4.x86_64.rpm 683753cb05a457db7e5024aeacb3037f4c2871e69176ff85940e69a63634b586 CLSA-2026:1779279373 TuxCare License Agreement 0 - CVE-2026-25959: lock cache when providing data in xf_cliprdr Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25959: lock cache when providing data in xf_cliprdr

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.11.tuxcare.els1.x86_64.rpm d11213e4cf17d5de386f7322bfc854c9fbc7cd8908465450d440a281e3ba3c04 freerdp-devel-2.11.7-1.amzn2.0.11.tuxcare.els1.x86_64.rpm 95c77f27dcb0014b03a8da21913edd9b59ded2df5033206d08353506355fb5bb freerdp-libs-2.11.7-1.amzn2.0.11.tuxcare.els1.i686.rpm 8c3c369f4d2abf66913e8c14b57d69c3f3996a5a2d4942d101f3367521a03f33 freerdp-libs-2.11.7-1.amzn2.0.11.tuxcare.els1.x86_64.rpm 5700e7c7eeb4c411d24cc6a320cce5909e63ddb7b274eb08f81b4ee0923148e4 libwinpr-2.11.7-1.amzn2.0.11.tuxcare.els1.i686.rpm a5658fb9bf788c99c010405eba08f0e5d822aece9df859341ceb725fcf10e87e libwinpr-2.11.7-1.amzn2.0.11.tuxcare.els1.x86_64.rpm 4f48007b7e470a26f11b343e6940a4299c05874e07617721a6bd50def4c6c41e libwinpr-devel-2.11.7-1.amzn2.0.11.tuxcare.els1.x86_64.rpm 6b76202f11cc2190dd99003f847280b3671ee034326c86e654ae74562f206ff2 CLSA-2026:1779279586 TuxCare License Agreement 0 - CVE-2026-3833: fix case-sensitive name constraints comparison for DNS and rfc822Name Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-3833: fix case-sensitive name constraints comparison for DNS and rfc822Name

0 tuxcare-amazonlinux2-els gnutls-3.3.29-9.amzn2.0.3.tuxcare.els3.i686.rpm 15449262cdae9369a704d22d8f071571a9bb29b11d032e618f86a12856e62432 gnutls-3.3.29-9.amzn2.0.3.tuxcare.els3.x86_64.rpm 94643e0c35cdba0ee43e27bff9e56633e9db7bfbeb28906670e2c249cdbaa731 gnutls-c++-3.3.29-9.amzn2.0.3.tuxcare.els3.i686.rpm 5e203acc63668f43233171b22c1a7f73ac57b962d70fc94f0d4b13a6d8dc65c2 gnutls-c++-3.3.29-9.amzn2.0.3.tuxcare.els3.x86_64.rpm 540fcf7b8ee3c226a0d1462c643e2a49f14200fed80f1c735911d6ddd6091713 gnutls-dane-3.3.29-9.amzn2.0.3.tuxcare.els3.i686.rpm 993900ecfc6131dde3d06eaaa0c5c8ffc5e997c78b5de767b2edd1595a6430db gnutls-dane-3.3.29-9.amzn2.0.3.tuxcare.els3.x86_64.rpm 90267205ce9ad46c4ee0fe53c967f924fbe22e7befd203d5fe9564b23e89c125 gnutls-devel-3.3.29-9.amzn2.0.3.tuxcare.els3.i686.rpm 750c59018fbe922c089de4855b99e07ef85fc516e254036c503d77c6293155d9 gnutls-devel-3.3.29-9.amzn2.0.3.tuxcare.els3.x86_64.rpm 71198d816338081ce8ac29c97f245d3f2475a2c408e1948592e088cc43d9469b gnutls-utils-3.3.29-9.amzn2.0.3.tuxcare.els3.x86_64.rpm 79e76b6fb55e62f73c0f2d419dec31ac435cfba810bf33a82f9c9479b14e27f8 CLSA-2026:1779357577 TuxCare License Agreement 0 - CVE-2026-5773: disable connection reuse for SMB(S) to prevent libcurl from reusing a connection to the same server for a different SMB share Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-5773: disable connection reuse for SMB(S) to prevent libcurl from reusing a connection to the same server for a different SMB share

0 tuxcare-amazonlinux2-els curl-8.3.0-1.amzn2.0.12.tuxcare.els3.x86_64.rpm c47dce8c63457f27bf3d9cc882bb79168b0faed8258e51ea1f0cbb07d9c20ecc libcurl-8.3.0-1.amzn2.0.12.tuxcare.els3.i686.rpm cfcb7c6f75256bc5f99f8113003a275e6a1b948daf630cb8f16a594d7e5a6ed4 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els3.x86_64.rpm ccd35cc400c98ec97227a831db88256123c817fb0eb0446e9354289a731d6462 libcurl-devel-8.3.0-1.amzn2.0.12.tuxcare.els3.x86_64.rpm 613081b3c7e2bd20af76d8f9fe2e7ac94bff2ae582ece576e11abc9c9a0b2781 CLSA-2026:1779358733 TuxCare License Agreement 0 - CVE-2026-45186: fix quadratic runtime in attribute collision detection by using a hash table for default attribute names instead of an O(n^2) loop Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45186: fix quadratic runtime in attribute collision detection by using a hash table for default attribute names instead of an O(n^2) loop

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.7.amzn2.tuxcare.els2.i686.rpm b99ce865bf093372dea4a873a1eef0fe819f1666ee620d17907d7119edd1f832 expat-2.1.0-15.0.7.amzn2.tuxcare.els2.x86_64.rpm 5e6511a66706f19226f690c8d2beec7dcd28642b8aca6f9198c9a72a4dae8a9c expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els2.x86_64.rpm 7ed66d0de17b73a49256d0e4763d30e60f01b639150fc2df8b62f14c7cbcf016 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els2.x86_64.rpm 88bbb54ab68d486be245f2b80637e9cc39f4636503fbaaba2808b7b6bc60e812 CLSA-2026:1779365681 TuxCare License Agreement 0 - CVE-2021-25329: fix Apache Tomcat session deserialization / sub-directory traversal - Apply upstream follow-up fix for File.separator vs File.pathSeparator regression Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2021-25329: fix Apache Tomcat session deserialization / sub-directory traversal - Apply upstream follow-up fix for File.separator vs File.pathSeparator regression

0 tuxcare-amazonlinux2-els tomcat-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 12f0c5571757bef5e80ebe7bcf122b7972034e04d525fc3a48ca88373be05ecf tomcat-admin-webapps-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 47f6dcb3fd792094647e4ec71606a66c582129442c85e1679ed27f80a2a94b40 tomcat-docs-webapp-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 83e178a3802fa593d681bf25f1c92b341306fb3157cdfe223be44c1e4fd5a2cf tomcat-el-2.2-api-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 84bb421b284fb3812a5b4fb9cd5193be92d995c1b2b0491839b8e2d80ef75630 tomcat-javadoc-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 1e0107366d06c088f3e06556a007218f4193a3f73bb5067f6283554a077cd750 tomcat-jsp-2.2-api-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 883fc589495e128fcb86951f5c9cf643d7592c7e028ef206b9bde096d70592f1 tomcat-jsvc-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 4e716274e1d1edfa2c05c9973545c813355789d3c24ddf2ba9b838f15bbbb265 tomcat-lib-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 5fb0d16c6e3d03a465633a22632b5fca58615c551709ce85e81f99214ccda491 tomcat-servlet-3.0-api-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm ddc28b345ae6f78de9bc38dde38c995d0f4da9c1e833a60236ad74122611bc93 tomcat-webapps-7.0.76-10.amzn2.0.16.tuxcare.els1.noarch.rpm 31e9ebd2a84dfc7991029a8f2af8800a2a1c83fbe8a6958ca3d31ae5f4f011fe CLSA-2026:1779444333 TuxCare License Agreement 0 - CVE-2016-6321: fix directory-traversal in safer_name_suffix by skipping archive members whose names contain '..' components during extraction Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-6321: fix directory-traversal in safer_name_suffix by skipping archive members whose names contain '..' components during extraction

0 tuxcare-amazonlinux2-els tar-1.26-35.amzn2.0.4.tuxcare.els1.x86_64.rpm 90fe307c0f2129e209e6bed03cbd285aa8ae41d56fee013c290a1bfd64dc99e4 CLSA-2026:1779454400 TuxCare License Agreement 0 - CVE-2026-7262: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7568: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57) - CVE-2026-7261: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q) - CVE-2026-7258: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4) - CVE-2025-14179: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm) - CVE-2026-6722: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7262: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7568: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57) - CVE-2026-7261: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q) - CVE-2026-7258: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4) - CVE-2025-14179: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm) - CVE-2026-6722: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5)

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 7813ccd89a690993d2809147d355c68303060bdafebbbcd3b239bf2d0d550b22 php-bcmath-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 4df3f60f5d6f9c38ce115f71403e542e59e01193503bc4433060bfed90a27bab php-cli-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm f27d18545e06567a58a0f58c524d466d5ba61e166cc4703f7c00860765fa9956 php-common-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 5b658639fbd335ad6763d2e9ed2833aee98a572bcbc36dffe3a5c95c7ed78a6c php-dba-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 86d7359e6978a4891eae326dd2c7de55ee7bb66705857a084f70d894ac639110 php-devel-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 254aed96de79e2518a420469319ffaaea258bf5ec93ba9bf2a3df0ac610a1deb php-embedded-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm a503a7390f963fd732bb4a9ee88715e1dd11299090c4540fc42eb58d04c8fd47 php-enchant-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 5b31cfe1439423c812e6aab06f10f66b24c2c14d7c601e63a4c4195ddc4cc49b php-fpm-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 139b98b1ae543de722801b83e311dd86fd48a5a352bdfeaf7cae12efcec6b60a php-gd-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm e57a84b5e17100f8d053f605aa2bcc4b9982bb92542c468fc53e5c866ccd411c php-intl-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 09daa627f82d1015ed584c7901f7e1c212681a29333fddeb7dff547d7b10d162 php-ldap-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 1145ed73a92d4bb1396d6824b058cc6b5fcda5680f3cfe217be418e418382ad6 php-mbstring-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 73db936ea64dc654ae1ddc0346e36b752e751df83574997d0a106c11b2be4ef6 php-mysqlnd-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm a63fb9ce39979d160689492857a06c8c1df645df2cad8fb053bffc26b1723a98 php-odbc-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 7da9463091b9fc33dad540b9e993733ad004745049753de2ed0ddfc84022a481 php-pdo-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 73e2c1c25fc6a13ec3adb95cf0920c3242767d9dcea1febf82da671e60fc6851 php-pgsql-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 67cf8128e8d585ef66d5f49e169de1954dd1e89fcc2e0f3d9b95726a49224f8b php-process-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 8b776daa778a8c3f0991a1a182c97e534f0f161856d430b608045d44b2983c8b php-pspell-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 027bcfe81c00cd780cec7864e410da83bf8a21c26ce706d3df2b5bb01a996734 php-recode-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 5ad840646fb3ebba45737a97347355a8886be49adc5d2386a4f52736b1ab9bf6 php-snmp-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 5f0f98ce6dd677c7fe9be8f9821cf7fe64479f5ef050e12dd792ffe99d80ac98 php-soap-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 113b5dbbfaa2a768c16b0c8411f52bea73c41c23485eb0d01efd691d1d7dbe5e php-xml-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm a9a049d66e52e3d34bc389c93e50a1d81eaaba28c4ae6e0e07b648a2bd346e75 php-xmlrpc-5.4.16-46.amzn2.0.6.tuxcare.els6.x86_64.rpm 1695d72d58c4f2ffde1c826ceb3de8d06bcbad8125289d3681f393fca2013875 CLSA-2026:1779462604 TuxCare License Agreement 0 - CVE-2026-33278: fix dangling pointer use-after-free in dns_msg_deepcopy_region(); the buggy struct-assignment overwrote the destination's freshly-allocated rrsets pointer with the source's pointer, causing the resumed validator to dereference a dangling pointer after the source region was freed. The vulnerable code was previously backported as part of CVE-2023-50868.patch (NSEC3 closest-encloser fix). - CVE-2026-33278: backport defense-in-depth NSEC3 parameter consistency check (param_set_same) from the same upstream commit; rejects NSEC3 responses mixing records from distinct cryptographic chains. Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-33278: fix dangling pointer use-after-free in dns_msg_deepcopy_region(); the buggy struct-assignment overwrote the destination's freshly-allocated rrsets pointer with the source's pointer, causing the resumed validator to dereference a dangling pointer after the source region was freed. The vulnerable code was previously backported as part of CVE-2023-50868.patch (NSEC3 closest-encloser fix). - CVE-2026-33278: backport defense-in-depth NSEC3 parameter consistency check (param_set_same) from the same upstream commit; rejects NSEC3 responses mixing records from distinct cryptographic chains.

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.12.tuxcare.els2.x86_64.rpm cbd6afcc2127b5cb2ea55c4950cffb5424d164b0663ae642c4223c91d5a73f7a python3-unbound-1.7.3-15.amzn2.0.12.tuxcare.els2.x86_64.rpm 18ebdf7b17d502356b2eae56f933a1f93c631c3b254c20be1b78537e6bc605f3 unbound-1.7.3-15.amzn2.0.12.tuxcare.els2.x86_64.rpm 65dc48f835e8d7db1761df548f51e3b32865abb9b0b2829310f3617da7ab768c unbound-devel-1.7.3-15.amzn2.0.12.tuxcare.els2.x86_64.rpm d6b890c119f647e11e6c83e8bbca917962df76315ad9b3a285ee9719c0845fc0 unbound-libs-1.7.3-15.amzn2.0.12.tuxcare.els2.i686.rpm 4c47f36195940d9b8f954843b0e4d18bf23bc744ff1ddbcc3ead4094e2e8c4e1 unbound-libs-1.7.3-15.amzn2.0.12.tuxcare.els2.x86_64.rpm 18e031583bbe259b1e6a4efc0e8bd48ec5c88d961cb0f97db900f2588e7f7a6d CLSA-2026:1779693767 TuxCare License Agreement 0 - CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42050: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.27.tuxcare.els2.i686.rpm 6eb3f9f7013d00aa2eb240aac6b47349dbf31f1fea08503c61c79fd8cd487684 ImageMagick-6.9.10.97-1.amzn2.0.27.tuxcare.els2.x86_64.rpm e5ed4e66473e2b48c3cec0f3b76d1280cd14e335b84e231beac7ef7e63454bee ImageMagick-c++-6.9.10.97-1.amzn2.0.27.tuxcare.els2.i686.rpm a1d830c9b1397050a2e7d7c0c0a4acdfbbbede85863d3c7282b616d03f18f96f ImageMagick-c++-6.9.10.97-1.amzn2.0.27.tuxcare.els2.x86_64.rpm 3329e10de81aae7ab99ea793e273f7139273eb3ca1cb82cd4255c1dab4ea53f8 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.27.tuxcare.els2.x86_64.rpm c05acb1922055b7cb902cca8896a33b538e51fc7f40a1ad7399fb4418b927b3a ImageMagick-devel-6.9.10.97-1.amzn2.0.27.tuxcare.els2.x86_64.rpm 87e71e11115c8bc26fd96ce0161480ec79014766b4b2ee3e464341bbecc1f548 ImageMagick-doc-6.9.10.97-1.amzn2.0.27.tuxcare.els2.x86_64.rpm 9c692119138383a7305b387ffd5634534f688ea6855aceb77786c203e02feae2 ImageMagick-perl-6.9.10.97-1.amzn2.0.27.tuxcare.els2.x86_64.rpm ac6be3f701a551eb80ff1b5176a7cc20ebc2a540caed1b8ecb38e8182a023cea CLSA-2026:1779694765 TuxCare License Agreement 0 - CVE-2026-43618: fix integer overflow in compressed-token decoder allowing remote memory disclosure via crafted compressed stream Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43618: fix integer overflow in compressed-token decoder allowing remote memory disclosure via crafted compressed stream

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els6.x86_64.rpm 575bc43ff4f3d497b7f059c9b8b7ecc4e87ca622002b013a3596d3456658c144 CLSA-2026:1779700633 TuxCare License Agreement 0 - CVE-2026-34079: fix arbitrary host file deletion via app-controlled ld.so cache symlink in flatpak_switch_symlink_and_remove Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34079: fix arbitrary host file deletion via app-controlled ld.so cache symlink in flatpak_switch_symlink_and_remove

0 tuxcare-amazonlinux2-els flatpak-1.0.9-10.amzn2.0.7.tuxcare.els1.x86_64.rpm 68491b4500c766e94f6fdb63beb48e90d99d0ac07f4b1d81247a70fffae594d8 flatpak-builder-1.0.0-10.amzn2.0.7.tuxcare.els1.x86_64.rpm 94833b77920bb98131216eb5eea368f784b8c37ed25e0974c072e2c055751a1a flatpak-devel-1.0.9-10.amzn2.0.7.tuxcare.els1.x86_64.rpm 197f188370b413e3b5fbcd06ba145e384bc0911fcba595e07a193d90649531d7 flatpak-libs-1.0.9-10.amzn2.0.7.tuxcare.els1.x86_64.rpm 635cdee39ef45f8b6098eee4f365d58442e40918bc037239c505df8d19473605 CLSA-2026:1779746249 TuxCare License Agreement 0 - CVE-2026-29518: fix TOCTOU symlink race in daemon file handling exposed when "use chroot = no" Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-29518: fix TOCTOU symlink race in daemon file handling exposed when "use chroot = no"

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els7.x86_64.rpm f240590a5d75ebd90af43605bf811b684c3bbee05328d4413ac2edc760bbc772 CLSA-2026:1779869836 TuxCare License Agreement 0 - CVE-2026-43513: add case sensitive attribute to LockOutRealm - CVE-2026-43512: fix the handling of invalid users with DIGEST authentication - CVE-2026-43514: switch AJP secret comparison to a constant time algorithm - CVE-2026-43515: ensure RealmBase finds all matching extension based constraints - CVE-2026-41284: add a configurable limit for WebDAV XML request bodies Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43513: add case sensitive attribute to LockOutRealm - CVE-2026-43512: fix the handling of invalid users with DIGEST authentication - CVE-2026-43514: switch AJP secret comparison to a constant time algorithm - CVE-2026-43515: ensure RealmBase finds all matching extension based constraints - CVE-2026-41284: add a configurable limit for WebDAV XML request bodies

0 tuxcare-amazonlinux2-els tomcat-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm b0be29fd30ef5dd7527032c8641176803f8fc30883a9a8f69767ee22540a63e6 tomcat-admin-webapps-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm b77a8dd924881a95e4bdf7e205882b003abb4c56f22aa358dd115052f9076a16 tomcat-docs-webapp-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm e5abeef586c35c1a7fbeb3d632440157324ad37e7088aea40a5eafd46098a937 tomcat-el-2.2-api-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm 6361ed20db870a0ff0210ef17a572636cb78a6eb3360ac71926f61378356911f tomcat-javadoc-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm e3e680a9fe4f7b986e5e10b016624b375df3184812cd8ef5a02aeca8dd77d47f tomcat-jsp-2.2-api-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm 477d2fc97a0b46b3af56b9659f7f5b79168e227b6d9cdb57306a9513f97fd3fb tomcat-jsvc-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm 39074ae2f4f5d585bbfc12b12230a23acd785e4dd58be9872379e6cf71995c91 tomcat-lib-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm 1f11e4d6772471719a63c8796e33622b022df4ca7f2b30a3a181ab7aa65906aa tomcat-servlet-3.0-api-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm ee4ed25e9e2b68e097ae361be9f56f07f37779f68d2f21170716546e673bd32c tomcat-webapps-7.0.76-10.amzn2.0.16.tuxcare.els2.noarch.rpm b9ac4772255ebd89be21f6c2f8534808a8cc3a649ea7684c546ae2a0ae4151fd CLSA-2026:1779870333 TuxCare License Agreement 0 - CVE-2019-12448: fix admin backend race in query_info_on_read/write - CVE-2019-12447: fix admin backend file ownership via fsuid - CVE-2019-12795: fix gvfs daemon D-Bus unauthenticated client access Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-12448: fix admin backend race in query_info_on_read/write - CVE-2019-12447: fix admin backend file ownership via fsuid - CVE-2019-12795: fix gvfs daemon D-Bus unauthenticated client access

0 tuxcare-amazonlinux2-els gvfs-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm bcfbc6cb73fcbb065acfa43b73c0ff6646d337df0dee343a5aabd1eb536bc189 gvfs-afc-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm 8d83e97585bbb7e5935d86f0f6074c9db2a2ca6498e6770f6a0c6a872a4d4108 gvfs-afp-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm 28a4e47a43e6442213a4b4e6cfce9dde4413cc61fd363eddba5228d77b22bbdc gvfs-archive-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm 112da44953ec7ecf030010f5855b92097c11aa5f67905a380e4b0044e7af47d9 gvfs-client-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm b6ed1ed456ab2880b953caa933a99d774959d01fa01d7a05c9d67fa35d7a5901 gvfs-devel-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm a2bcd48b6d78ba112d71ae937a522ca849108197b39813213a3067fa7f3f8cb6 gvfs-fuse-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm 1e8016031901c3039c6b65103b38fb8dd49f429ca79c5f3afd0ae437ed986336 gvfs-goa-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm 681d28a0217e4d17b23d25f73641214a9ed5957efc8a3a138e4601e0d8da803f gvfs-gphoto2-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm bd90a78ae5183a86e18b517d75b672cd098a28ecfaaca01bf09977d71f5e1bdd gvfs-mtp-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm 7822e645e406c512b24c42f5f81a1f57b3d961cade452bc9ce37a63c084334e0 gvfs-smb-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm dac436625816b20b6f9254bdc74ea967332c9290c9432d84ba1e3fa140e82381 gvfs-tests-1.36.2-3.amzn2.0.2.tuxcare.els1.x86_64.rpm 8081d260dec794563c59c62e150f2a60e608151584a5d575ceae4aa0b60572ea CLSA-2026:1779893321 TuxCare License Agreement 0 - CVE-2026-6473: integer overflow fixes across multiple vulnerable sites: formatting.c size calculations (mul_size), intarray/ltxtquery findoprnd() left-offset overflow, ltree lquery numvar/totallen overflow, and ts_headline option length overflow - CVE-2026-6474: timeofday / pg_strftime: guard against unsafe format codes and ensure null-termination on overflow - CVE-2026-6477: libpq: harden PQfn() / pqFunctionCall3 against server-controlled buffer overruns in lo_read() - CVE-2026-6478: authentication: add timingsafe_bcmp() helper and apply it in MD5 / RADIUS auth paths - CVE-2026-6637: refint contrib: prevent SQL injection and buffer overruns in check_primary_key / check_foreign_key Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6473: integer overflow fixes across multiple vulnerable sites: formatting.c size calculations (mul_size), intarray/ltxtquery findoprnd() left-offset overflow, ltree lquery numvar/totallen overflow, and ts_headline option length overflow - CVE-2026-6474: timeofday / pg_strftime: guard against unsafe format codes and ensure null-termination on overflow - CVE-2026-6477: libpq: harden PQfn() / pqFunctionCall3 against server-controlled buffer overruns in lo_read() - CVE-2026-6478: authentication: add timingsafe_bcmp() helper and apply it in MD5 / RADIUS auth paths - CVE-2026-6637: refint contrib: prevent SQL injection and buffer overruns in check_primary_key / check_foreign_key

0 tuxcare-amazonlinux2-els postgresql-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 7c7f44cec1a2984f252d5cbb4d97d76a87a1cae3649d73efd7b12ebe77a8fef9 postgresql-contrib-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 25f3b5ca611bb72d44a4bce4a85d0d27d7945ff02f701e0271eabbed3fd52b76 postgresql-devel-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm e8e9a3f01dbe1753c50bb3e05236a48a92a0c3208319fc7d1cc05dfe895fb874 postgresql-docs-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 3fffb9e657a2353e160d1e41bf504fb73b75cf2f3aec842c32d0189c99292d58 postgresql-libs-9.2.24-8.amzn2.0.9.tuxcare.els1.i686.rpm 6c8c8f9865e5bd313043d1859c7749a0b3dab26e80fd1194cac1b584568ef5e6 postgresql-libs-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 9860b2270234f6e6a6378742668745bb05c5a09784187a4355f4a73a945f9a1b postgresql-plperl-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 363e9ed0cda569389ad962959b7a9f1c7af8c9b5fb8cd17046fc9a46343c8bfa postgresql-plpython-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm de55abd78e05e48c844e933fbe3cf9f089dbf215f93371c0da2ebe30056eeabb postgresql-pltcl-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 63990d5c27db00926899e8160ddd70d46a774f3a59b0fbd2227ac0704a463315 postgresql-server-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm a77da439d855b7595404d8f615efe468709ffd0885a74a64263c85965ce944ed postgresql-static-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 743bb9fb9f6c7d38c907378bc009d667631ff17c030ee48025331b5c24a502b9 postgresql-test-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 8baa00685fda1652850b38808afdef6078b625cc2b0bd92852a12965209f1471 postgresql-upgrade-9.2.24-8.amzn2.0.9.tuxcare.els1.x86_64.rpm ccc3e36c6139731dee892c93f81577c2c1d160db05b3a73d3af148b0d9e3217c CLSA-2026:1779912644 TuxCare License Agreement 0 - CVE-2026-42307: fix shell-injection in netrw via crafted sftp:// and file:// URLs by escaping the tempfile name and restricting the filename-suffix regex to word characters (runtime/autoload/netrw.vim, upstream patch 9.2.0383) Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42307: fix shell-injection in netrw via crafted sftp:// and file:// URLs by escaping the tempfile name and restricting the filename-suffix regex to word characters (runtime/autoload/netrw.vim, upstream patch 9.2.0383)

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.6.tuxcare.els2.x86_64.rpm 7016dcd13e3c1f41aafdb53c9e948bbc5e0f13e8ef03742cb0162e27665732e0 vim-common-9.0.2153-1.amzn2.0.6.tuxcare.els2.x86_64.rpm f9a760044135d619914e1a9e360de001fc71a0570ace3f40195ad5980f5c46d9 vim-data-9.0.2153-1.amzn2.0.6.tuxcare.els2.noarch.rpm f5b93d7bc606acdf799e811bb12ed9438d7d60af777aafdd2be04c8985c21695 vim-enhanced-9.0.2153-1.amzn2.0.6.tuxcare.els2.x86_64.rpm d7f34eb6e2f907d6455ee65faaab27b2a17f35a05499b5c6dcd2bb57fac93a2b vim-filesystem-9.0.2153-1.amzn2.0.6.tuxcare.els2.noarch.rpm 3dc4f3a772bda039b75b80894f0c9e4701b1c2dd4c41a65da93f547bceb60c08 vim-minimal-9.0.2153-1.amzn2.0.6.tuxcare.els2.x86_64.rpm f5cc8afa9abdb5935d0324e7811a2e98683b10cb0f9d596cf2d51bfaea079c87 xxd-9.0.2153-1.amzn2.0.6.tuxcare.els2.x86_64.rpm 8967bc8fd705aa5c0ac950a235d46f56004f4eb1a0b3f086fde9789240c76ef0 CLSA-2026:1780068172 TuxCare License Agreement 0 - Rebase to 9.11.4-26.P2.amzn2.13.15; CVE-2026-3039 and CVE-2026-5946 fixed by vendor - Carry CVE-2018-5744 (memory leak on duplicate keytag EDNS options) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to 9.11.4-26.P2.amzn2.13.15; CVE-2026-3039 and CVE-2026-5946 fixed by vendor - Carry CVE-2018-5744 (memory leak on duplicate keytag EDNS options)

0 tuxcare-amazonlinux2-els bind-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 2f8a305c76480fae52ad59fb6aea1a9517b1bc8ed6edb8de52051d1df21a9eb8 bind-chroot-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm d60237d2f58a673b33ccabe3a9692d2975191da52fd1211d1e2374dcd33ca4ff bind-devel-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm bee7163de6cf7ba75392c9d61e20aab198eb99268fc25dfdab0e5f6eba69d6f8 bind-export-devel-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 58960fa04bf5ab324e352d28524f937b614fa3ad7767da94055685bc1b311946 bind-export-libs-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.i686.rpm 6c9c6f8f1a75e2f5fdf7afccbbeeb73ac2a2bb943817d37a7e9fd4b7016b0e4e bind-export-libs-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 2591b033a3109fc9e88bd7d01ef963f601c30cfbfd8f11b0622748cb914af0c3 bind-libs-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.i686.rpm cfe1fb6fc2bba6b5ed41eaadfa3c0a61328d99ac1abe79594f12010a0b3064be bind-libs-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 7983213a92b5ec5117bdcf13200edb056e426c13eb1ddd404db60245ccea72a0 bind-libs-lite-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.i686.rpm d3125cd7c692b1e6aa998f0b47b360591cee8b5876e5a7cfb22f15a617db10b9 bind-libs-lite-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm b3aa83d8faef7eaa40855018f7d14b44915602a5cd72f6b856f3cf921444d8f1 bind-license-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.noarch.rpm f4879ca48b838a8c09f0d4dee69d55bb7696e50a2ae6c7fef6100ec6e51a9792 bind-lite-devel-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 5b15d6479ddb38c8fc498b65d16560eda7cd945bf59342281826b469779630e3 bind-pkcs11-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm a961cc1d764e123dabb9a7261994078da85d790eb8a2fb2dc176273527417205 bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 5ac18c9960c4c5ec3613eeb9f9d15dd9ec5286f58dfa421f309e1d236d7cb04f bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.i686.rpm 84cd738edf75dd1492b6d170bb34ee6fed683d0671ac2293129cfa75097a1fcc bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 7398d9da351a5753513d70f379c68027647716d2b018c6bf1c8b836dfce35610 bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 219946c084c3a52356a394ae24d10e7353528a02b13ca03d4aa2be8beca22b99 bind-sdb-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm c8d5b253ce257b7014198424ef2fed5f7d9c644f1ace260fdd04923f268a39cb bind-sdb-chroot-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 784a3a0209e4c33a759c619dc801b37d7f2bef030d275fb2d377138e24ee8934 bind-utils-9.11.4-26.P2.amzn2.13.15.tuxcare.els1.x86_64.rpm 271ef52497f28a3e148f1750ab6c0f45f38e3278dfedcbd52c3d449ef3a0d190 CLSA-2026:1780388162 TuxCare License Agreement 0 - CVE-2026-41035: fix use-after-free in receive_xattr() qsort by using post-filter xattr count Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41035: fix use-after-free in receive_xattr() qsort by using post-filter xattr count

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els8.x86_64.rpm ebced19fcce9d7032447f4d43ebc492a56e975ac0c4f48499dfb098f4edb27bd CLSA-2026:1780390265 TuxCare License Agreement 0 - CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling regular expressions with a repeated fixed string on 32-bit builds (mincount * l overflow) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8376: fix heap buffer overflow in S_study_chunk when compiling regular expressions with a repeated fixed string on 32-bit builds (mincount * l overflow)

0 tuxcare-amazonlinux2-els perl-5.16.3-299.amzn2.0.3.tuxcare.els2.x86_64.rpm 54a73bc41fd0bb7e4395a929ca491520ac3b5e919a7a2e891a09506fe03bba66 perl-CPAN-1.9800-299.amzn2.0.3.tuxcare.els2.noarch.rpm 763bca3523f7128bee86b570e6133e8eb14200835147bc1391c2842d41fe40ce perl-ExtUtils-CBuilder-0.28.2.6-299.amzn2.0.3.tuxcare.els2.noarch.rpm 30628663dfaac3c6b9c617c02c5f08fba3e015ce70aac4a4e270d2a36bdd7e78 perl-ExtUtils-Embed-1.30-299.amzn2.0.3.tuxcare.els2.noarch.rpm 88c80b1c2f724bcc677ff671a3f84817141e7b6b4ffa1877ae30b1b59342832b perl-ExtUtils-Install-1.58-299.amzn2.0.3.tuxcare.els2.noarch.rpm 7d3c41fc73de1da4f253ecec866fd8533f0a3e85be97faa970fb5bcf347b4836 perl-IO-Zlib-1.10-299.amzn2.0.3.tuxcare.els2.noarch.rpm dfba730134fe4ad1d510773cb8da09ecfe2e20d394c94360e00993983e2e2529 perl-Locale-Maketext-Simple-0.21-299.amzn2.0.3.tuxcare.els2.noarch.rpm 8a66830b9bb66e1cb843df2b0fedc2e67f556cc90bd7c8a2f0917469dae535f7 perl-Module-CoreList-2.76.02-299.amzn2.0.3.tuxcare.els2.noarch.rpm 6d1dfbbb6df6ffb68f2c2a4adc681699e27785a191866b87ec208b9587d5ae36 perl-Module-Loaded-0.08-299.amzn2.0.3.tuxcare.els2.noarch.rpm 2559b79366bda3fe061fe05a1605f8eb297c2103fd07aae44fa60e797dc9b391 perl-Object-Accessor-0.42-299.amzn2.0.3.tuxcare.els2.noarch.rpm f7b27ecc779ed5e91e30ece70f15b5eaa8cdf95eb4c18d820694e8eabe07c83c perl-Package-Constants-0.02-299.amzn2.0.3.tuxcare.els2.noarch.rpm 5a334caeb6f625016fd9c0daa4a463302b8c9dd90302d6135021f6ebcf0c30f7 perl-Pod-Escapes-1.04-299.amzn2.0.3.tuxcare.els2.noarch.rpm 1c808a0f90c0c94a31f4feb0bedce6033b367e76632e239cc7547958c52f1167 perl-Time-Piece-1.20.1-299.amzn2.0.3.tuxcare.els2.x86_64.rpm 254fe59248f3170ec6f748a2ce42eda96f0584a42a265aebfc86529b83eaa07b perl-core-5.16.3-299.amzn2.0.3.tuxcare.els2.x86_64.rpm b73b27c57dfe09e5a291a1f96a0166bba0ad799236ea3882cfbbf1dfdb381f19 perl-devel-5.16.3-299.amzn2.0.3.tuxcare.els2.x86_64.rpm 0a957db36346a31f9088875af5b67101bfd2dbc9fc201fdabadfe1f4205c0508 perl-libs-5.16.3-299.amzn2.0.3.tuxcare.els2.i686.rpm d8adb473fc500fbb925c7ac0f5e86fbf5273424c242f1c5e6d695aefe17c4660 perl-libs-5.16.3-299.amzn2.0.3.tuxcare.els2.x86_64.rpm 8bcad0fd3f9e5e5401a081a42b82ce9e15fc6ffbec0645f7bac2ca28908e3ae4 perl-macros-5.16.3-299.amzn2.0.3.tuxcare.els2.x86_64.rpm d1e326f2f65e5302edab4a07769c073c74033cf09cc0b34ac7ffc4f396fd4673 perl-tests-5.16.3-299.amzn2.0.3.tuxcare.els2.x86_64.rpm 9121d1e453b5fb454f6686c6e9d5219842df252c55664e0c8f7094d2ec534453 CLSA-2026:1780478142 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.14 (CVE-2026-42959, CVE-2026-42960, CVE-2026-44390, CVE-2026-41292, CVE-2026-42534, CVE-2026-42923, CVE-2026-33278); take AL2's six new bug-fix patches; keep the TuxCare CVE-2019-16866 and CVE-2026-33278 backports (renumbered to Patch1016/1017). Our CVE-2026-33278 fix is kept over AL2's because it is a superset: it adds the defense-in-depth NSEC3 parameter consistency check (param_set_same) on top of the same dns_msg_deepcopy_region use-after-free fix. No new TuxCare ELS work ships here. Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.14 (CVE-2026-42959, CVE-2026-42960, CVE-2026-44390, CVE-2026-41292, CVE-2026-42534, CVE-2026-42923, CVE-2026-33278); take AL2's six new bug-fix patches; keep the TuxCare CVE-2019-16866 and CVE-2026-33278 backports (renumbered to Patch1016/1017). Our CVE-2026-33278 fix is kept over AL2's because it is a superset: it adds the defense-in-depth NSEC3 parameter consistency check (param_set_same) on top of the same dns_msg_deepcopy_region use-after-free fix. No new TuxCare ELS work ships here.

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.14.tuxcare.els1.x86_64.rpm 1a04bcc007f2f6dbe404af2dc1e30d2478f524f83410b573d2d915a859d29aab python3-unbound-1.7.3-15.amzn2.0.14.tuxcare.els1.x86_64.rpm 0a916a21980a1041e686eb1bcf32f25deb229ae83ca0f2d5a877c27cdea36682 unbound-1.7.3-15.amzn2.0.14.tuxcare.els1.x86_64.rpm 1ac15641bc6a8a07998c0e39d4df563f3e60e14886a69f20636e08153f1ccf11 unbound-devel-1.7.3-15.amzn2.0.14.tuxcare.els1.x86_64.rpm 7f81b213c0bc9e1a4142c4ab4d491fe6cd92d3863051fdc6b014e9cf46651bb1 unbound-libs-1.7.3-15.amzn2.0.14.tuxcare.els1.i686.rpm 913c487d816bfd5fc99f7fdefaca27f64d08473c1a0e016c1d25caa3171f870e unbound-libs-1.7.3-15.amzn2.0.14.tuxcare.els1.x86_64.rpm f7be0ad1294eb824dd0d8be59c85e24ef32dcb2ace55e0f498c3b3ca7e06404f CLSA-2026:1780487719 TuxCare License Agreement 0 - CVE-2026-46483: command injection in tar#Vimuntar() when decompressing .tgz archives, via a crafted filename expanded through cmdline-special; fixed by using the shellescape(args, 1) form for the :! command (runtime/autoload/tar.vim) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-46483: command injection in tar#Vimuntar() when decompressing .tgz archives, via a crafted filename expanded through cmdline-special; fixed by using the shellescape(args, 1) form for the :! command (runtime/autoload/tar.vim)

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.6.tuxcare.els3.x86_64.rpm a4d24bf47d2346b9b9a420ae9ec54b6a54835924ccd33d76f89233d75b6609e6 vim-common-9.0.2153-1.amzn2.0.6.tuxcare.els3.x86_64.rpm 87adeb5ece6eadf1d2e867e0ed28186a5158b57c99a8b64374771a87ee6ce6ac vim-data-9.0.2153-1.amzn2.0.6.tuxcare.els3.noarch.rpm d789ceab40fb2d0dd92c531684edf2a9448201f7896e26391967bd2d831cbb36 vim-enhanced-9.0.2153-1.amzn2.0.6.tuxcare.els3.x86_64.rpm 8eff33c889a644f43c4f00848b327b1f2981c449560a4a8c3cc22cb8d8303c36 vim-filesystem-9.0.2153-1.amzn2.0.6.tuxcare.els3.noarch.rpm ccf6bf32830dce22f4787466d89ffd469b898503d61c0cff17586c93938eb64c vim-minimal-9.0.2153-1.amzn2.0.6.tuxcare.els3.x86_64.rpm e4f170b98504dad01210e83c5e8daeaa9be40bd4eeb85e852fb281c864252038 xxd-9.0.2153-1.amzn2.0.6.tuxcare.els3.x86_64.rpm ab3ff40ec2ac69466e3d26488c951ddcbaa1a9feec028931f94654ad5e95d845 CLSA-2026:1780647419 TuxCare License Agreement 0 - CVE-2026-41080: fix hash-flooding DoS caused by insufficient salt entropy by backporting SipHash-2-4 keyed hashing with a 16-byte salt sourced from /dev/urandom Low Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41080: fix hash-flooding DoS caused by insufficient salt entropy by backporting SipHash-2-4 keyed hashing with a 16-byte salt sourced from /dev/urandom

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.7.amzn2.tuxcare.els3.i686.rpm 5985a216732bc9c4f6ba7dbc54c5b257277a39d8a514949a1512b98c96352014 expat-2.1.0-15.0.7.amzn2.tuxcare.els3.x86_64.rpm ccfcd6a0366d8aedab1dea3068cfa797b1dbaf8aade736955687f405d858903c expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els3.x86_64.rpm 02324d102dfba3896d6eb1c4e7748e4bfe731a62b513a1f049300c7cfebd26a6 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els3.x86_64.rpm 3a64992ca8c59fbed292321d2e5925d2e46b37681b15fce71e3c2aa928d567e7 CLSA-2026:1780705981 TuxCare License Agreement 0 - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes when hash randomization is enabled (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable) to restore hash-flooding protection Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes when hash randomization is enabled (bound as a weak symbol; falls back to the legacy XML_SetHashSalt when unavailable) to restore hash-flooding protection

0 tuxcare-amazonlinux2-els python-2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64.rpm 64161520e6ce0dec0e7e6fe9809689049bd3914964a89cc338468b1c2a536508 python-debug-2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64.rpm 4169c947cb51584d9c20c8ebbefad9afd30db62515a2e30a5cf75f217714c7ce python-devel-2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64.rpm bcf768791f01f36f5a89028ee15bcfd954c56defebfb2ede46a65a4f2c46d997 python-libs-2.7.18-1.amzn2.0.19.tuxcare.els2.i686.rpm d6015f555d8348776579b183bce1bfc3ea7b8df0686a33a4b6edadb50d67037c python-libs-2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64.rpm a191438bb903247b0f5713091cf9a238b661f7647d98bc7850afe474d80e0e66 python-test-2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64.rpm 034734f92c4325ebd2652edb4608c2ac2b9af10900fbc339d17cbe3bdad4a821 python-tools-2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64.rpm ec7577ca2197c87e39b698ec68cb25e379feabfa87cb9d66146e4eaa9b2fa708 tkinter-2.7.18-1.amzn2.0.19.tuxcare.els2.x86_64.rpm 2e846fd4e6685bcb743641db663d0124edccb7b53f1b84b3d9a7641afa3630b0 CLSA-2026:1781079744 TuxCare License Agreement 0 - CVE-2020-25219: rewrite url::recvline non-recursively to prevent stack exhaustion - build i686 with -D_GLIBCXX_USE_CXX11_ABI=0 to link against the old-ABI libmodman.i686 in the amzn2els build root (x86_64 left untouched) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2020-25219: rewrite url::recvline non-recursively to prevent stack exhaustion - build i686 with -D_GLIBCXX_USE_CXX11_ABI=0 to link against the old-ABI libmodman.i686 in the amzn2els build root (x86_64 left untouched)

0 tuxcare-amazonlinux2-els libproxy-0.4.11-10.amzn2.0.3.tuxcare.els1.i686.rpm 4fa1f4b2ee0557a166378fc23c200066d148ef8715d8df97b433e95f11be3894 libproxy-0.4.11-10.amzn2.0.3.tuxcare.els1.x86_64.rpm e013f7092b0248c0d04a6ec2cb026a758a2f34c75b675e9d1a83485aa73d2121 libproxy-bin-0.4.11-10.amzn2.0.3.tuxcare.els1.x86_64.rpm 714b4f4bda8e862b84d39df405908a7b18c86c731e18bc42c5bf89ddcd2aea47 libproxy-devel-0.4.11-10.amzn2.0.3.tuxcare.els1.x86_64.rpm d03f23cad595b9d9fad6550f46c0f8c8723348c00568a5d637fe6f4479da0676 libproxy-gnome-0.4.11-10.amzn2.0.3.tuxcare.els1.x86_64.rpm 1ad1f53f1531664e4bbe6d8089437f2b3ce5d5499ddd490ee5bf0a5769ba1f51 libproxy-mozjs-0.4.11-10.amzn2.0.3.tuxcare.els1.x86_64.rpm cb6a218c7d87bc0248d235eb7c15c7aaae34f5173370bb9d2d13508b4505703f libproxy-networkmanager-0.4.11-10.amzn2.0.3.tuxcare.els1.x86_64.rpm f8993b08c2092f26d56c6b4d7c65eb017fc05183db743c26e72afa9cb9984a8c libproxy-python-0.4.11-10.amzn2.0.3.tuxcare.els1.noarch.rpm 14c45e33ed5cb9add1f84b9bb87bd44abcb62b076bc480ee3970811546f2ee52 libproxy-webkitgtk3-0.4.11-10.amzn2.0.3.tuxcare.els1.x86_64.rpm fa8a36e4cf09b2aaf034900f9dd094f8ec457ca7b9ec81e284d8a2c720accbec CLSA-2026:1781270452 TuxCare License Agreement 0 - CVE-2016-4070: change php_raw_url_encode index counters to size_t to prevent integer overflow on very long input to rawurlencode() Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-4070: change php_raw_url_encode index counters to size_t to prevent integer overflow on very long input to rawurlencode()

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm fde1ded83002c183aa80ecd40998182a07be847e0de3a3a8dd2734afb35f98b9 php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 207edecdbd571d33c157d8ee1d62fceaa50e9dc67d81b60d9e939115713ca21e php-cli-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 0f8a15248362f72823b37d70fc037c84372b881dcc71db6a7dd1ef1613b18c03 php-common-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 6debf523bc8499643b7a592cd5009918279a6162b6449e7f837ed47b700ca661 php-dba-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 2f65b7cd5359fd1321a8cd4b6328c1ca8c4c51f12c0e61686c95ffe50efe938c php-devel-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 0dabb6fc6c181dea1b59ea21e5d4517499b525aac99436cfd147f588bd7d8fcd php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 0c4e8ced3387d72b9372a4c46db819565761eb487c9162dedd09e104182f2dc0 php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm f4bbde4948b84f409be2ce6eb144a20d0d54943e36923ed10d639dcc90d9b24e php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 45f7ffe4da2e86a376ac4869c11894d8a89d3a088c661546c618242ee317933b php-gd-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 3cb500fa76ee88834a3fcc9839e88b206d5d0cf43a1f60a164a2e29fcecafc2b php-intl-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm a641a744893ecc312a11d8a1c3c523729e5248b99b58adaf220edd867ba1da31 php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm f8361dafbf40b4a26371f0e14231bf404a73e29aab05a4db8265e31e474832bf php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm e1ab1277dd705a9fcbe27787ae9c5057e6ddde4b37ecce61b92049cc1654f8dd php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 0b1d978d6e7491842ad7b32f895b69e3f2b7ec64d1bdd09bc3ea99bfa2c9b0e7 php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 5f5573699e550b097d264005f236e24d1f3fe5f1dc86ffd94806843b5f00040a php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 6aa27b1f83b3aa925e82a410edf1b1ddc69147a2b4698557674746901a3d86df php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm d9068fff39db4050b8e33d3953e6e15555ea8475073dc92686fd4d47e1ce22be php-process-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm cd1f32ae03a5fdf5117e3ece7c5b4b890fa60639927dd63c8b426f003fa3640e php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm ab127016936ed6d3d07ef61fdc7f70086d890952f033cd1efaf6b8b0f802aa88 php-recode-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 8e5aed95d8ad709b7fc8cc8dd61d4d0f9f75e0dc091399f44e531c81463e4811 php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 5ced68d1533609a595bdb8f4f2e2d55134debffee233a19879ebb8e8249e36ba php-soap-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 78920469ab12fffd8ede047eccd400acd06d5075dc0ce803e81edbc6e74739a7 php-xml-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 5e266509ec85726ec72d6969de5d8b00e1c163b57cb966f0cd98349a809a1ace php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els2.x86_64.rpm 5f0a496d1a36c32dcb5cc96732db34292f58dde3037467b9d4805ee9db5526f7 CLSA-2026:1781342760 TuxCare License Agreement 0 - CVE-2026-35535: make a privilege drop failure before running the mailer fatal Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-35535: make a privilege drop failure before running the mailer fatal

0 tuxcare-amazonlinux2-els sudo-1.8.23-10.amzn2.3.8.tuxcare.els2.x86_64.rpm a90a8ef8319713358daffefbd620547cf8e63b8cfef7bc205dd76241bb5cbb3e sudo-devel-1.8.23-10.amzn2.3.8.tuxcare.els2.x86_64.rpm a3369a3b8f6f23e39d05314dc6f811c7d7f5b4ef5add44e99cf9e040fac82977 CLSA-2026:1781548297 TuxCare License Agreement 0 - CVE-2026-45447: fix use-after-free in PKCS7_verify() when SignedData digestAlgorithms is an empty ASN.1 SET Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45447: fix use-after-free in PKCS7_verify() when SignedData digestAlgorithms is an empty ASN.1 SET

0 tuxcare-amazonlinux2-els openssl-1.0.2k-24.amzn2.0.20.tuxcare.els1.x86_64.rpm 529b0ac105607ec274a750367c35d207e1ac2e1e7e17acc7025a84f0e872c32d openssl-devel-1.0.2k-24.amzn2.0.20.tuxcare.els1.x86_64.rpm 9fa4d683095a450882ffdb80af2049998a60c85b26f6299af6cc0116b94a843a openssl-libs-1.0.2k-24.amzn2.0.20.tuxcare.els1.i686.rpm af5b306e105a66072c1690ed544bf51d171ca8a4eabaeb5365bddbcb1e5ae4a7 openssl-libs-1.0.2k-24.amzn2.0.20.tuxcare.els1.x86_64.rpm 7593f689d97382ec5e6c2f85753fbb68e240eb0ac704e4a66ed94c30579fc339 openssl-perl-1.0.2k-24.amzn2.0.20.tuxcare.els1.x86_64.rpm efd4e6340fc78486013cff2dd94f34f1238cefbe91899869558661d7d0cafe1a openssl-static-1.0.2k-24.amzn2.0.20.tuxcare.els1.x86_64.rpm 299da1aa7267ac7d063f225353f4dac22ac6c9cec407b555a17eacdeef1c6197 CLSA-2026:1781556845 TuxCare License Agreement 0 - CVE-2026-42536: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content - CVE-2026-29170: mod_proxy_ftp cross-site scripting in HTML directory list generation - CVE-2026-29167: mod_ldap use-after-free in per-directory configuration - CVE-2026-42535: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases - CVE-2026-34356: mod_proxy heap-based buffer overflow with malicious backend and ProxyPassReverseCookie* - CVE-2026-34355: mod_proxy_html buffer overflow allowing attack by an untrusted backend Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-42536: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content - CVE-2026-29170: mod_proxy_ftp cross-site scripting in HTML directory list generation - CVE-2026-29167: mod_ldap use-after-free in per-directory configuration - CVE-2026-42535: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases - CVE-2026-34356: mod_proxy heap-based buffer overflow with malicious backend and ProxyPassReverseCookie* - CVE-2026-34355: mod_proxy_html buffer overflow allowing attack by an untrusted backend

0 tuxcare-amazonlinux2-els httpd-2.4.67-1.amzn2.0.1.tuxcare.els2.x86_64.rpm cf2424b8bf434852b1d2a3acc267a82bdd9f60ad6fc580e41991976ffb643812 httpd-devel-2.4.67-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 86b072c0d68ee4dd63c9743d0335a109cafb7598517d1f7e8829347cbfeae44d httpd-filesystem-2.4.67-1.amzn2.0.1.tuxcare.els2.noarch.rpm e6fa813e04a3a37b28edff6062625e36c533a3a9e7e031a952bb5cecacc36cb5 httpd-manual-2.4.67-1.amzn2.0.1.tuxcare.els2.noarch.rpm 7616f9df8aed21b26428e369030c63a65807d43497aba96128e5a206f577e678 httpd-tools-2.4.67-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 8bd6462071d20bc27beda37ac4f46593759649db8769ac0c2eed216631a43569 mod_ldap-2.4.67-1.amzn2.0.1.tuxcare.els2.x86_64.rpm f15e0ee545f1d18bf34a0ebd705724ecb9b0a271554928c4428773d131031178 mod_md-2.4.67-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 9c7ab4ca08b617c6f373155eecbb8c132b7f9aadc4ffa07f902601f402db524d mod_proxy_html-2.4.67-1.amzn2.0.1.tuxcare.els2.x86_64.rpm a3b384a0c9381bdec3adbd6988c7c034ef3b475bb5be8dd3a4867af9a12e3140 mod_session-2.4.67-1.amzn2.0.1.tuxcare.els2.x86_64.rpm ee4af02bcd0d9e526d8d2e6d0990bee903cafe60e818406e85ca2d45b2cbd8dc mod_ssl-2.4.67-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 590d1f9b0a38393c98e36292356bbb59854d4d837e50cb458fba79e8a5e773cc CLSA-2026:1781605327 TuxCare License Agreement 0 - Fix CVE-2026-4408: reject dangerous account names and mask/single-quote the client-supplied username before it is substituted into 'check password script' via %u, export the raw name via SAMBA_CPS_ACCOUNT_NAME, and restrict _samr_ValidatePassword to domain controllers Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Fix CVE-2026-4408: reject dangerous account names and mask/single-quote the client-supplied username before it is substituted into 'check password script' via %u, export the raw name via SAMBA_CPS_ACCOUNT_NAME, and restrict _samr_ValidatePassword to domain controllers

0 tuxcare-amazonlinux2-els ctdb-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm ee734efd3e84c135572d619770177fcb86c450487c45b8e7f1d72d5116aa335d ctdb-tests-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 0c02fe985488aa81fd613c843d3c3d9a45fb183ef5935e13f77267c7c1f047f0 libsmbclient-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm 68e58d0640369efde62051fb3601282ada6a6e8c85d4744fdc08de03af250719 libsmbclient-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 3c83b3e771d16e3be90c0b92ae675704dd1793687d87755e4d00f856bfe40ad9 libsmbclient-devel-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 542a181b384cb97a850c47fc4156e059739b45427b15b6296063e311222e9ba1 libwbclient-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm 2c3bc60ae4d953ee8534ee4a085d86cc79c72347bcd8f7569e71ee5129bcf67a libwbclient-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 0a974badedaae80d29cce9022dfa2a0889f940360481dbc78ab48575fc5326b4 libwbclient-devel-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm de0667210c09d084e2afd5a8eb1de622f2fe7d28717e41d4767e095aef58ed69 samba-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm af80e1d21a1026972b010dfa43015a8b6762001a824dea39f691d572fb836005 samba-client-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 31b5e1a89275ebeebf40361e752d9726bf60df5ea82353cf0184e595f2c1c798 samba-client-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm abc1923eedb0c1ba55cd164ba788e72ef73df7738fbbca51de3693f05c2d5145 samba-client-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm ce701179897aac760446b567ee07940931b8fbef601d72190e96aa90462d166c samba-common-4.10.16-24.amzn2.0.5.tuxcare.els1.noarch.rpm 8f75ad067418749f942293857ec5457a34c1004ccffe5565ca172137dcd9da97 samba-common-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm d66daa10a34e8ca5f6fd0f2464e359bedb897e0d94a46631c81cc994054f2872 samba-common-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm bd78186d21edbe288934b9b88353bd9ca5c622c8543ca6cc31471b6fbd3624aa samba-common-tools-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 754af1c16f94d9b138a846b40d3d07eb5ab45cdc09c37558e8203cc828cc747f samba-dc-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm c68dd56e91777c9f83ba920930e30bfb10daa5cc55d87f8fd37e5d609137ebac samba-dc-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm 32119ebb3f93b879dccb456523d26a7089068bcae483391955f01880f3b129f7 samba-dc-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm adead9a15882f2f4a22a169de0134fe9071c9e20360995a3f9ac7068c3b1a66f samba-devel-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 42eb6f17d8cfd2b346de6a0ea1f8db18e660343b2a6dbace254b853a1dbf3504 samba-krb5-printing-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm b13ffc043f3afa4fe6d5533804ec1d3916a64881008f7acad4d73ddf080125ef samba-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm 4125fa4665b00d2cc84e93bd54a638e8496f166b74c258e872b0cddaa992c61b samba-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 9e471b0bca3373c1331bb67cfdd5fc1fad03d2eeef287701dc0c6fda05a59d42 samba-pidl-4.10.16-24.amzn2.0.5.tuxcare.els1.noarch.rpm bcab5c5784752f96683f34e3ee364ecb3fdd6320dbbf3612104e95840b8014e9 samba-python-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm c55ed24c37f7ac428277e1629a031d19bc7fe1b29a61dd44a81b7f9c18281e4a samba-python-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm dabe62515ce25aec5364d12abe612ca77d085d9d5f4e94c41dcd24f1168a80fa samba-python-test-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm c54d51ac22df02225c80e400f176faafec1162b45594d1b591453fa6719e480b samba-test-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm fbff69f69a34e224307f40744cc22f8f2b178ebe2f8423fd633401abc360e780 samba-test-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm 190e45df05340ab7e26adbd8137b2aaa8e5df900bcdf7c69eb3b33e9f5b6dafb samba-test-libs-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 19d8bcee06693947c91cc824955580476d5a5ef7336ad012497bc7aeb09fd072 samba-vfs-glusterfs-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 5fb27e3cde4ea35897d742dfc07cfe4278a9a8a5be4057890499d6e528ffe925 samba-winbind-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 770a7d172357b725f7d96d9afdc85b16a8e3af3190481bc9ca4f3544bee5690d samba-winbind-clients-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 7a8185428744527758f21c4ab69092527a61bf063d6c0853567d7705fd5c94ed samba-winbind-krb5-locator-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm 5475efcaff8d9868074ac08bf833dd66e3b7d5113bb58c36c3458e1d06a0b627 samba-winbind-modules-4.10.16-24.amzn2.0.5.tuxcare.els1.i686.rpm ae6be46b30eecc7279293178ff6a86efca14fed5edc1cc57585f242a00ea0610 samba-winbind-modules-4.10.16-24.amzn2.0.5.tuxcare.els1.x86_64.rpm a7bd34e79a73f9750d7f44c090db202378c37270e7a0274a628f152962acf6db CLSA-2026:1781612053 TuxCare License Agreement 0 - CVE-2026-49218: add a missing zero-dimension check in the DCM decoder (coders/dcm.c) so an image decoded with zero rows or columns can no longer trigger a denial of service in downstream operations - CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file - CVE-2026-53460: honor the system:max-memory-request policy in AcquireAlignedMemory (magick/memory.c) to prevent unbounded memory allocation from an oversized request - CVE-2026-53463: guard GenerateCoefficients (magick/distort.c) against a missing distort argument to avoid a NULL pointer dereference Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-49218: add a missing zero-dimension check in the DCM decoder (coders/dcm.c) so an image decoded with zero rows or columns can no longer trigger a denial of service in downstream operations - CVE-2026-49219: enforce the path security policy across followed symlinks in magick/blob.c so a symlink can no longer bypass a path-domain deny rule and disclose a restricted file - CVE-2026-53460: honor the system:max-memory-request policy in AcquireAlignedMemory (magick/memory.c) to prevent unbounded memory allocation from an oversized request - CVE-2026-53463: guard GenerateCoefficients (magick/distort.c) against a missing distort argument to avoid a NULL pointer dereference

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.29.tuxcare.els2.i686.rpm e4af232f693fd94604a9ba5f3ef5c5f38a4745681b849a702e0f893df7281522 ImageMagick-6.9.10.97-1.amzn2.0.29.tuxcare.els2.x86_64.rpm 06c436b32e7debb9a0c10e81c2025da44f0d487deb19e1fd5ccbcd55b2661a0e ImageMagick-c++-6.9.10.97-1.amzn2.0.29.tuxcare.els2.i686.rpm 548b035e7c1349d9fbfe4129b87f4780fdc10f8089787ebf45f056092b62dee6 ImageMagick-c++-6.9.10.97-1.amzn2.0.29.tuxcare.els2.x86_64.rpm f4847a740cab25d04e7d3df5c44f878602bc3d478ed78e2ca8e1d909d3f63a16 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.29.tuxcare.els2.x86_64.rpm f6993e0022c3bddc795fcb8c70bed3bd57b5fa35cdc030cd483ae8d5674a0313 ImageMagick-devel-6.9.10.97-1.amzn2.0.29.tuxcare.els2.x86_64.rpm c7d393842fd29e3c46be7786119019e39714faab6a7643977bac35dd41a975e0 ImageMagick-doc-6.9.10.97-1.amzn2.0.29.tuxcare.els2.x86_64.rpm 888add39a85f4796172b87246276da418ae9be6dbca4efa4863734f7ed91e3b7 ImageMagick-perl-6.9.10.97-1.amzn2.0.29.tuxcare.els2.x86_64.rpm d9548647653e39a339377ce59730eebb81c4818584e9f03b1652b35965b4a2c2 CLSA-2026:1781620499 TuxCare License Agreement 0 - CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-9714: keep and restore XPath context depth across recursive xmlXPathRunEval invocations (EXSLT dyn:map / dyn:evaluate) to avoid stack overflow when the recursion limit was being reset prematurely

0 tuxcare-amazonlinux2-els libxml2-2.9.1-6.amzn2.5.24.tuxcare.els2.i686.rpm 9f9a9c7301ce55af00873b7a1c0ff3dec0783d73eaec93eafa45f1568215a3a0 libxml2-2.9.1-6.amzn2.5.24.tuxcare.els2.x86_64.rpm d74dea2eae2e55acf6af5468999842791df61f6d78e9c34491fc97ae7f2e791c libxml2-devel-2.9.1-6.amzn2.5.24.tuxcare.els2.x86_64.rpm 637eea85f89b16d3f8901a828e45a0ec1b953fe1309b5105ba173c42d77392a8 libxml2-python-2.9.1-6.amzn2.5.24.tuxcare.els2.x86_64.rpm 19d0e74bd07d1ae48d5c9726f161ca0fa82b1a7b38af6bafbfa7ac8dea243b19 libxml2-static-2.9.1-6.amzn2.5.24.tuxcare.els2.x86_64.rpm 3421e3816724f7708cc1d09d03950ff222d3f1fa7f497fe0e9c28b5e36974878 CLSA-2026:1781624592 TuxCare License Agreement 0 - CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy 8-byte XML_SetHashSalt when unavailable) to restore hash-flooding protection - adapt XMLPullParser chunked-feed tests to the reparse-deferral behavior of the TuxCare libexpat backport (upstream gh-115133) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7210: seed the libexpat parser with 16 bytes of entropy via XML_SetHashSalt16Bytes (bound as a weak symbol; falls back to the legacy 8-byte XML_SetHashSalt when unavailable) to restore hash-flooding protection - adapt XMLPullParser chunked-feed tests to the reparse-deferral behavior of the TuxCare libexpat backport (upstream gh-115133)

0 tuxcare-amazonlinux2-els python3-3.7.16-1.amzn2.0.26.tuxcare.els1.i686.rpm e314076a57cc9ad2e9a640d118e64be2dd62bfe7422e6caf6866b0a22ffc4997 python3-3.7.16-1.amzn2.0.26.tuxcare.els1.x86_64.rpm 0abde99e3f614202b9809079b5caea66ea2b48fac0bd599709563700cf259412 python3-debug-3.7.16-1.amzn2.0.26.tuxcare.els1.x86_64.rpm c25649e47b9c64fc0ab1b537c77d102bf74f9ff74ded441b8a46c0ae9e558d66 python3-devel-3.7.16-1.amzn2.0.26.tuxcare.els1.x86_64.rpm e51fcc8463f0a6460a58e55cbd2f9e72408dd1f3573634eb7d65cc2ceadbac44 python3-libs-3.7.16-1.amzn2.0.26.tuxcare.els1.i686.rpm e0ce5e69700a2b7479b84429be100c634804c0b470cf74db3ceac782bf941d00 python3-libs-3.7.16-1.amzn2.0.26.tuxcare.els1.x86_64.rpm f28cfb3b895f09fd01d08bb27c3bfc1d824d9f96992768dca425452b4e7b31a3 python3-test-3.7.16-1.amzn2.0.26.tuxcare.els1.x86_64.rpm a4242c9702a4b0f274bf3235ddbd0682f82c00df6e4621d0f98587323ea51cb4 python3-tkinter-3.7.16-1.amzn2.0.26.tuxcare.els1.x86_64.rpm 1071005e5b5b628222ecb5c4fd50f4c11b6ce66a81330e28a3c1caeaca2adc19 python3-tools-3.7.16-1.amzn2.0.26.tuxcare.els1.x86_64.rpm b955cdd2cd515da94c87c9763bf2faa9b1af6f65888d7d8067ff55787c1942f4 CLSA-2026:1782141828 TuxCare License Agreement 0 - CVE-2026-43951: mod_headers/mod_mime OOB read in merge_response_headers via multiple Content-Language values - CVE-2026-44119: mod_rewrite/mod_setenvif/mod_proxy_fcgi privilege escalation through expressions in .htaccess - CVE-2026-44185: mod_ssl OCSP outbound request stack buffer over-read with attacker-controlled responder - CVE-2026-44186: mod_proxy_ftp infinite loop via attacker-controlled backend FTP server - CVE-2026-44631: ap_regname heap underflow on crafted regular expressions in <Directory>/<Location>/<Files>/<Proxy> configuration - CVE-2026-48913: mod_http2 use-after-free when file handles are exhausted on upload requests Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-43951: mod_headers/mod_mime OOB read in merge_response_headers via multiple Content-Language values - CVE-2026-44119: mod_rewrite/mod_setenvif/mod_proxy_fcgi privilege escalation through expressions in .htaccess - CVE-2026-44185: mod_ssl OCSP outbound request stack buffer over-read with attacker-controlled responder - CVE-2026-44186: mod_proxy_ftp infinite loop via attacker-controlled backend FTP server - CVE-2026-44631: ap_regname heap underflow on crafted regular expressions in <Directory>/<Location>/<Files>/<Proxy> configuration - CVE-2026-48913: mod_http2 use-after-free when file handles are exhausted on upload requests

0 tuxcare-amazonlinux2-els httpd-2.4.67-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 8acfabfe7bc4e13725a35b5ba93d1eadee9c75b9266fdd5bb28dd69529456284 httpd-devel-2.4.67-1.amzn2.0.1.tuxcare.els3.x86_64.rpm e52f1c1adc6d91a35632272a5f76982d3aa08d55fe17878b4bedb5d03b1b5d0e httpd-filesystem-2.4.67-1.amzn2.0.1.tuxcare.els3.noarch.rpm 013f49dbd3752979d0be8f37ae688d1e5bfcfabf9b4464cd23fb924eca6e08bc httpd-manual-2.4.67-1.amzn2.0.1.tuxcare.els3.noarch.rpm 119665daa4fc37f35f8d00d31187631eb863c7e40e42568eca790abb73e90afe httpd-tools-2.4.67-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 83e166dbe3cc21ebaf337362c9949e3bfb22b5e958b545d6abc53bea9d010d70 mod_ldap-2.4.67-1.amzn2.0.1.tuxcare.els3.x86_64.rpm b6f995bafd543a820a7ddf354f5871c71f593af03707bde45e5d1b5a2da8b2a7 mod_md-2.4.67-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 9ff0c065c8d1fc29ddc80c4fc6d398cc76987f64b2e3abdd9812fb791a5794a3 mod_proxy_html-2.4.67-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 3b0bcc85ab81d7c87c62e92e631cf0031ab969f23f574134555ae17e29dc93a5 mod_session-2.4.67-1.amzn2.0.1.tuxcare.els3.x86_64.rpm eb9e5be855ec595bb53f8cd8a5a8a35d138addbad8b5bf340be86e4b3e006838 mod_ssl-2.4.67-1.amzn2.0.1.tuxcare.els3.x86_64.rpm a6231dea9bcd9ff88212173747e2ad595e3289b25c3ae6432ab6cbc33b0cb547 CLSA-2026:1782143275 TuxCare License Agreement 0 - CVE-2026-47162: Vimscript code injection in s:NetrwBookHistSave() in the netrw plugin via crafted directory names interpolated into the ~/.vim/.netrwhist history file; fixed by properly escaping the value with string() (runtime/autoload/netrw.vim) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-47162: Vimscript code injection in s:NetrwBookHistSave() in the netrw plugin via crafted directory names interpolated into the ~/.vim/.netrwhist history file; fixed by properly escaping the value with string() (runtime/autoload/netrw.vim)

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.6.tuxcare.els4.x86_64.rpm ef5052099cd71e0e5e2dc2dafa6ade08e027981ee4a63f44023b9911290f8445 vim-common-9.0.2153-1.amzn2.0.6.tuxcare.els4.x86_64.rpm b12bba77f752bb7ef0265a5b34c69d87a96e3e41d15b5580e802a58ea562c798 vim-data-9.0.2153-1.amzn2.0.6.tuxcare.els4.noarch.rpm 21a194da434561165bff4482117397363fa7f25699b3d27fa3dab534b21f8293 vim-enhanced-9.0.2153-1.amzn2.0.6.tuxcare.els4.x86_64.rpm e452872cfb27ff9af267277e96340af9c22d844e0c0d3ea01893215c2ac43609 vim-filesystem-9.0.2153-1.amzn2.0.6.tuxcare.els4.noarch.rpm 3e13938610b3e97f4e71869c89a22adcb9977cc3bae37d79a659eedbcacf2dc7 vim-minimal-9.0.2153-1.amzn2.0.6.tuxcare.els4.x86_64.rpm a830307f42c8b52d6b794b67933d2b247b26bdc20b5385289dd1b42f5c49c0c9 xxd-9.0.2153-1.amzn2.0.6.tuxcare.els4.x86_64.rpm 1bd5202a8ef2472753aa1a9d02549bff1bc42609921e93f759df4bf80539c19c CLSA-2026:1782151553 TuxCare License Agreement 0 - CVE-2026-52858: code execution via crafted Python module in omni-completion: exec() ran from/import statements in attacker-controlled buffers; fixed by disabling exec of import/from (runtime/autoload/python3complete.vim, pythoncomplete.vim, upstream patch 9.2.0561) - CVE-2026-52859: out-of-bounds read in update_snapshot() when a terminal cell fills all six VTERM_MAX_CHARS_PER_CELL combining-character slots; the unterminated cell.chars[] loop walked past the array and appended OOB values into the scrollback buffer (src/terminal.c, upstream patch 9.2.0565) - CVE-2026-52860: code execution via crafted Python def/class headers in omni-completion: parameter default-values, annotations, and base-class expressions were passed to exec() and evaluated; fixed by stripping defaults/annotations and whitelisting base-class expressions to dotted names (runtime/autoload/python3complete.vim, pythoncomplete.vim, upstream patch 9.2.0597) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-52858: code execution via crafted Python module in omni-completion: exec() ran from/import statements in attacker-controlled buffers; fixed by disabling exec of import/from (runtime/autoload/python3complete.vim, pythoncomplete.vim, upstream patch 9.2.0561) - CVE-2026-52859: out-of-bounds read in update_snapshot() when a terminal cell fills all six VTERM_MAX_CHARS_PER_CELL combining-character slots; the unterminated cell.chars[] loop walked past the array and appended OOB values into the scrollback buffer (src/terminal.c, upstream patch 9.2.0565) - CVE-2026-52860: code execution via crafted Python def/class headers in omni-completion: parameter default-values, annotations, and base-class expressions were passed to exec() and evaluated; fixed by stripping defaults/annotations and whitelisting base-class expressions to dotted names (runtime/autoload/python3complete.vim, pythoncomplete.vim, upstream patch 9.2.0597)

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.6.tuxcare.els5.x86_64.rpm 12f6d1c7fd077e0071f304e6b0e76b40c73d679fe4f4477b93ce24e62c9fb317 vim-common-9.0.2153-1.amzn2.0.6.tuxcare.els5.x86_64.rpm 3117304c34ef499356b07e909e71758eca6c88568ffdfc149732f1f9687831e7 vim-data-9.0.2153-1.amzn2.0.6.tuxcare.els5.noarch.rpm 721ba148150a86271c0274fbaf126b0449205345eb7ba462cdb62b271edff37e vim-enhanced-9.0.2153-1.amzn2.0.6.tuxcare.els5.x86_64.rpm f77f93d86da916239005854bdcb991ccc4d92b71895fd9a3ef014ae69154d815 vim-filesystem-9.0.2153-1.amzn2.0.6.tuxcare.els5.noarch.rpm 9f6cfbe9d9fc475f0c71d63142788e8361abaab3fa19386cb7fb8c26977a6e7a vim-minimal-9.0.2153-1.amzn2.0.6.tuxcare.els5.x86_64.rpm 5e518d4c45062876f2963e4b267380e431ddcca289607e9fe38f57477d7b0879 xxd-9.0.2153-1.amzn2.0.6.tuxcare.els5.x86_64.rpm 87b2a942bfc20bf79db0a399e552dd499922759ec29ec6c029f3b9064738ea4e CLSA-2026:1782390266 TuxCare License Agreement 0 - CVE-2018-1000223: fix heap buffer overflow in WavInFile::readHeaderBlock() caused by an unchecked negative WAV "fmt " chunk length Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2018-1000223: fix heap buffer overflow in WavInFile::readHeaderBlock() caused by an unchecked negative WAV "fmt " chunk length

0 tuxcare-amazonlinux2-els soundtouch-1.4.0-9.amzn2.0.1.tuxcare.els1.i686.rpm 4c4080b51edceddec62b7567f8fe504a76ac50c73b7364186f248d3b80ac4f09 soundtouch-1.4.0-9.amzn2.0.1.tuxcare.els1.x86_64.rpm 48a25bd25998d63e0638440a9def93dc346049c76088df4dbefe9f7d6c84cb60 soundtouch-devel-1.4.0-9.amzn2.0.1.tuxcare.els1.x86_64.rpm 95d5ecc57b55ba6ebe98a5a76d444a0bebd72d18d7f91a5a786ec8f7501be9ec CLSA-2026:1783338716 TuxCare License Agreement 0 - CVE-2026-55693: out-of-bounds write in tree_count_words() and sug_filltree() when walking a crafted spell-file word trie deeper than MAXWLEN; bound the descent depth (src/spellfile.c) - CVE-2026-55892: stack out-of-bounds write in dump_prefixes() on :spelldump with a crafted prefix trie exceeding MAXWLEN; bound the descent depth (src/spell.c) - CVE-2026-57455: stack out-of-bounds write in spell_soundfold_sofo() when soundfold() is given an over-length word with an active SOFO spell table; add the missing length guard to the single-byte path (src/spell.c) - CVE-2026-57456: code execution in Python omni-completion: buffer-supplied docstrings were emitted inside triple-quoted literals passed to exec(), allowing breakout; quote them with repr() (runtime/autoload/python3complete.vim, pythoncomplete.vim) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55693: out-of-bounds write in tree_count_words() and sug_filltree() when walking a crafted spell-file word trie deeper than MAXWLEN; bound the descent depth (src/spellfile.c) - CVE-2026-55892: stack out-of-bounds write in dump_prefixes() on :spelldump with a crafted prefix trie exceeding MAXWLEN; bound the descent depth (src/spell.c) - CVE-2026-57455: stack out-of-bounds write in spell_soundfold_sofo() when soundfold() is given an over-length word with an active SOFO spell table; add the missing length guard to the single-byte path (src/spell.c) - CVE-2026-57456: code execution in Python omni-completion: buffer-supplied docstrings were emitted inside triple-quoted literals passed to exec(), allowing breakout; quote them with repr() (runtime/autoload/python3complete.vim, pythoncomplete.vim)

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.7.tuxcare.els2.x86_64.rpm 3fb3dfc6be733d1e963b50786ef91d9491232c0663feca21f1547e5db01b11d2 vim-common-9.0.2153-1.amzn2.0.7.tuxcare.els2.x86_64.rpm 7ac14a53d7b8ce919653764f026b2980a172efbe62f8149d56620b892d5d5bdb vim-data-9.0.2153-1.amzn2.0.7.tuxcare.els2.noarch.rpm 1da07c85ac9b8a6b1914c9b0e6e0178506d1386da47ee5c6e49f3274ec48d8dc vim-enhanced-9.0.2153-1.amzn2.0.7.tuxcare.els2.x86_64.rpm 72e5cba7d5525bb833f6db8aec73a775667bc96268d8c4684a90d84892c1c9f9 vim-filesystem-9.0.2153-1.amzn2.0.7.tuxcare.els2.noarch.rpm a7ed871e881c95a1f111d31d1c090468a6e196d64392abdd8e28eadbed936ca8 vim-minimal-9.0.2153-1.amzn2.0.7.tuxcare.els2.x86_64.rpm daaa40cb382d0dee7236408482b3914022e6b0cbf64e88aac30e0b49f132cdbe xxd-9.0.2153-1.amzn2.0.7.tuxcare.els2.x86_64.rpm b481be224ee3574f268b8262d7c314c250330024a7ddb054a00642b8ce2b1c84 CLSA-2026:1783340079 TuxCare License Agreement 0 - CVE-2026-11979: add bounds checks in xmlcatalog --shell usershell() to prevent stack buffer overflows when parsing overly long command lines Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-11979: add bounds checks in xmlcatalog --shell usershell() to prevent stack buffer overflows when parsing overly long command lines

0 tuxcare-amazonlinux2-els libxml2-2.9.1-6.amzn2.5.24.tuxcare.els3.i686.rpm 0b0cface688e0eaed3a44224df1a2b096e7c7cc1b17b679817c269dc349c6fcf libxml2-2.9.1-6.amzn2.5.24.tuxcare.els3.x86_64.rpm 56c34df6b01018c5e84efebaf1a5ace0435f0be9123c8a4c4b01442711b830bf libxml2-devel-2.9.1-6.amzn2.5.24.tuxcare.els3.x86_64.rpm ecaf688e01f2d5105e9528f5567a9c85b0b4a5c3d1896167d92ba94a2d1aedb7 libxml2-python-2.9.1-6.amzn2.5.24.tuxcare.els3.x86_64.rpm bf81291523deead7c63f410fc36b1661eeb872532debe8d4b3657c704df9acd8 libxml2-static-2.9.1-6.amzn2.5.24.tuxcare.els3.x86_64.rpm 8d5f34763148f49cd3cd625877b8a915fa5fdb1d5d134b4c983557a357ad4b30 CLSA-2026:1783340548 TuxCare License Agreement 0 - CVE-2026-58014: fix off-by-one heap under-read in g_key_file_get_locale_string_list() on empty key values - CVE-2026-58015: validate cookie_context in the DBUS_COOKIE_SHA1 client to prevent path-traversal arbitrary file reads - CVE-2026-58016: fix inverted <node> nesting guard in the D-Bus introspection XML parser (out-of-bounds read) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58014: fix off-by-one heap under-read in g_key_file_get_locale_string_list() on empty key values - CVE-2026-58015: validate cookie_context in the DBUS_COOKIE_SHA1 client to prevent path-traversal arbitrary file reads - CVE-2026-58016: fix inverted <node> nesting guard in the D-Bus introspection XML parser (out-of-bounds read)

0 tuxcare-amazonlinux2-els glib2-2.56.1-9.amzn2.0.13.tuxcare.els2.i686.rpm 2d7aab0c6146d04873cbd53eefd1734b56615eabaceba9bbe82b1d3d4da727cc glib2-2.56.1-9.amzn2.0.13.tuxcare.els2.x86_64.rpm 0d7220313d53e7ef9d51e075def59869981fdaf6a0a0958663cfba85fff07634 glib2-devel-2.56.1-9.amzn2.0.13.tuxcare.els2.x86_64.rpm 81f718d4b2a9b33e57e3d6682f47f1b5dc4cbb0e6f60940eb437aa9940442831 glib2-doc-2.56.1-9.amzn2.0.13.tuxcare.els2.noarch.rpm a1496e9844497ea69adc017d198a685ce30670a15628aebad8ac8f193759cc69 glib2-fam-2.56.1-9.amzn2.0.13.tuxcare.els2.x86_64.rpm f0a9e3c0e0aadd1e7f06c64b91d0fa2a2ce3ac83b3465d27bbd2eaebac93aaea glib2-static-2.56.1-9.amzn2.0.13.tuxcare.els2.x86_64.rpm f920fbc5d2ebf82543a9f3c18dc7ce16b020ad63c6e94a2e019b045e2d07fd22 glib2-tests-2.56.1-9.amzn2.0.13.tuxcare.els2.x86_64.rpm 9114fafd048b142d0373080bb3547dda62f1c8e5c272b687558002acc85f3698 CLSA-2026:1783339493 TuxCare License Agreement 0 - CVE-2026-6846: size reloc_info array by max target_index in xcoff_link_add_symbols to prevent heap-based buffer overflow Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-6846: size reloc_info array by max target_index in xcoff_link_add_symbols to prevent heap-based buffer overflow

0 tuxcare-amazonlinux2-els binutils-2.29.1-31.amzn2.0.2.tuxcare.els11.x86_64.rpm f02ebc2803dc990c82c0b6df24eb844f55a8f1786745049c1c5b51b03a05687f binutils-devel-2.29.1-31.amzn2.0.2.tuxcare.els11.x86_64.rpm aedd930efd08663f99ea609f58db7de431cb49501e2975c47ca20e6b7b690ea0 CLSA-2026:1783416127 TuxCare License Agreement 0 - CVE-2026-45664: complete AL2's Fix-CVE-2026-45664.patch (upstream 11ac03e5 only) with the follow-up fix 3d57d379 as Fix-CVE-2026-45664_2.patch, a hard MNG_MAX_LOOP_OPS cap on MNG LOOP/ENDL operations; the shipped ListLengthResource-gated guard defaults to unlimited and does not bound the loop-expansion DoS - CVE-2026-46520: complete AL2's Fix-CVE-2026-46520.patch (SetQuantumDepth guard only) with prerequisite upstream 7d1b54445 as Fix-CVE-2026-46520_2.patch, moving DestroyQuantumInfo after the do/while loop so the guard is reachable on multi-frame (adjoin) writes instead of dereferencing a freed pointer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45664: complete AL2's Fix-CVE-2026-45664.patch (upstream 11ac03e5 only) with the follow-up fix 3d57d379 as Fix-CVE-2026-45664_2.patch, a hard MNG_MAX_LOOP_OPS cap on MNG LOOP/ENDL operations; the shipped ListLengthResource-gated guard defaults to unlimited and does not bound the loop-expansion DoS - CVE-2026-46520: complete AL2's Fix-CVE-2026-46520.patch (SetQuantumDepth guard only) with prerequisite upstream 7d1b54445 as Fix-CVE-2026-46520_2.patch, moving DestroyQuantumInfo after the do/while loop so the guard is reachable on multi-frame (adjoin) writes instead of dereferencing a freed pointer

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els2.i686.rpm e2e20e8350a96067b1dda9cd2a42d8d227d2141553435605f65007a1dd5cd8fc ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els2.x86_64.rpm eac5f636c4141dc0e613682925cd3c9a45bda57ae85a0cecf2ba49bba651b286 ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els2.i686.rpm ee94844be633b963e0d83dda0f83f0e83b3974fd51d68c60783a471a265557cc ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els2.x86_64.rpm c7b5992f96fb22b49ae4ed37f3bc84129ca6956d1c6092b487161dc51c6b834d ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els2.x86_64.rpm 2bcf20c76ea71ec333624a11f93c505d49e6c2138d1fbadb7ad7f862d268f118 ImageMagick-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els2.x86_64.rpm fa3dcb34a526d4399f65df6e064fd9fe2d5755eb76a59eeaecdd8a4511b65186 ImageMagick-doc-6.9.10.97-1.amzn2.0.30.tuxcare.els2.x86_64.rpm 46fb1ee250f6e61d4e92e84f6e90e4a34dd726b1e3a7c9bdf62a6ffe6c57ae99 ImageMagick-perl-6.9.10.97-1.amzn2.0.30.tuxcare.els2.x86_64.rpm 3c67bcd6b2189b02b0a814c8edbcfc3b9b4bad00ba64db66a7eff86fff80d401 CLSA-2026:1783440777 TuxCare License Agreement 0 - CVE-2022-21619: improper handling of long NTLM client hostnames (JDK-8286526) - CVE-2022-21624: insufficient randomization of JNDI DNS port numbers (JDK-8286910) - CVE-2022-21626: excessive memory allocation in X.509 certificate parsing (JDK-8286533) - CVE-2022-21628: HttpServer no connection count limit (JDK-8286918) Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2022-21619: improper handling of long NTLM client hostnames (JDK-8286526) - CVE-2022-21624: insufficient randomization of JNDI DNS port numbers (JDK-8286910) - CVE-2022-21626: excessive memory allocation in X.509 certificate parsing (JDK-8286533) - CVE-2022-21628: HttpServer no connection count limit (JDK-8286918)

0 tuxcare-amazonlinux2-els java-1.7.0-openjdk-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2.x86_64.rpm 96e77360e4b2e9956986c78d513f6d69481ae4dbc6dbcb5070114f5c41735a9d java-1.7.0-openjdk-accessibility-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2.x86_64.rpm de88e18fd89c429bd5c55a9999425558c09a32c9af43ac2fc5e170b4c9e353ac java-1.7.0-openjdk-demo-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2.x86_64.rpm 7293fbe7f5ca1338aef6bfd3ee9933001e55185e4fa1a36c3beab8869a3c6148 java-1.7.0-openjdk-devel-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2.x86_64.rpm 3c2749d9a13502bb346f26852389c015766d4f5b03aa0d6a739a38891ccfb22a java-1.7.0-openjdk-headless-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2.x86_64.rpm 40f4be9f642f8cd65f2ec228b377a7ddc6d0c15caa91ee83a54d212f32a83bfb java-1.7.0-openjdk-javadoc-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2.noarch.rpm dec4d0b879e566aa654ba67f8b222c23c583b84e84ac5a7ab0c59ebe45a12cdd java-1.7.0-openjdk-src-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els2.x86_64.rpm 363e6620a0f2fc8c6e0f720dddb8f47f0d51e66ef95a527707eecb7e992c752b CLSA-2026:1783588433 TuxCare License Agreement 0 - CVE-2026-41992: Fix global buffer overflow in LZH decompression caused by reuse of shared decode tables Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-41992: Fix global buffer overflow in LZH decompression caused by reuse of shared decode tables

0 tuxcare-amazonlinux2-els gzip-1.5-10.amzn2.0.1.tuxcare.els1.x86_64.rpm eb573024411ddf027339ff4b58f7e2745ecf7b27fe222e4444cb09086e242c63 CLSA-2026:1783590094 TuxCare License Agreement 0 - CVE-2026-58010: fix an off-by-one out-of-bounds read in GVariant normal-form checking (gvs_tuple_is_normal) - CVE-2026-58011: reject out-of-range results in g_date_time_add_full() instead of returning an invalid GDateTime - CVE-2026-58012: use byte-wise case changing in g_regex_replace() substitutions under G_REGEX_RAW - CVE-2026-58013: avoid a memcmp() read past the buffer end in g_io_channel_read_line() with multi-byte line terminators Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58010: fix an off-by-one out-of-bounds read in GVariant normal-form checking (gvs_tuple_is_normal) - CVE-2026-58011: reject out-of-range results in g_date_time_add_full() instead of returning an invalid GDateTime - CVE-2026-58012: use byte-wise case changing in g_regex_replace() substitutions under G_REGEX_RAW - CVE-2026-58013: avoid a memcmp() read past the buffer end in g_io_channel_read_line() with multi-byte line terminators

0 tuxcare-amazonlinux2-els glib2-2.56.1-9.amzn2.0.13.tuxcare.els3.i686.rpm ff2455983e5d479df6cdf2c1dca122c2b2bbbfb99f894efe98eb34834731bea1 glib2-2.56.1-9.amzn2.0.13.tuxcare.els3.x86_64.rpm a2b4daba209e0aa0c9b5d1f9439767342f8a429c36c7c40994c383a2698d5d38 glib2-devel-2.56.1-9.amzn2.0.13.tuxcare.els3.x86_64.rpm 96001b389e77fce700c8885d49f46bfc9537be8b6dcc3e796f083239435b7d22 glib2-doc-2.56.1-9.amzn2.0.13.tuxcare.els3.noarch.rpm 27d819152777cd616f049d08245a1dd7fa465e8b5de75e0e25acad9d0f5a0da2 glib2-fam-2.56.1-9.amzn2.0.13.tuxcare.els3.x86_64.rpm 6368759f8856aa8e44201e75d60f91b4cf375e09807698c31570b2611e19e356 glib2-static-2.56.1-9.amzn2.0.13.tuxcare.els3.x86_64.rpm bb7da71d24a970758d4b42b3219fe97b279f2413b2907217b2cf40fd0be4aa16 glib2-tests-2.56.1-9.amzn2.0.13.tuxcare.els3.x86_64.rpm 887bb81f2696ff0274c249c0ff4dbb5529c28a5368a8e8d1db508fb60f492e3e CLSA-2026:1783590563 TuxCare License Agreement 0 - CVE-2026-55957: enforce credential validation in JNDIRealm.bindAsUser when GSSAPI SASL is configured Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55957: enforce credential validation in JNDIRealm.bindAsUser when GSSAPI SASL is configured

0 tuxcare-amazonlinux2-els tomcat-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm 96a3e354e01df0825b45533486398257525b42607947490b7b40922918461638 tomcat-admin-webapps-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm cdfd21d87189a43aa5511bc85be97d9094e5526275413fcc1b1b59d6c7338d64 tomcat-docs-webapp-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm bf9cca2a0192561f172f2938c1ddfdeff3e235558b6c95aa4efa750787535950 tomcat-el-2.2-api-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm ecd125616a5569c471e68ed5eb59075c61f78b6284467da0c586f0350a1af572 tomcat-javadoc-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm cae022f7580df057d9a9a25ed058034bd48dbaf993fc7b7400998246ae2df1fd tomcat-jsp-2.2-api-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm 65d67af62a93dd20005c92f5622cdf9df32137cb22e8fa730f4a48bd542b2dbe tomcat-jsvc-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm 5c746c54af7fbf4b9b9d881a992acd8e955d8ef39d25785d734fed3a9c98828a tomcat-lib-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm 1b2f08fa4237511f9a20e361af5be06b07f5bee804a055530f2c6481fcc6c009 tomcat-servlet-3.0-api-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm 5c775a693aa29f0ed44e739f4c4171e0a4cf12051a44ffdcdfd05c2b6f7f7f97 tomcat-webapps-7.0.76-10.amzn2.0.16.tuxcare.els3.noarch.rpm 39a8acdd2f3bed6e86f5ba20eb85758aa28912517a5df0301923c13eff878fa6 CLSA-2026:1783605010 TuxCare License Agreement 0 - CVE-2024-21094: fix C2 "Exceeded _node_regs array" register-allocator overflow (JDK-8317507) - CVE-2024-21138: bound symbol length in SymbolTable::lookup to prevent infinite loop (JDK-8319859) - CVE-2025-53057: validate BMPString and decode X.500 DN components with correct charset (JDK-8360937) None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-21094: fix C2 "Exceeded _node_regs array" register-allocator overflow (JDK-8317507) - CVE-2024-21138: bound symbol length in SymbolTable::lookup to prevent infinite loop (JDK-8319859) - CVE-2025-53057: validate BMPString and decode X.500 DN components with correct charset (JDK-8360937)

0 tuxcare-amazonlinux2-els java-1.7.0-openjdk-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els1.x86_64.rpm d84ad8af896d4b86e613ae39b2edbe0be76667ad79dc0c0241837b86cf81edc5 java-1.7.0-openjdk-accessibility-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els1.x86_64.rpm 121af8edc97fd34ef559e387e91e61a5a677f3d9b6cc645517a58b5d99eb30df java-1.7.0-openjdk-demo-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els1.x86_64.rpm ba0584969f67ebac2ae9a0edd1f3b979514f1a9da6e3f438ec94b414bb30862d java-1.7.0-openjdk-devel-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els1.x86_64.rpm d1b51558d58523429616a1dae4c687bfa3847eac7f31c78fa669fadb448ee7b2 java-1.7.0-openjdk-headless-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els1.x86_64.rpm 6551be3e83b2b276f173edd6911cb3b31bda42664e6c78d928cdfce231a7c56a java-1.7.0-openjdk-javadoc-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els1.noarch.rpm 8869e7d7cad0b34c9306bde93780ed43fd0f828caf722c5e0a0175c081d8170f java-1.7.0-openjdk-src-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els1.x86_64.rpm fe0ba50826b5bdb6415794e4f87e4a6e54693193edcd22ba1cfa90149a352af3 CLSA-2026:1783710275 TuxCare License Agreement 0 - CVE-2026-58050: fix integer overflow in publickey attribute allocation (CVE-2026-58050) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58050: fix integer overflow in publickey attribute allocation (CVE-2026-58050)

0 tuxcare-amazonlinux2-els libssh2-1.4.3-12.amzn2.2.7.tuxcare.els2.i686.rpm e4dce4be7c14229b8a61837e855ecbcbe4200c9dfdc7b8d68e7076f48a0a0508 libssh2-1.4.3-12.amzn2.2.7.tuxcare.els2.x86_64.rpm b5049995739d3abf921fbb8f7673f6c9e5f4a47c8aa67dc2b662d41f3971b778 libssh2-devel-1.4.3-12.amzn2.2.7.tuxcare.els2.x86_64.rpm bd965669b39b781b74837d0b31be42803e1b3ee98385ea2e4eee351fb3178be8 libssh2-docs-1.4.3-12.amzn2.2.7.tuxcare.els2.noarch.rpm 6f57db5cc4353c285a7b2cef4b27a90666f0ca57e7a0a6a00dd72d4a3da3837d CLSA-2026:1783941783 TuxCare License Agreement 0 - CVE-2026-56361: out-of-bounds access in AcquireKernelBuiltIn() (magick/morphology.c) from an off-by-one in the user-kernel origin bounds check, which accepted xi/psi equal to the kernel width or height - CVE-2026-56367: integer overflow of image->rows * psd_info->channels in the PSD RLE reader (coders/psd.c ReadPSDMergedImage) leading to an undersized allocation and heap out-of-bounds access on the 32-bit (i686) build - CVE-2026-56368: memory leak of the acquired QuantumInfo in the raw-pixel writers (coders/bgr.c, cmyk.c, gray.c, rgb.c, ycbcr.c) when OpenBlob() fails and Write*Image returns early - CVE-2026-56370: out-of-bounds write in ConnectedComponentsImage() (magick/vision.c) where a user connected-components:keep/remove id indexes the object array without a range check - CVE-2026-56378: out-of-bounds write in the PCD Huffman decoder DecodeImage() (coders/pcd.c) where crafted input advances the output pointer past the end of the luma buffer Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56361: out-of-bounds access in AcquireKernelBuiltIn() (magick/morphology.c) from an off-by-one in the user-kernel origin bounds check, which accepted xi/psi equal to the kernel width or height - CVE-2026-56367: integer overflow of image->rows * psd_info->channels in the PSD RLE reader (coders/psd.c ReadPSDMergedImage) leading to an undersized allocation and heap out-of-bounds access on the 32-bit (i686) build - CVE-2026-56368: memory leak of the acquired QuantumInfo in the raw-pixel writers (coders/bgr.c, cmyk.c, gray.c, rgb.c, ycbcr.c) when OpenBlob() fails and Write*Image returns early - CVE-2026-56370: out-of-bounds write in ConnectedComponentsImage() (magick/vision.c) where a user connected-components:keep/remove id indexes the object array without a range check - CVE-2026-56378: out-of-bounds write in the PCD Huffman decoder DecodeImage() (coders/pcd.c) where crafted input advances the output pointer past the end of the luma buffer

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els3.i686.rpm 568654e12a260c1b2dc4a5ceb6851482a82b50843d7b87ca06af5ce5815e1b8d ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els3.x86_64.rpm 8142c1fc9d9bcd19db040d6b8016035f9c29ef46c8d37c5b12e5cfd9431e6469 ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els3.i686.rpm db0d39b1f485ad5653f118c629d8b193abb647ec4efa140e20b37e693ec7a28b ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els3.x86_64.rpm 1944a5bdbaf47f5e0b1283e7626181212f71f37dd48b2ed1ea6e94cc20bbc664 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els3.x86_64.rpm 212da28988a0d7403271196f66bebfc7da570810af16755127f7e24d973e4246 ImageMagick-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els3.x86_64.rpm 3af4c94b6d94544558f2c7a03cf0afd0da057a2d6c655e747ac317fcb415aa04 ImageMagick-doc-6.9.10.97-1.amzn2.0.30.tuxcare.els3.x86_64.rpm f37828f40ac1efa363dc608e8898d02fa4c83e492a7a04796f41b9c32f142e52 ImageMagick-perl-6.9.10.97-1.amzn2.0.30.tuxcare.els3.x86_64.rpm 559da5e90023f178d70e95ab3cc5a950039b205fdcfed116c77b328b83e62e51 CLSA-2026:1784018641 TuxCare License Agreement 0 - CVE-2026-10536: fix HTTP/2 stream-dependency use-after-free by making CURLOPT_STREAM_DEPENDS/CURLOPT_STREAM_DEPENDS_E a no-op and stopping h2_pri_spec() from emitting cross-stream dependency references Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-10536: fix HTTP/2 stream-dependency use-after-free by making CURLOPT_STREAM_DEPENDS/CURLOPT_STREAM_DEPENDS_E a no-op and stopping h2_pri_spec() from emitting cross-stream dependency references

0 tuxcare-amazonlinux2-els curl-8.3.0-1.amzn2.0.12.tuxcare.els4.x86_64.rpm eaeca450fdbba71c31b2da8c8b5a29f6c2d4c789413706a31e896a137626befa libcurl-8.3.0-1.amzn2.0.12.tuxcare.els4.i686.rpm 612da2471e14040a36a18067d3d3aeea51309306397cedad99fe6f41eaf7fb11 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els4.x86_64.rpm eb8f3b4cb12415bcc61dd7b4a2c4ae33038de98cb87acdefa79535d267a3f7c5 libcurl-devel-8.3.0-1.amzn2.0.12.tuxcare.els4.x86_64.rpm 4e6c9381b2c266e452fd7cb19bf46da3f504202b633335c75bd1e38a65ec7eab CLSA-2026:1784154747 TuxCare License Agreement 0 - CVE-2026-53462: complete the CheckPrimitiveExtent fix - create an unwind stack on allocation failure instead of leaving a stale buffer state Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53462: complete the CheckPrimitiveExtent fix - create an unwind stack on allocation failure instead of leaving a stale buffer state

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els4.i686.rpm 3b779a341c75bb8f265ec69b9b737cb30c03df749542c1cb1b9f2eaff9d2aae0 ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els4.x86_64.rpm 770459ffa4722bcb6c5cc01d1fad20cc546b99bb30a71015cddad297d09c83ee ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els4.i686.rpm 1a630e8fe6a2225807215b4f0cc7c7a502455376acfe27d81535f807cd5f592a ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els4.x86_64.rpm 6176b9cbd9d1c09e655dc5f698db74a5b9da27ee0aa988c5f6e7c66b4a4dd18c ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els4.x86_64.rpm 8e5fcc1b8b68c3d7b907ae8771b2506db11de1732a87e73c1a05874e540f7f59 ImageMagick-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els4.x86_64.rpm 88e16fd7db574542078e6e3fbf241bbe76220bb1acbb26d51273448fc48ff66b ImageMagick-doc-6.9.10.97-1.amzn2.0.30.tuxcare.els4.x86_64.rpm 845f9f6494de726affbb05bb614d47ee07f6518f0745296d63bfe8689ffc3e62 ImageMagick-perl-6.9.10.97-1.amzn2.0.30.tuxcare.els4.x86_64.rpm a09c0ba5f1b124283b32a6c0dc2a0656d9e4fc19496ce99ac9b94e4236b2c449 CLSA-2026:1784204028 TuxCare License Agreement 0 - CVE-2026-61857: heap use-after-free in the XML entity parser (magick/xml-tree.c ParseEntities) via a crafted XMP profile; add a NULL check on the ResizeQuantumMemory return before it is dereferenced - CVE-2026-61870: memory leak of the pixel virtual-memory buffer in the VIFF encoder (coders/viff.c WriteVIFFImage) when the colormap allocation fails Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-61857: heap use-after-free in the XML entity parser (magick/xml-tree.c ParseEntities) via a crafted XMP profile; add a NULL check on the ResizeQuantumMemory return before it is dereferenced - CVE-2026-61870: memory leak of the pixel virtual-memory buffer in the VIFF encoder (coders/viff.c WriteVIFFImage) when the colormap allocation fails

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els5.i686.rpm b1fb855b6bb3d86eb2dc76fab51587b5c42e1794f1645851d7479e4bc8448d50 ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm 9b944415fe1b00b9a73dd11ce0d67c4981bf0dbcb897aaef8ea30a435e7585b6 ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els5.i686.rpm f2775763dfb251db3d07bf22b96c9d0605234d604fc79bafa6ad59098f931040 ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm f85c5621d9a400f0c0d116b3c8969946432baba95b0b485db04a4279861c9ec9 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm 71ae5ef81327d712e20147ef5dd65e7fd6986f213f529dada8e4c5a5ae3beec5 ImageMagick-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm 9978bd76224c428cc8dab83aa564f0f6654373cdb2a85363d5e880074a417228 ImageMagick-doc-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm d6f74d54892ef04c548686bd8f3f5192f9242cf2d786fe489f532fea603984ae ImageMagick-perl-6.9.10.97-1.amzn2.0.30.tuxcare.els5.x86_64.rpm e77743b1e8402730764ad94007b7d408c2d0120d766427257d36ac0e0732db85 CLSA-2026:1784267832 TuxCare License Agreement 0 - CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in server_request_tun() (upstream 8dfe7ed6) - CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS (upstream 5d04ca6a) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59999: make DisableForwarding=yes override PermitTunnel=yes in server_request_tun() (upstream 8dfe7ed6) - CVE-2026-60000: count postponed GSSAPI attempts against MaxAuthTries by finishing auth in input_gssapi_errtok(), fixing a pre-auth resource DoS (upstream 5d04ca6a)

0 tuxcare-amazonlinux2-els openssh-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm ff7cdc4d1b28b179fb664ea81f531fb2e19a10c258343b0984fc5f79ccdecb06 openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm 413454908cd84a02c9fecfc28270b1f1b5445b90d194beb60583aae7110e09be openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm bfadd130aa5360f934a2b974a0745810de6de4191aeba54dc7061dc3f28a36be openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm 272b1e053476f2e401562c5e72e325716472b70bd49a9b6b81c30dfb4d98abde openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm bd35938079fc20be186f21592a2bf250adc4a78f405cab7c864da5735907a46b openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm 26e385dd1b766a2b1398f5ca21b8a946e322b2c1ff419ac0f0270e5365d065cc openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm ca72679939c7b679a0702291ef5c090dfdd7e4fd6b92d0b2529b7dbf8e90e5ba openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els2.x86_64.rpm f82bd2353dce8f64437d9bc094e765667d91e205745ba9b6fa14882252f75825 pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els2.x86_64.rpm 4e7b658cee6c8b6b319fb2e61b13b5a0f09092cc082563f272b612287c5b0cfe CLSA-2026:1784268336 TuxCare License Agreement 0 - CVE-2026-40468: change sofar to size_t in do_sub to avoid integer overflow Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40468: change sofar to size_t in do_sub to avoid integer overflow

0 tuxcare-amazonlinux2-els gawk-4.0.2-4.amzn2.1.3.tuxcare.els1.x86_64.rpm ce5cafcb35157882f057be7f6017c84f57b3e57fe81db1159a27fd7b787aa41f CLSA-2026:1783603157 TuxCare License Agreement 0 - CVE-2024-20952: constant-time RSA PKCS#1 v1.5 TLS premaster secret unpadding (JDK-8317547) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-20952: constant-time RSA PKCS#1 v1.5 TLS premaster secret unpadding (JDK-8317547)

0 tuxcare-amazonlinux2-els java-1.7.0-openjdk-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4.x86_64.rpm c17897ce2fc76f6ca816dd6d570472eb32811dc56e901711df8a902a09bd0a05 java-1.7.0-openjdk-accessibility-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4.x86_64.rpm 6923603fddb60fe38dba32c24b22db79049a54db3c8416e5b7bbddba4cd2a464 java-1.7.0-openjdk-demo-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4.x86_64.rpm 72ab6a91b91465f5df412d35fbf0727a1dfee281956aa1ec45191b19baff93b3 java-1.7.0-openjdk-devel-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4.x86_64.rpm 0613b3f7eb1105c1d1b7744f23bce7c711528b587c94c3ef4011b2369b22c10b java-1.7.0-openjdk-headless-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4.x86_64.rpm 07b291ad3f78fa1df349d5b982fd2b5e4cf9c021e6717288db38ad93bbf7a1f5 java-1.7.0-openjdk-javadoc-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4.noarch.rpm 21229c3b666d6f822a138df2135fd3cfec0f633109c90e7975def4f7d09adfdd java-1.7.0-openjdk-src-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els4.x86_64.rpm 5c8c6fb3a3fb571e6add68c0771fc1542e9917049cba50dd91ca725399b5a1e7 CLSA-2026:1784285226 TuxCare License Agreement 0 - amazonlinux2els: fix %prep source-dir rename to use version macro - xfs: resample the data fork mapping after cycling ILOCK - kernel.spec: drop the kernel-livepatch subpackage - net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331} - KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113} None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- amazonlinux2els: fix %prep source-dir rename to use version macro - xfs: resample the data fork mapping after cycling ILOCK - kernel.spec: drop the kernel-livepatch subpackage - net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331} - KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}

0 tuxcare-amazonlinux2-els bpftool-5.10.259-258.1046.amzn2.tuxcare.els1.x86_64.rpm a296ba70c699b2e192de45d8afce4e61640e53832ee33dcecdab31a2e5cd7212 kernel-5.10.259-258.1046.amzn2.tuxcare.els1.x86_64.rpm fb0b40471792770b87c6c323c464c07ad294eb342c3aae0e5444c2d90c5e3b81 kernel-devel-5.10.259-258.1046.amzn2.tuxcare.els1.x86_64.rpm 397d668a3f9471ac4f613e67d8e598453a80b32dc2d51e11e825c0846b7c8477 kernel-headers-5.10.259-258.1046.amzn2.tuxcare.els1.x86_64.rpm 0469cc1294bb902f4e05efb2e1b4a4759d609f5bee724688b171f4104fcfbdb8 kernel-tools-5.10.259-258.1046.amzn2.tuxcare.els1.x86_64.rpm b58f632d8fce0d155a4f72c5571bd71d6b39347b1e7c7ceb97907492a65186e8 kernel-tools-devel-5.10.259-258.1046.amzn2.tuxcare.els1.x86_64.rpm a23f23670916c5ad38888ccf5511dad4ab363241ec1f15f11b677db2406c7589 perf-5.10.259-258.1046.amzn2.tuxcare.els1.x86_64.rpm 78385ef9f4aaf04cf18fbf9e62840db80880c58cd9851484cfb62d3440b7cb5d python-perf-5.10.259-258.1046.amzn2.tuxcare.els1.x86_64.rpm daecb534a21975699d48d149506ee6baeac98652b7b414a39bae196fe86d4194 CLSA-2026:1784305797 TuxCare License Agreement 0 - CVE-2026-20213: fix integer overflow in Aspack-triggered PE rebuild size calculation leading to a heap buffer overflow - CVE-2026-20214: fix FSG unpacker section loop underflow causing an out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow causing under-allocation and heap buffer overflow - CVE-2026-20216: enforce InstallShield extraction limits against cumulative decompressed output - CVE-2026-20217: fix PESpin unpacker cleanup bitmap tracking causing invalid free - CVE-2026-20243: fix ALZ archive parser out-of-bounds buffer write and scan-limit bypass leading to denial of service via crafted ALZ file Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-20213: fix integer overflow in Aspack-triggered PE rebuild size calculation leading to a heap buffer overflow - CVE-2026-20214: fix FSG unpacker section loop underflow causing an out-of-bounds write - CVE-2026-20215: fix 7z substream count overflow causing under-allocation and heap buffer overflow - CVE-2026-20216: enforce InstallShield extraction limits against cumulative decompressed output - CVE-2026-20217: fix PESpin unpacker cleanup bitmap tracking causing invalid free - CVE-2026-20243: fix ALZ archive parser out-of-bounds buffer write and scan-limit bypass leading to denial of service via crafted ALZ file

0 tuxcare-amazonlinux2-els clamav1.4-1.4.4-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 6362adbe78f5a7c269333f701d7ee6d24afd19f2b60847ff3fd6d441b2d1417e clamav1.4-data-1.4.4-1.amzn2.0.1.tuxcare.els1.noarch.rpm 58db99b1642b713513634ef152e8da3cf0ec77e0ef4988614476e2d06a2b79d6 clamav1.4-devel-1.4.4-1.amzn2.0.1.tuxcare.els1.x86_64.rpm c9009a4dea51c6f2bf91389f518d068a35cd10a9ec7e4da3e3ae67a108f466d7 clamav1.4-doc-1.4.4-1.amzn2.0.1.tuxcare.els1.noarch.rpm f5be8e9c8470669a97be87f4823e61b62f08d20913d3a7b517c78abfc497222b clamav1.4-filesystem-1.4.4-1.amzn2.0.1.tuxcare.els1.noarch.rpm d7649f3e2e7158496fb809763847f8f7ab79e948be25ded679110d76c4a86bef clamav1.4-freshclam-1.4.4-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 6dd27638c6e56146c46de225f006ab9495f73b6f98dc8b23eb1dd6c094e0a4bb clamav1.4-lib-1.4.4-1.amzn2.0.1.tuxcare.els1.x86_64.rpm ee8206e6d2a127a1b4072909b2e7c9ba1edfcf89b4efcc282381cb724a9d305d clamav1.4-milter-1.4.4-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 735d5562a177490c5228e11bc19a9d7bc68d0f6030519cd2f639ef8afaacd4d8 clamd1.4-1.4.4-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 17e42bd7c58a7977d422ca056b1e5c3c833264e86ecc030d1a3e35c524b5c48e CLSA-2026:1784536664 TuxCare License Agreement 0 - CVE-2026-58471: fix heap buffer overflow in filename charset conversion - CVE-2026-58472: fix integer/heap buffer overflow in html_quote_string Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-58471: fix heap buffer overflow in filename charset conversion - CVE-2026-58472: fix integer/heap buffer overflow in html_quote_string

0 tuxcare-amazonlinux2-els wget-1.14-18.amzn2.1.tuxcare.els2.x86_64.rpm 75de884a311d7e27ba10545e49c1af47bbdd656315209861d21d056dff12881c CLSA-2026:1784552720 TuxCare License Agreement 0 - CVE-2026-40469: add overflow checking in do_sub to avoid buffer overrun on 32 bit systems Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-40469: add overflow checking in do_sub to avoid buffer overrun on 32 bit systems

0 tuxcare-amazonlinux2-els gawk-4.0.2-4.amzn2.1.3.tuxcare.els2.x86_64.rpm 2bdbbe67b74d778990ed84dd1cb669a90726ce0a06635640f46a00c9ecf97f20 CLSA-2026:1784622009 TuxCare License Agreement 0 - CVE-2026-61866: memory leak in the JNG encoder: WriteOneJNGImage (coders/png.c) leaked the cloned JPEG alpha image and its image-info when opening the alpha blob failed; destroy both helper objects before raising the writer exception Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-61866: memory leak in the JNG encoder: WriteOneJNGImage (coders/png.c) leaked the cloned JPEG alpha image and its image-info when opening the alpha blob failed; destroy both helper objects before raising the writer exception

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els6.i686.rpm 8c01438604aa7f5140037c71341bc0f880b42203a41d2cbd0277f7be3f11908d ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm 03df790c5b8ce6431450bcec7d5f7f6fff16b1def8fa6c57d5aeceddd64ff8a1 ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els6.i686.rpm 203dc978dde0bf10f6d45011ea8fe3cef95e9e5259413de0691fb7145456ceb0 ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm c9b62828565a0d749c172d40df68f686cedcaaa4b9328719e507927363958618 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm 9dc437a1eaf6d908754431ffd35038acab8b3d86808fcaf9bb7be568b4d71f34 ImageMagick-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm 912b04ad60da9154547da830df0a09d0355735a5f2a1879e411a85f83503581e ImageMagick-doc-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm a14ea18b2ef9dda585d23eee2211684d5fd4a40625eb068c06fd7a7d9543aa2a ImageMagick-perl-6.9.10.97-1.amzn2.0.30.tuxcare.els6.x86_64.rpm c834d00c41145607bdee34d3ec4c5024940043635ee57e7e8b790a24fdf55ba1 CLSA-2026:1784645415 TuxCare License Agreement 0 - CVE-2026-61863: memory leak in WriteGROUP4Image when temporary-file creation fails before releasing the cloned Huffman image Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-61863: memory leak in WriteGROUP4Image when temporary-file creation fails before releasing the cloned Huffman image

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els7.i686.rpm ff19aaf5e87e85fa3c5c57b8ec033e220f3666316c2e54154abcea01924d7421 ImageMagick-6.9.10.97-1.amzn2.0.30.tuxcare.els7.x86_64.rpm 152fec7c76f4ff6579e95ab9810468f9e7aee9e745932aa47afd0a2cdabdec51 ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els7.i686.rpm 9649a14bab631a13beaa8f0688e5a8a775cc4ffb4d743f89d083b11021141902 ImageMagick-c++-6.9.10.97-1.amzn2.0.30.tuxcare.els7.x86_64.rpm 9edac46631297eaa7b6ebb7199a55397be6fcac00b38929706c710e3c075b8bf ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els7.x86_64.rpm 1c063a951862123a34e7850a1dc41e1f5fa2f3e12b4fac9bb9a7d57948c41005 ImageMagick-devel-6.9.10.97-1.amzn2.0.30.tuxcare.els7.x86_64.rpm dce9a5829bc40113af9489d20c0921de77e963b8be096e68cf48d4485d56fe3b ImageMagick-doc-6.9.10.97-1.amzn2.0.30.tuxcare.els7.x86_64.rpm b0edefd63b0005a0c12f1ddf7ab9c3a3e85efdb7fb66204d20a8ff04c7e7b210 ImageMagick-perl-6.9.10.97-1.amzn2.0.30.tuxcare.els7.x86_64.rpm 0db862e7f59c41e3aa89151841fea5950e4cd52f2f1b8b586010c7c834d85183 CLSA-2026:1784707811 TuxCare License Agreement 0 - CVE-2026-15308: fix quadratic complexity in incremental parsing of long unterminated markup declarations in HTMLParser by buffering feed() input, preventing a CPU denial-of-service on uncontrolled data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15308: fix quadratic complexity in incremental parsing of long unterminated markup declarations in HTMLParser by buffering feed() input, preventing a CPU denial-of-service on uncontrolled data

0 tuxcare-amazonlinux2-els python-2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64.rpm 41a4d91000519883e8b9d7626219e33b18453b37efb09b328866959bed3553bf python-debug-2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64.rpm 0353996880856bc7d55525de51f8b381e137630f1a086e8f9dcd21787ebbeaf4 python-devel-2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64.rpm 28196b9acd8d41ddcfbdd5959fc8df1de1ecbf1bcbfb1dae88d5b65c7f96dc57 python-libs-2.7.18-1.amzn2.0.20.tuxcare.els2.i686.rpm ced21057b9257cba4a795216f0d6c032a138e43f3525c489c7baca812a21370d python-libs-2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64.rpm 82ff4015187c0fa97197ffc3ca9e62b733e0ec4b26564b44c85a61f19a323f32 python-test-2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64.rpm 96d6ac041610288b1895309bffce114d1b87e591b94484e9d5f29b71b4b8a297 python-tools-2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64.rpm d5e33230fb840630951e08ebc1bd4b8cb3884d798d6f846a378d8303137f88fb tkinter-2.7.18-1.amzn2.0.20.tuxcare.els2.x86_64.rpm 80f68f1b9932838f83238fb632c37d65677901758f9bdea212b376fedb5c55cb CLSA-2026:1784711868 TuxCare License Agreement 0 - Rebase to Amazon Linux 2 perl-5.16.3-299.amzn2.0.4 - Drop CVE-2026-8376 backport now included by the vendor - CVE-2026-13221: do not build a regex trie when the branch-to-tail delta would overflow the 16-bit next-offset field (GH#23388) - CVE-2026-57432: fix integer overflow in S_measure_struct on a large pack/unpack repeat count, avoiding an out-of-bounds heap read Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to Amazon Linux 2 perl-5.16.3-299.amzn2.0.4 - Drop CVE-2026-8376 backport now included by the vendor - CVE-2026-13221: do not build a regex trie when the branch-to-tail delta would overflow the 16-bit next-offset field (GH#23388) - CVE-2026-57432: fix integer overflow in S_measure_struct on a large pack/unpack repeat count, avoiding an out-of-bounds heap read

0 tuxcare-amazonlinux2-els perl-5.16.3-299.amzn2.0.4.tuxcare.els1.x86_64.rpm f5d13b7d7dd5e4cc6cbf3b8b19d306a9f7815126be07dddca844d944d432b010 perl-CPAN-1.9800-299.amzn2.0.4.tuxcare.els1.noarch.rpm 5b87b34003704f4a351a5779410c377d7d80dabedf779c3ce3ae92d42f0d3d58 perl-ExtUtils-CBuilder-0.28.2.6-299.amzn2.0.4.tuxcare.els1.noarch.rpm 642dd00a18be41b07987b5e9a533522238efd6d1287b32147db7c5261db0fb7e perl-ExtUtils-Embed-1.30-299.amzn2.0.4.tuxcare.els1.noarch.rpm c762f1f8347870e6088416f10446d08b51671155db29de194ba46ffeb1b82719 perl-ExtUtils-Install-1.58-299.amzn2.0.4.tuxcare.els1.noarch.rpm 6754ccbfa060a00ff819ee0c9f6087344e10febdc30e87877debf033cbf07020 perl-IO-Zlib-1.10-299.amzn2.0.4.tuxcare.els1.noarch.rpm 6535089c08144d8a024356fbf47500319674c8dda66ad910c9b40b4e0ceaf409 perl-Locale-Maketext-Simple-0.21-299.amzn2.0.4.tuxcare.els1.noarch.rpm bc1c138fe646a02dc4955445e52cea5d2f42b01453de8abd15b89d56aec1b1e6 perl-Module-CoreList-2.76.02-299.amzn2.0.4.tuxcare.els1.noarch.rpm 0cfd539902ddabe5bd274e7f1d824e7978555d2fbbf2160cd935381b2f6ce311 perl-Module-Loaded-0.08-299.amzn2.0.4.tuxcare.els1.noarch.rpm 0039f8a2cad25b22b9bc017a8d9f08853ef72f6d2cff68985f66b6ae3ab5b0ee perl-Object-Accessor-0.42-299.amzn2.0.4.tuxcare.els1.noarch.rpm 4f076b8c4ba51a25c5e297518f4218cf504902433bb6ae6c7086f88ffa05318d perl-Package-Constants-0.02-299.amzn2.0.4.tuxcare.els1.noarch.rpm 51dc1ae257427bfd54079f3c3fc5b8b1b51491c4abf550d5bda93cce6e19e128 perl-Pod-Escapes-1.04-299.amzn2.0.4.tuxcare.els1.noarch.rpm 1a7e00892d8f523a854e9bee5f9c6e1f974ffba48c3119299bf7f8993da0c912 perl-Time-Piece-1.20.1-299.amzn2.0.4.tuxcare.els1.x86_64.rpm 01c2206860722fd905d70e983f13904e44b19dcd4b591e88ec28da017d293c26 perl-core-5.16.3-299.amzn2.0.4.tuxcare.els1.x86_64.rpm a300c3f3ada24cc3bf4d002fb5fb193a6c5695282446d6e77530998ecc96707a perl-devel-5.16.3-299.amzn2.0.4.tuxcare.els1.x86_64.rpm 30b5559d5b27992f638e0afeba2751336899759b3ce89781f05dd0fd9f2eb532 perl-libs-5.16.3-299.amzn2.0.4.tuxcare.els1.i686.rpm 61f7c4408a828bd62c66db609c1cbfa7d4f683eeba67e513efe32ac2e45e31ce perl-libs-5.16.3-299.amzn2.0.4.tuxcare.els1.x86_64.rpm 1d5e60b48bbc05d00d33bdaf6f85ad3a82b671427678876bbc8d7a2413a12509 perl-macros-5.16.3-299.amzn2.0.4.tuxcare.els1.x86_64.rpm df700557348754c10ef9f8c78c6bcb2b96307e233cf0045f6ec9708f42763269 perl-tests-5.16.3-299.amzn2.0.4.tuxcare.els1.x86_64.rpm 235eb38fd2ff9eaec2d897e0beee6a907d8d0a85227413b271e08a80341be2dc CLSA-2026:1784713635 TuxCare License Agreement 0 - CVE-2026-15308: fix quadratic complexity (denial of service) in incremental parsing in html.parser.HTMLParser when an unterminated construct is fed across many feed() calls Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-15308: fix quadratic complexity (denial of service) in incremental parsing in html.parser.HTMLParser when an unterminated construct is fed across many feed() calls

0 tuxcare-amazonlinux2-els python3-3.7.16-1.amzn2.0.26.tuxcare.els2.i686.rpm 21b4c9ce61acc5c95cc344a1c330c9b3f8cef9493dd088abdf5d86130cfb5d54 python3-3.7.16-1.amzn2.0.26.tuxcare.els2.x86_64.rpm 18b4aee7c8e93d0a96872b7bfe3bbdc4471003bda59aa53a8cafcad0d4b8a5a1 python3-debug-3.7.16-1.amzn2.0.26.tuxcare.els2.x86_64.rpm 24da195ee49acd3fe49b5857de1ea509d3b5c2be795e2e86174852625b267566 python3-devel-3.7.16-1.amzn2.0.26.tuxcare.els2.x86_64.rpm 9ceddee15e6224708c890bfd025fd5ccbf029e7dd277a3e3ae458b780b723af4 python3-libs-3.7.16-1.amzn2.0.26.tuxcare.els2.i686.rpm 88dc1bc65acf0d979becf2d9685bb475459d0b92eec93cfaa99525dafdc20a79 python3-libs-3.7.16-1.amzn2.0.26.tuxcare.els2.x86_64.rpm f65cfe57f0841276140598639d6f611c4660a1ea6d41a0d25c73eed225219179 python3-test-3.7.16-1.amzn2.0.26.tuxcare.els2.x86_64.rpm a4a11149c5b7f06a94386027c869adda0892b12a4cae85357bcf2ab40eefe1ef python3-tkinter-3.7.16-1.amzn2.0.26.tuxcare.els2.x86_64.rpm 03566987bf4ab3b87610bebc56d800a63db9d0aee43b87bbabeab9b7fb663832 python3-tools-3.7.16-1.amzn2.0.26.tuxcare.els2.x86_64.rpm 2544ba1ec4b191a9d1d55e93c5506e549fec3a5aed04cfc7a83c57f2e01266f7 CLSA-2026:1784715002 TuxCare License Agreement 0 - CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-47729: fix out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions

0 tuxcare-amazonlinux2-els squid-3.5.20-17.amzn2.7.27.tuxcare.els2.x86_64.rpm ecfdb56c5acf9360c6804ee581055d08e7f362721d45492d22e0db60c6f690e2 squid-migration-script-3.5.20-17.amzn2.7.27.tuxcare.els2.x86_64.rpm 55b78c7828a6fd9336fcb88c386aa81d28f8cbd675921b7d9e83eb266eda46c6 squid-sysvinit-3.5.20-17.amzn2.7.27.tuxcare.els2.x86_64.rpm e011267bab692e9f377d3fe7f4b5016ad444079298d93dbbd839cb0873c354cd CLSA-2026:1784796363 TuxCare License Agreement 0 - CVE-2026-56003: property buffer overflow in computeProps / ComputeScaledProperties in src/bitmap/bitscale.c - Upstream commit dff957a5158da038a282a59a31fe736702732939 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56003: property buffer overflow in computeProps / ComputeScaledProperties in src/bitmap/bitscale.c - Upstream commit dff957a5158da038a282a59a31fe736702732939

0 tuxcare-amazonlinux2-els libXfont2-2.0.3-1.amzn2.tuxcare.els3.i686.rpm f55015a101bffc8b9ce2241d410cd6e6c6808b1a8030bc206d32cf7cb0a60b5e libXfont2-2.0.3-1.amzn2.tuxcare.els3.x86_64.rpm 05496fc967560dfb81862b2a17755dec7d4afec1e67a29cb0f2f3b08d7d361a5 libXfont2-devel-2.0.3-1.amzn2.tuxcare.els3.x86_64.rpm a70d9401389731fa1959632fc14ec477232a9bb203c18d225488ec9c0ee1cb45 CLSA-2026:1784799614 TuxCare License Agreement 0 - CVE-2026-59856: arbitrary command execution in PHP omni-completion; a class/trait name from the edited buffer was interpolated unescaped into a search() pattern run via win_execute(), letting a single quote plus | inject Ex commands (:!); quote the name with string() (runtime/autoload/phpcomplete.vim). Adds a functional test. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-59856: arbitrary command execution in PHP omni-completion; a class/trait name from the edited buffer was interpolated unescaped into a search() pattern run via win_execute(), letting a single quote plus | inject Ex commands (:!); quote the name with string() (runtime/autoload/phpcomplete.vim). Adds a functional test.

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.7.tuxcare.els4.x86_64.rpm 4397b9ad7065d3172f3a7afa56725803c61b470e5aad0fc02742084233ef0fa1 vim-common-9.0.2153-1.amzn2.0.7.tuxcare.els4.x86_64.rpm e485e27192324291f7dea1dceecdec8e1706da882dc313a7d5c302651e46431d vim-data-9.0.2153-1.amzn2.0.7.tuxcare.els4.noarch.rpm 6fb0fc1e6c4bb8b7b7afa3aa1513981aba717d7c4ccb3170c36ad3aca738ba76 vim-enhanced-9.0.2153-1.amzn2.0.7.tuxcare.els4.x86_64.rpm ce1857ab9a0281510a092d85a836f8a6e1114905a3f80b39ac5478e82bb245b4 vim-filesystem-9.0.2153-1.amzn2.0.7.tuxcare.els4.noarch.rpm 1a690f8efb426c6daa58eb8f3a9dd38f70036729b796333be0ceda27fcb7c105 vim-minimal-9.0.2153-1.amzn2.0.7.tuxcare.els4.x86_64.rpm a9a53319840ecbf79297a620b6dbbe9ad723053fec731c1e619239ebd14cd7cc xxd-9.0.2153-1.amzn2.0.7.tuxcare.els4.x86_64.rpm 181d919a7484c14454b487d8543dc21018afc09817ac19eca9a70b8593f3dd58 CLSA-2026:1785759156 TuxCare License Agreement 0 - CVE-2026-7260: uncontrolled recursion in phar_get_link_source(); a tar-based phar archive holding circular symlinks exhausts the C stack and crashes the PHP process - CVE-2026-7260: NULL pointer dereference in phar_get_fp_offset() reached from phar_get_entry_data() once phar_get_link_source() reports a circular chain; the phar:// stream read path had no guard (upstream bug #69720) - phar_get_link_location() permanently truncated entry->filename at the last '/', so a symlink chain walked with two cursors resolved later hops against the wrong directory; the separator is now restored - CVE-2026-9672: use of uninitialized memory in the bundled libgd GIF decoder; LWZReadByte_() left most of the LZW code table uninitialized and kept decoding after the end code Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-7260: uncontrolled recursion in phar_get_link_source(); a tar-based phar archive holding circular symlinks exhausts the C stack and crashes the PHP process - CVE-2026-7260: NULL pointer dereference in phar_get_fp_offset() reached from phar_get_entry_data() once phar_get_link_source() reports a circular chain; the phar:// stream read path had no guard (upstream bug #69720) - phar_get_link_location() permanently truncated entry->filename at the last '/', so a symlink chain walked with two cursors resolved later hops against the wrong directory; the separator is now restored - CVE-2026-9672: use of uninitialized memory in the bundled libgd GIF decoder; LWZReadByte_() left most of the LZW code table uninitialized and kept decoding after the end code

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 8fb53f1e9a06ebd5ca70538f0003d32fe98438661796ffe9b02376e6a8810e79 php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 8a58bb463618ac0fabfa1a0ac3a5a3373c93f5151e4c637db64271fa7f2a7027 php-cli-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 71d8b695ca55d50f7314b33f4654a2a66ed274cbf25dbd5bf638050b99a7f8cb php-common-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 68d73164fa7660181d865d83f3f8d41e2a6b9d515844aee8e4e3daa282087308 php-dba-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 7dd69515c0c09325a8c3b87b8b58be01bf0644f3d85c4158d04ad4a8863481da php-devel-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm d2483b3cc2a36e5c01380e77c35cc6213ecde5c80842a778c5157f49c984ba2b php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm f485d70dee13fa5c48e8382823462ffbcb812d8c77df9b5e3eda48b8cb2baf58 php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 52d00cd40a6b7346f4d4853f42f49d5eb7b17ffe7146a4b8ee5c0127b21fed87 php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 25b31af6f859a117148553e4667c606824c74cd4b029ac8fec379af057e8817f php-gd-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm bce9689715e8e486ed9501061839900553540aa2b5056ca2c337814298bc9f90 php-intl-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm e45bd0528fc39fe4abfd3d5b4cd98ba42319ad138257ebe94cb4cef3219ab694 php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm a8f1f3abfbe89064de99187a52a61be5054d9a47455f96963e04a33736b7da7b php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm a992937bd9d1f0ed8d2979ad05937aa35ec4f8b1b8e93e20a7343a132debff07 php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm edf2b77938d23f9756c40dbca75fc11b816b048b426503bb3a26fb448a839182 php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 4ef6b412a5ee9ad42130476d3f72c690909e177b347ba3758120bcf60b63aae6 php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 8470987806c4c4b7468d93711be01ddc304fafe767f1b636199cfee0b2a9a34b php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 08015c3431f9318d7222ce7c7edd89111e1ed7fe1e1dd1e2bbff7a930fd25405 php-process-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 9461479274376ea5ad460b7fae89018f97353048e33548a2161efb12039e845d php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm f3963c0cac0f75508651ae12c82b15c8b0f0d271ddf933dbe773122b12a955af php-recode-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 4badb02a8f7505370529aca768ce548f03cff665796b45b1eb01e4000516d4bb php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm 95623b25dab1ab353ca883e479ccf488a7ad04f40549f7a86f04640868dac436 php-soap-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm cb522df8d0b37e9ce422c733248a9433887cccfce8b619591a30169a0fc8a7ec php-xml-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm fcd97b6a33aaebd87c5671bf959e182ca9127664d197b2e8d84e508a0d021d95 php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els3.x86_64.rpm f9b80fe03ff983f599df8ad256e7b2c40f45f00eb2fc4f89a59d30590cd3f144 CLSA-2026:1778171569 TuxCare License Agreement 0 - Merge of the Amazon Linux 2 cups package (cups-1.6.3-51.amzn2.0.9) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Merge of the Amazon Linux 2 cups package (cups-1.6.3-51.amzn2.0.9)

0 tuxcare-amazonlinux2-els cups-1.6.3-52.amzn2.tuxcare.els5.x86_64.rpm 823b5d691d4ce858645a64c003ea560829550c7838abc64cdbfca20bf7ac565e cups-client-1.6.3-52.amzn2.tuxcare.els5.x86_64.rpm 50effd21ecc3a132e830e8015f8c921cdf42f88f91f5a9ab61dc6eb705afd350 cups-devel-1.6.3-52.amzn2.tuxcare.els5.x86_64.rpm a77e2cc776035c4ceb9419d590116fc648ce6686f597dfa7ed9bcc788241254e cups-filesystem-1.6.3-52.amzn2.tuxcare.els5.noarch.rpm b7833c3956d68454a5c806a62d6d6d70b24230359c0cfcc637655e5176744b39 cups-ipptool-1.6.3-52.amzn2.tuxcare.els5.x86_64.rpm 41d61f3fe35e2fd86066f8ddd9873a800fa1f8f264dd67a167624a5d4866d9da cups-libs-1.6.3-52.amzn2.tuxcare.els5.i686.rpm e364e2630245d998b60e145b114c3fe8fcd181706e75e70056751c3324c11a38 cups-libs-1.6.3-52.amzn2.tuxcare.els5.x86_64.rpm 8653d1f2803624950686ad888347b78f455727cbb60e0f06cbb87acb059dfdd8 cups-lpd-1.6.3-52.amzn2.tuxcare.els5.x86_64.rpm 2c0ad7926ea9811a7b619338c2b0fd15eaf8bc1edc337e518aef85531eb7e16f CLSA-2026:1780479407 TuxCare License Agreement 0 - CVE-2026-45700: fix out-of-bounds heap write in planar bitmap decoder bounds check - CVE-2026-44421: fix out-of-bounds heap write in RDPGFX cache-to-surface bounds check Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-45700: fix out-of-bounds heap write in planar bitmap decoder bounds check - CVE-2026-44421: fix out-of-bounds heap write in RDPGFX cache-to-surface bounds check

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm 91952a3c05db457aabb62fca7f5688268840bd69d7f27cb75513ffdd886fe898 freerdp-devel-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm 9910c9066858f385a4ea5d31e36972c3abbc37cff5368a9b2f0be0f36d614272 freerdp-libs-2.11.7-1.amzn2.0.11.tuxcare.els2.i686.rpm 21296215316405c0208c359923752f2f44a4cfa574564ca264b7f58cc9f44f45 freerdp-libs-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm fc898efbb3a3ebb14de49d0ea4a67351cbe37949017c7652cd927e0a516e5ea9 libwinpr-2.11.7-1.amzn2.0.11.tuxcare.els2.i686.rpm 1081a99b2e6515e8664f66f1207afa977ca538b09a99335e81a15c9617692072 libwinpr-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm 00117b69f97398056ecec163cd2adc238a7e5a8b4a322bc08a01343b32ef04ff libwinpr-devel-2.11.7-1.amzn2.0.11.tuxcare.els2.x86_64.rpm baf9765dfe0324c694f3c99bf3f990c39e70ae694705cbaac16851ae57150e8e CLSA-2026:1786018364 TuxCare License Agreement 0 - CVE-2026-56407: prevent signed integer overflow of the entity textLen field by capping the entityValuePool length at INT_MAX in doProlog Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56407: prevent signed integer overflow of the entity textLen field by capping the entityValuePool length at INT_MAX in doProlog

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.7.amzn2.tuxcare.els4.i686.rpm 4cb5d370236d4ef1a772dc127126094f73998f86f5158533c8e5a207e69cdfc6 expat-2.1.0-15.0.7.amzn2.tuxcare.els4.x86_64.rpm 219a88394a62f45b0bb7a281ad14823238bb5165abbf4fa2d8274d129dac22f2 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els4.x86_64.rpm dc4c36dcbdef5606c01e57b7c55cce2a55b3fa4f5b02d0fea10cffe308862e49 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els4.x86_64.rpm 3466409b7a2eb3b92893b6a9c55acf6c1e179f124b6afaee9cb49df0e37ac694 CLSA-2026:1786112100 TuxCare License Agreement 0 - CVE-2026-8927: detect proxy changes read from environment so Digest proxy auth state is flushed instead of leaking the Proxy-Authorization header for one proxy into a request sent through another - CVE-2026-8286: require an SSL configuration match before reusing a pooled connection for a clear-text transfer that may upgrade to TLS via STARTTLS - CVE-2026-8932: include the client certificate key, key type, key password, key blob and certificate type in SSL configuration matching so a connection or cached TLS session established with different mTLS credentials is not reused Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-8927: detect proxy changes read from environment so Digest proxy auth state is flushed instead of leaking the Proxy-Authorization header for one proxy into a request sent through another - CVE-2026-8286: require an SSL configuration match before reusing a pooled connection for a clear-text transfer that may upgrade to TLS via STARTTLS - CVE-2026-8932: include the client certificate key, key type, key password, key blob and certificate type in SSL configuration matching so a connection or cached TLS session established with different mTLS credentials is not reused

0 tuxcare-amazonlinux2-els curl-8.3.0-1.amzn2.0.12.tuxcare.els5.x86_64.rpm 2bc63268dd9158e81d011bef03f93228a8729ab14c2bd8826ea1e41cb517566b libcurl-8.3.0-1.amzn2.0.12.tuxcare.els5.i686.rpm 8bab41c5d9844c66b5e569d809cc3d2b161ab4c311f5b33eacfc750035a2b2c6 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els5.x86_64.rpm 1a8aef22ffc476e419a4446d86e2bd322578bc168c2c3ec4f4de76d91877129d libcurl-devel-8.3.0-1.amzn2.0.12.tuxcare.els5.x86_64.rpm c46b3faa9ada1ab2de62873fce254f9467c2c1f2c6d53149db849eaeebb30d51 CLSA-2026:1776463733 TuxCare License Agreement 0 - CVE-2025-0689: fix heap-based buffer overflow in UDF filesystem module - CVE-2025-1125: fix integer overflow in HFS+ filesystem module Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-0689: fix heap-based buffer overflow in UDF filesystem module - CVE-2025-1125: fix integer overflow in HFS+ filesystem module

0 tuxcare-amazonlinux2-els grub2-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm e1d62e4c8bae075a0263ff2de6e33e5dffe2913dc27c460ee63878ff387a47f6 grub2-common-2.06-14.amzn2.0.7.tuxcare.els1.noarch.rpm 45562525d9ad5ad32e5e03b416cabaf9b6252528aeba49f71ccc918baba450f1 grub2-efi-x64-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm 658bcf5c75ae556031978e5eb010362f75f31aaf2709d648566b4233022788b0 grub2-efi-x64-cdboot-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm 5a7a8bb8d240e235012f2bb8453e6fa21ea4bb9c5c158b3c0ea6f3b28100c959 grub2-efi-x64-ec2-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm 53e59e063626a774646734ea3e870d0d5f29a83efd4ee5d97180ff617b650e0a grub2-efi-x64-modules-2.06-14.amzn2.0.7.tuxcare.els1.noarch.rpm f2aefc39943ac043e136eaee354beaee531c9d06428ec8e2262e1e69145f921f grub2-emu-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm 42d07d98a3bc603577df2aa82e611f9c0465452bedc7a38986ee29d78439dc9a grub2-emu-modules-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm 49e10e892f0011308539bae2a17ea07757a448a1f2728b06a651e3f82a2c91f3 grub2-pc-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm 902ac5276dbd80ea7ab15e82f8739b72385640fa485a71d02462221ee0f0bcf3 grub2-pc-modules-2.06-14.amzn2.0.7.tuxcare.els1.noarch.rpm 5ed578aa30193a010683333d6801b229a04afaea24999bfb209ce293453f7ce5 grub2-tools-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm ef219f585b896980f8819d37ae444afe7e5e048bec6bf5ca6165aa49cddaac7a grub2-tools-efi-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm 5f9fb4e2e7d1bae4d1afedbd8ecbd6749c2858eca39aba947a2853f568c00fa8 grub2-tools-extra-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm 2115886b476adbf9bb441d61c7ca1b6f2757f03cdcc299fc1673ddd709b223a2 grub2-tools-minimal-2.06-14.amzn2.0.7.tuxcare.els1.x86_64.rpm c5f456651db6fb80ff0c1cbe4746a57c95d94688e2c9a4e3c7c1ab72e9ce0e24 CLSA-2026:1786359169 TuxCare License Agreement 0 - CVE-2026-4424: fix RAR LZSS window size mismatch after PPMd block (heap OOB read) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-4424: fix RAR LZSS window size mismatch after PPMd block (heap OOB read)

0 tuxcare-amazonlinux2-els bsdcpio-3.1.2-14.amzn2.0.6.tuxcare.els8.x86_64.rpm 26dc6b87ef63bac4ff6b1ea395263d7245d0cac45859eef8055ab7b3ec552c69 bsdtar-3.1.2-14.amzn2.0.6.tuxcare.els8.x86_64.rpm b179982115a103695c53957bb3b964978ad58aabe4b0ad07c0e59f7fa66eda30 libarchive-3.1.2-14.amzn2.0.6.tuxcare.els8.i686.rpm 6ecdbfa302eb601c7930580d5d5157d5c8efab45520b30ec22e202ebe911cc93 libarchive-3.1.2-14.amzn2.0.6.tuxcare.els8.x86_64.rpm b3a3d2c1d756c182663144a6b82322179158d0611831d7cd2a0e6032d601fc29 libarchive-devel-3.1.2-14.amzn2.0.6.tuxcare.els8.x86_64.rpm fe022e3136508e5d51fd06b3582d62ec1b5595e8d0ca508efefc04550a0c6ca7 CLSA-2026:1786359635 TuxCare License Agreement 0 - CVE-2024-12086: improve basis-file handling for --partial-dir, --backup-dir and --keep-dirlinks transfers - CVE-2026-29518: improve symlink handling when a daemon module resolves paths, confining them to the module instead of refusing symlinks Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-12086: improve basis-file handling for --partial-dir, --backup-dir and --keep-dirlinks transfers - CVE-2026-29518: improve symlink handling when a daemon module resolves paths, confining them to the module instead of refusing symlinks

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els9.x86_64.rpm b9bfea8b17c658f39abef0df9bff1e5db2f928b4d8f573a20d7e3e705d9248a7 CLSA-2026:1786471149 TuxCare License Agreement 0 - Rebase onto vendor freerdp-2.11.7-1.amzn2.0.12 - CVE-2026-64624: compile out parsing of command-line options embedded in .rdp files Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto vendor freerdp-2.11.7-1.amzn2.0.12 - CVE-2026-64624: compile out parsing of command-line options embedded in .rdp files

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.12.tuxcare.els1.x86_64.rpm bd781045da5a9adfac550bb3a9d7fc0fd042d3c6e9ec21027e1d8e65d2e4c587 freerdp-devel-2.11.7-1.amzn2.0.12.tuxcare.els1.x86_64.rpm e6b03dbf3e8362e777fd3d81a256b62ebd9346de0071e8bac286700fd8095226 freerdp-libs-2.11.7-1.amzn2.0.12.tuxcare.els1.i686.rpm b26879d063fb11fe3883bc904e1d1e8a2fb307f150a36bbb10f7783685babc4b freerdp-libs-2.11.7-1.amzn2.0.12.tuxcare.els1.x86_64.rpm d7c8f8e760fff6f3ef250d6d3d3d3035364b233e6908c801e3b56f0f9495d49d libwinpr-2.11.7-1.amzn2.0.12.tuxcare.els1.i686.rpm 43d565312199a345ceb9f67d5c54f7f30bf1eccb14530ba31685b2fb851d12d4 libwinpr-2.11.7-1.amzn2.0.12.tuxcare.els1.x86_64.rpm 416d04f16242ea83208e8794c758f1daf656bc3db1593959f595033f6d85d01d libwinpr-devel-2.11.7-1.amzn2.0.12.tuxcare.els1.x86_64.rpm 34e179ee23b744d3ecad1cf90a74c50a60e21604460ab506b3b92f5cfa9351bc CLSA-2026:1786475233 TuxCare License Agreement 0 - CVE-2026-12064: honour --proto-default in the command line tool instead of guessing the scheme from the hostname, so the SSH host verification options are applied to a schemeless URL transferred over SCP or SFTP Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-12064: honour --proto-default in the command line tool instead of guessing the scheme from the hostname, so the SSH host verification options are applied to a schemeless URL transferred over SCP or SFTP

0 tuxcare-amazonlinux2-els curl-8.3.0-1.amzn2.0.12.tuxcare.els6.x86_64.rpm c128155b4f7d67d004e945522db9ae5a50d45c5696c0ab52109eec37b3fe2b16 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els6.i686.rpm 5f0a1901accee278635b5524d5a4a6157ddf9a30433c569ceccaecdd48474186 libcurl-8.3.0-1.amzn2.0.12.tuxcare.els6.x86_64.rpm 56446288eaadfd32d9b23b946cdf44be3394114da3ee347990cb1e01c8d031b1 libcurl-devel-8.3.0-1.amzn2.0.12.tuxcare.els6.x86_64.rpm df81d4c03016652b4c27c89c47e76ba70f9aff8a5222bd979be4890cdd42c3b6 CLSA-2026:1786485437 TuxCare License Agreement 0 - CVE-2026-34502: heap buffer overflow in the memcached client, where an unterminated response line lets the length arithmetic in get_server_line() and the stat_read_* helpers underflow - CVE-2026-34501: heap buffer overflow in the redis client, where the unvalidated bulk-string length in grab_bulk_resp() drives allocation and underflows for lengths below two - CVE-2026-32327: unbounded element nesting accepted by the XML parser builds an arbitrarily deep tree that exhausts the stack when walked recursively; the parse now stops at APR_XML_MAX_DEPTH (256) Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34502: heap buffer overflow in the memcached client, where an unterminated response line lets the length arithmetic in get_server_line() and the stat_read_* helpers underflow - CVE-2026-34501: heap buffer overflow in the redis client, where the unvalidated bulk-string length in grab_bulk_resp() drives allocation and underflows for lengths below two - CVE-2026-32327: unbounded element nesting accepted by the XML parser builds an arbitrarily deep tree that exhausts the stack when walked recursively; the parse now stops at APR_XML_MAX_DEPTH (256)

0 tuxcare-amazonlinux2-els apr-util-1.6.3-1.amzn2.0.1.tuxcare.els1.i686.rpm 26b7b831ac4d15c816edf18411f408a0e8a14bf04f103f130461c93a3e6af449 apr-util-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm e85432052291443adaff0e59334ade997b98e4d55772f8f3bcabc91a1c0102b7 apr-util-bdb-1.6.3-1.amzn2.0.1.tuxcare.els1.i686.rpm cdd37dbe0a6f64d51f45438b0a99a5a88cb43ab8b3fea32727df522641158ab3 apr-util-bdb-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 4a50ae2b7af467e7373eeb33e75e1b941f4fe903c1043675a7d4511b6b0a350c apr-util-devel-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 5dcf9c6b5adc2fd1800b761d6b22c5c7057f1c210341c6c79a48f68a50701c8e apr-util-ldap-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 27b62d31386e860d4e208116962b3037666c584d3cf3989996ca5d18b4b1544a apr-util-mysql-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 7318d36d6bd8e8b4447a9fef84ad542ec7ebea8aff1e395373a50c208053bfbe apr-util-nss-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 0560d6a5211d10d5bf64bccbb603874ffa3380dd38df58c54c999edd2ea02989 apr-util-odbc-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm f260b6a35d156e8d3b13e5822ce2a92cf0cdc919f4c1c446739657fb83630cfb apr-util-openssl-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 1fd15833efe24fb6eaa9412667a778365206fc0378757b4384ea4df6d828dcb8 apr-util-pgsql-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 99f50f459aee7ccd64d78bff8dfd95d2d57d3e0813f8a2d4e2214568691ca0e8 apr-util-sqlite-1.6.3-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 6df929b4663b3be8f6ea61f24d059b2382e80dbf6aa6f58711b8d3ba0261ed4a CLSA-2026:1786487606 TuxCare License Agreement 0 - CVE-2026-50252: draw outgoing UDP ports from a shared randomized pool so a source port can no longer be mapped to a worker thread for cache poisoning Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-50252: draw outgoing UDP ports from a shared randomized pool so a source port can no longer be mapped to a worker thread for cache poisoning

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.14.tuxcare.els2.x86_64.rpm 9fcd72c25d9ebc9efd1bd696328fc413c065d2a467490548aa33ff2c314d373d python3-unbound-1.7.3-15.amzn2.0.14.tuxcare.els2.x86_64.rpm 940d4fbd72d50f22f1ddf5d847e201d0052d004baa561a5306f8cde4e976ee1f unbound-1.7.3-15.amzn2.0.14.tuxcare.els2.x86_64.rpm b074f3571aed5d614a4909b3169a8c8fb952f761e18b92ff3652e2182f908702 unbound-devel-1.7.3-15.amzn2.0.14.tuxcare.els2.x86_64.rpm 6cc9fac2e49b0d2f59e41b82a6b309f2fa8a9dc5efc741f2870417b41ad9a2b7 unbound-libs-1.7.3-15.amzn2.0.14.tuxcare.els2.i686.rpm 12b8cdcc659474667347701522edf813bf94e5d810e2c910164b1194f390b14f unbound-libs-1.7.3-15.amzn2.0.14.tuxcare.els2.x86_64.rpm e7a40af58feb137901619634c7e879ef6e51cbfba73d51cd129104660417658f CLSA-2026:1786495157 TuxCare License Agreement 0 - CVE-2026-66032: sftp_open() nullifies data after freeing it in the FX_OK branch, so a server that answers SSH_FXP_OPEN with SSH_FXP_STATUS/FX_OK and then makes the follow-up HANDLE request fail with anything other than EAGAIN can no longer drive the if(badness) arm into freeing the same pointer twice Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-66032: sftp_open() nullifies data after freeing it in the FX_OK branch, so a server that answers SSH_FXP_OPEN with SSH_FXP_STATUS/FX_OK and then makes the follow-up HANDLE request fail with anything other than EAGAIN can no longer drive the if(badness) arm into freeing the same pointer twice

0 tuxcare-amazonlinux2-els libssh2-1.4.3-12.amzn2.2.8.tuxcare.els2.i686.rpm 2800831cb567a81e5781a7f2e2add0d52ac5dcd0b94d96e50ad728e44eccaa96 libssh2-1.4.3-12.amzn2.2.8.tuxcare.els2.x86_64.rpm c2e1981e40e1b05cc3bfd9003f145ff7ccf52e920b094a4a9650d3441797f65e libssh2-devel-1.4.3-12.amzn2.2.8.tuxcare.els2.x86_64.rpm 912a0a5ed311e803407aa9f9a4aef382fa506ce23e74a77174205ae20180d6dc libssh2-docs-1.4.3-12.amzn2.2.8.tuxcare.els2.noarch.rpm ca23f1fdaedf0aa3152e73c479da42cabe048a6c485889a2d5d28117bc7738bd CLSA-2026:1786541196 TuxCare License Agreement 0 - CVE-2025-21587: constant-time RSA PKCS#1 v1.5 unpadding and TLS premaster secret version check (JDK-8337692) - CVE-2026-22016: apply secure processing to the DocumentBuilderFactory used by XPath evaluation (JDK-8370529, JDK-8356294) - CVE-2026-47063: enforce RFC 5652 signed attributes and RFC 3161 id-ct-TSTInfo content type (JDK-8381049) - CVE-2026-21945: restrict AIA caIssuer URIs via com.sun.security.allowedAIALocations (JDK-8368032) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-21587: constant-time RSA PKCS#1 v1.5 unpadding and TLS premaster secret version check (JDK-8337692) - CVE-2026-22016: apply secure processing to the DocumentBuilderFactory used by XPath evaluation (JDK-8370529, JDK-8356294) - CVE-2026-47063: enforce RFC 5652 signed attributes and RFC 3161 id-ct-TSTInfo content type (JDK-8381049) - CVE-2026-21945: restrict AIA caIssuer URIs via com.sun.security.allowedAIALocations (JDK-8368032)

0 tuxcare-amazonlinux2-els java-1.7.0-openjdk-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5.x86_64.rpm e3658bc9959ff791cbe4d47624ec80b77af9efe18816d1ae82145e1f612439ae java-1.7.0-openjdk-accessibility-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5.x86_64.rpm 6bcd160a6c6a0fd9f13c1caf7ba4ac604c8be3b7223c11f8cec49ce04616ace8 java-1.7.0-openjdk-demo-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5.x86_64.rpm a9f84811fd726c45bdd486cf9673200776dcd52b2342b707e191ac3e42d94bad java-1.7.0-openjdk-devel-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5.x86_64.rpm cc0643093ca1e1a36f8bc1d09d44008364092d7cc05b3c6410b1c90dca9a508d java-1.7.0-openjdk-headless-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5.x86_64.rpm 892de0623958d9e7f388f1528d233e11b1ed6dab36022e2ec918f383c84ed014 java-1.7.0-openjdk-javadoc-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5.noarch.rpm e9597795d551d40251d76d0122d3df944350a74c172f1ad0af4eff3e39c592d5 java-1.7.0-openjdk-src-1.7.0.321-2.6.28.2.amzn2.0.3.tuxcare.els5.x86_64.rpm 56dfd7c73010dcce6b1149d3344336ed44578eb1d6947f11a4cbcdf680b609a0 CLSA-2026:1786542733 TuxCare License Agreement 0 - CVE-2026-25749: fix buffer overflow in 'helpfile' option handling in get_tagfname(); replace unbounded STRCPY of p_hf with a bounded vim_strncpy leaving room for the "tags" suffix (src/tag.c). Adds a functional test Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-25749: fix buffer overflow in 'helpfile' option handling in get_tagfname(); replace unbounded STRCPY of p_hf with a bounded vim_strncpy leaving room for the "tags" suffix (src/tag.c). Adds a functional test

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.9.tuxcare.els2.x86_64.rpm eb47b1f725154d46ae57def337b58df426ed5897cd7d51398faf1e3c31d7d6d0 vim-common-9.0.2153-1.amzn2.0.9.tuxcare.els2.x86_64.rpm 457808f799b31dfbcc495197859ac30886a57734b7f803dec41c961d81ca98d1 vim-data-9.0.2153-1.amzn2.0.9.tuxcare.els2.noarch.rpm c78d55983eabd9014746c0ed0fb33e081651c66c990b1f98b121e83d1d7c0b67 vim-enhanced-9.0.2153-1.amzn2.0.9.tuxcare.els2.x86_64.rpm 3cff1e1050b213d35fbbdd5407d8a790eeb5cc51e8a55b165d399445cf0b29f1 vim-filesystem-9.0.2153-1.amzn2.0.9.tuxcare.els2.noarch.rpm 8b24017f9fddaa1a44d0db32bc5c017f4046d2d41eba207b450b03224fc49aa5 vim-minimal-9.0.2153-1.amzn2.0.9.tuxcare.els2.x86_64.rpm c99c19e3b7c6beffcec9d117513697622812a6b910058dd7e766810b6c2d407d xxd-9.0.2153-1.amzn2.0.9.tuxcare.els2.x86_64.rpm 107939abcd8cffdfa2f9c043665456594cf245fb9cade90bc6f417ca374f6650 CLSA-2026:1786616154 TuxCare License Agreement 0 - Rebase onto AL2 4.10.16-24.amzn2.0.7 (picks up CVE-2026-3238, CVE-2026-4480, CVE-2026-4408); re-apply _samr_ValidatePassword DC restriction that AL2's CVE-2026-4408 backport omitted None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto AL2 4.10.16-24.amzn2.0.7 (picks up CVE-2026-3238, CVE-2026-4480, CVE-2026-4408); re-apply _samr_ValidatePassword DC restriction that AL2's CVE-2026-4408 backport omitted

0 tuxcare-amazonlinux2-els ctdb-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 400eebc887a176a56e4fa1c5f0e4afa29fe2caaca39c8c8e0254a744a9681e8c ctdb-tests-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 0bcf2a966f4180439c1f073ec9fd60a9b75a4c5abffeabdccacd0a316bc0b064 libsmbclient-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm 2921cd74c703c403be657801b9d9dda222054d27bff74dadbb4993eb64762c8d libsmbclient-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm dea264226e779870f4b19058a8af5b5ede9724980bdb52c524458609de93883e libsmbclient-devel-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 9026defbfae89f76262d7ad09cdffd209dd657a3b7944c10d0713e3ab7fb9c2f libwbclient-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm 93906bc4a33b437f2f18a7508c2a6463b360f009af4919b8b17a6c7f5c87559a libwbclient-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 4de6e55b0c261bff5023f7fb2487e2ae1014ae12bfe778b633b55c872089389b libwbclient-devel-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 24262471639cd45455bad9c3908bd144286301bc98f70c149b056a708fe19200 samba-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 336aea9386ff7671e41e54c0aa860fd7a3e4600664cf92d16cc3e737a828f436 samba-client-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm e33bc3d98f6f43fd5592f54f9e04a45d62be56760f6c53b2d3a1d9fb05acfef0 samba-client-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm b386d5fd5a864d8b0b1a6c77affc027ef78629418fdb8ea2cdb94f7891d4a398 samba-client-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 62f2e32738af60d8cf37bd787ed21a30fbddbb15ce6658decd9db9deb9435584 samba-common-4.10.16-24.amzn2.0.7.tuxcare.els1.noarch.rpm fb4434b9fd42132bc826130adbbfd6d4a13a08faab971dad522c4f8d6505c6b5 samba-common-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm 896c837e355e833ba684ef85f4b78afecc36098fa340f97fd850e3639442c38c samba-common-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 807c9ed504fee8f94c6b20f881e5590ea077b8889b9f66967d05df6fd60740d6 samba-common-tools-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 24fe3590acbe56ab0632db3926faee24a898a676139802bb0f6fb1b9dee73f4f samba-dc-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 15bf3f63ee6882d50540b76d4b6cfd5edacf08c245ff2f3f06e29d647f6c2b17 samba-dc-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm fb5291e2bc04c02fedf2830c3da58e765419ae32fbb0e0c6442067f3fc25d0fa samba-dc-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm d40674baad50cb4415546a6b07fac1021d035432cc8cf6f6cff9f948b7456f42 samba-devel-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 2939fd723695871126063d4644db5dd7f1b60707660669085eda0dd6909f1c02 samba-krb5-printing-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm e2ef080e8b42451a29023f2a01dec8c79156d939027ba84c0dce679035f045f1 samba-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm 1e12e0502b3012e4ecd3640d8128724f249588c83224ca6d870b959eff6a0964 samba-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm ce7243503c76c95b3d201f005083f08f8eea7b376b5e22a46d981e619dde1592 samba-pidl-4.10.16-24.amzn2.0.7.tuxcare.els1.noarch.rpm 4b17473f306e1df7a19790f14b46a4d447f7a3b7c2502244de06b4b849394866 samba-python-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm 7d740f869f4a7814a4d88812feda45a4c25c31e43b8f16e7d789b4358871b402 samba-python-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 814cfb7d0a2bd6d2e59661e92f3a35d0c8a250d131ad5d85429f75c283dba0a7 samba-python-test-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 398b067433cbe163e9411ff6cb44a4ea6197b1a513036fe5c236203fe536d6d3 samba-test-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 7f6974a8ba8ecc36f7c45c453a20c0e86e420afcdbc77c1ddc3115eb9d337168 samba-test-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm bbf10078eb33566ed5ca0ed5ad9a5e0ed7efea0a74cacfe24fd8971c216102ca samba-test-libs-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 75b07c557f2778a09c2e6ba3d8eca4465befcc426df5d7090d9565419c297db6 samba-vfs-glusterfs-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm c743489a44cbe0a376cbc7eeb9db3eaa7c394b90e32890854b3e1d12d160eb6b samba-winbind-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 1344f6242dee083756c060f22f0581b093ef92cff1ede51686acb0029e507f29 samba-winbind-clients-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 70adaab46b64a9692d4c9139eeea81c7eb4e19949c9497eb5a4f6e5bb1b13805 samba-winbind-krb5-locator-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm b5e1ec80ffeb9bd53d853cd92d89127af6564330ce482ffd16543d9d2c1ff2b1 samba-winbind-modules-4.10.16-24.amzn2.0.7.tuxcare.els1.i686.rpm 3b5af19a7e5a5cefcb50db2349da87ed4d5a37fcfae20a122d94d0985a3b0433 samba-winbind-modules-4.10.16-24.amzn2.0.7.tuxcare.els1.x86_64.rpm 29c5cec98569ba47114b5e7c8e836c7588fa2ed671b4362170f19b1881ed6999 CLSA-2026:1786683955 TuxCare License Agreement 0 - CVE-2024-33599: stack-based buffer overflow in nscd's addinnetgrX() when the netgroup cache mempool is exhausted and the response is built in a fixed-size on-stack struct instead of one sized for the request key - Treat 32-bit x86 as an auxiliary (multilib) arch, matching the i686 package set AWS publishes for this SRPM: runtime libraries only, no locale data - Skip the langpack sub-package generation on an auxiliary arch: it builds no packages there, and the oversized macro expansion is truncated by the rpm in the i686 chroot, which breaks the SRPM build Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-33599: stack-based buffer overflow in nscd's addinnetgrX() when the netgroup cache mempool is exhausted and the response is built in a fixed-size on-stack struct instead of one sized for the request key - Treat 32-bit x86 as an auxiliary (multilib) arch, matching the i686 package set AWS publishes for this SRPM: runtime libraries only, no locale data - Skip the langpack sub-package generation on an auxiliary arch: it builds no packages there, and the oversized macro expansion is truncated by the rpm in the i686 chroot, which breaks the SRPM build

0 tuxcare-amazonlinux2-els glibc-2.26-64.amzn2.0.6.tuxcare.els1.i686.rpm 98e68415578016c596240f87cec9d14e934f70582081c42a7b09b67ba65125cd glibc-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 32e89f4de03125b16e39b80183c9c40ed7cce2401f4a3790d9add88688d9d0b5 glibc-all-langpacks-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4a2bd42715ec02e864bd740218b0e65fd6e08daa1f0effe386f25720a4f7fd0c glibc-benchtests-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm ea104a25564bb3c263efac0cc65bf1776ccdc8a67e7ce1aa3509ace5c063be92 glibc-common-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 999992cc6e81209e98c4f5a2d7bcc6d2c48dc6fc5919d51d8c8c8b4986a8a204 glibc-devel-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 67114e6b4f0fa7cac1e6bb4c4eb36b6e1fb72aead55b829225e2caab4fdfa4e2 glibc-headers-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a7bbde779e22edad1e330f8acd7ce26c3a20d2728b392d24803d02f5ccf1854e glibc-langpack-aa-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 5f86fb7527297400fa06c727b46f86a221887c94b18cf1fa4557ef53540bcbeb glibc-langpack-af-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 101b93df938d312b1d204b1b137920848a4377baad08d3bfe217f6b2d6eb2ddc glibc-langpack-ak-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4b1b1c1c8212f70c594802dcd3f0b4b59566feedf567f7a460b1c6d898e67a3e glibc-langpack-am-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f7b25aab459bcb5587501df394be20aa5af5171193114169b55348d49f9d10f3 glibc-langpack-an-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a7b51d9988e5d71a6dce3d3714d112f36192f7daf2113e72cc7a2c01450ccda2 glibc-langpack-anp-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 597724bbf9e428303bb3d46222b311ae49c6fd7b4d91c50dd1495ac3aef0c75b glibc-langpack-ar-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f1080ee806b6ae7d98450015ade903d05f151be2f24fe1434662a155b8b1be67 glibc-langpack-as-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 2ebf021436d84d48dd42c125a9cbd3dcdb859ae6e09bc7b63becf3b318d7cd41 glibc-langpack-ast-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 0394a39a7a2154a9aab79bdae87b8e112ec034056a8c9d7ee376204f1788d4ad glibc-langpack-ayc-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm fdf66cf371855d427ab17d7724c340fd2c724732f86b39842938aa3dd2b42309 glibc-langpack-az-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 5bdc629850c1e502fd9dd083cc47f1307de00cf161ac8062019bd946e8edaf4b glibc-langpack-be-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 84ea59d27d8e1c3098e6ce1ffda691631a1eab839b2772b359440dcd61cda809 glibc-langpack-bem-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm aad9411a892fd1620546c0546200928e37d0cea5fd1b04fffae673f95bc6e9af glibc-langpack-ber-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm fe12aea66e2d97bcf06204eae85e1ab14b09bfc658e0a721fd845292564c88f9 glibc-langpack-bg-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a21b45c0ce5319a3d37e3cc9782dafa57f2913d4221f3da87f9d72916a6bb6e7 glibc-langpack-bhb-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 6f91017ed7c01a540f349275e0b901fe65fd2815a566596989c536f749c2ec77 glibc-langpack-bho-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 8d028d952f2c58e01d078a21f0f775814fac47d69eb835cb5fdf640579ce2ba3 glibc-langpack-bn-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm afec978a146a137bd7b6572826a2b3f227579788de779855f4de594559de63b9 glibc-langpack-bo-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm ff9bc2d62ca1e32373b457d381d1f516b222083334000feedd03cc32738d5f89 glibc-langpack-br-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 7addd3ec48364282e03e50e4a811d69db86bd5d7d4d87b921d265c0794c2208a glibc-langpack-brx-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 9f32778318bbc6e67bb3cfd5a974ca2cd7dbfdf5feded6ac25eb8897a446dbae glibc-langpack-bs-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 704cbd00dbb8c1ec3f38e8d803e242d8daade37c5823e7c3d74f208a3e343594 glibc-langpack-byn-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 342683351414e1ee051a60836993e61178967df36c0c08daa62771a21ee06f14 glibc-langpack-ca-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a39e48b300d87bc9de8e2c59fbcb391f170e0d42428ce4002ab81256dd578d3b glibc-langpack-ce-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 54c4c1d67513b76879bdc04d11032e6becb87f1c775c56457f9ff9b873385b36 glibc-langpack-chr-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e571a1cf918862bb2acc03be57068fd09cb59430fe2151502a5d4451c3142acd glibc-langpack-cmn-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 54797ff390d745b526b8cae0d0084d4544f6aa58099c704e37bc5a3e109a4f2b glibc-langpack-crh-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f69654a8090102358a86c92be51eef336970fa0f8debc2b89f9a04b87b41ffe4 glibc-langpack-cs-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 18505f887dc22877a69c788f65b69bb69c0d8428b56065166126cf7b46edb85e glibc-langpack-csb-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3d380f2dcc23242956f8ecc52f0bbd78303b6f8aaf00d0ab4227896c698f3a01 glibc-langpack-cv-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 065e71de26fe4a9c91d25dfde5dfa48670042dbd8aba1835e9bee7cfbb88e77a glibc-langpack-cy-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 929f483b56118e74ebd9e412db9da0f97a65ff11b224fb8b94d7cde930eedc8a glibc-langpack-da-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 961ad54a09d36c150690d28acb4642e96393960300af97de9f56917d9149fe36 glibc-langpack-de-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 925f5c4f9e6c980a6581d814fde3ffaeab2806d4869dfbb8f8fb65944867a7a3 glibc-langpack-doi-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 47d418d63a2583fa579e817d030422cf4e75f0470e796d592e3d40fea93ed111 glibc-langpack-dv-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f2de82c4880059e012028cbac1c8516a4b963aa8740732ce6cd648a8d6a55950 glibc-langpack-dz-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm fa9d647749ffd26bd00a42f976463e747ab04fd1d3ffc26fbf2bd531176e3aef glibc-langpack-el-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 2c60a06a29ab3d170592bcbb3824b949e4434c90ae27656a0fde200aff6c8628 glibc-langpack-en-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 6360afa934a3feb1fa3ac5f031ed95c0ee1bd9dbc6d5489967b34dc06e8a44d8 glibc-langpack-eo-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 11ae340c9adba5768b95c74d4397d9724408f809faf2886324219b2e95ba4a33 glibc-langpack-es-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 795ac7d4338ec2e1863d9760c74b36597f937a58305cdfe80470262f60d4c37a glibc-langpack-et-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f61926f3f23b172096c1bce9622720784c2356c648d75aed8b008220730f6914 glibc-langpack-eu-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f5c4b77137fd841d7e5c83743ef5d23e3653881764552314ed0b4b86a8957ab7 glibc-langpack-fa-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f3792f21c5282423bad5ad60eea56d478c05f64adca38e0aa1d999aeb3388b9c glibc-langpack-ff-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 9f530a66f00b05d5a29bb6ca3da346c57a0a301f1c996b67410003730b6b3137 glibc-langpack-fi-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm c89ea1f04cef4c888bb5c47200dd324539c5486c2d31077785784e7a7a45a1d2 glibc-langpack-fil-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 2aa0d68ec41eb2366c0087c9658f8809b221374acd1d93f4777765f04c9963c0 glibc-langpack-fo-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm dd41e2b49b0637b62c7f585be0b77465ac31039b550db6f599b65be5801e28d5 glibc-langpack-fr-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 53599405ee78f8eb7efd74f5b5ecbdf91c6eab8e5cb899eb5b1cc4e376e7bcaf glibc-langpack-fur-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 8e15e0a1fa1bda4d73cbf9f8c775641f26c1308348a452d83185a1bc36fb896c glibc-langpack-fy-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e927f9d64fd0c79a129c9d85b291ce56e28b00ff851a2bf56b207579adf1d2bf glibc-langpack-ga-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a514cf5e238c89c23301f7d9b6fe3b398db0facdf80f5d1472bddecbe1f6fc0c glibc-langpack-gd-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a7c92dccba5ec25b3759114d7b634eb6e4dfbb29f81c0075f606b0271422e31b glibc-langpack-gez-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e5110748a1508f6a19dfda5d0897ccae7d051db23f475635807b864f10684c94 glibc-langpack-gl-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 70343ebf9c77e31a482c234f6077d4c88e5cd4768eb489ebf669bf9862ec3d9c glibc-langpack-gu-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 81782ceea8e6c9712c061442b0ed9a027439c6098e2b53b8066b2a66c98205b1 glibc-langpack-gv-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 7b9f69e50ed8db309ad8423e9fe8e7444e7fca7e480239e210e31cfaf2d71eb5 glibc-langpack-ha-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 76e3197ebcb49efe9f24cadda59310710a010f24fddf03bb757438537d68905e glibc-langpack-hak-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 86eb9eec495d05043716595c424d795dc3a57ed3432221bf1c01fd3db905c121 glibc-langpack-he-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 165f7b60b0ea9968aafc0ec8cc3836aca2c2a3379e08ab08bffaf489447caef5 glibc-langpack-hi-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm b2871660fe3d409e46d14254a102952e1d2f71d2afef10acfc9d6a97d56eb177 glibc-langpack-hne-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 7b1905516745a79127e8a7e401f75638b39b1fad9e797dcb3276103d5556f798 glibc-langpack-hr-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 31faf3303bd8b3342c5e0d494e6a1a9b82d6563078a55082cfba333a929c45c5 glibc-langpack-hsb-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3859b072a0efadeaecb204bd25a1c70e1b7e8fbca400eeff913dbec44e9b0775 glibc-langpack-ht-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 23fedfbe1efd3f0120f67e8fd0eed87ad3712f2255edabd30625726fa969b676 glibc-langpack-hu-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 07b1f7ce11650a15cf71919f335a2afcac1447a391c174190d5b8709cf9bf92e glibc-langpack-hy-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a44feb8592bbaeb131163962a5be0c3a2b7362515c364c916cd571e505ba12ce glibc-langpack-ia-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 561cbe0f6e7c41d2548e63af69c35d915a8f8f16187dd71cb48c13d0f77e445d glibc-langpack-id-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 515181e5cdc7516ca3c5e0927e70447a4573dc864e05e502d680a9809b93cc4f glibc-langpack-ig-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 44915873c4fed320cdee2edd02313e8a2dc992efa423af63f76aeb9218564dd9 glibc-langpack-ik-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 93d829544d0faf8d94d04c3b379da2d7074630436ae377ccf222567ebde19cec glibc-langpack-is-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 03b0cc689cff5fdfdcd68c404aead66f75765425e2aa41eb52609e92bb2314fb glibc-langpack-it-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 46e0c3c90556bda441d610188bc76ad56ef624896ac6225dd139b0980d47cdc8 glibc-langpack-iu-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 6d6371ba58d51ee809eb17e52af19543aa5e0df623d453ba18ea63086406299e glibc-langpack-ja-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3aea89a934117821865c24c4da411fb73c23a90d6dd60b308ae56e4033d961f4 glibc-langpack-ka-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 82daf18d3e37f42f93126d764594b306fa847ecbab0fe2c179ad70a5d6924da5 glibc-langpack-kk-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm db6c3ed16bcc92f7bfa46b99e2916d890c6663e28acc297f8f7d650db5ad3bde glibc-langpack-kl-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm eccbf1829e80fc2625cb28083fb3fed95f7871b48470a0630a8df2d971b3f4fc glibc-langpack-km-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm bdecce826ad3a37acb8c3b95fd268979bb1e63bfde70ce4ad6c158890f07ff9d glibc-langpack-kn-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 567c59c90cc5353801a8a6e8d89b09fdc7593cdaba09ef357b579fef7c89dd72 glibc-langpack-ko-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm d77b4868e0d19725a7b8844733e87438499279b0a79c554145e8218ed4bf224b glibc-langpack-kok-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 71c664a2cac447abdad19b503ceb2e344a6a21f09055d03c59f596d81e57ee38 glibc-langpack-ks-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 435d648b8de87262b6e60cbbf92f6ac15dbde24b25fd40630e642475fd3ca48a glibc-langpack-ku-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm cd3be6d91908a87b94a772190b331d6f395b85947602f5226c536340bab6f536 glibc-langpack-kw-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a01a23445fd763fff121afd16e53876418ea17c46ab68bb6a62fcaff111e9823 glibc-langpack-ky-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm bb85c65f6421087ad81b4da9bc69f17e33619a46171e74523f631e4e8680af02 glibc-langpack-lb-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4493320e3324fa0eda320edcc6e6b25b93030e1d5af0e86dc44ea5eab4b0ae76 glibc-langpack-lg-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 8986b371b1bafe02ba417349ffe7bde353bb2288528a234c2fd6c92642ebc533 glibc-langpack-li-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 69623c3cb82a9f0d7340ad64283b2ef81405007d927589b01192c9d180329190 glibc-langpack-lij-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a064fa724a6500dfcbf886be27da41b25c6d7327b9ee663c7f8a0c854ce3097f glibc-langpack-ln-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4aa6f89c7883717fae5873d9beb93f0067ff2408a0c4b7082d97c2b3de111564 glibc-langpack-lo-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm fbce6a84079fe7454cb25bb72c6238a1fee378ceb0cdc1abfb0f40f19bda4d89 glibc-langpack-lt-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm d17d42669a39b09505bfa2ce653ded4263ade769677ec671d57a5c498b6347b6 glibc-langpack-lv-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 0c3d0eb5c8dd198c79a3731c8129bb8f9b984baaec071de0b08de133b2ee8041 glibc-langpack-lzh-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e84df8c712dea842bfa175445258b21af7ca5e25c42e853d2bc5761eccbba2e6 glibc-langpack-mag-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 0848deb889f971ca51ed0e99bf2a39e437e6d27b4c6e29d266bdef36bf3b9aa7 glibc-langpack-mai-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 18855b666cba462892dde1fc62d663b9ca9458f1dea99c711be118e9b1851f67 glibc-langpack-mg-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm d7f8cf23cb3d2f4b4f19d8305c18d0e694523e8a7155a516cb4f2abfccf24af0 glibc-langpack-mhr-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 437ecfc87ccfb3dddf0fecfc732fafc8fde71b1fadb71eb6caaacd139eb7c790 glibc-langpack-mi-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f96cb3269cc922b031a2690a494c7addf5175311b619f97f394aa0b3ad0f9cc5 glibc-langpack-mk-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm b78299b867ccacf7fefbb867d5631d4ccbc31bc5147a8b49bd5a321646f6a665 glibc-langpack-ml-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 31e8abea41fc5d5e62c7eafa17f34feebbb0dfa02051c1ae7f9746bdd9c13446 glibc-langpack-mn-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 23459ace372ecec6c3c7550cf67253b938021e80d35abf3131634870687f1ada glibc-langpack-mni-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 2bd00b5c17f4e5510fe5293049014fe9a9fce039113808475be524a17b443e2d glibc-langpack-mr-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 971e870d1b69ed4b5f4a934f2c4e1d11f0bf04ae4bef08c395d3a493151de0de glibc-langpack-ms-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm a2964178231e87d24079eb138ab3ef2fb01df37d3bfb9bf1f2c0b171633ec887 glibc-langpack-mt-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3a5c01669d8827ca9873563b4690d6fac6bf6a87f99fe4335ab095a9ce1f9d7f glibc-langpack-my-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm ffecf27c79b1d40d42e3e9ca4eba8539421d24dc1a83742352539a19fe50da99 glibc-langpack-nan-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f01291baa841d8b758b1f3b47001fd8c89ad66a28fe072fc5c8214378d6bfe8b glibc-langpack-nb-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm aa4116538c5cc4923d38363872ab57f05232844ff3ba0cbf415e25bc9344eaa7 glibc-langpack-nds-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3b94c1b5200c7bc67627f450b7fd889df170a097123131649fa7817c7b8b26bf glibc-langpack-ne-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 5a613acb62e1d3e88d11de3155aaa221dc5dcc1f759a9329dce3de9bf77e0d72 glibc-langpack-nhn-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4b37df738f99d149bd8963a8a0ca8246f4e40456b26f2ed12c5587eb0898f768 glibc-langpack-niu-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4010c18bc29325fd5b4c014ab3c75d76960d132616a641779cefeeed5f8627ec glibc-langpack-nl-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm b90b6bd9e69aaf434893a7c53d0c9bb7a72ba0920ab29c8c3401c16cbdfeefe5 glibc-langpack-nn-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 348061469da2502b639240a77ab2b7a9a9dc2c3d2152b4dc41dcfd5e8242d2ab glibc-langpack-nr-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm ffb434a6324cafb72ec01e7bdf00fa45aab486f59e99edf4cbb4ba6149d2f77d glibc-langpack-nso-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm bb95d5de620713ad047d6541da9fb25699c1d9a7ee703af7693aea753ceaeac2 glibc-langpack-oc-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 511706ab44dd1f1d98d0cff396887d59eeecd7ca9f5703fcbebdc98811fa37c7 glibc-langpack-om-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 7305cda86a6f52b7b1fee8375a7895cbb21f473a535e279102bda6ce15ee0547 glibc-langpack-or-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 41b5336199ed0333a2daae5915a514572e3d97f360a3ac58dbb9c6ce59b2f118 glibc-langpack-os-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 277da73f4eb0b9d2a3c93f1be88bc5abbf7bfda8f01859332dd8abeaff60442a glibc-langpack-pa-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4008380e6053112f8b8488b49a6709b57f663f95ca6f02db9323616bac13f77a glibc-langpack-pap-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e99bbdc3eda4b880d2b4af9e106e3f153eb2bf197677b48553adebd43ad7e0a6 glibc-langpack-pl-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm cde244e94f07a9e7c9ea0487e7c8c7c865639f0a78d555fc42902af9f8e615b1 glibc-langpack-ps-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 8ed6ef39b13fa1f85b8f27aaa9676eb36a4a3d04bfdaf80b18bbe5ebd8bc4bf2 glibc-langpack-pt-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 42b30eeb63c530c06bf059e108879047ba4db1d4950bd750c9fbb0e7d8f26cb0 glibc-langpack-quz-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 5489a4786f97fddc0f801caddf7216aca4e6bbb3df9f27a5a430bbcb88abe6dd glibc-langpack-raj-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 5c5aaa6a21f85c8d73c2becb57f4c1ab551b6cc145a10b0e247039d817a0a562 glibc-langpack-ro-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm dc660ef4890f43d41030628e4096f73e820771883597253abcee78cebfeaccd6 glibc-langpack-ru-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e044858c3d31f844abbc75bc47cc1367b9d1c6dea9cf436d40e03dc602adbfb4 glibc-langpack-rw-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm c14a3ad5984e5d7d8612ac91a58cff90506707dc96287036991a63ad4b971930 glibc-langpack-sa-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 391b60b0f222c31c1f4c26bdc9f8cc4ae7e67fff53676edb93680487b20e2a89 glibc-langpack-sat-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 224b57e622b93ffa75c62734558b40ab925f934a2bda3524c4f51962a1a2d706 glibc-langpack-sc-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 19ab5157bd01072475231fbca665d3d6883a3387923a2327b945621c85b07039 glibc-langpack-sd-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f4583c4f5268819bd0a5ce8fab009c3f2258fa4c06864697cb930c4f04c60b98 glibc-langpack-se-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 9874c15682c7a033078344a9a8f8617e8bd6d08a55f9fe4621a72faa20682e0d glibc-langpack-sgs-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 00cb6abb0bac95d0a99d6cdabef3fbdfd52a19a3f9700a9329f8d84cf7b8e015 glibc-langpack-shs-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 727b16913362467179399d940e37370a2f74a936fad5476f6efde66cd1504852 glibc-langpack-si-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 863f934eb05043e87a69a6f87adad03957e6a03a18df13b374e22e6b3dca509e glibc-langpack-sid-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm eb85c2c5d52e80111baac197a118fb5448431017ce04665a210c50253af1ee34 glibc-langpack-sk-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 996f96414c0b9410faeea363035ef50589828cb016bb3fe090461b890539bce7 glibc-langpack-sl-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 48428e319d10eb98a1681efaccd689d496ef37f2ef985e755efe71c0b266f210 glibc-langpack-so-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm dd3c7ec873b025f901652d5367785c208ac12c7f8c798d175d3a404344e7f54d glibc-langpack-sq-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 842245092e5a40876a07100f613c1aaeec0b1077e034b1d3348f5dbe2e108765 glibc-langpack-sr-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm bf831022ae120dca5c03ac99b929ee2cfcdbc29af609d1ddb99424b6a0d963c8 glibc-langpack-ss-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 1fcf06b7723e6f5892fb5bb5135a1e152cb6ae95054d9ae6d6d84b1bb8aeb029 glibc-langpack-st-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 53038062dce25c7c4a53ffc98c294715bca8bbc2907f278d7f44b416fbc2a7c6 glibc-langpack-sv-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 6dcb758289e1b38a3d315ef62c6a6780a1303fbb7cafa0fa26c7bf1dc2b75660 glibc-langpack-sw-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 0ca31fa03328d1b68c176342f27822bb671ba687416fb92e2437cced3dbc1a73 glibc-langpack-szl-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 325c72f6c55595960e412f606c99c4c0a239296aedeaafe58038da4932ea9915 glibc-langpack-ta-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm ce1e879a659fbe127b1513b6680f33942b526894b04698093c54d349098f8e1a glibc-langpack-tcy-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm b0532ab9cc470ac5cccbdf4337baef7e74b966c76ff85fe88c7e8eec104e622b glibc-langpack-te-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 46edc61873d941d294017b1b43ce29a2df5bd2a31659815749e2c24ece6b0b8a glibc-langpack-tg-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e2ea13ba4dc1953f165f5e62cd4f44468e6d11cd7ce085350b93461c27531eef glibc-langpack-th-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 0cd9b51866fbcbe3ec92df20c5d7190e9b174eae632a54940c1e921b392a2fea glibc-langpack-the-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 2398d444d1c9bd2d3ed019ff11b6836c3aadffed69cb608ba8f541bbffdc60c3 glibc-langpack-ti-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 8b668bd236b7cb6c8bf619c8b6c3f8008cc077ac978c3bf80849e9a8ab2ea608 glibc-langpack-tig-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 7fded0c91cfbc770f172fb7fbe2bb10f2c890c63d030df5a88a96d132366f99d glibc-langpack-tk-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f3262334b2578adbf07f193b46fcca51c7a71e6f188e46f5c9a258c463536ae8 glibc-langpack-tl-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm db18bb395b95efecab498674f96f7ec150046e167ff0ee7d60f8b9e73182d8ac glibc-langpack-tn-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3ff934e22d3a5bb5969cbe7d9a957dc7649754c854f27d688780263629820b74 glibc-langpack-tr-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 16f51decec0e9c21f0ca00d15f824e8ba60726802e9b7280493856cbcd8e3cd6 glibc-langpack-ts-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm d668bcf9e6e5e6dc8bff982f0ae6e07eb63c57eeeb84745ba864607e00fe1af8 glibc-langpack-tt-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm f63ac44e28e9e57f72408110b4ca35642ebecb1537ca7ef577d7c773e9a52731 glibc-langpack-ug-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm c3dda983ca273c6909370e02935e41b0f8c6d4a1fc7847dafaa39968cda97c8e glibc-langpack-uk-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 2e23ded7b3301eab554c8b2cee9edea94c22991a226d02cb899c43e0068c278e glibc-langpack-unm-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 704b17dfc33b4cecdfefdff58cf7ecb053e9c7eaaf99573794baa8c7455dd692 glibc-langpack-ur-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e28061f2e97d99434723fabaeee5269fe026184e02cb79630995662c98f0f3a5 glibc-langpack-uz-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3ad2a3030332cfcc6fa1a6fe22ae1a305f3fd7f20de781dbe5063e08aec54b27 glibc-langpack-ve-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 92f2eef63648d5e8bfa009f0a8eea5565d7b0fd0c1db66b952268f1655207116 glibc-langpack-vi-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 788f6eee7e4512f0086b1d94ce8376fee1f72f85f84b1cd226d16e4205c3310f glibc-langpack-wa-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 295f64a0e736ee2972e77703049be1dfc5c7ffc319b6e39d7e650ca0f4737cdb glibc-langpack-wae-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 0d96b913c88f193b55eb42d5a5016ca73d8f4338627bbe2392c588b472560567 glibc-langpack-wal-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 7bf7d2c4c34ace3768452ec5a287da948434aa977530bb9aa8a6b8ac05e94e8c glibc-langpack-wo-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 7f5820cc13b0523decc364d7b238b827240d047901bbd7b5adcdc99f2ebd564f glibc-langpack-xh-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm af257833ef7822680286eac5325f69cdb45d6bad336cd5bf082d43b2fb6c9be7 glibc-langpack-yi-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm d840ac5efdea323e5eb77626d878f2cb21fa41ba376623618d2cea1851f0efc9 glibc-langpack-yo-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3d416b1123d7ea5023d5d649d09cc1a7bd88e5e794376ea2948ab2045bfe7e1e glibc-langpack-yue-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3e1fa42aa333da78eacc5ec36323f17b64848b50cee297e0940cd6fe1cffeeb9 glibc-langpack-zh-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 8839c4a6ba17fee19cdbc02251997a4d9e6c316ec8abb1e143b7607581874895 glibc-langpack-zu-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e1c7ae88d8fe73b647e082f5bee11f4507ddd77e6c4d52a61c704d497fdbdcd2 glibc-locale-source-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4c4b0bde7d84ddf2efd1917757f32966618a0da934f3240e234e481d77c27487 glibc-minimal-langpack-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm b987249340cadadae8518dfa7f61cb87c066bcd27b5ab53aae9983b59aabab94 glibc-nss-devel-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm ae401fab865424fc7e7bc6f97ea84b66821f6af1db81dd394d64b03b94999276 glibc-static-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 79f9359cd5d51f263d01937259f25845689b03ca395cf35450bf3934ef646e85 glibc-utils-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 76ea6cf1cf3156356ef48175d9ac24e2629f7383c9cfe5d7a91d85e10f816d88 libcrypt-2.26-64.amzn2.0.6.tuxcare.els1.i686.rpm cc5eaed25fe074c1ebe7d37e2aeca49c87fb99c2f2c7f4685ea177caa8c4ed2f libcrypt-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 3d70d4b588f5ad6ef4cacd608bf7d83a375ff0dc290b93d5fca1019f33f68a98 libcrypt-nss-2.26-64.amzn2.0.6.tuxcare.els1.i686.rpm 2a5e6cc3b211d43daec6aae6c3d93eb104a7eb879d032acac9545ed5fa69f61f libcrypt-nss-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 4656ba372327881e0b7d0a9f9cd1300ac148dae17820a17060f1060d546c4328 nscd-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 5afb50843a733877db76f3da530a849fcd9390471398981a257412c3aa4054e5 nss_db-2.26-64.amzn2.0.6.tuxcare.els1.i686.rpm 76794bfba4b37ba108f697ece38d42f57e83b5769bfbc0196f7194698bde9288 nss_db-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 2c886e8793d0db16157745965d1988a8d66b499f6caea0a2f51e54f43858175f nss_hesiod-2.26-64.amzn2.0.6.tuxcare.els1.i686.rpm 6be8f038e67867fca119c705327c1a51bca83993c0aece2bb21832b39d6f68e2 nss_hesiod-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm 2d0e715244ac0f5dbbf9e277eb7cbe00e9fb5967518645a5fd47188c013949d7 nss_nis-2.26-64.amzn2.0.6.tuxcare.els1.i686.rpm cc9e59c252553e1c074820338f76f78c01eb02ecd2d7984536d3e16ddc0c1106 nss_nis-2.26-64.amzn2.0.6.tuxcare.els1.x86_64.rpm e97f9aaa6de579016e818449eaf3570f380e1ea08ef79d3af9eddb6d6e09e50e CLSA-2026:1786702659 TuxCare License Agreement 0 - rebase to 4.0.3-35.amzn2.0.31; take AL2's CVE-2026-12912 fix - complete CVE-2026-12912: add upstream multi-row ABGR bounds-check follow-up (f9bda11b + 90601d9a) that AL2's patch omits - carry CVE-2023-52355 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 4.0.3-35.amzn2.0.31; take AL2's CVE-2026-12912 fix - complete CVE-2026-12912: add upstream multi-row ABGR bounds-check follow-up (f9bda11b + 90601d9a) that AL2's patch omits - carry CVE-2023-52355

0 tuxcare-amazonlinux2-els libtiff-4.0.3-35.amzn2.0.31.tuxcare.els1.i686.rpm b2ccf2a2ee5ae76eeed1fd2bf5124aae9bfeb46d13e6af713f3d2c4648d4bd65 libtiff-4.0.3-35.amzn2.0.31.tuxcare.els1.x86_64.rpm bf23e2657fda4e229650ddba285744441c0ba7a3439a6488ab3df3e3fab13b1e libtiff-devel-4.0.3-35.amzn2.0.31.tuxcare.els1.x86_64.rpm 99e3ccfb83d15678437ae4d39c873b8f4b4f972d2712deb572363f48797be6b4 libtiff-static-4.0.3-35.amzn2.0.31.tuxcare.els1.x86_64.rpm 3ee1e9a23efe5a48c05bb84f910c03c9ef9bc66beb7a8305cea1cf6af6212387 libtiff-tools-4.0.3-35.amzn2.0.31.tuxcare.els1.x86_64.rpm 568233be149a40b5f837036282612035f070bc21d37ae503f53c1ca5ba9fb040 CLSA-2026:1786980499 TuxCare License Agreement 0 - CVE-2023-3758: race condition in the AD GPO provider, where intermediate per-GPO results were written to the sysdb GPO result cache while another parallel access request read them, granting or denying access on incomplete policy data Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-3758: race condition in the AD GPO provider, where intermediate per-GPO results were written to the sysdb GPO result cache while another parallel access request read them, granting or denying access on incomplete policy data

0 tuxcare-amazonlinux2-els libipa_hbac-1.16.5-12.amzn2.15.tuxcare.els1.i686.rpm 35422c2906ee072bb3bec40639ce0adb80ad3e16f0ff9266a5fe4a6eeb24345b libipa_hbac-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 1ca384717d06e9044fc8206f4f00aec52c47a6f783b7aebfba6b56170a9b082e libipa_hbac-devel-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 029fec965b9e108ed43204b63a0eff81bc6b54eef7f5eef4054085d3b3b331a5 libsss_autofs-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm bb9450f2cc2989975ed65874b3a34dd045317014a8dd43fc6fa457024ee8e7c3 libsss_certmap-1.16.5-12.amzn2.15.tuxcare.els1.i686.rpm add53fb4c9d388983a1b8a9319a33a6133d3fcb02f6a88f5dc3f112ed2f00d5c libsss_certmap-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm f8f4fdf9c363d9e3593123403109e09a472f3d1420c140a9b6c6d59c0d673c3a libsss_certmap-devel-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 8728c2753a7cda9f51c4889b54b424c9c36aa49957c3c6376c4140ee98ef77f2 libsss_idmap-1.16.5-12.amzn2.15.tuxcare.els1.i686.rpm d84e48a7c5c43f35846b0b63454e8708283ddd3d82467450fcc4d2e9470631f2 libsss_idmap-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm f81fbe3cc966083178f7abf9e0d5b8db2760cc007730b7fe79879101baae88fc libsss_idmap-devel-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm c8973a4ea1e5883d49afebf218ed2adfe30e95fc1091057624b4d32251d5091d libsss_nss_idmap-1.16.5-12.amzn2.15.tuxcare.els1.i686.rpm c7ac4e5b784d8051e5a9b14d72711cdbcb41e1d16217ade80dccfdd6acea70e0 libsss_nss_idmap-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 221c9e5452d14101f8ab2dfbddad8c8d8041345d832ef429ac1ea75001261527 libsss_nss_idmap-devel-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm ff05d88ca43f928e1971f6f511c2c1d8b2bf841db2ce8d26f12c5dc545f43038 libsss_simpleifp-1.16.5-12.amzn2.15.tuxcare.els1.i686.rpm ae8d6d65b78ef870638932ca1df093c0b5b0c4d208bcb45c94f5bbd75f4cb82d libsss_simpleifp-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 7134ea6da05f5852308fbea5a929f9a86deb5c3d05c01ed011ec647518a01279 libsss_simpleifp-devel-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 2e68e7a5fe51ab4cc9b96ac263728e8c6f45bcd0aa06cb36a91e8569aa33e962 libsss_sudo-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 2dae16b52e20082ca230d31c82d0caf0da4a901d2cc6fc1702f8e1d39ba5bc81 python-libipa_hbac-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm eb6e7a9691be57cd70bfe43b5ecdfb9c96b7f5d95ba4dcbf5a1211851627dd70 python-libsss_nss_idmap-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 83b0f0083a72645e96a460bd6d73eebd8025d97018a5b2173aafa0c1493411b1 python-sss-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 248f0779c1fbb352159a80894fe327229785a585a9b2feb3569e5f608bdfddef python-sss-murmur-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 82aca9b482d75adaa67090c169eda3f72d54450578908a7e0ffc0e948ce94456 python-sssdconfig-1.16.5-12.amzn2.15.tuxcare.els1.noarch.rpm 2753247891b896a33537a3b7b91e72c93bbf3deed7973b7bb5d5a73fd937af93 sssd-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm dec9ce1891ed295414c4cb0339617f40aa52aa9b0aa2936ade5cc94dabddb5cc sssd-ad-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm f74f8c16b15158124e0dac4e5dd151cccbbbffc5f2ddc92dac500adb82bad0ae sssd-client-1.16.5-12.amzn2.15.tuxcare.els1.i686.rpm af51cf8022c839c69684f982cb2b6bfec1d2b15ebddfa332cd24c52791d57add sssd-client-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 8cb7628a367fc04eb8611eaa4d2a1a0367a11213f0a983478da8a8372eacb9e3 sssd-common-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm cfa58ae372ce4676c7f729a767c9ce38bb9c72bf1ea750c73a83b7960bddf5e2 sssd-common-pac-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm b1e6c625427a7130f4bbd704f1337dee505bd8b81d8a8da7e6e53315b765468e sssd-dbus-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 6ff4c4a2a0b706d79a9a3c21deb1ed177d6f35fc7c2c960a2dfcd31eca86f48d sssd-ipa-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 053ae2bb5fd4a24f4b9450d1b5c4b2d2cd0dc542d76166bb8edbfa10d1dd2fa6 sssd-kcm-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 5dce96b3ca1615b6717b82d39d722ed4474e0de78893c2fb3af0a7a35406eb35 sssd-krb5-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 017ceb010ca7ceba9705811de09a2fef31165f858d9bc0707c8ba21cedb3cbe3 sssd-krb5-common-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 24d66840d54946af2a59c1cfab5816df19619ea8fc4f15db690dcf42ab635ed8 sssd-ldap-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm ce87a0cb39d3c214e7d8850e3d7cfa91101885b1d4c2eafe40918a4a245eec32 sssd-libwbclient-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 598f0da8dfb34ecac622768fd55b6226cc8c6eeda76c8eb91d0d9e5cd68256b8 sssd-libwbclient-devel-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 99fe2f435a53127f6556729b10ad7ec85b2a6d4b09c11c0882c54d989513b912 sssd-polkit-rules-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 5933ab3e5bfc33c5cbafb35325458ff03b2a274f2bb3cfc5e3c45a102d0e8df1 sssd-proxy-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 98c0e3ac74322ac59cdf138a72a4a3bcc9a06c4cd8a2ad59f018b434898cf0f4 sssd-tools-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm 54c3a47dbc5cc188471d1ba65bdef5f874a74bf73952a91119f027239041b362 sssd-winbind-idmap-1.16.5-12.amzn2.15.tuxcare.els1.x86_64.rpm ab0d5ec446e775cdea99c26a3e1449aa9677f57ca643e9f675640ef517542e06 CLSA-2026:1787224387 TuxCare License Agreement 0 - rebase onto the Amazon Linux 2 2.56.1-9.amzn2.0.15 base; the previous ELS line was pinned to .0.13 and so sorted older than the distro package, which made every subpackage uninstallable - drop the ELS CVE-2026-58016 patch: the .0.14 base now carries the same upstream commit c9da977c178fbfc0e4caf99f9fdf5dc433d6fcc2 together with its unit test - inherit CVE-2026-16118 from the .0.15 base Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto the Amazon Linux 2 2.56.1-9.amzn2.0.15 base; the previous ELS line was pinned to .0.13 and so sorted older than the distro package, which made every subpackage uninstallable - drop the ELS CVE-2026-58016 patch: the .0.14 base now carries the same upstream commit c9da977c178fbfc0e4caf99f9fdf5dc433d6fcc2 together with its unit test - inherit CVE-2026-16118 from the .0.15 base

0 tuxcare-amazonlinux2-els glib2-2.56.1-9.amzn2.0.15.tuxcare.els5.i686.rpm d63a373f7ec117e1a764afe672500cc463208cf8ea062fc52bdd9801f6039d68 glib2-2.56.1-9.amzn2.0.15.tuxcare.els5.x86_64.rpm fb243cdff0931712a0ea29d023d409ecb124ffd2d8517dd6c10e4ecf6d1512c7 glib2-devel-2.56.1-9.amzn2.0.15.tuxcare.els5.x86_64.rpm e5e11f1a6dcf2dcba718ef6fdddda221a1f486bbc3be2de2b0779166fce647c2 glib2-doc-2.56.1-9.amzn2.0.15.tuxcare.els5.noarch.rpm 9bcc8c4689585ce688f1a0b8d80c3b16ef02e82aaf94249ccd8c4dc2701cd51b glib2-fam-2.56.1-9.amzn2.0.15.tuxcare.els5.x86_64.rpm 64cc53b0499a778b7db40d81d44f6ad31684975271f35bf2adb9fba2e809000b glib2-static-2.56.1-9.amzn2.0.15.tuxcare.els5.x86_64.rpm 2f378af05a706e7dfa115b3a22e103ec95f01d35c57058e8907d71d50b31a5ae glib2-tests-2.56.1-9.amzn2.0.15.tuxcare.els5.x86_64.rpm 77f280efc99e1188b8bd16659225b3163fbc28e6f44ad7e88df34b1daf8bb9b9 CLSA-2026:1787238301 TuxCare License Agreement 0 - CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so that recursive query patterns which continuously trigger cache-database maintenance can no longer exceed max-cache-size and exhaust host memory (DoS) - CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock bucketed and process it in quanta, so that the queue introduced above does not starve cache cleanup under load and let cache memory grow without bound - CVE-2023-6516 follow-up: handle a node being re-queued for tree pruning gracefully instead of asserting, and do not append a parent to a pruning list it is already on, avoiding an assertion failure (DoS) and pruning-list corruption reachable through normal cache activity - CVE-2023-6516 follow-up: adopt the pruning design upstream settled on in 9.16.49 - run tree pruning on a dedicated task with an unlimited quantum instead of sharing the quantum-1 cache database task, clean every eligible ancestor in a single pass, and re-create both tasks when the cache is flushed so that pruning keeps working after "rndc flush" Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so that recursive query patterns which continuously trigger cache-database maintenance can no longer exceed max-cache-size and exhaust host memory (DoS) - CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock bucketed and process it in quanta, so that the queue introduced above does not starve cache cleanup under load and let cache memory grow without bound - CVE-2023-6516 follow-up: handle a node being re-queued for tree pruning gracefully instead of asserting, and do not append a parent to a pruning list it is already on, avoiding an assertion failure (DoS) and pruning-list corruption reachable through normal cache activity - CVE-2023-6516 follow-up: adopt the pruning design upstream settled on in 9.16.49 - run tree pruning on a dedicated task with an unlimited quantum instead of sharing the quantum-1 cache database task, clean every eligible ancestor in a single pass, and re-create both tasks when the cache is flushed so that pruning keeps working after "rndc flush"

0 tuxcare-amazonlinux2-els bind-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm 8e972c37969f357ed360a87f642df571583ec09e287cf8d9a7019adf86ff69b4 bind-chroot-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm 32f5c0f7e8f6ed19a691a616160992139d19379244e748f988bb14f116942eab bind-devel-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm c621c75609b16476ad5abf08b987b67de4efdbfecd4cb5ef4775b2aa81cd7f9f bind-export-devel-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm b6b0673b94ed949524a3c562c592cc7de51ceeb9ae5eea6c0da1f18f8e76a3db bind-export-libs-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.i686.rpm f54718afd394f870518cd156c63ec8ff1071baedcb14d69371c8100bf027a88a bind-export-libs-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm 5b745bcf74b623ab756a1fec14aa8e35a8f8acc587b0c38ae27ba6f2392c2d53 bind-libs-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.i686.rpm ef856b8c0b8174a4273ac09ce803a0a5a10a80b82f40bc9e4fda4f853f88af73 bind-libs-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm 3a2395467c76757a71fff2c786add802ef12693988f71bbcf499ac91ec240825 bind-libs-lite-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.i686.rpm 32accbd242e5b6de69c97d8863acfbec551e20e93020c6f8096303f8c3a3e1cc bind-libs-lite-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm bbc9a7d7c7e72722db853bfe25ed2ef502e7d527bad7426d1da044071c827a2f bind-license-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.noarch.rpm 894be4b4f9f617f6a21f0f0fb37d02f8e0acccc8da2469e6ed31c4f430a9e18d bind-lite-devel-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm 00192151f1dfc828066e174c24cc1896baca73a106842457aa65446b33781c60 bind-pkcs11-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm 878c9b5ea363488f4c5e6e501d850b8287781ce01a8059bcf03237ada4e469c7 bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm e3805f8f29b2032ee8e2271c46e15d4886ee60bd65c4c8bc4675be7cffea88fc bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.i686.rpm 97b4c6c14ac7b9d260a28a1c06d45fd4b6e85c99a39b3a5b9f3d81adc3d37349 bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm b197377dcad5e14b8d16316d57be54513d8e343ea086194ff0faa620ee8a3891 bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm ab6fd8bf4b3b0d1242ee77981f13a6e44e31b065316683ef3708ba35074a4c98 bind-sdb-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm d177c2cde0b9c0664ecd7f3746a3979c0c747cb89dae410162ebb47ed04dea6d bind-sdb-chroot-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm 7d3ead609d76ea8e379a28f09ab71e240db754695ffe38325aff05646af6af7a bind-utils-9.11.4-26.P2.amzn2.13.17.tuxcare.els2.x86_64.rpm 134d76f44aded5dbd8ff49ca0bc3f63f7bf92dd58539dcaa209784bbf3642995 CLSA-2026:1787304313 TuxCare License Agreement 0 - CVE-2016-4071: format string vulnerability in php_snmp_error(); the SNMP error text was passed to zend_throw_exception_ex() as the format argument, so a remote SNMP peer controlling the message could inject conversion specifiers when SNMP exceptions are enabled Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-4071: format string vulnerability in php_snmp_error(); the SNMP error text was passed to zend_throw_exception_ex() as the format argument, so a remote SNMP peer controlling the message could inject conversion specifiers when SNMP exceptions are enabled

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm af84ae63bae878c9e4234aa5f7656f91fe41ac46dbcee5bdf8378f8d151cb56c php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 297234ba584996860fd4e87060ab40e131465ea8eb3fad7d2760a1b45a4b6d8b php-cli-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 27dd50ee70c149b4bb40e4437c0c641b27ff5350a017a0a42205402d48ab7ca9 php-common-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 0194feff96c64c9f455b3b3b33a4bfa7839773ce44677b2f38d49349c553f592 php-dba-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 6ec3511df936bc3daebcdba7257b976654ccccee8a5b215a4ac6f074c3fca70a php-devel-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm afbe3494edd748ef9bd2c7bfe642e16c5a86928cd830321f063be12787dda884 php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm c50a74c6fe2a1ed5041413647ce31330fa0ad5dfe8689b960a7cae19ddc17a8a php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm fef21a5e268c97e79702dc7cfb5a9b73afa2a77529c17c43db502eb30f363dcb php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 3d738b4315c4567be17ceae3023e0469dd5ac8633a39a5cfa46a92dfbdf1e49e php-gd-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm be97b79f4934d8546999930b2ec5a332a894b52766b0faf3663373efd1cc981f php-intl-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 250a68ec970a5f55643e11934a8138f4c58834c312f6dc93dd81a09406287307 php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 513c1fe1cdc0126bc39f56d202da1e30c386e66452712831563ebfaa89d417dc php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 79424fd794b18816ff9c40f17b2b12748e2a2bcd25429e52b753462f373f2bf2 php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 81a68dff8d802f0a3443a41530ab201d9e56b5d556bb68a826d0ce1add7e0de1 php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 99eb21841ab3adf66ebf68b6931d9a899d83bbb5547b7bd6cfc098356d9fe536 php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm a3acfbf1e47b01013a72f4a5ddff706ec01afe5cdab800eb39bda298dcf9a6b0 php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm e923303dcef5f5620b9684030466cf27a9d9b6349f1224ff70e4d09399d42fc4 php-process-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm bf15b517dbc7af5d8c69bf06cd20beb3380c64f886d8c315c56cd08fb7253a93 php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 7d3d7e1b8c9baaca25e93df023662ce73071db8757a3cbd9fd7395ac44e41ec8 php-recode-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 7a2efb07576663a2e59626eb3d549de7d377373e0c24112e4da4b63858925cce php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm f3d6eb5ce70190d96def461dc8642042b1f080f54241b8c55e6cd5933adf870e php-soap-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 41d67185a22ae02f5d59361473a572d197790573475f5e4a5a73958bd090691b php-xml-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm aa63b5536a0a5a13cb5293b2e14a14ce35067601fc11e769c3a82b803c4af56a php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els4.x86_64.rpm 8571f989d77dc1db82f0d7bbc9dbd74d54a9a2ba1c9c38dab15e53d3aee99757 CLSA-2026:1787558803 TuxCare License Agreement 0 - CVE-2019-11034: reject a MAKERNOTE IFD whose directory start lies beyond the value buffer to prevent an out-of-bounds read in php_ifd_get32s - CVE-2019-11035: thread the value buffer length into exif_iif_add_value and exif_iif_add_tag and bound every element read against it - CVE-2019-11036: ignore an IFD entry that is not above the offset base to prevent an out-of-bounds read in exif_process_IFD_TAG Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-11034: reject a MAKERNOTE IFD whose directory start lies beyond the value buffer to prevent an out-of-bounds read in php_ifd_get32s - CVE-2019-11035: thread the value buffer length into exif_iif_add_value and exif_iif_add_tag and bound every element read against it - CVE-2019-11036: ignore an IFD entry that is not above the offset base to prevent an out-of-bounds read in exif_process_IFD_TAG

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm a69259c51a661ab7e16bc4163e8b83ae64c30d7640c3300a82693452e0bb864b php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm dd83b61c77f61b2fbaa5817a27c32cdd7c977cf930d942ef8681aa5bcb390c75 php-cli-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 2e4d47dcd8b8e171cd1bf3df92f634b5c611ea8f0274cc9c06e5d441314df7c9 php-common-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 34b43195fc29df39e83c21a9696dfde83b14f75b50ab14882828efb5d193118e php-dba-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm d5e3f80df2d4cec436887a4e22907da52baa7bcb5cb30d7ba4b82dca0f0d077a php-devel-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 298317760e5553cb0d23e684692fdd6e81f9f25cf0e64a71fc36c88247047df7 php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm b9bf8b57401d556d4137ae34e07df2752c346635070141ba235a02e8d476071e php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 4642940c95d84d818641dfd264f264da9e56dde68e01c4ced7f180a5785caf80 php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm b9169d394092c92b32df29afcaf61abcd289b3f6dbff690e18e9f246612a5886 php-gd-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 1447c2c0d11499a83b20be0eb8e53e438a416d7528301e3a49a7c7ddc6780e47 php-intl-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 1eaeccc6a61051bca43df316e2339368b293b5428cd7ae570e041e53d9a2bdcd php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm b365dd80e6960ff24710c5ec1da6f611c79403c0de477849178abe946d7cbba7 php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm f742b1ce3d36031454800bc5a63bb8bd714674ec19f210bd3415874a346cca7e php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm c3cdffff4e63025cb70c720cfa131b9c1d3999760ef90a7857fcd67d977401ea php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 64bcf52e487cc076780b5414dbc50338fc10320c28dd8f577052f33519a7d0bd php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 07ef453e08ba5c6e085ee40d6ecf53c8db0964926103f70520681d30352a8aa4 php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 656062e5006af2a841e580a40be86f172f50097a1ff72b46dbeda82189a0da27 php-process-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 310bdf5cf1fa68e92631ba32bcc5ed3ad48321bb2a7a7ede5c962e8d45a391a0 php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 0103c1cb264990bd749b9e3c94c62d2ed339fbb60e4aa6886c81ffc09e4cdb30 php-recode-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm cf41061f7758c4b70498b5dee59d10bdfe0f207e925d96f017403810586f1103 php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm a02dbe1d17cd60824d164940950fad86b9f7ca968deab9ffbbd6c315dfd42968 php-soap-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm 982265ec9197a4452d8179a3f9b0e64c139395ae0b05e7d62e6e3059de9fb744 php-xml-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm e0b8075731d21dbb1b4054fa93b487b2cb4c286a8e0e09baedce712bd598e23d php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els6.x86_64.rpm dd257784236ffed6910bebc1de34b83ab13296e458721c724d7e2812295344ae CLSA-2026:1787305287 TuxCare License Agreement 0 - CVE-2026-0864: normalize CR and CRLF line endings to LF+TAB when writing multi-line configparser values so an attacker-controlled value cannot inject unexpected keys and sections into the generated file Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0864: normalize CR and CRLF line endings to LF+TAB when writing multi-line configparser values so an attacker-controlled value cannot inject unexpected keys and sections into the generated file

0 tuxcare-amazonlinux2-els python-2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64.rpm 2f1bf60a548cb1c9881cfec168524181a55ed613b725607b40941a59a5d9ee1a python-debug-2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64.rpm 74f7e03c5a77eba975525a8dff06fa95b1d5b6baff9e8e9a177e91556dccf606 python-devel-2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64.rpm 56d402030ca31f8be04d13b0709595c9110dd9a66c73ddc86b7c3e65e5603e33 python-libs-2.7.18-1.amzn2.0.22.tuxcare.els2.i686.rpm af32cb200424caf9e64f78e0d650464dfacdeae2b25e950585a828a13859a025 python-libs-2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64.rpm 6612e8e47782a3882071eea25b0a5c12cc38e17d93fa952f69d48480d3da16d5 python-test-2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64.rpm 494114c55451e1bc712fab455fbc7f7de40749fbc769df58877c75e5f939b2b4 python-tools-2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64.rpm b5cd46ea62049c9bbf9b311393b3f0759b86a2de5a2063dcb2252d6ad7ee80dc tkinter-2.7.18-1.amzn2.0.22.tuxcare.els2.x86_64.rpm 0406d4311190ac0b382a3a22a89c1c546984ea2374b3b8340e707ef08fb25926 CLSA-2026:1787671896 TuxCare License Agreement 0 - CVE-2026-14669: reject POSIX timezone abbreviations longer than the to_char() format workspace budget in DCH_to_char()'s TZ/tz items instead of strcpy()ing past the palloc'd buffer (security hunk of upstream REL_14_STABLE 5fb3c63, shipped in 14.24) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-14669: reject POSIX timezone abbreviations longer than the to_char() format workspace budget in DCH_to_char()'s TZ/tz items instead of strcpy()ing past the palloc'd buffer (security hunk of upstream REL_14_STABLE 5fb3c63, shipped in 14.24)

0 tuxcare-amazonlinux2-els postgresql-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 04e069544b467854bb9ec69a3f1eac3b0e0e65db23451d60a5dc18fea4507e1f postgresql-contrib-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 97a20781f02b91e0fa6d985b6c0e869f1f6961ecff5b0a0cc6ab7aae4e61b263 postgresql-devel-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 6facd5d78b3252b5a954597650ebc8623b9b91a15eb14eac4359184f57d02f57 postgresql-docs-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 93ed1ac59477bb1c38946ee20b7a7ef6b0e618e9171bfd4c2239e3f9d60a4c5e postgresql-libs-9.2.24-8.amzn2.0.10.tuxcare.els2.i686.rpm 244cd6c3a33cb2112a2ebd8bfc213bad0ddfc3aee7c9298147b8b9270b2602f4 postgresql-libs-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm ccb66d2c5e435ab29e87b2c936c7136a3c47e11145b90baeb93ad82f2ed29768 postgresql-plperl-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 9976cb52de5240486e383db231425a509a42eda76a99a5b44aedd1ca41c68f9a postgresql-plpython-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm d7b62c84251d6c2b0e6ed7b38bf5e6594fdbe631e45c723dead3f8a39729e277 postgresql-pltcl-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 2f70d88406c98a0825eff4d0259c2e32460da1c08753f3e28ad32cebebef3906 postgresql-server-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 727f311a58c8d49b4ac174a2cf56c026ecb9a8facf8eb8912e06277ea3bea71b postgresql-static-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm dd8e8ac2a890de6c019e78da5b4b5eb7f4d2aabb0ca7ef100af178e2747ec2d4 postgresql-test-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 6f06a03352ef4ad68734b11326906e28a2ce069e2103fba4f4ece7f4a16e455b postgresql-upgrade-9.2.24-8.amzn2.0.10.tuxcare.els2.x86_64.rpm 04f86bb80a559244d2f89eab21a84bc22f39416f7e90cdb5c4091fdd48bb3ad2 CLSA-2026:1787311111 TuxCare License Agreement 0 - CVE-2026-68743: validate auth_token_length in extract_authtok_v1() to prevent an out-of-bounds read from a crafted PAM protocol v1 request Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-68743: validate auth_token_length in extract_authtok_v1() to prevent an out-of-bounds read from a crafted PAM protocol v1 request

0 tuxcare-amazonlinux2-els libipa_hbac-1.16.5-12.amzn2.15.tuxcare.els2.i686.rpm 88fff45b61b08cec84843d840eac8880832f422c13c5d9141df98f65d8483ac7 libipa_hbac-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 22e4d14c9b479b787f85c438e6ba20c18b8d7edbbfb7ee22478c9eeab2e0677d libipa_hbac-devel-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 9d4c8f49d0deb5820ce5581ecdc3e24661f0cae8664df95bef9d64ce1621054a libsss_autofs-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm c209a8c22448036d95abce563c9a4b17ca04acfb6e9a763d8950010c691367ad libsss_certmap-1.16.5-12.amzn2.15.tuxcare.els2.i686.rpm c2b74d834933b0553d33a1507dd72e3e9f863e5c6c589590d3f593031f59cef7 libsss_certmap-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 997fc605b20a3ec5251cf788c53e17e0682120ff7f761cf66e14f75fca0e15dd libsss_certmap-devel-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 5a1799fe10fb7c305a55860bf5e947ef42714751932195c18a6c96a0fde8c347 libsss_idmap-1.16.5-12.amzn2.15.tuxcare.els2.i686.rpm 9f9142e150d69d5cba0eb213e91c0a4c2c5844bb0462f756e256d1b52c62c052 libsss_idmap-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 564c29878758f0088986a76d849635319620717289fbc696d68bc05c22624c16 libsss_idmap-devel-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 74bb52f9883f44682162fbc0b5afb8656373adadbff58da3e4b6e31b2fac38af libsss_nss_idmap-1.16.5-12.amzn2.15.tuxcare.els2.i686.rpm 30f0d5a94ed0f308082ea7bd32902249cde6fb1a3a9fb1a9d7a36f06693f2387 libsss_nss_idmap-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 23ebce35bac5cd38f3d3fcdb8bca70bf328ce75e10811fd914b3878514b40567 libsss_nss_idmap-devel-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 49954229ea691044c54ae47336e88a3ddc9a700fc5561950d6933e760163e550 libsss_simpleifp-1.16.5-12.amzn2.15.tuxcare.els2.i686.rpm 278a0cad4f871e92aedce6d74ae211eb3bee921b0742df1afc58405fec61afbd libsss_simpleifp-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 0533a4d3bc7f5bb5cb15d821ed25bf47e1f3b6cccb29461ea2d3edd16b38f8e7 libsss_simpleifp-devel-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm d81dd0f2b4704b759df2af4c7558f2182aa091a05a95cb44f458886fb59fab63 libsss_sudo-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 059ccda4e6d6406a52dc6c9a6588cdc556180cbb0d7bf5ca09f303cba84e133e python-libipa_hbac-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 64e5962a057e1251a8743129658206253e6b6cd8839c71ec1415affe11a446fe python-libsss_nss_idmap-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 7589d6412db633ab8847a2b50574c84843c38d0149695b3fd6bd0696b4344fd8 python-sss-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm fe51a408269bb374fc6ed182b55c05e3339e6ea66d32f745e25d4efe61c55cb9 python-sss-murmur-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 3ddd98c71836f60edb0b430e6003018e64bb263e60405901ccc76fd93595cf84 python-sssdconfig-1.16.5-12.amzn2.15.tuxcare.els2.noarch.rpm d17b0060c92356c262f9017a40f64bc16b64dd99972922a70e5816ef74eb06e8 sssd-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm fb8946b7191e92b21288bdfc35e11116c82eb3b25b1d5217fc01e25b70181114 sssd-ad-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 58af172a849b24fac99e4c86e82ea8459ca759406558773b14ffcca6d2d8dc18 sssd-client-1.16.5-12.amzn2.15.tuxcare.els2.i686.rpm fb62a336487270963b828af90ee97ddec195cd1d1170742271e76965def09683 sssd-client-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm bff5091fb14551f2b49f84025bb4e24221bbbc85072ea9ea0e646d62b99ea261 sssd-common-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 7ea276c9122f974cb13756432d853f26d6d10a2026ced16b68e33919149e0c70 sssd-common-pac-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm fae4662e3da8fa06bd58df6602ea1bee379d383a356945950df0e132dd900a02 sssd-dbus-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 10a2c594eba02cdc79ec24b4eff8e77942e276770050bbb8d0baa8ed9f337368 sssd-ipa-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm a7a964f6b863e3ad76946280a5d948e74bbd991d0bc5c8999cc12536b214b48e sssd-kcm-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm ca8edaa3537a0ea7625bf1b6ef7bee84171f683caca61c950643b3b547f22d68 sssd-krb5-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm ea4299631e373e3c86ab3942e65c90a0de5c25a3f96eb20202deb04b82eb8939 sssd-krb5-common-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 8f31b04126971f25ad55688b5d8472a0b95b1445d2001aa902a215f49d24a8c0 sssd-ldap-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 5e602382409e18535394f14857ba5c3ccd19390d8163e4142c686d353385084d sssd-libwbclient-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm d1f847d7ad1453dc4d0e983a44c6b1214e99600a58cfd4db2b9e382515fae6d7 sssd-libwbclient-devel-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm a13772e330f90f9db569c9b7d53b3868982996c7a2ad37a185c896f855b4bb55 sssd-polkit-rules-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm ce173caef9df727afcdfb9b580c194c44d365a2b1e32400991d48a75d55be01d sssd-proxy-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm ae76ef7a59522b62025c21a9562b125db476992434c1b82a2c25e90491c29d51 sssd-tools-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm 1e4ee8a5b66f285b713734ea5793b9f8ced26b8f9e1eb6c5225708a43b0aa26b sssd-winbind-idmap-1.16.5-12.amzn2.15.tuxcare.els2.x86_64.rpm eed4284f7627258fbadf3c78b0bed310b6f545d356beaefb0df4bbd3b273dc24 CLSA-2026:1787671383 TuxCare License Agreement 0 - CVE-2025-1861: allocate the HTTP redirect target path on the heap so a long Location value combined with the request URL is no longer silently truncated into a redirect to a wrong location Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-1861: allocate the HTTP redirect target path on the heap so a long Location value combined with the request URL is no longer silently truncated into a redirect to a wrong location

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 9b14b8eeff62350497bdd55abdf86dd71931394d54f6078efd6ccca5fdc8f6ab php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 3986ad0c96a766474e2d8c7ddbcd692872601a5af15a55cefe528dff8109366b php-cli-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 5a8919397527e7e0ab2ae163167e5cac0beecbf4cf021219741d0438addb42dd php-common-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 3b13125655b95b65d719cb6ad62820d90643af8e3c859180185f772389e53fdb php-dba-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 7511fc8e82f4a71193ce414295d3572c168bb6695c4a17f39711e09925d5a540 php-devel-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 2f41a00efc389f0c55531ad6575b7ae3a48dba43e475d3a768e1c5be5f5cee51 php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm beb625195ab49a46f868ba5e6b1fd4eef5b4d87b417c79eec59330c031ca656a php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 9fd807aa52ea95345b4950794d8d4fd33d6151b40eb38bd7149e20de711f05b1 php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 2b659c93307fb4323ff50ad6ba42fcceb017c0c448e6577b029c7c2ee17d5519 php-gd-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 5e878adf53939bb41aaefcd01d02e5949cb43ba7e00789fdcea77907b3022704 php-intl-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 9bede7693a2af996c82e6d59865f6823a25592fe98b29aa7def4ed0037589a75 php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm f6be644bf38ae8008ab7abe7e43e64749062fc2bc3f24846e882ba7b35d104ff php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 18641e9dc9b1799da5dfe01739a92c43e0b279701e9ed079bffa05ff26acbba4 php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm fb5fdb70d1d3320b73e5ace664e28de213ed5c63e6ebcf3a258959078076577b php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm c4c6971e2dce12751dac5b1109659a5ec2a92bb48cbe9972151bd80d0b2895a6 php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 432cbabec6087bebd057ad87b7b8633fbfffb0cd5ae2d20b68497480855937c9 php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 3ac16482703eb1d961df7ea3222dc1bf974a6abbf78a748b15a80160b9c7ca79 php-process-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm ee2f4ac4879af27ae12c0cb803d3533fbf1e154d6ee1568a243bc062e2a9b856 php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 012f9e797f4172efc03f4cb1547d9a8144bb0186c28b54a42a3ab8cf2ccdf6f1 php-recode-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm c926702ebcd523ef8085ab97763490fce94c96c98a6b22b275233c14b9f2a776 php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm d53701f17c43bae4fe1adbdc0a0f13d87cb385ca24544bac4421efd435b2b660 php-soap-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm f9f92094a00f0bf606f522afe43975cbfd9fe847091c00b71d1dead1e7a5a954 php-xml-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm 6a73b6bc2c36a6a8548e3a4d00c76593823ed0b55f6b6e7579082c63be106981 php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els9.x86_64.rpm fb46ca39b8297991316954edaa7f129185f85e8e73f883050f47d80adbc8eaa5 CLSA-2026:1787137516 TuxCare License Agreement 0 - CVE-2025-66628: add an overflow check before computing the TIM image size in ReadTIMImage (coders/tim.c) to prevent an out-of-bounds read on 32-bit systems - CVE-2026-25989: make the upper-boundary checks in CastDoubleToLong and CastDoubleToUnsigned (magick/image-private.h) inclusive so a value equal to the limit is clamped instead of reaching an undefined integer cast None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2025-66628: add an overflow check before computing the TIM image size in ReadTIMImage (coders/tim.c) to prevent an out-of-bounds read on 32-bit systems - CVE-2026-25989: make the upper-boundary checks in CastDoubleToLong and CastDoubleToUnsigned (magick/image-private.h) inclusive so a value equal to the limit is clamped instead of reaching an undefined integer cast

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els2.i686.rpm 5272232c3ccdda3f9c10b6b755f0682db4dfd018df97e7d3a1e1d34bd2e54c74 ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm c989bc7fd972f964e94cbbbf7725364bee9c149e66dd207c15200ee2d33e8b86 ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els2.i686.rpm 0a503b5d7ee34b9628146a2fdb41868c0731176fe444896640a0f635dd81f921 ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm 7a3590e7cdc12edf7a589c787cf0f81472c483ea74e9b345ca155f494c197218 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm d1fbe07830882e36983f9e6966575c12611cd79c076a1d0ec033063e6657ec7a ImageMagick-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm e0abfc22c13d25c43a19001b03510908e6874d2959a25f73ee43be69bce98287 ImageMagick-doc-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm 4bb68364d7963cef80e507f594fc09dcd166504d39930c106398ecb74f04ecc2 ImageMagick-perl-6.9.10.97-1.amzn2.0.31.tuxcare.els2.x86_64.rpm 79c8511264b0858814988700c010103622ec26748b3364f646269fd438e81664 CLSA-2026:1787782584 TuxCare License Agreement 0 - CVE-2026-66338: reject chunk sizes carrying trailing garbage and chunk sizes that overflow goffset instead of parsing them permissively, narrowing an HTTP request smuggling differential - CVE-2026-66337: clamp the bytes returned by soup_filter_input_stream_read_until() to the caller buffer length when the boundary is found, preventing a heap buffer over-read Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-66338: reject chunk sizes carrying trailing garbage and chunk sizes that overflow goffset instead of parsing them permissively, narrowing an HTTP request smuggling differential - CVE-2026-66337: clamp the bytes returned by soup_filter_input_stream_read_until() to the caller buffer length when the boundary is found, preventing a heap buffer over-read

0 tuxcare-amazonlinux2-els libsoup-2.56.0-6.amzn2.0.7.tuxcare.els2.i686.rpm 1247826b1df2be9ad577797d87c7963550a400da500c0725940d5ebd16c405ce libsoup-2.56.0-6.amzn2.0.7.tuxcare.els2.x86_64.rpm 7affb8147f2e91013eb0bb048ce3c90a1fe240368c855c02974d126bdead0e6a libsoup-devel-2.56.0-6.amzn2.0.7.tuxcare.els2.x86_64.rpm 825675d49d76fb0bb2f497739fe2476c1df0ad7cb90f7a46f07694f36ac9cd25 CLSA-2026:1787999389 TuxCare License Agreement 0 - CVE-2024-56737: fix stack OOB write in HFS filesystem module - CVE-2024-45782: fix OOB write via unbounded HFS volume name copy in grub_hfs_mount() (same upstream commit 417547c1) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-56737: fix stack OOB write in HFS filesystem module - CVE-2024-45782: fix OOB write via unbounded HFS volume name copy in grub_hfs_mount() (same upstream commit 417547c1)

0 tuxcare-amazonlinux2-els grub2-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm 93288c030792d138235df7ff74b86277cc5373869232bdf54e287b60cb2770ae grub2-common-2.06-14.amzn2.0.7.tuxcare.els2.noarch.rpm 954a28eaf49900dec484c153a993c8884d0a952af5bc492449ca2eda1a5bc020 grub2-efi-x64-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm b1282d34dfc223ebc9962644453655d481c21eff06d245bc0200750c21fb23d5 grub2-efi-x64-cdboot-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm d8f6c20509b1ec418d0d0f4373bb14eef75ecdc7236a5d1476cb37da28df08b4 grub2-efi-x64-ec2-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm 3165ec07b41e645cdd8b63ce12123e455c86cc25ceacb8895f2b898617b78071 grub2-efi-x64-modules-2.06-14.amzn2.0.7.tuxcare.els2.noarch.rpm 3cd9e3ada4940f22ce2b8e523e1d95e0efc2d3335cc847efbf9d9cc759c0a9a8 grub2-emu-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm 5a5196424b1dda835bc21a930615516fa2926456f6b65ff4ddd9b32331992947 grub2-emu-modules-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm 1702b5459404dcde4e4e59e392bd76a4359ac3e72882465694d580ea30b396f9 grub2-pc-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm 969fb8771b508bee80fd32feabad8a0d3e1313a45c94f7c55d2eb50a465442f0 grub2-pc-modules-2.06-14.amzn2.0.7.tuxcare.els2.noarch.rpm 8679387f5199172b775aea435d8be036a641c1e1659c18be8a1b73bac1c5725f grub2-tools-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm 1f60db72cce0947ab55ed4bc5326e9357c9cb50fc0e58025224f209e138eeeec grub2-tools-efi-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm 1c013588dbe0d8b62bc9ce7400c895f2f303296bbb56a4f402a9735361fafae0 grub2-tools-extra-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm e80c2dd6a814657ea69c34ec4e7a0b4ad6f5b6c9648458aa7105e3b3f8adc545 grub2-tools-minimal-2.06-14.amzn2.0.7.tuxcare.els2.x86_64.rpm 966c4f24385edd3489d939ce11d746bb3eefe84551bf55610c6c3a7dd3b06ec8 CLSA-2026:1788011749 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 2.9.1-6.amzn2.5.26 (CVE-2026-11979 now fixed by vendor, superseding the TuxCare backport); remaining TuxCare ELS patches preserved (CVE-2017-7375, CVE-2017-7376, CVE-2024-25062, CVE-2025-9714) None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 2.9.1-6.amzn2.5.26 (CVE-2026-11979 now fixed by vendor, superseding the TuxCare backport); remaining TuxCare ELS patches preserved (CVE-2017-7375, CVE-2017-7376, CVE-2024-25062, CVE-2025-9714)

0 tuxcare-amazonlinux2-els libxml2-2.9.1-6.amzn2.5.26.tuxcare.els1.i686.rpm 8f242ead6d49b7da6d2402ab24a32e058248dd87e5473830aaf9eeb9f2556ac3 libxml2-2.9.1-6.amzn2.5.26.tuxcare.els1.x86_64.rpm fa5ac0855393814fd4d1eaf78f0dddf2bd2ebfdd35629b637f6889f7269d7936 libxml2-devel-2.9.1-6.amzn2.5.26.tuxcare.els1.x86_64.rpm dcb4afaf360fdc49836eb67976fde40610aff4e5e44cc0aaebf197855959d173 libxml2-python-2.9.1-6.amzn2.5.26.tuxcare.els1.x86_64.rpm 853c5fd105cb1a3f542b8d1b2f66eb519364d5e4ff6be6499cfd3de5755ac22d libxml2-static-2.9.1-6.amzn2.5.26.tuxcare.els1.x86_64.rpm 350f59d0df793cf873781f62f0ce37bf5772e460e5138d014d5be76cf5a2598a CLSA-2026:1788175296 TuxCare License Agreement 0 - CVE-2016-10087: reset info_ptr->max_text when png_free_data() releases the text array, so a later png_set_text_2() reallocates instead of writing through the freed pointer (NULL pointer dereference). Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2016-10087: reset info_ptr->max_text when png_free_data() releases the text array, so a later png_set_text_2() reallocates instead of writing through the freed pointer (NULL pointer dereference).

0 tuxcare-amazonlinux2-els libpng-1.5.13-8.amzn2.0.9.tuxcare.els1.i686.rpm ac4dd87798b0b511a0f7d0d7fe9a3ec0dc24c95cc08431099c1f0b508f51a45d libpng-1.5.13-8.amzn2.0.9.tuxcare.els1.x86_64.rpm bb1a54929455f40bccd5a4d32dc4688c832b0d6a65cec8b0f18f4c06457f3d7b libpng-devel-1.5.13-8.amzn2.0.9.tuxcare.els1.x86_64.rpm a9483ae73b5d6842cbd62b3834ac5c7dcbda8b21edb5a8aa723c05fe68fabee1 libpng-static-1.5.13-8.amzn2.0.9.tuxcare.els1.x86_64.rpm 36470fd2c7be9909c3d5c653b2efe8ced0dd198b72fe9f5459533a386b4c92df CLSA-2026:1788185792 TuxCare License Agreement 0 - CVE-2026-0864: normalize all line endings (CR, CRLF and LF) when writing multi-line configparser values so a value cannot inject extra keys Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-0864: normalize all line endings (CR, CRLF and LF) when writing multi-line configparser values so a value cannot inject extra keys

0 tuxcare-amazonlinux2-els python3-3.7.16-1.amzn2.0.29.tuxcare.els2.i686.rpm ccc38c37b6aaeb848124bac316ff7122762d2b2c8735454e8bad6b32ca6405e0 python3-3.7.16-1.amzn2.0.29.tuxcare.els2.x86_64.rpm 8c0a4e1eb3bc1eb6e2e2448cd48b7d2e19f57e59286222be24b194d90d3a51bc python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els2.x86_64.rpm 0204f4bb70ca310a61b1382db7c3d60a79bb96cbc8266b59477a2478b1cb0ced python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els2.x86_64.rpm 41bbaa662bf2e889c2dbecbbc4a5d334f2957d1ce95dd3a1a0da8af6b9e2800c python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els2.i686.rpm 53dce377a1f8aa126df261a0a33420c268b24a0202b30c4b300e90dd869ea587 python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els2.x86_64.rpm c3bbea75ecf28f329f5d2a945e60a3390de6f1338f6d509ec06eba86793fc8e1 python3-test-3.7.16-1.amzn2.0.29.tuxcare.els2.x86_64.rpm 50cd553568d8c28d2b11065f3e7416a4a8669801a0e7f0c84a3b6b4d52555469 python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els2.x86_64.rpm 3fd4f64e91434b66b39aa9d525b25bcce07deb2f23c9ae3eda95ab7646b278bb python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els2.x86_64.rpm bdc9c8aaa31792e2a1f35c75cf0312ed669d9bb5bfe125ff1eb03f74a4931069 CLSA-2026:1788258008 TuxCare License Agreement 0 - CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present - CVE-2016-3189: fix use-after-free in bzip2recover Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-12900: fix out-of-bounds write in BZ2_decompress when many selectors are present - CVE-2016-3189: fix use-after-free in bzip2recover

0 tuxcare-amazonlinux2-els bzip2-1.0.6-13.amzn2.0.3.tuxcare.els1.x86_64.rpm 45553f0f01d657f938079090b85395fc3725c0956812465edd967d0fd6dd959d bzip2-devel-1.0.6-13.amzn2.0.3.tuxcare.els1.x86_64.rpm a88bfa378b7085d5ba828c61b7f4f0497830704e09ca1e776324184ece7a633c bzip2-libs-1.0.6-13.amzn2.0.3.tuxcare.els1.i686.rpm 7d1904c21430942d238170b1f53c31927226632db9a73a86bc518b9a2fd66bf8 bzip2-libs-1.0.6-13.amzn2.0.3.tuxcare.els1.x86_64.rpm 467bad4e0c3ece9e82e7c2d56c2927ed6dbec330b4d0ac744937541d7eb77772 CLSA-2026:1788268599 TuxCare License Agreement 0 - CVE-2024-53899: Quote template strings in activation scripts Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2024-53899: Quote template strings in activation scripts

0 tuxcare-amazonlinux2-els python-virtualenv-15.1.0-4.amzn2.tuxcare.els1.noarch.rpm b611bbf0a8d5d84a1ed1aff21c87031ec430a8fe946619cf5ec716ae4cd98367 CLSA-2026:1788779569 TuxCare License Agreement 0 - rebase to 2.4.68-1.amzn2.0.1 - drop all twelve TuxCare CVE backports; 2.4.68 already incorporates them - keep openssl 1.0.2 (openssl-devel) on i686; AL2's openssl11 is x86_64-only - no TuxCare CVE patches remain; the .tuxcare.els1 suffix keeps the ELS channel authoritative after AL2 EOL None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 2.4.68-1.amzn2.0.1 - drop all twelve TuxCare CVE backports; 2.4.68 already incorporates them - keep openssl 1.0.2 (openssl-devel) on i686; AL2's openssl11 is x86_64-only - no TuxCare CVE patches remain; the .tuxcare.els1 suffix keeps the ELS channel authoritative after AL2 EOL

0 tuxcare-amazonlinux2-els httpd-2.4.68-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 67b6cc76204aa8a2aae71791e0d18108e47bd4399f26cfbf15b3610ae8323c4c httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els1.x86_64.rpm e5a0cfcbfbcbae0f117864744773d966871748290d3115aff89cbaa8009fc8db httpd-filesystem-2.4.68-1.amzn2.0.1.tuxcare.els1.noarch.rpm 3ea8a9bc100dd262f31ca0e23fde0ab00b265190414730f78fc9b1b31aae4c15 httpd-manual-2.4.68-1.amzn2.0.1.tuxcare.els1.noarch.rpm 35d394a16126992b6a0636332c3eb6af3e0f6585b5bec91d685bb47f81f39720 httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 380ad5c4d4f8e85cdc560fa06e9527dcd253b76ff11a30a8ff8aa8e4381c3b3c mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 7894d72390677cbfbe2d4e09c540b8bc1f591ff66cfc52f77455e7d7023a51a9 mod_md-2.4.68-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 596a304e22fc4c84041adb8748af86537fc198b0b2b4ed30b013f50d7d1ef6a5 mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 58d4b80951073c52e478c6c85f3ea5ec408db91230be0a5fd1c391923ddaecca mod_session-2.4.68-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 443154b6ade8e0c95e8568ad916a7735fb10b0134d62f7cec73e4a9b5326fe0c mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 5a101b6d056b5b811c7442b757f3843848f6f9006eeb14f6e13c4421077561f2 CLSA-2026:1788780021 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 3.3.29-9.amzn2.0.4 (CVE-2026-33845, CVE-2026-33846, CVE-2026-42009); take AL2's DTLS backports and drop our CVE-2026-33845.patch (AL2 now ships its own fix for the same CVE); preserve the TuxCare CVE-2023-5981, CVE-2024-0553 and CVE-2026-3833 backports (renumbered to Patch1010-1014); no new TuxCare ELS work ships here None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 3.3.29-9.amzn2.0.4 (CVE-2026-33845, CVE-2026-33846, CVE-2026-42009); take AL2's DTLS backports and drop our CVE-2026-33845.patch (AL2 now ships its own fix for the same CVE); preserve the TuxCare CVE-2023-5981, CVE-2024-0553 and CVE-2026-3833 backports (renumbered to Patch1010-1014); no new TuxCare ELS work ships here

0 tuxcare-amazonlinux2-els gnutls-3.3.29-9.amzn2.0.4.tuxcare.els1.i686.rpm 24bbda80e25503ce00701c7ae933ddb3cadd36b22244ce9224fb78d610403f9d gnutls-3.3.29-9.amzn2.0.4.tuxcare.els1.x86_64.rpm 2608f13f6da556e04b8493f27c4f94b26a922ed5a45ca1001c6504cd228dd688 gnutls-c++-3.3.29-9.amzn2.0.4.tuxcare.els1.i686.rpm f0676cd37d93d24acaf0f77d1d69fd7ba8523277bfd9a6796248fbab8a2f695a gnutls-c++-3.3.29-9.amzn2.0.4.tuxcare.els1.x86_64.rpm 8cb8a4c35a180af391114b2b8e787b060c869edf9e708939a560fba3559b79c7 gnutls-dane-3.3.29-9.amzn2.0.4.tuxcare.els1.i686.rpm e7fe6c2acbc2689907b139f4f2150de23898a281d83fcb2a15df6af66517fd3c gnutls-dane-3.3.29-9.amzn2.0.4.tuxcare.els1.x86_64.rpm 31be188193e497207c16b7295e950c881e681d8af4832be80d63d57d32258622 gnutls-devel-3.3.29-9.amzn2.0.4.tuxcare.els1.i686.rpm be2ea4d32a591d38b65c9b50ee33b0759fa8c86e54eba16c494a0e429edc9970 gnutls-devel-3.3.29-9.amzn2.0.4.tuxcare.els1.x86_64.rpm 2593e15834661aa2a0c244983587b4c8fad6c728af033ec5df238c1f1da1bee5 gnutls-utils-3.3.29-9.amzn2.0.4.tuxcare.els1.x86_64.rpm ef3cc1bc7cd66d090ff665bb90ce119bb8562a44db5aaf8c100d81a7a480f0c0 CLSA-2026:1788785131 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.15 (CVE-2026-44690, CVE-2026-50251); keep TuxCare CVE-2019-16866, CVE-2026-33278, CVE-2026-50252 backports None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.15 (CVE-2026-44690, CVE-2026-50251); keep TuxCare CVE-2019-16866, CVE-2026-33278, CVE-2026-50252 backports

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.15.tuxcare.els1.x86_64.rpm 6c4b078b7dcda337539a165cfcd9fb1eb297f3f1c22df98097dbf56add7e5852 python3-unbound-1.7.3-15.amzn2.0.15.tuxcare.els1.x86_64.rpm 03d15fcf70e8ce3f6425e42e183500a8105f7e384803b79db6a085639ad4c236 unbound-1.7.3-15.amzn2.0.15.tuxcare.els1.x86_64.rpm afc7b65aa1a8dce34810ef8a1bd355ae576aa770d687e780f43e4c0bece5f5ff unbound-devel-1.7.3-15.amzn2.0.15.tuxcare.els1.x86_64.rpm 1b9b806d6ce186e6864870d6260955822f01d26246341760f2f4ba569c2a64bc unbound-libs-1.7.3-15.amzn2.0.15.tuxcare.els1.i686.rpm a27e3a3417617a2fc8640ec6bb9558d72d1f4734fe6b78d78dc437e508239d8f unbound-libs-1.7.3-15.amzn2.0.15.tuxcare.els1.x86_64.rpm e85876bd03307dfa7f1bb614c221fed87fbc31922b89f97c46e26763ff3d781a CLSA-2026:1788785316 TuxCare License Agreement 0 - Rebase onto AL2 7.0.76-10.amzn2.0.17 - Carry TuxCare fixes: CVE-2021-25329, CVE-2026-41284, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514, CVE-2026-43515 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto AL2 7.0.76-10.amzn2.0.17 - Carry TuxCare fixes: CVE-2021-25329, CVE-2026-41284, CVE-2026-43512, CVE-2026-43513, CVE-2026-43514, CVE-2026-43515

0 tuxcare-amazonlinux2-els tomcat-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm c8df3ff0459150ad29a300558ad9b9ec8946c40abfd764180b36545a3393295d tomcat-admin-webapps-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm 2f0f4d41a07aa76840058ed6647ddfd10cbc88332b9b58bb05073b865c6747fa tomcat-docs-webapp-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm 8336ae5551a1bad41caff6212c3dce5129b91b178a4e44c98404a9427f994a50 tomcat-el-2.2-api-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm 2f14f5f12d94c8055e59f75aaac10ec62f8270d7596c283ea2cf22a4c24d0274 tomcat-javadoc-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm f31ce7863a03ec3cfc6b4d3715ae19bf4ddf92f61102a873c35e461bb7364b69 tomcat-jsp-2.2-api-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm de8e13bf65bb3a9161cd0e282b456f126f554753fcaec914f712a643baae36f7 tomcat-jsvc-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm e0bfeb485775f6ad15900f4681d96787ebbe187c8ce5b0ba8f4cc7268ad7958e tomcat-lib-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm 37bc50ba49e5ebd355c704dcd7ac8c13f11336e8186a1f9698012a24990aa3a7 tomcat-servlet-3.0-api-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm cd3a33632c5994ba3369f46cbad655174a2f0bb90b8a9a4f8354138b1cb07ca8 tomcat-webapps-7.0.76-10.amzn2.0.17.tuxcare.els1.noarch.rpm e9bfa9fb614e2a9077743435ed9cfb309c55ca24f54dc74eb9eddf48b6ad541d CLSA-2026:1788785566 TuxCare License Agreement 0 - rebase to 0.26.5-43.amzn2.1.7; CVE-2026-10118 fixed by vendor - carry CVE-2025-32365 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 0.26.5-43.amzn2.1.7; CVE-2026-10118 fixed by vendor - carry CVE-2025-32365

0 tuxcare-amazonlinux2-els poppler-0.26.5-43.amzn2.1.7.tuxcare.els1.i686.rpm 5f954e5f50b570afe2ceb9d3a05dd47b7af0292374ab32149459ff82f522c563 poppler-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm be0f6b642851850579bb19a76824730c00de824ce5dbb5db9fcab6d29e309716 poppler-cpp-0.26.5-43.amzn2.1.7.tuxcare.els1.i686.rpm 04ea48ea7f25f3164cb61ed8463df5430053bcfeb6114ea600d7e98b4a4f1332 poppler-cpp-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm bc3b5a88bcb712131b0497f1412c535ac34d0c62e0a2e78deb74ad1ea4eb6f4a poppler-cpp-devel-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm de8c0f01fc048f74e1b861fee017202c2dd9d031768d4a07cc6b902336d4e183 poppler-demos-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm be7d1734d55981f95e644c040b4d10ad5f5b01548c8f1b55ee8c74a07aac3bee poppler-devel-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm f7a7e59c50cfa78208a5803775caeef010f0ffa1d6a34d540ea1e61e29b42bca poppler-glib-0.26.5-43.amzn2.1.7.tuxcare.els1.i686.rpm 819b2940c8aba99b3dafa302922db9d636d45de194ea1ad7d732dd326dac19e5 poppler-glib-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm eb5dc514e41f68591943a26661be285a33399f3e80a7e00165467e013cc79251 poppler-glib-devel-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm 6cdc413d03b26074fb900926423ca7168786e01efd22075110f52f877c09211a poppler-qt-0.26.5-43.amzn2.1.7.tuxcare.els1.i686.rpm 1ceffef5a8b738fa92c68abefede27d6ade438028b94bad0b6850cc6b181bef2 poppler-qt-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm dba0783cb7546770d9955cadbba37b49c0def5000826d44ab6521d71a7490b99 poppler-qt-devel-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm 1a807490212584b139d2c40ac2343df8e674f419ceca522990edcfb105cc7ae6 poppler-utils-0.26.5-43.amzn2.1.7.tuxcare.els1.x86_64.rpm 7998354eeeb0d6787a93495154a42eaec3bd2ea90e520ceae2abb4722ae997c6 CLSA-2026:1788785777 TuxCare License Agreement 0 - rebase to 1.4.3-12.amzn2.2.9; CVE-2026-66032 and CVE-2026-66034 fixed by vendor None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 1.4.3-12.amzn2.2.9; CVE-2026-66032 and CVE-2026-66034 fixed by vendor

0 tuxcare-amazonlinux2-els libssh2-1.4.3-12.amzn2.2.9.tuxcare.els1.i686.rpm 2aa5740d12637215ed3d21771f7ea854d4bf2a107f333d60e5598b5197268e19 libssh2-1.4.3-12.amzn2.2.9.tuxcare.els1.x86_64.rpm 0722417f8a9b76c25b46859d8cc757ef722c12d046d8c27c4ddbb9a631619b9a libssh2-devel-1.4.3-12.amzn2.2.9.tuxcare.els1.x86_64.rpm d9b41d26a8b767bb609660c1521555ee10acd6d3090fe17b4e83f3e5121d058e libssh2-docs-1.4.3-12.amzn2.2.9.tuxcare.els1.noarch.rpm b2f82d41b98debc8bf0820528643994be4f0d9f2562b5c49a5679419c66c1363 CLSA-2026:1788951798 TuxCare License Agreement 0 - CVE-2026-53784: refuse attacker-planted symlinks when a daemon module resolves its absolute path with "use chroot = no" - CVE-2026-53786: strip the module-dir prefix before checking a client-supplied filter merge file against the module filter list - CVE-2026-53789: keep implied parent directories non-content so a peer cannot widen the scope of a --delete run - CVE-2026-53803: open the batch, motd, lock, log and config files refusing attacker-planted symlinks, and refuse a non-regular --read-batch file - CVE-2026-70459: reject a non-directory transfer-root file-list entry - CVE-2026-70463: parse "auth users" with conf_strtok so an @Group Name entry containing a space is not torn in two Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53784: refuse attacker-planted symlinks when a daemon module resolves its absolute path with "use chroot = no" - CVE-2026-53786: strip the module-dir prefix before checking a client-supplied filter merge file against the module filter list - CVE-2026-53789: keep implied parent directories non-content so a peer cannot widen the scope of a --delete run - CVE-2026-53803: open the batch, motd, lock, log and config files refusing attacker-planted symlinks, and refuse a non-regular --read-batch file - CVE-2026-70459: reject a non-directory transfer-root file-list entry - CVE-2026-70463: parse "auth users" with conf_strtok so an @Group Name entry containing a space is not torn in two

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els10.x86_64.rpm 8a97ef029c18a737383ca38164424e86e2494e5e7cb3872d4ac696c34b2b68ae CLSA-2026:1788955237 TuxCare License Agreement 0 - CVE-2026-56131: fix a use-after-free by refusing re-entrant XML_ResumeParser calls issued from inside handler callbacks; carries the prerequisite handler call-depth tracking, which also covers CVE-2026-50219 and CVE-2026-56412 Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56131: fix a use-after-free by refusing re-entrant XML_ResumeParser calls issued from inside handler callbacks; carries the prerequisite handler call-depth tracking, which also covers CVE-2026-50219 and CVE-2026-56412

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.7.amzn2.tuxcare.els6.i686.rpm 58db69a409800543df3c2b8e6ad990bef51b33bc6b70ab78860b76ea531d04b2 expat-2.1.0-15.0.7.amzn2.tuxcare.els6.x86_64.rpm 005fb0383a753331969b7fe540c47b26c103ab644384002ed6b235f0c83a96e0 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els6.x86_64.rpm 37a189fc640f4df89606e27a7fe7fa402338012f9590ccd62f8b0647d71dd613 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els6.x86_64.rpm b1a05b8e4da5003820b093f0828f100e608c343aeb7ddb6bf9b5be400b8da45e CLSA-2026:1788964517 TuxCare License Agreement 0 - Build as noarch so one installer serves x86_64 and aarch64 hosts - Ship /etc/els-release and obsolete the els-define package None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Build as noarch so one installer serves x86_64 and aarch64 hosts - Ship /etc/els-release and obsolete the els-define package

0 tuxcare-amazonlinux2-els els-os-release-1.0.0-2.amzn2.noarch.rpm d2ffb6a4cc077327d488f6aedb819cbb2eed8e684982abedba87aa7545c365bb CLSA-2026:1789139529 TuxCare License Agreement 0 - CVE-2026-67288: NULL pointer dereference on a smartcard cache read whose szLookupName NDR pointer is zero; completes the vendor's backport, which left "data" uninitialised in PCSC_SCardReadCacheA() and the HashTable lookup in PCSC_SCardReadCacheW() unguarded against the resulting NULL key Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-67288: NULL pointer dereference on a smartcard cache read whose szLookupName NDR pointer is zero; completes the vendor's backport, which left "data" uninitialised in PCSC_SCardReadCacheA() and the HashTable lookup in PCSC_SCardReadCacheW() unguarded against the resulting NULL key

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm 9fac0d2613a2f8e1304f5045bf851eb4ce0eaee3c799534a57f043616599cb23 freerdp-devel-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm fb4e45219f649b905b5af579becb95ee6219129e0ed79e766b23adbe4ec9980f freerdp-libs-2.11.7-1.amzn2.0.14.tuxcare.els2.i686.rpm a8e55858f9f2f9d75355566e1d0e19827ab7b14fd94a56c58c6cfbbda42669c3 freerdp-libs-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm 99d33dc667317bc245537a4de1f13dafb9d290cc077a7b19b2e5d0be3924c127 libwinpr-2.11.7-1.amzn2.0.14.tuxcare.els2.i686.rpm 773695fe6ae2d745ba38b894808037e5f8b457b1def192a88fb499f26870ae1d libwinpr-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm 266258d5df66cc4d8e940802176026615b30d51dfed8e364924fc18b671968fb libwinpr-devel-2.11.7-1.amzn2.0.14.tuxcare.els2.x86_64.rpm 914f3a8325b8ad582935078aa93041c8027bcf55a5fe277b65be0118806e897d CLSA-2026:1789375039 TuxCare License Agreement 0 - CVE-2026-86420: release the MemoryResource reservation in OpenPixelCache() when the pixel-cache allocation fails, so repeated failures no longer exhaust the memory budget - CVE-2026-86421: destroy the group level's draw_info in MSLEndElement() when a <group> element closes, fixing a DrawInfo leak in the MSL decoder Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-86420: release the MemoryResource reservation in OpenPixelCache() when the pixel-cache allocation fails, so repeated failures no longer exhaust the memory budget - CVE-2026-86421: destroy the group level's draw_info in MSLEndElement() when a <group> element closes, fixing a DrawInfo leak in the MSL decoder

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els3.i686.rpm 18ea5e29f1df72111111ae2764dfbd38f9a006db66d091a85cdc1918c94c108d ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm 85607b1870dee51f2a6270add15c50bb248996ed27be4b7a919630e7880e3024 ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els3.i686.rpm bda28d438eb1406adfbf6449902204d45d956901445d54c06bbc6e4c9b732bc2 ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm 328d85d335f5c6a3ad8b853c24b8f37d323f0dc289dccdb05519bd3433f8476c ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm a724ef9cac0216b4cbfecb2ef110eca64ae130def3b44344f2dff851b7630692 ImageMagick-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm 13485520845ff56ec8facdc85bbca02ffc62b39fbafff0440858112f84b06fbc ImageMagick-doc-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm ae71f80a790806fad21d6c9d21934189011f8019386ce2e888364b44d402c1fb ImageMagick-perl-6.9.10.97-1.amzn2.0.31.tuxcare.els3.x86_64.rpm 7c516d69b3d197b0d46d98260c4fb4d5d304c51c5a421d5472342f5b05a57cf4 CLSA-2026:1789380621 TuxCare License Agreement 0 - CVE-2026-73282: avoid a potential realloc use-after-free in the ssh client when a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending, by passing a forwarding index instead of a raw options.remote_forwards pointer to ssh_confirm_remote_forward() (upstream 9910d5ef) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-73282: avoid a potential realloc use-after-free in the ssh client when a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending, by passing a forwarding index instead of a raw options.remote_forwards pointer to ssh_confirm_remote_forward() (upstream 9910d5ef)

0 tuxcare-amazonlinux2-els openssh-7.4p1-22.amzn2.0.13.tuxcare.els3.x86_64.rpm f997d1715df8b4f35e53b23f79641adc23b5af99bafb64c38094559ff2ba0393 openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els3.x86_64.rpm fd219f323e26f00743cb7a38638b6a4c7b9766d566119344d7e9843c68037c41 openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els3.x86_64.rpm 0fce539f6e2d1919bb771e584e5c91c7de0dc3bf1baab9fe48611e62a95915d9 openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els3.x86_64.rpm ae62e66d8100f11343b087916c460fb28b68472422739ce9759681e37390bb90 openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els3.x86_64.rpm 0a0e6270e86fccd290ccbc7be43dd7a12cafe936020133803fc60e290eb33f8e openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els3.x86_64.rpm c90b811420748d066e081fca12395e1d23915e0b1bfa328d6fa4e1042c69a822 openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els3.x86_64.rpm ebd5bccbc93565d795ddd089ef971f1095504a49c293343039863928695ea4bc openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els3.x86_64.rpm b66a719745fad8fede96608d5890b973e5884eeca01c2c7294655c4133c11c65 pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els3.x86_64.rpm 5708f8c9dad11fc50764bd3ff90429585d6e4ffdd358368372a7b51aaa46f35c CLSA-2026:1789382532 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 1.0.2k-24.amzn2.0.21 (CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-42766, CVE-2026-45447); take AL2's own fix for CVE-2026-45447 and drop our openssl-1.0.2k-cve-2026-45447.patch; no new TuxCare ELS work ships here None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 1.0.2k-24.amzn2.0.21 (CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-42766, CVE-2026-45447); take AL2's own fix for CVE-2026-45447 and drop our openssl-1.0.2k-cve-2026-45447.patch; no new TuxCare ELS work ships here

0 tuxcare-amazonlinux2-els openssl-1.0.2k-24.amzn2.0.21.tuxcare.els1.x86_64.rpm 581e829d8fa8c730f964b65a1f39e6c7c707bcd9c95093ec0c0cf231309d3fee openssl-devel-1.0.2k-24.amzn2.0.21.tuxcare.els1.x86_64.rpm 6af3bdbb999d4fc7e1daa72100732b94d153dab31512593421d4f71cefd030d6 openssl-libs-1.0.2k-24.amzn2.0.21.tuxcare.els1.i686.rpm 89492fb062b1c0634c07e2b696afaf56617e8b8cb15a2a7c83fa01d99a31db1a openssl-libs-1.0.2k-24.amzn2.0.21.tuxcare.els1.x86_64.rpm a87a495ab5d5655e998cda9137b0eeee4fb57c41d7a54c0f88fc762b04b18199 openssl-perl-1.0.2k-24.amzn2.0.21.tuxcare.els1.x86_64.rpm 4d6f040b9d3246ed00cc7e6ff7accc9f8e835fdfb7cc07ee8492c441a768dc3a openssl-static-1.0.2k-24.amzn2.0.21.tuxcare.els1.x86_64.rpm fcefdc6f41e22a454f53b7bbc6430a23fa811c0629c0198cd4b84b9fea25660c CLSA-2026:1789382915 TuxCare License Agreement 0 - Rebase onto vendor 2.0.3-1.amzn2.0.2 - Fix CVE-2026-44950: out-of-bounds write from unvalidated cumulative glyph data writes in src/fc/fserve.c - Fix CVE-2026-59679: out-of-bounds access from num_chars not validated against the encoding array size in src/fc/fserve.c - Drop our CVE-2026-56001/56002/56003 patches in favour of the vendor's Fix-ZDI-CAN-30558/30559/30560, which carry the same upstream fixes None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto vendor 2.0.3-1.amzn2.0.2 - Fix CVE-2026-44950: out-of-bounds write from unvalidated cumulative glyph data writes in src/fc/fserve.c - Fix CVE-2026-59679: out-of-bounds access from num_chars not validated against the encoding array size in src/fc/fserve.c - Drop our CVE-2026-56001/56002/56003 patches in favour of the vendor's Fix-ZDI-CAN-30558/30559/30560, which carry the same upstream fixes

0 tuxcare-amazonlinux2-els libXfont2-2.0.3-1.amzn2.0.2.tuxcare.els4.i686.rpm 0defd68e5f95d918b2f74762bb84b439312eea3a6c5e348fade6772aa9e7f274 libXfont2-2.0.3-1.amzn2.0.2.tuxcare.els4.x86_64.rpm 234df9c009b96b7328062b5f588a887ce2f73e98106a06c264a493384cded672 libXfont2-devel-2.0.3-1.amzn2.0.2.tuxcare.els4.x86_64.rpm 2cb352d88ffa66e52592cf32e7176125714848c9e869417072b55d10a745a406 CLSA-2026:1789383246 TuxCare License Agreement 0 - rebase to 1.6.5-1.amzn2.0.1 - the vendor fixes in this build: CVE-2025-49506 - drop the 3 TuxCare CVE backports; 1.6.5 already incorporates them - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 1.6.5-1.amzn2.0.1 - the vendor fixes in this build: CVE-2025-49506 - drop the 3 TuxCare CVE backports; 1.6.5 already incorporates them - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative

0 tuxcare-amazonlinux2-els apr-util-1.6.5-1.amzn2.0.1.tuxcare.els1.i686.rpm 07128c2f91a4d3c20b06c10dfb078d2cad039ff3c5167ef758355f68631b7bff apr-util-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm c7064f80a252d92cb0ad22d8fadb2f70d612f6c81c37aac5a9d7b4125a0c1269 apr-util-bdb-1.6.5-1.amzn2.0.1.tuxcare.els1.i686.rpm 541276eefa0f86027d70bd6f31cf6da2881a1bb8c4cf847433118f514905c199 apr-util-bdb-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm ccaf0b87c5de27039748dfa05797fc5704c296dff880c7512132260b1f39a022 apr-util-devel-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm ab64cf5676da992d0cf04df378d15da2a29da3ab651b7cf3f75ab1c93f120e8e apr-util-ldap-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 95f8bb9e818f41b6cb3eb38368243860b54a4dc3c525948409a87866e92cf49a apr-util-mysql-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 86bac81dde5c1e7fd5ae31acf18b3479f46331a17eae8b773938b0d8395e37cd apr-util-nss-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm bbe2cc6e4956f09c64c2852075d90811f07a32f70234e7a63851f3db4bf3e202 apr-util-odbc-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm e76257a07895e8de7e576744def88646656d7893cd748d0b36106642cc2257d2 apr-util-openssl-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm bf493efaf477c71408df172001e038c967bfdbf5c935efac1548bd387fdf664e apr-util-pgsql-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm b66d3011abe4b4fccffc7df9a3d4f95c7ef3e78d13bba67d65577c028999ceca apr-util-sqlite-1.6.5-1.amzn2.0.1.tuxcare.els1.x86_64.rpm db44cf538e6b8114b70e5cb8baa9d162d00fdc2355bfd04965e1a4aeaad84332 CLSA-2026:1789383552 TuxCare License Agreement 0 - Rebase onto vendor 2.56.0-6.amzn2.0.8, which fixes CVE-2026-15711 (oversized WebSocket control frames are now rejected per RFC 6455 section 5.5) - CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request - CVE-2026-66338: reject chunk sizes carrying trailing garbage and chunk sizes that overflow goffset instead of parsing them permissively, narrowing an HTTP request smuggling differential - CVE-2026-66337: clamp the bytes returned by soup_filter_input_stream_read_until() to the caller buffer length when the boundary is found, preventing a heap buffer over-read None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto vendor 2.56.0-6.amzn2.0.8, which fixes CVE-2026-15711 (oversized WebSocket control frames are now rejected per RFC 6455 section 5.5) - CVE-2026-5119: do not send cookies to a HTTP proxy for a HTTPS request - CVE-2026-66338: reject chunk sizes carrying trailing garbage and chunk sizes that overflow goffset instead of parsing them permissively, narrowing an HTTP request smuggling differential - CVE-2026-66337: clamp the bytes returned by soup_filter_input_stream_read_until() to the caller buffer length when the boundary is found, preventing a heap buffer over-read

0 tuxcare-amazonlinux2-els libsoup-2.56.0-6.amzn2.0.8.tuxcare.els1.i686.rpm 15f7f64b645345840e5468ba904e0998dab795a646138d666dd263b8d7d7862c libsoup-2.56.0-6.amzn2.0.8.tuxcare.els1.x86_64.rpm 9528e4193e956aa8404e8db5f8ac88aa5c2a3966d622f0a6b5b5a646d4e13e01 libsoup-devel-2.56.0-6.amzn2.0.8.tuxcare.els1.x86_64.rpm b4852ce87ea270b878b945caee6788fc11186ad25d39811452a35695b00b4e94 CLSA-2026:1789395947 TuxCare License Agreement 0 - CVE-2026-76957: fix a use-after-free by covering the custom XML_Encoding convert/release callbacks with the handler call-depth tracking, so a same-parser call made from inside them is rejected Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-76957: fix a use-after-free by covering the custom XML_Encoding convert/release callbacks with the handler call-depth tracking, so a same-parser call made from inside them is rejected

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.7.amzn2.tuxcare.els7.i686.rpm 5dbec751cca8d7bfba54278ae9489dfb9f00224892f1d2d8fbf2b2e616c83a56 expat-2.1.0-15.0.7.amzn2.tuxcare.els7.x86_64.rpm 2cc5bf6cdd7ceb5f27a7141f054c3686dee3050e3868e4fe2cfc215e8cc741a8 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els7.x86_64.rpm d2ecb1d3dad534ca3f9e4dd10d7a699a047ea4bca3b5a9975ca693bef3de6ff3 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els7.x86_64.rpm 23961ea42820f5e928ad9117d99f38bdad885d167509d7b3f6e359202dc5a004 CLSA-2026:1789462905 TuxCare License Agreement 0 - CVE-2026-86138: add integer-overflow checks to the pool size calculation in xmlDictAddQString and cap the QName length in xmlDictQLookup to prevent a heap buffer overflow Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-86138: add integer-overflow checks to the pool size calculation in xmlDictAddQString and cap the QName length in xmlDictQLookup to prevent a heap buffer overflow

0 tuxcare-amazonlinux2-els libxml2-2.9.1-6.amzn2.5.26.tuxcare.els2.i686.rpm 3f902793d9f1fd07db5944e3769956199c03865a9719f9d0188a0aa19aa67b03 libxml2-2.9.1-6.amzn2.5.26.tuxcare.els2.x86_64.rpm ae9cbb6847556a2cfa1f51f211338f5e231212777434d29d7a82d1d6a2404522 libxml2-devel-2.9.1-6.amzn2.5.26.tuxcare.els2.x86_64.rpm 80e77e9e34bee3b3d9d9412fbe901232f0537313f6a6c231feadcba7a1179f86 libxml2-python-2.9.1-6.amzn2.5.26.tuxcare.els2.x86_64.rpm 5b5d92afcdda2f09e9fab3e0d051ce6d154d2efa6b2a6bac2887744b4db24686 libxml2-static-2.9.1-6.amzn2.5.26.tuxcare.els2.x86_64.rpm bb0fd1ab0e3b08a20d1e3ea496de59f01841edad3504fbc69e6417735f3b2b89 CLSA-2026:1789480951 TuxCare License Agreement 0 - CVE-2026-80212: resolv: stop Resource::Generic.create from permanently registering a generated class as a Generic constant and a ClassHash entry for every unknown (type, class) pair, and compare generic resources and questions by TypeValue/ClassValue instead of class identity Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-80212: resolv: stop Resource::Generic.create from permanently registering a generated class as a Generic constant and a ClassHash entry for every unknown (type, class) pair, and compare generic resources and questions by TypeValue/ClassValue instead of class identity

0 tuxcare-amazonlinux2-els ruby-2.0.0.648-36.amzn2.0.20.tuxcare.els1.x86_64.rpm f4347c58646307e9b0cf0f4669c66e980a3c6c326cc059cfc3340a12a0b63337 ruby-devel-2.0.0.648-36.amzn2.0.20.tuxcare.els1.x86_64.rpm a2463b48e627276cdd76d517fad5aa590145b747eb263f92dcf8b32a8ce443ef ruby-doc-2.0.0.648-36.amzn2.0.20.tuxcare.els1.noarch.rpm 756be3dcbb2483e397c659daf9414fd0eefa45007cb2331cff4b605d0be83a0b ruby-irb-2.0.0.648-36.amzn2.0.20.tuxcare.els1.noarch.rpm c1599c4412ee864d2338915422d30d7726e503fd86c70bcba63465fbb143d831 ruby-libs-2.0.0.648-36.amzn2.0.20.tuxcare.els1.i686.rpm 91ea6a9651f0a5e9a78b99c631a8d6f28a8cda267fdb4b162be69450e4ef131e ruby-libs-2.0.0.648-36.amzn2.0.20.tuxcare.els1.x86_64.rpm 741f25c1a809363f15044324ceb8fc4b389ada8714447d5768de0199cff0a093 ruby-tcltk-2.0.0.648-36.amzn2.0.20.tuxcare.els1.x86_64.rpm 0f92720c4f79b579f480f70eb0a284db3588b4ceb2e8a802f8ab44ef49af78f9 rubygem-bigdecimal-1.2.0-36.amzn2.0.20.tuxcare.els1.x86_64.rpm c1bced1b962c47f01528c2fbae230be7bbb5a81619e5f73ceaeeff5dd3c48581 rubygem-io-console-0.4.2-36.amzn2.0.20.tuxcare.els1.x86_64.rpm d545080f7ebba8b99d5b5c9b2508eaad7d369b50b4f1171baf2c2dc17abc6fa8 rubygem-json-1.7.7-36.amzn2.0.20.tuxcare.els1.x86_64.rpm 0f30bafd7ce8506c9815617f13212d4d34eefec83f4dd4523393f1946efbf686 rubygem-minitest-4.3.2-36.amzn2.0.20.tuxcare.els1.noarch.rpm 4727a9b65d1da2be02df343b89bcab7d78567353d2414cbaf493c959452f679b rubygem-psych-2.0.0-36.amzn2.0.20.tuxcare.els1.x86_64.rpm 59e120de008e5de7991579140334df3add34107985c229eb878688063b85cbc9 rubygem-rake-0.9.6-36.amzn2.0.20.tuxcare.els1.noarch.rpm 79c4bc1eafdbe280340551183309ab1059343bca431d0442d2fe439fb9cbbb70 rubygem-rdoc-4.0.0-36.amzn2.0.20.tuxcare.els1.noarch.rpm a1e6bd9b097c12296cacaa01f5ce41521fc7c55a55d2f27749600dff17d3ed37 rubygems-2.0.14.1-36.amzn2.0.20.tuxcare.els1.noarch.rpm d3992765856578f885102dbacfdb3d7528dd4531195b1ce4ea428f623f043f34 rubygems-devel-2.0.14.1-36.amzn2.0.20.tuxcare.els1.noarch.rpm 1e34e892b833332d908e849bcb58f33d761933a13b3f5cd6180d40cd95b4546f CLSA-2026:1789487651 TuxCare License Agreement 0 - CVE-2026-13608: fail the LDAP connection with CURLE_LOGIN_DENIED when the SASL negotiation ends without a completed mechanism instead of treating it as authenticated - CVE-2026-18924: make HTTP/2 server push transfers inherit the share from the parent handle, preventing a use-after-free during cleanup Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-13608: fail the LDAP connection with CURLE_LOGIN_DENIED when the SASL negotiation ends without a completed mechanism instead of treating it as authenticated - CVE-2026-18924: make HTTP/2 server push transfers inherit the share from the parent handle, preventing a use-after-free during cleanup

0 tuxcare-amazonlinux2-els curl-8.3.0-1.amzn2.0.12.tuxcare.els7.x86_64.rpm dcc8ecdbd3eef07e0f71a20b67c5fe2e4b9e68aca90d2e1602a87ef7764ea08c libcurl-8.3.0-1.amzn2.0.12.tuxcare.els7.i686.rpm f5b62cae356c3fe6b57c3c781acff531c370309d69cc7d5a19daf6d4b9ae229c libcurl-8.3.0-1.amzn2.0.12.tuxcare.els7.x86_64.rpm 20f85bcbee8bac8ce1bc51e50c37e8f4e4f7f184f21f7ce8a2eebdf790153181 libcurl-devel-8.3.0-1.amzn2.0.12.tuxcare.els7.x86_64.rpm 5b92af70fbb2fabc37844a775593f99e82687539764f18650738f068ca7bd3d6 CLSA-2026:1789576388 TuxCare License Agreement 0 - CVE-2026-70456: reserve room for the trailing NULL before read_args stores it, so a post-dot daemon request that lands argc on maxargs cannot write one slot past the argv allocation Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-70456: reserve room for the trailing NULL before read_args stores it, so a post-dot daemon request that lands argc on maxargs cannot write one slot past the argv allocation

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els13.x86_64.rpm d30f571dd9f7b76e16bee1923247808b9c219f41d9f4272615d357ed3496b684 CLSA-2026:1789600806 TuxCare License Agreement 0 - CVE-2026-86140: add bounds checks around the parenthesis writes in xmlSnprintfElements - CVE-2026-86141: check the xmlStrdup result in xmlRegNewParserCtxt so a failed allocation cannot leave a NULL parser cursor - CVE-2026-86142: make xmlStrlen saturate above INT_MAX and reject the saturated length in xmlXPtrEvalXPtrPart before sizing the buffer - CVE-2026-86143: check for integer overflow before passing a buffer length to the output write callback - CVE-2026-86144: propagate the document parse flags in xmlXIncludeProcess and xmlXIncludeProcessTree Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-86140: add bounds checks around the parenthesis writes in xmlSnprintfElements - CVE-2026-86141: check the xmlStrdup result in xmlRegNewParserCtxt so a failed allocation cannot leave a NULL parser cursor - CVE-2026-86142: make xmlStrlen saturate above INT_MAX and reject the saturated length in xmlXPtrEvalXPtrPart before sizing the buffer - CVE-2026-86143: check for integer overflow before passing a buffer length to the output write callback - CVE-2026-86144: propagate the document parse flags in xmlXIncludeProcess and xmlXIncludeProcessTree

0 tuxcare-amazonlinux2-els libxml2-2.9.1-6.amzn2.5.26.tuxcare.els3.i686.rpm aa8bbaf706a0640c78dabb229f314df1c01d0c8938e0093d40d43701d5e6f9bd libxml2-2.9.1-6.amzn2.5.26.tuxcare.els3.x86_64.rpm b806b5152984ac7cf97f2a55c71f7a80e0cc951655aa7077bfaab9a5bc274cd0 libxml2-devel-2.9.1-6.amzn2.5.26.tuxcare.els3.x86_64.rpm 39c3ecbad573d7c84821c6f3932cbf674849d13a9b122baf3e7d37f956b00fb0 libxml2-python-2.9.1-6.amzn2.5.26.tuxcare.els3.x86_64.rpm 1df5c4bae0d3e2c7d9b52c91407b08619a7719e8ba4a43f9af4351d41b636a59 libxml2-static-2.9.1-6.amzn2.5.26.tuxcare.els3.x86_64.rpm 63eeb63ef9bbf64299f68ed3df4201947edc3d06dbc5b6a890215e8309cae16f CLSA-2026:1789730626 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 9.0.2153-1.amzn2.0.11 - CVE-2026-52859, CVE-2026-55892 and CVE-2026-57455 are now fixed by the vendor; the TuxCare duplicates are dropped and the vendor's version of CVE-2026-52859.patch, CVE-2026-55892.patch and CVE-2026-57455.patch was taken - carry all remaining TuxCare ELS backports: CVE-2026-25749, CVE-2026-26269, CVE-2026-28417, CVE-2026-28421, CVE-2026-33412, CVE-2026-39881, CVE-2026-42307, CVE-2026-46483 - also fixed by the vendor in this build: CVE-2026-59857, CVE-2026-73072, CVE-2026-73073, CVE-2026-73074, CVE-2026-73076, CVE-2026-73077, CVE-2026-73078 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 9.0.2153-1.amzn2.0.11 - CVE-2026-52859, CVE-2026-55892 and CVE-2026-57455 are now fixed by the vendor; the TuxCare duplicates are dropped and the vendor's version of CVE-2026-52859.patch, CVE-2026-55892.patch and CVE-2026-57455.patch was taken - carry all remaining TuxCare ELS backports: CVE-2026-25749, CVE-2026-26269, CVE-2026-28417, CVE-2026-28421, CVE-2026-33412, CVE-2026-39881, CVE-2026-42307, CVE-2026-46483 - also fixed by the vendor in this build: CVE-2026-59857, CVE-2026-73072, CVE-2026-73073, CVE-2026-73074, CVE-2026-73076, CVE-2026-73077, CVE-2026-73078

0 tuxcare-amazonlinux2-els vim-X11-9.0.2153-1.amzn2.0.11.tuxcare.els1.x86_64.rpm d3d4222a98c9e068ae8abad7f98dc61a62786eb23ebed21847ee158e51a2109e vim-common-9.0.2153-1.amzn2.0.11.tuxcare.els1.x86_64.rpm fb073cf5f3b3c6885c4f2272684fde0c1b5787b2451e303583d25f9a9abe973f vim-data-9.0.2153-1.amzn2.0.11.tuxcare.els1.noarch.rpm 6b14761c78e7102936ca12fcecc9646838e571c0051f6037bfe78cce0942ad8a vim-enhanced-9.0.2153-1.amzn2.0.11.tuxcare.els1.x86_64.rpm de39d3434d123d13472c2990a1d4701808cae949b1969435683316af7e30c7c7 vim-filesystem-9.0.2153-1.amzn2.0.11.tuxcare.els1.noarch.rpm 2240020fc114fba7899971db729e18d2223f10c6eb63a03836a6f7d19e6b6232 vim-minimal-9.0.2153-1.amzn2.0.11.tuxcare.els1.x86_64.rpm 349dbb61a73e77b1dd0572927821564e7f90cf8201fbc8bc6803c52c884cee04 xxd-9.0.2153-1.amzn2.0.11.tuxcare.els1.x86_64.rpm 5446c09ddd547c4c43b51086af67ca5b9b578cced457b2c9fd66b8c7bc0b1ec2 CLSA-2026:1789731393 TuxCare License Agreement 0 - Rebase onto vendor freerdp-2.11.7-1.amzn2.0.15, which fixes CVE-2026-63652 - CVE-2026-25959: retained TuxCare fix; lock the cliprdr cache when providing data, closing the use-after-free between the cliprdr channel thread and the X11 event thread in xf_cliprdr - CVE-2026-67288: retained TuxCare fix completing the vendor's backport, which left "data" uninitialised in PCSC_SCardReadCacheA() and the HashTable lookup in PCSC_SCardReadCacheW() unguarded against a NULL szLookupName key - CVE-2026-67301: complete the fix. Guarding the point allocation with numPoints > 0 left wParam->points, copied from the parser's own struct, aliasing polygon_{sc,cb}->points when numPoints is zero -- and update_message_free_update_class() frees it unconditionally, so the async consumer freed memory the parser still owns. Set it to NULL on that branch None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto vendor freerdp-2.11.7-1.amzn2.0.15, which fixes CVE-2026-63652 - CVE-2026-25959: retained TuxCare fix; lock the cliprdr cache when providing data, closing the use-after-free between the cliprdr channel thread and the X11 event thread in xf_cliprdr - CVE-2026-67288: retained TuxCare fix completing the vendor's backport, which left "data" uninitialised in PCSC_SCardReadCacheA() and the HashTable lookup in PCSC_SCardReadCacheW() unguarded against a NULL szLookupName key - CVE-2026-67301: complete the fix. Guarding the point allocation with numPoints > 0 left wParam->points, copied from the parser's own struct, aliasing polygon_{sc,cb}->points when numPoints is zero -- and update_message_free_update_class() frees it unconditionally, so the async consumer freed memory the parser still owns. Set it to NULL on that branch

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.15.tuxcare.els1.x86_64.rpm b15419e48b47edffd0283e24e90d5180361be2e68ba07882c6faadcf7b5e54c3 freerdp-devel-2.11.7-1.amzn2.0.15.tuxcare.els1.x86_64.rpm 28f79b7c5e1adfa04e41204bae8c96eb27c6ce317bd0d657afb4759cf3cf162a freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els1.i686.rpm 6bbbeb263d2166b7997ee6c1ab9536ce35a02f21533e3b664aa776f21fb01335 freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els1.x86_64.rpm 7589cc8231e2dd6f43172396227c24284e72173ef3fe0df44a1989ed7709325c libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els1.i686.rpm f077c0243a6b6a78ab37108d2a82a03d5aaafdf9ce196b41096c0c6d2c75141c libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els1.x86_64.rpm dd5414bbcc8cdda8ea469476bf4069abe13948a66f630c4a8fd70e460d326695 libwinpr-devel-2.11.7-1.amzn2.0.15.tuxcare.els1.x86_64.rpm aa8ed870ae7335b7f73632f8cdc003848bef2ea37f068527b1e4fe6839ec34ff CLSA-2026:1789732368 TuxCare License Agreement 0 - CVE-2026-53793: confine the alt-dest basis stat in try_dests and hard_link_check - CVE-2026-70458: skip the F_SUM read for ITEM_DELETED in log_formatted Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53793: confine the alt-dest basis stat in try_dests and hard_link_check - CVE-2026-70458: skip the F_SUM read for ITEM_DELETED in log_formatted

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els15.x86_64.rpm 4e1a9521472177c40613cb46d356e932c659977a104ca0f8643b99c6244f3f45 CLSA-2026:1789733643 TuxCare License Agreement 0 - Rebase onto Amazon Linux 2 libevent-2.0.21-4.amzn2.0.4 - CVE-2026-63383: fix out-of-bounds read in decode_tag_internal (vendor fix) - CVE-2026-63384: fix integer overflow in evtag_unmarshal_header (vendor fix) - CVE-2016-10195: fix remote stack overread in evdns name_parse() - CVE-2016-10196: fix stack-based buffer overflow in evutil_parse_sockaddr_port - CVE-2016-10197: fix DoS via empty hostname in search_make_new None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto Amazon Linux 2 libevent-2.0.21-4.amzn2.0.4 - CVE-2026-63383: fix out-of-bounds read in decode_tag_internal (vendor fix) - CVE-2026-63384: fix integer overflow in evtag_unmarshal_header (vendor fix) - CVE-2016-10195: fix remote stack overread in evdns name_parse() - CVE-2016-10196: fix stack-based buffer overflow in evutil_parse_sockaddr_port - CVE-2016-10197: fix DoS via empty hostname in search_make_new

0 tuxcare-amazonlinux2-els libevent-2.0.21-4.amzn2.0.4.tuxcare.els1.i686.rpm d3089d2575112feee219753ccdf1beff519ac8c7250ddd0d3b1359e0bf31b8df libevent-2.0.21-4.amzn2.0.4.tuxcare.els1.x86_64.rpm da694ae7e5c8ab6d0760da27e50bf2f7efe56f2d80bdac092b0017e53bbf813e libevent-devel-2.0.21-4.amzn2.0.4.tuxcare.els1.x86_64.rpm 7a893d14231af778c6d4fc8cf7a2f4b7bb4e54041162f539a2d8c89115341f4a libevent-doc-2.0.21-4.amzn2.0.4.tuxcare.els1.noarch.rpm 78ecf121f6def93b4275f8ecc7951871411625c5a0049a464be6f5a1b22aa729 CLSA-2026:1789734404 TuxCare License Agreement 0 - rebase to 3.0-11.amzn2.0.3 - drop the 1 TuxCare CVE backport; 3.0 already incorporates it - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 3.0-11.amzn2.0.3 - drop the 1 TuxCare CVE backport; 3.0 already incorporates it - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative

0 tuxcare-amazonlinux2-els zip-3.0-11.amzn2.0.3.tuxcare.els1.x86_64.rpm 9c7c6533c8633c0f9f5a20e2e54795b34e41e1246ac4031f18aa91d666f3758e CLSA-2026:1789735671 TuxCare License Agreement 0 - rebase to 9.2.24-8.amzn2.0.11, which fixes CVE-2026-14662, CVE-2026-14670, CVE-2026-14671, CVE-2026-14680 and CVE-2026-15742 - CVE-2026-14669 is now fixed by the vendor; the vendor's version of CVE-2026-14669.patch was taken and the TuxCare duplicate is dropped - carry TuxCare CVE-2026-6473, CVE-2026-6474, CVE-2026-6478 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 9.2.24-8.amzn2.0.11, which fixes CVE-2026-14662, CVE-2026-14670, CVE-2026-14671, CVE-2026-14680 and CVE-2026-15742 - CVE-2026-14669 is now fixed by the vendor; the vendor's version of CVE-2026-14669.patch was taken and the TuxCare duplicate is dropped - carry TuxCare CVE-2026-6473, CVE-2026-6474, CVE-2026-6478

0 tuxcare-amazonlinux2-els postgresql-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm ff0786ed3b197b67806c556cedc07c9d41e8e25366c0cb34a0b29b0c1f3162f4 postgresql-contrib-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm 5f15538266724cfdd58c64b758e2d4a9cefba0c7a0c91ef19531a014653dad28 postgresql-devel-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm eba32fe61a7fec7a3a406807951c643da89941f7bdb19c20f4c048c7ccd722cb postgresql-docs-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm 243e751b50a7853a0afaf968dff1f9cb7b26767247a437beae9e926fd4f90c55 postgresql-libs-9.2.24-8.amzn2.0.11.tuxcare.els1.i686.rpm dfe5e0f96f55400381f666d7b4b2169d223c32b08feab718445adb0b87fec812 postgresql-libs-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm 5622b5169224606e6b2cf6846d12069037f82ce3a8aca17b074c7635c6d46fce postgresql-plperl-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm 907ade0d4f224631028080f0c9ac0d950d0adcb52c2a65dfa2d31e78d81c0c4d postgresql-plpython-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm 5355cf9efaa9db6029336f4d4109ad59dbec765d1b4fd2a73a5c59e9607ee3a5 postgresql-pltcl-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm fb8184babd706781db1bb901cfd9c16a30c7d8763e43d9ed7532bc9c2f6800ba postgresql-server-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm 05c0ef1c9a47f50d59767c39606a2d256ed7ea36850601a22c8be6fca60a463b postgresql-static-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm 631eb681685edf6911d84421f4fcdb09d75a022d1a3d95b58d749cf9add6d440 postgresql-test-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm c2668a80963c04602876048fd775febd9618c96dade5cd8a369f2ee7bf5a9fb7 postgresql-upgrade-9.2.24-8.amzn2.0.11.tuxcare.els1.x86_64.rpm e56a7aacc58dd3414e042409054b4b8957872af965c19ac615fc2018d894d7bd CLSA-2026:1789782378 TuxCare License Agreement 0 - CVE-2026-9669: latch the libbz2 error code in BZ2Decomp_decompress() and raise ValueError on any later decompress() call, so a BZ2Decompressor that already failed cannot re-enter BZ2_bzDecompress(); make the same error sticky for the C BZ2File read paths via a new Util_BzRead() wrapper, so a retried read()/readline() re-reports the original IOError instead of re-entering BZ2_bzDecompress() on the errored stream Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9669: latch the libbz2 error code in BZ2Decomp_decompress() and raise ValueError on any later decompress() call, so a BZ2Decompressor that already failed cannot re-enter BZ2_bzDecompress(); make the same error sticky for the C BZ2File read paths via a new Util_BzRead() wrapper, so a retried read()/readline() re-reports the original IOError instead of re-entering BZ2_bzDecompress() on the errored stream

0 tuxcare-amazonlinux2-els python-2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64.rpm 67758a12041f7d30ce41f3cee369e1eb936061b08da6ed7c957316f1e9b2d8eb python-debug-2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64.rpm a95bb47ccaa69d52d88acd0c4d7816bc44d0fae4fb567b678949fdd2102f38d7 python-devel-2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64.rpm 3f613df7b5227663c602ce1b618c73f1638a97c6b387decbc407e3564097b02f python-libs-2.7.18-1.amzn2.0.22.tuxcare.els3.i686.rpm 6b4cb327a7c7eac5bd30aaefaa5120202f5eadc0ef7c728b15b4ffd8df61a9f4 python-libs-2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64.rpm 3714c534e2c69099023b75449a13dfd430ba698cce3dcb568540dfebddadf3b2 python-test-2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64.rpm ec87da441d9410bc96ea7d87df7257659ab9a8bf17a89bef68a065914ed9825b python-tools-2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64.rpm 957d0c51a961109d6f6fde82a786cff0f213ec34620ba8476caddcc16e35958b tkinter-2.7.18-1.amzn2.0.22.tuxcare.els3.x86_64.rpm c123909dd8920a4ac46b09a5ad3f13da2a5c7a16cd5241b75809d7f7f2e37847 CLSA-2026:1789724052 TuxCare License Agreement 0 - CVE-2026-91953, CVE-2026-91964: heap buffer overflow in nego_send_negotiation_request(); the server-controlled LB_LOAD_BALANCE_INFO routing token was written into a fixed 512-byte stream with the only length gate running after the write. Add Stream_EnsureRemainingCapacity() guards before every write in the function and fail via the existing cleanup label. Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-91953, CVE-2026-91964: heap buffer overflow in nego_send_negotiation_request(); the server-controlled LB_LOAD_BALANCE_INFO routing token was written into a fixed 512-byte stream with the only length gate running after the write. Add Stream_EnsureRemainingCapacity() guards before every write in the function and fail via the existing cleanup label.

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.15.tuxcare.els2.x86_64.rpm 6023ffb1d6cd64e1e5ab21bcfbe771d6a7035fb93177f64b41b0e4ad2a9449db freerdp-devel-2.11.7-1.amzn2.0.15.tuxcare.els2.x86_64.rpm 8a705cca4afec88ce2be23904d78f2267733ef902ee3f6e1e136667baedac3af freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els2.i686.rpm a7501941c7a60a09d339bcdfeabf3b1924bdeb73e431a48d901b9535e03bd3b9 freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els2.x86_64.rpm e8f1276e1a586007f7228708181a5ab2e94c806fac2a12d0adc5300b19847d8c libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els2.i686.rpm b3df7daf43a781b5b15c748f7b2f1cb1aa3806c395581c0e5ef0829fbf347c35 libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els2.x86_64.rpm 95c7293d44867a96d1b15837665db01dd12f29c9f4bc9ccdee7dbdac15dc80d7 libwinpr-devel-2.11.7-1.amzn2.0.15.tuxcare.els2.x86_64.rpm 7f29cc10e7e32d86fb6f0eeaa5f5ff1fc4e5d6be791c90a3a535f33e92531730 CLSA-2026:1790035022 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 1.0.2k-24.amzn2.0.22 (CVE-2026-54874, CVE-2026-63072, and the "HollowByte" hardening fix); take AL2's own fix for CVE-2026-54874 and drop our openssl-1.0.2k-cve-2026-54874.patch; no new TuxCare ELS work ships here Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 1.0.2k-24.amzn2.0.22 (CVE-2026-54874, CVE-2026-63072, and the "HollowByte" hardening fix); take AL2's own fix for CVE-2026-54874 and drop our openssl-1.0.2k-cve-2026-54874.patch; no new TuxCare ELS work ships here

0 tuxcare-amazonlinux2-els openssl-1.0.2k-24.amzn2.0.22.tuxcare.els1.x86_64.rpm 47a9865872a304539b2e062ff7f8b8e7441efa4508aca08a2ed9bd5e08f3e86b openssl-devel-1.0.2k-24.amzn2.0.22.tuxcare.els1.x86_64.rpm 53b78f14eb17aaff0d634673752075a852005b94a54297bca20d0478526b5100 openssl-libs-1.0.2k-24.amzn2.0.22.tuxcare.els1.i686.rpm 463508f71e8dfce409b31b91612ed08be9766e3ea2be6c012a63d942bc2e02c0 openssl-libs-1.0.2k-24.amzn2.0.22.tuxcare.els1.x86_64.rpm 0523dfe1c837c864766b7f45055a2133f097d0ad813d71978d87baf6d912856c openssl-perl-1.0.2k-24.amzn2.0.22.tuxcare.els1.x86_64.rpm 7e3a4bc2a83f7b76d37356df97a79287ac94306a1121c78c45b5627768e76c1b openssl-static-1.0.2k-24.amzn2.0.22.tuxcare.els1.x86_64.rpm 3bd8cac640c68553cf9e7b821e732e03804530eed8213e511817f3824b79cd0b CLSA-2026:1790037090 TuxCare License Agreement 0 - CVE-2026-34079: fix arbitrary host file deletion via app-controlled ld.so cache symlink in flatpak_switch_symlink_and_remove - CVE-2026-90616: rebase onto the 1.0.9-10.amzn2.0.8 vendor base, which creates the per-app directories in flatpak_ensure_data_dir() and binds them into the sandbox in flatpak_run_setup_base_argv() through the fd-relative libglnx chase API Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-34079: fix arbitrary host file deletion via app-controlled ld.so cache symlink in flatpak_switch_symlink_and_remove - CVE-2026-90616: rebase onto the 1.0.9-10.amzn2.0.8 vendor base, which creates the per-app directories in flatpak_ensure_data_dir() and binds them into the sandbox in flatpak_run_setup_base_argv() through the fd-relative libglnx chase API

0 tuxcare-amazonlinux2-els flatpak-1.0.9-10.amzn2.0.8.tuxcare.els1.x86_64.rpm fcf3993c9b02316af49dca3ac176c4a988219db4b0373f67a6cb1520e53ba1bd flatpak-builder-1.0.0-10.amzn2.0.8.tuxcare.els1.x86_64.rpm f0b5ffb0e51a8025ac3b87dcf7681d3fffcb6d89b136f0e72b7054a2a5e3cff1 flatpak-devel-1.0.9-10.amzn2.0.8.tuxcare.els1.x86_64.rpm 675796e3c9ecf745fab5ce91422b2a9bdfb84b34f5381664939bdd0430574c95 flatpak-libs-1.0.9-10.amzn2.0.8.tuxcare.els1.x86_64.rpm 4b2f46bd913667561c5c7e9a3dc89bd3ecdb35ff54bbb512b910b2d75c0c3d57 CLSA-2026:1790086414 TuxCare License Agreement 0 - CVE-2026-67300: complete the fix, deep-clone NOTIFY_ICON_STATE_ORDER in the async update proxy; the vendor's patch covers only the WINDOW_STATE_ORDER half - CVE-2026-91956: out-of-bounds read in func_get_ep_desc() - CVE-2026-91957: use-after-free in the smartcard RDPDR device when worker thread creation fails after device registration - CVE-2026-91959: buffer over-read in rts_read_result() - CVE-2026-91963: uninitialized heap disclosure, Stream_New() now uses calloc Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-67300: complete the fix, deep-clone NOTIFY_ICON_STATE_ORDER in the async update proxy; the vendor's patch covers only the WINDOW_STATE_ORDER half - CVE-2026-91956: out-of-bounds read in func_get_ep_desc() - CVE-2026-91957: use-after-free in the smartcard RDPDR device when worker thread creation fails after device registration - CVE-2026-91959: buffer over-read in rts_read_result() - CVE-2026-91963: uninitialized heap disclosure, Stream_New() now uses calloc

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm b6069ebf28d20bef956f2e704d2f23d6575d962a5975b5423722a61ddb7890d3 freerdp-devel-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm 5bc638d09f6bd75f782adc34ab1e2871a5d2be4ca2007f33469d474ca3ac304a freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els3.i686.rpm e3552340d50379c395ed0db2982d7078a6a79c596e39b9b7bbf614311cc40563 freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm ba79b8edd264d2873654acdfe129b0c778e67ad21c3869aa2c2ae9bcd6827c65 libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els3.i686.rpm 1e94c8e0c60614ca21807df757f5f56ea44361624af54e591f61e29bed403b72 libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm 273b542817ee5f4f58c917fb403948c9fab5e2576c6fd3e3c289adf19a4950f1 libwinpr-devel-2.11.7-1.amzn2.0.15.tuxcare.els3.x86_64.rpm 418a2fe512c1c863c74847da8e24d5838a7996e9164ad9149684af90863fda42 CLSA-2026:1790170355 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.16 (fix-buffer-overflow.patch); take the vendor's copy of CVE-2026-33278.patch, and renumber the TuxCare patches to Patch1020/Patch1021, since the vendor's new patch took Patch1019 - keep the TuxCare CVE-2019-16866 and CVE-2026-50252 backports - CVE-2026-33278: keep the NSEC3 parameter consistency check (param_set_same) as a separate patch. AL2's own CVE-2026-33278.patch carries only the services/cache/dns.c half of upstream 6a31e470; the validator/val_nsec3.c half, which rejects proofs mixing records from distinct NSEC3 chains, is not in it and is carried here instead None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.16 (fix-buffer-overflow.patch); take the vendor's copy of CVE-2026-33278.patch, and renumber the TuxCare patches to Patch1020/Patch1021, since the vendor's new patch took Patch1019 - keep the TuxCare CVE-2019-16866 and CVE-2026-50252 backports - CVE-2026-33278: keep the NSEC3 parameter consistency check (param_set_same) as a separate patch. AL2's own CVE-2026-33278.patch carries only the services/cache/dns.c half of upstream 6a31e470; the validator/val_nsec3.c half, which rejects proofs mixing records from distinct NSEC3 chains, is not in it and is carried here instead

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.16.tuxcare.els1.x86_64.rpm d00e30b0106e5e68ff01bf089a284d88769a2b0f1a25e5a772bfd6c237e9ea77 python3-unbound-1.7.3-15.amzn2.0.16.tuxcare.els1.x86_64.rpm 6a533adba4364a21e2d70f664558616fc9892b4086bb40752c35fd18e5efef29 unbound-1.7.3-15.amzn2.0.16.tuxcare.els1.x86_64.rpm 76e012a4f56ec5efc6ba7c2c1fbce0c316e28e11f984318c534d7e55d2cb1a00 unbound-devel-1.7.3-15.amzn2.0.16.tuxcare.els1.x86_64.rpm 45f35e7632e0af0abd92f2468bce71046d5b8b97783b7f14c24d8968228ee5c5 unbound-libs-1.7.3-15.amzn2.0.16.tuxcare.els1.i686.rpm f2d9697e09e86ecca3485a9bcf430c20647999d0bed26ffbd707c5f7aaeccc55 unbound-libs-1.7.3-15.amzn2.0.16.tuxcare.els1.x86_64.rpm c79e77152defe1467f6c1033ce94d57412bbbbd0741d7833d5729f4d74a1f671 CLSA-2026:1790171192 TuxCare License Agreement 0 - Rebase onto AL2 4.10.16-24.amzn2.0.9, which fixes CVE-2026-15779, CVE-2026-6949, CVE-2026-58222 and CVE-2026-58224 - Retain the TuxCare supplement for CVE-2026-4408 restricting _samr_ValidatePassword to domain controllers, an upstream commit of the same CVE-2026-4408 fix set that AL2 still does not carry None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto AL2 4.10.16-24.amzn2.0.9, which fixes CVE-2026-15779, CVE-2026-6949, CVE-2026-58222 and CVE-2026-58224 - Retain the TuxCare supplement for CVE-2026-4408 restricting _samr_ValidatePassword to domain controllers, an upstream commit of the same CVE-2026-4408 fix set that AL2 still does not carry

0 tuxcare-amazonlinux2-els ctdb-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 1a79a2ba42a8fb11b2083898f2e403f0fd78411d2ab8229a7c72d14b6ce802df ctdb-tests-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 5b08cd93c479798d7576c113d9aca971c1eb5a25285095a820531a15652c8b69 libsmbclient-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm 7f923e38a5709044e45b0f4359e6b65bfa6be20bab9eb6dd0ed8aa1b31803338 libsmbclient-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 4862dac4e7240d7b935339e7e3ceb26a0b4366513cd149c05adec19092e4ef10 libsmbclient-devel-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 42d65dc6ad41b6a1fd3dda26086c11267e3c6fa99d64ca02ae17290fc51c01cc libwbclient-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm 4fbe01249a89ddb331c2332b7f8cd23d9075a30ba0646bfe7f421a115f6bcc08 libwbclient-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 826fa74aa21d0b5764ed8c1b640321d68c850c75b2f25259e434cbeea64bd754 libwbclient-devel-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm d5c62767dab5ab3fed3efa2628a415f384a4f1462489f1afbdc042e8f064f78e samba-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 8c1fd6f7a325c3c49450bda86f1416f88e8e5781a0a48efa2509967c56c98b79 samba-client-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm cea162efb7b75dfae2acbf3c61b17dcb10cea65627daa37382599e39dfe91875 samba-client-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm 04e6892911418037d418d1d238ea2c010683d487fc0a9c608013349fd3a302c6 samba-client-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 8886431f0ed949ac4e0fde4d44effd727aa8cec9fd67d8b6d62473b62551ec56 samba-common-4.10.16-24.amzn2.0.9.tuxcare.els1.noarch.rpm 5e7db63c360a2c6259eb9c369d43259d3c516d72e156d2b59288e5c3a0e67a0a samba-common-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm 8aabcc2045693540c6eea9283969cc4efb0406f803a754eb8708a89a13784006 samba-common-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm e2d1aabcabcc9481182becc4242ef081133cf31ecc48ace8e93e687c1e5d5fd9 samba-common-tools-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm c71b3f6da24c28f43c927b23c9a0f9f3e10b5e46edf6360228a30ff0d7ce9fe7 samba-dc-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 3f75c422173c9ecbde9acb9e728a37fd7d012b8068999608ed5d420c21749047 samba-dc-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm b53b5c485ec4d638c6fe629a09e75872f37c1c67b355431d4e5770214568dede samba-dc-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm f7a4bbbddd273be3126cf48260821dae29f2d19739c5bcd95b3eee7ee8f28cde samba-devel-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 7480d6aca5cea2b9f1b61d9ada5823036c30bad1bc9fb3344a02810ce03b6f40 samba-krb5-printing-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm c9c5056eef20b10a90a6d483e788fe4a8fc34713713b758dd2e0d31c2a2fcaae samba-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm 36c506323fcd0d3098c34680345736fe52251daa1ce3f2afa2f5419ac5e19336 samba-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 4209b9ed880334ff9242ef4fe5a6959347abd2e7a909d92975b31267f681cdfa samba-pidl-4.10.16-24.amzn2.0.9.tuxcare.els1.noarch.rpm 15972e8a987b0cdcb5fbebd46158c6d652a9c8d37d63d694bab82af201db093e samba-python-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm e3fe7926dc62779112b784822f3f41e900094f6695d7e4276153ddea7948d7b5 samba-python-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm b5b264e8dda45f40ced75a32d59254c0a2d7ea40933d5e461345b84d516b615d samba-python-test-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm e6789b9061d02dc191a201fc71cc7c568434c94694be057397710efa1f812d15 samba-test-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 262a69d0ec37483c75f73217de39b457cb107a0226da1f99413e87888dddc98e samba-test-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm 2ad70bf4d062e3279a59b294ca07023d2472f1c9327c6d6e54ad7da44f29c32f samba-test-libs-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm ab86aa8adf47f4e0802be7cc05c5bac5c707d12ca89a563a207beebd95550668 samba-vfs-glusterfs-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm b5a66730f6435ad9b504ae7bfd7c71a0fe6ab5201dcaeeabc290ab74dd55308c samba-winbind-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm a002ad2ac893c431a07056776df2650f12379558228a736b9c1fef84861497e7 samba-winbind-clients-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm 62538159ed407306a438b403fb97ff99a5a7408583946cb06e75f6e1c3352c1f samba-winbind-krb5-locator-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm e12239b30d00ec9283e2502e19c6266430b35d33b71b142ffa4acb8f5d8bd5ed samba-winbind-modules-4.10.16-24.amzn2.0.9.tuxcare.els1.i686.rpm bbd9bcc019a7c5833d3f978b3554dd3042ad44d503bd0f8f032709c23c58ab3f samba-winbind-modules-4.10.16-24.amzn2.0.9.tuxcare.els1.x86_64.rpm c10c0e7e03c4b0b55b1d1716d2105008680bc7997d7bc18b1148d7527ef7ea74 CLSA-2026:1790181260 TuxCare License Agreement 0 - CVE-2026-93586: fix a use-after-free when ImagesToBlob() writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-93586: fix a use-after-free when ImagesToBlob() writes an image list to an in-memory blob - CVE-2026-93587: make the PCD and HALD readers honour the list-length resource limit when cloning scenes - CVE-2026-93588: fix a NULL pointer dereference when a PNM comment cannot be grown

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els4.i686.rpm e144895330914e0aa0495c23c7db9dd31cf5f43103ae5fcb1fa03c5d62dddf5c ImageMagick-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm 91f709720476c5d37e5fd2c27133ec1aa33dd4f13ded97e6fe0b7455065f3285 ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els4.i686.rpm 5e6b429eab2f1fb32969443745548025687def8837cfc56d61f9c64ae8bb049e ImageMagick-c++-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm 87a3ff74205a277577d7322ffb88601190ddabd204934c323f167abc8e122e8a ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm 6cf709b91df64a856dedb25fc10f8a8a961c0fb6c9b3d1f0c59e9d4c00841f53 ImageMagick-devel-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm 8f9d27a1aaf30dcc80f8c242dc55c0f2251af42cfda75b923ec740e627619e5e ImageMagick-doc-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm 0223a653a12e5fc5d76528043a7d29bcf30d3bcfd002e508b23bf051f21f51d7 ImageMagick-perl-6.9.10.97-1.amzn2.0.31.tuxcare.els4.x86_64.rpm 5994fcac2a19ef1638a788a25da43071e55bb133d329b9736e1a44a048a60641 CLSA-2026:1790246767 TuxCare License Agreement 0 - Bump up version None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump up version

0 tuxcare-amazonlinux2-els bsdcpio-3.1.2-14.0.4.amzn2.0.6.tuxcare.els1.x86_64.rpm 74c0ff1fc1d3f7e775f0da641001141411b4ce6c1a1f8839df1e0f67b8819061 bsdtar-3.1.2-14.0.4.amzn2.0.6.tuxcare.els1.x86_64.rpm c6b42d0878750b0913cb1c2ac3a89a857a280d4375772490407e49149e0d1c28 libarchive-3.1.2-14.0.4.amzn2.0.6.tuxcare.els1.i686.rpm 36c416a521931904bbbd9f8493995c9887d5f754f43455c04be6f2fd67db1f2d libarchive-3.1.2-14.0.4.amzn2.0.6.tuxcare.els1.x86_64.rpm 2a40387106d3d5bdfc9d0491795a96162c2144b6b7193b368994819db1cdff0c libarchive-devel-3.1.2-14.0.4.amzn2.0.6.tuxcare.els1.x86_64.rpm 8ca7616dc14ce0b0e699c444336175927329fcf0715d5dbd88273a8810ec7549 CLSA-2026:1790329449 TuxCare License Agreement 0 - CVE-2026-89158: fix integer overflows in the pattern compiler Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-89158: fix integer overflows in the pattern compiler

0 tuxcare-amazonlinux2-els pcre2-10.23-11.amzn2.0.2.tuxcare.els1.aarch64.rpm 7fa5c08ad2a1cf2c0f0bfe3e7c5e857b472eeb34d2bc33946f67c7b536ee0cd2 pcre2-10.23-11.amzn2.0.2.tuxcare.els1.i686.rpm db081468b30fb74f7d91734996e17f04efec8d83e0edee46cb75b46338b274f9 pcre2-10.23-11.amzn2.0.2.tuxcare.els1.x86_64.rpm f9fa778946d45407a119d81ff4829d0b34dddaead1139dae47fa1eb200e98077 pcre2-devel-10.23-11.amzn2.0.2.tuxcare.els1.aarch64.rpm 8e3a55b079186657ef8d516e4435fb0fbee1c565066dc644d3da0e05df2dbb0e pcre2-devel-10.23-11.amzn2.0.2.tuxcare.els1.i686.rpm ab46c0123bae3d1d1a842f8bf1aad262e4fb58e08e1ab6907939cafef5bd3093 pcre2-devel-10.23-11.amzn2.0.2.tuxcare.els1.x86_64.rpm d09a4bcef8602e3170cf9acd3aec1097e62ed3cb64da11ec9731243949250a16 pcre2-static-10.23-11.amzn2.0.2.tuxcare.els1.aarch64.rpm 9f2c02f149306211de1d699f482c1d493546038c960429bd998f1f9cd80c8296 pcre2-static-10.23-11.amzn2.0.2.tuxcare.els1.i686.rpm 29992ba51112fc763b483504e76eda1ae1ff56331718f05c69f2ac1d97d2775a pcre2-static-10.23-11.amzn2.0.2.tuxcare.els1.x86_64.rpm 87c8f699889027830d5380a7ee36296e75c386787f904b8d29b9c5ad3d9b5dc4 pcre2-tools-10.23-11.amzn2.0.2.tuxcare.els1.aarch64.rpm 089c744f4317c693ad6a10849c33ff05c5261d81f43157089467003d10406340 pcre2-tools-10.23-11.amzn2.0.2.tuxcare.els1.i686.rpm 9a18357bab29fe327b7c3f530b9edf90a950e756aa094f7bee239db6173ce2d1 pcre2-tools-10.23-11.amzn2.0.2.tuxcare.els1.x86_64.rpm a5bcb03243b5a1e5abf9a00d1375450366685d36b7f12b91325dcb8df8734358 pcre2-utf16-10.23-11.amzn2.0.2.tuxcare.els1.aarch64.rpm bd8a93b9fc396e0178962e60990f5cd874bfb6f444651dd57faca231a2fe144e pcre2-utf16-10.23-11.amzn2.0.2.tuxcare.els1.i686.rpm 608e9adc7ad3595a6d10ace82bb7cadb31f91dab5919671536fb7132524e5c47 pcre2-utf16-10.23-11.amzn2.0.2.tuxcare.els1.x86_64.rpm 156c5798d3a43dc5d389c57e562bfb083dd9a6fd296918ac6cb99b26571914af pcre2-utf32-10.23-11.amzn2.0.2.tuxcare.els1.aarch64.rpm 5aeed17f205a48d35e4bdd96fc2e0097e731fd103961e9f03042539b6019b55d pcre2-utf32-10.23-11.amzn2.0.2.tuxcare.els1.i686.rpm 79cf49744bc787bdc4aeaf089a3533581f5115a2974cec200e28d8934a9de42e pcre2-utf32-10.23-11.amzn2.0.2.tuxcare.els1.x86_64.rpm 1961c4b425c97b69379597fcf1e4aa1bba44452db6585198cc6dabd744297820 CLSA-2026:1790602508 TuxCare License Agreement 0 - rebase to 4.0.3-35.amzn2.0.32, which fixes CVE-2026-52490, CVE-2026-52491 and CVE-2026-52492 - fix CVE-2023-30774; the vendor fixed it in 4.0.3-35.amzn2.0.16 but the patch was never carried onto this branch, so it lands here for the first time - harden the CVE-2026-52492 fix: check the rgb2ycbcr allocations for failure - retain CVE-2023-52355: cap libtiff allocations via TIFFOpenOptionsSetMaxSingleMemAlloc and the -M memory-limit option for tiff2ps, tiffcp, tiffinfo and tiffsplit; AL2 still does not fix this - retain the CVE-2026-12912 follow-up: the upstream multi-row ABGR bounds check (f9bda11b + 90601d9a) that AL2's CVE-2026-12912 patch omits - renumber the TuxCare patches to 1040-1042; AL2 0.32 now occupies 1028-1032 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 4.0.3-35.amzn2.0.32, which fixes CVE-2026-52490, CVE-2026-52491 and CVE-2026-52492 - fix CVE-2023-30774; the vendor fixed it in 4.0.3-35.amzn2.0.16 but the patch was never carried onto this branch, so it lands here for the first time - harden the CVE-2026-52492 fix: check the rgb2ycbcr allocations for failure - retain CVE-2023-52355: cap libtiff allocations via TIFFOpenOptionsSetMaxSingleMemAlloc and the -M memory-limit option for tiff2ps, tiffcp, tiffinfo and tiffsplit; AL2 still does not fix this - retain the CVE-2026-12912 follow-up: the upstream multi-row ABGR bounds check (f9bda11b + 90601d9a) that AL2's CVE-2026-12912 patch omits - renumber the TuxCare patches to 1040-1042; AL2 0.32 now occupies 1028-1032

0 tuxcare-amazonlinux2-els libtiff-4.0.3-35.amzn2.0.32.tuxcare.els1.aarch64.rpm 63011fe357675d8d123f3c6224adb09850aaa71bf02f4b85ad5e1751514078d2 libtiff-4.0.3-35.amzn2.0.32.tuxcare.els1.i686.rpm da36412eb62de3596282238a9749ae50a30cd6fca789bac29397c8ab78e81ca1 libtiff-4.0.3-35.amzn2.0.32.tuxcare.els1.x86_64.rpm 6712315569f11b5b5ddfc053cc4f1fba85b62efc520823e550d2aae9c291a116 libtiff-devel-4.0.3-35.amzn2.0.32.tuxcare.els1.aarch64.rpm c2f5a8f9eef3ce58fe2c8c0a6c736b813b5de3cf6330f4287cfa5a8b498662f6 libtiff-devel-4.0.3-35.amzn2.0.32.tuxcare.els1.i686.rpm 4e3742de9afa832c3143ddcdc2dc6046a72f7031489c17fef90ccb27e5ea6d4e libtiff-devel-4.0.3-35.amzn2.0.32.tuxcare.els1.x86_64.rpm 865bd6dfe36152c14f8b9f5a2d134b658d574753dcd0fd05e9e8443aa38e93e3 libtiff-static-4.0.3-35.amzn2.0.32.tuxcare.els1.aarch64.rpm bcd2afe0d8ce4dfc8a8643aa37bad8f241690b8eb52c6306f6700a59dbcd1571 libtiff-static-4.0.3-35.amzn2.0.32.tuxcare.els1.i686.rpm 58409055f167fbe9dec93a8da07f62d35d42e5c73f0357a0ddc5bd9813147bd5 libtiff-static-4.0.3-35.amzn2.0.32.tuxcare.els1.x86_64.rpm c982d5b81d33b74845531e481bfa3c552add8b6343400347e773f758252212b7 libtiff-tools-4.0.3-35.amzn2.0.32.tuxcare.els1.aarch64.rpm 6fd389b2348b10f876fc0a496d53639e0a52be2541eb3d0359d3fe1b6966ee0b libtiff-tools-4.0.3-35.amzn2.0.32.tuxcare.els1.i686.rpm 46cc1280036979e630b12e5289a01cee4a2117b4002c9a11e32b3ec429e39a31 libtiff-tools-4.0.3-35.amzn2.0.32.tuxcare.els1.x86_64.rpm 1c23bd434ec64aaa4ddc986041cf5bf8294f1201a7e66f953ea6481b2e5fa5df CLSA-2026:1790291142 TuxCare License Agreement 0 - CVE-2026-55191: 32-bit multiplication overflow in avc444_ensure_buffer() under-allocates the intermediate YUV444 planes and the lumaData scratch buffer Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-55191: 32-bit multiplication overflow in avc444_ensure_buffer() under-allocates the intermediate YUV444 planes and the lumaData scratch buffer

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.15.tuxcare.els4.aarch64.rpm 0647c58a17c731b07d8c40d4aab2ab7bb8efe04422b0fbca2cd3e059c69e644f freerdp-2.11.7-1.amzn2.0.15.tuxcare.els4.i686.rpm 38b0fde89811f45b66a6625619f418b1e50541698b4e6fd9aba0774ebeebac8e freerdp-2.11.7-1.amzn2.0.15.tuxcare.els4.x86_64.rpm adf3642082fc3bbebdf1380bba7d839eb5bf2eff12318326f1744491848eeeb9 freerdp-devel-2.11.7-1.amzn2.0.15.tuxcare.els4.aarch64.rpm 004de380dd367e68e17b362ff819a34195be6eb81315d66d1c56d217c5001929 freerdp-devel-2.11.7-1.amzn2.0.15.tuxcare.els4.i686.rpm 7362129044650de7fc62170fc8f075bd09a9542b661db1d036a6ea2cfa468fc9 freerdp-devel-2.11.7-1.amzn2.0.15.tuxcare.els4.x86_64.rpm e83539600c0d798441a43c93d293e3db6821ecdf298786eabce3c263572e77fa freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els4.aarch64.rpm 0a733c46a3465303f97910008e39d19f3cf10cd8e1c1b35ff4d7dd001705bde4 freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els4.i686.rpm 299961c28d5a8004693574dce3073fea777fa033e7cf1e310dabcdee79a084d4 freerdp-libs-2.11.7-1.amzn2.0.15.tuxcare.els4.x86_64.rpm a67485bf36c004103e3d916e7a8c203f4aeae81ffa28411fc0c2e4482f0eea4a libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els4.aarch64.rpm a9ce022354384d498aca52b576a1a407f7e1a6daccdf3853b80fdcf61ab73924 libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els4.i686.rpm 61cee61f58ab3e84d0a6f887dac984a4233cd18dac3ff14ad8f95897a80421cc libwinpr-2.11.7-1.amzn2.0.15.tuxcare.els4.x86_64.rpm 88364f15c280dbe6ba7a6020c3f149df24f9ec3a41d5817dcde735fdd97d8b2c libwinpr-devel-2.11.7-1.amzn2.0.15.tuxcare.els4.aarch64.rpm 90bfdd704bd1a42d78606bd076abd633bffe22ae5def9787717632dbf773118d libwinpr-devel-2.11.7-1.amzn2.0.15.tuxcare.els4.i686.rpm cee8a88ecb7f3901068a37aa7f72be6be73b5a2977249f167425ae185a5e47a5 libwinpr-devel-2.11.7-1.amzn2.0.15.tuxcare.els4.x86_64.rpm 2f3c422a4966c5a401665bc895e263c4f992dd7e011dcbae0b14b0004550e468 CLSA-2026:1790765333 TuxCare License Agreement 0 - Rebase onto vendor freerdp-2.11.7-1.amzn2.0.16, which fixes CVE-2026-85089, CVE-2026-85090, CVE-2026-91946, CVE-2026-91947 and CVE-2026-91958 - Drop the TuxCare patches the vendor now carries - Keep the TuxCare fixes in xf_cliprdr, smartcard_pcsc, the RAIL notify-icon async update and avc444_ensure_buffer() - Carry the polygon async update points fix (upstream add1584a) as its own patch; the rebase dropped our in-place edit of 1069-CVE-2026-67301.patch None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto vendor freerdp-2.11.7-1.amzn2.0.16, which fixes CVE-2026-85089, CVE-2026-85090, CVE-2026-91946, CVE-2026-91947 and CVE-2026-91958 - Drop the TuxCare patches the vendor now carries - Keep the TuxCare fixes in xf_cliprdr, smartcard_pcsc, the RAIL notify-icon async update and avc444_ensure_buffer() - Carry the polygon async update points fix (upstream add1584a) as its own patch; the rebase dropped our in-place edit of 1069-CVE-2026-67301.patch

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.16.tuxcare.els1.aarch64.rpm 287cc708bc132af6b223d805fde92e80b9c3e7b6e7ee025e13dcc8e4e9ba0384 freerdp-2.11.7-1.amzn2.0.16.tuxcare.els1.i686.rpm d5a4e886168285c4a989e753da1e1512fab9d362e2e434a592dfabee40ab273f freerdp-2.11.7-1.amzn2.0.16.tuxcare.els1.x86_64.rpm 2781e8602cf163bbdb9030ad6fa95875a374f4355f6f65fbb7f13ba189c32c6c freerdp-devel-2.11.7-1.amzn2.0.16.tuxcare.els1.aarch64.rpm 64d32ddb2580b444ae72a2005c9c727e9ee1fea8b2f90c7da0af71ea10c814cd freerdp-devel-2.11.7-1.amzn2.0.16.tuxcare.els1.i686.rpm f16084a612cf27b55462b98a0835db0f46c3327d6f6de6ea8d3fdc55a50e8b5a freerdp-devel-2.11.7-1.amzn2.0.16.tuxcare.els1.x86_64.rpm 759e90fc8a7c9245668d209b67184b74421b6cedff8c54bc31cf5735cd07d178 freerdp-libs-2.11.7-1.amzn2.0.16.tuxcare.els1.aarch64.rpm 51db13bba546d113821f38934e2c41ba237f624342c4d1d1bab2456dd50a80bf freerdp-libs-2.11.7-1.amzn2.0.16.tuxcare.els1.i686.rpm d8d27d3cde6b8ec14f5f9e56870e52c424e018812dafd59f8091c7f6c31f3ba9 freerdp-libs-2.11.7-1.amzn2.0.16.tuxcare.els1.x86_64.rpm 003b801c4c58f2161adb080b0004918ffce1cab4e9920e13f33163568270857f libwinpr-2.11.7-1.amzn2.0.16.tuxcare.els1.aarch64.rpm 7c57c5ae677e8a6610b27ec78dda7ff74db39e1881860682c0c246ef3c3762ff libwinpr-2.11.7-1.amzn2.0.16.tuxcare.els1.i686.rpm ebe666b2203dcfcd421bc94370091257393c3c643fb8747f9c5ba30985f3d6c2 libwinpr-2.11.7-1.amzn2.0.16.tuxcare.els1.x86_64.rpm f02f41cd9dff47276c68f5a9bb020c2aa789e715972c0d97806fa12a7e3ed1ff libwinpr-devel-2.11.7-1.amzn2.0.16.tuxcare.els1.aarch64.rpm 018498e29778978cc9327da346205d4504283208efbaa77a8177d3b85aa39274 libwinpr-devel-2.11.7-1.amzn2.0.16.tuxcare.els1.i686.rpm 6bf8aef1fa76f1ecb4b38399e24e4aa2fdbfe747a3747f1de3fc7b844b7fd0c3 libwinpr-devel-2.11.7-1.amzn2.0.16.tuxcare.els1.x86_64.rpm bee98485664dbe72ceb7387731ed466f70e87c1e8305c563277ab9d15bf58e54 CLSA-2026:1790928753 TuxCare License Agreement 0 - Rebased onto Amazon Linux 2 gdb-8.0.1-36.amzn2.0.3 - Fix CVE-2026-13732 - Retained the TuxCare bfd/elfcode.h section-size validation in elf_swap_shdr_in None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebased onto Amazon Linux 2 gdb-8.0.1-36.amzn2.0.3 - Fix CVE-2026-13732 - Retained the TuxCare bfd/elfcode.h section-size validation in elf_swap_shdr_in

0 tuxcare-amazonlinux2-els gdb-8.0.1-36.amzn2.0.3.tuxcare.els1.aarch64.rpm 4d4bdb049bc8685910189942c01ca688472d3f8f907c46cbf642a40682714655 gdb-8.0.1-36.amzn2.0.3.tuxcare.els1.i686.rpm 1333232778db5610e215602299b76b03ac5a3292303019b5c008f1061d4e096a gdb-8.0.1-36.amzn2.0.3.tuxcare.els1.x86_64.rpm 7fd8a51f06fdf489115b3477b0078d34b046bc3c7ce6fcca33338280b19b2089 gdb-doc-8.0.1-36.amzn2.0.3.tuxcare.els1.noarch.rpm 8b613b3c0d855b730e7d9fe8130cdfed407c14922b0c21d683dc6198364492d6 gdb-gdbserver-8.0.1-36.amzn2.0.3.tuxcare.els1.aarch64.rpm 18893942397857249b89183d6be70b054858effa761f1316ebf88f003d8f353d gdb-gdbserver-8.0.1-36.amzn2.0.3.tuxcare.els1.i686.rpm 0da9a35007f332c55ec0b94cb5ace73a19454eaaa54aa0500e53d3897a9523a4 gdb-gdbserver-8.0.1-36.amzn2.0.3.tuxcare.els1.x86_64.rpm c6218cce957e6c5cf6ebda2a49f930cdc8a93626e54b1f84d941842a3796c626 CLSA-2026:1790929861 TuxCare License Agreement 0 - rebase to 6.9.10.97-1.amzn2.0.32, which brings the vendor fixes for CVE-2026-53466, CVE-2026-53467, CVE-2026-55577, CVE-2026-55594, CVE-2026-55595, CVE-2026-55597, CVE-2026-55628, CVE-2026-56362, CVE-2026-56363, CVE-2026-56365, CVE-2026-56366, CVE-2026-56373, CVE-2026-56377, CVE-2026-61464, CVE-2026-61465, CVE-2026-61858, CVE-2026-61862, CVE-2026-61864, CVE-2026-61865, CVE-2026-61868, CVE-2026-61869, CVE-2026-61872, CVE-2026-62343, CVE-2026-64685, CVE-2026-86423 and CVE-2026-86425 - drop the TuxCare patches the vendor build now carries, for AcquireKernelBuiltIn() in magick/morphology.c, ParseEntities() in magick/xml-tree.c, WriteGROUP4Image() in coders/tiff.c, WriteOneJNGImage() in coders/png.c, WriteVIFFImage() in coders/viff.c, OpenPixelCache() in magick/cache.c and MSLEndElement() in coders/msl.c - reduce the TuxCare magick/blob.c symlink path-policy patch to what the vendor's IsPathAuthorized() does not cover: route the FileToBlob(), FileToImage() and first OpenBlob() gates through it - guard the vendor's IsRightsAuthorizedByName() trailing-separator trim against a NULL realpath() result in magick/policy.c - keep the remaining TuxCare patches on top of the vendor series None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 6.9.10.97-1.amzn2.0.32, which brings the vendor fixes for CVE-2026-53466, CVE-2026-53467, CVE-2026-55577, CVE-2026-55594, CVE-2026-55595, CVE-2026-55597, CVE-2026-55628, CVE-2026-56362, CVE-2026-56363, CVE-2026-56365, CVE-2026-56366, CVE-2026-56373, CVE-2026-56377, CVE-2026-61464, CVE-2026-61465, CVE-2026-61858, CVE-2026-61862, CVE-2026-61864, CVE-2026-61865, CVE-2026-61868, CVE-2026-61869, CVE-2026-61872, CVE-2026-62343, CVE-2026-64685, CVE-2026-86423 and CVE-2026-86425 - drop the TuxCare patches the vendor build now carries, for AcquireKernelBuiltIn() in magick/morphology.c, ParseEntities() in magick/xml-tree.c, WriteGROUP4Image() in coders/tiff.c, WriteOneJNGImage() in coders/png.c, WriteVIFFImage() in coders/viff.c, OpenPixelCache() in magick/cache.c and MSLEndElement() in coders/msl.c - reduce the TuxCare magick/blob.c symlink path-policy patch to what the vendor's IsPathAuthorized() does not cover: route the FileToBlob(), FileToImage() and first OpenBlob() gates through it - guard the vendor's IsRightsAuthorizedByName() trailing-separator trim against a NULL realpath() result in magick/policy.c - keep the remaining TuxCare patches on top of the vendor series

0 tuxcare-amazonlinux2-els ImageMagick-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm 3b9b7e047145712d121bb5b2171351d3081864c511361bda39f54a3828c6eed0 ImageMagick-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm 0fcc94a6f2268932263e5a9d210e9a095d02fd6cd5a8c77a469aa950f7585f9f ImageMagick-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm 32ceec93f6df434373bdb97a29bc90398f17461c4097a1157bb1f703243d0bc9 ImageMagick-c++-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm 622f4567d53437ed7d6d3d4a5ca17f4d7ac043c005b1f5abbd971f6c9b685a7a ImageMagick-c++-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm d973aa3bdfeca1e3438269ba56c121d93a4cd1bacc6eb240bb290eb2a3911274 ImageMagick-c++-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm 8140ff5edbd8d3330ec14c59cbd3d5b154b7dff841b2f492eb002c5669a568b6 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm 5fc74e44ccf6da3b60202ed8198fc22bb67949ecef1bcd7bebec5af30234a08f ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm 4770aa196bb035279824f1b6ba253f2cd3573f110c69188517f0667cca9f7829 ImageMagick-c++-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm ff93003a9793ca3cb172491fbcc5b04e1f8bb5fd71601d80139c2becf9fc5e9e ImageMagick-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm 0132b64043e3771a66c8b706916d1adeab263dc145fade0b3ecbe793c7baaf3d ImageMagick-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm a48ef25b5a32bbaec2a4ec8d2baba13fd137ce201b98cfa8eab40a8b27a5cef9 ImageMagick-devel-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm 14063afde92e2c6e3efcdebfcb2f8fe24a5cae6b9ddbc0ad7673223c57e4a3e7 ImageMagick-doc-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm 1cf4c1c2c94d4e1b565855ad2c4ca16f1b25cf032afc7cfa3da48384f97baadf ImageMagick-doc-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm fa9ca05ce054ed604142ebe8e70e92a6b19c50caa9055881096f100ad183c29d ImageMagick-doc-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm 6610c134af2f47e75b2d1b55eb71bca4e14f7fc43e33c4bf3006e2256a8adab4 ImageMagick-perl-6.9.10.97-1.amzn2.0.32.tuxcare.els1.aarch64.rpm 078a1db8599a402e933c53c4932340747b71b1b1476fe3693830d2c56e9e0b88 ImageMagick-perl-6.9.10.97-1.amzn2.0.32.tuxcare.els1.i686.rpm ef9233e95b9aa5e668b9520899f204595f07ea4ed1f803b19d038f34e0b0ae55 ImageMagick-perl-6.9.10.97-1.amzn2.0.32.tuxcare.els1.x86_64.rpm 6728abf1dc42020a425b91a4ab39419c9f0dd61ade24a1a6cc669ef134eb4588 CLSA-2026:1790932674 TuxCare License Agreement 0 - CVE-2026-84782: reset s->init_off to 0 in dtls1_retransmit_message() so a DTLS retransmission is read from the start of the queued message instead of the offset left by a write suspended on WANT_WRITE, and skip retransmission in dtls1_handle_timeout() while such a write is still parked - CVE-2026-35189: defer building the full name of a nameRelativeToCRLIssuer CRL distribution point out of setup_dp() and into crl_crldp_check(), so a certificate with many relative distribution points no longer caches one copy of the issuer name per entry Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-84782: reset s->init_off to 0 in dtls1_retransmit_message() so a DTLS retransmission is read from the start of the queued message instead of the offset left by a write suspended on WANT_WRITE, and skip retransmission in dtls1_handle_timeout() while such a write is still parked - CVE-2026-35189: defer building the full name of a nameRelativeToCRLIssuer CRL distribution point out of setup_dp() and into crl_crldp_check(), so a certificate with many relative distribution points no longer caches one copy of the issuer name per entry

0 tuxcare-amazonlinux2-els openssl-1.0.2k-24.amzn2.0.22.tuxcare.els2.aarch64.rpm d3060c0f481516fe45e2db5b8844069e3acec1d94e9c5008c51a4c7524a021ac openssl-1.0.2k-24.amzn2.0.22.tuxcare.els2.i686.rpm ad73f1a269ec6a3322c61f7ede3b2fde9e625e9bd5eb62fd07788b53ca3ae201 openssl-1.0.2k-24.amzn2.0.22.tuxcare.els2.x86_64.rpm d360048221755cc6c02d1e588c0a92a1e19dfd1f7ce86f75e43fa99d6c9dfbb9 openssl-devel-1.0.2k-24.amzn2.0.22.tuxcare.els2.aarch64.rpm f671440c0ab887c2781aeebcc5056d975b30f39d9ec66ca5d2a97b9dee6582ae openssl-devel-1.0.2k-24.amzn2.0.22.tuxcare.els2.i686.rpm 88687063a068e96df55bcce32c5b437026365533f0ab15f7442480f112f8643f openssl-devel-1.0.2k-24.amzn2.0.22.tuxcare.els2.x86_64.rpm fdd8365c3462a351a9fcb809217a4da1e115c8bd967b9160823b01b1953e685b openssl-libs-1.0.2k-24.amzn2.0.22.tuxcare.els2.aarch64.rpm 174c39d2911e7ef753cb1053dd2e8a0dbab1eceb2d71925507e302670c41c86b openssl-libs-1.0.2k-24.amzn2.0.22.tuxcare.els2.i686.rpm f521be52df30bbd2d620743b6674e21b5c80a8e29c73ea9bf93e7fbd836f2288 openssl-libs-1.0.2k-24.amzn2.0.22.tuxcare.els2.x86_64.rpm 376376a6c98c3ba1090a66c889a8ccf59128445e65e46ec12615c94498ba02c9 openssl-perl-1.0.2k-24.amzn2.0.22.tuxcare.els2.aarch64.rpm 162af0d2f28af0246104b15d6a5c230fe558bd4c4260cba1bbfac949f26c3a8e openssl-perl-1.0.2k-24.amzn2.0.22.tuxcare.els2.i686.rpm 1791f621ecbaa35baa36f984f35396dc7dae7a7bac75789e629edfe870f0ef17 openssl-perl-1.0.2k-24.amzn2.0.22.tuxcare.els2.x86_64.rpm 5887bcf8a0682597cb31af3e0a2d48cb4537b421b005cfe5aa28eef85a4b4e9b openssl-static-1.0.2k-24.amzn2.0.22.tuxcare.els2.aarch64.rpm 88dc788e167225a93da5b3eae368ad17b73857a630a63b9f601b2e9bcb4382a9 openssl-static-1.0.2k-24.amzn2.0.22.tuxcare.els2.i686.rpm 4ddd28a64dbb9b4d3f37957415fbda0d34bd5aeb99c1b7a76633612dadf1fe4f openssl-static-1.0.2k-24.amzn2.0.22.tuxcare.els2.x86_64.rpm e089a12484e1b419707c8d51b23e2c0254835e97afc4dce51c531b267024abda CLSA-2026:1790953388 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.17; take the vendor's three new patches as Patch1020-Patch1022 and renumber the TuxCare patches to Patch1023-Patch1025. The vendor also renamed its 0.16 fix-buffer-overflow.patch to CVE-2026-81642.patch; the diff payload is byte-identical - CVE-2026-81634: add the missing first owner name and signature length bounds checks to rrset_canonical() in validator/val_sigcrypt.c, preventing a heap buffer overflow during RRset canonicalisation - CVE-2026-82717: carry the vendor's defence-in-depth bounds checks - restore the packet-buffer position on every malformed-name failure in pkt_dname_len(), and validate decompressed-name lengths, packet progress and the trailing copy length in rdata_copy(). 1.7.3 is not affected by the CNAME synthesis write itself: synth_cname_rrset() allocates its own storage with TTL zero and has no cache-min/cache-max rewrite through ttl_data into packet bytes - CVE-2026-85501: bound the DNSSEC work a single query may cause - key-tag matches capped at MAX_TAG_MATCHES (256), NSEC/NSEC3 verifications at MAX_VALIDATE_NSECS (8) per message, and new val-validation-attempts and val-hash-attempts options (default 32) capping signature verifications and DS hash computations per validator query state; oversized referral DS RRsets are shortened in the scrubber and val-clean-additional now defaults to no - keep the TuxCare CVE-2019-16866, CVE-2026-50252 and CVE-2026-33278 (NSEC3 half) backports Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 1.7.3-15.amzn2.0.17; take the vendor's three new patches as Patch1020-Patch1022 and renumber the TuxCare patches to Patch1023-Patch1025. The vendor also renamed its 0.16 fix-buffer-overflow.patch to CVE-2026-81642.patch; the diff payload is byte-identical - CVE-2026-81634: add the missing first owner name and signature length bounds checks to rrset_canonical() in validator/val_sigcrypt.c, preventing a heap buffer overflow during RRset canonicalisation - CVE-2026-82717: carry the vendor's defence-in-depth bounds checks - restore the packet-buffer position on every malformed-name failure in pkt_dname_len(), and validate decompressed-name lengths, packet progress and the trailing copy length in rdata_copy(). 1.7.3 is not affected by the CNAME synthesis write itself: synth_cname_rrset() allocates its own storage with TTL zero and has no cache-min/cache-max rewrite through ttl_data into packet bytes - CVE-2026-85501: bound the DNSSEC work a single query may cause - key-tag matches capped at MAX_TAG_MATCHES (256), NSEC/NSEC3 verifications at MAX_VALIDATE_NSECS (8) per message, and new val-validation-attempts and val-hash-attempts options (default 32) capping signature verifications and DS hash computations per validator query state; oversized referral DS RRsets are shortened in the scrubber and val-clean-additional now defaults to no - keep the TuxCare CVE-2019-16866, CVE-2026-50252 and CVE-2026-33278 (NSEC3 half) backports

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.aarch64.rpm d04b484d8efebf785ff47863628ae0ef263af6d4248db46d7c026f74c21f07db python2-unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.i686.rpm 88ca9330037f3a03472e7eff35d9aaae467f08c3e014cdb52a3dc81be99f923c python2-unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.x86_64.rpm 1afa753680ee76707ab1ed1250089efdcdd9ad1891d177d584d2ede566e30ed8 python3-unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.aarch64.rpm dd9a0308c8208c6753bdbc2d14d2e5a89a1610effb48f1cabe5a712d5695ecd4 python3-unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.i686.rpm dafe38c00e027328fa0c646fb9604cf5cf143fb9587ae4336ec52ffe0b29f7e8 python3-unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.x86_64.rpm bf50d26d760bce5e91ee9f508b724b672bce1bb6b762748d8154d5caac95b4e7 unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.aarch64.rpm 54a7166829076a352b36f68de5aa39fce537832b39c49f50cbbb5eef824d851a unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.i686.rpm 6bd84a55cc4efaf8252ce2b37fbaabf19496c37f379fd395aa50fc95c0c007ea unbound-1.7.3-15.amzn2.0.17.tuxcare.els1.x86_64.rpm 70fa6e917d3ffa869abc95d7be3f59ef3a29ac069a039e9d6b3d01175fd48935 unbound-devel-1.7.3-15.amzn2.0.17.tuxcare.els1.aarch64.rpm 47954109fca89fac403512d60575b98316f1818304fb3761afeb969edb5c4eb9 unbound-devel-1.7.3-15.amzn2.0.17.tuxcare.els1.i686.rpm 363de029c6811cb10aba396b45f880c4ec8d91a1d61cfe91eea0dee596ba27e7 unbound-devel-1.7.3-15.amzn2.0.17.tuxcare.els1.x86_64.rpm 065b1c467120ea86bcf4e69a592ffb29a2fd853a712506e7d3d86e841b127705 unbound-libs-1.7.3-15.amzn2.0.17.tuxcare.els1.aarch64.rpm 69e0a1d96859456a5e1090e37281bf9388bc66f141f8904bb1a867189d5921cf unbound-libs-1.7.3-15.amzn2.0.17.tuxcare.els1.i686.rpm 28571534110cad6de89e247ec6ba6e657d8cb01ade6fcbe10f47f15b1e3b55ea unbound-libs-1.7.3-15.amzn2.0.17.tuxcare.els1.x86_64.rpm 928e441a667d77f83497c86581bd347917e57375db3e74083e1a2799b2aa811b CLSA-2026:1791176317 TuxCare License Agreement 0 - carry upstream's tagtrap replay for CVE-2026-85501 (NLnet Labs commit a7fc80d8) as testdata/tagtrap_limit_2_shortends_ecdsa.crpl. This adds no security payload: the fix ships in AL2's CVE-2026-85501.patch (Patch1022) at 1.7.3-15.amzn2.0.17.tuxcare.els1. %check is unchanged and does not execute the file - its test target globs testdata/*.rpl - because Patch1022's oversized-DS-RRset scrubber guard (ITER_SCRUB_DS_MAX 20) truncates the replay's 24-record referral DS RRset before the key-tag explosion it asserts can occur Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- carry upstream's tagtrap replay for CVE-2026-85501 (NLnet Labs commit a7fc80d8) as testdata/tagtrap_limit_2_shortends_ecdsa.crpl. This adds no security payload: the fix ships in AL2's CVE-2026-85501.patch (Patch1022) at 1.7.3-15.amzn2.0.17.tuxcare.els1. %check is unchanged and does not execute the file - its test target globs testdata/*.rpl - because Patch1022's oversized-DS-RRset scrubber guard (ITER_SCRUB_DS_MAX 20) truncates the replay's 24-record referral DS RRset before the key-tag explosion it asserts can occur

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.aarch64.rpm 6c3138f78dcfafe21956d9878ba6b7dc9753d9936be8b17013341e51437a7393 python2-unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.i686.rpm 150a47d43522fa2b4d94c35aa9f7dded3897686c928e97291bc2bdf95e317ea9 python2-unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.x86_64.rpm 289ddf6f4e3be4777910fb759f6e8f1e40a368e16d2f35577776aee3590d72c4 python3-unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.aarch64.rpm b7d4cc7c1b67f666678640e75b9b8b9fb29ff181785459bdf230ceb9b2e3452a python3-unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.i686.rpm 10852da3dea10bd029600ce11f73fe82fe65c191ce919c5d3e2de4015b9829b4 python3-unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.x86_64.rpm 3953e36edd14be1bfd27ff346f8b77765a3a549e6dd7293274f651ca22c9dc9d unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.aarch64.rpm 67ce6e6f5bd49dffc8939ec70f8965437b467609bd2d38eec79d53f8f4d15811 unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.i686.rpm a773789c12d088dfe2f4cb68ac90b5816ef5f6a03d0aac5ac3360edff305c8c6 unbound-1.7.3-15.amzn2.0.17.tuxcare.els2.x86_64.rpm c3c39bc2be3a2e067247df10398e247f7e014348d278a44866b9b68a9e174200 unbound-devel-1.7.3-15.amzn2.0.17.tuxcare.els2.aarch64.rpm 590ea0d2b43dbac2293b4eb93597badff06b1bc393c370bb67b88961b0a782e8 unbound-devel-1.7.3-15.amzn2.0.17.tuxcare.els2.i686.rpm 3ac8cf8d890fcfa683df60f84af85b102d1cca2cd4eb384297a767b379eaad27 unbound-devel-1.7.3-15.amzn2.0.17.tuxcare.els2.x86_64.rpm 977a700c700aace889d8e720b346621be1699d13d82d572d1d56ca54b1b32945 unbound-libs-1.7.3-15.amzn2.0.17.tuxcare.els2.aarch64.rpm 597f3698f83c6080532a9226c83a561588566d79d472fa9e5ab7467434ec17cd unbound-libs-1.7.3-15.amzn2.0.17.tuxcare.els2.i686.rpm 8fca1ea4d9ca7fc66382e1d7d8aa8a5f267b5cbbf5abc3a2faed00f4f7be29f9 unbound-libs-1.7.3-15.amzn2.0.17.tuxcare.els2.x86_64.rpm 069f85ed32e59691d2a7a36e1a58a30c8906fc25d85636e84a349cb507a8b350 CLSA-2026:1791188157 TuxCare License Agreement 0 - Rebase onto Amazon Linux 2 gvfs-1.36.2-3.amzn2.0.3 - CVE-2026-84268: sftp read_reply overruns the job buffer when the server returns more data than requested (fixed by the vendor patches in this build) - CVE-2019-12448: fix admin backend race in query_info_on_read/write - CVE-2019-12447: fix admin backend file ownership via fsuid - CVE-2019-12795: fix gvfs daemon D-Bus unauthenticated client access None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto Amazon Linux 2 gvfs-1.36.2-3.amzn2.0.3 - CVE-2026-84268: sftp read_reply overruns the job buffer when the server returns more data than requested (fixed by the vendor patches in this build) - CVE-2019-12448: fix admin backend race in query_info_on_read/write - CVE-2019-12447: fix admin backend file ownership via fsuid - CVE-2019-12795: fix gvfs daemon D-Bus unauthenticated client access

0 tuxcare-amazonlinux2-els gvfs-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm 4acd6c36e7420825e1ec5a8ea5198db918b3cdbdb38609f036c21a2b17ab7964 gvfs-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm 8518d579590aa2f1e42ab0c5b7ad672e47e14950fdcce7f72fbc61c5171d0372 gvfs-afc-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm 2aaf4248b8ee43ac9c32f51b3157b42e91d1b0e52df8228c6b97954c1ffdc144 gvfs-afc-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm 89b34393594c2ca46a9e746f783c40bd7d5a50f7d47d246997320440093fb5ac gvfs-afp-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm ef0c006f1551a93c0411b337fa14573071b4d1c916d62745cb2f63d1228893c6 gvfs-afp-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm f3e64588abfd71b4cd6264c9032d8f3f842dca58b394956641c63c9851a544bc gvfs-archive-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm 39880fb462ecea2ea52c2772be98b389a51b156d4f1e877984cfa8bf8ef6355e gvfs-archive-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm 37d68557f6fd391ee32890683f64319a7afd6a6d373e97872434c0fcb9e8f721 gvfs-client-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm c9338bf42507e6f190a3d8ff2d4334e7c6457e84730f329337833391adbf774c gvfs-client-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm cbabed5ed88e04c5d6ee3f189282d71164f555f1af2d34278382d41bd957f902 gvfs-devel-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm 42a03fbca7d03b064a6728e467b70fff7f703901082b04b8ebf5bc987a65062e gvfs-devel-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm a6e27adeae7b8cf643ed8c672361f692867fd657d3cff13c0bea58aadcded760 gvfs-fuse-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm 3589b34028c44794143342589bbcb7a9143ac91f5c2de145b6aa1a6ad85eaf47 gvfs-fuse-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm 70320f2fa4137027a5abbb5f0a2c5c453d1ea67b0d59ee57528d13e5fa25a748 gvfs-goa-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm b6af09288891d79bd5528f3981c20cf27f4bcbc78952ac53ded0df0da855ada5 gvfs-goa-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm 96b7474cbec0991ffbb1fed3893836662d3b6e91c667081fc300176b780f443b gvfs-gphoto2-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm 57b5df251c40896c8b8258c2d9f060332cb1a7ceac6050530da66da272dc55b1 gvfs-gphoto2-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm 354bf6e4c6eca88cfae93b583fe3ba013970d57480e4d0f8349f01a6356b31ee gvfs-mtp-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm 16a216534759e3554cbd243a60eb606dfcc80900ed939ae58daadf012a00105a gvfs-mtp-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm b8348b039a6f2f7eafe8ca45e35876dc10e72d093cc77657601e8e997496fb06 gvfs-smb-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm a4d46d704c432487e923513010012a60dd08590cedcd6c6c6a0eec52e1818fb9 gvfs-smb-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm cc7e3b3a95d0b31a89d7190e9d9b51ac43695560a029a718d2fdf612f8df6a74 gvfs-tests-1.36.2-3.amzn2.0.3.tuxcare.els1.aarch64.rpm 44f42b7576d71661f4f94d639e850e647390ef0a2ceed3a68b52f24fee91a30a gvfs-tests-1.36.2-3.amzn2.0.3.tuxcare.els1.x86_64.rpm 7f5279b59790a4c38be7282d90e9bf7334b71a2cc8ec01fb4681a0ec2b55dd24 CLSA-2026:1791189115 TuxCare License Agreement 0 - Rebase onto the vendor's 8.3.0-1.amzn2.0.13 sources, which add fixes for CVE-2026-80230 (openssl: accept a missing server certificate only when public key pinning was not requested) and CVE-2026-8924 (cookie handling) - CVE-2026-13608 is now fixed by the vendor; the vendor's version of CVE-2026-13608.patch was taken and the TuxCare duplicate is dropped - CVE-2026-12064 is now fixed by the vendor; the vendor's version of CVE-2026-12064.patch was taken and the TuxCare duplicate is dropped - CVE-2026-8286 is now fixed by the vendor; the vendor's version of CVE-2026-8286.patch was taken and the TuxCare duplicate is dropped - Retained the TuxCare fixes for CVE-2025-0167, CVE-2026-6276, CVE-2026-5773, CVE-2026-10536, CVE-2026-8927, CVE-2026-8932 and CVE-2026-18924 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto the vendor's 8.3.0-1.amzn2.0.13 sources, which add fixes for CVE-2026-80230 (openssl: accept a missing server certificate only when public key pinning was not requested) and CVE-2026-8924 (cookie handling) - CVE-2026-13608 is now fixed by the vendor; the vendor's version of CVE-2026-13608.patch was taken and the TuxCare duplicate is dropped - CVE-2026-12064 is now fixed by the vendor; the vendor's version of CVE-2026-12064.patch was taken and the TuxCare duplicate is dropped - CVE-2026-8286 is now fixed by the vendor; the vendor's version of CVE-2026-8286.patch was taken and the TuxCare duplicate is dropped - Retained the TuxCare fixes for CVE-2025-0167, CVE-2026-6276, CVE-2026-5773, CVE-2026-10536, CVE-2026-8927, CVE-2026-8932 and CVE-2026-18924

0 tuxcare-amazonlinux2-els curl-8.3.0-1.amzn2.0.13.tuxcare.els1.aarch64.rpm 28b5e1c83445286fa9bb235ba7aa093dfb1e04397a652f4f997b2c27a99aaf2f curl-8.3.0-1.amzn2.0.13.tuxcare.els1.i686.rpm 9350dddcdbbc3d22b31497df7dc8517e0f78edbc1dd8dcb142165f10db3ceae5 curl-8.3.0-1.amzn2.0.13.tuxcare.els1.x86_64.rpm aaa800c4adfb7e35122f5a7fdf99ae676abb93f216b5020c696ac4a341447b7b libcurl-8.3.0-1.amzn2.0.13.tuxcare.els1.aarch64.rpm 5ba539883e235f9fc7bb6cd58cab675dc2683b702ed5b79f2d02408ce4fc0f1d libcurl-8.3.0-1.amzn2.0.13.tuxcare.els1.i686.rpm abbd1fbe83f13a8c1777e4ea6f6281db7f5ae56d1583bbdf96d7936bfb505218 libcurl-8.3.0-1.amzn2.0.13.tuxcare.els1.x86_64.rpm 20b7274df30d3dc6d04c6885ab9b80642d36cba16a122195d46e5ee693f34e95 libcurl-devel-8.3.0-1.amzn2.0.13.tuxcare.els1.aarch64.rpm 054cba351ad2c4e870af6296edffdfbad78f13791b3182a101cbecbc85cd79b0 libcurl-devel-8.3.0-1.amzn2.0.13.tuxcare.els1.i686.rpm 42a2c18e573b1d7b1a782af6a9a325d9267298a1e273540ab10413ce0aa1fb42 libcurl-devel-8.3.0-1.amzn2.0.13.tuxcare.els1.x86_64.rpm 491c212967ad8e0f98f5b607d944742e45fc10f21e5b7c3548788f673df50e2e CLSA-2026:1791191745 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 2.9.1-6.amzn2.5.27, which fixes CVE-2026-74860 and CVE-2026-86137 - take the vendor's dict.c, valid.c, xinclude.c, xmlIO.c, xmlregexp.c and xpointer.c patches in place of ours, and carry what they omit: the QName length limit in xmlDictQLookup, the size_t length checks in xmlOutputBufferWrite and xmlOutputBufferWriteEscape, and the saturating xmlStrlen - keep the TuxCare parser.c, nanohttp.c, xmlreader.c and xpath.c fixes None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 2.9.1-6.amzn2.5.27, which fixes CVE-2026-74860 and CVE-2026-86137 - take the vendor's dict.c, valid.c, xinclude.c, xmlIO.c, xmlregexp.c and xpointer.c patches in place of ours, and carry what they omit: the QName length limit in xmlDictQLookup, the size_t length checks in xmlOutputBufferWrite and xmlOutputBufferWriteEscape, and the saturating xmlStrlen - keep the TuxCare parser.c, nanohttp.c, xmlreader.c and xpath.c fixes

0 tuxcare-amazonlinux2-els libxml2-2.9.1-6.amzn2.5.27.tuxcare.els1.aarch64.rpm 0a2957285533ff26828d1a4b1dcf12313b7010fe1e4f62bd2a4762a86fd0001a libxml2-2.9.1-6.amzn2.5.27.tuxcare.els1.i686.rpm 7d19ce9b0f621e2cc8ccbc74beefdde9123f5933a3f90851a3dbc8b6df8ad445 libxml2-2.9.1-6.amzn2.5.27.tuxcare.els1.x86_64.rpm 8bb0b760be65c64cdfcf1a3878325a74d894931aa7c885483b05aab2228d98cd libxml2-devel-2.9.1-6.amzn2.5.27.tuxcare.els1.aarch64.rpm 076a0a59d07ed551ef586e829732a7669aee3b9712d513912b7fe3aa55b58790 libxml2-devel-2.9.1-6.amzn2.5.27.tuxcare.els1.i686.rpm 551106dc2ba46612488f175fef75f9b0adddb3bece135a6ede37827f5849461e libxml2-devel-2.9.1-6.amzn2.5.27.tuxcare.els1.x86_64.rpm 54501a4f1f4584648be17b8fb72d528726848d69b74d293aca0abc0f142ff453 libxml2-python-2.9.1-6.amzn2.5.27.tuxcare.els1.aarch64.rpm b82f76043f7c5c18d99fe006b15e77a0c310f3109deaad67be157f5711482b48 libxml2-python-2.9.1-6.amzn2.5.27.tuxcare.els1.i686.rpm ceb99dad0b0496ed643c15721971e5153d74b48f46e847ea615a28cc3c6d8277 libxml2-python-2.9.1-6.amzn2.5.27.tuxcare.els1.x86_64.rpm e6f0e425271deafb4cb8a50ae829c79fb0ac3d237da1b1b8d4ac1fe2fd503330 libxml2-static-2.9.1-6.amzn2.5.27.tuxcare.els1.aarch64.rpm 2113a21b6fb43fa98db819ef4f30a02d8c76bb7d5de858fddb948926fe5cb9f1 libxml2-static-2.9.1-6.amzn2.5.27.tuxcare.els1.i686.rpm f20af693c0991aa18c73bd49499e7c5633f5c35a862f39a5d08ccfe07e93c258 libxml2-static-2.9.1-6.amzn2.5.27.tuxcare.els1.x86_64.rpm 980fa473c2b181a16bf4f37ca1f57dd4dc593a7033eb34c17bc40982b988cc15 CLSA-2026:1790880993 TuxCare License Agreement 0 - rebase to 1.4.6-1.amzn2.0.1 - the vendor fixes in this build: CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348 - drop the 6 TuxCare CVE backports; 1.4.6 already incorporates them - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 1.4.6-1.amzn2.0.1 - the vendor fixes in this build: CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348 - drop the 6 TuxCare CVE backports; 1.4.6 already incorporates them - no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative

0 tuxcare-amazonlinux2-els clamav1.4-1.4.6-1.amzn2.0.1.tuxcare.els1.aarch64.rpm 0e03be2f02b558bbd3dc375ba04d348b08a013fe9fc1eb41e95cf651f3fafdcf clamav1.4-1.4.6-1.amzn2.0.1.tuxcare.els1.x86_64.rpm bc137965c0a481ec6ec43a1189f276e71e52ec083decfec606577692180dd363 clamav1.4-data-1.4.6-1.amzn2.0.1.tuxcare.els1.noarch.rpm 5cb54f729aebe0367fc6edfb9a450171f6653dab315fc81eafcd714e5990630b clamav1.4-devel-1.4.6-1.amzn2.0.1.tuxcare.els1.aarch64.rpm 72eeee669054335d8bec66c30359dc49a4588f91b7f6d32f6caa217206053a5f clamav1.4-devel-1.4.6-1.amzn2.0.1.tuxcare.els1.x86_64.rpm a61e1c1acf0cd01663cf8956c7b093fd6808e68704652e222f2a66254ab0589d clamav1.4-doc-1.4.6-1.amzn2.0.1.tuxcare.els1.noarch.rpm 39811d6b6698581ce020207ffbb70aeb1cac8cc0912c1b8974deb95f25ac5cb9 clamav1.4-filesystem-1.4.6-1.amzn2.0.1.tuxcare.els1.noarch.rpm 2d95209a3c92925fa2c0863bd56359c628e81b9c75f440d658e18e06bde8b558 clamav1.4-freshclam-1.4.6-1.amzn2.0.1.tuxcare.els1.aarch64.rpm c4fb6ad9f87b5afbb471f069fb3c35c47b1964ddd933f63823745a2bee1e0d24 clamav1.4-freshclam-1.4.6-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 96f7e6153dd8116810cee9c28a70b91413750a4cf139a0e5d4be7243b9b419a2 clamav1.4-lib-1.4.6-1.amzn2.0.1.tuxcare.els1.aarch64.rpm 6ea680b8a7c5005c14d72e3a278bac808efc20e6e2d962c1d91030052e2d41f4 clamav1.4-lib-1.4.6-1.amzn2.0.1.tuxcare.els1.x86_64.rpm c7a07b2fc6125f2c918be3ef61d70df298ea357b539c4b0380dd39dd358e29c3 clamav1.4-milter-1.4.6-1.amzn2.0.1.tuxcare.els1.aarch64.rpm dd9ccc887475a53ce770127fca5259e9476fc99fd39f3189d9c9ec80dd4f25d1 clamav1.4-milter-1.4.6-1.amzn2.0.1.tuxcare.els1.x86_64.rpm e33b61b4ac308ce678733a15c58f935da909af87fbd231528aee2f9f882262be clamd1.4-1.4.6-1.amzn2.0.1.tuxcare.els1.aarch64.rpm e0cd8f8d9b9ae29562a92be3552cd634113dd5749676ab371713a9d6203ef7cb clamd1.4-1.4.6-1.amzn2.0.1.tuxcare.els1.x86_64.rpm 009e5a84920a8bc3dcc45b6f485ad646be00267f8e8fbfdcc1bbed7eb877843c CLSA-2026:1790919304 TuxCare License Agreement 0 - CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a low surrogate, so malformed UTF-16 can no longer hide the following code unit from the tokenizer Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-93990: reject a UTF-16 high surrogate that is not followed by a low surrogate, so malformed UTF-16 can no longer hide the following code unit from the tokenizer

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.7.amzn2.tuxcare.els9.aarch64.rpm 9c424d0a84c0c64f6cd937d1da918a693995613b800c6413e0b804510daf4c34 expat-2.1.0-15.0.7.amzn2.tuxcare.els9.i686.rpm 3fa99ae925c4faa96aa2c41896a12a410c9664038853598eedeafab7e91afb12 expat-2.1.0-15.0.7.amzn2.tuxcare.els9.x86_64.rpm 56f70c24eb12ee11a00be6a43d163bba45a4c89404a52f419a9fce31f3f98033 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els9.aarch64.rpm 2d4f5f44af682fdaf4edbf8ebf0c6bdcde9a8bdd043be1bad45a3b4cc8c940d4 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els9.i686.rpm 2bc51a0f0a04fe0df70755509d1c821d3199b92fa34a5197e4324fbb4caa8e90 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els9.x86_64.rpm 029f6373a967a0be2b614705d01566664be062516608e8747e3367f0acb4944d expat-static-2.1.0-15.0.7.amzn2.tuxcare.els9.aarch64.rpm 0b19ddb5f0c46dfd2d17477fc7a124889ddbe993cdc35fbde604134dfbc4a5b3 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els9.i686.rpm 522a328d4e98c1f84509677dbda20201d23796fd54214b7e4d04df7aee4c4546 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els9.x86_64.rpm 57ea1caafc9bcb07e6a467c140db19631b1c8ac588477182ccddb9ab7587787b CLSA-2026:1788336740 TuxCare License Agreement 0 - CVE-2019-19246: heap buffer over-read in the bundled Oniguruma 4.7.1 str_lower_case_match(); the case-insensitive matcher advanced the target pointer during a multibyte case-fold comparison without re-checking it against the end of the buffer - CVE-2020-7062: NULL pointer dereference in the session upload-progress handler; an upload that ended before any file part was seen reached MULTIPART_EVENT_END with progress->data still unallocated, which was then dereferenced when session.upload_progress.cleanup was disabled - CVE-2021-21702: NULL pointer dereference in SoapClient; a malformed WSDL or XML response whose node carried no name was passed unchecked to soap_error1() and strcmp() - CVE-2021-21703: out-of-bounds read and write in the php-fpm scoreboard; an unprivileged worker could steer the root process past the end of the shared scoreboard array, allowing local privilege escalation - CVE-2024-11234: CRLF injection in the HTTP stream wrapper; with a proxy configured and request_fulluri enabled, a path containing CR or LF was pasted into the request line, permitting HTTP request smuggling - CVE-2025-1736: insufficient validation of end-of-line characters in user-supplied HTTP stream-wrapper headers; a header preceded by a bare LF, tab or space was accepted as present, which could suppress the Authorization header derived from URL credentials Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2019-19246: heap buffer over-read in the bundled Oniguruma 4.7.1 str_lower_case_match(); the case-insensitive matcher advanced the target pointer during a multibyte case-fold comparison without re-checking it against the end of the buffer - CVE-2020-7062: NULL pointer dereference in the session upload-progress handler; an upload that ended before any file part was seen reached MULTIPART_EVENT_END with progress->data still unallocated, which was then dereferenced when session.upload_progress.cleanup was disabled - CVE-2021-21702: NULL pointer dereference in SoapClient; a malformed WSDL or XML response whose node carried no name was passed unchecked to soap_error1() and strcmp() - CVE-2021-21703: out-of-bounds read and write in the php-fpm scoreboard; an unprivileged worker could steer the root process past the end of the shared scoreboard array, allowing local privilege escalation - CVE-2024-11234: CRLF injection in the HTTP stream wrapper; with a proxy configured and request_fulluri enabled, a path containing CR or LF was pasted into the request line, permitting HTTP request smuggling - CVE-2025-1736: insufficient validation of end-of-line characters in user-supplied HTTP stream-wrapper headers; a header preceded by a bare LF, tab or space was accepted as present, which could suppress the Authorization header derived from URL credentials

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 093f7d7331267331b7c69ea6c171a45c4e4cf541f6b064d2c1a6d5496c6cea40 php-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 6d4f6dba622089d398c464f6791e89ca24515111a0f85272c486769af9a0ff8b php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm faaec227acb26856a44566c5d39d7868b4b20d68b49f27308dab3b718834ea2b php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm dada55982bc1ebe65f3e7a04af3db9e0102426ec1962a74e90c096a5bbdad3eb php-cli-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm c30f45463fa2627878324b2137e0b13daa10e7ece8f624203076f786781ff8eb php-cli-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 3fab9d91e4f6eb7c1b50fb29730a4d47c354574fec03f2d8ea71215a8521d3db php-common-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 2b9ea5925fe5bcda7abdc2876e42bd304f501c59ce89aa13add54d31274f2485 php-common-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 181fe0bca85d622cab0e9daaef8930ab9675d59df4ce536b669b950f2957f66a php-dba-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 382afa3a1643dd090b100fb5122e209570b3cd5f2de3dc554f35286694bb0a6c php-dba-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm b78641615387448eafe73bf45f19262b134d40e3d60af42769ed7938b0da862f php-devel-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm bdae9d85f02a9b632fc8b851b92f12196eabb4cc5b60cd407733955847a87788 php-devel-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 13ddebdce32b6d03af5102954da38ca92fbd1d60d8254be0110f6b6ff749f181 php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 372cdc7feda9a2a7dccabee387e86e657e96a7c93aeaa4e84ef227d3e0a0fa56 php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 45a98879dd56d2bab595ac21f1e7f02b1bbd4765a7b6031ce2ea0c2dacabc343 php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 8aa05c7e0c58a84e95381c96b381b9b57a664d959528acd3acf8aa842f218d52 php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm a3ffa8ba4637af9679bc0f4fa1f962e4fc22a91b4cb6787d7a8847189745990c php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 25ee1623f15d6caa772e8b0dec7d394b8a97789f2b7d036998a8c48427e0b2e8 php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 22c66fc4903c17f724ef7f8fa736f58b1ae37e3ab2761b35334d4c99c10c2407 php-gd-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 23b114b5ba184b5271c8c09f8e39ff28d09fe8ef5f686f05fd5362d2eef2f11f php-gd-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 0f8646a398661c5b0cc2f4d8a8f34410bec16e0997e150277b2b26fbb4a4686b php-intl-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 756e2700ff2b4ce88f195462894f25972b8a61da1ddaef0613de4fbcf6969992 php-intl-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 128bfb9ecd117822e8156c9c3485760c5900ceb0923a5cccd73864445fa926a0 php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 624d6843458a61d8a2c3c5ab3d29c926fe106d00d37cf96f6a3784a42fe8ae30 php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 6cf71ef47ad252c6fe8ca8c2eec14b0672a4f4a54bbea7396df798a4280068ba php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm ed5bf78941cda409473adc2fc6943a2512eaa2ec839ad2a028e9deb279f80bf0 php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 7cea25f87cc8f844e6ac99b5b8d2ca81bdf808d1d4c8132e1ea7cba9f50497c4 php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 0d9e5482e5cb6caa9054e5793c05e8d592d3b0a04e76a517733cbe026d0974d1 php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 66ff528ec4a5b1aa6fed47db1db83f29780bba4c16038bd5c56bcc9df860bfdd php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 691eb432e7028de3045e82e2dcb3b4007162929339549e79a536bae430a317c3 php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 0315cc6b94a7162376efb6ff28b7cc044cd1cf37fea33c76c134dcf72ce9dac4 php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 01553209de776711b1732f327a948f1d6068845dd7646b8f09ba5edff2cc342e php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 4fa276f9699b567fe183cee3c0e638b8e4feb9815777fcf38cb82442d12adbb4 php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm cd4a2185154a768bced3c1e2b9d74ef84bc31e5bca336266588881927ec53eb2 php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 3fa7a9f09d207f503b1794160f83959fa310a3394ff69de295a9683c380d7bba php-process-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 45fef19bf9536d4f6ef1a0bcd620c14eb31e53d6fc126cedb0c81d181103b8a0 php-process-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm c1f4aaa3e13463e43611a347d63ddc24abf68ff6f6d4e9a4a7ded41d5a7b1706 php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 35614a2505a22c0facbd816c23b255637e05a375243a3b44e8357023f4a2b1be php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm f284cb38a2a504d851d3eaa8250967d6c49568a7717f1190ae28cdfb136742aa php-recode-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 9f7cbbf9a3b19c89d4c5ca24ba58f9d7a46c4aaadcc364083e2417510afbefd4 php-recode-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm d40f9b41a188fdf1b86be01404c78ec1a9f105a73c412503b2a47a509e95790b php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 6b07ce92d005afc42786523e23e5ad632827c0db3fed742a8c71128bfa71a8cf php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 7d0dcc228cb6eb897aa0da269259312a0a02dbb23b8af006e42aa2195bde8000 php-soap-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 19293bd267705d2e3f5053787860dc6c8ec699668f3d8f51af700fe6ca619042 php-soap-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 08c2280c02ab21c4c8b1177a40983ded358f45492e3ba3cd835891d47bef74e7 php-xml-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm a1a4967e9b30cf916c3fa63d080a67ba615d2c5b58ab923a72b7da807d71e2c4 php-xml-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm 6c218e44e8ba6b087e0f696d95690d891e7898955aa4e8862233b3bb0c2cee6b php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els10.aarch64.rpm 317b557ae6c5e04aec6c6692a254d52d81e101c7a17732bddffd08e30c9a712f php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els10.x86_64.rpm f3dbb6fbf24be60f4aba222a7d624d3e726cc49cdced2d2df5493cd100a61c17 CLSA-2026:1791323340 TuxCare License Agreement 0 - CVE-2026-19445: look up the SNI callback's SSLContext from the SSL connection instead of a borrowed pointer, fixing a use-after-free when sni_callback switches the connection to another context - CVE-2026-19553: warn when SSLContext.wrap_bio() is called without server_hostname while check_hostname is enabled, and reject server_hostname/session in server mode Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-19445: look up the SNI callback's SSLContext from the SSL connection instead of a borrowed pointer, fixing a use-after-free when sni_callback switches the connection to another context - CVE-2026-19553: warn when SSLContext.wrap_bio() is called without server_hostname while check_hostname is enabled, and reject server_hostname/session in server mode

0 tuxcare-amazonlinux2-els python3-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm 73e833a67dc4a48e06cb621a9fccf6cdd448c5741702af4ffd662cd4b6944f38 python3-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm 9b6784f2ae487101cd1c18ca12e890e74c80e8908c485bff743e8b2688dfc2b0 python3-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm 2aae646caae0a773b5ec7fb874c92737a1bd93f07eacd76827900351943d9dff python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm 2717b7d40769e07fa2df7d09fd12f9b68c33161262a6f287cdf291711876cec6 python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm ded9d74bfa126463186c7d33bd432653e97e4a20ff4d64c2cf4136ce256cc9a6 python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm 0d5d074091265a8bb58aa4298ddce035ed84278ed728309f99737dbb3e6a37a5 python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm 315eef572e67946bb62ab64a74a1e47dc2c4f92aed0d4651c4a73a803dfd549f python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm 3837c69a1a1f2afcee47097355ab99ec5ad21c31d1b7a5ac2132e46400015b05 python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm 6970cbee25fbe84cf1abe392487e74aaf34a058eca81532977749209bb825d7d python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm d1555e765ad8490f304930b59c2087c629a56a8d912386f80d6438fff38f342d python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm 92cd04f0db89fb0807686b317b413332c2a4ecd9d37b0c20597ffc8b0d72d7d0 python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm 11d47b0de4727d71f4d9c84f1c107120bc233b24e8a07f0b062781853df14225 python3-test-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm 168feb5377f8a8c4161591cb8e55e62a01d0ef014b43392f9cd9bca372f53d8d python3-test-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm 6f0ebe759697c5e9dd67e74636d9a04a87235f1118f5d87e6cf4c882970bc5ac python3-test-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm 5a967f59102f4448401f68ebee9381946a5ab25ac5cda714dbfc86836a1b8302 python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm b22efa7b74c0944ff789579a1e9ab20d3b29ff8b2f25d3ed7a25e3dabb19f991 python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm 629d774038e84b94a51115bd0506c5eacefa18cc516b5a142f79efa122dac072 python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm 42073092409eb6e34519dfadffd7bca919d86c630f26164ef48d7bac087a5ee9 python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els3.aarch64.rpm ffe2fe17550ebd1fe05048e9f2c3207f268fb5e68f5d7caf89e937623e34ae5e python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els3.i686.rpm 2040fe3a33b4a01c6625d51603901fc8318309d03b2748aadc7a7c776978088d python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els3.x86_64.rpm 92a9f52cc15c49aa7dfd1daa95c2e2fe5e97497e319bfd91cc4c4eb24bdc775a CLSA-2026:1791325657 TuxCare License Agreement 0 - CVE-2026-76641: already fixed by Patch119, which includes upstream 98599f6d (correct dtdCopy sizing of defaultAttForName entries); declare it Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-76641: already fixed by Patch119, which includes upstream 98599f6d (correct dtdCopy sizing of defaultAttForName entries); declare it

0 tuxcare-amazonlinux2-els expat-2.1.0-15.0.7.amzn2.tuxcare.els10.aarch64.rpm c3f89048bb7a024639b97bdc0c9e640f347ba03c746404d0b4c77304189c0c26 expat-2.1.0-15.0.7.amzn2.tuxcare.els10.i686.rpm 0a37f4d022defed48c3733c136781cb43564bb35cfb9f759a848196401ee3511 expat-2.1.0-15.0.7.amzn2.tuxcare.els10.x86_64.rpm 45b655249892e4a9780c89695ee46af2f9e23c80b8c5307dd664e39297f81bc2 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els10.aarch64.rpm bf35f6f45694ba8dca5673d86409795ec53504e9845177503e64b4a5c1bb6652 expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els10.i686.rpm bb512d6dd12707f38cb40a7ec7d79e5bbaf39c6ec356241cf1fe0381fee97a4f expat-devel-2.1.0-15.0.7.amzn2.tuxcare.els10.x86_64.rpm cdc3f8655c4a8cabe021e5098e64a3764bc7172425f779f7206fb909cd92b719 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els10.aarch64.rpm d7852aad8feb3137e0417e70f514b351fbde75ccda1be6bdf7bf8d72febe41ec expat-static-2.1.0-15.0.7.amzn2.tuxcare.els10.i686.rpm dd43f4bf8ee049c87e69449c3ee06a04d3818dc13aa8f5b72e59328a00be3604 expat-static-2.1.0-15.0.7.amzn2.tuxcare.els10.x86_64.rpm 316edc3ef96c68529c89f7ebc92650f4078f9feafe8175112c3a66828345fbc9 CLSA-2026:1791414578 TuxCare License Agreement 0 - CVE-2026-56153: mod_charset_lite: bound the partial character buffer in finish_partial_char Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-56153: mod_charset_lite: bound the partial character buffer in finish_partial_char

0 tuxcare-amazonlinux2-els httpd-2.4.68-1.amzn2.0.1.tuxcare.els2.aarch64.rpm f0632c876c54e526a039d3f5909605ce756d7d70c0acb348e57fbe887b3e8592 httpd-2.4.68-1.amzn2.0.1.tuxcare.els2.i686.rpm 0c8999bd44ad66ea8a0a055ac9f0320a390351d8875e828cd15f9fd36d82189c httpd-2.4.68-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 9c93fb33001c98b8fcdeaa0bd81cff48e6e43dedfe36c3ba0f03244bd3901b1a httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els2.aarch64.rpm 005249b2de1debec03098c80278d82db221c530440c051701f91a9d936dbbb13 httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els2.i686.rpm 62a74ba1fe0d45c85c6c417b9b17737bb9ed2cab8c0dee6845a7fc2c4227eedf httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 9b12a7263b1e6c9c1012727392b43a9f9936708f305da3ac23ade9759822ec5e httpd-filesystem-2.4.68-1.amzn2.0.1.tuxcare.els2.noarch.rpm 77ed3aed5c8ef35c49e18aa575a4f087bb9ec12554bef57b2f49b7fde4423b3a httpd-manual-2.4.68-1.amzn2.0.1.tuxcare.els2.noarch.rpm d201eac53d3f7ee67c8989cd9a6a5dce3d880c009fd8947139163b4e74b82f13 httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els2.aarch64.rpm 8a9603f35d971f224cdf3c16318f6593821d2fb6042ea4a36ac5ca44f697e20d httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els2.i686.rpm 6f15f0878b03fc139f2e6c630e9c727afa59cc6e6929e0528336530a82b7cd08 httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 0671e825aaaaefb9d751e093ba378a33e4854320cc91a36481e08acb4c726164 mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els2.aarch64.rpm cac0942e7c9dd5a764044211a35f8992f66964ffe51a766a535017611f66ef5a mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els2.i686.rpm bfa35a07d4d19fc016755a2fe5e3c8b00a39174e5449596cce9df38e1a7533b6 mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 8ff6d25eeef03f2b1fbf2a282a8c29f9ada61c65d028390302a061d25633ba90 mod_md-2.4.68-1.amzn2.0.1.tuxcare.els2.aarch64.rpm 83f262cc4620776c93bfcb8631860cfec40b11ecdd7c14b69f9031e1d0ace473 mod_md-2.4.68-1.amzn2.0.1.tuxcare.els2.i686.rpm f197e03deb833b77015677f0738df0349826faf6485b16c09d136b9a02f542f9 mod_md-2.4.68-1.amzn2.0.1.tuxcare.els2.x86_64.rpm e68cfb8dc4045b25b88b9146b30bd01820cacfc43c70cce6513923a4546d792f mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els2.aarch64.rpm 248e21f0009e3ebcf45a2c16b2d9bb4e98956e2c4d23818d8331742ea0f8452a mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els2.i686.rpm 233949f92765046271fe95b25b97499a33f22ff2cb9021025d52b9d7c98e238d mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els2.x86_64.rpm f315c7b7cac95f5a3dd4bb458bab1b99c1d04406754c0a367f42d730b5988d36 mod_session-2.4.68-1.amzn2.0.1.tuxcare.els2.aarch64.rpm 82f5b50df6348ec007785cdf7e0967f6878f23afff93b418d44d865a73d174a1 mod_session-2.4.68-1.amzn2.0.1.tuxcare.els2.i686.rpm 83f8b2b2241f37df0684c0db1737e4c4b846babe8173379b8c8ebb12786dd957 mod_session-2.4.68-1.amzn2.0.1.tuxcare.els2.x86_64.rpm b363571015821b4c9285c64ae7e609c49860233c0c06ff03b3cfd93f3dc20106 mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els2.aarch64.rpm 77f4f9e80150bc83d22f3e97c7350efe13c905395c3e94b07bd7093b81089637 mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els2.i686.rpm e9594c2c971fc7bfb11634893a55dac3916828eaf076e7846da976db780cb073 mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els2.x86_64.rpm 69719bebbe260098b41b02a44a3c731f6ee828bfa1e1878295db0873808aba64 CLSA-2026:1791465008 TuxCare License Agreement 0 - Bump up version: align the release base with Oracle Linux 3.1.2-12.0.5.el7_9 (NVR alignment only, no code changes) None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Bump up version: align the release base with Oracle Linux 3.1.2-12.0.5.el7_9 (NVR alignment only, no code changes)

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.5.amzn2.tuxcare.els1.aarch64.rpm dbd7bf10a03b5915af12c0c3d6c00104f65189a6f559e30ccbde60a87f6577be rsync-3.1.2-12.0.5.amzn2.tuxcare.els1.i686.rpm 5bb5a4425adc1c9e6522a1ef0b80e1347b812827faa7cafcb29817e7a597fc7a rsync-3.1.2-12.0.5.amzn2.tuxcare.els1.x86_64.rpm 55578b730e48d06cf04b0d38f5d0d35ffe990a008965b596db26d2b02e6cb31b CLSA-2026:1791487185 TuxCare License Agreement 0 - CVE-2026-9669: record the libbz2 error code on BZ2Decompressor and refuse further decompress() calls, so a decompressor reused after an error cannot resume from an invalid state and write out of bounds - CVE-2026-82049: resolve a hardlink's target with os.path.realpath() so extracting a hard link to a symlink cannot relocate that symlink and expose or modify files outside the destination - CVE-2026-11940: re-filter the fallback member when hard link extraction falls back to extracting from the archive, and filter it under the link's own name, so a hard link to a deeper symlink cannot recreate that symlink at a shallower path outside the destination. Carries the CVE-2025-4330 fallback-filtering prerequisite (LinkFallbackError and makelink_with_filter), which this package did not have - CVE-2026-87910: skip the fallback member when the filter returns None for it under the link's name, instead of ignoring that result - CVE-2025-4435: skip a member the extraction filter rejects instead of extracting it unfiltered when TarFile.errorlevel is 0 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-9669: record the libbz2 error code on BZ2Decompressor and refuse further decompress() calls, so a decompressor reused after an error cannot resume from an invalid state and write out of bounds - CVE-2026-82049: resolve a hardlink's target with os.path.realpath() so extracting a hard link to a symlink cannot relocate that symlink and expose or modify files outside the destination - CVE-2026-11940: re-filter the fallback member when hard link extraction falls back to extracting from the archive, and filter it under the link's own name, so a hard link to a deeper symlink cannot recreate that symlink at a shallower path outside the destination. Carries the CVE-2025-4330 fallback-filtering prerequisite (LinkFallbackError and makelink_with_filter), which this package did not have - CVE-2026-87910: skip the fallback member when the filter returns None for it under the link's name, instead of ignoring that result - CVE-2025-4435: skip a member the extraction filter rejects instead of extracting it unfiltered when TarFile.errorlevel is 0

0 tuxcare-amazonlinux2-els python3-3.7.16-1.amzn2.0.29.tuxcare.els4.aarch64.rpm e8e9c3b2b4abf8655b63a0b3e072864b50198d03eebba56024c12216c722aa32 python3-3.7.16-1.amzn2.0.29.tuxcare.els4.i686.rpm 3d71c4720641bb951e8703d55e5ad27b7c64ad57a05bb8f4a02b8d6e808bc152 python3-3.7.16-1.amzn2.0.29.tuxcare.els4.x86_64.rpm 19a1c23c3baf52698e203d5befb93fcb4564cf715e7f6d0dc36b515b4ac3bdd1 python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els4.aarch64.rpm 4101234f3fa76d6a09375e3dbdec1345aec6b27b72521ee050862384b455f47a python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els4.i686.rpm 319bc0a30b3323f35d4ace6d716f59fe670cde818677f7e7243f12bdf77fbf95 python3-debug-3.7.16-1.amzn2.0.29.tuxcare.els4.x86_64.rpm e1323102fb50ad347702cc6f014100d53edbe43228b5a901640dfcf9a840bc04 python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els4.aarch64.rpm 06e758b187b7016f5758291556feaa841f7a0a304764e2f5eff8cf8ed34aa649 python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els4.i686.rpm a2bb0a50e19f09878021421ed802aeab192f41e396582dbf3c76f346ca953769 python3-devel-3.7.16-1.amzn2.0.29.tuxcare.els4.x86_64.rpm 117759873f6411e45ab6ae2fa8f8c794d01b37f461e6d055e53f07931fbf43b4 python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els4.aarch64.rpm 7335ddba0722fdd5eef9c132f26bc504ba6f36ba9e1facef11fb1ab3d49e22c9 python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els4.i686.rpm 0184f1046eec1e295f77e780bc2e4d88fbff8cac99442990d6ebe012480d3054 python3-libs-3.7.16-1.amzn2.0.29.tuxcare.els4.x86_64.rpm b277d9193f908ae1014ecd300a517fd08347f728e9f9630e9b3d58a49faf7bfb python3-test-3.7.16-1.amzn2.0.29.tuxcare.els4.aarch64.rpm 4309d9242562b8a2f66f2f378df74b64e8d1b4c91e349eb0933ebcad0043b013 python3-test-3.7.16-1.amzn2.0.29.tuxcare.els4.i686.rpm ade260694820dc4b9e7d5ebf59e98a4fbb700b59525f27c08b35b2e94449de46 python3-test-3.7.16-1.amzn2.0.29.tuxcare.els4.x86_64.rpm 27e384e7e9376da96e695933c370099f0db77c7534de5748fad3d8edd50e63a7 python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els4.aarch64.rpm 351ec66ef767840558c11f3017ddb90e4c967598c0b30bf279495aebcf668618 python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els4.i686.rpm 58b43611538562f749e8dbc1c13db91c260ed9afb93e06b96ae036b227873f76 python3-tkinter-3.7.16-1.amzn2.0.29.tuxcare.els4.x86_64.rpm 56e73b33aacbb4b07c615da2901d29ad3d9679ece5648fb0485656704a094535 python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els4.aarch64.rpm 765b82086e5d754d47e4521ea78839b4eade5b50c053bb5bb5e02aecf1ed11eb python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els4.i686.rpm c27cbd859f86ca86e1c4a6ae3d94ea99b4d41991896dea1de9f2ad076d264d9a python3-tools-3.7.16-1.amzn2.0.29.tuxcare.els4.x86_64.rpm 345b14de2cfa078421bee95fd8ff63699bc84e78a2ac64e308dfe54f9ac72efd CLSA-2026:1791385437 TuxCare License Agreement 0 - CVE-2026-53802: open the daemon secrets file, the client --password-file, --files-from and the --filter merge / per-directory merge files refusing attacker-planted symlinks -- confined beneath the module root on a daemon, owner-trust walk otherwise; getpassf() fstat()s the opened fd, not the path Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53802: open the daemon secrets file, the client --password-file, --files-from and the --filter merge / per-directory merge files refusing attacker-planted symlinks -- confined beneath the module root on a daemon, owner-trust walk otherwise; getpassf() fstat()s the opened fd, not the path

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.1.amzn2.tuxcare.els17.aarch64.rpm 05ce8889fd06e7019f5f16e68800f8912f438d89b7b7281cbc279f7473612b62 rsync-3.1.2-12.0.1.amzn2.tuxcare.els17.i686.rpm 38f4784a45f1cbc9d36810a1f5959a39ecd0b5cda78808013a3fc0008f273c9e rsync-3.1.2-12.0.1.amzn2.tuxcare.els17.x86_64.rpm 982a165d1b0920d147fb4e10f0692cdaec35eaf63d83fd6fa7c31297852ed4b0 CLSA-2026:1791551804 TuxCare License Agreement 0 - CVE-2026-63292: mod_vhost_alias: bound the interpolated path in vhost_alias_interpolate() (stack buffer overflow) - CVE-2026-56154: mod_rewrite: fix use-after-free in lookup_variable() with %{LA-U:HTTP:...} - CVE-2026-46729: mod_heartmonitor: validate body and query in hm_handler() (NULL pointer dereference) - CVE-2026-56449: mod_proxy_html: do not dump content in pcomment() (out-of-bounds write) - CVE-2026-63686: mod_xml2enc: fix NULL pointer dereference in xml2enc_ffunc() on charset conversion failure - CVE-2026-63718: mod_proxy_uwsgi: fix Transfer-Encoding response smuggling in uwsgi_response() - CVE-2026-73636, CVE-2026-73637: mod_auth_digest: fix one-time-nonce replay and authentication state use-after-free (upstream 2.4.69 merge); AuthDigestQop now accepts only "auth" and RFC 2069 requests without qop are rejected Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-63292: mod_vhost_alias: bound the interpolated path in vhost_alias_interpolate() (stack buffer overflow) - CVE-2026-56154: mod_rewrite: fix use-after-free in lookup_variable() with %{LA-U:HTTP:...} - CVE-2026-46729: mod_heartmonitor: validate body and query in hm_handler() (NULL pointer dereference) - CVE-2026-56449: mod_proxy_html: do not dump content in pcomment() (out-of-bounds write) - CVE-2026-63686: mod_xml2enc: fix NULL pointer dereference in xml2enc_ffunc() on charset conversion failure - CVE-2026-63718: mod_proxy_uwsgi: fix Transfer-Encoding response smuggling in uwsgi_response() - CVE-2026-73636, CVE-2026-73637: mod_auth_digest: fix one-time-nonce replay and authentication state use-after-free (upstream 2.4.69 merge); AuthDigestQop now accepts only "auth" and RFC 2069 requests without qop are rejected

0 tuxcare-amazonlinux2-els httpd-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm 428d20b0a46c56ba93ea341e16f33b65899da7af676e1c36e1e813a0e7530e30 httpd-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm ad21cc30c2cf75d452aa99eaa698b3b4b58f83cfcf20e2d5be06d42ddd9771b3 httpd-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 500584ea34733f9f71d57a35042cbfac5d61b156b22cd9079edf247ee85c36d0 httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm 10f769e2b199aeb8e8d89cc428d720ce2361d3cc13b58d9a5af83a8db1e5baf3 httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm 84a3c9df3193a28559b3de9831eba47099cf1cacb2b9d0abd9ab6fb543a5636b httpd-devel-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 844738437d5ec78d3c5ecfca266da4f72aba68edadb711567e19479fea50d133 httpd-filesystem-2.4.68-1.amzn2.0.1.tuxcare.els3.noarch.rpm d1f88a35168a3f5321e1616d827affb9ac1c8fd8769fda84dc1252330640e3d1 httpd-manual-2.4.68-1.amzn2.0.1.tuxcare.els3.noarch.rpm 27b8b21472c4acd37bb8b612d0ebb57a79119a4c7e3229f1f84390bb355f8c03 httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm 1aac15463f4f89e93c4620ef3c92459b64448bb55ca22a92c7060ac13c5aee15 httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm 95bb4e853ccc53e039ec87181370de8f87d5fb0ab1c2560c2db25adc23dab234 httpd-tools-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 82d06a793a8b9ac2e687a631690bd57e15068279d8c873cf5e5ee82807e81ad3 mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm 4c51b91dbbbd072e51acbe88abe2e6e2a4951093128d871c52ccf875048db1a3 mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm 1605efb432a4d26d0f38ede36095e3bac99b08a7713d8a4cb1e66cf5bfc19069 mod_ldap-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 74f65d8fcb5211c1f191c61535136652d1b7eecf463ce0b09694bc52c7f25d0f mod_md-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm bdd3884ec5f30b8baaefdb3031cd7fb7e0635c6f00e8e58be2b861672dbfe449 mod_md-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm 500a2377090de64868b558e06c48023f3f1b8ac0568bf204a24a6b7596f061df mod_md-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm c7b6119d81685d1503b0597139ec2f7bc5450edb6f9fe1a36616fa1255a0d614 mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm 26dc0dd10ca07b37da7a5c8e011753963fab2d8fd8bc7934c4d67d7859a74f9d mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm e37318c68b0f084a560ad224e88217bfcc62b7c1a73cc1a544af099263420631 mod_proxy_html-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 2cda13059ff555243a08d332bc9e0b79e22700ee760a555a9f1fd5fd2c507282 mod_session-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm dcb784b2d7a546e9b07b21be63c516a6531362f1b90eeaaac601f03c8008edfc mod_session-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm 0fc1dfc5c3e42b2f6e1a8f6492c53b5f77c3634de1c516c2e51b66ba442da0b9 mod_session-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm ec11a9935cbc5456e2c4d161c502a9a55be2ae8c45294e5a53d885bf070d3698 mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els3.aarch64.rpm 337a328cdca047d660512e35cc41e3006b9bc027c77a7518e7f091374c0df45c mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els3.i686.rpm 9656adabb8a738e4e918bed46907813e21fad2fc9dc7dd7a419c6320c2c10edd mod_ssl-2.4.68-1.amzn2.0.1.tuxcare.els3.x86_64.rpm 2bb6f3aff50c301c47a9c3095053d1bab210bbbb1065a20618633a6240cbbc6b CLSA-2026:1791971719 TuxCare License Agreement 0 - CVE-2026-53801: extend the fix to the sender outside a daemon: prevent it from listing a directory outside the transfer through a path component swapped for a symlink - CVE-2026-53797: prevent the sender from reading a file outside the transfer the same way - CVE-2026-53800: prevent --remove-source-files from deleting a file outside the transfer the same way Moderate Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53801: extend the fix to the sender outside a daemon: prevent it from listing a directory outside the transfer through a path component swapped for a symlink - CVE-2026-53797: prevent the sender from reading a file outside the transfer the same way - CVE-2026-53800: prevent --remove-source-files from deleting a file outside the transfer the same way

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.5.amzn2.tuxcare.els2.aarch64.rpm 9bfc96e83f1260158d6ac0d01e2e8cae952febcc3d696d4ee6fda3173fbc48d8 rsync-3.1.2-12.0.5.amzn2.tuxcare.els2.i686.rpm a0874a80e93a57a8387ef0049cdf133ba9cfc92a754abda5d58c5c102ea3f2d5 rsync-3.1.2-12.0.5.amzn2.tuxcare.els2.x86_64.rpm ac011cb84f2b309afb42131dc72d582aa554a1d266ecb740db157907461db8a7 CLSA-2026:1792060459 TuxCare License Agreement 0 - Rebase onto the 1.8.23-10.amzn2.3.9 vendor source, which adds CVE-2026-96512: sudo now ignores a user-supplied TZ environment variable when setting its own time zone - Retain the TuxCare fix in plugins/sudoers/logging.c making a privilege-drop failure in send_mail() fatal before the mailer is executed - Retain the TuxCare fixes for the temporary-file race in src/sudo_edit.c and src/sesh.c, and the constant-time password comparison in plugins/sudoers/auth None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto the 1.8.23-10.amzn2.3.9 vendor source, which adds CVE-2026-96512: sudo now ignores a user-supplied TZ environment variable when setting its own time zone - Retain the TuxCare fix in plugins/sudoers/logging.c making a privilege-drop failure in send_mail() fatal before the mailer is executed - Retain the TuxCare fixes for the temporary-file race in src/sudo_edit.c and src/sesh.c, and the constant-time password comparison in plugins/sudoers/auth

0 tuxcare-amazonlinux2-els sudo-1.8.23-10.amzn2.3.9.tuxcare.els1.aarch64.rpm c831328395961f90651e405ac5d0b365b40c13cc306433fbdea49a0c2d2b6d5b sudo-1.8.23-10.amzn2.3.9.tuxcare.els1.i686.rpm 94a8b5775abf26ae6079a7d5bfbbd78a7d8390812877533c9a716c7ab89e57b3 sudo-1.8.23-10.amzn2.3.9.tuxcare.els1.x86_64.rpm f47d911e211a1dded73c31f3a899b184f148eabda49ee719bbf58ef03c2d53b7 sudo-devel-1.8.23-10.amzn2.3.9.tuxcare.els1.aarch64.rpm 3c738299ee6e848f5ba9014f70535950a914abb99bdb8d0ddc383790ed904402 sudo-devel-1.8.23-10.amzn2.3.9.tuxcare.els1.i686.rpm a82b761c2b14fbadb8541e7d7c5b1d4a8dff6541debbc44c86214dd9827a8e91 sudo-devel-1.8.23-10.amzn2.3.9.tuxcare.els1.x86_64.rpm 80fe47d2415a376adc01cb5f8f7886695e6e39b0ab6f77f840706302620e2090 CLSA-2026:1792070205 TuxCare License Agreement 0 - CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-107890: scheduler: NULL pointer dereference on repeated IPP group tags - CVE-2026-107885: scheduler: incomplete jobs could be held open indefinitely, exhausting MaxJobs

0 tuxcare-amazonlinux2-els cups-1.6.3-52.0.1.amzn2.tuxcare.els2.aarch64.rpm 287db055ef5246cf50b7692102b808657a54ae759bc6770e960f25c81758bb49 cups-1.6.3-52.0.1.amzn2.tuxcare.els2.i686.rpm 5b65a0f391dd2bf0f5aa6c2ac613a1b1284fadf7588f270ad05b57b96eb8f7e9 cups-1.6.3-52.0.1.amzn2.tuxcare.els2.x86_64.rpm 615f328e0db04dedd85fb4988de9c7257b12388f12fa13601b2f634f631df737 cups-client-1.6.3-52.0.1.amzn2.tuxcare.els2.aarch64.rpm 7d0b0e46e5192a4b49d55ba9f71c545cc807be4c20bdc638fc353da1cccf5363 cups-client-1.6.3-52.0.1.amzn2.tuxcare.els2.i686.rpm c97a46757267acc8675c0d4983bfc4215ae7b30362f5a39c892b7df54cce5912 cups-client-1.6.3-52.0.1.amzn2.tuxcare.els2.x86_64.rpm 072809bc602427181d4eca2528c07f67d84f4a769fbcc751edc65bfb5d4da621 cups-devel-1.6.3-52.0.1.amzn2.tuxcare.els2.aarch64.rpm 6a95cad8467856624768f242c1ef82a6184a5efb77a6c8213ddfac7aee7f1890 cups-devel-1.6.3-52.0.1.amzn2.tuxcare.els2.i686.rpm 2a3fb5528f5323c31c03d06457940d43babac24be97de6aa12a721bb9fecdbe9 cups-devel-1.6.3-52.0.1.amzn2.tuxcare.els2.x86_64.rpm aa2e517460d74a24aed26701817ae2469c90443def8dbea3d03ea828dbbece28 cups-filesystem-1.6.3-52.0.1.amzn2.tuxcare.els2.noarch.rpm 8133508556f417747b8a12643a380d1c8f4a9309083a7ce18e5e04f5c92ea081 cups-ipptool-1.6.3-52.0.1.amzn2.tuxcare.els2.aarch64.rpm 5daa90d8e84b15df12872e8f15184dd44d18ed15408c95b228950b8c8488b29e cups-ipptool-1.6.3-52.0.1.amzn2.tuxcare.els2.i686.rpm c7ab27bf116eb75630e2517b4e66b9fb57ca7a8d0b5ec65397ccb60618624153 cups-ipptool-1.6.3-52.0.1.amzn2.tuxcare.els2.x86_64.rpm 8b63d4af5f86776963c1c86888c9095260542c817efbf481177a79cdd72dc524 cups-libs-1.6.3-52.0.1.amzn2.tuxcare.els2.aarch64.rpm 4dc4f514e14e485291808be1d6fd4f3a748ab3f76332368114018c41d4a0fcba cups-libs-1.6.3-52.0.1.amzn2.tuxcare.els2.i686.rpm 8b02cdcfdf17ad03c4a6da401f046a0f6a0e3ae246eed4c4d050327a78289b62 cups-libs-1.6.3-52.0.1.amzn2.tuxcare.els2.x86_64.rpm d24982c76dc4363cedc3607ec48ee13849ffa8911a3b427f645da9e1b9c170ea cups-lpd-1.6.3-52.0.1.amzn2.tuxcare.els2.aarch64.rpm 9439730a8ab64d87e2e000561b5ec7323ed559d42d427671884904f341586a6b cups-lpd-1.6.3-52.0.1.amzn2.tuxcare.els2.i686.rpm ab9e7433d35a7a29298476471be6d94a5a060e3d7a445901d599bd49395995fa cups-lpd-1.6.3-52.0.1.amzn2.tuxcare.els2.x86_64.rpm 82175e80017ba6efd0373dd935efb9ea30cf5e1273e500d48ff792924fb08b1c CLSA-2026:1792072014 TuxCare License Agreement 0 - rebase to 5.16.3-299.amzn2.0.5 - drop the 2 TuxCare CVE backports; the vendor now ships their own patches for them - 1 TuxCare patch remains declared and applied None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 5.16.3-299.amzn2.0.5 - drop the 2 TuxCare CVE backports; the vendor now ships their own patches for them - 1 TuxCare patch remains declared and applied

0 tuxcare-amazonlinux2-els perl-5.16.3-299.amzn2.0.5.tuxcare.els1.aarch64.rpm 3a69e881896d9c90725ee7170c7e49f553dadfe4817d0f608066ef7a0c6170c2 perl-5.16.3-299.amzn2.0.5.tuxcare.els1.i686.rpm 8b5973a2acd9d1dc1124300a6ef1f16c3264977ae7fe3120b6cc68739e630d55 perl-5.16.3-299.amzn2.0.5.tuxcare.els1.x86_64.rpm da774e6dfdd9daab1bf725186d67bf6104452c775266419f016ae1f18b0ce2ba perl-CPAN-1.9800-299.amzn2.0.5.tuxcare.els1.noarch.rpm f619113517fbfce73372b646eafc9f49fc2a9fff166e350aae628763f4435707 perl-ExtUtils-CBuilder-0.28.2.6-299.amzn2.0.5.tuxcare.els1.noarch.rpm dceae3391403911726eb914f477f80d44e08f151d49dd682625616f9d1941fdc perl-ExtUtils-Embed-1.30-299.amzn2.0.5.tuxcare.els1.noarch.rpm 279e0d4149f683d50a42fb5b87276eded3278f0b9db426795a1553990180319b perl-ExtUtils-Install-1.58-299.amzn2.0.5.tuxcare.els1.noarch.rpm 21fa6d6d3d9331a744696d4b39f66f27da86b46d18bdba7771c428785a88c784 perl-IO-Zlib-1.10-299.amzn2.0.5.tuxcare.els1.noarch.rpm 2bbd509a5e88da7126337f7293b23feb785c23498c018c6395c172282e801677 perl-Locale-Maketext-Simple-0.21-299.amzn2.0.5.tuxcare.els1.noarch.rpm 8d2f0d55bd867f9b1c8e1f7a21502bf1d9b4e169bbea3b0310b1253349766862 perl-Module-CoreList-2.76.02-299.amzn2.0.5.tuxcare.els1.noarch.rpm d89060110ec254543f508c3ae02ffb86c7eebc14dc8b036f033494bea9f26793 perl-Module-Loaded-0.08-299.amzn2.0.5.tuxcare.els1.noarch.rpm b47965a6381638ff918699d95546275512eb221bbaaf4ef3bd0354aff908190d perl-Object-Accessor-0.42-299.amzn2.0.5.tuxcare.els1.noarch.rpm 67b3dd4b81b7ed53dc04cbfb2e0529e550713be917fe0e9b7f70b99edd6038b6 perl-Package-Constants-0.02-299.amzn2.0.5.tuxcare.els1.noarch.rpm 0b92b711caee2fbad17003d9425bf6d5cf5180832822883cee8ade59c3e91974 perl-Pod-Escapes-1.04-299.amzn2.0.5.tuxcare.els1.noarch.rpm 20a43f894a75aa5b5ce6d1c7dd024a3122e60ab13985056173933834c87b8659 perl-Time-Piece-1.20.1-299.amzn2.0.5.tuxcare.els1.aarch64.rpm 29903e8902d30331d9e275e08f24f7611d33971eddde104a5c447d1b49518338 perl-Time-Piece-1.20.1-299.amzn2.0.5.tuxcare.els1.i686.rpm cae36c6a00e1b8bb6942e706ae13c8e3157b206637346d488a3921f900c88c9c perl-Time-Piece-1.20.1-299.amzn2.0.5.tuxcare.els1.x86_64.rpm 8ee3ef216866a5c208fcd93ab02342e5b420cd67de3a5af6cf8fb8fc66f443d3 perl-core-5.16.3-299.amzn2.0.5.tuxcare.els1.aarch64.rpm 566fa9165f4ea3f2bd9dc779fd23317ffef5a731d7563915a529ab734ae5b08c perl-core-5.16.3-299.amzn2.0.5.tuxcare.els1.i686.rpm e35e05aa76448c2862946a7816237f325c591a8f7041423a36f5535ca6c794c1 perl-core-5.16.3-299.amzn2.0.5.tuxcare.els1.x86_64.rpm 068a23732adc9fdb327f9b4b098fcaae5906ca066c252396bcf392ef3be4dc62 perl-devel-5.16.3-299.amzn2.0.5.tuxcare.els1.aarch64.rpm 4d36a28edb3f70aefe81610e0091627bb4ee31042921011b34d4dbe74efbe57c perl-devel-5.16.3-299.amzn2.0.5.tuxcare.els1.i686.rpm 52ec15d202d63bce12d40b081b5c6454e7be183653e4f12e133c401f24cfd8ce perl-devel-5.16.3-299.amzn2.0.5.tuxcare.els1.x86_64.rpm d65b01d75a3560812629a2fa73ced3c118d62698d387f35231e84755b3541856 perl-libs-5.16.3-299.amzn2.0.5.tuxcare.els1.aarch64.rpm 6c35c4797d8b243d3258e14f1471285d205e489a014f48c80fcc1f2a2b79fae9 perl-libs-5.16.3-299.amzn2.0.5.tuxcare.els1.i686.rpm 5aa9533e098faabd7b2b39853e291cf06a01720608b3ef36dece2182cbb0acb6 perl-libs-5.16.3-299.amzn2.0.5.tuxcare.els1.x86_64.rpm 00af2213e832d79c06429270bca6c5a4b867fbee81f0965668753397e84c3bf8 perl-macros-5.16.3-299.amzn2.0.5.tuxcare.els1.aarch64.rpm 768b3464f1f34ce6b50f4a6c5cfd6cdf65e0d73223464accb1fcac1f64057ce9 perl-macros-5.16.3-299.amzn2.0.5.tuxcare.els1.i686.rpm 8c34ac4a7a4a5458bd1de81157dd0d400a1569205aab925037ad2e92756972b0 perl-macros-5.16.3-299.amzn2.0.5.tuxcare.els1.x86_64.rpm eaa1d1aed4682aa4c81490441c555c921682a6159f057183a2fd7e3959ee55f2 perl-tests-5.16.3-299.amzn2.0.5.tuxcare.els1.aarch64.rpm 54c1f69991b68fe4178c0f1c922e3d88b16da668c79d23fb7dcf86e4a7ae0742 perl-tests-5.16.3-299.amzn2.0.5.tuxcare.els1.i686.rpm 0afff139ce35670be9cd9200e17ae28fd0d980dc00fac8badc6618a1c72b1e95 perl-tests-5.16.3-299.amzn2.0.5.tuxcare.els1.x86_64.rpm d31f582664185cd9de5fbf3f224070e05bf8c34b20597b31b011fb4f6d92a4e0 CLSA-2026:1791218879 TuxCare License Agreement 0 - rebase to 3.5.20-17.amzn2.7.28; CVE-2026-61642 fixed by vendor - carry CVE-2026-47729: out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 3.5.20-17.amzn2.7.28; CVE-2026-61642 fixed by vendor - carry CVE-2026-47729: out-of-bounds read in the FTP gateway directory listing parser that could disclose memory from unrelated transactions

0 tuxcare-amazonlinux2-els squid-3.5.20-17.amzn2.7.28.tuxcare.els1.aarch64.rpm 2383b95cf707262f00e5423dad027bad8565d9aaa9912f9a0ab307ccd0c6cd2c squid-3.5.20-17.amzn2.7.28.tuxcare.els1.i686.rpm 0ca5ba0eac01e52cc0074f8d48132384bf9b805b50f1115e1e42aab4b97f8dd7 squid-3.5.20-17.amzn2.7.28.tuxcare.els1.x86_64.rpm f4da84da9e3b150aece4bfc4d031b53ba1b462f6d5edd55a8d5964b6b06bd5cb squid-migration-script-3.5.20-17.amzn2.7.28.tuxcare.els1.aarch64.rpm 22d031656ea933f19a975acbafdd6f44496ceeacf8d3a62389636fc9aa3ae89e squid-migration-script-3.5.20-17.amzn2.7.28.tuxcare.els1.i686.rpm 8b23919a29ca23ad2f4a88c75cd16540ecb138f5f4da008f845abb1170f4fb88 squid-migration-script-3.5.20-17.amzn2.7.28.tuxcare.els1.x86_64.rpm caaf1ac0920b07fd3168653d2a6fe9df27e149464c61e4c684276805ba9b1b8e squid-sysvinit-3.5.20-17.amzn2.7.28.tuxcare.els1.aarch64.rpm 0881e8f2ae137c3d96c87b5afc68f78081e2744cdea558d8be1ec2bfa2bfbbb0 squid-sysvinit-3.5.20-17.amzn2.7.28.tuxcare.els1.i686.rpm 7aac30568a218e152299c25cb5dd8bbcaaba6f7899889627b73092b584be18c3 squid-sysvinit-3.5.20-17.amzn2.7.28.tuxcare.els1.x86_64.rpm 86b9851e83961566e24987b584256a68b56d4f3ef1ec9e39e876ec6ff42020ac CLSA-2026:1792124835 TuxCare License Agreement 0 - CVE-2026-106555: reset the GSSAPI client state before each authentication attempt so a partial attempt cannot be reused by a later one (upstream 670510d1) - CVE-2026-106553: store delegated GSSAPI credentials only once the GSSAPI client was authorized (upstream 6f9cd19a) - CVE-2026-106583: disallow '$' and '\' in a command-line supplied remote user name (upstream 0c4c9a7b) - CVE-2026-106585: reject compressed payloads that inflate beyond the maximum packet size (upstream e0f85d83) Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-106555: reset the GSSAPI client state before each authentication attempt so a partial attempt cannot be reused by a later one (upstream 670510d1) - CVE-2026-106553: store delegated GSSAPI credentials only once the GSSAPI client was authorized (upstream 6f9cd19a) - CVE-2026-106583: disallow '$' and '\' in a command-line supplied remote user name (upstream 0c4c9a7b) - CVE-2026-106585: reject compressed payloads that inflate beyond the maximum packet size (upstream e0f85d83)

0 tuxcare-amazonlinux2-els openssh-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm a83ab016202b2c010f020262a4ae4886b39d1f6922ddb667dc8a85d142315721 openssh-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm ba601714161eda76ff67137d08bc1fcd8c91e124f1115053d9700e496451c4f4 openssh-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm 9cb2e13a5b87195fe3d46789b48e91672fe917a34bc365327f86fdb6396e42c4 openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm abdc5116dee457cb5fdfea29a340219b5124ed43b47a8b66e8f9b17f4cca3739 openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm dcf8c1f1926e50658e7aa127a73e079a822b882d4e86dc75e2d5ac5156a2f9ca openssh-askpass-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm b12eaf6cbd9271f2dc95e7aa850c2b9852f63efaaf7cbe379863304b45cb7950 openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm f93aa34cd880f28dd3af8f06545524eba3de18ccead4b2c228f0ed3ffc76737c openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm f213d2a8dc00bb8f2a7d45e229acccd0016d7c1363b47b64d2ac3a3a43c6cc0d openssh-cavs-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm dba88d630317c4a38b6cdaf236db8393da92778065f1f7f7775f43330f8c2f16 openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm b93ea08d536d5e32c7b4332f51dfa93d7675f679d8555d0b8fdb0967ebf1a3ed openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm 4abef7d8112c10882e7da1dd2c45d5aa4eefb35f2e11b3b04dffe0272fa77e5e openssh-clients-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm 01dd933dd31efc6c77fd956ffadd2ca9a12eec1116258152e2cc84e46318c20d openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm 4cde2d141386939c6507a40dfd924d1682a53a836241a8bba13601db75bfba8a openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm 114e1aafe0d3f31a61fe1e24dfd70824884af091501bac7db1237cb75f42986a openssh-keycat-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm 4a60561610da2e31f0a8e7a39a7d8b8b299a09f5c063d9fc8b8f9ff0856d8f6c openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm 03d02ba2a467c27670f845d27a6b4501f3c2ba10f2bcaab79290e51b898d0e2a openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm 108ad8b9b439e741653e30e9bde15411a71643e15990e93851b5edb1f1f4e186 openssh-ldap-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm 0b601d2d3bd07f144b9c9dc9f8ccfdd451edf87dec286dcf8d9489f069c0e8b4 openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm 4dfb6b01f01b5f2b2712015f727885ed67a234ea1e9464ee1415249805bc8a35 openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm ca89640715c45f365cdc94e7d5a71e7c7fdebfd50c186413a9102e2f0df419f3 openssh-server-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm de3ee9a7adddf4c4ba6f363f673a8f960945327129bfcdbda5269c9b8e132b23 openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els4.aarch64.rpm eb2f75f41a02e79061e9a66dfd5ee98166ebe1b9f46efea334b2ff457045e6bc openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els4.i686.rpm 136c31b0dabd7940e89650ae8dd001f775ca557d64df7d37435ff6ebaba8724d openssh-server-sysvinit-7.4p1-22.amzn2.0.13.tuxcare.els4.x86_64.rpm 565d5bbdcc06a6afdea5ec64f4d4cf8d9bc4e4c9bcbee792993c0b67db38c568 pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els4.aarch64.rpm 565e5a05053b8163e48dce9827ab485873eb12833a80f72e708f3b9bbe2f582e pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els4.i686.rpm 7014f493e1ab5cd6cf8aa90b5b699315f0d001d09613a32eb4c95e935517a323 pam_ssh_agent_auth-0.10.3-2.22.amzn2.0.13.tuxcare.els4.x86_64.rpm fadfed5c001801bcc194cb3c098ced438c22c5528e737627663cee54b52bd77c CLSA-2026:1792142243 TuxCare License Agreement 0 - CVE-2026-53785: create a transfer's implied parent directories and the generator's directory entries through the symlink-race-safe parent walk, so a symlink planted at a parent component cannot make a non-chrooted receiver create them outside the destination tree - CVE-2026-53783: complete the els3 fix, which was partial: add --confine-root so a restricted-directory server also refuses the names that arrive over the protocol (file-list names, --files-from lines, filter merge files), and have rrsync pass it; hand rsync a pinned receiver directory option and an existing directory destination as /proc/self/fd/N/. and any other existing destination as its pinned parent plus the leaf, so --partial-dir no longer discards completed files and a push onto an existing file no longer fails Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-53785: create a transfer's implied parent directories and the generator's directory entries through the symlink-race-safe parent walk, so a symlink planted at a parent component cannot make a non-chrooted receiver create them outside the destination tree - CVE-2026-53783: complete the els3 fix, which was partial: add --confine-root so a restricted-directory server also refuses the names that arrive over the protocol (file-list names, --files-from lines, filter merge files), and have rrsync pass it; hand rsync a pinned receiver directory option and an existing directory destination as /proc/self/fd/N/. and any other existing destination as its pinned parent plus the leaf, so --partial-dir no longer discards completed files and a push onto an existing file no longer fails

0 tuxcare-amazonlinux2-els rsync-3.1.2-12.0.5.amzn2.tuxcare.els4.aarch64.rpm 70c9c63b6b59aa6988fb35e06c6af0890e4bb548eb74a730acc9f0911de5f002 rsync-3.1.2-12.0.5.amzn2.tuxcare.els4.i686.rpm e9dd8e7b45bd6cc4122fcaf260844e4b8cae6d5035d97987c296dc4cf730a815 rsync-3.1.2-12.0.5.amzn2.tuxcare.els4.x86_64.rpm eb0e5aa5b1fea4941e1ceefd1b69bfd46613c15ac4fafdf8bea9b9226ca2fbc0 CLSA-2026:1792169729 TuxCare License Agreement 0 - Rebase onto vendor 2.56.0-6.amzn2.0.10, which fixes CVE-2026-0716, CVE-2026-12478, CVE-2026-12547, CVE-2026-12548, CVE-2026-12549, CVE-2026-15714, CVE-2026-66339, CVE-2026-77014, CVE-2026-77680, CVE-2026-102557, CVE-2026-102558, CVE-2026-102559 and CVE-2026-103399, and corrects the test code of the CVE-2025-4948, CVE-2025-32907, CVE-2025-32914 and CVE-2026-0719 patches for the libsoup 2.x API - Kept the TuxCare fix in libsoup/soup-cookie-jar.c that stops the cookie jar from attaching a Cookie header to a CONNECT request sent to a HTTP proxy for a HTTPS destination - Dropped the two TuxCare duplicates of patch files the vendor now ships under the same names; the vendor's copies are taken and carry the same fixes for the buffer-length underflow in soup_filter_input_stream_read_until() and for the strict chunk-size parsing in libsoup/soup-body-input-stream.c None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto vendor 2.56.0-6.amzn2.0.10, which fixes CVE-2026-0716, CVE-2026-12478, CVE-2026-12547, CVE-2026-12548, CVE-2026-12549, CVE-2026-15714, CVE-2026-66339, CVE-2026-77014, CVE-2026-77680, CVE-2026-102557, CVE-2026-102558, CVE-2026-102559 and CVE-2026-103399, and corrects the test code of the CVE-2025-4948, CVE-2025-32907, CVE-2025-32914 and CVE-2026-0719 patches for the libsoup 2.x API - Kept the TuxCare fix in libsoup/soup-cookie-jar.c that stops the cookie jar from attaching a Cookie header to a CONNECT request sent to a HTTP proxy for a HTTPS destination - Dropped the two TuxCare duplicates of patch files the vendor now ships under the same names; the vendor's copies are taken and carry the same fixes for the buffer-length underflow in soup_filter_input_stream_read_until() and for the strict chunk-size parsing in libsoup/soup-body-input-stream.c

0 tuxcare-amazonlinux2-els libsoup-2.56.0-6.amzn2.0.10.tuxcare.els1.aarch64.rpm b5d60b9bb2e39bd94e5dba591b76319a033d62b2cd8845884f182ba3898257d5 libsoup-2.56.0-6.amzn2.0.10.tuxcare.els1.i686.rpm 98ebe0ef8e7a5d8e900d0522abb8050186532e248c3a02b514a7afa2d9f78ce7 libsoup-2.56.0-6.amzn2.0.10.tuxcare.els1.x86_64.rpm 25c00bcbdea778681f5d1442fd4225856d77bfba2eb443a988f7ba684751c1d8 libsoup-devel-2.56.0-6.amzn2.0.10.tuxcare.els1.aarch64.rpm 9f71ef56e122dc298675cc3c1258d0158ce3f6db4ca858febc021e147a1d6105 libsoup-devel-2.56.0-6.amzn2.0.10.tuxcare.els1.i686.rpm bee84916f991e4f23c85343d270b162a0169e7e9561727ef02efcf90cebf3807 libsoup-devel-2.56.0-6.amzn2.0.10.tuxcare.els1.x86_64.rpm d64700179792ad4d3dcd129f0cc448b28dedbff2a95c95dfc4cdf35508b4951c CLSA-2026:1792171296 TuxCare License Agreement 0 - Rebase onto vendor freerdp-2.11.7-1.amzn2.0.17, which adds the vendor's input validation fix for ntlm_computeMicValue() in winpr/libwinpr/sspi/NTLM/ntlm.c - Retain all five TuxCare fixes: cliprdr cache locking in xf_cliprdr, the cache-read hardening in smartcard_pcsc, the NOTIFY_ICON_STATE_ORDER half of the RAIL async update deep clone, the 64-bit plane size arithmetic in avc444_ensure_buffer(), and the polygon async update points fix in libfreerdp/core/message.c - Renumber the TuxCare patches to 1097-1101; the vendor now declares Patch1096 None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase onto vendor freerdp-2.11.7-1.amzn2.0.17, which adds the vendor's input validation fix for ntlm_computeMicValue() in winpr/libwinpr/sspi/NTLM/ntlm.c - Retain all five TuxCare fixes: cliprdr cache locking in xf_cliprdr, the cache-read hardening in smartcard_pcsc, the NOTIFY_ICON_STATE_ORDER half of the RAIL async update deep clone, the 64-bit plane size arithmetic in avc444_ensure_buffer(), and the polygon async update points fix in libfreerdp/core/message.c - Renumber the TuxCare patches to 1097-1101; the vendor now declares Patch1096

0 tuxcare-amazonlinux2-els freerdp-2.11.7-1.amzn2.0.17.tuxcare.els1.aarch64.rpm 39e4842f75dafaa32d75e6f09a13454d52bff405651a58badc418ecb38600f25 freerdp-2.11.7-1.amzn2.0.17.tuxcare.els1.i686.rpm ec7682a58817054eb55929bebd29963bc8ca0682db6a83188f7cc2104cd1b3f9 freerdp-2.11.7-1.amzn2.0.17.tuxcare.els1.x86_64.rpm 6f8b184d7c46e7aae0d492901dee64d0b2d47409d3406a06f50188b880217ffd freerdp-devel-2.11.7-1.amzn2.0.17.tuxcare.els1.aarch64.rpm 3bf034e520d717bc6bcd1689946d40cb717d7316d6adb45234cf88af186e12af freerdp-devel-2.11.7-1.amzn2.0.17.tuxcare.els1.i686.rpm 07c99be984acb7264e07cd0f92463373d1549723fd134a3f0dd0358faf172178 freerdp-devel-2.11.7-1.amzn2.0.17.tuxcare.els1.x86_64.rpm 4c6fd28a23ab3495395b0f6c9c74ce4dfe11e078323f3673ec1f4e5d77b9a6c6 freerdp-libs-2.11.7-1.amzn2.0.17.tuxcare.els1.aarch64.rpm 7c8c1330f2d0e6d6a2a3333d1fabbcac75635eed8a294d32eba3e9e8ca10f5f1 freerdp-libs-2.11.7-1.amzn2.0.17.tuxcare.els1.i686.rpm 309864a85abddd5d40ab10f82088ec020fafe2128cae972ee614217edc6fdd87 freerdp-libs-2.11.7-1.amzn2.0.17.tuxcare.els1.x86_64.rpm 3861e646768a92498e3debb6476a74c9a1b20134cfa367dd0530619271d6ddf4 libwinpr-2.11.7-1.amzn2.0.17.tuxcare.els1.aarch64.rpm 1d350a175370934a8c7e863dbcbd7677aa7129457c4f864c1647aaf6af6487d8 libwinpr-2.11.7-1.amzn2.0.17.tuxcare.els1.i686.rpm c54d323f84cf1257a29551ef71121f56ca333b1a1f3bb220b6f39785424032ba libwinpr-2.11.7-1.amzn2.0.17.tuxcare.els1.x86_64.rpm f313dbbd1aebc6632cdb81b43229ec2c4026ba30635606ac5152c41bc923d8c0 libwinpr-devel-2.11.7-1.amzn2.0.17.tuxcare.els1.aarch64.rpm 3785b5ab24d45f2d531f97252ce791528e46c26da5080daeca9942b90a6c1b5b libwinpr-devel-2.11.7-1.amzn2.0.17.tuxcare.els1.i686.rpm efa8b314501780f143dc27e9118b8524299e1d71a1b1e3f3aa85f4dbe55f4815 libwinpr-devel-2.11.7-1.amzn2.0.17.tuxcare.els1.x86_64.rpm 9d2528d0433b39d7c52f78927a573a3b5138f388c79bccb4af0b0aedc7aa31b2 CLSA-2026:1792172823 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 9.11.4-26.P2.amzn2.13.19 - picks up the vendor fixes for CVE-2026-19033, CVE-2026-19662, CVE-2026-19666, CVE-2026-19941, CVE-2026-75029, CVE-2026-78301 and CVE-2026-80274, and the vendor's completed backports for CVE-2026-1519, CVE-2026-11622 and CVE-2026-11721 - carries the TuxCare backport in bin/named/client.c (process_keytag: silently drop additional keytag EDNS options) forward unchanged - carries the TuxCare RBTDB tree-pruning series (lib/dns/rbtdb.c, lib/dns/rbt.c, lib/dns/cache.c, lib/dns/db.c) forward unchanged; renumbered to Patch1032-Patch1036 so it applies after the vendor's new patch range - ships the vendor's refreshed root DNSSEC trust anchor (KSK-2024, key tag 38696) None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 9.11.4-26.P2.amzn2.13.19 - picks up the vendor fixes for CVE-2026-19033, CVE-2026-19662, CVE-2026-19666, CVE-2026-19941, CVE-2026-75029, CVE-2026-78301 and CVE-2026-80274, and the vendor's completed backports for CVE-2026-1519, CVE-2026-11622 and CVE-2026-11721 - carries the TuxCare backport in bin/named/client.c (process_keytag: silently drop additional keytag EDNS options) forward unchanged - carries the TuxCare RBTDB tree-pruning series (lib/dns/rbtdb.c, lib/dns/rbt.c, lib/dns/cache.c, lib/dns/db.c) forward unchanged; renumbered to Patch1032-Patch1036 so it applies after the vendor's new patch range - ships the vendor's refreshed root DNSSEC trust anchor (KSK-2024, key tag 38696)

0 tuxcare-amazonlinux2-els bind-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm e0ca3e13e4638ba213269834c73f151cd8bafe8e73fbc9fc21722e9b2edf1948 bind-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm c8ccd2335da200ecc94bbb94c37a456ed91ab85b61ae12403877093717d5b4f2 bind-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 285ebc5872c7e2b0c425e5c2b043216fa15519fe432a7f53ce248333fb918e14 bind-chroot-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm 0ba6d379bccb992830941354bf84f285396f8276fc6ca725f9a419d445aa180d bind-chroot-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 01388a4a8473bdec6e9cd1c7be43ad476b1d61a182f7033a159e802c98309557 bind-chroot-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 755cd5d6d043c6bcf2ee1e66bd90b2d5e85ba979513ee8f783abeb6d2f53ceee bind-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm 6672c4cb146737fa087e83ecc01c561621f2cb2e76fc5a68bd7c81422354e02c bind-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 9d827377f079896772c90087e93780aca10fd3f48fe2b4d036a5c173474d4584 bind-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm ab5e16ace22ddb1fdc9100a61f32300fa97bfd14d7d64bf05c8b279119650f06 bind-export-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm c36e7fd59953e6caf23f88650055e67b43ae6c6043a2c54daf2b1913ad970d48 bind-export-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 18635bc7bac51ff85baa8b750ee72b5a75e8a8efd23008a5d986f470a0fd6cfb bind-export-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm c3cbe1330ed8ceb90c4c69c406b43c6431d5264189343673185e3da7cc427a32 bind-export-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm cca5cc156bd00f60d610ff903b6e2151738f5267abccb14072b4a200defdc906 bind-export-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 8312b4129adb9324077e629958599067db21026ef7c71409f3f7cca420dd78be bind-export-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 46c8351e49c4e5377e5bc577eca9148ac1e7c8f47a42c0ad3e0feb5687fa9879 bind-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm bc5ecf0514e86a7c26adcb7937db9456ca9af577ea3adce7c677d4d47bcfd628 bind-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 78701a4ce77dc0c3791f696e54020c0b732c20622c496a4d11091e8afd510498 bind-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm a77118a581da647dd532ea9a89ac9c44802cf921f7fa33ca505f46762fe2eca6 bind-libs-lite-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm 7d1c64fcc42be8da5afc193b7526a0942759a010825c6d852cf471b7d5ae5b76 bind-libs-lite-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 09dd509c87666b1019aebce2172a083ac5da89f6d26826378f12d306afba146e bind-libs-lite-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 6f5bdb3a4f1ffbb82dd1d43af59ced94a58d25c4bf24cb13c356d824c9878dd6 bind-license-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.noarch.rpm 7f5237c6cf7e4e9c969f22058d401eeb77ba97f3624173d0a3cfbf136d6e6341 bind-lite-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm 58559cc759dc2197865184936b0b5278036cc2f1fc478a2fd2de94037f63495a bind-lite-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 77ef6b9df779d0b966aa42d1360cf5157adedc4e99dba27615714cf44d2abe50 bind-lite-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm d9a9d1c971d5e3e89432b7c3de3c665530dafdea48fceed95bdd4ff1f35bf7c3 bind-pkcs11-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm aa5847b46043cb1a9b7f1549d534e503d61197ae075b19109191ac9ec7536cef bind-pkcs11-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 8ca63d10a252b6eaf12799bf666971b2f24337f0dc739dc3088793ca4c81ab7c bind-pkcs11-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 783706488d9336edc214fe0d3265b592c5fe3b4d005ce0212ada313900e749d3 bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm 43a7a32e90db1adc468b6945f840edf63f2ba1fa152004337f64b80e42ec0cb9 bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm c107caa543fb875646d1519e7ee0ac67f528d78d8ce4f3ea9f52c6fbfd740fd1 bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 1d1c8ae2b45956dc86ad43ede7d57a2c8efbf84d4fdb06f4852a56f45182e1fb bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm b3e2a462bec71191785d38835fc29650cb3664d38c9778a9b73f3057744c8f9e bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 55e6411e339b932bae2f8ec222ddc52d41241da143faf3ab2d690e76b84bb6f4 bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 8bb5a3d2a5afe7e10289b4f87e9756e94e49e1053d9d07473e6b01e9ab2dbcad bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm c6d8ac76d976958c83a0ff78a03a41c14a6c58b0fefb666efb53d0c502302114 bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 87c67ef1c4b6b684c615dfe55a238b82330308f56134a8e8bcd4a7ff3d33f377 bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm b58bc8d89c4866e65cd695c935b6bcd9c6de8d2032c7e2424dec85215d98053c bind-sdb-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm 49e1569d36e7ec4a7146effe2582ab89d5f00e7212707dc85044bb3559673d81 bind-sdb-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 28c02465c2675011e082f05fd749dfa55f71bfe1a1fb1ba2ee98e431c27f7734 bind-sdb-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm c41317933d275f5aa372de9fc540d530d19fc271b55e13ecd4139427725a259f bind-sdb-chroot-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm 616e9b22594fa1d434f47d36f2229a4286e9dc46d4c6fab160fd525b488b0cfb bind-sdb-chroot-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 1ad6ba109c7a7d9dc0991501fdf07b99c13bec8ff6a12880b846444f1607cc99 bind-sdb-chroot-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 34604f58171ec66ac29fdd19bf916a6119a96102590a621c950dc7d8c77ac2b8 bind-utils-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.aarch64.rpm 7899b2eb47347b07d575f3540f8cc28b90fa8cd56efa10d77e42e356d91538ee bind-utils-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.i686.rpm 5fa211c0d93c73b8c7366da9023779c613833b89ce5efeda43937af50957bd2e bind-utils-9.11.4-26.P2.amzn2.13.19.tuxcare.els1.x86_64.rpm 8fc7eda32c127ecac9af94d64358b2770eebae510d28bae5b90a923b4436eb74 CLSA-2026:1792076823 TuxCare License Agreement 0 - CVE-2026-82049: resolve a hard link's target with os.path.realpath() before creating the link, so extracting a hard link to a symlink stored deeper in the archive cannot relocate that symlink to a shallower path where its relative target escapes the destination directory - CVE-2026-11940: re-filter the fallback member when hard link extraction falls back to extracting from the archive, and filter it under the link's own name, so a hard link to a deeper symlink cannot recreate that symlink at a shallower path outside the destination. Carries the CVE-2025-4330 fallback-filtering prerequisite (LinkFallbackError and makelink_with_filter), which this package did not have. Skip the member when the filter returns None for the link's own name, so a filter that skips rejected members cannot be bypassed the same way (CVE-2026-87910) - CVE-2025-4435: skip a member the extraction filter rejects instead of extracting it unfiltered when TarFile.errorlevel is 0 Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-82049: resolve a hard link's target with os.path.realpath() before creating the link, so extracting a hard link to a symlink stored deeper in the archive cannot relocate that symlink to a shallower path where its relative target escapes the destination directory - CVE-2026-11940: re-filter the fallback member when hard link extraction falls back to extracting from the archive, and filter it under the link's own name, so a hard link to a deeper symlink cannot recreate that symlink at a shallower path outside the destination. Carries the CVE-2025-4330 fallback-filtering prerequisite (LinkFallbackError and makelink_with_filter), which this package did not have. Skip the member when the filter returns None for the link's own name, so a filter that skips rejected members cannot be bypassed the same way (CVE-2026-87910) - CVE-2025-4435: skip a member the extraction filter rejects instead of extracting it unfiltered when TarFile.errorlevel is 0

0 tuxcare-amazonlinux2-els python-2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64.rpm 798762fd74c5d944fe2f0e448371f45cc9337896b6e12128df628c17f2798a9f python-2.7.18-1.amzn2.0.22.tuxcare.els4.i686.rpm 8a052389d3472c06a5d755abf1ed204fbcee8529401b22658d9c593ac68a51a3 python-2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64.rpm 9710266bed8b2233360ed1973d2173ca55a48b38375787899fa613b8216f73ea python-debug-2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64.rpm bef92a2515db104c77819ad9688b49ee324918a8a8ba0181e4bfeb3aa1c4f0b2 python-debug-2.7.18-1.amzn2.0.22.tuxcare.els4.i686.rpm b81f54f64e89d7c8efcaa7d3b46ea8688954eae68216e7d7d41d5f5a07b1abd5 python-debug-2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64.rpm 857a3f93e0af047f5090fb0cac6d9297136feb6fbbcf5d2649f86b08bcdb5550 python-devel-2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64.rpm ce25e0c8a4f7e20d2b19d2202c7877543b196451db9e0fded2d6a919ee948f5a python-devel-2.7.18-1.amzn2.0.22.tuxcare.els4.i686.rpm e7a1c4f0f42d63b5c443ca03e553f4382d023a8480d75626417f321141db26c9 python-devel-2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64.rpm 5eaade81ff2680487e3a5e632db83214196fff0206f6cd01c1ab894a1348fe80 python-libs-2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64.rpm 4385765b091578016b5ab4215474bc462e40e5c962b3741547e980d1027fd087 python-libs-2.7.18-1.amzn2.0.22.tuxcare.els4.i686.rpm 8a4b957f1d113edcd8eba3684afcfc228962d43488626f9690ee80a8009a3620 python-libs-2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64.rpm 170b36edc74244c2d7376731f50c9a4579e59884667eaae645366c399a502c4d python-test-2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64.rpm 7182d11fd86ea0c1d4520943512fa90b8e41749a08186be4df7ffcfc240e0e7f python-test-2.7.18-1.amzn2.0.22.tuxcare.els4.i686.rpm 8f87ee9d7e71fc083f5deebd95ca0ad86be5dfe26d8ee0392a17683580bbf159 python-test-2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64.rpm a9887d9a8031594c9be45c716ce9a6c0cd165e5a0b9956f4365ba16fa634bf0e python-tools-2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64.rpm cf58f2af8e9d48b41b08673367c86787601eef2287429fde63a5ee7c10a6db41 python-tools-2.7.18-1.amzn2.0.22.tuxcare.els4.i686.rpm e1045511fd9406662bc86fe8f5d4adb0a05d839b0095407b079a205f62ec549c python-tools-2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64.rpm d64d9403f718219f620482ac88935b249cc05e5565c1fd9ea111941fc75af65d tkinter-2.7.18-1.amzn2.0.22.tuxcare.els4.aarch64.rpm c6be2638440297f59b640e63f8fa37cd654154421c9ba69ede18a19cf78be81e tkinter-2.7.18-1.amzn2.0.22.tuxcare.els4.i686.rpm e2c2226685d73ee98b10dfb50aa3dcb017da3dabab2eba451c78e86b44e38180 tkinter-2.7.18-1.amzn2.0.22.tuxcare.els4.x86_64.rpm 7d500f1c5a8f5c85d6b8dd6b78467e26fc10b4636545b61d2f552d4644798a7d CLSA-2026:1792398739 TuxCare License Agreement 0 - rebase to 2.4.69-1.amzn2.0.3 - CVE-2026-42356: limited RCE for some internal redirects to non-CGI files in CGI directories - CVE-2026-42528: mod_dav: shared lock overflow - CVE-2026-47360: mod_session: session cookie not removed during internal redirect - CVE-2026-48005: mod_auth_digest: reauthentication attack - CVE-2026-57941: mod_http2: use-after-free via shared session->bbtmp re-entrancy - CVE-2026-58415: mod_dav_fs: property database read access - CVE-2026-59797: mod_ssl: SSLRequire allows .htaccess ap_expr file-function - CVE-2026-63045: mod_proxy_ftp: PASV address handling - CVE-2026-79768: mod_userdir: information disclosure - CVE-2026-93546: mod_dav_fs: namespace overflow - drop the 8 TuxCare CVE backports; 2.4.69 already incorporates them - no TuxCare CVE patches remain - keep openssl 1.0.2 (openssl-devel) for the bundled mod_http2 on i686 and aarch64, as for mod_ssl; AL2's openssl11 is x86_64-only None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 2.4.69-1.amzn2.0.3 - CVE-2026-42356: limited RCE for some internal redirects to non-CGI files in CGI directories - CVE-2026-42528: mod_dav: shared lock overflow - CVE-2026-47360: mod_session: session cookie not removed during internal redirect - CVE-2026-48005: mod_auth_digest: reauthentication attack - CVE-2026-57941: mod_http2: use-after-free via shared session->bbtmp re-entrancy - CVE-2026-58415: mod_dav_fs: property database read access - CVE-2026-59797: mod_ssl: SSLRequire allows .htaccess ap_expr file-function - CVE-2026-63045: mod_proxy_ftp: PASV address handling - CVE-2026-79768: mod_userdir: information disclosure - CVE-2026-93546: mod_dav_fs: namespace overflow - drop the 8 TuxCare CVE backports; 2.4.69 already incorporates them - no TuxCare CVE patches remain - keep openssl 1.0.2 (openssl-devel) for the bundled mod_http2 on i686 and aarch64, as for mod_ssl; AL2's openssl11 is x86_64-only

0 tuxcare-amazonlinux2-els httpd-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm d3adb1dc6f5938554de9904d03f2a20d71a5738bbc85796d972635afa23acc06 httpd-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm 2dec4ff2d7e92af201c5bade3d0f240b543eae0f092fcebdbbf941f4713ac386 httpd-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm e827e91ab72251701a8d8723850f010a6c52f81965214a3914ca5669c3622a77 httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm 5ddd10489f61cbed2a997898a0a3772c61a7ea289af653f435f463797461b6b6 httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm 8f76ee3413e30224c9c8c6a7306586cf48175a78d1f24f78a26c3129fd47a5b6 httpd-devel-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 52aa35b5dceb26a7f0e1b369b5a5b05c983bea38ba5ba16d69d5cff7e18167b8 httpd-filesystem-2.4.69-1.amzn2.0.3.tuxcare.els1.noarch.rpm 4c71bed367f3a966bca7b20614bbca2b284a2c420038ac3b3f2c1b8ca4c5ff6c httpd-manual-2.4.69-1.amzn2.0.3.tuxcare.els1.noarch.rpm df9f2e84efb1fc67150c923aa5bfb9814dc3beb8317850c6d94a856de5ba5235 httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm f46558d63a4c4e04823c4ea09cec0b0fb4a8e596807d187053361519f5ada367 httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm c9224ea9eec02788b5015909a904b6ebc5acc2653a58de7b4ae2f5d89c233949 httpd-tools-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 1a83d9dbc9036148e65915b17227ec89a6c0aff7fb0a1d79952ca12adc43135a mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm d2de455a9e16fec7f249be233f9a25479f1d9af0ac58bcb8ae9cf479e25ef9d4 mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm d79b8a81dc37d8fcb67cb464f9e023ef4c06922c2a9be409d1f5ad756ae27efb mod_http2-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 9d347b7f598c8041597444f1c922418a15b2561b8a177aaca4a7c949a27aeb47 mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm d111afdaddadfd3776e3f491d28d5a7d358e11ac13ea37fa55840d2191d8fc85 mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm 9ae4cb169cb5cabda40737e88fb790ca82072d0a32e865a9514075ba33475b42 mod_ldap-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 9375b4c425ab15bc503ce0b890e7795d83f9851a17cb742dc2af3a303b72a062 mod_md-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm b6ca167d55f6326caec2f3e2d2ba27742a106adcd8846ebc73712d9db6896832 mod_md-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm 3bf1d7f426b5536ea3d50e90b44ec8cf57bbd7fc4790c287daed8d2bdb396102 mod_md-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm ae9cc80cfaf219976c9917ac12016684d1da396194fac883fcc9af6229e0902e mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm f3486794e6b677829a285f7b62fab81d5ecb11b0e3dae368d9d546ca18d84680 mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm 862e3a7f22a61489cdf2f35669ad21d030920ea167b8bce81795027b9c13ee11 mod_proxy_html-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 666857cb2b523afcc07d48ffc8e8da9b9884461532262d6bc8937965922bb683 mod_session-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm 7ae870c93feda5c841eb0af7ccfba1160d5421c04b501d5cf52641a68902becc mod_session-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm bd82c973e048c9c0d33cb5606a1851318b2aa4c4adf45fce4de4199bd9fd51e0 mod_session-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm a79127e9f148279870b207f45fe90e4dd3223a7b23aea9cd7fb1ba6a5881e5fc mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els1.aarch64.rpm 038da2f7cca220855da177b0d32f2425956ea683928f64e2f37219f5bd7cc17e mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els1.i686.rpm 8c4a6a562612af1d4c1fccf0f6d90e83a29e7fa7e91f4674e3b77519ab728bae mod_ssl-2.4.69-1.amzn2.0.3.tuxcare.els1.x86_64.rpm 998a9cdf417709951e10252252109b70af8c2385ce7f31a610b14127be9c6571 CLSA-2026:1792484804 TuxCare License Agreement 0 - CVE-2026-19445: look up the SSLContext in the servername callback from the SSL socket instead of the borrowed SSL_CTX callback argument, and unregister the callback when an SSLContext is deallocated, so a context released after the callback switched SSLSocket.context is never used Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-19445: look up the SSLContext in the servername callback from the SSL socket instead of the borrowed SSL_CTX callback argument, and unregister the callback when an SSLContext is deallocated, so a context released after the callback switched SSLSocket.context is never used

0 tuxcare-amazonlinux2-els python-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm bdd1aa4af42ef86b27aa6af7ce4530da6213cee0eb489c8c689194972d1fa7b2 python-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm 23ceed0d3761fec3e91b8cb25921162eae8d72945e58c833500dfb13e6a029f5 python-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm eea34ff29f6cf459461b51fd405dbafa32486574768dbf2ff9f2a73265873086 python-debug-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm 62cac4c8bfd859dee52707ec93f1423f0cba0d94f485980f77d6c28febf844f0 python-debug-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm d18d69c1139d3c665a7deb1f5d10b7f913f75b5c573b4d912ebf3e5e24fec46f python-debug-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm 6e6059d17e109ccb8464f137636fdc6a12d5aaf6eac275522e3b8930dc7d1515 python-devel-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm fd75ffda347e0e2a177eef4ec01f72bbe605084e2e8b7a89af81792e08472d89 python-devel-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm 9a5130b576c7d60377d6ca1115d23994df455aee93fc1ed1cee778d5309cc499 python-devel-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm aaaa13e459983c294391e8bb9de812225fdb749db436661cc64c886e6c834d36 python-libs-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm 6f0dc25c18492b9084ab68f407d6f28d1b76ed026272c70fbc9c55c1959466fe python-libs-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm 44d708382603b781b3ecac7d583a2c9476d3856fcfd4f6dd4c1a3c236bef507c python-libs-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm bd0586445a4b186471113aa8ecf51d98caa9ec15a39abecc052354716c0e7167 python-test-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm b4c24be8a8daa604f2532e184f4fb19f85d0d5fc0e897907a99fd4230e417d1e python-test-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm 72e259f740d55a2f72106b21652c480a8e8d42ee0741168c345239ce968bde09 python-test-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm ffb9257593a0b7454361995ef6c7702f675cbfb2fa526f8f8a58b71a26b25ba4 python-tools-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm fbb0116d8969cc75733ce4e6a5c8bcf9bd00b9a057d31473978ca45b493e87fd python-tools-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm 41f2d63233f336c8c7780c11e7fcdd1bad97f4ffec80c5e67177528ed310ba1b python-tools-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm 62642efcaad7482ebfce62c235aa13798627cbb9dc6e00e821b06e3c7c88b7bc tkinter-2.7.18-1.amzn2.0.22.tuxcare.els5.aarch64.rpm 17f1f5d3d2672b63c5ca236dbed643a8140ec8ff5cc61c328263b52ca42c9f9d tkinter-2.7.18-1.amzn2.0.22.tuxcare.els5.i686.rpm 9375cc52de90ad2418f845a7bf1bc322650a17b0295c4c2a9717279d9923b13e tkinter-2.7.18-1.amzn2.0.22.tuxcare.els5.x86_64.rpm c096be96726ecae1e4c4aeccd69e2405f35e63778ed511e5490b3c46ed1b4d71 CLSA-2026:1792509811 TuxCare License Agreement 0 - rebase onto Amazon Linux 2 1.0.2k-24.amzn2.0.23 - CVE-2026-54872: pin the secret scalar and its padded copy to a fixed word count before the BN_add() padding in ec_mul_consttime(), so the work done there no longer varies with the magnitude of the scalar - the TuxCare DTLS retransmission backport (init_off reset in dtls1_retransmit_message(), suspended-write check in dtls1_handle_timeout()) is dropped; the vendor now ships a file of the same name carrying that fix - the TuxCare CRL distribution point backport (relative issuer name built in crl_crldp_check() instead of cached per entry in setup_dp()) is dropped; the vendor now ships a file of the same name carrying that fix None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase onto Amazon Linux 2 1.0.2k-24.amzn2.0.23 - CVE-2026-54872: pin the secret scalar and its padded copy to a fixed word count before the BN_add() padding in ec_mul_consttime(), so the work done there no longer varies with the magnitude of the scalar - the TuxCare DTLS retransmission backport (init_off reset in dtls1_retransmit_message(), suspended-write check in dtls1_handle_timeout()) is dropped; the vendor now ships a file of the same name carrying that fix - the TuxCare CRL distribution point backport (relative issuer name built in crl_crldp_check() instead of cached per entry in setup_dp()) is dropped; the vendor now ships a file of the same name carrying that fix

0 tuxcare-amazonlinux2-els openssl-1.0.2k-24.amzn2.0.23.tuxcare.els1.aarch64.rpm 358e01e84ae9ee8c76a567049e8b27c550e2884ac4dd5035dff2da9ec766df8f openssl-1.0.2k-24.amzn2.0.23.tuxcare.els1.i686.rpm a58090f99a84bdc32f64d8e01c82354b7ef2a4648f0c0ad0562de4883d502927 openssl-1.0.2k-24.amzn2.0.23.tuxcare.els1.x86_64.rpm b8bbddffedda3c36f09c8adbc10fe2714ba0c2ce4f1531aa16a8350ee46f02f5 openssl-devel-1.0.2k-24.amzn2.0.23.tuxcare.els1.aarch64.rpm 62276f15bbb61a045ecdb8987a3ab69f6f471243ced002bd41426f77d2f2412b openssl-devel-1.0.2k-24.amzn2.0.23.tuxcare.els1.i686.rpm db44af4a6cdaecafa000800289744deb0a75455fa22d6c636d5617d29619e735 openssl-devel-1.0.2k-24.amzn2.0.23.tuxcare.els1.x86_64.rpm 16e9282393044b17266aa3426ad8c68929c1aaba52a7f99e93fc365ee8ab3f42 openssl-libs-1.0.2k-24.amzn2.0.23.tuxcare.els1.aarch64.rpm 1d4bede841242d0255d0536a2626b0ef208ebee8ef9942699179274211dcfb6b openssl-libs-1.0.2k-24.amzn2.0.23.tuxcare.els1.i686.rpm e8632f36f82691a0035c5ee8562a841f02804f0c59fd91d8590e6ce869c84909 openssl-libs-1.0.2k-24.amzn2.0.23.tuxcare.els1.x86_64.rpm b917ea85235563a304d78c8f322457b041b237316a05f20103a0de381e164bcc openssl-perl-1.0.2k-24.amzn2.0.23.tuxcare.els1.aarch64.rpm 93e2e83d58fb23f4d599a6a034d4172393fc2058bd32d9dbd72050c35883d68c openssl-perl-1.0.2k-24.amzn2.0.23.tuxcare.els1.i686.rpm cf6cebd68f8b2ee10874e8f097e81c228d38f9df9f232cac62bce407417b3b54 openssl-perl-1.0.2k-24.amzn2.0.23.tuxcare.els1.x86_64.rpm 4163e4aceb1804328876bd0c809c70f4b3db534bbcb264b3bce6f64671cc43a5 openssl-static-1.0.2k-24.amzn2.0.23.tuxcare.els1.aarch64.rpm 5ebbc918c742154cec9a869a901633f6e69f7a4bce68f34d83676f842974731e openssl-static-1.0.2k-24.amzn2.0.23.tuxcare.els1.i686.rpm e6559a2edb8935b36d6a7d1d79992aace3e4f4a189d73dcf47f952da7ea43be8 openssl-static-1.0.2k-24.amzn2.0.23.tuxcare.els1.x86_64.rpm cec98ff1edb84aa590f4e779eb02ac3a12dfba270f2603c37b4dd49b2def5df8 CLSA-2026:1792571515 TuxCare License Agreement 0 - rebase to 2.56.1-9.amzn2.0.16 - 8 TuxCare patches remain declared and applied None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 2.56.1-9.amzn2.0.16 - 8 TuxCare patches remain declared and applied

0 tuxcare-amazonlinux2-els glib2-2.56.1-9.amzn2.0.16.tuxcare.els1.aarch64.rpm b092a919115a357e68abb21b8d86cc54a4862204f45f963941bf45b86ebf4a8b glib2-2.56.1-9.amzn2.0.16.tuxcare.els1.i686.rpm 7d915ecc4f0616e7db3e2989ec7c07fa586652fc78ec7dcd8e0500024dbfd87a glib2-2.56.1-9.amzn2.0.16.tuxcare.els1.x86_64.rpm bdab092a919bdce71c2671bf5618c0bd75636f3b5c92a589a49d8a7106ea5843 glib2-devel-2.56.1-9.amzn2.0.16.tuxcare.els1.aarch64.rpm 61786d6c621266035830b438ab89a68a5a7535707984d23f37d55b5dbaccef2c glib2-devel-2.56.1-9.amzn2.0.16.tuxcare.els1.i686.rpm 524b6a8910dc138bf52d835d32ed8189b198edf72135886a372c3e7496aa80ba glib2-devel-2.56.1-9.amzn2.0.16.tuxcare.els1.x86_64.rpm e40dd28a039cfcdeb3ba4e048155cb6b7eb6206146d2b3c98f1db5237bfd41eb glib2-doc-2.56.1-9.amzn2.0.16.tuxcare.els1.noarch.rpm 009858e9f39321aabbffd54d8425245c792059032a14e3b57fd4d6ad2476ac30 glib2-fam-2.56.1-9.amzn2.0.16.tuxcare.els1.aarch64.rpm 44e1bd4a73e95a161d2c2397a000e15f50e5e317c3f318ab557c4b51afda9077 glib2-fam-2.56.1-9.amzn2.0.16.tuxcare.els1.i686.rpm de214f0013e62418618b8589b24bf9a24cebf1e86b46fff1575a9b9fda794a51 glib2-fam-2.56.1-9.amzn2.0.16.tuxcare.els1.x86_64.rpm 2688523c16809740cf3cb0ef32afa1abf294a1fbdc983b9d8cc64fa018db0a30 glib2-static-2.56.1-9.amzn2.0.16.tuxcare.els1.aarch64.rpm a89fba1c103eb35cd10e192780530084e2c837974f556b4fb7b9743a8fe677c1 glib2-static-2.56.1-9.amzn2.0.16.tuxcare.els1.i686.rpm f1c06240d336797b8d69c31bdd842f4a69ddf9b3019f03554c01bd63cdd121d9 glib2-static-2.56.1-9.amzn2.0.16.tuxcare.els1.x86_64.rpm f96fcf3c2a7c16c9a3d947597ef57fd81071913051d83186c63a334c26c3bff5 glib2-tests-2.56.1-9.amzn2.0.16.tuxcare.els1.aarch64.rpm 46c1997e6fa62a36ea3f8862daf84f9eeca4fb1dc8720143da62c6178c2ba6c3 glib2-tests-2.56.1-9.amzn2.0.16.tuxcare.els1.i686.rpm 8646326cd28e97e1dded1a1ecc697bac338998b4ce2d06ca0c3da78972a91826 glib2-tests-2.56.1-9.amzn2.0.16.tuxcare.els1.x86_64.rpm 2a253a4dcec6b318a2e1a404faf937cda5bc9d076adfb87b88cdcb1d19c81600 CLSA-2026:1787322837 TuxCare License Agreement 0 - sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564}

0 tuxcare-amazonlinux2-els bpftool-5.10.259-258.1046.amzn2.tuxcare.els2.x86_64.rpm cc4e6573189e478a988734299fa6ac4a58728039482794834f63f7d1febebb9a kernel-5.10.259-258.1046.amzn2.tuxcare.els2.x86_64.rpm 47e67fa0cdd69e5778580ea86f59fb2adcc97a67a827532c6e6dfb7c3ab3c853 kernel-devel-5.10.259-258.1046.amzn2.tuxcare.els2.x86_64.rpm 305bf9bc5d0d8b0f203a9a0aa47216b00121086d965bf3314f19ad70e70fb726 kernel-headers-5.10.259-258.1046.amzn2.tuxcare.els2.x86_64.rpm 0be4fa4526fc05ea400d8e7ee258c44acdca2d4c244cb3897bc5bf8f8bae2ed1 kernel-tools-5.10.259-258.1046.amzn2.tuxcare.els2.x86_64.rpm 5c1110cd73803af4c133261fc3456a5ca0460daa3d84b6febe40370b222609e1 kernel-tools-devel-5.10.259-258.1046.amzn2.tuxcare.els2.x86_64.rpm 235c4eda02f93354171eb5fd6bee131596a74f7e0eceeeb72d55af7253571738 perf-5.10.259-258.1046.amzn2.tuxcare.els2.x86_64.rpm c41e28a756649e02319f7470ef105d32378c6d6fbc3e58bdac7dcae4b57114d9 python-perf-5.10.259-258.1046.amzn2.tuxcare.els2.x86_64.rpm 2bb97cfef61e3461a39d223e57cabb03f3aa51351948ca933bdbf2ba6eb4f5bc CLSA-2026:1792596508 TuxCare License Agreement 0 - rebase to 1.7.3-15.amzn2.0.18 - 4 TuxCare patches remain declared and applied None Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- rebase to 1.7.3-15.amzn2.0.18 - 4 TuxCare patches remain declared and applied

0 tuxcare-amazonlinux2-els python2-unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.aarch64.rpm 1b7534e0b3f157fc48bf65b6ea3934c20cc349ee4a6bc8c5a49e51e80d851b70 python2-unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.i686.rpm acb05dd185193ca8bbd54d00744372827582f193c036bac49d931812139aa32e python2-unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.x86_64.rpm 9640450b4a081acb43bf68e4bfcd3090e23486335f1c77cee7623d09b9695a9b python3-unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.aarch64.rpm 4e4fed167ccd0876b5c41068761c7e87bf73b3b5a0b3b72f90fe653d3b615da3 python3-unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.i686.rpm f67a809d308e4912324f0ed996cd0b8d01899012712e2568ec3ae52fdc1524d2 python3-unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.x86_64.rpm 7e6e5a6d0af6bd9066b6612f30c029ad1984297882c8c9c070297ef51d974534 unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.aarch64.rpm 4c97d2d839f0f0284452b8b1ad10c400f5a7277695eb774c4a7402fe0685bd18 unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.i686.rpm 24ae86d7cac6fa1c0d0a905cef0b1be5e52eb050023fb64ba0fcdb9276972667 unbound-1.7.3-15.amzn2.0.18.tuxcare.els1.x86_64.rpm ce386270d0c9c278b478aa4bc75fecc431515e3be2a9b5f7aeb40806352ee772 unbound-devel-1.7.3-15.amzn2.0.18.tuxcare.els1.aarch64.rpm e73e03c77da8ce77f4163f3ffd39e9966c024928104e324d29f5b7b29eba78d4 unbound-devel-1.7.3-15.amzn2.0.18.tuxcare.els1.i686.rpm 16debebd3f1e7293fe8791d1a3ba0e289a0086c97fc66b65d00534c6677f6163 unbound-devel-1.7.3-15.amzn2.0.18.tuxcare.els1.x86_64.rpm 9dccc3bc1a44346e48b3696b560dcce527ac9e1418a26012140465fe4c14665d unbound-libs-1.7.3-15.amzn2.0.18.tuxcare.els1.aarch64.rpm 858333a62f88d7511a63f81ff378f779b72daced2ec8c6e4c4616d3349839cb1 unbound-libs-1.7.3-15.amzn2.0.18.tuxcare.els1.i686.rpm d0b8ecde9dd1a5ba6656fc9c713c475af0a772626fd573237f773f2581b65a78 unbound-libs-1.7.3-15.amzn2.0.18.tuxcare.els1.x86_64.rpm 4515d66b8498b0131ab4a3481bc89a4d479777d3061d2d5cab71c5732674bec5 CLSA-2026:1792609408 TuxCare License Agreement 0 - CVE-2026-109618: memory exhaustion and allocation size overflows bailed out in the middle of an operation, leaving engine state corrupted for the shutdown code; the process now reports the fatal error and terminates - CVE-2026-109619: request-scoped SAPI and core globals were left pointing at freed memory and could be reused by the next request after a bailout during request startup; they are now cleared at request end, unused and duplicate multipart part headers are dropped, and session upload progress is disabled Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-109618: memory exhaustion and allocation size overflows bailed out in the middle of an operation, leaving engine state corrupted for the shutdown code; the process now reports the fatal error and terminates - CVE-2026-109619: request-scoped SAPI and core globals were left pointing at freed memory and could be reused by the next request after a bailout during request startup; they are now cleared at request end, unused and duplicate multipart part headers are dropped, and session upload progress is disabled

0 tuxcare-amazonlinux2-els php-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 8b7e4758c413545db415d55699898b30099881d80d4acd663676ccc0db74bb8f php-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm db93bfb9f8df0e40735534e37443e557ce05c2fc57f2d1796e095ff5295832b8 php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 09d07675264317113b5ad7ca6999a3938f028f98c3a8bded748d3cd7973cbd9e php-bcmath-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm bcbb7ee00e0cea3c2f8c3582bb617b3025f0c2a535b579852801247939cb9403 php-cli-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 0355fe414c6c7573a01c93d880a8e6a85c5f3326a5c1885a7e2eab46716e9878 php-cli-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 122a391fe210b151c4991e8bc814edde062781d336ccd9c8ab186a8adcd6ae7d php-common-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 45ad03f9b16edc64bd50f5e508a7f91a3551899e81acba003f2e9061b5fe745a php-common-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 2ecc84a8665fc569fbb7d539bb478900e664791d8fe3974a1294d335c3dabe96 php-dba-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm e0858273e1635d106d19d36a25375ea19ad542bf20aedc3e5cc76d16ae6a1671 php-dba-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 54e59ea31f344ed7af912f8c2669d8ba13bb3c064f7cecfe7826bf4b85ad2764 php-devel-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 0b7abc9128ac212c4a04271c7cae7f78e183d79f180cb282e574215b91f178cd php-devel-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 28a2001ffe054f08cd22709f7ffa88bdc889d6e920e139e6aaa5d5457759fbe7 php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm a205e7b330b8e60fa63c66e590f732c744245ea55adafed27e2e0d5eea9b19a2 php-embedded-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm f502165f256de79224f8539dfe69caa8772287b97ff26d74e5bf100d62023044 php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm a6f5d12fab37d6de12da168448cf8617964fb3d098c2e5755ccfaf55c1db9b93 php-enchant-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 0412684ed3ecbacd518917b3003da6f734bc89f27186dab900833c1343e99841 php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm e6673d1c8d8872e8222aac86e3c0c80ef5ea5a241948be88fcc5687d545bcd51 php-fpm-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 89463a67c6ccf0ab9fb0127249372dc68ab1cce2229976cb4b3599c0bd036d93 php-gd-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm eb200b8a1afb2ecb698ae2735eece73e1eb39f5d345e52e9f17142dc5b5c5d5e php-gd-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 50814c90bc575a80932869793d865279f0a7944909bae167d63e0e2c058d6ecd php-intl-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 74fd07b1d475fcf9f3c2685da291f9b5b991cda405a95c6d0b5c5ecf2f3f0700 php-intl-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm d8d589649f10d4651ef5188e9c2225851b0d72f307b39e47f43be06f253fe105 php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 8067626f2c1d434162568277ee59c1150acbc92bd297127db7489b8645b65f46 php-ldap-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm fcc9232c12a991af7d0e327c2ad78f9ff2c156907374f72d2b005c9edd655065 php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 27729409617fbf0792ed3bcea892d357fcc139fcc373708c07bc9b23a8408d14 php-mbstring-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 548fbcd3226f0cf7935d65d82617638371b976d6762114f294386fb4651120f0 php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 1a0a84fc98b53be5dbef03618a87a03993d8b33b54d1a1ad1e9ef83594885c5e php-mysqlnd-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm c264676f5cbdf178ad14ef2c253f4316de1f181659d5cbac9bbfeca217e93776 php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm c1d341aa7b6fd7e6c2f367d3a29c7f8d07b392da19a5cf58f98b2831a405ca08 php-odbc-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm d2ddd76d7a0f38a1cd2485cb081c319e32f8d733240304044fb798062316a49b php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 19c24f7388e8524848ab156d587155286ced14912279288847c5437617052f43 php-pdo-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm ef6a68293a67dca9d516ab78950fee39a25f025af2ec6b03ae653472f47003e0 php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm c029923468b0fb70876fab429a3e25ee5446d181b1229428403194cf5a247f14 php-pgsql-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm ff8b403d58bcdb34d6ca8ca57da92c29ca98a98b80d1496b0cfcfc18cabcb5a6 php-process-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 38772d75429f0cb6b6d95553558ca8b7a72e0edfd2ee1920d048e2947d37dbd7 php-process-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 06681d6b523559bce0f5feb614289ffd45e2dd095bdda6e5116608ef2395d95e php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm d447aec3ab650b0addc9d5271c3fcacd4784d51cc28d0e38f01b032d3be29402 php-pspell-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 42f3006f4cbbf6f541ba44e1463d366096cd006b99dd60eac3a74b80d89aa618 php-recode-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 4733c1dfa8231a4317eb68705ce9b24ca96749d49f7b2d1207bf47d56baf083b php-recode-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 673d5ca7147f6ea976ebc646eb6283e4ee40da27506257a4754a8560204cd559 php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 07525eb6c470794d4566d8c279384c864a68d8238237ad5aa63cfefd9ba22f5d php-snmp-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 5ce8e65b6165f0053c285c861e2592ee73909c687c59c4eb2312e667b191cc57 php-soap-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm a1febc2fdd88214b87738dcef8e5996a99ecb57353d781c4ac7da862daf25b6b php-soap-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm ca087ffe19ee0298b2b512dd28fd6d3aeb218491226cbef050ecda339e4997a9 php-xml-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm d519b68169623558433fa55a8db0eb1859be4aed1ddb742758cead4ddbe160cd php-xml-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 35ef90d900f74693e367f8d597fb9bf20483c61a9a9ec71037415c610b9299d8 php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els11.aarch64.rpm 7c5554bc4024a07a1eff0376288c947b46040d7af046177fbf91ed62b5fc234d php-xmlrpc-5.4.16-46.amzn2.0.7.tuxcare.els11.x86_64.rpm 8b411d527ac2780522a0374e22ebec88a3945657e2c8aede566eb62695834b80 CLSA-2026:1792401579 TuxCare License Agreement 0 - Rebase to Amazon Linux 2 kernel-5.10.270-271.1109.amzn2 patch line and upstream stable 5.10.272 - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - ipv4: free inet_opt and ireq_opt after an RCU grace period {CVE-2026-98432} - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - xfrm: fix stale skb->prev after async crypto steals a GSO segment {CVE-2026-68426} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111} - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109} - SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550} - SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537} - libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956} - netpoll: fix a use-after-free on shutdown path {CVE-2026-64424} - ip: orphan prefetched skbs before multicast forwarding {CVE-2026-89564} - net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550} - ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266} - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - PCI: use generic driver_override infrastructure {CVE-2026-53120} - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} - loop: Fix use-after-free issues {CVE-2023-53111} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} - xfs: don't walk off the end of a directory data block {CVE-2024-41013} - netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934} - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap {CVE-2021-47200} - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063} - xfrm: Don't clobber inner headers when already set {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- Rebase to Amazon Linux 2 kernel-5.10.270-271.1109.amzn2 patch line and upstream stable 5.10.272 - ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - ipv4: free inet_opt and ireq_opt after an RCU grace period {CVE-2026-98432} - hwmon: axi-fan: don't use driver_override as IRQ name - driver core: generalize driver_override in struct device - xfrm: fix stale skb->prev after async crypto steals a GSO segment {CVE-2026-68426} - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI {CVE-2025-39965} - xfrm: Duplicate SPI Handling {CVE-2025-39797} - ip6mr: do not clone dst in ip6mr_cache_report() {CVE-2026-90111} - af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109} - SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550} - SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537} - libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956} - netpoll: fix a use-after-free on shutdown path {CVE-2026-64424} - ip: orphan prefetched skbs before multicast forwarding {CVE-2026-89564} - net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550} - ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). {CVE-2026-74289} - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266} - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - PCI: use generic driver_override infrastructure {CVE-2026-53120} - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} - loop: Fix use-after-free issues {CVE-2023-53111} - dma-direct: Leak pages on dma_set_decrypted() failure {CVE-2024-35939} - xfs: don't walk off the end of a directory data block {CVE-2024-41013} - netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131} - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168} - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} - net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934} - drm/prime: Fix use after free in mmap with drm_gem_ttm_mmap {CVE-2021-47200} - smb: client: fix potential UAF in smb2_is_valid_lease_break() {CVE-2024-35864} - bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063} - xfrm: Don't clobber inner headers when already set {CVE-2026-53091} - net: pull headers in qdisc_pkt_len_segs_init() {CVE-2026-53091}

0 tuxcare-amazonlinux2-els bpftool-5.10.272-271.1109.amzn2.tuxcare.els1.x86_64.rpm df8b378e63868c397052e90a0fa2973e38779409df322d7f125f6af9bd8c1ebc kernel-5.10.272-271.1109.amzn2.tuxcare.els1.x86_64.rpm 93c0f63e25773bc534e58e3073c86cd2b4e9d5bafda3a454d40dbf369bf1e5c8 kernel-devel-5.10.272-271.1109.amzn2.tuxcare.els1.x86_64.rpm 46fff9fef76ec4e1c1939d073bfa4d3f8c399b04ff149eb0d3d74a418619745d kernel-headers-5.10.272-271.1109.amzn2.tuxcare.els1.x86_64.rpm 6c34af5b9e0015e8aa0c1c9459f158d4e0e3bed34742b17b185c6d033a5588e6 kernel-tools-5.10.272-271.1109.amzn2.tuxcare.els1.x86_64.rpm 812a519e8488ad64f21cedc52af6ad911d5d32e6f161a238fb6e0526a04fb139 kernel-tools-devel-5.10.272-271.1109.amzn2.tuxcare.els1.x86_64.rpm a4d36542a34be9bc75cdefcc5f2abbea4f6be4e98ac603f2460e8f1d4149e88a perf-5.10.272-271.1109.amzn2.tuxcare.els1.x86_64.rpm 05a432fca5916bc86a63f6677988a96ee4b4d166b6aecbc9713a3d1ec700719f python-perf-5.10.272-271.1109.amzn2.tuxcare.els1.x86_64.rpm c9d37ec7dee8c9ed12371029788c76265e471d935a421b069ad9344738756780 CLSA-2026:1792753144 TuxCare License Agreement 0 - net: skbuff: propagate shared-frag marker in skb_zerocopy() - kprobes: Protect kprobe_blacklist with RCU {CVE-2026-89988} - bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041} - smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs {CVE-2026-98171} - smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175} - RDMA/core: Fix potential use after free in ib_free_cq() {CVE-2026-92508} - RDMA/core: Fix potential use after free in counter_release() {CVE-2026-92509} - netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392} - iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448} - iommu/amd: Fix clone_alias() to use the original device's devid {CVE-2026-53053} - xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181} - exfat: fix out-of-bounds access of directory entries {CVE-2024-53147} - btrfs: abort transaction on failure to update inode for hole punching and reflinking {CVE-2026-98269} - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300} - hwrng: core - fix rng list on registration error {CVE-2026-93163} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117} Important Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- net: skbuff: propagate shared-frag marker in skb_zerocopy() - kprobes: Protect kprobe_blacklist with RCU {CVE-2026-89988} - bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041} - smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs {CVE-2026-98171} - smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175} - RDMA/core: Fix potential use after free in ib_free_cq() {CVE-2026-92508} - RDMA/core: Fix potential use after free in counter_release() {CVE-2026-92509} - netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392} - iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448} - iommu/amd: Fix clone_alias() to use the original device's devid {CVE-2026-53053} - xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375} - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181} - exfat: fix out-of-bounds access of directory entries {CVE-2024-53147} - btrfs: abort transaction on failure to update inode for hole punching and reflinking {CVE-2026-98269} - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300} - hwrng: core - fix rng list on registration error {CVE-2026-93163} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}

0 tuxcare-amazonlinux2-els bpftool-5.10.272-271.1109.amzn2.tuxcare.els2.x86_64.rpm 5d0dd151b3cbcce47eb03b9520874ddea3d7b0733a6be03705185b43ba0f4053 kernel-5.10.272-271.1109.amzn2.tuxcare.els2.x86_64.rpm 5a9ad868f0f0e6016096751113f4ba3c624ebf0d96e0e5b0aac34a25ccd1a9e2 kernel-devel-5.10.272-271.1109.amzn2.tuxcare.els2.x86_64.rpm e0106763b7d3529bce400841ec1a540bc000ffd4cf4cc35baa6e028656f05350 kernel-headers-5.10.272-271.1109.amzn2.tuxcare.els2.x86_64.rpm 3b375bdb3cbc2dba69d0d0444eeafca774b6ca2cfdfdbc4bcf26ffa51dcdeee1 kernel-tools-5.10.272-271.1109.amzn2.tuxcare.els2.x86_64.rpm b670cb1201734dac17114948a18bd984de9f964ba28ceee7952dd2fba9e9d9a0 kernel-tools-devel-5.10.272-271.1109.amzn2.tuxcare.els2.x86_64.rpm 0018971c38710a27bf46b76c69f46e698cf61bb87f42a9ec3c276aaf8a651e76 perf-5.10.272-271.1109.amzn2.tuxcare.els2.x86_64.rpm dd4513499a5d279bff177adbc741b32d5328c0c120790cdd8d61da9bbcca2792 python-perf-5.10.272-271.1109.amzn2.tuxcare.els2.x86_64.rpm ef7a2104ef87d7c150404393843ea149d9da26ab0ce479b389de03ce08bba7f1 CLSA-2026:1792788512 TuxCare License Agreement 0 - CVE-2026-93577: regexp: avoid int overflow in the quantifier expansion size check - CVE-2026-97229: regexp: reject a compiled program too big for its offset type - CVE-2026-110264: regexp: reject overflowed repeat and null-check IDs in huge regexps Critical Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the CLN.

- CVE-2026-93577: regexp: avoid int overflow in the quantifier expansion size check - CVE-2026-97229: regexp: reject a compiled program too big for its offset type - CVE-2026-110264: regexp: reject overflowed repeat and null-check IDs in huge regexps

0 tuxcare-amazonlinux2-els ruby-2.0.0.648-36.amzn2.0.20.tuxcare.els2.aarch64.rpm 9c7038dcf01c43a862159352717d7284edf9f2b73fff682b04fcc0d376ff6fbf ruby-2.0.0.648-36.amzn2.0.20.tuxcare.els2.i686.rpm 260a44e8f55b57024dc79102fce2a01d929b0c46e2d7d90146531af0d10f23d4 ruby-2.0.0.648-36.amzn2.0.20.tuxcare.els2.x86_64.rpm c96f969b526be5361082e5ae95157ae603a67c367efdf6c746e44f0a111a048b ruby-devel-2.0.0.648-36.amzn2.0.20.tuxcare.els2.aarch64.rpm a417e068c046873706cdeaa1bffcd28f22f515e8779bd92ea715ce0900e522e0 ruby-devel-2.0.0.648-36.amzn2.0.20.tuxcare.els2.i686.rpm 31e75712b6c820fed380c6a4a43b1c217c87dd2fb9ffb8ec1482aa4583871f67 ruby-devel-2.0.0.648-36.amzn2.0.20.tuxcare.els2.x86_64.rpm 4b6748e8238490189250d2eee574bc8f22d4a7e28f5a8c5a5dfccb1d1e5be07b ruby-doc-2.0.0.648-36.amzn2.0.20.tuxcare.els2.noarch.rpm 52243234f8bf39db11a7d00b6aef1184bc5e782dcd934542def508ffbeb308a9 ruby-irb-2.0.0.648-36.amzn2.0.20.tuxcare.els2.noarch.rpm 7789913f38e0ffe7d0b4a08c499c77b7e1e4f5531ca90a98a7bb8f2d75124ce1 ruby-libs-2.0.0.648-36.amzn2.0.20.tuxcare.els2.aarch64.rpm 6ab30001c94171714de8c788aa48b34401aab2a4bed94ed39ed238f2d93fdc8c ruby-libs-2.0.0.648-36.amzn2.0.20.tuxcare.els2.i686.rpm 234ce8548143afdf6dd93bb1b943375a9ae5270653aba5a46e8373e0b106b9b1 ruby-libs-2.0.0.648-36.amzn2.0.20.tuxcare.els2.x86_64.rpm 3eda3daef093f5b292ac7b07ba04b3e8759e35cd05862f86c1f7fbf7d81dc6b7 ruby-tcltk-2.0.0.648-36.amzn2.0.20.tuxcare.els2.aarch64.rpm da659c200c680969ea1c65fa45b3a6a51a69a2f19f72bf06f82d397a7e13bf20 ruby-tcltk-2.0.0.648-36.amzn2.0.20.tuxcare.els2.i686.rpm 4299867b347edf914f3e20353eebb433f70f931b1562db8cae2ec8516dc7e7d3 ruby-tcltk-2.0.0.648-36.amzn2.0.20.tuxcare.els2.x86_64.rpm 89e2a57dc053fe6ff1ecfa7eab9831650ed7019341b2a4362b7a78adc97e784a rubygem-bigdecimal-1.2.0-36.amzn2.0.20.tuxcare.els2.aarch64.rpm 7688db29af266e5f93317aff9087c9a7cf9f47bf7160a588ab694655e34630e2 rubygem-bigdecimal-1.2.0-36.amzn2.0.20.tuxcare.els2.i686.rpm 9357b8b5dc31290ca9bd01d60a50f2051f8c7c8bf8826ee17094631e84e0ab49 rubygem-bigdecimal-1.2.0-36.amzn2.0.20.tuxcare.els2.x86_64.rpm f400a1e70befadef986c9e44118ab6c33522ec0f68af833ddf84d02665d3b506 rubygem-io-console-0.4.2-36.amzn2.0.20.tuxcare.els2.aarch64.rpm 138843a57fd3bd63297b4a03c3049fc657ae390c07873f845ab61c9e67ac9ae3 rubygem-io-console-0.4.2-36.amzn2.0.20.tuxcare.els2.i686.rpm 6ba54e42504337a2a2d4fa520ea10395e4a79a2211b960be6d3cf2d644be6bda rubygem-io-console-0.4.2-36.amzn2.0.20.tuxcare.els2.x86_64.rpm a57d65a4ab67c377892962ea7fbf1c0d7ddded78d17c1a1812e0834b757572fc rubygem-json-1.7.7-36.amzn2.0.20.tuxcare.els2.aarch64.rpm c0a5ef3859561478b1463cb567dc319f2b048ebd7e80628560e62341fe21d752 rubygem-json-1.7.7-36.amzn2.0.20.tuxcare.els2.i686.rpm 88d5d59ffd650374c06cd5d3da20a6efb2cbcfc7b015daf707badac04b78cc63 rubygem-json-1.7.7-36.amzn2.0.20.tuxcare.els2.x86_64.rpm 47fdb31adc4e4fa1bdc6b3f016d3ed1cbc0dcd350047df99ba89171a9c0c2853 rubygem-minitest-4.3.2-36.amzn2.0.20.tuxcare.els2.noarch.rpm 9388cc61340577d878ed2068b43c026f28dcbf0448addf59289caf6d963c7314 rubygem-psych-2.0.0-36.amzn2.0.20.tuxcare.els2.aarch64.rpm ef4c881119460a21dc75b870469efc487df3ac8f447f93433de493820c4b05a1 rubygem-psych-2.0.0-36.amzn2.0.20.tuxcare.els2.i686.rpm 3eceb69d21cb872ddd2f47122929daf4afe2d3aa1ec79d282f18a5cc429f17b5 rubygem-psych-2.0.0-36.amzn2.0.20.tuxcare.els2.x86_64.rpm af1c329c868622f6978d753731aac679dbfcf3cf86b980020826afed4c20864d rubygem-rake-0.9.6-36.amzn2.0.20.tuxcare.els2.noarch.rpm 47e031f0d7e3394dc0794e2ff34e0c8c6fd7aa7d8d7d4f89c2227e21bb939f73 rubygem-rdoc-4.0.0-36.amzn2.0.20.tuxcare.els2.noarch.rpm db01a66356161d8be3eadc9f8f6c74cb2a0b95766f6c952c8f6fb804885e2380 rubygems-2.0.14.1-36.amzn2.0.20.tuxcare.els2.noarch.rpm 7ed4a23200d9e35ecc521be93a5036dc7e438b5da8358784e3934f2c2fae54f2 rubygems-devel-2.0.14.1-36.amzn2.0.20.tuxcare.els2.noarch.rpm f610c741292028f2f853726b92d9b184c2b4d3272b1ed1d0a2efa06bfe7a4e71